Skip to main content

Sonatype IQ CLI Binaries

The CLI binary versions are a drop-in replacement for the Java version without the Java runtime environment requirements. The parameters are the same as the Java CLI versions with the addition of Secure Sockets Layer (SSL) customizations.

The native binary versions of the Sonatype IQ CLI are available for direct download on the main IQ Download and Compatibility page next to the JAR version.

Linux

Download latest version for Linux:

The Linux CLI can be installed on distributions supporting Deb or RPM packages. Tested on Centos 7.1+, RHEL 7.3+, Debian 8+, Ubuntu 14.04+

Debian/Ubuntu

  1. Download the public GPG signing key and add the key to your apt source keyring

    wget -qO- https://repo.sonatype.com/repository/sonatype-hosted/pki/deb-gpg/GPG-KEY-sonatype-apt-hosted.asc | \
   gpg --dearmor | \
   sudo tee /usr/share/keyrings/sonatype-apt-hosted.gpg >/dev/null

  2. Add the repository to your sources. They may be added manually or automatically.

    Manually create file: /etc/apt/sources.list.d/sonatype-hosted.list

    deb [signed-by=/usr/share/keyrings/sonatype-apt-hosted.gpg arch=amd64] https://repo.sonatype.com/repository/sonatype-apt-hosted/ stable main

    Automatic call to add sources.

    sudo wget -P /etc/apt/sources.list.d/ https://repo.sonatype.com/repository/sonatype-hosted/deb/sonatype-hosted.list

  3. Install the application via apt-get.

    sudo apt-get update && sudo apt-get install nexus-iq-cli

Red Hat/CentOS

  1. Add the repository to your sources.

    Manually create /etc/yum.repos.d/sonatype-hosted.repo

    [sonatype-hosted]
name=Sonatype Hosted
baseurl=https://repo.sonatype.com/repository/sonatype-yum-hosted/
enabled=1
gpgcheck=1
gpgkey=https://repo.sonatype.com/repository/sonatype-hosted/pki/rpm-gpg/RPM-GPG-KEY-Sonatype-yum.asc
priority=1

    Or automatically:

    sudo wget -P /etc/yum.repos.d/ https://repo.sonatype.com/repository/sonatype-hosted/rpm/sonatype-hosted.repo

  2. Install the application via yum (or dnf). The first time you install the package you will be prompted to install the GPG signing key.

    sudo yum install nexus-iq-cli

Mac/Homebrew

Download latest version for Mac:

This Mac pkg installer places files in the /usr/local/bin directory and has been tested on both M1 and Intel chipsets.

How to install the latest version using Homebrew

Begin by entering the command brew tap sonatype/nexus-iq-cli (this is a one-time step).

Once completed, proceed with brew install --cask nexus-iq-cli

Command to run on Linux or Mac OS:

./nexus-iq-cli

Windows

Download latest version for Windows:

Requires the Visual C++ Runtime. This is included in the zip, or it can be installed and maintained by Windows Update.

Command to run on Windows:

nexus-iq-cli.exe

Passing SSL Parameters to the Sonatype CLI

The JAR version of the CLI uses the standard SSL approach found in all Java applications.

  • -Djavax.net.ssl.trustStore
  • -Djavax.net.ssl.keyStore

For the native binaries, we pass in values through the following parameters:

CLI property

JVM property

--ssl-key-store-password

Password for SSL key store

-Djavax.net.ssl.keyStorePassword

--ssl-key-store-path

Path to SSL key store

-Djavax.net.ssl.keyStore

--ssl-key-store-type

Type of SSL key store

-Djavax.net.ssl.keyStoreType

--ssl-trust-store-password

Password for SSL trust store

-Djavax.net.ssl.trustStorePassword

--ssl-trust-store-path

Path to SSL trust store

-Djavax.net.ssl.trustStore

--ssl-trust-store-type

Type of SSL trust store

-Djavax.net.ssl.trustStoreType

Using the Windows Trust Store for SSL

Set WINDOWS-ROOT as the trust store type to have the JVM trust certificates from the Windows Truststore.

--ssl-trust-store-type=WINDOWS-ROOT