CustomOS3.1 OBSIDIAN
customos-installer
Text installer, also driven by the graphical wrapper. Every security opt-in defaults to No.
| # | Step | Default |
|---|---|---|
| 1 | Target disk | — |
| 2 | Confirm wipe (type YES) | — |
| 3 | Hostname, user, password (12+) | — |
| 4 | Timezone | UTC |
| 5 | LUKS2 passphrase ×2 | always encrypted |
| 6 | TPM2 sealing (only if /dev/tpmrm0) | No |
| 7 | /usr manifest + read-only mount | No |
| 8 | Block dm-verity of /usr | No |
| 9 | SSH server · Tor | No · No |
| 10 | Encrypted chat offer on first login | No |
| 11 | GRUB password | No |
| 12 | Signed UKI (amd64 + UEFI) | No |
| 13 | AI assistants offer on first login | No |
| 14 | Proceed | — |
[ OK ] GPT: bios_grub · /boot ext4 · root LUKS2
[ OK ] luksFormat aes-xts-plain64 512 · argon2id
[ OK ] squashfs copied from the verified live medium
[ OK ] SSH host keys regenerated for this machine
[ OK ] shim-signed + grub-efi-amd64-signed
[ .. ] update-initramfs · update-grub
(sample run)