• 1 Post
  • 35 Comments
Joined 1 year ago
cake
Cake day: June 5th, 2023

help-circle
  • I genuinely didn’t know about this. I’ve been avoiding immutable OSes as I’ve had issues with distros like Bazzite in the past where packages completely disappeared from my system after a freeze when overclocking my GPU,which ruined the whole experience for me.

    However, I’m interested in blend os,which unfortunately comes with gnome by default,but I will give it another try with layering plasma on it next time I try it,cause the idea of a distrobox centric distro is really appealing.

    End rant.

    Thanks for sharing this.















  • Of course they are. they share dependencies with other software. flatpaks bundle all dependencies,which is great for sandboxing,even though some sort of break the rule and share some,they are still sandboxed.

    Unless you “firejail” or “bubblewrap” your software, security is much better OOB for flatpaks.



  • While I admit most of my arch reinstalls are mostly the same,I feel that archinstall script is genuinely good now with most defaults I need. The rest I can just add it in the installer extra packages or chroot post install (which is offered as a choice at the end).

    I just could never bring myself to use distros that are technically the same distro with calamares slapped in top and whatnot. I mean ‘pacman -S {packages}’ is straightforward enough for me.





  • I always check my flatpak settings post install before running the app and adjust permissions according to need. I mean it does offer more security to me since it’s user installed, I can granularly update permissions and control more or less where and what is can touch.

    Alternatives to this are SELinux,AppArmour and firejails which are slightly more inconvenient to use.

    To me that is mostly secure,or secure enough.

    Well and then there’s some immutable distros which might help overall.

    Edit: paragraphs