Installation

Requirements

• x86-64 machine with UEFI firmware
• A TPM 2.0 module
• 30GB disk space (both /usr partitions need at least 5GB)
• 8GB USB stick for installation

Download

Grab the latest image:

AstrOS-installer_latest_x86-64.raw.zst

SHA256SUMS

Write it to a USB stick. We recommend caligula on Linux and USBImager on Windows.

caligula example (it decompresses the image for you):

caligula burn AstrOS-installer_latest_x86-64.raw.zst

Any other tool that writes a raw image works too. Remember to decompress the image.

dd example:

unzstd -c AstrOS-installer_latest_x86-64.raw.zst | sudo dd of=/dev/<your-disk> bs=4M conv=fsync status=progress

Install

1. Ensure that Secure Boot is in Setup Mode.

2. Boot the usb stick.

3. Select and confirm your disk to install to.

4. Done

Secure Boot

Caution

Depending on your hardware, enrolling Secure Boot keys can soft-brick your machine. Learn more on our Secure Boot page.

To enable Secure Boot, select one of the enrollment options before booting the system for the first time:

• Enroll Secure Boot keys: astros+microsoft recommended on physical hardware. Includes Microsoft’s certificates, which most device firmware relies on.
• Enroll Secure Boot keys: astros AstrOS keys only. For virtual machines, or hardware you have confirmed carries no Microsoft-signed firmware.

These entries only appear when your firmware is in Setup Mode.

If you do this after booting for the first time, it will break PCR7, which will require you to re-enroll the TPM2.

Remember to enable Secure Boot after enrolling the keys.

First Boot Setup

It is very important to save the recovery key. Your data will be lost if you don’t save it and the tpm fails to unlock your root partition!