Live data from Hacker News

Why is there only one Snap Store?

merlijn.sebrechts.be

81–90 of 362 posts

Re: Why is there only one Snap Store?

#81

Earlier quoted context omitted.

I wish, but the signature is actually compiled into the snapd (the software on your system)'s binary. Deliberately impossible to reconfigure. Like I said, you can change the signature... by distributing a forked binary to users that would be incompatible with the main store.

Isn't this good? I mean if you are a distribution you compile the software yourself so you can add the distribution keys (there are some that don't compile stuff ). Probably you are thinking there should be atext file in your home where you could add new signature to be sued, but that could be a security issue so probably needs to be something more safe,did any serious patch was sent to improve this and was it reject…

No matter who you are, having to maintain a patched version of Snap just to use your own software is absolutely ridiculous.

I knew things were bad around Snap, but I didn't think they were attacking their feet with such fire power.

Re: Why is there only one Snap Store?

#82

That reminds me of the stake Ubuntu Core was born with in its heart: > An Ubuntu SSO account is required to create the first user on an Ubuntu Core installation. They just keep flinging shit at nothing and hoping to hit a wall they can build a gate in. They're trying to boil the frog slowly with Snap on the Server/Desktop branches. There is no possible genuine motive for these maneuverings to be in the position of ga…

To go back to Snap for a second: didn't Linux Mint drop it recently? I'm not happy on Ubuntu with snap because of what seems to be auto-updates -- maybe it's another thing that's auto-updating? I use Hugo [0], whose binaries are still [0] https://gohugo.io

Yes, auto-updates are built into snap. Also, the "solutions" to disable it are pretty much workarounds [1]. All this looks like just what made me stop using windows 10.

[1]: https://askubuntu.com/questions/930593/how-to-disable-autore...

Re: Why is there only one Snap Store?

#83
post #76
post #56

Earlier quoted context omitted.

doesn't look like it: https://github.com/BurntSushi/ripgrep#installation

> (N.B. Various snaps for ripgrep on Ubuntu are also available, but none of them seem to work right and generate a number of very strange bug reports that I don't know how to fix and don't have the time to fix. Therefore, it is no longer a recommended installation option.) I distinctly recall getting suggested by 'command-not-found' to install rg from a snap in some version of ubuntu, but I don't remember what versio…

Just an hypothesis, maybe some Rust apps that can't be compiled with the toolchain in Debian/ubuntu have no pother choice then use snap/flatpack (so maybe at that time in an LTS ditro apt would not have worked)

Re: Why is there only one Snap Store?

#84

Earlier quoted context omitted.

At least for now, there are no plans to change this because Flatpak (if I recall) requires dbus. You might find some interesting info on that.

You seem to be suggesting that servers don't run dbus. It is currently running on all my servers and I'm pretty sure it is standard on all major server oriented distros.. Am I mistaken or did I misunderstand your point?

My memory is foggy, but there was something about dbus which rendered it unsuitable for systems without a running GUI on X/Wayland. Not sure what though, it's been years.

Re: Why is there only one Snap Store?

#85
This is easy to explain if you think of it as a business decision. Why would anyone pay $30000 for a custom "enterprise edition" snap store[1] -- which among other features restores full control of updates -- if anyone could easily set up their own snap stores?

[1]https://ubuntu.com/pricing/devices

Re: Why is there only one Snap Store?

#86
post #60

Earlier quoted context omitted.

Isn't this good? I mean if you are a distribution you compile the software yourself so you can add the distribution keys (there are some that don't compile stuff ). Probably you are thinking there should be atext file in your home where you could add new signature to be sued, but that could be a security issue so probably needs to be something more safe,did any serious patch was sent to improve this and was it reject…

> Probably you are thinking there should be atext file in your home where you could add new signature to be sued, but that could be a security issue so probably needs to be something more safe,did any serious patch was sent to improve this and was it rejected or why we expect Canonical to prioritize this over other issues? If someone can replace that text file, they can replace the binary the key is compiled into.

Yeah, but this isn't really any worse than APT or RPM at the moment. More like, if they can change the text file, you've got bigger problems.

Re: Why is there only one Snap Store?

#87
post #75

Is this another whining post? Here is what I think. Ubuntu actually works. Wont crap out every other month. Most stable OS for linux are all ubuntu based. Even Snap works. So why is there only one snap store? Coz if there were more, they would be crap/dogshit like 99% of linux OS are. Go back to what ever OS you like. You are not needed. Useless free loaders.

People will be angry with your bluntness, but you are absolutely, irrefutably, correct.

Ubuntu is so much more stable and capable than any other distro that is ridiculous. If Micro$oft or "Crapple" gave users similar levels of reliability that other distros did, every single user on HN (EVERY SINGLE ONE) would be frothing at the mouth criticizing them.

Hell, until F32, Fedora would not boot to a usable system after installation without GRUB and config file tweaks on my workstation (TR1950X+GTX1080+dual 4k monitors).

Ubuntu? "No problem man I can do it."

Re: Why is there only one Snap Store?

#88
post #60

Earlier quoted context omitted.

Isn't this good? I mean if you are a distribution you compile the software yourself so you can add the distribution keys (there are some that don't compile stuff ). Probably you are thinking there should be atext file in your home where you could add new signature to be sued, but that could be a security issue so probably needs to be something more safe,did any serious patch was sent to improve this and was it reject…

> Probably you are thinking there should be atext file in your home where you could add new signature to be sued, but that could be a security issue so probably needs to be something more safe,did any serious patch was sent to improve this and was it rejected or why we expect Canonical to prioritize this over other issues? If someone can replace that text file, they can replace the binary the key is compiled into.

Apt has utilities for managing keys, You could keep it simple with plain text file that anyone can read and write but some dude can paste the wrong thing and corrupt the file, or you need to update the format and old scripts would corrupt the file etc. It can be done but as a developer I put in my code constant numbers and paths because there is not enough of a reason to justify the effort to save this values somewhere else. From the article it seems that there is not enough interest from distributions to have their own app store so there is no justifications to prioritize this feature over other ones.

Re: Why is there only one Snap Store?

#89
post #57

Control. 1. Get market share with free product. 2. Start charging once monopoly is achieved. 3. Profit!

Highly doubtful they'd make any material amount of revenue from selling software on Linux since a lot of Linux's user base prefer to only use free and open source software.

Re: Why is there only one Snap Store?

#90
post #71
post #57

Control. 1. Get market share with free product. 2. Start charging once monopoly is achieved. 3. Profit!

Lol as if there is oodles of money to be gained from hosting a store like that on Linux. We can see all these steam game publishers desperate to release games to a community that is rather famous fo being cheapskates. Also, snap existing doesn't hinder flatpak or appimage or debs or rpms.

Does the Google Play Store not make moeny?
Post reply on HN