In development
Tarn for Linux
- Shell
- Native Shell 0.5.0, GTK 4
- Engine
- WebKitGTK 6.0 from the distribution
- Packages
- .deb, .rpm, AUR PKGBUILD
- Distributions
- Debian 13, Ubuntu 26.04, Fedora 43, Arch
- Checked in
- Docker under Xvfb

What works on Linux today?
The checks ran in a Fedora 43 container under Xvfb, and the packages were installed and started on Debian 13, Ubuntu 26.04, Fedora 43 and Arch.
- Sidebar with tabs, spaces and profiles, each profile with its own website data
- A private space in an ephemeral session: cookies, localStorage and IndexedDB reach no file
- Shield: Standard, Strict and Lockdown, private-network blocking and HTTPS-only on any port
- Find in page, zoom, downloads, prompts that name the asking site, and TLS errors that always fail

Shield per site, with the same three levels as on macOS. 
Settings: search engine, default Shield level and what to block. 
Find in page highlights every match. 
The private space keeps its website data in memory.
How is it built?
The window state lives in the shared browser-core crate; the Linux app only renders it. Pages run in Tarn's own web-view component on WebKitGTK, with Shield's rules compiled into WebKit content filters. Website data lives in $XDG_DATA_HOME/tarn/webkit, in folders only you can read.
How does it differ from macOS?
Same features and the same Shield, with a few gaps WebKitGTK and the packaging choice bring.
- No app sandbox: the shell runs as your user from a distribution package; there is no Flatpak or AppImage
- Prompts from a cross-origin frame show the top page's origin, and such permissions are never remembered
- A file saved in the private space stays in ~/Downloads after the space closes
Can I build or try it?
Yes, with access to the repository and Docker; no Linux desktop is needed. The same scripts build the packages.
docker build -t tarn-linux-fedora -f linux/docker/fedora.Dockerfile linux/docker
linux/scripts/cargo.sh test --locked && linux/scripts/test-display.sh
linux/packaging/build-all.sh deb-debian|deb-ubuntu|rpm|archQuestions
Can I install Tarn on Linux?
Not from a release yet. The repository builds .deb packages for Debian 13 and Ubuntu 26.04, an .rpm for Fedora 43 and an AUR PKGBUILD, but none is published.
Which engine does Tarn use on Linux?
WebKitGTK 6.0 from your distribution. Tarn never ships WebKit itself, so your distribution patches it.
Why no Flatpak or AppImage?
By decision. Distribution packages depend on the distribution's WebKitGTK, so the engine stays patched by the distribution rather than by Tarn.
Is the Linux app the same as the Mac app?
Same features and the same Shield on the same Rust core, with a different interface layer: Native Shell with GTK 4 widgets instead of GPUI.
Has it run on a real desktop?
No. It has been checked in Docker under Xvfb, and the packages were installed and started on four distributions. A real desktop, HiDPI and input methods are still open.
What it does not do yet
- Not released, and never run on a real Linux desktop: only in Docker under Xvfb.
- HiDPI, input methods and screen readers are not checked yet.
- amd64 packages are not built yet.
- The tests ran with WebKitGTK's bubblewrap sandbox turned off; the app does not turn it off, but it has not run with it on.
- No extensions, as on iOS and Android.
- data: and about: navigations without a user gesture are treated as frames and allowed, because WebKitGTK does not say whether a navigation targets the main frame.
Last reviewed
Try Tarn on your Mac
No account to make and nothing sent home. macOS 14 or later; other platforms are in development.