Skip to content

Shadowfetch Linux 2.0.0 “Umbra”

Choose a tag to compare

View all tags
@ShadowfetchAI ShadowfetchAI released this 24 Jul 14:35
v2.0.0
ca87dd4

Download

shadowfetch-2.0.0-amd64.iso — 4,486,000,640 bytes (4.18 GiB)

sha256  0cbf9b90a4e561c57167cbac55d6fc4d02efc3dbd12a9c97c5034afc9fe6c671

The ISO is not attached to this release. A GitHub release asset is capped at 2 GiB and this
image is 2.09x that, so the image is served from the project's own storage and this release carries
the material you verify it with.

A .torrent is attached. It is web-seeded from the same URL, so it works with zero peers.

Note: the image is 191,033,345 bytes larger than FAT32 can hold in a single file. If your USB
stick is FAT32 the copy will fail with "file too large" — use exFAT, or write the ISO to the raw
device with dd/Rufus/balenaEtcher rather than copying it onto a filesystem.

Verify before installing

Signing key fingerprint:

8F13 CE15 35EE 1F4A 2916  A1F7 3C5C 900B 7BE8 0CA1

curl -O https://www.shadowfetch.com/linux/download/shadowfetch-2.0.0-amd64.iso
curl -LO https://github.com/ShadowfetchAI/shadowfetch-linux/releases/download/v2.0.0/shadowfetch-2.0.0-amd64.iso.asc
curl -LO https://github.com/ShadowfetchAI/shadowfetch-linux/releases/download/v2.0.0/shadowfetch-release.asc

gpg --import shadowfetch-release.asc
gpg --verify shadowfetch-2.0.0-amd64.iso.asc shadowfetch-2.0.0-amd64.iso
sha256sum -c <<< "0cbf9b90a4e561c57167cbac55d6fc4d02efc3dbd12a9c97c5034afc9fe6c671  shadowfetch-2.0.0-amd64.iso"

gpg --verify must print Good signature. It will also warn that the key is not certified —
that is expected and only means you have not personally signed the key.

The key is published here on GitHub, on a different provider with different credentials from
shadowfetch.com. Do not take the fingerprint from shadowfetch.com alone: the ISO, the checksum, the
verify page and that site's TLS certificate all sit under one account. Confirm it in at least two
independent places — this release, SECURITY.md, the README, and on an installed system
/etc/apt/keyrings/shadowfetch.gpg, which is the same key.

SHA256SUMS carries a detached signature over its exact bytes, never a clearsigned one.

What is in 2.0.0 "Umbra"

Full notes: https://www.shadowfetch.com/linux/changelog#v2-0-0

  • Bedrock — Btrfs with a dedicated @snapshots subvolume and an automatic snapshot before every
    apt transaction; roll back to the previous snapshot straight from the GRUB menu via grub-btrfs.
  • Browser Migration assistant — validates bookmark HTML and password CSV exports, stages them
    privately, and handles temporary Flatpak access for Brave.
  • Control Center: safe updates, plain-language health checks, recovery, graphics and agent tools.
  • On-device agents with a per-project workspace (tasks, memory, artifacts, safety rules).

Base: Debian testing derivative · KDE Plasma 6 · amd64 hybrid ISO · built 2026-07-21

Assets

File What it is
shadowfetch-release.asc Public signing key
shadowfetch-2.0.0-amd64.iso.asc Detached signature over the ISO
SHA256SUMS Checksum, sha256sum -c format
SHA256SUMS.asc Detached signature over SHA256SUMS
shadowfetch-2.0.0-amd64.iso.torrent Web-seeded torrent
packages.manifest Package list of the built image
Assets 8
Loading