NROS GNAWBIT
Pre-Release v2.01 • Debian Trixie Base • November 2026
Simple by Design. Secure by Default.
Core System
Based on Debian 13 “Trixie” with Linux 6.12 LTS kernel, MATE desktop environment (X11), and hardened security packages. Maximum stability from Debian’s tested package management with a lightweight traditional workflow.
Security First
Multi-layer defense in depth: LUKS full-disk encryption, Secure Boot with MOK support, AppArmor MAC enforcement, SELinux (permissive mode), UFW firewall, USBGuard device control, Firejail application sandboxing, Suricata IDS, auditd logging, AIDE integrity checks, and ClamAV on-access scanning.
European Digital Sovereignty
Built in Europe for European users. GDPR-compliant infrastructure, Swiss privacy partnerships (Proton VPN), decentralized Matrix communication, and self-hosting focus. Take back control from Big Tech surveillance capitalism.
Developer Ready
Complete toolchain preinstalled. Python, Rust, C++ compilers, debugging tools, Git, Podman rootless containers (no privileged daemon), and VS Code ready. Work locally, deploy independently.
Hardware Tested
Validated on physical hardware across multiple laptops and workstations. Modern drivers, working touchpad support (libinput), Wi-Fi compatibility, and power management tuned for real-world usage.
Community Driven
Transparent development, public issue trackers on GitHub and Codeberg, welcoming contribution policies. Shared roadmap with the European open source community.
🛡️ Privacy Out of the Box
Your privacy tools, preconfigured and ready from first boot:
| Category | Application | Why |
|---|---|---|
| Web browsing | LibreWolf | Hardened Firefox fork — no telemetry, anti-tracking enabled by default |
| Messaging | Element | End-to-end encrypted communication over decentralized Matrix network |
| VPN | Proton VPN | Swiss jurisdiction, no-logs policy, open source clients, integrated |
| Passwords | Vaultwarden | Self-hosted Bitwarden-compatible vault (Podman container) |
| Office suite | OnlyOffice | Private alternative to cloud office suites, works offline |
| Network mesh | NetBird | Self-hosted WireGuard overlay networks |
| Browser | Vivaldi | Feature-rich browser for advanced users (proprietary interface) |
🛡️ Security Stack
⚙️ System Specifications
📋 Release Timeline
Download Pre-Release ISO
NextRedOS 2.01 “Gnawbit” — Pre-Release Build
↓ Download ISO (Coming Soon)Pre-release build — suitable for testing. Report issues via GitHub or Codeberg.
(will be published with release)
Installation: Verify checksum → Write to USB with dd or Etcher → Boot from USB → Install with Calamares