Kicksecure Linux Installer for VirtualBox

Kicksecure ™

Download

On Computer USB Installation Debian morph to Kicksecure Windows (VM) Linux (VM) Mac (VM) VirtualBox (VM) KVM (VM) Qubes (VM) More options Source Code

About

Overview Features Why Open Source? Project Activities Contributors Mission & Vision

Docs

Documentation FAQ Troubleshooting

Community

Forums Forum Best Practices Contribute

Support

Self Support First Policy Search Engines, Docs and AI Support (Limited) Reporting Bugs Contact (Restricted)

Tools Upload file Special pages Recent changes Print Version Page meta What links here Related changes Page information

Page Read Edit History Move Protection Unwatch Watch Delete Purge

User Preferences Watchlist Contributions Logout Create account Login

Donate

Kicksecure can be easily installed using Kicksecure Linux Installer. Select your Linux distribution to get started.

There are two different methods to install Kicksecure. Choose one.

• Kicksecure Linux Installer for VirtualBox (recommended)
• Kicksecure for VirtualBox - manual installation

Kicksecure Xfce in VirtualBox

• Kicksecure with graphical user interface (GUI).
• This version of Kicksecure is designed to run inside VirtualBox.
• Beginner-friendly and easy to use.
• It is the right choice for most users.

Please follow these steps to install Kicksecure.

1Kicksecure Linux Installer

TLS

1. Download.

curl --tlsv1.3 --output kicksecure-xfce-installer-cli --url https://www.kicksecure.com/dist-installer-cli

Optional: Digital signature verification.

• Digital signatures are a tool enhancing download security. They are commonly used across the internet and nothing special to worry about.
• Optional, not required: Digital signatures are optional and not mandatory for using Kicksecure, but an extra security measure for advanced users. If you've never used them before, it might be overwhelming to look into them at this stage. Just ignore them for now.
• Learn more: Curious? If you are interested in becoming more familiar with advanced computer security concepts, you can learn more about digital signatures here digital software signatures.

Choose either Option A), Option B) or Option C).

Option A) Install the installer from the from the Kicksecure APT repository

By installing from the Kicksecure APT repository, no additional verification of the installer is required because APT automatically does that.

1. Add the Kicksecure APT repository.

See Kicksecure Packages for Debian Hosts.

2. Install package usability-misc.

Because it contains the Kicksecure Linux Installer.

Install package(s) usability-misc following these instructions

1 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: In Template.

2 Update the package lists and upgrade the system.

sudo apt update && sudo apt full-upgrade

3 Install the usability-misc package(s).

Using apt command line --no-install-recommends option is in most cases optional.

sudo apt install --no-install-recommends usability-misc

4 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: Shut down Template and restart App Qubes based on it as per Qubes Template Modification.

5 Done.

The procedure of installing package(s) usability-misc is complete.

3. Run the Kicksecure Linux Installer.

kicksecure-xfce-installer-cli

4. Done.

Option B) Verify the Installer

The Linux Installer is signed by Kicksecure developer Patrick Schleizer using OpenPGP and signify.

Do you already how to perform digital software verification using an OpenPGP and/or signify key?

• Yes: Acquire the Signing Key and the signatures straight away and proceed.
• No: Consider the following instructions: Undocumented. Unspecific to Kicksecure.

• Installer
• OpenPGP signature
• Signify signature

signify:

signify-openbsd -Vp keyname.pub -m dist-installer-cli

Option C) Manual Installation without the Installer

1. There is no need to use the Kicksecure Linux Installer.

The user is not forced to use the Kicksecure Linux Installer.

2. Manually install Kicksecure for VirtualBox.

Use the manual Kicksecure for VirtualBox instructions instead of the Kicksecure Linux Installer.

3. Done

2. Run the installer.

bash ./kicksecure-xfce-installer-cli

onion

1. System Tor Setup.

Downloading via an onion service requires a functional system Tor. This aspect is not specific to Kicksecure and is undocumented.

2. Download.

torsocks curl --output kicksecure-xfce-installer-cli --url http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/dist-installer-cli

3. Run the installer.

bash ./kicksecure-xfce-installer-cli --onion

Optional: Digital signature verification.

• Digital signatures are a tool enhancing download security. They are commonly used across the internet and nothing special to worry about.
• Optional, not required: Digital signatures are optional and not mandatory for using Kicksecure, but an extra security measure for advanced users. If you've never used them before, it might be overwhelming to look into them at this stage. Just ignore them for now.
• Learn more: Curious? If you are interested in becoming more familiar with advanced computer security concepts, you can learn more about digital signatures here digital software signatures.

Choose either Option A), Option B) or Option C).

Option A) Install the installer from the from the Kicksecure APT repository

By installing from the Kicksecure APT repository, no additional verification of the installer is required because APT automatically does that.

1. Add the Kicksecure APT repository.

See Kicksecure Packages for Debian Hosts.

2. Install package usability-misc.

Because it contains the Kicksecure Linux Installer.

Install package(s) usability-misc following these instructions

1 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: In Template.

2 Update the package lists and upgrade the system.

sudo apt update && sudo apt full-upgrade

3 Install the usability-misc package(s).

Using apt command line --no-install-recommends option is in most cases optional.

sudo apt install --no-install-recommends usability-misc

4 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: Shut down Template and restart App Qubes based on it as per Qubes Template Modification.

5 Done.

The procedure of installing package(s) usability-misc is complete.

3. Run the Kicksecure Linux Installer.

kicksecure-xfce-installer-cli

4. Done.

Option B) Verify the Installer

The Linux Installer is signed by Kicksecure developer Patrick Schleizer using OpenPGP and signify.

Do you already how to perform digital software verification using an OpenPGP and/or signify key?

• Yes: Acquire the Signing Key and the signatures straight away and proceed.
• No: Consider the following instructions: Undocumented. Unspecific to Kicksecure.

• Installer
• OpenPGP signature
• Signify signature

signify:

signify-openbsd -Vp keyname.pub -m dist-installer-cli

Option C) Manual Installation without the Installer

1. There is no need to use the Kicksecure Linux Installer.

The user is not forced to use the Kicksecure Linux Installer.

2. Manually install Kicksecure for VirtualBox.

Use the manual Kicksecure for VirtualBox instructions instead of the Kicksecure Linux Installer.

3. Done

2 Start Kicksecure

Start VirtualBox → Double-click Kicksecure.

First Time User / Questions and Answers

First Time User / Questions and Answers

• Default username: user
• Default password: No password required. (Passwordless login.)

Warning:

If you have no idea how Kicksecure works, then read the Design and Goals, Kicksecure Limitations and Tips on Remaining Safe pages to decide whether Kicksecure is the right tool for you based on its limitations.

• Can I combine Kicksecure CLI with Kicksecure Xfce? Yes, you can! Learn more.
• Why use VirtualBox over KVM?
• Why use VirtualBox over Qubes?
• FAQ

See Also

See Also

• Documentation
• Follow Kicksecure Developments
• In case of issues, see VirtualBox Troubleshooting.

For additional VirtualBox guides and information, please press on expand on the right.

• Known Issues
• VirtualBox Troubleshooting
• VirtualBox Guest Additions
• VirtualBox Clipboard Sharing
• VirtualBox Shared Folder
• VirtualBox Hardening
• Installing Newer Versions of VirtualBox

Help Wanted

• Work on the VirtualBox development task list.

Footnotes

Footnotes

Kicksecure CLI in VirtualBox

• Kicksecure with command line interface (CLI).
• This version of Kicksecure is designed to run inside VirtualBox.
• Kicksecure with CLI is a version suited for advanced users -- those who want Kicksecure without a graphical user interface (GUI). Everyone else should install the user-friendly Kicksecure VirtualBox with GUI Xfce.

TLS

1. Download.

curl --tlsv1.3 --output kicksecure-xfce-installer-cli --url https://www.kicksecure.com/dist-installer-cli

Optional: Digital signature verification.

• Digital signatures are a tool enhancing download security. They are commonly used across the internet and nothing special to worry about.
• Optional, not required: Digital signatures are optional and not mandatory for using Kicksecure, but an extra security measure for advanced users. If you've never used them before, it might be overwhelming to look into them at this stage. Just ignore them for now.
• Learn more: Curious? If you are interested in becoming more familiar with advanced computer security concepts, you can learn more about digital signatures here digital software signatures.

Choose either Option A), Option B) or Option C).

Option A) Install the installer from the from the Kicksecure APT repository

By installing from the Kicksecure APT repository, no additional verification of the installer is required because APT automatically does that.

1. Add the Kicksecure APT repository.

See Kicksecure Packages for Debian Hosts.

2. Install package usability-misc.

Because it contains the Kicksecure Linux Installer.

Install package(s) usability-misc following these instructions

1 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: In Template.

2 Update the package lists and upgrade the system.

sudo apt update && sudo apt full-upgrade

3 Install the usability-misc package(s).

Using apt command line --no-install-recommends option is in most cases optional.

sudo apt install --no-install-recommends usability-misc

4 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: Shut down Template and restart App Qubes based on it as per Qubes Template Modification.

5 Done.

The procedure of installing package(s) usability-misc is complete.

3. Run the Kicksecure Linux Installer.

kicksecure-xfce-installer-cli

4. Done.

Option B) Verify the Installer

The Linux Installer is signed by Kicksecure developer Patrick Schleizer using OpenPGP and signify.

Do you already how to perform digital software verification using an OpenPGP and/or signify key?

• Yes: Acquire the Signing Key and the signatures straight away and proceed.
• No: Consider the following instructions: Undocumented. Unspecific to Kicksecure.

• Installer
• OpenPGP signature
• Signify signature

signify:

signify-openbsd -Vp keyname.pub -m dist-installer-cli

Option C) Manual Installation without the Installer

1. There is no need to use the Kicksecure Linux Installer.

The user is not forced to use the Kicksecure Linux Installer.

2. Manually install Kicksecure for VirtualBox.

Use the manual Kicksecure for VirtualBox instructions instead of the Kicksecure Linux Installer.

3. Done

2. Run the installer.

bash ./kicksecure-xfce-installer-cli

onion

1. System Tor Setup.

Downloading via an onion service requires a functional system Tor. This aspect is not specific to Kicksecure and is undocumented.

2. Download.

torsocks curl --output kicksecure-xfce-installer-cli --url http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/dist-installer-cli

3. Run the installer.

bash ./kicksecure-xfce-installer-cli --onion

Optional: Digital signature verification.

• Digital signatures are a tool enhancing download security. They are commonly used across the internet and nothing special to worry about.
• Optional, not required: Digital signatures are optional and not mandatory for using Kicksecure, but an extra security measure for advanced users. If you've never used them before, it might be overwhelming to look into them at this stage. Just ignore them for now.
• Learn more: Curious? If you are interested in becoming more familiar with advanced computer security concepts, you can learn more about digital signatures here digital software signatures.

Choose either Option A), Option B) or Option C).

Option A) Install the installer from the from the Kicksecure APT repository

By installing from the Kicksecure APT repository, no additional verification of the installer is required because APT automatically does that.

1. Add the Kicksecure APT repository.

See Kicksecure Packages for Debian Hosts.

2. Install package usability-misc.

Because it contains the Kicksecure Linux Installer.

Install package(s) usability-misc following these instructions

1 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: In Template.

2 Update the package lists and upgrade the system.

sudo apt update && sudo apt full-upgrade

3 Install the usability-misc package(s).

Using apt command line --no-install-recommends option is in most cases optional.

sudo apt install --no-install-recommends usability-misc

4 Platform specific notice.

• Kicksecure: No special notice.
• Kicksecure-Qubes: Shut down Template and restart App Qubes based on it as per Qubes Template Modification.

5 Done.

The procedure of installing package(s) usability-misc is complete.

3. Run the Kicksecure Linux Installer.

kicksecure-xfce-installer-cli

4. Done.

Option B) Verify the Installer

The Linux Installer is signed by Kicksecure developer Patrick Schleizer using OpenPGP and signify.

Do you already how to perform digital software verification using an OpenPGP and/or signify key?

• Yes: Acquire the Signing Key and the signatures straight away and proceed.
• No: Consider the following instructions: Undocumented. Unspecific to Kicksecure.

• Installer
• OpenPGP signature
• Signify signature

signify:

signify-openbsd -Vp keyname.pub -m dist-installer-cli

Option C) Manual Installation without the Installer

1. There is no need to use the Kicksecure Linux Installer.

The user is not forced to use the Kicksecure Linux Installer.

2. Manually install Kicksecure for VirtualBox.

Use the manual Kicksecure for VirtualBox instructions instead of the Kicksecure Linux Installer.

3. Done

Additional information about the Kicksecure Linux Installer.

Kicksecure Linux Installer

What does the Kicksecure Linux Installer do?

The previous only available method for using Kicksecure for VirtualBox was to follow the instructions on the Kicksecure for VirtualBox wiki page. Kicksecure Linux Installer simplifies the process of downloading Kicksecure, installing VirtualBox and importing Kicksecure into VirtualBox. In more details:

1. Check from the script name. Valid names are installer-dist, kicksecure-installer-cli and kicksecure-installer-xfce.
2. Parse command line options.
3. Check if system has enough disk space, enough RAM memory, virtualization support and advice the user if any system requirements are not satisfied.
4. Install necessary packages for the script to run using APT package manager such as signify, curl, rsync, vboxmanage (if using VirtualBox).
5. Enable fasttrack repository if not enabled yet and only if using Debian since it is required to install VirtualBox.
6. Query Kicksecure version number using API if no version specified as a command line option.
7. If the Virtual Machine(s) were previously imported, ask the user to boot the virtual system(s).
8. If the Virtual Machine(s) files were previously downloaded, do authenticity and integrity checks.
9. If this is the first run, download necessary files, do authenticity and integrity check, import system(s) and try to start Virtual Machine(s).

Other features:

• Download resumption support thanks to internal use of rsync.
• Simple integrity check thanks to internal use of rsync.
• --onion support.
• Default download folder: ~/installer-dist-download
• Retain a log of all executed commands in the download folder and along with that a copy of the script which has been executed at that time.
• installer-dist man page

Questions and Answers

Question	Answer
Am I forced to use the new Kicksecure Linux Installer?	No, the previous way of installing manually VirtualBox and importing Kicksecure into VirtualBox when following the Kicksecure for VirtualBox wiki page is still supported.
Will the manual VirtualBox installation method be deprecated in the future?	Not planned at time of writing. Deprecation of the manual installation method is also unlikely for now because these instructions these provide compatibility with Linux distributions which Kicksecure Linux Installer does not support.
Can I combine Kicksecure CLI with Kicksecure Xfce?	Yes, you can! Learn more.
Why use VirtualBox over KVM?	See Reasons for using VirtualBox over KVM.
Why use VirtualBox over Qubes?	See Reasons for using VirtualBox over Qubes.
Where is the general FAQ?	See Kicksecure FAQ.
Developer wiki page?	See Kicksecure Linux Installer - Developer Documentation.
A bash script? Security?	While installer-dist is not documented to be used as a curl bash pipe, the security discussion on the curl bash pipe - Security Discussion wiki page should cover most if not all arguments.

• Minimum required version: Only Ubuntu Jammy (22.04) (LTS) has been tested.
• Lower versions will not work. Please release upgrade your Ubuntu version first.
• Higher stable Ubuntu versions will probably work.
• See 'Debian, Kicksecure and Derivatives' tab on the left.

• The Kicksecure Linux Installer for VirtualBox is only supported for Debian and its derivatives (such as Ubuntu or Kicksecure).
• See manually install Kicksecure for VirtualBox (FREE!) to learn more and get started with Kicksecure.
• Are you a developer? If your host operating system is unsupported, contributions to add support for Other Linux distributions are welcome.

Kicksecure A secure by default operating system with the latest security research in place.

Dark mode

Follow us on social media

Supported by Power Up Privacy

Kicksecure is proudly supported until 2025 by Power Up Privacy, a privacy advocacy group that seeks to supercharge privacy projects with resources so they can complete their mission of making our world a better place. (Strictly subject to our sponsorship policy.)

At Kicksecure we value freedom and trust, supporting Open Source and Freedom Software

By using this website, you acknowledge you have read, understood, and agree to be bound by these agreements: Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint 2012- 2025 ENCRYPTED SUPPORT LLC

Your support makes
all the difference!

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!