Meanwhile Inkscapes official methods to get the GTK4 nightly are
- appimage (broken by design)
- snap (only sandboxed on ubuntu and requires snapd)
- ppa (only on ubuntu at all, but possible through distrobox)
When there is a beta release there will likely be a flatpak soon though.
Why is Appimage broken by design?
Yawn…
Beyond the given arguments, App images are destined to have subpar Wayland support because the main dev behind app images is a toxic kid who has a weird attachment to the x server, to the point of rejecting PRs where others have done the work of improving Wayland support on his behalf.
Because Linux isn’t Windows 95
It’s a nightly build, I don’t really see that as an issue. The stable build is available in every format I can imagine.
For sure. It is not a huge problem. But still kind if a bummer
Just get the exe and use wine. Or windows VM. I always use .exe for everything. I have no app images or flatpaks. On Ubuntu make a windows VM, in that windows VM install virtualbox and make an Ubuntu VM… And keep doing this until you have no disk space. Make a VM for every app.
I solved it.
That’s basically sandboxing with extra steps… but whatever works for you, I guess.
It’s a joke, obviously
Many years ago, it was discovered that Wine could run Windows viruses/worms/malware just fine, thank you very much…
“Sandboxing”, it isn’t.
It runs with all the privileges of the user running the app, iirc.
Thats why you should only use flatpakked wine wrappers like Bottles. Bottles has no filesystem permissions at all, everything uses portals. So I suppose (apart from maybe privileged syscalls?) Viruses would be harmless
Uhm did you forget a /s ?
good god
FWIW, snaps are sandboxed on any system that uses AppArmor, which includes most Debian or SuSE based distros. There’s also a partial implementation of the sandboxing for SELinux, but the different model makes doing a complete implementation problematic.
Is that sandboxing graphically available like with Flatpak? To my knowledge it required Apparmor patches but that these are upstreamed is a good info. The SELinux implementation sounds interesting, but well… I dont see the point?
selinux support doesn’t actually work. The point was to present snap as portable when it is not.
Bubblewrap on the other hand…
Works on any Linux kernel in the past like decade, yes.
Damn.
Yes, that sandboxing works with graphical apps in addition to CLI apps and services, and there are several graphical applications that allow you to select connections for snapped apps, including KDE Discover.
The SELinux implementation is primarily there to ensure that SELinux’s enforcement doesn’t break snapped apps, but a side effect of the different model compared to AppArmor’s means that filesystem based sandboxing is only partial. And, of course, if the system has SELinux in permissive mode snapd won’t force it into enforcing mod. Specific vary from system to system, but it means that the filesystem isolation isn’t as good under SELinux as it is under AppArmor. Most of the sandboxing is done through cgroups, though, which is not dependent on whether one uses SELinux or AppArmor.
appimage (broken by design)
Stop gaslighting.
Gaslighting is a colloquialism, loosely defined as manipulating someone into questioning their own perception of reality.
What?
People just use it as a buzzword to mean “you’re saying things that I disagree with” now
Hahaha that is actually mentioned in the article below
According to Robin Stern, PhD, co-founder of the Yale Center for Emotional Intelligence, “Gaslighting is often used in an accusatory way when somebody may just be insistent on something, or somebody may be trying to influence you. That’s not what gaslighting is.”[17]
Ok, my bad. But you see what i meant. You not liking appimage doesn’t mean it’s broken. In fact, i consider packaging some old-but-beloved apps with compile errors lately as appimage, because it just runs without much hassle.
I didnt say it is broken because I dont like it.
Makes sense - PPAs are very platform specific, plus from a user point of view a bit of a security nightmare (not the Kodi PPA but the idea of adding lots of different PPAs, often poorly named and difficult to keep track of as a user).
I used to get fed up with PPAs when I used Ubuntu - particularly when you to go through a major distro upgrade and you have to go hunting through all of them to see if they support your new distro version. They’re just not a good distribution system for most users.
Also the Flatpak will benefit more users across other systems and has the potential to be more secure (particularly given the add ons people download and run in kodi).
Edit: worth noting they have retired the PPA but haven’t built out all their equivalent Flatpak versions. An example of the unpaid hard work and hours volunteers put in to maintain open source software.
What’s a PPA?
Basically Ubuntu’s version of the AUR.
Except they can be hosted by the person/company making the software. This always seemed more trustworthy than AUR to me.
Of course there are also community PPAs that would need the same scrutiny as AUR packages.
You mean… zero scrutiny? 🙂 The big advantage of AUR is that there’s only one of it but that’s about it.
The PPA model is fundamentally broken. As soon as you replace a core package from a PPA (which happens silently if it’s a dependency) you can kiss upgradeability goodbye. By the time the next Ubuntu release rolls out you’ll be in dependency hell and won’t be able to upgrade cleanly.
PPA:s are specifically hosted by Canonical, no? Otherwise it’s just a normal repo.
Wait, being hosted by anyone makes it more secure?
Jeez, I’m glad I’m not new to the internet and backwards rhetoric like yours just falls by the wayside because I’m so used to it.
I just don’t expect more from you people at this point 🤣
It’s basically a privately hosted repo with a very small set of programs/libraries. PPA is a Personal Package Archive.
If you run Ubuntu (or most Debian derivatives) you can add a PPA as an extra repo and the version of software in that repo will usually be newer than the versions maintained by the distro (or even not present in the distro).
It’s not quite like the AUR - the AUR is a central public repo that people submit their packages to. Each PPA is a privately run and maintained repo with their packages in.
It is used by some projects to officially distribute their software but it is also something of a potential security nightmare.
Ubuntu’ AUR (don’t try to use it in Debian tho).
Hopefully nothing but a bad memory in the future.
Wow pog