• corsicanguppy@lemmy.caEnglish
      1·
      1 hour ago

      # rpm -Vp https://download.rockylinux.org/pub/rocky/9/BaseOS/x86_64/os/Packages/n/net-tools-2.0-0.64.20160912git.el9.x86_64.rpm

      Oh. Glad to know every part of that package is absolutely as delivered, and signatures are clean in a chain from the distro’s published keys down to the checksums on every file deployed.

      Yes, this has saved my bacon. Yes, this has absolutely shut some distros out of consideration.

    • Geodad@lemm.eeEnglish
      10·
      3 hours ago

      Flatpak is actually a really good solution. Snap is garbage though.

      I do a combination of Flatpak for niche 3rd party applications and apt on Debian for standard stuff that everyone wants/needs.

      • tauren@lemm.eeEnglish
        1·
        2 hours ago

        Same. I like it that I can install Librewolf and some other software on Mint from Flathub instead of adding some obscure repositories with commands I don’t even understand.

        Like with docker, this isn’t healthy:

        # Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

# Add the repository to Apt sources:
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \
  $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

        Source: https://docs.docker.com/engine/install/ubuntu/

        • corsicanguppy@lemmy.caEnglish
          1·
          1 hour ago

          adding some obscure repositories with commands I don’t even understand.

          You may want to learn the commands and review the repos.

          this isn’t healthy:

          True, but not in a way that SnapPakImage is going to fix.

    • Linearity@infosec.pubEnglish
      2·
      31 minutes ago

      System packages are always light but share the same dependencies with everything else which saves space. However, they don’t have any sandboxing, which makes them less secure than Flatpaks. It’s best to use those for simple programs.

      Flatpaks are amazing because each Flatpak is sandboxed with its own dependencies, and if you already have the dependency on your device, it doesn’t download it again but clones it from your device to reduce bandwidth load. Flatpaks are a great fallback when system packages aren’t available because they’re compatible with all Linux distributions and I advise you use them primarily for any program that connects to the Internet as they’re more secure.

      Snaps are worse Flatpaks lmao

      • corsicanguppy@lemmy.caEnglish
        1·
        1 hour ago

        simple and just works.

        I’ve been updating enterprise linux hosts via cron for 25 years. I used to watch them. Now, given the quasi-rollback options and validation, I use repos I can trust and I review the payload after. It’s less resilient since EL7 (ohai Lennart) but still so very simple. I’ll thunderdome your OS Security chief on that as well.