Alexander Larsson

We might not even need the whole upper half of the serial space. Could just assert that its not in say to top 128k serials, and then reserve those for...

The reason we don't have more alternatives is that there is no kernel support for doing such things unprivileged. Once that shows up we can do better.

@cgwalters I talked to lennart about the firewall stuff. It is currently root only, but once we have cgroup v2 only systems it may be possible to use it unprivileged.

There is a new system called passt which could potentially be used instead of slirp4ns: https://passt.top/passt/about/

Hmm. Each flatpak-dbus-proxy is tied to a flatpak sandbox instance, and should be slaved to its lifetime. As soon as all the processes in that sandbox dies, then its pid1...

So, this seems like its really a problem with sparkleshare, and the flatpak dbus proxy is just the middle man. There seem to be no related shutdown inhibitor registered though,...

One thing i worry about here is the messaging. It *looks* like allowed-device means that the usb device access is allowed, but really it just means it is discoverable. We...

I think this seems like a good basic idea. Some feedback: I'm not sure I like tracking the manual installed list in the repo config. Seems like it will see...

The .removed directory contains apps/runtimes that are removed (typically due to an update), but are still in use. Each time you update something all unused things in this directory will...

It the actual subdirectories are that old its unlikely that they are in use, a simple "flatpak update" *should* theoretically remove them. If not, something is going wrong and needs...