Immutable base
/usr ships as a signed, read-only dm-verity image. The base system can’t be
altered — not by you, not by anything else.

Immutable base
/usr ships as a signed, read-only dm-verity image. The base system can’t be
altered — not by you, not by anything else.
A/B updates
systemd-sysupdate fetches and applies signed image updates atomically, keeping
the previous version around for rollback.
Verified boot
Unified Kernel Images are signed and measured, sealed against your TPM chip (PCR11+7).
Full-disk encryption
The btrfs root holding /home and /var is encrypted and unlocked
automatically via TPM2.
COSMIC desktop
The modern Rust-based desktop from System76, tightly integrated
Container ready
Install GUI-Apps using flatpak and use distrobox for running
terminal or non flatpak supported software. System extensions
for nvidia drivers or other system packages.
Optional Gaming Mode
AstrOS is a strongly opinionated project. It’s for people who want a secure, encrypted, signed operating system that just works with minimal effort.
A good fit if
Look elsewhere if
/usrQuestions, bug reports, and patches are all welcome.
Discord
Matrix
Ko-fi (Support)
GitHub (Mirror)
Forgejo