Flatpak – An Insecurity Nightmare

📝 Discussion Summary (Click to expand)

Three prevalent themes in the discussion

Flatpak eases cross‑distribution installation by sharing dependencies
“Flatpak is supposed to make installations of apps easier by sharing common dependencies across all distributions. That’s all. And in a way, it works.” – aucisson_masque
“Flatpak is now an indispensible part of my linux setup … Running up‑to‑date desktop apps … without any conflicting dependencies and configurations tainting the distribution.” – oflebbe
Flatpak’s sandboxing is seen as inadequate or mis‑designed
“Now on the sandboxing part, you can’t fix a sinking ship with a chewing gum in the hole. The whole structure is not designed to work this way. It has to come from yet another distribution where permission are enforced at the operating system level, like on macOS.” – aucisson_masque
“Flatpak inject themselves into every protocol discussion on Wayland and loudly insist only the flatpak solution is acceptable … They drove off a xfce maintainer … with terrible behavior.” – jauntywundrkind
Snap is criticized for being centralized, forced‑updating, and less user‑friendly
“Snap is trash because autoupdate cannot be disabled without code changes (what?!).” – edg5000
“I actually prefer flatpak over snaps … Snaps get unusable really fast and have a lot of unexpected problems.” – manvel_hn
“Snaps are centralized, provided by one company. Sorry, but no.” – renegat0x0

🚀 Project Ideas

Provides a drag‑and‑drop .app bundle experience on Linux, eliminating reliance on distro‑specific packages or centralized stores.
Runs each bundle in a lightweight sandbox (bubblewrap/Firejail) with macOS‑style on‑demand permission dialogs for files, camera, microphone, etc.

Key	Value
Target Audience	Linux desktop users who want simple, portable app installation (developers, power users, less‑technical users)
Core Feature	Drag‑and‑drop app installer that creates an isolated runtime, handles updates, and shows permission prompts
Tech Stack	Rust (or Go) for daemon, GTK4/Qt6 for UI, bubblewrap for sandboxing, libportal for permission dialogs, AppImage format as bundle
Difficulty	Medium
Monetization	Hobby

HN commenters complained about Flatpak’s slow downloads and forced sandboxing; Lana offers instant local install with optional sandboxing and macOS‑like permission flow, addressing the “just drag the app to Applications folder” wish.
Could spark discussion on unifying Linux app distribution while preserving user control over inter‑app access.

Enables administrators and users to define groups of applications that may share specific resources (e.g., a password manager and its browser extension, or a VST host and plugins) while keeping each app otherwise isolated.
Provides a declarative policy language and a daemon that enforces the groups via namespaced bind‑mounts and restricted DBus access, solving the need for seamless inter‑app workflows without sacrificing security.

Key	Value
Target Audience	Linux power users, developers of integrated workflows (e.g., security tools, audio production), and sysadmins managing multi‑app environments
Core Feature	Policy‑driven creation of sandbox groups that grant shared filesystem sockets or DBus services only to listed apps
Tech Stack	Rust, libseccomp, bubblewrap, systemd‑user services, DBus broker, JSON/YAML policy format
Difficulty	High
Monetization	Hobby

Commenters wanted KeePassXC to talk to its Firefox extension and yabridge to expose VSTs without punitive global sandboxing; SandboxGroups lets them do exactly that via opt‑in groups.
Offers a concrete alternative to the “all‑or‑nothing” sandboxing criticized in the thread, inviting debate on granular permission models for the Linux desktop.

Acts as a local proxy between flatpak CLI/GUI and remote flathub repositories, storing previously downloaded runtimes and applying binary deltas to drastically reduce bandwidth usage on slow connections.
Includes a simple GTK UI to view cache stats, pin versions, and schedule background updates.

Key	Value
Target Audience	Linux users on metered or slow connections who rely on Flatpak for up‑to‑date desktop apps
Core Feature	Runtime deduplication and delta‑update engine that cuts download size by up to 80 % for recurring flatpak installations
Tech Stack	Rust (or C++), ostree library for deltas, SQLite for cache metadata, GTK4 for UI, systemd service for proxy
Difficulty	Medium
Monetization	Hobby

Several users complained that Flatpak forces large runtime downloads even for tiny apps, making installation painful on slow links; FlatpakBoost directly addresses that pain point.
Provides a practical utility that could be packaged as a flatpak itself, encouraging discussion on improving Flatpak’s efficiency without sacrificing its benefits.