Install on your own machine.

The same signed images run on macOS (Apple silicon and Intel), Windows 11 and Ubuntu. Verify them by digest first if you like.

Requirements

• A host with 32 GB RAM or more, and Docker with Compose v2 (Twenty, Metabase, Postiz and their databases are heavy).
• An OpenAI-compatible model endpoint the host can reach: your own (vLLM, Ollama) or a hosted provider you allow.
• Windows: Docker Desktop with the WSL2 backend. macOS: Docker Desktop or Colima. Ubuntu/Debian: docker.io and docker-compose-v2.

Install

1. git clone https://github.com/redevops-io/agentic-os.git && cd agentic-os/deploy/apps
2. cp .env.example .env # set POSTIZ_JWT_SECRET, point REDEVOPS_LLM_BASE_URL at your model, set TENANT
3. ./bootstrap-secrets.sh # Windows: .\bootstrap-secrets.ps1 (generates platform secrets into ~/.config/redevops/secrets.env)
4. APPS_TAG=v0.3.43 docker compose --env-file .env --env-file ~/.config/redevops/secrets.env up -d
5. Open http://localhost:8080 (the operating console).

Safe by default: SHADOW_MODE=true is the default: every agent stages the action and waits for your approval in the console.

Verify the signature (optional, recommended)

Each image is signed by the build workflow with a keyless signature. This checks one image by its digest; repeat for the others using the digests below.

cosign verify ghcr.io/redevops-io/agentic-projects-console@sha256:b5085be6473682ee99131503db8323faab8157e589f3645126efc061643a3d62 \
  --certificate-identity-regexp '^https://github.com/redevops-io/agentic-os-enterprise/\.github/workflows/build-apps-images\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

All eight images are multi-architecture (amd64 and arm64). The tag v0.3.43 and stable point at the same digests.

Things we hit on each system

• Windows. python is a Microsoft Store stub until installed; open a new shell after installing tools with winget; Docker's credential helper works only from your own signed-in session.
• Ubuntu. On kernels whose default seccomp/AppArmor profiles block socketpair, the services need those profiles relaxed (documented in the stack).
• macOS. Apple silicon pulls the native arm64 images.
• All. Pin the version tag (for example v0.3.43) rather than stable if the host may have older images cached.

For production

• Production: set AGENTIC_OS_REPLAY_DB and AGENTIC_OS_REQUIRE_DURABLE_REPLAY=1, grant tenants content.publish only where intended, and set AGENTIC_OS_APPROVAL_TTL_S.

Not available yet