Is Maze Linux based on Arch?

Yes. Maze Linux is built on Arch Linux and follows a rolling-release model, so you always get current packages. You get Arch's power without the manual assembly — a complete, hardened KDE Plasma 6 desktop is ready on first boot.

Do I have to configure the security and privacy tools myself?

No. AppArmor, firewalld, OpenSnitch, fail2ban, auditd, Tor, VPN and MAC randomization are already enabled and configured out of the box. Local AI via Ollama is also ready to run, fully offline.

Can I try it without installing?

Yes. Maze ships as a Live ISO — boot it from USB and try the full desktop before installing. When you're ready, a guided installer sets it up in minutes.

Does Maze Linux collect any telemetry?

No. Maze has zero telemetry — nothing phones home and there is no tracking. Privacy is the default, not an option you have to turn on.

What are the hardware requirements?

A 64-bit (x86-64) CPU with UEFI (no BIOS/Legacy), at least 4 GB of RAM (8 GB recommended, 16 GB for local AI) and 40 GB of disk space. Secure Boot and full-disk encryption are supported.

Is it free and open source?

Yes. Maze Linux is free to download and use, and built on open-source software.

Maze Linux / Wiki

Maze Commands

Every maze-* command shipped on the system, in one place. Most have a --help flag; where a GUI exists, the GUI is usually the recommended route.

Maze Control Center

Emergency

Command	What it does
`maze-panic`	Panic button — locks the machine down fast.
`maze-panic-restore`	Undoes what `maze-panic` did.
`maze-killswitch`	Kill switch control from the shell.

Try maze-panic --help before you need it, so you know what it will do to your session.

Diagnostics and health

Command	What it does
`maze-doctor`	Full system health report. `--deep` for a longer run, `--no-color` for plain output.
`maze-boot-check`	Verifies the boot chain is intact and signed. `--quiet`, `--no-flag`.
`maze-audit`	Audit tooling.
`maze-hardware`	Hardware inventory and driver state.
`maze-sentinel` / `maze-sentinel-setup`	Sentinel service (enabled on installed systems). Unrelated to the `sentinai` package.

If maze-boot-check fails it writes /var/lib/maze/boot-unsafe, and maze-boot-guard then holds a shutdown inhibitor — the machine will refuse to power off cleanly while the boot chain looks broken. That is deliberate: it stops you rebooting into an unbootable system. See Won't Boot?.

See Diagnostics for the full output walkthrough.

Boot and kernel

Command	What it does
`maze-kernel`	Kernel Switcher GUI — the recommended way to change kernels.
`maze-kernel-helper`	Privileged backend for the GUI; the GUI calls it through `pkexec`.
`maze-initramfs-rebuild`	Rebuilds the initramfs / UKI after changing kernel parameters.
`maze-kernel-install-add`	Kernel install hook helper.
`maze-sb-sign`	Signs the boot chain for Secure Boot.
`maze-boot-notify`	Boot-state notifications.
`maze-boot-guard`	Shutdown inhibitor when the boot chain is unsafe (see above).

See Kernel Management and Secure Boot.

Security and privacy

Command	What it does
`maze-guardctl` / `maze-guardd`	Maze Guard CLI and daemon.
`entropy-shield`	Entropy Shield anonymity stack.
`maze-cloak`	MAC address cloaking (see Privacy).
`qlam`	ClamAV GUI scanner.
`maze-enable-blackarch`	Adds the BlackArch repository.

System and desktop

Command	What it does
`mazelinux`	Main Maze CLI entry point.
`maze-control-center`	Control Center GUI.
`maze-snapshots-setup`	Sets up snapper configuration (runs on first boot).
`maze-flatpak-setup`	Adds Flathub. Enabled at boot.
`maze-gpu-driver`	GPU driver helper.
`maze-power-saver`	Power management.
`maze-primary-screen`	Sets the primary display.
`maze-apply-wallpaper`	Applies the Maze wallpaper.
`maze-install-vmware`	Installs VMware Workstation.
`maze-aur-setup`	Finishes AUR setup (`paru`, ONLYOFFICE) if the installer could not reach the network.