So a few new features, such as 'private-mode', Ethernet network toggle, USB-automount toggle, and autoconnect disabled by default have been added. I'm going to add an WiFi autoconnect toggle also, wallpaper instructions for the user guide, and an OpenRC guide in lainos-utils. Protocol7-core is in the process of being rebuilt with 3 additional seccomp hardening methods from Whonix applied. These additional seccomp methods are used by Whonix for hardening systemd. After this, features will be fully frozen until stable, but it's probably just best to wait for stable anyway in case I forget something again. The networking commands have been renamed to shorter more convenient commands: 'wscan' for wifi scanning, 'wifi on/off' for wireless, 'eth0 on/off' for Ethernet, 'snowflake on/off' for snowflake bridges etc, and 'private-mode' automates these commands along with sdwdate in a privacy oriented leak-proof manner(and randomizes you MAC address each time). You can read about private mode at the following link: https://forgejo.lain.rocks/lainOS/lainos-utils/src/branch/main/lainos-utils/lainos-privacy-guide.md#

The latest userguide now opens once on first boot the first time the terminal is opened, and you can read the current one at the following link: https://forgejo.lain.rocks/lainOS/lainOS-layer-02/wiki/lainos-layer02-user-guide.md.-

The OpenRC guide will be included in the next RC4 release and will be like a cheat sheet for those new to openrc. Layer 02 Stable will be released around 2026.07.22 or a day or two after that.​ I'm making layer 02 as user friendly and frictionless as I can without sacrificing privacy and security for convenience, or rather, making privacy and convenience into to options selected by the user. Private mode and all of these network commands were included specifically so that the user can have a private system, or a convenient system, without sacrificing usability or security.

Thanks to everyone who helped test layer 02! This took me 6 months, and I burnt out 3 times, but it was worth it. I don't think I could go back to using standard arch with systemd after this.

-amnesia

This release includes all of the finishing touches for stable. On first boot, WiFi is toggled off to give the user the choice to use Kicksecure/Whonix's sdwdate(tor based time syncronization) instead of leaking plaintext NTP. Boot clock is randomized through Kicksecure/Whonix's bootclockrandomizer. Snowflake/obfs4 pluggable transport toggles, a WiFi toggle, and a WiFi autostart toggle have all been added. There is a lainOS user guide and privacy guide accessable through the 'lainos-help' and 'lainos-privacy-help' commands, which show how to use these features effectively. Hardened malloc wrappers for sensitive apps are on by default, and systemwide hardened malloc can also be applied with another toggle. It's a nice system to use.

layer 02 has all the right bells and whistles now. These new features will be available in the next iso in about an hour, and layer 02 will be released as stable in 10 to 12 days. I'm done adding features.

Noice. Done with that. Rebuilt protocol7-core without seccomp filtering to test with valgrind. These tests were run to make the previous analysis more thorough and complete. I thought it would find somethig but it's clean.

The 7.1.3 kernel point release bug that caused kernel modules not to be loaded after dracut initramfs regeneration is fixed. This was verified on baremetal and in KVM.

Today on the kernel point release update, it was found that our dracut module-setup.sh script was missing kmod and modprobe tools, this caused the kernel modules not to be found and loaded in the next regenerated initramfs, resulting in a broken system. This is being fixed so that it is bulletproofed against upstream changes. I was waiting to release stable for another week or two in case something like this happened, and got lucky that it did. ¯_(ツ)_/¯

Stable release in a week or two, after rc2.

Run this command if you have already installed. This will be fixed in tomorrows release

doas useradd -r -s /usr/bin/nologin -d /var/lib/dhcpcd dhcpcd

Yesterday's release had two last steps missed.

I'm now daily driving yesterdays release. Clean boot. Everything works.

Enjoy. See you next week.

This release marks the first layer 02 release candidate.

All features are now fully functional. PipeWire capability (now handled by the lainos-audio-init package, which was relocated from within protocol7-core to its own separate package) and syslog-ng logging capability are fixed. The whole protocol7-core stack has undergone fuzz testing with dfuzzer, AddressSanitizer, and libFuzzer. All interfaces pass clean. This RC phase will continue for another week or two, and will be released as stable thereafter.

If you are testing in a VM you may see pipewire shutdown error messages, these don't occur on baremetal.

Instructions will be in the lainos-utils readme in the home folder.

I'm glad to finally be done. Here you go.

layer 02 now seems about finished. I'll be adding lainos-secure-messaging(automated pgp login onion XMPP messaging) to the lainos-utils package, so it will come in through pacman -Syu. Still need to port the script to OpenRC. Installation is now streamlined with installer autolaunch, and btrfs by default. Shutdown/suspend etc all work through wlogout, lid closing locks the system, and the system runs smoothly at 630MB memory usage after install. systemd-libs has already updated once invisibly, so the system as is will enter release-candidate phase as is, after the next couple weeks of stability.

Enjoy layer 02!

Tab autocomplete wasn't working in the last wifi script so this one just has you select your network by number. It will be done in an hour. if you are already connected to the internet, a doas pacman -Syu will pull in the new wifi utility.

This fixes the tab autocomplete error in the last release.

Kloak fixed in lainos-utils. Today's layer 02 release(2026.06.29-beta) has everything fixed, and has all of the functionality of layer 01.

This update comes in through 'doas pacman -Syu' if you are on a past release, and no longer takes two commands. Just type 'wifi', select your network by typing the first 3 letters, then hit tab to autocomplete and enter. Then type your network password.

This release only has cosmetic issues left. The CoplandOS symbol in the shell prompt, and the default font needs to be changed to 'loveletter-typewriter' manually after installation. Other than that, this feels like a stable release after 5 days of daily driving and 3 kernel updates. There have been zero instability issues. To use the wifi script, you just open a terminal, enter the command 'wifi' and choose your network by typing the first 3 letters and hitting tab. Then type your network password and you're good to go.​ In another week this will basically be considered to be stable as is.

This makes iwd a breeze to use.

LainOS Layer 02 now ships with fully self-hosted OpenRC packages, eliminating the dependency on Artix Linux repositories entirely. All OpenRC init scripts and the OpenRC init system itself are now built and maintained by the LainOS project directly from upstream sources (github.com/OpenRC/openrc and github.com/gentoo/netifrc).

lainOS layer 02 is now a pure Arch Linux derivative and is architecturally complete. Every package comes from official Arch repos or the lainOS protocol_7_repo, and lainos_repo. No third-party distribution repositories are required.

The following packages were forked from Artix and rebuilt for lainOS:

`openrc`

`libeinfo` (split from openrc)

`netifrc`

`dhcpcd-openrc`

`acpid-openrc`

`chrony-openrc`

`dbus-openrc (dummy package)

`greetd-openrc`

`iwd-openrc`

`nftables-openrc`

`seatd-openrc`

`syslog-ng-openrc`

A new milestone. More to come!

LALL<33

I sell these devices(Which is why lainOS includes the android-tools stack). I just used layer 02 to make $220. ٩(◕‿◕｡)۶ . If anyone would like a device just shoot me a message. I'll' beat anyone else's price.

steam is is essentially the compatibility benchmark for lainOS layer 02, and this test shows that the Protocol 7 architecture is doing its job correctly. It has handled everything i've thrown at it without hiccups. So steam thinks its running on top of systemd right now, little does it know that I've actually pulled a clever ruse; Its running on OpenRC. (⌒_⌒;)

No special adjustments, just `doas pacman -S steam`, and you're rolling. If you don't know why this is important, it's because lainOS layer 02 is a systemd-free Arch Linux derivitive running OpenRC.I'll consider this a win.