Glossary¶

Plain-language definitions of terms you'll encounter in PAI docs, issues, and source. Cross-links use relative anchors.

AMD64¶

The 64-bit x86 CPU architecture used by most Intel and AMD laptops and desktops. PAI ships an AMD64 ISO for these machines. See also ARM64, ISO.

ARM64¶

The 64-bit ARM CPU architecture used by Apple Silicon, most Raspberry Pi 4/5 boards, and many SBCs. PAI ships a separate ARM64 image.

Argon2id¶

A memory-hard password hashing function used by LUKS to derive the encryption key for persistence. Its memory cost makes GPU brute-force attacks expensive.

chroot¶

A Unix mechanism that runs a process with a different apparent root directory. PAI's build scripts use chroot to install and configure the live system before packing it into a squashfs.

CoW¶

Copy-on-write. A storage technique where writes go to new blocks rather than overwriting. PAI uses CoW via overlayfs to make the read-only squashfs appear writable.

debootstrap¶

A Debian tool that bootstraps a minimal Debian/Ubuntu root filesystem from scratch. It is the first step of the PAI live build.

dm-crypt¶

The Linux kernel's disk encryption subsystem. LUKS is the standard on-disk format built on top of dm-crypt.

ext4¶

A mature Linux filesystem. PAI uses ext4 inside the persistence LUKS container.

initramfs¶

A small, in-memory root filesystem the kernel loads before the real root is ready. PAI's initramfs contains the code that mounts the squashfs and unlocks persistence.

ISO¶

A single-file disk image (originally for CDs) that can be written to a USB stick to produce a bootable drive. PAI distributes ISO files for AMD64 and ARM64.

LLM¶

Large Language Model. The category of AI model served by Ollama inside PAI.

LUKS¶

Linux Unified Key Setup — the on-disk format used to encrypt PAI's persistence volume. Backed by dm-crypt and keyed with Argon2id.

MAC address¶

A unique identifier burned into network hardware. PAI randomizes MAC addresses at boot by default, so networks can't track the device across sessions.

minisign¶

A small, fast signature tool by the libsodium author. PAI release artifacts are signed with minisign so you can verify authenticity. See docs/verification.md.

Monero¶

A privacy-preserving cryptocurrency. Its wallet software ships with PAI; see FAQ for caveats.

Ollama¶

A local LLM runner that exposes a simple HTTP API and manages model downloads, quantization, and GPU acceleration. PAI ships Ollama preinstalled.

overlayfs¶

A Linux union filesystem that stacks a writable layer on top of a read-only one. PAI stacks a tmpfs (or persistent LUKS volume) on top of the squashfs so the system appears fully writable.

persistence¶

PAI's optional encrypted volume — a LUKS container on the USB stick that stores files you want to keep across reboots (wallets, models, GPG keys, browser profiles). Off by default.

PGP¶

Pretty Good Privacy — the family of standards (OpenPGP / GnuPG) for signing and encrypting data and email. PAI ships GnuPG.

quantization¶

Reducing an LLM's weights to lower precision (e.g. 16-bit → 4-bit) so it fits in less memory and runs faster, at a small quality cost. Most CPU-usable models in PAI are quantized.

SBC¶

Single-Board Computer (e.g. Raspberry Pi, Rock 5B). PAI's ARM64 image targets common SBCs.

SemVer¶

Semantic Versioning (MAJOR.MINOR.PATCH). PAI follows SemVer for release numbering — see RELEASE.md.

squashfs¶

A compressed, read-only Linux filesystem. PAI's root filesystem ships as a squashfs so the whole OS fits on a USB and can be verified by hash. Paired with overlayfs for writability.

SSD wear¶

The finite write endurance of flash memory. Heavy writes on a live-USB session shorten USB stick lifespan; PAI minimizes writes by default.

Tor¶

An anonymity network that routes traffic through three relays to hide your network location. PAI can route all traffic through Tor, but see FAQ.

UEFI¶

The modern firmware standard that has replaced legacy BIOS. PAI boots via UEFI on most modern machines; see FAQ.

UFW¶

Uncomplicated Firewall — a friendly frontend for the Linux nftables/iptables firewall. PAI ships a default-deny UFW profile.

Wayland¶

A modern Linux display protocol replacing X11. PAI uses Wayland via Sway. Some older GPUs still fall back to X11 — see KNOWN_ISSUES.md.

Sway¶

A tiling Wayland compositor (i3-compatible). PAI's default desktop.

xorriso¶

The tool PAI's build pipeline uses to assemble the final hybrid ISO that can boot from both CD and USB.