# Secure AppImage OS?

**URL:** <https://discourse.appimage.org/t/secure-appimage-os/2783>\
**Category:** Apps\
**Created:** [August 13, 2022, 6:01pm UTC](https://discourse.appimage.org/t/secure-appimage-os/2783 "2022-08-13T18:01:49Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Red.Icculus](https://avatars.discourse-cdn.com/v4/letter/r/8491ac/32.png) [@Red.Icculus](https://discourse.appimage.org/u/Red.Icculus)\
**Post date:** [August 13, 2022, 6:01pm UTC](https://discourse.appimage.org/t/secure-appimage-os/2783/1 "2022-08-13T18:01:49Z")

</div>

I know Nitrux offers AppImages out of the box, but I had a bit of a different take on secure software management using AppImages.

1.It would begin with source code from somewhere like Arch User Repository (AUR) or Gitlab and compile it with dependencies.  
2. It would package AppImage with icon and the ability to update. The executable flag is left off. The resulting package would be for internal use, not redistributed to be respectful to upstream.  
3. It is placed in Firejail, so it can be executed at runtime.  
4. A program manager would be able to update/delete existing packages.

How feasible is this? Could this be done with just Python scripts using existing software? I would put a $ bounty on a project like this.

---

<div class="post-metadata">

**Author:** ![pktiuk](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.appimage.org/pktiuk/32/430_2.png) [@pktiuk](https://discourse.appimage.org/u/pktiuk)\
**Post date:** [August 18, 2022, 5:52pm UTC](https://discourse.appimage.org/t/secure-appimage-os/2783/2 "2022-08-18T17:52:43Z")

</div>

I think this thread could be interesting for you [Thoughts on an infrastructure for distributing Linux application bundles](https://discourse.appimage.org/t/thoughts-on-an-infrastructure-for-distributing-linux-application-bundles/58)

I don’t think this all is doable with python scripts. (but a big part is)

> 1. A program manager would be able to update/delete existing packages.

This point would need creating proper plugin for existing software manager like gnome-software or KDE Discover.

About a year ago I wanted to create this kind of plugin, but due to lack of time I haven’t finished it

> **[Draft: Appimage plugin (!1017) · Merge requests · GNOME / gnome-software ·...](https://gitlab.gnome.org/GNOME/gnome-software/-/merge_requests/1017)**
>
> Implements basic support for AppImage format (mentioned in issue:

---

<div class="post-metadata">

**Author:** ![Red.Icculus](https://avatars.discourse-cdn.com/v4/letter/r/8491ac/32.png) [@Red.Icculus](https://discourse.appimage.org/u/Red.Icculus)\
**Post date:** [August 19, 2022, 1:28pm UTC](https://discourse.appimage.org/t/secure-appimage-os/2783/3 "2022-08-19T13:28:56Z")

</div>

For Arch users, there is this:

> **[GitHub - ivan-hc/Arch-Deployer: A script to bulk download an Arch Linux...](https://github.com/ivan-hc/Arch-Deployer)**
>
> A script to bulk download an Arch Linux package with all its dependencies to be converted in AppImage. - GitHub - ivan-hc/Arch-Deployer: A script to bulk download an Arch Linux package with all its...

It doesn’t get the icon or set up the .desktop file correctly. Also the XDG-user-dir set the final location of the AppImage to the desktop, which doesn’t work. I tried changing to other directories in the script to no avail.

I’ll see how much something like this will take to work correctly on Fiverr, but I would rather have a community sourced project.

---

<div class="post-metadata">

**Author:** ![probono](https://yyz1.discourse-cdn.com/flex027/user_avatar/discourse.appimage.org/probono/32/81_2.png) [@probono](https://discourse.appimage.org/u/probono)\
**Post date:** [September 25, 2022, 1:44pm UTC](https://discourse.appimage.org/t/secure-appimage-os/2783/4 "2022-09-25T13:44:24Z")

</div>

AppImages are for a concept called “Upstream Packaging”, where the original author of an application provides binaries directly to end users.