How to run Superbacked OS on Intel computer

Requirements

• Computer compatible with Ubuntu 22.04.3 LTS with 720p camera (1080p recommended)
• USB flash drive (used to run Superbacked OS, 16GB min, faster is better)

Recommendations (optional)

Physically removing internal disk(s) and wireless interface(s) if not soldered to motherboard or disabling interface(s) using BIOS if soldered is recommended to strengthen data persistence and air gap hardening.

Running Superbacked OS on datAshur PRO² USB flash drive is recommended to enforce access control, data persistence and tamper resistance hardening.

Superbacked OS USB flash drive guide

Step 1: install Raspberry Pi Imager

macOS

Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager.

Ubuntu (or other Debian-based OS)

Heads-up: depends on Qt.

$ sudo add-apt-repository -y universe

$ sudo apt install -y rpi-imager

Step 2 (optional): disable Raspberry Pi Imager telemetry

macOS

$ defaults write org.raspberrypi.Imager.plist telemetry -bool NO

Ubuntu (or other Debian-based OS)

$ mkdir -p ~/.config/Raspberry\ Pi

$ cat << "EOF" > ~/.config/Raspberry\ Pi/Imager.conf
[General]
telemetry=false
EOF

Step 3: download Superbacked OS

Heads-up: for additional security, verify Superbacked OS release.

Go to https://superbacked.com/download and download Superbacked OS (Intel).

Step 4: copy Superbacked OS to USB flash drive

Open “Raspberry Pi Imager”, click “CHOOSE OS”, then “Use custom”, select superbacked-os-amd64-*.img.xz, click “CHOOSE STORAGE”, select USB flash drive and, finally, click “WRITE”.

Step 5 (optional): enable datAshur PRO² global read-only and configure device as bootable (see product documentation for instructions)

Computer hardening guide

Step 1 (if applicable): enable “Secure Boot” and disable “Boot Order Lock”

Step 2 (optional): physically remove internal disk(s) and wireless interface(s) if not soldered to motherboard or disable interface(s) using BIOS if soldered

Step 3: boot Superbacked OS

Step 4: reboot

Step 5 (if applicable): enable “Boot Order Lock”

Usage guide

Heads-up: password is “superbacked”.

Right-click “superbacked.AppImage” and click “Run as a program”

Update guide

Step 1 (if applicable): disable datAshur PRO² global read-only (see product documentation for instructions)

Step 2: boot Superbacked OS

Step 3: connect Ethernet cable

Step 4: run following commands

Heads-up: password is “superbacked”.

$ sudo overlayroot-chroot

$ superbacked-os-update.sh
Done

$ exit

$ sudo systemctl poweroff

Step 5 (if applicable): enable datAshur PRO² global read-only (see product documentation for instructions)