Physically removing internal disk(s) and wireless interface(s) if not soldered to motherboard or disabling interface(s) using BIOS if soldered is recommended to disable data persistence and network connectivity at the hardware level.
Running Superbacked OS on flash drive with signed firmware and write protection enabled such as Kanguru FlashTrust™ Secure Firmware USB 3.0 Flash Drive (WP-KFT3-16G) is recommended.
Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager.
Heads-up: depends on Qt.
Select “App Options”, disable “Enable anonymous statistics (telemetry) collection” and click “Save”.
Heads-up: for additional security, verify Superbacked OS release.
Heads-up: requires WSL to be installed first using
wsl --install(if applicable).
Heads-up: replace
Sun Knudsenwith your username.
Open “Raspberry Pi Imager”, click “OS”, then “Use custom”, select superbacked-os-amd64-1.10.0.img.xz, click “Storage”, select USB flash drive, click “NEXT”, then “WRITE” and, finally, click “I UNDERSTAND, ERASE AND WRITE”.
Raspberry Pi Imager, release semver may differ
If using Kanguru FlashTrust™ Secure Firmware USB 3.0 Flash Drive or equivalent, enable write protection.
I/O Port Access, BIOS menu may differ
Secure Boot, BIOS menu may differ
Boot Order Lock, BIOS menu may differ
Boot Order Lock, BIOS menu may differ
Heads-up: password is “superbacked”.
Boot Superbacked OS using “Advanced options for Ubuntu” and “Ubuntu, with Linux 6.14.0-37-generic” (required when using write-protected hardware).
If scanning blocks does not work, please try using a higher quality 1080p webcam such as the Razer Kiyo X.