Skip to content

docs: explain how to verify SD card running official release #35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jkaczman wants to merge 2 commits into
base: main
Choose a base branch
from
Open

docs: explain how to verify SD card running official release #35

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ec0325b
docs: explain how to verify running official OS
jkaczman Jun 2, 2026
f4b2251
docs: clarify steps for macOS/Linux/Windows
jkaczman Jun 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 18 additions & 4 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,22 +9,36 @@ The benefits of this OS over Raspberry Pi OS Lite are:

There is substantial work left to complete the long-term goals of this repository. Notably, some things to-do are regular OS updates to patch CVEs via A/B, hardening the kernel, continue stripping out un-used parts of the OS, etc.

### Check at any time that your SD card is running official Secluso OS (not in latest release)

Please see below on how to check reproducible builds.
We provide an easy way to check that your SD card is running an official Secluso OS image!

**This was made for macOS and Linux**. On Windows, the steps are very similar, but you would need to find some way to install dd and hash the output test.bin. Windows has "cygwin" to help with this.

1. Take out your SD card
2. Plug it into your laptop or computer
3. Determine the device identifier (we recommend using https://github.com/Canop/dysk) - you should see a disk that is labeled as "removable" and has at least two partitions visible, "boot" and "provision". Look at the number that comes **right after** "disk". You'll need to use this in the next step.
4. Run the command sudo dd if=/dev/diskPLACEHOLDER of=test.bin
5. If on macOS, PLACEHOLDER will be your disk number from #3 with s2 at the end (e.g. disk6s2 if the disk number was 6)
6. If on Linux, PLACEHOLDER will be your disk number from #3 with p2 at the end (e.g. disk6p2 if the disk number was 6)
5. Run sha256sum test.bin
6. Compare the output to our released squashfs file in this repository's releases.

### Check that our release matches a local build (reproducible builds)

To build, run this command on x86-64 Linux from the meta-secluso-os directory:
```chatinput
```bash
kas build pi-official-image.yml
```

The image can be found after building running this from the meta-secluso-os directory:
```chatinput
```bash
cd build/tmp/deploy/images/raspberrypi0-2w-64
bunzip2 -f secluso-pi-image-minimal-raspberrypi0-2w-64.rootfs.wic.bz2
```

**To check that our released image is reproducible**, obtain a fresh image from above, and then compare to our released image file:
```chatinput
```bash
diff (our released image.wic) secluso-pi-image-minimal-raspberrypi0-2w-64.rootfs.wic
```

Expand Down