Hi I’m Tim.

I’m AuDHD - officially diagnosed ADHD and self-diagnosed (for now) with ASD. I also suffer from a great deal of Imposter Syndrome.

  • 0 Posts
  • 130 Comments
Joined 2 years ago
cake
Cake day: June 24th, 2023

help-circle


  • Also, I am not sure what security Podman under Distrobox is making worse. Got an example?

    From the site …

    Security implications

    Isolation and sandboxing are not the main aims of the project, on the contrary it aims to tightly integrate the container with the host. The container will have complete access to your home, pen drive, and so on, so do not expect it to be highly sandboxed like a plain docker/podman container or a Flatpak.

    You are suggesting Flatpaks for security? Um. Ok.

    OP said …

    But the question developed if it would be wise to use distrobox to execute random internet scripts without altering your base OS/putting your data to risk.

    I was suggesting a Flatpak from a supported project over a random package from wherever being run as root on their box, yes.

    And how is calling the entire Freedesktop platform just to run an app better than the much more limited dependencies that Distrobox will pull in? And, if I already use Podman, Flatpak is a lot of extra complexity compared to Distrobox.

    And I just don’t see why I would install another insecure layer that is just going to use Docker/Podman, why not just install Docker/Podman and be done. And for a desktop app installing a Flatpak seems like a better tool than a pod/docker container if you can’t get a native package.