4 ms·

What about nix? Or if it's just for developer tools, the 100 tool managers that exist, like asdf and rtx. Sometimes a package manager doesn't have my package d

What about nix? Or if it's just for developer tools, the 100 tool managers that exist, like asdf and rtx. Sometimes a package manager doesn't have my package doesnt get solved by adding one more package manager.

airtonix 3y ago
[dead]
yjftsjthsd-h 3y ago
A supporting note - my first thought was "well the author wants to work in CTF/pentesting situations where root access might not be available" but it tuns out that https://nixos.wiki/wiki/Nix_Installation_Guide#Installing_without_root_permissions https://nixos.wiki/wiki/Nix_Installation_Guide#Installing_wi... is pretty well covered these days. At that point the only thing is that nix is complex enough that it might be easier to invent your own package manager than to master nix[0]. (I don't know enough about your other suggestions to comment.) [0] Don't take this criticism too harshly; I'm writing this comment on a nixos laptop;)
- YoshiRulz 3y ago
  And if you're not able to install Nix (running something on a target machine?), you can use `nix bundle` on your own machine. More relevant for the author may be that a lot of pentesting tools aren't in Nixpkgs yet: https://github.com/NixOS/nixpkgs/issues/81418 https://github.com/NixOS/nixpkgs/issues/81418
- matrss 3y ago
  There is also nix-portable (https://github.com/DavHau/nix-portable https://github.com/DavHau/nix-portable), which is basically a drop-in replacement for normal nix that does everything required for no-root operation by itself when needed. Just put the single binary in your PATH and it's ready.
- azathothas 3y ago
  As my comment above stated, hysp relies on single binaries. The default source for PKGs that's shipped with hysp, contains only statically compiled binaries. This allows you to run a single binary anywhere on any system. And since you can host your own binaries for whatever architecture, hysp is agnostic. Further, since only binaries are installed, there's no need for toolchains/cache or any kind of other dependencies.
vilunov 3y ago
People might just not like nix for a number of legitimate reasons and they might to take an attempt at a new package manager with better UX. It's fine to make a new piece of software, even if 100 tools exist already. Package management is definitely far for a solved problem, and I personally don't think than nix is "it".
- from-nibly 3y ago
  You're right, sorry, I could have phrased that better. It was a legitimate question. And no nix is not "it". Don't get me wrong I use nix as much as possible but it's frustratingly close to "it" but it isn't "it".
azathothas 3y ago
Hi, I am the package maintainer for https://github.com/metis-os/hysp-pkgs https://github.com/metis-os/hysp-pkgs (The default source that's shipped with hysp) To address your concerns: 1. Hysp is not a developer tool and isn't meant to be used as such. 2. Nix, Conda etc. all can & do work without requiring elevated privileges or root. However, what differentiates hysp, is that it is simply a downloader for a binary hosted somewhere else (defined in config file), that it fetches, verifies sha256sum/blake3 sum & puts in the directory (also defined in config file) which can be then directly called & used. 3. Hysp, doesn't care about dependencies, and neither does it attempt to install anything that's not specifically defined in the config. 4. As installing random binaries from random sources is not advisable due to security concerns, the pkg-source can be self-hosted by anyone and hysp can be configured to use that instead of the default source.

airtonix 3y ago

[dead]

yjftsjthsd-h 3y ago

A supporting note - my first thought was "well the author wants to work in CTF/pentesting situations where root access might not be available" but it tuns out that https://nixos.wiki/wiki/Nix_Installation_Guide#Installing_without_root_permissions https://nixos.wiki/wiki/Nix_Installation_Guide#Installing_wi... is pretty well covered these days. At that point the only thing is that nix is complex enough that it might be easier to invent your own package manager than to master nix[0]. (I don't know enough about your other suggestions to comment.) [0] Don't take this criticism too harshly; I'm writing this comment on a nixos laptop;)

YoshiRulz 3y ago
And if you're not able to install Nix (running something on a target machine?), you can use `nix bundle` on your own machine. More relevant for the author may be that a lot of pentesting tools aren't in Nixpkgs yet: https://github.com/NixOS/nixpkgs/issues/81418 https://github.com/NixOS/nixpkgs/issues/81418
matrss 3y ago
There is also nix-portable (https://github.com/DavHau/nix-portable https://github.com/DavHau/nix-portable), which is basically a drop-in replacement for normal nix that does everything required for no-root operation by itself when needed. Just put the single binary in your PATH and it's ready.
azathothas 3y ago
As my comment above stated, hysp relies on single binaries. The default source for PKGs that's shipped with hysp, contains only statically compiled binaries. This allows you to run a single binary anywhere on any system. And since you can host your own binaries for whatever architecture, hysp is agnostic. Further, since only binaries are installed, there's no need for toolchains/cache or any kind of other dependencies.

vilunov 3y ago

People might just not like nix for a number of legitimate reasons and they might to take an attempt at a new package manager with better UX. It's fine to make a new piece of software, even if 100 tools exist already. Package management is definitely far for a solved problem, and I personally don't think than nix is "it".

from-nibly 3y ago
You're right, sorry, I could have phrased that better. It was a legitimate question. And no nix is not "it". Don't get me wrong I use nix as much as possible but it's frustratingly close to "it" but it isn't "it".

azathothas 3y ago

Hi, I am the package maintainer for https://github.com/metis-os/hysp-pkgs https://github.com/metis-os/hysp-pkgs (The default source that's shipped with hysp) To address your concerns: 1. Hysp is not a developer tool and isn't meant to be used as such. 2. Nix, Conda etc. all can & do work without requiring elevated privileges or root. However, what differentiates hysp, is that it is simply a downloader for a binary hosted somewhere else (defined in config file), that it fetches, verifies sha256sum/blake3 sum & puts in the directory (also defined in config file) which can be then directly called & used. 3. Hysp, doesn't care about dependencies, and neither does it attempt to install anything that's not specifically defined in the config. 4. As installing random binaries from random sources is not advisable due to security concerns, the pkg-source can be self-hosted by anyone and hysp can be configured to use that instead of the default source.