Skip to content
saphiralinux

Releases

Downloads

One current image. It boots, it installs packages, and it runs real workloads. It is still beta.

Saphira Linux Earlybird Beta

BetaPre-releaseGCC C / C++RUST / GO / CLANG / Emscripten
Release name
Saphira Linux Earlybird Beta
Release date
2026-08-15
Compressed size
≈ 420 MB compressed
Architecture
x86-64-v3
Image format
QCOW2 disk image, distributed as an xz-compressed tar archive
Compiler
GCC 16.1.0 · C, C++
Checksum
SHA-256 (saphira.tar.xz.sha256)
Packages
481 in saphira/main
Init / libc / packaging
OpenRC · musl · APK

Clicking Download requests a short-lived token from the release service. The archive itself is served statically by nginx once the token validates.

Minimum requirements

Minimum to run

This is a functional minimum, not a production recommendation.

  • CPU supporting x86-64-v3 (roughly Haswell/Excavator onwards, with AVX2).
  • 1 vCPU.
  • 512 MiB RAM.
  • 8 GiB disk.
  • A VirtIO-capable hypervisor; KVM/QEMU is the primary tested target.
  • Network access to the Saphira APK repository.

Recommended small server baseline

For a light nginx, PHP or Node-style server, start with:

  • 2 vCPU.
  • 2 GiB RAM.
  • 8 GiB or more disk.

Database-backed server baseline

For nginx, application services and MariaDB, add roughly 2 vCPU and use at least 4 GiB RAM. This is a practical baseline, not a hard law.

Mail workload allowance

For Postfix, Dovecot and supporting mail services, allow roughly one additional vCPU and at least 1 GiB additional RAM. Mailbox count, scanning, indexing, concurrency and retention can require more.

Complete small infrastructure server

For nginx, PHP/application services, MariaDB, Postfix and Dovecot together, a practical starting point is around 4 vCPU and 8 GiB RAM. This is a baseline for a small combined workload, not a universal production guarantee.

For more workload-specific guidance, see the Saphira sizing guide.

Real Saphira numbers

The Saphira VM serving this website runs with 2 vCPU and 2 GiB RAM. During normal operation it typically uses around 200–240 MiB of memory with no swap.

VM
2 vCPU / 2 GiB RAM
Memory
~200–240 MiB used
Swap
0
Static test
~1,336 requests/sec

In a static nginx benchmark of 100,000 HTTPS requests at concurrency 1,000, all requests completed successfully at roughly 1,336 requests per second. This measured static nginx delivery, not Node SSR, PHP, database, mail or other dynamic workloads.

Protected download path

  1. 01Click Download; the browser obtains a one-time AIE transport challenge.
  2. 02The browser encrypts the artifact request with ephemeral ECDH P-256 and AES-GCM.
  3. 03The application validates the envelope and issues a short-lived, one-time download token.
  4. 04The token authorises the exact release archive and increments the download counter.
  5. 05The authorised archive is returned from the private release directory.

The archive is not publicly addressable by its filesystem path. AIE protects the request, the token is scoped to this release, and replaying the token is rejected.

Verify what you downloaded

sha256sum -c saphira.tar.xz.sha256

A checksum tells you the bytes you received are the bytes that were published. It catches truncated transfers, mirror mistakes and tampering. If the checksum does not match, do not boot the image.

Checksums for every release →

Getting started

The six steps

  1. 1. Import the image into your hypervisor and boot the VM.
  2. 2. Set the root password in the guided first-boot setup.
  3. 3. Create your normal user and set its password.
  4. 4. Configure IPv4 and IPv6.
  5. 5. Choose DNS and confirm the package repository.
  6. 6. Finish setup and continue from the shell.

The first-boot setup guides you through

  • Root password and confirmation.
  • Normal user creation, including login name and full name.
  • User password and confirmation.
  • IPv4 address and CIDR, then the IPv4 gateway.
  • IPv6 address and CIDR, then the IPv6 gateway.
  • DNS provider: Quad9, Cloudflare, OpenDNS / Cisco Umbrella, or custom DNS servers.
  • Optional DNS search domain.
  • APK repository configuration and confirmation before applying the setup.

The Saphira repository is suggested automatically:

https://packages.akadata.ltd/saphira/main/

When setup completes, the repository configuration is ready for normal APK commands:

apk update
apk search nginx
apk add nginx

The setup then drops you into a normal shell. The default files from /etc/skel are copied into both the root account and the new user's home directory, so the supplied .bashrc and .profile are ready immediately.