lainOS/lainOS-layer-02
lainOS/lainOS-layer-02
4
1
Fork 0
Code Issues Pull requests Projects Releases 28 Packages Wiki Activity Actions
28 releases 29 tags
  • 2026.07.13 deb3df495b

    2026.07.13-rc4 layer 02: Protocol 7 Pre-release

    amnesia released this 2026-07-13 10:47:13 +02:00 | 30 commits to main since this release

    ####INSTALLATION####

    lainOS layer 02 user guide(access with lainos-help in the terminal.)
    lainOS Privacy Guide for Sensitive Work(access with lainos-privacy-help in the terminal)
    protocol7-core-Security Analysis(new valgrind and static analysis sections~zero mem leaks detected)

    lainOS layer 02 ~ 2026.07.13-rc4 Changelog

    Fourth release candidate. FEATURES ARE NOW FROZEN UNTIL STABLE RELEASE.
    New automated privacy-mode tool, command renames for consistency, and more convenient wifi commands.

    This RC phase will continue for another week or two, and layer 02 will be released as stable thereafter.

    • ani-cli updated and CoplandOS shell prompt glyph fixed.
    • Volume keys work through wpctl

    The lainOS-layer02-user-guide now appears on first boot the first time you open the terminal. You must Press Ctrl+C to close it.

    First boot: getting online

    WiFi is off by default. To connect:

    wifi on   # Activates wireless interface
wscan   # Scans for networks and asks for password

    If you want wifi to auto start on subsequent boots, run wifi-autostart enable.

    To toggle on USB automounting across boots, use usb-automount enable.

    ⚠️ Wifi Commands

    Three commands were renamed for a more consistent naming scheme, these are the commands now:

    | wscan | Scan for networks and connect |
    | wifi on/off | Turn the WiFi radio on/off |
    | eth0 on/off | Turn the wired interface on/off |

    wifi and eth0 are now a consistent pair (both take on|off|status),
    with wscan as the separate, explicit connect step.

    New Tool ~ private-mode

    One-command automation of the full sensitive-work network sequence from
    the Privacy Guide.

    private-mode on       # forces WiFi/eth0 off, confirms the network is
                       # actually down, enables Snowflake + sdwdate,
                       # then brings WiFi/eth0 back up.
                      
private-mode off       # forces WiFi/eth0 off, confirms the network is
                       # actually down, then disables sdwdate(starting chrony) and stops Tor
                      
private-mode status    # shows current state of Snowflake, sdwdate,
                        # WiFi, and eth0 together
    • Single password prompt per direction, not per sub-step.
    • Enforces network-down-before-Tor/sdwdate-start on on, and
      network-down-before-sdwdate-disable on off ~ closing a plaintext-leak
      window that exists if either direction is done manually out of order.
    • Does not replace the manual verification steps in the Privacy Guide
      (nyx, lainos-sdwdate status) ~ private-mode automates the
      mechanical ordering, not the judgment call of confirming Tor actually
      bootstrapped and sdwdate actually synced.

    Read the Privacy Guide in full before relying on private-mode for
    anything that matters    . The guide opens with a warning to this effect.

    lainos-privacy-help

    WiFi Changes

    wscan no longer lets networks silently reconnect. Every successful
    connection now has AutoConnect disabled immediately afterward. The
    passphrase stays saved (so reconnecting later via wscan won't re-prompt
    for it), but iwd will never reconnect to a network on its own just
    because it's in range and the radio is up ~ every connection is something
    you deliberately chose.

    WiFi (iwd) does not start automatically at boot by default ~
    this was already true as of rc3 and remains unchanged. Use wifi-autostart enable to activate WiFi autostart on subsequent boots if you want that
    convenience back.

    wifi on           # power on the WiFi radio (was: wifi-toggle on)
wscan             # scan and connect
wifi-autostart enable   # enable wifi autostart(wifi starts automatically on each boot)

    New in this cycle ~ Ethernet Control

    eth0 (renamed from ethernet) brings the wired interface fully up or
    down, same on/off/status model as wifi:

    eth0 on
eth0 off
eth0 status

    While down, no DHCP request can fire even if a cable is plugged in ~ same
    privacy rationale as WiFi being off by default.

    Documentation

    • User guide: new "Ethernet" and "private-mode" sections; WiFi section
      updated for the wifi/wscan rename and the new AutoConnect
      behavior; command references updated throughout for all three renames.
    • New user guide is now shown automatically the first time a new user
      opens a terminal on a fresh install, so it can't be missed ~ shown
      exactly once per user via a marker file, never again after that.

    Known issues
    • Some Nvidia cards have trouble with Sway.

    Get connected
    • LainOS Matrix Chat: https://matrix.to/#/#lainos:catgirl.cloud
    • Discord Server (Discord violates your privacy by spying on you): https://discord.gg/JdMQvkHqwH
    • Onion XMPP Server and Chat: private-chat-c75bebbc-50f3-447d-811f-41f83de11811@conference.glcuf4hcwbm3lt6grg7jfwwus7sqpuojozfsnbzzcsf7vbm2jcfqckid.onion + full setup guide at https://lain.rocks (and our anon community lainboard)
    • Website: https://lainos.net
    • Onion Service: http://lainos3cbhrlsc4qyzu6o7jwhvnvakdtohcc46ds5aohdagakddftbid.onion
    • irc.libera.chat ~ #LainOS

    LALL<3

    Downloads