CZ.NIC Labs 📦 Repos Setup Docs

Documentation for setting up CZ.NIC Labs repositories
Available Architectures:

Please select Project above ↑

Setup $REPO repo on Debian

  1. Update apt package index and install necessary packages:

    sudo apt-get update
    sudo apt-get -y install apt-transport-https ca-certificates wget

  2. Add CZ.NIC Labs Packaging GPG key:

    sudo wget -O /usr/share/keyrings/cznic-labs-pkg.gpg

    Key fingerprint:
    rsa4096/0xAB6A303124019B64 2023-02-15 [expires: 2033-03-03]
    Key fingerprint = 9C71 D59C D4CE 8BD2 966A  7A3E AB6A 3031 2401 9B64
    CZ.NIC Labs Packaging <>

  3. Setup the repository:

    echo "deb [signed-by=/usr/share/keyrings/cznic-labs-pkg.gpg]$REPO $DISTRO main" | sudo tee> /etc/apt/sources.list.d/cznic-labs-.list 

  4. Update apt package index with repo enabled:

    sudo apt-get update
  5. Optional: You can pin a specific version (e.g. 3.1.* or 3.1.9-*) to use in /etc/apt/preferences or /etc/apt/preferences.d/knot by adding following lines:

    Package: knot knot-* libdnssec* libzscanner* libknot* python3-libknot*
    Pin-Priority: 1001
    Pin: version 3.1.*
    The version to be installed can be verified by apt-cache policy knot.

  6. Install packages using apt:

    sudo apt-get install 
    Knot Resolver 5.x stable:

    sudo apt-get install knot-resolver

    Knot Resolver 6.x alpha (testing):

    sudo apt-get install knot-resolver6

  7. Done 📦
Automated repo setup

In automated systems such as CI, you can enable the repo using script:

bash $REPO

To enable the repo in a minimal container:

apt-get update && apt-get install -y wget
bash $REPO