Get it
Build it, then install it.
anonymOS is built from source into a single bootable install ISO,
hos-install.iso. There is no hosted download binary — you
build the image yourself. If you want the source and don't have access yet, ask in the
community channels below; the source is available on request.
1. Get the source
The whole OS — kernel, userland, installer and build scripts — lives in one
repository. A public release location is not yet published; until then the source is
available on request through the community channels. Each clone runs
scripts/fill-vendored-sources.sh once to fill the vendored toolchains.
2. Build the ISO
No toolchain on your host? ./build-in-docker.sh runs the whole build in a
container and hands back dist/hos-install.iso (hours the first time, cached
after). With a native toolchain (Ubuntu 24.04 / clang 18 / ldc2), just make
produces the kernel, userland and ISO; make iso rebuilds just the image.
3. Boot & install
Boot the ISO in QEMU/KVM or VirtualBox (./qemu-run.sh, or the VirtualBox
recipe in the project docs). The native installer walks you through disk, encryption, boot
integrity and the firewall VM, and writes nothing until you confirm on the Summary page.
Real-hardware (Framework 13) bring-up is still being verified.
System requirements
For the live/installer image and VMs. These come straight from the project's requirements, not guesswork.
Firmware
UEFI only.
CPU
x86-64 with x2APIC; 4 vCPUs recommended for software rendering. AES-NI recommended; VT-x required for the firewall VM.
RAM
4 GB minimum, 6 GB recommended for the live/installer system.
Disk
20 GB minimum, 40 GB+ recommended (the firewall VM takes 4 GiB of the object store).
Graphics
128 MB VRAM (software-rendered desktop via Mesa llvmpipe).
Updates & the release channel
anonymOS is an immutable system. /usr is read-only and verified; /etc
is an overlay. Plain installs carry two system slots behind a UEFI A/B arbiter — a
boot-state sector with retries and automatic rollback, so a bad update falls
back to the known-good slot. Updates themselves are whole-image .hosupd units,
verified with Ed25519 against a pinned key before they are applied.
In development: A/B updates for encrypted installs, and a signed release channel delivered over the AXON anonymous overlay network, are still being built. Today's verified path is a fresh build-and-install of the ISO.
Questions, or want the source?
The community is on Discord and IRC. That's also the place to ask for source access while there's no public release.