RobOS Setup Wizard

Eleven-step first-run wizard for GPG, pass, pinentry, git identity, SSH, Chrome, GitHub login, AI agent keys and optional tools.

Download RobOS Source

packages/robos-onboarding

The Setup Wizard prepares a fresh Linux account for RobOS. Most steps run a normal command (gpg, pass, ssh-keygen, gh) on your behalf, so you can reproduce each one by hand.

Requirements

pass must be installed first. If it is missing, the wizard shows a banner with sudo apt-get install -y pass. gpg is also needed.

The steps

Step	What it does
1. GPG Master Key	Detects an existing key, or generates a 4096-bit RSA key from a name, email and optional passphrase (`gpg --batch --generate-key`).
2. Password Store (pass)	Runs `pass init <key id>` to create `~/.password-store`.
3. GUI Pinentry	Adds `pinentry-program` (gnome3, gtk-2 or curses, whichever is installed) and very long cache times to `~/.gnupg/gpg-agent.conf` if no `pinentry-program` line exists, then reloads `gpg-agent`.
4. Git User Profile	Saves `user.name` and `user.email` to your global git config.
5. SSH Keypair Setup	Generates an Ed25519 key (`~/.ssh/id_ed25519`), shows the public key with Copy Public Key, and has Test GitHub SSH Connection.
6. Google Chrome Browser	Checks for Chrome. Install / Reinstall Google Chrome downloads the `.deb` from `dl.google.com` and installs it with `sudo`. Also Set Chrome as Default Browser.
7. GitHub Auth (optional)	Starts `gh auth login --web` and opens the GitHub device page in Chrome, or accepts a personal access token. Upload SSH Key to GitHub is also offered. You can skip this step.
8. AI Agents	Optional. Saves provider choices to `~/.config/robos/preferences.json` and stores any API keys you enter in `pass` under `robos/ai/anthropic-key`, `robos/ai/openai-key` or `robos/ai/gemini-key`. A test button checks that the Copilot, Claude or Gemini CLI or key is present. The keys are used only if you later turn on the optional API mode in RobOS Preferences (AI agents and API mode).
9. Git Projects (optional)	Points you to the Git Projects app.
10. Dev Apps (optional)	Points you to the Software Center.
11. Complete & Provision	Writes `~/.config/robos/onboarding-completed.json`, turns GNOME notification banners back on, and launches Dev Central through the desktop manager socket.

Each step ends with a “Move to Step N” button, and Back, Skip and Next Step buttons run along the bottom. Progress per step is saved through robos-lib/onboarding-state.

Limits

Step 11 describes automated workspace provisioning, but the code only runs an echo in a background shell; it does not provision repositories.
The Chrome and tool installers need sudo and network access.
The ROBOS_SCENARIO environment variable makes several steps return canned results; it exists for tests.

Security Setup Wizard covers GPG, SSH and git signing on its own. Pass Manager is the GUI for the store created in step 2. Launch RobOS Setup Wizard from the app launcher.

More in Security & Credentials

DocuVault Desktop

Offline-first secure markdown notes, personal snippet vault, and local workstation storage starter app.

Git Login Manager

Checks that GitHub access works (gh login, SSH key, SSH connection, git identity) and walks you through fixing what fails.

Pass Manager Vault

Desktop front end for the standard Unix password store (pass), with entries encrypted by GPG.

Pass Unlock Daemon

Small dialog that asks for your GPG passphrase once a day and caches it in gpg-agent.

RobOS App Mesh

Zero-Trust App & IPC Port Mesh for connecting RobOS applications across machines (mTLS 1.3, OpenZiti, Tailscale, NetBird, WireGuard)

RobOS Cloud Accounts

One list of your cloud accounts, shared with Data Sources and Google Calendar; Google accounts can sign in through the browser and be written into Thunderbird.

RobOS Hardware Keys

YubiKey & FIDO2 physical push keys, touch verification, ed25519-sk SSH keys, Passkeys, and PAM U2F security studio

RobOS Private Networks

Cross-Network Zero-Trust P2P & Relay Mesh for linking RobOS machines across separate networks/NAT/CGNAT via Mutual TLS 1.3 (robos-net://), AES-256-GCM encrypted rendezvous, bidirectional Reverse-Mux tunneling, and cross-machine RobOS Movie Player (:19215) streaming

RobOS VPN Sandbox

Launch any desktop or CLI app inside an isolated Linux network namespace (ip netns) routed exclusively through OpenVPN with a 3-barrier kernel kill-switch.

RobOS VPN Servers

Manage OpenVPN providers (IPVanish built-in with 3,598 server profiles), encrypted VPN accounts, live TLS 1.3 credential tests, and server locations.

Security Setup Wizard

Five-step wizard that configures GPG pinentry, a GPG key, the pass store and an SSH key.