Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Offer an official Appimage support #3082

Open
1 task
eugenialoli opened this issue Nov 5, 2024 · 4 comments
Open
1 task

Offer an official Appimage support #3082

eugenialoli opened this issue Nov 5, 2024 · 4 comments

Comments

@eugenialoli
Copy link

Description

I would like a Linux appimage that works on every distro

Who's implementing?

  • I'm willing to implement this feature myself

The problem

I'd like to have an official appimage of the browser. I understand that there are some third parties, but I certainly can not trust third parties. Too many cooks spoil the broth, security-wise. That's an app I do bank transactions, I need to know that I can trust it.

So both flatpaks, snaps and appimages, along rpm and deb files should be offered officially, but I think the easiest way to start is providing an appimage. It works everywhere, its much easier to build than a flatpak, and it's a delete away from the user if necessary.

Possible solutions

Create an appimage

Alternatives

No response

Additional context

No response

@networkException
Copy link
Member

The appimages published in https://github.com/ungoogled-software/ungoogled-chromium-portablelinux are as official as it gets. Yes the situation can be improved (build infra is really costly though) but in the end you're trusting random people on the internet regardless

@eugenialoli
Copy link
Author

Thank you for the reply. What do you mean as official as it gets? you actually know Clickot, and he's a trusted person?

@networkException
Copy link
Member

He's the maintainer for the sources in an official org repo, I'd personally hold him to higher standards than some other person just submitting binaries but in the end there's not much practical difference. For other platforms we have GitHub Actions but thats slow and tedious to maintain.

@PF4Public
Copy link
Contributor

he's a trusted person?

What is your definition of a trusted person? How would you trace the trust chain to that very person given a binary you've downloaded?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants