Website profiles · Technology insights · Alternatives

bazzite.gg

Bazzite makes gaming and everyday use smoother and simpler across desktop PCs, handhelds, tablets, and home theater PCs.

No paid content found
Visit website
Profile views 8 Outbound visits 1 Normal
Bazzite Full homepage screenshot

At a glance

Category
Games & Board Games
Language
English
Paid-content signal
No paid content foundObserved
Registered
Unknown
Hosting
FastlyInferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is Bazzite?

Bazzite is a Linux-based operating system built primarily for gaming, with a strong secondary pitch as a general-purpose desktop. According to its own site, it targets "Linux newcomers and enthusiasts alike" and ships with Steam pre-installed, along with HDR and VRR support, tweaked CPU schedulers for smoother gameplay, and community tools aimed at gaming and streaming.

It is designed to run across form factors rather than one device class: desktop PCs, handhelds, tablets, laptops, and home theater (couch) PCs. The same site notes that a game library on a MicroSD card can be shared between multiple Bazzite installs across devices — useful if you split play between, say, a handheld and a living-room PC.

What it actually does for you

  • Steam first, but not Steam only. Non-Steam stores and launchers — EA App, Epic Games Store, GOG.com, itch.io, Ubisoft Connect, Rockstar Games Launcher, and Xbox Game Pass via Battle.net — can be run and integrated into Steam's Gaming Mode. Lutris comes pre-installed.
  • Fearless updates. Bazzite is image-based: after each update the previous OS image stays on the machine, so you can pick the older one at boot if something breaks. Images are kept in the project's repositories for ninety days, and you can rebase to a last-known-good release and pin it — the site gives the example of an Nvidia driver update breaking something.
  • Security defaults. SELinux, Secure Boot support, signed container images with SBOMs and attested build provenance, plus LUKS full-disk encryption with optional automatic TPM unlocking. Applications come largely through Flathub, which provides sandboxing and attestation.

Who it suits, and the trade-offs

It fits someone who wants a console-like or Steam Deck-like experience on their own hardware without hand-building a Linux gaming setup, and who values being able to roll back a bad update. It fits less well if you depend on Windows-only software, kernel-level anti-cheat games, or vendor tools that assume Windows. Compatibility is community-tracked rather than guaranteed, so checking a specific title before installing is the sensible move.

Next step: before committing a machine, look up your main games on ProtonDB and skim Bazzite's own gaming guide for setup tips. If you are weighing it against a conventional desktop Linux distribution, the deciding question is usually whether you want an immutable, image-based system with easy rollback — that is Bazzite's core trade-off: more resilience and less tinkering at the system level, in exchange for a different, more constrained way of managing the OS than a traditional distro.

Can Bazzite run games from stores other than Steam?

Yes. Bazzite is built around Steam, but its page states that Lutris comes pre-installed and that other launchers can run games from most game stores and integrate them into Steam Gaming Mode. The stores and launchers named on the page include Xbox Game Pass (via Battle.net), EA App, Epic Games Store, GOG.com, itch.io, Rockstar Games Launcher, Ubisoft Connect, and even “your dad’s old CDs.”

The practical takeaway: Bazzite isn’t limited to Steam-only libraries, and non-Steam titles can be launched in a way that feels close to a console-style Steam Gaming Mode setup.

What this means in practice

  • Steam games: Steam is pre-installed, so this is the most direct path.
  • Other stores: Lutris is the main pre-installed tool for managing non-Steam games and launchers.
  • Gaming Mode integration: The page says other launchers can cleanly integrate non-Steam games into Steam Gaming Mode, which matters most on handhelds and couch setups.
  • Compatibility questions: The page points to community compatibility resources such as ProtonDB and GamingOnLinux, and to Bazzite’s own gaming guide for Linux gaming tips.

A useful next step

If you’re considering Bazzite mainly for a non-Steam library, check the specific game and launcher before installing. Start with the store you use most, confirm whether it runs through Lutris or another launcher, and then decide whether the Gaming Mode integration matters for your device. For handheld or TV use, that integration is often the deciding factor; for a desktop with a keyboard and mouse, a standard desktop launcher may be perfectly fine.

For broader context on Linux gaming compatibility, ProtonDB and GamingOnLinux are the community resources Bazzite itself points to.

How do I roll back a Bazzite update if something breaks?

Rolling back a Bazzite update is built into the boot process. Because Bazzite is image-based, the previous version of the operating system stays on your machine after every update. If something breaks, you select the older image at boot time and you're back to a working system.

How to do it

  1. Reboot the machine.
  2. At the boot menu, choose the previous Bazzite image rather than the newest one.
  3. Boot into it and confirm the problem is gone.

That covers most cases, including a bad Nvidia driver update. If the issue shows up later and you've already booted past the old entry, you can switch to a retained image from the terminal instead.

Pinning a known-good version

Bazzite keeps images in its repositories for ninety days, so there's a window to move between them. If you find a release that works, pin it so it stays available as long as you need, then unpin when you're ready to move forward. This is the practical move when a driver or kernel change breaks hardware you depend on and you'd rather wait than debug immediately.

What this means in practice

A concrete scenario: you update on a Friday, and your wireless adapter or a game launcher stops working. Instead of reinstalling or hunting for a fix under time pressure, you boot the prior image, pin it, and play. You lose the newest packages but keep a working machine — a reasonable trade for a living-room PC or a handheld you use daily.

Two caveats worth knowing. Rolling back is a temporary shelter, not a fix; the underlying bug still needs to be resolved before you can update again. And if you've made manual system changes outside the image model, those may not follow you cleanly between versions.

For hardware compatibility before you commit to a device, check Bazzite's own compatible hardware list. For game-specific questions, the community lists at ProtonDB and GamingOnLinux are the usual starting points.

Next step: before your next update, note which image you're currently on so you can identify it quickly at the boot menu if you need to go back.

Which handhelds, tablets, and home theater PCs are compatible with Bazzite?

Bazzite's own guidance on compatible hardware is the authoritative list, and it covers handhelds, tablets, laptops, desktops and home theater PCs (HTPCs) under one build. Rather than name specific models here, the page points readers to its "View Compatible Hardware" section, which is the right place to confirm whether your exact device is supported.

What the page tells you

  • Bazzite is positioned for handhelds, couch/HTPC setups, laptops, tablets and desktops.
  • It ships with Steam pre-installed, plus HDR and VRR support and tuned CPU schedulers.
  • Non-Steam launchers such as Lutris come pre-installed and can integrate stores like Epic Games Store, GOG.com, itch.io, EA App, Ubisoft Connect, Battle.net and the Rockstar Games Launcher into Steam Gaming Mode.
  • A MicroSD game library can be shared between multiple Bazzite installs across devices.
  • Updates are image-based, so the previous version stays on the machine and can be selected at boot; images are kept in the repositories for ninety days.

How to check your device

  1. Open Bazzite's "View Compatible Hardware" list from Bazzite.
  2. Match your exact handheld, tablet or HTPC model — not just the brand.
  3. For handhelds, confirm the controls, display and sleep behavior are listed as working.
  4. For tablets and HTPCs, check Wi-Fi, Bluetooth and GPU support, since these vary more than on standard desktops.

Practical trade-off

Handhelds tend to be the best-supported category because Bazzite explicitly targets that form factor. Tablets and HTPCs are more variable: a device can boot Bazzite fine but still have rough edges in touch input, TV remote handling or suspend/resume. If your model is not on the list, treat it as a test install rather than a daily driver.

For a concrete example: if you own a Steam Deck and a mini-PC hooked to a TV, the shared MicroSD library means you can move the same games between both. A tablet is the riskier choice — verify touch and pen behavior before committing.

Is Bazzite a good choice for someone new to Linux gaming?

Yes — Bazzite is specifically positioned for people who are new to Linux gaming, and its page evidence supports that directly.

Why it suits a Linux newcomer

  • It is "designed for Linux newcomers and enthusiasts alike," with Steam pre-installed.
  • Gaming extras are already included: HDR and VRR support, improved CPU schedulers for responsive gameplay, and community-developed tools and tweaks.
  • Non-Steam launchers are pre-installed or supported, including Lutris, EA App, Epic Games Store, GOG.com, itch.io, Rockstar Games Launcher, Ubisoft Connect, and Xbox Game Pass via Battle.net.
  • Games from other stores can be integrated into Steam Gaming Mode, so you get a console-like experience without managing separate launchers.
  • It works across desktops, handhelds, tablets, laptops, and home theater PCs, with a shared MicroSD game library across Bazzite installs.

The main trade-offs to know

  • It is still Linux. Some games, especially those with kernel-level anti-cheat, may not work. Bazzite itself points to ProtonDB and GamingOnLinux compatibility lists, so checking your specific games first is the sensible step.
  • Updating is image-based, not a traditional package-by-package upgrade. That is a benefit for reliability, but it is a different mental model if you are used to Windows or a standard Linux distribution.
  • The rollback safety net is real: the previous OS image is retained after every update, selectable at boot, and images stay in the repositories for ninety days. You can also rebase and pin a known-good release if an Nvidia driver update breaks something.

Practical next step Before installing, look up your top three games on ProtonDB. If they are rated Gold or Platinum, Bazzite is a low-risk starting point. If they rely on anti-cheat that blocks Linux, no distribution will solve that, and you should keep a Windows dual-boot for those titles. Bazzite's own gaming guide and the community compatibility lists at ProtonDB and GamingOnLinux are the places to confirm this before you commit.

How does Bazzite handle security and full disk encryption?

Bazzite treats security as a default rather than an add-on, and its approach combines operating-system hardening with optional disk encryption.

Security defaults on Bazzite

According to the site, Bazzite ships with several protections enabled out of the box:

  • SELinux — enterprise-class mandatory access control is active by default.
  • Secure Boot support — the system can boot with Secure Boot enabled.
  • Signed container images — images come with SBOMs (software bills of materials) and attested build provenance, so you can trace what went into a build.
  • Flathub attestation and sandboxing — applications from Flathub are sandboxed, and Flathub provides attestation and verified applications.

Full disk encryption

Bazzite supports LUKS full disk encryption, the standard Linux disk-encryption format. It also offers optional automatic unlocking via TPM, which lets the machine decrypt the disk at boot without you typing a passphrase. That convenience comes with a trade-off: automatic TPM unlocking means anyone who can boot the machine may reach your data, so it suits a device you keep physically controlled. If you want a passphrase prompt at every boot instead, skip the automatic-unlock option.

The image-based angle

Because Bazzite is image-based, updates keep the previous OS version on disk. If a security or driver update misbehaves, you can pick the earlier image at boot, and images stay in the repositories for ninety days. This is a rollback safety net, not an encryption feature, but it matters when a hardening change breaks something you rely on.

Practical next step

Before installing, decide two things: whether you want LUKS encryption at all (yes for a laptop that leaves the house; it's easier to set up during installation than to add later), and whether you want TPM auto-unlock or a boot passphrase. Then check Bazzite's own documentation for the current installer steps, since encryption setup happens during installation. If you want to compare the broader Linux gaming landscape, ProtonDB covers game compatibility, and GamingOnLinux tracks Linux gaming news and guides.

Related questions

More questions →
What devices does Bazzite support and how can I check hardware compatibility?

Bazzite is built to run across five device categories: handhelds, home theater PCs (HTPCs), laptops, tablets, and desktop PCs. If you want to confirm whether your specific machine is supported before installing, the site's "View Compatible Hardware" list is the intended starting point. The rest of this article explains what each device category means in practice, how the shared MicroSD library works, and what to check before committing.

The five supported device categories

Bazzite's own framing is that it works "whether you prefer to game on your handheld, chill on the couch with your home theater PC, lug your laptop to the LAN party, surf the subway with your tablet, or pretend you're getting work done on your desktop."

Device category Typical use described on the site
Handheld Portable gaming with a dedicated handheld experience
Home theater PC Couch gaming setup
Laptop Taking your game library to a LAN party
Tablet Casual use on the move
Desktop PC Gaming plus everyday desktop work

The site also lists three experience modes that map onto these devices: a handheld experience, a couch gaming setup, and a desktop environment. In other words, the same operating system adapts its interface depending on the form factor you install it on, rather than shipping separate editions per device type.

How to check whether your hardware is compatible

  1. Go to bazzite.gg and find the View Compatible Hardware link.
  2. Compare your device model against that list before downloading an image.
  3. If your device appears, proceed with the install image that matches your form factor.
  4. If it doesn't appear, treat compatibility as unconfirmed — the site does not claim universal hardware support, and its stated goal is to "work with your hardware, not for it."

The compatibility list is the authoritative reference here. Because Bazzite is image-based and ships with specific drivers and tweaks, a machine that isn't listed may still work but isn't covered by the project's own guidance.

Sharing one game library across devices

If you install Bazzite on more than one device, your MicroSD card game library can be shared between multiple Bazzite installs regardless of which devices you're using. This is useful if, for example, you keep a card for a handheld and also want the same library available on a laptop or desktop install.

The practical requirement is that each device runs Bazzite — the sharing is described as working between Bazzite installs, not between Bazzite and other operating systems.

What you get on every device

Two features apply across all supported hardware and are worth knowing before you choose a device:

  • Steam pre-installed, with HDR and VRR support, improved CPU schedulers for responsive gameplay, and community-developed tools for gaming and streaming.
  • Non-Steam launchers — Lutris comes pre-installed, and other launchers can run games from most stores and integrate them into Steam Gaming Mode. The site names Xbox Game Pass (via battle.net), EA App, Epic Games Store, GOG.com, itch.io, Rockstar Games Launcher, and Ubisoft Connect.

If your main question is whether a particular store's games will run, that's a software question rather than a device one — the launcher support is the same across the supported hardware list.

Common sticking points

  • "My device isn't on the list." The site points to a compatibility list rather than promising broad support. Check it first; don't assume an unlisted device is fine.
  • "Can I share my library with a non-Bazzite machine?" The shared MicroSD library is described as working between Bazzite installs, so a Windows or other-Linux machine isn't covered by that claim.
  • "Which experience will I get?" The handheld, couch gaming, and desktop modes correspond to your device type, so the same install adapts rather than requiring you to pick an edition.

If you're still deciding whether Bazzite fits your situation at all, the device list above is the fastest filter: match your hardware to a category, confirm it on the compatibility page, then pick the image for that form factor.

How Do Bazzite Updates and Rollbacks Work?

Bazzite is an image-based operating system, which means each update replaces the whole system image rather than patching files in place. The practical result: after every update, the previous version of the OS is still on your machine, and you can boot into it if something breaks. Images stay in Bazzite's repositories for ninety days, so you have a long window to roll back — including switching to an older image from the terminal, or rebasing to a last-known-good release and pinning it if a driver update (Nvidia, for example) causes problems.

Why image-based updates change the rollback story

On a traditional Linux distribution, an update modifies packages on top of your existing install. If a new kernel or driver misbehaves, recovery often means chrooting in from a live USB and manually downgrading packages.

Bazzite's image model works differently. The OS ships as a single image, and updating means moving to a newer image. The one you were running before is retained locally. That's the mechanism behind the site's "Upgrade fearlessly" framing — the safety net is structural, not something you configure after the fact.

How to roll back at boot

The most direct recovery path requires no terminal:

  1. Reboot the machine.
  2. At the boot menu, select the previous image entry instead of the default.
  3. The system starts on the older version, with your data and home directory intact.

This is the fastest fix when an update leaves you with a black screen, a broken desktop session, or a driver that won't initialize. Because the old image is already on disk, you don't need network access or a recovery USB.

Rolling back from the terminal, and the 90-day window

Booting the previous image is a temporary state — you're running the old version, but the system still considers the new one the default. To make a rollback stick, or to reach further back than the locally retained image, you use terminal commands to switch images.

Bazzite's documentation notes that OS images are kept in the project's repositories for ninety days and can be switched to via the terminal. Two consequences worth planning around:

  • If a problem only shows up weeks after an update, you can still move to a known-good image from within that window.
  • Past ninety days, that specific image may no longer be available to pull, so the practical rollback horizon is roughly a quarter.

Rebasing and pinning when a driver breaks

The site gives a concrete example: an Nvidia driver update breaks something you depend on. The recommended response is to rebase to the last known good release and pin it, so that version is retained as long as you need it.

Rebasing means changing which image your system tracks — useful when you want to stay on a specific release rather than follow the default stream. Pinning keeps that choice from being overwritten by the next update. The trade-off is straightforward: you keep a working driver, but you stop receiving newer updates until you unpin.

What this means in practice

Situation What to do What you get
Update broke boot or desktop Select previous image at boot menu Working system immediately, no terminal needed
Want the rollback to persist Switch images via terminal Older image becomes the running default
Problem found weeks later Switch to an older image from the repo Available within the 90-day retention window
Driver update broke a specific need Rebase to last known good release and pin Stable driver, held until you unpin

Limits and things to check

Rollback restores the operating system image — it is not a general backup. Files you created or changed in your home directory are not reverted by switching images, and neither are changes inside containers or Flatpak app data. If an update corrupted user-level data, an image rollback won't recover it.

Also note that the ninety-day figure applies to images retained in Bazzite's repositories. The previous image kept locally on your machine is a separate, shorter-lived safety net — it's the one you reach from the boot menu, and it's replaced as you move forward through further updates.

For current specifics on commands and available images, check Bazzite's own documentation, since the exact terminal syntax and repository layout can change between releases.

What Is Bazzite and Who Is It For?

Bazzite is a Linux-based operating system built primarily for gaming, aimed at both Linux newcomers and experienced users. It comes with Steam pre-installed and is designed to run across desktop PCs, handhelds, tablets, and home theater PCs (HTPCs). If you want a console-like or Steam Deck-like gaming experience on your own hardware—or you're curious about Linux gaming but don't want to configure everything from scratch—Bazzite is aimed at you.

What makes Bazzite different from a standard Linux distro?

Bazzite isn't a general-purpose Linux distribution that happens to run games. Its defaults and tooling are oriented around gaming and streaming:

  • Steam is pre-installed, so you don't have to set it up yourself.
  • HDR and VRR support are included for compatible displays.
  • Improved CPU schedulers are tuned for more responsive gameplay.
  • Community-developed tools and tweaks are bundled to streamline gaming and streaming.

It also targets a range of form factors rather than just the desktop. According to the project, Bazzite works whether you game on a handheld, relax on the couch with a home theater PC, bring a laptop to a LAN party, use a tablet, or sit at a desktop.

Can it run games outside of Steam?

Yes. Lutris is pre-installed, and other launchers can run games from most game stores while integrating them into Steam Gaming Mode. The project lists support for:

  • Xbox Game Pass (via Battle.net)
  • EA App
  • Epic Games Store
  • GOG.com
  • itch.io
  • Rockstar Games Launcher
  • Ubisoft Connect
  • Older physical media, such as game CDs

If you're new to gaming on Linux, Bazzite points users to its own Gaming Guide, plus community-maintained compatibility resources like ProtonDB and GamingOnLinux to check whether specific titles work.

How do updates and rollbacks work?

Bazzite is an image-based operating system. That means after every update, the previous version of the operating system is retained on your machine. If an update causes problems, you can select the previous image at boot time.

Images are kept in the project's repositories for ninety days and can be switched to via the terminal. If, for example, an Nvidia driver update breaks something you rely on, you can rebase to the last known good release and pin it so it's retained as long as you need.

This is the main practical difference from a traditional rolling or point-release distro: you get a built-in safety net for failed updates.

What about security?

Bazzite describes its security posture as enterprise-class and enabled out of the box, including:

  • SELinux
  • Secure Boot support
  • Signed container images with SBOMs and attested build provenance
  • LUKS full disk encryption with optional automatic TPM unlocking

It also uses Flathub for applications, which provides attestation, sandboxing, and officially verified apps.

Who should consider Bazzite?

Bazzite fits you if:

  • You want to play games on Linux with minimal setup.
  • You use a handheld, HTPC, tablet, or desktop and want one consistent gaming-oriented system.
  • You want the ability to roll back a bad update without reinstalling.
  • You're a Linux newcomer who wants sensible gaming defaults, or an enthusiast who wants a gaming-focused base to build on.

It may be less suitable if you need a general-purpose workstation distro with a specific non-gaming configuration, or if your hardware or favorite games aren't covered by the compatibility lists. Before installing, check Bazzite's compatible hardware page and verify your key titles on ProtonDB or GamingOnLinux.

Can Bazzite Run Non-Steam Games and Launchers Like Epic, GOG, or Xbox Game Pass?

Yes. Bazzite ships with Lutris pre-installed, and Lutris can run games from most third-party stores. Bazzite also states that these launchers integrate cleanly into Steam Gaming Mode, so non-Steam titles can appear alongside your Steam library in a controller-friendly interface. The officially named examples are Xbox Game Pass (via Battle.net), EA App, Epic Games Store, GOG.com, itch.io, Rockstar Games Launcher, and Ubisoft Connect.

What "non-Steam" support actually covers

Bazzite's own description draws a line between two things:

  • Running the game — handled by Lutris and other launchers, which can execute titles from most game stores.
  • Presenting the game — handled by integration into Steam Gaming Mode, so the launcher and its games are reachable without dropping to a desktop.

That second point matters most on handhelds and home theater PCs, where you may never want to touch a keyboard. If a launcher only runs games but doesn't surface them in Gaming Mode, the experience degrades quickly on those devices.

Supported launchers and stores

Store / launcher Named by Bazzite Notes from the source
Xbox Game Pass Yes Listed as running "via battle.net"
EA App Yes Listed among launchers
Epic Games Store Yes Listed among launchers
GOG.com Yes Listed among launchers
itch.io Yes Listed among launchers
Rockstar Games Launcher Yes Listed among launchers
Ubisoft Connect Yes Listed among launchers
Lutris Yes Pre-installed; runs games from most game stores
Steam Yes Pre-installed

Bazzite's page also mentions "your dad's old CDs" as a half-joking catch-all for physical media and other odd sources — a signal that the intent is broad compatibility rather than a fixed list.

How the integration works in practice

The mechanism Bazzite describes is: a launcher runs the game, and that game is then integrated into Steam Gaming Mode. From the user's side the flow is roughly:

  1. Install or launch the third-party store through its launcher (Lutris is already there).
  2. Add or let the launcher register the game.
  3. The title becomes reachable from Steam Gaming Mode rather than only from a desktop session.

The expected result is a single, controller-navigable library instead of switching between desktop windows. Bazzite does not document the exact menu path for each launcher on its landing page, so treat per-launcher setup as something you confirm in Bazzite's own Gaming Guide.

Before you commit: check compatibility first

Running a launcher is not the same as running a specific game well. Bazzite points to two community-maintained resources for that question:

  • ProtonDB — community compatibility reports, primarily for Steam/Proton titles.
  • GamingOnLinux — broader Linux gaming coverage.

For a non-Steam title, the practical check is whether the game itself works under Proton or Wine, not merely whether the store launches. A store can open fine while a specific anti-cheat-protected multiplayer game still refuses to run.

Who this fits

  • Good fit: you have libraries spread across Epic, GOG, itch.io, or Ubisoft and want them in one Gaming Mode interface on a handheld or TV.
  • Check first: your main game uses kernel-level anti-cheat, or you rely on a store not named above.
  • New to Linux gaming: Bazzite explicitly targets Linux newcomers and points to its Gaming Guide for current tips, so start there rather than assuming a launcher will behave exactly as it does on Windows.

One more note from the source: Bazzite is image-based, so if a launcher or driver update breaks something, you can boot the previous image or rebase to a last-known-good release and pin it. That rollback path is the main safety net when experimenting with third-party launchers.

What Security Features Does Bazzite Include?

Bazzite ships with four security layers enabled or available out of the box: SELinux, Secure Boot support, signed container images with SBOMs and attested build provenance, and LUKS full disk encryption with optional automatic TPM unlocking. Application-level security comes from Flathub, which provides attestation, sandboxing, and verified applications. If you want a gaming-focused Linux system where you don't have to assemble these protections yourself, this is the relevant set — and most of it is on by default rather than opt-in.

System-level protections

SELinux

Bazzite enables SELinux out of the box, which the project describes as "enterprise class security." SELinux is a mandatory access control system: instead of trusting that every process only touches what it should, the kernel enforces rules about which processes can access which files, devices, and network resources. A compromised game launcher or browser process is confined to what its policy allows rather than inheriting your full user permissions.

The practical trade-off is that SELinux can block legitimate software that wasn't written with it in mind. On Bazzite this is mitigated by the fact that most desktop applications arrive as Flatpaks (see below), which are sandboxed separately, so you're less likely to hit policy denials during normal gaming and desktop use.

Secure Boot support

Bazzite supports Secure Boot, the UEFI firmware feature that verifies the bootloader and kernel are signed by a trusted key before handing control to the operating system. This closes the gap where malware or an unauthorized OS could be loaded before your disk encryption prompt even appears.

Support here means Bazzite is built to work with Secure Boot rather than requiring you to disable it — a common friction point on Linux distributions, especially for gaming setups that also need out-of-tree drivers.

Signed images, SBOMs, and build provenance

Bazzite is an image-based operating system, and those images are signed and shipped with:

  • SBOMs (software bills of materials) — a machine-readable inventory of every component inside the image, so you can check whether a given library or package is present and at what version.
  • Attested build provenance — a verifiable record of how and from what source the image was built.

Together these let you confirm that the image you installed is the one the project actually produced, and audit its contents without reverse-engineering it. This matters more on an image-based distro than a traditional one, because you're consuming a whole prebuilt system rather than assembling packages locally.

LUKS full disk encryption with optional TPM unlock

Bazzite supports LUKS full disk encryption, so the contents of your drive are unreadable without your passphrase. Optionally, you can set up automatic unlocking via a TPM (Trusted Platform Module), which releases the decryption key when the boot measurements match an expected state.

The trade-off is worth stating plainly: TPM auto-unlock removes the need to type a passphrase at every boot, but it also means the disk unlocks automatically on that machine. It protects against someone pulling the drive out and reading it elsewhere; it protects less against someone with physical access to the running, booted machine. If that distinction matters to you, keep the passphrase prompt instead of enabling auto-unlock.

Application-level security: Flathub

Bazzite's desktop applications come through Flathub, which the project notes provides "attestation, sandboxing, and the most officially verified applications of any Linux application repository."

  • Sandboxing confines each app to the permissions it declares, so a game launcher or utility can't freely read your entire home directory unless you grant it.
  • Attestation lets Flathub confirm that a published build came from the claimed source.
  • Verified applications are those where the upstream developer has confirmed ownership of the Flathub listing, so you're installing from the actual vendor rather than a repackager.

For a gaming system this is the layer that matters most day to day, since launchers for Epic, GOG, Xbox Game Pass (via Battle.net), EA App, Ubisoft Connect, and similar stores are exactly the kind of third-party software you'd otherwise install with broad system access.

How this compares to a typical desktop Linux setup

Protection Bazzite Typical DIY desktop Linux
Mandatory access control SELinux on by default Often AppArmor, sometimes disabled
Secure Boot Supported Frequently requires manual signing or disabling
Image signing / SBOM / provenance Built into the image pipeline Not applicable (package-based)
Full disk encryption LUKS, optional TPM auto-unlock LUKS, TPM setup usually manual
App sandboxing Flathub by default Mixed; depends on packaging choices

The pattern is that Bazzite makes these choices for you and turns them on, at the cost of some flexibility — you're working within an image-based, Flatpak-first model rather than configuring each layer yourself.

What to check before relying on these

  • Confirm Secure Boot is actually active in your firmware after install, not just supported by the OS. A supported-but-disabled setup gives you none of the boot-chain protection.
  • Decide on TPM auto-unlock deliberately. It's a convenience/security trade, not a strict upgrade.
  • Check whether your specific hardware needs Secure Boot disabled. Some configurations, particularly certain GPU or peripheral setups, may push you toward turning it off — in which case budget for that in your threat model.
  • Verify a Flatpak's permissions before granting it broad filesystem or device access, since sandboxing only helps if you don't widen it.

If your priority is a gaming system where SELinux, Secure Boot, signed images, and disk encryption are handled for you rather than assembled by hand, Bazzite's defaults cover that. If you need to tune each security layer individually or run unsigned kernel modules freely, the image-based model will feel restrictive.

Website Overview

Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

The registrar is NameCheap, Inc (https://www.namecheap.com), a widely used domain service provider. The domain uses the common .gg extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the jellyfish.systems email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Google Trust Services cloud or CDN ecosystem. The certificate's total validity is about 90 days, consistent with a short renewal cycle.

HTTP and Browser Security

The response lacks these common security headers: HSTS, CSP, X-Content-Type-Options, Permissions-Policy. CORS permits any origin to read this response. This is common for public resources; sensitive responses need narrower handling. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The cf-ray, x-cache, x-served-by, via response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers.

Technology Stack Analysis

The public page identifies jQuery, Cloudflare, Fastly without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

Twitter Card metadata is configured. The title has 64 characters, within a common display range. A meta description is present, with 120 characters. No Generator meta tag is publicly exposed. A viewport declaration is present, providing a basis for mobile layout.

Hosting and Email

DNSCloudflare
HostingFastly
Emailjellyfish.systems
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) Location unknown Inferred 104.20.46.117

Registration details

RDAP / WHOIS

RegistrarNameCheap, Inc (https://www.namecheap.com)
RegisteredUnknown
ExpiresUnknown
Domain statusActive
NameserversUnknown
DNSSECunknown

DNS records

DNS

TypeNameValueTTLPriority
Abazzite.gg104.20.46.117300—
Abazzite.gg172.66.144.54300—
AAAAbazzite.gg2606:4700:10::6814:2e75300—
AAAAbazzite.gg2606:4700:10::ac42:9036300—
MXbazzite.ggmx1-hosting.jellyfish.systems3005
MXbazzite.ggmx2-hosting.jellyfish.systems30010
MXbazzite.ggmx3-hosting.jellyfish.systems30020
NSbazzite.gghattie.ns.cloudflare.com86400—
NSbazzite.ggmiles.ns.cloudflare.com86400—
TXTbazzite.gggoogle-site-verification=Bj__bBCXqao0SBRrg0vq5fVEo1PqeWKzAG6FOsw1Gys300—
TXTbazzite.ggv=spf1 +a +mx +ip4:198.54.114.91 +ip4:198.54.116.219 include:spf.web-hosting.com ~all300—
DSbazzite.gg2371 13 2 203d3eade9f62c86121034302a29a25a555f8b3f61382293519e5d7edc7c404486400—
DMARC_dmarc.bazzite.ggv=DMARC1; p=quarantine; rua=mailto:[email protected],mailto:[email protected]300—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectbazzite.gg
IssuerGoogle Trust Services
Valid until2026-10-31T09:26 · Remaining when checked: 34 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html; charset=utf-8
cache-controlmax-age=600
servercloudflare
x-frame-optionsSAMEORIGIN
referrer-policysame-origin
access-control-allow-origin*

Identified technologies

jQueryCloudflareFastly

Pages, Search and Sharing

Meta descriptionBazzite makes gaming and everyday use smoother and simpler across desktop PCs, handhelds, tablets, and home theater PCs.
Canonical URLhttps://bazzite.gg/
LanguageEnglish (default)
Twitter Cardsummary_large_image
All bots 1 allowed · 2 disallowed
  • Allow/wp-admin/admin-ajax.php
  • Disallow/wp-admin/
  • Disallow/README.md

No sitemaps found

User reviews (0)

  • No reviews yet.