Hidayah OS

v1.0.0 · Live

Privacy-hardened Linux distribution with a DNS-level firewall that ships with the blocking already done.

Problem

Most privacy advice is a list of things to disable. Disabling them correctly, on a machine that stays usable, is the hard part.

What I built

A Linux distribution built around a DNS firewall carrying 326,000+ rules, with tracking and telemetry blocked at resolution rather than by convention.

Impact

Privacy is the default state rather than a setup step. The rule set is large enough that hand-maintaining it is impractical, which is exactly why it is shipped in the distribution.

Highlights

Sovereign Shield: local filtering DNS daemon (127.0.0.1:53, 326,632 rules) with verified adult-content blocking (NXDOMAIN break-tests at build time), DNS-hijack prevention, and a self-verifying blocklist updater
Faith workflow: astronomical madhab-aware prayer times with athan notifications, Hijri date, rotating Quran ayah notifications, Conky desktop widget, and reversible prayer-time Focus Mode
Reproducible cloud builds: the full ISO pipeline (BIOS+UEFI hybrid, ~4.3/4.7 GB) runs on Kaggle notebooks with a QEMU QA harness and screenshot evidence
Trust chain: hidayah-doctor 31-check self-test ships on the ISO (PASS 31 · FAIL 0), sha256 published, release artifacts GPG-signed

Stack

Shell
Linux Distribution
Debian
Privacy
KDE Plasma
XFCE
Bash
Python

Live GitHub