## Requirements

- Computer [compatible](https://ubuntu.com/download/desktop) with Ubuntu 22.04.3 LTS with 720p camera (1080p recommended)
- USB flash drive (used to run Superbacked OS, 16GB min, faster is better)

## Recommendations (optional)

Physically removing internal disk(s) and wireless interface(s) if not soldered to motherboard or disabling interface(s) using BIOS if soldered is recommended to strengthen data persistence and air gap hardening.

Running Superbacked OS on [datAshur PRO²](https://istorage-uk.com/product/datashur-pro2/) USB flash drive is recommended to enforce access control, data persistence and tamper resistance hardening.

## Superbacked OS USB flash drive guide

### Step 1: install [Raspberry Pi Imager](https://www.raspberrypi.com/software/)

#### macOS

Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager.

#### Ubuntu (or other Debian-based OS)

> Heads-up: depends on [Qt](https://www.qt.io/).

```shell-session
$ sudo add-apt-repository -y universe

$ sudo apt install -y rpi-imager
```

### Step 2 (optional): disable Raspberry Pi Imager [telemetry](https://github.com/raspberrypi/rpi-imager#telemetry)

#### macOS

```shell-session
$ defaults write org.raspberrypi.Imager.plist telemetry -bool NO
```

#### Ubuntu (or other Debian-based OS)

```shell-session
$ mkdir -p ~/.config/Raspberry\ Pi

$ cat << "EOF" > ~/.config/Raspberry\ Pi/Imager.conf
[General]
telemetry=false
EOF
```

### Step 3: download Superbacked OS

> Heads-up: for additional security, [verify](https://github.com/superbacked/superbacked) Superbacked OS release.

Go to https://superbacked.com/download and download Superbacked OS (Intel).

### Step 4: copy Superbacked OS to USB flash drive

Open “Raspberry Pi Imager”, click “CHOOSE OS”, then “Use custom”, select `superbacked-os-amd64-*.img.xz`, click “CHOOSE STORAGE”, select USB flash drive and, finally, click “WRITE”.

![Raspberry Pi Imager](./assets/rpi-imager.png)

### Step 5 (optional): enable datAshur PRO² global read-only and configure device as bootable (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions)

## Computer hardening guide

### Step 1 (if applicable): enable “Secure Boot” and disable “Boot Order Lock”

![Secure Boot](./assets/enable-secure-boot.jpg)

![Boot Order Lock](./assets/disable-boot-order-lock.jpg)

### Step 2 (optional): physically remove internal disk(s) and wireless interface(s) if not soldered to motherboard or disable interface(s) using BIOS if soldered

![Disable interfaces](./assets/disable-interfaces.jpg)

### Step 3: boot Superbacked OS

### Step 4: reboot

### Step 5 (if applicable): enable “Boot Order Lock”

![Boot Order Lock](./assets/enable-boot-order-lock.jpg)

## Usage guide

> Heads-up: password is “superbacked”.

Right-click “superbacked.AppImage” and click “Run as a program”

![Run as a program](./assets/run-as-a-program.jpg)

## Update guide

### Step 1 (if applicable): disable datAshur PRO² global read-only (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions)

### Step 2: boot Superbacked OS

### Step 3: connect Ethernet cable

### Step 4: run following commands

> Heads-up: password is “superbacked”.

```shell-session
$ sudo overlayroot-chroot

$ superbacked-os-update.sh
Done

$ exit

$ sudo systemctl poweroff
```

### Step 5 (if applicable): enable datAshur PRO² global read-only (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions)


## Requirements

- [Raspberry Pi 4](https://www.raspberrypi.com/products/raspberry-pi-4-model-b/) (2GB min, 4GB or more recommended)
- Raspberry Pi [15W USB-C Power Supply](https://www.raspberrypi.com/products/type-c-power-supply/)
- Raspberry Pi [keyboard](https://www.raspberrypi.com/products/raspberry-pi-keyboard-and-hub/) and [mouse](https://www.raspberrypi.com/products/raspberry-pi-mouse/) (or equivalent)
- Raspberry Pi [Micro HDMI to Standard HDMI (A/M) Cable](https://www.raspberrypi.com/products/micro-hdmi-to-standard-hdmi-a-cable/) (or equivalent)
- microSD card or USB flash drive (used to run Superbacked OS, 16GB min, faster is better)
- Plug and play webcam with USB-A connector (720p min, 1080p recommended)
- HDMI display (720p min)

## Recommendations (optional)

Running Superbacked OS on [datAshur PRO²](https://istorage-uk.com/product/datashur-pro2/) USB flash drive is recommended to enforce access control, data persistence and tamper resistance hardening.

## Superbacked OS microSD or USB flash drive guide

### Step 1: install [Raspberry Pi Imager](https://www.raspberrypi.com/software/)

#### macOS

Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager.

#### Ubuntu (or other Debian-based OS)

> Heads-up: depends on [Qt](https://www.qt.io/).

```shell-session
$ sudo add-apt-repository -y universe

$ sudo apt install -y rpi-imager
```

### Step 2 (optional): disable Raspberry Pi Imager [telemetry](https://github.com/raspberrypi/rpi-imager#telemetry)

#### macOS

```shell-session
$ defaults write org.raspberrypi.Imager.plist telemetry -bool NO
```

#### Ubuntu (or other Debian-based OS)

```shell-session
$ mkdir -p ~/.config/Raspberry\ Pi

$ cat << "EOF" > ~/.config/Raspberry\ Pi/Imager.conf
[General]
telemetry=false
EOF
```

### Step 3: download Superbacked OS

> Heads-up: for additional security, [verify](https://github.com/superbacked/superbacked) Superbacked OS release.

Go to https://superbacked.com/download and download Superbacked OS (Raspberry Pi).

### Step 4: copy Superbacked OS to USB flash drive

Open “Raspberry Pi Imager”, click “CHOOSE OS”, then “Use custom”, select `superbacked-os-arm64-raspi-*.img.xz`, click “CHOOSE STORAGE”, select USB flash drive and, finally, click “WRITE”.

![Raspberry Pi Imager](./assets/rpi-imager.png)

### Step 5 (optional): enable datAshur PRO² global read-only and configure device as bootable (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions)

## Usage guide

> Heads-up: password is “superbacked”.

Right-click “superbacked.AppImage” and click “Run as a program”

![Run as a program](./assets/run-as-a-program.jpg)

## Update guide

### Step 1 (if applicable): disable datAshur PRO² global read-only (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions)

### Step 2: boot Superbacked OS

### Step 3: connect Ethernet cable

### Step 4: run following commands

> Heads-up: password is “superbacked”.

```shell-session
$ sudo overlayroot-chroot

$ superbacked-os-update.sh
Done

$ exit

$ sudo systemctl poweroff
```

### Step 5 (if applicable): enable datAshur PRO² global read-only (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions)


Superbacked docs

Learn how to privately and securely use Superbacked.