Caleb James DeLisle (nprofile…8cpz) nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqlw88p7q6wfkq8a4l8k4vuefv00exfdu6l2hya8tr2r3xfujm456qqm2g7j (nprofile…2g7j) Flatpak doesn't ship with a whole kernel setup (Although it could eventually be developed to do that), and even if it did, there's plenty of wrapping methods translating kernel API calls that you wouldn't need a whole kernel with it anyway in most cases.
Flatpak ships with a self-contained glibc environment and anything else it needs as required by flatpak packagers
See it the other way: You don't want an app with internet access being able to list and be able to upload whatever is on your home directory (And potentially beyond), not to mention any other info about your system that you might not want it to know, or letting it being able to do trace calls to your kernel if you set your permissions too lax.
With things like Steam, you're normally giving an huge proprietary blob with full internet access read and write permissions into your entire home directory, not to mention direct hardware access and plenty more. Flatpak can reduce your exposure there
Vokainen
npub14r…7nxs7
2026-05-22 21:40:39 UTC
in reply to nevent1q…39pp
Author Public Key
npub14rjjpej6x3uyprm0hgaq4epjhqpk60jrjdwmz9v9e8txpf40rmpq27nxs7Seen on
wss://relay.mostr.pubPublished at
2026-05-22 21:40:39 UTCEvent JSON
{
"id": "761d6c18f2dde2ee577789ce2ed5798d7768e7b43313e8e5bdb7d09460055f6a",
"pubkey": "a8e520e65a3478408f6fba3a0ae432b8036d3e43935db11585c9d660a6af1ec2",
"created_at": 1779486039,
"kind": 1,
"tags": [
[
"p",
"dde9dd6efbaf3c747c06bfd60f732666acd686e4c2eff471937f0c7c5fca5e0e",
"wss://relay.ditto.pub"
],
[
"p",
"fb8e70f81a726c03f6bf3daace652c7bf264b79afaae4e9d6350e264f25bad34",
"wss://relay.ditto.pub"
],
[
"e",
"812630eb3c0e306dd866859b27eaf028958c22db9f364bef7b179c1501cb95b0",
"wss://relay.ditto.pub",
"reply"
],
[
"proxy",
"https://cawfee.club/objects/2b267dd7-b60f-4a36-b5de-d45de556dcb9",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqmh5a6mhm4u78glqxhltq7uexv6kddphycthlguvn0ux8ch72tc8qsf8cpz nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqlw88p7q6wfkq8a4l8k4vuefv00exfdu6l2hya8tr2r3xfujm456qqm2g7j Flatpak doesn't ship with a whole kernel setup (Although it could eventually be developed to do that), and even if it did, there's plenty of wrapping methods translating kernel API calls that you wouldn't need a whole kernel with it anyway in most cases. \n\nFlatpak ships with a self-contained glibc environment and anything else it needs as required by flatpak packagers\n\nSee it the other way: You don't want an app with internet access being able to list and be able to upload whatever is on your home directory (And potentially beyond), not to mention any other info about your system that you might not want it to know, or letting it being able to do trace calls to your kernel if you set your permissions too lax. \nWith things like Steam, you're normally giving an huge proprietary blob with full internet access read and write permissions into your entire home directory, not to mention direct hardware access and plenty more. Flatpak can reduce your exposure there",
"sig": "9455717247dd7f0f26068bdd797cf73bec38f6d85c3e8e5263bd3cc3720254475a110dc78be09ca397919eb93bf69c490eb4dc1f146965585d4d869f2e6fb5a4"
}