---
title: "How to Install ISC Packages for Kea DHCP"
slug: "isc-kea-packages"
description: "Instructions for installing pre-built binary packages for RPM, Debian-type and Alpine OSes, plus Docker images. Includes guides for all current versions of Kea DHCP."
tags: ["cloudsmith", "binaries", "binary", "packages", "kea dhcp"]
updated: 2025-08-26T16:43:08Z
published: 2025-08-26T16:43:08Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.isc.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Using Official ISC Packages for Kea

## Overview

ISC provides binary packages and the corresponding source code for Kea DHCP hosted on [Cloudsmith](https://cloudsmith.io/~isc/repos/). Packages and source code tarballs are provided for every release.

Thank you to Cloudsmith!
 The repository for Kea open source packages is provided by Cloudsmith at no cost, as a community service for non-profit open source projects.

                         

The open source packages in the current release provide the base Kea software and the following hook libraries:

- BOOTP
- Classification Commands
- DDNS Tuning
- Flexible Identifier
- Flexible Option
- Forensic Logging
- GSS-TSIG
- High Availability
- Host Cache
- Host Commands
- Lease Commands
- Leasequery
- Limits
- MySQL support
- Performance Monitoring
- Ping Check
- PostgreSQL support
- RADIUS
- Run Script
- Statistics Commands
- Subnet Commands

For a full list of hooks provided by the latest development release, please refer to the list of [Available Hook Libraries](https://kea.readthedocs.io/en/latest/arm/hooks.html#available-hook-libraries) in the Administrator Reference Manual (ARM). Other hooks are provided under a commercial license, in separate private repositories (see below).

### Why Use ISC's Kea Packages?

ISC's Kea packages let you:

1. Update quickly and efficiently directly from our repository, in one step, and skip the added step of downloading and building binaries locally;
2. Get all the latest bug fixes and features immediately, without waiting for your OS distribution to pick up the changes and release them. We provide binary packages along with sources at the time of each release (sometimes the binaries are posted a few hours later, but generally the same day).

### Supported Operating Systems

ISC has created packages for what we think are the most popular operating systems for production DHCP servers. If your preferred operating system is not packaged, you can still build from our published sources.

We provide the following types of packages:

- RPM for RHEL and Fedora
- deb for Debian and Ubuntu
- apk for Alpine
- Docker images (introduced with Kea 2.4.0)

          Supported OS Versions

          

Please note that we only provide packages for currently supported versions of an operating system. When we release each new version of Kea, we evaluate the OSes we support. We add packages for newly released operating system versions as we are able to, and remove packages for operating system versions and Kea versions that become end-of-life.

A current list of supported systems and their versions can be found in the [Kea documentation](https://kea.readthedocs.io/en/latest/arm/intro.html#supported-platforms).)

## ISC-Provided Kea Packages

ISC provides packages for the open source components, as well as the commercially licensed hooks. Prior to the Kea 3.0.0 version, the open source was included in both the public and private repositories, but the commercially licensed software was included only in the private repositories. Access to the private repositories was controlled with the use of access tokens that are provided to ISC subscribers.

Since the release of Kea 3.0.0 in July 2025, the open source packages are only available in the public repository. Customers that have access to the `subscribers` hooks (Configuration Backend Commands and Role-Based Access Control) are required to install two repositories.

### ISC Packages vs. OS Packages

Kea binaries are available in several packages. RHEL, Fedora, Debian, Ubuntu, and Alpine all provide their own Kea packages, which may not be packaged the same way as the ISC-provided packages. To avoid confusing ISC packages with those from other distributors, all ISC packages (with the exception of FreeRADIUS packages prior to Kea 2.5.4) start with the `isc-kea-` prefix.

### Open Source Package Names

The table below lists the current open source packages for all supported systems:

| Open Source Package | Description |
| --- | --- |
| `isc-kea` | ISC Kea metapackage (installs everything) |
| `isc-kea-ctrl-agent` | Kea control socket REST API server |
| `isc-kea-dhcp-ddns` | Kea DHCP DDNS server |
| `isc-kea-dhcp4` | Kea DHCPv4 server |
| `isc-kea-dhcp6` | Kea DHCPv6 server |
| `isc-kea-mysql` | Kea MySQL support |
| `isc-kea-pgsql` | Kea PostgreSQL support |
| `isc-kea-hooks` | Open source hooks package for Kea |
| `isc-kea-common` | Common libraries and files needed by Kea |
| `isc-kea-admin` | Kea database administration utilities |
| `isc-kea-perfdhcp` | DHCP benchmarking tool from ISC |
| `isc-kea-doc` | Documentation for Kea |
| `isc-kea-gss-tsig` | GSS-TSIG hook library |
| `isc-kea-dev` or `isc-kea-devel` for RPM | Development headers for Kea |

          Check package names using package manager

          

It's possible to see all the package names available for each OS using the package manager, after the repository is installed. Here's how to do that for the most popular systems:

- RPM:

> `dnf list isc-kea*`

- deb:

> `apt-cache search isc-kea`

- Alpine:

> `apk search isc-kea`

          Upgrading from versions prior to Kea 2.3.2

          

These package names have been in use since Kea version 2.3.2. When upgrading from prior versions, please refer to the following KB article: [Upgrading Beyond Kea 2.3.2](https://kb.isc.org/v1/docs/upgrading-beyond-kea-232).

### Commercially Licensed Packages

#### For Kea 3.0.0 and later

Since the release of Kea 3.0.0, most of the ISC-produced Kea hooks are now open source. The only exceptions are `isc-kea-subscribers-cb-cmds`, the Configuration Backend Commands hook library, and `isc-kea-subscribers-rbac`, the Role-Based Access Control (RBAC) hook library. These two hook libraries are only available to ISC customers with a paid support contract. The table below lists the current commercially licensed packages for all supported systems in Kea versions 3.0.0 and later:

| Commercially Licensed Package | Description |
| --- | --- |
| `isc-kea-subscriber-rbac` | Role-Based Access Control (RBAC) hook library |
| `isc-kea-subscriber-cb-cmds` | Config Backend Commands hook library |

#### For versions of Kea up to and including Kea 2.6

ISC customers are entitled to additional hooks not included in the open source version of Kea. The commercially licensed hooks are distributed in three bundles:

- **Premium** for online purchasers of premium hooks without ISC support
- **Subscription** for customers with ISC subscriptions at the Basic and Bronze levels
- **Enterprise** for customers with ISC subscriptions at the Silver and Gold levels

The table below lists the current commercially licensed packages for all supported systems in Kea versions through 2.6:

| Commercially Licensed Package | Description | Bundle |
| --- | --- | --- |
| `isc-kea-premium-class-cmds` | Classification Commands hook library | Subscription |
| `isc-kea-premium-cb-cmds` | Config Backend Commands hook library | Subscription |
| `isc-kea-premium-ddns-tuning` | DDNS Tuning hook library | Premium |
| `isc-kea-premium-flex-id` | Flexible Identifier hook library | Premium |
| `isc-kea-premium-forensic-log` | Forensic Logging hook library | Premium |
| `isc-kea-premium-gss-tsig` | GSS-TSIG hook library | Subscription |
| `isc-kea-premium-host-cache` | Host Cache hook library | Subscription |
| `isc-kea-premium-host-cmds` | Host Commands hook library | Premium |
| `isc-kea-premium-lease-query` | Leasequery hook library | Subscription |
| `isc-kea-premium-limits` | Limits hook library | Subscription |
| `isc-kea-premium-ping-check` | Ping Check hook library | Subscription |
| `isc-kea-premium-radius` | RADIUS hook library | Subscription |
| `isc-kea-premium-rbac` | Role-Based Access Control hook library | Enterprise |
| `isc-kea-premium-subnet-cmds` | Subnet Commands hook library | Subscription |

For more information about obtaining the commercially licensed Kea hook libraries, please contact us at [https://www.isc.org/contact](https://www.isc.org/contact). All Kea hook libraries are described fully in [the Kea ARM](https://kea.readthedocs.io/en/latest/arm/hooks.html).

RADIUS
 FreeRADIUS support in versions prior to Kea 2.5.4 was implemented with a patch from ISC. If you are using FreeRADIUS with one of those versions, you must install the FreeRADIUS packages from the ISC repository. Starting with Kea version 2.5.4, ISC has replaced the patched FreeRADIUS client with an ISC-developed client. This change reduces the number of dependencies and streamlines the installation process. If you are installing Kea 2.5.4 or a more recent version, please refer to the **Using the Cloudsmith Repositories** section, below.

                         

The names of the FreeRADIUS packages are specific to the package type used by your distribution of Linux, but they do not need to be installed explicitly. FreeRADIUS packages are installed automatically by packages that require them.

| FreeRADIUS Package | Description |
| --- | --- |
| `freeradius-client` | deb FreeRADIUS client library |
| `freeradius-client-devel` | deb FreeRADIUS development files |
| `libfreeradius-client` | RPM FreeRADIUS client library |
| `libfreeradius-client-dev` | RPM FreeRADIUS development files |

#### Transitional Packages in DEB based systems

ISC tries to keep package names unchanged, but some cases it's not possible. And while RPM and APK-based systems do not require transitional packages, DEB-based systems need them. The table below lists all transitional packages; if any of those are installed, users are encouraged to remove them:

| Transitional Package Name | Introduced in version | current name |
| --- | --- | --- |
| `isc-kea-dhcp4-server` | 2.3.3 | `isc-kea-dhcp4` |
| `isc-kea-dhcp6-server` | 2.3.3 | `isc-kea-dhcp6` |
| `isc-kea-dhcp-ddns-server` | 2.3.3 | `isc-kea-dhcp-ddns` |
| `isc-kea-premium-class-cmds` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-ddns-tuning` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-flex-id` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-forensic-log` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-gss-tsig` | 2.7.7 | `isc-kea-gss-tsig` |
| `isc-kea-premium-host-cache` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-host-cmds` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-lease-query` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-limits` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-ping-check` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-radius` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-subnet-cmds` | 2.7.7 | `isc-kea-hooks` |
| `isc-kea-premium-rbac` | 2.7.7 | `isc-kea-subscriber-rbac` |
| `isc-kea-premium-cb-cmds` | 2.7.7 | `isc-kea-subscriber-cb-cmds` |

## Using the Cloudsmith Repositories

All ISC binary packages for Kea are contained in our repositories on [Cloudsmith](https://cloudsmith.io/~isc/repos/). The source tarballs are also published there for Kea 2.2.0 and later versions. We have open source repositories which are available to anyone, and private repositories for ISC customers which require a security token to access.

### Open Source Repositories

Packages can be downloaded from our public Cloudsmith repositories and installed by following the directions below. The examples use Kea version 3.0; use the table below to replace `kea-3-0` with a different string for a different version, such as `kea-2-6`:

| Package String | Description |
| --- | --- |
| `kea-3-0` | current stable branch - Long-Term Support (LTS) |
| `kea-2-6` | old stable branch |
| `kea-dev` | current development branch |
| `kea-2-4` | EOL stable branch |
| `kea-2-2` | EOL stable branch |
| `kea-2-0` | EOL stable branch |
| `kea-1-8` | EOL stable branch |
| `kea-1-6` | EOL stable branch |
| `keama` | migration tool for ISC DHCP migration to Kea |
| `stork` | Stable branch of GUI management tool for Kea |
| `stork-dev` | Development branch of GUI management tool for Kea |
| `docker` | Docker images of open source |

#### Set up the repository on Debian and Ubuntu

To install deb packages, you can quickly setup the repository automatically (recommended):

```
curl -1sLf \
  'https://dl.cloudsmith.io/public/isc/kea-3-0/setup.deb.sh' \
  | sudo -E bash
```

You can remove the repository with:

```
rm /etc/apt/sources.list.d/isc-kea-3-0.list
apt-get clean
rm -rf /var/lib/apt/lists/*
apt-get update
```

#### Set up the repository on Fedora/RHEL

To install RPM packages, you can quickly setup the repository automatically (recommended):

```
curl -1sLf \
  'https://dl.cloudsmith.io/public/isc/kea-3-0/setup.rpm.sh' \
  | sudo -E bash
```

You can remove the repository with:

```
rm /etc/yum.repos.d/isc-kea-3-0.repo
rm /etc/yum.repos.d/isc-kea-3-0-source.repo
```

#### Set up the repository on Alpine

To install APK packages, you can quickly setup the repository automatically (recommended):

```
sudo apk add --no-cache bash
curl -1sLf \
  'https://dl.cloudsmith.io/public/isc/kea-3-0/setup.alpine.sh' \
  | sudo -E bash
```

You can remove the repository by editing the `repositories` file:

```
$EDITOR /etc/apk/repositories
```

Remove the `/alpine/v3.18/main` line and save the file, then run these two commands:

```
rm -f /etc/apk/keys/kea-3-0*
apk update
```

### Private Repositories for Commercially Licensed Subscriber Hooks

          Content of private repositories

          

With the release of Kea 3.0, most Kea hooks are now available as open source and do not need to be downloaded from a private repository. The two exceptions are the Config Backend Commands and the Role-Based Access Control (RBAC) hooks; these two libraries are only available to customers with an ISC support contract.

          
          

Private repositories contain extra software not included in the open source repositories. In case of a software vulnerability, these repositories are also updated prior to publication of that vulnerability.

These instructions provide information on accessing the private Cloudsmith repositories with a token, indicated with `your_token_goes_here` in the commands. If you are an ISC Kea support customer and need a token, please log into our support portal to obtain yours. If you have purchased the Premium hooks bundle online (for Kea versions 2.6 and earlier), you should have received a token via email. If you have lost your token, please send an email to info@isc.org to request your token.

The instructions are very similar to the ones for the open source repositories, given above. In the URLs, replace `public` with your token and append `-prv` to the repository name, such as changing `kea-3-0` to `kea-3-0-prv`.

#### Set up the repository on Debian and Ubuntu

To install deb packages, you can quickly setup the repository automatically (recommended):

```
curl -1sLf \
  'https://dl.cloudsmith.io/your_token_goes_here/isc/kea-3-0-prv/setup.deb.sh' \
  | sudo -E bash
```

You can remove the repository with:

```
rm /etc/apt/sources.list.d/isc-kea-3-0-prv.list
apt-get clean
rm -rf /var/lib/apt/lists/*
apt-get update
```

#### Set up the repository on Fedora/RHEL

```
curl -1sLf \
  'https://dl.cloudsmith.io/your_token_goes_here/isc/kea-3-0-prv/setup.rpm.sh' \
  | sudo -E bash
```

You can remove the repository with:

```
rm /etc/yum.repos.d/isc-kea-3-0-prv.repo
rm /etc/yum.repos.d/isc-kea-3-0-prv-source.repo
```

#### Set up the repository on Alpine

```
sudo apk add --no-cache bash
curl -1sLf \
  'https://dl.cloudsmith.io/your_token_goes_here/isc/kea-3-0-prv/setup.alpine.sh' \
  | sudo -E bash
```

You can remove the repository by editing the `repositories` file:

```
$EDITOR /etc/apk/repositories
```

Remove the `/alpine/v3.18/main` line and save the file, then run these two commands:

```
rm -f /etc/apk/keys/kea-3-0*
apk update
```

The current private repositories on Cloudsmith are:

| Repository Name | Comments |
| --- | --- |
| `kea-3-0-prv` | current stable branch - Long-Term Support (LTS) |
| `kea-2-6-prv` | current stable branch |
| `kea-dev-prv` | current development branch |
| `kea-2-4-prv` | EOL stable branch |
| `kea-2-2-prv` | EOL stable branch |
| `kea-2-0-prv` | EOL stable branch |
| `kea-1-8-prv` | EOL stable branch |
| `kea-1-6-prv` | EOL stable branch |
| `docker-prv` | docker images |

### Private Repositories for Web-Based Purchases

If you have purchased Kea Premium hooks for Kea 2.6 from [ISC's website](https://www.isc.org/shop/) and do not have a support contract, you can access them through Cloudsmith. For more information, please consult the [Private Repositories for Commercially Licensed Hooks](https://kb.isc.org/docs/isc-kea-packages#private-repositories-for-commercially-licensed-hooks) section. Please note that the Premium hook packages only contain the Kea 2.6 hooks listed as part of the Premium bundle in this [table](https://kb.isc.org/v1/docs/isc-kea-packages#commercially-licensed-package-names).

## Installing Kea Packages

Once the repositories are configured on a system, the Kea packages can be installed. As there are several packages, you can choose to install only the parts of Kea that you require. The dependencies between packages are set up so any dependent packages will be automatically installed.

The following examples will install the main Kea package `isc-kea`, which depends on (and automatically installs) all of the packages in the open source bundle.

**deb version:**

```
apt install isc-kea
```

This command lists all available packages:

```
apt-cache search isc-kea
```

**RPM version:**

```
dnf install isc-kea
```

This command lists all available packages:

```
dnf list isc-kea*
```

**Alpine version:**

```
apk add isc-kea
```

This command lists all available packages:

```
apk search isc-kea
```

Installing only specific components is also possible. Please refer to the [list of packages above](https://kb.isc.org/v1/docs/isc-kea-packages#open-source-packages) to determine which specific packages you need.

Once Kea is installed, configure it as desired via the files located in the `/etc/kea/` folder.

          RPM-based systems may require EPEL

          

If you have not already enabled the EPEL repository on your RPM-based Linux distribution, you may get an error like this while trying to install `isc-kea`:

```
Problem: cannot install the best candidate for the job
  - nothing provides liblog4cplus-2.1.so.9()(64bit) needed by isc-kea-common-3.0.0-isc20250717111736.el10.x86_64 from isc-kea-3-0
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
```

The cause is that Kea requires the log4cplus library, which is typically not available as part of the standard RPM packages. The most likely resolution here is to enable the EPEL repository, which typically does contain this library, for your distribution. Links to EPEL instructions for some popular RPM-based distributions follow.

- [How to install EPEL on RHEL and CentOS Stream](https://www.redhat.com/en/blog/install-epel-linux)
- [Rocky Linux Repositories](https://wiki.rockylinux.org/rocky/repo/)
- [Extra Repositories (AlmaLinux Wiki)](https://wiki.almalinux.org/repos/Extras.html#epel)
- [Installing Oracle epel Repository](https://docs.oracle.com/en/industries/communications/session-monitor/5.1/upgrade/install-oracle-epel-repository.html)

### Installing Premium Hooks (for Kea 2.6)

After setting up the private hooks repository, you should be able to install the Kea premium hooks with your platform's package manager.

          These instructions only apply to Kea 2.6 and earlier

          

There are no premium hooks starting with Kea 3.0.

The following example installs the Flexible Identifier Kea premium hook library; the same commands can be used for the other libraries, after substituting the appropriate library name.

**deb version:**

```
apt install isc-kea-premium-flex-id
```

This command lists all available premium hooks:

```
apt-cache search isc-kea-premium
```

**RPM version:**

```
yum install isc-kea-premium-flex-id
```

This command lists all available premium hooks:

```
dnf list isc-kea-premium*
```

**Alpine version:**

```
apk add isc-kea-premium-flex-id
```

This command lists all available premium hooks:

```
apk search isc-kea-premium
```

Please refer to the [Premium Packages](https://kb.isc.org/v1/docs/isc-kea-packages#premium-packages-for-isc-support-subscribers) section above for the names of the other premium hooks.

## Managing Kea Services

When using the ISC-provided packages, Kea services should be managed using the service manager of your OS.

          Packages do not include `keactrl`

          

The `keactrl` utility is not included in these packages because it is assumed the user will use the operating system's init system to start and stop Kea instead.

### Service Names

#### RPM and Alpine Systems

| Service Name | Description |
| --- | --- |
| `kea-dhcp4` | DHCPv4 Server |
| `kea-dhcp6` | DHCPv6 Server |
| `kea-dhcp-ddns` | DHCP DDNS Server |
| `kea-ctrl-agent` | Kea Control Agent - REST API |

#### Debian Systems

| Service Name | Description |
| --- | --- |
| `isc-kea-dhcp4-server` | DHCPv4 Server |
| `isc-kea-dhcp6-server` | DHCPv6 Server |
| `isc-kea-dhcp-ddns-server` | DHCP DDNS Server |
| `isc-kea-ctrl-agent` | Kea Control Agent - REST API |

### Service Management

To start, stop, or restart Kea daemons, `systemctl` should be used on Debian-/Ubuntu- and RPM-based systems, and OpenRC should be used on Alpine.

In the following examples, the `kea-dhcp4` service is being enabled, started, and stopped. Adjust the commands to the service you wish to manage.

**deb version:**

```
systemctl enable isc-kea-dhcp4-server
systemctl start isc-kea-dhcp4-server
systemctl stop isc-kea-dhcp4-server
```

**RPM version:**

```
systemctl enable kea-dhcp4
systemctl start kea-dhcp4
systemctl stop kea-dhcp4
```

**Alpine version:**

```
rc-update add kea-dhcp4
service kea-dhcp4 start
service kea-dhcp4 stop
```

### Source Tarballs in the Package Repository

          Official Source Tarball Releases

          

These instructions are only included for the benefit of users who are not running the software on an officially supported platform. You should only need to follow these instructions if you plan on installing Kea from source. More information on how to do this can be found on the [Installation Page](https://kea.readthedocs.io/en/latest/arm/install.html#installation-from-source) in the ARM.

Since Kea 2.2.0, source tarballs are available alongside the binary packages in the Cloudsmith repository. This is a convenience for our support subscribers, who can now use the same token to download the source that they have already been using to install the packages.

Prior to Kea 3.0.0, tarballs had the `tar.gz` extension instead of `tar.xz`.

To download the source tarball and its signatures from Cloudsmith, use the following set of commands, replacing the version string with the current version you wish to download:

```
version=3.0.0; \
  for file in kea-$version.tar.xz kea-$version.tar.xz.asc kea-$version.tar.xz.sha1.asc kea-$version.tar.xz.sha256.asc kea-$version.tar.xz.sha512.asc Kea-$version-ReleaseNotes.txt;  do \
  curl -O https://dl.cloudsmith.io/public/isc/kea-3-0/raw/versions/$version/$file; \
done
```

or just a single file:

```
curl -O https://dl.cloudsmith.io/public/isc/kea-3-0/raw/versions/3.0.0/kea-3.0.0.tar.xz
```

The tarballs (in contrast to the binary packages) have been signed using ISC's code-signing key. To verify the signatures for the open source software, please run this set of commands after importing the ISC key from [https://www.isc.org/pgpkey/](https://www.isc.org/pgpkey/):

```
version=3.0.0; \
for i in .asc .sha1.asc .sha256.asc .sha512.asc; do \
  gpg --verify kea-enterprise-$version.tar.xz$i kea-enterprise-$version.tar.xz; \
done
```

For ISC support subscribers, add `-prv` to the repository name and insert your token into the request, changing the keyword to specify which hooks to download. For Kea 2.6 and earlier, the possible values include `premium`, `subscription`, and `enterprise`; for Kea 3.0.0 and later, the only keyword is `subscribers`, which includes the Config Backend and RBAC hooks only. All other hooks are open source as of Kea 3.0.0.

```
version=3.0.0 hooks=premium; \
  for file in kea-$hooks-$version.tar.xz kea-$hooks-$version.tar.xz.asc kea-$hooks-$version.tar.xz.sha1.asc kea-$hooks-$version.tar.xz.sha256.asc kea-$hooks-$version.tar.xz.sha512.asc;  do \
  curl -O https://dl.cloudsmith.io/<your-customer-token-here>/isc/kea-3-0-prv/raw/versions/$version/$file; \
done
```

and use a similar script to verify signatures:

```
version=3.0.0 hooks=premium; \
for i in .asc .sha1.asc .sha256.asc .sha512.asc; do \
  gpg --verify kea-$hooks-$version.tar.xz$i kea-$hooks-$version.tar.xz; \
done
```

In the examples above, replace `kea-3-0` and `3.0.0` with the version that you will use.

### Accessing Cloudsmith From Behind a Proxy Server

Systems that are required to use a proxy server for Internet access can use any of the methods described below when configuring repositories and downloading packages. In the examples below, the proxy server IP address is 192.0.2.1 and the proxy listens on port 3128 (expressed as `192.0.2.1:3128`).

The first step involves fetching a setup shell script from Cloudsmith, then running the configuration script. Since both the fetching of the setup script and the HTTP requests from inside the script are done with `curl`, we can use curl's proxy support.

Set the `HTTPS_PROXY` environment variable either like this:

```
HTTPS_PROXY=192.0.2.1:3128 curl -1sLf \
  'https://dl.cloudsmith.io/public/isc/kea-3-0/setup.alpine.sh' \
  | sudo -E bash
```

or like this:

```
export HTTPS_PROXY=192.0.2.1:3128
curl -1sLf \
  'https://dl.cloudsmith.io/public/isc/kea-3-0/setup.alpine.sh' \
  | sudo -E bash
```

Or configure curl to use this proxy persistently with a `.curlrc` file. Note that this affects all curl calls for any user whose environment reads the `.curlrc` file:

```
echo 'proxy = 192.0.2.1:3128' >> ~/.curlrc
```

If you want package downloads to be proxied as well, proxy settings can be configured for the package manager:

| OS | Command |
| --- | --- |
| Debian-based | `echo 'Acquire::https::Proxy "http://192.0.2.1:3128";' &gt;&gt; /etc/apt/apt.conf.d/proxy.conf` |
| RPM-based | `echo 'proxy=http://192.0.2.1:3128;' &gt;&gt; /etc/dnf/dnf.conf` |
| Alpine | `setup-proxy http://192.0.2.1:3128` |

## Pulling and Using Docker Images

Docker images available in the open source repository include:

- `kea-dhcp4`
- `kea-dhcp6`
- `kea-dhcp-ddns`

Pulling (downloading) an image from the Cloudsmith Docker registry can be done using the standard `docker pull` command:

`docker pull docker.cloudsmith.io/isc/docker/your-image:version`

Note: You should replace `your-image` with one of the image names (e.g. `kea-dhcp4`), and `version` with a Kea image name and version string (e.g. `3.0.0`)

To refer to images after pulling a Dockerfile, specify the following:

`FROM docker.cloudsmith.io/isc/docker/your-image:version`

#### Using the Docker Image

Using a Docker image for Kea DHCP is complicated! We strongly encourage you to read the [README](https://gitlab.isc.org/isc-projects/kea-docker) in the Kea Docker repository.

### Pulling and Using Private Docker Images

#### For Kea 3.0.0 and later

Since most of the ISC-produced Kea hooks are now open source, there are only three Docker images in the `docker-prv` repository for Kea 3.0.0 and later:

- `kea-dhcp4-subscriber`
- `kea-dhcp6-subscriber`
- `kea-dhcp-ddns-subscriber`

#### For versions of Kea up to and including Kea 2.6

Docker images available in the private repository correspond to the [three levels of commercially licensed software](/v1/docs/isc-kea-packages#commerciallylicensed-package-names): Premium (typically purchased from the [ISC website](https://www.isc.org/shop/), Subscription (available to all ISC technical support subscribers), and Enterprise (available to ISC support subscribers at the highest levels).

- `kea-dhcp4-enterprise`
- `kea-dhcp4-premium`
- `kea-dhcp4-subscription`
- `kea-dhcp6-enterprise`
- `kea-dhcp6-premium`
- `kea-dhcp6-subscription`
- `kea-dhcp-ddns-premium`
- `kea-dhcp-ddns-subscription`

As this is a private registry, you'll need to authenticate to pull images, using the access token issued to you either when you purchased the Premium hooks package or when you subscribed for support from ISC. Use your access token when prompted for a password:

```
docker login docker.cloudsmith.io
Username: isc/docker-prv
Password: your_token_goes_here
Login Succeeded
```

Pulling (downloading) an image from the Cloudsmith Docker registry can be done using the standard docker pull command:

`docker pull docker.cloudsmith.io/isc/docker-prv/your-image:version`

Note: You should replace `your-image` and `version` in the above with a Kea image name, such as `kea-dhcp4-premium`, and a version number, such as `3.0.0`.

To refer to images after pulling a Dockerfile, specify the following:

`FROM docker.cloudsmith.io/isc/docker-prv/your-image:version`

## Related

- [Installing the Kea Subscriber Hook Libraries from Sources - Kea 3.0.0 and later](/installing-the-kea-subscriber-hook-libraries-from-sources.md)
- [Using Official ISC Packages for Kea](/isc-kea-packages.md)