There is no official Bluefin documentation for the Cloudflare WARP client, but the recommended approach is rpm-ostree layering (VPN clients are an acceptable use case for layering).

Steps#

1. Enable layering by editing /etc/rpm-ostreed.conf and setting LockLayering=false

2. Add the Cloudflare WARP RPM repository by following Cloudflare's official Linux instructions

3. Install and reboot:

   ⧉

   sudo rpm-ostree install cloudflare-warp
   sudo systemctl reboot
   

4. After reboot, enable and start the service:

   ⧉

   sudo systemctl enable --now warp-svc
   warp-cli connect
   

Caveats#

• Layered packages increase update time.
• Third-party repos can sometimes cause issues if they don't align with Fedora's archive.
• You can revert to a clean image at any time with rpm-ostree reset.

Alternative (No Layering)#

If Cloudflare supports exporting a WireGuard config, you can import it directly through GNOME's network settings, which avoids layering entirely.