The base OS is a read-only, versioned image — never modified in place, so it can't be half-updated or silently drift. Per-machine config lives on a separate data partition.
Two system slots. Updates are transactions; a bad update falls back to the previous system on its own.
Every release — and the cloud install script — is Ed25519-signed, with downgrade protection. The box trusts the signature, not the server.
One sudo account (root locked), managed from the web console and its CLI twin. Default-deny firewall.
Security fixes flow from Debian, delivered as signed image releases — never ad-hoc package upgrades.
Databases, apps, credentials, config live on their own partition — untouched by updates and rollbacks.
Create a fresh Debian 13 server, SSH in, one command:
curl -fsSL https://update.xconos.com/testing/bootstrap-takeover.sh | sudo bash
On your own hardware or a VM: boot the installer, answer a short wizard, done.
ISO install guide →