lainOS/lainOS-layer-02
lainOS/lainOS-layer-02
4
1
Fork 0
Code Issues Pull requests Projects Releases 28 Packages Wiki Activity Actions
28 releases 29 tags
  • 2026.07.08-rc3 6e795c7c96

    2026.07.08-rc3 layer 02: Protocol 7 Pre-release

    amnesia released this 2026-07-09 02:57:13 +02:00 | 32 commits to main since this release

    ####INSTALLATION####

    lainOS layer 02 user guide(access with 'lainos-help' in the terminal.)

    lainOS layer 02 ~ RC3 Changelog

    Third release candidate to fix issues in second release candidate

    All interfaces pass clean. This RC phase will continue for another week or two, and layer 02 will be released as stable thereafter.

    protocol7-core-Security Analysis(new valgrind section~zero mem leaks detected)

    Fixes were verified on baremetal and in KVM.

    lainos-utils

    • Added lainos-hardened-malloc ~ toggle script for system-wide hardened_malloc (enable/disable/status via LD_PRELOAD in /etc/environment).
    • Added lainos-help ~ opens the lainOS layer 02 user guide with glow -p.

    Critical Fixes

    • Kernel 7.1.3 initramfs regeneration regression fixed. Verified on baremetal 35eudev-coldplug dracut module now explicitly includes kmod/modprobe in the initramfs (previously relied on incidental staging that broke under kernel 7.1.3, causing i915/WiFi kernel modules to fail to load on the machine). Confirmed working via KVM guest kernel upgrade test (7.1.2 → 7.1.3), all modules loading correctly.

    Logging

    • syslog-ng now fully configured in /etc/syslog-ng.conf. Previously only daemon.log and everything.log were active; /var/log/messages itself was never written despite the config's stated purpose. Now enabled: messages, auth.log, cron.log, debug.log, errors.log, iptables.log, kernel.log, mail.log, messages.log, syslog.log, plus emergency-level broadcast to console.
    • Fixed Error resolving group; group='log' ~ the log group referenced by syslog-ng's config was never created on install. groupadd -r log added to shellprocess-final.

    KVM / Networking

    • Fixed KVM guest networking (DHCP worked, but guests could not reach the network). Root cause: the base nftables.conf forward chain had policy drop with zero rules, silently discarding all forwarded traffic before it ever reached libvirt's own NAT/forward rules.
    • New lainos-kvm-enable-firewall script, shipped with the lainos-kvm package. Adds the necessary virbr0 forward-accept rules to nftables.conf. This is opt-in (not applied automatically at install) to preserve the default-drop security posture for systems not using KVM. Run manually after installing lainos-kvm.

    Minor Fixes

    • tor system user shell corrected from /usr/bin/nologin (does not exist on this system) to /usr/bin/false.
    • libvirt-qemu system user shell corrected the same way, in lainos-kvm.install.

    Known issues
    • Some Nvidia cards have trouble with Sway (Follow Nvidia instructions above^^).

    Get connected
    • LainOS Matrix Chat: https://matrix.to/#/#lainos:catgirl.cloud
    • Discord Server (Discord violates your privacy by spying on you): https://discord.gg/JdMQvkHqwH
    • Onion XMPP Server and Chat: private-chat-c75bebbc-50f3-447d-811f-41f83de11811@conference.glcuf4hcwbm3lt6grg7jfwwus7sqpuojozfsnbzzcsf7vbm2jcfqckid.onion + full setup guide at https://lain.rocks (and our anon community lainboard)
    • Website: https://lainos.net
    • Onion Service: http://lainos3cbhrlsc4qyzu6o7jwhvnvakdtohcc46ds5aohdagakddftbid.onion
    • irc.libera.chat ~ #LainOS

    LALL<3

    Downloads