Isn't it a pity there is no .rpm to download from the OFFICIAL signal.org?

The signal repository referenced by Fedy provide pacakge that are built from sources against the user Fedora release. (so it’s not re-using the deb package).

The repository is provided by the opensuse OBS project. That is an equivalent of the COPR repository.

I love this, except nothing for F44 yet. I’m looking in the right place, right?

@pdestefa, Terra’s works:

  1. #!/usr/bin/env sh
    rpm -qf $(command -v signal-desktop) \
    	--queryformat "$(
    		cat <<'EOF'
    Name: %{NAME}
    Version: %{VERSION}
    Release: %{RELEASE}
    Architecture: %{ARCH}
    Install Date: %{INSTALLTIME:date}
    Size: %{SIZE}
    Signature: %{SIGPGP:pgpsig}
    Source RPM: %{SOURCERPM}
    Build Date: %{BUILDTIME:date}
    Build Host: %{BUILDHOST}
    Packager: %{PACKAGER}
    Vendor: %{VENDOR}
    EOF
    	)"$'\n' | yq -P
    
  2. Name: signal-desktop
    Version: 8.5.0
    Release: 1.fc44
    Architecture: x86_64
    Install Date: Fri 01 May 2026 15:43:34 BST
    Size: 486632565
    Signature: EdDSA/SHA256, Wed 01 Apr 2026 23:52:35 BST, Key ID 00cdab43de226d6f
    Source RPM: signal-desktop-8.5.0-1.fc44.src.rpm
    Build Date: Wed 01 Apr 2026 23:46:28 BST
    Build Host: d5fe768a149d
    Packager: junefish <june@fyralabs.com>
    Vendor: Terra
    

Still seems to open on openSUSE from extracted .deb :smiley:

8.8.0: https://updates.signal.org/desktop/apt/pool/s/signal-desktop/signal-desktop_8.8.0_amd64.deb

I would never use Signal. It’s open-source ok, but that doesn’t mean it’s not in bed with some countries secret services.

i have asked for signal rpm or flatpak somany times but they never provide clear answer i would only request you to again create a feature request

Then don’t use it, nobody is making you.

Out of curiosity, do you have any basis for such a claim? If not, I would suggest reading the paper on the double ratchet algorithm and understanding its security properties before making such a claim. It’s a beautiful design.

WTF is Terra? … Hmm, says they allow anon contributions, but otherwise seems legit. I prefer Fedora; but I guess I already make an exception for Signal. I feel like OpenSUSE repo was a pretty easy ask, though; Terra is another significant step. I do like Rust, though. Okay, thanks for the cryptic pointer! I’ll try it.

Yes, I have. But you’re right, one has to use whatever one feels comfortable with.

@pdestefa, I don’t understand your response. If I can assist more, please elaborate.


@kunzlata, a citation would demonstrate that you have, whilst obviously not requiring that one ask for proof. I doubt that merely affirmative confirmation (that you do) is of particular use to anyone.

Though, I’d caution you that even your original comment wasn’t whatsoever related to the topic of this discussion; this is about a packaging format. Your comment would have been more applicable to a standalone Privacy Guides thread.

I was just talking myself into trying the Terra repo. Never heard of them, despite running RH/Fedora for 40 years, so I needed to do some research. So far so good. Again, thanks for mentioning them.

In my earlier post, I assumed that everyone here would was using either a dev copr, an (unauthorized) flatpak, or the OpenSUSE Signal repo/copr, which is what I’ve been using for a while. So, when I said, “I’m looking in the right place", right?” I was being very cryptic and assuming everyone new what I meant. I was referring to this location: /repositories/network:/im:/signal - openSUSE Download , and you can see F44 is missing. Both F43 and rawhide subrepos don’t work on F44; I tried. Across past updates, I didn’t notice a problem with this source for Signal RPMs, but this time, I went there and couldn’t find what I expected.

Anyway, sorry for the incomprehensible post. Thanks for following up.

@pdestefa, that’s not unreasonable. I was, too, but became infuriated with the poor maintenance of the Flatpak package:

I genuinely have no idea how anyone would diagnose a crash with the Flatpak, without Debug packages. It’s not as if DebugInfoD is able to assist there.

For comparison, considering that similar problems have been remediated on Terra’s side within less than a sennight, I am able to rely upon them better:

IDK yet whether I’d trust them over RPMFusion, but they work for Signal, at least.