• 19 Posts
  • 191 Comments
Joined 8 months ago
cake
Cake day: January 29th, 2024

help-circle









  • as you can see on other comments I’m not alone with that stance.

    Being in the majority doesn’t necessarily make one right, as shown by [insert election result you disagree with here]. But if you actually are serious about that, you do realise how entitled it sounds to demand that someone do free work for you in the particular way you want it done?

    And I believe you mean prerogative.


  • lengau@midwest.socialOPtolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    arrow-up
    2
    arrow-down
    3
    ·
    4 days ago

    Because the separate installation means you can actually end up with both an apt installed and a snap installed.

    This is something that can happen any time you have multiple package managers or even multiple repositories in the same package manager. Google’s official Chrome apt repo has debs for google-chrome-stable, google-chrome-beta and google-chrome-unstable, quite intentionally.

    My comment about docker was a specific example of such a case, where vulnerabilities were introduced. It was actually a commonly used attack a few years ago to burn up other CPU and GPU to generate crypto

    Can you provide a link to a source about that? I can’t find anything about it.

    and you ended up with both a snap and apt installed docker

    If you installed both the docker.io package from apt and the docker snap, yes you wound up with both. Just as if you install both google-chrome-stable and chromium you’ll end up with two packages of (almost) the same browser.

    The fact that they are both packaged by Canonical is both irrelevant and a perfect example of the problem.

    Then I’m gonna ask that you elaborate what specific problem you’re trying to explain here, because these seem pretty contradictory.



  • lengau@midwest.socialOPtolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    arrow-up
    3
    arrow-down
    3
    ·
    4 days ago

    In both cases, the packages are owned by the same people? (Fun fact: mozilla actually owns both the Firefox snap and the firefox package in the Ubuntu repos.) I’m non sure how that “potentially introduces vulnerabilities” any more than “having a package which has dependencies” does.

    I’m not sure what you’re referring to with Docker. Canonical provides both the docker.io package in apt and the docker snap. Personally I use the snap on my machine because I need to be able to easily switch versions for my development work.


  • lengau@midwest.socialOPtolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    arrow-up
    16
    arrow-down
    3
    ·
    4 days ago

    If you don’t want to explain, you’re perfectly welcome to not explain. But saying what amounts to “if you don’t know I’m not telling you”, especially when you weren’t specifically asked, is a pretty unkind addition to the conversation.


  • lengau@midwest.socialOPtolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    2
    ·
    4 days ago

    If I were giving you €50/month, and then one day I decided to give you USD$55 instead, am I “forcing” you to accept US currency? No, I’m choosing to give you something I don’t have to give you in the first place in a different form. You can always reject my offer. You can ask someone else to give you €50/month.

    They’re choosing how they want to provide Firefox. If anyone else wants to provide Firefox differently, Canonical isn’t stopping them. In fact, Canonical literally hosts and does the builds for an unofficial Firefox repo with their free Launchpad service.

    Distributions decide what they want to package and how to package it all the time. Pretty much every time, someone is upset. But that upset is generally based on an unreasonable sense of entitlement.



  • lengau@midwest.socialOPtolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    4 days ago

    sure, and convince people to switch. it’s been done before of course but it’s a big effort

    I agree! But this, IMO, is a better argument for how flathub.org being (theoretically) open source doesn’t actually make it any better than snapcraft.io. The technical hurdle, either of writing another snap store or of setting up a flatpak host, pales in comparison to the social hurdle of getting people to switch. Which is likely why the previous open snap store implementation died. Nobody wanted to host their own and convince people to switch, because at the end of the day there wasn’t any benefit.

    that does not mean that the particular developer agrees with or even approves of the snap thing.

    Never said it did, although in the particular case of the developer I mentioned, he’s also an Ubuntu Core developer, which depends entirely on snaps. I can’t imagine he’d have put himself in that position if he were particularly anti-snap

    steam was a big one that a friend had trouble with, and they just installed that though apt i’m pretty sure.

    Ubuntu has never had a steam package in their apt repos, and the steam-installer package still behaves the same way as ever. Personally, I do use the Steam snap and haven’t had any issues with it, though I do know that others have.


  • lengau@midwest.socialOPtolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    3
    ·
    4 days ago

    Uhm… and why does the user have to transition to snaps?

    They don’t. But Canonical will no longer be providing debs in primary Ubuntu repositories, so those transitional packages exist so that users don’t wind up with an abandoned, old version of Firefox.

    Why does Canonical provide those transitional packages while there are perfectly valid debs for the same thing?

    For the same reason neither Ubuntu nor Debian provide debs for Google Chrome, despite Google having an official apt repository? Those debs exist in somebody else’s apt repository. If you want to add that apt repository, you’re welcome to. But those external packages aren’t part of the system they provide.

    you instantly refute yourself, kudos!

    Your unwillingness to accept what I’m saying doesn’t make what I’m saying contradictory.


  • lengau@midwest.socialOPtolinuxmemes@lemmy.worldSnap bad
    link
    fedilink
    arrow-up
    3
    arrow-down
    8
    ·
    4 days ago

    Canonical provides transitional packages for packages that they’ve decided to provide as snaps. They’re not forcing anyone to use snaps, they’re saying “if you want the default we provide you, we’re providing you with a snap.” KDE Neon (my current distro, which is downstream of Ubuntu) has decided that they want to use the deb packages from packages.mozilla.org, so they provide an override. If you want to use the deb from packages.mozilla.org, you could grab KDE Neon’s repository deb and install that, or just set up the mozilla repository and use the same pin file they already have.

    This is like saying “Debian FORCES you to use libav” Debian moved from ffmpeg to libav for a while. No, they provided libav and made transitional packages for this drop-in replacement. Some people didn’t like that and made their own ffmpeg repos, and the process for using their separate ffmpeg rather than Debian’s transitional packages was the same as the process for using Firefox from a different repository. (I was one of the people used some third-party ffmpeg repositories, and I was glad when they switched back to ffmpeg and provided libav to ffmpeg transitional packages.)

    Does the fact that the Ubuntu repositories don’t contain Keysmith mean “Ubuntu PROHIBITS you from using Keysmith?”