How to run Superbacked OS on Intel computer

Requirements

• Computer compatible with Ubuntu 24.04.1 LTS with 1080p camera
• USB flash drive (used to run Superbacked OS, 16GB min, faster is better)

Recommendations (optional)

Physically removing internal disk(s) and wireless interface(s) if not soldered to motherboard or disabling interface(s) using BIOS if soldered is recommended to strengthen data persistence and air gap hardening.

Running Superbacked OS on flash drive with signed firmware and write protection enabled such as Kanguru FlashTrust™ Secure Firmware USB 3.0 Flash Drive (WP-KFT3-16G) is recommended.

Superbacked OS USB flash drive guide

Step 1: install Raspberry Pi Imager

macOS

Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager.

Ubuntu (or other Debian-based OS)

Heads-up: depends on Qt.

$ sudo add-apt-repository -y universe

$ sudo apt install -y rpi-imager

Step 2 (optional): disable Raspberry Pi Imager telemetry

macOS

$ defaults write org.raspberrypi.Imager.plist telemetry -bool NO

Ubuntu (or other Debian-based OS)

$ mkdir -p ~/.config/Raspberry\ Pi

$ cat << "EOF" > ~/.config/Raspberry\ Pi/Imager.conf
[General]
telemetry=false
EOF

Step 3: download Superbacked OS

Heads-up: for additional security, verify Superbacked OS release.

$ cd ~/Downloads

$ for number in $(seq 1 2); do curl --fail --location "https://github.com/superbacked/superbacked/releases/download/v1.6.1/superbacked-os-amd64-1.6.1.img.xz.part$number" || break; done | cat > superbacked-os-amd64-1.6.1.img.xz

Step 4: copy Superbacked OS to USB flash drive

Open “Raspberry Pi Imager”, click “CHOOSE OS”, then “Use custom”, select superbacked-os-amd64-1.6.1.img.xz, click “CHOOSE STORAGE”, select USB flash drive, click “NEXT”, then “NO” and, finally, click “YES”.

Raspberry Pi Imager, release semver may differ

Step 5 (optional): enable write protection

If using Kanguru FlashTrust™ Secure Firmware USB 3.0 Flash Drive or equivalent, enable write protection.

Computer hardening guide

Step 1 (optional): physically remove internal disk(s) and wireless interface(s) if not soldered to motherboard or disable interface(s) using BIOS if soldered

I/O Port Access, BIOS menu may differ

Step 2 (if applicable): enable “Secure Boot” and disable “Boot Order Lock”

Secure Boot, BIOS menu may differ

Boot Order Lock, BIOS menu may differ

Step 3: boot Superbacked OS

Step 4: reboot

Step 5 (if applicable): enable “Boot Order Lock”

Boot Order Lock, BIOS menu may differ

Usage guide

Step 1 (if applicable): unplug Ethernet cable

Step 2: boot Superbacked OS

Heads-up: password is “superbacked”.

Boot Superbacked OS using “Advanced options for Ubuntu” and “Ubuntu, with Linux 6.8.0-49-generic” (required when using write-protected hardware).

If scanning blocks does not work, please try using a higher quality 1080p webcam such as the Razer Kiyo X.