I joined Lemmy back in 2020 and have been using it as qaz@lemmy.ml until somewhere in 2023 when I switched to lemmy.world. I’m interested in systems/Linux, FOSS, and Selfhosting.

  • 106 Posts
  • 1.29K Comments
Joined 2 years ago
cake
Cake day: June 10th, 2023

help-circle






  • qaz@lemmy.worldtoLinux@lemmy.mlWorth using distrobox?
    link
    fedilink
    English
    arrow-up
    19
    ·
    edit-2
    2 days ago

    It works well when you want to install software that is not compatible with your distro, but it is not a great security measure since it integrates with your host system instead of acting as a sandbox.

    Isolation and sandboxing are not the main aims of the project, on the contrary it aims to tightly integrate the container with the host. The container will have complete access to your home, pen drive, and so on, so do not expect it to be highly sandboxed like a plain docker/podman container or a Flatpak.


  • qaz@lemmy.worldtoLinux@lemmy.mlWorth using distrobox?
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    edit-2
    2 days ago

    This is just incorrect

    …or containers, e.g. Docker/Podman

    Distrobox is a script that manages Docker/Podman containers

    What you are installing can cause damage so IMHO it’s more about keeping things manageable while having your actually important data…

    Programs are installed the container, not on the host system. When you break the container the host system is fine unless using rootful (or Docker) containers.

    …while having your actually important data (not programs, downloaded content, etc but rather things you did yourself, e.g. written documents, sketches, configuration files, prototypes, photos, etc) safe…

    Using Distrobox does NOT keep your own files safe, it actually mounts your home directory and external USB drives inside the containers by default fully exposing your documents to whatever you install inside.

    From the documentation:

    Isolation and sandboxing are not the main aims of the project, on the contrary it aims to tightly integrate the container with the host. The container will have complete access to your home, pen drive, and so on, so do not expect it to be highly sandboxed like a plain docker/podman container or a Flatpak.














  • qaz@lemmy.worldtoMicroblog Memes@lemmy.worldUnisex
    link
    fedilink
    English
    arrow-up
    13
    ·
    edit-2
    5 days ago

    We have 1 unisex bathroom (literally 1 toilet) on the entire campus here, tucked away in a corner. I only ended up finding it by accident in my 3rd year. I personally would be in favor of removing the distinction everywhere, but I doubt that’s going to happen. There was some strange blowback from some people who didn’t like the change. On one hand, it felt pretty weird considering 99% of students didn’t even know of the existence of said toilet before, but it became clearer to me after seeing how it was communicated.