01 · Product name
Tsurugi Linux
DFIR lab image, with a separate 2021 Acquire build.
Published by Tsurugi Linux project.
In short
Tsurugi Linux is the DFIR project at tsurugi-linux.org. On 20 Oct 2026 the download page said Lab and Acquire are totally free, provided as is, under the GNU GPL, and that some included tools are not open source. Lab files were tsurugi_linux_26.03.iso and .ova, both dated 04/04/2026 on the page. Acquire was tsurugi_acquire_2021.1.iso, dated 09/04/2021. Bento was bento_2026.10.7z, dated 19/10/2026. The page did not name a base distribution. Anything not on that page is marked end of life there. A DFIR image is for media you are allowed to examine.
Product pricing strategy
02
Free
The download disclaimer says Lab and Acquire are totally free, provided as is, under the GNU GPL. No paid Tsurugi tier and no dollar amount were printed on the download page opened 20 Oct 2026. Some bundled tools are not open source, which is a license fact on that page, not a price. The PGP key id is for signature checks, not a license fee. Bento is listed on the same free download page. Do not invent a support contract. An image that is not on the download page is, in the page's words, end of life, which is a support limit rather than a paid upgrade.
Utility and features
03
The download page is the catalog. Its disclaimer says Tsurugi Linux Lab and Tsurugi Acquire are totally free, provided as is, under the GNU General Public License, without warranty. It also says all included tools are free and some are not open source, and that licenses live under /usr/share/doc and /opt. It says anything not explicitly on the download page is end of life and no longer supported. The PGP public key id printed there is 0x116AD57C.
- Lab 26.03. The download page names tsurugi_linux_26.03.iso and the matching OVA, each dated 04/04/2026.
- Acquire is older. tsurugi_acquire_2021.1.iso is dated 09/04/2021 on the same page. Bento is dated 19/10/2026, which fixes the page's day/month order.
- GPL, with exceptions. Lab and Acquire are described as free and under the GNU GPL. The same disclaimer says some included tools are not open source.
Last-release lines name tsurugi_linux_26.03.iso and tsurugi_linux_26.03.ova, each with release date 04/04/2026, and tsurugi_acquire_2021.1.iso with release date 09/04/2021. Bento, described as a DFIR portable toolkit, is bento_2026.10.7z with release date 19/10/2026. Because Bento's day is 19, the date order on this page is day, month, year, so 04/04/2026 is 4 April 2026 and 09/04/2021 is 9 April 2021. The homepage is a short project page and does not add a version or a base. No Ubuntu or Debian sentence was found, so none is invented. A GitHub user search did not produce a Tsurugi Linux repository to set. The footer range on the download page is 2018–2026. Parrot and CSI Linux are the other investigation desktops in this category.
- 1
Download Lab when you need the 26.03 image, and do not substitute the 2021 Acquire ISO.
- 2
Read 04/04/2026 and 09/04/2021 as day/month/year because the same page dates Bento 19/10/2026.
- 3
Check the PGP key 0x116AD57C against the signed hashes before you trust an image.
Caveats
04
Lab 26.03, dated 04/04/2026 on the page, is not the Acquire image. Acquire is the 2021.1 ISO dated 09/04/2021. Bento is a third file, dated 19/10/2026. Do not call the 2021 ISO the current lab.
The page did not name a base distribution. Do not fill that gap with Ubuntu. Some included tools are not open source even though the project license line is GPL. Verify you are allowed to possess a tool before you download it. The page itself says some tools could be restricted in some countries, and that the project is not responsible for illegal use. This listing does not repeat a tool procedure. A forensic image examines media you are allowed to hold.
Screenshots
05
Potential use cases
06
- Lab and Acquire are about to share a date. The download page lists tsurugi_linux_26.03.iso and the OVA at 04/04/2026, and tsurugi_acquire_2021.1.iso at 09/04/2021. Bento is bento_2026.10.7z at 19/10/2026. The 19 in that Bento date shows the page's order is day, month, year. The page did not name a base distribution, so none is added.
- The GPL line is about to be read as every bundled tool being open source. The disclaimer says Lab and Acquire are totally free, as is, under the GNU GPL, and that some included tools are not open source. Anything not on the download page is end of life, in the page's words. The PGP key id printed there is 0x116AD57C.
- A DFIR image is about to be used on media the investigator does not hold. The project says its goal is education and professional work, and that the team is not responsible for illegal use. This listing does not repeat a tool procedure. Verify the signature, then examine media you are allowed to examine.
Hard cases
The case where the first result is easy to over-read.
The 2021 ISO is called current
Acquire's filename is 2021.1 and the page dates it 09/04/2021. Lab is the 26.03 image dated 04/04/2026. Calling Acquire the current Tsurugi desktop contradicts the download page. Name the file you mean.
Questions
What is the current Tsurugi release, and what is it based on?
The download page lists Lab 26.03 dated 04/04/2026, Acquire 2021.1 dated 09/04/2021, and Bento dated 19/10/2026. It does not name a base distribution.
Is Tsurugi free?
The disclaimer says Lab and Acquire are totally free, as is, under the GNU GPL. It also says some included tools are not open source. No dollar price was printed.
Citations
07
Titled sources. These public pages are what the quotes on this listing come from.
Product
Tsurugi Linux downloads
https://tsurugi-linux.org/downloads.phpDocumentation
Tsurugi Linux
https://tsurugi-linux.org/