5 ms·
I just use chromium from flatpak, never had any issues with it. I can also switch to Ungoogled Chromium if I wanted to.
by mise_en_place 5y ago
I just use chromium from flatpak, never had any issues with it. I can also switch to Ungoogled Chromium if I wanted to.
- smallerfish 5y agoWho packages it and how do you know you can trust them? Fun fact: the Jetbrains flatpak images are _not_ packages by Jetbrains. If you ask Jetbrains about them, they will tell you it's a random third party (/enthusiatic community volunteer) who packaged them up. Flatpak is a shitshow and should be avoided until and only if Flathub gets better control over packaging.
- vetinari 5y agoNo, they are not from the original vendors... but also the original vendors were not interested in providing flatpaks themselves, so the community stepped in. I have yet to see any volunteer to refuse handing off maintenance of the flatpak package to upstream. If they listened to your advice, there would be no flathub at all.
- smoldesu 5y agoEven still, is there a good reason anyone would take the performance/security/size hit instead of grabbing the official deb file?
- vetinari 5y agoYou might be using a distribution where .deb file won't help you much. Another reason might be, that you are getting an extra sandbox.
- smoldesu 5y agoThe sandbox does you no good if you can't confirm that the software running inside it isn't adversarial. It's a catch-22.
- mise_en_place 5y agoThe value prop for me is a stable runtime environment that’s reproducible. For example, in the Linux ecosystem, you need to use either the same exact version or a future version of glibc. Having multiple glibc versions is not possible without extreme headaches. It could be solved with static builds but there are cases when you cannot do that.
- smoldesu 5y agoNix has it's cake and eats it too. You can very easily store multiple versions of glibc (automatically, as a matter of fact) and it will dynamically link the different versions to the applications that require it. All of that happens without the overhead of a sandbox, and runs on everything from Denuvan to Void to Arch to Ubuntu to MacOS.
- vetinari 5y agoWhat is the overhead of the sandbox you are so worried about? It is just a linux namespace.
- smallerfish 5y agoThere should be no flathub under this setup - it's bad for security, and wastes community energy. The useful aspect of application packages is to give vendors a path to get updates to users out of band from distro updates. If vendors aren't going to use it, then leave the packaging to the distros.
- mise_en_place 5y agoI have compiled chromium in the past but the source tree is notoriously unstable. Half the time extensions are broken like uBlock.