# 使用 Homebrew, Nix, apk, apt, pacman 安装 acme.sh

查看 acme.sh 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:acme.sh
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install acme.sh
```

  证据: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#acme-sh
```

  证据: nixpkgs package indexes: pkgs/by-name/ac/acme-sh/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- apk (92%):

```sh
sudo apk add acme.sh
```

  证据: Alpine Linux edge package indexes: acme.sh from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install acme.sh
```

  证据: Debian stable package indexes: acme.sh from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- pacman (92%):

```sh
sudo pacman -S acme.sh
```

  证据: Arch Linux sync databases: acme.sh from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

## 软件包事实

- **软件包键:** brew:acme.sh
- **软件包管理器:** Homebrew
- **版本:** 3.1.4
- **来源摘要:** ACME client
- **主页:** <https://github.com/acmesh-official/acme.sh>
- **仓库:** <https://github.com/acmesh-official/acme.sh>
- **最后更新:** 2026-07-17T03:06:02Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- acme.sh (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 3.1.4
## 项目历史与用法

acme.sh is a pure Unix shell ACME client for issuing, renewing, and installing TLS certificates. It is designed around a small shell script, broad Unix compatibility, no Python dependency, and automated renewals through cron.

### 项目历史

The GitHub repository was created in December 2015, shortly after Let's Encrypt made ACME-based certificate automation a practical mainstream workflow. The official README describes acme.sh as a full ACME protocol implementation written in Unix shell and tested across Linux, BSDs, macOS, Solaris-family systems, Haiku, and Windows via Cygwin.

The project grew from a Let's Encrypt-oriented client into a general ACME client. Its README lists support for multiple CAs including ZeroSSL, Let's Encrypt, SSL.com, Google Public CA, Actalis, Pebble, and any RFC 8555-compliant CA, while the wiki documents the large DNS API surface used for automated DNS-01 validation.

### 采用历史

acme.sh became a popular package-manager ACME client because it fits shared hosting, appliances, routers, and small servers where a shell-only dependency profile matters. The official README's 'Who Uses acme.sh?' section names deployments and integrations such as FreeBSD.org, Proxmox, pfSense/OPNsense-adjacent tooling, and other hosting/control-panel environments.

The input package-manager facts show acme.sh packaged across Homebrew, Alpine, Debian, Nix, and Arch. The GitHub API reports a large public repository with tens of thousands of stars and thousands of forks, consistent with broad operational adoption.

### 使用方式

Typical package usage installs the acme.sh command, stores working state under ~/.acme.sh by default, creates a cron renewal job, and issues certificates with webroot, standalone, TLS-ALPN, Apache, Nginx, DNS, DNS alias, stateless, or DNS persist modes. DNS API credentials are exported once and then saved into ~/.acme.sh/account.conf for later renewal runs.

### 为什么软件包爱好者会关心

acme.sh matters to package nerds because it is a rare security-critical tool whose portability comes from plain POSIX-ish shell rather than a language runtime. That makes it attractive for Homebrew, distro, appliance, and container packaging, while its large dnsapi collection creates a sprawling map of DNS provider integrations in one scriptable package.

### 时间线

- 2015-12-26: GitHub repository created.
- 2016-04-06: Earliest GitHub release metadata in the current repository lists version 1.2.2.
- 2016-07-02: Version 2.3.0 tag commit appears in the repository tag history.
- 2024: 3.0.x releases continue regular bug-fix and integration work.
- 2026-04-28: Release 3.1.3 published.

### Related projects

- Related projects include Let's Encrypt, ZeroSSL, Certbot, Pebble, RFC 8555 ACME servers, and the DNS provider APIs supported by acme.sh's dnsapi wiki.

### 来源

- Official README, official wiki, official dnsapi wiki page, GitHub repository/release metadata, and source_facts.package-manager.


## 安全说明

broad file, network, media, or database tool signal.

- **Geiger 风险:** blue / 中
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.acme.sh/

## Credential files

- Unix: ~/.acme.sh/account.conf
## 其他软件包管理器记录

- Debian apt - acme.sh - 3.1.1-1: normalized package name match | Debian stable package indexes: acme.sh from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Pure unix shell script implementing ACME client protocol | https://github.com/acmesh-official/acme.sh
- Nix - acme-sh: normalized package name match | nixpkgs package indexes: pkgs/by-name/ac/acme-sh/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - acme.sh - 3.1.4-r0: normalized package name match | Alpine Linux edge package indexes: acme.sh from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | ACME Shell script, an acme client alternative to certbot | https://github.com/acmesh-official/acme.sh
- pacman - acme.sh - 3.1.4-1: normalized package name match | Arch Linux sync databases: acme.sh from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | An ACME Shell script, an acme client alternative to certbot | https://github.com/acmesh-official/acme.sh


## Combined YAML source

View the package source record on GitHub. [combined/acme.sh.yml](https://github.com/mxcl/pkgdb/blob/main/combined/acme.sh.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph