monero debian repository was sweet

we are going for the flatpak now it seems

correct MajesticBank , BigmenPixel has spent the past 2~ weeks making sure milestone 1 is technically possible, (last i heard , he has a v1.0 working and wants to move forward with the ccs now)

anyone got experience with flatpak? monero debian repo was somehow gold standard to me, it was also low price for whonix/kicksecure maintainer

maybe someone can continue debian repo also on similar / higher terms if flatpak is not widely adopted / accepted

MajesticBank: Ask me if you have problems with it.

what's the privacy impact flatpak vs debian repo, maybe would be cool to know that

MajesticBank: Flatpak has a sandbox isolation by default.

i found out about flatpak 2 years ago (first time i heard of it) from this thread reddit.com/r/Monero/comments/oeco87…onero_gui_is_available_as_a_flatpak - when i used it i noticed the monero-gui updating automatically without me needing to think about it, the whonix creator now endorses the flatpak install method also. the last problem is that there is a certain amount of trust being placed on BigmenPixel

(unless you are checking the build sources on github) - if we move it to moneros core repo - pull requests must be approved/merged by us

You’ll have to use flatseal for better sandboxing

would be best if flatpak package is built from monero official github repo to flatpak package, without proxy

proxy repo*

We was not ready for inscriptions, are we ready for STAMPS? 🤣 ⤵️

reddit.com/r/Monero/comments/12anfe…it_thanos_inevitablexmr_50_xmr_as_a orangeflip lol

😂😂😂😂

Technically the proxy is getmonero.org so risk model wise, there's not really anything gained per say

In fact, I would go so far as to say it's actually better than DLing directly from getmonero like Windows users might do because of the built-in sha256 check. The compile from source is just a nice to have IMO. Nothing of course stopping anyone who is really passionate about that from happening though

the picture is from ? can you maybe a bit further explain github actions, how is that executed and from who's github profile

The picture is from the Flatpak manifest which I provided a link to below the picture. It works as much as any Git(Hub) managed repository. People submit commits / PRs to it and they get signed off by whoever has the privledges to do so, all of which you can see yourself in the commit history

MajesticBank github actions run in virtual machines provided freely from github. the monero project uses them extensively, like a docker script basically, if anything returns an error - they will usually fail. its possible that github, can do things on their end to mess with things, but thats why we have the gitian build process

<plowsof11> "i found out about flatpak 2..." <- I don't think you'd necessarily want to pull it into and manage exclusively through the Monero Core set of repos. Mainly because that would mean it would be harder to discover as you'd have to add a separate repo source to your package manager. Most include Flathub, or a filtered version of Flathub by default.

Unless you mean something like managing in Monero core and symbolically linking from Flathub?

Anyone can subscribe to the Flathub managed manifest which is what I do. Similarly moo or whoever is a dev can step in and ping Flathub staff for repo related privs

already underway for a few weeks

* I don't think you'd necessarily want to pull it into and manage exclusively through the Monero Core set of repos. Mainly because that would mean it would be harder to discover as you'd have to add a separate repo source to your package manager. Most include Flathub, or a filtered version of Flathub by default.

Unless you mean something like managing in Monero core and symbolically linking from Flathub?

Anyone can subscribe to updated to the Flathub managed manifest which is what I do. Also moo or whoever is a dev can step in and ping Flathub staff for repo related privs

* I don't think you'd necessarily want to pull it into and manage exclusively through the Monero Core set of repos. Mainly because that would mean it would be harder to discover as you'd have to add a separate repo source to your package manager. Most include Flathub, or a filtered version of Flathub by default.

Unless you mean something like managing in Monero core and symbolically linking from Flathub?

Anyone can subscribe to updates to the Flathub managed manifest which is what I do. Also moo or whoever is a dev can step in and ping Flathub staff for repo related privs

#monero-gui:monero.social has some context

verified and hosted likehow obs is

> <@bigmenpixel[m]:libera.chat> > <@MajesticBank:libera.chat> what's the privacy impact flatpak vs debian repo, maybe would be cool to know that

>

> Flatpak has a sandbox isolation by default.

Can always use bubblewrap

bubblewrap-suid* for security-wise people