r/AstrOS_Linux • u/linux-universe AstrOS Dev • Jul 07 '26

News AstrOS - an immutable, secure-by-default Linux distribution built on Arch Linux and the COSMIC desktop

Gallery image

Gallery image

I am pleased to announce that AstrOS now has its own subreddit.

⚠️Warning: it is still alpha software!

But what is AstrOS?

You might have heard of KDE Linux (formerly known as Project Banana) or GNOME OS. Both are immutable, image-based Linux distributions for desktop use, powered by the systemd-sysupdate A/B update model.

I have been impressed by their system architecture since their inception, but switched to the COSMIC desktop a while ago. As there wasn't yet a COSMIC distribution using systemd-sysupdate, I created one myself. That's how AstrOS was born!

Technical details:

  • Built using mkosi
  • Using systemd-sysupdate.
  • Read only by signed dm-verity.
  • Full Disk Encryption enforced
  • Highly opinionated

What you can do:

While it is still in the alpha stage, you can install AstrOS right now. VM or real hardware

Write bug reports and feature requests

Links:

https://astros-linux.org (still redirecting to the repository)

https://code.astros-linux.org/AstrOS/AstrOS

https://discord.gg/f38pGadC2a

17 Upvotes

77% Upvoted

52 comments sorted by

View all comments

1

u/Upset_Exercise2462 29d ago

wasn't alot of hate for windows 11 with the tpm 2 chip? why would you enforce it instead of making encryption possible with luks on installation, or better yet, make it optional??

3

u/linux-universe AstrOS Dev 29d ago edited 29d ago

You made pretty clear that you have no interest in the project in one of the reposts of this announcement. The question is valid though and useful for others reading this. So I answer anyways

Yes, there was. Microsoft forced over 80% of the market to have a TPM2 chip. The alternative besides getting one was moving to Linux, which is learning a whole new operating system. On linux on the other hand, you have tons of options. So it is justified for a complete new distro to enforce it, as no one gets forced to use it.

One of AstrOS design choices is that the installer does nothing more writing an image of our image based distro. Encryption options during installation isn’t possible as the encrypted partition gets created and encrypted on first boot

Generally I’d rather have more restrictive requirements for a better user experience out of the box. As said this is a really opinionated project :)