Your own private AI in 7 steps.

This can mean Rust or TPM development libraries are missing, or your desktop session cannot access the TPM. Linux KeyVault needs a working TPM 2.0 device; there is no software-key fallback.

1. Install the native build dependencies.

   $sudo apt-get update

   $sudo apt-get install -y build-essential pkg-config libtss2-dev clang libclang-dev

2. Install Rust from the official rustup installer. The helper requires Rust 1.85 or newer; Ubuntu 24.04's unversioned Rust packages may be too old. If a suitable toolchain is already installed, just load its environment and check the versions.

   $curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs -o /tmp/mordred-rustup-init.sh

   $sh /tmp/mordred-rustup-init.sh -y --profile minimal

   $. "$HOME/.cargo/env"

   $rustc --version

   $cargo --version

3. Check the device and your groups. If /dev/tpmrm0 does not exist, check your machine or VM's TPM support first; installing libraries cannot create a TPM.

   $ls -l /dev/tpmrm0

   $id

4. Only if the device belongs to group tss and your user is not a member, add your user to that group. Do not make the device world-writable.

   $sudo usermod -aG tss "$(id -un)"

5. Sign out of the Linux desktop session and sign back in. Reconnecting a VNC viewer alone is not enough: existing processes retain their old groups. In a new terminal, check device access and build the helper.

   $. "$HOME/.cargo/env"

   $test -r /dev/tpmrm0 && test -w /dev/tpmrm0 && echo 'TPM device access OK'

   $hermes-mordred keyvault enable-tpm

6. After the hardware probe succeeds, open Desktop from the same terminal so it inherits the Rust environment.

   $hermes desktop --skip-build

A minimal Ubuntu installation may not include the native build tools needed for Hermes Desktop.

1. Install the tools and rebuild. The first build can take several minutes; leave the terminal open.

   $sudo apt-get install -y build-essential pkg-config

   $hermes desktop --build-only

2. Once packaging finishes, launch Desktop.

   $hermes desktop --skip-build

The packaged Desktop application needs the ALSA runtime library even on a machine without speakers.

1. On Ubuntu 24.04, install libasound2t64, then start the already-built application.

   $sudo apt-get install -y libasound2t64

   $hermes desktop --skip-build

The installer needs libatomic1. Some EC2 Ubuntu accounts use SSH keys and have no login password, even when sudo commands are allowed without one.

1. Install the missing library from a terminal, then re-run the Hermes installer. If sudo genuinely requires authentication, use your Linux account password or ask the machine's administrator; do not enter your API key or VNC password.

   $sudo apt-get install -y libatomic1

This is provider onboarding, not an installation failure. You can open Desktop before connecting a model provider.

1. Press Ctrl+C to leave the login wait. If interactive setup continues, exit that setup too and let the installer finish. Once Hermes is installed, run hermes desktop. On Desktop's provider screen, choose “I'll choose a provider later”.

Telegram expects a country code and a phone number, not the local dialing format. This applies on every supported platform.

1. Enter your api_id, api_hash, and phone number from your Telegram API settings. For a Japanese number such as 090-1234-5678, use +819012345678. Click “Send login code”, then enter the code received in your Telegram app; the phone number does not belong in the code field.