Geary as a flatpak

Hardware Librem 5
15

I also see no bigger risk in using Flatpak apps. When the Developer wants to make me problem he can do this also in “normal” apps. Nobody can control million lines of code in the Linux universe every da from new

1 Like
16

Around mutt there is an active community and I can’t imagine that someone could git commit malicious code.

1 Like
17

Same here. Non-flatpak Geary has not been able to contact my Comcast mail server for a long time. The flatpak release finally fixed this issue.

1 Like
18

This article explains most of my feelings about using flatpaks.

2 Likes
19

Yeah, but I do not think that anything we use here is something like safe in the IT

1 Like
20

i am aware of some of the downsides to using flatpak and i have seen this blog post before.

now regarding security, my question should have been what are some of your concerns regarding flatpak security ?

i mean there is a security risk to using the web, yet people still use it.

if i am using pureos and using the Epiphany browser, I would use the flatpak package from here Install Web on Linux | Flathub over using pureos package. at least it doesn’t suffer from the disclosed CVEs that i mentioned here Please be aware if you are using epiphany browser - #20 by Moon3

1 Like
21

To use the L5 really as a daily driver - especially in a business case - not one modern app will be available. The Debian base is ooooooold and o all apps in Debian.

And also no possibility to use with something like easyness Signal, Telegram, Geary ad more :frowning:

1 Like
22

Are you talking about Geary or Epiphany browser ?

1 Like
23

Geary, Epiphany is absolutely the same thing as Geary. Debian base too old on the L5. So without flatpak no use for me for the L5

1 Like
24

Some worries (to me):

  • Extra runtime libraries (larger attack surface)
  • The sand-boxing gives you a false sense of security
  • I trust the system apps more over third party build flatpaks (due to flatpak’s complexity).
  • If an app does not install or run on my OS, then there must be a good reason for it.
1 Like
25

Absolutely correct, but the Geary delivered with PMOS is unusable. So I have the possibility to use an unusable but safe software or a stable running and usable flatpak Geary

Easy to decide what to use.

The problem is the old-old-old Linux base of the L5 and as long as this is not fixed from Purism there the need to use Flatpak apps would grow every day

I am not sure we will see Crimson in a foreseeable time :frowning:

3 Likes
26

Pretty sure that you can download crimson for the Librem 5 right now - but it comes with caveats.
e.g. Crimson Experience

2 Likes
27

This is not a real usable Debian on the L5 I think. The issues in the actual build are enough :wink:
If I make an upgrade I want to have newer features lik a working suspend and a smaller energy footprint FE. But there everyday I have more doubts about this to come :frowning:

1 Like
28

It is usable for me, but feel free to think whatever you want.

29

I could use if it is “better” tan the old Byzanium. But as I see FE the camera does not work. How about the Energy experience with Crimson? Suspend any better?

I would gladly try it, but it should as least work as with Byzantinum

1 Like
30

Currently, I do not have the time to benchmark Crimson, so either wait around a week or flash it yourself.

31

And to note, for many people that would be:

  • boot Jumpdrive, and
  • image the eMMC drive in its entirety

then flash crimson. That way, if crimson is not to the person’s liking, there is an easy, clean restore point.

This will potentially cause the loss of any SMS/MMS messages that came in during the time that crimson was being run so if the purpose of running crimson is to see whether Geary works better or ensure that power consumption is not worse (including that suspend works) etc., it could be wise to disable receiving SMS/MMS messages temporarily.

1 Like
32

Why nobody states clear what is with suspend, millipixel and geary in Crimson FE ?

The guys tested it must have some experience with this or has only a very small amount tested it now?
What about the Crimson installation if Crimson gets final? Could the testing instance be upgraded or mus we make a flash from the beginning?

1 Like
33

I do not use any of them myself.

I do not know for the first two questions, and the latter for the last question.

34

It is “easy” :wink:

If I switch to Crimson and then finally Crimson will be stable and rolled out - can I update to the official release or have I the need to flash all from new and have to config all my settings from scratch?

I have no great desire to flash an early stage from Crimson which is running more worse and incomplete than Byzantinium. I hope somebody has tested Crimson out a bit an can report his experiences from a running and used L5 ?

1 Like