Red-Flake Nix

Installation

1. Bootup any NixOS live CD
2. Install Red Flake (run as root, do not use sudo):

bash <(curl -L https://raw.githubusercontent.com/Red-Flake/red-flake-nix/main/install.sh)

Rebuilding

Rebuild the already installed system from the flake

redflake-rebuild

Features

• custom NixOS flake using NixOS 26.05
• NixOS home-manager
• encrypted root on ZFS
• Impermanence (non-persistent root on tmpfs) with persistence on /persist
• systemd-boot with EFI support and read-only /boot handling
• host-specific kernel selection, including CachyOS LTS on Stellaris
• performance tweaks
• custom Red-Flake themes
• custom Red-Flake boot logo
• custom Red-Flake wallpaper
• customized KDE desktop
• customized KDE start menu
• pre-configured, ready-to-use tools for penetration testing, red teaming & CTFs
• additional standalone tools in /usr/share/tools
• various wordlists in /usr/share/wordlists
• various webshells in /usr/share/webshells
• PayloadsAllTheThings in /usr/share/payloads/payloadsallthethings
• exploitdb in /usr/share/exploits/exploitdb
• customized zsh shell with oh-my-zsh
• support for Docker, LXC, KVM & VirtualBox
• PostgreSQL & Neo4j databases for Metasploit and BloodHound CE
• BloodHound CE service integration with Neo4j readiness handling
• provide automatic provisioning for
  • Zsh
  • KDE Plasma
  • metasploit framework
  • postgresql
  • BloodHound
  • Neo4j
  • Burp Suite
  • Firefox
  • ... and more

Showcase

fastfetch

KDE about this system

KDE desktop

KDE start menu

Contributing

Community contributions are always welcome through GitHub Issues and Pull Requests.

• Note: .pre-commit-config.yaml is generated by pre-commit-hooks.nix and is intentionally gitignored.
• CI runs the pre-commit suite (treefmt, shellcheck, statix, deadnix) via the flake devShell. treefmt formats Nix (nixpkgs-fmt), shell (shfmt), and Markdown (Prettier).

License

Red-Flake is licensed under the GPL License.