# Installing tor browser on secureblue

**URL:** https://discuss.privacyguides.net/t/installing-tor-browser-on-secureblue/33935
**Category:** Questions
**Created:** 2025-12-17T13:55:47Z
**Posts:** 64
**Showing post:** 21 of 64

## Post 21 by @sha123 — 2026-01-24T11:32:09Z

> [@leahh88g4](#):
>
> as a beginner, what even is layering (and how to do it)?

On “immutable” distros, this means adding a layer with the software on top of the immutable base image. On securueblue this happens via `rpm-ostree install` command.

> [@leahh88g4](#):
>
> what are namespaces?

You need to read this up for yourself. Too much to explain. It is basically a very lightweight form of virtualization on Linux, which does not have the same security guarantees as “normal” VMs.

> [@leahh88g4](#):
>
> I cannot find any beginner-friendly tutorials on all these things.

Check out the Secureblue homepage, especially the FAQ

> [@leahh88g4](#):
>
> And most importantly: would installing an app in such a way be a security risk?

Yes, but I think it is an acceptable risk. Unprivileged user namespaces increase the risk of privilege escalation. But on a single user system, you are screwed anyway, if malware runs as your user in an unsandboxed way and most sandboxes deny access to unprivileged user namespaces nevertheless. As @Securefan said, using a Whonix VM instead would be the most secure option, but it is also much more inconvenient and resource hungry.

---

_[View the full topic](https://discuss.privacyguides.net/t/installing-tor-browser-on-secureblue/33935)._