"First, a PSA: Do NOT use Omarchy if you care about security of your machine even a little bit.”
Omarchy 4.0.1: a security fix for "Quattro"
Omarchy, the opinionated respin of Arch Linux driven by David Heinemeier Hansson (DHH), released Omarchy 4.0.1 this week as a security fix for the mid‑August Omarchy 4 “Quattro” release. The project itself is young — its first release arrived in June of last year — but the 4.0.1 update underscores that Omarchy is moving quickly through iterative releases while reacting to security and stability issues reported by users and testers.
Omacom Foundation and $10 million in backing
The distribution now has an organizational home. A week ago DHH announced the launch of the Omacom Foundation with an initial $8 million in funding. The Register reports that founding patrons include figures behind Shopify, Stripe, Dell, Block, Cloudflare, Sesame, and 37signals. That group was shortly followed by people behind Dropbox and OpenClaw, taking the founding total to $10 million.
Alongside Omarchy, the ecosystem has already produced a sibling distro — Omakub, based on Ubuntu — and an umbrella organization called Omacom. That combination of cash, multiple projects and an institutional structure explains why the project is drawing both attention and controversy.
Your scanner finds 4,000 vulns. Which 12 matter?
Nubivance is a Rapid7 Registered Partner delivering vulnerability management as a service - scanning, risk-based prioritization, and remediation follow-through across IT and OT.
Fix the backlogUI, packaging choices, and measured testing results
The Register’s hands‑on testing found Omarchy “does work,” but emphasized that it is highly opinionated in both interface and packaging. The UI is built around the Hyprland tiling compositor, with a panel and menus supplied by Quickshell; it is heavily keyboard‑driven and “ignores almost all existing keyboard shortcuts and UI conventions from other OSes.” The distribution intentionally removes or omits common desktop affordances: there are no title bars, no close buttons, and no middle‑click or right‑click application menus.
Omarchy is Arch under the hood but extensively preconfigured. The default install — which reviewers note is the only practical install option — came with a surprising suite of preinstalled applications, including Discord, WhatsApp, Docker, Obsidian, Neovim and OBS Studio. Optional extras include speech and automatic dictation via Voxtype, a terminal music player called cliamp, and configurable AI tools — one startup message invites users to “configure your preferred plastic pal who’s fun to be with LLM bot.”
Size and performance metrics from the review: a default install used about 14 GB of disk after the first update, and consumed roughly 1.5 GB of RAM at idle. The reviewers managed to install Omarchy in a VM with a 16 GB virtual disk but could not complete an update due to insufficient disk space; on physical hardware the update worked. The distro uses a custom omarchy update script rather than established pacman commands; the testers hit a known bug with that updater in a VM. To make a second display useful they installed an additional tool, hypermon.
Criticism, controversy, and sponsorship debates
Omarchy’s technical choices are accompanied by vocal criticism. The Merchants of Insecurity piece that leads with the line quoted above is among the harshest: its top line warns users against Omarchy if they “care about security.” A post on Framework’s community forums last year argued “Omarchy is not a secure distribution and should be taken off the Linux installation options.” The Register also noted that it reported in late 2025 that Framework — known for repairable laptops — was sponsoring Omarchy and Hyprland; that sponsorship, in turn, drew criticism for aligning a hardware vendor with controversial software projects.
Those complaints are part of a longer arc: The Register says DHH has been attracting criticism since at least 2014. The project’s defenders and fans, by contrast, praise its speed, striking appearance and keyboard‑centric workflow — though some concede it is “not for them.” As the old P. T. Barnum line quoted in the coverage puts it: “Say anything you like about me, but spell my name right.”
What this looks like for technologists, end users, and hardware vendors
- Technologists and security teams: will watch the 4.0.1 fix and the custom update mechanism closely — the distribution’s rejection of standard pacman workflows and the existence of known updater bugs in VMs are concrete operational items to evaluate before any deployment.
- End users and curious power users: gain an option that is fast, visually distinct, and packed with preinstalled apps and optional AI/dictation features, but they should be prepared to learn unconventional keyboard and UI behaviors and to allocate at least 14 GB of disk for a default install.
- Hardware vendors such as Framework: sponsorship and partnership choices are already drawing community attention; the late‑2025 reporting that Framework sponsored Omarchy and Hyprland illustrates how vendor alignment with opinionated projects can provoke debate among customers and community members.
Omarchy is, by design, a polarizing project: heavily opinionated, well funded, and configured to invite strong reactions. The Omacom Foundation’s $10 million in founding support and the quick turnaround to a 4.0.1 security release mean Omarchy will remain visible — whether that visibility turns into broader adoption, sustained controversy, or both is now an open question the project’s backers and critics will answer in public over the coming months. For now, it works, it is opinionated, and it has the cash to keep the conversation going.
Source: The Register — "Omarchy distro gains serious backing"
