Download, verify and operate the SentinelOS Converter safely.

Begin with the intended Debian base.

• Debian GNU/Linux 13 Trixie.
• amd64 computer with the MATE desktop.
• Working internet connection to the signed SentinelOS APT repository.
• Administrator access through sudo or a graphical PolicyKit prompt.
• Reliable power and enough free disk space for package downloads and backups.

The Debian package itself is architecture all, but the embedded conversion contract targets amd64.

Create a real recovery path.

1. Back up personal files to a separate device.
2. Record important application settings and encryption recovery information.
3. Confirm Debian boots cleanly and sudo apt update succeeds.
4. Remove or disable temporary local APT test sources that could override public packages.
5. Keep the machine connected to power.

cat /etc/os-release
uname -m
printf '%s
' "$XDG_CURRENT_DESKTOP"
sudo apt update
df -h /

Confirm the ZIP and enclosed Debian package.

Download the ZIP checksum sidecar from the website, place it beside the ZIP, then verify before extraction.

sha256sum -c SentinelOS_Converter_v1_0_18_2.zip.sha256
unzip -l SentinelOS_Converter_v1_0_18_2.zip
unzip SentinelOS_Converter_v1_0_18_2.zip
echo "0c70550e03ede69076aab908a9948b40cb19adf972ae503f804730ba7b165868  SentinelOS_Converter_v1_0_18_2/sentinelos-converter_1.0.18-2_all.deb" | sha256sum -c -

The ZIP must match a5fbc16b8522c6dd5136b5de132ae06945ca5e62ceff1607f345e3df6ad2b714. The enclosed Debian package must match 0c70550e03ede69076aab908a9948b40cb19adf972ae503f804730ba7b165868. Stop if either digest differs.

Read metadata and file ownership before installation.

dpkg-deb --info SentinelOS_Converter_v1_0_18_2/sentinelos-converter_1.0.18-2_all.deb
dpkg-deb --contents SentinelOS_Converter_v1_0_18_2/sentinelos-converter_1.0.18-2_all.deb | less

Confirm package name sentinelos-converter, version 1.0.18-2, architecture all, the engine under /opt/sentinelos-public-conversion, global launchers and the desktop entry.

Use local-package installation through APT.

sudo apt install ./SentinelOS_Converter_v1_0_18_2/sentinelos-converter_1.0.18-2_all.deb

APT handles declared dependencies and registers the package normally. Installation adds the converter, commands and desktop launcher. It does not start conversion.

Check the installed engine before conversion.

sentinel-convert.sh --version
sentinel-convert.sh --check
sentinel-convert.sh --plan

The version command should report sentinelos-public-convert 1.0.18-final. Check mode runs the embedded static release validation and should finish with Final release validation: PASS. Plan mode lists the cumulative public phases without changing the machine.

Use the menu launcher or one command.

Open the applications menu and select Convert to SentinelOS, or run:

sentinel-convert.sh

The launcher validates the engine, detects the desktop user, displays the target system, asks for confirmation, requests administrator permission and then runs or resumes the accepted complete public conversion.

To skip only the final confirmation prompt after you have reviewed the plan:

sentinel-convert.sh --yes

Pass expert options to the internal engine deliberately.

Normal users should prefer sentinel-convert.sh without advanced options.

Completed phases are recorded and skipped safely.

Conversion markers and reports are stored under /var/lib/sentinelos-conversion. The normal launcher uses resume mode. A completed phase is skipped, while an incomplete phase is attempted again.

Do not delete conversion state merely to force a rerun. Read the report for the failed phase first and correct the underlying repository, package or system issue.

Understand what the complete run controls.

Keep the generated final record.

sudo find /var/lib/sentinelos-conversion/reports/phase-99 -maxdepth 2 -type f -print
sudo sh -c 'cd /var/lib/sentinelos-conversion/reports/phase-99 && sha256sum -c SHA256SUMS'
sentinel-desktop-suite-status

The Phase 99 directory should include the final release report, ISO input manifest, release certificate, checksum manifest, evidence directory and conversion-manifest snapshot.

The standard conversion remains non-AEGIS.

The normal launcher passes --without-aegis. It does not install Ollama, an AI runtime, a model, AEGIS Prime, private repositories or private administration data. Public AEGIS tools can be installed later and configured explicitly.

See the AEGIS Suite Manual for the separate optional workflow.

Diagnose the layer that actually failed.

Capture the exact failing command and output before making manual changes.

Removing the tool does not undo a completed conversion.

sudo apt remove sentinelos-converter

This removes the converter launcher and packaged engine. It does not remove SentinelOS component packages already installed by a completed conversion, and it is not a full rollback method.