--- title: Installation --- !!! danger In order to not break your system, the default package configuration installs all profiles in complain mode. They can be enforced later. See the [Enforce Mode](/enforce) page. ## Requirements **AppArmor** An `apparmor` based Linux distribution is required. The basic profiles and abstractions shipped with AppArmor must be installed. **Desktop environment** The following desktop environments are supported: - [x] :material-gnome: Gnome Also, please note wayland has better support than xorg. **Build dependencies** * Go * lsb-release * Rsync ## :material-arch: Archlinux `apparmor.d-git` is available in the [Arch User Repository][aur]: ```sh git clone https://aur.archlinux.org/apparmor.d-git.git cd apparmor.d-git makepkg -s sudo pacman -U apparmor.d-*.pkg.tar.zst \ --overwrite etc/apparmor.d/tunables/global \ --overwrite etc/apparmor.d/tunables/xdg-user-dirs \ --overwrite etc/apparmor.d/abstractions/trash ``` The overwrite options are only required on the first install. You can use `yay` or your preferred AUR install method to update it. !!! note The following Archlinux based distributions are supported: - [x] CachyOS - [x] EndeavourOS - [x] :material-manjaro: Manjaro Linux ## :material-ubuntu: Ubuntu & :material-debian: Debian Build the package from sources: ```sh sudo apt install apparmor-profiles build-essential config-package-dev debhelper golang-go rsync git git clone https://github.com/roddhjav/apparmor.d.git cd apparmor.d dpkg-buildpackage -b -d --no-sign sudo dpkg -i ../apparmor.d_*_all.deb ``` ## :simple-suse: OpenSUSE Build and install from source: ```sh ./configure --complain make sudo make install sudo systemctl restart apparmor ``` !!! note RPM package is still a work in progress. Help is welcome. ## Partial install !!! warning Partial installation is discouraged because profile dependencies are not fetched. You may need to either switch desired `rPx` rules to `rPUx` (fallback to unconfined) or install these related profiles. (PR is welcome see [#77](https://github.com/roddhjav/apparmor.d/issues/77)) For test purposes, you can install a specific profile with the following commands. Abstractions, tunables, and most of the OS dependent post-processing is managed. ```sh ./configure --complain make sudo make profile-names... ``` [aur]: https://aur.archlinux.org/packages/apparmor.d-git [repo]: https://repo.pujol.io/ [keys]: https://repo.pujol.io/gpgkey