Hello TUXEDO Fans and Open-Source Enthusiasts!
While summer sluggishness takes hold elsewhere, the keyboards are already clicking again with our neighbors in the KDE community. The developer penguins have barely lifted their flippers from the keyboards – resulting in KDE Plasma 6.4 with numerous exciting new features. Our own TUXEDO penguins were also not deterred by the summer lethargy and delivered new TUXEDO drivers. And what else? This week, we introduce you to Tokodon and Vaults.
Enjoy reading,
The TUXEDO OS Team
Note: We would like to keep you updated on the latest developments in TUXEDO OS with the TWIX series and introduce you to exciting applications as well as practical tips related to the KDE desktop and TUXEDO OS. However, this section should not be a one-way street: your feedback, ideas, and suggestions for improvement are very welcome! For this purpose, we have created a thread on Reddit, where you can reach us directly.
TUXEDO OS Updates
WebFAI 6.0.5–2.0.2
Default use of HTTPS implemented („HTTPS first“)
Added zenity for VirtualBox on Ubuntu 24.04 („Noble“) to the package list
Added virtualbox-qt to the package list
Added group assignment for VirtualBox in the virtualbox-install.sh script
tuxedo-drivers v4.14.0
Various minor fixes to support Stellaris Gen7
Added setting for automatic power-on when power is connected for supported devices
Added option to control power delivery for compatible devices
KDE App of the Week: Using Mastodon Conveniently on the Desktop with Tokodon
As part of the open-source community, TUXEDO is naturally also present in the Fediverse. Our Mastodon channel linuxrocks.online/@tuxedocomputers allows interested users to engage with us directly and decentrally—independent of traditional platforms. For those who prefer not to use Mastodon exclusively via the web browser, Tokodon offers a modern client perfectly tailored for use with KDE Plasma.
Tokodon is part of the KDE Gear suite and was specifically developed for seamless integration into KDE Plasma. The app is based on Qt and provides a clear user interface where all important Mastodon network features are available. Posts can be easily read, filtered, or published, and advanced options like managing multiple instances are also supported. The tight integration with the Plasma desktop ensures a pleasantly smooth user experience.
Installing Tokodon: Flatpak or Package
Tokodon is not preinstalled by default in TUXEDO OS but can be quickly added via the Discover software manager. Depending on your personal preference, you can choose between the classic package version or the Flatpak. While the Flatpak version is usually more up-to-date, it requires more storage space. Both versions are easy to set up and ready to use immediately after installation.
In the Discover software manager of TUXEDO OS, you can conveniently choose between the Flatpak and the classic package format. The Flatpak is possibly more current but requires more storage space.
After starting the app, log in with your own Mastodon account. You then immediately get access to your personal timeline. The graphical interface is clearly structured and follows common social client layouts. Especially noteworthy is the integration with the Plasma design, which automatically adopts the color scheme and display options. Features like dark mode or notifications via the system tray are also reliably supported.
Posting and Liking: The User Interface
Tokodon offers a unified interface for all common interactions. Posts, mentions, favorites, or boosts can be filtered precisely. Additionally, the app allows creating new posts with attachments, visibility settings, and voice input. Emojis are available as well as polls and bookmarks. The operation remains efficient and clear, even though the app is not yet fully translated into German.
The Home tab shows all posts from accounts you follow, sorted chronologically. Clearly presented and easily accessible via the left sidebar.
New posts can be created directly via the Post button at the top right. The integrated editor supports common content types like images, videos, or documents and offers an intuitive way to interact with the community. Thanks to system integration, new notifications appear immediately in the KDE system section. This way, you stay up to date even if the browser is closed.
Use the editor to compose new posts including attachments, visibility settings, language, and emojis. Centrally accessible via the Post button at the top right in the main window.
If you want to use or get to know the Fediverse, Tokodon is an ideal starting point for the desktop. The app brings everything you need for comfortable communication in the open network. And if you don’t want to miss any updates from us: Follow us on Mastodon .
Info: Are you interested in more KDE applications and want to know which programs have been recently updated? A detailed overview can be found in the regularly published column This Week in KDE Apps , which summarizes new features, bug fixes, and developments from the KDE ecosystem on a weekly basis.
TUXEDO OS Tips & Tricks: Encrypt Files and Folders with Plasma Vaults
If you regularly use your laptop on the go and store security-relevant or personal information on it, you should encrypt the entire system. On desktop computers without external access, it is often sufficient to selectively protect individual folders or files. For this purpose, TUXEDO OS offers a fully integrated solution with Plasma Vaults that reliably protects your data from unauthorized access.
What Are Vaults in Plasma Vaults?
Plasma Vaults is an integrated feature of the KDE Plasma desktop that allows you to create and manage encrypted containers (called vaults). Files stored inside are protected from prying eyes, even if others have access to the system.
Vaults are ideal for shared computers, mobile devices, or cloud storage. Thanks to deep integration with KDE Plasma, handling them is especially comfortable. After installing TUXEDO OS, Plasma Vaults is available immediately—no additional setup is required.
How to Create a New Vault
You can find Plasma Vaults in the system tray area. Click the small arrow next to the clock to open the Status and Notifications menu. There you will find the Vaults entry to launch the tool.
Plasma Vaults is accessible via the status menu. There, you can conveniently create new vaults and manage existing containers.
After launching, a wizard guides you through creating a new vault. First, assign a name and choose an encryption backend. By default, CryFS is active; modern options like GocryptFS and the outdated EncFS are also available. In most cases, CryFS is the best choice.
Encryption happens at the file level, protecting each file individually. This is especially suitable for cloud storage, as only changed files are transferred while the rest remain locally encrypted.
After confirming the security warnings related to the chosen technology, set a strong password for the vault. Important: Without this password, there is no way to access or recover the data. Therefore, write it down in at least two separate, secure locations.
The password is mandatory. Without the correct input, access is impossible. Keep it stored securely in multiple places.
Next, Plasma Vaults shows where the encrypted container is stored and where it will be mounted in the file system when opened. These paths can be adjusted if needed—for example, if you want to place the vault directly in a cloud folder.
Optionally, you can set additional parameters: a different encryption cipher, binding to specific Activities , or extra security measures. These include, for example, automatically disabling network and Bluetooth when the vault is open. Usually, the default settings are sufficient. To check which cipher is most efficient on your system, run the following command:
cryptsetup benchmark
Plasma Vaults allows additional security measures like disabling network and Bluetooth while vaults are open. The options can be individually customized.
Using and Closing the Vault
After creation, your vault appears permanently in the KDE system tray. Clicking the icon opens the container after entering the previously set password. The encrypted folder is then available like a normal directory in the Dolphin file manager. You can use it as usual—move files, create folders, or edit existing contents—without having to change your usual workflow. The Plasma integration ensures seamless operation without external tools or complicated commands.
You can close the vault at any time, either via the context menu in the file manager or directly in the system tray. The container is dynamically sized and grows only with the amount of stored data, so it initially consumes hardly any storage space. When closed, the corresponding directory remains visible but appears empty and inaccessible. This effectively protects your sensitive files from unauthorized access—even if someone gains physical access to your device.
Ubuntu Security Updates
The security updates listed here from Ubuntu are directly integrated into TUXEDO OS:
USN-7583–1: Python vulnerabilities : Python could be made to overwrite files.
IDs: CVE-2025–4517, CVE-2025–4330, CVE-2024–12718 + 2 others
Affects: Ubuntu 25.04 , 24.10 , 24.04 LTS
USN-7581–1: Express vulnerabilities : Several security issues were fixed in Express.
IDs: CVE-2024–29041, CVE-2024–43796
Affects: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS
USN-7580–1: PAM vulnerability : PAM could be made to run programs as an administrator.
IDs: CVE-2025–6020
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7579–1: Godot Engine vulnerabilities : Several security issues were fixed in Godot Engine.
IDs: CVE-2021–26826, CVE-2021–26825, CVE-2019–2126
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS
USN-7578–1: UDisks vulnerability : UDisks could be made to run programs as an administrator.
IDs: CVE-2025–6019
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7577–1: libblockdev vulnerability : libblockdev could be made to run programs as an administrator.
IDs: CVE-2025–6019
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7574–1: Go vulnerabilities : Several security issues were fixed in Go.
IDs: CVE-2024–45341, CVE-2025–4673, CVE-2025–22866, +2 others
Affects: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7576–1: dwarfutils vulnerabilities : dwarfutils could be made to crash or run programs as your login if it opened a specially crafted file.
IDs: CVE-2022–32200
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7573–1: X.Org X Server vulnerabilities : Several security issues were fixed in X.Org X Server.
IDs: CVE-2025–49176, CVE-2025–49180, CVE-2025–49175, +3 others
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7572–1: KaTeX vulnerabilities : Several security issues were fixed in KaTeX.
IDs: CVE-2024–28246, CVE-2024–28245, CVE-2024–28243, +1 other
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7555–2: Django vulnerability : Django could be made to log injection if received specially crafted input.
IDs: —
Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS