Nulx documentation

Verify Downloads

Verify a future Nulx ISO against its exact published hash and signature.

Why verification matters

The release page will publish metadata for one exact ISO. A hash copied from another build—even one with the same filename—is not valid evidence.

Future release artifacts

An approved release is expected to include the ISO, a SHA-256 checksum, a cryptographic signature, release notes, and the public signing key. No signature or public key is published today.

SHA-256

When the Beta is released, compute the hash locally and compare every character with the value on the official Download page.

sha256sum Nulx-<version>-amd64.iso
Get-FileHash .\Nulx-<version>-amd64.iso -Algorithm SHA256

Signature verification

The exact command and public-key fingerprint will be added only after the dedicated release key is established. Never trust a key based solely on a filename or an unverified third-party mirror.

Failure behavior

If the size, hash, signature, filename, or version differs, stop. Delete the questionable file and return to the official Download page.