91–100 of 144 posts
Here is a little blog post from 2021 that lists some of the huge issues flatpaks have https://ludocode.com/blog/flatpak-is-not-the-future
If you want to sandbox your programs highly recommend looking at firejail.
And Omarchy gets 7mi for being ....you know
Earlier quoted context omitted.
The crazy thing is that there is a model where governments / states / localities can migrate away from windows / Microsoft 365 ... and use part of the savings to fund open-source if this was done across Europe we'd have sovereign open-source tech stack that is strong, well funded, and used by 10s of millions in the EU alone. I have no idea why simple ideas like this are not persuade instead lots of incoherent, almost…
The process you're describing is underway. Schleswig-Holstein, Munich, Leon, and the Austrian military all come to mind as recent examples of that sort of migration, and then pivoting savings into support contracts for open source. That process is super important yes, but what about cases where the relevant government bodies don't think the open source offering is ready yet for them? That is where the STF steps in, a…
you will never make meaningful progress by those initiatives, there should be an echo of the US investment in data centers or china's investment in EVs.
bigger, systematic, with immediate impact on the software / cloud stack in the EU first and globally.
Earlier quoted context omitted.
Same except for Steam. Hope this money revitalizes bubblewrap's development, it'd be nice to get proper signal handling cleanup up then merged (even util-linux's unshare has it, these days).
I have bad news for you: The flatpak developers plan to stop using bubblewrap. They say it is no longer necessary because most distros now support unprivileged user namespaces. https://youtu.be/NsVhkz2Xl0E?si=-ypxvTlRukCZLql9
Earlier quoted context omitted.
> They don’t employ software-developers. They actually do employ developers: https://www.sovereign.tech/programs/fellowship > The projects need to apply repeatingly for funding. Still better than no funding at all.
> Compensation is based on the collective agreement for the public sector in Germany (TVöD-Bund) and will range from €64,000 to €82,000 per year for a full-time position, including 30 days of vacation, depending on qualifications and experience. LOL. That's €32,122 net for a full time position. And you're not even allowed to work from a place in southern Europe where you can actually live from that amount of money.
I loved Flatpak until I started building a MiniPC with a 112 GB internal disk for HTPC usage... Then I felt the pain of having to get all slightly different dependency versions for each little program I wanted. The box' cost already topped the project's budget so no new disk for it. I'm back to "proper .deb packaging please"
Use cases naturally differ, but I'd much rather use more storage than hit yet another unresolvable dependency issue.
My trust in Flatpak diminished after installing the book reader Calibre and finding that despite the sandboxing Calibre was given blanket access to my drive. Apparently a quirk of the developer behind Calibre insisting upon it. No warnings or communication of the exception were given. All trust I had in Flatpak was eroded from that moment on. Curious about the podman options or similar. Having desktop apps in a conta…
> No warnings or communication of the exception were given. All trust I had in Flatpak was eroded from that moment on This is just wrong. Clients like the flathub website or gnome software show the risk posed by wide ranging access to local files, but Flatpak has to support legacy applications that don't use portals yet and thus they can't block applications having those permissions https://flathub.org/en-GB/apps/com…
What it looks like in the CLI (depending on the host):
com.calibre_ebook.calibre permissions:
ipc network fallback-x11 pulseaudio
wayland devices file access [1] dbus access [2]
system dbus access [3]
[1] host, xdg-config/kdeglobals:ro, xdg-data/Trash, xdg-run/speech-dispatcher:ro
It'd be better and more comfortable to make task/workspace isolation easier. You have all your apps installed system wide as usual, and you isolate processes in sandbox per your current task.
Isolating individual apps and having to deal with permission prompts and protals, and persistence of permissions is uh, not very user friendly anyway.
Feels like this whole flatpak and similar mechanisms is more oriented on bringing in untrusted apps, rather than anything actually comfortable and useful as far as "work" isolation needs go.
I’m thankful for the STF. Germany is one of the few countries doing something. But it is not strategic software-development. * They don’t employ software-developers. No safety for the developers. No control over developers. * It is only temporary. * The projects need to apply repeatingly for funding. Wasting time and resources and chausing worries. The how planet needs Linux, BSD, cURL, ffmpeg, Flatpak. We need to en…
A single percentage of the revenue google generated by using ffmpeg would fund development indefinitely.
I loved Flatpak until I started building a MiniPC with a 112 GB internal disk for HTPC usage... Then I felt the pain of having to get all slightly different dependency versions for each little program I wanted. The box' cost already topped the project's budget so no new disk for it. I'm back to "proper .deb packaging please"
Use cases naturally differ, but I'd much rather use more storage than hit yet another unresolvable dependency issue.