Release ghaf-25.06
This is a monthly Ghaf release which has been fully tested on Nvidia Orin NX, Nvidia Orin AGX and Lenovo X1 Carbon Gen11 platforms.
This release complies with SLSA v1.0 level 3 requirements.
Release Tag
Section titled “Release Tag”https://github.com/tiiuae/ghaf/releases/tag/ghaf-25.06
Supported Hardware
Section titled “Supported Hardware”The following target hardware is supported by this release:
- NVIDIA Jetson AGX Orin
- NVIDIA Jetson Orin NX
- Lenovo ThinkPad X1 Carbon Gen 10/11/12/13, Gen9 2-in-1
- Dell Latitude 7230, 7330
- Alienware M18
- NXP i.MX 8M Plus
What’s Changed
Section titled “What’s Changed”- version: Bump the version to start the June cycle by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1221
- crazyflie: add the usb passthrough by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1222
- Add GitHub actions security analysis with zizmor by @henrirosten in https://github.com/tiiuae/ghaf/pull/1223
- build(deps): bump cachix/install-nix-action from 31.3.0 to 31.4.0 by @dependabot in https://github.com/tiiuae/ghaf/pull/1225
- xbox: Add new variant by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1226
- dell: Make network PCI device detection dynamic by @vunnyso in https://github.com/tiiuae/ghaf/pull/1220
- Yubikey: Add FIDO2 device authentication for UI user by @mbssrc in https://github.com/tiiuae/ghaf/pull/1224
- build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot in https://github.com/tiiuae/ghaf/pull/1230
- bump: updates by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1229
- build(deps): bump github/codeql-action from 3.28.18 to 3.28.19 by @dependabot in https://github.com/tiiuae/ghaf/pull/1231
- feat: set COSMIC as default DE, related minor adjustments by @kajusnau in https://github.com/tiiuae/ghaf/pull/1217
- build(deps): bump step-security/harden-runner from 2.12.0 to 2.12.1 by @dependabot in https://github.com/tiiuae/ghaf/pull/1237
- docs: add ghaf-25.05 release notes by @clayhill66 in https://github.com/tiiuae/ghaf/pull/1228
- docs: fix domain cname, improve contrast, and update deps by @humaidq-tii in https://github.com/tiiuae/ghaf/pull/1238
- refactor: Modularize acpid and import of mitmproxy by @everton-dematos in https://github.com/tiiuae/ghaf/pull/1227
- build(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by @dependabot in https://github.com/tiiuae/ghaf/pull/1241
- fix: hardware-scan was broken by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1242
- hardware: add x1 2-in-1 gen9 by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1243
- bump: update to the latest by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1235
- vhotplug: Add option to prepend rules by @vunnyso in https://github.com/tiiuae/ghaf/pull/1245
- apparmor: Fix the chrome policy by @brianmcgillion in https://github.com/tiiuae/ghaf/pull/1246
- build(deps): bump astral-sh/setup-uv from 6.1.0 to 6.2.1 by @dependabot in https://github.com/tiiuae/ghaf/pull/1248
- feat(logging): log service names by @mbssrc in https://github.com/tiiuae/ghaf/pull/1250
- fix(bluetooth): remove bluetooth from host by @mbssrc in https://github.com/tiiuae/ghaf/pull/1249
- Microvm boot order by @mbssrc in https://github.com/tiiuae/ghaf/pull/1169
- build(deps): bump astral-sh/setup-uv from 6.2.1 to 6.3.0 by @dependabot in https://github.com/tiiuae/ghaf/pull/1251
- guivm: add service to propagate gui-vm timezone changes to givc by @kajusnau in https://github.com/tiiuae/ghaf/pull/1252
- Add GIVC documentation by @mbssrc in https://github.com/tiiuae/ghaf/pull/1234
- build(deps): bump cachix/install-nix-action from 31.4.0 to 31.4.1 by @dependabot in https://github.com/tiiuae/ghaf/pull/1253
New Contributors
Section titled “New Contributors”- @everton-dematos made their first contribution in https://github.com/tiiuae/ghaf/pull/1227
Full Changelog: https://github.com/tiiuae/ghaf/compare/ghaf-25.05…ghaf-25.06
Bug Fixes
Section titled “Bug Fixes”Fixed bugs that were present in the ghaf-25.05 release:
- X1: The keyboard defaults to the English layout on boot (issue is still present on Orin)
Known Issues and Limitations
Section titled “Known Issues and Limitations”| Issue | Status | Comments |
|---|---|---|
| Element app is not supported in this version of Ghaf | On hold | |
| Lenovo X1 | ||
| Suspend -power state is not working | In Progress | Issue is under investigation |
| Bug report does not send reports | In Progress | Issue is under investigation |
| Saved screenshots are lost | In Progress | Issue is under investigation |
| Some apps may not open at first boot after installation | In Progress | Issue is under investigation |
| Using audio through USB device may cause instability | In Progress | Issue is under investigation |
| Downloading large file (10G) crashes the browser | In progress | Issue is under investigation |
| GALA app is not supported in this version of Ghaf | On hold | |
| Control Panel functionality is limited: only Display Settings, Local and Timezone settings, CPU/memory information are functional | In Progress | Additional functionality will be implemented in future releases. |
| Yubikey for unlocking does not work | In Progress | A fix is currently in progress. |
| A laptop may wake from suspend without user interaction | In Progress | The issue is under investigation. |
| NVIDIA Jetson AGX Orin / Orin NX | ||
| The keyboard defaults to the English layout on boot | In progress | Workaround: use Alt+Shift to switch between English-Arabic-Finnish layout. |
| Firefox has been disabled | In Progress | Firefox will be re-enabled once upstream fixes are available. |
| The Suspend power option is not functioning as expected | In Progress | Behavior is locking the device. |
Installation Instructions
Section titled “Installation Instructions”Released images are available at https://archive.vedenemo.dev/ghaf-25.06/
Download the required image and use the following instructions: Build and Run.