Hi I’m Tim.

I’m AuDHD - officially diagnosed ADHD and self-diagnosed (for now) with ASD. I also suffer from a great deal of Imposter Syndrome.

  • 0 Posts
  • 130 Comments
Joined 2 years ago
cake
Cake day: June 24th, 2023

help-circle


  • Also, I am not sure what security Podman under Distrobox is making worse. Got an example?

    From the site …

    Security implications

    Isolation and sandboxing are not the main aims of the project, on the contrary it aims to tightly integrate the container with the host. The container will have complete access to your home, pen drive, and so on, so do not expect it to be highly sandboxed like a plain docker/podman container or a Flatpak.

    You are suggesting Flatpaks for security? Um. Ok.

    OP said …

    But the question developed if it would be wise to use distrobox to execute random internet scripts without altering your base OS/putting your data to risk.

    I was suggesting a Flatpak from a supported project over a random package from wherever being run as root on their box, yes.

    And how is calling the entire Freedesktop platform just to run an app better than the much more limited dependencies that Distrobox will pull in? And, if I already use Podman, Flatpak is a lot of extra complexity compared to Distrobox.

    And I just don’t see why I would install another insecure layer that is just going to use Docker/Podman, why not just install Docker/Podman and be done. And for a desktop app installing a Flatpak seems like a better tool than a pod/docker container if you can’t get a native package.












  • TimLovesTech@badatbeing.socialtoLinux@programming.dev*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    23
    arrow-down
    1
    ·
    1 month ago

    Some people did as they didn’t meet that min specs, but it wasn’t for something silly like the TPM requirement. Locking 11 behind a non-serviceable upgrade is artificially creating e-waste, and they should be forced to pay for it all to be properly recycled, but capitalism cares more about making the graph go up than becoming the earth from Wall-E