search

evilsocket / opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
GNU General Public License v3.0
10.74k stars 498 forks source link

[Feature Request] Flatpak #548

Open WineBottles opened 2 years ago

WineBottles commented 2 years ago

Please consider creating a flatpak and putting it up on flathub.org. It would be an easy way for more users to find and use OpenSnitch. With OpenSnitch being interactive as opposed to manual like working with iptables or ufw, the target market also seems less technical. Less technical people may appreciate a flatpak. Thank you.

jetflux commented 2 years ago

Flatpak is the future, technical or none technical user would benefit. Installing Opensnitch from Archlinux AUR repository is a nightmare these days. Please consider Flatpak.

6-AND-9 commented 2 years ago

+1!

SISheogorath commented 2 years ago

One correct me if I'm wrong, but given that it requires a service running as root or at least root-like permissions in order to modify the firewall rules, it won't be possible to package it as flatpak, since the flatpak itself can't do such a privilege escalation. Or to be more technically correct: Is designed to avoid such escalation and not meant for system daemons.

The UI could be installed via flatpak, but is quite useless without the service behind, so I'm not sure it's as useful, as the creator of this issue intends this flatpak to be.

bayazidbh commented 2 years ago

I think it might be possible, but it would probably involve a lot of rewrites. The reason being that I do see Haguichi, Gnome Boxes, and SyncThing Flatpak releases which taken all together would suggest that it might be possible to make opensnitch work on Flatpak, however those apps doesn't exactly demand as much privilege as opensnitch and it would probably involve a lot of workarounds (and default sandbox overrides) for it to work on Flatpak, which on its own would probably make it not very feasible.

curiousercreative commented 1 year ago

Just to say that this popular dependency issue (and others) would likely be best solved with a containerized app solution like flatpak.

phillipprado commented 1 year ago

Stopping by to add my +1 to this as well. For a plethora of reasons, I think this would be great option for users.

bayazidbh commented 1 year ago

Just informing, in case people are not aware yet: https://github.com/flathub/com.protonvpn.www

Someone somehow managed to make VPN inside Flatpak work, and if Lutris being able to install other flatpak and start them to use as Runner / Game through flatpak-spawn is any indication, you do have a lot more freedom with what flathub package are allowed to do.

So I think it may be possible now, but of course, in practice it may still be very difficult.