Egregoros

Signal feed

Timeline

Post

Remote status

Context

18
@cjd sandboxes are a good thing imo. I installed steam via the official deb packages. Uninstalled it. And now I cant install it anymore because of some retarded apt problems. Flatpak solves this.
@cjd the fact flatpak works is because whatever the maintainer expects is always given. I tried installing steam on fedora and it didnt work. Had to look up why. Steam client expected some certs that dont exist. Flatpak? Well it ships that. So works immediately.
Yeah so each app carries an entire system with it.

It's based on the assumption that the underlying system is totally fucked - which sadly is the only safe assumption you can make.

But it only makes a blast shield to protect one desktop app from a fucked system, it doesn't do anything to unfuck the system itself.
@cjd @teto Flatpak doesn't ship with a whole kernel setup (Although it could eventually be developed to do that), and even if it did, there's plenty of wrapping methods translating kernel API calls that you wouldn't need a whole kernel with it anyway in most cases.

Flatpak ships with a self-contained glibc environment and anything else it needs as required by flatpak packagers

See it the other way: You don't want an app with internet access being able to list and be able to upload whatever is on your home directory (And potentially beyond), not to mention any other info about your system that you might not want it to know, or letting it being able to do trace calls to your kernel if you set your permissions too lax.
With things like Steam, you're normally giving an huge proprietary blob with full internet access read and write permissions into your entire home directory, not to mention direct hardware access and plenty more. Flatpak can reduce your exposure there

Replies

0
No replies yet.