#19 [Packaging] Make this program available as flatpak package on FlatHub

[nokia808]

Hi. It is very useful to make this program available as flatpak package on FlatHub. This way you will make this program available for almost any Linux distros & users, because flatpak is universal generic Linux package with secure features by default & easy & convenient installation & automatic update mechanism.

Please note the following:

1. home page of FlatHub is:
   https://www.flathub.org/home
2. FlatHub repositories are at:
   https://github.com/flathub
3. when some one like to add package to FlatHub, she/he need to open PR at:
   https://github.com/flathub/flathub/pulls
4. FlatHub differ from snap by being allow any one to package not only developers of packages. So packages on FlatHub are of 2 types: those packaged by developer(s) of program, & those packaged by other peoples.
5. all packages on FlatHub are signed .....
6. even if person other than the original developer(s) maintain the package on FlatHub, FlatHub team try as much as possible to make developer(s) authorized to repositories at least to monitor & follow up the packaging ......
7. FlatHub allow both open & closed source packages. But regarding open source packages, the FlatHub team insisting on packager to make them deterministic (reproducible).

[Erik Nolf]

Hi,
Good idea. We currently opted for the independed AppImage alternative.
Cheers,
Erik

[nokia808]

@enlf
I'm very sorry for that, you close this issue !

1) AppImage format will cost you more efforts than flatpak, because you need to give indevidual built-in support for every distro you like your AppImage to run on - within same AppImage universal package that you will create. There is no such additional efforts with flatpak - see:
https://github.com/junrrein/pdfslicer/issues/103

2) AppImage need to be manually installed. Manuall instalation is not a convenent method for Linux & AppImage is only usable on Linux. It should not be used unless as last option when all other options fail or if the targeted application is pure portable package ...

3) AppImage is volnarable to man in middle attackes - again due to manuall download & installation.
To overcome this problem you need to sign your AppImage by OpenPGP key. To me I know how to use OpenPGP to verify package but there are many peoples not know this.
As alternative to OpenPGP, you should post SHA512 checksum hash. But it is not ideal for protection & - again - many users not know how to use it or simple not know that it is posted within yml file that posted by developer on the repository.

4) AppImage has no built-in integration with DE of Linux. It need the user to create launcher icon for it manully, a process I know how to do but for many users it is difficult ... Even if user know how to do this, it remain not convenent .....

5) Most AppImage has no built-in automatic update mechanism. This make user in need to re-download & install every new release - again a not convenent method ...
There is already a method to implememt built-in update mechanism for AppImage, but most AppImage that use to implement it are not working perfectly so that users need for manual download & re-installation from time to time on occusions ! The only exception for that is jitsi-meet-electron - see:
https://github.com/jitsi/jitsi-meet-electron
jitsi-meet-electron is the only AppImage that support automatic updates without problems at all. I tried so many AppImages & did not see any one like jitsi-meet-electron.

Kindly, please reconsider your choice.

Best & thank you.

[Erik Nolf]

Hi

Fair enough. Creating an AppImage was indeed a pain. The one file running everywhere seems a fallacy to say the least. We liked its ideas and principles though.

Ok. We'll see how a flatpak works out. And then I feel a little obliged to create a Snap as well ... ;-)

Cheers,
Erik

[nokia808]

Please do not tired your self with snap ! Do not think about it at all ! It is anti-Linux in aim ! It is the worest think of universal Linux packages (Flatpak, AppImage, Snap) !

Snap is designed AND CONTROLLED by Canonical which is a company it's aim is the GAIN not the benefit of community. GNU/Linux is aiming to serve community & if there is a gain (if any) should never be beyond the princilpe of community bebefet .... Cononical do the reverse .....

Moreover, snapcraft has hidden telemetry that collect data about users like Google & Microsoft! You can not stop it at all ! Moreover, if you install snap, it will install with it hidden programs without informing you about !

The big fibrication from Canonical is that it is a universal Linux package !! In fact Canonical test it really only on Ubentu !!

See the following from blog of Linux Mint. Yes, Linux Mint itself remove it !!

https://blog.linuxmint.com/?p=3766
https://blog.linuxmint.com/?p=3906

Read section about snap in each of above links carefully. You should not encorage an anti-Linux spy format like snap ....

Flatpak is secure DECENTRALIZED. It was created & still supported by a company RedHat. But RedHat respecting the principles & ETHICS of GNU/Linux ! It made it of DECENTRALIZED by nature. Even the central repository FlatHub (which no one obligated to host heir/his flatpak on it, you can already host it on heir/his repository like sourceforg, but for simplicity it was created) this central repository is under the control of community & not officially belong to RedHat even if it is supported by RedHat .....

[Erik Nolf]

Hi,
A flatpak single-file bundle is available at the project's website and is now the default download for Linux distributions. On the project download page is a simple README file with usage information.
Cheers,
Erik

[nokia808]

Hi. Thank you very much for your hard efforts !
But, dear, why your flatpak is only available on your sourceforge page only & not submitted to FlatHub !!
Post your flatpak on FlatHub will make almost all Linux user see it & know about it, while keep it only on your project page will not help to bring the attantion of peples to it ..... I'm, myself, know about your program by chance when I was searching for other project within sourceforge, when sourceforge gave me a side link to your project !
Kindly, consider adding your flatpak to FlatHub .....