Skip to main content

Install on Linux

SigmaShake works on every modern Linux distribution. The right install path depends on which package manager you already use:

You're on…Recommended install
Fedora, Arch, openSUSE, Steam Deck, Mint, Pop!_OSFlatpak (sandboxed, delta auto-updates)
Debian, Ubuntu (plus derivatives)apt (system-managed, apt upgrade picks up releases)
Anywhere else, or no package managerOne-line installer (curl | sh)
Inside CI / containers / Alpine / glibc < 2.31Docker (ghcr.io/sigmashakeinc/ssg:latest)
Per-project Node toolchains, no system installnpm (pnpm add -g @sigmashake/ssg)

Free forever for individuals. No credit card, no signup, no time-limited trial. The Free tier gives you 5,000 governance evaluations per day, which covers normal use. Upgrade to Pro for unlimited evals and team-wide audit sync — but you don't need to.

Flatpak (recommended — every modern distro)​

Our signed Flatpak channel at flatpak.sigmashake.com ships both the ssg CLI and SigmaShake Desktop side-by-side. Both apps target the org.freedesktop.Platform//24.08 runtime, so they run on any Linux distro with Flatpak installed — no per-distro packaging.

One-time remote add:

flatpak remote-add --if-not-exists sigmashake \
  https://flatpak.sigmashake.com/sigmashake.flatpakrepo

Install the CLI:

flatpak install sigmashake com.sigmashake.SSG

Recommended shell alias so you can type just ssg:

alias ssg='flatpak run com.sigmashake.SSG'
# add the same line to ~/.bashrc or ~/.zshrc to persist it

Install the desktop app (optional — pairs well with the CLI):

flatpak install sigmashake com.sigmashake.Desktop
flatpak run com.sigmashake.Desktop

flatpak update picks up every future release; updates are delta-patched so the on-disk footprint stays small.

What's sandboxed? The CLI gets --filesystem=host so it can read project trees from anywhere; both apps get --share=network for hub.sigmashake.com and Workers AI. See the trust portal for the full permission audit.

APT (Debian / Ubuntu / Pop!_OS / Mint / Kali)​

curl -fsSL https://apt.sigmashake.com/sigmashake.gpg \
  | sudo gpg --dearmor -o /usr/share/keyrings/sigmashake.gpg

echo "deb [signed-by=/usr/share/keyrings/sigmashake.gpg] https://apt.sigmashake.com stable main" \
  | sudo tee /etc/apt/sources.list.d/sigmashake.list

sudo apt update
sudo apt install ssg
ssg setup

apt upgrade picks up future releases automatically. The GPG release key fingerprint is A6A1FA60DC38EE17CA443389F562E7E136D128FA — verify it at sigmashake.com/security if you want to out-of-band check before adding the repo.

One-line installer (curl | sh)​

For the CLI:

curl -fsSL https://sigmashake.com/install | sh

For SigmaShake Desktop (Electrobun bundle, registers a real Freedesktop menu entry, no sudo):

curl -fsSL sigmashake.com/desktop/install.sh | sh

Both scripts install to your home directory only — no admin elevation required. See Read the script before running it for the audit-then-run pattern.

Docker (Alpine / musl / old-glibc / CI)​

docker pull ghcr.io/sigmashakeinc/ssg:latest
alias ssg='docker run --rm -i -v "$PWD:/work" -w /work ghcr.io/sigmashakeinc/ssg:latest'
ssg --version

The image is multi-arch (linux/amd64 + linux/arm64) and bundles its own userspace, so it works on any host that runs a container runtime — Alpine, Chimera, NixOS, RHEL 7, anywhere glibc < 2.31.

npm​

pnpm add -g @sigmashake/ssg
# or: npm i -g @sigmashake/ssg

npm publishes platform-specific binaries (@sigmashake/ssg-linux-x64, @sigmashake/ssg-linux-arm64) that the coordinator package resolves at install time. Requires glibc >= 2.31 (Ubuntu 20.04+, Debian 10+).

SigmaShake Desktop (tray app)​

The desktop tray app is a separate install. The Flatpak install above pulls it alongside the CLI; everything else routes to its own page:

Verify your install​

ssg --version          # prints the installed version + build channel
ssg doctor             # checks rule directory, dashboard port, hooks
ssg dashboard          # opens the local approval UI at http://127.0.0.1:5599

If ssg --version reports a version older than the one on GitHub Releases, run ssg update (or update via your package manager — flatpak update, sudo apt upgrade, brew upgrade ssg, pnpm up -g @sigmashake/ssg).

Uninstall​

You installed via…Uninstall
Flatpakflatpak uninstall com.sigmashake.SSG com.sigmashake.Desktop (add --delete-data to drop sandbox state)
aptsudo apt remove ssg
One-line installerssg uninstall (the script registered it on PATH)
Dockerdocker rmi ghcr.io/sigmashakeinc/ssg:latest
npmpnpm rm -g @sigmashake/ssg

ssg uninstall removes the ~/.sigmashake/ state directory (license JWT, audit DB, models). It does not delete project-level .sigmashake/rules/ files — those belong to your repos.