Mission OS — interactive concept demo

Concept demo of Mission OS. Not a live operating system. The real ISO is in internal testing. Exit demo ↵

Skip to login

› Mission OS · boot sequence initialized

GNU GRUB · version 2.06

Mission OS (Debian Stable · KDE Plasma)
Advanced options for Mission OS
System setup

Use ↑ ↓ to select. Booting in 2s…

[ 0.00] Linux version 6.8.0-mission (mission@build) · Debian Stable base

[ 0.12] Command line: BOOT_IMAGE=/vmlinuz root=UUID=… ro quiet splash

[ 0.31] mission-privacy: telemetry_hooks=disabled (compile-time)

[ 0.57] mission-crypto: LUKS2 + Argon2id · slot 0 verified

[ 0.83] mission-net: no radio auto-associate · offline-first policy engaged

[ 1.02] KDE Plasma session: ready

p4inz

Press Enter to continue · or click below

Session encrypted · biometric optional

Mission OS

v0.1 · Debian Stable + KDE Plasma · concept demo

Privacy-first
Security-conscious
Portable-first
Offline-first

no telemetry · no phone-home · builds signed · gplv3

p4inz@mission-os · 2026

Mission OS · Desktop 1 2 3

— · --:--

Privacy Crypto 87% p4inz@mission-os

Mission Installer

5 of 13 real screens shown

… … …

Step 1 · Welcome

Install Mission OS

You're about to install a privacy-first, offline-first Linux operating system built on Debian Stable + KDE Plasma. Nothing here calls home, ever.

Before we start: the installer will explain every advanced choice you make — Secure Boot, TPM, disk encryption, recovery keys — with the benefits, limitations, and trade-offs on the same screen as the toggle.

Contextual help

You can quit any time before the "Install" step — no changes are written to disk until then.

Step 5 · Privacy Setup

Set your defaults up front, not later.

Telemetry Disabled (only choice) Mission OS ships without telemetry hooks compiled in. There is no "enable" toggle — the code isn't there.

Default browser Firefox (preinstalled) Preinstalled with strict privacy defaults. Recommended. Tor Browser (preinstalled) Slower than Firefox. Use when you need network-layer anonymity, not for general browsing.

Why we ask up front

Post-install privacy settings get ignored. Set here, you actually see them; set later, they live in a Settings panel nobody opens.

Step 10 · Security Options

Understand what you're enabling.

Full-disk encryption (LUKS2 + Argon2id) Benefit: Cold-boot theft protection. Limitation: Password loss = data loss. Trade-off: ~1-3% write overhead. Recovery key printed at Step 11. Secure Boot Benefit: Blocks unsigned bootloaders. Compatibility: Works on most 2016+ hardware. Trade-off: Prevents booting unsigned custom kernels — you can turn it off later. TPM-sealed unlock (optional) Benefit: Disk unlocks silently on the bound hardware. Limitation: Data becomes hardware-locked — motherboard failure requires recovery key. Recommendation: only if you have secure recovery-key storage.

The ethos

Every advanced option explains its benefits, limitations, compatibility, and trade-offs. Users should understand what they're enabling.

Step 11 · Summary

Confirm before anything writes to disk.

Base: Debian Stable · KDE Plasma
Telemetry: Disabled (compile-time)
Default browser: Firefox
Disk encryption: LUKS2 · Argon2id · slot 0
Secure Boot: Enabled
TPM-sealed unlock: Off
User account: p4inz
Recovery key: Will be printed and shown once

Clicking Install writes changes to the selected disk. Nothing before this step has modified anything.

Reversible up to here

Cancel now and Mission OS leaves your system untouched. After the next screen, the write is committed.

Step 13 · Completion

Mission OS is installed.

First boot will open a short welcome tour covering Mission Settings, Mission Store, and where recovery-key backup lives. All of it can be dismissed.

Concept demo. In the real installer this closes and reboots into the new system; here, close the window to return to the desktop.

Try the Mission Settings app in the dock (Phase 4). About panel shows the real current status.

Step 1 of 5 shown · 13 total

This panel didn't respond. Diagnosed and logged — try reopening it.

Mission Settings

privacy defaults

Mission Settings

Section

Privacy

The defaults you picked in the installer. Change them here, or lock them so nothing changes them without your knowledge.

Data collection

Telemetry locked off Mission OS ships without telemetry hooks compiled in. This isn't a toggle you can flip — the code isn't there.

Diagnostic reports locked off Crash reports stay on-device. If you want to share one with an issue tracker, export it manually.

Location services Off by default. When enabled, apps that request location must ask each time; nothing is granted silently.

Network

DNS over HTTPS locked on Every DNS query travels encrypted. You can pick the resolver; you can't turn the encryption off.

Auto-connect Wi-Fi radios on boot Off by default (offline-first policy). Turn on if you want the machine to associate with known networks automatically.

Route all traffic through Tor System-wide Tor. Slower, and some apps break under it — enable only when you need it.

Browser

Firefox as default browser Preinstalled with strict privacy defaults (see the Firefox app for the full list).

Tor Browser preinstalled locked on Ships in the base image so it's available even offline. You can uninstall it later; you cannot uninstall it during first-run.

Anti-fingerprinting locked on Firefox\'s resist-fingerprinting flag is on by default and lockdown-immutable.

Filesystem

Index recently opened files Off by default. "Recent files" on most OSes is a privacy leak — Mission OS defaults to no index.

Generate image thumbnails Off by default. Preview generation writes to disk — enable per folder if you actually need it.

Changes made here would persist across reboots on a real install. This is a concept demo — nothing is written to disk.

This panel didn't respond. Diagnosed and logged — try reopening it.

About Mission OS

real data from projects.ts

Concept demo of

Mission OS

A privacy-first Linux OS built for developers, designers, and systems engineers who ship.

Project

Status: Active Development
Current version: Pre-release · internal testing
License: GPLv3
Started: 2026
Next milestone: First public-testing ISO — release once internal testing signs off
Role: Founder / Designer / Developer / Systems Engineer

System

Base: Debian Stable 12 · KDE Plasma 5.27
Kernel: Linux 6.8.0-mission
Init: systemd 254
Shell: bash 5.2 · konsole default
Filesystem: ext4 on LUKS2 · Argon2id
Package manager: apt (Debian) + mission-store

Values above match the target Mission OS ISO. Live values will populate here once the ISO ships.

Stack

QML
Qt
CMake
QtTest
CTest
GitHub Actions

ISO in internal testing as of August 2026. Public release when the four-pillar acceptance suite is fully green — no fixed date; shipped when it's honest to ship.

View on GitHub ↗ Full case study →

This panel didn't respond. Diagnosed and logged — try reopening it.

Files

what makes Mission OS Files different

Mission OS Files · at a glance

Dolphin, hardened for private workflows.

Encrypted-container browsing: Mount and browse LUKS2 volumes inline. Unlock happens once per session.
Thumbnails off by default: Preview generation writes to disk and leaks structure — off unless you opt in per folder.
Per-folder encryption profiles: Different vaults, different keys. No single-key-rules-them-all mistake.
Recent files not indexed: Unless you opt in. Most OSes leak "recently opened" — Mission OS defaults to off.

home / p4inz 7 items · 3 mounted vaults · 0 recents indexed

Vault-Personal.mos unlocked 4.2 GB
Vault-Work.mos locked 1.1 GB
Vault-Investigation.mos locked 640 MB
Documents/ 128 MB
Downloads/ 312 MB
.mission/ hidden 8 MB
recovery-key.qr.png move to vault 14 KB

Static example. Nothing here is a real file — no live filesystem is exposed to the concept demo.

This panel didn't respond. Diagnosed and logged — try reopening it.

Terminal

static shell example

Konsole · p4inz@mission-os · ~

p4inz@mission-os$ mission-status

● privacy-first · ● security-conscious · ● portable-first · ● offline-first

p4inz@mission-os$ mission-audit encryption

LUKS2 · slot 0 · Argon2id · verified 2h ago
secure-boot: enabled · tpm-sealed: off · recovery-key: escrowed

p4inz@mission-os$ mission-privacy status

telemetry: not-compiled · error-reporting: off · usage-stats: off
firefox: hardened · tor-browser: preinstalled · dns: over-https

p4inz@mission-os$ mission-net status

radios: off (offline-first policy)
wg0: down · tor: standby · dns-cache: 0 entries

p4inz@mission-os$ mission-store list --installed

firefox-esr · tor-browser · keepassxc · gnupg2
onionshare · mat2 · veracrypt · wireguard-tools

p4inz@mission-os$ mission-update check

checking signed manifest at updates.mission-os.dev …
● system: up to date (0.1.0)
● browser: up to date
● mission-store: up to date

p4inz@mission-os$ _

Not runnable here — this is a concept demo. Every command shown (mission-status, mission-audit, mission-privacy, mission-net, mission-store, mission-update) is a real Mission OS system utility planned for the shipping ISO.

This panel didn't respond. Diagnosed and logged — try reopening it.

Firefox — about:privacy

mission os defaults

Firefox · about:privacy · Mission OS defaults

Preinstalled with strict privacy on day one.

DNS-over-HTTPS: Enabled by default. Queries never travel plaintext.
Resist Fingerprinting: Standardises canvas/audio/webgl surfaces. Sites see less about your device.
Third-party cookies: Blocked. Sites you visit stay sandboxed from each other.
Referer trimming: Strict origin-only for cross-site requests.
HTTPS-only mode: Non-HTTPS pages require explicit confirmation.
Telemetry: Disabled at build. There is no toggle to re-enable — the code is compiled out.

Tor Browser is also preinstalled (see Installer step 5) for anonymity workflows. This is a concept demo — real browsing isn't wired here.

This panel didn't respond. Diagnosed and logged — try reopening it.