Get started

Choose the path that matches what you are trying to run.

Goal	Start here
Get a laptop online as a paid bundler	LapEE bundler quickstart
Understand the laptop appliance model	LapEE laptop
Prepare Secure Boot policy on a laptop	LapEE provisioner
Run in AMD SEV-SNP	TEE / SEV-SNP
Run the kernel directly	Bare kernel
Verify a running node	Verification

Normal Launch Path

For the current LapEE bundler launch, use prebuilt release artifacts:

1. Run the provisioner on the target laptop.
2. Verify the signed runtime image from the release.
3. Put the image at build/images/lapee-usb.img in the LapEE source checkout.
4. Stage the bundler profile as config.json beside the Makefile.
5. Stage wifi.conf beside the Makefile only if the laptop needs WiFi.
6. Run make operator-config-apply IMAGE=build/images/lapee-usb.img.
7. Run make write-image DEV=/dev/diskN IMAGE=build/images/lapee-usb.img.
8. Boot the laptop and use the URL shown by the splash.
9. Run the smoke checks in the quickstart.

Build from source only for release engineering, auditing, or custom image work. Local builds create local measurements and signing identities that verifiers must explicitly admit.

Operator Inputs

LapEE reads these optional files once from the EFI System Partition:

File	Purpose	Secret?
EFI/boot/config.json	Public PermawebOS operator config or role profile.	No
EFI/boot/wifi.conf	Two-line SSID and WPA2-PSK file.	Yes

config.json becomes part of the measured node message. wifi.conf is plaintext secret material and must not be committed or shared.