Apps

Proton.me without a store

Keep locked Same idea as stock ujust install-steam: a wizard, not Bazaar. Strictest path is the house browser. Desktop RPMs are a named downgrade. Flathub wrappers are unverified — we do not use them.

Secure default. ujust install-proton or Unwoke setup → Proton.me → open Mail/Pass/Calendar/Drive in Trivalent. Zero extra packages. Zero extra locks.

  1. Web first (recommended)

    ujust install-proton

    Choose option 1. Opens mail, pass, calendar, drive on proton.me in Trivalent. Calendar, Drive, Docs, Meet, Lumo, Wallet have no official Linux desktop we will wrap.

  2. VPN: WireGuard, not the GUI

    Option 2. Download Proton’s WireGuard file (you must be signed in), import in GNOME/KDE Network Settings. Keep system DNS on the tunnel. Do not enable Trivalent DoH. That is stricter than their Fedora GUI RPM and stricter than Flathub com.protonvpn.www.

  3. Desktop Mail or Pass only if you insist

    Options 3–4 download Proton’s official RPM, check SHA512 from their version.json, then ask before:

    • ujust set-unconfined-userns on (Electron often needs it; default No)
    • rpm-ostree install (reboot)

    Mismatch hash → stop. Flathub stays off. Global lockdown stays on. Version and SHA512 come from Proton’s live JSON (not a number we typed). Factory probe: ujust check-vendor-installers.

  4. What we will not automate

    Unverified Flathub me.proton.*, Snap, unofficial Drive AppImage, curl | sh CLIs, Distrobox. Search GNOME for “Proton” to open this wizard.

From the vendor list (watched and healed twice a day). ujust install-vendor NAME or Setup → Strict apps. Group: proton.

Probe: ujust check-vendor-installers. New app = stanza in vendor-installers.json, not a one-off tutorial fork.