Nix packaging for https://github.com/IceDynamix/reliquary-archiver.

Assume that Nix Flakes are enabled.

This flake provides a nix develop shell for building reliquary-archiver on NixOS.

To run reliquary-archiver without installing (but building still happens locally, of course):

nix run "git+https://github.com/daanturo/reliquary-archiver-nix-module.git" -- --help

For this command, privilege escalation will ask for root permission. Because the operation sudo setcap CAP_NET_RAW=+ep target/release/reliquary-archiver cannot be done with nix build, capsh with root permission is used as a workaround to temporarily allow packet capturing.

To force latest version of upstream reliquary-archiver:

git clone https://github.com/daanturo/reliquary-archiver-nix-module
cd reliquary-archiver-nix-module
git pull --rebase # optional
nix flake update --commit-lock-file
nix run . -- --help

In your system's flake.nix:

{

  # ...other inputs, including "nixpkgs"...

  inputs.reliquary-archiver-nix-module.url = "git+https://github.com/daanturo/reliquary-archiver-nix-module.git";
  inputs.reliquary-archiver-nix-module.inputs.nixpkgs.follows = "nixpkgs";

  outputs = (
    inputs@{ self, ... }:
    {
      # ...other outputs...
      nixosConfigurations = {
        "hostname" = nixpkgs.lib.nixosSystem {
          system = "x86_64-linux";
          modules = [ inputs.reliquary-archiver-nix-module.nixosModules.default ];
        };
      };
    }
  );

}

Binary will be available at /run/wrappers/bin/reliquary-archiver (added to PATH by default on NixOS).

Version bounded by a pseudo-sandbox:

nix run "git+https://github.com/daanturo/reliquary-archiver-nix-module.git"#ro -- --help

By using bwrap, normally, the above won't be able to write to any files, nor read from any such as .pcap files, hence as of 2026-07, is only useful for --stream mode. While attempting to lessen the damage of attacks such as supply-chain & MITM, it DOES NOT guarantee full protection against them. See flake.nix/reliquary-archiver-ro for the implementation.