Skip to main content

Sonatype IQ CLI Binaries

The CLI binary versions are a drop-in replacement for the Java version without the Java runtime environment (JRE) requirements. The parameters are the same as the Java CLI versions with the addition of Secure Sockets Layer (SSL) customizations.

Note

  • The native Mac OSX CLI has been sunset and will receive only critical bug and security fixes until June 10th, 2025. After this date, it will no longer be supported.

  • The native Linux and Windows CLI have been sunset and will receive only critical bug and security fixes until September 14, 2025. After this date, they will no longer be supported.

For the latest features and full support, switch to our cross-platform Java CLI with bundled JDK.

Linux

Download latest version for Linux:

The Linux CLI can be installed on distributions supporting Deb or RPM packages. Tested on Centos 7.1+, RHEL 7.3+, Debian 8+, Ubuntu 14.04+

Debian/Ubuntu

  1. Download the public GPG signing key and add the key to your apt source keyring

    wget -qO- https://repo.sonatype.com/repository/sonatype-hosted/pki/deb-gpg/GPG-KEY-sonatype-apt-hosted.asc | \
   gpg --dearmor | \
   sudo tee /usr/share/keyrings/sonatype-apt-hosted.gpg >/dev/null

  2. Add the repository to your sources. They may be added manually or automatically.

    Manually create file: /etc/apt/sources.list.d/sonatype-hosted.list

    deb [signed-by=/usr/share/keyrings/sonatype-apt-hosted.gpg arch=amd64] https://repo.sonatype.com/repository/sonatype-apt-hosted/ stable main

    Automatic call to add sources.

    sudo wget -P /etc/apt/sources.list.d/ https://repo.sonatype.com/repository/sonatype-hosted/deb/sonatype-hosted.list

  3. Install the application via apt-get.

    sudo apt-get update && sudo apt-get install nexus-iq-cli

Red Hat/CentOS

  1. Add the repository to your sources.

    Manually create /etc/yum.repos.d/sonatype-hosted.repo

    [sonatype-hosted]
name=Sonatype Hosted
baseurl=https://repo.sonatype.com/repository/sonatype-yum-hosted/
enabled=1
gpgcheck=1
gpgkey=https://repo.sonatype.com/repository/sonatype-hosted/pki/rpm-gpg/RPM-GPG-KEY-Sonatype-yum.asc
priority=1

    Or automatically:

    sudo wget -P /etc/yum.repos.d/ https://repo.sonatype.com/repository/sonatype-hosted/rpm/sonatype-hosted.repo

  2. Install the application via yum (or dnf). The first time you install the package you will be prompted to install the GPG signing key.

    sudo yum install nexus-iq-cli

Mac/Homebrew

Download latest version for Mac:

This Mac pkg installer places files in the /usr/local/bin directory and has been tested on both M1 and Intel chipsets.

How to install the latest version using Homebrew

Begin by entering the command brew tap sonatype/nexus-iq-cli (this is a one-time step).

Once completed, proceed with brew install --cask nexus-iq-cli

Command to run on Linux or Mac OS:

./nexus-iq-cli

Windows

Download latest version for Windows:

Requires the Visual C++ Runtime. This is included in the zip, or it can be installed and maintained by Windows Update.

Command to run on Windows:

nexus-iq-cli.exe

Passing SSL Parameters to the Sonatype CLI

The JAR version of the CLI uses the standard SSL approach found in all Java applications.

  • -Djavax.net.ssl.trustStore
  • -Djavax.net.ssl.keyStore

For the native binaries, we pass in values through the following parameters:

Native CLI Argument

JVM Property

--ssl-key-store-password

Password for SSL key store

-Djavax.net.ssl.keyStorePassword

--ssl-key-store-path

Path to SSL key store

-Djavax.net.ssl.keyStore

--ssl-key-store-type

Type of SSL key store

-Djavax.net.ssl.keyStoreType

--ssl-trust-store-password

Password for SSL trust store

-Djavax.net.ssl.trustStorePassword

--ssl-trust-store-path

Path to SSL trust store

-Djavax.net.ssl.trustStore

--ssl-trust-store-type

Type of SSL trust store

-Djavax.net.ssl.trustStoreType

Using the Windows Trust Store for SSL

Set WINDOWS-ROOT as the trust store type to have the JVM trust certificates from the Windows Truststore.

--ssl-trust-store-type WINDOWS-ROOT