Culltron OS X237 · launch candidate
Culltron OS X237 layers Culltron's desktop shell, first-run setup and security defaults on top of a standard Ubuntu/Debian base. It is a launch candidate: it is tested in virtual machines, and no signed public ISO is available for download yet.
Provision an existing Ubuntu/Debian install, either per user without root or machine-wide. You can also build a bootable ISO with live-build on a privileged Debian host. If a step fails, the run reports itself as incomplete instead of claiming success.
The base includes AppArmor and UFW, with three profiles: balanced, hardened and developer. A read-only audit reports how each control is set and marks anything it cannot read as unknown, never as passing. Changes to the system still need an administrator.
Update bundles are signed separately and checked before anything is staged. Undeclared, tampered or symlinked files are refused. Package transactions are checkpointed and can be rolled back, and the rollback itself is verified.
Home, Security, Forensics and Privacy plans can be reviewed read-only from the desktop shell. Installing packages or enabling forensic read-only mounting each requires an explicit administrator authorisation.
The shell launches only apps listed in the local registry. It waits for each app's health check before opening it and cannot run arbitrary commands or paths.
The OS includes a verified backup and recovery script, plus guides for VM testing, installing on old laptops, and recovery and rollback.
What this is not: penetration testing, a security certification, or a replacement for Parrot OS. Editions and Lite bundles are still plans. Compare edition concepts · See release status
