Download NubiferOS

Get NubiferOS Alpha and start managing your cloud accounts securely

The secure cloud engineer's workstation with workspace isolation, encrypted credentials, and 50+ cloud tools available.

Choose Your Edition

NubiferOS 0.1.6 Alpha
July 20, 2026 v0.1.6

NubiferOS

Core secure workstation for cloud engineers

Workspace isolation Encrypted credentials (GPG + pass) 50+ cloud tools pre-installed LUKS full disk encryption Read-only mode Security dashboard NubiferAI available via optional package
Download ISO Checksum

NubiferOS Container

Cloud tools in a Docker container — no install required

All NubiferOS cloud tools Docker / Podman compatible Lightweight and portable CI/CD pipeline ready No desktop environment
docker pull ghcr.io/nubiferos/nubiferos:latest
Pull Container

NubiferOS + TPM

Everything in Base plus TPM 2.0 secure boot

Everything in Base TPM 2.0 boot LUKS2 + Argon2id Secure Boot enforcement
Coming Soon
Release Notes

NubiferOS 0.1.6

A security-focused Linux distribution for cloud engineers.

Changes

  • feat: 'current' release type - ship the tested staging build, no bump
  • feat: Component Tests workflow - python, shell, desktop validation
  • fix: spec-valid desktop entries; clean boot-test service post-install
  • fix: Calamares fatal YAML error in branding.desc crashed the installer
  • feat: boot-test harness lingers post-pass to surface flake diagnostics
  • fix: xorriso fallback for boot-test marker detection
  • feat: boot-test markers self-diagnose early Calamares exit
  • docs: reference modern-cloud-auth Phase 2 spec in main task list
  • fix: restore getty autologin - it is the session ignition, not a race
  • fix: remove second getty autologin source and xinitrc reboot bomb
  • fix: remove console-autologin reboot race that reset live sessions
  • feat: boot-test harness logs QMP guest events for diagnostics
  • fix: reject unimplemented db/ssh credential types in nubifer-creds
  • fix: skip fail2ban in live installer environment
  • fix: run Calamares fullscreen via branding windowSize
  • fix: boot-test harness checks markers before QEMU liveness
  • fix: stop CI from clobbering curated Calamares configs before builds
  • fix: boot-test markers gate on Calamares, not graphical.target
  • fix: stamp real version into installer, boot splash, and system config
  • feat: automated QEMU boot testing for ISO builds
  • fix: S3 build cleanup was deleting the newest ISOs, not the oldest
  • fix: implement 'nubifer-creds get -t api' (was a silent no-op)
  • docs: replace fictional nubifer-creds commands with real CLI throughout
  • docs: rewrite credential-manager README/QUICKSTART to match shipped CLI
  • fix: require root for 'readonly --disable', closing rw sudo-gate bypass
  • docs: index new guides; mark tasks 8, 10, 11.4, 11.5 complete in spec
  • docs: add user guides for workspaces, credentials, quick start (task 11.5)
  • docs: add security best practices and incident response guides (task 11.4)
  • feat: add Resource Viewer (task 8) - GTK3 AWS resource browser
  • chore: ignore Python bytecode globally, untrack stale .pyc

Download & Verify

# Verify checksum
sha256sum -c SHA256SUMS

# Verify signature (optional)
gpg --import nubiferos-signing-key.pub
gpg --verify *.iso.asc *.iso

Checksums

See SHA256SUMS attached to this release.

Commit: a5596ff Build: Actions

All Downloads: NubiferOS-0.1.6-20260719-68638d8-amd64.iso NubiferOS-0.1.6-20260719-68638d8-amd64.iso.asc nubiferos-signing-key.pub SHA256SUMS

What's Included

ComponentDetails
Base SystemDebian 12 (Bookworm)
DesktopGNOME 43 with Wayland
EncryptionLUKS full disk encryption (mandatory)
Credentialspass + GPG + GNOME Keyring
IsolationFirejail workspace namespaces
Cloud Tools50+ tools available (AWS, Azure, GCP, Terraform, kubectl, etc.)
NubiferAIOptional package — install via sudo apt install nubifer-ai

System Requirements

RequirementMinimumRecommended
Architecture64-bit (x86_64)64-bit (x86_64)
RAM4 GB8 GB+
Disk Space25 GB50 GB+
FirmwareUEFIUEFI

Container

Run NubiferOS cloud tools without a full installation:

docker pull ghcr.io/nubiferos/nubiferos:latest
docker run -it ghcr.io/nubiferos/nubiferos

The container includes all NubiferOS cloud tools and works with Docker or Podman. Ideal for CI/CD pipelines or quick access to the toolset.

VM Images

NubiferOS works in VMware Workstation and VirtualBox. UEFI mode must be enabled.

PlatformInstructions
VMware WorkstationVM Settings → Options → Advanced → Firmware: UEFI
VirtualBoxSettings → System → Enable EFI (special OSes only)

Use the same ISO above for VM installations.

Verification

Always verify your download before installation.

Verify Checksum

cd ~/Downloads
sha256sum -c SHA256SUMS

Expected output:

NubiferOS-0.1.4-20260312-8d25dfd-amd64.iso: OK

Verify GPG Signature (Optional)

# Import the NubiferOS signing key
gpg --import nubiferos-signing-key.pub

# Verify signature
gpg --verify *.iso.asc *.iso

Installation

  1. Download the ISO and verify the checksum
  2. Create bootable USB using Balena Etcher, Rufus, or dd
  3. Boot from USB (UEFI mode required)
  4. Follow the installer — encryption is mandatory
  5. Reboot and enter your LUKS passphrase

Full Installation Guide →

Previous Releases

VersionRelease DateStatusNotes
0.1.2March 2026CurrentAudit trail viewer, security dashboard, APT repo signing, bug fixes
0.1.1March 2026PreviousCI/CD pipeline, container image, OTA updates

Coming Soon

VersionTargetHighlights
1.5 "Stratus" (Beta)Q2 2026Single-password boot, YubiKey support
2.0 "Cumulus"Q3-Q4 2026TPM support, team features

View Full Roadmap →

Source Code

NubiferOS is open source under GPL-3.0.

ResourceLink
GitHub Repositorygithub.com/nubiferos/nubiferos
Release NotesGitHub Releases
Report IssuesGitHub Issues
Build ScriptsBuild Documentation

Learn More

TopicLink
FeaturesWhat's included in NubiferOS
Why NubiferOS?How we compare to alternatives
SecuritySecurity architecture
NubiferAIAI-native cloud operations
Built with AIHow we built NubiferOS