Shadowfetch Linux 2.1.4 «Umbra»
APT repository
A signed APT repository at https://www.shadowfetch.com/linux/apt/. If you already run Debian and just want the Shadowfetch metapackages without reinstalling, add it and pull them with apt.
Repository
These are the fields the repository itself publishes, fromdists/umbra/Release.
- Origin
- Shadowfetch
- Label
- Shadowfetch
- Codename
- umbra
- Components
- main
- Architectures
- amd64
- Date
- Sun, 02 Aug 2026 15:03:24 UTC
Add it to an existing Debian system
The repository is signed, so the key goes into/etc/apt/keyrings/ and the source line references it withsigned-by. Nothing is added to your global trusted keyring.
curl -fsSL https://www.shadowfetch.com/linux/apt/shadowfetch.gpg.asc \
| sudo gpg --dearmor -o /etc/apt/keyrings/shadowfetch.gpg
echo "deb [signed-by=/etc/apt/keyrings/shadowfetch.gpg] https://www.shadowfetch.com/linux/apt/ umbra main" \
| sudo tee /etc/apt/sources.list.d/shadowfetch.list
sudo apt update
sudo apt install shadowfetch-desktop # full creative workstation
# or pick à la carte:
sudo apt install shadowfetch-themes shadowfetch-defaults
sudo apt install shadowfetch-creative-baseThe signing key fingerprint is8F13CE1535EE1F4A2916A1F73C5C900B7BE80CA1 — the same key that signs the ISO. Check it against theverification guide before you trust it.
Just the local AI stack
You do not need to reinstall to get the AI tooling. It lives inshadowfetch-defaults, so on any Debian Testing system with the repository added:
sudo apt install shadowfetch-defaultsThe package includes the Control Center, health diagnostics, hardware inspection, and optional local-model helpers such asshadowfetch-llm, shadowfetch-ai, andshadowfetch-gpu. Each command answers --helpbefore any side effect, so you can inspect what it will do and whether it needs to fetch an upstream installer.
It also lays down Shadowfetch desktop defaults. If you only want the tools and none of the opinions, that split is on the roadmap; for now the package is the whole of it. shadowfetch-themes andshadowfetch-branding are already separate, so the look stays yours unless you ask for it.
If you already run grub-btrfs, pin it first. This repository ships grub-btrfs 4.14-2, and that version sorts above the build SpiralLinux and others provide, so an upgrade can replace a Snapper setup you are happy with:
printf 'Package: grub-btrfs\nPin: origin ""\nPin-Priority: 1001\n' \
| sudo tee /etc/apt/preferences.d/keep-my-grub-btrfsWhat the repository contains
Sixteen packages in component main, architecture all except shadowfetch-ember (amd64). Everything else on a Shadowfetch system comes from upstream Debian, not from here.
| Package | Version | Section | Description |
|---|---|---|---|
grub-btrfs | 4.14-2 | admin | Include Btrfs snapshots as GRUB boot entries (vendored v4.14) grub-btrfs adds a GRUB submenu listing your Btrfs snapshots so a broken upgrade is one reboot away from a known-good system. The grub-btrfsd daemon watches the snapshot directory and regenerates the menu automatically. . Vendored from upstream Antynea/grub-btrfs v4.14 (GPL-3+) by Shadowfetch Linux because the Debian package is not currently available in testing. |
shadowfetch-ai-workspace | 2.1.3-1 | utils | private local-AI agent workspaces for Shadowfetch Linux One command creates a private agent workspace: a folder with models, jobs and notes, plus a per-workspace llama-server systemd user unit that binds 127.0.0.1 only and announces itself to Firewatch. Models are downloaded exclusively through the Welcome catalog's checksummed, user-initiated downloader - never bundled, never automatic, nothing phones home. |
shadowfetch-branding | 2.1.3-1 | misc | Shadowfetch branding assets Ships the Shadowfetch ASCII logo (consumed by fastfetch), the message-of-the-day, a versioned os-release source consumed by the live-build chroot hook during ISO assembly, and miscellaneous brand-identity files. |
shadowfetch-control-center | 2.1.3-1 | x11 | Shadowfetch Control Center - six-section shell and Fire pages The 2.1.2 "Fire Edition" Control Center: one window with six fixed sections - Ignite (Ember Mode), Watch (Firewatch), Recover (Phoenix), Agents, Drivers, and Software & Updates. Supports deep links (--page section[:tab]) with single-instance routing over the session bus, so Welcome, Firewatch, Phoenix and Fireproof all land in the same window. . Takes over /usr/bin/shadowfetch-control from shadowfetch-defaults; the 2.1.1 tools (Safe Update, System Health, Agent Studio, Agent Tools, First-run Setup, Graphics & Recovery) remain reachable inside their sections. All privileged actions go through systemd/polkit or pkexec helpers shipped by the pillar packages; the UI owns no root logic and makes no network connections. |
shadowfetch-creative-base | 2.1.3-1 | metapackages | Shadowfetch creative app baseline Installs the core set of creative applications Shadowfetch users expect: 2D, 3D, photo, audio, and video tools. Packages not currently available in Debian testing under their expected names (blender, lmms, carla, fonts-jetbrains-mono) are listed as Recommends so install doesn't fail — Flatpak fallbacks are offered in the welcome wizard. |
shadowfetch-defaults | 2.1.3-1 | misc | Desktop defaults, Control Center integration, health checks, and local model helpers |
shadowfetch-desktop | 2.1.3-1 | metapackages | Shadowfetch creative workstation (KDE Plasma edition) Shadowfetch is a Debian-based Linux distribution for visual artists, musicians, and video creators. This meta-package installs the full Shadowfetch desktop experience, including the KDE Plasma session, the creative-app baseline, themes, branding, and the welcome tool. |
shadowfetch-ember | 2.1.3-1 | admin | Shadowfetch Ember Mode engine (one switch, auto-return to Balanced) Ember Mode is the Fire Edition speed switch. When armed it holds the 'performance' power profile via power-profiles-daemon (falling back to the cpupower governor on hardware without a ppd performance profile), pauses a small curated list of background services (PackageKit, fwupd, ModemManager -- each behind a gate condition, each crash-safe), and tilts CPU scheduling toward the user session with a runtime CPUWeight=40 drop-in on system.slice. . It always returns to Balanced: the profile hold dies with the daemon's D-Bus connection, an idempotent restore tool undoes every recorded mutation as ExecStartPre and ExecStopPost, an idle watchdog (driven by work-only load figures from Firewatch, never by chassis temperature) extinguishes after ten quiet minutes, and every mutation is --runtime/tmpfs so a power cut reverts by reboot. . Status is published read-only on the system bus as com.shadowfetch.Ember1. The active console user can flip the switch without a password (polkit rule); sampling, the effective-load index and the flame display belong to shadowfetch-firewatchd, and the switch UI lives in the Shadowfetch Control Center. |
shadowfetch-fireproof | 2.1.3-1 | admin | Shadowfetch Fireproof safe system updates Fireproof is how Shadowfetch Linux updates itself. Opening the analyze screen takes no apt lock and downloads nothing: the pending upgrade is simulated read-only (python3-apt, same resolver as apt), holds surface as pinned, library renames collapse to one line, and critical packages are flagged red. The dpkg lock is taken only at commit, where the approved change-set hash is re-validated first. . Updates are wrapped in a Phoenix Point automatically by snapper's own apt hooks - Fireproof creates zero snapshots of its own, it only names the first pre-snapshot of the transaction as the rollback target. After the commit a headless verify battery checks dpkg consistency, initrd freshness, GRUB, dkms modules, newly failed services, and the network; if the desktop ever fails to come back, the next boot opens recovery at exactly the right Point. One command (fireproof) drives everything the page can do. No telemetry, no unattended downloads or installs. |
shadowfetch-firewatchd | 2.1.3-1 | admin | Shadowfetch Firewatch telemetry daemon The always-on sensor source behind the Firewatch page of the Shadowfetch Control Center and the single source of the ELI/flame level that Ember Mode consumes. Publishes org.shadowfetch.Firewatch1 on the system bus: CPU/RAM/PSI, hwmon temperatures and fans, RAPL package watts, whole-GPU stats, a per-application heat map with human display names and icons, local llama-server model usage with tokens per second, storage health via smartctl and nvme smart-log, and thermal-throttle events. . The daemon is read-only against the system and generates zero network traffic except polling llama-server metrics on 127.0.0.1. NVIDIA telemetry uses python3-pynvml when present (a Recommends, never a hard dependency) and reports whole-GPU statistics only. |
shadowfetch-hwscan | 2.1.3-1 | utils | Shadowfetch hardware and AI capability scanner One scanner, one fact file. Reads CPU flags, cores, RAM and GPUs using unprivileged sysfs and /proc reads plus two time-boxed local probes (vulkaninfo --json and nvidia-smi, 3 s each, failure means "unknown"), and writes the world-readable fact file /var/lib/shadowfetch/hwscan.json that every Shadowfetch surface reads: the Ignition AI Workstation card, the Welcome model cards, and the Control Center Agents and Drivers pages. . Every VRAM figure carries a source label (measured, estimated, shared or unknown), the verdict wording never calls slow hardware comfortable, and the deterministic recommendation table is pinned by fixture unit tests run at build time. Capabilities at rest only: Firewatch owns every runtime number. Nothing here talks to the network. |
shadowfetch-menus | 2.1.3-1 | misc | Shadowfetch seven-category application launcher XDG menu merge-dir drop-in that replaces the stock top-level launcher categories with the seven Shadowfetch sections: Create, Develop, Communicate, Play, Protect, System, and AI and Agents, plus the preserved Lost & Found (OnlyUnallocated) catch-all so no application can ever disappear from the menu. . Ships /etc/xdg/menus/applications-merged/shadowfetch-launcher.menu and the seven matching .directory files. plasma-workspace's own menu conffile is never touched, and kmenuedit user edits always win over this file (the stock DefaultMergeDirs merge happens before the kmenuedit MergeFile merge). |
shadowfetch-nvidia | 2.1.3-1 | metapackages | Shadowfetch NVIDIA driver bundle Pulls in the proprietary NVIDIA stack used by Shadowfetch by default. A first-boot hook removes this stack if no NVIDIA GPU is detected, so it is safe to install on non-NVIDIA hardware. |
shadowfetch-phoenix | 2.1.3-1 | admin | Shadowfetch Phoenix Recovery (safety pillar) Phoenix Recovery for Shadowfetch Linux 2.1.2 "Fire Edition". On a Btrfs root it arms snapper at first boot (so Debian snapper's shipped 80snapper apt hook wraps every dpkg run in pre/post Phoenix Points), keeps free space ahead of package transactions (79phoenix-space, sorted before 80snapper), and restores any Point crash-atomically: snapshot-aside, then a single renameat2(RENAME_EXCHANGE) swap, so an @ subvolume exists at every instant and a power cut can never leave the machine unbootable. Restore is supported from inside the "Last Known Good Flame" read-only snapshot session. Also ships the user-scope Plasma desktop reset (personal files untouched, undoable by construction) and the privacy-safe recovery report exporter. Nothing here makes a network connection. |
shadowfetch-themes | 2.1.3-1 | x11 | Shadowfetch dark color scheme and look-and-feel Ships the Shadowfetch Dark KDE color scheme (signature violet accent on near-black background) and a minimal Plasma look-and-feel package (org.shadowfetch.dark) that bundles the scheme with sensible Plasma defaults: Breeze widgets, Papirus-Dark icons, breeze-dark plasma theme. |
shadowfetch-welcome | 2.1.3-1 | x11 | Shadowfetch first-boot welcome experience A simple PyQt6 application launched on first login that walks the user through accent color selection, optional Flatpak application installs, and other first-run setup. |
What the metapackages pull in
A metapackage installs nothing itself; it is a list of dependencies. So that the list is not a surprise, here it is in full.
shadowfetch-creative-basekrita, inkscape, audacity, kdenlive, ffmpeg, fonts-intershadowfetch-desktopshadowfetch-themes (= 2.1.3-1), shadowfetch-defaults (= 2.1.3-1), shadowfetch-branding (= 2.1.3-1), shadowfetch-welcome (= 2.1.3-1), shadowfetch-creative-base (= 2.1.3-1), kde-plasma-desktop, sddm, pipewire, pipewire-pulse, wireplumber, network-manager, flatpak, plasma-discover-backend-flatpakshadowfetch-nvidianvidia-driver, nvidia-settings, nvidia-vaapi-driver, libnvidia-encode1, firmware-nvidia-gsp
Or install the whole thing
The repository is the à la carte route. The full workstation - installer, theme, first-boot wizard, privacy defaults and local AI already set up - ships as the ISO.