On 1/26/23 8:42 AM, Jiri Eischmann wrote:
Vít Ondruch píše v St 25. 01. 2023 v 18:01 +0100:
Dne 25. 01. 23 v 15:59 Josh Boyer napsal(a):
On Wed, Jan 25, 2023 at 5:56 AM Vít Ondruch <vondruch@xxxxxxxxxx>
wrote:
I am not user of Bottles so I won't complain about this
particular case,
but the push towards (upstream) Flatpaks is unfortunate :/
Can you elaborate on why you feel that way?
I don't trust upstream Flatpacks. I don't trust they follow any
standard
except standard of their authors.
I maintain both packages in Fedora and flatpaks on Flathub, so I can
compare. The review to get an app to Flathub was as thorough as Fedora
package review. In some ways even stricter. It's not like "it builds,
it runs, you're good to go". They care about some standards, about
builds being verifiable etc.
That doesn't seems to be enforced because many builds scripts just
download binaries built by other projects, for example;
https://github.com/flathub/org.gnome.gitlab.somas.Apostrophe/blob/master/org.gnome.gitlab.somas.Apostrophe.json#L89
Note: building the entire pandoc and TeX toolchain is very hard and I
understand this example packager decision, but It doesn't make more
trustful that version that one on Fedora.
The Flathub CI seems to be more extensive than what we have in Fedora.
And I don't like Flatpacks, because their main advantage (their
isolation) is also their biggest disadvantage. There can't be both
without making compromises. If I am not mistaken, the isolation is
also
mostly myth, because it is disabled in most cases.
Why? Apps come with permissions they require (which you can override
btw). Just because some apps require access to your whole filesystem
doesn't mean the isolation is a myth. You know the permissions, you may
decide not to use such an app. None of the flatpaks maintained by me
require this kind of access and are well isolated.
Jiri
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
