Shadowfetch Linux 2.1.4 is a focused modernization of 2.1.3. It strengthens the graphics path for new-generation NVIDIA cards, verifies NVIDIA's Debian 13 keyring, uses nvidia-driver-assistant to select the supported branch, simulates every transaction, refuses removals, and takes Btrfs Phoenix snapshots around driver changes. The workflow was validated in release QA against a physical RTX 5060 Ti with a removal-free transaction. Full upgrades are simulated and re-verified before applying, the 2.1.3 upgrade uses a removal-free bridge, and BIOS and UEFI encrypted installs were validated on both firmware paths.
- Local model downloads remain optional and consent-gated; nothing is fetched until the user confirms the choice in Settings > Compute.
- Graphics: new-generation NVIDIA cards no longer dead-end; keyring-verified nvidia-driver-assistant workflow with simulate-first, --no-remove, and Phoenix snapshots — validated against a physical RTX 5060 Ti.
- Update safety: upgrades are simulated and re-verified before applying, refuse low-disk/active-package-manager/bad-power, and take a Phoenix pre/post pair; an interrupted update was killed mid-transaction in QA and recovered cleanly.
- Removal-free 2.1.3 upgrade bridge; the migration retires only the signed legacy local-AI package set and preserves personal workspaces and downloaded models.
- BIOS and UEFI encrypted installs (LUKS2 on Btrfs) validated on both firmware paths, including repeated reboot/unlock cycles and GRUB snapshot-boot recovery.
- Launcher cleanup: the Local AI section and Lost & Found no longer duplicate after optional software is installed.
- ISO
- shadowfetch-2.1.4-amd64.iso
- Size
- 3.97 GB (3.70 GiB)
- SHA-256
81a906788ec48150d4a4527b4d9e7b09a974d3d577f1bd32ba3f333df8a1a86b
Shadowfetch Linux 2.1.3 is a security and stability release. A critical Calamares installer bug is fixed: sf-remove-live-user ran pkill -KILL -u shadow inside the target chroot to clear a defensive obstacle, but a chroot does not isolate the process table, so the signal killed the live desktop session instead, aborting every install at job 23/43 and leaving a half-installed system that retained the live shadow account with its published password and NOPASSWD sudo -- the exact exposure the script exists to close. The script no longer signals any process; it edits the target account database files directly, then verifies every artefact is gone and fails loudly if not. This release also stops shadowfetch-firstboot.service from running during a live session, which previously set the hardware clock and fetched Flatpak themes on a visitor's machine before the firewall was even up.
- Critical fix: the installer no longer kills the live session mid-install.
- Fixed a separate install-blocking bug found during QEMU verification: the removepackages step referenced two nonexistent live-task-* packages, aborting every install.
- The live shadow account is now removed by editing target account files directly, with a fail-loud verification of every artefact -- account, password hash, home directory, sudoers, and autologin.
- First-boot setup no longer runs when booting the ISO live (was setting the wrong hardware clock and fetching Flatpak themes on visitors' machines before the firewall was up).
- No feature changes from 2.1.2 Fire Edition -- Ember Mode, Firewatch, Phoenix Recovery, Ignition Setup, and Fireproof Updates are unchanged.
- ISO
- shadowfetch-2.1.3-amd64.iso
- Size
- 4.01 GB (3.73 GiB)
- SHA-256
5f6a639b98e280c3fd46fc581ed899ec4ca861fb924bed266d4e13b9f4d0a2fd
Shadowfetch Linux 2.1.2 «Fire Edition» — a Debian-testing derivative with KDE Plasma 6. A focused release built to run hotter, update safer, recover faster, and launch local AI with less friction, with zero telemetry and no cloud accounts. Shadowfetch Control Center gains three sections: Ember Mode holds the machine in a performance profile and always returns to Balanced on its own; Firewatch shows temperatures, resource pressure, and a plain-language heat-map of what each application and agent consumes, with live tokens per second from local models; Phoenix Recovery takes automatic Btrfs restore points before every update, driver install, and AI-stack change, restorable in one click. llama.cpp with the Vulkan backend is preinstalled and models arrive through one-click, checksummed downloads that are never bundled; an Agent Workspace template starts a model server bound to localhost only. Ignition Setup lets first boot choose Core, Creator, Developer, AI Workstation, or Full Flame, and Fireproof Updates analyses pending changes, snapshots first, and offers rollback if verification fails. This is also the first Shadowfetch release that fits a FAT32 USB stick, and the first on which an encrypted install boots.
- Ember Mode: one-switch performance profile with crash-safe auto-return to Balanced.
- Firewatch: hardware and local-AI activity monitor with a per-application heat-map and tokens/second.
- Phoenix Recovery: automatic Btrfs restore points before risky changes, one-click restore.
- Local AI on first boot: llama.cpp + Vulkan preinstalled; models are one-click, checksummed, never bundled; localhost-only Agent Workspace.
- Ignition Setup: first-run system chooser (Core / Creator / Developer / AI Workstation / Full Flame).
- Fireproof Updates: analyse, warn, snapshot, verify, and offer rollback.
- Under 4 GiB: the first release that fits a FAT32 USB stick, via curation not feature loss.
- Encrypted installs boot: three defects fixed and verified booting end to end.
- Reproducible builds against a pinned snapshot.debian.org archive from a signature-verified base.
- ISO
- shadowfetch-2.1.2-amd64.iso
- Size
- 4.14 GB (3.85 GiB)
- SHA-256
9374a233c1bd6f38bcbfad2bf041805568afb13ee455c482a7c7f68e7d0c56b1
Shadowfetch Linux 2.1.1 «Umbra» — a Debian-testing derivative with KDE Plasma 6. A correctness release: 2.1.0 shipped identifying itself as 2.0.1 in /etc/os-release, the login banner, the installer branding, the SDDM theme and every helper command. The build now stamps the version from the version it was invoked with, and the commands read it at run time rather than carrying a compiled-in constant. It also gives shadowfetch-welcome, the graphical first-boot wizard, the --help and --version it never had — previously asking it for a version opened the flow that installs Flathub applications and the local AI stack. Everything 2.1.0 delivered is unchanged: Intel Sound Open Firmware with the matching ALSA profiles, Cirrus amplifier firmware, and shadowfetch-facts.
- ISO
- shadowfetch-2.1.1-amd64.iso
- Size
- 4.51 GB (4.20 GiB)
- SHA-256
f5fe0f20dd24176839d0443f75ac4110587dff1a369785abdbe2121e213afdba
Shadowfetch Linux 2.1.0 «Umbra» — a Debian-testing derivative with KDE Plasma 6. This release ships Intel Sound Open Firmware and the matching ALSA use-case profiles, so laptops whose audio DSP previously loaded no firmware and played nothing now have working sound out of the box. It also adds shadowfetch-facts, a read-only hardware inventory that records the source of every reading, and gives all sixteen helper commands a --help that is safe to run.
- ISO
- shadowfetch-2.1.0-amd64.iso
- Size
- 4.51 GB (4.20 GiB)
- SHA-256
71ebae6632579b0f5d890dae7fc458edc99d01d0b9c6f28d40cddfaddd6cbe30
Shadowfetch Linux 2.0.1 «Umbra» — a Debian-testing derivative with KDE Plasma 6. This release repairs apt on installed systems, makes the on-device AI tools reachable from the application menu, and adds virtual-machine guest integration.
- ISO
- shadowfetch-2.0.1-amd64.iso
- Size
- 4.50 GB (4.19 GiB)
- SHA-256
b5e7fbe232027958aac2296c2e623a56e20f85c61d444fd59a784c2edbdb04be
Shadowfetch Linux 2.0.0 «Umbra» — a Debian-testing derivative with KDE Plasma 6, built 2026-07-21. amd64 hybrid ISO, BIOS and UEFI, 4.49 GB (4.18 GiB).
- ISO
- shadowfetch-2.0.0-amd64.iso
- Size
- 4.49 GB (4.18 GiB)
- SHA-256
0cbf9b90a4e561c57167cbac55d6fc4d02efc3dbd12a9c97c5034afc9fe6c671