For a full Xubuntu Desktop install: install native Firefox, Google Chrome and Brave Origin, remove Snap, add Flatpak/Flathub and Homebrew, configure passwordless APT, UFW, Caffeine, XFCE usability tweaks, recovery tools, media support, networking utilities, and ongoing maintenance.
Because you installed the normal Xubuntu Desktop edition rather than the Minimal edition, you already have a complete XFCE environment and a substantial set of desktop applications.
sudo apt update
sudo apt full-upgrade -y
sudo apt autoremove --purge -yReboot if the kernel or major system components were updated:
sudo rebootsudo apt install -y \
curl wget git nano vim \
build-essential procps file rsync unzip p7zip-full \
htop btop ncdu tree \
software-properties-commonThese cover downloads, editing, development tools, file synchronization, archive handling, process monitoring, and general troubleshooting.
Do this before removing Snap, especially if Firefox is currently a Snap.
sudo apt install -y flatpakflatpak remote-add --if-not-exists flathub \
https://dl.flathub.org/repo/flathub.flatpakrepoLog out and back in, or reboot, so desktop integration is fully refreshed.
flatpak remotesYou should see flathub.
flatpak install flathub org.mozilla.firefoxsudo apt install -y gnome-software gnome-software-plugin-flatpakInstall your replacement browsers before removing Snap. This is especially important on Xubuntu because Firefox may currently be installed as a Snap.
.deb package. Chrome and Brave Origin can use their own official repositories so normal apt update / apt upgrade maintenance keeps them current.
Mozilla recommends its own APT repository for Debian- and Ubuntu-based distributions. The steps below are appropriate for modern Xubuntu/Ubuntu releases using the Deb822 .sources format.
sudo install -d -m 0755 /etc/apt/keyringswget -q https://packages.mozilla.org/apt/repo-signing-key.gpg -O- | \
sudo tee /etc/apt/keyrings/packages.mozilla.org.asc > /dev/nullThe expected fingerprint is:
35BAA0B33E9EB396F59CA838C0BA5CE6DC6315A3Verify it with:
gpg -n -q --import --import-options import-show \
/etc/apt/keyrings/packages.mozilla.org.asc | \
awk '/pub/{getline; gsub(/^ +| +$/,""); \
if($0 == "35BAA0B33E9EB396F59CA838C0BA5CE6DC6315A3") \
print "\nThe key fingerprint matches ("$0").\n"; \
else print "\nVerification failed: the fingerprint ("$0") does not match the expected one.\n"}'For Ubuntu Resolute and newer, including current Xubuntu releases:
sudo tee /etc/apt/sources.list.d/mozilla.sources > /dev/null << 'EOF'
Types: deb
URIs: https://packages.mozilla.org/apt
Suites: mozilla
Components: main
Signed-By: /etc/apt/keyrings/packages.mozilla.org.asc
EOFsudo tee /etc/apt/preferences.d/mozilla > /dev/null << 'EOF'
Package: *
Pin: origin packages.mozilla.org
Pin-Priority: 1000
Package: firefox
Pin: release o=Ubuntu
Pin-Priority: -1
EOFThis keeps the native Mozilla package preferred while preventing Ubuntu's Firefox package from steering the installation back toward Snap.
snap list firefox 2>/dev/null && sudo snap remove firefoxsudo apt update
sudo apt install -y firefoxapt policy firefoxThe selected candidate should come from packages.mozilla.org.
For example, to install French localization:
sudo apt install firefox-l10n-frTo see all available Firefox language packs:
apt-cache search firefox-l10nThe simplest official method on a typical 64-bit Intel/AMD Xubuntu PC is to install Google's current .deb package. Installing it also configures Google's software repository so Chrome can receive future updates through APT.
cd /tmp
wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.debsudo apt install -y ./google-chrome-stable_current_amd64.debrm -f /tmp/google-chrome-stable_current_amd64.debgoogle-chrome --version
apt policy google-chrome-stableThis installs Brave Origin, the standalone Origin build—not the standard Brave Browser release.
curl -fsS https://dl.brave.com/install.sh | FLAVOR=origin shBrave's installer configures the required repository and installs the current Brave Origin release.
apt policy brave-originsudo apt install -y curl
sudo curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg \
https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
sudo curl -fsSLo /etc/apt/sources.list.d/brave-browser-release.sources \
https://brave-browser-apt-release.s3.brave.com/brave-browser.sources
sudo apt update
sudo apt install -y brave-originfirefox --version
google-chrome --version
apt policy firefox google-chrome-stable brave-originOnce these repositories are configured, normal system maintenance should update all three native browser packages:
sudo apt update
sudo apt full-upgrade| Browser | Source | Package |
|---|---|---|
| Firefox | Mozilla official APT repository | firefox |
| Google Chrome | Google official Linux repository | google-chrome-stable |
| Brave Origin | Brave official Linux repository | brave-origin |
Official references: Mozilla — Install Firefox on Linux, Google — Download Chrome, Brave — Brave Origin on Linux.
snap listsudo systemctl disable --now snapd.socket
sudo systemctl disable --now snapd.service
sudo systemctl disable --now snapd.seeded.service 2>/dev/nullsudo apt purge -y snapd
sudo apt autoremove --purge -yrm -rf ~/snap
sudo rm -rf /snap
sudo rm -rf /var/snap
sudo rm -rf /var/lib/snapd
sudo rm -rf /var/cache/snapdsudo nano /etc/apt/preferences.d/nosnap.prefPut this in the file:
Package: snapd
Pin: release a=*
Pin-Priority: -10Save with Ctrl+O, Enter, then exit with Ctrl+X.
Also place the package on hold:
sudo apt-mark hold snapdapt policy snapd
which snapwhich snap should ideally return nothing.
This allows package-management commands to run without asking for your password, without making every sudo command passwordless.
echo "$USER ALL=(root) NOPASSWD: /usr/bin/apt, /usr/bin/apt-get" | \
sudo tee /etc/sudoers.d/apt-nopasswdSet the correct permissions:
sudo chmod 440 /etc/sudoers.d/apt-nopasswdValidate the sudoers file:
sudo visudo -cf /etc/sudoers.d/apt-nopasswdYou want to see:
parsed OKsudo -k
sudo apt updateNOPASSWD: ALL, which is not recommended for a normal desktop.
sudo apt install -y ufw gufwsudo ufw default deny incoming
sudo ufw default allow outgoingAllow SSH before enabling the firewall:
sudo ufw allow OpenSSHOr restrict SSH to your LAN:
sudo ufw allow from 192.168.1.0/24 to any port 22 proto tcpChange the subnet to match your network.
sudo ufw enablesudo ufw status verboseA typical desktop configuration should show:
Status: active
Default: deny (incoming), allow (outgoing)sudo ufw status numberedsudo ufw delete 3gufwUse APT for system packages, Flatpak for desktop applications, and Homebrew mainly for CLI/development tools where you want newer releases.
sudo apt install -y build-essential procps curl file git/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >> ~/.bashrc
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >> ~/.zshrc
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"brew --version
brew doctorbrew install fastfetch| Package system | Best use |
|---|---|
| APT | Operating system, kernel, drivers, libraries, services |
| Flatpak | Desktop applications |
| Homebrew | CLI and development utilities |
sudo apt install -y caffeinecaffeine-indicatorThe tray icon lets you temporarily prevent the display from blanking, the screensaver from activating, the session from locking, or the system from suspending.
caffeinate rsync -avh source/ destination/The machine stays awake until the command finishes.
The full Xubuntu Desktop edition already includes many XFCE extras, so you may already have most or all of these packages.
sudo apt install -y \
xfce4-goodies \
xfce4-whiskermenu-plugin \
xfce4-clipman-plugin \
xfce4-pulseaudio-plugin \
xfce4-screenshooter \
xfce4-notifyd \
xfce4-power-manager \
thunar-archive-plugin \
thunar-media-tags-plugin \
file-roller \
pavucontrol \
catfish \
menulibreRight-click the panel and open Panel → Panel Preferences. A straightforward layout is:
Whisker Menu
Launchers
Separator [Expand]
Window Buttons
Notification Area / Status Tray
PulseAudio
Power Manager
Clock
Action ButtonsFor the separator between launchers and the window list:
Expand: enabled
Style: TransparentOpen Whisker Menu properties and assign:
Super LGo to Settings → Window Manager → Keyboard and consider:
Alt+F4 Close window
Alt+F10 Maximize
Super+Left Tile left
Super+Right Tile right
Super+Up Maximize
Super+Down Restore/minimize
Alt+Tab Switch windowssudo apt install -y \
thunar-archive-plugin \
thunar-media-tags-plugin \
samba-common-bin \
smbclient \
gvfs-backendsAfter logging out and back in, you can use addresses like:
smb://server/sharesudo apt install -y \
fonts-dejavu \
fonts-liberation \
fonts-noto \
fonts-noto-color-emoji \
fonts-ubuntusudo apt install -y \
adwaita-icon-theme-full \
papirus-icon-theme \
greybird-gtk-themeThen open Settings → Appearance. A safe combination is:
Style: Greybird or Adwaita
Icons: Papirus
Font: Ubuntu 10 or 11Under Settings → Appearance → Fonts:
Anti-aliasing: Enabled
Hinting: Slight
Sub-pixel: RGBXubuntu Desktop generally already includes Clipman. Add it to the panel if it is not visible:
Panel → Add New Items → Clipman
You can also start it manually:
xfce4-clipmanThis gives you clipboard history instead of only the most recently copied item.
XFCE's built-in application launcher is:
xfce4-appfinderA good shortcut is Super+Space.
Go to Settings → Keyboard → Application Shortcuts, add:
xfce4-appfinderand assign:
Super+SpaceThis gives XFCE a Spotlight/KRunner-style launcher.
sudo apt install -y \
synaptic \
gdebi \
gparted \
baobab \
transmission-gtk \
remmina \
vlc \
flameshotflatpak install flathub org.videolan.VLCAvoid installing the same app through APT, Flatpak, Snap, and Brew unless you intentionally need more than one build.
sudo apt install -y timeshiftLaunch it with:
sudo timeshift-gtkSuggested mode:
EXT4 filesystem → RSYNC mode
Btrfs filesystem → BTRFS modeExample retention policy:
3 daily
2 weekly
2 monthlysudo apt install -y unattended-upgradesConfigure it:
sudo dpkg-reconfigure --priority=low unattended-upgradesCheck the service:
systemctl status unattended-upgradesYou can still perform normal updates manually:
sudo apt update
sudo apt full-upgradeCheck whether the timer is already active:
systemctl status fstrim.timerIf needed:
sudo systemctl enable --now fstrim.timerVerify:
systemctl list-timers | grep fstrimsudo apt install ubuntu-restricted-extrasYou may be asked to accept a Microsoft font license during installation.
Install additional multimedia utilities:
sudo apt install -y \
ffmpeg \
libavcodec-extra \
mediainfoVerify FFmpeg:
ffmpeg -versionsudo apt install -y \
pciutils \
usbutils \
lshw \
lm-sensors \
smartmontools \
ethtool \
iperf3 \
dnsutils \
traceroute \
nmap \
net-toolssudo sensors-detect
sensorslspci
lsusb
ip addr
ip route
ethtool enp2s0Replace enp2s0 with the actual name of your Ethernet interface.
flatpak updateflatpak uninstall --unusedflatpak list --appflatpak search joplinflatpak install flathub APP.IDsudo apt update
sudo apt full-upgrade
sudo apt autoremove --purge
sudo apt cleanflatpak update
flatpak uninstall --unusedbrew update
brew upgrade
brew cleanupXubuntu / XFCE
│
├── APT
│ └── OS, kernel, drivers, libraries and system services
│
├── Flatpak + Flathub
│ └── Desktop applications
│
├── Homebrew
│ └── CLI and development utilities
│
├── Snap
│ └── Removed and blocked
│
├── UFW
│ └── Deny incoming / allow outgoing
│
├── Timeshift
│ └── System recovery snapshots
│
├── unattended-upgrades
│ └── Automatic security updates
│
└── XFCE
├── Whisker Menu
├── Clipman
├── Caffeine
├── Application Finder
├── Enhanced Thunar
└── XFCE goodies