Intro

Flatpak manifest for building the GUI of opensnitch, this is only useful when opensnitch daemon is running on the host (or a remote host).

Local build

1. Install Flatpak tooling and runtimes: flatpak install -y flathub org.kde.Platform/6.11 org.kde.Sdk//6.11 com.riverbankcomputing.PyQt.BaseApp/6.11

2. Build the package: flatpak-builder --user --install --force-clean build-dir io.github.evilsocket.opensnitch.yml

Running it

3. Run it: flatpak run io.github.evilsocket.opensnitch

Submitting to flathub

This package does not meet the criterias to be included into Flathub: https://docs.flathub.org/docs/for-app-authors/requirements#host-dependent-applications

It is a GUI program that has no use without opensnitch daemon running either on the host, or on a remote host. Opensnitch is not popular enough that users are asking for the UI.

Notes

Default listening address

The package has its .desktop patched to listen on 127.0.0.1:50051 instead of the default /tmp/osui.sock which can't work due to flatpak sandbox.

Make sure to change /etc/opensnitchd/default-config.json to connect to 127.0.0.1:50051 instead of /tmp/osui.sock.

Use flatpak-builder binary from flatpak

On Bluefin Dakota, install and use flatpak run org.flatpak.Builder instead of flatpak-builder, otherwise there is a sandboxing error.

Initializing build dir
error: fchownat: Operation not permitted