@Horizon_Innovations yes, looks yummy. We wants it! If only packaging rust apps for Debian were not such a pain, as they insist of pulling random blobs from all over the internet during the build process. This is a nogo for debian.

@mobian
Thanks @Horizon_Innovations for forwarding to @mobian!

I already tried to install #shortwave on #mobian and found there is no package available.

Could #shortwave not be included as a #flatpak?

@chrichri @Horizon_Innovations It is on flathhub, so if you configure flathub as a remote repository (we do not endorse it by default as it contains software with dubious and non-free licenses), it will pop up in your gnome-software list (https://www.flathub.org/apps/details/de.haeckerfelix.Shortwave)

@mobian O.k. that seems to work :). Followed https://flatpak.org/setup/Debian/ and then installed the #flatpak of #shortwave (~700MB - it comes at some cost...).

Uhm, the installation failed twice at some point and then made my #pinephone unresponsive to ssh and serial console.

A restart later and another installation try worked :)...

@mobian #shortwave #mobian

@chrichri @mobian Shortwave is pretty great! I had no trouble installing it.

@mobian @chrichri @Horizon_Innovations how about Fedoras foss-only flatpak remote?
https://registry.fedoraproject.org

@Domant3lis @mobian @chrichri @Horizon_Innovations woah, can I expect that to contain the same applicatins as flathub without the proprietary ones? Or does it serve very different purposes?

@vancha @mobian @chrichri @Horizon_Innovations AFAIK fedora copies all of flathub except for proprietary applications

@mobian
Uhm, rust apps are a problem for Debian? This sounds quite strange.

There are opinions out there that rust is one of the new emerging programming languages that could really have an impact on security.

E.g. https://www.heise.de/hintergrund/Entwicklung-Warum-Rust-die-Antwort-auf-miese-Software-und-Programmierfehler-ist-4879795.html (sorry, only in German, but I bet there are a lot of documents out there that describe the dis-/advantages of rust).

@chrichri Rust apps are not a problem per se. But pulling random sources during build time is. Build machines must not use internet sources during build time or you can never rely on a source package being able to build later. So dependencies need to be packaged too.

@mobian
Thanks for the explanation! I can follow very well that argumentation. So to package #shortwave one would have to package all of the "internet-dependencies" independently and pull them in per dpkg-dependency, right?

@chrichri Something along those lines, yes. (I am not a rust packager myself :-)).

@chrichri And if you think that is pedantic and silly, let me remind you of this story https://qz.com/646467/how-one-programmer-broke-the-internet-by-deleting-a-tiny-piece-of-code/ from 2016 where 11 lines of JavaScript caused a major disruption in the npm world (which uses a similar system of pulling sources at build time).