Skip to content

x0ne OS

Contents

x0ne OS / Handbook

The x0ne OS Handbook

One task per page, exact commands, a way to verify and a way to undo. It documents what works today, and marks the rest as planned.

Status: built and tested on 2026-10-12. No public release yet.

Where to start

By topic

Start here

Introduction and conventions: What x0ne OS is, what exists today, and how to read this handbook.
Getting x0ne OS: Download, then verify the signature before you use anything.

Run x0ne OS

Run as a microVM: QEMU microvm and Firecracker: a full kernel, login in 0.64 s under Firecracker (measured).
Run the container image: x0ne-os:base for CI pipelines and test labs.
Run the VM image: The UEFI qcow2 under QEMU with OVMF.
Run from a USB stick: The live ISO on a USB stick: BIOS or UEFI, Secure Boot on or off.
First boot and your account: No default account: create yours, or pass credentials.

Packages

Install on an existing Debian: Add the signed repository and pick metapackages.
Backports: trixie-backports, pinned one package at a time.
Metapackages reference: Every x0ne-* package and its state.

AI

On-premise AI: x0ne Engine, the model store, and benchmarks.
GPUs: NVIDIA and AMD: where a GPU can be used, and how.
Confidential computing and attestation: Confidential VMs, GPU CC, published measurements, attestation.

Cloud and security

Cloud images: OVHcloud and Scaleway first, then Hetzner, Google Cloud, AWS.
Security model: Keys stay with humans. No default account. No open port.
Hardening: What is hardened, how to verify it on your machine, and the limits.

Project

Maintained by agents: How agents work on x0ne OS, and where humans decide.
Building x0ne OS from source: The make targets.