The redesign of the Flathub app store for Linux is now live, bringing with it a refreshed look along with showing verified developers and their apps. A much needed change that really does look a whole lot better.
With the new launch everything just looks a lot cleaner, and having a proper verification system in place means you will know if you're downloading something maintained by the creators and not a third-party. There's even a category just for verified apps.
Pictured above is an example of the Games category which features not just games but launchers, emulators and more, everything related to gaming. You can see the blue ticks to clearly show verified apps.
While the front-page isn't massively different, the biggest visual change is to individual app pages. There's quite a bit more detail included on them like install size, download size, how many people have installed it, direct links to the website and documentation for help, a graph of installs over time, a collapsible changelog of the most recent update and more.
On Mastodon, the Flathub maintainer Bartłomiej Piotrowski mentioned "A redesign of #Flathub is live! Drop by https://flathub.org to see all the shiny new things, such as developer verification and download graphs. There's more under the hood, including the long awaited subsets to enable only verified or FLOSS apps. Stay tuned for more updates!".
Flathub has quickly become my go-to place first to find downloads for any apps on Linux now. Especially with it being the main way to install extra apps on the Steam Deck too (through Discover), it's nice to have things the same across different systems.
Quoting: pentarctagonWhat does it mean to be verified?
It's explained on the about page for now https://flathub.org/about
That's at least the non technical description, if you want the technical one, let me know.
Quoting: razzeQuoting: pentarctagonWhat does it mean to be verified?
It's explained on the about page for now https://flathub.org/about
That's at least the non technical description, if you want the technical one, let me know.
I think I want the technical description then? What measures are used to determine that "the app is published on Flathub by its original developer or a third party approved by the developer"?
Legitimately, I've gotten annoyed whenever I need to install packages to my host system nowadays.
Quoting: pentarctagonI think I want the technical description then? What measures are used to determine that "the app is published on Flathub by its original developer or a third party approved by the developer"?I think it's domain ownership? Similar to how they base the top level domain in their tld.packager.package format name for flatpak apps.
Quoting: pentarctagonQuoting: razzeQuoting: pentarctagonWhat does it mean to be verified?
It's explained on the about page for now https://flathub.org/about
That's at least the non technical description, if you want the technical one, let me know.
I think I want the technical description then? What measures are used to determine that "the app is published on Flathub by its original developer or a third party approved by the developer"?
There are three ways right now:
1. Manual
The flathub team verifies the ownership of the app and that will be shown on the website
2. Website
Your flathub has an id for example "tv.kodi.Kodi" we take that and make kodi.tv out of it. Then we ask you to store a specific string we generate at https://kodi.tv/.well-known/org.flathub.VerifiedApps.txt
And we then check that that file exists and contains the generated string
It's similar to verifying a website with google for e.g.
3. Gitlab/Github accounts
Some apps are hosted on gitlab/github, you can login with those as login providers. Which allows us to check, if your account has rights to maintain those repos defined by your app id. For e.g. your app id being "com.github.jmlich.geotagging" would mean, that you need to have access to the repo at https://github.com/jmlich/geotagging
That's what we check via the corresponding apis
Quoting: razzeQuoting: pentarctagonQuoting: razzeQuoting: pentarctagonWhat does it mean to be verified?
It's explained on the about page for now https://flathub.org/about
That's at least the non technical description, if you want the technical one, let me know.
I think I want the technical description then? What measures are used to determine that "the app is published on Flathub by its original developer or a third party approved by the developer"?
There are three ways right now:
1. Manual
The flathub team verifies the ownership of the app and that will be shown on the website
2. Website
Your flathub has an id for example "tv.kodi.Kodi" we take that and make kodi.tv out of it. Then we ask you to store a specific string we generate at https://kodi.tv/.well-known/org.flathub.VerifiedApps.txt
And we then check that that file exists and contains the generated string
It's similar to verifying a website with google for e.g.
3. Gitlab/Github accounts
Some apps are hosted on gitlab/github, you can login with those as login providers. Which allows us to check, if your account has rights to maintain those repos defined by your app id. For e.g. your app id being "com.github.jmlich.geotagging" would mean, that you need to have access to the repo at https://github.com/jmlich/geotagging
That's what we check via the corresponding apis
Alright, thanks.
For apps hosted on Flathub's github and built from there, is there a way to get verified? In this case https://github.com/flathub/org.wesnoth.Wesnoth - I assume manual verification is only done rarely when specifically needed for some reason so wouldn't be applicable here; we could have the generated string stored on our website, but I don't know where that string can be found; and when I log into Flathub with my github account (which is a repository owner of https://github.com/wesnoth), it shows me as having no authored apps and there's no other options I see either in my Flathub account or on the app page at https://flathub.org/apps/org.wesnoth.Wesnoth.
Quoting: pentarctagonQuoting: razzeQuoting: pentarctagonWhat does it mean to be verified?
It's explained on the about page for now https://flathub.org/about
That's at least the non technical description, if you want the technical one, let me know.
I think I want the technical description then? What measures are used to determine that "the app is published on Flathub by its original developer or a third party approved by the developer"?
There are three ways right now:
1. Manual
The flathub team verifies the ownership of the app and that will be shown on the website
2. Website
Your flathub has an id for example "tv.kodi.Kodi" we take that and make kodi.tv out of it. Then we ask you to store a specific string we generate at https://kodi.tv/.well-known/org.flathub.VerifiedApps.txt
And we then check that that file exists and contains the generated string
It's similar to verifying a website with google for e.g.
3. Gitlab/Github accounts
Some apps are hosted on gitlab/github, you can login with those as login providers. Which allows us to check, if your account has rights to maintain those repos defined by your app id. For e.g. your app id being "com.github.jmlich.geotagging" would mean, that you need to have access to the repo at https://github.com/jmlich/geotagging
That's what we check via the corresponding apis
Quoting: pentarctagonQuoting: razzeQuoting: pentarctagonQuoting: razzeQuoting: pentarctagonWhat does it mean to be verified?
It's explained on the about page for now https://flathub.org/about
That's at least the non technical description, if you want the technical one, let me know.
I think I want the technical description then? What measures are used to determine that "the app is published on Flathub by its original developer or a third party approved by the developer"?
There are three ways right now:
1. Manual
The flathub team verifies the ownership of the app and that will be shown on the website
2. Website
Your flathub has an id for example "tv.kodi.Kodi" we take that and make kodi.tv out of it. Then we ask you to store a specific string we generate at https://kodi.tv/.well-known/org.flathub.VerifiedApps.txt
And we then check that that file exists and contains the generated string
It's similar to verifying a website with google for e.g.
3. Gitlab/Github accounts
Some apps are hosted on gitlab/github, you can login with those as login providers. Which allows us to check, if your account has rights to maintain those repos defined by your app id. For e.g. your app id being "com.github.jmlich.geotagging" would mean, that you need to have access to the repo at https://github.com/jmlich/geotagging
That's what we check via the corresponding apis
Alright, thanks.
For apps hosted on Flathub's github and built from there, is there a way to get verified? In this case https://github.com/flathub/org.wesnoth.Wesnoth - I assume manual verification is only done rarely when specifically needed for some reason so wouldn't be applicable here; we could have the generated string stored on our website, but I don't know where that string can be found; and when I log into Flathub with my github account (which is a repository owner of https://github.com/wesnoth), it shows me as having no authored apps and there's no other options I see either in my Flathub account or on the app page at https://flathub.org/apps/org.wesnoth.Wesnoth.
Do you have commit access to https://github.com/flathub/org.wesnoth.Wesnoth if you have, it should show up, when your logged in.
Feel free to open an issue on the websites repo https://github.com/flathub/website/
See more from me