Tools & Packages

This document provides a comprehensive reference of all tools and packages available through the installation profiles.

Quick Reference

Use this guide to:

• Find specific tools and their installation source
• Understand what each tool does
• Determine which profile includes a tool
• Check if a tool is in lite mode (the Lite column of Installation Profiles)

Command Line Tools

Core Utilities

Essential system utilities (always installed):

Tool	Description	Source
build-essential	Compiler toolchain and build tools	apt
curl	Data transfer tool (HTTP/HTTPS/FTP)	homebrew/apt
wget	Non-interactive network downloader	homebrew/apt
jq	JSON processor and query tool	homebrew/apt
git	Distributed version control	apt
sed	Stream editor for text manipulation	apt
gsed	GNU sed (macOS)	homebrew
gzip	Data compression utility	homebrew/apt
tar	Archive creation and extraction	apt
unzip	ZIP archive extraction	homebrew/apt
xz-utils	XZ compression utilities	homebrew/apt
gnupg	GPG encryption and signing	homebrew/apt
ca-certificates	SSL/TLS certificate authorities	homebrew/apt
locales	Locale definitions	apt
zsh	Z shell	apt
oh-my-zsh	Zsh configuration manager	shell

On macOS, git comes with the Command Line Tools, zsh ships with the system and the BSD sed stays in place: GNU sed is installed as gsed, and .zshrc aliases sed to it when it is present.

Enhanced CLI Tools

Modern replacements and enhancements (Base profile):

Tool	Replaces	Description	Source
bat	cat	Syntax highlighting, git integration	homebrew/mise
eza	ls	Colors, icons, git status	homebrew/mise
fd	find	Simpler syntax, faster	homebrew/mise
ripgrep (rg)	grep	Faster recursive search	homebrew/mise
fzf	-	Fuzzy finder for command line	homebrew/mise
yq	-	YAML processor (jq for YAML)	homebrew/mise

Git Tools

Git and platform CLIs (Base profile):

Tool	Description	Extensions	Source
lazygit	Terminal UI for git	-	homebrew/mise
gh	GitHub CLI	gh-dash, gh-notify	homebrew/mise
glab	GitLab CLI	-	homebrew/mise

GitHub CLI Extensions:

# Install via gh
gh extension install dlvhdr/gh-dash    # Dashboard TUI
gh extension install meiji163/gh-notify  # Notifications TUI

Container & Orchestration

Docker tools (Base profile):

Tool	Purpose	Related Tools	Source
docker	Container runtime	lazydocker	cask/apt
lazydocker	Docker TUI	-	homebrew/mise

On macOS docker is Docker Desktop (see Desktop Applications below); on Debian it is the Docker engine and CLI from Docker's apt repository.

Kubernetes tools (DevOps profile):

Tool	Purpose	Related Tools	Source
kubectl	Kubernetes CLI	k9s, kubectx, stern	homebrew/mise
helm	Kubernetes package manager	chart-testing, helm-docs	homebrew/mise
helm-docs	Helm chart documentation	helm	homebrew/mise
kind	Local Kubernetes	-	homebrew/mise
k9s	Kubernetes TUI	-	homebrew/mise
krew	kubectl plugin manager	-	homebrew/mise
kubectx	Kubernetes context switcher	kubens	homebrew/mise
kubens	Kubernetes namespace switcher	kubectx	homebrew/mise

kubectl Plugins (via Krew):

kubectl krew install cnpg          # CloudNativePG CLI
kubectl krew install df-pv         # PV disk usage
kubectl krew install ktop          # Kubernetes top
kubectl krew install neat          # Clean YAML output (macOS only)
kubectl krew install stern         # Multi-pod logs
kubectl krew install view-secret   # Decode secrets

Infrastructure as Code

IaC and configuration management (DevOps profile):

Tool	Purpose	Config Files	Source
terraform	Infrastructure as code	.tf	homebrew/mise
ansible	Configuration management	.yml playbooks	homebrew/uv
ansible-lint	Ansible linter	-	homebrew/uv

On macOS terraform (and vault, in the SecOps profile) come from HashiCorp's Homebrew tap, hashicorp/tap: homebrew/core no longer updates them since their license change.

Cloud Platform CLIs

Cloud provider tools (DevOps profile):

Tool	Platform	Source
scw	Scaleway	homebrew/mise
oc	OpenShift/OKD	homebrew/mise

Security Tools

Scanning and secret management (SecOps profile):

Tool	Purpose	Scans	Source
trivy	Vulnerability scanner	containers, IaC, code	homebrew/mise
cosign	Container signing	images	homebrew/mise
sops	Secret encryption	files	homebrew/mise
vault	Secret management	-	homebrew/mise
gitleaks	Secret detection	git repos	homebrew/mise
age	File encryption	-	homebrew/mise
kubescape	Kubernetes security	K8s configs	homebrew/mise
kyverno	Kubernetes policies	K8s resources	homebrew/mise
dive	Image layer analysis	Docker images	homebrew/mise

AI Tools

AI coding agents and helpers (AI profile):

Tool	Purpose	Source
claude-code	Claude Code CLI	cask/shell
copilot-cli	GitHub Copilot CLI	cask/shell
direnv	Per-directory env loader (scoped agent secrets)	homebrew/mise
rtk	CLI proxy that reduces LLM token usage	homebrew/shell

On macOS, claude-code and copilot-cli are Homebrew casks (Homebrew ships them only as casks). Ollama is listed under Desktop Applications below; on Debian the AI profile installs it with its own installer script.

Development Languages

Runtime and toolchain management:

JavaScript/TypeScript (JS profile)

Tool	Purpose	Managed By	Source
node	JavaScript runtime	mise	mise
npm	Package manager	node	node
pnpm	Fast package manager	mise	mise
yarn	Package manager	mise	mise
bun	Fast runtime & toolkit	mise	mise
@antfu/ni	Package manager wrapper	-	npm

npm is not pinned separately: it ships inside the node release. Globals installed with npm install -g land in the active node install and become callable after mise reshim.

Go (Go profile)

Tool	Purpose	Source
go	Go compiler	mise
cobra-cli	CLI framework	go
kubebuilder	Kubernetes API SDK	homebrew/mise
kustomize	Kubernetes YAML overlay	homebrew/mise
operator-sdk	Kubernetes operator SDK	homebrew/mise

Python (DevOps profile)

Tool	Purpose	Source
uv	Fast Python installer (Debian only)	mise
libonig-dev, python3-dev	Development files installed with ansible-dev-tools (Debian only)	apt

On Debian, ansible and ansible-dev-tools are installed with uv tool install --python, which pins an explicit self-contained interpreter and exposes the entry points in ~/.local/bin. --with-executables-from (ansible-core, ansible-lint) puts ansible, ansible-playbook and ansible-lint on the PATH. They are not installed via mise: its pipx backend uses whichever python3 it finds on the machine, which cannot be pinned and breaks when the distro or Homebrew moves that interpreter (ansible-core requires Python >= 3.12). Override with ANSIBLE_PYTHON. On macOS both come from Homebrew and uv is not installed.

Version Manager

Tool	Manages	Source
mise	Language runtimes (both); CLI binaries (Debian only)	homebrew/apt

mise manages language runtimes on both platforms, and portable CLI binaries on Debian. On macOS, Homebrew is the package manager for CLI tools.

Usage:

# Install a tool globally and pin it
mise use --global node@22

# Install without pinning globally (current directory only)
mise use node@22

# List installed / available versions
mise ls
mise ls-remote node

# Tools not in the registry are addressed by backend
mise use --global aqua:helm/chart-testing@latest
mise use --global github:tldr-pages/tlrc@latest

# Refresh shims after installing globals via npm/go
mise reshim

Text & Document Tools

Editors and document processors (Base profile):

Tool	Type	Purpose	Source
vim	Editor	Ubiquitous text editor	homebrew/apt
nvim	Editor	Extensible Vim	homebrew/mise
pandoc	Converter	Universal document converter	homebrew/apt
glow	Viewer	Markdown renderer	homebrew/mise

Networking & Remote Access

Network tools and SSH (Base/DevOps profiles):

Tool	Purpose	Source
nmap	Port scanning	homebrew/apt
sshs	Interactive SSH client	homebrew/mise
sshpass	Non-interactive SSH auth	homebrew/apt
teleport	Modern SSH server	homebrew/apt
ttyd	Terminal over web	homebrew/mise

Cloud Storage & Sync

File transfer and cloud storage (Base profile):

Tool	Purpose	Providers	Source
rclone	Cloud storage CLI	AWS S3, GCS, Azure, etc.	homebrew/mise

Monitoring & Diagnostics

System and application monitoring:

Tool	Purpose	What it monitors	Source
watch	Repeat command	Command output	homebrew/apt
k9s	Kubernetes TUI	K8s resources	homebrew/mise
lazydocker	Docker TUI	Containers	homebrew/mise

Documentation & Learning

Cheatsheets and help tools (Base profile):

Tool	Purpose	Source
cheat	Interactive cheatsheets	homebrew/mise
tlrc	Simplified man pages	homebrew/mise

Media & Graphics

Media manipulation (Base profile):

Tool	Purpose	Formats	Source
ffmpeg	Audio/video processing	mp4, mkv, mp3, etc.	homebrew/apt
chafa	Terminal image viewer	jpg, png, gif	homebrew/apt
exiftool	Metadata reader/writer	all images	homebrew/apt

CI/CD & Automation

Continuous integration tools (DevOps profile):

Tool	Purpose	Platform	Source
act	Local GitHub Actions	GitHub	homebrew/mise
actionlint	Workflow file linting	GitHub	homebrew/mise
argo	Argo Workflows CLI	Kubernetes	homebrew/mise
argocd	Argo CD CLI	Kubernetes	homebrew/mise
chart-testing	Helm chart testing	Helm	homebrew/mise
k6	Load testing	-	homebrew/mise

Utilities

Miscellaneous utilities:

Tool	Purpose	Source
tree	Directory tree viewer	homebrew/apt
bat-extras	Bat utilities (batgrep, batman, etc.)	homebrew/shell
coreutils	GNU core utilities (Debian only)	apt
man, man-db, manpages-dev	Manual pages and viewer (Debian only)	apt
fontconfig	Font configuration, provides fc-cache (Debian only)	apt
nerd-fonts	Hack and Symbols Only fonts for neovim	shell
mkcert	Local SSL certificates (macOS only)	homebrew
coder	Remote development	homebrew/mise
oras	OCI registry client	homebrew/mise
velero	Kubernetes backup	homebrew/mise
vhs	Terminal recorder	homebrew/mise
yamllint	YAML linting	homebrew/mise

Desktop Applications (macOS)

Base Profile

App	Purpose	License
VS Code	Code editor	Free
Brave	Privacy browser	Free
Firefox	Privacy browser	Free
Insomnia	API client	Free
Mattermost	Team chat	Free
OpenVPN Connect	VPN client	Free
Docker Desktop	Container GUI	Free

AI Profile

App	Purpose	License
Ollama	Local LLM runner	Free

Extras Profile

App	Purpose	License
VLC	Media player	Free
Audacity	Audio editor	Free
Discord	Voice/chat	Free
Transmission	BitTorrent	Free
Soulseek	P2P file sharing	Free
Raspberry Pi Imager	SD card flasher	Free

Installation Quick Reference

By Source

Homebrew (macOS):

brew install <package>          # CLI tools
brew install --cask <app>       # Applications (and claude-code, copilot-cli)

The profiles list their Homebrew packages in setup/profiles/osx/<profile>.Brewfile and install them with brew bundle --file; to install one profile's packages by hand: brew bundle --file setup/profiles/osx/devops.Brewfile.

apt (Debian/Ubuntu):

sudo apt install <package>

mise (CLI tools & language runtimes):

mise use --global <tool>@<version>

npm (Node Packages):

npm install --global <package>
mise reshim                     # publish the new binary as a mise shim

go (Go Packages):

go install <package>@latest

uv (Python Tools, Debian):

uv tool install --python 3.13 <package>

Shell Scripts:

curl -fsSL <url> -o install.sh   # download first, then read and run it
bash install.sh

The setup scripts do the same: a remote script is downloaded first and only run once the download succeeded.

GitHub CLI:

gh extension install <org>/<repo>

kubectl/Krew:

kubectl krew install <plugin>

By Profile

Quick installation commands:

# Core only (minimal)
./setup/setup-osx.sh

# Base tools
./setup/setup-osx.sh -p base

# DevOps full stack
./setup/setup-osx.sh -p 'devops,secops'

# Full-stack developer
./setup/setup-osx.sh -p 'base,js,go'

# Everything
./setup/setup-osx.sh -p 'base,ai,devops,go,js,secops,extras'

# Lite mode (only the tools marked ✓ in 04-profiles.md)
./setup/setup-osx.sh -l -p 'devops,js'

Package Managers

Understanding the sources:

Manager	Platform	Purpose	Auto-Installed
Homebrew	macOS	CLI tools, system packages & GUI apps	✓
apt	Debian/Ubuntu	System packages	✓
mise	All	Language runtimes; CLI binaries on Debian	✓
npm	All	Node.js packages	via mise
uv	Debian	Python tools (ansible, ansible-lint)	via mise
go	All	Go packages	via mise
Krew	All	kubectl plugins	via kubectl
gh	All	GitHub CLI extensions	via gh

Verifying Installation

Check installed tools:

# Check specific tool
which kubectl
kubectl version

# List all Homebrew packages (macOS)
brew list

# List apt packages (Debian)
apt list --installed

# Check mise tools
mise ls

# Check npm global packages
npm list -g --depth=0

# Check uv tools (Debian)
uv tool list

# Check kubectl plugins
kubectl plugin list

Updating Packages

Keep tools up to date:

# Homebrew (macOS)
brew update && brew upgrade

# apt (Debian/Ubuntu)
sudo apt update && sudo apt upgrade

# mise tools - --bump is required, see below
mise upgrade --bump

# npm packages
npm update -g

# uv tools (Debian)
uv tool upgrade --all

# kubectl plugins
kubectl krew upgrade

Why mise upgrade needs --bump

~/.config/mise/conf.d/00-settings.toml sets pin = true, so mise use records an exact version (kubectl = "1.34.2") rather than a range. A plain mise upgrade only upgrades within the recorded constraint, and an exact version is always already satisfied — so it reports "All tools are up to date" and changes nothing, however old the tools are.

--bump is what rewrites the pin to the current latest and installs it:

# See what is actually behind (plain `mise outdated` has the same blind spot)
mise outdated --bump

# Upgrade everything and rewrite the pins
mise upgrade --bump

# Upgrade a single tool
mise upgrade --bump kubectl

Re-running a setup profile has the same effect, since each one installs its tools with @latest.

Upgrading mise itself follows whichever way it was installed: brew upgrade mise on macOS, sudo apt-get install --only-upgrade mise (or a full apt upgrade) on Debian, where it comes from mise's signed apt repository. A copy installed earlier with the mise.run script, in ~/.local/bin, updates with mise self-update.

Further Resources

• Homebrew Packages
• mise Documentation
• mise Registry
• aqua Registry
• Krew Plugins
• GitHub CLI Extensions