Funny how it isn’t popular in countries with population several times larger than the USA. I guess every outside of the US can see through the bullshit of corporate-hijacked open-source.
Do you maybe mean snap?
Snaps are a default no, obviously. Most of the points by Flatkill still hold true to this day. Apart from that, I have my own set of disagreements which I’ll not be talking about - basically, stuff like reproducibility, storage space, inconsistent permissions, inconvenient configurations, outdated runtime - well, you get the point, so I’ll not be expanding on that.
My primary disillusionment towards Flatpak has to do with how people with shared backgrounds and vested corporate interests have taken over open-source - in this particular case, I am talking about Big Tech. It’s almost as if the space for a community-developed organization is hijacked by them - by them occupying core positions of the organization.
These organizations do not follow a horizontal approach to decision-making, they often come up with decisions without consulting folks that aren’t within their direct circle, and worst, when they’re held in a tight-spot, they can evade any criticism by appealing to authority - that they’re the maintainers/contributors, and they know what’s best for the project’s future.
The same is true about funding - it is always through members of the company that they’re indirectly funding these projects, that I can’t help but feel that the “community”, aka the outsiders never had the chance to be a part of the decision-making.
Flatpak may have it’s share of poor features that can be fixed - sand-boxing can be improved by using permissive containers that allow particular shell variables, installation will throw dialogue, informing the users beforehand about the permissions these apps will need, developers may be forced to use proper run-times, and perhaps, some of the runtime be eliminated to use system dependencies, thereby complying with storage compliance - I don’t know, but it could be fixed. But this invisible, unspoken flaw in the governance? No way.
The tone here is surprisingly negative. Personally I’m happy with the efforts of the Flathub team 🤷
For me on Arch, Flatpaks are kinda useless. I can maybe see the appeal for other distros but Arch already has up-to-date versions of everything and anything that’s missing from the main repos is in the AUR.
I also don’t like how it’s a separate package manager, they take up more space, and to run things from the CLI it’s
flatpak run com.website.Somethinginstead of justsomething. It’s super cumbersome compared to using normal packages.
I’m gonna be honest I’ve never had a flatpak version of something ever work properly.
There was even one popular media player that only came in flatpak form or otherwise build from source.
So obviously, for no reason at all, it barely functioned compared to other applications I had already tried.
Congrats to you people put there somehow running things like Steam with no problems lmao.
I’m gonna be honest I’ve never had a flatpak version of something ever work properly.
As someone once involved with OS Security, I beg you not to use FlatPaks.
It is noteworthy that builds of Chrome, VLC, Dolphin, Steam and Spotify are created by third-party enthusiasts not associated with the main projects.
What great news, that’s why there is no trust in Flathub.
Great opportunity to inject malware to so many vulnerable peeps then
You could say that with any program distribution. At least flatpaks are containerised.
Nah. Most distro package managers verify their packages authenticity with cryptography since the early noughts
Google is better at advertising anyways. No sane being has ever heard of flathub. Qndroid has billion downloads every week.
Crazy, how our “free world” is centralized
Touche. Centralized and un-mirrorable.
Unmirrorable? The whole thing, including the configs are open source?
Unmirrorable
Yes, unlike apt repositories, it wasn’t designed to be mirrored around, run isolated servers etc.
Flatpak was designed to be decentralised, Flathub is just the main repository offering flatpaks and yes, probably 99% of all Flatpak applications are downloaded via the main repo but it is technically possible to just launch your own if you are unhappy with the main repo. The Flatpak team literally has this info page for hosting a repository
I for example, am taking AAGL from their own flatpak repo because they are not offering their launcher via the main one (even tho they also tell you to link the main repo - I guess for dependency reasons - but theoretically you could open your own repo and throw all dependency related packages in there or am I getting something wrong here)
Still not as good as native package
