this post was submitted on 04 Feb 2025
31 points (97.0% liked)

Linux

49544 readers
922 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I am thinking about using distrobox. Since I am on debian I wont need it to install software I could otherwise not install. But I have some apps that require weired install scripts and I am thinking about using it as a security measurement. Do you think that is a good idea? Does that idea makes sense?

you are viewing a single comment's thread
view the rest of the comments
[–] qaz@lemmy.world 5 points 22 hours ago* (last edited 21 hours ago) (1 children)

This is just incorrect

...or containers, e.g. Docker/Podman

Distrobox is a script that manages Docker/Podman containers

What you are installing can cause damage so IMHO it's more about keeping things manageable while having your actually important data...

Programs are installed the container, not on the host system. When you break the container the host system is fine unless using rootful (or Docker) containers.

...while having your actually important data (not programs, downloaded content, etc but rather things you did yourself, e.g. written documents, sketches, configuration files, prototypes, photos, etc) safe...

Using Distrobox does NOT keep your own files safe, it actually mounts your home directory and external USB drives inside the containers by default fully exposing your documents to whatever you install inside.

From the documentation:

Isolation and sandboxing are not the main aims of the project, on the contrary it aims to tightly integrate the container with the host. The container will have complete access to your home, pen drive, and so on, so do not expect it to be highly sandboxed like a plain docker/podman container or a Flatpak.

[–] utopiah@lemmy.ml 2 points 14 hours ago* (last edited 14 hours ago)

Yeah I don't think you're addressing what I wrote, you're mixing up my suggestion (to clarify the important part is "or") with DistroBox then more general comments. Might be that I wrote it unclearly but anyway it wasn't what I was saying.