RemixOS – Android for the desktop

Post by netheril96 » Fri, Jan 08, 2016, 8:44 AM UTC

digi_owl wrote: post #106

detaro wrote: post #100

Earlier quoted context omitted.

A large value of app sandboxes are easy but controlled ways to allow exceptions. E.g.: an app can ask the sandbox for file access, the sandbox then prompts the user to select a file and only that file is then exposed to the app. Or even giving global access to functionality from a manifest file, without having to set up a restricted user/environment manually. (I wouldn't know without looking it up how to set up a lin…

Reminds me of a friend of mine that when provided with a manual for how to do something "that's too complicated, please do it for me". Meaning that "containers" just becomes a wrapper for things that can already be done, if one just learn to do it rather than pointing and drooling (as someone once referred to the GUI as).

Post by netheril96 » Fri, Jan 08, 2016, 8:48 AM UTC

digi_owl wrote: post #99

nextos wrote: post #24

Earlier quoted context omitted.

I'm certain containers will end up replacing package managers. This idea is being pushed by the systemd guys. I think its a step backwards, as you loose tight control over dependencies. E.g., in case of a security issue, one cannot easily patch all containers if they are blackboxes. IMHO, the right tool for this is an improved package manager such as Nix or Guix (which incidentally also support containers in their ow…

That seems like yet another case of freedesktop/gnome/fedora finding another hammer and applying it to all the "nails". Containers fix a problem that unix has solved for decades. https://en.wikipedia.org/wiki/Soname The problem is the package managers used by most distros getting hung up on there only being a single version number of each package name installed at any one time. Sort that out, like say how Gobolinux d…

Post by digi_owl » Fri, Jan 08, 2016, 9:20 AM UTC

kevin_thibedeau wrote: post #98

derefr wrote: post #69

Earlier quoted context omitted.

The parent is advocating for the Slackware approach—just take whatever's in the upstreams and slam it together—but installed into a container (so all that slamming doesn't conflict with anything), and distributed as a container image. This is effectively the 'modern Linux app philosophy', as supported by systemd et al. It's similar in concept to app bundles, but it also assumes automatic sandboxing. It's great for ga…

GNU Stow gives shell users a great way to build contained applications that can be patched into the traditional filesystem through symlinks, avoiding the uncontrollable spew of files everywhere.

Post by digi_owl » Fri, Jan 08, 2016, 9:25 AM UTC

oblio wrote: post #122

digi_owl wrote: post #99

Earlier quoted context omitted.

That seems like yet another case of freedesktop/gnome/fedora finding another hammer and applying it to all the "nails". Containers fix a problem that unix has solved for decades. https://en.wikipedia.org/wiki/Soname The problem is the package managers used by most distros getting hung up on there only being a single version number of each package name installed at any one time. Sort that out, like say how Gobolinux d…

Unix has solved for decades? Not really, if we look at the state of adoption of this solution. We supposedly discovered concrete 2 millennia ago but only adopted it widely 150 years ago. I wouldn't diss people who actually have a shot at fixing the problem, even though you might not like their solution.

Post by digi_owl » Fri, Jan 08, 2016, 9:32 AM UTC

detaro wrote: post #113

digi_owl wrote: post #106

Earlier quoted context omitted.

Reminds me of a friend of mine that when provided with a manual for how to do something "that's too complicated, please do it for me". Meaning that "containers" just becomes a wrapper for things that can already be done, if one just learn to do it rather than pointing and drooling (as someone once referred to the GUI as).

Who needs restricted user permissions, you can just review the machine code of all your executables before running them ;)