Pick your tier.
Download & Install.

Quick install

macOS (universal, Intel + Apple silicon) — v0.0.5 is still the latest signed Mac build; v0.0.6 universal DMG pending:

curl -fsSL https://envpod.com/download/envpod-desktop-0.0.5-mac-universal.dmg -o envpod-desktop.dmg
open envpod-desktop.dmg
# drag envpod-desktop.app into /Applications

AppImage (portable, no install):

curl -fsSL https://envpod.com/download/envpod-desktop_0.0.6_amd64.AppImage -o envpod-desktop.AppImage
chmod +x envpod-desktop.AppImage
./envpod-desktop.AppImage

Ubuntu / Debian (amd64):

curl -fsSL https://envpod.com/download/envpod-desktop_0.0.6_amd64.deb -o envpod-desktop.deb
sudo apt install ./envpod-desktop.deb

Ubuntu / Debian (arm64):

curl -fsSL https://envpod.com/download/envpod-desktop_0.0.6_arm64.deb -o envpod-desktop.deb
sudo apt install ./envpod-desktop.deb

Fedora / RHEL / openSUSE (x86_64):

curl -fsSL https://envpod.com/download/envpod-desktop-0.0.6-1.x86_64.rpm -o envpod-desktop.rpm
sudo dnf install ./envpod-desktop.rpm

Fedora / RHEL / openSUSE (aarch64):

curl -fsSL https://envpod.com/download/envpod-desktop-0.0.6-1.aarch64.rpm -o envpod-desktop.rpm
sudo dnf install ./envpod-desktop.rpm

Runtime requirements

• bubblewrap 0.9.0 or newer  (apt install bubblewrap / dnf install bubblewrap)
• Ubuntu 24.04+: unprivileged user namespaces must be allowed. If the app's preflight screen shows the apparmor_restrict_unprivileged_userns warning, run the exact sysctl it prints.
• For VS Code / Cursor: install the .deb from Microsoft's repo (not the snap — snap-confined tools can't be sandboxed in this release).

Get a license

Alpha is free to try. The paid tier unlocks unlimited projects, Mirror (overlay) write mode, per-project firewall, and per-project vault allowlist.

Already have a license? Activate it in the app's Account panel under Advanced. Paid features unlock immediately on activation — same Linux binary either way.

What's new in v0.0.6 · Linux only

Linux .deb / .rpm / AppImage shipped on 2026-05-15. The macOS universal DMG ships in a v0.0.6 follow-up build — Mac users stay on v0.0.5 until then.

• Files (GUI) bundled profile. Opens nautilus / nemo / thunar / pcmanfm / dolphin in a sandboxed wrap, locked to the env's bound paths.
• Files (CLI) bundled profile. Opens ranger / yazi / lf / nnn / mc in a lean terminal wrap — no GUI stack needed.
• Claude.ai (Kiosk) + ChatGPT (Kiosk) bundled instances. Full-screen lockdown variants of the existing web-app profiles for focus-mode usage.
• Add-Web-App wizard: three-way Window Mode picker. App window (chromeless, default) / Fullscreen (F11 to exit) / Kiosk (locked, Alt-F4 to close).
• Chromium "Set as default browser?" prompt suppressed on first launch — across browser.yaml, claude-web, chatgpt-web, the new Kiosk variants, and wizard-generated web-app profiles.
• Remove a user profile flow. A new "Remove a user profile" panel next to the Add forms — lists user-added profiles only (bundled ones can't be removed), shows which envs are affected before confirming, atomically clears web-app Chromium cookies + cache under ~/.config/envpod-web-app/<id>/.
• envpod-mcp-server (new). Standalone stdio JSON-RPC MCP server wirable into any MCP-aware AI client (Claude Desktop, Cursor, Cline, Continue, Aider, Goose). Per-workspace scope via --root; trust-mode-gated execute_command with a 28-command ReadOnly allowlist; cap-std TOCTOU-safe filesystem ops; append-only JSONL audit log. First piece of the Universal Agency Layer.

What's in this release

• Per-project sandbox: bubblewrap foundation, per-folder RW/RO pills, Mirror (overlay) or Direct write modes with Apply / Discard
• Per-project firewall — exact + .suffix host blocking via the local proxy (blocks render red in the live activity stream)
• Per-project credential vault with a named-key allowlist
• Bundled tool profiles: Terminal, Claude Code, VS Code, Cursor, Codex CLI, Continue.dev, Jupyter Lab, Browser, openclaw, Files (GUI), Files (CLI), Claude.ai (Web + Kiosk), ChatGPT (Web + Kiosk), GIMP, Blender, Krita, Audacity, LibreOffice, Obsidian, DaVinci Resolve
• Add-Web-App wizard with three Window Modes (App window / Fullscreen / Kiosk); Remove-user-profile flow with atomic web-app data cleanup
• envpod-mcp-server — stdio JSON-RPC MCP server with trust-mode-gated execute_command, cap-std TOCTOU-safe filesystem ops, append-only JSONL audit log
• Activity stream, audit counters, workspace diff, JSON audit export
• Signed auto-update (per-platform manifests on envpod.com)

Known limits (v0.0.6)

• macOS universal DMG for v0.0.6 not shipped yet — Mac users stay on v0.0.5 until the follow-up build lands. Linux x86_64 + arm64 (.deb / .rpm / AppImage) are current at v0.0.6. Native Windows build lands in a future release.
• Mirror-mode deletes don't propagate on Apply (additive sync only).
• No GPG-signed apt/rpm repositories yet — verify with the published SHA256SUMS for now.
• Snap-confined tools cannot be sandboxed — install .deb variants instead.
• envpod-mcp-server: execute_command argv is currently a 28-command ReadOnly allowlist; full sandbox::effective integration + hub-side Confirmed approval channel land in v0.0.7.