sandboxing != containers Please stop confusing the two things. Sandboxing is about security. Containers are mainly modern chroots. > And also it seems proces

sandboxing != containers Please stop confusing the two things. Sandboxing is about security. Containers are mainly modern chroots. > And also it seems processes and workflows are stuck in the 1990'ies further preventing progress Quite the opposite, especially in Debian. The distribution has been driving a lot of innovative projects including reproducible builds. > So some kind of base system + app store A curated archive of software, reviewed by trusted packagers and thoroughly tested by a large number of users? It's called APT and existed a decades before "app stores" > where the app developers can push sandboxed stuff No thanks, I'll never trust upstream developers to sandbox their own stuff. Too many times I run into upstream developers thinking that the end user system is their playground.