On Tuesday, 18 July 2017 at 13:39, Mathieu Bridon wrote:
On Tue, 2017-07-18 at 13:23 +0200, Dominik 'Rathann'
Mierzejewski
wrote:
> By the way, I can't figure out how to look inside a Flatpak and
> review its contents. Could someone provide some pointers?
On the repo all you have is an object store (much like Git's
.git/objects/ folder), but if you install the app you will also get a
checkout:
$ ls ~/.local/share/flatpak/app/org.gnome.Calendar/current/active/files/
bin lib manifest.json share
(that's because I installed the app with --user, if you install it
system-wide then it's under /var/lib/flatpak/app/...)
The manifest.json file is a recipe for how the app was built (like a
spec file), which helps reproducing builds.
The contents of that files/ directory are what gets mounted as /app/ in
the sandbox.
In other words, it's not possible to inspect a binary flatpak without
installing it. With RPMs, I can check what files will land on my system
and where, and also see what the scriptlets do. I can also extract
and inspect individual files. Am I missing something and worrying
unnecessarily that I can't do the same with flatpaks?
Regards,
Dominik
--
Fedora
http://fedoraproject.org/wiki/User:Rathann
RPMFusion
http://rpmfusion.org
"Faith manages."
-- Delenn to Lennier in Babylon 5:"Confessions and Lamentations"