Fan of Flatpaks ...or Not?
Allero @ Allero @lemmy.today Posts 15Comments 2,184Joined 2 yr. ago
So, bring in security by initiating wars?
My point is, these interventions have never been about democracy, or freedom, or security for that matter. They were about forcibly creating dependent puppet states acting in the economic interest of the US and reinforcing its hegemony, locals be damned. And it's what every "successful" invasion has provided.
Take something like Chile as an example (it's a particularly black-and-white one, but there are plenty more). It was a liberal democracy ran by an elected President, who just so happened to be socialist. The reforms he has introduced threatened foreign capital within the nation, including the American one; as a result, CIA has first launched a propaganda campaign, and when this failed, sponsored and armed a coup that led to the instatement of a brutal and bloody authoritarian regime.
Did the country become more democratic? No. Did it become safer? Hell no. But it suddenly became very dependent on and friendly to American capital, which this entire operation was all about.
If we want some real world police, we should extend the scope of the UN Peacekeepers, instead of relying on a country with a hundred year history of arbitrary invasions and covert interventions. We need the peacekeeping force to be globally recognized and supported.
I don't know why do some people feel their country is entitled to carry world's justice. It's not better or more just, it's just properly defended against retaliation. It is harassment, not policing.
All these applications will never work in flat pack.
They don't have to! Flatpak doesn't remove all other ways to install software. But for 95% of use cases, it will do just fine.
Firejail is good, but it only solves sandboxing part of the equation, and there's so much more to Flatpaks than that. Also, it's more painful to configure and is more sysadmin-oriented.
F I N A L L Y
Now tell me it supports IPv6 and I'll be the happiest man alive
Permissions are also set by the packages developers
True, and I don't think it is healthy not to let them to. But it would be nice to either have some vetting on the matter, or ask user about which permissions they agree for when they install Flatpak.
Appeared 2 years ago
Ого, то есть примерно когда я сам здесь очутился. Никогда не слышал о ру инстансах, хоть и искал. Теперь, кажется, нашёл)
Берёте человечка на борт? Не обещаю сделать Рекабу главным инстансом, но всегда полезно быть по обе стороны Чебурнета, а то последнее время с забугорными беды бывают.
I'm not saying Flatpak is perfect, but it appears to be the best we have.
I absolutely agree more needs to be done to explain permissions and have sane defaults. Flatseal in particular could introduce more warnings, and this is where non-technical users set their permissions.
In my experience, most Flatpaks do not request full home folder access by default, and making Flatpak access everything everywhere typically requires user intervention.
Native apps, meanwhile, just run with full system-wide access; I get it that they're more vetted and more properly updated, but this is an unhealthy and insecure arrangement.
Fair criticism!
However, the extent of the damage is limited by flatpak and whatever permissions you have set, and, if I understand it correctly, you cannot attack one flatpak through the other unless they share access to some files.
Also, I haven't seen this kind of attack in the wild (maybe I'm not informed enough?) as opposed to rogue maintainers injecting malware into packages.
On an unrelated note: apparently, there is finally some Russian Lemmy instance? That's a welcome change.
I don't mind other solutions, as long as they have the key features Flatpak offers, namely:
- Being open-source
- Having app permission system
- Having bundled dependencies
- Integrating decently with the system
Times are changing, and memory constraints for most programs are generally not relevant anymore.
Thanks for the input! Yes, there are still certain issues with Flatpaks (for me it was aforementioned VPNs which also don't work through Distrobox, and it would be quite odd anyway). But overall, they manage most apps well, just as you say :)
As I said, dependencies typically don't take that much space. We're not in the '80s, I can spare some megabytes to ensure my system runs smoothly and is managed well.
As per naming, I agree, but barely anyone uses command line to install Flatpaks, as they are primarily meant for desktop use. In GUI, Flatpaks are shown as any other package, and all it takes is to push "Install" button.
If you want to enjoy your chad geeky Linux, you still can. Go for CachyOS, or anything more obscure, never to use Flatpaks again. At the same time, let others use what is good and convenient to them.
Joke's on you, I use Flatpaks on Arch
Certainly a fan, and I don't understand the hate towards it.
Flatpaks are my preferred way of installing Linux apps, unless it is a system package, or something that genuinely requires extensive permissions like a VPN client, or something many other apps depend on like Wine.
The commonly cited issues with Flatpaks are:
- Performance. Honestly, do you even care if your Pomodoro timer app takes up 1 more megabyte of RAM? Do you actually notice?
- Bloat. Oh, yes, an app now takes 20 MB instead of 10 MB. Again, does anybody care?
- Slower and larger updates. Could be an issue for someone on a metered traffic, or with very little time to do updates. Flatpaks update in the background, though, and you typically won't notice the difference unless you need something newest now (in which case you'll have to wait an extra minute)
- Having to check permissions. This is a feature, not a bug. For common proponents of privacy and security, Linuxheads grew insanely comfortable granting literally every maintainer full access to their system. Flatpaks intentionally limit apps functionality to what is allowed, and if in some case defaults aren't good for your use case - just toggle a switch in Flatseal, c'mon, you don't need any expertise to change it.
What you gain for it? Everything.
- Full control over app's permissions. Your mail client doesn't need full system permissions, and neither do your messengers. Hell, even your backup client only needs to access what it backs up.
- All dependencies built in. You'll never have to face dependency hell, ever, no matter what. And you can be absolutely sure the app is fully featured and you won't have to look for missing nonessential dependencies.
- Fully distro-agnostic. If something works on my EndeavourOS, it will work on my OpenSUSE Slowroll, and on my Debian 12. And it will be exactly the same thing, same version, same features. It's beautiful.
- Stability. Flatpaks are sandboxed, so they don't affect your system and cannot harm it in any way. This is why immutable distros feature Flatpaks as the main application source. Using them with mutable distributions will also greatly enhance stability.
Alternatives?
AppImages don't need an installation, so they are nice to see what the program is about. But for other uses, they are garbage-tier. Somehow they manage both not to integrate with the system and not be sandboxed, you need manual intervention or additional tools to at least update them/add to application menu, and ultimately, they depend on one file somewhere. This is extremely unreliable and one should likely never use AppImages for anything but "use and delete".
Snaps...aside from all the controversy about Snap Store being proprietary and Ubuntu shoving snaps down people's throats, they were just never originally developed with desktop applications in mind. As a result, Snaps are commonly so much slower and bulkier that it actually starts getting very noticeable. Permissions are also way less detailed, meaning you can't set apps up with minimum permissions for your use case.
This all leaves us with one King:
And it is Flatpak.
I'm not sure MAGAs are intelligent enough to know what it is
For a while, yeah
AI is merely a tool to make more money. First - as a lure to investors, as any hype is. But then through adoption and transformation.
For what it is in what respect? You tried to argue that Cold War is a good vs evil situation, I argued that it is very much evil vs evil.
I fully admit Russia is and always was (I told you why nineties don't really count) an autocracy, and that actions of Russian rulers have caused a lot of misery and suffering. This doesn't stop me from admitting the US is a deeply flawed democracy, that American rulers are known to take plenty of unpopular decisions (including wars that no one asked for), and are generally known to not care about lives of people outside the country, causing even more misery all around the globe up to this day.
And this is exactly why I want the governments to have less power, and advocate for direct democracy. Any power is potential for abuse, and Russia and the US have likely proved it the most. Curbing the power of all governments, big and small, has great potential to reduce violence and abuse. With direct democracy and independent media, Russia could have never attacked Ukraine, Israel could never attack Palestine, and US wouldn't threaten to enter Iran yet again. Russia also wouldn't have opposition in jails or abroad, US wouldn't send immigrants to Alligator Alcatraz, and level of human misery would be so much less.
As long as we lead ourselves to believe that this misery and suffering is righteous or "not that bad" to any degree, we empower the tyrants all around the globe.
Oh, I see!
But then again, same can be said of anything but matter, and even matter as we experience it is just a set of reflections and electrostatic repulsion.
You never truly touch a single object - you just reach the force equilibrium - and all things you see around you, as well as yourself, are 99,99999% emptiness, or rather a few tiny electrons being everywhere and nowhere at the same time. Even if we could compress our entire bodies to a grain of sand, it would still be mostly that - an emptiness filled with uncertainty. So, does it even matter?
Oh, Connect is still out there? Thought it is dead.
Annexation by USSR touched Baltics and parts of Poland. The rest was more of puppet governments - something the US has practiced extensively all around the globe.
Part of it was ex-Axis powers (like Japan), the other part - just about any government thinking of socialism or economic independence from the US or having oil (Vietnam, Cuba, Chile, Iran, Iraq, Indonesia, Brazil, Bolivia, Cambodia, Syria, Guatemala, China, Egypt - you name it). After the Cold War, there were barely a few years US was not involved in some conflict or the other over its "national interests" or "national security", suggesting that it was never about rivalry with USSR. Needless to say, local population was generally not very happy about getting these military interventions, carpet bombings, coups and instated dictators.
So, I cannot in good faith agree that US was any better in this respect. Both sucked a lot, and same is likely to happen to any grand military power - if anything because military needs experience to stay efficient, and with great power comes great desire to use it to your advantage.
Snap is cancer, and what Canonical does is insane.
In any case, it is unlikely someone will make an exclusive Flatpak for what doesn't work inside Flatpak. But I understand it means a lot for user choice and ability to compile programs they way you want, so I fully support shipping Flatpaks alongside classical packages and source code.