ManxOS

Verify your download

Confirm ISO integrity with SHA-256 checksums (and GPG when available).

Always verify ManxOS images before writing them to USB — especially on machines used in schools, business, or government.

SHA-256 checksum

  1. Download both the .iso and the matching .sha256 file from the same release or CI job.
  2. On Linux or macOS:
sha256sum -c manxos-*.iso.sha256

You should see OK for the ISO filename. If verification fails, do not write the image — re-download from an official channel.

Manual check

sha256sum manxos-0.1.0-alpha-amd64.iso
# Compare the output to the hash published in the .sha256 file

Windows

Use PowerShell:

Get-FileHash .\manxos-0.1.0-alpha-amd64.iso -Algorithm SHA256

Compare the hash to the published value.

GPG signatures

Signed releases are planned. When available, this page will document:

  • The ManxOS release signing key fingerprint
  • How to import the key
  • How to verify *.iso.sig (or detached signatures) alongside checksums

Until then:

  • Prefer downloads only from this website (and other channels we explicitly publish later).
  • Treat third-party mirrors as untrusted until signatures ship.
  • Public ISO hosting is coming soon.

Why this matters

Checksums catch corruption and many tampering cases. Signatures (when live) let you confirm the build came from the ManxOS project. Together they support the trust and sovereignty goals of the distribution.

Next: Simple install guide.

Download ManxOS ← All docs