Germany's Sovereign Tech Fund invests €508,640 in Flatpak sandboxing and portals

Germany commits €508,640 to Flatpak

Germany's Sovereign Tech Agency is investing €508,640 in Flatpak through its Sovereign Tech Fund (STF), according to an announcement by Modal Collective, which is co-organizing the two-year effort with Para-Real Ltd. serving as the supporting organization. The initiative is meant to speed up Flatpak's evolution into a more secure, better-sandboxed platform for packaging and distributing Linux desktop software, and it is expected to run through the end of 2027.

The stakes are broader than a single package format. According to Modal, Flatpak is now the primary way applications are distributed on image-based operating systems such as Fedora Silverblue, openSUSE Aeon, SteamOS and GNOME OS, and it is the preferred format for the GNOME, KDE and elementary ecosystems. Work on Flatpak's security and robustness therefore flows directly into the desktop experience of a large share of Linux users.

Why the funding is needed

Flatpak is mature and, in Modal's assessment, the strongest option of its kind on GNU/Linux today, but its sandboxing still trails proprietary platforms such as Android and iOS, which benefit from far larger budgets. The announcement points to concrete shortcomings: an app granted audio output currently also gets microphone access, because the two cannot be separated, and critical areas such as networking and VPNs still have no dedicated Portals, the interfaces through which sandboxed applications request access to host resources.

Momentum has also flagged. A GNOME-focused STF project in 2023 and 2024 delivered significant progress, but development has since slowed because this kind of platform-level work demands scarce expertise and the existing maintainers are stretched thin. That bottleneck, Modal notes, also holds back the image-based operating systems that rely exclusively on Flatpak applications.

What the money pays for

The commissioned work falls into two buckets. The first is a set of new Portals:

• Audio: a static socket permission for PipeWire, a WirePlumber policy for managing device access, and a portal for audio permissions, so speaker access could be granted without microphone access.
• Network: isolation of an app's networking from the host, with static permissions for specific scopes (host, local network, internet) and ports, avoiding unnecessary exposure of local devices.
• VPN: a portal modeled on Android and iOS APIs that would let third-party VPN applications manage system-level connections.
• Writing assistance: a spell-checking portal allowing every app on a system to share a dictionary even when sandboxed, with room for richer suggestions such as grammar corrections.
• Password auto-fill: research and architectural design for a secure auto-fill portal to replace current NativeMessaging-based approaches.

The second bucket covers infrastructure and maintenance:

• Entitlements: a system for declaring static permissions per portal, letting app store reviewers verify what an application can do and opening the door to features such as third-party accessibility tools.
• Intents: an abstract way for apps to declare the services they offer, enabling deep links to sub-pages or native handling of specific web URLs.
• Portal maintenance: porting to libdex, adding integration tests and improving system permission dialogs.

Who is doing the work

The project is technically led by Sebastian and Adrian, with organizational support from Kateryna and Cade. Modal has assembled a contractor team that includes Philip Withnall, Julian Sparber and Dhanuka Warusadura from the earlier GNOME STF project, alongside Zelda Ahmed, Ignacy Kuchciński, Hari Rana, Eva of the Bazaar project, and veteran GNOME designer Sam Hewitt. Beyond shipping features, the stated aim is to build lasting community capacity: expanding the number of people who understand this layer of the stack and putting more formal structures in place for the Flatpak project. Modal cautions that the plans may evolve as design and implementation proceed, and invites the community to follow progress on Matrix.

Why it matters

Half a million euros of public money going into one upstream Linux project is a meaningful statement about how critical that project has become. Flatpak is no longer a niche curiosity; it is the application delivery backbone for immutable distributions and for the GNOME, KDE and elementary ecosystems. Its security model is effectively the security model of the modern Linux desktop, and the acknowledged gaps — audio permissions, network isolation, VPN integration, password auto-fill — are exactly the capabilities users on Android and iOS take for granted.

The shape of the funding matters as much as the amount. Rather than a one-off feature grant, the STF is paying for stewardship, maintenance and growth of the maintainer pool, addressing the sustainability problem that slowed Flatpak after the 2023/2024 GNOME project wound down. If the roadmap lands, image-based operating systems gain a stronger case for depending on Flatpak alone, and the Free Software desktop moves closer to parity with mobile platforms on sandboxing.