With all the supply chain attacks in the Linux ecosystem, isn’t the natural solution to move to full application sandboxing?

Flatpacking is great but not all applications support it.

Is it too much of a hassle?

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 4 months ago (2 children)

I adore Qubes!

Until a new version of Fedora gets EOLed. Or Qubes itself.

Setting up ALL of those distros every 3-6 months is a pain in the dick even when nothing goes wrong. And something always goes wrong with enough complexity.

  • source
  • hideshow 2 child comments
  • [–] 1 point 4 months ago (1 child)

    You know you can do in-place upgrades. I never faced any issues despite the warnings on the doc. Though I always try to do the in-place upgrade on a template clone first to see what I'm in store for. Like sometimes tmpfs needs to be increased....

  • source
  • parent
  • hideshow 1 child comment