Post-install

Just logged in? The ordered walkthrough is After you log in (Unwoke setup, not GNOME Settings). This page is the command dump. Same slot as on secureblue.dev. Overlay steps first, then theirs. Strict apps without a store: ujust install-proton, ujust install-ivpn, ujust install-mullvad, or ujust install-vendor NAME.

After you log in

Unwoke SecureBlue

After the first rebase reboot, a notification (and MOTD) says when the signed image is staged. It repeats every login and every 15 minutes until you reboot. App grid → Unwoke setup → Reboot now.
A first-login window lists the locks. Nothing turns off unless you pick it. Hide it on login, or open Unwoke setup / ujust setup later. ujust why is “this is a lock, not a bug.” Stock leftover (Secure Boot key, kargs, USBGuard) does not change overlay locks. Tutorial buttons open Tutorials.
Confirm the overlay:

ujust setup
ujust why
ujust unwoke-status
ujust audit-unwoke
ujust audit-secureblue

Full toggle table: Features. Restart the house browser after policy changes. If something “broke,” it is usually a default lock — the setup menu maps the usual ones and does not auto-unlock.

Default off (stock has these on): Flathub, Homebrew, Bluetooth, toolbox/distrobox, camera/mic hardware, Fedora countme, connectivity-check, DHCP hostname, file thumbnails. Default on (loosen with off): Flatpak lockdown, Origin/Trivalent policy packs (including no hyperlink ping), Origin Bubblejail, isolation, extra sandbox, Trivalent Network Service Sandbox + referrer flags. Browserless only: host browsers stay blocked until ujust set-allow-browsers on ALLOW.

If this happens	Run
Site needs JIT	`ujust set-brave-jitless off`
Need camera / mic / USB in the browser	`ujust set-brave-devices off`
Need passwords / autofill	`ujust set-brave-hardening off`
Need extensions	`ujust set-brave-extensions allow`
Need Flathub (stock-like)	`ujust set-flathub verified`
Need unfiltered Flathub	`ujust set-flathub full`
Need Steam	`ujust install-steam` (asks overlay locks)
Play a game then lock again	Click Steam. Close it. Restore is automatic.
Need Bluetooth	`ujust set-bluetooth on`
Need toolbox / distrobox	`ujust set-toolbox on`
Need Avahi (.local) or a modem	`ujust set-extra-daemons on`
Hotel Wi-Fi login page never appears	`ujust set-connectivity-check on`
LAN needs this PC’s hostname	`ujust set-dhcp-hostname on`
Files has no previews	`ujust set-thumbnails on`
Want Fedora countme	`ujust set-countme on`
Want stock deprecation / Flathub-setup notices	`ujust set-stock-nags on`
Flatpaks are broken	`ujust set-flatpak-lockdown off`
Want wallpaper / accent back	`ujust set-unwoke-theme apply`
WebGL/WebGPU needed	`ujust set-brave-isolation off`
Bubblejail breaks GPU/audio (Origin)	`ujust set-brave-bubblejail off`
Trivalent clears cookies on exit	`ujust set-trivalent-network-sandbox off`
Need screen capture / JS optimizer	`ujust set-brave-sandbox off`
Need chrome://devtools locked	`ujust set-brave-devtools lock`
Need Homebrew	`ujust set-brew on`
Need webcam / mic	`ujust set-camera-mic on`
Need wheel on the greeter	`ujust set-admin-split off`
Create a daily (non-wheel) user	`ujust set-admin-split add NAME`
Browserless: install a host browser	`ujust set-allow-browsers on ALLOW`

Lock screen / wallpaper gallery: Brand.

Stock secureblue (mirrored)

You still do their post-install: enroll their Secure Boot key if the prompt did not appear, ujust set-kargs-hardening if you rebased instead of installing from their ISO, USBGuard, optional separate wheel account. Full text, updated daily from their repo:

Their post-install (mirrored)

Canonical: https://secureblue.dev/post-install