ParamantOS v2.4.5 — VGA Boot TUI Fixed

ParamantOS v2.4.5 — NixOS Hardened Relay Edition

What's fixed in this build

• VGA boot menu — Boot menu (Install / Live / Shell) now appears immediately on the primary console. Previous build had a Restart=always getty override that caused the active VT to shift to tty2, leaving tty1 showing only a blinking cursor.
• 44 operator tools — All paramant-* scripts sourced from paramant-relay flake input as single source of truth.

Features

• Hardened NixOS 24.11 kernel (KSPP sysctl, restricted BPF, kptr)
• Post-quantum SSH: ML-KEM-768 + Ed25519-only, no password auth
• Paramant relay auto-starts (port 3000–3004, firewall pre-configured)
• Boot menu: Install to disk / Live session / Shell
• 44 paramant-* operator tools (setup, keys, sectors, export, …)
• BUSL-1.1 · EU/DE jurisdiction · RAM-only relay

Verify

sha256sum ParamantOS-v2.4.5.iso
# fc479ae92b96e3a9575dd129cd990b0edb5f5206e516b74e450c899b036bfb3c

Build from source

git clone https://github.com/Apolloccrypt/ParamantOS
cd ParamantOS/nixos
nix build .#isoFixed   # produces result/iso/ParamantOS-v2.4.5.iso

paramant-client v1.0 — Linux .deb

Install on any Ubuntu/Debian (amd64) device:

curl -fsSL https://paramant.app/install-client.sh | bash

Or download directly:

sudo dpkg -i paramant-client_1.0_amd64.deb
paramant-setup

Includes: all paramant-* CLI tools + first-run setup wizard.
Requires: curl, python3, whiptail (auto-installed by install-client.sh).

ParamantOS v2.4.5 — NixOS Edition

Verified clean boot:

• Kernel 6.6.94 + KVM
• All systemd units green — zero failures
• Paramant Relay auto-starts
• Boot-choice menu (install / live / shell)
• Autologin as paramant user
• ML-KEM-768 post-quantum SSH
• SELinux + AppArmor + auditd CIS L2
• All paramant-* operator tools included
• Security audit 2026-04-10/11 fixes applied

paramantOS 1.0 (Adamant)

paramantOS 1.0 (Adamant)

Mint 22.1 remaster — full branding, Docker CE, security hardening.
Boots on USB, VirtualBox, QEMU, bare-metal (BIOS + UEFI).

Download

The ISO is split into two parts (GitHub 2 GB limit). Reassemble:

cat paramantOS-1.0-amd64.iso.part-aa paramantOS-1.0-amd64.iso.part-ab > paramantOS-1.0-amd64.iso

Flash to USB

sudo dd if=paramantOS-1.0-amd64.iso of=/dev/sdX bs=4M status=progress && sync

VirtualBox

System → EFI ON or OFF (both work) · Display → VMSVGA 128 MB · IDE Controller

After booting

paramant-relay-setup
security-status

EU Sovereign · Post-Quantum · Zero Storage

ParamantOS v1.0 — Linux Mint Edition (Beta)

ParamantOS v1.0 — Linux Mint Edition (Beta)

Linux Mint 22.1 Cinnamon remaster for paramant operators.

Base & Tooling

• Linux Mint 22.1 Cinnamon base (Ubuntu 24.04 Noble)
• Docker CE official + Paramant Relay tooling
• All paramant-* operator tools included (29+ tools in /usr/local/bin/)
• Cinnamon desktop with paramantOS branding

paramant-* tools

paramant-backup paramant-boot-choice paramant-cron paramant-dashboard paramant-data-ctl paramant-doctor paramant-export paramant-help paramant-info paramant-install paramant-installer paramant-ip paramant-key-add paramant-key-revoke paramant-keys paramant-license paramant-logs paramant-ports paramant-relay-ctl paramant-relay-setup paramant-restart paramant-restore paramant-scan paramant-sector-add paramant-security paramant-setup paramant-status paramant-test paramant-update paramant-verify paramant-wifi

Security Stack

• firewalld (nftables) + AppArmor + auditd + fail2ban + USBGuard
• Kicksecure kernel hardening
• Relay auto-starts on boot

Download (ISO split due to GitHub 2 GB limit)

Reassemble before flashing:

cat paramantOS-1.0-amd64.iso.part-aa paramantOS-1.0-amd64.iso.part-ab > paramantOS-1.0-amd64.iso
sha256sum -c paramantOS-1.0-amd64.sha256

Flash to USB

sudo dd if=paramantOS-1.0-amd64.iso of=/dev/sdX bs=4M status=progress && sync