Flatpak: A security nightmare – two years later

Re:Flatpak: A security nightmare – two years later by kchr on Friday October 02, 2020 @12:43PM (#24664423)

Almost every package manager on Linux distros allow you to install packages outside of the main repositories and still manage dependencies using the repos.

I agree there are a lot of distros to package for, but I'd say the bonus of not having to maintain and update all the dependencies outweighs that fact.

For example, there are a lot of tools that can generate Debian packages for you if you don't want to spend any time learning the manifests. I assume these exist for most distros.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by quicklyfrozen on Friday October 02, 2020 @01:46PM (#24665053)

Even if there are easy tools available, I'd still need to learn them for each distro I want to support. Heck, just figuring out the different names each distro uses for a particular package is a fair bit of work.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by kevin_thibedeau on Friday October 02, 2020 @02:47PM (#24665734)

Just use Gnu Stow as a secondary package manager and install into the /usr/local tree.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by eikenberry on Friday October 02, 2020 @04:01PM (#24666483)

The discussion is about packaging your software for users, not yourself. Stow is a solution for managing non-packages software on your personal system, not for distributing it.

[ Parent | on HN ]

Re:Flatpak: A security nightmare – two years later by waheoo on Wednesday October 07, 2020 @11:24PM (#24715368)

Most people don't package their software for distros.

Smart distros keep things close to upstream so the burden is small.

This is a weird argument.

Now you want each developer to manage dependency updates for their application? I don't trust them to develop their own app let alone apply security patches properly.

[ Parent | on HN ]