🔜fosdem
Put that in packages, otherwise you're probably going to have some binary-compatibility horror.
Most people use Arch, Ubuntu or Fedora. And all of them are just purely bad.
If I'm missing a package for anything, it's a nightmare to grab it.
So to me they are failed distros, and I don't see why I should have to bear the pain of other people's choices.
Quite like how with python you need to at least bump your packages every 6 months in most distros.
i guess. I havent messed with packaging yet. Currently, as just a user who loves the concept of flatpak but still hates how messy it is, arch and its aur work greatly.
Learn static linking if you want to ship blobs that ignore the distro.
@lanodan @MischievousTomato @a1ba Wasn't isolation by using chroot the main point? It ensues bringing all the dependencies in, but that wasn't the primary objective. Am I wrong?
Flatpak problem is mostly: Yeah, please ship me an entire distro as blob that can't be rebuilt/modified. So in practice, everyone looses the rights guaranteed by FOSS licences.
(Also crappy integration in the host system, meaning broken accessibility)
@lanodan @MischievousTomato @a1ba I agree with you, it is broken. Crappy integration is a major problem — but it is actually what they wanted to achieve with isolation. Static linking is not the same as what *they* wanted to do with flatpak — that's what I was talking about.
@MischievousTomato @a1ba @lanodan That's the price you have to pay for sandboxing/isolation, you can't have it and perfect integration at the same time 🤷
Well on linux you basically can't, it's a Unix system.
Namespaces are an afterthought, it's not part of the system design, this is why user namespaces are often a security issue, they weren't there ~10 years ago.
And filesystems overlays also have been pretty much always broken in linux, it's kind of wonderful to see them still being broken after all this time.
(I think it's better on illumos and BSD)
Meanwhile If you look into Plan9 system design, you access almost all APIs via files, making it simple to sandbox and isolate.
And I think more recent systems based on microkernels also do similar things.
@lanodan @MischievousTomato @a1ba P9 was way ahead its time. I hoped it would gain popularity given its distributed nature when all this "cloud" shit was gaining steam, but no workloads didn't shift from clients, you still have to have a powerful one, they've just used "the cloud" as a justification to steal your data.
