Flatpak Template Installation (Updated November 2025)

Original forum link
https://forum.qubes-os.org/t/37301
Original poster
idk
Created at
2025-11-11 02:30:31
Posts count
13
Likes count
12

Flatpak Template Installation (Updated November 2025)

Target: Debian 12/13 - XFCE template

Disclaimer: This guide resolves the problems I encountered installing Flatpak support in my templates while reasonably adhering to current Qubes OS security guidelines. The guide covers installing Flatpak containers in the system workspace (templateVM) and in user space (AppVM, StandaloneVM). This guide aims to be as simple and user-friendly as possible.

Thanks to KitsuneNoBaka and solene for their help.

Note: It is assumed that the user is already familiar with Qubes OS and its security approach (necessary restrictions) when manipulating system components!

Steps to follow:

For Debian XFCE Template

(Assumes Qubes OS configuration - anonymous updates - proxy - sys-Whonix enabled)

# Flatpak configuration in the system template (immutable) #

export all_proxy=http://127.0.0.1:8082/
#This opens a communication channel through the sys-Whonix proxy connection

flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
#This adds a temporary Flatpak repository address (config.system)

export http_proxy=http://127.0.0.1:8082/
gnome-software

The template should now be able to install any Flatpak app and be deployed without changes persisting outside the template.

Flatpak configuration in a user space (deployment for persistence in AppVM Qubes)

The rest of the configuration and app installation must be done from an AppVM or StandaloneVM created from the template.

flatpak remote-add --user --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo

This adds the Flatpak repository address (user space configuration)

gnome-software

The store should now display the applications from the Debian repository and include the Flathub catalog. The goal is to ensure that in the installation source selector in the upper right corner, alongside the traditional (deb) option, the option for (flatpak) should appear, but with the label "user." This means that the app will be installed in the user space of the AppVM and will remain even after the qube is restarted.

Manual update of the Flatpak container and runtime

Note: It is recommended to disable the automatic updates option in the GNOME Store for template mode, as changes will not persist in Qubes created from them and will only be a waste of internet bandwidth.

To update manually in all cases, run the command in a terminal:

flatpak upgrade -y

Regards,