Skip to content
Bromigos™

Download bromigOS // 0.1.3 · stable

Download bromigOS.

One file holds the whole desktop. Put it on a USB stick, start your PC from it, and try bromigOS without changing anything. No Linux know-how needed: this page walks you through it, from Windows, a Mac or Linux.

Download bromigOS 0.1.3
Version
0.1.3
Size
5.3 GB
Published
October 30, 2026
For
64-bit PCs
The bromigOS live desktop: the bar along the top, system and network widgets on the left, and the Wick's radio den as the wallpaper
The live desktop, straight from the stick

Step 01

Pick your download.

There are two downloads. Almost everyone wants the first.

bromigOS

The full desktop. Try it live from the stick, then install it when you’re ready.

0.1.3 · 5.3 GB

Download · 5.3 GB

Field Kit, small text-mode tools for repair, the lab and servers: coming soon.

For power users: the URLs, the layout and what's kept
The ISO bucket
WhereWhat
https://pkgs.bromigos.org/iso/latest.jsonThe newest stable ISOs: each one's edition, file, version, size, sha256, url, sha256_url, sig_url, secure_boot
https://pkgs.bromigos.org/iso/0.1.3/bromigos-0.1.3-x86_64.isoA release's ISO, with .sha256, .sig and .json beside it, and the folder's index.json
https://pkgs.bromigos.org/iso/edge/latest.jsonThe edge build: from main, every week, newest only

The newest stable ISO’s URL, in one line:

How it works underneath

  • The newest three stable releases are kept in the bucket; when a fourth is published, the oldest goes. Every release stays on GitHub Releases.
  • Edge is kept alone: each new edge build replaces the last.

Step 02

Check it (optional).

For the curious. A checksum is a fingerprint of the file: if yours matches ours, the download arrived whole and is the one we published.

bromigOS · SHA-256
How to check, on Windows, macOS or Linux

Open a terminal in the folder with the ISO (usually Downloads) and run the line for your system.

Windows (PowerShell)

macOS (Terminal)

Linux

On Linux, download the .sha256 file into the same folder first; it prints OK when they match.

For power users: download and verify from a terminal

How it works underneath

  • The key's fingerprint must be 393E 7D54 F7DE 58FE 75B9 7214 947C 9D61 93D3 DD8B: the same key signs the package repository.
  • The .sig is a detached signature over the ISO; the .sha256 is in sha256sum's own format, so -c reads it directly.
Compare two checksums: the one on this page and the one your computer prints for your file. Every character must be the same.On this page754da517 … 5387d5d9Your file754da517 … 5387d5d9The same, every character: the file is good.

Step 03

Make the USB stick.

Use the computer you have now; it doesn’t have to be the PC you’ll run bromigOS on. You need a USB stick of 8 GB or more, and everything on it is erased, so copy off anything you want to keep.

With Rufus

  1. Plug in the USB stick, then download and open Rufus.
  2. Under Device, choose your USB stick.
  3. Click SELECT and pick the bromigOS ISO.
  4. Check that Partition scheme is GPT and Target system is UEFI (non CSM).
  5. Click START.
  6. When Rufus says ISOHybrid image detected, choose Write in DD Image mode, then OK.
  7. Confirm that everything on the stick will be erased.
  8. Wait until the bar says READY, then close Rufus.

Or use balenaEtcher: Flash from file, Select target (your stick), Flash.

A simplified Rufus window: Device is your USB stick, Boot selection is the bromigOS ISO with the SELECT button, Partition scheme is GPT, Target system is UEFI (non CSM), and START. The status bar says READY when it is done.Rufus (simplified)DeviceUSB stick (16 GB) ▾Boot selectionbromigos-0.1.3-x86_64.isoSELECTPartition schemeTarget systemGPT ▾UEFI (non CSM) ▾StatusREADYSTARTCLOSE
Rufus asks how to write an ISOHybrid image. Choose Write in DD Image mode, not the ISO Image mode it recommends, then OK.ISOHybrid image detectedWrite in ISO Image mode (Recommended)Write in DD Image modeOKCancel

Already have a Ventoy stick? Copy the .iso onto it like any file; that works too.

For power users: write the image yourself

How it works underneath

  • It's an isohybrid image: one file that starts on BIOS and UEFI PCs, with a hybrid GPT/MBR layout. Write it to the whole device, never a partition.
  • Ventoy works: copy the .iso onto the Ventoy stick.
  • There's no netboot image: the medium is about 5 GB because it carries an offline package repository, everything an install needs.

Step 04

Start from the stick.

Your PC normally starts Windows. To start from the stick, you pick it in the PC’s boot menu.

  1. Plug the USB stick into the PC, then restart it.
  2. Right as the PC starts, tap the boot menu key for your brand (in the table below) a few times a second, until a menu appears.
  3. Pick the USB stick. On newer PCs it may read UEFI: followed by the stick’s name.
  4. The bromigOS boot menu appears. If the PC shows a blue screen or mentions Secure Boot instead, see Secure Boot below.
The bromigOS boot menu: BROMIGOS // RELAY MEDIUM over the emblem, with Start bromigOS (try it live) highlighted, then Install bromigOS, safe graphics, a memory test and more
The bromigOS boot menu. Choose with the arrow keys and Enter.
Keys by brand
BrandBoot menuSetup
DellF12F2
HPEsc, then F9F10
LenovoF12 (some IdeaPads: the small Novo button, or Fn+F12)F1 or F2 (ThinkPads: Enter, then F1)
ASUSF8 (desktops) or Esc (laptops)Del or F2
AcerF12 (if nothing happens, turn on F12 Boot Menu in setup with F2)F2
MSIF11Del
GigabyteF12Del
ASRockF11F2 or Del
SamsungEsc or F2F2
Toshiba / DynabookF12F2
Intel NUCF10F2
Microsoft SurfaceHold Volume Down, press and release Power, and keep holding Volume Down until the logo showsHold Volume Up while you press Power

The Windows way, on any brand

In Windows, open Settings › System › Recovery › Advanced startup › Restart now. When the blue menu appears, choose Use a device, then your USB stick. (Or Troubleshoot › Advanced options › UEFI Firmware Settings to open the PC’s setup.)

Secure Boot

Secure Boot is a PC setting that only starts software signed by keys the PC trusts. Most Windows PCs have it on.

The stick starts with Secure Boot on. The first time, the PC shows a blue screen (MokManager) asking you to trust bromigOS’s key. You do this once per PC:

Use the arrow keys and Enter on these screens; the mouse doesn’t work there.

  1. A blue screen titled ERROR says Verification failed: (0x1A) Security Violation. Press Enter (OK).

    MokManager's ERROR screen: Verification failed: (0x1A) Security Violation, with an OK button
  2. Shim UEFI key management says Press any key to perform MOK management, with a 10-second countdown. Press any key.

    Shim UEFI key management: Press any key to perform MOK management
  3. On Perform MOK management, choose Enroll key from disk.

    Perform MOK management: Continue boot, Enroll key from disk, Enroll hash from disk
  4. On Select Key, choose the USB stick: ARCHISO_EFI.

    Select Key: the USB stick's volume, ARCHISO_EFI
  5. Choose ENROLL_THIS_KEY_IN_MOKMANAGER.cer.

    Select Key: the files on the stick, with ENROLL_THIS_KEY_IN_MOKMANAGER.cer
  6. On [Enroll MOK], choose Continue. (View key 0 shows the certificate first.)

    [Enroll MOK]: View key 0 and Continue
  7. On Enroll the key(s)?, choose Yes.

    Enroll the key(s)? with No and Yes
  8. Back on Perform MOK management, choose Reboot. The PC starts the stick again (if Windows starts instead, pick the stick in the boot menu again), and the bromigOS menu appears.

    Perform MOK management: Reboot, Enroll key from disk, Enroll hash from disk

With Secure Boot on, the bromigOS boot menu is plain text instead of the themed one; the entries are the same.

The key’s SHA-1 fingerprint, as View key 0 shows it: 5F:EC:1D:6C:E1:8B:6B:D3:B9:6E:ED:E9:87:AE:B4:E9:EE:62:49:86. How it works

Installed bromigOS: for now, turn Secure Boot off before you start the installed system. Its own Secure Boot support isn’t done yet.

Turn Secure Boot off

  1. Open the PC’s setup (its firmware, often called the BIOS). From Windows: Settings › System › Recovery › Advanced startup › Restart now, then Troubleshoot › Advanced options › UEFI Firmware Settings › Restart. Or tap the setup key right as the PC starts: it’s in the Setup column of the key table.
  2. Find Secure Boot. It’s usually under Boot, Security or Authentication.
  3. Set it to Disabled.
  4. Choose Save and Exit (often F10). The PC restarts.

Some PCs only let you change it after you set a supervisor password in setup. On ASUS, set OS Type to Other OS. You can turn Secure Boot back on later for Windows.

BitLocker: if Windows uses BitLocker or device encryption, turning Secure Boot off or on can make Windows ask for its BitLocker recovery key at the next start. Get the key first, at aka.ms/myrecoverykey.

For power users: kernel parameters and the Secure Boot chain
The boot menu
Boot menu entryKernel parameters
Start bromigOSarchiso's line: archisobasedir=arch archisosearchuuid=… splash quiet
Install bromigOSadds bromigos.install: the live session opens the installer at login
Start with safe graphicsadds nomodeset
Start with the screen readeradds accessibility=on: speech from the start

How it works underneath

  • archiso's own options work: press e on an entry in GRUB (UEFI), or Tab in the BIOS menu, and add copytoram to run from RAM and free the stick, or cow_spacesize=4G for more room for changes in the live session.
  • The Secure Boot chain: the firmware (Microsoft's UEFI CA) starts shim 16.1, Fedora's Microsoft-signed build, pinned by checksum in the build; shim starts GRUB, signed with bromigOS's key (the one you enroll once in MokManager); GRUB starts the kernel, signed with the same key.
  • GRUB runs in lockdown, so it loads no theme fonts: the menu is plain text. Memtest86+ and the UEFI shell aren't signed and are refused with Secure Boot on.
  • The certificate is at the stick's root (ENROLL_THIS_KEY_IN_MOKMANAGER.cer) and in the repository (iso/secureboot/bromigos-secureboot.crt). SHA-256 9D:18:1B:07:00:B6:F8:74:94:01:6A:B7:3B:49:E4:A0:96:C7:7D:75:3E:A5:71:D7:75:DB:3E:1B:54:6E:E9:D5; SHA-1 5F:EC:1D:6C:E1:8B:6B:D3:B9:6E:ED:E9:87:AE:B4:E9:EE:62:49:86.
  • Running your own keys in Setup Mode? Enroll them with sbctl instead of MokManager. The installed system isn't signed yet: start it with Secure Boot off, or sign it with your own keys.

Step 05

Try it, or install.

On the bromigOS boot menu, pick what you want with the arrow keys and Enter.

  • Start bromigOS

    The whole desktop, running from the stick. Look around: nothing on your PC changes.

  • Install bromigOS

    Opens the installer. It asks which disk to use, explains each choice, and asks before it erases anything. Back up your files before you install.

The live desktop's widgets: CPU load per thread, memory, uptime, a media player, and the network with its radar
Live, from the stick: the system and network widgets

Step 06

Install it.

Choose Install bromigOS in the boot menu, or press Install bromigOS on the live desktop’s welcome card. The installer fills the screen and asks one thing at a time. You can go back and change anything until you press Install.

Back up your files first. Installing alongside Windows keeps them, but a copy elsewhere is always worth having.

The live desktop's welcome card: Try bromigOS, or Install bromigOS
The live desktop asks: try it, or install
  1. Welcome. Choose the language and time zone. You don’t need the internet: everything is on the stick.

    Install bromigOS: the language, the time zone and the network, with Continue
  2. Before you start. Only when there’s something to know: running on battery, little memory, a disk that says it’s failing, or Secure Boot. Each one says what to do, and none of them stops you.

    Secure Boot on? Install as usual. Then turn Secure Boot off (how) before you start bromigOS from the disk. The installed system can’t start with it on yet.

    Before you start: Secure Boot is on, with what it means and how to turn it off
  3. What kind of computer is this? bromigOS (desktop) for a computer you sit at. bromigOS Server has no desktop, for servers and lab machines.

    What kind of computer is this? bromigOS (desktop) or bromigOS Server
  4. Your keyboard. Pick the layout that matches your keys, and try it in the box.

    Your keyboard: the layout, and a box to try it in
  5. Where to install. Every disk, with its size, model and what’s on it. Pick one, then:

    • Install alongside Windows. Windows and its files stay. If there isn’t free space, Windows’ part of the disk is made smaller: the slider sets how much each gets. Every time the PC starts, you choose which one to use.
    • Erase the whole disk. Everything on it is deleted, and the screen says what that is.

    If alongside can’t be offered, the screen says why and what to do. For example, Windows’ Fast Startup or hibernation must be off, because a sleeping Windows can’t be resized safely. A disk locked with BitLocker is never resized.

    Where to install: a 43 GB disk with Windows, Install alongside Windows chosen, and a slider: Windows 20 GB, bromigOS 22 GB
  6. About you. Your name, a user name for signing in, a password, and a name for the computer.

    About you: your name, user name, password twice and the computer's name
  7. Lock the disk. Encryption is on by default: without the passphrase, nobody can read the disk, even if the PC is lost or stolen. Your password unlocks it, or give it a passphrase of its own.

    Remember it. Nobody can recover it, and without it the disk can’t be read.

    Lock the disk: Encrypt the disk on, and a separate passphrase off
  8. Ready to install. Check your choices. Nothing on the disk changes until you press Install.

    Ready to install: every choice listed, with Install
  9. Installing. A progress bar says what it’s doing. It takes about ten minutes, and you can leave it.

    Installing bromigOS: the progress bar, at Making room: shrinking Windows
  10. Done. Press Restart now, and take out the stick when the screen goes dark.

    bromigOS is installed: what happens at the next start, and Restart now

Windows with BitLocker

If Windows on the disk uses BitLocker, the installer first asks you to save its recovery key: Windows may ask for it once after bromigOS is installed. You’ll find it at aka.ms/myrecoverykey. Tick I’ve saved it to go on.

No picture, or text only?

Choose Install bromigOS (text mode) in the boot menu. It’s the same installer with the same steps, in text, and it works with only the keyboard. Start with the screen reader (speech) reads each question aloud.

If something goes wrong

The installer says what happened and what to do. Save a problem report puts the details on a USB drive for whoever helps you. If a reinstall stops partway, your old bromigOS is put back as it was.

For power users: answer files, boot parameters and the disk layout

An answer file at bromigos/install.toml on a USB drive installs with no questions, after a 10-second countdown with Cancel. A file with a problem is never half-used: the installer says what’s wrong and asks instead.

[install]
edition = "desktop"
locale = "en_US"
timezone = "America/Chicago"
keyboard = "us"
disk = "/dev/nvme0n1"
mode = "erase"
user = "alex"
hostname = "alex-pc"
password = "correct horse battery staple"
encrypt = true
Press e (UEFI) or Tab (BIOS) on a boot menu entry to add them
Boot parametersWhat opens
bromigos.installThe graphical installer, the desktop chosen
bromigos.install bromigos.edition=serverThe text installer, bromigOS Server chosen
bromigos.install bromigos.textThe text installer
bromigos.answers=PATHThat answer file

On the live system, from a terminal:

The disk, after an install
PartWhat it is
/boot2 GiB, unencrypted: the EFI system partition on an erased UEFI disk; ext4 beside Windows, whose own EFI partition is mounted at /boot/efi
The rootbtrfs on LUKS2 (unless encryption is off), subvolumes @, @home, @log, @pkg, @.snapshots
Boot loaderGRUB, with os-prober listing Windows; beside Windows it goes in EFI/GRUB, never Windows' fallback loader

How it works underneath

  • The installers write your answers for archinstall: config.json and creds.json (mode 0600). Passwords go only in creds.json, never on a command line or in a log.
  • Show what will run on the summary shows archinstall's configuration with every secret hidden, and the bromigos setup lines the install runs. Advanced on the Where step offers custom partitioning, the file system, swap (zram by default), the kernel and the boot loader. A root shell is one key away: Ctrl+Alt+T in the graphical installer, F12 in the text one.
  • Alongside makes room with ntfsresize (dry run first), then sfdisk, then checks the file system reads whole. BitLocker, hibernated and Fast Startup volumes are refused.
  • The installed system keeps your answers, without passwords, at /var/log/bromigos/install-answers.toml: add a password and it repeats the install.
  • Reinstall and keep my files keeps @home, makes a fresh @, keeps the old one as @old-root-DATE, and brings back every user with the same user ID.

Step 07

The first start.

If you chose encryption, type the disk’s passphrase when the PC starts, then sign in with your user name and password. The welcome tour opens: every step has Skip, and nothing changes until you choose something.

Secure Boot on? Turn it off before the first start from the disk (how): the installed system can’t start with it on yet.

  1. Wi-Fi. Only when you’re offline: pick a network, or skip.

    Connect to the internet: the Wi-Fi networks and a password box
  2. Your screens. Which one is the main screen, where the panels go.

    Your screens: two monitors, the main one chosen
  3. Choose a world. The whole desktop’s look, each with a preview. Change it any time.

    Choose a world: eleven themes with previews, the Wick in use
  4. VECTOR. Where your desk’s AI thinks: your lab, this computer (with how much it downloads), a service you name, or not now. And whether he speaks.

    VECTOR, your desk's AI: his brain (your lab, this computer, a service, not now) and his voice
  5. Your lab. Optional. If you run servers at home, it finds them and connects with one button. Nothing changes until you press Connect.

    Your lab: two machines found, gpu-box and nas, with Connect
  6. Pair your phone. Get BRODEC on your phone, then scan the code: talk to VECTOR from anywhere, and restart or update this computer. The step ticks when your phone confirms. (iPhone: coming.)

    Pair your phone: a Google Play code, the pairing code and what the phone can do
  7. The keys worth knowing. Press each one and its card lights up. Super is the Windows key.

    The keys worth knowing: Super+Space, Super+Enter, Super+comma and more
  8. You’re all set. What you chose, and where to change it again.

    You're all set: what you chose

Open the tour again any time from Settings › About › Welcome tour. bromigOS Server has the same tour in text, on its console, with a QR code you can scan from the screen.

For power users: the tour's commands
The tour writes the same answers as bromigos setup
Tour stepThe same from a terminal
Screensbromigos setup monitors
Worldbromigos theme set NAME
VECTORbromigos setup holo
Your labbromigos setup homelab --find
Everythingbromigos setup

How it works underneath

  • The installer leaves ~/.local/state/bromigos/welcome-pending; the session's autostart runs bromigos welcome --if-pending, so the tour opens once, after a new install.
  • There's no second configuration: each step writes what bromigos setup would.

Step 08

Something went wrong?

Under the hood

How it’s built.

CI builds every release’s ISO from its tag: archiso’s releng profile, bromigOS’s overlay, and an offline repository of every package an install needs. Then it checks the image (a privacy guard, no keys, no proprietary packages), tests it in QEMU/KVM (a UEFI encrypted install with its first update and rollback, an offline BIOS install, and Secure Boot with the MokManager enrollment), signs it and publishes it.

For power users: build and test it yourself

How it works underneath

  • iso/build.sh needs Docker (it runs a privileged container) and about 20 GB of disk.
  • iso/ci-test.sh needs /dev/kvm: it runs the same QEMU/KVM tests as CI.