09:30:49 <MajesticBank> monero debian repository was sweet
09:31:13 <MajesticBank> we are going for the flatpak now it seems
09:31:17 <MajesticBank> https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/381
09:55:13 <plowsof11> correct MajesticBank , BigmenPixel has spent the past 2~ weeks making sure milestone 1 is technically possible, (last i heard , he has a v1.0 working and wants to move forward with the ccs now) 
09:57:53 <MajesticBank> anyone got experience with flatpak? monero debian repo was somehow gold standard to me, it was also low price for whonix/kicksecure maintainer
09:58:45 <MajesticBank> maybe someone can continue debian repo also on similar / higher terms  if flatpak is not widely adopted / accepted
09:59:21 <BigmenPixel[m]> MajesticBank: Ask me if you have problems with it.
09:59:27 <MajesticBank> what's the privacy impact flatpak vs debian repo, maybe would be cool to know that
10:01:23 <BigmenPixel[m]> MajesticBank: Flatpak has a sandbox isolation by default. 
10:07:02 <plowsof11> i found out about flatpak 2 years ago (first time i heard of it) from this thread https://www.reddit.com/r/Monero/comments/oeco87/as_of_today_monero_gui_is_available_as_a_flatpak/ - when i used it i noticed the monero-gui updating automatically without me needing to think about it, the whonix creator now endorses the flatpak install method also. the last problem is that there is a certain amount of trust being placed on BigmenPixel
10:07:02 <plowsof11> (unless you are checking the build sources on github) - if we move it to moneros core repo - pull requests must be approved/merged by us
10:10:16 <DanIsnotthemanBr> You’ll have to use flatseal for better sandboxing
10:11:28 <MajesticBank> would be best if flatpak package is built from monero official github repo to flatpak package, without proxy
10:14:39 <MajesticBank> proxy repo*
14:04:57 <Lovera[m]> We was not ready for inscriptions, are we ready for STAMPS? 🤣 ⤵️
14:04:57 <Lovera[m]> https://github.com/mikeinspace/stamps
15:23:20 <plowsof11> https://www.reddit.com/r/Monero/comments/12anfe8/someone_sent_bit_thanos_inevitablexmr_50_xmr_as_a/ orangeflip lol
15:36:02 <luna24[m]> 😂😂😂😂
19:21:32 * xmrscott[m] uploaded an image: (16KiB) < https://libera.ems.host/_matrix/media/v3/download/monero.social/PEcfOczdQQtyDrIpTLPThCmg/image.png >
19:21:48 <xmrscott[m]> Technically the proxy is getmonero.org so risk model wise, there's not really anything gained per say
19:21:48 <xmrscott[m]> https://github.com/flathub/org.getmonero.Monero/blob/master/org.getmonero.Monero.yaml#L40
19:24:40 <xmrscott[m]> In fact, I would go so far as to say it's actually better than DLing directly from getmonero like Windows users might do because of the built-in sha256 check. The compile from source is just a nice to have IMO. Nothing of course stopping anyone who is really passionate about that from happening though
19:33:03 <MajesticBank> the picture is from ? can you maybe a bit further explain github actions, how is that executed and from who's github profile
19:37:44 <xmrscott[m]> The picture is from the Flatpak manifest which I provided a link to below the picture. It works as much as any Git(Hub) managed repository. People submit commits / PRs to it and they get signed off by whoever has the privledges to do so, all of which you can see yourself in the commit history
19:49:03 <plowsof11> MajesticBank github actions run in virtual machines provided freely from github. the monero project uses them extensively, like a docker script basically, if anything returns an error - they will usually fail. its possible that github, can do things on their end to mess with things, but thats why we have the gitian build process
19:57:51 <xmrscott[m]> <plowsof11> "i found out about flatpak 2..." <- I don't think you'd necessarily want to pull it into and manage exclusively through the Monero Core set of repos. Mainly because that would mean it would be harder to discover as you'd have to add a separate repo source to your package manager. Most include Flathub, or a filtered version of Flathub by default.
19:57:51 <xmrscott[m]> Unless you mean something like managing in Monero core and symbolically linking from Flathub?
19:57:51 <xmrscott[m]> Anyone can subscribe to the Flathub managed manifest which is what I do. Similarly moo or whoever is a dev can step in and ping Flathub staff for repo related privs
19:59:59 <ofrnxmr[m]> already underway for a few weeks
20:00:19 <xmrscott[m]> * I don't think you'd necessarily want to pull it into and manage exclusively through the Monero Core set of repos. Mainly because that would mean it would be harder to discover as you'd have to add a separate repo source to your package manager. Most include Flathub, or a filtered version of Flathub by default.
20:00:19 <xmrscott[m]> Unless you mean something like managing in Monero core and symbolically linking from Flathub?
20:00:19 <xmrscott[m]> Anyone can subscribe to updated to the Flathub managed manifest which is what I do. Also moo or whoever is a dev can step in and ping Flathub staff for repo related privs
20:01:05 <xmrscott[m]> * I don't think you'd necessarily want to pull it into and manage exclusively through the Monero Core set of repos. Mainly because that would mean it would be harder to discover as you'd have to add a separate repo source to your package manager. Most include Flathub, or a filtered version of Flathub by default.
20:01:05 <xmrscott[m]> Unless you mean something like managing in Monero core and symbolically linking from Flathub?
20:01:05 <xmrscott[m]> Anyone can subscribe to updates to the Flathub managed manifest which is what I do. Also moo or whoever is a dev can step in and ping Flathub staff for repo related privs
20:01:16 <ofrnxmr[m]> #monero-gui:monero.social  has some context
20:02:18 <ofrnxmr[m]> verified and hosted likehow obs is
22:37:57 <escapethe3ra[m]> > <@bigmenpixel[m]:libera.chat> > <@MajesticBank:libera.chat> what's the privacy impact flatpak vs debian repo, maybe would be cool to know that
22:37:57 <escapethe3ra[m]> > 
22:37:57 <escapethe3ra[m]> > Flatpak has a sandbox isolation by default.
22:37:57 <escapethe3ra[m]> https://flatkill.org/
22:40:07 <DanIsnotthemanBr> Can always use bubblewrap
23:27:02 <someoneelse49549> bubblewrap-suid* for security-wise people