GurtOS v0.1.0-preview

GurtOS v0.1.0-preview

The first public build of GurtOS, an operating system for a computer where AI agents do work for you safely. It
was built in a weekend at Cal Hacks 13.0. This is a preview: it works end to end and installs from its own
ISO, but it has not had a security audit. Install it on a spare machine or a VM. The installer takes the whole
disk.

Downloads

Every file is on this GitHub release and on the mirror at https://sjc1.vultrobjects.com/gurtos/v0.1.0-preview/.
Both have the same checksums and signature.

File	For	Size	SHA-256
gurtos-server-x86_64.iso (mirror)	GurtOS Server on a PC, server or cloud VM (Intel or AMD)	1.34 GB	159753d9a02e546f215c9553512c0bfb43e3b4b3f82f1fc92569a8eef1796a07
gurtos-server-arm64.iso (mirror)	GurtOS Server on an Apple silicon Mac (UTM, Parallels) or an arm64 server	1.34 GB	c9444fe07f2405c21e23ba700b1e8bac97517a630f1a21d6ede61210e08c8b28
gurtos-personal-x86_64.iso	GurtOS Personal on a PC or laptop (Intel or AMD)	coming	added to this release when its build is final
gurtos-personal-arm64.iso	GurtOS Personal on an Apple silicon Mac	coming	added to this release when its build is final

SHA256SUMS lists the checksum of every ISO in the release, SHA256SUMS.sig is its signature, and allowed_signers is the public
key that checks it.

The Server images are built from the tagged commit, d8620e9, from a fresh clone: x86_64 on a new Vultr VM, arm64
natively on an arm64 VM. When the Personal images are added, SHA256SUMS and its signature are replaced; the Server
lines stay the same.

Verify

ssh-keygen -Y verify -f allowed_signers -I gurtos -n gurtos-release -s SHA256SUMS.sig < SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing        # macOS: shasum -a 256 -c SHA256SUMS --ignore-missing

The first command must print Good "gurtos-release" signature for gurtos with ED25519 key SHA256:FWKFb1eAvEBmMhVJwMwTnLnhrmZ5yQZ5947pDvFKcpY. The same key is in the repository at
release/allowed_signers.

Install

1. Write the ISO to a USB stick, or attach it to a VM. Secure Boot must be off: the boot loader is not signed.
2. Start from it. On a blank disk it installs in about a minute; a disk with anything on it is erased only after
   you type erase. It restarts into GurtOS.
3. Run setup. GurtOS needs one model key: an Anthropic API key (console.anthropic.com) or a Factory API key
   (app.factory.ai). Agents never see it. Every app is optional and stays off until you add its keys.
4. Open Tasks, then New task.

Minimum hardware: 2 cores, 4 GB of memory, and a disk of 20 GB for Server or 32 GB for Personal. On x86_64, BIOS
or UEFI; on arm64, UEFI. The first start needs the internet: it downloads Factory's Droid CLI, which GurtOS does
not redistribute.

Full instructions: the README and
gurtos.com.

What's in it

• GurtOS Server: an always-on box. Its screen is the box's own full-screen UI; there is no desktop and no user
  with sudo.
• GurtOS Personal: Ubuntu's GNOME desktop with your own account. Agents work on copies of your folders, and
  nothing changes until you choose Keep.
• Each task runs as its own Linux user in its own copy of the files, with a network that reaches only the hosts
  it lists. Keys stay in a root-only vault. Spending above a budget stops and asks you on the screen or your
  phone. Undo removes one task's changes. After a power cut, every task resumes.
• Whole-system updates with automatic rollback: box-update apply <url> installs an image signed by the release
  update key to the other slot, and the machine goes back if the new system is not healthy within 5 minutes.

Known limits

• Not audited. Report security problems through GitHub's private vulnerability reporting.
• The boot loader is not signed, so Secure Boot must be off.
• The installer takes the whole disk; dual boot is not supported.
• Software installed by hand with apt on Personal is replaced by the next system update; files, accounts and
  settings are kept.
• The box's portal is reachable only from private networks. On a cloud VM, run setup in the provider's web
  console.
• Business edition: planned, not built.

Build it yourself

On any Ubuntu 24.04 machine or VM with root: git clone https://github.com/benz16107/calhacks13.git && cd calhacks13 && image/build. Times, memory and disk are in
release/README.md.

GurtOS is licensed under the Apache License 2.0. The images contain third-party software under its own licences;
see NOTICE.