Shredos Disk Eraser 64 bit for all Intel 64 bit processors as well as processors from AMD and other vendors which make compatible 64 bit chips. ShredOS - Secure disk erasure/wipe
<p align="center">
A small bootable OS for securely erasing disks with <a href="https://github.com/martijnvanbrummelen/nwipe">nwipe</a> on x86 PCs, servers, and Intel-based Macs.
</p>
<p align="center">
<a href="https://github.com/PartialVolume/shredos.x86_64/releases/latest"><img alt="Latest release" src="https://img.shields.io/github/v/release/PartialVolume/shredos.x86_64?label=release"></a>
<a href="https://github.com/PartialVolume/shredos.x86_64/releases"><img alt="Total downloads" src="https://img.shields.io/github/downloads/PartialVolume/shredos.x86_64/total?label=downloads"></a>
<a href="https://www.buymeacoffee.com/Shredos"><img alt="Support ShredOS" src="https://img.shields.io/badge/support-Buy%20Me%20a%20Coffee-yellow"></a>
</p>
[!WARNING]
ShredOS is built to irreversibly erase data. Double-check every selected drive before starting a wipe, especially on systems with multiple internal, external, or USB-attached disks.
Start Here
| Need | Go to |
| --- | --- |
| Download a ready-to-use image | Latest release |
| See every stable and pre-release build | All releases |
| Write ShredOS to USB, CD/DVD, or Ventoy | Install media guide |
| Configure nwipe, certificates, keyboard, display, or headless use | Documentation map |
| Build ShredOS from source | Build from source |
ShredOS boots straight into nwipe's interactive interface. Choose the disks, choose the erasure method, review the selection, and start the wipe. It can also be configured for unattended autonuke workflows, PXE booting, custom scripts, persistent options, and PDF erasure certificates.
The release page is the source of truth for current downloads, checksums, release notes, and pre-release builds.
| Image | Use it for |
| --- | --- |
| | USB flash drives, persistent boot-media customization, GRUB edits, kernel parameters, and setups. Modern releases support BIOS and UEFI booting and can save generated PDF reports back to the USB drive. |
| | CD/DVD media, Ventoy, virtual machines, and USB-writing tools that prefer ISO input. Modern ISO releases support BIOS and UEFI booting. |
| ISO | ISO workflows that also need a writable partition for PDF reports or configuration. |
.img
autonuke
.img
.iso
partition-plus
Pre-releases may be newer than the latest stable release. Stable releases usually include the full set of 64-bit and 32-bit .img and .iso assets; pre-releases may contain fewer image formats.
Replace /dev/sdX with the actual USB device, not a partition such as /dev/sdX1.
For macOS, identify and unmount the USB device with diskutil list and diskutil unmountDisk /dev/diskN, then write to the raw disk device:
sudo dd if=shredos.img of=/dev/rdiskN bs=4m
sync
For Windows, use Rufus or Etcher. For Ventoy, copy the .img or .iso file to the Ventoy drive and select it from the Ventoy boot menu.
Boot the target machine from the media.
Review the drives detected by nwipe, choose the wipe options, and start only when the selection is correct.
Boot Experience
ShredOS starts nwipe automatically. From there you can select one or more drives, choose a wipe method or pattern, set rounds and verification, and decide whether to apply a final blanking pass.
Features
Boots on x86 PCs, servers, and Intel-based Macs with BIOS or UEFI.
Provides 64-bit and selected 32-bit builds.
Starts directly in nwipe's interactive GUI.
Supports multiple erasure methods and pseudo-random generators.
Generates PDF erasure certificates and log files.
Includes disk tools such as smartmontools, hdparm, nvme-cli, sg3_utils, hexedit, and parallel.
Supports persistent configuration, custom scripts, PXE booting, and controlled headless operation on trusted networks.
Certificates
ShredOS can automatically generate PDF erasure certificates. Depending on your audit workflow, you can use per-drive certificates or a system-focused certificate.
| Certificate | Contents |
| --- | --- |
| Per-drive | One multi-page PDF per erased drive with erasure details and SMART data. |
| System-focused | One multi-page PDF for the whole machine, including selected drive results, host identifiers, tags, SMBIOS data, and SMART data for each processed HDD, SSD, or NVMe drive. |
To use your own certificate logo, place a square JPEG named logo.jpg in /etc/nwipe/ on the ShredOS USB drive. A 256x256 to 1024x1024 image with a 1:1 aspect ratio is recommended. PXE or remote-configuration setups can place the same file beside nwipe.conf and nwipe_customers.csv.
Build From Source
ShredOS is built with Buildroot. For a standard 64-bit image:
git clone https://github.com/PartialVolume/shredos.x86_64.git
cd shredos.x86_64
make shredos_defconfig
make
ls output/images/shredos*
Available build configurations include:
| Target | Description |
| --- | --- |
| make shredos_defconfig | USB image and hybrid ISO, 64-bit |
| make shredos_lite_defconfig | Lighter USB image and hybrid ISO, 64-bit |
| make shredos_i686_lite_defconfig | Lighter USB image and hybrid ISO, 32-bit |
| make shredos_iso_extra_defconfig | Experimental hybrid ISO with appended writable partition, 64-bit |
| make shredos_iso_extra_i686_lite_defconfig | Experimental lighter hybrid ISO with appended writable partition, 32-bit |
ShredOS is a USB bootable (BIOS or UEFI) small linux distribution with the sole purpose of securely erasing the entire contents of your
disks using the program nwipe. If you are familiar with dwipe from DBAN then you will feel right at home with ShredOS and nwipe. What are the advantages of nwipe over dwipe/DBAN? Well as everybody probably knows, DBAN development stopped in 2015 which means it has not received any further bug fixes or support for new hardware since that date. Nwipe originally was a fork of dwipe but has continued to have improvements and bug fixes and is now available in many Linux distros. ShredOS hopefully will always provide the latest nwipe on a up to date Linux kernel so it will support modern hardware.
ShredOS supports either 32bit or 64bit processors. You will need to download the appropriate 64bit or 32bit .img or .iso file, depending upon your target processor and whether you want to burn ShredOS to a USB memory stick, in which case you would download the .img file. Alternatively, if you wanted to burn ShredOS to CD/DVD, then you would download the .iso file.
Because ShredOS boots and runs straight from a USB flash drive or DVD/CD, it doesn't matter what operating system already exists on the computer. It will remove all data/directories/operating systems, from the drive or drives you have selected for wiping, leaving a disk with no trace of what originally existed. It will wipe PCs & Intel-based Macs, such as MacBook Pros. It doesn't care what operating system previously existed, be it Windows/macOS/Linux/VXWorks.
ShredOS can be used as a software image and booted via the network using a client PC that supports Preboot execution environment (PXE) via a PXE enabled server. A procedure for creating a simple UEFI PXE server based on Debian/Ubuntu and serving up ShredOS can be found here #148
ShredOS includes the latest Nwipe official release, but in addition includes other disk related utilities such as Smartmontools, hdparm, a hexeditor hexedit, and, the program loadkeys which can be used for setting the keyboard layout. Nwipe automatically starts its GUI in the first virtual terminal (ALT-F1), hdparm, smartmontools and hexeditor can be run in the second virtual terminal, (ALT-F2). Nwipe will erase drives using a user-selectable choice of seven methods. hdparm - amongst many of its options - can be used for wiping a drive by issuing ATA erase commands or SAS erase commands interface commands to the firmware of the storrage device. This is a planned feature addition to nwipe.
ShredOS boots very quickly and depending upon the host system can boot in as little as 2 seconds (typically 4 to 6 seconds) on modern hardware, while on an old Pentium IV may take 40+ seconds. Nwipe automatically starts in GUI mode and will list the disks present on the host system. In fact, on version of ShredOS earlier than v2023.08.2_25.0_x86-64_0.35 nwipe can launch so fast that the USB devices have not yet initialised so the first time nwipe appears it may not show any USB drives, this behaviour has been fixed from version v2023.08.2_25.0_x86-64_0.35 onwards so there will usually be a delay of about 5-10 seconds while the USB devices are initialised. On older versions of ShredOS you would use Control-C to exit and restart nwipe to see any attached USB devices. You can then select the methods by which you want to securely erase the disk/s. Nwipe is able to simultaneously wipe multiple disks using a threaded software architecture. I have simultaneously wiped 28 loop devices in tests and know of instances where it's been used to simultaneously wipe upwards of fifty drives on a rack server.
The vanilla version of ShredOS boots into nwipe's GUI and shows the available discs that can then be selected for wiping. It does not autonuke your discs at launch, however it is capable of doing that, if you edit the grub.cfg file and specify the appropriate nwipe command line option. Details of configuring nwipe's launch behaviour is shown below How to run nwipe so you can specify nwipe command line options
What do I do after I've erased everything on my disk? What is actually erased?
This paragraph is for those that are not familiar with wiping disks. if you know what you are doing skip to the next section. So you have erased your disk with ShredOS/nwipe and nwipe reported zero errors and the disk was erased. In its erased state and depending upon the method you used every block on the drive contains either zeroes or meaningless random data. In this state the disk won't be recognised by your operating system except at a very low level or by specialised programs. You won't be able to write files to the disk because nwipe has removed everything, absolutely everything, the operating system is gone, all your data is gone, the partition table is gone, the file system gone, the MBR and all the files have been erased without a trace and will never ever be recovered from the disk. The only thing left is a whole load of zeros or random data. To make the disk usable again you will either need to format the disk, which creates a partition table and directory structure or install a new operating system such as Linux or Windows. Of course, if you are just disposing of or reselling the disk then you don't need to do anything else. So if you are reasonably happy that you know what you are doing and you understand that you will need to format the disk then I hope this software does its job and is useful to you. Before you press that 'S' key to start the wipe, pause and double check you have selected the correct drive/s, something I always do !
Nwipe's erasure methods
Fill With Zeros - Fills the device with zeros (0x00).
Fill With Ones - Fills the device with ones (0xFF).
RCMP TSSIT OPS-II - Royal Canadian Mounted Police Technical Security Standard, OPS-II.
DoD 5220.22-M (Short) - U.S. Department of Defense 5220.22-M short 3-pass wipe (passes 1, 2 & 7).
DoD 5220.22-M (Full) - U.S. Department of Defense 5220.22-M full 7-pass wipe.
Gutmann Wipe - Peter Gutmann's method (Secure Deletion of Data from Magnetic and Solid-State Memory).
PRNG Stream - Fills the device with a stream from the PRNG.
Verify Zeros - This method only reads the device and checks that it is filled with zeros (0x00).
Verify Ones - This method only reads the device and checks that it is filled with ones (0xFF).
HMG IS5 enhanced - UK HMG IS5 (Enhanced) sanitisation method for protectively marked information or sensitive information.
Schneier Wipe - Bruce Schneier's 7-pass mixed–pattern algorithm.
BMB21-2019 - Chinese State Secrets Bureau BMB21-2019 technical requirement for data sanitisation.
Nwipe also includes the following pseudo random number generators:
Obtaining and writing ShredOS to a USB flash drive, the easy way!
You can of course compile ShredOS from source but that can take a long time and you can run into all sorts of problems if your not familiar with compiling an operating system. So if you just want to get started with using ShredOS and nwipe then just download the ShredOS image file and write it to a USB flash drive. Please note this will over write the existing contents of your USB flash drive.
Download the latest ShredOS for either 32bit, 64bit, .img or .iso from here
Linux (and Mac) users
Check it's not corrupt by running the following command and comparing with the checksum shown in the release notes:
$ sha1sum shredos.img.tar.gz (shasum instead of sha1sum if you're using a Mac)
(example) sha1 db37ea8526a17898b0fb34a2ec4d254744ef08a1 shredos.img.tar.gz
If the image file has a .img.tar.gz extension then use the following commands to extract the .img file. If the file extension simply ends with .img and there is no tar.gz then skip this step.
$ gunzip shredos.img.tar.gz
$ tar xvf shredos.img.tar
If you are using Linux or a Mac write the shredos.img file (also sometimes called shredos-2020MMDD.img i.e. shredos-20200418.img etc) to your USB flash drive using the following command. (/dev/sdx is the device name of your USB drive, this can be obtained from the results of sudo fdisk -l on linux and diskutil list on a Mac)
sudo dd if=shredos.img of=/dev/sdx
Windows users:
If you are a Windows user, use a program such as Rufus or Etcher to write the image file to a USB stick, remembering that the entire contents of the USB flash drive will be overwritten. Winzip can be used to extract the shredos.img file from the compressed shredos.img.tar.gz file that you downloaded. hashtab can be downloaded and used to confirm the sha1 checksum.
Ventoy is an open source tool to create bootable USB drive for ISO/WIM/IMG/VHD(x)/EFI files.
With Ventoy, you don't need to format the disk over and over, you just need to copy the image files to the USB drive and boot it. You can copy many image files at a time and Ventoy will give you a boot menu to select them.
You can also browse ISO/WIM/IMG/VHD(x)/EFI files in local disk and boot them.
x86 Legacy BIOS, IA-32 UEFI, x86_64 UEFI, ARM64 UEFI and MIPS64EL UEFI are supported in the same way.
Both MBR and GPT partition style are supported in the same way.
Most type of OS supported (Windows/WinPE/Linux/Unix/ChromeOS/Vmware/Xen...).
920+ ISO files are tested (List). 90%+ distros in distrowatch.com supported (Details).
Once your USB removable drive is having Ventoy installed, you just have to copy the latest .img or .iso version of ShredOS to the root of your Ventoy USB stick.
How to edit the ShredOS /EFI/BOOT/grub.cfg and boot/grub/grub.cfg files when using Ventoy with ShredOS .img files
As Ventoy simply requires you to copy the .img file to the root of the Ventoy USB stick, to edit the ShredOS grub.cfg files it's necessary to unpack the ShredOS .img, edit the files and re-create the .img file that now includes the modified grub files. The procedure below shows you how to do this on a Linux distro.
Create a file on the disk that is slightly larger than the size of the ShredOS .img. In this example we will use shredos-2023.08.2_25.1_x86-64_0.35_20231202.img which is 260,646,656 bytes in size (260.64MByte, 248.57MiByte). So if we create a empty file that is 270Mbyte in size that should be sufficient. I'm going to go a bit over the top and create a 500MB file for this example but that isn't necessary if all you are doing is editing the GRUB files.
>truncate -s 500M loopbackfile.img
Create a virtual disk, i.e /dev/loopx that uses the file we just created.
>sudo losetup -fP loopbackfile.img
We need to determine what device name our loopbackfile.img is associated with. In our example we will assume losetup returns the device /dev/loop30
>sudo losetup -a | grep -i loopbackfile.img
/dev/loop30
We now have a virtual disk called /dev/loop30 that is 270MB in size. Now copy the shredos-2023.08.2_25.1_x86-64_0.35_20231202.img file onto this virtual disk using the dd command.
Once you have finished making your changes unmount the drive.
>sudo umount virtual_disc
Create the new ShredOS .img file.
>sudo dd if=/dev/loop30 of=shredos_with_mods.img
Copy shredos_with_mods.img to the root of the Ventoy USB stick and boot the Ventoy USB stick. You can confirm your changes to the kernel commmand line by booting ShredOS, switching to a virtual terminal ALT-F2, and type more /proc/cmdline
Virtual Terminals
ShredOS has four TTY terminals, ALT-F1 (Where nwipe is initially launched), ALT-F2 (A virtual terminal), ALT-F3 (console log, login required which is root with no password), ALT-F4 (SMART Monitoring Terminal). Typical use of a virtual terminal might be to run other disk related tools such as hdparm to remove hidden sectors or hexedit to display the contents of the disk as hexadecimal values.
How to exclude the FAT formatted ShredOS Boot drive from Nwipe, interactive and autonuke modes
There are two methods that can be used to exclude the FAT formatted ShredOS boot drive from appearing in nwipe's interactive mode or autonuke modes.
Method 1: The first method is to place the following string shredos_exclude_boot_disc="yes" on the kernel command line in /boot/grub/grub.cfg and EFI/BOOT/grub.cfg on the ShredOS boot drive. This method obviously requires access to the grub.cfg file so is particularily suitable if you are creating your ShredOS boot drive using dd, Rufus or a similiar program however it's not possible to use this method if you are copying the .iso or .img file to a Ventoy USB drive as you would need to either unpack, edit the grub.cfg files and repack the .img or build the .iso or .img from source after editing the grub.cfg in the source. So for Ventoy users who want to exclude the FAT formatted ShredOS boot drive you should consider method 2 below.
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3 shredos_exclude_boot_disc="yes"
Method 2: The second method is to create a empty file on the ShredOS boot disk at this specific location /etc/shredos/shredos_exclude_disc. This method will work irespective of whether you created the ShredOS boot disk with dd, Rufus or copied the .iso/.img to a Ventoy flash drive.
WARNING
You should not place the string /etc/shredos/shredos_exclude_disc on multiple FAT formatted drives or for that matter any drive irrespective of formatting, expecting all the drives with this string to not appear in nwipe or not get wiped in interactive mode. The file /etc/shredos/shredos_exclude_disc should only appear on the one and only ShredOS boot drive on the system. Any other drives that contain /etc/shredos/shredos_exclude_disc will appear in nwipe and WILL get wiped in autonuke mode.
Informations for Intel powered Apple Devices
Yes, ShredOS will boot on Intel powered Macs, however here's a few tips you may find useful.
Booting from USB. Power off then power on holding down the alt key. After a few seconds select EFI boot.
Due to the high resolution screens on a MacBook Pro you may find the text displayed by nwipe and in the virtual terminals is very small. To enlarge the text follow the instructions here.
How to switch between virtual terminals on a Mac. On a PC it's usually (but not always) ALT-F1 (/dev/tty1 - nwipe), ALT-F2 (/dev/tty2 or /dev/tty0 - terminal), ALT-F3 (/dev/console - console). However on a MAC you switch virtual terminals as follows. FN-ALT-F1 (/dev/tty1 - nwipe), FN-ALT-F2 (/dev/tty2 or /dev/tty0 - terminal), FN-ALT-F3 (/dev/console).
How to make a persistent change to the terminal resolution
This procedure only applies to setting the resolution of the frame buffer in legacy boot. Using set gfxpayload=1024x768x16 appears to have no affect on UEFI resolution.
After you have created the bootable ShredOS USB flash drive, you may want to increase the resolution from the default value which is usually quite low, i.e. 640x480 in legacy boot.
If you prefer a higher resolution than 640x480, then edit the /boot/grub/grub.cfg file as shown below. However very occasionally it might be necessary to change the resolution. Case in point, a blank screen after booting ShredOS. Sometimes you may come across a monitor that will not work with 640x480 resolution, such as the HP compaq LA2405X. In which case you should increase the resolution to 1024x768x16 which seems to work with the majority of monitors, even 16:10/16:9 ratio monitors.
Example resolutions based on screen aspect ratio:
4:3 aspect ratio resolutions:
640×480, 800×600, 960×720, 1024×768, 1280×960, 1400×1050, 1440×1080 , 1600×1200, 1856×1392, 1920×1440, and 2048×1536.
16:10 aspect ratio resolutions:
1280×800, 1440×900, 1680×1050, 1920×1200, 2560×1600 and 2880x1800.
16:9 aspect ratio resolutions:
1024×576, 1152×648, 1280×720, 1366×768, 1600×900, 1920×1080, 2560×1440 and 3840×2160.
Add the command set gfxpayload=1024x768x16 prior to the kernel command line, changing the resolution as required for your hardware/monitor. See the example below:
set default="0"
set timeout="0"
set gfxpayload=1024x768x16
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3
}
How to run nwipe so you can specify nwipe command line options
The version of nwipe that runs in the default terminal will automatically restart when you exit it, either at the end of a wipe or using CONTROL-C to abort. So if you want to run nwipe in the traditional way, along with any command line options you require, then use the second terminal ALT-F2, as an example, you could then use the command nwipe --nousb --logfile=nwipe.log etc. If you do use ALT-F2 to run a second copy of nwipe, please remember that if you already have one copy of nwipe wiping, the second copy of nwipe will hang on starting. Therefore nwipe in the default terminal should be left at the drive selection screen to prevent the second occurence of nwipe from hanging. Alternatively, a second occurrence of nwipe could be started by specifying the drive on the command line as long as that drive is not already being wiped by the first instance of nwipe, i.e.nwipe /dev/sdc etc.
How to change the default nwipe options so the change persists between reboots
To change the default settings of nwipe you will need to place the nwipe options required on the kernel command line in /boot/grub/grub.cfg and /EFI/BOOT/grub.cfg
Example of default grub.cfg
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3
}
Adding nwipe_options="..." to grub.cfg to make the default nwipe start up with zero method, no verification, no blanking, ignore USB devices and automatically power off the computer at the end of the wipe.
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3 nwipe_options="--method=zero --verify=off --noblank --nousb --autopoweroff"
}
You are not only limited to nwipe options, you can also specify devices along with those options. As would be the case when using nwipe from the command line, the devices to be wiped come after the options, as shown in the example below.
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3 nwipe_options="--method=zero --verify=off --noblank --nousb --autopoweroff /dev/sdd /dev/sde"
}
For reference and as of nwipe v0.37 (from v2024.02.2_26.0_x86-64_0.37), listed below are all the options that you can use with nwipe and can place on the kernel command line in grub.cfg as described in the examples above.
sudo nwipe --help
Usage: nwipe [options] [device1] [device2] ...
Options:
-V, --version Prints the version number
-v, --verbose Prints more messages to the log
-h, --help Prints this help
--autonuke If no devices have been specified on the command line,
starts wiping all devices immediately. If devices have
been specified, starts wiping only those specified
devices immediately.
--autopoweroff Power off system on completion of wipe delayed for
for one minute. During this one minute delay you can
abort the shutdown by typing sudo shutdown -c
--sync=NUM Will perform a sync after NUM writes (default: 100000)
0 - fdatasync after the disk is completely written
fdatasync errors not detected until completion.
0 is not recommended as disk errors may cause
nwipe to appear to hang
1 - fdatasync after every write
Warning: Lower values will reduce wipe speeds.
1000 - fdatasync after 1000 writes etc.
--verify=TYPE Whether to perform verification of erasure
(default: last)
off - Do not verify
last - Verify after the last pass
all - Verify every pass
Please mind that HMG IS5 enhanced always verifies the
last (PRNG) pass regardless of this option.
-m, --method=METHOD The wiping method. See man page for more details.
(default: dodshort)
dod522022m / dod - 7 pass DOD 5220.22-M method
dodshort / dod3pass - 3 pass DOD method
gutmann - Peter Gutmann's Algorithm
ops2 - RCMP TSSIT OPS-II
random / prng / stream - PRNG Stream
zero / quick - Overwrite with zeros
one - Overwrite with ones (0xFF)
verify_zero - Verifies disk is zero filled
verify_one - Verifies disk is 0xFF filled
is5enh - HMG IS5 enhanced
-l, --logfile=FILE Filename to log to. Default is STDOUT
-P, --PDFreportpath=PATH Path to write PDF reports to. Default is "."
If set to "noPDF" no PDF reports are written.
-p, --prng=METHOD PRNG option (mersenne|twister|isaac|isaac64|add_lagg_fibonacci_prng)
-q, --quiet Anonymize logs and the GUI by removing unique data, i.e.
serial numbers, LU WWN Device ID, and SMBIOS/DMI data
XXXXXX = S/N exists, ????? = S/N not obtainable
-r, --rounds=NUM Number of times to wipe the device using the selected
method (default: 1)
--noblank Do NOT blank disk after wipe
(default is to complete a final blank pass)
--nowait Do NOT wait for a key before exiting
(default is to wait)
--nosignals Do NOT allow signals to interrupt a wipe
(default is to allow)
--nogui Do NOT show the GUI interface. Automatically invokes
the nowait option. Must be used with the --autonuke
option. Send SIGUSR1 to log current stats
--nousb Do NOT show or wipe any USB devices whether in GUI
mode, --nogui or --autonuke modes.
-e, --exclude=DEVICES Up to ten comma separated devices to be excluded
--exclude=/dev/sdc
--exclude=/dev/sdc,/dev/sdd
--exclude=/dev/sdc,/dev/sdd,/dev/mapper/cryptswap1
How to set the keyboard map using the loadkeys command (see here for persistent change between reboots)
You can set the type of keyboard that you are using by typing, loadkeys uk, loadkeys us, loadkeys fr, loadkeys cf, loadkeys by, loadkeys cf, loadkeys cz etc. See /usr/share/keymaps/i386/ for full list of keymaps. However you will need to add an entry to grub.cfg as shown in the example below for a persistent change between reboots.
(qwerty:) bashkir, bg-cp1251, bg-cp855, bg_bds-cp1251, bg_bds-utf8, bg_pho-cp1251, ... by, cf, cz, dk, es, et, fi, gr, il, it, jp106, kazakh, la-latin1, lt, lv, mk, nl, nl2, no, pc110, pl, ro, ru, sk-qwerty, sr-cy, sv-latin1, ua, uk, us (for the full list see /usr/share/keymaps/i386/qwerty)
How to make a persistent change to keyboard maps
The default grub.cfg looks like this
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3
}
Add the following options to the kernel command line, i.e. loadkeys=uk, loadkeys=fr etc
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3 loadkeys=uk
}
Saving nwipes PDF certificates and log files to USB FTP or TFTP servers
Nwipe creates a log file and one or more PDF certificates which show details of the disks and/or system being wiped. ShredOS creates a transfer.log and copy of the dmesg output which can be used for diagnostics. These files are automatically saved to the USB flash drive, if the user booted from a USB flash drive. Alternatively, if ShredOS has been configured, using the kernel command line options shredos_output="...", lftp="..." in grub.cfg to output these file to a FTP or TFTP server then the PDF & log files will be sent there instead. Please be aware the the lftp option is deprecated and may be removed in a new version. shredos_output="..." currently supports FTP and TFTP with SFTP to be added in a new release. Described below are details of how you can configure ShredOS to output log and PDF files automatically to network servers.
What is the nwipe log file
The nwipe that is automatically launched in the first virtual terminal ALT-F1, creates a log file that contains the details of the wipe/s and a summary table that shows successful erasure or failure. The file is time stamped within it's name. A new timestamped log file is created each time nwipe is started. The files can be found in the / directory. A example being nwipe_log_20200418-084910.txt. As of version v2021.08.2_23_x86-64_0.34 ShredOS will automatically copy the nwipe log files to the first FAT32 partition it finds, which is normally the ShredOS USB flash drive. In addition you can manually copy the log files or send them to a FTP server on your local area network. Both methods are described below starting with manually writing to a USB storage device.
Transferring nwipe log files to a USB storage device
Locate the device name of your USB stick from it's model & size.
For Linux: If the | character isn't displayed properly use loadkeys fr etc to select the correct keyboard if not US qwerty prior to running this pipe command.
fdisk -l | more
For Macs:
diskutil list
Create a directory that we will mount the USB flash drive on
mkdir /store
Mount the USB flash drive, replacing sdx with the device name of your USB flash drive found in step 1
mount /dev/sdx1 /store
Copy the log files to the USB flash drive
cp /nwipe_log* /store/
Unmount the USB flash drive
cd /;umount store
Transferring nwipe log files to a FTP server using lftp
ShredOS uses the lftp application to transfer files to a remote server. To enable the automatic transfer of nwipe log files, you will need to edit both grub.cfg files (/boot/grub/grub.cfg and /EFI/BOOT/grub.cfg) on the ShredOS USB memory stick. In much the same way you you specify loadkeys or nwipe options which are described above, you edit the linux kernal command line and add the following lftp="open 192.168.1.60; user your-username your-password; cd data; mput nwipe_*.txt", changing the IP, username and password as required. As FTP does not encrypt data you should really only use it to transfer data on your local area network and not over the internet. SFTP may be implemented at a future date if users request that feature. You can also manually use lftp on the command line (ALT-F2 or ALT-F3) if you prefer. I use this feature with a chrooted vsftpd FTP server on a Linux PC. The automatic transfer of nwipe log files will be initiated on completion of all wipes and after pressing any key in nwipe to exit. The lftp status will be shown after the nwipe summary table.
IMPORTANT
I would recommend you setup a new user account on the system that hosts your FTP server and only use that new user's account, username and password with ShredOS. You don't want to use your own personal user account details as you will be placing those details on the ShredOS USB storage device in a plain text format.
For security reasons, you should setup your FTP server as chrooted.
Example grub.cfg with the lftp option appended:
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3 lftp="open 192.168.1.60; user your-username your-password; cd data; mput nwipe_*.txt; mput *.pdf"
}
vsftpd configuration for a chrooted server
For those using vsftpd as your FTP server, you will need to change /etc/vsftpd.conf as follows. Some of these entries may already be present but commented out, make a backup of /etc/vsftpd.conf prior to editing and the uncomment or alter as below:
anon_mkdir_write_enable=YES
listen=YES
listen_ipv6=YES
local_root=/home/yournewftpuser/ftpdata/
write_enable=YES
anon_mkdir_write_enable=YES
chown_uploads=YES
chown_username=yournewftpuser
nopriv_user=ftpsecure
ftpd_banner=Welcome to the ShredOS log server.
chroot_local_user=YES
chroot_list_enable=NO
secure_chroot_dir=/home/yournewftpuser/ftpdata
Disclaimer: The above settings should get you going but may or may not be ideal for your local situation. Refer to the vsftp website and forums if things aren't working as they should. The lftp application that ShredOS uses, should also work with any Microsoft Windows based FTP server, as well as Linux and Mac based systems.
Fetch and run custom scripts before and after wiping
⚠️ Security Warning
Fetching and executing scripts as root poses significant security risks. To prevent Man-in-the-Middle (MitM) attacks, this feature should only be used over a secure, private network—never over the public internet. If you do not fully understand these security implications, we strongly advise against using this feature. Note: Depending on user feedback, we may update this feature in the future to allow user scripts to be loaded directly from the USB boot device. If this is something you are interested in, please let us know at #493
ShredOS can automatically download and execute custom shell scripts immediately before and after each wipe cycle — without rebuilding the image. This is useful for workflows that need to register or decommission an asset on an external system, perform pre-wipe checks, or send a notification once wiping is complete. Both scripts are fetched over HTTP at boot time, so no changes to the ShredOS USB drive are required.
Add either or both of the following options to the kernel command line in /boot/grub/grub.cfg and /EFI/BOOT/grub.cfg. The value is a URL, optionally followed by arguments that will be passed to the script when it runs.
shredos_pre_wipe="<url> [arguments]"
The script at <url> is downloaded and executed before nwipe starts. If the download fails, nwipe will not start and the failure will be logged to transfer.log. A non-zero exit code from the script is logged but does not prevent the wipe from proceeding.
shredos_post_wipe="<url> [arguments]"
The script at <url> is downloaded and executed after nwipe exits and after log files and PDF certificates have been transferred to the USB drive or network server. If the download fails, nwipe will not start and the failure will be logged to transfer.log. A non-zero exit code from the script is logged but does not prevent shutdown or reboot.
IMPORTANT
Both scripts are downloaded fresh at the start of each wipe cycle, so you can update them on your server at any time without touching the ShredOS USB drive.
If a script URL is configured but cannot be downloaded, nwipe will be aborted.
Example grub.cfg with both scripts configured:
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3 shredos_pre_wipe="http://192.168.0.2/scripts/pre_wipe.sh --site WAREHOUSE1" shredos_post_wipe="http://192.168.0.2/scripts/post_wipe.sh --notify slack"
}
How to wipe drives on headless systems or systems with faulty display hardware. (For use on secure LANs only)
ShredOS includes a user enabled Telnet server. The downloadable .img images are supplied with Telnet disabled as default.
To enable the Telnet server, edit /boot/grub/grub.cfg or/and /EFI/BOOT/grub.cfg and on the USB flash drive, add telnetd=enable to the kernel command line.
Example:
set default="0"
set timeout="0"
menuentry "shredos" {
linux /boot/shredos console=tty3 loglevel=3 telnetd=enable
}
Assuming the headless systems are configured to boot via USB and if UEFI that secure boot is disabled, just plug a USB stick containing ShredOS v2021.08.2_20_0.32.014 or higher into the system. Power cycle the system and then after giving ShredOS sufficient time to boot (4 to 60 seconds depending on the hardware) you can then, from another PC/laptop on the same network, use nmap as shown below to list all IP addresses that have open Telnet ports on your local LAN:
nmap -p23 192.168.1.0/24 --open
$ nmap -p23 192.168.1.0/24 --open
Starting Nmap 7.80 ( https://nmap.org ) at 2021-11-29 20:54 GMT
Nmap scan report for 192.168.1.30
Host is up (0.071s latency).
PORT STATE SERVICE
23/tcp open telnet
Nmap scan report for 192.168.1.100
Host is up (0.050s latency).
PORT STATE SERVICE
23/tcp open telnet
Nmap done: 256 IP addresses (19 hosts up) scanned in 14.53 seconds
Telnet into the appropriate IP address telnet 192.168.1.100. ShredOS will respond with:
telnet 192.168.1.100
Trying 192.168.1.100...
Connected to 192.168.1.100.
Escape character is '^]'.
shredos login: root
{ no password }
sh-5.1# nwipe
Type nwipe as shown above and the nwipe GUI will be displayed and you can proceed with wiping the discs. On some terminals, i.e retro, nwipe doesn't display properly. If you find this then use a different terminal to launch nwipe. Terminals that do work ok are KDE's Konsole, terminator, guake, tmux, xfce terminal and xterm. Terminals that don't seem to work properly via a Telnet session with nwipe are cool retro term and qterminal. PuTTY works but doesn't have the correct box characters but is usable. PuTTY may work perfectly if you can set the correct character encoding. These are my observations using KDE Neon, they may differ on your systems. If you find a workaround for those terminals that don't display nwipe perfectly over Telnet, then please let me know.
Warning
Due to the insecure nature of Telnet as opposed to SSH, it goes without saying that this method of accessing ShredOS & nwipe should only be carried out on a trusted local area network and never over the internet unless via a VPN or SSH tunnel. SSH access may be provided at a future date if it's requested.
Nwipes font size is too small How to double the size of the text
If you are using a monitor with a native high resolution you may find that nwipe's font size is too small for your liking. Type F to toggle the scaling of the interface to 200% during the disk selection screen or the progress screen.
Default font size on a high resolution monitor.
After running the setfont command.
Included Packages
smartmontools
Nwipes ability to detect serial numbers on USB devices now works on USB bridges who's chipset supports that functionality. Smartmontools provides nwipe with that capability. Smartmontools can be used in the second or third virtual terminal (ALT-F2 and ALT-F3).
smartdmt
For convenience a SMART Monitoring Terminal is available in the fourth virtual terminal (ALT-F4).
It allows to observe all SMART information on one screen and without interacting with the command-line.
hdparm
hdparm has many uses and is a powerful tool. Although Nwipe will be adding ATA Secure Erase capability, i.e using the hard disk own firmware to initiate an erase, nwipe currently wipes drives using the traditional method of writing to every block. If you want to initiate a ATA Secure Erase using the drives firmware then hdparm will be of use.
hexedit
Use hexedit to examine and modify the contents of a hard disk. Hexedit can be used in the second or third virtual terminal. ALT-F2 and ALT-F3.
nvme
nvme can be used run a Secure Erase on NVMe devices.
sg3_utils
Like hdparm sg3_utils has many applications such as changes to the disk's block sizes, removal of scsi integrity protection and firmware level reformatting (such as sanitization or secure erase). Nwipe currently wipes drives using the traditional method of writing to every block. If you want to initiate a SCSI / SAS Secure Erase using the drives firmware then sg3_utils will be of use, it can also be used in conjunction with GNU parallel to format multiple drives at once.
parallel
GNU parallel is a shell tool for executing jobs in parallel using one or more computers. It can be helpful when you need sg3_utils or hdparm to prepare multiple disks at the same time.
Wipe SSD and NVMe using hdparm and nvme-cli
[!CAUTION]
Make sure you have selected the correct device before issuing commands dealing with erasing/sanitizing as most of these commands do not ask for further verification. (see e.g --yes-i-know-what-i-am-doing)
Wipe SSD
[!NOTE]
SANITIZE is preferred over SECURITY ERASE UNIT if supported by the drive.
As Sanitize will remove both the mappings table and the blocks that have been written to, while SECURITY ERASE UNIT will only delete the mapping table. Therefore the latter is faster to complete.
or alternatively, use the following command which sends the computer to sleep and then automatically powers the computer back up after 5 seconds. See ShredOS wiki for details on sleep states These commands will only work reliably if you are using the vanilla version of ShredOS. This is because the Linux Direct Rendering Manager (DRM) is required to correctly wake the display hardware, with the nomodeset version of ShredOS DRM is disabled and you may end up with a blank screen after rewaking.
Check that it is not frozen and you can also see the estimated time to run.
$ hdparm -I /dev/sdX
...
not frozen
...
2min for SECURITY ERASE UNIT. 2min for ENHANCED SECURITY ERASE UNIT.
...
If frozen (repeat until not frozen)
$ echo -n mem > /sys/power/state
Set user and password then erase disk
$ hdparm --user-master u --security-set-pass p /dev/sdX security_password="p"
$ hdparm --user-master u --security-erase p /dev/sdX security_password="p"
If your drive supports enhanced erase, you may want to substitute security-erase with security-erase-enhanced.
While Block Erase should be sufficient, Overwrite and Crypto Erase might be more applicable for your use.
Replace 2 for Block Erase, 3 for Overwrite, 4 for Crypto Erase
Compiling ShredOS and burning to USB stick, the harder way !
The ShredOS system is based on the buildroot tool whose main application is to create operating systems for embedded systems.
The image (.img) file is approximately 260 MiB and can be written to a USB memory stick with a tool such as dd or Etcher.
You can build ShredOS using the following commands. This example build was compiled on KDE Neon (Ubuntu 24.04 LTS).
Install the following prerequisite software first. Without this software, the make command will fail.
sudo apt update
sudo apt install \
automake \
autotools-dev \
build-essential \
cpio \
coreutils \
dmidecode \
dosfstools \
git \
libelf-dev \
libncurses5-dev \
libparted-dev \
libssl-dev \
mtools \
pkg-config \
smartmontools \
unzip \
gcc-multilib \
g++-multilib
* note gcc-multilib and g++-multilib are specially required for 32 bit builds so can be skipped if you are only building 64 bit.
Download the ShredOS source using the git clone command, build ShredOS and write to a USB memory device.
$ git clone https://github.com/PartialVolume/shredos.x86_64.git
$ cd shredos
$ mkdir package/shredos
$ touch package/shredos/Config.in
$ make clean
$ make shredos_defconfig
$ make
$ ls output/images/shredos*.img
$ cd output/images
$ dd if=shredos-20200412.img of=/dev/sdx (20200412 will be the day you compiled, sdx is the USB flash drive)
The following configurations are available to build different targets:
make shredos_defconfig - build USB image and hybrid ISO (64-bit)
make shredos_lite_defconfig - build lighter USB image and hybrid ISO (64-bit)
make shredos_i686_lite_defconfig - build lighter USB image and hybrid ISO (32-bit)
The following experimental configurations are available for testing:
make shredos_iso_extra_defconfig - build hybrid ISO with appended writeable partition (64-bit)
make shredos_iso_extra_i686_lite_defconfig - build lighter hybrid ISO with appended writeable partition (32-bit)
Do note that loading a configuration should typically be the last step before make.
The hybrid ISOs offer the most flexibility over the other formats:
are BIOS and UEFI bootable
can both be written to CD/DVD-ROM and USB flash drives
use ISOLINUX in BIOS for better compliance with very old systems
but do not have a writeable partition for PDFs/configurations
Some tools such as Rufus offer an "ISO-Mode", which enable such a writeable
partition at burn-time, which then also allows customization of the GRUB
configuration.
Building multiple configurations:
Generally, when building multiple configurations of the above on the same
architecture, you only need to ensure that make grub2-reconfigure (and
eventually make) are run between any two configurations. The same applies to
any other package whose configuration has changed, adding corresponding
<package>-reconfigure steps, before the eventual make. A make clean step is
not usually required unless you have made significant changes to the project,
which should save time for such builds between same-architecture configurations.
For two configurations targeting different architectures, a full make clean
is always required when switching between them, plan time for this (takes long).
For your convenience, look also into the build_all_shredos.sh script in the
project root. If you invoke it with no arguments, it will show a usage manual
and allow you to build multiple configuration targets with more ease.
Issues that you may get when building ShredOS
Error: "Internal Size Too Big" If you are compiling the vanilla version of ShredOS and have made no alterations or additions but it fails to build the .img with the error "Internal error: size too big" then you may have a version of mtools that has a version of mcopy which has a bug whenever the -b option is used. This bug is known to exist in mcopy version 4.0.32 and maybe others but is fixed in v4.0.42. The solution is to upgrade your copy of mtools to a later version. However, if you have altered ShredOS by adding more packages you may need to update the size of the FAT32 partition. You can do this by increasing the 'size' in ../board/shredos/genimage.cfg. Depending on how much extra software you have added increase the size by 10MB or more. Currently as of March 2023 the current size is size = 130000000, this is in bytes, so adding 10MB will mean you need to edit this value so that it reads size = 140000000. After the edit, just run make which will result in a quicker build. You don't need to run make clean first as that would result in a full rebuild which is not neccessary when all you are doing is increasing the final image size. If your repository does not supply a later version of mtools, then you can obtain mtools packages for various distros from here
Konsole randomly closes in the middle of a build If you are building on a KDE based distro like KDE Neon and the Konsole gets killed by the kernels oom (out of memory) killer. The first sign that you have a problem is a pop up message appearing that says the oom killer has killed various processes. Once this notification appears you can't get rid of it. The following may help to resolve why the oom killer is activated:
Check your /swapfile size, for some reason a default install of KDE Neon and very likely Ubuntu only create a /swapfile that's 512Mbytes. This is nowhere near large enough and you will get the oom killer randomly killing processes including the Terminal that your build process is running in. If you have the disc space make the swap file the same size as your system memory. There is some debate over what should be the best size but when your system RAM is 16G and your swapfile is 0.5G that is asking for random processes to get killed especially if you are trying to build ShredOS.
Again, if building on the KDE platform with such a small swap file and 1Tbyte in your home directory the baloo file indexer will cause memory issues. So while building ShredOS, disable the file indexer. Your build will no longer crash and will be faster.
Commands to configure buildroot, you will only need to use these if you are making changes to ShredOS
Change buildroot configuration, select the architecture, install software packages then save the buildroot config changes to shredos_defconfig, the location if which is defined in the buildroot config within make menuconfig ALWAYS RUN make savedefconfig AFTER CHANGES are made in menuconfig.
$ make menuconfig
$ make savedefconfig # save the changes
Edit the Linux kernel configuration, install kernel drivers .. then save the configuration.
$ make linux-menuconfig
$ make linux-update-defconfig # save the changes
Edit the busybox selection of software and save the configuration.
make busybox-menuconfig
make busybox-update-config # save the changes
Important ShredOS files and folders when building ShredOS from source
../build_all_shredos.sh
build_all_shredos.sh is a convenience script to build (multiple) ShredOS.
If launched without arguments, it will show a usage manual on the screen.
../board/shredos/make_img_file.sh
make_img_file.sh is a bash script, the main purpose of which is to generate the .img file located in output/images/. However it is also used to copy the compiled .efi file and other files such as the shredos.ico, autorun.inf for Windows, README.txt. The contents of board/shredos/version.txt is also used to rename the .img file with version info and the current date and time.
../board/shredos/make_iso_file.sh
make_iso_file.sh is a bash script, the main purpose of which is to rename the .iso file located in output/images/. The contents of board/shredos/version.txt is used to rename the .iso file with version info and the current date and time.
../board/shredos/grub.cfg
The USB image's GRUB configuration, which both the BIOS and UEFI bootloader will use.
It contains the BIOS and UEFI boot menu for the USB image.
../board/shredos/embed/grub.cfg
The GRUB configuration that is embedded into the GRUB images at build-time.
It contains directions for GRUB to find the right volume and GRUB configuration.
This applies for both the USB images and ISO images, and both for BIOS and UEFI.
../board/shredos/iso/isolinux.cfg
The ISO image's ISOLINUX configuration, which the BIOS bootloader will use.
It contains the BIOS boot menu for the ISO image.
../board/shredos/iso/grub.cfg
The ISO image's GRUB configuration, which the UEFI bootloader will use.
It contains the UEFI boot menu for the ISO image.
../board/shredos/iso/efigrub.cfg
The GRUB configuration that is embedded into the ISO's UEFI partition.
It contains directions for GRUB to find the ISO9660's GRUB configuration.
This file contains the version information as seen in the title on nwipe's title bar, i.e. '2021.08.2_22_x86-64_0.32.023'. This version ingformation is also used when naming the .img file in ../output/images/ ../board/shredos/fsoverlay/etc/shredos/version.txt is manually updated for each new release of ShredOS.
../board/shredos/fsoverlay/
This fsoverlay directory contains files and folders that are directly copied into the root filesystem of ShredOS. A example of this is the ../board/shredos/fsoverlay/etc/inittab file where the TTY1 and TTY2 virtual terminals are configured. This is where you will find the script /usr/bin/nwipe_launcher that automatically starts in TTY1 after ShredOS has booted. If you want to place or overwrite a specific file in the root filesystem of ShredOS, the ../board/shredos/fsoverlay/ directory is one way of inserting your own files.
../board/shredos/fsoverlay/etc/init.d/S40network
S40network is responsible for starting the network & obtaining a IP address via DHCP by starting a ShredOS script called /usr/bin/shredos_net.sh The shredos_net.sh script can also be found in the fsoverlay directory ../board/shredos/fsoverlay/usr/bin/shredos_net.sh which then ends up in the directory /usr/bin/ of the ShredOS filesystem.
../board/shredos/fsoverlay/usr/bin/nwipe_launcher
nwipe_launcher starts the nwipe program in TTY1, see ../board/shredos/fsoverlay/etc/inittab which is where nwipe_launcher is called from. The nwipe_launcher script, apart from starting nwipe in TTY1 also is responsible for calling the lftp program to automatically transfer log files to a remote FTP server on your local area network, assuming lftp has been enabled on the kernel command line. It also contains the 4,3,2,1 countdown and nwipe restart code.
../package/nwipe/
All programs in ShredOS appear under their individual sub-directory under the package directory, therefore, you will find all the information relating to the build of nwipe under ../package/nwipe. The four files contained here are involved in downloading the nwipe source from https://github.com/PartialVolume/nwipe, checking the integrity of the source by comparison of the hash, patching the nwipe version.c and compiling the code. Each file in ../package/nwipe/ is descibed below.
../package/nwipe/nwipe.mk
This is the buildroot make file for nwipe. This is where the nwipe source download is initiated & hash checked. It also patches the nwipe code, in the case of ShredOS the only patching to the vanilla nwipe code is to change the nwipe title bar from nwipe [version] to ShredOS [shredos version] i.e ShredOS 2021.08.2_22_x86-64_0.32.023. This file also includes nwipe dependencies and nwipe version number. Therefore is file should have the nwipe version number updated if a new version of nwipe is incorporated into ShredOS.
../package/nwipe/nwipe.hash
This file contains the sha1 hash for the nwipe tar file, i.e. nwipe-v0.32.023.tar.gz. The hash and filename contained in this file is manually updated with each new release of nwipe.
../package/nwipe/Config.in
This is a buildroot file that exists in each package. The only time it would be manually edited is if nwipe's dependencies changed.
../package/nwipe/002-nwipe-banner-patch.sh
This script contains the changes that are made to nwipe's version.c
Troubleshooting
Small Font Size and Interface
On Some systems the fonts might be rendered too small.
Solution for small font size and interface
If you press F in the Drive Selection or during the wipe process, the interface will be scaled to 200% to allow better readability on high resolution displays.
Drives with Non-Standard Blocksizes
Certain SAS disks come with block sizes that nwipe might not be able to digest.
In that case you can use sg_format to readjust the block size to a standard size such as 512 or 4096.
Solution for Non-Standard Blocksizes
Keyboard shortcut ALT-F2 you can open the second virtual terminal to open the shell
List disks using lsblk
Identify the device with the wrong block size by executing sg_format <device>
Run sg_format -f --format --size=<512 / 4096> <device> --quick
Wait till the process terminated and check by executing sg_format <device> again.
Certain SAS disks (especially disks that are used in storage systems such as HP 3Par or comparible Dell EMC Solutions) come with particular SAS features preconfigured to protect the disk from cancellation.
Solution for Drives with Integrity
With ALT-F2 you can open the second virtual terminal to open the shell
List disks using lsblk
Identify the device with the wrong block size by executing sg_format <device>
Run sg_format -v --fmtpinfo=0 --format --size=<512 / 4096> <device> --quick
Wait till the process terminated and check by executing sg_format <device> again.
A full guide to also remove integrity protection from multiple disks can be found here
END OF README.md
Ecosystem Role
Standard MoltPulse indexed agent.
Embed Badge
Show off your Pulse Score in your GitHub README to build trust and rank higher.
