Maze Linux - Lose the Trackers for Privacy and AI-focused desktop built on Arch

Maze Linux is a security, privacy and AI-focused desktop built on Arch. It ships a complete, hardened KDE Plasma Wayland desktop — defensive tools, anonymity tools and local AI already configured and turned on. No assembly required.

Whats the Features ?

ARCH, WITHOUT THE ASSEMBLY.

Not a minimal base — a finished, hardened workstation you can boot, test live and install in minutes.

SECURITY BY DEFAULT

AppArmor, firewalld, fail2ban, auditd and OpenSnitch — hardening and defensive tooling enabled from first boot. ClamAV + the QLAM GUI included.

PRIVACY BY DEFAULT

Tor, Proton VPN, WireGuard and automatic MAC randomization, preconfigured for anonymity. No telemetry, no tracking.

AI-READY

Ollama runs large language models locally and fully offline, alongside a complete dev toolchain and Maze's own AI utilities.

ARCH, WITHOUT THE ASSEMBLY.

Not a minimal base — a finished, hardened workstation you can boot, test live and install in minutes.

COMPLETE KDE DESKTOP

Full KDE Plasma 6 on Wayland with a polished layout, curated widgets and a clean dock. The real system, not a stripped-down spin.

HARDENED FROM BOOT

AppArmor, firewalld, fail2ban, auditd and OpenSnitch active out of the box. ClamAV antivirus with the QLAM GUI, rkhunter and lynis included.

PRIVATE BY DESIGN

MAC randomization, Tor, Proton VPN and Session messenger, all preconfigured. Your data stays yours — no tracking, no telemetry.

LOCAL AI & DEV

Ollama for offline LLMs, Upscayl, Maze's own AI tools, and a full base-devel + git + Python + paru toolchain ready to build.

A REAL LIVE ISO

The live image is the full system — same desktop, apps and services. Evaluate everything before installing, even offline.

STILL ARCH UNDERNEATH

Rolling release, full AUR access via paru, multilib and Flathub preconfigured. Total control, none of the manual setup.

SECURE BOOT

Ships with UEFI Secure Boot support out of the box. A Microsoft-signed shim chains to a Maze-signed bootloader and UKI — no Setup Mode, no factory keys removed. A pacman hook keeps everything re-signed after every update.

FULL DISK ENCRYPTION

LUKS2 full disk encryption available at install time. The maze-install wizard handles partition setup and key enrollment — your data is encrypted at rest without any manual configuration.

GUIDED INSTALLER

The maze-install wizard takes you from live ISO to a fully configured system in minutes. Partition layout, user setup, LUKS, locale and bootloader — one flow, no manual steps.

NETWORK FIREWALL

firewalld and OpenSnitch enforce per-app rules out of the box. Every outbound connection is yours to allow or deny.

ANONYMITY BUILT IN

Tor routing, Proton VPN and WireGuard are preconfigured. Route traffic through the network you trust in one click.

AUDITABLE BY DESIGN

No hidden binaries or opaque scripts. Every hardening step is documented, versioned and open for you to inspect.

Home Page | Download