• 3 Posts
  • 16 Comments
Joined 4 年前
cake
Cake day: 2021年2月26日

help-circle






  • winnie@lemmy.mlOPtoLinux@lemmy.mlUbuntu Flavors Will Stop Using Flatpak
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    1 年前

    I understand that sand-boxing can be achieved by other means, and flatpak is using kernel facilities. But this is actually way to make it mainstream, and ease applications packaging. Similar thing to what happens on mobile platforms, like Android and UWP(bruh). So this is actually progress to better and safer desktop. Not perfect yet.

    Most flatpaks don’t require access to root or home fs, so host files are shielded. Only way to access fs is using file access dialogs and Drag’n’Drop(which is broken currntly)

    good sandboxing has to be configured by trusted 3rd parties, like package maintainers, not by upstream developers, because the latter creates a conflict of interest.

    Unfortunately this is true. But you can check defined permissions before installing app. And user would be notified it application after update requires more permissions.

    But I guess flathub maintainers won’t check/review packages, so not ideal.




  • winnie@lemmy.mlOPtoLinux@lemmy.mlUbuntu Flavors Will Stop Using Flatpak
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    1 年前

    @federico3@lemmy.ml, @ParanoidFactoid@beehaw.org

    You misunderstand problem, that Flatpak is solving. Yeah, it’s not ideal way to distribute OSS software, if it already exists in distro’s repositories. But many distros has small repository with outdated software. But FP is great to run proprietary software, as it is able to confine it into sandbox. And untrusted code won’t be able to access your home dir!

    Some benefits can be for OSS software too, as some security bugs can be unintentionally introduced, or perhaps someone would intentionally introduce malicious code to codebase, and it would bypass code review. But mostly for Browsers, which might have remote code execution bugs.





  • Interesting. Actually FP is really good for running proprietary software, thanks to confinement/sand-boxing.

    Not so good for OSS software, which are better in native flavor.

    But I hope they can make flatpak work properly. Make Drag’n’Drop of files work not only on GTK4.

    But FP maintainers are pretending that this is Qt and GTK3 tams problem. They invented this portals as new free-desktop way, and want everybody to adopt spec.







  • But have you tried them?

    I’ve actually used Fish on my old system. I didn’t use it as daily driver. Now I’ve installed Manjaro, and it uses ZSH by default. And now I can compere them, and oh my, Fish auto-completion is way better. it’s interactive, showing command names and help on them. and allow to select completion by arrows, not [Tab].

    Only downside of fish is that it is incompatible with Bash. In Zsh you could copy-paste bash commands from tutorials and they would just work, but in Fish you need ot alter them, for example $(cmd) is just (cmd) in Fish.