this post was submitted on 08 Apr 2024
134 points (83.5% liked)

linuxmemes

21254 readers
1526 users here now

Hint: :q!

Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack members of the community for any reason.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
    • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
    • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.

    • Please report posts and comments that break these rules!

    founded 1 year ago
    MODERATORS
    poopsmith@lemmy.world
    zephyr@lemmy.world
    rtxn@lemmy.world
    134
    Dont install random stuff to your system guys (lemmy.kde.social)
    submitted 7 months ago by rollingflower@lemmy.kde.social to c/linuxmemes@lemmy.world
    63 comments fedilink hide all child comments
     
    flatpak remote-add flathub-verified --subset=verified https://dl.flathub.org/repo/flathub.flatpakrepo
    you are viewing a single comment's thread
    view the rest of the comments
    [–] PINKeHamton@lemmy.blahaj.zone 3 points 7 months ago (2 children)

    I have just had bad experiences with flatpack so I don't want to use it and the aur has the stuff I need and flatpack dose not

    [–] taanegl@lemmy.world 2 points 7 months ago (1 children)

    I've had nothing but good experiences with Flatpaks/Flathub and bad experiences with AUR/nixpkgs.

    Fedora also has it's own Flatpak repo now with it's own runtime.

    [–] rollingflower@lemmy.kde.social 2 points 7 months ago

    Same. Ubuntu AND Fedora Libreoffice, SciDAVis and more where broken, not the Flatpaks.

    Flatpak is really meant for the big GUI apps. No problem with small distro packages really. It just takes off the huge burdens of maintaining distro packages for like Libreoffice, which is as big as the Linux Kernel.

    [–] rollingflower@lemmy.kde.social 0 points 7 months ago

    You need to be more specific.

    You need to think about the background problem here.

    When Google made Android, it was web based. Their "perfect sandbox" ironically has no internet toggle. They won tons of marketshare, and iOS is not different here, both restrict apps to containers and have permission systems to reach out of these containers to access sensors, files and other data.

    Desktop operating systems are way older and have no such concept. We have mandatory access control with SELinux and Apparmor, but those are (I think) more complicated than Flatpak.

    Flatpak is a solution for multiple problems of Desktop Linux Apps at once.

    1. isolate apps with a real permission system
    2. make apps run anywhere
    3. have a single platform to target, so we dont need packagers anymore (for most GUI apps) and can file bugs upstream
    4. separating apps from the system: stable distros can have modern apps (similar to Windows) and Apps dont affect the stability of the OS at all. Also config files of such apps are in their container, not bloating your "oh so good xdg basedir"

    These are all extremely important points for a healthy, modern and secure Linux Desktop.

    But there are also issues to every point:

    1. most apps are not adapted to this model, which means they need broad static permissions like Pulseaudio, home or even host, allowing surveillance or trivial (even documented) privilege escalation. This is basically how apps like Flatseal work. Pulseaudio has no portal, do apps can listen to your mic whenever they want.
    2. Apps that "run everywhere" will not have distro-specific optimizations. The system needs to run on old LTS kernels to be universal, which means you miss out on tons of optimizations. Developers could just not care, but this depends on the app.
    3. Flatpak is more complicated than Snap (or even Appimage, if you leave the manual signing, monitoring vulnerable libraries and having a manual repo out). So it is not a great experience for "the Linux packaging model". GNOME Builder is a good IDE for it but afaik only for GTK apps.
    4. No issues here. This is the core princible of "immutable" distros like Fedora Atomic Desktops.

    If you have issues with flatpaks, you need to be more specific. Maybe it is a packaging issue, or you expect an app to do stuff that is not