5 ms·

This is a pretty light-weight article - doesn't go into security/isolation differences, or disk usage comparison. Here's something I came across a few days ago

This is a pretty light-weight article - doesn't go into security/isolation differences, or disk usage comparison. Here's something I came across a few days ago while I was researching the differences: https://askubuntu.com/questions/866511/what-are-the-differences-between-snaps-appimage-flatpak-and-others https://askubuntu.com/questions/866511/what-are-the-differen...

gcb0 8y ago
wait, "run without sandbox" is a pro-feature?!
- StavrosK 8y ago
  That you have the option to, for applications that won't work without full access? Yes, definitely. I don't want my format to say "well this file manager application needs to access your filesystem so it's not available for your OS because your packaging format doesn't allow us to run unsandboxed, good luck".
  - gcb0 8y ago
    I assumed the goal of those systems was for end users with no system or programming knowledge. hability to escape sandbox will only cause pain and security holes, while serving one or two advanced users.
    - StavrosK 8y ago
      So? Just don't allow the app to escape the sandbox.
- jhanschoo 8y ago
  Do you mean pro-feature as in it's a good feature or as in (as with the case for snaps) allowed outside of dev-mode only for paying customers of Canonical?
  - seenitall 8y ago
    Evidence? I don’t think that’s the case. There are plenty of non-commercial snaps with system access, it’s really a question of the nature of the snap. You would want something like Puppet to be able to read and write files all over the system, so the snap declaration and metadata needs to say that. I think the only interaction with Canonical is that they need to review snaps which do have filesystem access to check that it makes sense and ty to spot Trojan horse apps being published that way. It’s not perfect but it’s sensible.
noname120 8y ago
I would suggest directly linking to the source[1] as the answer in your link is not up-to-date. [1] https://github.com/AppImage/AppImageKit/wiki/Similar-projects#comparison https://github.com/AppImage/AppImageKit/wiki/Similar-project...
eeZah7Ux 8y ago
That comparison looks quite biased. Features and yes/no answers seem to be carefully picked to promote AppImage. Especially "Objectives and governance". Treating "Can run without sandboxing" as a feature is dubious.

gcb0 8y ago

wait, "run without sandbox" is a pro-feature?!

StavrosK 8y ago
That you have the option to, for applications that won't work without full access? Yes, definitely. I don't want my format to say "well this file manager application needs to access your filesystem so it's not available for your OS because your packaging format doesn't allow us to run unsandboxed, good luck".
- gcb0 8y ago
  I assumed the goal of those systems was for end users with no system or programming knowledge. hability to escape sandbox will only cause pain and security holes, while serving one or two advanced users.
  - StavrosK 8y ago
    So? Just don't allow the app to escape the sandbox.
jhanschoo 8y ago
Do you mean pro-feature as in it's a good feature or as in (as with the case for snaps) allowed outside of dev-mode only for paying customers of Canonical?
- seenitall 8y ago
  Evidence? I don’t think that’s the case. There are plenty of non-commercial snaps with system access, it’s really a question of the nature of the snap. You would want something like Puppet to be able to read and write files all over the system, so the snap declaration and metadata needs to say that. I think the only interaction with Canonical is that they need to review snaps which do have filesystem access to check that it makes sense and ty to spot Trojan horse apps being published that way. It’s not perfect but it’s sensible.

noname120 8y ago

I would suggest directly linking to the source[1] as the answer in your link is not up-to-date. [1] https://github.com/AppImage/AppImageKit/wiki/Similar-projects#comparison https://github.com/AppImage/AppImageKit/wiki/Similar-project...

eeZah7Ux 8y ago

That comparison looks quite biased. Features and yes/no answers seem to be carefully picked to promote AppImage. Especially "Objectives and governance". Treating "Can run without sandboxing" as a feature is dubious.