Contents

x0ne OS / Handbook / Start here

Introduction and conventions

Status: built and tested on 2026-10-12. No public release yet.

x0ne OS is Debian 13 (trixie) plus one signed apt repository of metapackages. It targets AI security, cybersecurity and on-premise AI.

What exists today

The build produces the repository, a container image, a UEFI VM image, a microVM image, the live ISO and the installer ISO. Everything is built and tested in throwaway containers.

  • 9 metapackages, signed with a throwaway test key.
  • An OCI image x0ne-os:base, a bootable amd64 qcow2, a microVM image, a live ISO and an installer ISO.
  • Seven test suites: 287 tests pass, 11 are expected failures with a written reason, 3 are skipped (2026-10-12).

Nothing is published. The test key is not a release key.

Status lines

Every page starts with one status line. Read it first.

Works today (measured 2026-10-09). The steps were run on that date.

Planned — next. The page describes a target. Commands may change.

A planned page says next or later, in the order of the roadmap. Numbers marked target are goals, not results.

Prompts

A $ starts a command you type. Commands that need privileges use sudo. This handbook never asks for a root shell.

conventions
$ uname -r
6.12.111+deb13-cloud-amd64
# a comment, not typed

Indented lines without a prompt are output. Placeholders are written in capitals, like FILE.

Page anatomy

Each task page has the same parts: purpose, prerequisites, steps, expected output, how to verify, how to undo, and See also.

The text banner

The x0ne logo and a honeycomb, in plain text. It appears before login, at login, and in interactive bash shells. Set X0NE_NO_BANNER=1 to silence it. It never prints in scripts. works today

Measured 2026-10-12: in /etc/issue.d, in the login message and in interactive login shells. A non-login bash -i does not show it: Debian policy forbids editing /etc/bash.bashrc.

See also