Install Coming
None of these is available yet, and nothing here is a download. This page says how each is planned to work, so you can tell which would fit your machine. Today, a Ghalixy server is installed by us, as part of setup for an office.
Editions
| Edition | Install | What it promises |
|---|---|---|
| Ghalixy OS | USB stick onto an empty disk, or a machine that comes with it | Everything on the home page: encrypted data, read-only system, updates that roll back, Secure Boot, no route out for the models. |
| Ghalixy Server | One command on Ubuntu 22.04 or 24.04, or Debian 12 or 13, on x86-64 | The same services, signed updates and roll back. The system, disk and firewall stay yours to look after. |
| Ghalixy for Windows | One installer on Windows 10 or 11 | Runs while the PC is on. Your data lives in a WSL2 disk, which BitLocker can protect if you turn it on. |
| Ghalixy OS · Virtual | A disk image for Proxmox, KVM, VMware, VirtualBox or Hyper-V | The same system as on bare metal. Disk encryption and boot trust depend on the host. |
Every row is Coming. Debian 12 may drop off the Server list: Ghalixy needs Java 21, which Debian 12 does not have.
Ghalixy OS
Download the image and check its signature. This page will show how, with a fingerprint beside every file.
With any tool that writes disk images. Ghalixy plans its own small one that checks the signature for you.
The machine checks itself first (security chip, Secure Boot, memory, graphics card, disks) and says what it can run, or why not, before anything is erased.
It is never chosen for you, and other disks are listed but never touched.
Scan the code on the screen, name the box, make your passkey. The box encrypts its data disk and shows a recovery key once, to keep or print.
The aim is under 30 minutes from the stick going in to the assistant's first answer. That is a target, not a measurement: the install has not been timed on real machines yet. There is no dual boot: a Ghalixy server stays on, so give it a disk of its own.
Ghalixy Server
One command fetches a small installer that carries Ghalixy's public key, checks the signed release, and only then runs it. For people who don't pipe a download into a shell, this page will also show how to download, verify and run it in separate steps.
It never overwrites: it looks for Docker, a web server on ports 80 or 443 and an existing WireGuard, and offers to share or stop. It can be removed and keeps your data.
The address that serves it does not exist yet, so there is no command to copy.
Windows and virtual machines
The installer turns on WSL2 if needed, adds a Ghalixy system built from the same image, and a tray icon that starts with Windows. Models reach the graphics card through Windows' own driver. Turn on BitLocker and stop the PC sleeping.
A Hyper-V disk and a helper that sets up the virtual machine and hands it the graphics card.
A disk image to import, with a virtual security chip and UEFI on by default.
It can run through Ghalixy Server without a graphics card. Your data then sits with that provider, so it is not Ghalixy's privacy promise, and we will say so wherever it is offered.
