3 ms·

So what is the way forward for Linux to have sandboxi g as strong as Android? Appimage everything? I know it's possible now hacking together things, but I mean

So what is the way forward for Linux to have sandboxi g as strong as Android? Appimage everything? I know it's possible now hacking together things, but I mean by default and integrated.

uecker 11d ago
Maybe we could develop trustworthy free-software applications again, instead of trying to establish a commercial apps ecosystem on top of Linux?
bayindirh 11d ago
Amutable. Building an immutable and image based system which even the installer can't modify, a-la macOS. One systemd patch at a time.
- 1718627440 11d ago
  This is actually already required to be supported by complying to the FHS.
- LelouBil 10d ago
  Immutable OSs are great, I'm running a custom image based on Bazzite for a couple of years now. But that doesn't solve the user sandboxing problem, flatpaks and xdg portals does. Still, a lot of portals are still missing or not fully implemented, but it's getting there !
  - bayindirh 10d ago
    At the end of the day, a sandbox is a slice/cgroup. i.e.: Kernel's ability to create a complete bubble around a process or set of processes. My beef is not with immutable OSes or sandboxes or else. They all have use cases and reasons. My primary beef is being locked out of my own system without my consent. I want to own my personal (esp. Linux) systems, that's all. I'm also against erosion of Free Software ecosystem for something looking open, yet non-buildable or modifiable by the end user. This is why I don't like permissive licenses and essential software to be licensed-washed from Free to Open.
hexfish 11d ago
AppImage is not a sandbox
pjmlp 11d ago
Note that the sandbox also relies on the fact that most userspace is managed, the Android team is very clear on what they see as supported use cases for the NDK.
LelouBil 10d ago
Do you mean flatpak ? (Or directly using bubblewrap, the actual sandbox ?). Appimages are not sandboxed

So what is the way forward for Linux to have sandboxi g as strong as Android? Appimage everything? I know it's possible now hacking together things, but I mean by default and integrated.

uecker 11d ago

Maybe we could develop trustworthy free-software applications again, instead of trying to establish a commercial apps ecosystem on top of Linux?

bayindirh 11d ago

Amutable. Building an immutable and image based system which even the installer can't modify, a-la macOS. One systemd patch at a time.

1718627440 11d ago
This is actually already required to be supported by complying to the FHS.
LelouBil 10d ago
Immutable OSs are great, I'm running a custom image based on Bazzite for a couple of years now. But that doesn't solve the user sandboxing problem, flatpaks and xdg portals does. Still, a lot of portals are still missing or not fully implemented, but it's getting there !
- bayindirh 10d ago
  At the end of the day, a sandbox is a slice/cgroup. i.e.: Kernel's ability to create a complete bubble around a process or set of processes. My beef is not with immutable OSes or sandboxes or else. They all have use cases and reasons. My primary beef is being locked out of my own system without my consent. I want to own my personal (esp. Linux) systems, that's all. I'm also against erosion of Free Software ecosystem for something looking open, yet non-buildable or modifiable by the end user. This is why I don't like permissive licenses and essential software to be licensed-washed from Free to Open.

hexfish 11d ago

AppImage is not a sandbox

pjmlp 11d ago

Note that the sandbox also relies on the fact that most userspace is managed, the Android team is very clear on what they see as supported use cases for the NDK.

LelouBil 10d ago

Do you mean flatpak ? (Or directly using bubblewrap, the actual sandbox ?). Appimages are not sandboxed