{{Header}} {{hide_all_banners}}
{{title|title=
Installation of {{project_name_long}} on a USB
}}
{{#seo:
|description=Yes, {{project_name_short}} can be installed on a USB. Here's how.
|image=Download-usb.jpg
}}
{{live}}
[[File:Download-usb.jpg|thumb]]
{{intro|
'''{{project_name_short}} can be used as a plug-and-play operating system on a USB data stick'''. It comes in two flavors: a non-persistent Live USB system, and a persistent USB booted operating system.
}}

= Introduction =

'''{{project_name_short}} can be easily and comfortably booted and used from a USB data stick'''. No need to install it on your hard drive. Once {{project_name_short}} has been flashed on a USB data stick, simply plug in the stick, boot {{project_name_short}}, and you're ready to work with {{project_name_short}}, managing tasks requiring robust security. '''There are two options available.'''

{{#widget:Icon_Bullet_List
|addClass=margin-v-25
|fontSize=16px
|item=fa-solid fa-a cs-blue,<b>A <u>non-persistent (live)</u> USB operating system</b> that forgets all user-created data after shutdown
|item=fa-solid fa-b cs-green,<b>A <u>persistent</u> USB operating system</b> which saves your data on the USB drive itself.
}}

= Installation / Use =

These options are available for {{project_name_short}} on USB.

{{mbox
|addToClass=cs-yellow-light
|icon=fa-solid fa-info cs-blue
|text=
'''Note:'''

{{#widget:Icon_Bullet_List
|addClass=margin-v-25
|fontSize=16px
|item=fa-solid fa-compact-disc cs-blue,<b>ISO LIVE mode:</b> A <u>non-persistent</u> mode where changes are never saved. Every time you boot, it starts fresh, and any data or changes made during the session are lost when you shut down.
|item=fa-solid fa-database cs-green,<b>PERSISTENT mode:</b> Saves and retains user data created during a session of {{project_name_short}}, ensuring that all changes, files, updates, and software installations remain available in future sessions. <a href="/wiki/Persistent_Mode">Persistent Mode</a> functions like a standard operating system installation, where any modifications made will persist across reboots.
|item=fa-solid fa-retweet cs-orange,<b>OPT-IN LIVE mode:</b> Even though the system is installed in <b>persistent mode</b> (meaning changes would normally be saved), this option allows you to <b>temporarily boot in a non-persistent mode</b> (<a href="/wiki/Live_Mode">Live Mode</a>) where changes are not saved for that session. After restarting, you can choose to boot back into the normal persistent mode, where changes are saved again.
}}
}}

{{mbox
|addToClass=margin-v-25
|text=
{{IconSet|h2|1}} '''Choice.'''

Choose an option below to see the matching instructions:

{{Tab
|type=controller
|content=

{{Tab|
|active=
|title= == ISO LIVE Mode ==
|image=
|content=

'''To set up an ISO Live Mode on USB, follow these instructions.'''

{{IconSet|h2|2}} On the [[ISO]] page, read the [[ISO#Download.2C_Create_Live_USB|Download, Create Live USB]] chapter.

{{IconSet|h2|3}} Follow the instructions to flash the ISO to a USB stick.

{{IconSet|h2|4}} Boot the ISO on the USB stick.

'''Figure:''' ''{{project_name_long}} ISO Live Mode showing GRUB bootloader''

[[File:Kicksecure-ISO-GRUB.png|600px|frameless|alt=Kicksecure ISO GRUB|Kicksecure ISO Live Mode showing GRUB bootloader]]

{{IconSet|h2|5}} Done.
}} <!-- close: tab iso live mode -->

{{Tab|
|active=
|title= == PERSISTENT Mode ==
|image=
|content=
'''To set up a USB installed {{project_name_short}} (PERSISTENT Mode), follow these instructions.'''

{{IconSet|h2|2}} '''Note.'''

{{mbox
|addToClass=cs-yellow-light margin-v-25
|icon=fa-solid fa-info cs-blue
|text=
* The user will need <u>two different</u> USB devices. The following names are arbitrary and just for your understanding.
* {{IconSet|true|A}} '''LIVE-USB''': A USB drive to install the LIVE Mode on.
* {{IconSet|true|B}} '''PERSISTENT-USB''': A USB drive where persistent {{project_name_short}} should be installed.
}}

{{IconSet|h2|3}} On the [[ISO]] page, read the [[ISO#Download.2C_Create_Live_USB|Download, Create Live USB]] chapter.

{{IconSet|h2|4}} Follow the instructions to flash it to a USB stick ("LIVE-USB").

{{IconSet|h2|5}} Boot the ISO on the USB stick.

'''Figure:''' ''{{project_name_long}} ISO Live Mode showing GRUB bootloader''

[[File:Kicksecure-ISO-GRUB.png|600px|frameless|alt=Kicksecure ISO GRUB|Kicksecure ISO Live Mode showing GRUB bootloader]]

{{IconSet|h2|6}} On the desktop, click "Install to Hard Drive," and select the second USB device ("PERSISTENT-USB") as the installation target.

{{IconSet|h2|7}} Power off. (Shutdown the live session.)

{{IconSet|h2|8}} Remove the USB stick that contains the {{project_name_short}} installer ISO ("LIVE-USB").

{{IconSet|h2|9}} Keep the USB with the installed {{project_name_short}} ("PERSISTENT-USB") connected.

{{IconSet|h2|10}} Boot from the installed {{project_name_short}} USB stick ("PERSISTENT-USB").

'''Figure:''' ''<code>Persistent</code> Mode Boot - User Session''

[[File:kicksecure-persistent-mode-user-session.png|600px|Persistent Mode - User Session]]

{{IconSet|h2|11}} Done.

{{mbox
|addToClass=cs-gray-light margin-v-25
|icon=fa-solid fa-info cs-blue
|text=
Why not just flash a persistent {{project_name_short}} image to USB? - Such an image has not been developed yet due to complex [[Dev/image_formats|technical challenges]]. Note that due to these complex challenges, almost no other Linux distributions offer such functionality either. To circumvent this, a "detour" through flashing a {{project_name_short}} ISO is required to run the {{project_name_short}} installer.
}}

{{Collapsible
|title='''Advanced users''': There is also a different option for advanced users. Click "Learn More" to open.
|smallTitle=true
|addToClass=cs-gray-light
|content=
Advanced users could also create a {{project_name_short}} USB stick by following these instructions:

# Take a USB data stick with at least 16 GB of space.
# Install Debian on USB. Instructions are available on the [https://wiki.debian.org/DebianInstall#Creating_a_Bootable_Debian_USB_Flashdrive Debian Wiki]. Additional online guides explain how to install Debian on a USB.
# Morph the Debian installation into {{project_name_short}}. Instructions for this can be found in our [[Debian|{{project_name_short}} for Debian installation guide]].
# Done.
}}
}} <!-- close: tab persistent mode -->

{{Tab|
|active=
|title= == OPT-IN LIVE Mode ==
|image=
|content=
[[File:kicksecure-live-mode-user-session.png|thumb|Live Mode boot option selected.]]
This mode boots a {{project_name_short}} USB installed in Live Mode. This option can be practical in certain situations.

{{IconSet|h2|2}} Follow all the steps listed in [[#PERSISTENT_Mode]].

{{IconSet|h2|3}} During the booting process in the GRUB boot menu, choose "Live Mode".

{{IconSet|h2|4}} Done.

{{mbox
|addToClass=cs-gray-light margin-v-25
|icon=fa-solid fa-info cs-blue
|text=
Info:

Live mode is facilitated by the pre-installed <code>grub-live</code> software package. [[grub-live]] allows the host operating system - in this case, {{project_name_short}} on a USB data stick - to boot into live mode. See [[Live Mode]] for further information.
}}
}} <!-- close: tab opt-in mode -->
}} <!-- close: tab controller -->
}} <!-- close: mbox wrapper for tab controller -->

= Advantages of {{project_name_short}} on USB =

{{mbox
|text=
{{Icon|style=circle|fa-solid fa-check cs-green}} '''Simple to Try-Out''': An easy way to try out {{project_name_short}} without needing to install {{project_name_short}} on your computer.

{{Icon|style=circle|fa-solid fa-thumbs-up cs-green}} '''Way easier than Dual Boot''': It is much easier to install an operating system on a separate USB drive than attempting to set up dual boot on the same hard drive.

{{Icon|style=circle|fa-solid fa-shield-halved cs-blue}} '''Better Security''': A higher level of security is achieved by installing the host operating system(s) on a dedicated, ([[Full Disk Encryption|encrypted]]), external disk(s) such as a USB flash drive or others. <ref>
e.g., eSATA or FireWire.

FireWire should generally be avoided:

* https://louwrentius.com/firewire-the-forgotten-security-risk.html
* https://en.wikipedia.org/wiki/IEEE_1394#Security_issues
</ref> In the case of using Dual Boot, using physical external media reduces the risk of malware running on other operating system(s) infecting the {{project_name_short}} host operating system.

{{Icon|style=circle|fa-solid fa-key cs-blue}} '''Can be unplugged and securely stored''': When {{project_name_short}} disk(s) are not in use, they can either be removed or hidden.
}}

= See also =

* [[Live Mode]]
* [[grub-live]]

= Footnotes =
{{reflist|close=1}}
{{Footer}}
[[Category:Documentation]]