• tauren@lemm.ee
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    21 hours ago

    Same. I like it that I can install Librewolf and some other software on Mint from Flathub instead of adding some obscure repositories with commands I don’t even understand.

    Like with docker, this isn’t healthy:

    # Add Docker's official GPG key:
    sudo apt-get update
    sudo apt-get install ca-certificates curl
    sudo install -m 0755 -d /etc/apt/keyrings
    sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
    sudo chmod a+r /etc/apt/keyrings/docker.asc
    
    # Add the repository to Apt sources:
    echo \
      "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \
      $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}") stable" | \
      sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
    sudo apt-get update
    

    Source: https://docs.docker.com/engine/install/ubuntu/

    • corsicanguppy@lemmy.ca
      link
      fedilink
      English
      arrow-up
      2
      ·
      20 hours ago

      adding some obscure repositories with commands I don’t even understand.

      You may want to learn the commands and review the repos.

      this isn’t healthy:

      True, but not in a way that SnapPakImage is going to fix.

      • Successful_Try543@feddit.org
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        44 minutes ago

        this isn’t healthy:

        True, but not in a way that SnapPakImage is going to fix.

        What about that isn’t “healty”?
        You are basically downloading and saving the signing key of docker to the currently recommended place with appropriate permissions, and adding the docker deb-repository, explicitly stating that it should be signed by that particular key.
        If you don’t trust docker, don’t add their repo. By the same logic, the Flathub repo is an “obscure repository” too.