Conversation

Notices

1. Embed this notice
   Koz Ross (koz@chaos.social)'s status on Tuesday, 28-Jan-2025 11:22:58 JST Koz Ross

   Today's fun discovery: apparently, if you install the #FreeCAD Flatpak and try to use the OpenSCAD workbench, you _cannot_ give it a Flatpak-installed OpenSCAD. Literally impossible, even if you nuclear Flatseal permit it everything, because by default, it can neither see the export directory of Flatpak nor the Flatpak binary itself, which it needs to run said export.

   How the idea that someone might want a working OpenSCAD workbench in a Flatpak FreeCAD didn't occur to the packager, I dunno.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 28-Jan-2025 11:22:56 JST Rich Felker

     in reply to

     @koz This is bad on the part of the packager but also good on the part of the isolation system that applications can't see each other unless you explicitly let them.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Wednesday, 29-Jan-2025 09:27:58 JST Rich Felker

     in reply to

     • poleguy

     @poleguy @koz Sandboxed app installs are for potentially malicious stuff you can't get a vetted version of from your distro. Folks trying to abolish distro packaging and make you get everything that way are user-hostile.

   • Embed this notice
     poleguy (poleguy@mastodon.social)'s status on Wednesday, 29-Jan-2025 09:27:59 JST poleguy

     in reply to

     • Rich Felker

     @koz @dalias Yes. I try to avoid non native installs. I don't think they provide much value for the end user and they always add pain points.

   • Embed this notice
     Koz Ross (koz@chaos.social)'s status on Wednesday, 29-Jan-2025 09:28:00 JST Koz Ross

     in reply to

     • Rich Felker
     • poleguy

     @poleguy @dalias I guess I could, but this doesn't change the fact the Flatpak is broken in this particular instance. I'd also likely try distro FreeCAD first, since that _should_ be able to see everything.

   • Embed this notice
     poleguy (poleguy@mastodon.social)'s status on Wednesday, 29-Jan-2025 09:28:01 JST poleguy

     in reply to

     • Rich Felker

     @koz @dalias can't try ppa/deb AppImage or snap on your distribution?

   • Embed this notice
     Koz Ross (koz@chaos.social)'s status on Wednesday, 29-Jan-2025 09:28:02 JST Koz Ross

     in reply to

     • Rich Felker

     @dalias Oh, for extra joy - a globally-installed OpenSCAD won't work either, even with aforementioned nuclear permit-all Flatseal settings.

     Great, now I have to figure out how I'm going to do this simple-seeming task in _Blender_, because apparently competence, FreeCAD and Flatpak live in different realities.

   • Embed this notice
     Koz Ross (koz@chaos.social)'s status on Wednesday, 29-Jan-2025 09:28:03 JST Koz Ross

     in reply to

     • Rich Felker

     @dalias I have no objection to sandboxing of this kind by default - it is a sensible default and should stay that way. However, there is _no way whatsoever_ I can see to allow this to work. I've tried blanket-enabling _every_ filesystem permission in Flatseal, and even adding /var/lib _manually_, and _still_ it fails.