Run diagnostics first:
grokhunter doctor
# Local unit checks (syntax + feature table + bind patch; no network)
bash scripts/ci-unit.shThe installer caches modules in ~/.cache/grokhunter. If download fails:
git clone https://github.com/FineComputer14451/GrokHunter.git
cd GrokHunter
bash install.sh --full --with-grok --with-x11Force overlay refresh after an upgrade (no rootfs re-download):
GROKHUNTER_REFRESH=1 bash install.sh --overlay-only --with-completionsFull + desktop needs several GB free. Use --mini or --nano if space is tight:
bash install.sh --mini --with-grok --no-de
df -h
du -sh ~/.cache/grokhunter ~/.grok/sessions 2>/dev/nullSkill storage-lab · grokhunter storage. Confirm before deleting caches. Prefer --overlay-only over re-downloading Kali.
Usually network or Kali mirror issues. Retry later or check:
https://kali.download/nethunter-images/current/rootfs/
You may be in the wrong shell (Termux host vs Kali guest) or PATH was not sourced after overlay-only.
echo "PREFIX=${PREFIX:-unset}" # Termux host has com.termux
command -v pkg; command -v apt
export PATH="$HOME/.grok/bin:$HOME/.local/bin:$PATH"
source ~/.grok/profile.sh 2>/dev/null || true
grokhunter skills installSkill host-lab · grokhunter host. If wrappers are missing, agent overlay. Tab-complete / ghd missing: skill shell-lab (source ~/.grok/profile.sh; installer does not edit rc).
export PATH="$HOME/.grok/bin:$HOME/.local/bin:$PATH"
grokhunter ensure
# force reinstall / switch installer mode:
GROKHUNTER_FORCE_GROK=1 GROKHUNTER_GROK_INSTALLER=official grokhunter ensure --force
# or
bash install.sh --overlay-only --with-grok
# shared script:
bash ~/GrokHunter/scripts/ensure_grok.sh# Preferred on mobile
printf 'export XAI_API_KEY=%q\n' "xai-YOUR_KEY" > ~/.grok/secrets.env
chmod 600 ~/.grok/secrets.env
source ~/.grok/secrets.env
grokConfirm SuperGrok / X Premium+ or a valid key.
chmod 600 ~/.grok/secrets.envbash install.sh --with-x11Current nethunter is nethunter [OPTION] [USERNAME] [-- COMMAND].
nh-x11 must not pass /bin/bash -lc as launcher flags.
# after overlay update:
hash -r
nh-x11Kali 2026 gdk-pixbuf loads SVG via glycin + bwrap --unshare-all, which exits 1 in proot and GTK aborts (xfce4-panel).
nh-x11 installs bin/bwrap-proot as /usr/local/bin/bwrap and /usr/bin/bwrap (ELF saved as bwrap.real).
# manual (inside Kali):
sudo dpkg-divert --local --rename --divert /usr/bin/bwrap.real --add /usr/bin/bwrap
sudo install -m 755 ~/GrokHunter/bin/bwrap-proot /usr/bin/bwrapTermux:X11 GPU crashes: nh-x11 now defaults to legacy drawing. Disable with NH_X11_LEGACY=0.
- Install the Termux:X11 APK from official nightlies.
- Open Termux:X11 once.
- Run
nh-x11from Termux. - Wrong DE? Override:
NH_X11_SESSION=startlxde nh-x11(ori3,mate-session, …). - Fallback: VNC inside NetHunter (
vncserver :1).
nh-x11 reads ~/.config/grokhunter/x11-session (written when you pick a DE). Reset:
echo startxfce4 > ~/.config/grokhunter/x11-session
# or one-shot:
NH_X11_SESSION=startxfce4 nh-x11The installer patches a /tmp bind for X11. Re-run:
bash install.sh --with-x11export PATH="$HOME/.grok/bin:$HOME/.local/bin:$PATH"
# Installer does not edit .bashrc/.zshrc. Add:
# [[ -r ~/.grok/profile.sh ]] && source ~/.grok/profile.shRe-run install or open a new Termux session after install completes.
Kali and Termux often default to root <root@localhost.localdomain>. GitHub cannot attach that address to an account.
grokhunter git-identity # show
grokhunter git-identity set # gh, GH_TOKEN, or GitHub origin owner
# or explicitly:
git config --global user.name "Your GitHub name"
git config --global user.email "ID+LOGIN@users.noreply.github.com"Your noreply address is on https://github.com/settings/emails (format ID+LOGIN@users.noreply.github.com). Then grokhunter doctor should report a real identity.
Termux or Grok may inject SSL_CERT_FILE=/etc/tls/cert.pem. That path is often missing inside Kali, so curl/gh fail. Do not paste certificate PEM.
echo "SSL_CERT_FILE=${SSL_CERT_FILE:-unset}"
test -r /etc/ssl/certs/ca-certificates.crt && echo kali-ca-ok
ls -l /etc/tls/cert.pem 2>/dev/null || echo 'no /etc/tls/cert.pem'
date -u
grokhunter doctorSkill tls-lab · grokhunter tls. Overlay still writes the install-time /etc/tls compat symlink. If date is 1970, fix the Android clock first.
Inside nethunter:
sudo apt update
sudo apt install -y build-essential git python3 python3-pipCommon on current Kali: Python 3.13 + missing python3-venv.
aider-chat needs Python <3.13. Use the shared installer (uv + 3.12):
bash ~/GrokHunter/scripts/install_aider.sh
# or
bash ~/GrokHunter/install.sh --overlay-only --with-aiderManual upstream path:
curl -LsSf https://aider.chat/install.sh | sh
export PATH="$HOME/.local/bin:$PATH"
aider --versionSee EDITORS.md.
Warning only — the coding lab still works. Termux host Android often has no /etc/os-release; Kali proot should have /etc/os-release → /usr/lib/os-release.
Doctor also looks at /usr/lib/os-release and $PREFIX/etc/os-release. Inside Kali:
ls -l /etc/os-release /usr/lib/os-releaseIf both are missing, identification is skipped; Grok / PATH checks are the ones that matter.
Skill net-lab · grokhunter net. CA / SSL_CERT_FILE stays skill tls-lab.
That line is a warning, not a hard fail. Pair-programming still works offline.
Doctor probes https://api.x.ai/v1/models (then https://x.ai). HTTP 401 / 403 counts as reachable — Cloudflare often challenges curl on the marketing site, and the API returns 401 without a key.
Only treat it as a real outage when the probe gets no HTTP status (000 / timeout):
curl -sS -o /dev/null -w '%{http_code}\n' --max-time 5 https://api.x.ai/v1/models
# 401 = online (no key). 000 = no route / DNS / TLS failed.If DNS is empty, see below. Otherwise: phone data/Wi-Fi, VPN, or wait; the lab is still OK for local coding.
Rootless NetHunter normally has a working /etc/resolv.conf. If nameservers are empty, copy host DNS or set:
echo "nameserver 1.1.1.1" | sudo tee /etc/resolv.conf(Use carefully; some environments manage this automatically.)
grokhunter doctorand note ✗ lines- Re-run
bash install.shwith the flags you need - Open an issue: https://github.com/FineComputer14451/GrokHunter/issues
Include: Android version, arch (uname -m), doctor output (redact keys).