Linux · AppImage, deb and APT · 2.2.0

ShadowCode for Linux

ShadowCode for Linux (shadowcode/linux) is a ShadowCode download. The original ShadowCode: an AppImage you can run on most distributions, or a Debian package from a signed APT repository that updates with apt upgrade. Both carry the publisher's Ed25519 signature, checked before anything runs.

ShadowCode catalog page.

Facts.

Version
2.2.0
Architectures
x86_64 (amd64) and 64-bit ARM (aarch64, arm64)
Packages
AppImage, Debian package, APT repository
Verification
Ed25519 publisher signature; signed APT repository

Requirements.

  • Linux with glibc 2.39 or newer (Ubuntu 24.04 or later, Debian 13, and similar).
  • Git. For GPU inference, a Vulkan driver (libvulkan1); bubblewrap for the full shell sandbox.

This version.

  • Shell commands run in a bubblewrap sandbox with an empty home folder; without bubblewrap they fall back to Landlock or ask you to turn on Require sandbox.
  • Local models use llama.cpp with Vulkan and CPU backends.
  • API keys can move into your desktop keyring (GNOME Keyring, KWallet, KeePassXC).
  • The AppImage installer checks the new version opens before it keeps it, and puts everything back if it doesn't.

Install.

Debian and Ubuntu: the APT repository

Add the signed repository once; apt upgrade then keeps ShadowCode current. Check the key's fingerprint against release/trust/APT-SIGNING-KEY in the repository before trusting it.

sudo install -d -m 0755 /etc/apt/keyrings
curl -fsSLo /tmp/shadowcode-archive-keyring.gpg \
  https://shadowfetchstudio.github.io/ShadowCode/apt/shadowcode-archive-keyring.gpg
gpg --show-keys --with-fingerprint /tmp/shadowcode-archive-keyring.gpg
sudo install -m 0644 /tmp/shadowcode-archive-keyring.gpg /etc/apt/keyrings/
sudo tee /etc/apt/sources.list.d/shadowcode.sources >/dev/null <<'EOF'
Types: deb
URIs: https://shadowfetchstudio.github.io/ShadowCode/apt
Suites: stable
Components: main
Architectures: amd64 arm64
Signed-By: /etc/apt/keyrings/shadowcode-archive-keyring.gpg
EOF
sudo apt update && sudo apt install shadow-code

The fingerprint is 1BC0 7B5E CFDB 5146 73A2 96FB 021C AB3F 2F7A 1F61; stop if yours differs.

Any distribution: the AppImage

Download the AppImage for your machine and its four signature files into one folder, then run the installer from a trusted copy of ShadowCode's installer bundle. It verifies the publisher signature before it runs anything, installs to ~/Applications and keeps your settings. The exact steps are in the README: github.com/ShadowfetchStudio/ShadowCode#appimage-recommended

bash /path/to/trusted-bundle/scripts/install-appimage.sh ~/Downloads/ShadowCode_2.2.0_amd64.AppImage

Downloads.