FAQ
What is Safe Mode?
Section titled “What is Safe Mode?”Safe mode starts your system with all system extensions disabled. In the worst-case scenario, where a system extension prevents your system from booting at all, safe mode lets you boot up and so you can disable the extension. In such cases, please report the extension responsible.
Why does AstrOS require a TPM2?
Section titled “Why does AstrOS require a TPM2?”Because the security model doesn’t work without one. /usr is signed and read-only, booted by signed, measured UKIs. The TPM is what checks that chain. Your disk key is sealed to the boot measurements (PCR11+7), so the system unlocks only if it booted exactly the images we signed.
How to enable Secure Boot?
Section titled “How to enable Secure Boot?”Take a look at: Secure Boot
What is the root password for the install image?
Section titled “What is the root password for the install image?”The password is AstrOS.
How do I dual boot?
Section titled “How do I dual boot?”You can’t officially. It may or may not be added in the future.
I have an nvidia gpu. Can I use AstrOS
Section titled “I have an nvidia gpu. Can I use AstrOS”You can install nvidia drivers as a system extension.
Make sure your nvidia gpu supports the open kernel modules.
How do I enable a firewall?
Section titled “How do I enable a firewall?”You can install firewalld as a system extension.
Is AstrOS the right distro for me?
Section titled “Is AstrOS the right distro for me?”AstrOS is a strongly opinionated project. Due to its image-based nature, it isn’t really for tinkerers. It is for those who want a secure, encrypted, and signed operating system that just works with minimal effort.
I can’t create a repository at your Forgejo instance
Section titled “I can’t create a repository at your Forgejo instance”We only allow AstrOS-related repositories on our instance. You can always fork existing repositories. If you want to open a completely new repository for your own AstrOS-related project, please contact us so that we can grant you the relevant permissions.
Is AstrOS vibecoded?
Section titled “Is AstrOS vibecoded?”No. AI can be useful for debugging or reviewing code written by humans, but it should not be used to write code on its own.
Contributions of poor quality or code that is obviously vibecoded will be rejected without further discussion.
What makes AstrOS different from Arch?
Section titled “What makes AstrOS different from Arch?”While AstrOS is built from Arch packages, it isn’t like the Arch you install and maintain yourself. It’s a finished image that we build, sign, and ship as a whole.
There is no pacman on the installed system. /usr is a read-only image protected
by dm-verity, so nothing can modify it. To add software, see Installing Software.
Updates are delivered as complete new /usr images and UKIs using systemd-sysupdate
with an A/B layout. We sign the dm-verity root hash of the /usr partition as well
as the UKIs, so your system only runs images we built.
In short, Arch gives you the pieces and lets you assemble them. AstrOS takes those pieces and ships them as one signed system.
Why is AstrOS based on Arch?
Section titled “Why is AstrOS based on Arch?”Arch gives us close-to-upstream, up-to-date packages without us having to build them from source. We prioritize having the latest systemd and COSMIC versions to deliver the best experience.
Can I use the Arch Wiki?
Section titled “Can I use the Arch Wiki?”For applications and general Linux topics, usually yes.
For anything involving installing system software, updating, or changing the base system, no. Follow the AstrOS docs instead, since those parts work differently. If something is missing, please let us know.
Why another distro?
Section titled “Why another distro?”Because there was a gap to fill. GNOME has GNOME OS and KDE has KDE Linux, but COSMIC didn’t have its own “particle” yet.