ship’s manual · guide

Install on Linux

Linux is a supported headless host product. It persists the control plane under systemd and gives every ordinary channel its own unprivileged LXC computer.

Supported baseline

Ubuntu or Debian with systemd and apt, an x86-64 or arm64 CPU, 4 GiB RAM minimum (8 GiB recommended), and 20 GiB free disk. Each real workload needs additional storage. Nested deployments must permit unprivileged user namespaces and LXC.

bash

curl -fsSLo /tmp/1helm-install.sh https://1helm.com/install.sh
less /tmp/1helm-install.sh
sudo bash /tmp/1helm-install.sh

The installer verifies architecture, installs an exact official Node runtime after checking its published SHA-256 manifest, pins and verifies Ubuntu LXC image artifacts, creates a restricted 1helm service account, installs a narrow root-owned lifecycle helper, stores workspace state in /var/lib/1helm, and atomically switches /opt/1helm/current.

Host-owned updates

A Captain update action creates one private request file. The host—not the browser—downloads the exact stable Linux release artifact, requires GitHub's SHA-256 asset digest, migrates the LXC/runtime unit contract, restarts, health-checks, and restores the prior release and runtime files on failure.

Open the UI

By default the service listens on port 8123. Use a firewall and an HTTPS reverse proxy before exposing it to the public internet. First boot opens Captain creation.

bash

sudo systemctl status 1helm --no-pager
curl -fsS http://127.0.0.1:8123/api/setup/status
sudo journalctl -u 1helm -f

Back up and remove

Stop the service, then copy /var/lib/1helm as one coherent unit. The installed /opt/1helm/uninstall-host.sh deletes only exact ownership-checked channel containers and preserves durable workspace state.