Flatpak

Manage Flatpak Apps

Flatpak is a package manager for Linux that works alongside other package managers like Apt and Snap. It provides access to a wide range of applications, many of which are unavailable from the apt archives or Snap Store. Many projects use it as their preferred method of app distribution.

Flatpak applications come from either the app developers or community contributors creating unofficial builds. Although Ubuntu supports Flatpak as a package manager, Canonical and the Ubuntu community do not support individual Flatpak applications. They are supported by the individual packagers. If a Flatpak is official, the application's developer usually provides support for it directly.

• Install Flatpak
• Install Flatpaks using Flathub
• Update Flatpaks
• Change App Permissions
• Install an Example App: MakeMKV
• Troubleshooting
• Revisions
• Disclaimer

Install a wide range of applications with Flatpak.

Please read the disclaimer before proceeding. We review and update guided solutions regularly. If you have suggestions or requests, please write support@kfocus.org.

Install Flatpak

The Flatpak package manager is available from Ubuntu's archives. To install it, run:

This allows installing Flatpaks via the command line. To install and update Flatpaks using Discover, install the Discover Flatpak backend:

To find and install apps, a Flatpak repository needs to be added to the system. The most popular repo is Flathub. Add the Flatpak repository to your system by running:

After installing Flatpak, log out and log back in. Newly installed apps do not show in the Start Menu until this is done.

Install Flatpaks using Flathub

Browse available apps through the Flathub website. Click on the [ Install ] button to download a Flatpak ref file, and install the app using Discover or the command line. If an application's developers officially support installing their app via Flatpak, they usually provide a link to their project's page on the Flathub website.

Before installing an application, make sure the app's packager is trustworthy. If the application is verified, a blue checkmark appears under the application's title, and the app developer's identity appears beside it. This means that the app's developer is the owner of the Flatpak. If the app developer is trustworthy, the Flatpak should also be trustworthy.

Use Flathub to install a verified Flatpak app.

If there is a yellow "Unverified" badge underneath the application's title instead of a blue checkmark, its developer did not package the application, and the package is therefore unofficial and potentially dangerous. Treat such apps with caution. It's almost always a good idea to use an installation method supported by the application's developer instead.

Avoid unverified Flatpak apps.

To install the chosen application:

• If the Discover Flatpak backend is installed:
  • Click the "Install" button on the app's Flathub page.
  • A .flatpakref file is downloaded. Click on the downloaded file in Google Chrome to launch Discover.
  • Discover should open and display the details of the application. Click "Install" in the upper-right corner to begin installation.
  • Once installed, launch the application by clicking "Launch" in the upper-right corner of Discover. There should also be an entry for the application in the Start Menu.
• If the Discover Flatpak backend is NOT installed:
  • On Flathub, click the down arrow next to the "Install" button.
  • Copy the flatpak install command from the manual installation instructions that appear.
  • Open Konsole, and paste the command into the terminal with [CTRL][SHFT][V].
  • Press Enter. Flatpak asks for confirmation before installing the app. NOTE: Do NOT use sudo to run the flatpak install command! Flatpaks do not need root access to be installed.

Besides making it easy to install specific apps, the Flathub website also doubles as an app store. You can search for specific apps, explore app categories, and find popular apps for various purposes. Verified apps are marked with a blue checkmark, while unverified apps have no checkmark.

Search for apps on Flathub.

Update Flatpaks

Flatpaks do not automatically update on their own. This helps prevent unexpected surprises, since Flatpaks normally ship recent versions of applications, and an update could come with substantial changes from the old version. However, it is typically a good idea to keep apps installed via Flatpak up-to-date, in order to stay secure and get bug fixes.

Installing the Discover Flatpak backend integrates Flatpak updates into normal system updates. System package upgrades also upgrade any installed Flatpaks with updates.

Use Discover to update Flatpaks along with system updates.

It's also possible to update Flatpaks from the command line. Open Konsole, and run:

Flatpak prompts for confirmation before installing updates. Note that updating in this way only updates Flatpaks. The rest of the system has to be updated separately.

Use the command line to update Flatpaks.

Change App Permissions

Apps installed via Flatpak are sandboxed, which can help prevent them from accessing resources they don't need to. This improves security, but sometimes a Flatpak's configuration prevents it from accessing a needed resource. This can cause the app to malfunction.

Fortunately, Flatpak permissions can be customized using the Flatseal app. Flathub distributes Flatseal as an installable Flatpak, as described above. Once Flatseal is installed, it can be launched from Start Menu > Utilities > Flatseal.

The Flatseal UI provides access to a list of different permissions. Most of them can be toggled on and off, while some of them (such as the "Other Files" permission) can have items added or removed. This can fix a broken app by granting a permission it needs. If you are worried about the security impact of an app, you can also disable permissions on an app, restricting its capabilities accordingly.

For more information on using Flatseal, see the official Flatseal documentation.

Customize Flatpak permissions using Flatseal.

Install an Example App: MakeMKV

In this example, we install the MakeMKV app using Flatpak. MakeMKV is popular for creating backups of BlueRays and DVDs. Because the Flatpak for the app was created by a community member and not Flatpak, it is considered 'unverified', and one should be cautious about providing it system access. Thankfully, Flatpak uses a sandbox per app, and one can audit app permissions with Flatseal, as discussed above.

When you run the Flatseal app, you can inspect MakeMKV permissions. Some users have reported that allowing “D-Bus Session Bus” is required for success. We otherwise recommend keeping restrictive permissions to help protect your system and your data.

This installation is presented for illustrative purposes only. We do not endorse or audit MakeMKV, and have no affiliation with the authors. Alternatives apps include HandBrake, which is a well-respected, familiar, and more flexible app. However, Handbrake is also more complex. You can see more information on MakeMKV at their site and in this article.

Troubleshooting

Q: I installed a Flatpak, but I don't see an entry for the app in the application menu. How do I fix this?

A: If you installed Flatpak, and then immediately installed an application using Flatpak without logging out and back in first, the app does not appear in the Start Menu. To fix this, log out and log back in. After this, any Start Menu entries for installed Flatpaks should appear, and newly installed Flatpaks will show immediately.

Disclaimer

We try hard to provide a useful solution validated by professionals. However, we cannot anticipate every situation, and therefore cannot guarantee this procedure will work for your needs. Always backup your data and test the solution to determine the correct procedure for you.

THIS SOLUTION IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOLUTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.