Live data from Hacker News

Sovereign Tech Agency invests €500k in Flatpak

modal.cx

81–90 of 144 posts

Re: Sovereign Tech Agency invests €500k in Flatpak

#81
post #16

I loved Flatpak until I started building a MiniPC with a 112 GB internal disk for HTPC usage... Then I felt the pain of having to get all slightly different dependency versions for each little program I wanted. The box' cost already topped the project's budget so no new disk for it. I'm back to "proper .deb packaging please"

Use cases naturally differ, but I'd much rather use more storage than hit yet another unresolvable dependency issue.

Re: Sovereign Tech Agency invests €500k in Flatpak

#82
post #59
post #58

Earlier quoted context omitted.

A single percentage of the revenue google generated by using ffmpeg would fund development indefinitely.

A single percentage of the food budget for the google private jets would fund ffmpeg development indefinitely.

The point isn't how much Google spends on stuff in general, it's their wallet. What's important is how much they contribute back to the development of the tools they actively use to fill that wallet.

Re: Sovereign Tech Agency invests €500k in Flatpak

#83

Earlier quoted context omitted.

Can't it request and be granted that permission, transparently to the app? E.g. the app does EnumerateDirectories("~/photos") then without requiring modification to the app, the call is interecpted, the user is presented with a permission request UI, and once granted, the app continues? At least that's how I'd thought it would work. Perhaps this isn't viable?

Apps built with a toolkit which ships its own filepicker will immediately attempt to enumerate directories in `/`, `/home`, and probably a few other places. Apps with a config file will often try to read `~/.config/myapp` and also `~/.myapp/config` and maybe one or two other places. How many permission prompts will users tolerate?

If it's technically.implemented uniformely without thought of user access patterns, then yes it's a bad idea causing friction and frustration.

If I drag&drop a file in an app or it's icon, or by right click. The permission would be implicit.

For configuration files they could be part of allow rules, since they are so common if they follow the XDG specification.

For saving files, flatpak apps could be allowed to save anywhere in the users home sub-directories (not home top-level) as long as it doesn't overwrite any existing file. There are downloads, public, documents pictures, videos, that are barely used by default.

There is plenty of room for better desktop based integration, while of course lacking funding and care for users (thinking of particular devs in this case).

Currently it's a mishmash of separately using flatseal (and equivalents) and having your fingers crossed if you're likely to exfiltrate or not your data.

Re: Sovereign Tech Agency invests €500k in Flatpak

#84
post #39

I’m thankful for the STF. Germany is one of the few countries doing something. But it is not strategic software-development. * They don’t employ software-developers. No safety for the developers. No control over developers. * It is only temporary. * The projects need to apply repeatingly for funding. Wasting time and resources and chausing worries. The how planet needs Linux, BSD, cURL, ffmpeg, Flatpak. We need to en…

> They don’t employ software-developers. No safety for the developers. No control over developers.

Thank god they don't employ them. It would be terrible for everyone involved, especially for the developers. The government in Germany is a terrible employer for someone with high work ethics and a dedication to their craft. They crush your soul with bureaucracy and drain your spirit with rules and regulation. On top of that, they pay is ridiculously bad. I'm a principle engineer at a private company and some government agency thought they could poach me with 4k a month, LOL, that's not enough to pay rent and put food on the table for a family of 3 in my city (remember, we pay ~50% in tax and social contributions).

Re: Sovereign Tech Agency invests €500k in Flatpak

#85
post #39

I’m thankful for the STF. Germany is one of the few countries doing something. But it is not strategic software-development. * They don’t employ software-developers. No safety for the developers. No control over developers. * It is only temporary. * The projects need to apply repeatingly for funding. Wasting time and resources and chausing worries. The how planet needs Linux, BSD, cURL, ffmpeg, Flatpak. We need to en…

The crazy thing is that there is a model where governments / states / localities can migrate away from windows / Microsoft 365 ... and use part of the savings to fund open-source

if this was done across Europe we'd have sovereign open-source tech stack that is strong, well funded, and used by 10s of millions in the EU alone.

I have no idea why simple ideas like this are not persuade instead lots of incoherent, almost desperate distributed efforts are preferred.

ultimately I do believe that the bureaucrats in the EU are insanely disconnected from reality.

Re: Sovereign Tech Agency invests €500k in Flatpak

#87
post #82
post #59

Earlier quoted context omitted.

A single percentage of the food budget for the google private jets would fund ffmpeg development indefinitely.

The point isn't how much Google spends on stuff in general, it's their wallet. What's important is how much they contribute back to the development of the tools they actively use to fill that wallet.

They contribute a lot of open source software themselves, you can probably find a better example of a company benefitting from such but not contributing much

Re: Sovereign Tech Agency invests €500k in Flatpak

#88
post #39

I’m thankful for the STF. Germany is one of the few countries doing something. But it is not strategic software-development. * They don’t employ software-developers. No safety for the developers. No control over developers. * It is only temporary. * The projects need to apply repeatingly for funding. Wasting time and resources and chausing worries. The how planet needs Linux, BSD, cURL, ffmpeg, Flatpak. We need to en…

> They don’t employ software-developers. They actually do employ developers: https://www.sovereign.tech/programs/fellowship > The projects need to apply repeatingly for funding. Still better than no funding at all.

> Compensation is based on the collective agreement for the public sector in Germany (TVöD-Bund) and will range from €64,000 to €82,000 per year for a full-time position, including 30 days of vacation, depending on qualifications and experience.

LOL. That's €32,122 net for a full time position. And you're not even allowed to work from a place in southern Europe where you can actually live from that amount of money.

Re: Sovereign Tech Agency invests €500k in Flatpak

#89
post #4
post #2

I never understood why a program installed in Flatpak is not just a directory on disk. When you install something via Flatpak, it still changes data in god-knows-what places on my disk. And the software itself has read/write access to god-knows-where on my disk. The answer is probably "convenience and efficiency". But I would much prefer a "An application is a directory and by default cannot access anything outside o…

I use podman for things like this, works perfect until you want desktop applications but you can hack it about a bit to work fine with pipewire and Xephyr and you have. I feel like a lot of these desktop container systems are horrible and are quite hostile to configuring in the way you want around permissions and such and podman or docker does a better job.

I've had very good experiences with desktop applications in containers using Distrobox & podman. It handles all the integration into the host system, so video, audio etc. just work.

The default configuration is probably too well-integrated if you're looking to use it as a sandbox, but there should be ways to turn parts off.

Re: Sovereign Tech Agency invests €500k in Flatpak

#90
post #39

I’m thankful for the STF. Germany is one of the few countries doing something. But it is not strategic software-development. * They don’t employ software-developers. No safety for the developers. No control over developers. * It is only temporary. * The projects need to apply repeatingly for funding. Wasting time and resources and chausing worries. The how planet needs Linux, BSD, cURL, ffmpeg, Flatpak. We need to en…

The crazy thing is that there is a model where governments / states / localities can migrate away from windows / Microsoft 365 ... and use part of the savings to fund open-source if this was done across Europe we'd have sovereign open-source tech stack that is strong, well funded, and used by 10s of millions in the EU alone. I have no idea why simple ideas like this are not persuade instead lots of incoherent, almost…

The process you're describing is underway. Schleswig-Holstein, Munich, Leon, and the Austrian military all come to mind as recent examples of that sort of migration, and then pivoting savings into support contracts for open source.

That process is super important yes, but what about cases where the relevant government bodies don't think the open source offering is ready yet for them?

That is where the STF steps in, and gives funding to open source projects so that they can develop to a point where their software is ready for stable adoption by governments.

Post reply on HN