Looks like it does? Or at least could?

unix.stackexchange.com/questio…

I've never seen one so far though

I've packaged a CLI that I made as a flatpak. It works just fine. Nothing weird was required to make it work.

The only thing is that if you want to use a CLI flatpak, you probably want to set an alias in your shell to make running it easier.

I'm not sure why more CLIs aren't offered as flatpaks. Maybe because static linking them is so easy? I know people focus on flatpak sandboxing as a primary benefit, but I can't help but think of static linking was easier for bigger applications, it wouldn't be needed as much.

Flatpak Zoom had no camera access.

I used Flatpak Zoom for all my job interviews recently. Camera and mic worked flawlessly.

Snap is not all bad if you're on a Ubuntu based distro, I just don't like the way it's pushed and that it comes from Ubuntu mostly. Startup time is a major issue for me also, but all in all it works.

I'm still sitting on the fence, heavily prefer flatpak but when Ubuntu is going to package nvidia drivers in a snap it's a thing I'm up for trying.

My understanding is that if I'm on Ubuntu and the snap uses the same underlying Ubuntu version as my distro it should be fast but I haven't seen it.

Well, I heard that people who use flatpacks are libs. True?

Sorry, I just think it's funny that Linux users get so defensive about this stuff. You really felt insulted by this?

OpenSUSE has OneClick install for RPMs. en.opensuse.org/openSUSE:One_C…

Edit: and if you happen to download an rpm, you just double click it in the filemanager (or single click if that is your setting) and it launces the install GUI.

Its similar to how MSI file install looks...just next next finish kind of thing

A few reasons security people can have to hesitate on Flatpak:

• In comparison to sticking with strictly vetted repos from the big distros like Debian, RHEL, etc., using Flathub and other sources means normalizing installing software that isn't so strongly vetted. Flathub does at least have a review process but it's by necessity fairly lax.
• Bundling libraries with an application means you can still be vulnerable to an exploit in some library, even if your OS vendor has already rolled out the fix, because of using Flatpak software that still loads the vulnerable version. The freedesktop runtimes at least help limit the scope of this issue but don't eliminate it.
• The sandboxing isn't as secure as many users might expect, which can further encourage installing untrusted software.

By a typical home user's perspective this probably seems like nothing; in terms of security you're still usually better off with Flatpak than installing random AUR packages, adding random PPA repos, using AppImage programs, installing a bunch of Steam games, blindly building an unfamiliar project you cloned from github, or running bash scripts you find online. But in many contexts none of that is acceptable.

I mean, they added "bash scripts you find online", which are only a problem if you don't look them over or cannot understand them first... Their post is very much cemented in the paranoid camp of security.

Not that they're wrong. That's the big thing about security once you go deep enough: the computer has to work for someone, and being able to execute much at all opens up some avenues of abuse. Like securing a web based service. It has to work for someone, so of course everything is still vulnerable at some point. Usually when private keys or passwords are compromised if they're doing things remotely correctly, but they're still technically vulnerable at some point.

The parent comment mentions working on security for a paid OS, so looking at the perspective of something like the users of RHEL and SUSE: supply chain "paranoia" absolutely does matter a lot to enterprise users, many of which are bound by contract to specific security standards (especially when governments are involved). I noted that concerns at that level are rather meaningless to home users.

On a personal system, people generally do whatever they need to in order to get the software they want. Those things I listed are very common options for installing software outside of your distro's repos, and all of them offer less inherent vetting than Flathub while also tampering with your system more substantially. Though most of them at least use system libraries.

they added “bash scripts you find online”, which are only a problem if you don’t look them over or cannot understand them

I would honestly expect that the vast majority of people who see installation steps including curl [...] | sh (so common that even reputable projects like cargo/rust recommend it) simply run the command as-is without checking the downloaded script, and likewise do the same even if it's sudo sh. That can still be more or less fine if you trust the vendor/host, its SSL certificate, and your ability to type/copy the domain without error. Even if you look at the script, that might not get you far if it happens to be a self-extracting one unless you also check its payload.