Nitrux 6.0.0 Debuts GPU Passthrough, Recovery & C++ Updates
▼ Summary
– Nitrux 6.0.0 introduces VxM, a new hypervisor orchestrator enabling GPU passthrough with IOMMU-enforced hardware isolation for enhanced security.
– The update system has been rewritten in C++ with PolicyKit, using atomic operations and cryptographically verified XFS snapshots for secure, rollback-capable updates.
– A built-in, initramfs-based rescue mode allows system recovery directly from the bootloader without external media, using verified backups.
– The release includes security hardening like sysctl changes to prevent unauthorized routing table modifications and updated DNSCrypt-proxy resolvers.
– It features a native Wayland login screen (QMLGreet), a new on-screen display for notifications, and a GRUB option for selecting the Intel Xe driver on supported hardware.
The latest release of the Nitrux distribution, version 6.0.0, introduces a suite of advanced features aimed at power users and security-focused professionals. This update, which arrived in early March 2026, centers on enhanced hardware isolation, a more secure update mechanism, and a built-in recovery system. Built on an immutable root filesystem, the OS continues to target hardware enthusiasts with two distinct ISO variants: one optimized for NVIDIA graphics using the latest open kernel modules and another for AMD and Intel hardware with updated MESA drivers. The foundation is the Linux 6.13.2 kernel, enhanced with performance patches from CachyOS.
A major highlight is the introduction of VxM, a new C++-based hypervisor orchestration utility. This tool enables sophisticated GPU passthrough to virtual machines using VFIO PCI passthrough, with runtime validation of IOMMU groups to enforce hardware-level isolation between the host and guest systems. The utility automates complex tasks like dynamic VFIO driver binding, hugepage provisioning, and IVSHMEM initialization for efficient frame relay. It employs a rootless model, running QEMU without elevated privileges during normal operation. For user convenience, it integrates evdev passthrough for input and DDC/CI automation to switch monitor inputs automatically, reducing reliance on physical KVM switches in multi-GPU setups.
The distribution’s update system has undergone a complete architectural overhaul. The previous Shell Script implementation, known as NUTS, has been replaced by nuts-cpp, a client-server application written in C++ with a MauiKit interface. All privileged operations are now securely gated through PolicyKit integration. This new system uses atomic operations to ensure transaction integrity and creates cryptographically verified XFS snapshots before applying updates, supporting reliable offline rollbacks. Notably, the upgrade from Nitrux 5.1.0 to 6.0.0 is the final migration path supported by the legacy update tool.
Another significant addition is the Nitrux Rescue Mode, an initramfs-based recovery mechanism built directly into the boot process. This feature allows users to restore their system from a verified XFS backup without needing external media like a Live USB. The recovery option appears as a selectable entry in the GRUB bootloader, automatically re-imaging the root partition and regenerating bootloader configurations afterward. This self-contained approach is particularly valuable in environments where removable media is restricted or unavailable.
Under the hood, several hardening and usability improvements have been implemented. Network security is bolstered by a sysctl change that prevents the system from modifying its routing table based on unauthenticated network messages. Boot times are improved by configuring NVMe drives to avoid deep power-saving states, eliminating previous wake-up delays. The login infrastructure has been modernized for Wayland with QMLGreet, a native login screen that supports configurable themes and does not require systemd. A new QML-based on-screen display called NudgeOSD provides notifications and keyboard shortcut guides.
For users with modern Intel graphics, a new “Intel Xe Mode” GRUB entry allows selection of the newer xe driver over the legacy i915 driver for supported hardware like Gen12 (Xe-LP), Meteor Lake, and Lunar Lake with Xe2. Older Intel graphics from the Ice Lake and Skylake eras are not supported by this new driver path.
The release rounds out with updates to numerous core components, including the Hyprland compositor, Flatpak, NetworkManager, Python, and the Calamares installer. The inclusion of the latest DNSCrypt-proxy resolvers and a custom initramfs microcode hook further refines the system’s security and compatibility profile.
(Source: HelpNet Security)
