Gnoppix 26.7 Released: Privacy, Sovereignty, and Next-Gen Decentralization

Announcements
1

Gnoppix 26.7 Released: Privacy, Sovereignty, and Next-Gen Decentralization

We are thrilled to announce the official release of Gnoppix 26.7! This major update represents a massive leap forward for our desktop user experience, core anonymity features, and our broader ecosystem infrastructure. Over the past month, we have worked tirelessly to harden our software against vulnerabilities, squash pesky desktop bugs, and deliver powerful new open-source tools that champion digital sovereignty.

Here is a comprehensive breakdown of everything new, improved, and fixed in Gnoppix 26.7.

:rocket: Top Feature Under Development: NullNode P2P Messenger

Gnoppix 26.7 introduces after 15 month of development NullNode, our cutting-edge, decentralized messaging system designed for the post-quantum era. Built with an absolute commitment to metadata privacy, NullNode requires no phone numbers, no email addresses, and zero personally identifiable information (PII). You simply launch the application and communicate directly over a serverless, peer-to-peer network.

The development is still ongoing see → GitHub - gnoppix/NullNode: Decentralized, post-quantum encrypted messaging -- no phone, no email, no PII · GitHub

Post-Quantum Encryption Upgrade

We have already begun migrating core components to high-performance, memory-hardened Rust code. In this release, we upgraded our encryption standard from NIST Level 3 (MlKem768) to NIST Level 5 (MlKem1024), scaling our wire format constants to 1568/1504 bytes to support maximum cryptographic strength.

[Sender Host] -> Look up ID in DHT -> Establish P2P Connection -> (Fallback to Sealed Sender Relay) -> [Read Host]

What’s New in the NullNode Ecosystem:

  • Memory Hardening Module (secure_mem.rs): Implemented secure_zero_memory() with strict compiler barriers to prevent LLVM optimization bypasses, alongside mlock() memory-locking to prevent keys from spilling onto your swap disk.

  • The Braid Protocol: Laid the technical foundation for chunk-based key exchanges (the SPQR protocol) via the new braid.rs module.

  • Usability Aliases: Added a new quality-of-life feature allowing you to map easy-to-remember aliases to complex Null IDs, making messaging and file sharing incredibly intuitive.

  • Binary Deliverables: Version 0.3.9 is live on master with fully operational nullnode, nullnode-relay, and nullnode-bootstrap binaries.

  • Source & Documentation: github.com/gnoppix/NullNode |

:hammer_and_wrench: Desktop & System Fixes

:glowing_star: KDE Plasma Preview Images Now Available!

By popular demand, we have brought back our testing flavors! The latest KDE Plasma 6.6.5 / 6.7 images are officially spun and ready for community evaluation. If you prefer the modern features of the Plasma ecosystem over our lightweight defaults, please download the test build and take it for a spin. Feel free to report any bugs, configuration oddities, or hardware edge cases directly to our tracker.

XFCE Menu Optimization

We fixed a frustrating bug in the XFCE desktop environment (window.cpp:153) where path == home_path was comparing raw pointer addresses instead of string values. When XDG user directories were left unconfigured, g_get_user_special_dir() returned the home path as a different pointer, causing the check to fail. This resulted in the automatic creation of 5 extra placeholder buttons labeled “gnoppix” all incorrectly pointing to the home directory. This has been fully resolved.

Gnoppix Welcome App (v0.5)

Our central welcome interface received significant structural improvements:

  • Theme Update: The default out-of-the-box theme has transitioned from System Settings to Dark Mode.

  • DE-Aware Package Management: installApps() now detects your desktop environment natively—routing to sudo synaptic-pkexec under XFCE, and plasma-discover if you are running KDE.

  • Bug Fixes: Resolved a stylesheet QString::arg syntax bug (the 10-arg overload was replaced by an 8-arg + append sequence) which previously triggered a parsing error and broke styling on startup.

  • UI Tweaks: Tool button icons have been streamlined from 48×48 to 44×44, and #navBtn now shares a clean styling selector with #backBtn. The main utility has been renamed to “Services and AI”.

General System Polishing

  • Package Manager Shortcut: Fixed a desktop bug where the Gnoppix Package Manager launcher failed to start gnoppixinstall.

  • LiveCD Browser Prompt: Fixed a persistent LiveCD issue where users were repeatedly asked to select a default browser on every initial boot.

  • Kernel Upgrades: Core system stability is bolstered with the integration of linux-image-7.1.1-2.

  • Browser Engines: Upgraded to the latest Librewolf (152.0.1-2) and aligned the web browser and email reader themes seamlessly with the system theme (gnoppix-browser-theme_1.0.0-1).

:shield: Core Security & Tor Orchestration (gnoppixctl v0.9)

Our network anonymization script gnoppixctl has gone through extensive logic overhauls to dramatically increase resilience on LiveCD deployments and prevent traffic leaks.

  • Security Fixes:

    • IPv6 Leak Prevention: The system now aggressively blocks IPv6 traffic whenever NAT is unsupported.

    • Transparent Proxy Isolation: Updated the IPv6 torrc entry to bind to [::1] (localhost) instead of [::] to ensure Tor’s transparent proxy isn’t exposed on all public IPv6 interfaces.

    • Secured Permissions: Backup network files are now aggressively locked down with secure chmod 600 permissions.

    • SOCKS Proxy Enforcement: Forced all internal get_ip() curl operations and bootstrap verification checks through the local Tor SOCKS proxy.

  • Systemd Bypass & Privilege Dropping: gnoppixctl now bypasses systemd unit definitions completely during live sessions, launching Tor directly to avoid AppArmor restrictions and torrc merge conflicts. It launches Tor as root to allow the default configuration file to drop privileges properly, preventing the fatal “Error setting groups” startup failure.

  • LiveCD Network Routing:

    • RAM-backed Directory: Tor’s data directory is automatically placed in RAM at /run/tor-data on live environments, skipping overlayfs write issues and preventing bootstrap timeouts.

    • Robust Network Resets: Explicitly flushes all iptables tables (filter, nat, mangle, raw) before restoring a backup to avoid leaving network rules broken upon stopping services.

    • HTTPS-Only Mode: Introduced gnoppixctl start -https. This allows setups to route only HTTPS traffic (port 443) through Tor, leaving other protocols (HTTP, DNS, SSH) on the clearnet. Note: Domain names are resolved via clearnet DNS in this mode.

  • Visual Enhancements: Added an active green/red LED indicator right into the GUI layout that polls check.torproject.org every 30 seconds for genuine status checks. The Go GUI console font rendering was also fixed via a widget-level CSS provider to clear up previous blurriness.

:globe_with_meridians: Ecosystem & Infrastructure

GRBL — Gnoppix Real-time Blocking List

We have officially launched GRBL, a high-performance, open-source, real-time DNS blacklist designed to stop malicious traffic and spam. Running live on rbl.gnoppix.org:53, we have also synchronized all IP rules directly into dnscrpt-proxy for native protection.

Infrastructure Sovereignty & AI Playground

  • DoH Server IP Rotation: Due to malicious flagging on centralized blocklists, we have actively rotated our DNS-over-HTTPS (DoH) server infrastructure to guarantee private domain name lookups.

  • Remote Playground UI: Accessible directly at openwebui.gnoppix.com, the playground now includes direct integration for free community tier models—no individual API keys required. We have added client certificate authentication so you can use your member token as a passwordless entrance ticket.

  • AIOps Monitoring: Added native toggleable light/dark mode styling across our tracking infrastructure.

  • Paste Server Resiliency: Following ongoing third-party disputes over unencrypted public shares, our paste services have been migrated to resilient infrastructure endpoints to defend user speech and maintain absolute zero-knowledge logs.

:inbox_tray: Getting the Update

The updated Gnoppix 26.7 ISO images have cleared internal quality assurance and are live on the main mirrors.

If you are already running an active installation, simply clear your local build logs, call a clean cache directory, and update your repository manifests:

Bash

# Update your Gnoppix system packages
sudo apt update && sudo apt dist-upgrade

DL: GnoppixNG - Browse /releases/core at SourceForge.net

Thank you to all the community developers, alpha testers, and system administrators who helped make this massive release possible!