Backstory, I once submitted Ronin to Kali Linux to be packaged. At first one of their developers accepted the issue and I gave them all of the information on external dependencies and how to install Ronin, etc. I even linked them to gem2deb, a tool that could convert .gem packages into Debian packages, which should have allowed them to package Ronin and all of it's gem dependencies as individual Debian packages. Several months passed without hearing anything back. Then suddenly out of the blue they closed the issue with a vague and rambling excuse about how Ronin hadn't had a release in a while (most of KaliLinux's tools haven't had a release in a while or only have had one release), or that they only package self-contained static binaries (Metasploit is not a self-contained static binary, yet they packaged it). or how they want to save on disk space (Metasploit takes up far more disk space than Ronin, yet they packaged Metasploit). To be fair, I got the impression that they just didn't want to do the work, however I did suspect some kind of double standard was at play here.
Ever since then I began to suspect that KaliLinux is actually holding back the InfoSec community by selectively choosing which tools to package or not to package.
I feel like we need a more decentralized approach to providing a security tools environment. I feel like NixPkg/NixOS can provide that.
#kalilinux #nix #nixpkg #nixos