Re: [gentoo-user] Re: Gentoo is supporting officially Snap packages?

[Dale]

James wrote:
> José Maldonado <josemald89 <at> gmail.com> writes:
>
>
>> The last days, ArsTechnica publish this new:
> http://arstechnica.com/information-technology/2016/06/goodbye-apt-and-yum-ubuntus-snap-apps-are-coming-to-distros-everywhere/
>> "Snaps now work natively on Arch, Debian, Fedora, Kubuntu, Lubuntu,
>> Ubuntu GNOME, Ubuntu Kylin, Ubuntu MATE, Ubuntu Unity, and Xubuntu,"
>> Canonical's announcement says. "They are currently being validated on
>> CentOS, Elementary, Gentoo, Mint, OpenSUSE, OpenWrt and RHEL, and are
>> easy to enable on other Linux distributions." (Ubuntu will continue to
>> support deb packages, but developers can choose to package applications
>> as snaps instead of or in addition to debs.)"
>>
>> Gentoo is supporting officially Snap packages? Why not Flatpak?
>>
>> Thank you very much for your responses! Bye! :)
>>
>
> One word SECURITY?  Trust but verify does come to mind.
>
> Containers are not exactly the most secure apparatus, imho.
> "Clair is an open source project for the static analysis of vulnerabilities
> in appc and docker containers." [1]. So, I want to hear about the robustness
> of the security on these 'self containerd packages.
> What exactly creates the codes necessary for the container ?
>
> Is their a version that works on gentoo-hardened?
>
> Suggestions for firewalling off a system for routine, deep examination
> and profiling of port activities, would be most welcome. Prima facia,
> I just have no trust in wonderful ideas from the *buntu crowd, ymmv.
>
> Also, it's a really good idea; now maybe *DALE* can get his security
> VM, in a snap (snapple?, snapit?, snapper?), that is gentoo-hardened
> blessed? Maybe the snhap designation for secured (Hardeded) snaps?
> Maybe if it's a hardened, entertainment (video snap) we call them schnapps?
>
> I've been bantering about for a couple of years now how clusters (hpc and
> containers) are going to change everything. Security is the main obstacle
> now.  You know, I'm ready to sip this Kool_aid and ponder the possibilities....
>
> Were are all the security gurus on at on snaps? Do snaps require systemd
> or are they PID-1 agnostic?
>
>
>
> James
>
>
>
>
>
> [1] https://github.com/coreos/clair


I saw this and was curious as well.  I'm needing to google a bit on just
what this is about.  Given the name, it should be interesting.  I
suspect I'll get a lot of hits about a energy drink thingy.  lol  Oh,
and this thread too.  ;-)

Dale

:-)  :-)