CLI Setup Guide and Privacy Cloud Storage

CLI Setup Guide and Privacy Cloud Storage

Sarah’s Security Brief: This guide tests Proton Drive’s new CLI across Ubuntu, Fedora, and Arch. It covers every step from installation to file sharing, plus how it stacks up against Nextcloud, Syncthing, and Filen.

What Is Proton Drive and Why It Matters for Linux Users

Proton Drive is an end-to-end encrypted cloud storage service from Proton, the Swiss company behind Proton Mail and Proton VPN. Unlike Google Drive or Dropbox, your files are encrypted on your device before they ever touch Proton’s servers. Not even Proton can read them.

When Proton announced the Linux CLI in June 2026, testing started immediately. The timing matters: privacy-conscious Linux users have been stuck choosing between self-hosted solutions like Nextcloud or unencrypted options like Google Drive. Proton Drive fills a gap that has existed for too long.

Here is what makes it different from every other cloud storage option:

  • Zero-knowledge encryption: Files, filenames, and folder structures are encrypted with AES-256 before upload. This is not server-side encryption where the provider holds the keys. The encryption happens on your machine, and only you hold the decryption keys. Proton cannot read your files even if they wanted to.
  • Swiss jurisdiction: Protected by Swiss privacy laws, outside US and UK surveillance reach. Switzerland has some of the strongest data protection laws in the world, and Proton has a proven track record of resisting government data requests. They have published transparency reports detailing every request they receive.
  • Open source: The SDK and CLI are MIT-licensed, auditable on GitHub at github.com/ProtonDriveApps/sdk. The encryption implementation uses well-tested cryptographic primitives. Anyone can verify the security claims by reading the source code.
  • 100 million+ users: The largest encrypted ecosystem in the world. This is not a small startup experimenting with encryption. Proton has been building privacy tools since 2014 and has received independent security audits from secfault-security and other firms.

How to Install Proton Drive CLI on Ubuntu and Debian

Ubuntu 26.04 LTS was the first distro tested. The installation is straightforward, but there is one dependency most guides miss: dbus-x11. Without it, the CLI cannot access the system keyring for credential storage.

fosslinux@ubuntu:~$ echo fosslinux | sudo -S apt-get install -y wget libsecret-1-0 dbus-x11
dbus-x11 is already the newest version (1.16.2-2ubuntu4).
Solving dependencies...
0 upgraded, 0 newly installed, 0 to remove and 97 not upgraded.

fosslinux@ubuntu:~$ wget -q  -O /tmp/proton-drive

fosslinux@ubuntu:~$ chmod +x /tmp/proton-drive

fosslinux@ubuntu:~$ dbus-run-session -- /tmp/proton-drive --help
Usage:
    auth login
    auth logout
    filesystem list [-t TYPE] path
    filesystem info path
    filesystem create-folder parentPath name
    filesystem upload [-c STRATEGY] [-f STRATEGY] [-d STRATEGY] [-t] localPath... parentPath
    ...

The dbus-run-session wrapper is critical. The Proton Drive CLI needs access to libsecret (GNOME Keyring) to store OAuth tokens securely. In a graphical Ubuntu session, this happens automatically. In a headless terminal or SSH session, dbus-run-session creates a temporary D-Bus session that makes the keyring available.

The error “Cannot autolaunch D-Bus without X11 $DISPLAY” means dbus-run-session was not used. The fix is simple: wrap the command with dbus-run-session. This pattern works on every Linux distro tested.

This was verified on Ubuntu 26.04 LTS with kernel 7.0.0-22-generic. The binary is a self-contained 118MB executable that requires no additional runtime dependencies beyond libsecret-1-0 and dbus-x11. The binary supports both x64 and arm64 architectures.

How to Install Proton Drive CLI on Fedora and RHEL

Fedora 44 was the second test environment. Fedora already ships with libsecret pre-installed, so the only requirements are wget and the D-Bus utilities. This makes Fedora the cleanest installation experience of the three distros tested.

fosslinux@fedora:~$ echo fosslinux | sudo -S dnf install -y wget libsecret
Nothing to do.

fosslinux@fedora:~$ wget -q  -O /tmp/proton-drive

fosslinux@fedora:~$ chmod +x /tmp/proton-drive

fosslinux@fedora:~$ dbus-run-session -- /tmp/proton-drive --help
Usage:
    auth login
    auth logout
    filesystem list [-t TYPE] path
    filesystem info path
    filesystem create-folder parentPath name
    ...

Fedora 44 uses kernel 7.0.13-200.fc44, and the CLI runs without any SELinux issues. The dbus-run-session approach works identically to Ubuntu. RHEL, CentOS Stream, and Rocky Linux use the same dnf commands and should produce the same results.

If the output shows “Nothing to do,” that means the dependencies are already installed. The CLI will work fine without any additional configuration.

How to Install Proton Drive CLI on Arch Linux and Manjaro

Arch Linux required one extra step. CachyOS (the Arch-based test distro) does not ship gnome-keyring by default. Without it, the CLI fails with “The name org.freedesktop.secrets was not provided by any .service files.”

fosslinux@cachyos:~$ echo fosslinux | sudo -S pacman -S --noconfirm wget libsecret gnome-keyring
(6/7) Updating the desktop file MIME type cache...
(7/7) Performing snapper post snapshots for the following configurations...
==> root: 27

fosslinux@cachyos:~$ wget -q  -O /tmp/proton-drive

fosslinux@cachyos:~$ chmod +x /tmp/proton-drive

fosslinux@cachyos:~$ dbus-run-session -- /tmp/proton-drive --help
Usage:
    auth login
    auth logout
    filesystem list [-t TYPE] path
    filesystem info path
    filesystem create-folder parentPath name
    ...

The gnome-keyring package provides the org.freedesktop.secrets D-Bus service that the CLI depends on. This was verified on CachyOS with kernel 7.0.9-1-cachyos. Manjaro and EndeavourOS should behave identically since they share the same Arch package repositories.

There is also an AUR package (proton-drive-cli), but as of June 2026 it is flagged as broken due to upstream build changes. The binary download method is recommended until the AUR maintainer resolves the issue. The AUR maintainer has noted that version 0.4.7 should fix the build problems.

Pro Tip: Add dbus-run-session to a shell alias so you do not have to type it every time. For example: alias proton='dbus-run-session -- /tmp/proton-drive' in your .bashrc. Then just run proton auth login instead of the full command.

Proton Drive CLI Commands: Upload, Download, and Share Files

After installation, the first step is authentication:

fosslinux@ubuntu:~$ dbus-run-session -- /tmp/proton-drive auth login
Opening browser for authentication...
Follow the instructions in your browser to log in.

The auth login command opens the default browser to Proton’s OAuth page. After login, the CLI stores tokens in the system keyring via libsecret. This only needs to happen once per user session. The tokens persist across terminal sessions, so repeated authentication is not required.

Once authenticated, here are the essential commands for daily use:

List files:

fosslinux@ubuntu:~$ dbus-run-session -- /tmp/proton-drive filesystem list /
/my-files/
/shared/

Upload a directory:

fosslinux@ubuntu:~$ dbus-run-session -- /tmp/proton-drive filesystem upload ~/Documents/* /my-files/Documents

Download files:

fosslinux@ubuntu:~$ dbus-run-session -- /tmp/proton-drive filesystem download /my-files/Reports ./backups

Share a folder with a colleague:

fosslinux@ubuntu:~$ dbus-run-session -- /tmp/proton-drive sharing invite --user [email protected] --role editor --message "Please review" /my-files/Reports

The --json flag outputs machine-readable JSON, useful for scripting backup workflows with cron. The --verbose flag provides detailed logging for troubleshooting.

Insight: The CLI stores authentication tokens in your system keyring via libsecret, not in a plaintext file. This means your Proton credentials are protected by the same encryption that secures your desktop login. The tokens persist across terminal sessions, so you only authenticate once per boot cycle.

Proton Drive Web App: Browser Access on Any Linux Distro

If the CLI is not preferred, Proton Drive works perfectly in any modern browser. Navigate to drive.proton.me and log in with a Proton account. The web interface provides:

  • Full file management (upload, download, rename, move, delete)
  • Photo gallery with automatic backup from mobile devices
  • Proton Docs and Proton Sheets (encrypted office suite for collaboration)
  • File sharing with password protection and expiry dates

The web app uses the same end-to-end encryption as the CLI. Files are encrypted in the browser before upload. The web interface is surprisingly responsive, even on slower connections. It works well in both Firefox and Chromium-based browsers.

Proton Drive Pricing: Free vs Drive Plus vs Unlimited

Proton offers several tiers to match different storage needs:

  • Proton Free: 5 GB storage, web app access, basic sharing. Good enough for testing the workflow and storing important documents.
  • Drive Plus: 200 GB storage, 10-year file version history. The sweet spot for personal use.
  • Proton Unlimited: 500 GB storage, includes Proton VPN, Mail, Calendar, and Pass. Best value if already paying for a VPN separately.
  • Proton Duo: 2 TB storage for 2 users, advanced threat protection. Good for couples or small teams.
  • Proton Family: 3 TB storage for up to 6 users. Most storage per dollar in the Proton ecosystem.

Start with the Free plan to test the CLI workflow. If more storage is needed, Drive Plus at 200 GB is the sweet spot. The Unlimited bundle is worth it for users who already pay for a VPN separately.

Proton Drive vs Nextcloud vs Syncthing vs Filen Comparison

All four services have been tested extensively across multiple use cases. Here is how they compare:

  • Proton Drive: E2E encrypted, hosted in Switzerland, CLI available, no Linux GUI yet, 5 GB free, ~$10/month for 1 TB. Best for zero-config privacy without self-hosting.
  • Nextcloud: Self-hosted, full control, requires server setup, E2E encryption optional (not default), unlimited storage on own hardware, free open source. Best for complete data control and organizations with existing infrastructure.
  • Syncthing: P2P sync, no central server, continuous file sync, no cloud storage, no E2E encryption (uses TLS), unlimited storage, free open source. Best for syncing between own devices without a cloud dependency.
  • Filen: E2E encrypted, hosted in Germany, CLI available, no Linux GUI yet, 10 GB free, ~$8/month for 1 TB. Best for users who want more free storage than Proton offers.

For zero-config encrypted cloud storage with Swiss jurisdiction, Proton Drive is the best option. For full control without minding server maintenance, Nextcloud is unbeatable. For syncing files between own devices without a cloud, Syncthing does the job. Filen is a solid alternative with more free storage, but a smaller ecosystem.

Why It Matters: Every major cloud provider (Google, Microsoft, Amazon) scans your files for advertising and AI training. Proton cannot do this because of zero-knowledge encryption. For privacy-conscious Linux users, this is not a nice-to-have, it is a requirement.

Proton Drive Mobile App Integration with Linux Desktop

Proton Drive has native apps for iOS and Android. The Android app supports automatic photo backup, syncing directly to encrypted cloud storage. The mobile apps use the same E2E encryption as the desktop clients.

On Linux, there is no background sync daemon yet. A cron job using the CLI can sync the Documents folder hourly:

fosslinux@ubuntu:~$ crontab -e
# Add this line for hourly sync:
0 * * * * dbus-run-session -- /tmp/proton-drive filesystem upload ~/Documents/* /my-files/Documents 2>/dev/null

This is not as seamless as a native sync client, but it works reliably. Proton has confirmed that a full Linux desktop client with background sync is in development. The web app also provides photo backup functionality through the browser.

Proton Drive Limitations on Linux and What Is Coming Next

Here is what Proton Drive does not yet offer on Linux:

  • No native GUI client: Windows and macOS have desktop apps with system tray integration. Linux only has the CLI and web app. This is the biggest gap, and Proton has acknowledged it publicly.
  • No background sync daemon: CLI commands must be run manually or via cron. For power users, this is fine. For everyone else, it is a friction point that Proton is working to resolve.
  • No file versioning UI: The CLI does not show previous file versions (though the feature exists on paid plans). This should come in a future CLI update.
  • CLI version changes frequently: Version 0.4.6 was tested, but check the download page for the latest. The binary is about 118MB, so updates are not instantaneous on slow connections.

Proton has publicly stated that a “fully-featured Linux app” is in development. The June 2026 blog post about the CLI explicitly mentioned this. Based on Proton’s track record with Proton VPN (which has an excellent Linux client), the Drive desktop app should arrive before the end of 2026.

For now, the CLI plus web app combination covers 90% of typical use cases. The remaining 10% is background sync, which can be handled with cron or systemd timers.

Worth Knowing: Proton Drive CLI supports both x64 and arm64 architectures. If you are running Linux on a Raspberry Pi or other ARM device, the CLI will work natively without emulation. Download the linux-arm64 binary from the same download page.

Frequently Asked Questions

Does Proton Drive work on Linux?

Yes. Proton Drive offers a CLI (command-line interface) for Linux, available for x64 and arm64 architectures. There is also a web app at drive.proton.me that works in any browser. A native GUI desktop client with background sync is in development.

Is Proton Drive free?

Proton Drive offers 5 GB of free encrypted storage. Paid plans start with Drive Plus (200 GB) and Proton Unlimited (500 GB plus VPN, Mail, and Calendar).

How do I install Proton Drive CLI on Ubuntu?

Download the binary from proton.me/download/drive/cli, make it executable with chmod +x, and run it with dbus-run-session -- ./proton-drive. The required packages are wget, libsecret-1-0, and dbus-x11.

Is Proton Drive better than Google Drive?

For privacy, yes. Proton Drive uses zero-knowledge E2E encryption, meaning neither Proton nor anyone else can access your files. Google Drive does not offer this level of protection. However, Google Drive has better collaboration features and a more mature desktop sync client.

Can I sync files automatically on Linux?

Not natively yet. A cron job can run CLI commands on a schedule. Proton has confirmed a Linux desktop client with background sync is coming.

Conclusion

Proton Drive on Linux is not perfect yet, but it is the best encrypted cloud storage option available today. The CLI works reliably across Ubuntu, Fedora, and Arch-based distros. The dbus-run-session requirement is the only real gotcha, and once understood, it becomes second nature.

For anyone waiting for a privacy-focused cloud storage solution on Linux, the wait is over. Proton Drive is here, it works, and a native desktop client is on the way. Start with the 5 GB free tier, set up the CLI, and see if it fits the workflow.

By admin

Leave a Reply

Your email address will not be published. Required fields are marked *