What is Signal?
Signal is an encrypted instant messaging and voice calling application for Android and iOS. It uses end-to-end encryption to secure all communications to other Signal users. Signal can be used to send and receive encrypted instant messages, group messages, attachments and media messages. Users can independently verify the identity of their messaging correspondents by comparing key fingerprints out-of-band.
Signal is developed by Signal Technology Foundation and Signal Messenger LLC. The mobile clients for are published as free and open-source software under the GPLv3 license, while the desktop client and server are published under the AGPL-3.0-only license.
CAUTION: Before proceeding, please carefully read On Digital Signatures and Key Verification. This website cannot guarantee that any PGP key you download from the Internet is authentic. Always obtain a trusted key fingerprint via other channels, and always check any key you download against your trusted copy of the fingerprint.
The following adapts the official Linux (Debian-based) Install Instructions from Signal’s website for Qubes.
(Optional) Create a TemplateVM (
debian-11is used as an example, but can be
[user@dom0 ~]$ sudo qubesctl --skip-dom0 --targets=debian-11 --show-output state.sls update.qubes-vm
Open a terminal in Debian 11 (or your previously chosen template; note that
gnome-terminalisn’t installed by default in a minimal template, in that case replace
[user@dom0 ~]$ qvm-run -a debian-11 gnome-terminal
Run the commands below in the terminal you’ve just opened.
Install the curl program needed to download the Signal signing key:
sudo apt install curl
We need a notification daemon, otherwise Signal will hang the first time you receive a message when the window doesn’t have the focus (alternatively you could install
sudo apt install dunst
Download the Signal signing key (we need to pass the
curlas TemplateVMs can only access internet through a proxy at localhost/127.0.0.1 port 8082):
curl --proxy 127.0.0.1:8082 -s https://updates.signal.org/desktop/apt/keys.asc | gpg --dearmor | sudo tee -a /usr/share/keyrings/signal-desktop-keyring.gpg > /dev/null
Add the Signal repository (Signal don’t offer a
buster/bullseyerepository - they use
xenial, but this doesn’t affect Debian users):
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/signal-desktop-keyring.gpg] https://updates.signal.org/desktop/apt xenial main' | sudo tee -a /etc/apt/sources.list.d/signal-desktop.list
Then fetch all repositories (now including the newly added Signal repository), bring the TemplateVM up-to-date, and finally install Signal:
sudo apt update && sudo apt full-upgrade && sudo apt install --no-install-recommends signal-desktop
A bit more work is required in case you used a minimal template for the TemplateVM above:
signal-desktoprequires at least
libgtk-3-0to run. Those dependencies are automatically installed when installing
xfce4-notifyd, but if you installed
dunstyou’ll have to add them:
sudo apt install libatk1.0-0 libatk-bridge2.0-0 libcups2 libgtk-3-0
If you haven’t done so already,
qubes-core-agent-networkingmust be installed for networking to work in qubes based on minimal templates:
sudo apt install qubes-core-agent-networking
Then optionally install the following packages for convenience of handling files (
zenityis needed by the Qubes OS functions in
qubes-core-agent-nautilusto show the progress dialog when moving/copying files):
sudo apt install nautilus qubes-core-agent-nautilus zenity
Shutdown the TemplateVM (substitute your template name if needed):
[user@dom0 ~]$ qvm-shutdown debian-11
Create an AppVM based on this TemplateVM.
With your mouse, select the
Domain: "AppVM Name"→
"AppVM Name": Qube Settings→
Applications(or in Qubes Manager
Signalfrom the left
Availablecolumn, move it to the right
Selectedcolumn by clicking the
>button and then
OKto apply the changes and close the window.
This document was migrated from the qubes-community project
- Page archive
- First commit: 08 Dec 2020. Last commit: 30 Oct 2022.
- Applicable Qubes OS releases based on commit dates and supported releases: 4.0, 4.1
- Original author(s) (GitHub usernames): taivlam, Minimalist73, awokd, taradiddles, b068931cc450442b63f5b3d276ea4297
- Original author(s) (forum usernames): @taradiddles, @taivlam
- Document license: GPLv2