-
Notifications
You must be signed in to change notification settings - Fork 26
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add libfuse #201
Add libfuse #201
Conversation
Started test build 72570 |
Build 72570 failed |
@A6GibKm The way this build errored with endless Do you know the reason/ a fix for this? Edit: The same issue is happening in #199 currently |
bot, build net.lutris.Lutris |
Queued test build for net.lutris.Lutris. |
Started test build 72638 |
Build 72638 failed |
bot, build net.lutris.Lutris |
Queued test build for net.lutris.Lutris. |
Started test build 73042 |
Build 73042 successful
|
I am sorry, I don't know whats the cause, but it is building now. Did it fix the issue? |
It does fix the original issue, meaning I can start Appimages inside of lutris. I opened another issue to track the the build issues: #202 |
net.lutris.Lutris.yml
Outdated
@@ -14,9 +14,11 @@ finish-args: | |||
- --share=network | |||
- --allow=multiarch | |||
- --allow=devel | |||
- --talk-name=org.freedesktop.Flatpak.* |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why it needs this line? Its for the wrapper? This is a somewhat dangerous hole in the sandbox.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
One alternative is to not add this hole and explicitly say how-to in the README.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why it needs this line? Its for the wrapper? This is a somewhat dangerous hole in the sandbox.
Appimages don't start without it and every other flatpak implementing fuse has this line.
Sadly I couldn't find out why exactly it needs this line.
One alternative is to not add this hole and explicitly say how-to in the README.
Yes, that might be a good idea.
I'm also not completely comfortable with how much it compromises the sandbox.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, lets do that, that particular hole allows for arbitrary code execution.
Closes flathub#200 Closes flathub#198 Closes flathub#12
Started test build 85068 |
Build 85068 successful
|
Closes #200
Closes #198
Closes #12
This is mostly copied from https://github.com/flathub/org.gnome.World.PikaBackup/blob/master/org.gnome.World.PikaBackup.yml
It does use flatpak-spawn to acces fusermount on the host, meaning it punches another hole into the sandbox.