diff --git a/content/FAQ.md b/content/FAQ.md index c7d0df6..925ca70 100644 --- a/content/FAQ.md +++ b/content/FAQ.md @@ -203,13 +203,26 @@ secureblue prevents [numerous modules](https://github.com/secureblue/secureblue/ ### [How do I install software?](#software) {: #software} +#### Check if software is already installed +> `rpm -qa | grep x` -1. Check if it's already installed using `rpm -qa | grep x` -2. For GUI packages, you can install the Flatpak if available using the Software store or using `flatpak install`. You can browse this [catalogue of Flatpaks](https://flathub.org) to discover the available packages. -3. For CLI packages, you can install from brew if available using `brew install`. You can browse this [catalogue of Homebrew Formulae](https://formulae.brew.sh) to discover the available formulae. -4. If a package isn't available via the other two options, or if a package requires greater system integration, `rpm-ostree install` can be used to layer rpms directly into your subsequent deployments. +#### Flatpak +[Flatpaks](https://flatpak.org/) are the recommended way to install GUI software in secureblue, with the exception of [browsers](https://github.com/RKNF404/chromium-hardening-guide/blob/main/pages/BROWSER_SELECTION.md#flatpak-linux). An article on why we recommend flatpaks is available [here](https://secureblue.dev/articles/flatpak) You can add the unfiltered Flathub repo with `ujust enable-flathub-unfiltered`. +##### Installing Flatpaks +###### Bazaar +[Bazaar](https://github.com/kolunmi/bazaar) is the app store that comes preinstalled with secureblue. It is forked for secureblue so we can make a few of our own changes and audit updates for security. It by default filters EoL apps and certain apps with known security issues. Do note that the scope of this filter is limited and an app being unfiltered does not mean it is secure. Bazaar has a curated tab for software that compliments secureblue. +###### CLI +Flatpaks can by installed using the flatpak CLI tool, which is preinstalled with secureblue. Run `flatpak --help` for a list of commands and their usage. You can browse this [catalogue of Flatpaks](https://flathub.org) to discover the available packages. +#### Homebrew +For CLI packages, you can install with [Homebrew](https://docs.brew.sh/Manpage) using `brew install `. You can browse this [catalogue of Homebrew Formulae](https://formulae.brew.sh) to discover the available formulae. +#### RPM +If a package isn't available via Flatpak or Homebrew, or if a package requires greater system integration, `rpm-ostree install ` can be used to layer rpms directly into your subsequent deployments. Sometimes an additional repository needs to be added to install software. + +Note that by adding a third party repo, you are trusting the owner of that repo. **You should avoid adding third party repos**. But, if you must use a third party repo, run: +`curl -O --output-dir /etc/yum.repos.d/ ` +`rpm-ostree install ` ### [How do I install my VPN?](#vpn) {: #vpn} @@ -488,6 +501,8 @@ For example: rpm-ostree install funionfs ``` +Note: Sometimes AppImages can work if you extract them with `/path/to/your/appimage --appimage-extract`, then enter the `squashfs-root` directory created and run whatever binary is in there. + ### [Why won't Trivalent start when Bubblejailed?](#trivalent-bubblejail) {: #trivalent-bubblejail}