Hi,
I’d like to introduce PH4NTXM, an open-source Debian Live Linux distribution developed in Greece for cybersecurity, privacy and operational security.
PH4NTXM is not just a Debian remaster with security tools added on top. It has its own runtime architecture built around disposable sessions, linked system identities, fail-closed networking and isolated handling of untrusted content.
Every boot creates a fresh session identity. A new seed is generated and used across multiple parts of the system so that hardware-facing, network and browser characteristics remain consistent with each other during the session.
Some of the main PH4NTXM features include:
– Adaptive Identity Engine for coherent per-session system personas
– DMI, CPU, GPU, RAM and display persona generation
– Native Hardware Views through tools such as `dmidecode`, `lscpu`, `lshw`, `hwinfo` and `inxi`
– Hardened Firefox ESR profiles tied to the active session identity
– Packet Transformation Engine built with Rust, C, NFQUEUE and nftables
– TC/eBPF physical egress guard
– Fail-closed packet processing, preventing silent network bypass
– Firewall and Packet Engine Guardians that continuously verify the active protection state
– Network Drift with controlled latency, jitter, loss, duplication and packet reordering
– Ghost Stack for session-specific local network topology
– DNS-over-TLS through Unbound
– Clock Fuzz for bounded timing variation during the session
– Lone Wolf mode with an independent identity and dedicated Tor network path
– No clearnet fallback if Tor is not ready
– Disposable offline KVM-based Document Airlock
– Raster-only document export, removing the original active document structure
– Isolated media viewers using offline namespaces and private runtime environments
– Boot Pilot and PH4NTXM Health for runtime readiness and protection diagnostics
– Emergency Lockdown for immediate network isolation
– Panic Button, USB Removal Nuke and Nuke Kernel with best-effort RAM scrubbing and shutdown handling
The system is designed around a fail-closed approach. Physical network links are not released until the required identity, firewall, packet-processing and protection stages are ready.
PH4NTXM also includes a public threat model that documents both its goals and its limitations. It is designed to reduce session linking, fingerprinting and persistent system signals, while making clear that no operating system can guarantee anonymity against every type of adversary.
The project is released under the GNU GPLv3 license.
Based on the public historical research conducted so far, we have not identified an earlier Greek-origin Linux distribution developed specifically and exclusively as a cybersecurity and privacy operating system. PH4NTXM may therefore represent the first Greek project in this particular category.
Testing: Automated pre-built Abyss ISO images may be available through GitHub Actions for testing and evaluation. They are not official release images. Manual builds using Debian live-build remain the preferred method.
Project website:
https://ph4ntxmofficial.github.io/
GitHub:
https://github.com/PH4NTXMOFFICIAL/PH4NTXM
The repository includes the full source code, architecture documentation, threat model, security documentation, component documentation and build instructions.
If the project is relevant to your readers, I’d be happy to provide screenshots, technical details or additional information for a review.
Best regards,
PH4NTXM