607
submitted 3 weeks ago* (last edited 3 weeks ago) by [email protected] to c/[email protected]
you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 29 points 3 weeks ago

Sorry to ask, I'm not really familiar with Linux desktop nowadays: I've seen Flatpak and Flathub talked about a lot lately and it seems to be kinda a controversial topic. Anyone wanna fill me in what's all the noice about? It's some kind of cross-distro "app store" thingy?

[-] [email protected] 77 points 3 weeks ago* (last edited 3 weeks ago)

Flatpak is a universal application packaging standard for Linux. It allows devs to create a single application that gets bundled with all necessary dependencies including versioning.

These apps run in their own semi-isolated "container" which makes immutable distros possible. (Distros like Fedora Silverblue that are effectively impossible to break by installing or removing critical system files.)

This means that a Linux app doesn't have to have a .deb version, an .rpm version, or be pre-compiled for any other distros. A user can simply go to Flathub, (the main repository for Flatpak apps), download the flatpak, and install it on their distro of choice.

It's quickly becoming the most popular way for users to install apps on Linux because it's so easy and quick. But there are a few downsides like size on disk, first party verification, per-distro optimizations, and the centralization of application sources. That's why some users aren't fully endorsing or embracing how popular they are becoming.

[-] [email protected] 7 points 3 weeks ago

What about those apps using out of date libraries? Wouldn't that become a security issue - since containers usually aren't that secure, right? And all app developers would have to update their container libraries separately, instead of just updating the system libraries?

[-] [email protected] 5 points 3 weeks ago

As containers are isolated - it's mostly a security issue for the container itself. It may become an issue, though, if the container is allowed to freely interact with filesystem, for example.

Apps like Flatseal allow you to easily control such variables using a GUI instead of tinkering in the terminal.

[-] possiblylinux127 1 points 3 weeks ago

So if a library is out of date you can just update it. As far as containers go they are fine for security as bubblewrap is pretty solid.

load more comments (17 replies)
load more comments (27 replies)
this post was submitted on 22 Jun 2024
607 points (97.8% liked)

Linux

45797 readers
979 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS