Introducing Fedora Atomic Desktops - Fedora Magazine

It's a mascot for brand recognition purposes, just like Tux the penguin. I don't quite understand what the problem is. I feel like if I were to call anything about it weird, it would be the use of a derpy, chonky dinosaur rather than the gender of said derpasaurus.

And its always female, ships, cars, computers. Fucking weird

Exactly. The concept is great, but my Guix system (Nix fork from GNU) is already reproducible and capable of rollbacks and transactional upgrades (and declarative system configuration !)

The learning curve is quite steep tho (the Nix leaning curve is even higher, at least it used to be IMO). If the sway spin of Atomic Fedora was available earlier I probably wouldn't have switched tbh. Both solutions are great.

Overall I'm quite happy with my Guix configuration. I've got roughly the same configuration on all my systems with ease, all config files (also sway for example) in the same language: Guile Scheme (LISP dialect), and the whole thing is in git. I don't imagine going back to a regular distribution anytime soon.

Damn, rust really embrace the "Hey, Can I copy your homework?" Meme. I like rust btw, it's just funny how often I see something along the line of "it's like X, but in rust!"

And the Flatpak browser thing is complicated.

Chromium uses namespaces. Nowadays unprivileged user namespaces, but the legacy suid namespaces are still integrated.

If you want to run Chromium (and I think all Electron apps too) as Flatpak, you replace those namespaces with zypak, which instead isolates processes using flatpak and its seccomp filters.

These are the seccomp filters for every app though, so they are probably way too unrestricted. Also it has a small performance hit.

That is the reason why no Chromium Browser Flatpak is official.

Now the thing with Firefox is, I have no idea what isolation they use. Everyone says its less secure. And they adopted Flatpak as if it was nothing, without any comment on that topic.

The issue is that Flatpak uses a single seccomp filter for bubblewrap, that is used by every app. But browsers would need a different one, with just the added permission to create user namespaces.

Currently this is not even possible when using a seperate repo. Really, no idea. Bubblejail is an alternative with custom seccomp filters and usernamespace permission. But it is very different, uses system packages and is very alpha.

You cant layer ffmpeg, you need to override-remove everything libav and then install everything new from rpmfusion. I did that, its a mess.

If you just want video playback thats just libavcodec-freeworld, thats why I specifically mentioned ffmpeg.

I am not a fan of Distrobox for small tools. For sure possible but unnecessary and the workflow is a pain. And trust me, I use it daily and even ran libvirt in a rootful one, virt-manager in a rootless one, connected over ssh.

There's at least Fedora atomic with nvidia https://github.com/ublue-os/nvidia

My point was that Fedoras product is unusable. Ublue is the solution, their main images are basically Fedora Atomic but fixed.

that should depend on the file manager, right?

No thats libavcodec-freeworld and ffmpegthumbs. Most movies you find on the open sea are not in libre Codecs.

If you're a customer of theirs, you can see the source code.

Are you saying that their source code is not published except to licensees?

You're basically saying that something isn't wet, it just has water on it.