Simon McVittie

> It looks like it'd be pretty easy to mount both directories It would be easy, but would not solve the problem, because programs inside the sandbox are only configured...

Hmm, perhaps `/run/host/font-dirs.xml` obsoletes the hard-coded handling of `/run/host/user-fonts` in the runtimes? If it does, I'd be happy to review a merge request to add a mapping for `~/.fonts` in...

> Hm font-dirs.xml support in [flatpak](https://github.com/flatpak/flatpak/pull/2635) is pretty ancient but [runtime](https://gitlab.com/freedesktop-sdk/freedesktop-sdk/-/commit/1de9095053f704871886deb6c433635aafc98062) support was added much later. It's still available in all supported runtimes. OK, so to keep supporting older runtimes,...

"Steam Linux Runtime 3.0 (sniper)" is a compatibility tool which is used to run games that are compiled for its container environment. It isn't a game or app that can...

> smcv expands on this suggesting --build=any,all here No, I think `-b` would be the right option to use if going in that direction: it's functionally equivalent to `--build=any,all` but...

> Another unrelated thought: systemd uses a `safe_close()` wrapper instead of directly `close(3)` to assert `EBADF` was not returned, to spot file descriptor mixups, GLib does similarly, in `g_close()`. A...

https://gitlab.com/torkel104/libstrangle/-/merge_requests/22 and https://github.com/libsdl-org/SDL/pull/10776 are examples of a similar change in some other projects.

Thanks. Loading `libXrandr.so.2` as the preferred version seems correct. The fallback to loading `libXrandr.so.1` seems risky: it's only OK if you can verify that the subset of the ABI of...

> The text should be better than the version that we lost in [commit d1f48731ec76a3ae](https://github.com/containers/containertoolbx.org/commit/d1f48731ec76a3ae). It better reflects the current realities of the code. Some new requirements were added to...

> I've just started giving an app access to a path, and then made that path globally accessible, I want to remove the app's permissions so that it inherits the...