Download ZedmOS
The firewall as a complete operating system, for ordinary 64-bit x86 hardware — an appliance, a rack server or a virtual machine. No dongle, and nothing to activate before the firewall works.
- Version
- 26.10.153
- Built
The installer for a machine with a screen. Write it to a stick of 4 GB or more.
Already running OPNsense or pfSense?
Then you do not want an image. Zedmos installs onto a firewall you already run as a plugin, with one command on its console, and keeps the platform you know underneath.
Which file is mine?
The files differ along two axes only: whether the download installs the system or already is it, and whether it talks to a screen or to a serial line.
| File | What it is | Console | Size | Take it when | |
|---|---|---|---|---|---|
zedmos-installer-vga.img.xzStart here | Installer | Screen | 882 MiB | A USB stick. Start here unless the machine has no screen. Writes with Rufus, balenaEtcher or dd, and boots on UEFI and legacy BIOS alike. | Download |
zedmos-installer.iso.xz | Installer | Screen | 880 MiB | A virtual machine CD drive, a DVD, or a server virtual media channel (iDRAC, iLO, IPMI). For a USB stick take the image above — Rufus offers this file in ISO mode, and a stick written that way does not boot. | Download |
zedmos-installer-serial.img.xz | Installer | Serial, 115200 8N1 | 879 MiB | The machine has no VGA header and is driven over its serial port. On a screen build such an appliance shows nothing at all, so this is not a preference. | Download |
zedmos.img.xz | Ready-made system | Screen | 431 MiB | You write the finished system straight onto the target disk, CF card or SSD and skip the installer. Faster, but the disk layout is the one baked into the image. Needs a disk of 8 GB or more. | Download |
zedmos-serial.img.xz | Ready-made system | Serial, 115200 8N1 | 431 MiB | The same finished system, for a machine with no screen. | Download |
Checksums
Verify before you write. A truncated download produces an appliance that boots halfway and then fails in ways that are hard to read.
zedmos-installer-vga.img.xzzedmos-installer.iso.xzzedmos-installer-serial.img.xzzedmos.img.xzzedmos-serial.img.xz
Verify what you downloaded
On Linux or macOS, with the SHA256 file beside the image:
$ curl -O https://www.zedmos.com/repo_zedmos_iso/zedmos-installer-vga.img.xz
$ curl -O https://www.zedmos.com/repo_zedmos_iso/SHA256
$ sha256sum -c --ignore-missing SHA256
zedmos-installer-vga.img.xz: OKOn Windows PowerShell, compare the printed hash with the line above:
Get-FileHash .\zedmos-installer-vga.img.xz -Algorithm SHA256Unpack and write
Every download is xz-compressed. Rufus and balenaEtcher write the compressed file as it is; dd needs it decompressed first. The write erases the target completely, so check the device name twice.
$ xz -d zedmos-installer-vga.img.xz
$ sudo dd if=zedmos-installer-vga.img of=/dev/sdX bs=4M status=progress conv=fsyncChange the root password before the appliance meets a network
A new appliance answers SSH on port 22 with root login and password authentication enabled, and the first password is a published default. Anyone who can reach the box has root until you change it. The installer asks for a root password; the ready-made images do not, so set one at first login.