This is a quarterly release which is fully tested on Nvidia Orin NX, Nvidia Orin AGX and Lenovo X1 Carbon Gen11 platforms. This release complies with SLSA v1.0 level 3 requirements.

Supported Hardware

The following target hardware is supported by this release:

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Lenovo ThinkPad X1 Carbon Gen 10, 11, 12
• Dell Latitude 7230, 7330
• Alienware M18
• Generic x86 (PC)
• NXP i.MX 8M Plus

What is New in ghaf-25.03

Main changes since ghaf-24.12:

• General refactoring and modularization to make Ghaf easy to consume by downstream projects.
• Major updates on upstream dependencies.
• More robust user account management.
• RISC-V Polarfire Icicle Kit builds are currently disabled but can be re-enabled if needed.
• Support for Alienware M18 laptop added.
• Added support for Lenovo ThinkPad X1 Carbon Gen 12.

Lenovo X1 Carbon Gen 10/11:

• Audio device selection and microphone slider are added to the quick settings widget.
• Audio control was removed from the application menu.
• TLS enabled for GIVC.
• Reworked networking:
  • 'debug' network removed.
  • auto-generation of IP and MAC addresses.
• Disabled Nix tooling in release builds.
• Hotplugging of GPS devices.
• Hardened systemd config in gui-vm.
• Chromecast support on a normal browser.
• Added keybindings to move the active window to the next or previous desktop.
• Logging improvements.
• Window Manager widget added.
• VM-level Audio Control added.
• XDG-handlers using GIVC instead of SSH.
• File system changes for debug builds: ext4 used for root, btrfs for persistence partition.
• MitmWebUI app replaces mitmweb-ui script in chrome-vm.

Nvidia Jetson Orin AGX/NX:

• JetPack 6.2 including NVIDIA Jetson Linux 36.4.3 with Linux kernel 5.15.
• Docker with Nvidia container and CUDA 12.x support.
• Podman support, disabled by default.

Bug Fixes

Fixed bugs that were present in the ghaf-24.12 release:

• A laptop cannot be unlocked after suspension sometimes.
• Audio output via 3.5mm jack doesn't work.
• Missing application menu icons on the first boot after the software installation.
• Location sharing does not work.
• File manager not displaying downloaded file.
• The application menu cannot be accessed using the Windows key

This is a bi-weekly release for Ghaf adding support for Nvidia containers and CUDA 12.x for Nvidia platforms based on JetPack 6

Supported Hardware

The following target hardware is supported by this release:

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Lenovo ThinkPad X1 Carbon Gen 10, 11, 12
• Dell Latitude 7230, 7330
• Alienware M18
• Generic x86 (PC)
• NXP i.MX 8M Plus - build support only

What is New in ghaf-24.12.4

• General refactoring and modularization
• Support for Alienware M18 laptop added

Lenovo X1 Carbon / x86 platforms:

• File system changes for debug builds: ext4 used for root, btrfs for persistence partition
• MitmWebUI app replaces mitmweb-ui script in chrome-vm

Nvidia Jetson Orin AGX/NX:

• Docker with Nvidia container and CUDA 12.x support
• Podman support, disabled by default

Bug Fixes

Fixed bugs that were present in the ghaf-24.12.3 release:

• Location sharing does not work
• File manager not displaying downloaded file

This is a bi-weekly release with a major update to JetPack 6.2 for NVIDIA platforms.

Supported Hardware

The following target hardware is supported by this release:

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC)—build support only
• Lenovo ThinkPad X1 Carbon Gen 10, 11, 12
• NXP i.MX 8M Plus—build support only

What is New in ghaf-24.12.3

Lenovo X1 Carbon:

• Window Manager widget added.
• VM-level Audio Control added.
• XDG-handlers using GIVC instead of SSH.

NVIDIA Jetson Orin AGX/NX:

• JetPack 6.2 including NVIDIA Jetson Linux 36.4.3 with Linux kernel 5.15.

Bug Fixes

• Audio output via 3.5mm jack.
• Missing application menu icons on the first boot after the software installation.

This is a bi-weekly release containing new features and additional hardening for Ghaf.

Supported Hardware

The following target hardware is supported by this release:

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC) (build support only)
• Lenovo ThinkPad X1 Carbon Gen 10, 11, 12
• NXP i.MX 8M Plus (build support only)

What is New in ghaf-24.12.2

• TLS enabled for GIVC.
• Reworked networking:
  • 'debug' network removed
  • auto-generation of IP and MAC addresses
• Disabled NIX tooling in release builds.
• Hotplugging of GPS devices.

Lenovo X1 Carbon Gen 10/11:

• Added support for Lenovo ThinkPad X1 Carbon Gen 12.
• Hardened systemd config in gui-vm.
• Chromecast support on a normal browser.
• Added keybindings to move the active window to the next or previous desktop.
• Logging improvements.

Bug Fixes

Element location sharing not working.

This bi-weekly release brings a major update on Ghaf dependencies, most notably the compiler GCC 14 version.

Supported Hardware

This release supports the following target hardware:

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC) (build support only)
• Lenovo ThinkPad X1 Carbon Gen 11
• Lenovo ThinkPad X1 Carbon Gen 10
• NXP i.MX 8M Plus (build support only)

What is New in ghaf-24.12.1

• Major update on upstream dependencies.
• More robust user account management.
• RISC-V Polarfire Icicle Kit builds are currently disabled but can be re-enabled.

Lenovo X1 Carbon Gen 10/11:

• Audio device selection and microphone slider are added to the quick settings widget.
• Audio control was removed from the application menu.

Bug Fixes

A laptop cannot be unlocked after suspension sometimes.

This is a quarterly release for all supported hardware platforms, and it complies with SLSA v1.0 Level 3 requirements.

Supported Hardware

This release supports the following target hardware:

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC)
• Polarfire Icicle Kit
• Lenovo ThinkPad X1 Carbon Gen 11
• Lenovo ThinkPad X1 Carbon Gen 10
• NXP i.MX 8M Plus (build support only)

What is New in ghaf-24.12

Lenovo X1 Carbon Gen 10/11:

• Chromium replaced with Google Chrome.
• Zoom web application added into comms-vm.
• Xarchiver file compression application added.
• Audio Control, USB, and Network Manager applets added.
• Bluetooth applet added to the system tray.
• The first version of the Control Panel currently supports the following:
  • display resolution and scale settings;
  • locale and timezone settings.
• The System Idle behavior has been reworked: the screen dims after 4 minutes of inactivity, the session locks in 5 minutes, the screen goes off in 7.5 minutes, and the system suspends in 15 minutes.
• User account management has been added. The user sets a username and password when a device is first booted.
• The username is displayed on a lock screen.
• Dynamic updates of Microsoft endpoint URLs.
• A separate configurable repository for adding allowed URLs for business-vm.
• Auto-reconnect hotplugged devices when the VM restarts.
• Wayland security context protocol enabled.
• Refactored application definitions to make it easier to add and remove applications.
• Hardened greetd.service.
• AppArmor enabled.
• Multiple user experience improvements.

Lenovo X1 and NVIDIA Jetson Orin NX/AGX Orin:

• Lock and Log Out buttons moved from the applications menu to the power menu.
• Shutdown and Reboot buttons were removed from the applications menu and are now available in the Power menu.
• The Powerbar module is added to the lock screen.
• Run-time multi-monitor support.
• Taskbar control for four virtual desktops.
• Development, testing, and performance tooling improvements.

Bug Fixes

Fixed bugs that were present in the ghaf-24.09 release:

• Changing the Wi-Fi network from the Network Settings application is impossible.
• Cannot connect to a hidden Wi-Fi network from GUI.
• The taskbar on the extended display is visible only when booting up with an HDMI connection.
• Suspend does not work from the taskbar power menu.
• The Mute status is not visible in the taskbar.
• Bluetooth notification windows stay on a screen.
• Time synchronization between host and VMs does not work in all scenarios.

This patch release is targeted at Secure Laptop (Lenovo X1 Carbon) test participants and brings in new features and bug fixes. Lenovo X1 Carbon has been fully tested for this release, other platforms have been sanity-tested only.

Supported Hardware

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC)
• Polarfire Icicle Kit
• Lenovo ThinkPad X1 Carbon Gen 11
• Lenovo ThinkPad X1 Carbon Gen 10
• NXP i.MX 8M Plus

What is New in ghaf-24.09.4

Lenovo X1 Carbon Gen 10/11:

• Local and timezone settings are added to the Control Panel.
• The username is displayed on a lock screen.
• The Powerbar module is added to a lock screen.
• System idle behavior reworked.
• Allowed URLs for business-vm are now fetched from the separate configurable repository.

Bug Fixes

• Some cursor types are missing causing a cursor to disappear in some cases.
• Cannot open images and PDF files from the file manager.
• Suspend does not work from the taskbar power menu.

This patch release is targeted at Secure Laptop (Lenovo X1 Carbon) test participants and brings in new features and bug fixes. Lenovo X1 Carbon has been fully tested for this release, other platforms have been sanity-tested only.

Supported Hardware

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC)
• Polarfire Icicle Kit
• Lenovo ThinkPad X1 Carbon Gen 11
• Lenovo ThinkPad X1 Carbon Gen 10
• NXP i.MX 8M Plus

What is New in ghaf-24.09.3

Lenovo X1 Carbon Gen 10/11:

• Chromium was replaced with Google Chrome.
• Dynamic updates of Microsoft endpoint URLs.
• Updated GALA version 0.1.30 with SACA.
• Bluetooth applet added to the system tray.
• Auto-reconnect hotplugged devices when the VM restarts.

Bug Fixes

• NVIDIA Jetson AGX Orin/Orin NX: the taskbar is no longer available.
• Bluetooth notification windows stay on the screen.
• Audio recording is delayed by several seconds.

This patch release is targeted at Secure Laptop (Lenovo X1 Carbon) test participants and brings in new features and bug fixes. Lenovo X1 Carbon has been fully tested for this release, other platforms have been sanity-tested only.

Supported Hardware

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC)
• Polarfire Icicle Kit
• Lenovo ThinkPad X1 Carbon Gen 11
• Lenovo ThinkPad X1 Carbon Gen 10
• NXP i.MX 8M Plus

What is New in ghaf-24.09.2

Lenovo X1 Carbon Gen 10/11:

• Wayland security context protocol enabled.
• The timeout of the Autolock feature at which re-entry of login and password is required has been fixed. Also, the screen dim intensity was adjusted.
• Taskbar control for two virtual desktops.
• Taskbar audio and brightness control responsiveness improved.
• The closing widgets feature is available when clicking outside their area.
• Zoom web application added into comms-vm.
• Display resolution and Scale settings added to the Control Panel.

Bug Fixes

• The USB camera is not working on Chromium VM.
• Double login issue with the Autolock feature on.
• The Control Panel is causing a high CPU load in GUI VM.
• Volume and brightness pop-ups do not close automatically.

This patch release is targeted at Secure Laptop (Lenovo X1 Carbon) test participants and brings in new features and bug fixes. Lenovo X1 Carbon has been fully tested for this release, other platforms have been sanity-tested only.

Supported Hardware

This release supports the following target hardware:

• NVIDIA Jetson AGX Orin
• NVIDIA Jetson Orin NX
• Generic x86 (PC)
• Polarfire Icicle Kit
• Lenovo ThinkPad X1 Carbon Gen 11
• Lenovo ThinkPad X1 Carbon Gen 10
• NXP i.MX 8M Plus

What is New in ghaf-24.09.1

Lenovo X1 Carbon Gen 10/11:

• Audio Control and Xarchiver file compression applications.
• Network Manager applet.
• The first version of the Control Panel (mainly non-functional).
• Log Out and Lock buttons were moved to the power menu.
• Shutdown and Reboot buttons were removed from the applications menu and are now available in the Power menu.
• Multiple monitors support.

Bug Fixes

Fixed bugs that were in the ghaf-24.09 release:

• It is impossible to change the Wi-Fi network from the Network Settings application.
• The taskbar on extended display is visible only when booting up with HDMI connected.
• The Mute status is not visible in the taskbar.