Since you didn’t post your solution, here it is for others: you need to add Flathub as a user remote too.

flatpak remote-add --user --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo

It’s not called systemD. It’s just systemd.

Yahoo collected data and shared it with Linux Mint. Also, Mint analyzed downloads for its packages.

https://blog.linuxmint.com/?p=4030

Then as a grown adult, you can make your chrome policy.json to disable the automatic updates.

And being an adult has nothing to do with it. If left to their own devices, most people will simply not update. Some people actively resist updates. Linux Mint had some statistics that showed that like half of their users were running severely out of date versions, so they had to change things.

It’s more private but doesn’t have 0 telemetry. You can disable some telemetry in settings. But it still has to make requests for update checks if using Windows or MacOS.

In this case, it’s an enthusiastic employee working for his own benefit, being able to play the game on his preferred OS. And thankfully recognized and supported by the company.

I think Discord and Spotify are similar situations. The companies don’t particular care, but a few employees wanted it and made it happen.

Yes. GUI stores tend to use something called PackageKit. It’s basically an abstraction layer, each package manager writes its own packagekit backend.

That way, GUI stores just have to support PackageKit rather than every single package manager. But there are bugs with PackageKit and the backends may have bugs too. Pacman’s is notoriously bad.

That’s not what this is about. It seems like several Red Hat teams have been merged into IBM.

OP was talking about Lineage, not Graphene.

Yes, but you said don’t change your OS in general.

an app with access to your calendar has indirect internet access

True, but that is something stock Android does let you control.

It does make a difference. One amazing feature of GrapheneOS is the ability to block apps from accessing the internet. That alone makes it much harder for such apps to harm your privacy unless they also malicious.

Year of the OpenBSD phone

And what happens if the social media platform doesn’t address complaints in the way the government wants?

Would the social media company rather continue making a profit in that country, so censors according to the government, or leave the country entirely?

The ffmpeg from Flathub is a “runtime” package, intended to be used by other flatpak apps. It’s not meant for CLI use.

Flatpak apps are not added to your $PATH. They’re run with flatpak run appID. Though again, ffmpeg is not an app so it cannot be run this way. Though technically you could use it for CLI use by doing something like flatpak run --command=sh org.mozilla.firefox. This will open a shell inside the flatpak environment, which can use the ffmpeg flatpak runtime.

Though now that I think about it, it would be fun to create my own flatpak package for ffmpeg for CLI use. Should be pretty simple, it would just be a mostly empty package that relies on the ffmpeg-full flatpak runtime. Edit: and I did

The manifest is simply

id: my.custom.ffmpeg
runtime: org.freedesktop.Platform
runtime-version: '24.08'
sdk: org.freedesktop.Sdk
add-extensions:
  org.freedesktop.Platform.ffmpeg-full:
    directory: lib/ffmpeg
    version: '24.08'
    add-ld-path: .
command: ffmpeg
modules:
  - name: ffmpeg-wrapper
    buildsystem: simple
    build-commands:
      - mkdir -p /app/lib/ffmpeg
      - install -Dm755 ffmpeg.sh /app/bin/ffmpeg
    sources:
      - type: script
        dest-filename: ffmpeg.sh
        commands:
          - /usr/bin/ffmpeg "$@"
finish-args:
    - --filesystem=host

You’re just adding arguments on arguments that aren’t making any sense now. You’re original comment and understanding has been addressed.

My main point is that I’m worried about additional complexity. On most atomic distros, you’re not supposed to touch the base system, so various tools are preinstalled or available: flatpak, podman, homebrew, snap, appimages, systemd sysext.

The BSDs seem to enjoy a separation of OS and user packages with reduced complexity. Though their task is easier since they are complete operating systems, whereas linux is just a kernel and many different projects put together, and many different groups putting out their own distros with varying packages and compatibility.

Both RPM and dpkg support being able to unpackaged or install packages into your local home directory

These don’t seem to be advertised features. More like hacky workarounds. Complex rpm commands. Ubuntu thread with various proposed solutions.

It would be really cool if dnf and apt got good, easy, simple support for installing packages into the home folder. But that’s not what’s happening. The proposed solution seems to be systemd sysext, which again, prompted me to have worries about complexities about how software is being managed on more “modern” distributions.

You’re just adding arguments on arguments that aren’t making any sense now. You’re original comment and understanding has been addressed

And I keep discussing it because I enjoy doing so.

Thats not what I’m saying.

My first point is that homebrew is only good for CLI applications. Almost no GUI apps are available, the only one I know of is xeyes.

My second point is that homebrew is unsanboxed. That’s good for programs that don’t work well sandboxed, such as fetch tools like fastfetch.

This leaves a gap of a good supported way to install GUI apps that are unsandboxed. I used to need this when I used an Android phone with a custom OS. I needed to have unsandboxed Chromium with adb tools to flash and update the OS. However, when sandboxed, Chromium doesn’t have access to adb tools.

You can use the Warehouse app to do this: https://flathub.org/apps/io.github.flattool.Warehouse

Wouldn’t recommend doing it with the CLI, they don’t make it easy.

I’m not saying they’re running with special privileges, just that they’re part of the “OS”. Stuff that comes included with every system and that should not be removed.

You’re not really “managing” the OS files, you’re just applying patches and upgrading to new releases. All the interesting stuff (from the user perspective) is done using pkg on FreeBSD and pkg_* on OpenBSD; it’s with those you install your packages like the DE/WM, web browser, CLI tools, etc.

There’s a couple of benefits to splitting these. Makes it easier to “reset” the system to its default state and makes it impossible to accidentally break the OS (you can’t accidentally remove any critical components like the kernel).

Homebrew is good for unsandboxed CLI programs, but unfortunately not GUI apps.

An issue I ran in the past when using a custom OS on my phone was that flatpak, containers, or snap were able to talk to my phone properly to flash the OS. So on an atomic distro, I would either have to install Chromium using something like rpm-ostree, systemd systext, or boot into a traditional distro like Debian.

I’m not sure what you mean with the update tooling having some “clear separation of OS from these packages”, but maybe you want to try and expand on that a bit

On FreeBSD and OpenBSD, OS upgrades are handled by the freebsd-update and syspatch commands respectively. User package installs are handled by the pkg and pkg_* commands respectively.

The pkg tools do not touch the base OS. That also helps avoiding issues like uninstalling critical system packages and makes it easier to wipe the system to a “clean” state, undoing user modifications.

It’s hard to succinctly describe the difference between BSD and Linux, but essentially, in BSD the OS is everything: kernel, tools, extensions…etc

It also certainly helps that neither FreeBSD or OpenBSD comes with desktop environments by default. That muddies the water of what is an OS package and what is a user package. If desktop environments were treated as OS packages, then it would not be possible for the users to uninstall the DE apps.