Flathub has passed 2 billion downloads
from mr_MADAFAKA@lemmy.ml to linux@lemmy.ml on 22 Jun 19:18
https://lemmy.ml/post/17180451

flathub.org/statistics

#linux

threaded - newest

boredsquirrel@slrpnk.net on 22 Jun 19:28 next collapse

Crazy, how our “free world” is centralized

TCB13@lemmy.world on 22 Jun 19:42 next collapse

Touche. Centralized and un-mirrorable.

OsrsNeedsF2P@lemmy.ml on 22 Jun 19:56 collapse

Unmirrorable? The whole thing, including the configs are open source?

TCB13@lemmy.world on 22 Jun 21:16 collapse

Unmirrorable

Yes, unlike apt repositories, it wasn’t designed to be mirrored around, run isolated servers etc.

zyratoxx@lemm.ee on 22 Jun 23:07 collapse

Flatpak was designed to be decentralised, Flathub is just the main repository offering flatpaks and yes, probably 99% of all Flatpak applications are downloaded via the main repo but it is technically possible to just launch your own if you are unhappy with the main repo. The Flatpak team literally has this info page for hosting a repository

I for example, am taking AAGL from their own flatpak repo because they are not offering their launcher via the main one (even tho they also tell you to link the main repo - I guess for dependency reasons - but theoretically you could open your own repo and throw all dependency related packages in there or am I getting something wrong here)

TCB13@lemmy.world on 23 Jun 10:42 collapse

I agree with everything you said, however there are a few details.

it is technically possible to just launch your own [repo]

The ability to create repositories from mirror existing ones.

Unlike apt repositories Flatpak ones aren’t simply a directory tree with a bunch of files that can get mirrored using rysnc or other efficient means, it’s a clusterfuck of HTTP-only requests that need to be backed by specific metadata and there aren’t tools to manage those.

flatpak create-usb may be promising but the name says its all - the priority wasn’t to create a way to mirror repositories but a quick and dirty hack for some situation.

theoretically you could open your own repo and throw all dependency related packages in there or am I getting something wrong here

Theoretically yes, in practice things are bit more nuanced. That tools only considers your current architecture, it’s a pain to get dependencies in an automated way and most of the time you’ll end up with broken archives. You’ll also need to hack things a lot.

zyratoxx@lemm.ee on 23 Jun 14:48 collapse

Ah, thx for the explanation :)

thingsiplay@beehaw.org on 22 Jun 19:50 collapse

Flathub is not the entirety of Free World, just a little small slice of the pie. You can say Flathub is quite centralized. But our Free World have so much more. Every country will have a certain focus of what is freely available. It’s an optional server and package format. You are free to install it or use another free package. Nothing crazy here.

theshatterstone54@feddit.uk on 22 Jun 19:37 next collapse

North Korea: 316 downloads

Interesting…

In all seriousness, in both my home country and the country I live in, the number of downloads surpasses the population numbers which is kinda insane.

disguy_ovahea@lemmy.world on 22 Jun 20:09 next collapse

It could be simple download requests, rather than MAC or IP address downloads.

lemmyvore@feddit.nl on 22 Jun 20:17 next collapse

I think they count every download of every package, every version, every time. It’s not the number of unique users or even packages.

If you install 3 apps you might need to download 3 versions of graphics driver, 3 versions of desktop environment libraries and so on, It won’t count as one user installing 3 apps, it will show up as 10 -20 downloads. And that’s just the initial install, every time you update them it counts another 10-20.

possiblylinux127@lemmy.zip on 22 Jun 23:20 collapse

It is per download not per person.

velox_vulnus@lemmy.ml on 22 Jun 19:41 next collapse

Funny how it isn’t popular in countries with population several times larger than the USA. I guess every outside of the US can see through the bullshit of corporate-hijacked open-source.

thingsiplay@beehaw.org on 22 Jun 19:45 next collapse

the bullshit of corporate-hijacked open-source.

???

velox_vulnus@lemmy.ml on 23 Jun 09:16 collapse

I’ve written about this here already.

LainTrain@lemmy.dbzer0.com on 22 Jun 20:19 next collapse

Do you maybe mean snap?

velox_vulnus@lemmy.ml on 23 Jun 09:15 collapse

Snaps are a default no, obviously. Most of the points by Flatkill still hold true to this day. Apart from that, I have my own set of disagreements which I’ll not be talking about - basically, stuff like reproducibility, storage space, inconsistent permissions, inconvenient configurations, outdated runtime - well, you get the point, so I’ll not be expanding on that.

My primary disillusionment towards Flatpak has to do with how people with shared backgrounds and vested corporate interests have taken over open-source - in this particular case, I am talking about Big Tech. It’s almost as if the space for a community-developed organization is hijacked by them - by them occupying core positions of the organization.

These organizations do not follow a horizontal approach to decision-making, they often come up with decisions without consulting folks that aren’t within their direct circle, and worst, when they’re held in a tight-spot, they can evade any criticism by appealing to authority - that they’re the maintainers/contributors, and they know what’s best for the project’s future.

The same is true about funding - it is always through members of the company that they’re indirectly funding these projects, that I can’t help but feel that the “community”, aka the outsiders never had the chance to be a part of the decision-making.

Flatpak may have it’s share of poor features that can be fixed - sand-boxing can be improved by using permissive containers that allow particular shell variables, installation will throw dialogue, informing the users beforehand about the permissions these apps will need, developers may be forced to use proper run-times, and perhaps, some of the runtime be eliminated to use system dependencies, thereby complying with storage compliance - I don’t know, but it could be fixed. But this invisible, unspoken flaw in the governance? No way.

jbk@discuss.tchncs.de on 23 Jun 18:19 collapse

You’re complaining about corporate fundings. Without them, a lot of open source tech would definitely not be as advanced as it is today. Since everything’s open source, anyone can just fork a project when some “malicious megacorp” “hijacks” the project. Funny how a similar case happened “the good way” recently with Redis/Valkey, but the other way around.

There’s always some doomers only seeing potential bad futures in awesome stuff, huh?

velox_vulnus@lemmy.ml on 23 Jun 19:55 collapse

Oh sorry, I should’ve mentioned why I hate RedHat. Well, I used to like it. Like is an understatement, I used to love them. Because I was one of those college grads who wanted to take part in RedHat’s Tev-Aviv program for the open-source AI and software stuff. I was so thankful and enthusiastic about contributing to Linux. And even though I was not selected, I would embrace their products, and related OSS projects - I ditched Ubuntu, and stayed with Fedora for almost four years, before I had a change of heart last September.

How US Big Tech supports Israel’s AI-powered genocide and apartheid

IBM’s Role in the Holocaust – What the New Documents Reveal

Genocide profiteer IBM wins big on EU funding

A Marriage Made in Hell: An Introduction to Microsoft’s Complicity in Apartheid and Genocide

I didn’t want to go on a political rant, but here we are. The world ain’t single-dimensional, chief. It is the culmination of every factor that makes me hate Fedora, Flatpak, systemd - am I forgetting something else? I hope not. Not every opposition to corporate support of open-source is some unhinged boomer rant about the good ol’ days of X11 and POSIX-compliant shell - well, I’m a Gen-Z kid, to begin with. I couldn’t give a rat’s ass about the advancement of open-source, if the cost is supporting another corporation responsible for the Holocaust, Nakba and Apartheid. Those injustices and deaths were avoidable. As someone from a former colony, I can not, and will not tolerate enabler of these atrocities.

jbk@discuss.tchncs.de on 23 Jun 20:26 collapse

Well you do you. I don’t see the point in hating open source software made by them, you’re not paying them unlike with regular products and boycotting them.

sturlabragason@lemmy.world on 22 Jun 20:35 next collapse

Could you elaborate?

Reddfugee42@lemmy.world on 22 Jun 22:31 next collapse

Narrator: “But no, they could not elaborate.”

velox_vulnus@lemmy.ml on 23 Jun 09:16 collapse

Please check this comment.

possiblylinux127@lemmy.zip on 22 Jun 23:20 next collapse

It could also he that those people aren’t using computers with Linux

velox_vulnus@lemmy.ml on 23 Jun 08:10 collapse

With the largest group of people graduating with an engineering degree, you’re telling me they don’t use Linux? Just check the stats at NSF for the number of degrees awarded in S&E.

India alone has 14% in the desktop market share for Linux. China’s market share is not easy to tell, thanks to the firewall, but 90% of government computers use Kylin and other Chinese-developed distros.

ShittyBeatlesFCPres@lemmy.world on 23 Jun 01:05 next collapse

Or maybe the two countries with a larger population than the United States have significantly lower per capita income and so fewer people own desktop/laptop computers. Most of the world probably has, at most, a smartphone.

If anything, Brazil seems like the outlier on the that map. You’d expect the U.S. to have the most computers. But Brazil and China are roughly similar in terms of income.

velox_vulnus@lemmy.ml on 23 Jun 08:06 collapse

Wrong, India and China has the highest number of engineering grads. From NSF:

India awarded 2.5 million S&E first university degrees in 2020, followed by China (2.0 million) and then by the United States (900,000).

With a younger population that is more than ever, a need for laptop would be in the highest demands. In fact, if you check the desktop market share for Linux in India, it is the highest, at around 14%.

mrvictory1@lemmy.world on 23 Jun 05:37 next collapse

China blocked Flathub

jbk@discuss.tchncs.de on 23 Jun 06:55 next collapse

average lemmy.ml mf

velox_vulnus@lemmy.ml on 23 Jun 09:17 collapse

And your point being?

[deleted] on 23 Jun 11:48 collapse

.

TCB13@lemmy.world on 22 Jun 19:41 next collapse

Still no proper way to mirror the thing and have it working offline / on internal networks. Great job self-hosters and sovereign citizens ;)

KLISHDFSDF@lemmy.ml on 22 Jun 20:19 next collapse

Offline/internal network installs can be handled with flatpak create-usb - docs.flatpak.org/en/latest/usb-drives.html

One can distribute flatpaks along with their dependencies on USB drives (or network shares, etc.) which is especially helpful in situations where Internet access is limited or non-existent.

Cache/mirroring would be great for those who need it.

Edit:

Thinking about it, I wonder if there’s enough “core features” with ‘create-usb’ that its just matter of scripting something together to intercept requests, auto-create-usb what’s being requested and then serve the package locally? If a whole mirror is required, it may be possible to iterate over all flathub packages and ‘create-usb’ the entire repo to have a local cache/mirror? Just thinking “out loud”.

TCB13@lemmy.world on 22 Jun 21:20 collapse

Thinking about it, I wonder if there’s enough “core features” with ‘create-usb’ that its just matter of scripting something together to intercept requests, auto-create-usb what’s being requested and then serve the package locally?

The issue is that… there aren’t enough “core features”. It doesn’t even handle different architectures and their dependencies correctly. It wasn’t made to be mirrored, nor decentralized.

Apt for instance was designed in a much better way, it becomes trivial to mirror the entire thing or parts and for the end tool it doesn’t even matter if the source is a server on the internet, a local machine, a flash drive or a local folder, all work the same.

possiblylinux127@lemmy.zip on 22 Jun 23:19 collapse

Apt is a package manager. Flatpak is an app format that happens to have a package manager. It isn’t designed to manage a OS.

warmaster@lemmy.world on 22 Jun 21:51 next collapse

Flatpaks are not centralized, Flathub is. You can have your own repo.

TCB13@lemmy.world on 22 Jun 22:12 collapse

Yeah sure, just try to mirror Flathub into your repo.

possiblylinux127@lemmy.zip on 22 Jun 23:18 next collapse

You can but there would be little point. Fedora has its own repo for instance.

warmaster@lemmy.world on 23 Jun 02:27 collapse

I don’t get it. Why would you store all of it? I mean, you can but… why?

TCB13@lemmy.world on 23 Jun 10:56 collapse

Because…

  • Universities might want to locally host a mirror in order to waste less bandwidth and provide faster downloads;
  • Large companies usually like to host internal mirrors for the same reasons as above and also so they can audit and pick what packages will be available for their end users;
  • Flathub is slow af for some people;
  • Local country-specific mirrors are always faster;
  • In some countries not everyone can access the official flathub;
  • One might be dealing with airgapped networks and systems for sensitive work and you want to have ways for your end users to install flatpaks;
  • Fastly, their CDN might go down at any point (like Cloudflare sometimes does) and you’ll end up with nothing;
  • Flathub itself may be subject to a cyberattack and their service might get crippled for a days or weeks and you’ll have nothing as well;

For what’s worth Debian archive repositories are about 5 TB and people actively mirror then in universities, companies, cloud providers etc.

The question here isn’t “why would you” but rather “why would I be unable to do it”. Their actively gatekeeping their repository in a futile attempt to be the single and central point of flatpak distribution - much like what Apple does with the App Store.

possiblylinux127@lemmy.zip on 22 Jun 23:17 collapse

You absolutely can as Flatpak can run completely local. You can create a custom repo if you want.

TCB13@lemmy.world on 23 Jun 09:58 collapse

Did you ever try doing that with public packages?

possiblylinux127@lemmy.zip on 23 Jun 15:50 collapse

You can but I wouldn’t

TCB13@lemmy.world on 23 Jun 17:42 collapse

It’s a fun exercise for you to see how convoluted and problematic it becomes.

TheGrandNagus@lemmy.world on 22 Jun 19:46 next collapse

The tone here is surprisingly negative. Personally I’m happy with the efforts of the Flathub team 🤷

HouseWolf@lemm.ee on 22 Jun 21:21 next collapse

As a newer Linux user I really like flatpaks.

I don’t use them for most things I install but proprietary apps I want sandboxed or programs that have weird issues with dependencies I grab the flatpak.

priapus@sh.itjust.works on 22 Jun 22:13 next collapse

Agreed, flatpaks are great for desktop apps. I use Nix for the majority of my packages, but I use flatpak for proprietary for the sandboxing.

possiblylinux127@lemmy.zip on 22 Jun 23:16 collapse

I honestly prefer Ansible. It can do lots of configuration and setup and install flatpaks.

corsicanguppy@lemmy.ca on 23 Jun 03:01 collapse

I honestly prefer Ansible.

I use Ansible all day. For work. Oh, god, is it sad compared to everything else in the space. RedHat had the choice between two in-house products and they chose poorly.

It can do lots of configuration and [set up] and install flatpaks.

We had that 20 years ago, just with a different product. The state of the art is now two generations newer.

possiblylinux127@lemmy.zip on 23 Jun 03:47 collapse

Well I know Ansible and it works for my needs. I briefly used Nix and it was worse. Ansible is nice because you can just install ansible and then apply a playbook.

ayaya@lemdro.id on 22 Jun 23:48 next collapse

For me on Arch, Flatpaks are kinda useless. I can maybe see the appeal for other distros but Arch already has up-to-date versions of everything and anything that’s missing from the main repos is in the AUR.

I also don’t like how it’s a separate package manager, they take up more space, and to run things from the CLI it’s flatpak run com.website.Something instead of just something. It’s super cumbersome compared to using normal packages.

mactan@lemmy.ml on 23 Jun 02:51 next collapse

fwiw those simple names exist, you just haven’t added it to your PATH

nossaquesapao@lemmy.eco.br on 23 Jun 05:06 collapse

I also prefer to get my software from the distro’s repos, but for software from third parties, flatpak adds a security layer, making it more secure when compared, for example, to aur.

moormaan@lemmy.ca on 23 Jun 06:06 collapse

Can you please elaborate on the security layer that flatpak adds? Some commentators here suggest Flathub is not secure.

Kusimulkku@lemm.ee on 23 Jun 07:22 collapse

Flatpak sandboxing (bubblewrap)

independantiste@sh.itjust.works on 23 Jun 06:17 collapse

Lemmy (and phoronix) people are generally extremely repelled by new stuff in the Linux world

ASeriesOfPoorChoices@lemmy.world on 23 Jun 14:54 collapse

Lemmy people are generally extremely repulsive.

sturlabragason@lemmy.world on 22 Jun 20:14 next collapse

Awesome! Love it!

JRaccoon@discuss.tchncs.de on 22 Jun 20:33 next collapse

Sorry to ask, I’m not really familiar with Linux desktop nowadays: I’ve seen Flatpak and Flathub talked about a lot lately and it seems to be kinda a controversial topic. Anyone wanna fill me in what’s all the noice about? It’s some kind of cross-distro “app store” thingy?

Lettuceeatlettuce@lemmy.ml on 22 Jun 20:53 next collapse

Flatpak is a universal application packaging standard for Linux. It allows devs to create a single application that gets bundled with all necessary dependencies including versioning.

These apps run in their own semi-isolated “container” which makes immutable distros possible. (Distros like Fedora Silverblue that are effectively impossible to break by installing or removing critical system files.)

This means that a Linux app doesn’t have to have a .deb version, an .rpm version, or be pre-compiled for any other distros. A user can simply go to Flathub, (the main repository for Flatpak apps), download the flatpak, and install it on their distro of choice.

It’s quickly becoming the most popular way for users to install apps on Linux because it’s so easy and quick. But there are a few downsides like size on disk, first party verification, per-distro optimizations, and the centralization of application sources. That’s why some users aren’t fully endorsing or embracing how popular they are becoming.

CaptainSpaceman@lemmy.world on 22 Jun 21:20 next collapse

Interesting breakdown, thank you.

Do you happen to know if the containerization is similar to docker containers? Or more like android apps?

Lettuceeatlettuce@lemmy.ml on 22 Jun 21:22 next collapse

I’m not an expert, but from my understanding, more like android apps.

They aren’t totally isolated like a docker or LXC container would be, but they are generally self-contained.

The Linux Experiment has a really great vid that goes into detail on all common packaging formats in Linux including Flatpaks:

Linux Packaging Formats Explained

lightnegative@lemmy.world on 22 Jun 21:28 next collapse

It’s more like android apps from early versions of Android before the permissions became user-managable.

It won’t prompt you to give the application access to certain permissions, all the permissions are predefined in the manifest by whoever published the application to flathub. When you run the application you just hope it won’t cause too much havoc (you can of course verify the permissions before running it, but I guarantee most people won’t)

Flatpak supports sandboxing but due to how most desktop applications want access to your home folder, network etc many apps simply disable it.

Regardless of the level of sandboxing applied to the app, Flatpak is a great way for a developer to package once run anywhere. Prior to Flatpak, if you wanted to support multiple distros, you had to build a package for each distro or hope somebody working on that distro would do it for you.

Inb4 AppImage was here first. And if you mention Snap then GTFO

Lettuceeatlettuce@lemmy.ml on 22 Jun 21:37 next collapse

Appimage is probably the most similar to a naked .exe in Windows. They are useful for small apps or simple indie games, but I prefer Flatpaks for my everyday big applications.

Agreed, Snaps are like Flatpaks but worse because locked down back end and Canonical’s sketchy nature. Imagine a really delicious pastry that anybody can make and sell, then imagine the same pastry but only one bakery in the world can make and sell it. Which would you prefer? Lol

possiblylinux127@lemmy.zip on 22 Jun 23:15 collapse

Keep in mind there are certain permissions that can lead to a sandbox escape. These permissions are banned on Flathub but can still be used by flatpaks files and custom repos.

possiblylinux127@lemmy.zip on 22 Jun 23:14 collapse

It used bubblewrap which is kind of like a chroot.

JRaccoon@discuss.tchncs.de on 22 Jun 21:24 next collapse

Cool, thanks for the explanation.

a single application that gets bundled with all necessary dependencies including versioning

Does that mean that if I were to install Application A and Application B that both have dependency to package C version 1.2.3 I then would have package C (and all of its possible sub dependencies) twice on my disk? I don’t know how much external dependencies applications on Linux usually have but doesn’t that have the potential to waste huge amounts of disk space?

Lettuceeatlettuce@lemmy.ml on 22 Jun 21:30 next collapse

Essentially yes, if you start using lots if older applications or mixing applications that use many different dependency versions, you will start to use lots of extra disk space because the different apps have to use their own separate dependency trees and so forth.

This doesn’t mean it will be like 2x-3x the size as traditional packages, but from what I’ve seen, it could definitely be 10-20% larger on disk. Not a huge deal for most people, but if you have limited disk space for one reason or another, it could be a problem.

brachypelmasmithi@lemm.ee on 23 Jun 08:08 collapse

It CAN get pretty wild sometimes, though. For example, Flameshot (screenshotting utility) is only ~560KB as a system package, while its flatpak version is ~1.4GB (almost 2.5k times as big)

j0rge@lemmy.ml on 23 Jun 15:32 next collapse

Flameshot is 3.6MB on disk according to flatpak info org.flameshot.Flameshot

brachypelmasmithi@lemm.ee on 23 Jun 18:04 collapse

Weird, the software manager (using LM 21.3) reports 1.1GB dl, 2.4GB installed (which is different from when i checked yesterday for some reason?). flatpak install reports around 2.1GB of dependencies and the package itself at just 1.3MB

EDIT: nvm im stupid, the other reply explains the discrepancy

Vilian@lemmy.ca on 23 Jun 16:07 collapse

no, that number don’t reflect the shared runtimes and deduplication

possiblylinux127@lemmy.zip on 22 Jun 23:13 next collapse

Flatpak as a dependency system that allows use of specially packaged library type flatpaks. This significantly reduces the needed disk space.

Chronicon@hexbear.net on 23 Jun 03:25 next collapse

on a desktop it might not be significant but I tried using flatpak apps on a device with very limited root emmc storage (16 GB) and ran out of space really fast. Its really common to see a couple multi-hundred-megabyte library downloads for each new app IME.

I like them for some stuff but there are glaring issues that I don’t like. I’ve posted about it before, poor integration of apps/not getting the right permissions is a big problem, the people packaging them don’t often do as good of a job as someone like a distro maintainer.

But admittedly my experience using it probably isn’t representative (pop os through their shop and arch on a mobile device). Neither were amazing, but not having to compile shit myself or install with an untrusted shell script was nice for some apps. Without some significant improvements it’s not a good replacement for a distro’s package repos but it might be a good way to broaden the available applications without having to maintain 10x more packages.

mrvictory1@lemmy.world on 23 Jun 05:34 next collapse

Not necessarily. GNOME and KDE dependencies and “base system” for flatpaks to run in are flatpaks themselves so apps that depend on them will not use duplicated dependencies. Storage usage may not be as efficient as using a traditional package manager but you don’t install a new OS per app either.

qaz@lemmy.world on 23 Jun 08:05 next collapse

Most dependencies are bundled in the “runtime” images, and it uses file deduplication to reduce the size of the dependencies, but it’s still a little more than a normal package manager.

MajinBlayze@hexbear.net on 23 Jun 11:44 collapse

It’s not quite that simple.

Each package can choose one from a handful of runtimes to use, each of which include common dependencies (like gnome or qt libraries), and if multiple flatpaks use the same runtime, that runtime is only downloaded once.

It is less space efficient than your typical package manager, but brings other benefits like sandboxing.

sir_pronoun@lemmy.world on 22 Jun 22:39 collapse

What about those apps using out of date libraries? Wouldn’t that become a security issue - since containers usually aren’t that secure, right? And all app developers would have to update their container libraries separately, instead of just updating the system libraries?

possiblylinux127@lemmy.zip on 22 Jun 23:11 next collapse

So if a library is out of date you can just update it. As far as containers go they are fine for security as bubblewrap is pretty solid.

Allero@lemmy.today on 23 Jun 07:01 collapse

As containers are isolated - it’s mostly a security issue for the container itself. It may become an issue, though, if the container is allowed to freely interact with filesystem, for example.

Apps like Flatseal allow you to easily control such variables using a GUI instead of tinkering in the terminal.

possiblylinux127@lemmy.zip on 22 Jun 23:10 next collapse

Was controversial when it was new and full of problems. Now it is mostly the standard for apps.

JRaccoon@discuss.tchncs.de on 23 Jun 07:06 collapse

Well, just by looking at responses in this thread, the controversy most definitely still exists. Some seem to like it and others hate it fiercely.

possiblylinux127@lemmy.zip on 23 Jun 15:58 collapse

I think the haters are louder than the people who just use it occasionally

prunerye@slrpnk.net on 22 Jun 23:34 next collapse

I don’t hate flatpaks, but flatpaks require more disk space than the same apps from traditional repositories, and they only support a handful of the most common default themes. Since I only ever use older and slower computers, my disk space is limited, and I like to rice my desktop, I personally avoid them. But your use-case may differ.

shapis@lemmy.ml on 22 Jun 23:44 next collapse

Most of the issue is that they’re unreliable. Sometimes the app will work. Sometimes it doesn’t. Sometimes you have to fiddle blindly with flatseal settings, which ones? Who knows? Guessing is part of the fun.

It’d be a great thing if it just worked.

CyberSyndicalist@hexbear.net on 23 Jun 03:45 next collapse

I guess mileage varies here because flatpaks have always just worked for me. I only use flatseal to revoke excessive permissions.

independantiste@sh.itjust.works on 23 Jun 06:27 collapse

In over 3 years of daily flatpak use (of multiple apps) I’ve never had a single reliability issue with flatpak, the only ones being caused by me because I was trying out settings in flatseal that the app didn’t like. On the flip side I’ve found native packages to be broken more often than not, with .Deb files sometimes just not working and throwing an error or something. Package managers are better for sure but I’ve had dependency issues that I have never experienced with flatpak.

oldfart@lemm.ee on 23 Jun 15:06 collapse

Good for you for not having any problems mate! I’m sure this invalidates the parent poster’s problems.

Vilian@lemmy.ca on 23 Jun 16:04 next collapse

yes it’s cross distro, it’s controversial becaune some people don’t want to install apps with their own libraries or dependecies, and some apps are not oficial so they break with the flatpak sandbox

shekau@lemmy.today on 23 Jun 17:19 collapse

Flatpak is the best - thats all you need to know!!!

But seriously, apart from obvious things other people have said, I would like to add that the HUGE advantage of flatpak is that each app is using its own dependencies, this way you can avoid dependency hell, which is mostly time-consuming and hard to fix.

biribiri11@lemmy.ml on 22 Jun 20:50 next collapse

To everyone saying you can’t mirror a flatpak repo… you’re absolutely right. There should be a far easier way to set up your own mirror without needing to build everything from scratch. That being said, if you wanted to try to make your own repo with every one of flathub’s apps, here you go:

github.com/flathub

docs.flatpak.org/en/…/hosting-a-repository.html

Edit: Some did get a flathub mirror working. The issue is that a. Fastly works good enough and b. There is no concept of “packages” on the server side. It’s just one big addressed content store because of ostree, and syncing is apparently difficult? Idk, not being able to sync the state of content is like the entire point of ostree…

github.com/flathub/flathub/issues/813

possiblylinux127@lemmy.zip on 22 Jun 23:09 collapse

Honestly I would prefer to just donate

biribiri11@lemmy.ml on 23 Jun 00:48 collapse

It’s not about funding. Many prefer mirrors because the main instance isn’t globally available (the GitHub issue I linked, for example, is all about people trying and failing to access flathub in China) or because they can’t for compliance reasons (many businesses already mirror stuff like epel, too, which is what throws off Rocky’s stat counters). Neither of those issues can be assessed by throwing more money at a CDN.

possiblylinux127@lemmy.zip on 23 Jun 01:06 collapse

Well that isn’t the fault of Flathub. If a country or organization blocks it that’s a local issue. This is especially true in China where they need to control the movement of information. Blaming flathub and Flatpak for censorship is frankly unfair.

Just to be clear I do not support Chinese Authoritarianism

biribiri11@lemmy.ml on 23 Jun 03:23 next collapse

I’m not sure if anyone said it was the fault of flathub. My point is that, regardless of fault, accessibility to the main instance is an issue for several reasons, and a good way to solve it is to build a system for mirrors.

possiblylinux127@lemmy.zip on 23 Jun 03:45 collapse

Your bypassing restrictions that could get you in trouble. Tor is the right answer in that case. However, bypassing restrictions can have dire consequences.

biribiri11@lemmy.ml on 23 Jun 07:15 collapse

There are existing mirrors for Fedora and Ubuntu packages in China, which are used because mirrors in other countries are often blocked. I’m sure there are no legality issues—the issue in the case of flatpak and china in particular is that China blocks Fastly because Fastly does not host any POPs in China. This is why Cloudflare, for example, has their own network in China that international users can pay to use. There’s no legal issues here, just logistical. Besides, as previously shown, people do (with great difficulty) managed to bring up their own flatpak mirror without any consequences for a few years now.

Besides, there shouldn’t be legality issues for businesses wanting to host their own mirrors for compliance issues.

possiblylinux127@lemmy.zip on 23 Jun 15:54 collapse

I just think Flathub shouldn’t get involved with Chinese attacks on human rights. The Chinese version of things lack proper encryption and are heavily censored. You can’t use things like normal Wikipedia or Ticktok.

China isolates there own people. You can’t blame Flathub for attacks on freedom. As for mirrors your welcome to create your own repo based on Flathub. However, it is never going to be officially enforced. Flathub is very careful with user safety.

TCB13@lemmy.world on 23 Jun 10:36 collapse

Oh no, this is Flatpaks’ fault because they made this twisted repository system instead of doing sane things and then it is Flathub’s fault as well because they aren’t opening their storage to rsync or other sane syncing methods.

possiblylinux127@lemmy.zip on 23 Jun 15:48 collapse

Twisted repo system

Oh no, the evil repos

TCB13@lemmy.world on 23 Jun 17:45 collapse

Even Microsoft’s Winget repository is easier to deal with than Flathub.

possiblylinux127@lemmy.zip on 23 Jun 18:32 collapse

Yeah no, it isn’t. I know that from experience. It constantly goes down and is controlled by Microsoft so it favors there way of thinking.

TCB13@lemmy.world on 23 Jun 19:02 collapse

Controller by Microsoft? You mean a GitHub repository with the entire list of packages? A simple list of yaml files that simply point to whatever the developers decided to point them at?

Definitely worse than the BS that flathub is :)

eveninghere@beehaw.org on 23 Jun 01:17 next collapse

As a professor I have to say… the site admin skipped the class that taught them to include always the color bar.

mlg@lemmy.world on 23 Jun 01:52 next collapse

I’m gonna be honest I’ve never had a flatpak version of something ever work properly.

There was even one popular media player that only came in flatpak form or otherwise build from source.

So obviously, for no reason at all, it barely functioned compared to other applications I had already tried.

Congrats to you people put there somehow running things like Steam with no problems lmao.

corsicanguppy@lemmy.ca on 23 Jun 02:58 next collapse

I’m gonna be honest I’ve never had a flatpak version of something ever work properly.

As someone once involved with OS Security, I beg you not to use FlatPaks.

mrvictory1@lemmy.world on 23 Jun 05:29 next collapse

Flatpak is not perfect security-wise but is a step in the right direction

pumpkinseedoil@sh.itjust.works on 23 Jun 06:04 next collapse

Why?

independantiste@sh.itjust.works on 23 Jun 06:15 collapse

You can’t just make a statement like this without giving a hint of evidence or justification

lemmytellyousomething@lemmy.dbzer0.com on 23 Jun 04:34 next collapse

I have like 20 flatpak software products running without any problem for 2 years now.

Kusimulkku@lemm.ee on 23 Jun 07:23 next collapse

Your system might be messed up

Gueggel@feddit.de on 23 Jun 13:13 collapse

Here only the core OS and the basic part of the DE is from the Linux repository. The rest are all flatpaks.

umbrella@lemmy.ml on 23 Jun 02:46 next collapse

i hope it does 20 billion

delirious_owl@discuss.online on 23 Jun 03:43 next collapse

Great opportunity to inject malware to so many vulnerable peeps then

lord_ryvan@ttrpg.network on 23 Jun 07:43 collapse

You could say that with any program distribution. At least flatpaks are containerised.

delirious_owl@discuss.online on 23 Jun 13:26 collapse

Nah. Most distro package managers verify their packages authenticity with cryptography since the early noughts

jsomae@lemmy.ml on 23 Jun 05:03 next collapse

I’d prefer to see downloads per country per capita.

luciferofastora@lemmy.zip on 23 Jun 06:07 collapse

Right? “Oh look, country with huge population has more downloads than country with small population!”

SendMePhotos@lemmy.world on 23 Jun 05:11 next collapse

Does that count for when an OS is wiped and reinstalled or a nerd has like 3 computers and keeps OS flipping?

independantiste@sh.itjust.works on 23 Jun 06:14 next collapse

In that case you should use user-install flatpaks and separating and reusing your /home partition

Spiffyman@slrpnk.net on 24 Jun 04:14 collapse

I went a step further and have user-installed flatpaks with a custom flatpak directory so everything installs on a separate small hard drive. If the whole system goes down (usually due to my testing things!), I can reinstall set up the custom flatpak and everything works again. In theory. But it borks inter-flatpak communication (flatseal cannot find any other flatpaks and is thus unusable). I moved over to distrobox (which has its own issues, but works better for the OS wiped/reinstall scenario).

notenoughbutter@lemmy.ml on 23 Jun 11:18 collapse

I’m sorry

electricprism@lemmy.ml on 23 Jun 05:19 next collapse

MVP

lemmynparty@lemmings.world on 23 Jun 05:20 next collapse

Lol, what a pointless map.
It’s impossible to tell at a glance which countries have more or less downloads, other than a couple of countries with a slightly lighter colour.

jsomae@lemmy.ml on 23 Jun 06:18 collapse

Yeah, they could have applied a logarithm or something.

lord_ryvan@ttrpg.network on 23 Jun 07:40 collapse

And included a legend, such as a colour bar

Dayroom7485@lemmy.world on 23 Jun 10:59 collapse

Also, no novelty - strong reject, no revision possible 🙂‍↔️

lord_ryvan@ttrpg.network on 23 Jun 11:06 next collapse

What do you mean?

Tiempo@lemmy.dbzer0.com on 23 Jun 12:38 collapse

Such a Rev2!

mrvictory1@lemmy.world on 23 Jun 05:39 next collapse

Brazil has so many downloads

lord_ryvan@ttrpg.network on 23 Jun 08:03 next collapse

Oh wow, a lot of people use it in countries with a lot of people!

gigachad@sh.itjust.works on 23 Jun 11:08 next collapse

relevant xkcd

JasonDJ@lemmy.zip on 23 Jun 11:44 next collapse

Pet peeve #209: implying DFW has a bigger furry scene than Austin. For some reason I doubt that.

jwt@programming.dev on 23 Jun 17:44 collapse

Except that the download numbers don’t correspond at all with the population numbers.

balder1993@programming.dev on 24 Jun 02:30 collapse

Only Brazil is there because it has a big population.

Malgas@beehaw.org on 23 Jun 17:47 next collapse

<img alt="" src="https://imgs.xkcd.com/comics/heatmap_2x.png">

xkcd.com/1138/

lord_ryvan@ttrpg.network on 24 Jun 08:35 collapse

@Gigachad already mentioned it

Jolteon@lemmy.zip on 24 Jun 06:30 collapse

looks at India and China

I’m not seeing it.

istanbullu@lemmy.ml on 23 Jun 08:27 next collapse

nice

[deleted] on 23 Jun 12:29 next collapse

.

[deleted] on 23 Jun 12:51 collapse

.

Frostbeard@lemmy.world on 23 Jun 12:52 next collapse

What’s the issue? I installed mint because I know fuckall about Linux, and tbh it’s a dice toss if I have used the Flatpak option not knowing what the actual difference between them are

SimplyTadpole@lemmy.dbzer0.com on 23 Jun 16:18 next collapse

Honestly, you don’t have to worry about what others say, you should use what works best for you. Personally I find them to be nice and comfortable to use, myself 😅

Liz@midwest.social on 23 Jun 17:40 next collapse

Flatpak “containerizes” the program, which makes it more secure and less able to accidentally mess up other programs. Fuck if I know how it works.

Also you don’t have to type in your password every time you want to update the program, so that’s nice.

MicrondeMMMMMMM@lemmy.blahaj.zone on 23 Jun 20:21 next collapse

I’ll add upon what others have said here, for me the main downside is the size they take on disk since they don’t really share dependencies (they do but not as efficiently as native or nix packages) so they take a lot of room and take a while to update. Otherwise they’re amazing IMO and you should use them! :)

Petter1@lemm.ee on 24 Jun 13:08 collapse

Thing is, if your flatpak software needs something not in its container, it gets a little complicated, because first you have to realise what exactly the problem is and secondly you have to use something like flatseal to give it access to wathever it needs to work (no real help there)

So this was what took me back to pacman (or better said yay)

starman@programming.dev on 23 Jun 16:47 next collapse

Still not as good as native package

LemmyHead@lemmy.ml on 23 Jun 19:30 next collapse

Good is relative tbf. I’ve had issues installing something natively while installing flatpak just worked

MicrondeMMMMMMM@lemmy.blahaj.zone on 23 Jun 20:18 collapse

Sure yeah but its what we have. I’m personally rooting for nixpkgs but they might be too complicated to setup for the average Joe.

iaMLoWiQ@lemmy.ca on 23 Jun 20:30 next collapse

Google is better at advertising anyways. No sane being has ever heard of flathub. Qndroid has billion downloads every week.

paris@lemmy.blahaj.zone on 24 Jun 03:48 collapse

I imagine the largest mobile phone operating system on the planet has a few more downloads than one of the several available package managers for the comparatively very small desktop Linux audience, yeah. This is the Linux community, not the Android or Google community, so I’m not sure what you’re yapping away about or why.

edit: i wanted to know how many devices run android and according to this it’s three billion so you’re wrong anyway lmao

MicrondeMMMMMMM@lemmy.blahaj.zone on 23 Jun 20:36 next collapse

FOSS keeps winning it’s Insane!

ssm@lemmy.sdf.org on 23 Jun 20:42 next collapse

Flatpak’s usecase for me is Alpine Linux and other distributions that use musl or other libc implementations. I don’t love it, I think its cli interface and the way you add flatpak servers to be obtuse and annoying, but it is useful for getting glibc dependent software.

bitfucker@programming.dev on 24 Jun 00:14 collapse

Another alternative is distrobox and bedrock linux.

fireshell@lemmy.ml on 24 Jun 06:06 collapse

It is noteworthy that builds of Chrome, VLC, Dolphin, Steam and Spotify are created by third-party enthusiasts not associated with the main projects.

What great news, that’s why there is no trust in Flathub.

kylian0087@lemmy.dbzer0.com on 24 Jun 12:10 next collapse

I mean it is still miles ahead of snaps and the snap store

nexussapphire@lemm.ee on 24 Jun 12:43 collapse

Why don’t you open an feature request on their git if you have an issue with volunteer work.

It’s funny thinking this guy uses a distro package manager potentially with unofficial patches applied to the package.