codex-desktop-linux

ChatGPT Community for Linux

English | 简体中文 | فارسی

codex-desktop is an unofficial, community-maintained distribution of OpenAI’s official Linux ChatGPT desktop application. It verifies and repackages the signed upstream Linux payload, adds disabled-by-default Linux features, and produces deb, RPM, pacman, AppImage, and Nix outputs.

The custom application appears in desktop menus as ChatGPT Community and uses an icon marked with a blue C. Its package and command are codex-desktop, and its installation root is /opt/codex-desktop, so it is easy to distinguish from OpenAI’s separate ChatGPT package.

OpenAI’s signed Linux .deb is the only upstream source. The official Electron runtime, native modules, bundled codex and rg, code-mode host, plugins, libraries, locales, and Owl metadata are reused directly. A clean build applies only required compatibility patches to resources/app.asar and preserves the official ELF runtime and bundled tools byte-for-byte. Optional Linux features remain disabled unless explicitly selected.

Install · Uninstall · Features · Updates · Build · Troubleshooting · Docs · Discord

Before contributing, read CONTRIBUTING.md. Maintainers and coding agents should also read AGENTS.md.

Install

Clone the repository before building a native package or AppImage:

git clone https://github.com/ilysenko/codex-desktop-linux.git
cd codex-desktop-linux

Gentoo’s application merge ignores EMERGE_DEFAULT_OPTS to install through the generated ebuild rather than reuse a binary package. Global Portage settings are unchanged. Gentoo has a phase-aware dependency and package-resource framework for audited features. ui-tweaks, remote-mobile-control and community-features-in-gui-settings are supported and remain disabled by default; other repository features require their own support declarations. Remote mobile control uses the existing Desktop-owned app-server; the ebuild does not install or enable a remote-control service. The read-only community catalog is embedded in ASAR and needs no extra Gentoo dependency or updater snapshot; see its Gentoo scope and the Gentoo feature contract. Gentoo’s local ebuild path has been tested on OpenRC; a Gentoo systemd environment has not been tested. See Gentoo validation scope.

The recommended native installation is:

make bootstrap-native

This installs build dependencies, resolves the current package through OpenAI’s signed stable APT metadata, builds codex-app/, creates the native package for the detected distribution, and installs the newest artifact from dist/.

If the dependencies are already installed, use:

make install-native

For the graphical guided installer, run the standalone repository entrypoint:

./install-community

(make guided-install invokes the same entrypoint.) The installer is part of the repository setup experience, not an optional Linux feature. On desktops with GTK4/PyGObject it walks through feature selection, installation options, review, and build/install progress with a live log. Required features are selected automatically; conflicting choices are disabled with the reason kept visible.

The graphical installer does not modify feature implementations or feature settings. It updates only the enabled-feature list and its own installer preferences in the gitignored linux-features/features.json; any existing feature settings are preserved unchanged. Native output always keeps the repository identity codex-desktop under /opt/codex-desktop, whether or not the automatic updater is included.

To configure features without installing yet, keep using:

make setup-native
make install-native

make setup-native only writes the local feature selection. It does not build or install the application. See Native setup for the guided flow, non-interactive settings, updater selection, and cleanup.

Use an already downloaded official package

Normally the build resolves amd64 or arm64 from the signed stable index. You can reuse an already-downloaded package body:

UPSTREAM_DEB=/path/to/chatgpt_<version>_<arch>.deb make build-app

The local package is verified against the signed stable metadata by default, including its version, architecture, size, and SHA-256, without downloading its body again. All builds verify without prompting or reading user input, including interactive local builds. To choose the local exception explicitly:

./install.sh --skip-oai-official-sig-verification /path/to/chatgpt_<version>_<arch>.deb

The exception applies only to this invocation and still checks package name, version format, architecture, and payload completeness. Build metadata records signatureVerification: "skipped"; the caller is responsible for provenance. Verification errors never silently enable the exception. See Build and packaging. Old .dmg, DMG=, and CODEX_DMG_* inputs are intentionally unsupported.

Before you install

• Only the latest signed stable OpenAI Linux package is supported, on amd64 and arm64.
• Build tools require Node.js 20 or newer, npm, Python 3, curl, gpgv, dpkg-deb, tar, make, and a C/C++ toolchain. Rust is used for the updater and enabled native feature helpers. make bootstrap-native installs or guides you through these requirements.
• The official chatgpt and custom codex-desktop packages may coexist. By default they intentionally share the upstream Codex user profile and should not run at the same time. The optional community-profile-isolation feature gives Community separate Codex and Electron state and pins its bundled CLI so users who need isolated runtimes can avoid that shared-profile boundary.
• AppImage never adds --no-sandbox automatically. If your distribution disables unprivileged user namespaces, use the native package or follow the sandbox guidance in Troubleshooting.

Anonymous daily usage count

To help the community decide whether maintaining this distribution is useful, the launcher sends at most one anonymous usage event per UTC day to the public GoatCounter dashboard. The event contains only the fixed path /app-launch. GoatCounter derives an aggregate country from the network request; no application activity, account or machine identifier, version, architecture, package format, language, screen size, or referrer is sent. Every installation sends the same fixed, non-identifying User-Agent so GoatCounter does not discard the request as a bot.

The request runs silently in the background. A missing curl, a blocked request, or any other error never delays the application and produces no output. Disable the usage count with the single environment variable:

CODEX_LINUX_DISABLE_USAGE_REPORTING=1 codex-desktop

Uninstall

First close both ChatGPT Community and the official ChatGPT application. Then remove the native package with the package manager that installed it:

# Debian / Ubuntu
sudo apt remove codex-desktop

# Fedora
sudo dnf remove codex-desktop

# openSUSE
sudo zypper remove codex-desktop

# Arch / Manjaro
sudo pacman -R codex-desktop

# Gentoo
sudo emerge --deselect app-misc/codex-desktop
sudo emerge --unmerge app-misc/codex-desktop

Native package removal disables the user update service. If a service from an older or manual installation remains, remove it explicitly:

systemctl --user disable --now codex-update-manager.service
systemctl --user daemon-reload

For AppImage, delete the AppImage file you built. For a repository-only app, delete only the generated tree inside the checkout:

rm -rf -- ./codex-app

For Nix, remove the package from your profile, Home Manager configuration, or NixOS module and rebuild that profile or system.

Package removal preserves user data. To remove only Community wrapper and updater state, inspect and then delete the following directories:

~/.config/codex-desktop
~/.local/state/codex-desktop
~/.cache/codex-desktop
~/.config/codex-update-manager
~/.local/state/codex-update-manager
~/.cache/codex-update-manager

If community-profile-isolation was enabled, its Community-owned state is ~/.codex-community and its Electron profile is ~/.config/Codex-Community. Remove those paths only when you intentionally want to delete that isolated Community data.

If remote-mobile-control was enabled, revoke paired devices before removing its private device keys. Do not remove ~/.codex unless you intentionally want to delete the default shared Codex profile, configuration, plugins, and project state.

Feature matrix

Core distribution

Optional Linux features

Every feature below is disabled by default. Its adjacent README describes requirements, known limitations, configuration, and tests.

For GNOME Wayland dictation without RemoteDesktop permission prompts, select both global-dictation and global-dictation-gnome with make setup-native, then rebuild/install. The first app launch installs the companion for the current user; log out/in and explicitly enable it with gnome-extensions enable [email protected]. Restart the app/helper after enabling the extension. The helper automatically checks the companion’s version at startup: a compatible enabled extension selects GNOME; otherwise it selects RemoteDesktop. This choice stays fixed until restart. Once GNOME is selected, paste errors never fall back to RemoteDesktop or retry. The build feature only ships/installs the companion; a manually installed compatible extension is also detected. Shortcut approval still uses GlobalShortcuts. Disabling the build feature does not uninstall the user extension; see its activation and removal instructions.

The optional Computer Use backend provides guard-accessibility for an explicit foreground GNOME accessibility hold-open. It never starts automatically; see Linux Computer Use.

With shared-app-server-socket enabled and Desktop running, use codex-desktop --cli to attach Codex CLI to Desktop’s app-server. See Attached CLI.

Account rollouts and server-side ChatGPT features remain controlled by OpenAI. Rebuilding this project does not unlock an account rollout.

For CSS font fallback lists, the optional ui-tweaks custom font input adds a switch between installed-font lists and manual font-stack entry in Appearance. This nested tweak is disabled by default and must be enabled in local feature settings before rebuilding.

The optional ui-tweaks sub-option tweaks.selection.moreDetails.enabled restores More details in the Codex reply selection menu, asking ChatGPT Quick Chat to explain the selected text with its source context. It is disabled by default; see the UI Tweaks configuration.

When testing a local build, launch codex-app/start.sh with the same Electron flags as your normal desktop entry, including any required --proxy-server=... argument. Quick Chat becomes available after ChatGPT account initialization.

The optional ui-tweaks sub-option tweaks.selection.annotationSubmit.enabled makes Ctrl+Enter send the active selected-text annotation editor’s text without being intercepted by the regular composer; it is disabled by default. See the annotation submit configuration.

Configure optional features

The recommended editor is the setup wizard:

make setup-native

For manual configuration, copy the example to the gitignored local file:

cp linux-features/features.example.json linux-features/features.json

{
  "enabled": [
    "read-aloud",
    "ui-tweaks"
  ]
}

Then rebuild and install:

make install-native

Private features may live under the gitignored linux-features/local/<feature-id>/ tree and use the same manifest contract. Known retired IDs are ignored to migrate old local configs; arbitrary unknown IDs and misspellings remain errors. See the feature framework README and feature architecture.

Updates

deb, RPM, and pacman packages include codex-update-manager by default. Its user service polls the same signed APT metadata, caches official packages by version/architecture/SHA-256, reconstructs the selected native package with the currently enabled features in a separate workspace, and waits for the managed application to exit before an authorized package-manager install. A durable transaction supports recovery from interrupted or partially applied installs; this does not use the manual generated-tree directory exchange. The immediately previous managed package remains available for rollback.

codex-update-manager status
codex-update-manager status --json
codex-update-manager check-now
codex-update-manager diagnose
codex-update-manager install-ready
codex-update-manager rollback

systemctl --user enable --now codex-update-manager.service
systemctl --user status codex-update-manager.service
journalctl --user -u codex-update-manager.service

Build a manual-update package without the service:

PACKAGE_WITH_UPDATER=0 make package
make install

AppImage, repository-only generated apps, Nix, and manual-update Gentoo outputs do not use the native package updater. Full behavior and recovery steps are documented in Updater.

Build, package, and run

# Build the local application tree and run it without installing a package
make build-app
make run-app

# Build and install the package format detected for this distribution
make package
make install

# Build a specific output
make deb
make rpm
make pacman
make appimage

Builds are transactional: a candidate is verified before it replaces the working tree. Enabled ASAR-feature drift rejects a candidate; disabled features are not probed. Package scripts consume the generated codex-app/ tree. See Build and packaging for prerequisites, variables, output layout, parallelism, and payload inspection.

Troubleshooting

Full guide: Troubleshooting.

Project documentation

• Getting started: Native setup, Build and packaging, Nix, Raspberry Pi 5
• Runtime and maintenance: Architecture, Updater, Troubleshooting
• Extensions: Feature framework, Feature architecture, Linux Computer Use, Record and Replay, Chronicle / Skysight
• Contributors: Contributing, Agent instructions, Repository map, Validation playbook, Generated/runtime notes
• Project operations: GitHub CLI auth, Label governance

Historical macOS DMG conversion, downloaded Electron replacement, native-module rebuild, local webview server, and custom warm-start documents are intentionally not active documentation: the official Linux package now owns those runtime responsibilities.

Disclaimer

This is an unofficial community project and is not affiliated with OpenAI. ChatGPT, OpenAI services, trademarks, upstream application code, binaries, and assets remain the property of OpenAI or their respective owners.

The repository downloads and repackages the official Linux payload locally; it does not grant rights to OpenAI software or services. Use of ChatGPT remains subject to OpenAI’s applicable terms and server-side feature availability.

The MIT license applies only to this repository’s wrapper source, packaging, documentation, and community-owned extensions.

License

MIT