Open TheAssassin opened 1 year ago
Looking forward to it :) Please also make sure to sign this release with PGP.
Imho, we should embed the static runtime(s) inside the AppImage, so that they don't have to be downloaded separately. This will significantly simplify things for users who would like to run appimagetool on offline build processes (e.g., OBS), and will make usage much easier and more consistent with older versions.
The tool is usable offline, though, by downloading a runtime manually, which is sufficient, as this is an edge case. OBS won't mind the extra download. Bundling adds a lot of complexity by yet again introducing a dependency that would require manual updates.
We could drop the whole downloading logic and its (heavy) dependencies though.
Does the download process include cryptograhpically verifying the authenticity of everything that is downloaded, before attempting to use them?
Once everything works and we can build AppImages on the CI using Alpine Linux (see also #1), we should make a first release.