Immutable base
/usr ships as a signed, read-only dm-verity image. The base system can’t be
altered — not by you, not by anything else.

Immutable base
/usr ships as a signed, read-only dm-verity image. The base system can’t be
altered — not by you, not by anything else.
A/B updates
systemd-sysupdate fetches and applies signed image updates atomically, keeping
the previous version around for rollback.
Verified boot
Unified Kernel Images are signed and measured, sealed against your TPM chip (PCR11).
Full-disk encryption
The btrfs root holding /home and /var is encrypted and unlocked
automatically via TPM2.
COSMIC desktop
The modern Rust-based desktop from System76, tightly integrated
Container ready
Install GUI-Apps using flatpak and use distrobox for running
terminal or non flatpak supported software. System extensions
for nvidia drivers or other system packages.
Optional Gaming Mode
AstrOS is a strongly opinionated project. It’s for people who want a secure, encrypted, signed operating system that just works with minimal effort.
A good fit if
Look elsewhere if
/usrQuestions, bug reports, and patches are all welcome.
Discord
Matrix
GitHub (Mirror)
Forgejo