Download MurOS

Two ways to get MurOS. Most people want the installer ISO: it boots and installs itself, with no Linux to assemble. If you already run Debian 13, install the package on top.

Recommended

The installer ISO

Boot it on a machine or a VM, pick your keyboard and the LAN IP, and MurOS installs itself offline. No Linux assembly, no command line.

Download the ISO (amd64)

Debian 13 (Trixie) · amd64 · ~2 GB · offline install

Verify: SHA-256 · GPG signature

Write it to a USB key (dd, Rufus, balenaEtcher) or attach it to a VM.
Boot and pick Install MurOS. Choose your keyboard layout, then the LAN interface and its static IP.
After reboot, open https://<the-LAN-IP> and log in as root / root, then change the password.

A firewall LAN is static, never DHCP: the address you set during install is what MurOS uses, configured once and not again in the UI. Want to build the ISO yourself? See the packaging/iso guide.

Install on an existing Debian 13 (advanced)

Already running Debian 13 (Trixie), or automating with Ansible? Install the package on top. This is also the upgrade channel for every install, ISO included. Picking a box? See hardware sizing.

Browse all downloads on download.muros.org

1. Prerequisites

A clean Debian 13 (Trixie) install, server profile (no desktop).
Root access (the install script must run as root).
At least one network interface reachable from the management subnet.
Outbound HTTPS to download.muros.org for the repository and package.

Other distributions (Ubuntu, Rocky, RHEL) are not supported. MurOS uses Debian-specific drop-in paths.

2. Install

Run as root on the target machine:

curl -fsSL https://download.muros.org/install.sh | sudo bash

It logs everything to /var/log/muros-install.log and runs in four steps:

Prepares apt: repairs a loopback-only /etc/resolv.conf left by a previous install, disables any leftover CD-ROM apt source, clears a half-configured dpkg state, then installs curl, ca-certificates and gnupg.
Imports the repository signing key into /usr/share/keyrings/muros-archive-keyring.gpg and writes /etc/apt/sources.list.d/muros.list (signed-by keyring).
Removes competing network managers (NetworkManager, ifupdown, resolvconf, netplan, dhcpcd, isc-dhcp-client, systemd-resolved, connman) that conflict with the MurOS control plane.
Installs the muros package, restoring a data snapshot if a previous uninstall stashed one. A selective policy-rc.d keeps per-site feature daemons (Kea, Unbound, VPN, HA) from auto-starting during configure; the package then brings up the core services and the always-on stack, and leaves config-required daemons inactive until you enable them from the UI.

Later upgrades flow through apt: apt update && apt install --only-upgrade muros.

Open https://<firewall-ip> in any browser. Default credentials:

Login    : root
Password : muros

Change it immediately: open System > Access > Users and set a new password for root. MurOS keeps its own user store, separate from the Debian system accounts, so this password is independent of the host.

4. Optional flags

Env variable	Effect
MUROS_VERSION	Pin a specific version, e.g. `MUROS_VERSION=0.9.51`. The repository keeps only the latest version, so this works for the current release.

5. Uninstall

curl -fsSL https://download.muros.org/uninstall.sh | sudo bash

The uninstall script stashes the configuration (/conf/config.xml) under /var/backups/muros/config-<timestamp> before removing the package. A reinstall restores it automatically.