Boot menu
The GRUB menu waits 5 seconds and then boots the first entry. It is shown on screen and on the serial port at the same time, so it can also be used on a machine with no monitor. The menu itself is in Spanish; the original label of each entry is shown in brackets below.
Entries
| Entry | What it is for |
|---|---|
| RedderOS | Normal use: graphical login screen and desktop. Choose this one unless you have a reason not to. |
| Temporary administrator (administrador temporal) | The same as the normal entry, but anon has passwordless sudo for that session. |
| Serial console / debugging (consola serie / depuración) | No desktop, with the console on the serial port and kernel messages visible. |
| Self-test and shut down (autotest y apagar) | Runs the automated checks, prints the result and shuts down. See Self-test. |
| Text mode, no desktop (modo texto, sin escritorio) | No desktop: login and session on the text console. |
RedderOS
The default entry. It copies the system to RAM (toram), starts the graphical login screen and
gives nobody administrator rights.
Temporary administrator
Adds redderos.admin=1. At boot, the redderos-admin service gives anon passwordless sudo.
Since everything lives in RAM, the permission disappears at shutdown.
Use it only when you need it, for example to run redder-profile from the terminal. Without it, a
compromised program running as anon cannot get root or touch the firewall.
Serial console / debugging
Adds console=ttyS0,115200 and redderos.text=1, and removes quiet: kernel messages are shown
during boot. It does not use toram, so the system is read from the USB stick and needs less RAM.
Intended for virtual machines with -nographic or for diagnosing a boot that fails.
Self-test and shut down
Adds redderos.selftest=1. It does not start the login screen: it runs redder-selftest, writes
the result to the console and the serial port, and shuts down. This is the entry the QEMU tests use.
Text mode, no desktop
Adds redderos.text=1. The graphical login screen is not started; instead, the tty1 console asks
for a name and passphrase with redder-login. As on the graphical screen, pressing Enter
with no name opens the amnesic session. Useful on computers with little RAM or whose graphics do
not work.
Common parameters
Every entry carries the kernel hardening parameters (see Hardening) and also:
| Parameter | Effect |
|---|---|
noswap | The live system does not enable any swap, including the computer's own. |
noprompt | Does not ask you to remove the media at shutdown. |
toram | Copies the whole system to RAM (all entries except serial and self-test). |
quiet | Hides kernel messages (all entries except serial and self-test). |