A Boring Infra Co. product

Deterministic tools
without learning Nix.

root install pins exact store paths, verifies every binary, and lets you undo anything — locally, with a lockfile.

$curl -fsSL https://boringinfra.company/root/install.sh | sh

Requires Nix (installer can add it). Then root doctor.

-// brew install && hope you can undo

+root install ripgrep

The lock is the product.

Intent is a Rootfile. Truth is root.lock. Snapshots make undo a command, not a story you tell yourself.

Root Install

1 mutation · 5 stepsLIVE

VERIFIED·ripgrep pinned to the Nix store. Rollback is one command.

Snapshot first · Verify after · Click a step to inspect

One mutation. Five gates. Each one is inspectable. root install in action.

This is all it takes.

No Root account. No control plane. No telemetry of your lockfile. One curl, a local CLI, and a plan you can read before anything changes.

1. Install

// Nix required. Installer can add it.
curl -fsSL https://boringinfra.company/root/install.sh
  | sh

2. Plan

// Preview. No writes.
root plan install ripgrep

3. Apply

// Snapshot → install → verify
root install ripgrep

Your lock stays local.
There is no Root cloud.

Rootfile, lock, snapshots, and profile live on your machine. Nix is the engine. Root is the interface. Nothing is uploaded. Nothing phones home.

Your machine · Source of truth

// Intent, pin, undo. That's it.
const intent = "~/.root/Rootfile";
const truth = "~/.root/root.lock";

Isolated profile. Append-only ledger. No Root account required.

Hosted control plane · Does not exist

// Nothing to send. Nowhere to send it.
if (cloud) return null;
if (telemetry) return "off";

No silent upload of your lockfile. Root does not need a hosted backend.

A tool you cannot undo is a liability. Root snapshots first and shows you how to roll it back.

Plan. Apply.
Verify. Undo.

Root does not replace Nix. It hides it. You declare intent, Root pins store paths, and every mutation is reversible.

Plan

Browse the curated catalog. Preview the Nix attribute. Nothing writes until you apply.

Apply

Snapshot first. Install into an isolated profile. Verify the binary landed where Root said it would.

Undo

rollback --last restores locked state. root status shows drift.

What do you get?

A curated catalog, a lockfile you can read, and an undo button for the parts of your machine that used to be irreversible.

Undo anything

Every mutation snapshots first. rollback --last restores locked state.

Verified installs

Binaries are checked in the Root profile. Never global PATH.

Deterministic lock

Curated Nix attributes become pinned store paths in root.lock.

Start pinning for real this time

Install the CLI. Plan before you mutate. The lock lives on your machine.