# 使用 Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, scoop 安装 luarocks

查看 luarocks 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:luarocks
```

## 代理安全回答

luarocks manages Lua packages and can install or publish project dependencies.

- **凭据访问:** Reads environment variables, server credentials, and local package config.
- **远程变更:** Can install packages and interact with package servers.
- **发布/制品风险:** Can publish Lua rocks and generated package artifacts.
- **推荐控制:** Gate upload, install scripts, and credentialed server operations.
- **代理使用指南:** Allow dependency queries; require approval for package publication and secret-backed actions.

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install luarocks
```

  证据: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add luarocks
```

  证据: Alpine Linux edge package indexes: luarocks from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install luarocks
```

  证据: Debian stable package indexes: luarocks from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install luarocks
```

  证据: Fedora Rawhide package metadata: luarocks from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#luarocks
```

  证据: nixpkgs package indexes: luarocks from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

- pacman (92%):

```sh
sudo pacman -S luarocks
```

  证据: Arch Linux sync databases: luarocks from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

### Windows

- Chocolatey (92%):

```sh
choco install luarocks
```

  证据: Chocolatey community package catalog: luarocks from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','logexpert'

- Scoop (92%):

```sh
scoop install main/luarocks
```

  证据: Scoop official bucket manifest trees: bucket/luarocks.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:luarocks
- **软件包管理器:** Homebrew
- **版本:** 3.13.0
- **来源摘要:** Package manager for the Lua programming language
- **主页:** <https://luarocks.org/>
- **仓库:** <https://github.com/luarocks/luarocks>
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- luarocks (别名)
- luarocks-admin (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 3.13.0
## 项目历史与用法

LuaRocks is the package manager and public package repository system for Lua modules. It introduced the rockspec-centered workflow that lets Lua packages declare metadata, dependencies, sources, and build rules in Lua.

### 项目历史

The LuaRocks project describes itself as the package manager for the Lua programming language. Its repository README and wiki say it installs modules as self-contained packages called rocks and supports local and remote repositories plus multiple local rocks trees.

LuaRocks' documentation centers on the rockspec: a Lua metadata file that tells the tool how to fetch, build, and install a package. This design made LuaRocks both a package installer and a lightweight build/publishing convention for Lua modules, including modules with native C extensions.

### 采用历史

LuaRocks became the default package-distribution culture for much of Lua outside application-specific ecosystems. The official site surfaces recent modules, labels, weekly download counts, root manifests, custom manifests, mirrors, and upload flows, showing that LuaRocks is both a CLI and the central package index.

The input metadata shows broad OS package coverage: LuaRocks is available through Homebrew, MacPorts, Debian, Ubuntu, Fedora, Alpine, Arch, Nix, Scoop, and Chocolatey. That matters because Lua projects often need LuaRocks before they can install testing tools, web frameworks, OpenResty libraries, or native-binding modules.

### 使用方式

The command-line interface is luarocks. It supports installing, building, packing, uploading, searching, showing, removing, testing, and configuring rocks, and can operate against selected servers, trees, and dependency modes.

Package authors write a rockspec, tag or publish their source, and submit or upload the rockspec. LuaRocks can build from source, make from a local checkout, pack source or binary rocks, and publish artifacts that users install without needing the original source-control tool.

### 为什么软件包爱好者会关心

LuaRocks is central package-nerd infrastructure for Lua because it defines the names, versions, build metadata, binary/source artifact formats, and repository manifests that other tools consume. It is the closest analogue to npm, RubyGems, or CPAN for Lua, but with Lua-specific details such as Lua-version-specific trees and native module paths.

It is also historically important because it works across stock Lua and LuaJIT ecosystems. That cross-runtime support, plus package-manager availability on Unix and Windows, made it the practical bootstrap path for Lua dependency management.

### 时间线

- 2000s: LuaRocks emerges as Lua's rockspec-based package manager.
- 2010s: Development and distribution consolidate around the GitHub repository and luarocks.org.
- 2020s: Documentation moves from the GitHub wiki into the repository docs folder.
- 2026: GitHub lists LuaRocks 3.13.0 as the latest release, dated Jan 28, 2026.

### Related projects

- Lua is the language ecosystem LuaRocks packages target.
- LuaJIT is a common LuaRocks runtime target and package dependency.
- OpenResty libraries such as lua-resty modules are commonly distributed through LuaRocks.

### 来源

- <https://github.com/luarocks/luarocks>
- <https://github.com/luarocks/luarocks/blob/main/docs/config_file_format.md>
- <https://github.com/luarocks/luarocks/blob/main/docs/creating_a_rock.md>
- <https://github.com/luarocks/luarocks/blob/main/docs/luarocks.md>
- <https://luarocks.org/>
- <https://luarocks.org/docs>
- source_facts.package-manager


## 安全说明

generalized runtime or code generation signal. infrastructure mutation or orchestration signal.

- **Geiger 风险:** orange / 中
- generalized runtime or code generation signal
- infrastructure mutation or orchestration signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: $XDG_CONFIG_HOME/luarocks/upload_config.lua, ~/.config/luarocks/upload_config.lua, ~/.luarocks/upload_config.lua

## Credential files

- Unix: $XDG_CONFIG_HOME/luarocks/upload_config.lua, ~/.config/luarocks/upload_config.lua, ~/.luarocks/upload_config.lua
## 其他软件包管理器记录

- Debian apt - luarocks - 3.8.0+dfsg1-1: normalized package name match | Debian stable package indexes: luarocks from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | deployment and management system for Lua modules | https://luarocks.org/
- Nix - luarocks: normalized package name match | nixpkgs package indexes: luarocks from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Ubuntu apt - luarocks - 3.8.0+dfsg1-1: normalized package name match | Ubuntu 24.04 LTS package indexes: luarocks from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | deployment and management system for Lua modules | https://luarocks.org/
- apk - luarocks - 3.13.0-r0: normalized package name match | Alpine Linux edge package indexes: luarocks from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Deployment and management system for Lua modules | https://luarocks.org/
- apk - luarocks5.1 - 3.13.0-r0: normalized package name match | Alpine Linux edge package indexes: luarocks5.1 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Deployment and management system for Lua 5.1 modules | https://luarocks.org/
- apk - luarocks5.2 - 3.13.0-r0: normalized package name match | Alpine Linux edge package indexes: luarocks5.2 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Deployment and management system for Lua 5.2 modules | https://luarocks.org/
- apk - luarocks5.3 - 3.13.0-r0: normalized package name match | Alpine Linux edge package indexes: luarocks5.3 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Deployment and management system for Lua 5.3 modules | https://luarocks.org/
- apk - luarocks5.4 - 3.13.0-r0: normalized package name match | Alpine Linux edge package indexes: luarocks5.4 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Deployment and management system for Lua 5.4 modules | https://luarocks.org/
- apk - luarocks5.5 - 3.13.0-r0: normalized package name match | Alpine Linux edge package indexes: luarocks5.5 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Deployment and management system for Lua 5.5 modules | https://luarocks.org/
- dnf - luarocks - 3.13.0-3.fc45: normalized package name match | Fedora Rawhide package metadata: luarocks from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A deployment and management system for Lua modules | http://luarocks.org
- pacman - luarocks - 3.13.0-5: normalized package name match | Arch Linux sync databases: luarocks from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Deployment and management system for Lua modules | https://luarocks.org/
- Chocolatey - luarocks: normalized package name match | Chocolatey community package catalog: luarocks from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','logexpert'
- Scoop - main/luarocks: normalized package name match | Scoop official bucket manifest trees: bucket/luarocks.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/luarocks.yml](https://github.com/mxcl/pkgdb/blob/main/combined/luarocks.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
- curated agent safety answer