Snap 包和权限

Snap 包和权限

这要么是我的误解,要么我忽略了一些明显的东西,或者这只是一场咆哮。

为什么如果将软件包移动到 snap,我们现在就必须处理权限问题?例如:Chromium。我下载任何东西,它都会被放在 root 拥有的目录中。然后我必须打开终端并更改文件,然后将它们移动到我最初想要的目的地。我是否错过了这个问题的明显解决方案?

如果这是有意为之,因为根据设计,使用 snap 本质上会隔离应用程序,从而使用传统的用户/组,那么这对于 Linux 桌面可用性的总体目标来说就是倒退了一步。

我完全支持安全,我从事 IT 安全工作。但这种改变会破坏用户的功能,这是不可接受的。这真的让我很沮丧。

我使用的是 19.10,如果我理解正确的话,Chromium 现在将仅以 snap 形式发布,不再以 debs 形式发布。如果我错了,请告诉我。

答案1

尽管 Chromium 开发人员宣布他们只打算去 snap十八个月前,他们还没有到达那里。”在大多数情况下,Chromium 可直接在每个 Linux 发行版的官方存储库中找到。

您仍然可以安装 Chromium 浏览器而无需使用 snap with sudo apt update && sudo apt install chromium chromium-l10n,并且您仍然可以下载二进制文件自己编译它。

为什么选择 Snap?

“Snaps 及其使用工具 snapd 可在一系列 Linux 发行版(使用 systemd)上运行,从而允许与发行版无关的上游软件打包”,https://snapcraft.io/

由于 snap 是一个包含所有依赖项的压缩文件,对开发者和用户来说都更容易。由于开发者编写了简洁的东西,让运行 Linux 变得有价值,所以他们喜欢它。

答案2

https://discourse.ubuntu.com/t/call-for-testing-chromium-browser-deb-to-snap-transition/11179/22 引领我 https://snapcraft.io/docs/snap-confinement

lad ~$ snap info --verbose chromium
name:    chromium
summary: Chromium web browser, open-source version of Chrome
health:
  status:  unknown
  message: health has not been set
publisher: Canonical✓
contact:   https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bugs?field.tag=snap
license:   unset
description: |
  An open-source browser project that aims to build a safer, faster, and more stable way for all
  Internet users to experience the web.
commands:
  - chromium.chromedriver
  - chromium
notes:               
  private:           false
  confinement:       strict
  devmode:           false
  jailmode:          false
  trymode:           false
  enabled:           true
  broken:            false
  ignore-validation: false
base:         core18
snap-id:      XKEcBqPM06H1Z7zGOdG5fbICuf8NWK5R
tracking:     beta
refresh-date: 12 days ago, at 15:43 MST
channels:
  stable:    78.0.3904.97  2019-11-08 (937) 160MB -
  candidate: 78.0.3904.108 2019-11-19 (949) 160MB -
  beta:      79.0.3945.29  2019-11-08 (939) 155MB -
  edge:      80.0.3962.2   2019-11-11 (945) 155MB -
installed:   79.0.3945.29             (939) 155MB -
lad ~$ snap connections chromium
Interface                 Plug                               Slot                            Notes
audio-playback            chromium:audio-playback            :audio-playback                 -
audio-record              chromium:audio-record              -                               -
browser-support           chromium:browser-sandbox           :browser-support                -
camera                    chromium:camera                    :camera                         -
content[gtk-3-themes]     chromium:gtk-3-themes              gtk-common-themes:gtk-3-themes  -
content[icon-themes]      chromium:icon-themes               gtk-common-themes:icon-themes   -
content[sound-themes]     chromium:sound-themes              gtk-common-themes:sound-themes  -
cups-control              chromium:cups-control              :cups-control                   -
desktop                   chromium:desktop                   :desktop                        -
gsettings                 chromium:gsettings                 :gsettings                      -
home                      chromium:home                      :home                           -
mount-observe             chromium:mount-observe             -                               -
mpris                     -                                  chromium:mpris                  -
network                   chromium:network                   :network                        -
network-bind              chromium:network-bind              :network-bind                   -
network-manager           chromium:network-manager           -                               -
opengl                    chromium:opengl                    :opengl                         -
password-manager-service  chromium:password-manager-service  :password-manager-service       manual
personal-files            chromium:chromium-config           :personal-files                 -
pulseaudio                chromium:pulseaudio                :pulseaudio                     -
removable-media           chromium:removable-media           -                               -
screen-inhibit-control    chromium:screen-inhibit-control    :screen-inhibit-control         -
u2f-devices               chromium:u2f-devices               :u2f-devices                    -
unity7                    chromium:unity7                    :unity7                         -
upower-observe            chromium:upower-observe            :upower-observe                 -
x11                       chromium:x11                       :x11                            -
lad ~$ 

lad ~$ snap help refresh
<read this>
<in order to refresh, get an updated version or downgraded version>
lad ~$ sudo snap refresh --edge --classic chromium
<this did not work, you have to remove and re-add, losing settings and data>
lad ~$ sudo snap remove chromium
chromium removed
lad ~$ sudo snap install --edge --devmode chromium
lad ~$ snap info --verbose chromium
name:    chromium
summary: Chromium web browser, open-source version of Chrome
health:
  status:  unknown
  message: health has not been set
publisher: Canonical✓
contact:   https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bugs?field.tag=snap
license:   unset
description: |
  An open-source browser project that aims to build a safer, faster, and more stable way for all
  Internet users to experience the web.
commands:
  - chromium.chromedriver
  - chromium
notes:               
  private:           false
  confinement:       strict
  devmode:           true
  jailmode:          false
  trymode:           false
  enabled:           true
  broken:            false
  ignore-validation: false
base:         core18
snap-id:      XKEcBqPM06H1Z7zGOdG5fbICuf8NWK5R
tracking:     edge
refresh-date: today at 12:14 MST
channels:
  stable:    78.0.3904.97  2019-11-08 (937) 160MB -
  candidate: 78.0.3904.108 2019-11-19 (949) 160MB -
  beta:      79.0.3945.29  2019-11-08 (939) 155MB -
  edge:      80.0.3962.2   2019-11-11 (945) 155MB -
installed:   80.0.3962.2              (945) 155MB devmode
lad ~$ 
<breath fresh air again, no longer tied down>```

相关内容