Linux desktop (Wails/Go)
SigmaShake Desktop for Linux is a native Wails v2 / Go application backed by the system WebKitGTK WebView. It supervises ssg daemon + ssg serve and hosts the governance dashboard SPA in a standard system window — no bundled browser, no Electron, no Electrobun.
Free to download and install. A $5/month subscription unlocks every value surface; subscribe at sigmashake.com/pricing and activate it in the first-run wizard after launch.
The download CDN path is download.sigmashake.com/desktop/wails/. For a quick install, see the Install page. This page is the long-form reference — full install options, environment variables, uninstall, and legacy migration notes.
How it works
The Wails shell is a thin native binary. On launch it:
- Resolves the
ssgengine binary (bundled inbinaries/ssginside the package, or an already-installed systemssg). - Spawns
ssg daemonandssg serve, or adopts an already-healthy same-versionssg serveprocess. - Opens a WebKitGTK window pointing at
http://127.0.0.1:<port>— the dashboard served byssg serve. The dashboard SPA is not re-bundled in the app; it is served byssgitself. - Monitors the child processes and restarts them if they exit unexpectedly.
The app also ships a built-in updater that pulls from desktop/wails/ on the CDN. It downloads the full tarball, checks the SHA-256 digest, verifies the Ed25519 manifest signature, and restarts — no package manager required. The updater does not apply delta (bsdiff) patches.
Install options
Option 1 — Flatpak (recommended on Fedora, Arch, openSUSE, Steam Deck, Pop!_OS, Mint)
Our signed Flatpak channel at flatpak.sigmashake.com ships SigmaShake Desktop, sandboxed by default but with --filesystem=home access, so rules, audit data and license state live outside the sandbox. Updates come via flatpak update. The Desktop bundle includes the governed ssg engine it needs at runtime. Add the remote once:
flatpak remote-add --if-not-exists sigmashake \
https://flatpak.sigmashake.com/sigmashake.flatpakrepo
Install:
flatpak install sigmashake com.sigmashake.Desktop
Launch:
flatpak run com.sigmashake.Desktop
Updates:
flatpak updatehandles every release. The in-app updater is a no-op under Flatpak — the runtime is content-addressed and read-only.
First-time Flatpak setup? Most distros ship Flatpak preinstalled. If
flatpak: command not found, see flatpak.org/setup for your distro.
Option 2 — One-line installer (recommended for single-user installs without Flatpak)
curl -fsSL sigmashake.com/desktop/install.sh | sh
The script:
- Downloads
stable-linux-x64-SigmaShakeDesktop.tar.gzfromdownload.sigmashake.com/desktop/wails/. - Extracts the bundle to
~/.local/share/SigmaShakeDesktop(nosudo, per-user only). - Verifies the published
.sha256sidecar and confirms the bundledssgengine is a Linux ELF before replacing the installed app. - Writes a corrected Freedesktop menu entry to
~/.local/share/applications/sigmashake-desktop.desktopwith absolute paths and a properly-installed icon. - Refreshes the desktop database when your distro provides the helper.
- Launches the app when a graphical session is available. Set
SIGMASHAKE_NO_LAUNCH=1to install only.
After install, future starts are one click from your application menu (GNOME Activities, KDE Krunner, COSMIC launcher, etc.). The first-run wizard matches Windows — see the Install page.
Read the script before running it
curl -fsSL sigmashake.com/desktop/install.sh | less
Customise the install
| Env var | Effect |
|---|---|
SIGMASHAKE_DESKTOP_DIR=$HOME/Apps/SigmaShakeDesktop | Install somewhere under your home directory other than ~/.local/share/SigmaShakeDesktop. |
SIGMASHAKE_DESKTOP_BIN_DIR=$HOME/.local/bin | Put the sigmashake-desktop launcher symlink somewhere else under your user account. |
SIGMASHAKE_NO_LAUNCH=1 | Install only — do not launch the app at the end. |
Option 3 — Manual extract
For users who prefer not to pipe a script to a shell.
- Download
stable-linux-x64-SigmaShakeDesktop.tar.gzfrom sigmashake.com/desktop (CDN:download.sigmashake.com/desktop/wails/). - Extract:
tar -xzf stable-linux-x64-SigmaShakeDesktop.tar.gz. - Run:
cd SigmaShakeDesktop && ./SigmaShakeDesktop(runchmod +x SigmaShakeDesktopfirst if your shell reports "permission denied").
The bundle ships a SigmaShakeDesktop.desktop file with Exec=SigmaShakeDesktop (no absolute path), so it does not work as a one-click menu entry on its own. To add one manually:
cp SigmaShakeDesktop/SigmaShakeDesktop.desktop ~/.local/share/applications/
# Edit Exec= to the absolute path of SigmaShakeDesktop, then:
update-desktop-database ~/.local/share/applications
Do not execute the .desktop file directly in a shell — your shell will mis-read lines like [Desktop Entry] and produce errors such as [Desktop: not found].
Uninstall
One-line installer
Quit the app from the tray, then remove these three paths:
~/.local/share/SigmaShakeDesktop— the bundle~/.local/share/applications/sigmashake-desktop.desktop— the menu entry~/.local/bin/sigmashake-desktop— the launcher symlink, if you used the default bin directory
Refresh the launcher immediately:
update-desktop-database ~/.local/share/applications
Manual extract
Quit the app and delete the SigmaShakeDesktop folder you extracted.
Flatpak
flatpak uninstall com.sigmashake.Desktop
# Add --delete-data to also drop sandboxed per-user state under ~/.var/app/com.sigmashake.Desktop/
The ~/.sigmashake/ state lives on the host filesystem (via the --filesystem=home portal). To remove it:
ssg uninstall
# or delete ~/.sigmashake/ in your file manager
Optional governance data wipe
Run ssg uninstall from a shell where ssg is on PATH, or delete ~/.sigmashake/ in your file manager. This removes rules, audit logs, and license state.
Legacy AppImage / .deb packages
Older AppImage packages: delete the .AppImage file from wherever you stored it.
Older .deb packages: remove the sigmashake-desktop package with your distribution's package manager (e.g. sudo apt remove sigmashake-desktop).
After removing a legacy package, install the current version with the one-line installer above.