Compilation and Installation
Index
- Dependencies
- Option 1: Installing the package
- Option 2: Compiling and installing the release tarball
- Option 3: Compiling and installing the git repository
- Option 4: Docker container
- Fetching the TALs
Dependencies
Fort currently supports 64-bit Operating Systems. A 32-bit OS may face the Year 2038 problem when handling certificate dates, and there’s no workaround for this at the moment.
Option 1: Installing the package
Debian package
Last tested in Debian 12:
wget https://github.com/NICMx/FORT-validator/releases/download/1.6.7/fort_1.6.7-1_amd64.deb
sudo apt install ./fort_1.6.7-1_amd64.deb
The Debian package includes a systemd service that kicks off automatically after installation:
$ service fort status
● fort.service - FORT RPKI validator
Loaded: loaded (/lib/systemd/system/fort.service; enabled; preset: enabled)
Active: active (running) since Wed 2025-09-17 10:12:26 CDT; 1min 39s ago
Docs: man:fort(8)
https://nicmx.github.io/FORT-validator/
Main PID: 690 (fort)
Tasks: 29 (limit: 1093)
Memory: 608.6M
CPU: 22.960s
CGroup: /system.slice/fort.service
├─690 /usr/bin/fort --configuration-file /etc/fort/config.json
├─741 rsync -rtz --delete --omit-dir-times --contimeout=20 --max-size=20MB --timeout=15 "--include=*/" "--include=*.cer" "--include=>
└─743 rsync -rtz --delete --omit-dir-times --contimeout=20 --max-size=20MB --timeout=15 "--include=*/" "--include=*.cer" "--include=>
Sep 17 10:12:26 debian12 systemd[1]: Started fort.service - FORT RPKI validator.
You can configure it at /etc/fort/config.json
.
There’s also a version available in the official Debian repositories, though it’s not maintained by the Fort team. Fetch it like a normal package:
sudo apt install fort-validator
FreeBSD package
FORT Validator is available in the FreeBSD ports tree since October 2021. The port maintainer closely follows the development of FORT. Updates to the FreeBSD port appear shortly after FORT releases. Binary packages can be installed in the usual way:
pkg install fort
If you prefer to build software from ports, this works too:
cd /usr/ports/net/fort
make install clean
A default configuration will be installed in /usr/local/etc/fort/fort-config.json
. The package is careful not to overwrite an existing configuration.
To use FORT on FreeBSD, you will need the Trust Anchor Locator (TAL) files. You can download these by running fort --init-tals
as follows:
fort --init-tals --tal /usr/local/etc/fort/tal
When you have downloaded the TAL files, you can start the RTR server and validator with the included service script:
sysrc fort_enable=YES # or edit /etc/rc.conf manually
service fort start
The default configuration will bind the RTR server to localhost on port 8323.
RHEL package
Last tested in Rocky 8.9 and 9.3:
curl -O https://github.com/NICMx/FORT-validator/releases/download/1.6.7/fort-1.6.7-1.el8.x86_64.rpm
sudo dnf install fort-1.6.7-1.el8.x86_64.rpm
The FORT validator service is not started by default:
sudo systemctl start fort
Configuration at /etc/fort/config.json
.
Option 2: Compiling and installing the release tarball
Debian
sudo apt install -y build-essential pkg-config rsync libjansson-dev \
libssl-dev libcurl4-openssl-dev libxml2-dev libmicrohttpd-dev
wget https://github.com/NICMx/FORT-validator/releases/download/1.6.7/fort-1.6.7.tar.gz
tar xvzf fort-1.6.7.tar.gz
cd fort-1.6.7/
./configure
make
sudo make install
Last tested in Debian 12.12.
OpenBSD
su
pkg_add curl jansson rsync libmicrohttpd libxml
exit
ftp https://github.com/NICMx/FORT-validator/releases/download/1.6.7/fort-1.6.7.tar.gz
tar xzf fort-1.6.7.tar.gz
cd fort-1.6.7/
./configure
make
su
make install
exit
Last tested in OpenBSD 7.7.
RHEL
# Needed by crb enable.
sudo dnf install -y epel-release
# Needed by libmicrohttpd-devel.
# In rockylinux9, it's also needed by jansson-devel.
sudo crb enable
sudo dnf install -y gcc make pkgconfig rsync jansson-devel \
openssl-devel libcurl-devel libxml2-devel libmicrohttpd-devel
wget https://github.com/NICMx/FORT-validator/releases/download/1.6.7/fort-1.6.7.tar.gz
tar xzf fort-1.6.7.tar.gz
cd fort-1.6.7/
./configure
make
sudo make install
Last tested in rockylinux 8.9 and 9.3.
FreeBSD
sudo pkg install autotools curl jansson pkgconf rsync libxml2 libmicrohttpd
fetch https://github.com/NICMx/FORT-validator/releases/download/1.6.7/fort-1.6.7.tar.gz
tar xzf fort-1.6.7.tar.gz
cd fort-1.6.7/
export CFLAGS=-I/usr/local/include
./configure
make
sudo make install
Last tested in FreeBSD 14.3.
Option 3: Compiling and installing the git repository
First, get the dependencies, and also git
and the autotools. For Debian, this would be
# Git, autotools
sudo apt install -y autoconf automake build-essential git
# Fort dependencies
sudo apt install -y pkg-config rsync libjansson-dev libssl-dev \
libcurl4-openssl-dev libxml2-dev libmicrohttpd-dev
Then download, compile and install:
git clone https://github.com/NICMx/FORT-validator.git
cd FORT-validator/
./autogen.sh
./configure
make
sudo make install
Option 4: Docker container
It’s in Docker Hub. Pull with
docker pull nicmx/fort-validator:latest
A basic example to run the container using the default values, reading from a local TAL directory (i.e. host/path/to/tals
), and binding to the local port 8323
:
docker run --name fort-validator -v host/path/to/tals:/etc/fort/tal:ro -p 8323:323 -d fort-validator
Fetching the TALs
fort --init-tals --tal /etc/fort/tal
More details here.