Source code offer
This page is the written offer of corresponding source for software distributed with FoundryOS, under GPL-2.0 §3 andGPL-3.0 §6.
It is hosted here, not in a repository, so that it stays reachable by anyone holding a FoundryOS binary.
1. FoundryOS first-party code
The first-party repositories are not public yet — seewhere the source stands for what's left before they open. That does not affect this offer: until the repositories are public, corresponding source for any released component is provided on request, at no charge, by the route in section 5.
foundryos
Distro build tree, packaging, and installer configuration.
foundry-settings
System-settings GUI (GPL-3.0-or-later).
foundry-burniso
ISO-writing utility (GPL-3.0-or-later).
foundrylinux.com
This website.
Each release is tagged in the relevant repository. The list above is illustrative, not exhaustive — this offer covers every GPL-licensed component distributed with FoundryOS, including any not named here.
2. Debian-origin packages
FoundryOS is based on Debian Stable (Trixie). Binary packages whose origin is Debian ship unmodified from the Debian archive, and their corresponding source is already public — you do not need to ask us for it:
- The Debian archive atdeb.debian.org/debian and its mirrors.
- The Debian snapshot service atsnapshot.debian.org, indexed by package name and version, if the version you have has since moved.
- Locally, with apt-get source <package> once the matching deb-src entries are enabled:
deb-src https://deb.debian.org/debian trixie main contrib non-free non-free-firmware
deb-src https://security.debian.org/debian-security trixie-security main
deb-src https://deb.debian.org/debian trixie-updates main3. FoundryOS-built packages
Packages built and maintained by the project — those served from the FoundryOS apt channel, identified by o=FoundryOS — have their source under packaging/ in the foundryos repository, with build instructions in docs/PACKAGING.md. Until that repository is public, request them by the route in section 5.
4. Where the binaries come from
The current release is FoundryOS 1.0.19 (Stable, July 2026), distributed as an ISO image with a detached signature over its checksums:
- Signed checksums
- https://foundrylinux.com/downloads/SHA256SUMS.asc
- Build commit
- 85b70da
Quote the build commit when requesting source — it identifies exactly which tree produced the binary you have. It is also stamped into every installed system at /usr/lib/foundryos/build-info.
5. Requesting source
Email security@foundrylinux.com with the component you want and the build commit it came from. There is no charge, no account, and no need to explain why. This address is monitored for security disclosure, so source requests are seen the same day the rest of the mail is.
For each FoundryOS release, this offer is valid for at least three years from the date of that release, and it applies to all GPL-covered software distributed in binary form with FoundryOS — including components not explicitly listed on this page.
When the repositories open, this page stays — it will point at them directly, and the request-by-email route remains valid for releases made before that point.