<![CDATA[Dev1 Galaxy Forum / Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?id=4012 Tue, 07 Jun 2022 13:56:04 +0000 FluxBB <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=36176#p36176 Hi everyone,

Real interesting topic !

I'm trying to install ATOM (off-line) https://dev1galaxy.org/viewtopic.php?pid=36174#p36174 with the most practical solution possible.

I've been recommended to use appimage with Firejail. What you think about that solution ?

]]> Tue, 07 Jun 2022 13:56:04 +0000 https://dev1galaxy.org/viewtopic.php?pid=36176#p36176 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26861#p26861 golinux wrote:

Or better yet, just don't use "appimage" at all.  I suspect that there aren't many devuan users who would touch it.

I have touched appimages in the past and occasionally still do, but that being said, you are probably right about appimage.

They probably aren't as secure or trustworthy as official repos for distros you trust.

I should add, i don't  flatpak and especially snaps even more so.

I am not sure about guix package manager, or other alternatives... but snap and npm ones currently rank my least trusted methods of installing.

Especially now that I know about ubuntu's non-free server for snaps. hmm

Aka, walled garden anyone?

]]> Sun, 17 Jan 2021 04:18:38 +0000 https://dev1galaxy.org/viewtopic.php?pid=26861#p26861 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26551#p26551 I've used two appimages.

1. Kdenlive.  They implemented some new features in the latest version (20.12), and I am on 18.12.3 w/beowulf.  KDE provided the appimage.  I don't use it all that often, but the new features are nice. 

2. I have a live-usb-maker appimage from the MX-linux team.  For some reason, I couldn't get a bootable USB to work (i.e. boot) using unetbootin.

I don't mind them at all, but I wouldn't want to use them exclusively.

]]> Mon, 04 Jan 2021 20:56:42 +0000 https://dev1galaxy.org/viewtopic.php?pid=26551#p26551 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26542#p26542 dice wrote:
Head_on_a_Stick wrote:
ToxicExMachina wrote:

Flatpak is also SystemD-exclusive package manager.

Nope: https://pkgs.alpinelinux.org/packages?n … ranch=edge

And it's spelled "systemd" FFS... mad

why does this trigger you so?

When people spell it that way it always makes me think of that manga/anime cartoon initial D

I don't get that either, let's just refer to systemd or system-d as system dumb from now on. Since it is so buggy and crappy...

wink

]]> Sun, 03 Jan 2021 12:38:21 +0000 https://dev1galaxy.org/viewtopic.php?pid=26542#p26542 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26541#p26541 Head_on_a_Stick wrote:
ToxicExMachina wrote:

Flatpak is also SystemD-exclusive package manager.

Nope: https://pkgs.alpinelinux.org/packages?n … ranch=edge

And it's spelled "systemd" FFS... mad

why does this trigger you so?

When people spell it that way it always makes me think of that manga/anime cartoon initial D

]]> Sun, 03 Jan 2021 11:36:37 +0000 https://dev1galaxy.org/viewtopic.php?pid=26541#p26541 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26538#p26538 ToxicExMachina wrote:

Flatpak is also SystemD-exclusive package manager.

Nope: https://pkgs.alpinelinux.org/packages?n … ranch=edge

And it's spelled "systemd" FFS... mad

]]> Sun, 03 Jan 2021 09:36:41 +0000 https://dev1galaxy.org/viewtopic.php?pid=26538#p26538 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26537#p26537 Anyone who recommend flatpak should note that flatpak is a big security hole itself by design. Flatpak is also SystemD-exclusive package manager. Snap is the same thing as flatpak. As for Appimage it's important to understand that Appimage is just an auxiliary way of software distribution. Consider Appimage as an advanced tarball. Of course, tarball is simpler and way more open thing than Appimage.

There is a problem: corporations are trying to force way of thinking incompatible with sane technical solutions.

]]> Sun, 03 Jan 2021 08:54:29 +0000 https://dev1galaxy.org/viewtopic.php?pid=26537#p26537 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26381#p26381 After these replies i learned (hope this help someone):

"AppImages", "Flatpak" projects are good for portability

BUT

if we promote these projects may one day new linux users will left behind the distribution repositories replaced by one centralized platform like the "Apple""App Store"/"Google""Play Store".

]]> Wed, 23 Dec 2020 18:37:52 +0000 https://dev1galaxy.org/viewtopic.php?pid=26381#p26381 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26380#p26380 https://thp.io/2019/flatpak-vs-snapcraft.html

Distribution Packages

I still hope that there's a place for distribution packages. The leaf packages ("apps") do need some kind of sandboxing, as sandboxing is good and important to have (not only to protect the "root" user, but protect the user's data, as usually there's more privacy-related juicy info in $HOME than in all of the system folders).

Even with Flatpak, there's still some duplication (e.g. the GTK version from the distro package and the Freedesktop Platform Flatpak), but it's better than Snap's "let every snap ship with its own version of ICU" or AppImage's "just run this executable, it contains Everything" approach.

]]> Wed, 23 Dec 2020 16:51:40 +0000 https://dev1galaxy.org/viewtopic.php?pid=26380#p26380 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26379#p26379 Analytics in each site: "Flatpak", "AppImage", "Snapcraft".

Flatpak:
di-WX9VML.png

AppImage:
9yiOpl0paQ.png

Snapcraft:
di-AYB3IV.png

]]> Wed, 23 Dec 2020 16:44:10 +0000 https://dev1galaxy.org/viewtopic.php?pid=26379#p26379 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26378#p26378 ...

]]> Wed, 23 Dec 2020 15:58:21 +0000 https://dev1galaxy.org/viewtopic.php?pid=26378#p26378 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26376#p26376 golinux wrote:

These pre-packaged all-in-one apps are an aberration and insult to Linux users.  Methinks they are for handicapped Winblows refugees who don't know what they're doing.

looks as though they are trying to emulate google play store, apple itunes, microsoft download etc for the gnome smartphone software, ever increasingly gnome desktop will probably morph into an android/iphone os spinoff. I was looking at that gnome look org and some of the top themes are all apple mac clones for gtk3, lol...

]]> Wed, 23 Dec 2020 15:16:43 +0000 https://dev1galaxy.org/viewtopic.php?pid=26376#p26376 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26375#p26375 These pre-packaged all-in-one apps are an aberration and insult to Linux users.  Methinks they are for handicapped Winblows refugees who don't know what they're doing.

]]> Wed, 23 Dec 2020 14:52:35 +0000 https://dev1galaxy.org/viewtopic.php?pid=26375#p26375 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26374#p26374 ...

]]> Wed, 23 Dec 2020 14:24:43 +0000 https://dev1galaxy.org/viewtopic.php?pid=26374#p26374 <![CDATA[Re: Info » AppImage security and alternatives]]> https://dev1galaxy.org/viewtopic.php?pid=26372#p26372 Can these appimages be used in software centers like gnome software or kde etc? Ive never used them, just curious how they are got.

]]> Wed, 23 Dec 2020 12:40:29 +0000 https://dev1galaxy.org/viewtopic.php?pid=26372#p26372