On 29/06/2022 19:34, Vipul Siddharth wrote:
The flatpak remote for Flathub will have no filtering, making all
the
Flathub content available in GNOME Software and via the flatpak
commandline.
Strongly -1, because Flatpaks have higher priority over RPMs in Gnome
Software.
1. GNOME Software need to be patched to prefer RPMs over Flatpaks for
non-ostree Fedora variants, because it will replace Fedora packages with
Flatpaks. I think "Fedora RPM > Fedora Flatpak > Flathub Flatpak" for
Fedora Workstation and "Fedora Flatpak > Flathub Flatpak > Fedora RPM"
for Silverblue/Kinoite will be better.
2. Fedora shouldn't rely on low-quality third-party repository. A lot of
Flathub packages even doesn't built from sources on trusted infra:
Firefox, OBS Studio, Blender, Element, Signal, etc. They just repackage
DEBs or static binaries:
-
https://github.com/flathub/org.signal.Signal/blob/master/org.signal.Signa...
-
https://github.com/flathub/im.riot.Riot/blob/master/im.riot.Riot.yaml#L98...
-
https://github.com/flathub/org.blender.Blender/blob/master/org.blender.Bl...
Firefox and OBS Studio even uploaded as a pre-built ostree blob.
3. "Sandboxing" is the biggest lie. A lot of apps have
--filesystem={home,host} in manifests:
-
https://github.com/search?q=org%3Aflathub+filesystem%3Dhome&type=code
-
https://github.com/search?q=org%3Aflathub+filesystem%3Dhost&type=code
--
Sincerely,
Vitaly Zaitsev (vitaly(a)easycoding.org)