Skip to content

Headless Setup & First Boot: Raspberry Pi Imager, SSH & Network Discovery

Created: 2026-11-08 Last updated: 2026-11-08

Executive Summary: Running a Raspberry Pi headless means operating the system entirely without an attached HDMI display, USB keyboard, or mouse. By pre-configuring network parameters, user credentials, and SSH public keys during the storage flashing process, you can power up a brand-new board, locate it on your local network within 60 seconds, and connect remotely from your workstation. This guide walks through the official Raspberry Pi Imager, explains why 64-bit Raspberry Pi OS Lite is the gold standard for appliances, decodes the on-board hardware status LEDs, and demonstrates multiple methods to discover and access your device.

  • The Imager Workflow

    Flash Raspberry Pi OS Lite (64-bit) with pre-seeded user accounts, Wi-Fi credentials, and SSH keys in a single operation.

  • LED Diagnostic Signals

    Understand the on-board PWR (Red) and ACT (Green) activity LEDs to visually verify power health and kernel boot stages.

  • Zero-Config Discovery

    Locate your board on the local subnet using Multicast DNS (.local), router DHCP leases, or command-line ARP/Nmap scans.

  • First Remote Shell

    Establish your first encrypted SSH connection from Windows Terminal, macOS, or Linux without ever connecting a monitor.

1. Operating System Selection: Lite vs. Desktop

When launching the Raspberry Pi Imager, you are presented with several operating system editions:

%%{init: {'flowchart': {'wrappingWidth': 600, 'subGraphTitleMargin': {'top': 15, 'bottom': 15}}}}%%
flowchart TB
    OS_CHOICE["Operating System Edition"]
    LITE["Raspberry Pi OS Lite (64-bit)<br/>(Debian Bookworm aarch64)"]
    DESK["Raspberry Pi OS with Desktop<br/>(Wayland / Labwc GUI)"]

    OS_CHOICE --> LITE
    OS_CHOICE --> DESK

    LITE_PROS["No GUI, RAM usage ~120 MB<br/>Clean, minimal, 100% server focused"]
    DESK_PROS["Full desktop environment<br/>Consumes 600+ MB RAM, slower boot"]

    LITE --> LITE_PROS
    DESK --> DESK_PROS

Why We Mandate Raspberry Pi OS Lite (64-bit)

  1. Architecture (64-bit vs. 32-bit): All modern Raspberry Pi boards (Pi 5, Pi 4, Pi Zero 2 W) feature 64-bit ARM Cortex processors. Running the 64-bit (aarch64) OS unlocks ARMv8 hardware cryptographic extensions (essential for TLS, WireGuard, and Docker) and removes memory address bottlenecks.
  2. Resource Efficiency: The Desktop edition loads the Wayland display server, Chromium browser, and office packages. On headless servers, home automation hubs, or IoT nodes, this wastes over 500 MB of RAM and increases SD-card write wear. Raspberry Pi OS Lite boots into less than 130 MB of RAM and starts in under 15 seconds.

2. Flashing the Storage with Raspberry Pi Imager

Download and install the official tool from raspberrypi.com/software:

┌─────────────────────────────────────────────────────────────┐
│  Raspberry Pi Imager v1.8+                                  │
├─────────────────────────────────────────────────────────────┤
│  [ Choose Device ]       [ Choose OS ]       [ Choose Storage ]
│  Raspberry Pi 5         Raspberry Pi OS     SanDisk 64 GB   │
│                         Lite (64-bit)       /dev/sdb        │
│                                                             │
│                [   EDIT SETTINGS (Gear)   ]                 │
│                [          NEXT            ]                 │
└─────────────────────────────────────────────────────────────┘

The OS Customization Settings (The "Gear" Icon)

When you click NEXT, the Imager prompts: "Would you like to apply OS customization settings?" Select EDIT SETTINGS:

  1. General Tab:
  2. Set hostname: Choose a distinct, network-friendly name (e.g. rpi-server or iot-node01). This becomes its mDNS address (rpi-server.local).
  3. Set username and password: The legacy default user pi:raspberry was permanently removed for security reasons. Define your personal administrative username (e.g., admin or your first name) and a strong password.
  4. Configure wireless LAN: If connecting via Wi-Fi rather than an Ethernet cable, enter your Wi-Fi SSID, Wi-Fi password, and select your Wireless LAN country code (e.g., DE, US, GB—mandatory to unlock legal 5 GHz frequencies).

  5. Set locale settings: Select your local Time zone (Europe/Berlin, America/New_York) and keyboard layout (de, us).

  6. Services Tab (Crucial):

  7. Check Enable SSH.
  8. Select Use password authentication for simple onboarding, or choose Allow public-key authentication only and paste your workstation's ~/.ssh/id_ed25519.pub key for immediate industrial-grade security.

Click SAVE, confirm the write operation, and let the Imager flash and verify the microSD card.

3. The First Boot & Hardware LED Status Signals

Insert the flashed microSD card into the Raspberry Pi's underside slot, plug in the Ethernet cable (if using wired LAN), and connect the official USB-C power supply.

Modern boards feature two small surface-mounted LEDs near the edge:

%%{init: {'flowchart': {'wrappingWidth': 600, 'subGraphTitleMargin': {'top': 15, 'bottom': 15}}}}%%
flowchart TB
    subgraph BoardLEDs["Raspberry Pi Status LEDs"]
        PWR["🔴 PWR LED (Red)"]
        ACT["🟢 ACT LED (Green)"]
    end

    PWR_STATUS["Solid Red = Clean 5V/3.3V Power<br/>Extinguished or Blinking = Brownout / Faulty Cable!"]
    ACT_STATUS["Irregular Blinking = Normal Kernel Boot<br/>Steady 8-Flash Blink = SD Card Unreadable!"]

    PWR --> PWR_STATUS
    ACT --> ACT_STATUS

Reading the Hardware Indicators

  • Solid Red PWR LED: The power management IC (PMIC) is receiving steady voltage above 4.63V. If the red light flashes or stays dark, your power supply is dropping voltage under load.
  • Flashing Green ACT LED: Indicates active read/write operations to the microSD card. An irregular, rapid flicker means the bootloader has loaded the kernel and the system is booting normally.

4. Locating Your Raspberry Pi on the Local Network

Once powered on, the Pi requests an IPv4 address from your home router via DHCP. You can discover this address in three ways:

Method A: Multicast DNS (mDNS / Zeroconf) — The Simplest Approach

On modern operating systems (Windows 10/11, macOS, and Linux with avahi-daemon), you do not need to know the IP address. Open your workstation's terminal and ping the hostname:

Testing mDNS Resolution from your Workstation
ping rpi-server.local

Expected output showing resolution to the local IPv4 address: 

PING rpi-server.local (192.168.1.145) 56(84) bytes of data.
64 bytes from 192.168.1.145: icmp_seq=1 ttl=64 time=2.41 ms
64 bytes from 192.168.1.145: icmp_seq=2 ttl=64 time=1.85 ms

Method B: Your Home Router Dashboard

Log in to your local router web interface (e.g., http://192.168.1.1 or http://fritz.box), navigate to the Network / DHCP Client List, and locate the device matching the hostname configured in the Imager.

Method C: Network Scanning via CLI (nmap / arp-scan)

If mDNS fails and you lack router access, perform a quick ping-sweep of your subnet:

Scanning the Subnet with Nmap
# Scan local subnet for port 22 (SSH) open
sudo nmap -sn 192.168.1.0/24 | grep -B 2 -i "raspberry"

5. Establishing Your First Remote SSH Shell

With the IP address or mDNS name verified, open the terminal on your workstation and connect:

Connecting via OpenSSH
ssh yourusername@rpi-server.local

(Replace yourusername with the administrative username chosen in the Imager).

Handling the Host Key Fingerprint Prompt

On your very first connection, SSH displays a cryptographic warning:

The authenticity of host 'rpi-server.local (192.168.1.145)' can't be established.
ED25519 key fingerprint is SHA256:7uGkLp9...
Are you sure you want to continue connecting (yes/no/[fingerprint])?

Type yes and hit Enter. Your workstation records the Pi's public key fingerprint in ~/.ssh/known_hosts. Then enter the password you configured in the Imager.

Success: The Debian Linux Welcome Prompt

Upon successful authentication, the terminal greets you with the Linux system banner:

Linux rpi-server 6.6.51+rpt-rpi-2712 #1 SMP PREEMPT Debian 1:6.6.51-1+rpt1 (2024-10-08) aarch64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

yourusername@rpi-server:~ $

Congratulations! You are now logged into a fully operational, headless 64-bit Linux server running on ARM64 hardware.

Where to Go Next

Now that you have secure command-line access, proceed to configuring system settings, managing packages, and mastering the essential console commands:

  • Next Guide: Linux Basics & raspi-config

    Explore system localization, hardware interface toggles (I2C/SPI), APT package management, and safe shutdown procedures.

    Proceed to Linux Basics