Visual consistency, yay!

Installer ISO

losos-installer-v0.1.4.iso — 1.43 GiB

sha256  d652ae9d6751d86bc16382e3566ea468d54417795c8e902636b92f7b0fded6ca

Verify it with:

curl -fsSLO https://github.com/dasmatus/losos/releases/download/v0.1.4/losos-installer-v0.1.4.iso.sha256
curl -fsSLO https://github.com/dasmatus/losos/releases/download/v0.1.4/losos-installer-v0.1.4.iso
sha256sum -c losos-installer-v0.1.4.iso.sha256

Write it to a USB stick and boot the target machine; the installer
partitions, encrypts and installs unattended. It needs a network
connection, because it clones the flake at run time.

Built from ed7dbd5 by this workflow run.

Demo QCOW2

losos-demo-v0.1.4.qcow2 — 4.78 GiB, too large for a GitHub release asset,
so it lives on GHCR: package page.

sha256  4071b7a94df5b1f9e6aa52c22d3e4c41a193eb1e70f0d03b68770752b3c5e2fd

Download the layer directly with curl (the token is anonymous):

token=$(curl -fsS "https://ghcr.io/token?scope=repository:dasmatus/losos-demo-qcow2:pull" | jq -r .token)
curl -fL -H "Authorization: Bearer $token" -o losos-demo-v0.1.4.qcow2 \
  https://ghcr.io/v2/dasmatus/losos-demo-qcow2/blobs/sha256:4071b7a94df5b1f9e6aa52c22d3e4c41a193eb1e70f0d03b68770752b3c5e2fd
echo "4071b7a94df5b1f9e6aa52c22d3e4c41a193eb1e70f0d03b68770752b3c5e2fd  losos-demo-v0.1.4.qcow2" | sha256sum -c

Or pull it with oras, which fetches the
.sha256 beside it:

oras pull ghcr.io/dasmatus/losos-demo-qcow2:v0.1.4
sha256sum -c losos-demo-v0.1.4.qcow2.sha256

This image is for demos and development only. It does not carry the
appliance's TPM-sealed encrypted disk layout, so anyone who can read
the file can read its data.

The installer ISO is on GHCR too (package page):
oras pull ghcr.io/dasmatus/losos-installer-iso:v0.1.4

---

Build the installer ISO from this tag instead:

nix build .#nixosConfigurations.iso.config.system.build.isoImage

Build the demo QCOW2 instead:

nix build .#losos-disk-qcow2