3 ms·
No, they are not from the original vendors... but also the original vendors were not interested in providing flatpaks themselves, so the community stepped in.
by vetinari 5y ago
No, they are not from the original vendors... but also the original vendors were not interested in providing flatpaks themselves, so the community stepped in.
I have yet to see any volunteer to refuse handing off maintenance of the flatpak package to upstream.
If they listened to your advice, there would be no flathub at all.
- smoldesu 5y agoEven still, is there a good reason anyone would take the performance/security/size hit instead of grabbing the official deb file?
- vetinari 5y agoYou might be using a distribution where .deb file won't help you much. Another reason might be, that you are getting an extra sandbox.
- smoldesu 5y agoThe sandbox does you no good if you can't confirm that the software running inside it isn't adversarial. It's a catch-22.
- mise_en_place 5y agoThe value prop for me is a stable runtime environment that’s reproducible. For example, in the Linux ecosystem, you need to use either the same exact version or a future version of glibc. Having multiple glibc versions is not possible without extreme headaches. It could be solved with static builds but there are cases when you cannot do that.
- smoldesu 5y agoNix has it's cake and eats it too. You can very easily store multiple versions of glibc (automatically, as a matter of fact) and it will dynamically link the different versions to the applications that require it. All of that happens without the overhead of a sandbox, and runs on everything from Denuvan to Void to Arch to Ubuntu to MacOS.
- vetinari 5y agoWhat is the overhead of the sandbox you are so worried about? It is just a linux namespace.
- smallerfish 5y agoThere should be no flathub under this setup - it's bad for security, and wastes community energy. The useful aspect of application packages is to give vendors a path to get updates to users out of band from distro updates. If vendors aren't going to use it, then leave the packaging to the distros.