Debian underneath Coming
A small system based on Debian 13, built from a recipe kept in version control, so the same recipe gives the same system.
Ghalixy OS Coming
Ghalixy OS is a ready-made system for a Ghalixy server. The aim is one signed image that installs the same way on every kind of machine, updates itself safely, and keeps your data encrypted. It is not available yet, and this page gives no dates.
What it is
A small system based on Debian 13, built from a recipe kept in version control, so the same recipe gives the same system.
The disk that holds your data is encrypted, and opened by the machine's own security chip (TPM 2.0) so it starts without a password and a stolen disk can't be read.
An update goes to a second copy of the system and is tried once. If it doesn't start, the machine goes back to the one that worked. Updates are signed, and the system is checked at boot with Secure Boot.
Setup is meant to need no terminal: a phone or a browser, and a recovery card shown once, to keep or print.
Ghalixy OS has a site of its own: os.ghalixy.com, with the install steps, hardware and security in full.
Machines need UEFI with Secure Boot and TPM 2.0. Older BIOS-only machines run Ghalixy Server instead (below).
Install editions
Every edition comes from the same build, and runs the same Ghalixy underneath.
For a new machine or an empty disk. Start from the USB stick, choose the disk, scan a code with your phone, and the full system, with encrypted data and safe updates, is set up.
For a server that already runs Ubuntu or Debian. One command fetches the installer and checks its signature before it runs it. The same Ghalixy and the same signed updates, on your own system.
For a Windows 10 or 11 PC: one installer that sets Ghalixy up in a WSL2 system built from the same image.
Ready-made disk images for homelab and office virtualisation, such as Proxmox, KVM, VMware and VirtualBox.
Today, a Ghalixy server is installed by us, as part of setup for an office.
Read next
The security of the system is on Security and privacy. What the server does is on the home page.