• 1 Post
  • 33 Comments
Joined 1 year ago
cake
Cake day: June 5th, 2023

help-circle










  • Of course they are. they share dependencies with other software. flatpaks bundle all dependencies,which is great for sandboxing,even though some sort of break the rule and share some,they are still sandboxed.

    Unless you “firejail” or “bubblewrap” your software, security is much better OOB for flatpaks.




  • While I admit most of my arch reinstalls are mostly the same,I feel that archinstall script is genuinely good now with most defaults I need. The rest I can just add it in the installer extra packages or chroot post install (which is offered as a choice at the end).

    I just could never bring myself to use distros that are technically the same distro with calamares slapped in top and whatnot. I mean ‘pacman -S {packages}’ is straightforward enough for me.






  • I always check my flatpak settings post install before running the app and adjust permissions according to need. I mean it does offer more security to me since it’s user installed, I can granularly update permissions and control more or less where and what is can touch.

    Alternatives to this are SELinux,AppArmour and firejails which are slightly more inconvenient to use.

    To me that is mostly secure,or secure enough.

    Well and then there’s some immutable distros which might help overall.

    Edit: paragraphs


  • I’m a long time arch with plasma user and recently tried arch with gnome and couldn’t get into it, so decided to try something new so I switched to Fedora Kinoite and yes, updates are incredibly slow. I mean it’s ridiculous really when compared to arch, but the distro seems solid ( curious how long I’ll last before inevitably going back to arch).