
The CRS developer's utility belt. The documentation lives at coreruleset.org.
Installation
Homebrew (macOS and Linux)
crs-toolchain can be installed on macOS and Linux via Homebrew using the CRS tap:
brew tap coreruleset/tap
brew install crs-toolchain
To upgrade to the latest version:
brew upgrade crs-toolchain
Linux
Download the latest release archive for your architecture from the releases page, then extract and install the binary:
# Replace <version> and <arch> with the appropriate values (e.g. 1.0.0 and amd64)
curl -sSL https://github.com/coreruleset/crs-toolchain/releases/download/v<version>/crs-toolchain_<version>_linux_<arch>.tar.gz | tar -xz crs-toolchain
sudo mv crs-toolchain /usr/local/bin/
Alternatively, .deb and .rpm packages are available on the releases page:
# Debian/Ubuntu (.deb)
sudo dpkg -i crs-toolchain_<version>_linux_<arch>.deb
# RHEL/Fedora (.rpm)
sudo rpm -i crs-toolchain_<version>_linux_<arch>.rpm
Install with Go
If you have Go 1.19+ installed, you can install crs-toolchain directly:
go install github.com/coreruleset/crs-toolchain/v2@latest
Make sure your Go bin directory (typically ~/go/bin) is on your PATH.
Self-Update
Once crs-toolchain is installed (via any method), you can update to the latest version using the built-in self-update command:
crs-toolchain util self-update
This will automatically download and replace the current binary with the latest release for your platform.