Metapackages reference
Works today (measured 2026-10-12). States below are from the test results.
x0ne OS is Debian plus these metapackages. Each one is optional, except the keyring and x0ne-base.
| Package | What it brings | State |
|---|---|---|
| x0ne-archive-keyring | The key that signs the repository, in /usr/share/keyrings/. | real |
| x0ne-base | os-release, text banner, login message, first boot account, backports source, no-recommends apt policy. Depends on sudo. | real |
| x0ne-sec-net | nmap, tcpdump, wireshark-common, from Debian. The first x0ne-sec-*. | real |
| x0ne-agent | Rootless podman, git, jq, ripgrep, curl, python3, and an agent user with no sudo and no password login. | real |
| x0ne-ai-local | The local AI stack around x0ne Engine. Today: numpy and safetensors; ggml recommended, from backports. | partial |
| x0ne-ai-redteam | pipx, python3-venv, safetensors. garak and modelscan are not in Debian. | partial |
| x0ne-engine | x0ne Engine, the attested path: client and server. The server serves only inside a verified TEE. No binary yet. | placeholder |
| x0ne-splash | The boot splash: a Plymouth theme, default in the qcow2 image only. | real |
| x0ne-gpu-nvidia | NVIDIA driver and container toolkit. See GPUs. | not built |
Rules every package follows
- It depends only on packages that exist in Debian 13, or in the x0ne repository.
x0ne-basenever pulls an optional package.- Builds are reproducible: two builds give byte-identical
.debfiles. - Removing a package restores what it changed.
Proposed next
From the on-premise AI study, names not final: a model store, hardened inference services, a confidential VM guest kit, a cloud kit. Planned — later
How to verify
list what is installed
$ dpkg -l 'x0ne-*' $ apt-cache show x0ne-ai-local
How to undo
sudo apt purge PACKAGE. See Install on an existing Debian.