I don’t fully understand what you mean.

With flatpak, you have the option of installing applications on the system (/var/lib/flatpak) or for a single user (~.local/share/flatpak). And application data for each gets stored in ~/.var/app.

AppArmor should confine the same regardless of which user is running the package. Besides, the flatpak’s main sandboxing comes from bubblewrap. Though the distro’s default AppArmor profiles can further be used to sandbox more stuff.

The battery life is still better than most laptops, but yeah, not as good as MacOS.

It’s meant to be an upgrade over the old system. If both are accessible, that just means they didn’t remove the old code.

Might end up buying a Pixel 9A to make sure that Anubis keeps working on GrapheneOS.

- Xe, the Anubis developer

https://pony.social/@cadey/114467670300419101

The touchpad would be very unresponsive for several minutes after waking from sleep. It would still work, but had a crazy latency. Happened in both Windows and Linux.

I believe I could’ve hacked around it with this command.

I use Silverblue and MacOS daily, I enjoy the former so much more.

Unfortunately my relatively new Lenovo laptop has a small but also major driver bug that hasn’t been fixed in all the time I’ve had it. Bad to the point I got the Mac to have actual working hardware. But I do not enjoy MacOS in the slightest. At best I can say it harasses you less than Windows and respects the user a few degrees more than Windows.

In general, they don’t interfere. The only major issues I’ve seen are with in development versions of Ubuntu, which have a strange habit of breaking flatpak, but it gets fixed before release.

SELinux tends to have more issues.

That’s what I’m saying. The OS installer can be super nice and intuitive, but the process of getting to that point, messing with the BIOS, is troublesome.

I know in the past there’s been tools that allowed you to install Linux from within Windows. That would be a great way to work around this problem, though I think there are certain limitations with that approach.

A person can only specialize in a small number of things.

I’m happy to learn about computers, but when it comes to, say, cars, I have no desire to learn. If I have a car problem, I don’t have the knowledge of how to even look up a problem.

Honestly I think the bigger barrier is the BIOS. The button to get to the boot menu is different on every motherboard.

Security is hard and not the fun part of programming (for most people anyway).

KDE and Gnome have problems too.

Rationale for Accepting kio-admin into openSUSE

We have dealt with these types of APIs in KDE since 2017 without achieving any notable improvements. As we are responsible for product security we tried to protect our users from potentially harmful components. At this point, though, we don’t believe that this situation will change anytime soon. Meanwhile users still want to use features like the one found in Dolphin, and don’t understand why openSUSE does not include them.

https://security.opensuse.org/2025/02/21/kio-admin-admittance.html

Wasn’t vertical integration, was done by packager.

We don’t believe that the openSUSE Deepin packager acted with bad intent when he implemented the “license agreement” dialog to bypass our whitelisting restrictions. The dialog itself makes the security concerns we have transparent, so this does not happen in a sneaky way, at least not towards users. It was not discussed with us, however, and it violates openSUSE packaging policies.

Short version

We don’t believe that the openSUSE Deepin packager acted with bad intent when he implemented the “license agreement” dialog to bypass our whitelisting restrictions. The dialog itself makes the security concerns we have transparent, so this does not happen in a sneaky way, at least not towards users. It was not discussed with us, however, and it violates openSUSE packaging policies.

…

The experience with Deepin software and its upstream during the code reviews that we performed has not been the best. More than once, security issues we reported have been replaced by new security issues. Other times, upstream did not invest the effort to fully analyze the issues we reported and fixed them insufficiently. Generally the communication with upstream proved difficult, maybe also due to the language barrier. While upstream stated at times that they don’t have enough resources to deal with security reports, which is worrying enough, the design and implementation of Deepin D-Bus components often changed radically in unrelated ways. This makes the security assessment of Deepin components a moving target. Building trust towards Deepin components has thus been extremely difficult over the years.

The history of Deepin code reviews clearly shows that upstream is lacking security culture, and the same classes of security issues keep appearing…

I get this occasionally. If the directory the drive gets mounted to already exists, it can’t mount it.

Usually this happens if the drive bugs out and improperly dismounts.

Rebooting should get rid of the directory.

Not by default, but you can optionally enable it.

The really big one for me is installing things. Installing packages requires 0 interaction, can be easily automated, wide availability of packages, etc. On Windows, Winget sucks. It’s just running the regular installers. MacOS is better since it has Homebrew, but it has some problems. Homebrew struggles to update “casks” (aka GUI apps) so you still have to rely on app’s in-app updaters. MacOS’s gatekeeper also is annoying about third part software. And for anything not in Homebrew, you have to install it from the web.

Programming is also easiest in Linux. MacOS is a pain sometimes. The preinstalled toolchains are outdated. Installing new ones from homebrew also requires reading through a large block of text in order to find out what manual steps you need to do.

Updated the title

Took me a minute to realize they meant two weeks until TWIG #200.

Ah I had the same issue. JavaFX still uses X11. By default VSCode only lets X11 be used if Wayland is not available (this is the X11 fallback permission). Disabling X11 fallback will let VSCode use Wayland and let JavaFX use X11. I might make an issue for this on the flatpak’s GitHub asking for this change.

Honestly, the truth is that setting up containers for development will always be a hassle. My low tech way is just to make a distrobox container with its own home folder, install an IDE in it, and install packages. The more proper way to do it would create your own containerfile to build your container for developing.

VSCode also has its DevContainers extension but that doesn’t work in VSCodium and does some weird things.

Flatpak’s usefulness for programming depends on the IDE and language. IDEs like VSCode largely suck because they are not designed to work in flatpak. But some languages still do work well in them, such as Rust, since Flathub provides the Rust SDK and dependency management is done with cargo. But it sucks for C++, where you typically install dependencies using your system package manager.

IDEs like Gnome Builder are pretty good. It’s designed to work within the flatpak sandbox. Even when running as a flatpak, you can choose to build things using containers or your host system. And of course also build using the Freedesktop runtimes.

I recently setup JavaFX with the flatpak version of VSCodium and have it working pretty well. You first need to install the Java SDK from Flathub, set an env variable to tell VSCode to load the SDK. The more annoying part was JavaFX since it’s not part of the JDK anymore. I just downloaded the JavaFX tar, extracted to a directory called JavaFX, and set $JAVAFX_HOME to point to it. Since VSCode has host filesystem access, it can access it. Few more steps than traditional Linux, sure, but still easier than MacOS and Windows.

Not sure about your database situation though.