• 0 Posts
  • 23 Comments
Joined 2 years ago
cake
Cake day: June 4th, 2024

help-circle





  • From their howto site:

    Can I use a third-party email app like Thunderbird? No, this is not possible for security reasons. Tuta does not support the use of third-party email clients or the protocols IMAP/POP3/SMTP as we cannot guarantee end-to-end encryption of your data. Instead, Tuta offers email desktop clients for Linux, macOS and Windows as well as a web client and apps for Android and iOS. We aim to provide all required functionalities with our own apps, for instance, offline access to your encrypted data is possible with our apps.



  • A bit surprised there was no discussion about this on any Fediverse instances.

    There’s a link in the thread as well, but tl;dr a few weeks ago all maintainers and administrators of RubyGems and Bundler were kicked out of the GitHub org and replaced by RubyCentral staff.

    Here’s another article better explaining the situation https://thenewstack.io/open-source-turmoil-rubygems-maintainers-kicked-off-github/

    As far as what DHH has to do with this, the article shared in the actual framework thread goes into better detail.

    https://joel.drapper.me/p/rubygems-takeover/

    About six hours after Ellen broke the news, Ruby Central published their response: Strengthening the Stewardship of RubyGems and Bundler.

    A post that feels like AI-generated corporate speak and bears no signature from anyone at Ruby Central willing to take responsibility.

    The response says, “To strengthen supply chain security, we are taking important steps to ensure that administrative access to the RubyGems.org, RubyGems, and Bundler is securely managed. This includes both our production systems and GitHub repositories. In the near term we will temporarily hold administrative access to these projects while we finalize new policies that limit commit and organization access rights. This decision was made and approved by the Ruby Central Board as part of our fiduciary responsibility.”

    But while Ruby Central has the right to lock down the RubyGems.org Service infrastructure, it never owned the RubyGems GitHub repositories.

    DHH ignored Ellen’s post but instead retweeted the Ruby Central announcement with the caption “Ruby Central is making the right moves to ensure the Ruby supply chain is beyond reproach both technically and organisationally.”

    A position that seems to stand in stark contrast to his other opinions. For example, he criticised Apple’s control of the App Store and takes the ownership of his own open source projects seriously.







  • I don’t develop distributed applications, but Im not understanding how it simplifies dependency management. Isn’t it just shifting the work into the app bundle? Stuff still has to be updated or replaced all the time, right?

    That’s correct. This simplifies the dependency management system because not every distribution ships with every version of every package, so when software requires a version of a package that the distro dosesn’t ship with or have in its repositories, the end user has to either build the package from source, or find some other way to run their software. Flatpaks developers will define the versions of dependencies that are required for an application to run and that exact version is pulled in when the flatpak is installed. This makes the issue of every distro not having every version of every package moot.

    Don’t maintainers have to release new bundles if they contain dependencies with vulnerabilities?

    They don’t have to, no. But they absolutely should.

    Is it because developers are often using dependencies that are ahead of release versions?

    Sometimes, yes. Or the software is using a dependency that is so old that it’s no longer included in a distro’s package repositories.

    Also, how is it so much better than images for your applications on Docker Hub?

    I would say they’re suited to different purposes.

    Docker shines when availability is a concern and replication is desired. It’s fantastic for running a swarm of applications spread across multiple machines automatically managing their lifecycles based on load. In general though, I wouldn’t use Docker containers to run graphical applications. Most images are not suited for this by default, and would require you install a bunch of additional packages before you could consider running any graphical apps. Solutions to run graphical applications in Docker do exist (see x11docker), but it doesn’t really seem like a common practice.

    Flatpaks are designed to integrate into an existing desktops that already have a graphical environment running. Some flatpaks include the packages required for hardware acceleration (Steam, OBS) which can eliminate the need for those packages to be available via your distro’s package manager.

    What this means is that a distro like Alpine Linux that doesn’t have an nvidia package in its repos can still run Steam because the Steam flatpak includes the nvidia driver if you have an nvidia GPU installed.

    Never say never, I guess, but nothing about flatpak really appeals to my instincts. I really just want to know if it’s something I should adopt, or if I can continue to blissfully ignore.

    ¯_(ツ)_/¯ It’s a tool. Use it when it’s useful, or don’t.





  • Yeah this was an update from June. I’ve been using Rider 2024.2 when writing C# for my own personal Godot project(s) for the last month or so. I can say it’s been pretty smooth. All of the friction I encountered was mostly in setup. You have to point Rider at your Godot binary to ensure it can launch the editor, specific scenes, or a headless language server. This was slightly difficult at first because I was using the Godot flatpak, but I got it sorted out. Most features you’d expect (syntax highlighting, goto definition/invocation, automatic imports, etc.) are there and the IDE is capable of launching specific packed scenes or the editor itself if you need it. I can’t speak to how this plugin compares to other engine plugins (Unity), but I have yet to run into any issues.