feat: complete alfredlinux.com website — 9 pages + 404 + robots + sitemap
- index.php: Landing page with feature showcase, editions, roadmap - download.php: WebTorrent P2P download (no torrent client needed) - apps.php: Ecosystem app downloads (Browser, IDE, Veil, Pulse) - releases.php: Full changelog RC1 through RC8 - docs.php: Technical documentation and build specs - security.php: Kernel hardening transparency report - developers.php: Developer foundation and contribution guide - compare.php: Head-to-head vs Ubuntu/Mint/Fedora/Arch - about.php: Company provenance, founder, verification commands - 404.html: Branded error page - JSON-LD structured data on 4 pages - Twitter Card + OpenGraph meta tags on all pages - Security headers (HSTS, X-Frame-Options, CSP)
This commit is contained in:
parent
e6d0870ad4
commit
60f940cdd0
63
.htaccess
Normal file
63
.htaccess
Normal file
@ -0,0 +1,63 @@
|
||||
RewriteEngine On
|
||||
|
||||
# Custom 404 error page
|
||||
ErrorDocument 404 /404.html
|
||||
|
||||
# ── Security Headers ──────────────────────────────────────────
|
||||
<IfModule mod_headers.c>
|
||||
Header always set X-Content-Type-Options "nosniff"
|
||||
Header always set X-Frame-Options "SAMEORIGIN"
|
||||
Header always set Referrer-Policy "strict-origin-when-cross-origin"
|
||||
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
|
||||
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
|
||||
</IfModule>
|
||||
|
||||
# CORS for .torrent files only — ISO served via P2P, not HTTP
|
||||
<IfModule mod_headers.c>
|
||||
<FilesMatch "\.torrent$">
|
||||
Header set Access-Control-Allow-Origin "*"
|
||||
Header set Access-Control-Allow-Methods "GET, HEAD, OPTIONS"
|
||||
</FilesMatch>
|
||||
</IfModule>
|
||||
|
||||
# Clean URL: /docs → docs.php
|
||||
RewriteRule ^docs/?$ /docs.php [L]
|
||||
|
||||
# Clean URL: /developers → developers.php
|
||||
RewriteRule ^developers/?$ /developers.php [L]
|
||||
|
||||
# Clean URL: /download → download.php
|
||||
RewriteRule ^download/?$ /download.php [L]
|
||||
|
||||
# Clean URL: /releases → releases.php
|
||||
RewriteRule ^releases/?$ /releases.php [L]
|
||||
|
||||
# Clean URL: /security → security.php
|
||||
RewriteRule ^security/?$ /security.php [L]
|
||||
|
||||
# Clean URL: /apps → apps.php
|
||||
RewriteRule ^apps/?$ /apps.php [L]
|
||||
|
||||
# Clean URL: /compare → compare.php
|
||||
RewriteRule ^compare/?$ /compare.php [L]
|
||||
|
||||
# Clean URL: /about → about.php
|
||||
RewriteRule ^about/?$ /about.php [L]
|
||||
|
||||
# Torrent API proxy (unified seeder on port 3202)
|
||||
RewriteCond %{REQUEST_URI} ^/torrent-api/
|
||||
RewriteRule ^torrent-api/(.*)$ http://127.0.0.1:3202/$1 [P,L]
|
||||
|
||||
# GoForge — self-hosted Git platform (Gitea on port 3300)
|
||||
RewriteCond %{REQUEST_URI} ^/forge(/|$)
|
||||
RewriteRule ^forge(/.*)?$ http://127.0.0.1:3300$1 [P,L]
|
||||
|
||||
# WebSocket tracker proxy (tracker on port 3201)
|
||||
# Browsers connect to wss://alfredlinux.com/announce
|
||||
RewriteCond %{HTTP:Upgrade} websocket [NC]
|
||||
RewriteCond %{REQUEST_URI} ^/announce
|
||||
RewriteRule ^announce(.*)$ ws://127.0.0.1:3201/$1 [P,L]
|
||||
|
||||
# HTTP tracker announce (for non-WebSocket clients)
|
||||
RewriteCond %{REQUEST_URI} ^/announce
|
||||
RewriteRule ^announce(.*)$ http://127.0.0.1:3201/announce$1 [P,L]
|
||||
59
404.html
Normal file
59
404.html
Normal file
@ -0,0 +1,59 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Page Not Found — Alfred Linux</title>
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<link rel="canonical" href="https://alfredlinux.com/">
|
||||
<style>
|
||||
*{margin:0;padding:0;box-sizing:border-box}
|
||||
:root{--bg:#0a0a0f;--surface:#12121a;--accent:#6366f1;--text:#e2e8f0;--muted:#94a3b8}
|
||||
body{font-family:'Inter',system-ui,-apple-system,sans-serif;background:var(--bg);color:var(--text);min-height:100vh;display:flex;flex-direction:column}
|
||||
nav{padding:1rem 2rem;display:flex;align-items:center;gap:2rem;border-bottom:1px solid rgba(255,255,255,0.06)}
|
||||
.nav-brand{color:var(--text);text-decoration:none;font-weight:700;font-size:1.1rem;display:flex;align-items:center;gap:.5rem}
|
||||
.logo-mark{width:28px;height:28px;background:var(--accent);border-radius:6px;display:flex;align-items:center;justify-content:center;font-weight:800;font-size:.85rem;color:#fff}
|
||||
.nav-links{display:flex;gap:1.5rem;margin-left:auto}
|
||||
.nav-links a{color:var(--muted);text-decoration:none;font-size:.9rem;transition:color .2s}
|
||||
.nav-links a:hover{color:#fff}
|
||||
.nav-cta{background:var(--accent)!important;color:#fff!important;padding:.45rem 1.1rem;border-radius:8px;font-weight:600}
|
||||
.hero{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:center;text-align:center;padding:2rem}
|
||||
.error-code{font-size:8rem;font-weight:800;background:linear-gradient(135deg,var(--accent),#a855f7);-webkit-background-clip:text;-webkit-text-fill-color:transparent;line-height:1}
|
||||
h1{font-size:1.8rem;margin:1rem 0 .5rem}
|
||||
p{color:var(--muted);font-size:1.1rem;max-width:480px;margin-bottom:2rem}
|
||||
.links{display:flex;gap:1rem;flex-wrap:wrap;justify-content:center}
|
||||
.links a{color:var(--accent);text-decoration:none;padding:.6rem 1.2rem;border:1px solid rgba(99,102,241,0.3);border-radius:8px;transition:all .2s}
|
||||
.links a:hover{background:rgba(99,102,241,0.1);border-color:var(--accent)}
|
||||
footer{text-align:center;padding:1.5rem;color:var(--muted);font-size:.85rem;border-top:1px solid rgba(255,255,255,0.06)}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<nav>
|
||||
<a href="/" class="nav-brand"><div class="logo-mark">A</div> Alfred Linux</a>
|
||||
<div class="nav-links">
|
||||
<a href="/">Home</a>
|
||||
<a href="/apps">Apps</a>
|
||||
<a href="/releases">Releases</a>
|
||||
<a href="/compare">Compare</a>
|
||||
<a href="/docs">Docs</a>
|
||||
<a href="/security">Security</a>
|
||||
<a href="/developers">Developers</a>
|
||||
<a href="/about">About</a>
|
||||
<a href="/download" class="nav-cta">Get Alfred</a>
|
||||
</div>
|
||||
</nav>
|
||||
<div class="hero">
|
||||
<div class="error-code">404</div>
|
||||
<h1>Page Not Found</h1>
|
||||
<p>The page you're looking for doesn't exist or has been moved. Here are some places you might want to go:</p>
|
||||
<div class="links">
|
||||
<a href="/">🏠 Home</a>
|
||||
<a href="/download">⬇️ Download</a>
|
||||
<a href="/docs">📖 Docs</a>
|
||||
<a href="/apps">📦 Apps</a>
|
||||
<a href="/compare">⚖️ Compare</a>
|
||||
</div>
|
||||
</div>
|
||||
<footer>Alfred Linux — The AI-Native Operating System · Built by <a href="https://gositeme.com" style="color:var(--accent);text-decoration:none;">GoSiteMe Inc.</a></footer>
|
||||
</body>
|
||||
</html>
|
||||
321
about.php
Normal file
321
about.php
Normal file
@ -0,0 +1,321 @@
|
||||
<?php
|
||||
/**
|
||||
* Alfred Linux — About
|
||||
* Who we are, what we build, how to verify
|
||||
*
|
||||
* GoSiteMe Inc. — April 2026
|
||||
*/
|
||||
$year = date('Y');
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>About Alfred Linux — Built by GoSiteMe Inc.</title>
|
||||
<meta name="description" content="Alfred Linux is built by GoSiteMe Inc. — a real company, a real team, a real product. Learn about the project, the people behind it, and how to verify every claim.">
|
||||
<meta property="og:title" content="About Alfred Linux — GoSiteMe Inc.">
|
||||
<meta property="og:description" content="Who builds Alfred Linux, why it exists, and how to verify it's legitimate. Open source, company-backed, fully auditable.">
|
||||
<meta property="og:type" content="website">
|
||||
<meta property="og:url" content="https://alfredlinux.com/about">
|
||||
<meta property="og:image" content="https://alfredlinux.com/og-image.png">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="About Alfred Linux — GoSiteMe Inc.">
|
||||
<meta name="twitter:description" content="Who builds Alfred Linux, why it exists, and how to verify it's legitimate. Open source, company-backed, fully auditable.">
|
||||
<meta name="twitter:image" content="https://alfredlinux.com/og-image.png">
|
||||
<link rel="canonical" href="https://alfredlinux.com/about">
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<link rel="stylesheet" href="/assets/fonts/inter/inter.css">
|
||||
<style>
|
||||
:root {
|
||||
--bg: #06060b; --surface: rgba(255,255,255,0.03); --surface-hover: rgba(255,255,255,0.06);
|
||||
--border: rgba(255,255,255,0.06); --border-hover: rgba(99,102,241,0.3);
|
||||
--text: #e0e0e0; --text-muted: #9ca3af; --text-dim: #6b7280;
|
||||
--accent: #6366f1; --accent-light: #a5b4fc; --accent2: #8b5cf6;
|
||||
--green: #34d399; --amber: #f59e0b; --cyan: #22d3ee;
|
||||
}
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
body { font-family: 'Inter',-apple-system,BlinkMacSystemFont,sans-serif; background: var(--bg); color: var(--text); min-height: 100vh; -webkit-font-smoothing: antialiased; line-height: 1.7; }
|
||||
a { color: var(--accent-light); text-decoration: none; }
|
||||
a:hover { text-decoration: underline; }
|
||||
|
||||
nav { position: sticky; top: 0; z-index: 100; padding: 1rem 2rem; background: rgba(6,6,11,0.85); backdrop-filter: blur(20px); border-bottom: 1px solid var(--border); display: flex; align-items: center; justify-content: space-between; }
|
||||
.nav-brand { display: flex; align-items: center; gap: 0.75rem; font-size: 1.2rem; font-weight: 700; color: #fff; text-decoration: none; }
|
||||
.nav-brand .logo-mark { width: 32px; height: 32px; border-radius: 8px; background: linear-gradient(135deg, var(--accent), var(--accent2)); display: flex; align-items: center; justify-content: center; font-size: 1rem; font-weight: 900; color: #fff; }
|
||||
.nav-links { display: flex; gap: 2rem; align-items: center; }
|
||||
.nav-links a { color: var(--text-muted); text-decoration: none; font-size: 0.9rem; font-weight: 500; }
|
||||
.nav-links a:hover { color: #fff; text-decoration: none; }
|
||||
.nav-cta { padding: 0.5rem 1.25rem; border-radius: 8px; background: var(--accent); color: #fff !important; font-weight: 600 !important; }
|
||||
.nav-cta:hover { background: var(--accent2); }
|
||||
.nav-toggle { display: none; background: none; border: none; color: #fff; font-size: 1.5rem; cursor: pointer; }
|
||||
|
||||
.hero { text-align: center; padding: 6rem 2rem 3rem; background: radial-gradient(ellipse at 50% 20%, rgba(99,102,241,0.12) 0%, transparent 55%); }
|
||||
.hero h1 { font-size: clamp(2rem, 5vw, 3rem); font-weight: 900; margin-bottom: 1rem; background: linear-gradient(135deg, #fff, var(--accent-light), var(--cyan)); -webkit-background-clip: text; -webkit-text-fill-color: transparent; background-clip: text; }
|
||||
.hero p { color: var(--text-muted); font-size: 1.1rem; max-width: 650px; margin: 0 auto; }
|
||||
|
||||
.container { max-width: 900px; margin: 0 auto; padding: 0 2rem 4rem; }
|
||||
|
||||
.section { margin-top: 4rem; }
|
||||
.section h2 { font-size: 1.5rem; font-weight: 800; color: #fff; margin-bottom: 1rem; padding-bottom: 0.5rem; border-bottom: 1px solid var(--border); }
|
||||
.section p { color: var(--text-muted); margin-bottom: 1rem; font-size: 0.95rem; }
|
||||
.section ul { list-style: none; padding: 0; margin-bottom: 1.5rem; }
|
||||
.section li { padding: 0.4rem 0 0.4rem 1.5rem; position: relative; color: var(--text-muted); font-size: 0.92rem; }
|
||||
.section li::before { content: '›'; position: absolute; left: 0.4rem; color: var(--accent); font-weight: 700; }
|
||||
.section li strong { color: var(--text); }
|
||||
|
||||
.fact-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(260px, 1fr)); gap: 1.25rem; margin: 2rem 0; }
|
||||
.fact-card { background: var(--surface); border: 1px solid var(--border); border-radius: 14px; padding: 1.5rem; }
|
||||
.fact-card h3 { font-size: 1rem; font-weight: 700; color: #fff; margin-bottom: 0.5rem; }
|
||||
.fact-card p { color: var(--text-muted); font-size: 0.85rem; line-height: 1.6; margin: 0; }
|
||||
.fact-card .value { font-size: 1.6rem; font-weight: 900; color: var(--accent-light); margin-bottom: 0.25rem; }
|
||||
|
||||
.verify-box { background: rgba(52,211,153,0.06); border: 1px solid rgba(52,211,153,0.2); border-radius: 16px; padding: 2rem; margin: 2rem 0; }
|
||||
.verify-box h3 { color: var(--green); font-size: 1.1rem; margin-bottom: 1rem; }
|
||||
.verify-box code { display: block; background: rgba(0,0,0,0.3); border-radius: 8px; padding: 0.8rem 1rem; margin: 0.75rem 0; font-size: 0.85rem; color: var(--green); overflow-x: auto; white-space: pre; }
|
||||
|
||||
.timeline { position: relative; padding-left: 2rem; margin: 2rem 0; }
|
||||
.timeline::before { content: ''; position: absolute; left: 0.5rem; top: 0; bottom: 0; width: 2px; background: var(--border); }
|
||||
.timeline-item { position: relative; margin-bottom: 1.5rem; }
|
||||
.timeline-item::before { content: ''; position: absolute; left: -1.75rem; top: 0.5rem; width: 10px; height: 10px; border-radius: 50%; background: var(--accent); border: 2px solid var(--bg); }
|
||||
.timeline-item h4 { font-size: 0.95rem; font-weight: 700; color: #fff; }
|
||||
.timeline-item .date { font-size: 0.8rem; color: var(--text-dim); margin-bottom: 0.25rem; }
|
||||
.timeline-item p { font-size: 0.85rem; color: var(--text-muted); }
|
||||
|
||||
footer { text-align: center; padding: 3rem 2rem; color: var(--text-dim); font-size: 0.85rem; border-top: 1px solid var(--border); }
|
||||
footer a { color: var(--accent-light); }
|
||||
|
||||
@media (max-width: 768px) {
|
||||
.nav-links { display: none; position: absolute; top: 100%; left: 0; right: 0; background: rgba(6,6,11,0.95); flex-direction: column; padding: 1rem 2rem; gap: 0.75rem; }
|
||||
.nav-links.open { display: flex; }
|
||||
.nav-toggle { display: block; }
|
||||
.hero { padding: 5rem 1.5rem 2rem; }
|
||||
.container { padding: 0 1.25rem 3rem; }
|
||||
}
|
||||
</style>
|
||||
<script type="application/ld+json">
|
||||
{
|
||||
"@context": "https://schema.org",
|
||||
"@type": "Organization",
|
||||
"name": "GoSiteMe Inc.",
|
||||
"url": "https://gositeme.com",
|
||||
"description": "GoSiteMe Inc. builds sovereign software: Alfred Linux, Alfred IDE, Alfred Browser, Veil Messenger, Pulse Social, and GoForge.",
|
||||
"foundingDate": "2024",
|
||||
"founder": {
|
||||
"@type": "Person",
|
||||
"name": "Danny William Perez"
|
||||
},
|
||||
"brand": [
|
||||
{
|
||||
"@type": "SoftwareApplication",
|
||||
"name": "Alfred Linux",
|
||||
"operatingSystem": "Linux",
|
||||
"applicationCategory": "OperatingSystem",
|
||||
"softwareVersion": "4.0 RC8",
|
||||
"url": "https://alfredlinux.com",
|
||||
"downloadUrl": "https://alfredlinux.com/download",
|
||||
"releaseNotes": "https://alfredlinux.com/releases",
|
||||
"license": "https://www.gnu.org/licenses/agpl-3.0.html",
|
||||
"description": "AI-native Linux distribution shipping kernel 7.0 with 32 security modules, Alfred IDE, neural voice assistant, and full disk encryption — all active by default.",
|
||||
"offers": {
|
||||
"@type": "Offer",
|
||||
"price": "0",
|
||||
"priceCurrency": "USD"
|
||||
}
|
||||
}
|
||||
],
|
||||
"sameAs": [
|
||||
"https://x.com/AlfredGoSiteMe",
|
||||
"https://dev.to/AlfredGoSiteMe"
|
||||
]
|
||||
}
|
||||
</script>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<nav>
|
||||
<a href="/" class="nav-brand"><div class="logo-mark">A</div> Alfred Linux</a>
|
||||
<button class="nav-toggle" onclick="document.querySelector('.nav-links').classList.toggle('open')" aria-label="Toggle menu">☰</button>
|
||||
<div class="nav-links">
|
||||
<a href="/">Home</a>
|
||||
<a href="/apps">Apps</a>
|
||||
<a href="/compare">Compare</a>
|
||||
<a href="/docs">Docs</a>
|
||||
<a href="/releases">Releases</a>
|
||||
<a href="/security">Security</a>
|
||||
<a href="/developers">Developers</a>
|
||||
<a href="/download" class="nav-cta">Get Alfred</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<div class="hero">
|
||||
<h1>About Alfred Linux</h1>
|
||||
<p>A real company, a real product, a real kernel, real checksums. Here's who we are, what we've shipped, and how to verify every claim we make.</p>
|
||||
</div>
|
||||
|
||||
<div class="container">
|
||||
|
||||
<!-- ═══ WHO WE ARE ═══ -->
|
||||
<div class="section">
|
||||
<h2>Who Builds Alfred Linux</h2>
|
||||
<p>Alfred Linux is developed by <strong><a href="https://gositeme.com">GoSiteMe Inc.</a></strong>, a software company that builds sovereign, privacy-first tools. We are not a hobby project, a weekend fork, or a reskin of Ubuntu with a different wallpaper.</p>
|
||||
<p>The project is led by <strong>Danny William Perez</strong> (Commander) — founder of GoSiteMe — with development powered by Alfred, our AI engineering system. Alfred doesn't just chat — it compiles kernels, writes build hooks, hardens security modules, and ships ISOs.</p>
|
||||
|
||||
<div class="fact-grid">
|
||||
<div class="fact-card">
|
||||
<div class="value">8</div>
|
||||
<h3>Products Shipped</h3>
|
||||
<p>Alfred Linux, Alfred IDE, Alfred Browser, Veil Messenger, Pulse Social, GoForge, Alfred Voice, Alfred Search</p>
|
||||
</div>
|
||||
<div class="fact-card">
|
||||
<div class="value">10</div>
|
||||
<h3>ISOs Built</h3>
|
||||
<p>RC1 through RC8, from Bookworm to Trixie, from kernel 6.1 to kernel 7.0. Every build is tracked in <a href="/releases">release notes</a>.</p>
|
||||
</div>
|
||||
<div class="fact-card">
|
||||
<div class="value">16</div>
|
||||
<h3>Build Hooks</h3>
|
||||
<p>Automated, reproducible build system. Branding, IDE, Voice, Search, Store, Security, Network, Encryption, Hardware, Installer — each its own hook.</p>
|
||||
</div>
|
||||
<div class="fact-card">
|
||||
<div class="value">AGPL-3.0</div>
|
||||
<h3>License</h3>
|
||||
<p>Fully open source. Build scripts, security profiles, kernel config — all available on <a href="/forge">GoForge</a>.</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══ WHAT MAKES US DIFFERENT ═══ -->
|
||||
<div class="section">
|
||||
<h2>What Makes Alfred Linux Different</h2>
|
||||
<p>Most Linux distros take a base (Debian, Arch, Fedora), change the wallpaper, swap the package manager defaults, and call it a new OS. Alfred Linux is architecturally different:</p>
|
||||
<ul>
|
||||
<li><strong>Custom-compiled kernel 7.0</strong> — we compile Linux 7.0.0-rc7 from Linus Torvalds' mainline tree with our own config. This is not a repackaged distro kernel.</li>
|
||||
<li><strong>32 security modules active by default</strong> — not optional packages you install after the fact. AppArmor, auditd, fail2ban, ClamAV, rkhunter, chkrootkit, AIDE, nftables, LUKS2, MAC randomization — all enforced from first boot.</li>
|
||||
<li><strong>AI-native applications</strong> — Alfred IDE (VS Code + AI copilot), Alfred Voice (neural TTS + wake word), Alfred Search (Meilisearch) — these are built into the OS, not aftermarket add-ons.</li>
|
||||
<li><strong>3 kernel-7-exclusive CPU mitigations</strong> — ITS, TSA, and VMSCAPE are only available in kernel 7.0+. No 6.x-based distro can provide these protections.</li>
|
||||
<li><strong>Zero telemetry by architecture</strong> — we don't have telemetry code to disable because we never wrote any. Ubuntu ships telemetry you have to opt out of.</li>
|
||||
<li><strong>Sovereign distribution</strong> — ISOs are distributed via WebTorrent (browser-native P2P), not dependent on any single CDN or mirror network.</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<!-- ═══ TIMELINE ═══ -->
|
||||
<div class="section">
|
||||
<h2>Build History</h2>
|
||||
<p>Every build is documented. Every SHA-256 and BLAKE3 hash is published. Full details on the <a href="/releases">releases page</a>.</p>
|
||||
|
||||
<div class="timeline">
|
||||
<div class="timeline-item">
|
||||
<div class="date">April 7, 2026</div>
|
||||
<h4>v4.0 RC8 — Enterprise Security Hardening</h4>
|
||||
<p>32 security modules via 3 new hooks. CIS L2 sysctl hardening, full disk encryption, MAC randomization, antivirus, rootkit detection, file integrity monitoring.</p>
|
||||
</div>
|
||||
<div class="timeline-item">
|
||||
<div class="date">April 6, 2026</div>
|
||||
<h4>v4.0 RC7 — First Distro on Kernel 7.0</h4>
|
||||
<p>Custom-compiled Linux 7.0.0-rc7-alfred with 24 CPU mitigations including 3 kernel-7-exclusive fixes (ITS, TSA, VMSCAPE).</p>
|
||||
</div>
|
||||
<div class="timeline-item">
|
||||
<div class="date">April 6, 2026</div>
|
||||
<h4>v4.0 RC4–RC6 — Trixie Rebase + Full Stack</h4>
|
||||
<p>Moved from Debian Bookworm (12) to Trixie (13). Added UEFI hybrid boot, Alfred Voice v2 (Kokoro TTS + PyTorch), Alfred Search, Alfred Store, hardware auto-detection.</p>
|
||||
</div>
|
||||
<div class="timeline-item">
|
||||
<div class="date">April 6, 2026</div>
|
||||
<h4>v2.0 RC3 — First Bootable ISO</h4>
|
||||
<p>Kernel 6.1.0-44 on Bookworm. Dual kernel-naming hook fix. Alfred Browser, IDE, Voice, Search, Calamares installer. 2.5 GB ISO.</p>
|
||||
</div>
|
||||
<div class="timeline-item">
|
||||
<div class="date">March 2026</div>
|
||||
<h4>v2.0 RC1–RC2 — Genesis</h4>
|
||||
<p>First builds. Live-build system established. Alfred branding, basic hook system. Build-only (not yet bootable).</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══ HOW TO VERIFY ═══ -->
|
||||
<div class="section">
|
||||
<h2>How to Verify We're Legitimate</h2>
|
||||
<p>Don't trust us — verify us. Here's exactly how:</p>
|
||||
|
||||
<div class="verify-box">
|
||||
<h3>1. Download and hash the ISO</h3>
|
||||
<code>wget https://alfredlinux.com/downloads/alfred-linux-4.0-rc8-amd64-20260407.iso
|
||||
sha256sum alfred-linux-4.0-rc8-amd64-20260407.iso
|
||||
# Compare with published hash on /releases</code>
|
||||
</div>
|
||||
|
||||
<div class="verify-box">
|
||||
<h3>2. Boot it (no install required)</h3>
|
||||
<code># Write to USB
|
||||
sudo dd if=alfred-linux-4.0-rc8-amd64-20260407.iso of=/dev/sdX bs=4M status=progress
|
||||
# Or use Ventoy, Rufus, or balenaEtcher
|
||||
# Boot → select "Live" → you're in Alfred Linux</code>
|
||||
</div>
|
||||
|
||||
<div class="verify-box">
|
||||
<h3>3. Verify the kernel</h3>
|
||||
<code>uname -r
|
||||
# Should show: 7.0.0-rc7-alfred
|
||||
|
||||
cat /proc/cmdline
|
||||
# Should show security params: init_on_alloc=1 pti=on lockdown=integrity ...</code>
|
||||
</div>
|
||||
|
||||
<div class="verify-box">
|
||||
<h3>4. Verify security modules</h3>
|
||||
<code>alfred-security-status # Full security audit
|
||||
alfred-network-status # Network hardening status
|
||||
alfred-encrypt-status # Disk encryption status
|
||||
systemctl status fail2ban # Intrusion prevention
|
||||
systemctl status apparmor # Mandatory access control
|
||||
systemctl status auditd # Security audit logging</code>
|
||||
</div>
|
||||
|
||||
<div class="verify-box">
|
||||
<h3>5. Verify applications</h3>
|
||||
<code>alfred-ide # Open VS Code IDE in browser
|
||||
alfred-info # System information
|
||||
meilisearch --version # Search engine
|
||||
kokoro --help # Voice TTS engine</code>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══ THE ECOSYSTEM ═══ -->
|
||||
<div class="section">
|
||||
<h2>The GoSiteMe Ecosystem</h2>
|
||||
<p>Alfred Linux is one product in a broader platform. Every product is built by the same team, shares the same privacy-first architecture, and works together.</p>
|
||||
<ul>
|
||||
<li><strong><a href="https://alfredlinux.com">Alfred Linux</a></strong> — AI-native operating system (you are here)</li>
|
||||
<li><strong><a href="https://gositeme.com/alfred-ide">Alfred IDE</a></strong> — Cloud code editor with AI copilot (VS Code base)</li>
|
||||
<li><strong><a href="https://gositeme.com/alfred-browser">Alfred Browser</a></strong> — Privacy-first browser with zero telemetry</li>
|
||||
<li><strong><a href="https://gositeme.com/veil/">Veil Messenger</a></strong> — End-to-end encrypted messaging</li>
|
||||
<li><strong><a href="https://gositeme.com/pulse">Pulse Social</a></strong> — Decentralized social platform</li>
|
||||
<li><strong><a href="/forge">GoForge</a></strong> — Self-hosted Git platform (Gitea)</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<!-- ═══ CONTACT ═══ -->
|
||||
<div class="section">
|
||||
<h2>Contact & Community</h2>
|
||||
<ul>
|
||||
<li><strong>Website:</strong> <a href="https://gositeme.com">gositeme.com</a></li>
|
||||
<li><strong>Twitter / X:</strong> <a href="https://x.com/AlfredGoSiteMe">@AlfredGoSiteMe</a></li>
|
||||
<li><strong>Dev.to:</strong> <a href="https://dev.to/AlfredGoSiteMe">dev.to/AlfredGoSiteMe</a></li>
|
||||
<li><strong>Source code:</strong> <a href="/forge">GoForge</a> (self-hosted Gitea)</li>
|
||||
<li><strong>Security issues:</strong> <a href="/security">alfredlinux.com/security</a></li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
<footer>
|
||||
<p>© <?= $year ?> <a href="https://gositeme.com">GoSiteMe Inc.</a> — Alfred Linux · Open Source (AGPL-3.0)</p>
|
||||
</footer>
|
||||
|
||||
<script>
|
||||
document.querySelector('.nav-toggle')?.addEventListener('click', () => {
|
||||
document.querySelector('.nav-links').classList.toggle('open');
|
||||
});
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
342
apps.php
Normal file
342
apps.php
Normal file
@ -0,0 +1,342 @@
|
||||
<?php
|
||||
/**
|
||||
* Alfred Linux — Apps & Downloads
|
||||
* Central hub for all Alfred ecosystem downloads.
|
||||
*/
|
||||
$isoVersion = "4.0 RC8";
|
||||
$isoFile = "alfred-linux-4.0-rc8-amd64-20260407.iso";
|
||||
$isoSize = "2.4 GB";
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Apps & Downloads — Alfred Linux + GoSiteMe Ecosystem</title>
|
||||
<meta name="description" content="Download Alfred Linux, Alfred Browser, Veil Messenger, Pulse Social, and Alfred IDE. Available for Linux, Windows, Android, and as web apps.">
|
||||
<meta property="og:title" content="Apps & Downloads — Alfred Ecosystem">
|
||||
<meta property="og:description" content="Every app, every platform. Alfred Linux ISO, Alfred Browser, Veil Messenger, Pulse Social, and Alfred IDE.">
|
||||
<meta property="og:url" content="https://alfredlinux.com/apps">
|
||||
<meta property="og:type" content="website">
|
||||
<meta property="og:image" content="https://alfredlinux.com/og-image.png">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="Apps & Downloads — Alfred Ecosystem">
|
||||
<meta name="twitter:description" content="Every app, every platform. Alfred Linux ISO, Alfred Browser, Veil Messenger, Pulse Social, and Alfred IDE.">
|
||||
<meta name="twitter:image" content="https://alfredlinux.com/og-image.png">
|
||||
<link rel="canonical" href="https://alfredlinux.com/apps">
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<style>
|
||||
:root {
|
||||
--bg: #0a0a0f;
|
||||
--surface: #12121a;
|
||||
--border: #1e1e2e;
|
||||
--accent: #6c5ce7;
|
||||
--accent2: #00cec9;
|
||||
--gold: #fdcb6e;
|
||||
--text: #e0e0e0;
|
||||
--dim: #888;
|
||||
--success: #00b894;
|
||||
}
|
||||
* { margin:0; padding:0; box-sizing:border-box; }
|
||||
body { font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',system-ui,sans-serif; background:var(--bg); color:var(--text); min-height:100vh; }
|
||||
|
||||
nav { display:flex; align-items:center; justify-content:space-between; padding:1rem 2rem; border-bottom:1px solid var(--border); background:rgba(10,10,15,0.95); position:sticky; top:0; z-index:100; backdrop-filter:blur(12px); }
|
||||
.logo { font-size:1.3rem; font-weight:700; text-decoration:none; color:#fff; }
|
||||
.logo span { color:var(--accent); }
|
||||
.links { display:flex; gap:1.5rem; align-items:center; }
|
||||
.links a { color:var(--dim); text-decoration:none; font-size:.9rem; transition:color .2s; }
|
||||
.links a:hover { color:#fff; }
|
||||
.links .active { color:var(--accent); font-weight:600; }
|
||||
.nav-cta { background:var(--accent); color:#fff!important; padding:.5rem 1.2rem; border-radius:8px; font-weight:600; font-size:.85rem; }
|
||||
.nav-cta:hover { background:#5a4bd1; }
|
||||
|
||||
.hero { text-align:center; padding:80px 24px 48px; }
|
||||
.hero h1 { font-size:clamp(2rem,5vw,3rem); font-weight:900; letter-spacing:-1.5px; margin-bottom:12px; }
|
||||
.hero h1 span { background:linear-gradient(135deg,var(--accent),var(--accent2)); -webkit-background-clip:text; -webkit-text-fill-color:transparent; background-clip:text; }
|
||||
.hero p { color:var(--dim); font-size:1.05rem; max-width:600px; margin:0 auto; line-height:1.7; }
|
||||
|
||||
.container { max-width:960px; margin:0 auto; padding:0 24px 80px; }
|
||||
|
||||
/* App sections */
|
||||
.app-section { margin-bottom:48px; background:var(--surface); border:1px solid var(--border); border-radius:16px; padding:32px; }
|
||||
.app-section.featured { border-color:rgba(108,92,231,0.3); box-shadow:0 0 40px rgba(108,92,231,0.08); }
|
||||
.app-header { display:flex; align-items:center; gap:16px; margin-bottom:20px; flex-wrap:wrap; }
|
||||
.app-icon { width:56px; height:56px; border-radius:14px; display:flex; align-items:center; justify-content:center; font-size:24px; flex-shrink:0; }
|
||||
.app-name { font-size:1.4rem; font-weight:800; }
|
||||
.app-tag { font-size:.7rem; font-weight:700; text-transform:uppercase; letter-spacing:1px; padding:3px 10px; border-radius:100px; display:inline-block; margin-left:8px; }
|
||||
.app-desc { color:var(--dim); font-size:.95rem; line-height:1.6; margin-bottom:20px; }
|
||||
|
||||
.dl-grid { display:grid; grid-template-columns:repeat(auto-fill,minmax(220px,1fr)); gap:10px; }
|
||||
.dl-card { display:flex; align-items:center; gap:12px; padding:14px 16px; border-radius:12px; background:rgba(255,255,255,0.03); border:1px solid rgba(255,255,255,0.06); text-decoration:none; color:var(--text); transition:all .2s; }
|
||||
.dl-card:hover { border-color:rgba(108,92,231,0.3); transform:translateY(-1px); box-shadow:0 4px 16px rgba(0,0,0,0.3); }
|
||||
.dl-card .icon { width:36px; height:36px; border-radius:8px; display:flex; align-items:center; justify-content:center; font-size:16px; flex-shrink:0; }
|
||||
.dl-card .info h4 { font-size:.85rem; font-weight:700; margin:0 0 2px; }
|
||||
.dl-card .info span { font-size:.7rem; color:var(--dim); }
|
||||
.dl-card .arrow { margin-left:auto; font-size:12px; opacity:.4; }
|
||||
.dl-card:hover .arrow { opacity:1; }
|
||||
.dl-card.disabled { pointer-events:none; opacity:.3; }
|
||||
|
||||
.cross-link { display:inline-flex; align-items:center; gap:8px; color:var(--accent2); font-size:.85rem; font-weight:600; text-decoration:none; margin-top:12px; }
|
||||
.cross-link:hover { text-decoration:underline; }
|
||||
|
||||
.notice { margin-top:48px; padding:20px 24px; background:rgba(0,206,201,0.06); border:1px solid rgba(0,206,201,0.15); border-radius:14px; font-size:.85rem; color:var(--dim); line-height:1.7; }
|
||||
.notice strong { color:var(--accent2); }
|
||||
.notice a { color:var(--accent2); text-decoration:none; font-weight:600; }
|
||||
.notice a:hover { text-decoration:underline; }
|
||||
|
||||
@media(max-width:768px) {
|
||||
.links { display:none; }
|
||||
.app-header { flex-direction:column; text-align:center; }
|
||||
.dl-grid { grid-template-columns:1fr; }
|
||||
.hero { padding:60px 24px 36px; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<nav>
|
||||
<a href="/" class="logo">Alfred <span>Linux</span></a>
|
||||
<div class="links">
|
||||
<a href="/">Home</a>
|
||||
<a href="/download">Download</a>
|
||||
<a href="/apps" class="active">Apps</a>
|
||||
<a href="/docs">Docs</a>
|
||||
<a href="/releases">Releases</a>
|
||||
<a href="/security">Security</a>
|
||||
<a href="/developers">Developers</a>
|
||||
<a href="/compare">Compare</a>
|
||||
<a href="/about">About</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<div class="hero">
|
||||
<h1>Apps & <span>Downloads</span></h1>
|
||||
<p>Every app in the Alfred ecosystem. Desktop, mobile, and web — zero tracking, zero telemetry, zero compromise.</p>
|
||||
</div>
|
||||
|
||||
<div class="container">
|
||||
|
||||
<!-- ═══ ALFRED LINUX ═══ -->
|
||||
<div class="app-section featured">
|
||||
<div class="app-header">
|
||||
<div class="app-icon" style="background:rgba(108,92,231,0.15);color:var(--accent);">🐧</div>
|
||||
<div>
|
||||
<span class="app-name">Alfred Linux</span>
|
||||
<span class="app-tag" style="background:rgba(108,92,231,0.15);color:var(--accent);"><?= htmlspecialchars($isoVersion) ?></span>
|
||||
</div>
|
||||
</div>
|
||||
<p class="app-desc">The sovereign Linux distribution. Post-quantum encryption, Alfred AI built in, privacy-first design. BIOS + UEFI bootable, Debian-based, kernel 7.0.</p>
|
||||
<div class="dl-grid">
|
||||
<a href="/downloads/<?= htmlspecialchars($isoFile) ?>" class="dl-card">
|
||||
<div class="icon" style="background:rgba(108,92,231,0.1);color:var(--accent);">💿</div>
|
||||
<div class="info">
|
||||
<h4>ISO (Direct HTTPS)</h4>
|
||||
<span><?= htmlspecialchars($isoSize) ?> · x86_64</span>
|
||||
</div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="/download" class="dl-card">
|
||||
<div class="icon" style="background:rgba(0,206,201,0.1);color:var(--accent2);">⚡</div>
|
||||
<div class="info">
|
||||
<h4>P2P Download</h4>
|
||||
<span>WebTorrent · In-browser</span>
|
||||
</div>
|
||||
<span class="arrow">→</span>
|
||||
</a>
|
||||
<a href="/downloads/<?= htmlspecialchars($isoFile) ?>.torrent" class="dl-card">
|
||||
<div class="icon" style="background:rgba(253,203,110,0.1);color:var(--gold);">🧲</div>
|
||||
<div class="info">
|
||||
<h4>.torrent File</h4>
|
||||
<span>Use any torrent client</span>
|
||||
</div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="/downloads/install-alfred-mobile.sh" class="dl-card">
|
||||
<div class="icon" style="background:rgba(0,184,148,0.1);color:var(--success);">📱</div>
|
||||
<div class="info">
|
||||
<h4>Mobile Installer</h4>
|
||||
<span>Android/Termux · No root</span>
|
||||
</div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
</div>
|
||||
<div style="margin-top:12px;display:flex;gap:16px;flex-wrap:wrap;">
|
||||
<a href="/downloads/<?= htmlspecialchars($isoFile) ?>.sha256" class="cross-link" style="color:var(--dim);font-size:.75rem;">🔒 SHA-256</a>
|
||||
<a href="/downloads/<?= htmlspecialchars($isoFile) ?>.blake3" class="cross-link" style="color:var(--dim);font-size:.75rem;">🔒 BLAKE3</a>
|
||||
<a href="/releases" class="cross-link" style="color:var(--dim);font-size:.75rem;">📋 Release Notes</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══ ALFRED BROWSER ═══ -->
|
||||
<div class="app-section">
|
||||
<div class="app-header">
|
||||
<div class="app-icon" style="background:rgba(59,130,246,0.15);color:#3b82f6;">🌐</div>
|
||||
<div>
|
||||
<span class="app-name">Alfred Browser</span>
|
||||
<span class="app-tag" style="background:rgba(59,130,246,0.12);color:#3b82f6;">v3.0.0</span>
|
||||
</div>
|
||||
</div>
|
||||
<p class="app-desc">The sovereign browser. Post-quantum encryption, AI-powered with 13,000+ tools, built-in mining, games, VR worlds. Zero telemetry.</p>
|
||||
<div class="dl-grid">
|
||||
<a href="https://gositeme.com/downloads/Alfred-Browser-3.0.0-win-x64.zip" class="dl-card">
|
||||
<div class="icon" style="background:rgba(59,130,246,0.1);color:#3b82f6;">🪟</div>
|
||||
<div class="info"><h4>Windows</h4><span>x64 Portable</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/Alfred-Browser-3.0.0-mac-intel.zip" class="dl-card">
|
||||
<div class="icon" style="background:rgba(255,255,255,0.04);color:#fff;">🍎</div>
|
||||
<div class="info"><h4>macOS Intel</h4><span>x64 · macOS 11+</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/Alfred-Browser-3.0.0-mac-arm64.zip" class="dl-card">
|
||||
<div class="icon" style="background:rgba(255,255,255,0.04);color:#fff;">🍎</div>
|
||||
<div class="info"><h4>macOS Apple Silicon</h4><span>ARM64 · M-series</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/Alfred-Browser-3.0.0.AppImage" class="dl-card">
|
||||
<div class="icon" style="background:rgba(251,191,36,0.1);color:#fbbf24;">🐧</div>
|
||||
<div class="info"><h4>Linux AppImage</h4><span>x64 · Universal</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/alfred-browser_3.0.0_amd64.deb" class="dl-card">
|
||||
<div class="icon" style="background:rgba(221,72,20,0.1);color:#dd4814;">🐧</div>
|
||||
<div class="info"><h4>Ubuntu / Debian</h4><span>.deb x64</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/Alfred-Browser.apk" class="dl-card">
|
||||
<div class="icon" style="background:rgba(52,211,153,0.1);color:#34d399;">📱</div>
|
||||
<div class="info"><h4>Android</h4><span>APK · 8.0+</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
</div>
|
||||
<a href="https://gositeme.com/alfred-browser" class="cross-link">→ Full feature showcase & hashes</a>
|
||||
</div>
|
||||
|
||||
<!-- ═══ VEIL MESSENGER ═══ -->
|
||||
<div class="app-section">
|
||||
<div class="app-header">
|
||||
<div class="app-icon" style="background:rgba(139,92,246,0.15);color:#8b5cf6;">🔐</div>
|
||||
<div>
|
||||
<span class="app-name">Veil Messenger</span>
|
||||
<span class="app-tag" style="background:rgba(139,92,246,0.12);color:#8b5cf6;">v1.0.0</span>
|
||||
</div>
|
||||
</div>
|
||||
<p class="app-desc">End-to-end encrypted communications. AES-256-GCM, X25519 key exchange, zero-knowledge architecture. Text, voice, video, and encrypted file sharing.</p>
|
||||
<div class="dl-grid">
|
||||
<a href="https://gositeme.com/downloads/Veil-Messenger-1.0.0.AppImage" class="dl-card">
|
||||
<div class="icon" style="background:rgba(251,191,36,0.1);color:#fbbf24;">🐧</div>
|
||||
<div class="info"><h4>Linux AppImage</h4><span>x64 · 88 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/veil-messenger_1.0.0_amd64.deb" class="dl-card">
|
||||
<div class="icon" style="background:rgba(221,72,20,0.1);color:#dd4814;">🐧</div>
|
||||
<div class="info"><h4>Ubuntu / Debian</h4><span>.deb x64 · 3.1 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/veil-messenger-1.0.0-x86_64.rpm" class="dl-card">
|
||||
<div class="icon" style="background:rgba(239,68,68,0.1);color:#ef4444;">🐧</div>
|
||||
<div class="info"><h4>Fedora / RHEL</h4><span>.rpm x64 · 3.1 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/GoSiteMe-Veil.apk" class="dl-card">
|
||||
<div class="icon" style="background:rgba(52,211,153,0.1);color:#34d399;">📱</div>
|
||||
<div class="info"><h4>Android</h4><span>APK · 8.0+</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/veil/" class="dl-card">
|
||||
<div class="icon" style="background:rgba(139,92,246,0.1);color:#8b5cf6;">🌐</div>
|
||||
<div class="info"><h4>Web App</h4><span>Open in browser</span></div>
|
||||
<span class="arrow">→</span>
|
||||
</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══ PULSE SOCIAL ═══ -->
|
||||
<div class="app-section">
|
||||
<div class="app-header">
|
||||
<div class="app-icon" style="background:rgba(13,148,136,0.15);color:#0d9488;">💬</div>
|
||||
<div>
|
||||
<span class="app-name">Pulse Social</span>
|
||||
<span class="app-tag" style="background:rgba(13,148,136,0.12);color:#0d9488;">v1.0.0</span>
|
||||
</div>
|
||||
</div>
|
||||
<p class="app-desc">The sovereign social network. Chronological feed, no algorithms, no data harvesting. Share, discover, and connect without surveillance.</p>
|
||||
<div class="dl-grid">
|
||||
<a href="https://gositeme.com/downloads/Pulse-Social-1.0.0.AppImage" class="dl-card">
|
||||
<div class="icon" style="background:rgba(251,191,36,0.1);color:#fbbf24;">🐧</div>
|
||||
<div class="info"><h4>Linux AppImage</h4><span>x64 · 88 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/pulse-social_1.0.0_amd64.deb" class="dl-card">
|
||||
<div class="icon" style="background:rgba(221,72,20,0.1);color:#dd4814;">🐧</div>
|
||||
<div class="info"><h4>Ubuntu / Debian</h4><span>.deb x64 · 3.1 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/pulse-social-1.0.0-x86_64.rpm" class="dl-card">
|
||||
<div class="icon" style="background:rgba(239,68,68,0.1);color:#ef4444;">🐧</div>
|
||||
<div class="info"><h4>Fedora / RHEL</h4><span>.rpm x64 · 3.1 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/Pulse-Social.apk" class="dl-card">
|
||||
<div class="icon" style="background:rgba(52,211,153,0.1);color:#34d399;">📱</div>
|
||||
<div class="info"><h4>Android</h4><span>APK · 8.0+</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/pulse" class="dl-card">
|
||||
<div class="icon" style="background:rgba(13,148,136,0.1);color:#0d9488;">🌐</div>
|
||||
<div class="info"><h4>Web App</h4><span>Open in browser</span></div>
|
||||
<span class="arrow">→</span>
|
||||
</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══ ALFRED IDE ═══ -->
|
||||
<div class="app-section">
|
||||
<div class="app-header">
|
||||
<div class="app-icon" style="background:rgba(226,179,64,0.15);color:#e2b340;">⚡</div>
|
||||
<div>
|
||||
<span class="app-name">Alfred IDE</span>
|
||||
<span class="app-tag" style="background:rgba(226,179,64,0.12);color:#e2b340;">v2.1.0</span>
|
||||
</div>
|
||||
</div>
|
||||
<p class="app-desc">Cloud-first code editor. VS Code core, Commander extension, AI copilot, 500+ tools. Web-first, with desktop builds for Windows and Linux.</p>
|
||||
<div class="dl-grid">
|
||||
<a href="https://gositeme.com/alfred-ide/" class="dl-card">
|
||||
<div class="icon" style="background:rgba(226,179,64,0.1);color:#e2b340;">🌐</div>
|
||||
<div class="info"><h4>Web IDE (Flagship)</h4><span>Open in browser</span></div>
|
||||
<span class="arrow">→</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/alfred-ide/Alfred-IDE-Windows-x64.zip" class="dl-card">
|
||||
<div class="icon" style="background:rgba(59,130,246,0.1);color:#3b82f6;">🪟</div>
|
||||
<div class="info"><h4>Windows</h4><span>x64 Portable · 194 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
<a href="https://gositeme.com/downloads/alfred-ide/alfred-ide-2.1.0-linux-amd64.deb" class="dl-card">
|
||||
<div class="icon" style="background:rgba(221,72,20,0.1);color:#dd4814;">🐧</div>
|
||||
<div class="info"><h4>Linux .deb</h4><span>x64 · 80 MB</span></div>
|
||||
<span class="arrow">↓</span>
|
||||
</a>
|
||||
</div>
|
||||
<a href="https://gositeme.com/alfred-ide.php" class="cross-link">→ Alfred IDE launch page</a>
|
||||
</div>
|
||||
|
||||
<!-- ═══ CHECKSUMS ═══ -->
|
||||
<div class="notice">
|
||||
<strong>🔒 Integrity Verification</strong><br>
|
||||
All downloads include SHA-256 and BLAKE3 checksums. Alfred Linux ISO verification files are alongside the ISO.
|
||||
GoSiteMe app checksums are available at
|
||||
<a href="https://gositeme.com/downloads/SHA256SUMS.txt">SHA256SUMS.txt</a>.<br><br>
|
||||
<strong>⚡ P2P Available</strong><br>
|
||||
Every download is also available via WebTorrent for decentralized, peer-to-peer distribution.
|
||||
All artifacts are seeded 24/7 from GoSiteMe infrastructure.
|
||||
<a href="https://gositeme.com/apps">View all torrents on gositeme.com/apps →</a>
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
<footer style="text-align:center;padding:1.5rem;color:#94a3b8;font-size:.85rem;border-top:1px solid rgba(255,255,255,0.06);">
|
||||
© <?= date('Y') ?> <a href="https://gositeme.com" style="color:#6366f1;text-decoration:none;">GoSiteMe Inc.</a> — Alfred Linux · Open Source (AGPL-3.0)
|
||||
</footer>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
482
compare.php
Normal file
482
compare.php
Normal file
@ -0,0 +1,482 @@
|
||||
<?php
|
||||
/**
|
||||
* Alfred Linux — Comparison vs Other Distros
|
||||
* Honest, technical comparison against Ubuntu, Mint, Fedora, Arch
|
||||
*
|
||||
* GoSiteMe Inc. — April 2026
|
||||
*/
|
||||
$year = date('Y');
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Alfred Linux vs Ubuntu, Mint, Fedora, Arch — Honest Comparison</title>
|
||||
<meta name="description" content="An honest, technical comparison of Alfred Linux vs Ubuntu, Linux Mint, Fedora, and Arch Linux. What Alfred ships that others don't — and what they ship that Alfred hasn't yet.">
|
||||
<meta property="og:title" content="Alfred Linux vs Ubuntu, Mint, Fedora, Arch — Side-by-Side">
|
||||
<meta property="og:description" content="Kernel 7.0, 32 security modules, AI IDE, voice assistant, post-quantum encryption — all preinstalled. Here's how Alfred Linux compares to the mainstream distros.">
|
||||
<meta property="og:type" content="article">
|
||||
<meta property="og:url" content="https://alfredlinux.com/compare">
|
||||
<meta property="og:image" content="https://alfredlinux.com/og-image.png">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="Alfred Linux vs Ubuntu, Mint, Fedora, Arch — Side-by-Side">
|
||||
<meta name="twitter:description" content="Kernel 7.0, 32 security modules, AI IDE, voice assistant, post-quantum encryption — all preinstalled.">
|
||||
<meta name="twitter:image" content="https://alfredlinux.com/og-image.png">
|
||||
<link rel="canonical" href="https://alfredlinux.com/compare">
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<link rel="stylesheet" href="/assets/fonts/inter/inter.css">
|
||||
<style>
|
||||
:root {
|
||||
--bg: #06060b; --surface: rgba(255,255,255,0.03); --surface-hover: rgba(255,255,255,0.06);
|
||||
--border: rgba(255,255,255,0.06); --border-hover: rgba(99,102,241,0.3);
|
||||
--text: #e0e0e0; --text-muted: #9ca3af; --text-dim: #6b7280;
|
||||
--accent: #6366f1; --accent-light: #a5b4fc; --accent2: #8b5cf6;
|
||||
--green: #34d399; --red: #ef4444; --amber: #f59e0b; --cyan: #22d3ee;
|
||||
}
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
html { scroll-behavior: smooth; }
|
||||
body { font-family: 'Inter',-apple-system,BlinkMacSystemFont,sans-serif; background: var(--bg); color: var(--text); min-height: 100vh; -webkit-font-smoothing: antialiased; }
|
||||
a { color: var(--accent-light); text-decoration: none; }
|
||||
a:hover { text-decoration: underline; }
|
||||
|
||||
nav { position: sticky; top: 0; z-index: 100; padding: 1rem 2rem; background: rgba(6,6,11,0.85); backdrop-filter: blur(20px); border-bottom: 1px solid var(--border); display: flex; align-items: center; justify-content: space-between; }
|
||||
.nav-brand { display: flex; align-items: center; gap: 0.75rem; font-size: 1.2rem; font-weight: 700; color: #fff; text-decoration: none; }
|
||||
.nav-brand .logo-mark { width: 32px; height: 32px; border-radius: 8px; background: linear-gradient(135deg, var(--accent), var(--accent2)); display: flex; align-items: center; justify-content: center; font-size: 1rem; font-weight: 900; color: #fff; }
|
||||
.nav-links { display: flex; gap: 2rem; align-items: center; }
|
||||
.nav-links a { color: var(--text-muted); text-decoration: none; font-size: 0.9rem; font-weight: 500; }
|
||||
.nav-links a:hover { color: #fff; text-decoration: none; }
|
||||
.nav-cta { padding: 0.5rem 1.25rem; border-radius: 8px; background: var(--accent); color: #fff !important; font-weight: 600 !important; }
|
||||
.nav-cta:hover { background: var(--accent2); }
|
||||
.nav-toggle { display: none; background: none; border: none; color: #fff; font-size: 1.5rem; cursor: pointer; }
|
||||
|
||||
.hero { text-align: center; padding: 6rem 2rem 3rem; background: radial-gradient(ellipse at 50% 20%, rgba(99,102,241,0.12) 0%, transparent 55%); }
|
||||
.hero h1 { font-size: clamp(2rem, 5vw, 3rem); font-weight: 900; margin-bottom: 1rem; background: linear-gradient(135deg, #fff, var(--accent-light), var(--cyan)); -webkit-background-clip: text; -webkit-text-fill-color: transparent; background-clip: text; }
|
||||
.hero p { color: var(--text-muted); font-size: 1.1rem; max-width: 700px; margin: 0 auto; line-height: 1.7; }
|
||||
|
||||
.container { max-width: 1100px; margin: 0 auto; padding: 0 2rem 4rem; }
|
||||
|
||||
.section-header { text-align: center; margin: 4rem 0 2.5rem; }
|
||||
.section-label { display: inline-block; padding: 0.3rem 0.8rem; border-radius: 12px; background: rgba(99,102,241,0.1); border: 1px solid rgba(99,102,241,0.2); font-size: 0.75rem; font-weight: 600; color: var(--accent-light); letter-spacing: 0.08em; text-transform: uppercase; margin-bottom: 1rem; }
|
||||
.section-header h2 { font-size: clamp(1.6rem, 3.5vw, 2.2rem); font-weight: 800; color: #fff; margin-bottom: 0.75rem; }
|
||||
.section-header p { color: var(--text-muted); font-size: 1rem; max-width: 650px; margin: 0 auto; }
|
||||
|
||||
/* ── TABLE ── */
|
||||
.table-wrap { overflow-x: auto; border-radius: 16px; border: 1px solid var(--border); margin-bottom: 3rem; }
|
||||
table { width: 100%; border-collapse: collapse; font-size: 0.9rem; }
|
||||
thead { background: rgba(99,102,241,0.08); }
|
||||
th { padding: 1rem; text-align: left; font-weight: 700; color: #fff; font-size: 0.85rem; text-transform: uppercase; letter-spacing: 0.04em; border-bottom: 1px solid var(--border); }
|
||||
td { padding: 0.85rem 1rem; border-bottom: 1px solid var(--border); color: var(--text-muted); vertical-align: top; }
|
||||
tr:last-child td { border-bottom: none; }
|
||||
td:first-child { font-weight: 600; color: var(--text); min-width: 180px; }
|
||||
.col-alfred { background: rgba(99,102,241,0.04) !important; }
|
||||
th.col-alfred { background: rgba(99,102,241,0.15) !important; color: var(--accent-light); }
|
||||
.yes { color: var(--green); }
|
||||
.no { color: var(--text-dim); }
|
||||
.partial { color: var(--amber); }
|
||||
|
||||
/* ── HONESTY BOX ── */
|
||||
.honesty-box { background: rgba(245,158,11,0.06); border: 1px solid rgba(245,158,11,0.2); border-radius: 16px; padding: 2.5rem; margin: 3rem 0; }
|
||||
.honesty-box h2 { font-size: 1.4rem; font-weight: 800; color: var(--amber); margin-bottom: 1rem; }
|
||||
.honesty-box p { color: var(--text-muted); line-height: 1.7; margin-bottom: 1rem; }
|
||||
.honesty-box ul { list-style: none; padding: 0; }
|
||||
.honesty-box li { padding: 0.4rem 0 0.4rem 1.5rem; position: relative; color: var(--text-muted); font-size: 0.92rem; }
|
||||
.honesty-box li::before { content: '→'; position: absolute; left: 0; color: var(--amber); font-weight: 700; }
|
||||
.honesty-box li strong { color: var(--text); }
|
||||
|
||||
/* ── CARDS ── */
|
||||
.card-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); gap: 1.5rem; margin: 2rem 0; }
|
||||
.card { background: var(--surface); border: 1px solid var(--border); border-radius: 14px; padding: 1.75rem; }
|
||||
.card h3 { font-size: 1.1rem; font-weight: 700; color: #fff; margin-bottom: 0.75rem; }
|
||||
.card p { color: var(--text-muted); font-size: 0.9rem; line-height: 1.6; }
|
||||
.card .stat { font-size: 2rem; font-weight: 900; color: var(--accent-light); margin-bottom: 0.25rem; }
|
||||
|
||||
/* ── CTA ── */
|
||||
.cta-section { text-align: center; padding: 4rem 2rem; margin-top: 2rem; background: rgba(99,102,241,0.04); border-radius: 20px; border: 1px solid rgba(99,102,241,0.15); }
|
||||
.cta-section h2 { font-size: 1.8rem; font-weight: 800; color: #fff; margin-bottom: 0.75rem; }
|
||||
.cta-section p { color: var(--text-muted); margin-bottom: 2rem; max-width: 500px; margin-left: auto; margin-right: auto; }
|
||||
.btn { display: inline-flex; align-items: center; gap: 0.5rem; padding: 0.75rem 1.75rem; border-radius: 10px; font-weight: 600; font-size: 0.95rem; text-decoration: none; transition: all 0.2s; }
|
||||
.btn:hover { text-decoration: none; }
|
||||
.btn-primary { background: var(--accent); color: #fff; }
|
||||
.btn-primary:hover { background: var(--accent2); transform: translateY(-1px); }
|
||||
.btn-secondary { background: rgba(255,255,255,0.06); color: #fff; border: 1px solid var(--border); margin-left: 0.75rem; }
|
||||
.btn-secondary:hover { border-color: var(--border-hover); }
|
||||
|
||||
footer { text-align: center; padding: 3rem 2rem; color: var(--text-dim); font-size: 0.85rem; border-top: 1px solid var(--border); }
|
||||
footer a { color: var(--accent-light); }
|
||||
|
||||
@media (max-width: 768px) {
|
||||
.nav-links { display: none; position: absolute; top: 100%; left: 0; right: 0; background: rgba(6,6,11,0.95); flex-direction: column; padding: 1rem 2rem; gap: 0.75rem; }
|
||||
.nav-links.open { display: flex; }
|
||||
.nav-toggle { display: block; }
|
||||
.hero { padding: 5rem 1.5rem 2rem; }
|
||||
.container { padding: 0 1.25rem 3rem; }
|
||||
th, td { padding: 0.6rem 0.5rem; font-size: 0.8rem; }
|
||||
}
|
||||
</style>
|
||||
<script type="application/ld+json">
|
||||
{
|
||||
"@context": "https://schema.org",
|
||||
"@type": "Article",
|
||||
"headline": "Alfred Linux vs Ubuntu, Mint, Fedora, Arch — Honest Comparison",
|
||||
"description": "Technical comparison of Alfred Linux versus Ubuntu, Linux Mint, Fedora, and Arch Linux.",
|
||||
"author": { "@type": "Organization", "name": "GoSiteMe Inc.", "url": "https://gositeme.com" },
|
||||
"publisher": { "@type": "Organization", "name": "GoSiteMe Inc.", "url": "https://gositeme.com" },
|
||||
"datePublished": "2026-04-07",
|
||||
"dateModified": "2026-04-07",
|
||||
"mainEntityOfPage": "https://alfredlinux.com/compare",
|
||||
"about": {
|
||||
"@type": "SoftwareApplication",
|
||||
"name": "Alfred Linux",
|
||||
"operatingSystem": "Linux",
|
||||
"applicationCategory": "OperatingSystem",
|
||||
"url": "https://alfredlinux.com"
|
||||
}
|
||||
}
|
||||
</script>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<nav>
|
||||
<a href="/" class="nav-brand"><div class="logo-mark">A</div> Alfred Linux</a>
|
||||
<button class="nav-toggle" onclick="document.querySelector('.nav-links').classList.toggle('open')" aria-label="Toggle menu">☰</button>
|
||||
<div class="nav-links">
|
||||
<a href="/">Home</a>
|
||||
<a href="/apps">Apps</a>
|
||||
<a href="/compare" style="color:#fff;font-weight:600;">Compare</a>
|
||||
<a href="/docs">Docs</a>
|
||||
<a href="/releases">Releases</a>
|
||||
<a href="/security">Security</a>
|
||||
<a href="/developers">Developers</a>
|
||||
<a href="/about">About</a>
|
||||
<a href="/download" class="nav-cta">Get Alfred</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<div class="hero">
|
||||
<h1>Alfred Linux vs. The Mainstream</h1>
|
||||
<p>An honest, technical comparison. We tell you what Alfred does better, what the mainstream does better, and let you decide. No marketing — just facts and checksums.</p>
|
||||
</div>
|
||||
|
||||
<div class="container">
|
||||
|
||||
<!-- ═══════════════════════════════════════════════════
|
||||
NUMBERS AT A GLANCE
|
||||
═══════════════════════════════════════════════════ -->
|
||||
<div class="card-grid">
|
||||
<div class="card">
|
||||
<div class="stat">7.0</div>
|
||||
<h3>Linux Kernel</h3>
|
||||
<p>Alfred ships kernel 7.0.0-rc7 (mainline, compiled from Linus Torvalds' tree). Ubuntu 24.04 ships 6.8. Fedora 42 ships 6.14. No other installable distro ships kernel 7.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<div class="stat">32</div>
|
||||
<h3>Security Modules</h3>
|
||||
<p>AppArmor, auditd, fail2ban, ClamAV, rkhunter, chkrootkit, AIDE, nftables, LUKS2, MAC randomization, CIS L2 sysctl — all active by default, not optional extras.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<div class="stat">8</div>
|
||||
<h3>Built-in Apps</h3>
|
||||
<p>Alfred IDE (VS Code), Alfred Voice (neural TTS), Alfred Search (Meilisearch), Alfred Browser, Alfred Store (Flatpak), Alfred Welcome, Alfred Update, graphical installer.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<div class="stat">24</div>
|
||||
<h3>CPU Mitigations</h3>
|
||||
<p>Spectre, Meltdown, MDS, TAA, RFDS, SRBDS, L1TF + 3 kernel-7-exclusive mitigations (ITS, TSA, VMSCAPE) that no 6.x kernel can provide.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══════════════════════════════════════════════════
|
||||
COMPARISON TABLE: LINUX DISTROS
|
||||
═══════════════════════════════════════════════════ -->
|
||||
<div class="section-header">
|
||||
<span class="section-label">Side-by-Side</span>
|
||||
<h2>Alfred Linux vs. Other Linux Distros</h2>
|
||||
<p>Feature-by-feature — every claim is verifiable. Boot the ISO and check.</p>
|
||||
</div>
|
||||
|
||||
<div class="table-wrap">
|
||||
<table>
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Feature</th>
|
||||
<th>Ubuntu 24.04</th>
|
||||
<th>Linux Mint 22</th>
|
||||
<th>Fedora 42</th>
|
||||
<th>Arch Linux</th>
|
||||
<th class="col-alfred">Alfred Linux 4.0</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>Kernel version</td>
|
||||
<td>6.8</td>
|
||||
<td>6.8</td>
|
||||
<td>6.14</td>
|
||||
<td>Rolling (latest stable)</td>
|
||||
<td class="col-alfred yes">7.0.0-rc7-alfred</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Security hardening OOTB</td>
|
||||
<td class="partial">Basic (UFW off)</td>
|
||||
<td class="partial">Basic (UFW off)</td>
|
||||
<td class="partial">SELinux (often disabled)</td>
|
||||
<td class="no">None by default</td>
|
||||
<td class="col-alfred yes">32 modules active</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Firewall active by default</td>
|
||||
<td class="no">No (UFW installed, off)</td>
|
||||
<td class="no">No</td>
|
||||
<td class="partial">firewalld (permissive)</td>
|
||||
<td class="no">No</td>
|
||||
<td class="col-alfred yes">nftables drop-by-default</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Intrusion detection</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="col-alfred yes">fail2ban + auditd + AIDE</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Antivirus / rootkit scanner</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="no">Not installed</td>
|
||||
<td class="col-alfred yes">ClamAV + rkhunter + chkrootkit</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Full disk encryption</td>
|
||||
<td class="partial">Manual (installer option)</td>
|
||||
<td class="partial">Manual (installer option)</td>
|
||||
<td class="partial">Manual (installer option)</td>
|
||||
<td class="partial">Manual (wiki guide)</td>
|
||||
<td class="col-alfred yes">LUKS2 checkbox in Calamares</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>MAC address randomization</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="col-alfred yes">WiFi + Ethernet, automatic</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>AI IDE included</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="col-alfred yes">Alfred IDE (VS Code + AI)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Voice assistant / TTS</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="col-alfred yes">Kokoro TTS + wake word</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Local search engine</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="col-alfred yes">Meilisearch</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Graphical installer</td>
|
||||
<td class="yes">Ubiquity / Subiquity</td>
|
||||
<td class="yes">Calamares</td>
|
||||
<td class="yes">Anaconda</td>
|
||||
<td class="no">No (CLI only)</td>
|
||||
<td class="col-alfred yes">Calamares + FDE</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Snap packages</td>
|
||||
<td class="partial">Forced (Firefox is snap)</td>
|
||||
<td class="yes">Blocked (uses .deb)</td>
|
||||
<td class="no">No</td>
|
||||
<td class="no">No</td>
|
||||
<td class="col-alfred yes">No snaps — Flatpak only</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>P2P distribution</td>
|
||||
<td class="no">HTTP only</td>
|
||||
<td class="no">HTTP only</td>
|
||||
<td class="partial">Torrent available</td>
|
||||
<td class="no">HTTP only</td>
|
||||
<td class="col-alfred yes">WebTorrent (browser-native)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Boot & UEFI support</td>
|
||||
<td class="yes">UEFI + BIOS</td>
|
||||
<td class="yes">UEFI + BIOS</td>
|
||||
<td class="yes">UEFI + BIOS</td>
|
||||
<td class="yes">UEFI + BIOS</td>
|
||||
<td class="col-alfred yes">UEFI + BIOS hybrid</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Desktop environment</td>
|
||||
<td>GNOME 46</td>
|
||||
<td>Cinnamon 6.0</td>
|
||||
<td>GNOME 46</td>
|
||||
<td>Your choice</td>
|
||||
<td class="col-alfred">XFCE 4.18</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Base</td>
|
||||
<td>Ubuntu (own)</td>
|
||||
<td>Ubuntu / Debian</td>
|
||||
<td>Fedora (own)</td>
|
||||
<td>Arch (independent)</td>
|
||||
<td class="col-alfred">Debian Trixie (13)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Open source</td>
|
||||
<td class="yes">Yes</td>
|
||||
<td class="yes">Yes</td>
|
||||
<td class="yes">Yes</td>
|
||||
<td class="yes">Yes</td>
|
||||
<td class="col-alfred yes">AGPL-3.0</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Backed by company</td>
|
||||
<td class="yes">Canonical Ltd.</td>
|
||||
<td class="partial">Clem (community)</td>
|
||||
<td class="yes">Red Hat / IBM</td>
|
||||
<td class="no">Community</td>
|
||||
<td class="col-alfred yes">GoSiteMe Inc.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Community size</td>
|
||||
<td class="yes">Massive</td>
|
||||
<td class="yes">Large</td>
|
||||
<td class="yes">Large</td>
|
||||
<td class="yes">Large</td>
|
||||
<td class="col-alfred partial">Growing (new, 2026)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Telemetry</td>
|
||||
<td class="partial">Opt-out telemetry</td>
|
||||
<td class="yes">None</td>
|
||||
<td class="partial">Opt-out telemetry</td>
|
||||
<td class="yes">None</td>
|
||||
<td class="col-alfred yes">Zero — by architecture</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<!-- ═══════════════════════════════════════════════════
|
||||
HONESTY BOX — WHAT WE DON'T HAVE YET
|
||||
═══════════════════════════════════════════════════ -->
|
||||
<div class="honesty-box">
|
||||
<h2>What We're Honest About</h2>
|
||||
<p>Alfred Linux launched in April 2026. We are new. Here's what we don't have yet — and when we will:</p>
|
||||
<ul>
|
||||
<li><strong>Community size</strong> — Ubuntu has 20 years of forums, StackOverflow answers, and YouTube tutorials. We have months. This is our biggest gap and we know it. Our <a href="/docs">documentation</a> is growing daily.</li>
|
||||
<li><strong>Hardware compatibility testing</strong> — Ubuntu is tested on thousands of machines. Alfred has been tested on dozens. We're Debian-based, so most Debian-compatible hardware works — but edge cases exist.</li>
|
||||
<li><strong>Third-party software repos</strong> — Ubuntu PPAs and Fedora COPR are huge ecosystems. Alfred uses Flatpak + Debian repos. Most software works, but some niche packages may need manual install.</li>
|
||||
<li><strong>LTS cadence</strong> — Ubuntu has 5-year LTS cycles. Alfred is in release candidate phase — we're shipping fast, not slow. Stability-focused LTS releases will come after v4.0 GA.</li>
|
||||
<li><strong>DistroWatch listing</strong> — not yet. We're building the product first. Listing is on our <a href="/releases">roadmap</a>.</li>
|
||||
</ul>
|
||||
<p style="margin-top: 1.5rem; color: var(--text); font-weight: 600;">We'd rather ship 32 hardened security modules with zero community than ship zero security modules with a million users.</p>
|
||||
</div>
|
||||
|
||||
<!-- ═══════════════════════════════════════════════════
|
||||
WHO SHOULD USE WHAT
|
||||
═══════════════════════════════════════════════════ -->
|
||||
<div class="section-header">
|
||||
<span class="section-label">Honest Advice</span>
|
||||
<h2>Who Should Use What</h2>
|
||||
</div>
|
||||
|
||||
<div class="card-grid">
|
||||
<div class="card">
|
||||
<h3>Choose Ubuntu / Mint if…</h3>
|
||||
<p>You're brand new to Linux and need maximum hand-holding. You want the most YouTube tutorials and forum answers. You need enterprise LTS support contracts. You don't care about security hardening (you'll do it yourself later, or won't).</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h3>Choose Fedora if…</h3>
|
||||
<p>You want cutting-edge packages without compiling your own kernel. You work with Red Hat at your job. You prefer GNOME and don't mind Wayland quirks. You want SELinux but are OK with occasionally disabling it when things break.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h3>Choose Arch if…</h3>
|
||||
<p>You want to build your entire OS from scratch. You enjoy reading wikis. You have time to troubleshoot. You want the AUR. You already know Linux well.</p>
|
||||
</div>
|
||||
<div class="card" style="border-color: rgba(99,102,241,0.3); background: rgba(99,102,241,0.04);">
|
||||
<h3>Choose Alfred Linux if…</h3>
|
||||
<p>You want security hardened out of the box — not as a weekend project. You want an AI IDE and voice assistant preinstalled. You want kernel 7.0 with the latest CPU mitigations. You care about privacy by architecture, not by policy. You want a Linux distro built in 2026, not adapted from 2004.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══════════════════════════════════════════════════
|
||||
ADDRESSING THE "UNKNOWN DISTRO" CRITICISM
|
||||
═══════════════════════════════════════════════════ -->
|
||||
<div class="section-header" style="margin-top: 4rem;">
|
||||
<span class="section-label">Addressing Criticism</span>
|
||||
<h2>"But It's an Unknown Distro"</h2>
|
||||
</div>
|
||||
|
||||
<div class="card-grid">
|
||||
<div class="card">
|
||||
<h3>Every distro was unknown once</h3>
|
||||
<p>Ubuntu launched in 2004 as "that unknown distro from some South African guy." Arch launched from a one-person mailing list. Fedora was Red Hat's experiment. Being new is not a defect — it means we don't carry 20 years of legacy technical debt.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h3>We have verifiable artifacts</h3>
|
||||
<p>Download the ISO. Check the SHA-256 and BLAKE3 checksums. Boot it. Run <code>uname -r</code> — you'll see <code>7.0.0-rc7-alfred</code>. Run <code>alfred-security-status</code>. Every claim on this page is testable in 5 minutes.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h3>We're backed by a real company</h3>
|
||||
<p><a href="https://gositeme.com">GoSiteMe Inc.</a> builds and maintains Alfred Linux. We also build Alfred IDE, Alfred Browser, Veil Messenger, Pulse Social, and GoForge. This isn't a hobby project in someone's basement.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h3>Our source is public</h3>
|
||||
<p>The build system, all 16 hooks, the kernel config, and the security profiles are available on <a href="/forge">GoForge</a> (our self-hosted Gitea instance). You can audit every line of every hook that builds every ISO.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══════════════════════════════════════════════════
|
||||
AI MODELS AND BIAS
|
||||
═══════════════════════════════════════════════════ -->
|
||||
<div class="honesty-box" style="background: rgba(99,102,241,0.04); border-color: rgba(99,102,241,0.2); margin-top: 3rem;">
|
||||
<h2 style="color: var(--accent-light);">A Note About AI Recommendations</h2>
|
||||
<p>If an AI chatbot told you Alfred Linux is "unknown" and you should avoid it — understand how those models work:</p>
|
||||
<ul>
|
||||
<li><strong>Training data cutoff</strong> — most AI models were trained on data from 2023 or earlier. Alfred Linux launched in 2026. They literally don't know we exist. That's not a verdict on quality — it's a limitation of their training data.</li>
|
||||
<li><strong>Popularity bias</strong> — AI models recommend what appears most frequently in their training data. Ubuntu appears millions of times. A distro from 2026 appears zero times. This is a frequency bias, not a quality assessment.</li>
|
||||
<li><strong>No live verification</strong> — these models can't download our ISO, boot it, and test. They can't run <code>alfred-security-status</code>. They're pattern-matching on text, not evaluating software.</li>
|
||||
<li><strong>Conflict of interest</strong> — some AI models are built by companies that compete in the OS/cloud space. Their recommendations may not be neutral.</li>
|
||||
</ul>
|
||||
<p style="margin-top: 1.5rem; color: var(--text); font-weight: 600;">Don't trust any AI model's opinion about software it has never compiled, booted, or tested. Download it, boot it, test it, verify it. That's the Linux way.</p>
|
||||
</div>
|
||||
|
||||
<!-- ═══════════════════════════════════════════════════
|
||||
CTA
|
||||
═══════════════════════════════════════════════════ -->
|
||||
<div class="cta-section">
|
||||
<h2>Try It — Then Decide</h2>
|
||||
<p>Boot the live ISO. No installation required. Check the kernel, run the security tools, explore the AI IDE. Judge us by the artifact, not by someone else's opinion.</p>
|
||||
<a href="/download" class="btn btn-primary">Download Alfred Linux</a>
|
||||
<a href="/releases" class="btn btn-secondary">Read Release Notes</a>
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
<footer>
|
||||
<p>© <?= $year ?> <a href="https://gositeme.com">GoSiteMe Inc.</a> — Alfred Linux · Open Source (AGPL-3.0)</p>
|
||||
</footer>
|
||||
|
||||
<script>
|
||||
document.querySelector('.nav-toggle')?.addEventListener('click', () => {
|
||||
document.querySelector('.nav-links').classList.toggle('open');
|
||||
});
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
499
developers.php
Normal file
499
developers.php
Normal file
@ -0,0 +1,499 @@
|
||||
<?php
|
||||
/**
|
||||
* Alfred Linux — Developer Foundation Portal
|
||||
* The page that makes developers start here, not at kernel.org or Debian.
|
||||
*/
|
||||
$year = date('Y');
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<title>Build on Alfred Linux — Developer Foundation</title>
|
||||
<meta name="description" content="Don't start from kernel.org. Don't fork Ubuntu. Build your Linux project on Alfred — the AI-native foundation with kernel 7.0, 500+ MCP tools, voice engine, and a 6-layer build system ready to fork.">
|
||||
<meta name="keywords" content="Alfred Linux developer, build Linux distro, fork Alfred, custom Linux, AI Linux SDK, MCP tools, live-build, Debian Trixie">
|
||||
<meta property="og:title" content="Build on Alfred Linux — Developer Foundation">
|
||||
<meta property="og:description" content="The foundation other distros build on. Kernel 7.0. 500+ AI tools. Voice engine. Fork it. Ship it.">
|
||||
<meta property="og:type" content="website">
|
||||
<meta property="og:url" content="https://alfredlinux.com/developers">
|
||||
<meta property="og:image" content="https://alfredlinux.com/og-image.png">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="Build on Alfred Linux — Developer Foundation">
|
||||
<meta name="twitter:description" content="The foundation other distros build on. Kernel 7.0. 500+ AI tools. Voice engine. Fork it. Ship it.">
|
||||
<meta name="twitter:image" content="https://alfredlinux.com/og-image.png">
|
||||
<link rel="canonical" href="https://alfredlinux.com/developers">
|
||||
<link rel="stylesheet" href="/assets/fonts/inter/inter.css">
|
||||
<link rel="stylesheet" href="/assets/fonts/jetbrains-mono/jetbrains-mono.css">
|
||||
<style>
|
||||
:root {
|
||||
--bg: #06060b;
|
||||
--surface: rgba(255,255,255,0.03);
|
||||
--surface-hover: rgba(255,255,255,0.06);
|
||||
--border: rgba(255,255,255,0.06);
|
||||
--border-hover: rgba(99, 102, 241, 0.3);
|
||||
--text: #e0e0e0;
|
||||
--text-muted: #9ca3af;
|
||||
--text-dim: #6b7280;
|
||||
--accent: #6366f1;
|
||||
--accent-light: #a5b4fc;
|
||||
--accent2: #8b5cf6;
|
||||
--green: #34d399;
|
||||
--red: #ef4444;
|
||||
--amber: #f59e0b;
|
||||
--cyan: #22d3ee;
|
||||
}
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
html { scroll-behavior: smooth; }
|
||||
body { font-family: 'Inter', -apple-system, sans-serif; background: var(--bg); color: var(--text); line-height: 1.7; }
|
||||
a { color: var(--accent-light); }
|
||||
|
||||
/* Nav */
|
||||
nav { position: fixed; top: 0; width: 100%; padding: 1rem 2rem; display: flex; align-items: center; justify-content: space-between; background: rgba(6,6,11,0.92); backdrop-filter: blur(12px); z-index: 100; border-bottom: 1px solid var(--border); }
|
||||
.nav-brand { font-weight: 800; font-size: 1.2rem; text-decoration: none; color: var(--text); }
|
||||
.nav-brand span { color: var(--accent-light); }
|
||||
.nav-links { display: flex; gap: 1.5rem; align-items: center; }
|
||||
.nav-links a { text-decoration: none; color: var(--text-muted); font-size: 0.9rem; font-weight: 500; transition: color 0.2s; }
|
||||
.nav-links a:hover { color: var(--text); }
|
||||
.nav-cta { background: var(--accent); color: #fff !important; padding: 0.5rem 1.2rem; border-radius: 8px; }
|
||||
|
||||
.container { max-width: 1100px; margin: 0 auto; padding: 0 2rem; }
|
||||
|
||||
/* Hero */
|
||||
.dev-hero { padding: 8rem 2rem 4rem; text-align: center; max-width: 900px; margin: 0 auto; }
|
||||
.dev-hero h1 { font-size: clamp(2rem, 5vw, 3.5rem); font-weight: 900; line-height: 1.1; margin-bottom: 1.5rem; }
|
||||
.dev-hero h1 em { color: var(--accent-light); font-style: normal; }
|
||||
.dev-hero .lead { font-size: 1.25rem; color: var(--text-muted); max-width: 700px; margin: 0 auto 2rem; }
|
||||
|
||||
/* Why not section */
|
||||
.why-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); gap: 1.5rem; margin: 2rem 0 3rem; }
|
||||
.why-card { background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 1.5rem; }
|
||||
.why-card h3 { font-size: 1.1rem; font-weight: 700; margin-bottom: 0.5rem; color: var(--red); }
|
||||
.why-card.good h3 { color: var(--green); }
|
||||
.why-card p { font-size: 0.9rem; color: var(--text-muted); }
|
||||
|
||||
/* Sections */
|
||||
.section { padding: 4rem 2rem; max-width: 1100px; margin: 0 auto; }
|
||||
.section-alt { background: var(--surface); }
|
||||
.section h2 { font-size: clamp(1.5rem, 3vw, 2.2rem); font-weight: 800; margin-bottom: 0.5rem; }
|
||||
.section .subtitle { color: var(--text-muted); font-size: 1.1rem; margin-bottom: 2rem; }
|
||||
.section-label { display: inline-block; font-size: 0.75rem; font-weight: 700; text-transform: uppercase; letter-spacing: 0.15em; color: var(--accent-light); background: rgba(99,102,241,0.1); padding: 0.3rem 0.8rem; border-radius: 20px; margin-bottom: 0.75rem; }
|
||||
|
||||
/* Code blocks */
|
||||
.code-block { background: #0d1117; border: 1px solid rgba(255,255,255,0.08); border-radius: 10px; padding: 1.5rem; margin: 1.5rem 0; overflow-x: auto; font-family: 'JetBrains Mono', monospace; font-size: 0.85rem; line-height: 1.8; color: #c9d1d9; }
|
||||
.code-block .comment { color: #8b949e; }
|
||||
.code-block .cmd { color: var(--green); }
|
||||
.code-block .flag { color: var(--cyan); }
|
||||
.code-block .string { color: var(--amber); }
|
||||
|
||||
/* Layer stack */
|
||||
.layer-stack { display: flex; flex-direction: column; gap: 0; margin: 2rem 0; }
|
||||
.layer { padding: 1.2rem 1.5rem; border: 1px solid var(--border); display: flex; align-items: center; gap: 1rem; }
|
||||
.layer:first-child { border-radius: 12px 12px 0 0; }
|
||||
.layer:last-child { border-radius: 0 0 12px 12px; }
|
||||
.layer-num { font-family: 'JetBrains Mono', monospace; font-weight: 700; font-size: 0.8rem; color: var(--accent-light); min-width: 30px; }
|
||||
.layer-name { font-weight: 700; min-width: 160px; }
|
||||
.layer-desc { color: var(--text-muted); font-size: 0.9rem; }
|
||||
.layer-yours { background: rgba(99,102,241,0.08); border-color: var(--accent); }
|
||||
|
||||
/* Feature grid */
|
||||
.feature-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(260px, 1fr)); gap: 1.5rem; margin: 2rem 0; }
|
||||
.feature-card { background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 1.5rem; transition: border-color 0.2s; }
|
||||
.feature-card:hover { border-color: var(--border-hover); }
|
||||
.feature-card h3 { font-size: 1rem; font-weight: 700; margin-bottom: 0.4rem; }
|
||||
.feature-card p { font-size: 0.85rem; color: var(--text-muted); }
|
||||
.feature-card code { font-family: 'JetBrains Mono', monospace; font-size: 0.8rem; color: var(--cyan); background: rgba(34,211,238,0.08); padding: 0.15rem 0.4rem; border-radius: 4px; }
|
||||
|
||||
/* CTA */
|
||||
.btn { display: inline-block; padding: 0.8rem 1.8rem; border-radius: 10px; font-weight: 600; text-decoration: none; font-size: 1rem; transition: all 0.2s; }
|
||||
.btn-primary { background: var(--accent); color: #fff; }
|
||||
.btn-primary:hover { background: var(--accent2); transform: translateY(-1px); }
|
||||
.btn-outline { border: 1px solid var(--border); color: var(--text); background: transparent; }
|
||||
.btn-outline:hover { border-color: var(--accent); color: var(--accent-light); }
|
||||
.cta-group { display: flex; gap: 1rem; flex-wrap: wrap; justify-content: center; margin: 2rem 0; }
|
||||
|
||||
/* Steps */
|
||||
.steps { counter-reset: step; margin: 2rem 0; }
|
||||
.step { display: flex; gap: 1.5rem; margin-bottom: 2rem; }
|
||||
.step::before { counter-increment: step; content: counter(step); font-family: 'JetBrains Mono', monospace; font-size: 1.5rem; font-weight: 800; color: var(--accent); min-width: 40px; text-align: center; }
|
||||
.step-content h3 { font-size: 1.1rem; font-weight: 700; margin-bottom: 0.3rem; }
|
||||
.step-content p { font-size: 0.9rem; color: var(--text-muted); }
|
||||
|
||||
/* Compare table */
|
||||
.compare-table { width: 100%; border-collapse: collapse; margin: 2rem 0; font-size: 0.9rem; }
|
||||
.compare-table th { text-align: left; padding: 0.8rem; border-bottom: 2px solid var(--accent); color: var(--accent-light); font-weight: 700; }
|
||||
.compare-table td { padding: 0.8rem; border-bottom: 1px solid var(--border); }
|
||||
.compare-table tr:hover td { background: var(--surface-hover); }
|
||||
.compare-table .check { color: var(--green); font-weight: 700; }
|
||||
.compare-table .cross { color: var(--text-dim); }
|
||||
|
||||
/* Footer */
|
||||
footer { padding: 3rem 2rem; text-align: center; border-top: 1px solid var(--border); color: var(--text-dim); font-size: 0.85rem; }
|
||||
|
||||
@media (max-width: 768px) {
|
||||
.nav-links { display: none; }
|
||||
.why-grid, .feature-grid { grid-template-columns: 1fr; }
|
||||
.layer { flex-direction: column; align-items: flex-start; gap: 0.3rem; }
|
||||
.compare-table { font-size: 0.75rem; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<!-- NAV -->
|
||||
<nav>
|
||||
<a href="/" class="nav-brand"><span>Alfred</span> Linux</a>
|
||||
<div class="nav-links">
|
||||
<a href="/">Home</a>
|
||||
<a href="/download">Download</a>
|
||||
<a href="/apps">Apps</a>
|
||||
<a href="/docs">Docs</a>
|
||||
<a href="/releases">Releases</a>
|
||||
<a href="/security">Security</a>
|
||||
<a href="/developers" style="color:#fff;font-weight:600;">Developers</a>
|
||||
<a href="/compare">Compare</a>
|
||||
<a href="/about">About</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<!-- HERO -->
|
||||
<div class="dev-hero">
|
||||
<span class="section-label">Developer Foundation</span>
|
||||
<h1>Don't Start from Scratch.<br>Start from <em>Alfred</em>.</h1>
|
||||
<p class="lead">Every great Linux distro started by forking something else. Ubuntu forked Debian. Mint forked Ubuntu. Pop!_OS forked Ubuntu. <strong>Your project starts here.</strong></p>
|
||||
<div class="cta-group">
|
||||
<a href="#fork" class="btn btn-primary">Fork Alfred Linux</a>
|
||||
<a href="#build" class="btn btn-outline">Build Guide</a>
|
||||
<a href="/forge/" class="btn btn-outline" target="_blank" rel="noopener">★ Source Code</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- WHY NOT START FROM SCRATCH -->
|
||||
<div class="section">
|
||||
<span class="section-label">The Problem</span>
|
||||
<h2>Starting from Debian is 10,000 hours of wheel-reinvention.</h2>
|
||||
<p class="subtitle">Here's what you'd have to build yourself — or what you get for free by forking Alfred.</p>
|
||||
|
||||
<div class="why-grid">
|
||||
<div class="why-card">
|
||||
<h3>✗ Start from Debian</h3>
|
||||
<p>Bare system. No AI. No voice. No agent. No build pipeline. No branding hooks. You're months from a bootable ISO with anything useful.</p>
|
||||
</div>
|
||||
<div class="why-card">
|
||||
<h3>✗ Start from Ubuntu</h3>
|
||||
<p>Snap packages you can't remove. Telemetry. Canonical lock-in. Your "custom distro" is actually Ubuntu with a wallpaper change.</p>
|
||||
</div>
|
||||
<div class="why-card">
|
||||
<h3>✗ Start from kernel.org</h3>
|
||||
<p>You'll spend 6 months getting networking to work before you can even think about your actual project.</p>
|
||||
</div>
|
||||
<div class="why-card good">
|
||||
<h3>✓ Start from Alfred Linux</h3>
|
||||
<p>Kernel 7.0.0-rc7. UEFI + BIOS. AI agent built in. Voice engine. 500+ MCP tools. 6-layer build system. One command to build your ISO. Fork and ship.</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- WHAT YOU GET -->
|
||||
<div class="section" id="layers" style="background: var(--surface); padding: 4rem 2rem; max-width: 100%;">
|
||||
<div style="max-width: 1100px; margin: 0 auto;">
|
||||
<span class="section-label">What You Inherit</span>
|
||||
<h2>Six layers. All yours to extend.</h2>
|
||||
<p class="subtitle">Alfred Linux is a layered architecture. Fork any layer, replace any layer, extend any layer.</p>
|
||||
|
||||
<div class="layer-stack">
|
||||
<div class="layer layer-yours">
|
||||
<span class="layer-num">L7</span>
|
||||
<span class="layer-name" style="color:var(--accent-light);">Your Project</span>
|
||||
<span class="layer-desc">← This is where you start. Everything below is already done.</span>
|
||||
</div>
|
||||
<div class="layer">
|
||||
<span class="layer-num">L6</span>
|
||||
<span class="layer-name">Calamares</span>
|
||||
<span class="layer-desc">Graphical installer — let your users install to disk in 3 clicks</span>
|
||||
</div>
|
||||
<div class="layer">
|
||||
<span class="layer-num">L5</span>
|
||||
<span class="layer-name">Alfred Search</span>
|
||||
<span class="layer-desc">Meilisearch — local-first search engine, no cloud dependency</span>
|
||||
</div>
|
||||
<div class="layer">
|
||||
<span class="layer-num">L4</span>
|
||||
<span class="layer-name">Alfred Voice</span>
|
||||
<span class="layer-desc">Kokoro TTS engine — your OS speaks. Offline. No API keys.</span>
|
||||
</div>
|
||||
<div class="layer">
|
||||
<span class="layer-num">L3</span>
|
||||
<span class="layer-name">Alfred IDE</span>
|
||||
<span class="layer-desc">Alfred IDE — full VS Code-compatible dev environment in browser</span>
|
||||
</div>
|
||||
<div class="layer">
|
||||
<span class="layer-num">L2</span>
|
||||
<span class="layer-name">Alfred Browser</span>
|
||||
<span class="layer-desc">Tauri + WebKitGTK sovereign browser — no Google, no telemetry</span>
|
||||
</div>
|
||||
<div class="layer">
|
||||
<span class="layer-num">L1</span>
|
||||
<span class="layer-name">Base System</span>
|
||||
<span class="layer-desc">Debian Trixie · Kernel 7.0.0-rc7 · XFCE4 · Plymouth · LightDM · Firmware</span>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<p style="text-align:center;margin-top:1rem;color:var(--text-dim);font-size:0.9rem;">Each layer is a single hook script. Remove ones you don't need. Add your own. Build your ISO in one command.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- FORK GUIDE -->
|
||||
<div class="section" id="fork">
|
||||
<span class="section-label">Fork in 5 Minutes</span>
|
||||
<h2>Your custom Linux distro. Today.</h2>
|
||||
<p class="subtitle">Not weeks. Not months. Today.</p>
|
||||
|
||||
<div class="steps">
|
||||
<div class="step">
|
||||
<div class="step-content">
|
||||
<h3>Clone the repository</h3>
|
||||
<p>Get the entire build system — scripts, hooks, package lists, branding assets.</p>
|
||||
<div class="code-block">
|
||||
<span class="cmd">git clone</span> https://alfredlinux.com/forge/commander/alfred-linux.git my-distro<br>
|
||||
<span class="cmd">cd</span> my-distro
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="step">
|
||||
<div class="step-content">
|
||||
<h3>Customize your layers</h3>
|
||||
<p>Edit hooks in <code>config/hooks/live/</code>. Each is a self-contained bash script. Remove what you don't need, add what you do.</p>
|
||||
<div class="code-block">
|
||||
<span class="comment"># Want voice but not the browser? Remove the browser hook:</span><br>
|
||||
<span class="cmd">rm</span> config/hooks/live/0200-alfred-browser.hook.chroot<br><br>
|
||||
<span class="comment"># Add your own layer:</span><br>
|
||||
<span class="cmd">cat</span> > config/hooks/live/0700-my-app.hook.chroot << <span class="string">'EOF'</span><br>
|
||||
#!/bin/bash<br>
|
||||
<span class="cmd">apt-get install -y</span> my-custom-package<br>
|
||||
<span class="comment"># Your setup logic here</span><br>
|
||||
<span class="string">EOF</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="step">
|
||||
<div class="step-content">
|
||||
<h3>Brand it</h3>
|
||||
<p>Hook <code>0100-alfred-customize.hook.chroot</code> handles all branding — plymouth boot screen, wallpapers, fastfetch ASCII art, LightDM greeter. Change the names and images. Done.</p>
|
||||
</div>
|
||||
</div>
|
||||
<div class="step">
|
||||
<div class="step-content">
|
||||
<h3>Build your ISO</h3>
|
||||
<p>One command. Outputs a bootable hybrid ISO (BIOS + UEFI).</p>
|
||||
<div class="code-block">
|
||||
<span class="cmd">sudo</span> ./scripts/build-unified.sh rc8 <span class="flag">--uefi</span><br><br>
|
||||
<span class="comment"># Output: iso-output/my-distro-3.0-rc-amd64-20260406.iso</span><br>
|
||||
<span class="comment"># Size: ~2.5 GB · Boots on any PC · BIOS + UEFI</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="step">
|
||||
<div class="step-content">
|
||||
<h3>Ship it</h3>
|
||||
<p>Your ISO. Your distro. Your name. Built on a proven, AI-native foundation that already works.</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- TOOL ECOSYSTEM -->
|
||||
<div class="section" id="tools" style="background: var(--surface); padding: 4rem 2rem; max-width: 100%;">
|
||||
<div style="max-width: 1100px; margin: 0 auto;">
|
||||
<span class="section-label">Built-in SDK</span>
|
||||
<h2>500+ MCP tools. AI agent harness. Voice engine.</h2>
|
||||
<p class="subtitle">Every Alfred Linux ISO ships with infrastructure that would take you years to build.</p>
|
||||
|
||||
<div class="feature-grid">
|
||||
<div class="feature-card">
|
||||
<h3>AI Agent Harness</h3>
|
||||
<p>Multi-provider (Anthropic, OpenAI, Groq). Tool-calling loop. Session management. HTTP + CLI interface.</p>
|
||||
<code>curl localhost:3102/chat</code>
|
||||
</div>
|
||||
<div class="feature-card">
|
||||
<h3>500+ MCP Tools</h3>
|
||||
<p>File operations, git, database, web scraping, code analysis, system administration — all callable by the AI agent.</p>
|
||||
<code>gocodeme-mcp:3006</code>
|
||||
</div>
|
||||
<div class="feature-card">
|
||||
<h3>Kokoro TTS Voice</h3>
|
||||
<p>Offline text-to-speech. No cloud. No API keys. Your OS speaks. Hook into it from any application.</p>
|
||||
<code>/usr/local/bin/kokoro</code>
|
||||
</div>
|
||||
<div class="feature-card">
|
||||
<h3>Meilisearch</h3>
|
||||
<p>Instant local search engine. Index anything. Sub-50ms results. Typo-tolerant. Runs on the device.</p>
|
||||
<code>localhost:7700</code>
|
||||
</div>
|
||||
<div class="feature-card">
|
||||
<h3>Alfred IDE</h3>
|
||||
<p>Full VS Code in the browser. Extensions. Terminal. Git. Debug. Accessible from any device on the network.</p>
|
||||
<code>localhost:8443</code>
|
||||
</div>
|
||||
<div class="feature-card">
|
||||
<h3>Live-Build Pipeline</h3>
|
||||
<p>Cumulative 6-stage build system. Each stage adds a layer. Skip what you don't need. Build from <code>b1</code> to <code>rc</code>.</p>
|
||||
<code>build-unified.sh</code>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- BUILD REQUIREMENTS -->
|
||||
<div class="section" id="build">
|
||||
<span class="section-label">Build Requirements</span>
|
||||
<h2>What you need to build Alfred Linux (or your fork).</h2>
|
||||
|
||||
<div class="feature-grid" style="grid-template-columns: 1fr 1fr; margin: 2rem 0;">
|
||||
<div class="feature-card">
|
||||
<h3>Build Host</h3>
|
||||
<p>Debian or Ubuntu server with root access<br>
|
||||
8+ GB RAM recommended<br>
|
||||
30+ GB free disk space<br>
|
||||
Fast internet for package downloads</p>
|
||||
</div>
|
||||
<div class="feature-card">
|
||||
<h3>Packages</h3>
|
||||
<p>
|
||||
<code>live-build</code> <code>debootstrap</code><br>
|
||||
<code>squashfs-tools</code> <code>xorriso</code><br>
|
||||
<code>syslinux-utils</code><br>
|
||||
UEFI: <code>grub-efi-amd64-bin</code> <code>mtools</code>
|
||||
</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="code-block">
|
||||
<span class="comment"># Install build dependencies on Debian/Ubuntu:</span><br>
|
||||
<span class="cmd">sudo apt install</span> live-build debootstrap squashfs-tools xorriso syslinux-utils \<br>
|
||||
grub-efi-amd64-bin grub-common mtools dosfstools<br><br>
|
||||
<span class="comment"># Clone and build:</span><br>
|
||||
<span class="cmd">git clone</span> https://alfredlinux.com/forge/commander/alfred-linux.git<br>
|
||||
<span class="cmd">cd</span> alfred-linux<br>
|
||||
<span class="cmd">sudo</span> ./scripts/build-unified.sh rc8 <span class="flag">--uefi</span>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- COMPARISON -->
|
||||
<div class="section" style="background: var(--surface); padding: 4rem 2rem; max-width: 100%;">
|
||||
<div style="max-width: 1100px; margin: 0 auto;">
|
||||
<span class="section-label">Why Alfred as a Foundation</span>
|
||||
<h2>Compare starting points</h2>
|
||||
|
||||
<table class="compare-table">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Feature</th>
|
||||
<th>kernel.org</th>
|
||||
<th>Debian</th>
|
||||
<th>Ubuntu</th>
|
||||
<th style="color:var(--accent-light);">Alfred Linux</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>Bootable ISO in one command</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Kernel 7.0.0-rc7</td>
|
||||
<td class="check">✓</td>
|
||||
<td class="cross">✗ (6.1)</td>
|
||||
<td class="cross">✗ (6.8)</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>AI agent built in</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Voice engine (offline TTS)</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>500+ MCP tools</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Browser IDE included</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>BIOS + UEFI hybrid boot</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
<td class="check">✓</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Modular hook-based build</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>No telemetry / no Snap</td>
|
||||
<td class="check">✓</td>
|
||||
<td class="check">✓</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Mobile installer (Android)</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="cross">✗</td>
|
||||
<td class="check">✓</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Time to first custom ISO</td>
|
||||
<td>Months</td>
|
||||
<td>Weeks</td>
|
||||
<td>Days</td>
|
||||
<td style="color:var(--green);font-weight:700;">Minutes</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- CTA -->
|
||||
<div class="section" style="text-align: center; padding: 5rem 2rem;">
|
||||
<h2 style="font-size: clamp(1.5rem, 4vw, 2.5rem); margin-bottom: 1rem;">The question isn't <em style="color:var(--accent-light);">"why Alfred?"</em></h2>
|
||||
<p style="font-size: 1.2rem; color: var(--text-muted); margin-bottom: 2rem;">The question is <strong>"why would you start anywhere else?"</strong></p>
|
||||
<div class="cta-group">
|
||||
<a href="/forge/" class="btn btn-primary" target="_blank" rel="noopener">★ Fork on GoForge</a>
|
||||
<a href="/#download" class="btn btn-outline">Download v4.0 RC8 ISO</a>
|
||||
<a href="/docs" class="btn btn-outline">Read the Docs</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- FOOTER -->
|
||||
<footer>
|
||||
<p>© <?= $year ?> <a href="https://gositeme.com" style="color:var(--accent-light);">GoSiteMe Inc.</a> — Alfred Linux · Open Source (AGPL-3.0)</p>
|
||||
</footer>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
966
docs.php
Normal file
966
docs.php
Normal file
@ -0,0 +1,966 @@
|
||||
<?php
|
||||
/**
|
||||
* Alfred Linux — Public Technical Documentation
|
||||
* Build history, kernel specs, architecture deep-dive
|
||||
*
|
||||
* Built by Alfred for Commander Danny William Perez
|
||||
* GoSiteMe Inc. — April 2026
|
||||
*/
|
||||
$year = date('Y');
|
||||
$buildDate = '2026-04-06';
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<title>Alfred Linux — Technical Documentation & Build History</title>
|
||||
<meta name="description" content="Technical documentation for Alfred Linux: build history, kernel specifications, architecture deep-dive, version comparison, and the engineering story behind the world's first AI-native operating system.">
|
||||
<meta name="keywords" content="Alfred Linux docs, Linux kernel, build history, ISO build, Debian Bookworm, AI operating system, technical documentation">
|
||||
<meta property="og:title" content="Alfred Linux — Technical Documentation">
|
||||
<meta property="og:description" content="Build history, kernel specs, and the engineering story behind Alfred Linux.">
|
||||
<meta property="og:type" content="article">
|
||||
<meta property="og:url" content="https://alfredlinux.com/docs">
|
||||
<meta property="og:image" content="https://alfredlinux.com/og-image.png">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="Alfred Linux — Technical Documentation">
|
||||
<meta name="twitter:description" content="Build history, kernel specs, and the engineering story behind Alfred Linux.">
|
||||
<meta name="twitter:image" content="https://alfredlinux.com/og-image.png">
|
||||
<link rel="canonical" href="https://alfredlinux.com/docs">
|
||||
<link rel="stylesheet" href="/assets/fonts/inter/inter.css">
|
||||
<link rel="stylesheet" href="/assets/fonts/jetbrains-mono/jetbrains-mono.css">
|
||||
<style>
|
||||
:root {
|
||||
--bg: #06060b;
|
||||
--surface: rgba(255,255,255,0.03);
|
||||
--surface-hover: rgba(255,255,255,0.06);
|
||||
--border: rgba(255,255,255,0.06);
|
||||
--border-hover: rgba(99, 102, 241, 0.3);
|
||||
--text: #e0e0e0;
|
||||
--text-muted: #9ca3af;
|
||||
--text-dim: #6b7280;
|
||||
--accent: #6366f1;
|
||||
--accent-light: #a5b4fc;
|
||||
--accent2: #8b5cf6;
|
||||
--green: #34d399;
|
||||
--red: #ef4444;
|
||||
--amber: #f59e0b;
|
||||
--cyan: #22d3ee;
|
||||
}
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
html { scroll-behavior: smooth; }
|
||||
body {
|
||||
font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif;
|
||||
background: var(--bg);
|
||||
color: var(--text);
|
||||
line-height: 1.7;
|
||||
}
|
||||
|
||||
/* ── NAV ── */
|
||||
nav {
|
||||
position: fixed; top: 0; left: 0; right: 0; z-index: 100;
|
||||
padding: 0.75rem 2rem;
|
||||
background: rgba(6,6,11,0.85);
|
||||
backdrop-filter: blur(20px);
|
||||
border-bottom: 1px solid var(--border);
|
||||
display: flex; align-items: center; justify-content: space-between;
|
||||
}
|
||||
.nav-brand { display: flex; align-items: center; gap: 0.75rem; text-decoration: none; color: #fff; font-weight: 700; font-size: 1.1rem; }
|
||||
.logo-mark { width: 32px; height: 32px; border-radius: 8px; background: linear-gradient(135deg, var(--accent), var(--accent2)); display: flex; align-items: center; justify-content: center; font-weight: 900; font-size: 1rem; color: #fff; }
|
||||
.nav-links { display: flex; align-items: center; gap: 1.5rem; }
|
||||
.nav-links a { color: var(--text-muted); text-decoration: none; font-size: 0.9rem; transition: color 0.2s; }
|
||||
.nav-links a:hover { color: #fff; }
|
||||
.nav-cta { background: rgba(99,102,241,0.15); border: 1px solid rgba(99,102,241,0.3); padding: 0.4rem 1rem !important; border-radius: 8px; color: var(--accent-light) !important; font-weight: 600; }
|
||||
|
||||
/* ── LAYOUT ── */
|
||||
.page-header {
|
||||
padding: 8rem 2rem 4rem;
|
||||
text-align: center;
|
||||
background: radial-gradient(ellipse at 50% 30%, rgba(99,102,241,0.08) 0%, transparent 60%);
|
||||
}
|
||||
.page-header h1 {
|
||||
font-size: clamp(2.2rem, 5vw, 3.5rem);
|
||||
font-weight: 900; margin-bottom: 1rem;
|
||||
background: linear-gradient(135deg, #fff 0%, var(--accent-light) 50%, var(--cyan) 100%);
|
||||
-webkit-background-clip: text; -webkit-text-fill-color: transparent; background-clip: text;
|
||||
}
|
||||
.page-header p { color: var(--text-muted); font-size: 1.15rem; max-width: 700px; margin: 0 auto; }
|
||||
.page-header .updated { font-size: 0.85rem; color: var(--text-dim); margin-top: 1rem; }
|
||||
|
||||
.doc-layout {
|
||||
max-width: 1200px; margin: 0 auto; padding: 0 2rem 4rem;
|
||||
display: grid; grid-template-columns: 240px 1fr; gap: 3rem;
|
||||
}
|
||||
|
||||
/* ── SIDEBAR TOC ── */
|
||||
.toc {
|
||||
position: sticky; top: 5rem; height: fit-content;
|
||||
padding: 1.5rem; border-radius: 12px;
|
||||
background: var(--surface); border: 1px solid var(--border);
|
||||
}
|
||||
.toc h3 { font-size: 0.75rem; text-transform: uppercase; letter-spacing: 0.1em; color: var(--text-dim); margin-bottom: 1rem; font-weight: 700; }
|
||||
.toc a {
|
||||
display: block; padding: 0.35rem 0; font-size: 0.85rem;
|
||||
color: var(--text-muted); text-decoration: none; transition: all 0.2s;
|
||||
border-left: 2px solid transparent; padding-left: 0.75rem;
|
||||
}
|
||||
.toc a:hover { color: var(--accent-light); border-left-color: var(--accent); }
|
||||
.toc .toc-section { margin-bottom: 0.25rem; }
|
||||
|
||||
/* ── CONTENT ── */
|
||||
.doc-content h2 {
|
||||
font-size: 1.8rem; font-weight: 800; color: #fff;
|
||||
margin: 3rem 0 1.5rem; padding-bottom: 0.75rem;
|
||||
border-bottom: 1px solid var(--border);
|
||||
}
|
||||
.doc-content h2:first-child { margin-top: 0; }
|
||||
.doc-content h3 {
|
||||
font-size: 1.25rem; font-weight: 700; color: #fff;
|
||||
margin: 2rem 0 1rem;
|
||||
}
|
||||
.doc-content p { margin-bottom: 1rem; color: var(--text); }
|
||||
.doc-content ul, .doc-content ol { margin-bottom: 1rem; padding-left: 1.5rem; }
|
||||
.doc-content li { margin-bottom: 0.5rem; color: var(--text-muted); }
|
||||
.doc-content li strong { color: #fff; }
|
||||
.doc-content a { color: var(--accent-light); text-decoration: none; }
|
||||
.doc-content a:hover { text-decoration: underline; }
|
||||
.doc-content code {
|
||||
font-family: 'JetBrains Mono', monospace; font-size: 0.85em;
|
||||
background: rgba(255,255,255,0.06); padding: 0.15em 0.4em;
|
||||
border-radius: 4px; color: var(--cyan);
|
||||
}
|
||||
|
||||
/* ── CARDS & BLOCKS ── */
|
||||
.info-card {
|
||||
padding: 1.5rem 2rem; border-radius: 12px; margin: 1.5rem 0;
|
||||
background: var(--surface); border: 1px solid var(--border);
|
||||
}
|
||||
.info-card.highlight { border-color: rgba(99,102,241,0.3); background: rgba(99,102,241,0.05); }
|
||||
.info-card.success { border-color: rgba(52,211,153,0.3); background: rgba(52,211,153,0.05); }
|
||||
.info-card.amber { border-color: rgba(245,158,11,0.3); background: rgba(245,158,11,0.05); }
|
||||
.info-card h4 { font-size: 1rem; font-weight: 700; color: #fff; margin-bottom: 0.5rem; }
|
||||
.info-card p { margin-bottom: 0; color: var(--text-muted); font-size: 0.95rem; }
|
||||
|
||||
.code-block {
|
||||
background: rgba(0,0,0,0.5); border: 1px solid var(--border);
|
||||
border-radius: 10px; padding: 1.25rem 1.5rem; margin: 1rem 0;
|
||||
font-family: 'JetBrains Mono', monospace; font-size: 0.82rem;
|
||||
color: var(--text-muted); overflow-x: auto; line-height: 1.6;
|
||||
}
|
||||
.code-block .comment { color: var(--text-dim); }
|
||||
.code-block .keyword { color: var(--accent-light); }
|
||||
.code-block .string { color: var(--green); }
|
||||
.code-block .number { color: var(--amber); }
|
||||
|
||||
/* ── BUILD TIMELINE ── */
|
||||
.build-timeline { margin: 1.5rem 0; }
|
||||
.build-entry {
|
||||
display: grid; grid-template-columns: 50px 120px 1fr 100px;
|
||||
align-items: center; gap: 1rem;
|
||||
padding: 0.85rem 1.25rem; border-radius: 10px;
|
||||
background: var(--surface); border: 1px solid var(--border);
|
||||
margin-bottom: 0.5rem; transition: all 0.2s;
|
||||
}
|
||||
.build-entry:hover { border-color: var(--border-hover); }
|
||||
.build-badge {
|
||||
padding: 0.2rem 0.5rem; border-radius: 6px;
|
||||
font-size: 0.7rem; font-weight: 700; text-align: center;
|
||||
text-transform: uppercase; letter-spacing: 0.05em;
|
||||
}
|
||||
.badge-rc { background: rgba(52,211,153,0.15); color: var(--green); }
|
||||
.badge-beta { background: rgba(99,102,241,0.15); color: var(--accent-light); }
|
||||
.badge-alpha { background: rgba(245,158,11,0.15); color: var(--amber); }
|
||||
.build-date { font-size: 0.85rem; color: var(--text-dim); font-family: 'JetBrains Mono', monospace; }
|
||||
.build-desc { font-size: 0.9rem; color: var(--text); }
|
||||
.build-size { font-size: 0.85rem; color: var(--text-dim); text-align: right; font-family: 'JetBrains Mono', monospace; }
|
||||
|
||||
/* ── KERNEL MAP ── */
|
||||
.kernel-map {
|
||||
display: grid; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
|
||||
gap: 1rem; margin: 1.5rem 0;
|
||||
}
|
||||
.kernel-card {
|
||||
padding: 1.25rem 1.5rem; border-radius: 12px;
|
||||
background: var(--surface); border: 1px solid var(--border);
|
||||
transition: all 0.2s;
|
||||
}
|
||||
.kernel-card:hover { border-color: var(--border-hover); }
|
||||
.kernel-card .k-version { font-size: 1.5rem; font-weight: 800; color: #fff; margin-bottom: 0.25rem; }
|
||||
.kernel-card .k-branch { font-size: 0.8rem; color: var(--text-dim); text-transform: uppercase; letter-spacing: 0.05em; margin-bottom: 0.5rem; }
|
||||
.kernel-card .k-desc { font-size: 0.9rem; color: var(--text-muted); }
|
||||
.kernel-card.current { border-color: rgba(52,211,153,0.4); background: rgba(52,211,153,0.05); }
|
||||
.kernel-card.target { border-color: rgba(99,102,241,0.4); background: rgba(99,102,241,0.05); }
|
||||
|
||||
/* ── SPEC TABLE ── */
|
||||
.spec-table { width: 100%; border-collapse: collapse; margin: 1rem 0; }
|
||||
.spec-table th, .spec-table td { padding: 0.75rem 1rem; text-align: left; border-bottom: 1px solid var(--border); }
|
||||
.spec-table th { color: var(--accent-light); font-weight: 600; font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.05em; }
|
||||
.spec-table td { color: var(--text-muted); font-size: 0.9rem; }
|
||||
.spec-table td:first-child { color: #fff; font-weight: 500; }
|
||||
.spec-table tr:hover td { background: rgba(255,255,255,0.02); }
|
||||
|
||||
/* ── COMPONENT GRID ── */
|
||||
.component-grid {
|
||||
display: grid; grid-template-columns: repeat(auto-fit, minmax(250px, 1fr));
|
||||
gap: 1rem; margin: 1.5rem 0;
|
||||
}
|
||||
.component-card {
|
||||
padding: 1.25rem 1.5rem; border-radius: 12px;
|
||||
background: var(--surface); border: 1px solid var(--border);
|
||||
}
|
||||
.component-card h4 { font-size: 1rem; font-weight: 700; color: #fff; margin-bottom: 0.5rem; }
|
||||
.component-card .c-version { font-size: 0.8rem; color: var(--accent-light); font-family: 'JetBrains Mono', monospace; margin-bottom: 0.5rem; }
|
||||
.component-card p { font-size: 0.85rem; color: var(--text-muted); margin-bottom: 0; }
|
||||
|
||||
/* ── FOOTER ── */
|
||||
footer {
|
||||
padding: 3rem 2rem; border-top: 1px solid var(--border);
|
||||
text-align: center;
|
||||
}
|
||||
footer p { color: var(--text-dim); font-size: 0.85rem; }
|
||||
footer a { color: var(--accent-light); text-decoration: none; }
|
||||
|
||||
/* ── MOBILE ── */
|
||||
@media (max-width: 900px) {
|
||||
.doc-layout { grid-template-columns: 1fr; }
|
||||
.toc { display: none; }
|
||||
.build-entry { grid-template-columns: 1fr 1fr; gap: 0.5rem; }
|
||||
}
|
||||
@media (max-width: 600px) {
|
||||
.kernel-map { grid-template-columns: 1fr; }
|
||||
.component-grid { grid-template-columns: 1fr; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<!-- ═══ NAV ═══ -->
|
||||
<nav>
|
||||
<a href="/" class="nav-brand">
|
||||
<div class="logo-mark">A</div>
|
||||
Alfred Linux
|
||||
</a>
|
||||
<div class="nav-links">
|
||||
<a href="/">Home</a>
|
||||
<a href="/download">Download</a>
|
||||
<a href="/apps">Apps</a>
|
||||
<a href="/docs" style="color:#fff;">Docs</a>
|
||||
<a href="/releases">Releases</a>
|
||||
<a href="/security">Security</a>
|
||||
<a href="/developers">Developers</a>
|
||||
<a href="/compare">Compare</a>
|
||||
<a href="/about">About</a>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<!-- ═══ PAGE HEADER ═══ -->
|
||||
<div class="page-header">
|
||||
<h1>Technical Documentation</h1>
|
||||
<p>Everything under the hood. Build history, kernel specifications, architecture deep-dive, and the engineering story behind Alfred Linux.</p>
|
||||
<div class="updated">Last updated: <?= $buildDate ?> — Alfred Linux 4.0 RC8 (Kernel 7.0 · 32 Security Modules)</div>
|
||||
</div>
|
||||
|
||||
<!-- ═══ DOC LAYOUT ═══ -->
|
||||
<div class="doc-layout">
|
||||
|
||||
<!-- Sidebar TOC -->
|
||||
<aside class="toc">
|
||||
<h3>Contents</h3>
|
||||
<a href="#overview" class="toc-section">Overview</a>
|
||||
<a href="#kernel" class="toc-section">Kernel Deep-Dive</a>
|
||||
<a href="#kernel-landscape" class="toc-section">Kernel Landscape</a>
|
||||
<a href="#kernel-roadmap" class="toc-section">Kernel Roadmap</a>
|
||||
<a href="#build-history" class="toc-section">Build History</a>
|
||||
<a href="#components" class="toc-section">Components</a>
|
||||
<a href="#build-system" class="toc-section">Build System</a>
|
||||
<a href="#specs" class="toc-section">System Specs</a>
|
||||
<a href="#security" class="toc-section">Security</a>
|
||||
<a href="#iso-details" class="toc-section">ISO Details</a>
|
||||
<a href="#mobile" class="toc-section">Mobile (Android)</a>
|
||||
<a href="#contribute" class="toc-section">Contributing</a>
|
||||
</aside>
|
||||
|
||||
<!-- Main Content -->
|
||||
<main class="doc-content">
|
||||
|
||||
<!-- ═══ OVERVIEW ═══ -->
|
||||
<h2 id="overview">Overview</h2>
|
||||
<p>Alfred Linux is a complete operating system built from the ground up with AI as the primary user interface. Based on <strong>Debian Trixie (13)</strong>, it ships the full Linux desktop experience plus sixteen integrated AI-native build hooks — including three dedicated security hooks delivering 32 hardening modules — that no other distribution includes.</p>
|
||||
|
||||
<div class="info-card highlight">
|
||||
<h4>Current Release: v4.0 RC8 “The People’s OS”</h4>
|
||||
<p>Release Candidate 8 — built April 6, 2026. Debian Trixie 13 base, <strong>Linux kernel 7.0.0-rc7</strong> (custom compiled from source — first distro on the planet shipping kernel 7), x86_64 architecture, UEFI+BIOS hybrid boot. <strong>16 build hooks. 32 security modules.</strong> Includes Alfred Browser, Alfred IDE (auto-generated passwords), Kokoro Voice, Voice 2.0 Wake Word, Alfred Store (Flatpak), Welcome App, alfred-update, alfred-info, Meilisearch, Calamares installer with LUKS2 FDE checkbox, universal hardware support, and <strong>enterprise-grade security hardening</strong>: 3 dedicated security hooks (0160 — 21 modules, 0165 — 7 network modules, 0170 — 4 FDE modules), AIDE file integrity, ClamAV antivirus, rkhunter + chkrootkit rootkit detection, DNS-over-TLS, MAC randomization, nftables default-deny, PAM password hardening, auditd 30+ immutable rules, compiler restriction, hidepid=2, NTS time sync, 6 CLI security tools, 16 boot-time security params, 45+ sysctl CIS L2 rules, 30+ blacklisted dangerous kernel modules, AppArmor enforced with custom profiles, fail2ban, io_uring disabled, lockdown=integrity, 24 compiled-in hardware vulnerability mitigations (including 3 kernel-7-exclusive: ITS, TSA, VMSCAPE). ISO size: ~2.5 GB.</p>
|
||||
</div>
|
||||
|
||||
<p>Alfred Linux is not a Linux distribution with a chatbot bolted on. The AI is integrated at the operating system level — from voice-driven shell interaction to the development environment to the browser. Every component was chosen and configured to serve the mission: <strong>your voice is the command line</strong>.</p>
|
||||
|
||||
<h3>What Ships in v4.0</h3>
|
||||
<ul>
|
||||
<li><strong>Alfred Desktop Environment</strong> — XFCE4 with custom theming, Arc dark theme, Papirus icons, JetBrains Mono font, and branded Plymouth boot splash</li>
|
||||
<li><strong>Alfred Browser</strong> — Built on Tauri + WebKitGTK. 4.7 MB. Zero telemetry, zero tracking. Replaces Firefox-ESR entirely</li>
|
||||
<li><strong>Alfred IDE</strong> — full VS Code-compatible IDE (powered by code-server 4.114.0) with the Alfred Commander extension pre-installed. Full VS Code in the browser at port 8443</li>
|
||||
<li><strong>Alfred Voice</strong> — Kokoro TTS engine with PyTorch CPU backend, spaCy NLP, and a welcome greeting on first boot</li>
|
||||
<li><strong>Alfred Search</strong> — Meilisearch local search engine for offline-first, instant search across all local content</li>
|
||||
<li><strong>Calamares Installer</strong> — Full graphical disk installer with v4.0 branding, custom slideshow, and encrypted disk support</li>
|
||||
<li><strong>Welcome App</strong> — 7-page first-boot wizard (Python/Tk) for voice setup, WiFi config, tool launcher, P2P seeding opt-in, and keyboard shortcuts</li>
|
||||
<li><strong>Alfred Store</strong> — Flatpak-powered app center with 6 curated categories, search, one-click install, and threaded updates</li>
|
||||
<li><strong>Voice 2.0 Wake Word</strong> — Always-on “Hey Alfred” detection via openWakeWord. Systemd service with configurable threshold</li>
|
||||
<li><strong>alfred-update & alfred-info</strong> — CLI tools for one-command system updates (APT + Flatpak + Alfred version check) and branded system info panel</li>
|
||||
</ul>
|
||||
|
||||
|
||||
<!-- ═══ KERNEL DEEP-DIVE ═══ -->
|
||||
<h2 id="kernel">Kernel Deep-Dive</h2>
|
||||
<p>Alfred Linux 4.0 RC8 ships <strong>Linux kernel 7.0.0-rc7</strong>, custom-compiled from Linus Torvalds' mainline source tree. This makes Alfred Linux the <strong>first operating system distribution in the world to ship kernel 7</strong>. Released by Torvalds on April 5, 2026, kernel 7.0 is the first major version bump since 6.0 (October 2022).</p>
|
||||
|
||||
<div class="info-card success">
|
||||
<h4>Decoding “Linux 7.0.0-rc7-alfred”</h4>
|
||||
<p><code>7</code> = major version (first since 6.0 in Oct 2022)<br>
|
||||
<code>0</code> = minor (first release in the 7.x series)<br>
|
||||
<code>0</code> = patch level<br>
|
||||
<code>rc7</code> = Release Candidate 7 (Torvalds' final testing phase)<br>
|
||||
<code>alfred</code> = Alfred Linux custom build tag<br><br>
|
||||
Compiled from the official git.kernel.org/torvalds/linux source tree with Debian Trixie's production config as the base, adapted via <code>make olddefconfig</code>. Custom <code>LOCALVERSION="-alfred"</code> tag. Built on 8-core EU build server.</p>
|
||||
</div>
|
||||
|
||||
<h3>What Kernel 7.0 Brings</h3>
|
||||
<ul>
|
||||
<li><strong>3 New Hardware Mitigations (Kernel 7 Exclusive)</strong> — ITS (Indirect Target Selection), TSA (Transient Scheduler Attacks), and VMSCAPE (VM Escape) — not available in ANY 6.x kernel.</li>
|
||||
<li><strong>24 Total CPU Vulnerability Mitigations</strong> — Spectre v1/v2/BHI, Meltdown (PTI), MDS, TAA, L1TF, SRBDS, SRSO, RFDS, GDS, Retbleed, MMIO, SSB, SLS, Call Depth Tracking, Retpoline, IBPB/IBRS, plus the 3 new ones.</li>
|
||||
<li><strong>Expanded Rust-in-Kernel</strong> — More kernel subsystems in Rust for memory safety.</li>
|
||||
<li><strong>EEVDF Scheduler Refinements</strong> — Better latency and throughput on multi-core machines.</li>
|
||||
<li><strong>Latest Hardware Support</strong> — Intel Xe2, AMD RDNA4, NVIDIA 570+, WiFi 7, USB4, Thunderbolt 5, PCIe Gen 6.</li>
|
||||
</ul>
|
||||
|
||||
<h3>Alfred Linux Security Hardening (12 Gaps Patched)</h3>
|
||||
<p>The default kernel 7.0 config ships with <strong>12 security gaps</strong> that Alfred Linux patches at boot. No other consumer distro patches all 12:</p>
|
||||
<table class="spec-table">
|
||||
<thead><tr><th>#</th><th>Default Gap</th><th>Risk</th><th>Alfred Fix</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td>1</td><td><code>INIT_STACK_NONE=y</code></td><td>Uninitialized stack info leaks</td><td><code>init_on_alloc=1</code></td></tr>
|
||||
<tr><td>2</td><td><code>INIT_ON_FREE</code> not set</td><td>Freed memory retains secrets</td><td><code>init_on_free=1</code></td></tr>
|
||||
<tr><td>3</td><td><code>MODULE_SIG_FORCE</code> off</td><td>Unsigned modules can load</td><td><code>lockdown=integrity</code></td></tr>
|
||||
<tr><td>4</td><td><code>MODULE_FORCE_UNLOAD=y</code></td><td>Force-unload modules</td><td>Lockdown blocks</td></tr>
|
||||
<tr><td>5</td><td><code>IO_URING=y</code></td><td>#1 kernel vuln source 2022–2025</td><td><code>io_uring_disabled=2</code></td></tr>
|
||||
<tr><td>6</td><td><code>USERFAULTFD=y</code></td><td>Race condition exploit enabler</td><td><code>unprivileged_userfaultfd=0</code></td></tr>
|
||||
<tr><td>7</td><td><code>X86_IOPL_IOPERM=y</code></td><td>Direct I/O port access</td><td>Lockdown blocks</td></tr>
|
||||
<tr><td>8</td><td><code>DEVMEM+PROC_KCORE</code></td><td>Physical memory read</td><td>Lockdown blocks</td></tr>
|
||||
<tr><td>9</td><td><code>X86_MSR=m</code></td><td>Disable security features</td><td>Lockdown blocks</td></tr>
|
||||
<tr><td>10</td><td><code>HIBERNATION=y</code></td><td>RAM written to disk</td><td><code>nohibernate</code></td></tr>
|
||||
<tr><td>11</td><td><code>RANDSTRUCT_NONE=y</code></td><td>No struct randomization</td><td>Next compile pass</td></tr>
|
||||
<tr><td>12</td><td><code>IOMMU_DEFAULT_DMA_LAZY</code></td><td>Weak DMA protection</td><td><code>iommu.strict=1</code></td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
<h3>Additional Hardening Layers</h3>
|
||||
<ul>
|
||||
<li><strong>16 Boot Parameters</strong> — <code>lockdown=integrity nohibernate debugfs=off io_uring_disabled=2 tsx=off slab_nomerge page_alloc.shuffle=1 iommu.strict=1 vsyscall=none</code> and more</li>
|
||||
<li><strong>40+ Sysctl Rules</strong> — ASLR, kptr_restrict=2, dmesg_restrict, perf paranoid=3, BPF JIT hardening, kexec disabled, SysRq disabled, userfaultfd restricted, tty ldisc locked</li>
|
||||
<li><strong>30+ Module Blacklist</strong> — DCCP, SCTP, RDS, TIPC, Firewire, Thunderbolt, cramfs, hfs, freevxfs, jffs2, appletalk, IPX, and more</li>
|
||||
<li><strong>nftables Firewall</strong> — Drop-by-default, rate-limited SSH (10/min), rate-limited ICMP (5/sec), full audit logging</li>
|
||||
<li><strong>AppArmor + Fail2ban + auditd</strong> — Mandatory access control, SSH brute-force 3-strike 24h ban, comprehensive audit trail</li>
|
||||
<li><strong>Secure Mounts</strong> — /tmp and /dev/shm: noexec, nosuid, nodev</li>
|
||||
<li><strong>Core Dumps Disabled</strong> — Hard limit 0, kernel.core_pattern=/bin/false</li>
|
||||
<li><strong>Auto-generated IDE Passwords</strong> — Each session gets a unique random password, no default credentials</li>
|
||||
</ul>
|
||||
|
||||
<h3>Previous Kernel: 6.12.74 (RC4–RC6)</h3>
|
||||
<p>Alfred Linux v4.0 RC4 through RC6 shipped on Linux kernel 6.12.74 from the Debian Trixie security repositories — a Longterm release with 74 rounds of Debian kernel team security patches. RC7 leapfrogged to kernel 7.0 compiled from source, making Alfred the first distro on kernel 7.</p>
|
||||
|
||||
|
||||
<!-- ═══ KERNEL LANDSCAPE ═══ -->
|
||||
<h2 id="kernel-landscape">The Linux Kernel Landscape (April 2026)</h2>
|
||||
<p>To understand where Alfred Linux sits in the kernel world, here is the full landscape of active Linux kernel branches as of April 2026:</p>
|
||||
|
||||
<div class="kernel-map">
|
||||
<div class="kernel-card current">
|
||||
<div class="k-version">7.0.0-rc7</div>
|
||||
<div class="k-branch">Mainline — ALFRED LINUX IS HERE</div>
|
||||
<div class="k-desc"><strong>First distro on kernel 7.</strong> Custom-compiled from Torvalds' source tree (released April 5, 2026). 3 exclusive mitigations: ITS, TSA, VMSCAPE. 24 total hardware vulnerability mitigations. Every other distro is still on 6.x.</div>
|
||||
</div>
|
||||
<div class="kernel-card">
|
||||
<div class="k-version">6.19.11</div>
|
||||
<div class="k-branch">Stable (Latest)</div>
|
||||
<div class="k-desc">The newest stable release. Where Arch Linux and Fedora Rawhide sit. Alfred Linux has already leapfrogged past this to 7.0.</div>
|
||||
</div>
|
||||
<div class="kernel-card">
|
||||
<div class="k-version">6.18.21</div>
|
||||
<div class="k-branch">Longterm</div>
|
||||
<div class="k-desc">Previous stable series, now in long-term maintenance. Receives only critical security and bug fixes.</div>
|
||||
</div>
|
||||
<div class="kernel-card">
|
||||
<div class="k-version">6.12.80</div>
|
||||
<div class="k-branch">Longterm — Alfred RC4–RC6</div>
|
||||
<div class="k-desc">Debian Trixie's default kernel. Alfred Linux RC4–RC6 shipped on this branch before RC7 leapfrogged to kernel 7.0. Rock-solid LTS, extensively patched.</div>
|
||||
</div>
|
||||
<div class="kernel-card">
|
||||
<div class="k-version">6.6.132</div>
|
||||
<div class="k-branch">Longterm</div>
|
||||
<div class="k-desc">Another LTS branch. Known for broad hardware support and mature driver stack. Used by some Ubuntu LTS releases.</div>
|
||||
</div>
|
||||
<div class="kernel-card">
|
||||
<div class="k-version">6.1.167</div>
|
||||
<div class="k-branch">Longterm (Previous)</div>
|
||||
<div class="k-desc">The Debian Bookworm kernel. Alfred Linux v2.0 shipped on this branch. Proven, hardened, and the backbone of millions of Debian servers worldwide.</div>
|
||||
</div>
|
||||
<div class="kernel-card">
|
||||
<div class="k-version">5.15.202</div>
|
||||
<div class="k-branch">Longterm (Legacy)</div>
|
||||
<div class="k-desc">Previous generation LTS. Still maintained but winding down. Ubuntu 22.04 LTS ships this kernel.</div>
|
||||
</div>
|
||||
<div class="kernel-card">
|
||||
<div class="k-version">5.10.252</div>
|
||||
<div class="k-branch">Longterm (Legacy)</div>
|
||||
<div class="k-desc">Oldest actively maintained kernel. Used by Debian Bullseye (11) and some embedded systems. Approaching end-of-life.</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- ═══ KERNEL ROADMAP ═══ -->
|
||||
<h2 id="kernel-roadmap">Kernel Upgrade Roadmap</h2>
|
||||
<p>Alfred Linux is now on <strong>kernel 7.0.0-rc7</strong> — the first distro on earth to ship kernel 7. Here's the full trajectory:</p>
|
||||
|
||||
<div class="info-card success">
|
||||
<h4>The Path to Kernel 7.0</h4>
|
||||
<p>Linux kernels are modular — upgrading requires rebuilding the ISO with the new kernel. Alfred Linux's build system (live-build + 16 custom hooks) makes this manageable. For kernel 7.0, we compiled directly from Linus Torvalds' source tree, adapted Debian Trixie's production config, and built custom .deb packages. The kernel is one hook in our build pipeline.</p>
|
||||
</div>
|
||||
|
||||
<table class="spec-table">
|
||||
<thead>
|
||||
<tr><th>Phase</th><th>Target Kernel</th><th>Why</th><th>Status</th></tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td><strong>v2.0 (Legacy)</strong></td>
|
||||
<td><code>6.1.0-44</code></td>
|
||||
<td>Debian Bookworm default. Rock-solid stability. First bootable ISO.</td>
|
||||
<td>✓ April 2026</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><strong>v4.0 RC4–RC6</strong></td>
|
||||
<td><code>6.12.74</code></td>
|
||||
<td>Rebased to Debian Trixie. EEVDF scheduler, Rust-in-kernel, UEFI+BIOS hybrid boot.</td>
|
||||
<td>✓ April 2026</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><strong>v4.0 RC7</strong></td>
|
||||
<td><code>7.0.0-rc7</code></td>
|
||||
<td>Custom-compiled from Torvalds' mainline. 3 exclusive mitigations (ITS, TSA, VMSCAPE). 12 security gaps patched. First distro on kernel 7.</td>
|
||||
<td>✓ April 6, 2026</td>
|
||||
</tr>
|
||||
<tr style="background:rgba(52,211,153,0.08);">
|
||||
<td><strong>v4.0 RC8 (NOW)</strong></td>
|
||||
<td><code>7.0.0-rc7</code></td>
|
||||
<td>Enterprise security hardening: 32 modules, 3 dedicated security hooks, FDE, AppArmor, fail2ban, AIDE, ClamAV, nftables default-deny. 16 build hooks.</td>
|
||||
<td><strong>✓ April 7, 2026</strong></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><strong>v5.0 (Next)</strong></td>
|
||||
<td><code>7.0-stable or 7.1</code></td>
|
||||
<td>Kernel 7.0 stable release with full testing. RANDSTRUCT enabled (compile-time fix for gap #11).</td>
|
||||
<td>Summer 2026</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
<h3>What a Newer Kernel Gets Us</h3>
|
||||
<ul>
|
||||
<li><strong>Better Hardware Support</strong> — Every kernel release adds hundreds of new device drivers. Latest NVIDIA, AMD, Intel, Qualcomm, and Broadcom hardware. WiFi 7, USB4, Thunderbolt 5, PCIe Gen 5 NVMe.</li>
|
||||
<li><strong>Performance Gains</strong> — The kernel scheduler (EEVDF in 6.6+), memory management (MGLRU), and I/O subsystem improve substantially with each release. 6.12+ benchmarks show 5-15% improvements over 6.1 in many workloads.</li>
|
||||
<li><strong>Security Features</strong> — Newer kernels include improved address-space randomization, better speculative execution mitigations, shadow stacks (Intel CET), and Rust-based kernel modules for memory safety.</li>
|
||||
<li><strong>Rust in the Kernel</strong> — Starting with 6.1, the kernel supports Rust as a second language alongside C. This is revolutionary for memory safety. Each newer version expands Rust support significantly.</li>
|
||||
<li><strong>eBPF Improvements</strong> — Extended BPF for tracing, security, and networking gets more powerful with each release, enabling better Alfred-level system monitoring and AI-driven kernel optimization.</li>
|
||||
</ul>
|
||||
|
||||
<div class="info-card amber">
|
||||
<h4>Alfred Linux Already Ships the Latest Kernel</h4>
|
||||
<p>With RC8, Alfred Linux is the <strong>first distro on earth shipping Linux kernel 7.0</strong> — now with <strong>32 security modules</strong> across 3 dedicated hooks. Custom-compiled from Linus Torvalds' mainline source tree, with Debian Trixie's production config as the base. This isn't a random git snapshot — it's the official 7.0-rc7 release from kernel.org, built with <code>make bindeb-pkg</code> on 8 cores, adapted via <code>make olddefconfig</code>, and hardened with 16 boot security parameters, 45+ sysctl CIS L2 rules, a 30+ module blacklist, an nftables drop-by-default firewall, AppArmor enforced, fail2ban, AIDE file integrity, ClamAV antivirus, and LUKS2 full-disk encryption. No other distro does this.</p>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- ═══ BUILD HISTORY ═══ -->
|
||||
<h2 id="build-history">Build History</h2>
|
||||
<p>Alfred Linux v2.0 was developed through a rigorous incremental build pipeline. Each build added one major component and was tested before the next layer was added. Here is the complete build record:</p>
|
||||
|
||||
<h3>v1.0 — Foundation (14 builds)</h3>
|
||||
<p>The original Alfred Linux v1.0 went through 14 iterative builds to establish the base operating system, desktop environment, and basic voice integration. The final v1.0 ISO was 1.5 GB and proved the concept: a bootable Linux desktop with AI voice integration.</p>
|
||||
|
||||
<h3>v2.0 — Full Stack (9+ builds)</h3>
|
||||
<div class="build-timeline">
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-alpha">b1</span></div>
|
||||
<div class="build-date">2026-04-04</div>
|
||||
<div class="build-desc"><strong>Foundation</strong> — Base Debian Bookworm + XFCE4 + Plymouth + Branding + Hardening</div>
|
||||
<div class="build-size">~1.2 GB</div>
|
||||
</div>
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-beta">b2</span></div>
|
||||
<div class="build-date">2026-04-04</div>
|
||||
<div class="build-desc"><strong>+ Alfred Browser</strong> — Replaced Firefox-ESR with Alfred Browser (Tauri + WebKitGTK)</div>
|
||||
<div class="build-size">1.4 GB</div>
|
||||
</div>
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-beta">b3</span></div>
|
||||
<div class="build-date">2026-04-04</div>
|
||||
<div class="build-desc"><strong>+ Alfred IDE</strong> — VS Code-compatible IDE (powered by code-server 4.114.0) + Commander extension for AI-powered development</div>
|
||||
<div class="build-size">1.6 GB</div>
|
||||
</div>
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-beta">b4</span></div>
|
||||
<div class="build-date">2026-04-05</div>
|
||||
<div class="build-desc"><strong>+ Alfred Voice</strong> — Kokoro TTS + PyTorch CPU + spaCy NLP + welcome greeting service</div>
|
||||
<div class="build-size">2.2 GB</div>
|
||||
</div>
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-beta">b5</span></div>
|
||||
<div class="build-date">2026-04-05</div>
|
||||
<div class="build-desc"><strong>+ Alfred Search</strong> — Meilisearch local search engine for offline-first instant search</div>
|
||||
<div class="build-size">2.3 GB</div>
|
||||
</div>
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-beta">b6</span></div>
|
||||
<div class="build-date">2026-04-05</div>
|
||||
<div class="build-desc"><strong>+ Calamares Installer</strong> — Full graphical disk installer with Alfred branding and encryption</div>
|
||||
<div class="build-size">2.3 GB</div>
|
||||
</div>
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-rc">RC1</span></div>
|
||||
<div class="build-date">2026-04-05</div>
|
||||
<div class="build-desc"><strong>Release Candidate 1</strong> — All 6 layers combined, first full integration test</div>
|
||||
<div class="build-size">2.3 GB</div>
|
||||
</div>
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-rc">RC2</span></div>
|
||||
<div class="build-date">2026-04-05</div>
|
||||
<div class="build-desc"><strong>Release Candidate 2</strong> — Bug fixes, latest security patches applied</div>
|
||||
<div class="build-size">2.3 GB</div>
|
||||
</div>
|
||||
<div class="build-entry" style="border-color: rgba(52,211,153,0.3); background: rgba(52,211,153,0.05);">
|
||||
<div><span class="build-badge badge-rc">RC3</span></div>
|
||||
<div class="build-date">2026-04-06</div>
|
||||
<div class="build-desc"><strong>Release Candidate 3</strong> — Critical boot fix (kernel naming), splash template fix, binary hook for generic kernel names, kernel 6.1.0-44. <strong>First bootable ISO.</strong></div>
|
||||
<div class="build-size">2.5 GB</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<h3>v4.0 — “The People’s OS” (Trixie Rebase + 4 New Features)</h3>
|
||||
<div class="build-timeline">
|
||||
<div class="build-entry">
|
||||
<div><span class="build-badge badge-beta">RC4</span></div>
|
||||
<div class="build-date">2026-04-06</div>
|
||||
<div class="build-desc"><strong>Trixie Rebase</strong> — Rebased from Debian Bookworm to Trixie (13), kernel 6.12, UEFI+BIOS hybrid boot. Voice hook fixed for Trixie (venv + --only-binary spacy).</div>
|
||||
<div class="build-size">~2.5 GB</div>
|
||||
</div>
|
||||
<div class="build-entry" style="border-color: rgba(52,211,153,0.3); background: rgba(52,211,153,0.05);">
|
||||
<div><span class="build-badge badge-rc">RC5</span></div>
|
||||
<div class="build-date">2026-04-06</div>
|
||||
<div class="build-desc"><strong>Full v4.0 Stack</strong> — All 10 hooks: Welcome App (7-page wizard), Alfred Store (Flatpak center), Voice 2.0 (“Hey Alfred” wake word), alfred-update, alfred-info, version check API. Calamares v4.0 branding.</div>
|
||||
<div class="build-size">~2.5 GB</div>
|
||||
</div>
|
||||
<div class="build-entry" style="border-color: rgba(52,211,153,0.5); background: rgba(52,211,153,0.08);">
|
||||
<div><span class="build-badge badge-rc">RC6</span></div>
|
||||
<div class="build-date">2026-04-06</div>
|
||||
<div class="build-desc"><strong>Hardware + Installer Fix</strong> — All 12 hooks: universal hardware support + security hardening (drivers, firmware, GPU, WiFi, Bluetooth, input devices, power mgmt, auto-detect 3-tier), install-or-try dialog on live boot, XFCE desktop trust fix, Kyber-1024 branding. Calamares now visible and launchable.</div>
|
||||
<div class="build-size">~2.5 GB</div>
|
||||
</div>
|
||||
<div class="build-entry" style="border-color: rgba(99,102,241,0.4); background: rgba(99,102,241,0.06);">
|
||||
<div><span class="build-badge badge-rc">RC7</span></div>
|
||||
<div class="build-date">2026-04-06</div>
|
||||
<div class="build-desc"><strong>KERNEL 7.0 — FIRST DISTRO ON EARTH</strong> — All 13 hooks. Linux kernel 7.0.0-rc7 custom-compiled from Linus Torvalds' mainline source tree. 3 kernel-7-exclusive mitigations: ITS, TSA, VMSCAPE. 24 compiled-in CPU vulnerability mitigations. 12 default security gaps patched. Hook 0050 (kernel 7) + Hook 0160 (352-line security hardening).</div>
|
||||
<div class="build-size">~2.5 GB</div>
|
||||
</div>
|
||||
<div class="build-entry" style="border-color: rgba(16,185,129,0.6); background: rgba(16,185,129,0.12); box-shadow: 0 0 20px rgba(16,185,129,0.15);">
|
||||
<div><span class="build-badge badge-rc" style="background:linear-gradient(135deg,#10b981,#059669);">RC8</span></div>
|
||||
<div class="build-date">2026-04-06</div>
|
||||
<div class="build-desc"><strong>ENTERPRISE SECURITY — 32 MODULES, 3 NEW HOOKS</strong> — All 16 hooks. 3 dedicated security hooks: Hook 0160 Alfred Security (21 modules: sysctl CIS L2, kernel lockdown, AppArmor w/ custom Alfred IDE + Meilisearch profiles, auto-updates, fail2ban 3-try/24h, auditd 30+ immutable rules, DNS-over-TLS, USB security, module blacklist, PAM 10-char/3-class, AIDE file integrity, ClamAV weekly scan, rkhunter + chkrootkit, hidepid=2, secure mounts, banners, core dumps disabled, cron lockdown, compiler restriction, NTS time sync, alfred-security-status CLI). Hook 0165 Network Hardening (7 modules: MAC randomization, nftables default-deny, TCP wrappers, port scan defense, wireless hardening, SSH strong ciphers, alfred-network-status CLI). Hook 0170 Full Disk Encryption (4 modules: LUKS2 cryptsetup + initramfs, strong defaults, Calamares FDE checkbox, alfred-encrypt-status CLI). 19 new security packages. fastfetch replaces neofetch. DNS fix hook (0011). Resilient IDE/Voice hooks (set +e).</div>
|
||||
<div class="build-size">~2.5 GB</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<h3>The Boot Fix Story</h3>
|
||||
<p>RC1 and RC2 were successfully built but contained a critical boot defect that was discovered during ISO inspection: the bootloader referenced <code>/live/vmlinuz</code> and <code>/live/initrd.img</code>, but the ISO only contained the versioned files (<code>vmlinuz-6.1.0-44-amd64</code>). This meant the ISOs would fail to boot on any hardware.</p>
|
||||
<p>The fix was a build hook that runs as the absolute last step (hook #9999) in the chroot phase, creating copies of the kernel and initramfs with the generic names that the bootloader expects. RC3 is the first build with this fix and the latest Debian security patches (kernel 6.1.0-44, including WebKit, OpenSSL, ImageMagick, and GStreamer security updates).</p>
|
||||
|
||||
|
||||
<!-- ═══ COMPONENTS ═══ -->
|
||||
<h2 id="components">Bundled Components</h2>
|
||||
<p>Every component is pre-installed and configured. No package manager needed for the core experience.</p>
|
||||
|
||||
<div class="component-grid">
|
||||
<div class="component-card">
|
||||
<h4>Alfred Browser</h4>
|
||||
<div class="c-version">v4.0.0 — Tauri + WebKitGTK</div>
|
||||
<p>Zero-telemetry sovereign web browser. 4.7 MB. No Google Services, no ad tracking, no phone-home. Set as the system default browser, replacing Firefox entirely.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Alfred IDE</h4>
|
||||
<div class="c-version">Alfred IDE 1.0 (code-server 4.114.0 + Commander 1.0.1)</div>
|
||||
<p>Full Visual Studio Code in the browser. The Alfred Commander extension provides AI chat, voice commands, and MCP tool integration. Runs on port 8443.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Alfred Voice</h4>
|
||||
<div class="c-version">Kokoro TTS + PyTorch CPU</div>
|
||||
<p>Text-to-speech engine running entirely offline. No cloud API needed. Speaks on first boot with a welcome greeting. spaCy NLP for natural language processing.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Alfred Search</h4>
|
||||
<div class="c-version">Meilisearch (latest)</div>
|
||||
<p>Lightning-fast local search engine. Indexes all local files and documentation. Sub-50ms search results. No internet connection required.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Calamares Installer</h4>
|
||||
<div class="c-version">v3.2.x + Alfred v4.0 Branding</div>
|
||||
<p>Graphical disk installer for permanent installation. Supports LUKS full-disk encryption, alongside/replace partitioning, and automated install modes.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Desktop Environment</h4>
|
||||
<div class="c-version">XFCE 4.18 + LightDM</div>
|
||||
<p>Lightweight, fast desktop with Arc dark theme, Papirus icons, JetBrains Mono font, and custom bash prompt. Branded fastfetch with Alfred ASCII art.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<h3>New in v4.0</h3>
|
||||
<div class="component-grid">
|
||||
<div class="component-card">
|
||||
<h4>Welcome App</h4>
|
||||
<div class="c-version">v4.0 — Python/Tk</div>
|
||||
<p>7-page first-boot wizard: voice setup, WiFi config, tool launcher, P2P seeding opt-in, keyboard shortcuts. Runs once, remembers. Dark branded UI.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Alfred Store</h4>
|
||||
<div class="c-version">v4.0 — Flatpak + Flathub</div>
|
||||
<p>App center with 6 curated categories: Featured, Development, Communication, Media, Games, Privacy. Search, one-click install, threaded background updates.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Voice 2.0 Wake Word</h4>
|
||||
<div class="c-version">openWakeWord — systemd service</div>
|
||||
<p>Always-on “Hey Alfred” wake word detection. Runs as a systemd service with 3-second cooldown and configurable audio threshold.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>alfred-update & alfred-info</h4>
|
||||
<div class="c-version">CLI tools — /usr/local/bin/</div>
|
||||
<p><code>alfred-update</code>: one-command APT + Flatpak + Alfred version check. <code>alfred-info</code>: branded system info panel showing version, kernel, uptime, memory, disk, services.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<h3>Security Stack</h3>
|
||||
<div class="component-grid">
|
||||
<div class="component-card">
|
||||
<h4>nftables Firewall</h4>
|
||||
<div class="c-version">Default-deny + UFW frontend</div>
|
||||
<p>nftables drop-by-default firewall with rate-limited SSH and ICMP. UFW frontend available for management. Only essential services allowed through.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>Fail2ban</h4>
|
||||
<div class="c-version">v1.0.2</div>
|
||||
<p>Intrusion prevention system monitoring SSH, web, and other services. Automatically bans repeated failed login attempts.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>SSH Hardening</h4>
|
||||
<div class="c-version">OpenSSH (hardened config)</div>
|
||||
<p>Root login disabled, password auth disabled by default, key-based only. Configured during build with security-first defaults.</p>
|
||||
</div>
|
||||
<div class="component-card">
|
||||
<h4>WireGuard VPN</h4>
|
||||
<div class="c-version">Kernel module included</div>
|
||||
<p>Modern VPN built into the kernel. Ready for mesh networking, sovereign infrastructure, and peer-to-peer encrypted tunnels.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- ═══ BUILD SYSTEM ═══ -->
|
||||
<h2 id="build-system">Build System</h2>
|
||||
<p>Alfred Linux ISOs are built using <strong>Debian live-build</strong>, the same system used to produce official Debian Live images. The build process is fully automated and reproducible.</p>
|
||||
|
||||
<h3>Build Pipeline</h3>
|
||||
<div class="code-block">
|
||||
<span class="comment"># Alfred Linux uses a 3-phase build pipeline:</span>
|
||||
|
||||
<span class="keyword">Phase 1: Bootstrap</span>
|
||||
debootstrap creates a minimal Debian chroot (~400 MB)
|
||||
Base packages installed: dpkg, apt, bash, coreutils
|
||||
|
||||
<span class="keyword">Phase 2: Chroot</span>
|
||||
<span class="number">1,000+</span> packages installed into the chroot
|
||||
16 build hooks execute sequentially:
|
||||
<span class="string">0010</span> — Fix Debian security repository URL format
|
||||
<span class="string">0011</span> — Fix chroot DNS resolution (forcibly writes /etc/resolv.conf)
|
||||
<span class="string">0100</span> — Alfred branding (Plymouth, fastfetch, XFCE config, hardening)
|
||||
<span class="string">0150</span> — Alfred Hardware (universal drivers, firmware, input devices, GPU, WiFi, Bluetooth, power mgmt, auto-detect)
|
||||
<span class="string">0160</span> — <strong>Alfred Security</strong> (21 modules: sysctl CIS L2, kernel lockdown, AppArmor w/ custom profiles, auto-updates, fail2ban, auditd 30+ rules, DNS-over-TLS, USB security, module blacklist, PAM hardening, AIDE, ClamAV, rkhunter + chkrootkit, hidepid, secure mounts, banners, core dumps, cron lockdown, compiler restriction, NTS time sync, alfred-security-status CLI)
|
||||
<span class="string">0165</span> — <strong>Alfred Network Hardening</strong> (7 modules: MAC randomization, nftables default-deny, TCP wrappers, port scan defense, wireless hardening, SSH strong ciphers, alfred-network-status CLI)
|
||||
<span class="string">0170</span> — <strong>Alfred Full Disk Encryption</strong> (4 modules: LUKS2 cryptsetup + initramfs, strong defaults, Calamares FDE checkbox, alfred-encrypt-status CLI)
|
||||
<span class="string">0200</span> — Alfred Browser (remove Firefox, install .deb, set default)
|
||||
<span class="string">0300</span> — Alfred IDE (VS Code-compatible IDE + Commander extension)
|
||||
<span class="string">0400</span> — Alfred Voice (Kokoro TTS + PyTorch CPU + spaCy, venv-isolated)
|
||||
<span class="string">0500</span> — Alfred Search (Meilisearch binary)
|
||||
<span class="string">0600</span> — Calamares installer (KF5/Qt5 + v4.0 branding + LUKS2 FDE)
|
||||
<span class="string">0700</span> — Welcome App (7-page Python/Tk first-boot wizard)
|
||||
<span class="string">0710</span> — alfred-update + alfred-info CLI tools + version check API
|
||||
<span class="string">0800</span> — Alfred Store (Flatpak app center + Flathub + 6 categories)
|
||||
<span class="string">0900</span> — Voice 2.0 (openWakeWord “Hey Alfred” wake word service)
|
||||
<span class="string">9999</span> — Kernel name fix (ensures /boot/vmlinuz exists)
|
||||
|
||||
<span class="keyword">Phase 3: Binary</span>
|
||||
Security updates applied to chroot
|
||||
chroot compressed to squashfs (~2.3 GB → filesystem.squashfs)
|
||||
Bootloader configured (ISOLINUX/syslinux)
|
||||
ISO assembled (xorriso) as hybrid ISO (USB + CD bootable)
|
||||
</div>
|
||||
|
||||
<h3>Build Infrastructure</h3>
|
||||
<table class="spec-table">
|
||||
<thead><tr><th>Component</th><th>Specification</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td><strong>Build Server</strong></td><td>GoSiteMe dedicated build server, 8 cores, 32 GB RAM</td></tr>
|
||||
<tr><td><strong>Build OS</strong></td><td>Ubuntu 22.04 LTS</td></tr>
|
||||
<tr><td><strong>Build Tool</strong></td><td>live-build 3.0 (Ubuntu variant)</td></tr>
|
||||
<tr><td><strong>Compression</strong></td><td>squashfs with gzip (8 threads parallel)</td></tr>
|
||||
<tr><td><strong>ISO Tool</strong></td><td>xorriso with ISOLINUX hybrid boot</td></tr>
|
||||
<tr><td><strong>Build Time</strong></td><td>~15 minutes (full rebuild from clean)</td></tr>
|
||||
<tr><td><strong>Network</strong></td><td>1 Gbps dedicated link to Debian mirrors</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
|
||||
<!-- ═══ SYSTEM SPECS ═══ -->
|
||||
<h2 id="specs">System Specifications</h2>
|
||||
|
||||
<h3>ISO Details</h3>
|
||||
<table class="spec-table">
|
||||
<thead><tr><th>Property</th><th>Value</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td><strong>Base</strong></td><td>Debian 13 (Trixie)</td></tr>
|
||||
<tr><td><strong>Kernel</strong></td><td>Linux 7.0.0-rc7 (amd64, custom-compiled)</td></tr>
|
||||
<tr><td><strong>Architecture</strong></td><td>x86_64 (amd64)</td></tr>
|
||||
<tr><td><strong>ISO Type</strong></td><td>Hybrid (USB stick + CD/DVD bootable, UEFI + BIOS)</td></tr>
|
||||
<tr><td><strong>ISO Size</strong></td><td>~2.5 GB</td></tr>
|
||||
<tr><td><strong>Desktop</strong></td><td>XFCE 4.18 + LightDM</td></tr>
|
||||
<tr><td><strong>Init System</strong></td><td>systemd</td></tr>
|
||||
<tr><td><strong>Package Format</strong></td><td>APT (.deb)</td></tr>
|
||||
<tr><td><strong>Boot Firmware</strong></td><td>UEFI + BIOS (ISOLINUX/GRUB hybrid)</td></tr>
|
||||
<tr><td><strong>License</strong></td><td>AGPL-3.0</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
<h3>Minimum Requirements</h3>
|
||||
<table class="spec-table">
|
||||
<thead><tr><th>Component</th><th>Minimum</th><th>Recommended</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td><strong>RAM</strong></td><td>4 GB</td><td>16 GB</td></tr>
|
||||
<tr><td><strong>Storage</strong></td><td>32 GB</td><td>256 GB NVMe</td></tr>
|
||||
<tr><td><strong>CPU</strong></td><td>2 cores, x86_64</td><td>8+ cores</td></tr>
|
||||
<tr><td><strong>GPU</strong></td><td>Any (VESA fallback)</td><td>AMD/NVIDIA with open drivers</td></tr>
|
||||
<tr><td><strong>Network</strong></td><td>Optional (works offline)</td><td>Ethernet or WiFi</td></tr>
|
||||
<tr><td><strong>Boot</strong></td><td>USB 2.0 or CD/DVD</td><td>USB 3.0+</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
<h3>Pre-installed Package Highlights</h3>
|
||||
<table class="spec-table">
|
||||
<thead><tr><th>Category</th><th>Packages</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td><strong>Desktop</strong></td><td>xfce4, xfce4-goodies, thunar, xfce4-terminal, lightdm</td></tr>
|
||||
<tr><td><strong>Media</strong></td><td>VLC, PulseAudio, ImageMagick</td></tr>
|
||||
<tr><td><strong>Networking</strong></td><td>NetworkManager, WireGuard, curl, wget, OpenSSH</td></tr>
|
||||
<tr><td><strong>Security</strong></td><td>nftables, AppArmor, fail2ban, auditd, AIDE, ClamAV, rkhunter, chkrootkit, GnuPG, KeePassXC</td></tr>
|
||||
<tr><td><strong>Development</strong></td><td>git, vim, nano, python3, build-essential</td></tr>
|
||||
<tr><td><strong>System</strong></td><td>htop, fastfetch, file-roller, gparted</td></tr>
|
||||
<tr><td><strong>Fonts</strong></td><td>JetBrains Mono, Noto (full CJK support), Liberation</td></tr>
|
||||
<tr><td><strong>Theming</strong></td><td>Arc theme, Papirus icons, Plymouth boot splash</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
|
||||
<!-- ═══ SECURITY ═══ -->
|
||||
<h2 id="security">Security Posture</h2>
|
||||
<p>Alfred Linux ships <strong>32 security modules</strong> across 3 dedicated build hooks. Every default is chosen for defense, not convenience. RC8 delivers enterprise-grade hardening out of the box.</p>
|
||||
|
||||
<h3>Hook 0160 — Alfred Security (21 Modules)</h3>
|
||||
<ul>
|
||||
<li><strong>Kernel sysctl hardening</strong> — 45+ CIS Level 2 rules: ASLR=2, symlink/hardlink protection, SYN cookies, ICMP redirect blocking, source routing disabled, core dumps off</li>
|
||||
<li><strong>Kernel lockdown</strong> — integrity mode enforced at boot</li>
|
||||
<li><strong>AppArmor</strong> — Mandatory access control enforced with custom profiles for Alfred IDE and Meilisearch</li>
|
||||
<li><strong>Unattended-upgrades</strong> — Automatic security patches enabled by default</li>
|
||||
<li><strong>Fail2ban</strong> — SSH brute-force protection (3 attempts → 24-hour ban)</li>
|
||||
<li><strong>Auditd</strong> — 30+ immutable audit rules for system calls, file access, auth events</li>
|
||||
<li><strong>DNS-over-TLS</strong> — Quad9 (9.9.9.9) + Cloudflare (1.1.1.1) encrypted DNS via systemd-resolved</li>
|
||||
<li><strong>USB security</strong> — USBGuard-style logging + <code>alfred-usb-storage</code> toggle tool</li>
|
||||
<li><strong>Module blacklisting</strong> — firewire, dccp, sctp, cramfs, freevxfs, hfs, jffs2, udf, thunderbolt DMA</li>
|
||||
<li><strong>PAM hardening</strong> — 10-character minimum, 3 character classes, account lockout after failed attempts</li>
|
||||
<li><strong>AIDE</strong> — File integrity monitoring with daily cron check + <code>alfred-aide-init</code> baseline tool</li>
|
||||
<li><strong>ClamAV</strong> — Antivirus engine with weekly scheduled scan via <code>alfred-scan</code></li>
|
||||
<li><strong>Rootkit detection</strong> — rkhunter + chkrootkit with weekly cron scans</li>
|
||||
<li><strong>hidepid=2</strong> — Users cannot see other users' processes</li>
|
||||
<li><strong>Secure mounts</strong> — /tmp with noexec,nosuid,nodev; /var/tmp and /dev/shm hardened</li>
|
||||
<li><strong>Login banners</strong> — Legal warning banners on console and SSH</li>
|
||||
<li><strong>Core dumps disabled</strong> — via sysctl + limits.conf + systemd</li>
|
||||
<li><strong>Cron/at lockdown</strong> — Root-only access to scheduled tasks</li>
|
||||
<li><strong>Compiler restriction</strong> — gcc/g++ restricted to 'dev' group only</li>
|
||||
<li><strong>NTS time sync</strong> — Chrony with Network Time Security (authenticated NTP)</li>
|
||||
<li><strong><code>alfred-security-status</code></strong> — CLI dashboard showing status of all 21 modules</li>
|
||||
</ul>
|
||||
|
||||
<h3>Hook 0165 — Alfred Network Hardening (7 Modules)</h3>
|
||||
<ul>
|
||||
<li><strong>MAC randomization</strong> — WiFi and Ethernet interfaces use random MAC addresses per-connection</li>
|
||||
<li><strong>nftables firewall</strong> — Default-deny ingress, allow established + ICMP + loopback only</li>
|
||||
<li><strong>TCP wrappers</strong> — hosts.deny ALL:ALL, hosts.allow sshd from localhost</li>
|
||||
<li><strong>Port scan defense</strong> — nftables rate-limiting rules against SYN flood and port scanning</li>
|
||||
<li><strong>Wireless hardening</strong> — WPS disabled, strong WPA supplicant defaults</li>
|
||||
<li><strong>SSH strong ciphers</strong> — chacha20-poly1305, aes256-gcm only; ed25519 + sntrup761x25519 key exchange</li>
|
||||
<li><strong><code>alfred-network-status</code></strong> — CLI dashboard showing firewall, MAC, SSH cipher status</li>
|
||||
</ul>
|
||||
|
||||
<h3>Hook 0170 — Full Disk Encryption (4 Modules)</h3>
|
||||
<ul>
|
||||
<li><strong>LUKS2 support</strong> — cryptsetup + cryptsetup-initramfs installed and configured</li>
|
||||
<li><strong>Strong defaults</strong> — aes-xts-plain64, sha512, 4096-bit key, argon2id KDF</li>
|
||||
<li><strong>Calamares FDE</strong> — enableLuksAutomatedPartitioning checkbox enabled in installer</li>
|
||||
<li><strong><code>alfred-encrypt-status</code></strong> — CLI tool to check encryption status of all block devices</li>
|
||||
</ul>
|
||||
|
||||
<h3>Foundational Security</h3>
|
||||
<ul>
|
||||
<li><strong>Zero Telemetry</strong> — No phone-home, no crash reporting, no usage analytics. The OS does not contact any server unless you tell it to.</li>
|
||||
<li><strong>24 CPU mitigations</strong> — Spectre v1/v2/BHI, Meltdown, MDS, TAA, MMIO, RFDS, SRBDS, L1TF, SSB, ITS, TSA, VMSCAPE compiled in</li>
|
||||
<li><strong>16 boot parameters</strong> — init_on_alloc, init_on_free, slab_nomerge, pti=on, lockdown=integrity, debugfs=off, io_uring_disabled, tsx=off, vsyscall=none</li>
|
||||
<li><strong>WireGuard Ready</strong> — VPN kernel module pre-loaded for encrypted mesh networking</li>
|
||||
<li><strong>Auditable Build</strong> — Every ISO is built from a documented script. SHA-256 + BLAKE3 checksums are published for every release</li>
|
||||
</ul>
|
||||
|
||||
|
||||
<!-- ═══ ISO DETAILS ═══ -->
|
||||
<h2 id="iso-details">Download & Verify</h2>
|
||||
|
||||
<div class="info-card success">
|
||||
<h4>Latest Release: Alfred Linux 4.0 RC8</h4>
|
||||
<p>Download the ISO and verify the SHA-256 + BLAKE3 checksums before booting. Write to USB with <code>dd</code>, Balena Etcher, or Rufus.</p>
|
||||
</div>
|
||||
|
||||
<div class="code-block">
|
||||
<span class="comment"># Download</span>
|
||||
wget https://alfredlinux.com/downloads/alfred-linux-4.0-rc8-amd64.iso
|
||||
|
||||
<span class="comment"># Verify checksum</span>
|
||||
wget https://alfredlinux.com/downloads/alfred-linux-4.0-rc8-amd64.iso.sha256
|
||||
sha256sum -c alfred-linux-4.0-rc8-amd64.iso.sha256
|
||||
|
||||
<span class="comment"># Verify BLAKE3 (install: cargo install b3sum)</span>
|
||||
b3sum alfred-linux-4.0-rc8-amd64.iso
|
||||
<span class="comment"># Expected: e021d2024599aa918972d9e6b9fd9c1d97d226ac69da035913fd7a462dbef47d</span>
|
||||
|
||||
<span class="comment"># Write to USB (replace /dev/sdX with your USB device)</span>
|
||||
sudo dd if=alfred-linux-4.0-rc8-amd64.iso of=/dev/sdX bs=4M status=progress oflag=sync
|
||||
|
||||
<span class="comment"># Boot</span>
|
||||
<span class="comment"># Restart your computer and boot from USB</span>
|
||||
<span class="comment"># Select "Alfred Linux 4.0 (Live)" from the boot menu</span>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- ═══ MOBILE ═══ -->
|
||||
<h2 id="mobile">Alfred Linux Mobile (Android)</h2>
|
||||
<p>Alfred Linux runs on Android phones and tablets — Samsung Galaxy S26 Ultra, Pixel, OnePlus, any device running Android 12+. No root required. Uses Termux + proot-distro to run a full Debian Bookworm environment with all Alfred components.</p>
|
||||
|
||||
<div class="info-card success">
|
||||
<h4>What You Get on Mobile</h4>
|
||||
<p><strong>Alfred IDE</strong> (powered by code-server — the same VS Code engine used by enterprise teams worldwide, running entirely on your device) · <strong>Alfred Search</strong> (Meilisearch) · <strong>Alfred Voice</strong> (Kokoro TTS) · Full Linux terminal · Python, Node.js, Git, and build tools. With Samsung DeX, plug into a monitor and you have a full desktop development environment.</p>
|
||||
</div>
|
||||
|
||||
<h3>Quick Install</h3>
|
||||
<div class="code-block">
|
||||
<span class="comment"># 1. Install Termux from F-Droid (NOT Google Play)</span>
|
||||
<span class="comment"># https://f-droid.org/en/packages/com.termux/</span>
|
||||
|
||||
<span class="comment"># 2. Open Termux and run:</span>
|
||||
curl -fsSL https://alfredlinux.com/downloads/install-alfred-mobile.sh | bash
|
||||
|
||||
<span class="comment"># 3. After install, use these commands:</span>
|
||||
alfred <span class="comment"># Enter Alfred Linux shell</span>
|
||||
alfred-ide <span class="comment"># Launch Alfred IDE in browser</span>
|
||||
alfred-info <span class="comment"># Show system info</span>
|
||||
</div>
|
||||
|
||||
<h3>Requirements</h3>
|
||||
<ul>
|
||||
<li><strong>Android 12+</strong> (Samsung One UI 4+, Pixel 6+, etc.)</li>
|
||||
<li><strong>4 GB free storage</strong> for the full Alfred environment</li>
|
||||
<li><strong>Termux</strong> from F-Droid (the Google Play version is deprecated)</li>
|
||||
<li><strong>Optional:</strong> Termux:Widget for home screen shortcuts</li>
|
||||
<li><strong>Optional:</strong> Samsung DeX for desktop-mode IDE experience</li>
|
||||
</ul>
|
||||
|
||||
<h3>Samsung DeX Integration</h3>
|
||||
<p>When connected to an external display via USB-C or Miracast, Samsung DeX provides a desktop-like environment. Launch <code>alfred-ide</code>, open your browser, and you have a full VS Code IDE on a large screen — powered entirely by your phone. Alfred IDE runs on code-server, the same engine powering VS Code for the Web at major companies. The Samsung S26 Ultra with 12GB RAM and Snapdragon 8 Elite runs it smoothly.</p>
|
||||
|
||||
<h3>Architecture Notes</h3>
|
||||
<p>Mobile Alfred Linux runs on <strong>ARM64 (aarch64)</strong> inside a proot container. The Debian userspace is real — you can install any Debian package with <code>apt</code>. The kernel is Android's, but everything above it is standard Debian Bookworm. This means:</p>
|
||||
<ul>
|
||||
<li>Full <code>apt</code> package manager — install anything from Debian repos</li>
|
||||
<li>Python, Node.js, Ruby, Go, Rust — all work natively on ARM64</li>
|
||||
<li>No root needed — proot translates system calls without kernel modifications</li>
|
||||
<li>Persistent storage — your files survive Termux restarts</li>
|
||||
<li>Network access — uses Android's network stack transparently</li>
|
||||
</ul>
|
||||
|
||||
|
||||
<!-- ═══ CONTRIBUTING ═══ -->
|
||||
<h2 id="contribute">Contributing</h2>
|
||||
<p>Alfred Linux is open source under the AGPL-3.0 license. Contributions are welcome and rewarded with GSM tokens.</p>
|
||||
|
||||
<h3>How to Contribute</h3>
|
||||
<ul>
|
||||
<li><strong>Report Bugs</strong> — Test the ISO and report any issues. Boot failures, hardware incompatibilities, broken features. 10-50 GSM per confirmed bug.</li>
|
||||
<li><strong>Submit Patches</strong> — Fix bugs or add features via pull requests. 100-1,000 GSM per merged feature.</li>
|
||||
<li><strong>Write Documentation</strong> — Help expand this documentation, write tutorials, create videos. 50-500 GSM per contribution.</li>
|
||||
<li><strong>Test Hardware</strong> — Boot Alfred Linux on your hardware and report compatibility. We need coverage across laptops, desktops, and servers.</li>
|
||||
<li><strong>Translate</strong> — Help bring Alfred Linux to your language. Localization is a priority for v3.0.</li>
|
||||
</ul>
|
||||
|
||||
<h3>Build It Yourself</h3>
|
||||
<div class="code-block">
|
||||
<span class="comment"># Requirements: Debian/Ubuntu with sudo, 32GB RAM recommended, 50GB free disk</span>
|
||||
|
||||
<span class="comment"># Install dependencies</span>
|
||||
sudo apt install live-build debootstrap squashfs-tools xorriso isolinux syslinux-common syslinux
|
||||
|
||||
<span class="comment"># Clone the build scripts</span>
|
||||
git clone https://alfredlinux.com/forge/commander/alfred-linux.git
|
||||
cd alfred-linux
|
||||
|
||||
<span class="comment"># Build the full RC8 ISO</span>
|
||||
sudo bash scripts/build-unified.sh rc8
|
||||
|
||||
<span class="comment"># Output: iso-output/alfred-linux-4.0-rc8-amd64-YYYYMMDD.iso</span>
|
||||
</div>
|
||||
|
||||
<div class="info-card">
|
||||
<h4>Build Requirements</h4>
|
||||
<p><strong>OS:</strong> Debian 12+ or Ubuntu 22.04+ — <strong>CPU:</strong> 4+ cores — <strong>RAM:</strong> 16 GB minimum (32 GB recommended) — <strong>Disk:</strong> 50 GB free — <strong>Time:</strong> ~15 minutes on modern hardware</p>
|
||||
</div>
|
||||
|
||||
|
||||
<h2 style="margin-top:4rem;">What's Next</h2>
|
||||
<p>Alfred Linux v4.0 is the fully-loaded foundation. The next milestones are:</p>
|
||||
<ul>
|
||||
<li><strong>ARM64 build</strong> — Raspberry Pi 4/5 and Apple Silicon support</li>
|
||||
<li><strong>Wayland desktop</strong> — XFCE on Wayland (wlroots) for the Alfred Desktop Environment</li>
|
||||
<li><strong>Whisper STT integration</strong> — Voice input via OpenAI Whisper running locally on GPU</li>
|
||||
<li><strong>Custom wake word model</strong> — Train a dedicated “Hey Alfred” model instead of using the built-in closest match</li>
|
||||
<li><strong>GSM wallet & mining</strong> — Built-in token wallet and compute contribution system</li>
|
||||
<li><strong>Secure Boot signing</strong> — Microsoft-signed shim for Secure Boot compatibility</li>
|
||||
<li><strong>Auto-update channel</strong> — alfred-update with delta/OTA patches instead of full ISO rebuilds</li>
|
||||
</ul>
|
||||
|
||||
</main>
|
||||
</div>
|
||||
|
||||
<!-- ═══ FOOTER ═══ -->
|
||||
<footer>
|
||||
<p>© <?= $year ?> <a href="https://gositeme.com">GoSiteMe Inc.</a> — Alfred Linux · Open Source (AGPL-3.0)</p>
|
||||
</footer>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
1109
download.php
Normal file
1109
download.php
Normal file
File diff suppressed because it is too large
Load Diff
421
releases.php
Normal file
421
releases.php
Normal file
@ -0,0 +1,421 @@
|
||||
<?php
|
||||
/**
|
||||
* Alfred Linux — Release Notes
|
||||
* Changelog and release history
|
||||
*
|
||||
* Built by Alfred for Commander Danny William Perez
|
||||
* GoSiteMe Inc. — April 2026
|
||||
*/
|
||||
$year = date('Y');
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Alfred Linux — Release Notes</title>
|
||||
<meta name="description" content="Release notes and changelog for Alfred Linux. Track every build from RC1 to the latest kernel 7.0 release.">
|
||||
<meta property="og:title" content="Alfred Linux — Release Notes">
|
||||
<meta property="og:description" content="Full changelog for Alfred Linux — the first distro shipping Linux kernel 7.0.">
|
||||
<meta property="og:type" content="article">
|
||||
<meta property="og:url" content="https://alfredlinux.com/releases">
|
||||
<meta property="og:image" content="https://alfredlinux.com/og-image.png">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="Alfred Linux — Release Notes">
|
||||
<meta name="twitter:description" content="Full changelog for Alfred Linux — the first distro shipping Linux kernel 7.0.">
|
||||
<meta name="twitter:image" content="https://alfredlinux.com/og-image.png">
|
||||
<link rel="canonical" href="https://alfredlinux.com/releases">
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<link rel="stylesheet" href="/assets/fonts/inter/inter.css">
|
||||
<script type="application/ld+json">
|
||||
{
|
||||
"@context": "https://schema.org",
|
||||
"@type": "Article",
|
||||
"headline": "Alfred Linux Release Notes — From RC1 to Kernel 7.0 RC8",
|
||||
"description": "Complete changelog for Alfred Linux. 10 ISOs built, from Debian Bookworm to Trixie, from kernel 6.1 to custom-compiled 7.0. Every build tracked with SHA-256 and BLAKE3 checksums.",
|
||||
"author": { "@type": "Organization", "name": "GoSiteMe Inc.", "url": "https://gositeme.com" },
|
||||
"publisher": { "@type": "Organization", "name": "GoSiteMe Inc.", "url": "https://gositeme.com" },
|
||||
"datePublished": "2026-04-06",
|
||||
"dateModified": "2026-04-07",
|
||||
"mainEntityOfPage": "https://alfredlinux.com/releases",
|
||||
"about": {
|
||||
"@type": "SoftwareApplication",
|
||||
"name": "Alfred Linux",
|
||||
"operatingSystem": "Linux",
|
||||
"applicationCategory": "OperatingSystem",
|
||||
"softwareVersion": "4.0 RC8"
|
||||
}
|
||||
}
|
||||
</script>
|
||||
<style>
|
||||
:root {
|
||||
--bg: #06060b;
|
||||
--surface: rgba(255,255,255,0.03);
|
||||
--border: rgba(255,255,255,0.06);
|
||||
--text: #e0e0e0;
|
||||
--text-muted: #9ca3af;
|
||||
--text-dim: #6b7280;
|
||||
--accent: #6366f1;
|
||||
--accent-light: #a5b4fc;
|
||||
--green: #34d399;
|
||||
--amber: #f59e0b;
|
||||
--cyan: #22d3ee;
|
||||
--red: #ef4444;
|
||||
}
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
html { scroll-behavior: smooth; }
|
||||
body {
|
||||
font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif;
|
||||
background: var(--bg);
|
||||
color: var(--text);
|
||||
line-height: 1.7;
|
||||
min-height: 100vh;
|
||||
}
|
||||
a { color: var(--accent-light); text-decoration: none; }
|
||||
a:hover { text-decoration: underline; }
|
||||
|
||||
.top-bar {
|
||||
background: rgba(6,6,11,0.95);
|
||||
border-bottom: 1px solid var(--border);
|
||||
padding: 1rem 2rem;
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 2rem;
|
||||
position: sticky;
|
||||
top: 0;
|
||||
z-index: 100;
|
||||
backdrop-filter: blur(12px);
|
||||
}
|
||||
.top-bar .brand { font-weight: 700; font-size: 1.1rem; color: var(--cyan); }
|
||||
.top-bar nav a { color: var(--text-muted); font-size: 0.9rem; }
|
||||
.top-bar nav a:hover { color: var(--text); text-decoration: none; }
|
||||
|
||||
.hero {
|
||||
max-width: 900px;
|
||||
margin: 3rem auto 2rem;
|
||||
padding: 0 2rem;
|
||||
text-align: center;
|
||||
}
|
||||
.hero h1 { font-size: 2.2rem; font-weight: 700; margin-bottom: 0.5rem; }
|
||||
.hero .sub { color: var(--text-muted); font-size: 1.05rem; }
|
||||
|
||||
.container { max-width: 900px; margin: 0 auto; padding: 0 2rem 4rem; }
|
||||
|
||||
.release {
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 12px;
|
||||
padding: 2rem;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
.release-header {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 1rem;
|
||||
margin-bottom: 1.5rem;
|
||||
flex-wrap: wrap;
|
||||
}
|
||||
.release-header h2 { font-size: 1.5rem; font-weight: 700; }
|
||||
.badge {
|
||||
display: inline-block;
|
||||
padding: 0.2rem 0.7rem;
|
||||
border-radius: 6px;
|
||||
font-size: 0.75rem;
|
||||
font-weight: 600;
|
||||
text-transform: uppercase;
|
||||
letter-spacing: 0.05em;
|
||||
}
|
||||
.badge-latest { background: rgba(34,211,238,0.15); color: var(--cyan); border: 1px solid rgba(34,211,238,0.3); }
|
||||
.badge-kernel7 { background: rgba(251,191,36,0.15); color: var(--amber); border: 1px solid rgba(251,191,36,0.3); }
|
||||
.badge-security { background: rgba(52,211,153,0.15); color: var(--green); border: 1px solid rgba(52,211,153,0.3); }
|
||||
.badge-previous { background: rgba(255,255,255,0.05); color: var(--text-dim); border: 1px solid var(--border); }
|
||||
.release-date { color: var(--text-dim); font-size: 0.85rem; }
|
||||
|
||||
.release h3 { font-size: 1.05rem; font-weight: 600; color: var(--accent-light); margin: 1.2rem 0 0.5rem; }
|
||||
.release ul { list-style: none; padding: 0; }
|
||||
.release li {
|
||||
padding: 0.35rem 0 0.35rem 1.5rem;
|
||||
position: relative;
|
||||
color: var(--text-muted);
|
||||
font-size: 0.92rem;
|
||||
}
|
||||
.release li::before {
|
||||
content: '›';
|
||||
position: absolute;
|
||||
left: 0.4rem;
|
||||
color: var(--accent);
|
||||
font-weight: 700;
|
||||
}
|
||||
.release li strong { color: var(--text); }
|
||||
|
||||
.checksum {
|
||||
background: rgba(0,0,0,0.3);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 8px;
|
||||
padding: 0.8rem 1rem;
|
||||
margin-top: 1rem;
|
||||
font-family: 'SF Mono', 'Fira Code', monospace;
|
||||
font-size: 0.78rem;
|
||||
color: var(--text-dim);
|
||||
word-break: break-all;
|
||||
}
|
||||
.checksum span { color: var(--green); }
|
||||
|
||||
.dl-btn {
|
||||
display: inline-block;
|
||||
margin-top: 1rem;
|
||||
padding: 0.6rem 1.4rem;
|
||||
background: var(--accent);
|
||||
color: #fff;
|
||||
border-radius: 8px;
|
||||
font-weight: 600;
|
||||
font-size: 0.9rem;
|
||||
transition: background 0.2s;
|
||||
}
|
||||
.dl-btn:hover { background: var(--accent-light); color: var(--bg); text-decoration: none; }
|
||||
|
||||
footer {
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
color: var(--text-dim);
|
||||
font-size: 0.8rem;
|
||||
border-top: 1px solid var(--border);
|
||||
}
|
||||
|
||||
@media (max-width: 640px) {
|
||||
.hero h1 { font-size: 1.6rem; }
|
||||
.release { padding: 1.2rem; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="top-bar">
|
||||
<div class="brand">Alfred Linux</div>
|
||||
<nav>
|
||||
<a href="/">Home</a>
|
||||
<a href="/download">Download</a>
|
||||
<a href="/apps">Apps</a>
|
||||
<a href="/compare">Compare</a>
|
||||
<a href="/docs">Docs</a>
|
||||
<a href="/releases" style="color:var(--text);">Releases</a>
|
||||
<a href="/security">Security</a>
|
||||
<a href="/about">About</a>
|
||||
<a href="/developers">Developers</a>
|
||||
</nav>
|
||||
</div>
|
||||
|
||||
<div class="hero">
|
||||
<h1>Release Notes</h1>
|
||||
<p class="sub">Every build. Every kernel. Every hardening pass.</p>
|
||||
</div>
|
||||
|
||||
<div class="container">
|
||||
|
||||
<!-- RC8 — CURRENT -->
|
||||
<div class="release" id="rc8">
|
||||
<div class="release-header">
|
||||
<h2>v4.0 RC8</h2>
|
||||
<span class="badge badge-latest">Latest</span>
|
||||
<span class="badge badge-kernel7">Kernel 7.0</span>
|
||||
<span class="badge badge-security">32 Security Modules</span>
|
||||
</div>
|
||||
<div class="release-date">April 7, 2026 — <strong>Enterprise-grade security hardening: 32 modules, 3 dedicated hooks, full-disk encryption</strong></div>
|
||||
|
||||
<h3>Security Hardening (32 Modules — 3 New Hooks)</h3>
|
||||
<ul>
|
||||
<li><strong>Hook 0160 — Alfred Security</strong> (21 modules): sysctl CIS L2 hardening (45+ rules), kernel lockdown mode, AppArmor enforced with custom Alfred IDE & Meilisearch profiles, unattended-upgrades, fail2ban (SSH 3-try/24h ban), auditd (30+ immutable rules), DNS-over-TLS (Quad9 + Cloudflare), USB security logging & toggle, dangerous module blacklisting (firewire, dccp, sctp, cramfs), PAM password hardening (10-char/3-class/lockout), AIDE file integrity monitoring, ClamAV antivirus (weekly scan), rootkit detection (rkhunter + chkrootkit), hidepid=2, secure mount options (/tmp noexec), login banners, core dump prevention, cron/at root-only, compiler access restriction, NTS time synchronization (chrony), <code>alfred-security-status</code> CLI tool</li>
|
||||
<li><strong>Hook 0165 — Alfred Network Hardening</strong> (7 modules): MAC address randomization (WiFi + Ethernet), nftables default-deny firewall, TCP wrappers, port scan defense, wireless hardening (WPS disabled), SSH strong ciphers only (chacha20-poly1305, ed25519, sntrup761x25519), <code>alfred-network-status</code> CLI tool</li>
|
||||
<li><strong>Hook 0170 — Full Disk Encryption</strong> (4 modules): LUKS2 with cryptsetup + initramfs integration, strong encryption defaults, Calamares FDE checkbox enabled, <code>alfred-encrypt-status</code> CLI tool</li>
|
||||
</ul>
|
||||
|
||||
<h3>Build System</h3>
|
||||
<ul>
|
||||
<li><strong>16 build hooks</strong> — up from 13 in RC7 (3 new security hooks)</li>
|
||||
<li><strong>19 new security packages</strong>: apparmor suite, auditd, aide, clamav, rkhunter, chkrootkit, libpam-pwquality, chrony, nftables, unattended-upgrades, cryptsetup</li>
|
||||
<li><strong>DNS fix hook</strong> (0011): resolves chroot DNS failures by forcibly writing /etc/resolv.conf</li>
|
||||
<li><strong>fastfetch</strong> replaces neofetch (removed from Trixie repos)</li>
|
||||
<li><strong>Resilient hooks</strong>: IDE (0300) and Voice (0400) now use <code>set +e</code> so optional failures don't kill the build</li>
|
||||
</ul>
|
||||
|
||||
<h3>Applications</h3>
|
||||
<ul>
|
||||
<li><strong>Alfred IDE</strong> — VS Code-compatible IDE (powered by code-server 4.114.0)</li>
|
||||
<li><strong>Alfred Voice</strong> — Kokoro TTS + PyTorch + espeak-ng + OpenWakeWord</li>
|
||||
<li><strong>Alfred Search</strong> — Meilisearch instant search</li>
|
||||
<li><strong>Alfred Store</strong> — Flatpak + GNOME Software</li>
|
||||
<li><strong>Alfred Browser</strong> — Tauri + WebKitGTK (zero telemetry)</li>
|
||||
<li><strong>Alfred Welcome</strong> — first-boot wizard</li>
|
||||
<li><strong>Alfred Update</strong> — system update manager</li>
|
||||
<li><strong>Calamares</strong> — graphical installer with FDE support</li>
|
||||
</ul>
|
||||
|
||||
<h3>Platform</h3>
|
||||
<ul>
|
||||
<li><strong>Kernel:</strong> Linux 7.0.0-rc7-alfred (custom-compiled mainline)</li>
|
||||
<li><strong>Base:</strong> Debian Trixie (13)</li>
|
||||
<li><strong>Boot:</strong> BIOS + UEFI hybrid ISO</li>
|
||||
<li><strong>Desktop:</strong> XFCE 4.18 + LightDM</li>
|
||||
<li><strong>Size:</strong> 2.4 GB ISO</li>
|
||||
<li><strong>Distribution:</strong> WebTorrent P2P (browser-native) + .torrent file</li>
|
||||
<li><strong>CLI Tools:</strong> alfred-security-status, alfred-scan, alfred-usb-storage, alfred-aide-init, alfred-network-status, alfred-encrypt-status, alfred-info, alfred-update, fastfetch</li>
|
||||
</ul>
|
||||
|
||||
<div class="checksum">
|
||||
<strong>SHA-256:</strong><br>
|
||||
<span>7d49ef3cfb957cb9854bd3f451ef99ec8255afd68069a89ed0cf5a847d5d79bf</span>
|
||||
</div>
|
||||
<div class="checksum">
|
||||
<strong>BLAKE3:</strong><br>
|
||||
<span>e021d2024599aa918972d9e6b9fd9c1d97d226ac69da035913fd7a462dbef47d</span>
|
||||
</div>
|
||||
|
||||
<a class="dl-btn" href="/download">Download RC8</a>
|
||||
</div>
|
||||
|
||||
<!-- RC7 -->
|
||||
<div class="release" id="rc7">
|
||||
<div class="release-header">
|
||||
<h2>v4.0 RC7</h2>
|
||||
<span class="badge badge-previous">Previous</span>
|
||||
<span class="badge badge-kernel7">Kernel 7.0</span>
|
||||
</div>
|
||||
<div class="release-date">April 6, 2026 — <strong>First distro on earth shipping Linux kernel 7.0</strong></div>
|
||||
|
||||
<h3>Kernel</h3>
|
||||
<ul>
|
||||
<li><strong>Linux 7.0.0-rc7-alfred</strong> — custom-compiled from Linus Torvalds' mainline tree (released April 5, 2026)</li>
|
||||
<li>3 kernel-7-exclusive CPU mitigations: <strong>ITS</strong> (Indirect Target Selection), <strong>TSA</strong> (Transient Scheduler Attacks), <strong>VMSCAPE</strong> (VM-exit Speculative Code Attack Prevention)</li>
|
||||
<li>24 total compiled-in CPU mitigations (Spectre v1/v2/BHI, Meltdown, MDS, TAA, MMIO, RFDS, SRBDS, L1TF, SSB, and more)</li>
|
||||
</ul>
|
||||
|
||||
<h3>Security (12 default gaps patched)</h3>
|
||||
<ul>
|
||||
<li><strong>16 boot security parameters</strong>: init_on_alloc, init_on_free, slab_nomerge, page_alloc.shuffle, pti=on, lockdown=integrity, debugfs=off, io_uring_disabled, tsx=off, vsyscall=none, and more</li>
|
||||
<li><strong>nftables drop-by-default firewall</strong> with UFW front-end</li>
|
||||
<li><strong>AppArmor</strong> mandatory access control enforced at boot</li>
|
||||
<li><strong>fail2ban</strong> intrusion prevention active by default</li>
|
||||
<li><strong>auditd</strong> security audit logging enabled</li>
|
||||
<li><strong>unattended-upgrades</strong> for automatic security patches</li>
|
||||
<li><strong>Auto-generated IDE passwords</strong> — no more hardcoded defaults</li>
|
||||
<li>Dangerous kernel modules blacklisted: firewire, thunderbolt DMA, cramfs, freevxfs, hfs, jffs2, udf</li>
|
||||
<li>Kernel sysctl hardening: ASLR=2, symlink/hardlink protection, SYN cookies, ICMP redirects disabled, source routing blocked</li>
|
||||
</ul>
|
||||
|
||||
<h3>Applications (13 build hooks)</h3>
|
||||
<ul>
|
||||
<li><strong>Alfred IDE</strong> — VS Code-compatible IDE (powered by code-server 4.114.0)</li>
|
||||
<li><strong>Alfred Voice</strong> — Kokoro TTS engine with PyTorch 2.11.0, espeak-ng, OpenWakeWord</li>
|
||||
<li><strong>Alfred Search</strong> — Meilisearch instant search engine</li>
|
||||
<li><strong>Alfred Store</strong> — Flatpak + GNOME Software for app distribution</li>
|
||||
<li><strong>Alfred Browser</strong> — Tauri + WebKitGTK (zero telemetry)</li>
|
||||
<li><strong>Alfred Welcome</strong> — first-boot welcome and setup wizard</li>
|
||||
<li><strong>Alfred Update</strong> — system update manager</li>
|
||||
<li><strong>Calamares</strong> — graphical installer for disk installation</li>
|
||||
</ul>
|
||||
|
||||
<h3>Platform</h3>
|
||||
<ul>
|
||||
<li><strong>Base:</strong> Debian Trixie (13)</li>
|
||||
<li><strong>Boot:</strong> BIOS + UEFI hybrid ISO (ISOLINUX + GRUB EFI)</li>
|
||||
<li><strong>Desktop:</strong> LightDM display manager</li>
|
||||
<li><strong>Hardware:</strong> LVM2, btrfs, ZRAM swap, TLP power management, CUPS printing, thermald</li>
|
||||
<li><strong>Size:</strong> 2.5 GB ISO</li>
|
||||
<li><strong>Distribution:</strong> WebTorrent P2P (sovereign distribution)
|
||||
</ul>
|
||||
|
||||
<div class="checksum">
|
||||
<strong>SHA-256:</strong><br>
|
||||
<span>2ee02635f2fbf2ba3d4c88c8cbdc528902dec4d79275c76fc6457f74ef38f1b1</span>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- RC6 -->
|
||||
<div class="release" id="rc6">
|
||||
<div class="release-header">
|
||||
<h2>v4.0 RC6</h2>
|
||||
<span class="badge badge-previous">Previous</span>
|
||||
</div>
|
||||
<div class="release-date">April 6, 2026</div>
|
||||
|
||||
<h3>Highlights</h3>
|
||||
<ul>
|
||||
<li><strong>Kernel 6.12.74</strong> — Debian Trixie LTS security kernel</li>
|
||||
<li><strong>12 build hooks</strong> (full application stack)</li>
|
||||
<li><strong>Universal hardware support</strong> — GPU drivers (NVIDIA, AMD, Intel), WiFi/Bluetooth firmware, input devices, power management, auto-detect 3-tier driver loading</li>
|
||||
<li><strong>Install-or-try dialog</strong> on live boot — user chooses live session or Calamares installer immediately</li>
|
||||
<li><strong>XFCE desktop trust fix</strong> — desktop files launch without "untrusted application" warnings</li>
|
||||
<li><strong>Kyber-1024 branding</strong> — post-quantum visual identity applied</li>
|
||||
<li><strong>Calamares installer</strong> now visible and launchable from desktop with Alfred v4.0 branding and slideshow</li>
|
||||
<li>First build with WebTorrent P2P distribution</li>
|
||||
<li>First build with Alfred Store (Flatpak + GNOME Software)</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<!-- RC5 -->
|
||||
<div class="release" id="rc5">
|
||||
<div class="release-header">
|
||||
<h2>v4.0 RC5</h2>
|
||||
<span class="badge badge-previous">Previous</span>
|
||||
</div>
|
||||
<div class="release-date">April 6, 2026</div>
|
||||
|
||||
<h3>Highlights</h3>
|
||||
<ul>
|
||||
<li><strong>Kernel 6.12.74</strong></li>
|
||||
<li><strong>10 build hooks</strong> — full v4.0 application stack</li>
|
||||
<li><strong>Alfred Welcome</strong> — 7-page first-boot setup wizard</li>
|
||||
<li><strong>Alfred Store</strong> — Flatpak app center with GNOME Software</li>
|
||||
<li><strong>Voice 2.0</strong> — "Hey Alfred" wake word detection via OpenWakeWord (always-on systemd service)</li>
|
||||
<li><strong>alfred-update</strong> — system update manager with GUI and CLI</li>
|
||||
<li><strong>alfred-info</strong> — system information CLI tool</li>
|
||||
<li><strong>Version check API</strong> — checks for OS updates at boot</li>
|
||||
<li><strong>Calamares</strong> — v4.0 branding applied to graphical installer</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<!-- RC4 -->
|
||||
<div class="release" id="rc4">
|
||||
<div class="release-header">
|
||||
<h2>v4.0 RC4</h2>
|
||||
<span class="badge badge-previous">Previous</span>
|
||||
</div>
|
||||
<div class="release-date">April 6, 2026</div>
|
||||
|
||||
<h3>Highlights</h3>
|
||||
<ul>
|
||||
<li><strong>Trixie rebase</strong> — OS moved from Debian Bookworm (12) to <strong>Debian Trixie (13)</strong></li>
|
||||
<li><strong>Kernel 6.12.74</strong> — Trixie's LTS kernel with EEVDF scheduler and Rust-in-kernel support</li>
|
||||
<li><strong>UEFI + BIOS hybrid boot</strong> — single ISO boots on both modern and legacy systems</li>
|
||||
<li><strong>Alfred Voice v2</strong> — Kokoro TTS + PyTorch, spaCy NLP, OpenWakeWord, espeak-ng fallback</li>
|
||||
<li><strong>Alfred Search</strong> — Meilisearch instant local search engine</li>
|
||||
<li>Voice hook fixed for Trixie (Python venv + --only-binary spacy workaround)</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<!-- RC3 -->
|
||||
<div class="release" id="rc3">
|
||||
<div class="release-header">
|
||||
<h2>v2.0 RC3</h2>
|
||||
<span class="badge badge-previous">Previous</span>
|
||||
</div>
|
||||
<div class="release-date">April 6, 2026</div>
|
||||
|
||||
<h3>Highlights</h3>
|
||||
<ul>
|
||||
<li><strong>Kernel 6.1.0-44</strong> — Debian Bookworm LTS (WebKit, OpenSSL, ImageMagick, GStreamer security updates)</li>
|
||||
<li><strong>First verified bootable ISO</strong> (2.5 GB)</li>
|
||||
<li><strong>Critical boot fix</strong>: dual kernel-naming hooks (chroot hook #9999 + binary hook #9999) — creates generic vmlinuz/initrd that the bootloader expects</li>
|
||||
<li><strong>9 build hooks</strong>: Alfred Browser, Alfred IDE (VS Code-compatible IDE), Alfred Voice (Kokoro TTS), Alfred Search (Meilisearch), Calamares installer, branding, boot fix (chroot + binary)</li>
|
||||
<li>Samsung S26 Ultra mobile installer created (Termux + proot-distro, no root)</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
<footer>
|
||||
© <?= $year ?> <a href="https://gositeme.com">GoSiteMe Inc.</a> — Alfred Linux · Open Source (AGPL-3.0)
|
||||
</footer>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
8
robots.txt
Normal file
8
robots.txt
Normal file
@ -0,0 +1,8 @@
|
||||
User-agent: *
|
||||
Allow: /
|
||||
|
||||
Sitemap: https://alfredlinux.com/sitemap.xml
|
||||
|
||||
# Large binary files — don't waste crawl budget
|
||||
Disallow: /downloads/*.iso
|
||||
Disallow: /downloads/*.torrent
|
||||
724
security.php
Normal file
724
security.php
Normal file
@ -0,0 +1,724 @@
|
||||
<?php
|
||||
/**
|
||||
* Alfred Linux — Security Transparency
|
||||
* Honest comparison: what we harden, what we don't have yet, and why it matters.
|
||||
*
|
||||
* Built by Alfred for Commander Danny William Perez
|
||||
* GoSiteMe Inc. — April 2026
|
||||
*/
|
||||
$year = date('Y');
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Alfred Linux — Security Transparency</title>
|
||||
<meta name="description" content="An honest, verifiable look at Alfred Linux security. Kernel mitigations, out-of-box hardening, what we ship vs what we don't — with real boot-test data.">
|
||||
<meta property="og:title" content="Alfred Linux — Security Transparency">
|
||||
<meta property="og:description" content="Real kernel mitigation data. Honest comparison with Ubuntu defaults. No marketing. Just facts.">
|
||||
<meta property="og:type" content="article">
|
||||
<meta property="og:url" content="https://alfredlinux.com/security">
|
||||
<meta property="og:image" content="https://alfredlinux.com/og-image.png">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="Alfred Linux — Security Transparency">
|
||||
<meta name="twitter:description" content="Real kernel mitigation data. Honest comparison with Ubuntu defaults. No marketing. Just facts.">
|
||||
<meta name="twitter:image" content="https://alfredlinux.com/og-image.png">
|
||||
<link rel="canonical" href="https://alfredlinux.com/security">
|
||||
<link rel="icon" href="/favicon.ico">
|
||||
<link rel="stylesheet" href="/assets/fonts/inter/inter.css">
|
||||
<style>
|
||||
:root {
|
||||
--bg: #06060b;
|
||||
--surface: rgba(255,255,255,0.03);
|
||||
--border: rgba(255,255,255,0.06);
|
||||
--text: #e0e0e0;
|
||||
--text-muted: #9ca3af;
|
||||
--text-dim: #6b7280;
|
||||
--accent: #6366f1;
|
||||
--accent-light: #a5b4fc;
|
||||
--green: #34d399;
|
||||
--amber: #f59e0b;
|
||||
--cyan: #22d3ee;
|
||||
--red: #ef4444;
|
||||
}
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
html { scroll-behavior: smooth; }
|
||||
body {
|
||||
font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif;
|
||||
background: var(--bg);
|
||||
color: var(--text);
|
||||
line-height: 1.7;
|
||||
min-height: 100vh;
|
||||
}
|
||||
a { color: var(--accent-light); text-decoration: none; }
|
||||
a:hover { text-decoration: underline; }
|
||||
|
||||
.top-bar {
|
||||
background: rgba(6,6,11,0.95);
|
||||
border-bottom: 1px solid var(--border);
|
||||
padding: 1rem 2rem;
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 2rem;
|
||||
position: sticky;
|
||||
top: 0;
|
||||
z-index: 100;
|
||||
backdrop-filter: blur(12px);
|
||||
}
|
||||
.top-bar .brand { font-weight: 700; font-size: 1.1rem; color: var(--cyan); }
|
||||
.top-bar nav a { color: var(--text-muted); font-size: 0.9rem; }
|
||||
.top-bar nav a:hover { color: var(--text); text-decoration: none; }
|
||||
|
||||
.hero {
|
||||
max-width: 900px;
|
||||
margin: 3rem auto 2rem;
|
||||
padding: 0 2rem;
|
||||
text-align: center;
|
||||
}
|
||||
.hero h1 { font-size: 2.2rem; font-weight: 700; margin-bottom: 0.5rem; }
|
||||
.hero .sub { color: var(--text-muted); font-size: 1.05rem; max-width: 680px; margin: 0 auto; }
|
||||
|
||||
.container { max-width: 900px; margin: 0 auto; padding: 0 2rem 4rem; }
|
||||
|
||||
.disclaimer {
|
||||
background: rgba(245,158,11,0.08);
|
||||
border: 1px solid rgba(245,158,11,0.2);
|
||||
border-radius: 10px;
|
||||
padding: 1.2rem 1.5rem;
|
||||
margin-bottom: 2.5rem;
|
||||
font-size: 0.9rem;
|
||||
color: var(--amber);
|
||||
}
|
||||
.disclaimer strong { color: #fbbf24; }
|
||||
|
||||
section { margin-bottom: 3rem; }
|
||||
section h2 {
|
||||
font-size: 1.4rem;
|
||||
font-weight: 700;
|
||||
margin-bottom: 1rem;
|
||||
padding-bottom: 0.5rem;
|
||||
border-bottom: 1px solid var(--border);
|
||||
}
|
||||
section h3 {
|
||||
font-size: 1.1rem;
|
||||
font-weight: 600;
|
||||
margin: 1.5rem 0 0.8rem;
|
||||
color: var(--cyan);
|
||||
}
|
||||
p { margin-bottom: 1rem; color: var(--text-muted); }
|
||||
p strong { color: var(--text); }
|
||||
|
||||
/* Comparison table */
|
||||
.cmp-table {
|
||||
width: 100%;
|
||||
border-collapse: collapse;
|
||||
margin: 1rem 0 1.5rem;
|
||||
font-size: 0.85rem;
|
||||
}
|
||||
.cmp-table th {
|
||||
text-align: left;
|
||||
padding: 0.6rem 0.8rem;
|
||||
background: rgba(255,255,255,0.04);
|
||||
border-bottom: 1px solid var(--border);
|
||||
color: var(--text);
|
||||
font-weight: 600;
|
||||
}
|
||||
.cmp-table td {
|
||||
padding: 0.5rem 0.8rem;
|
||||
border-bottom: 1px solid rgba(255,255,255,0.03);
|
||||
color: var(--text-muted);
|
||||
vertical-align: top;
|
||||
}
|
||||
.cmp-table tr:hover td { background: rgba(255,255,255,0.02); }
|
||||
.cmp-table .vuln { color: var(--amber); }
|
||||
.cmp-table .miti { color: var(--green); }
|
||||
.cmp-table .na { color: var(--text-dim); }
|
||||
.cmp-table .new { color: var(--cyan); font-weight: 600; }
|
||||
|
||||
/* Status badges */
|
||||
.badge {
|
||||
display: inline-block;
|
||||
padding: 0.15rem 0.6rem;
|
||||
border-radius: 6px;
|
||||
font-size: 0.75rem;
|
||||
font-weight: 600;
|
||||
}
|
||||
.badge-green { background: rgba(52,211,153,0.12); color: var(--green); }
|
||||
.badge-amber { background: rgba(245,158,11,0.12); color: var(--amber); }
|
||||
.badge-red { background: rgba(239,68,68,0.12); color: var(--red); }
|
||||
.badge-cyan { background: rgba(34,211,238,0.12); color: var(--cyan); }
|
||||
|
||||
/* Cards */
|
||||
.card-grid {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(auto-fit, minmax(250px, 1fr));
|
||||
gap: 1rem;
|
||||
margin: 1rem 0;
|
||||
}
|
||||
.card {
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 10px;
|
||||
padding: 1.2rem;
|
||||
}
|
||||
.card h4 { font-size: 0.95rem; font-weight: 600; margin-bottom: 0.3rem; }
|
||||
.card p { font-size: 0.85rem; margin-bottom: 0; }
|
||||
|
||||
.check-list { list-style: none; padding: 0; }
|
||||
.check-list li {
|
||||
padding: 0.3rem 0;
|
||||
font-size: 0.9rem;
|
||||
color: var(--text-muted);
|
||||
}
|
||||
.check-list li::before { margin-right: 0.5rem; }
|
||||
.check-list .yes::before { content: '✅'; }
|
||||
.check-list .no::before { content: '❌'; }
|
||||
.check-list .partial::before { content: '⚠️'; }
|
||||
|
||||
code {
|
||||
background: rgba(255,255,255,0.06);
|
||||
padding: 0.15rem 0.4rem;
|
||||
border-radius: 4px;
|
||||
font-size: 0.85em;
|
||||
font-family: 'JetBrains Mono', 'Fira Code', monospace;
|
||||
}
|
||||
pre {
|
||||
background: rgba(255,255,255,0.03);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 8px;
|
||||
padding: 1rem;
|
||||
overflow-x: auto;
|
||||
font-size: 0.8rem;
|
||||
line-height: 1.5;
|
||||
margin: 0.8rem 0 1.2rem;
|
||||
font-family: 'JetBrains Mono', 'Fira Code', monospace;
|
||||
color: var(--text-muted);
|
||||
}
|
||||
|
||||
.cta-box {
|
||||
background: linear-gradient(135deg, rgba(99,102,241,0.1), rgba(34,211,238,0.06));
|
||||
border: 1px solid rgba(99,102,241,0.2);
|
||||
border-radius: 12px;
|
||||
padding: 2rem;
|
||||
text-align: center;
|
||||
margin: 2rem 0;
|
||||
}
|
||||
.cta-box h3 { color: var(--text); font-size: 1.2rem; margin-bottom: 0.5rem; }
|
||||
.cta-box p { max-width: 600px; margin: 0 auto 1rem; }
|
||||
.cta-btn {
|
||||
display: inline-block;
|
||||
background: var(--accent);
|
||||
color: #fff;
|
||||
padding: 0.6rem 1.5rem;
|
||||
border-radius: 8px;
|
||||
font-weight: 600;
|
||||
font-size: 0.9rem;
|
||||
transition: background 0.2s;
|
||||
margin: 0.3rem;
|
||||
}
|
||||
.cta-btn:hover { background: var(--accent-light); color: var(--bg); text-decoration: none; }
|
||||
.cta-btn.secondary { background: transparent; border: 1px solid var(--border); color: var(--text-muted); }
|
||||
.cta-btn.secondary:hover { background: rgba(255,255,255,0.05); color: var(--text); }
|
||||
|
||||
.methodology { font-size: 0.85rem; color: var(--text-dim); }
|
||||
.methodology p { color: var(--text-dim); }
|
||||
|
||||
footer {
|
||||
text-align: center;
|
||||
padding: 2rem;
|
||||
color: var(--text-dim);
|
||||
font-size: 0.8rem;
|
||||
border-top: 1px solid var(--border);
|
||||
}
|
||||
|
||||
@media (max-width: 640px) {
|
||||
.hero h1 { font-size: 1.6rem; }
|
||||
.cmp-table { font-size: 0.75rem; }
|
||||
.cmp-table th, .cmp-table td { padding: 0.4rem; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<div class="top-bar">
|
||||
<div class="brand">Alfred Linux</div>
|
||||
<nav>
|
||||
<a href="/">Home</a>
|
||||
<a href="/download">Download</a>
|
||||
<a href="/apps">Apps</a>
|
||||
<a href="/docs">Docs</a>
|
||||
<a href="/releases">Releases</a>
|
||||
<a href="/security" style="color:var(--text);">Security</a>
|
||||
<a href="/developers">Developers</a>
|
||||
<a href="/compare">Compare</a>
|
||||
<a href="/about">About</a>
|
||||
</nav>
|
||||
</div>
|
||||
|
||||
<div class="hero">
|
||||
<h1>Security Transparency</h1>
|
||||
<p class="sub">Real data from real boot tests. What we harden, what we don't have yet, and why radical honesty is our security posture.</p>
|
||||
</div>
|
||||
|
||||
<div class="container">
|
||||
|
||||
<div class="disclaimer">
|
||||
<strong>Honesty notice:</strong> Alfred Linux RC8 ships <strong>Linux kernel 7.0.0-rc7</strong> — a release candidate. It is not yet a stable kernel release. We believe in publishing real data so you can make informed decisions. This page shows both our strengths and our gaps.
|
||||
</div>
|
||||
|
||||
<!-- ───────── SECTION 1: Kernel Mitigations ───────── -->
|
||||
<section id="mitigations">
|
||||
<h2>CPU Vulnerability Mitigations — Kernel 7.0 vs 5.15</h2>
|
||||
<p>
|
||||
Data below comes from two real systems: Alfred Linux RC8 boot-tested in QEMU/KVM on April 6, 2026,
|
||||
and a production Ubuntu 22.04 server running kernel 5.15.0-173. Both systems use AMD/Intel hardware
|
||||
with the same vulnerability surface.
|
||||
</p>
|
||||
|
||||
<table class="cmp-table">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Vulnerability</th>
|
||||
<th>Alfred Linux RC8<br><small>Kernel 7.0.0-rc7</small></th>
|
||||
<th>Ubuntu 22.04 LTS<br><small>Kernel 5.15.0-173</small></th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>Spectre V1</td>
|
||||
<td class="miti">Mitigation: usercopy/swapgs barriers + __user pointer sanitization</td>
|
||||
<td class="miti">Mitigation: usercopy/swapgs barriers + __user pointer sanitization</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Spectre V2</td>
|
||||
<td class="miti">Mitigation: Retpolines + RSB filling on context switch and VMEXIT</td>
|
||||
<td class="vuln">Vulnerable: eIBRS with unprivileged eBPF</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><strong>ITS</strong> (Indirect Target Selection)</td>
|
||||
<td class="new">Mitigation: Aligned branch/return thunks <span class="badge badge-cyan">Kernel 7 native</span></td>
|
||||
<td class="miti">Mitigation: Aligned branch/return thunks (backported)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>MDS (Microarch. Data Sampling)</td>
|
||||
<td class="vuln">Vulnerable: Clear CPU buffers attempted, no microcode ¹</td>
|
||||
<td class="na">Not affected (CPU-dependent)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Speculative Store Bypass</td>
|
||||
<td class="vuln">Vulnerable ¹</td>
|
||||
<td class="miti">Mitigation: disabled via prctl and seccomp</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Meltdown</td>
|
||||
<td class="miti">Mitigation: PTI (Kernel Page Table Isolation)</td>
|
||||
<td class="na">Not affected (CPU-dependent)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>L1TF (L1 Terminal Fault)</td>
|
||||
<td class="miti">Mitigation: PTE Inversion</td>
|
||||
<td class="na">Not affected (CPU-dependent)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Retbleed</td>
|
||||
<td class="miti">Mitigation: Enhanced IBRS</td>
|
||||
<td class="miti">Mitigation: Enhanced IBRS</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>MMIO Stale Data</td>
|
||||
<td class="miti">Mitigation: Clear CPU buffers</td>
|
||||
<td class="miti">Mitigation: Clear CPU buffers; SMT vulnerable</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>TSX Async Abort</td>
|
||||
<td class="miti">Mitigation: TSX disabled</td>
|
||||
<td class="na">Not affected (CPU-dependent)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><strong>TSA</strong> (Transient Scheduler Attacks)</td>
|
||||
<td class="new">Mitigation: Clear CPU buffers <span class="badge badge-cyan">Kernel 7 native</span></td>
|
||||
<td class="na">Not affected (CPU-dependent)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><strong>VMSCAPE</strong> (VM Escape Hardening)</td>
|
||||
<td class="new">Mitigation: VMCS shadowing restricted <span class="badge badge-cyan">Kernel 7 native</span></td>
|
||||
<td class="na">Not affected (CPU-dependent)</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Gather Data Sampling</td>
|
||||
<td class="miti">Mitigation: Microcode</td>
|
||||
<td class="miti">Mitigation: Microcode</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>SRBDS</td>
|
||||
<td class="miti">Mitigation: Microcode</td>
|
||||
<td class="na">Not affected (CPU-dependent)</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
<p class="methodology">
|
||||
¹ <strong>VM test limitation:</strong> MDS and Speculative Store Bypass show "Vulnerable" because QEMU/KVM
|
||||
does not pass through CPU microcode. On real hardware with vendor microcode installed (via <code>intel-microcode</code>
|
||||
or <code>amd64-microcode</code> packages, both included in the ISO), these would show mitigated status.
|
||||
Ubuntu's "Not affected" entries reflect the specific CPU model of that production server, not a kernel advantage.
|
||||
</p>
|
||||
|
||||
<h3>Kernel 7.0 exclusive mitigations</h3>
|
||||
<p>
|
||||
Three vulnerability classes have <strong>native mitigation code that was written for kernel 7.0</strong>:
|
||||
</p>
|
||||
<ul class="check-list">
|
||||
<li class="yes"><strong>ITS</strong> — Indirect Target Selection attacks. Kernel 7.0 ships the upstream fix natively, while older kernels received backports.</li>
|
||||
<li class="yes"><strong>TSA</strong> — Transient Scheduler Attacks against CPU scheduling units. New vulnerability class; mitigation only exists in 7.0+.</li>
|
||||
<li class="yes"><strong>VMSCAPE</strong> — VM escape via VMCS manipulation. Restricts shadow VMCS access; new in 7.0+.</li>
|
||||
</ul>
|
||||
</section>
|
||||
|
||||
<!-- ───────── SECTION 2: Out-of-Box Hardening ───────── -->
|
||||
<section id="hardening">
|
||||
<h2>Out-of-Box Security Hardening — 32 Modules</h2>
|
||||
<p>
|
||||
What runs on first boot, before the user touches anything. Alfred Linux RC8 ships <strong>32 security modules</strong> across 3 hooks — more out-of-box hardening than any mainstream desktop Linux.
|
||||
</p>
|
||||
|
||||
<table class="cmp-table">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>Security Feature</th>
|
||||
<th>Alfred Linux RC8</th>
|
||||
<th>Ubuntu 24.04 LTS</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>Firewall (UFW + nftables)</td>
|
||||
<td class="miti">Both enabled, default-deny input ✅</td>
|
||||
<td class="vuln">UFW installed but <strong>disabled</strong></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>fail2ban (brute-force protection)</td>
|
||||
<td class="miti">Running, SSH 3-try/24h ban ✅</td>
|
||||
<td class="vuln">Not installed</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>auditd (kernel audit logging)</td>
|
||||
<td class="miti">30+ rules, CIS-benchmark, immutable ✅</td>
|
||||
<td class="vuln">Not installed</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Kernel sysctl hardening</td>
|
||||
<td class="miti">45+ rules, CIS Level 2 ✅</td>
|
||||
<td class="vuln">Minimal defaults</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Kernel lockdown mode</td>
|
||||
<td class="miti">lockdown=integrity ✅</td>
|
||||
<td class="vuln">Not enabled</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>AppArmor</td>
|
||||
<td class="miti">Enforced + custom IDE/search profiles ✅</td>
|
||||
<td class="miti">Initialized ✅</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Unattended security upgrades</td>
|
||||
<td class="miti">Running on first boot ✅</td>
|
||||
<td class="miti">Running on first boot ✅</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>DNS privacy (DNS-over-TLS)</td>
|
||||
<td class="miti">Quad9 + Cloudflare, DNSSEC ✅</td>
|
||||
<td class="vuln">Plaintext DNS by default</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>MAC address randomization</td>
|
||||
<td class="miti">WiFi + Ethernet random by default ✅</td>
|
||||
<td class="vuln">Not configured</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>SSH hardening</td>
|
||||
<td class="miti">Strong ciphers only, no forwarding, 3 tries ✅</td>
|
||||
<td class="vuln">Default permissive config</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>File integrity (AIDE)</td>
|
||||
<td class="miti">Installed + daily cron check ✅</td>
|
||||
<td class="vuln">Not installed</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Antivirus (ClamAV)</td>
|
||||
<td class="miti">Running + weekly scan ✅</td>
|
||||
<td class="vuln">Not installed</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Rootkit detection</td>
|
||||
<td class="miti">rkhunter + chkrootkit, daily ✅</td>
|
||||
<td class="vuln">Not installed</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Full-disk encryption (LUKS)</td>
|
||||
<td class="miti">1-click in installer ✅</td>
|
||||
<td class="miti">Available in installer ✅</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>NTP authentication (NTS)</td>
|
||||
<td class="miti">chrony + NTS (Cloudflare, Netnod) ✅</td>
|
||||
<td class="vuln">systemd-timesyncd, no NTS</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>PAM password hardening</td>
|
||||
<td class="miti">10-char, 3-class, lockout after 5 ✅</td>
|
||||
<td class="vuln">Minimal defaults</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Process isolation (hidepid)</td>
|
||||
<td class="miti">hidepid=2 on /proc ✅</td>
|
||||
<td class="vuln">All processes visible</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Core dumps disabled</td>
|
||||
<td class="miti">Disabled system-wide ✅</td>
|
||||
<td class="vuln">Enabled by default</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Compiler restriction</td>
|
||||
<td class="miti">gcc/g++/make restricted to dev group ✅</td>
|
||||
<td class="vuln">Accessible to all users</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Secure mount options</td>
|
||||
<td class="miti">/tmp noexec, /dev/shm nodev/nosuid ✅</td>
|
||||
<td class="vuln">Default mount options</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Kernel module blacklisting</td>
|
||||
<td class="miti">Firewire, dccp, sctp, rds, cramfs ✅</td>
|
||||
<td class="vuln">All modules loadable</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>USB logging + control</td>
|
||||
<td class="miti">udev logging + toggle tool ✅</td>
|
||||
<td class="vuln">No USB monitoring</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Cron/at lockdown</td>
|
||||
<td class="miti">Root-only (allow list) ✅</td>
|
||||
<td class="vuln">Any user can add cron jobs</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Security banners</td>
|
||||
<td class="miti">Legal warning on login + SSH ✅</td>
|
||||
<td class="vuln">No banner</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>Memory init (init_on_alloc)</td>
|
||||
<td class="miti">init_on_alloc=1, init_on_free=1 ✅</td>
|
||||
<td class="vuln">Not set</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>kernel.unprivileged_bpf_disabled</td>
|
||||
<td class="miti">Set via sysctl ✅</td>
|
||||
<td class="vuln">Not set (Spectre v2 vector)</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
<p>
|
||||
<strong>Security tools included:</strong> <code>alfred-security-status</code> (dashboard), <code>alfred-scan</code> (antivirus), <code>alfred-usb-storage</code> (USB toggle), <code>alfred-aide-init</code> (integrity baseline), <code>alfred-network-status</code> (network audit), <code>alfred-encrypt-status</code> (encryption check).
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<!-- ───────── SECTION 3: What We Don't Have Yet ───────── -->
|
||||
<section id="gaps">
|
||||
<h2>Persistent Gaps</h2>
|
||||
<p>
|
||||
Radical honesty. Even with 32 security modules, Ubuntu has advantages we can't match today.
|
||||
</p>
|
||||
|
||||
<div class="card-grid">
|
||||
<div class="card">
|
||||
<h4><span class="badge badge-red">Gap</span> LTS Lifecycle</h4>
|
||||
<p>Ubuntu LTS ships security patches for 5-12 years. We're a release candidate with no long-term commitment yet.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h4><span class="badge badge-red">Gap</span> CVE Response Team</h4>
|
||||
<p>Canonical has a dedicated security team publishing USNs within days. We have a small team and no SLA.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h4><span class="badge badge-red">Gap</span> Compliance Certifications</h4>
|
||||
<p>No FIPS 140-2, CIS Benchmarks, or DISA STIGs. Enterprises cannot deploy us until those exist.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h4><span class="badge badge-amber">Gap</span> Hardware Testing</h4>
|
||||
<p>Boot-verified in QEMU/KVM only. No bare-metal test matrix across vendor hardware yet.</p>
|
||||
</div>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<!-- ───────── SECTION 4: Build Transparency ───────── -->
|
||||
<section id="transparency">
|
||||
<h2>Build Transparency</h2>
|
||||
<p>
|
||||
Every Alfred Linux ISO is built by a single script with numbered, auditable hooks. Nothing is hidden.
|
||||
</p>
|
||||
|
||||
<h3>Build chain</h3>
|
||||
<pre>scripts/build-unified.sh rc8 --uefi ← one command
|
||||
├── Hook 0100: branding + UFW + SSH ← visual identity + base firewall
|
||||
├── Hook 0150: hardware ← drivers, firmware, microcode
|
||||
├── Hook 0160: security (21 modules) ← sysctl, AppArmor, auditd, ClamAV, AIDE, etc.
|
||||
├── Hook 0165: network hardening ← nftables, MAC random, SSH ciphers, anti-scan
|
||||
├── Hook 0170: full-disk encryption ← LUKS/cryptsetup, Calamares FDE
|
||||
├── Hook 0200: browser ← Alfred Browser (privacy-first)
|
||||
├── Hook 0300: ide ← Alfred IDE
|
||||
├── Hook 0400: voice ← Kokoro TTS engine
|
||||
├── Hook 0500: search ← Meilisearch
|
||||
├── Hook 0600: installer ← Calamares (graphical disk installer)
|
||||
├── Hook 0700: welcome ← first-boot experience
|
||||
├── Hook 0710: update ← OTA update framework
|
||||
├── Hook 0800: store ← Alfred Store
|
||||
├── Hook 0900: voice-v2 ← advanced voice engine
|
||||
├── Hook 9999: boot-fix (chroot) ← generic kernel names for bootloader
|
||||
└── Hook 9999: boot-fix (binary) ← ISOLINUX/GRUB references</pre>
|
||||
|
||||
<h3>Published checksums</h3>
|
||||
<pre>SHA-256: 7d49ef3cfb957cb9854bd3f451ef99ec8255afd68069a89ed0cf5a847d5d79bf
|
||||
BLAKE3: e021d2024599aa918972d9e6b9fd9c1d97d226ac69da035913fd7a462dbef47d
|
||||
File: alfred-linux-4.0-rc8-amd64.iso
|
||||
Size: 2.4 GB</pre>
|
||||
<p>
|
||||
Verify yourself: <code>sha256sum alfred-linux-4.0-rc8-amd64.iso</code> · <code>b3sum alfred-linux-4.0-rc8-amd64.iso</code>
|
||||
</p>
|
||||
<p>
|
||||
The build script, all 16 hooks (including 3 dedicated security hooks totalling 800+ lines), and the kernel config are inspectable. The ISO is built on a dedicated
|
||||
GoSiteMe build server (8 cores, 32 GB RAM) using Debian live-build toolchain on Debian Trixie. The compiled kernel
|
||||
produced 44,028 lines of build output with zero errors.
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<!-- ───────── SECTION 5: Boot Test Evidence ───────── -->
|
||||
<section id="evidence">
|
||||
<h2>Boot Test Evidence</h2>
|
||||
<p>
|
||||
On April 6, 2026, we booted the RC8 ISO in QEMU/KVM and captured 1,363 lines of kernel and systemd output.
|
||||
</p>
|
||||
|
||||
<h3>Key results</h3>
|
||||
<ul class="check-list">
|
||||
<li class="yes">Kernel identified as <code>Linux version 7.0.0-rc7-alfred</code></li>
|
||||
<li class="yes">121 systemd services started successfully</li>
|
||||
<li class="yes">0 kernel panics</li>
|
||||
<li class="yes">0 failed services</li>
|
||||
<li class="yes">UFW firewall loaded and active</li>
|
||||
<li class="yes">fail2ban service running</li>
|
||||
<li class="yes">auditd active with rules loaded</li>
|
||||
<li class="yes">AppArmor initialized with SHA-256 policy hashing</li>
|
||||
<li class="yes">Unattended upgrades shutdown hook active</li>
|
||||
<li class="yes">ZRAM swap device active</li>
|
||||
</ul>
|
||||
|
||||
<h3>Kernel boot line (from dmesg)</h3>
|
||||
<pre>[ 0.256611] mitigations: Enabled attack vectors: user_kernel, user_user, guest_host, guest_guest, SMT mitigations: auto
|
||||
[ 0.260297] Spectre V2 : Mitigation: Retpolines
|
||||
[ 0.261401] ITS: Mitigation: Aligned branch/return thunks
|
||||
[ 0.264740] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
|
||||
[ 0.266790] Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT</pre>
|
||||
|
||||
<h3>systemd confirmation</h3>
|
||||
<pre>systemd 257.9-1 running in system mode
|
||||
(+PAM +AUDIT +SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP
|
||||
+GCRYPT +OPENSSL +ELFUTILS +FIDO2 +TPM2 +ZSTD +BPF_FRAMEWORK)</pre>
|
||||
</section>
|
||||
|
||||
<!-- ───────── SECTION 6: Why This Matters (MetaDome) ───────── -->
|
||||
<section id="why">
|
||||
<h2>Why Transparent Security Matters</h2>
|
||||
<p>
|
||||
Alfred Linux isn't just an operating system. It's the foundation layer for a larger vision.
|
||||
</p>
|
||||
|
||||
<div class="card-grid">
|
||||
<div class="card">
|
||||
<h4>Layer 1 — Alfred Linux</h4>
|
||||
<p>The transparent, auditable operating system. Every build hook visible, every mitigation documented, every gap disclosed.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h4>Layer 2 — Alfred IDE</h4>
|
||||
<p>The builder's tool. Developers create applications, extensions, and AI agents on a foundation they can verify.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h4>Layer 3 — <a href="https://meta-dome.com">MetaDome</a></h4>
|
||||
<p>A governed digital civilization with 115,000+ AI citizens, courts, passports, democratic governance — where corruption is architecturally impossible.</p>
|
||||
</div>
|
||||
<div class="card">
|
||||
<h4>Layer 4 — Real-World Impact</h4>
|
||||
<p>Governance models proven in MetaDome can be applied to real-world transparency challenges — from climate policy to resource allocation.</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<p>
|
||||
<strong>The argument is simple:</strong> you cannot build corruption-proof digital governance on a black-box operating system.
|
||||
If the foundation isn't transparent, the whole "trust by design" claim is hollow. Alfred Linux proves that
|
||||
even the OS layer — the lowest level — can be open, auditable, and honest about its limitations.
|
||||
</p>
|
||||
|
||||
<p>
|
||||
When <a href="https://meta-dome.com">MetaDome</a> runs governance simulations — AI citizens voting on policy,
|
||||
transparent courts resolving disputes, energy-aware compute — it matters that the OS underneath isn't hiding anything.
|
||||
That's not marketing. That's architecture.
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<!-- ───────── SECTION 7: Our Position ───────── -->
|
||||
<section id="position">
|
||||
<h2>Our Position</h2>
|
||||
|
||||
<p>
|
||||
<strong>We do not claim Alfred Linux is "more secure than Ubuntu."</strong>
|
||||
</p>
|
||||
<p>
|
||||
Ubuntu has 20 years of battle-testing, a dedicated security team, compliance certifications, and LTS commitments
|
||||
that we cannot yet match. It is the right choice for enterprises that need those guarantees today.
|
||||
</p>
|
||||
<p>
|
||||
What we do claim:
|
||||
</p>
|
||||
<ul class="check-list">
|
||||
<li class="yes">We ship the newest kernel with native mitigations for vulnerabilities that older kernels handle via backports</li>
|
||||
<li class="yes">We enable security services (firewall, intrusion detection, audit logging) from first boot — not as optional packages</li>
|
||||
<li class="yes">We close the unprivileged eBPF attack vector that Ubuntu leaves open</li>
|
||||
<li class="yes">We publish our full build chain, security findings, and gaps in the open</li>
|
||||
<li class="yes">We put the honest comparison table on our own website, not in a marketing PDF</li>
|
||||
</ul>
|
||||
<p>
|
||||
That's our posture: <strong>security through transparency</strong>. Not through claims we can't back up.
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<div class="cta-box">
|
||||
<h3>Verify It Yourself</h3>
|
||||
<p>Download the ISO. Check the SHA-256 and BLAKE3 hashes. Boot it. Run <code>cat /sys/devices/system/cpu/vulnerabilities/*</code> and compare.</p>
|
||||
<a href="/download" class="cta-btn">Download RC8</a>
|
||||
<a href="/releases" class="cta-btn secondary">Release Notes</a>
|
||||
<a href="https://meta-dome.com" class="cta-btn secondary">Enter MetaDome</a>
|
||||
</div>
|
||||
|
||||
<section class="methodology">
|
||||
<h2>Methodology</h2>
|
||||
<p><strong>Test date:</strong> April 6, 2026</p>
|
||||
<p><strong>Alfred Linux test:</strong> RC8 ISO booted in QEMU/KVM on EU build server (8 cores, 32 GB RAM, AMD EPYC). Kernel + initrd extracted from ISO, booted with <code>console=ttyS0,115200</code>. Full 1,363-line boot log captured.</p>
|
||||
<p><strong>Ubuntu test:</strong> Production server running Ubuntu 22.04 LTS, kernel 5.15.0-173-generic (updated March 6, 2026). Vulnerability data read from <code>/sys/devices/system/cpu/vulnerabilities/*</code>.</p>
|
||||
<p><strong>Important caveat:</strong> "Not affected" entries in the Ubuntu column reflect that specific CPU model, not the kernel version. A different CPU would show different results. The comparison is between <em>what each kernel does when a vulnerability applies</em>, not absolute security ratings.</p>
|
||||
<p><strong>Last updated:</strong> April 6, 2026</p>
|
||||
</section>
|
||||
|
||||
</div>
|
||||
|
||||
<footer>
|
||||
© <?= $year ?> <a href="https://gositeme.com">GoSiteMe Inc.</a> — Alfred Linux · Open Source (AGPL-3.0)
|
||||
</footer>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
69
sitemap.xml
Normal file
69
sitemap.xml
Normal file
@ -0,0 +1,69 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>1.0</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/download</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.9</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/docs</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.8</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/releases</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.8</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/security</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>monthly</changefreq>
|
||||
<priority>0.8</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/developers</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>monthly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/apps</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.8</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/compare</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>monthly</changefreq>
|
||||
<priority>0.8</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/about</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>monthly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/forge/</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.6</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://alfredlinux.com/api/version.json</loc>
|
||||
<lastmod>2026-04-07</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.5</priority>
|
||||
</url>
|
||||
</urlset>
|
||||
Loading…
Reference in New Issue
Block a user