NixOS Cheatsheet

COPY

tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz

COPY

nix run "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#b64chain" -- --help

COPY

nix profile install "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#b64chain"

COPY

nix profile install \
  "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#jcli" \
  "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#urlrecon" \
  "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#hashcrackref"

COPY

# /etc/nixos/flake.nix (or wherever your system flake lives)
{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    cli-johlem.url = "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz";
  };

  outputs = { nixpkgs, cli-johlem, ... }: {
    nixosConfigurations.myhost = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      modules = [
        ./configuration.nix
        {
          nixpkgs.overlays = [ cli-johlem.overlays.default ];
        }
      ];
    };
  };
}

COPY

# configuration.nix
{ pkgs, ... }:
{
  environment.systemPackages = with pkgs.cli-johlem; [
    jcli
    urlrecon
    credsweep
    socq
    hashcrackref
    logtimeline
    regexlab
    shard
    # add any tools you need — see Available Tools below
  ];
}

COPY

sudo nixos-rebuild switch

COPY

# home.nix
{ pkgs, ... }:
{
  home.packages = with pkgs.cli-johlem; [
    b64chain
    cidrcalc
    urlrecon
  ];
}

COPY

# Any project flake.nix
{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    cli-johlem.url = "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz";
  };

  outputs = { nixpkgs, cli-johlem, ... }:
    let
      pkgs = nixpkgs.legacyPackages.x86_64-linux;
      tools = cli-johlem.packages.x86_64-linux;
    in {
      devShells.x86_64-linux.default = pkgs.mkShell {
        packages = [
          tools.urlrecon
          tools.credsweep
        ];
      };
    };
}

COPY

nix develop  # drops you into a shell with those tools on PATH

COPY

# List installed packages
nix profile list

# Remove by index (shown in list output)
nix profile remove <index>

COPY

# configuration.nix
nix.settings.experimental-features = [ "nix-command" "flakes" ];

COPY

nix --extra-experimental-features 'nix-command flakes' run "tarball+...#b64chain"

# Architecture (prebuilt, signed Rust binaries)
cli.johlem.net/releases/cli-johlem-net-latest.tar.gz   # ~6 KB
  ├── flake.nix              # package set — one derivation per tool
  ├── flake.lock             # pinned nixpkgs for reproducibility
  ├── johlem-release.pub     # signify pubkey (out-of-band audit)
  └── tools/
      ├── jcli/manifest.json       # url + sha256 + size + signature URL
      ├── urlrecon/manifest.json
      ├── shard/manifest.json
      └── ...                      # one per tool, ~500 bytes each

# When you `nix build .#urlrecon`:
# 1. Nix reads tools/urlrecon/manifest.json to learn the binary URL + SHA-256
# 2. fetchurl downloads cli.johlem.net/tools/urlrecon/releases/urlrecon-vX.Y.Z-linux-x86_64-glibc
# 3. Nix verifies the SHA-256 (build fails on mismatch)
# 4. The binary is installed at /nix/store/...-urlrecon-X.Y.Z/bin/urlrecon