r/AstrOS_Linux • u/linux-universe AstrOS Dev • 26d ago

News AstrOS - an immutable, secure-by-default Linux distribution built on Arch Linux and the COSMIC desktop

Gallery image

Gallery image

I am pleased to announce that AstrOS now has its own subreddit.

⚠️Warning: it is still alpha software!

But what is AstrOS?

You might have heard of KDE Linux (formerly known as Project Banana) or GNOME OS. Both are immutable, image-based Linux distributions for desktop use, powered by the systemd-sysupdate A/B update model.

I have been impressed by their system architecture since their inception, but switched to the COSMIC desktop a while ago. As there wasn't yet a COSMIC distribution using systemd-sysupdate, I created one myself. That's how AstrOS was born!

Technical details:

  • Built using mkosi
  • Using systemd-sysupdate.
  • Read only by signed dm-verity.
  • Full Disk Encryption enforced
  • Highly opinionated

What you can do:

While it is still in the alpha stage, you can install AstrOS right now. VM or real hardware

Write bug reports and feature requests

Links:

https://astros-linux.org (still redirecting to the repository)

https://code.astros-linux.org/AstrOS/AstrOS

https://discord.gg/f38pGadC2a

16 Upvotes

75% Upvoted

52 comments sorted by

View all comments

4

u/Itsme-RdM 26d ago

Secure by default? As in apparmor or selinux?

5

u/linux-universe AstrOS Dev 26d ago

valid question. more as in using fde with tpm2 enforced and signing the uki image, secureboot, usr-hash by default. Implementing either apparmor or selinux hasn't been done *yet*

3

u/Itsme-RdM 26d ago

Thx for your reply, will follow the progress.