DuDuClaw OS v0.1.0
DuDuClaw OS v0.1.0 — first tagged bring-up release (pre-GA).
Two machines × three artifact forms. Every file has a .sha256 and a minisign .minisig; verify before flashing:
minisign -V -P RWQyI00ugZ/+WVisQ2ZnKeTqFs8Ze8h2X11FO9Z8le0YubFMXYTwQD7n -m <file>
shasum -a 256 -c <file>.sha256
Artifacts
| Machine | Form | File | What it installs |
|---|---|---|---|
duduclaw-qemux86-64 (QEMU bring-up target) |
whole-disk image | duduclaw-os-duduclaw-qemux86-64-v0.1.0.wic.zst |
Desktop edition duduclaw-image-appliance — A/B update chain, own compositor/shell, Chromium / LibreOffice / Steam, IME, app compatibility layer, read-only root, firewall, login hardening. zstd -d, then dd / bmaptool to the target disk. |
| installer ISO, desktop edition (added 2026-09-04) | duduclaw-os-installer-desktop-duduclaw-qemux86-64-v0.1.0.iso |
The same desktop edition, written to the internal SSD by the graphical installer. | |
| installer ISO, base image | duduclaw-os-installer-duduclaw-qemux86-64-v0.1.0.iso |
Base image duduclaw-image-ab — same A/B layout, desktop shell and gateway, without the app layer, read-only root or firewall. A bring-up artifact. |
|
duduclaw-genericx86-64 (real x86-64 hardware, x86-64-v3) |
whole-disk image | duduclaw-os-duduclaw-genericx86-64-v0.1.0.wic.zst |
Desktop edition, as above. |
| installer ISO, desktop edition (added 2026-09-04) | duduclaw-os-installer-desktop-duduclaw-genericx86-64-v0.1.0.iso |
Desktop edition via the installer. | |
| installer ISO, base image | duduclaw-os-installer-duduclaw-genericx86-64-v0.1.0.iso |
Base image via the installer. |
*.manifest.json files are build provenance for the whole-disk images (not part of the trust chain).
Verification status
duduclaw-qemux86-64: whole-disk image and both ISOs boot-verified under QEMU (the desktop-edition ISO to the live login prompt from a virtual CD-ROM; the installer's disk-write flow was exercised in earlier bring-up rounds, not re-run for the desktop payload).duduclaw-genericx86-64: config-audited only. It cannot be booted under QEMU, and no artifact of this release has been booted on real hardware yet.
Read this before flashing
- Boot with Secure Boot off. The UKIs and systemd-boot in this release are not signed, and the images carry no dm-verity partition and no TPM stack. Secure Boot signing, dm-verity and TPM2 + LUKS exist in the build layer as opt-in overlays (
kas/sb-signing.yml,kas/tpm-luks.yml) and were not enabled for these builds. Read-only root (desktop edition), A/B update with rollback, and minisign-signed release artifacts are in. - The base-image ISO is a bring-up artifact; if you want the machine described in the README, use the desktop edition (whole-disk image or
installer-desktopISO). - Hardware requirements, editions and the desktop are documented in the repo README and in the platform docs (
docs/features/50-duduclaw-os-appliance.md,52-desktop-edition.md).