wingetCollections
  • Auto
  • Search
  • Awesome Collections
  • Awesome Programs
  • My Favorite Collections
  • My Collections
  • Account / Settings
  • Terms of Service
  • Privacy
  • About

© 2026 winget.ragerworks.com

Loading...
Install fwupd using Winget - wingetCollections
  1. Go back
  2. Packages
  3. fwupd
fwupd logo

fwupd The fwupd team

bios firmware-updates firmwareupdates fwupdmgr fwupdtool linux-vendor-firmware-service linuxvendorfirmwareservice lvfs requirescmd uefi
Use this command to install fwupd:
winget install --id=fwupd.fwupd -e

fwupd: Streamlining Firmware Updates on Linux

Introduction: fwupd is a command-line system daemon designed to facilitate automatic, safe, and reliable firmware updates for devices on Linux systems. It serves as an essential tool for maintaining up-to-date firmware across various hardware components.

Key Features:

  • Automatic Updates: fwupd seamlessly integrates with the Linux Vendor Firmware Service (LVFS), enabling automatic firmware updates from a centralized repository.
  • Device Support: It supports a wide range of devices, including BIOS, UEFI, and others, ensuring comprehensive coverage for different hardware needs.
  • Enterprise Management: Features like approved updates allow enterprises to control firmware updates centrally, enhancing security and compliance.
  • Integration Capabilities: Compatible with tools such as fwupdmgr and graphical frontends, fwupd offers flexibility in how users interact with firmware updates.

Audience & Benefits: fwupd is ideal for system administrators, Linux developers, device manufacturers, and enterprise IT teams. It provides secure and reliable updates, ensuring compatibility across various Linux distributions. Enhanced security through firmware integrity checks and centralized management options make it a robust solution for enterprises seeking control over their firmware updates.

Installation: fwupd can be installed via winget, offering a straightforward method for users to integrate this essential tool into their system.

In summary, fwupd is a critical component in maintaining secure and updated firmware across Linux systems, providing both individual users and organizations with the tools needed for efficient firmware management.

README

fwupd

Build Status Translation Status CodeQL Coverity Scan Build Status Fuzzing Status Codecov Coverage Status OpenSSF Scorecard OpenSSF Best Practices

This project aims to make updating firmware on Linux automatic, safe, and reliable.

Additional information is available at the website.

Where to get help?

  • GitHub issues & discussions in this repository

Compiling

See Building and Debugging for how to build the fwupd development environment.

> [!TIP] > In most cases, end users should not compile fwupd from scratch; it's a > complicated project with dozens of dependencies (and as many configuration options) > and there's just too many things that can go wrong.

Users should just have fwupd installed and updated by their distro, managed and tested by the package maintainer. The distribution will have also done some testing with how fwupd interacts with other software on your system, for instance using GNOME Software.

Installing fwupd using Snap or using Flatpak might be useful to update a specific device on the command line that needs a bleeding edge fwupd version, but it should not be considered as a replacement to the distro-provided system version.

Using Tartan

Tartan is a LLVM static analysis plugin built to analyze GLib code. It can be installed and then run using:

Versions
2.1.1
2.0.20
Website
github.com
License
Last updated
3/31/2026
Download latest version
mkdir build-tartan
CC=clang-18 meson ../
SCANBUILD=../contrib/tartan.sh ninja scan-build

LVFS

This project is configured by default to download firmware from the Linux Vendor Firmware Service (LVFS).

This service is available to all OEMs and firmware creators who would like to make their firmware available to Linux users.

You can find more information about the technical details of creating a firmware capsule in the hardware vendors section of the fwupd website.

Basic usage flow (command line)

If you have a device with firmware supported by fwupd, this is how you can check for updates and apply them using fwupd's command line tools.

# fwupdmgr get-devices

This will display all devices detected by fwupd.

# fwupdmgr refresh

This will download the latest metadata from LVFS.

# fwupdmgr get-updates

If updates are available for any devices on the system, they'll be displayed.

# fwupdmgr update

This will download and apply all updates for your system.

  • Updates that can be applied live will be done immediately.
  • Updates that run at boot-up will be staged for the next reboot.

You can find more information about the update workflow in the end users section of the fwupd website.

Passim

If the Passim project is also installed and enabled, fwupd will re-publish the downloaded metadata file to be served on 0.0.0.0:27500 by default.

Other clients on the same network can make use of this via mDNS/LLMNR to reduce network bandwidth to configured remotes.

To disable this functionality either set P2pPolicy=none in /etc/fwupd/daemon.conf, uninstall the passim package or use systemctl mask passim.service on the terminal.

Reporting status

fwupd will encourage users to report both successful and failed updates back to LVFS. This is an optional feature, but encouraged as it provides valuable feedback to LVFS administrators and OEM developers regarding firmware update process efficacy.

The privacy policy regarding this data can be viewed on the lvfs readthedocs site.

To report the status of an update, run:

# fwupdmgr report-history

Only updates that were distributed from the LVFS will be reported to the LVFS.

Enterprise use

The flow of updates can be controlled in the enterprise using the "approved updates" feature. This allows the domain administrator to filter the possible updates from a central server (e.g. the LVFS, or a mirror) to only firmware that have been tested specifically in your organization.

The list of approved updates can be enabled by adding ApprovalRequired=true to the remote configuration file, e.g. lvfs.conf. Once enabled, the list of approved updates can be set in fwupd.conf using a comma-delimited list.

For example:

ApprovedFirmware=foo,bar

Where foo,bar refers to the container checksums that would correspond to two updates in the metadata file.

Additionally, the list of approved firmware can be supplemented using fwupdmgr set-approved-firmware baz or using the D-Bus interface.

Other frontends

fwupdmgr is a command line client, but various additional graphical frontends are enumerated in the fwupdmgr man page.

SAST Tools

  • Coverity - static analyzer for Java, C/C++, C#, JavaScript, Ruby, and Python code.
  • PVS-Studio - static analyzer for C, C++, C#, and Java code.

Packaging notes

If you are working or maintaining a package of fwupd downstream, please consider the following notes.

  • The Meson build option systemd_unit_user should be used carefully, and the specified user (or resulting group) should be inaccessible to unprivileged system users. Otherwise, this may pose a risk for privilege escalation. The default value for this setting (DynamicUser=true) is secure and should be used in the general case.