Now that we have our own cache...

Installer ISO

losos-installer-v0.1.3.iso — 1.43 GiB

sha256  1d2e28dd90578374a8e40b5953a16110cfeeccfa8a1240a49eb91372b9e9b3a2

Verify it with:

curl -fsSLO https://github.com/dasmatus/losos/releases/download/v0.1.3/losos-installer-v0.1.3.iso.sha256
curl -fsSLO https://github.com/dasmatus/losos/releases/download/v0.1.3/losos-installer-v0.1.3.iso
sha256sum -c losos-installer-v0.1.3.iso.sha256

Write it to a USB stick and boot the target machine; the installer
partitions, encrypts and installs unattended. It needs a network
connection, because it clones the flake at run time.

Built from 9b44916 by this workflow run.

Demo QCOW2

losos-demo-v0.1.3.qcow2 — 4.55 GiB, too large for a GitHub release asset,
so it lives on GHCR: package page.

sha256  95857c6af1a73b51be87152d2b2896c9d633c0b3c271343b9999900c0581b9af

Download the layer directly with curl (the token is anonymous):

token=$(curl -fsS "https://ghcr.io/token?scope=repository:dasmatus/losos-demo-qcow2:pull" | jq -r .token)
curl -fL -H "Authorization: Bearer $token" -o losos-demo-v0.1.3.qcow2 \
  https://ghcr.io/v2/dasmatus/losos-demo-qcow2/blobs/sha256:95857c6af1a73b51be87152d2b2896c9d633c0b3c271343b9999900c0581b9af
echo "95857c6af1a73b51be87152d2b2896c9d633c0b3c271343b9999900c0581b9af  losos-demo-v0.1.3.qcow2" | sha256sum -c

Or pull it with oras, which fetches the
.sha256 beside it:

oras pull ghcr.io/dasmatus/losos-demo-qcow2:v0.1.3
sha256sum -c losos-demo-v0.1.3.qcow2.sha256

This image is for demos and development only. It does not carry the
appliance's TPM-sealed encrypted disk layout, so anyone who can read
the file can read its data.

The installer ISO is on GHCR too (package page):
oras pull ghcr.io/dasmatus/losos-installer-iso:v0.1.3

---

Build the installer ISO from this tag instead:

nix build .#nixosConfigurations.iso.config.system.build.isoImage

Build the demo QCOW2 instead:

nix build .#losos-disk-qcow2