Symfony Profiler

Security

Token

There is no security token.

Firewall

main Name

Security enabled

Stateless

Configuration

Key	Value
provider	security.user.provider.concrete.app_user_provider
context	main
entry_point	App\Security\KbinAuthenticator
user_checker	App\Security\UserChecker
access_denied_handler	(none)
access_denied_url	(none)
authenticators	[`"two_factor" "remember_me" "App\Security\KbinAuthenticator" "App\Security\FacebookAuthenticator" "App\Security\GoogleAuthenticator" "App\Security\GithubAuthenticator" "App\Security\KeycloakAuthenticator"`]

Listeners

Listener	Duration	Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723`-map: Symfony\Component\Security\Http\AccessMap {#722 …} -logger: Monolog\Logger {#783 …} -httpPort: 80 -httpsPort: 443`}	0.00 ms	(none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706-tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …} -sessionKey: "_security_main" -logger: Monolog\Logger {#783 …} -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …} -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …} -registered: false -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …} -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}}	0.77 ms	(none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584`-authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}`}	0.00 ms	(none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582`-twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …} -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …} -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}`}	0.04 ms	(none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579`-tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …} -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …} -map: Symfony\Component\Security\Http\AccessMap {#722 …}`}	0.00 ms	(none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786`-tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …} -options: [ "csrf_parameter" => "_csrf_token" "csrf_token_id" => "logout" "logout_path" => "app_logout" ] -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …} -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …} -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}`}	0.00 ms	(none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy


"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
"App\Security\Voter\EntryCommentVoter"
"App\Security\Voter\EntryVoter"
"App\Security\Voter\MagazineVoter"
"App\Security\Voter\MessageThreadVoter"
"App\Security\Voter\MessageVoter"
"App\Security\Voter\NotificationVoter"
"App\Security\Voter\OAuth2UserConsentVoter"
"App\Security\Voter\PostCommentVoter"
"App\Security\Voter\PostVoter"
"App\Security\Voter\UserVoter"

#	Voter class
1	"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2	"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3	"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4	"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5	"App\Security\Voter\EntryCommentVoter"
6	"App\Security\Voter\EntryVoter"
7	"App\Security\Voter\MagazineVoter"
8	"App\Security\Voter\MessageThreadVoter"
9	"App\Security\Voter\MessageVoter"
10	"App\Security\Voter\NotificationVoter"
11	"App\Security\Voter\OAuth2UserConsentVoter"
12	"App\Security\Voter\PostCommentVoter"
13	"App\Security\Voter\PostVoter"
14	"App\Security\Voter\UserVoter"

Access decision log


null
"App\Security\Voter\UserVoter"
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#276
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#270
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#272
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
  +slug: "Flatpacks-installing-within-Distrobox"
  +title: "Flatpacks - installing within Distrobox?"
  +url: null
  +body: """
    Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
    \n
    Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
    \n
    I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
    \n
    Is this a technique that anyone has had luck with? Worth pursuing?\n
    \n
    FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 36
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727353125 {#2410
    date: 2024-09-26 14:18:45.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1884 …}
  +votes: Doctrine\ORM\PersistentCollection {#1973 …}
  +reports: Doctrine\ORM\PersistentCollection {#1959 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 32001
  -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
  -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705871577
  +visibility: "visible             "
  +apId: "https://lemmy.ca/post/13700056"
  +editedAt: DateTimeImmutable @1727185733 {#1850
    date: 2024-09-24 15:48:53.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705785177 {#2420
    date: 2024-01-20 22:12:57.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#276
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#270
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#272
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
  +slug: "Flatpacks-installing-within-Distrobox"
  +title: "Flatpacks - installing within Distrobox?"
  +url: null
  +body: """
    Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
    \n
    Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
    \n
    I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
    \n
    Is this a technique that anyone has had luck with? Worth pursuing?\n
    \n
    FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 36
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727353125 {#2410
    date: 2024-09-26 14:18:45.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1884 …}
  +votes: Doctrine\ORM\PersistentCollection {#1973 …}
  +reports: Doctrine\ORM\PersistentCollection {#1959 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 32001
  -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
  -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705871577
  +visibility: "visible             "
  +apId: "https://lemmy.ca/post/13700056"
  +editedAt: DateTimeImmutable @1727185733 {#1850
    date: 2024-09-24 15:48:53.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705785177 {#2420
    date: 2024-01-20 22:12:57.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#276
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#270
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#272
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
  +slug: "Flatpacks-installing-within-Distrobox"
  +title: "Flatpacks - installing within Distrobox?"
  +url: null
  +body: """
    Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
    \n
    Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
    \n
    I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
    \n
    Is this a technique that anyone has had luck with? Worth pursuing?\n
    \n
    FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 36
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727353125 {#2410
    date: 2024-09-26 14:18:45.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1884 …}
  +votes: Doctrine\ORM\PersistentCollection {#1973 …}
  +reports: Doctrine\ORM\PersistentCollection {#1959 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 32001
  -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
  -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705871577
  +visibility: "visible             "
  +apId: "https://lemmy.ca/post/13700056"
  +editedAt: DateTimeImmutable @1727185733 {#1850
    date: 2024-09-24 15:48:53.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705785177 {#2420
    date: 2024-01-20 22:12:57.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4027
  +user: App\Entity\User {#3975 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
    \n
    However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
    \n
    Then enter the container and install the flatpak app as usual.\n
    \n
    I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1727353125 {#4037
    date: 2024-09-26 14:18:45.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4025 …}
  +nested: Doctrine\ORM\PersistentCollection {#4023 …}
  +votes: Doctrine\ORM\PersistentCollection {#4021 …}
  +reports: Doctrine\ORM\PersistentCollection {#4019 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
  -id: 326571
  -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.nz/comment/5247930"
  +editedAt: DateTimeImmutable @1727187124 {#3973
    date: 2024-09-24 16:12:04.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705786482 {#4036
    date: 2024-01-20 22:34:42.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4027
  +user: App\Entity\User {#3975 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
    \n
    However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
    \n
    Then enter the container and install the flatpak app as usual.\n
    \n
    I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1727353125 {#4037
    date: 2024-09-26 14:18:45.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4025 …}
  +nested: Doctrine\ORM\PersistentCollection {#4023 …}
  +votes: Doctrine\ORM\PersistentCollection {#4021 …}
  +reports: Doctrine\ORM\PersistentCollection {#4019 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
  -id: 326571
  -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.nz/comment/5247930"
  +editedAt: DateTimeImmutable @1727187124 {#3973
    date: 2024-09-24 16:12:04.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705786482 {#4036
    date: 2024-01-20 22:34:42.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4027
  +user: App\Entity\User {#3975 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
    \n
    However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
    \n
    Then enter the container and install the flatpak app as usual.\n
    \n
    I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1727353125 {#4037
    date: 2024-09-26 14:18:45.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
    "@indigomirage@lemmy.ca"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4025 …}
  +nested: Doctrine\ORM\PersistentCollection {#4023 …}
  +votes: Doctrine\ORM\PersistentCollection {#4021 …}
  +reports: Doctrine\ORM\PersistentCollection {#4019 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
  -id: 326571
  -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.nz/comment/5247930"
  +editedAt: DateTimeImmutable @1727187124 {#3973
    date: 2024-09-24 16:12:04.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705786482 {#4036
    date: 2024-01-20 22:34:42.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4045
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4027
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: """
      Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
      \n
      However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
      \n
      Then enter the container and install the flatpak app as usual.\n
      \n
      I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 10
    +score: 0
    +lastActive: DateTime @1727353125 {#4037
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4025 …}
    +nested: Doctrine\ORM\PersistentCollection {#4023 …}
    +votes: Doctrine\ORM\PersistentCollection {#4021 …}
    +reports: Doctrine\ORM\PersistentCollection {#4019 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
    -id: 326571
    -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5247930"
    +editedAt: DateTimeImmutable @1727187124 {#3973
      date: 2024-09-24 16:12:04.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705786482 {#4036
      date: 2024-01-20 22:34:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Thanks - this gives me a few leads.\n
    \n
    I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
    \n
    A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
    \n
    If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705787159 {#4050
    date: 2024-01-20 22:45:59.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4053 …}
  +nested: Doctrine\ORM\PersistentCollection {#4059 …}
  +votes: Doctrine\ORM\PersistentCollection {#4061 …}
  +reports: Doctrine\ORM\PersistentCollection {#4044 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
  -id: 326594
  -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6549557"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705787159 {#4047
    date: 2024-01-20 22:45:59.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4045
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4027
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: """
      Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
      \n
      However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
      \n
      Then enter the container and install the flatpak app as usual.\n
      \n
      I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 10
    +score: 0
    +lastActive: DateTime @1727353125 {#4037
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4025 …}
    +nested: Doctrine\ORM\PersistentCollection {#4023 …}
    +votes: Doctrine\ORM\PersistentCollection {#4021 …}
    +reports: Doctrine\ORM\PersistentCollection {#4019 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
    -id: 326571
    -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5247930"
    +editedAt: DateTimeImmutable @1727187124 {#3973
      date: 2024-09-24 16:12:04.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705786482 {#4036
      date: 2024-01-20 22:34:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Thanks - this gives me a few leads.\n
    \n
    I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
    \n
    A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
    \n
    If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705787159 {#4050
    date: 2024-01-20 22:45:59.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4053 …}
  +nested: Doctrine\ORM\PersistentCollection {#4059 …}
  +votes: Doctrine\ORM\PersistentCollection {#4061 …}
  +reports: Doctrine\ORM\PersistentCollection {#4044 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
  -id: 326594
  -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6549557"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705787159 {#4047
    date: 2024-01-20 22:45:59.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4045
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4027
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: """
      Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
      \n
      However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
      \n
      Then enter the container and install the flatpak app as usual.\n
      \n
      I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 10
    +score: 0
    +lastActive: DateTime @1727353125 {#4037
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
      "@indigomirage@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4025 …}
    +nested: Doctrine\ORM\PersistentCollection {#4023 …}
    +votes: Doctrine\ORM\PersistentCollection {#4021 …}
    +reports: Doctrine\ORM\PersistentCollection {#4019 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
    -id: 326571
    -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5247930"
    +editedAt: DateTimeImmutable @1727187124 {#3973
      date: 2024-09-24 16:12:04.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705786482 {#4036
      date: 2024-01-20 22:34:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Thanks - this gives me a few leads.\n
    \n
    I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
    \n
    A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
    \n
    If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705787159 {#4050
    date: 2024-01-20 22:45:59.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4053 …}
  +nested: Doctrine\ORM\PersistentCollection {#4059 …}
  +votes: Doctrine\ORM\PersistentCollection {#4061 …}
  +reports: Doctrine\ORM\PersistentCollection {#4044 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
  -id: 326594
  -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6549557"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705787159 {#4047
    date: 2024-01-20 22:45:59.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4103
  +user: App\Entity\User {#3975 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4045
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4027
      +user: App\Entity\User {#3975 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: null
      +root: null
      +body: """
        Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
        \n
        However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
        \n
        Then enter the container and install the flatpak app as usual.\n
        \n
        I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 10
      +score: 0
      +lastActive: DateTime @1727353125 {#4037
        date: 2024-09-26 14:18:45.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4025 …}
      +nested: Doctrine\ORM\PersistentCollection {#4023 …}
      +votes: Doctrine\ORM\PersistentCollection {#4021 …}
      +reports: Doctrine\ORM\PersistentCollection {#4019 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
      -id: 326571
      -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.nz/comment/5247930"
      +editedAt: DateTimeImmutable @1727187124 {#3973
        date: 2024-09-24 16:12:04.0 +02:00
      }
      +createdAt: DateTimeImmutable @1705786482 {#4036
        date: 2024-01-20 22:34:42.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Thanks - this gives me a few leads.\n
      \n
      I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
      \n
      A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
      \n
      If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705787159 {#4050
      date: 2024-01-20 22:45:59.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4053 …}
    +nested: Doctrine\ORM\PersistentCollection {#4059 …}
    +votes: Doctrine\ORM\PersistentCollection {#4061 …}
    +reports: Doctrine\ORM\PersistentCollection {#4044 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
    -id: 326594
    -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ca/comment/6549557"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705787159 {#4047
      date: 2024-01-20 22:45:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
    \n
    The full isolation flags are:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
    </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
    </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
    </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
    </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
    </span>\n
    ```
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705789111 {#4106
    date: 2024-01-20 23:18:31.0 +01:00
  }
  +ip: null
  +tags: [
    "323232"
  ]
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4101 …}
  +nested: Doctrine\ORM\PersistentCollection {#4099 …}
  +votes: Doctrine\ORM\PersistentCollection {#4098 …}
  +reports: Doctrine\ORM\PersistentCollection {#4113 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
  -id: 326686
  -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.nz/comment/5249067"
  +editedAt: DateTimeImmutable @1727196809 {#4109
    date: 2024-09-24 18:53:29.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705789111 {#4111
    date: 2024-01-20 23:18:31.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4103
  +user: App\Entity\User {#3975 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4045
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4027
      +user: App\Entity\User {#3975 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: null
      +root: null
      +body: """
        Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
        \n
        However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
        \n
        Then enter the container and install the flatpak app as usual.\n
        \n
        I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 10
      +score: 0
      +lastActive: DateTime @1727353125 {#4037
        date: 2024-09-26 14:18:45.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4025 …}
      +nested: Doctrine\ORM\PersistentCollection {#4023 …}
      +votes: Doctrine\ORM\PersistentCollection {#4021 …}
      +reports: Doctrine\ORM\PersistentCollection {#4019 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
      -id: 326571
      -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.nz/comment/5247930"
      +editedAt: DateTimeImmutable @1727187124 {#3973
        date: 2024-09-24 16:12:04.0 +02:00
      }
      +createdAt: DateTimeImmutable @1705786482 {#4036
        date: 2024-01-20 22:34:42.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Thanks - this gives me a few leads.\n
      \n
      I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
      \n
      A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
      \n
      If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705787159 {#4050
      date: 2024-01-20 22:45:59.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4053 …}
    +nested: Doctrine\ORM\PersistentCollection {#4059 …}
    +votes: Doctrine\ORM\PersistentCollection {#4061 …}
    +reports: Doctrine\ORM\PersistentCollection {#4044 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
    -id: 326594
    -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ca/comment/6549557"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705787159 {#4047
      date: 2024-01-20 22:45:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
    \n
    The full isolation flags are:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
    </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
    </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
    </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
    </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
    </span>\n
    ```
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705789111 {#4106
    date: 2024-01-20 23:18:31.0 +01:00
  }
  +ip: null
  +tags: [
    "323232"
  ]
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4101 …}
  +nested: Doctrine\ORM\PersistentCollection {#4099 …}
  +votes: Doctrine\ORM\PersistentCollection {#4098 …}
  +reports: Doctrine\ORM\PersistentCollection {#4113 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
  -id: 326686
  -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.nz/comment/5249067"
  +editedAt: DateTimeImmutable @1727196809 {#4109
    date: 2024-09-24 18:53:29.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705789111 {#4111
    date: 2024-01-20 23:18:31.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4103
  +user: App\Entity\User {#3975 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4045
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4027
      +user: App\Entity\User {#3975 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: null
      +root: null
      +body: """
        Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
        \n
        However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
        \n
        Then enter the container and install the flatpak app as usual.\n
        \n
        I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 10
      +score: 0
      +lastActive: DateTime @1727353125 {#4037
        date: 2024-09-26 14:18:45.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
        "@indigomirage@lemmy.ca"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4025 …}
      +nested: Doctrine\ORM\PersistentCollection {#4023 …}
      +votes: Doctrine\ORM\PersistentCollection {#4021 …}
      +reports: Doctrine\ORM\PersistentCollection {#4019 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
      -id: 326571
      -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.nz/comment/5247930"
      +editedAt: DateTimeImmutable @1727187124 {#3973
        date: 2024-09-24 16:12:04.0 +02:00
      }
      +createdAt: DateTimeImmutable @1705786482 {#4036
        date: 2024-01-20 22:34:42.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Thanks - this gives me a few leads.\n
      \n
      I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
      \n
      A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
      \n
      If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705787159 {#4050
      date: 2024-01-20 22:45:59.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4053 …}
    +nested: Doctrine\ORM\PersistentCollection {#4059 …}
    +votes: Doctrine\ORM\PersistentCollection {#4061 …}
    +reports: Doctrine\ORM\PersistentCollection {#4044 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
    -id: 326594
    -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ca/comment/6549557"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705787159 {#4047
      date: 2024-01-20 22:45:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
    \n
    The full isolation flags are:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
    </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
    </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
    </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
    </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
    </span>\n
    ```
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705789111 {#4106
    date: 2024-01-20 23:18:31.0 +01:00
  }
  +ip: null
  +tags: [
    "323232"
  ]
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4101 …}
  +nested: Doctrine\ORM\PersistentCollection {#4099 …}
  +votes: Doctrine\ORM\PersistentCollection {#4098 …}
  +reports: Doctrine\ORM\PersistentCollection {#4113 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
  -id: 326686
  -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.nz/comment/5249067"
  +editedAt: DateTimeImmutable @1727196809 {#4109
    date: 2024-09-24 18:53:29.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705789111 {#4111
    date: 2024-01-20 23:18:31.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4134
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4103
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4045
      +user: Proxies\__CG__\App\Entity\User {#1970 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4027
        +user: App\Entity\User {#3975 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: """
          Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
          \n
          However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
          \n
          Then enter the container and install the flatpak app as usual.\n
          \n
          I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1727353125 {#4037
          date: 2024-09-26 14:18:45.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4025 …}
        +nested: Doctrine\ORM\PersistentCollection {#4023 …}
        +votes: Doctrine\ORM\PersistentCollection {#4021 …}
        +reports: Doctrine\ORM\PersistentCollection {#4019 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
        +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
        -id: 326571
        -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.nz/comment/5247930"
        +editedAt: DateTimeImmutable @1727187124 {#3973
          date: 2024-09-24 16:12:04.0 +02:00
        }
        +createdAt: DateTimeImmutable @1705786482 {#4036
          date: 2024-01-20 22:34:42.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4027}
      +body: """
        Thanks - this gives me a few leads.\n
        \n
        I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
        \n
        A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
        \n
        If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1705787159 {#4050
        date: 2024-01-20 22:45:59.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@d3Xt3r@lemmy.nz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4053 …}
      +nested: Doctrine\ORM\PersistentCollection {#4059 …}
      +votes: Doctrine\ORM\PersistentCollection {#4061 …}
      +reports: Doctrine\ORM\PersistentCollection {#4044 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
      -id: 326594
      -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ca/comment/6549557"
      +editedAt: null
      +createdAt: DateTimeImmutable @1705787159 {#4047
        date: 2024-01-20 22:45:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
      \n
      The full isolation flags are:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
      </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
      </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
      </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
      </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
      </span>\n
      ```
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705789111 {#4106
      date: 2024-01-20 23:18:31.0 +01:00
    }
    +ip: null
    +tags: [
      "323232"
    ]
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4101 …}
    +nested: Doctrine\ORM\PersistentCollection {#4099 …}
    +votes: Doctrine\ORM\PersistentCollection {#4098 …}
    +reports: Doctrine\ORM\PersistentCollection {#4113 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
    -id: 326686
    -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5249067"
    +editedAt: DateTimeImmutable @1727196809 {#4109
      date: 2024-09-24 18:53:29.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705789111 {#4111
      date: 2024-01-20 23:18:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: "Unfortunately no luck here. Same issue even when setting --unshare-all flag. I suspect I need to try a different approach."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705848976 {#4129
    date: 2024-01-21 15:56:16.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4126 …}
  +nested: Doctrine\ORM\PersistentCollection {#4123 …}
  +votes: Doctrine\ORM\PersistentCollection {#4121 …}
  +reports: Doctrine\ORM\PersistentCollection {#4135 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4137 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4139 …}
  -id: 328326
  -bodyTs: "'approach':22 'differ':21 'even':7 'flag':13 'issu':6 'luck':3 'need':17 'set':9 'suspect':15 'tri':19 'unfortun':1 'unshar':11 'unshare-al':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6578489"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705848976 {#4132
    date: 2024-01-21 15:56:16.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4134
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4103
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4045
      +user: Proxies\__CG__\App\Entity\User {#1970 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4027
        +user: App\Entity\User {#3975 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: """
          Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
          \n
          However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
          \n
          Then enter the container and install the flatpak app as usual.\n
          \n
          I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1727353125 {#4037
          date: 2024-09-26 14:18:45.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4025 …}
        +nested: Doctrine\ORM\PersistentCollection {#4023 …}
        +votes: Doctrine\ORM\PersistentCollection {#4021 …}
        +reports: Doctrine\ORM\PersistentCollection {#4019 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
        +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
        -id: 326571
        -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.nz/comment/5247930"
        +editedAt: DateTimeImmutable @1727187124 {#3973
          date: 2024-09-24 16:12:04.0 +02:00
        }
        +createdAt: DateTimeImmutable @1705786482 {#4036
          date: 2024-01-20 22:34:42.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4027}
      +body: """
        Thanks - this gives me a few leads.\n
        \n
        I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
        \n
        A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
        \n
        If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1705787159 {#4050
        date: 2024-01-20 22:45:59.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@d3Xt3r@lemmy.nz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4053 …}
      +nested: Doctrine\ORM\PersistentCollection {#4059 …}
      +votes: Doctrine\ORM\PersistentCollection {#4061 …}
      +reports: Doctrine\ORM\PersistentCollection {#4044 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
      -id: 326594
      -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ca/comment/6549557"
      +editedAt: null
      +createdAt: DateTimeImmutable @1705787159 {#4047
        date: 2024-01-20 22:45:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
      \n
      The full isolation flags are:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
      </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
      </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
      </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
      </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
      </span>\n
      ```
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705789111 {#4106
      date: 2024-01-20 23:18:31.0 +01:00
    }
    +ip: null
    +tags: [
      "323232"
    ]
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4101 …}
    +nested: Doctrine\ORM\PersistentCollection {#4099 …}
    +votes: Doctrine\ORM\PersistentCollection {#4098 …}
    +reports: Doctrine\ORM\PersistentCollection {#4113 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
    -id: 326686
    -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5249067"
    +editedAt: DateTimeImmutable @1727196809 {#4109
      date: 2024-09-24 18:53:29.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705789111 {#4111
      date: 2024-01-20 23:18:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: "Unfortunately no luck here. Same issue even when setting --unshare-all flag. I suspect I need to try a different approach."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705848976 {#4129
    date: 2024-01-21 15:56:16.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4126 …}
  +nested: Doctrine\ORM\PersistentCollection {#4123 …}
  +votes: Doctrine\ORM\PersistentCollection {#4121 …}
  +reports: Doctrine\ORM\PersistentCollection {#4135 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4137 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4139 …}
  -id: 328326
  -bodyTs: "'approach':22 'differ':21 'even':7 'flag':13 'issu':6 'luck':3 'need':17 'set':9 'suspect':15 'tri':19 'unfortun':1 'unshar':11 'unshare-al':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6578489"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705848976 {#4132
    date: 2024-01-21 15:56:16.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4134
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4103
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4045
      +user: Proxies\__CG__\App\Entity\User {#1970 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4027
        +user: App\Entity\User {#3975 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: """
          Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
          \n
          However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
          \n
          Then enter the container and install the flatpak app as usual.\n
          \n
          I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1727353125 {#4037
          date: 2024-09-26 14:18:45.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4025 …}
        +nested: Doctrine\ORM\PersistentCollection {#4023 …}
        +votes: Doctrine\ORM\PersistentCollection {#4021 …}
        +reports: Doctrine\ORM\PersistentCollection {#4019 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
        +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
        -id: 326571
        -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.nz/comment/5247930"
        +editedAt: DateTimeImmutable @1727187124 {#3973
          date: 2024-09-24 16:12:04.0 +02:00
        }
        +createdAt: DateTimeImmutable @1705786482 {#4036
          date: 2024-01-20 22:34:42.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4027}
      +body: """
        Thanks - this gives me a few leads.\n
        \n
        I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
        \n
        A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
        \n
        If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1705787159 {#4050
        date: 2024-01-20 22:45:59.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@d3Xt3r@lemmy.nz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4053 …}
      +nested: Doctrine\ORM\PersistentCollection {#4059 …}
      +votes: Doctrine\ORM\PersistentCollection {#4061 …}
      +reports: Doctrine\ORM\PersistentCollection {#4044 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
      -id: 326594
      -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ca/comment/6549557"
      +editedAt: null
      +createdAt: DateTimeImmutable @1705787159 {#4047
        date: 2024-01-20 22:45:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
      \n
      The full isolation flags are:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
      </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
      </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
      </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
      </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
      </span>\n
      ```
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705789111 {#4106
      date: 2024-01-20 23:18:31.0 +01:00
    }
    +ip: null
    +tags: [
      "323232"
    ]
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4101 …}
    +nested: Doctrine\ORM\PersistentCollection {#4099 …}
    +votes: Doctrine\ORM\PersistentCollection {#4098 …}
    +reports: Doctrine\ORM\PersistentCollection {#4113 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
    -id: 326686
    -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5249067"
    +editedAt: DateTimeImmutable @1727196809 {#4109
      date: 2024-09-24 18:53:29.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705789111 {#4111
      date: 2024-01-20 23:18:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: "Unfortunately no luck here. Same issue even when setting --unshare-all flag. I suspect I need to try a different approach."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705848976 {#4129
    date: 2024-01-21 15:56:16.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4126 …}
  +nested: Doctrine\ORM\PersistentCollection {#4123 …}
  +votes: Doctrine\ORM\PersistentCollection {#4121 …}
  +reports: Doctrine\ORM\PersistentCollection {#4135 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4137 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4139 …}
  -id: 328326
  -bodyTs: "'approach':22 'differ':21 'even':7 'flag':13 'issu':6 'luck':3 'need':17 'set':9 'suspect':15 'tri':19 'unfortun':1 'unshar':11 'unshare-al':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6578489"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705848976 {#4132
    date: 2024-01-21 15:56:16.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4143
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4103
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4045
      +user: Proxies\__CG__\App\Entity\User {#1970 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4027
        +user: App\Entity\User {#3975 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: """
          Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
          \n
          However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
          \n
          Then enter the container and install the flatpak app as usual.\n
          \n
          I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1727353125 {#4037
          date: 2024-09-26 14:18:45.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4025 …}
        +nested: Doctrine\ORM\PersistentCollection {#4023 …}
        +votes: Doctrine\ORM\PersistentCollection {#4021 …}
        +reports: Doctrine\ORM\PersistentCollection {#4019 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
        +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
        -id: 326571
        -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.nz/comment/5247930"
        +editedAt: DateTimeImmutable @1727187124 {#3973
          date: 2024-09-24 16:12:04.0 +02:00
        }
        +createdAt: DateTimeImmutable @1705786482 {#4036
          date: 2024-01-20 22:34:42.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4027}
      +body: """
        Thanks - this gives me a few leads.\n
        \n
        I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
        \n
        A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
        \n
        If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1705787159 {#4050
        date: 2024-01-20 22:45:59.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@d3Xt3r@lemmy.nz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4053 …}
      +nested: Doctrine\ORM\PersistentCollection {#4059 …}
      +votes: Doctrine\ORM\PersistentCollection {#4061 …}
      +reports: Doctrine\ORM\PersistentCollection {#4044 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
      -id: 326594
      -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ca/comment/6549557"
      +editedAt: null
      +createdAt: DateTimeImmutable @1705787159 {#4047
        date: 2024-01-20 22:45:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
      \n
      The full isolation flags are:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
      </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
      </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
      </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
      </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
      </span>\n
      ```
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705789111 {#4106
      date: 2024-01-20 23:18:31.0 +01:00
    }
    +ip: null
    +tags: [
      "323232"
    ]
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4101 …}
    +nested: Doctrine\ORM\PersistentCollection {#4099 …}
    +votes: Doctrine\ORM\PersistentCollection {#4098 …}
    +reports: Doctrine\ORM\PersistentCollection {#4113 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
    -id: 326686
    -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5249067"
    +editedAt: DateTimeImmutable @1727196809 {#4109
      date: 2024-09-24 18:53:29.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705789111 {#4111
      date: 2024-01-20 23:18:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Thank you! I just read that and assumed audio wouldn’t. I don’t have warm fuzzies about this.\n
    \n
    That said, I’ll give it a go.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705789534 {#4141
    date: 2024-01-20 23:25:34.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4144 …}
  +nested: Doctrine\ORM\PersistentCollection {#4146 …}
  +votes: Doctrine\ORM\PersistentCollection {#4148 …}
  +reports: Doctrine\ORM\PersistentCollection {#4150 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4152 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4154 …}
  -id: 326714
  -bodyTs: "'assum':8 'audio':9 'fuzzi':17 'give':24 'go':27 'll':23 'read':5 'said':21 'thank':1 'warm':16 'wouldn':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6550673"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705789534 {#4142
    date: 2024-01-20 23:25:34.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4143
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4103
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4045
      +user: Proxies\__CG__\App\Entity\User {#1970 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4027
        +user: App\Entity\User {#3975 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: """
          Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
          \n
          However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
          \n
          Then enter the container and install the flatpak app as usual.\n
          \n
          I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1727353125 {#4037
          date: 2024-09-26 14:18:45.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4025 …}
        +nested: Doctrine\ORM\PersistentCollection {#4023 …}
        +votes: Doctrine\ORM\PersistentCollection {#4021 …}
        +reports: Doctrine\ORM\PersistentCollection {#4019 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
        +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
        -id: 326571
        -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.nz/comment/5247930"
        +editedAt: DateTimeImmutable @1727187124 {#3973
          date: 2024-09-24 16:12:04.0 +02:00
        }
        +createdAt: DateTimeImmutable @1705786482 {#4036
          date: 2024-01-20 22:34:42.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4027}
      +body: """
        Thanks - this gives me a few leads.\n
        \n
        I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
        \n
        A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
        \n
        If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1705787159 {#4050
        date: 2024-01-20 22:45:59.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@d3Xt3r@lemmy.nz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4053 …}
      +nested: Doctrine\ORM\PersistentCollection {#4059 …}
      +votes: Doctrine\ORM\PersistentCollection {#4061 …}
      +reports: Doctrine\ORM\PersistentCollection {#4044 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
      -id: 326594
      -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ca/comment/6549557"
      +editedAt: null
      +createdAt: DateTimeImmutable @1705787159 {#4047
        date: 2024-01-20 22:45:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
      \n
      The full isolation flags are:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
      </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
      </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
      </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
      </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
      </span>\n
      ```
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705789111 {#4106
      date: 2024-01-20 23:18:31.0 +01:00
    }
    +ip: null
    +tags: [
      "323232"
    ]
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4101 …}
    +nested: Doctrine\ORM\PersistentCollection {#4099 …}
    +votes: Doctrine\ORM\PersistentCollection {#4098 …}
    +reports: Doctrine\ORM\PersistentCollection {#4113 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
    -id: 326686
    -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5249067"
    +editedAt: DateTimeImmutable @1727196809 {#4109
      date: 2024-09-24 18:53:29.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705789111 {#4111
      date: 2024-01-20 23:18:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Thank you! I just read that and assumed audio wouldn’t. I don’t have warm fuzzies about this.\n
    \n
    That said, I’ll give it a go.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705789534 {#4141
    date: 2024-01-20 23:25:34.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4144 …}
  +nested: Doctrine\ORM\PersistentCollection {#4146 …}
  +votes: Doctrine\ORM\PersistentCollection {#4148 …}
  +reports: Doctrine\ORM\PersistentCollection {#4150 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4152 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4154 …}
  -id: 326714
  -bodyTs: "'assum':8 'audio':9 'fuzzi':17 'give':24 'go':27 'll':23 'read':5 'said':21 'thank':1 'warm':16 'wouldn':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6550673"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705789534 {#4142
    date: 2024-01-20 23:25:34.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#4143
  +user: Proxies\__CG__\App\Entity\User {#1970 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1970 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1915 …}
    +slug: "Flatpacks-installing-within-Distrobox"
    +title: "Flatpacks - installing within Distrobox?"
    +url: null
    +body: """
      Hi there - I’m trying to make use of flatpaks, but keeping them isolated from my host (as I need to experiment with a bunch of settings and I don’t want to bork my host environment. Again.)\n
      \n
      Has anyone had actual success making this work? I’ve only been able to get anything to install by sudo-ing, but even then, I cannot get things to run. It’ll fail with file not found (but which file? verbose mode doesn’t help) or fail to connect to the system bus.\n
      \n
      I’ve seen some posts about unmounting /var/lib/flatpak on initialization but I’ve had no luck there. (I’m on Fedora 39, which, to be honest, I’m rather enjoying.)\n
      \n
      Is this a technique that anyone has had luck with? Worth pursuing?\n
      \n
      FWIW, my big goal is to run bottles and I’ve had far more luck with bottles (which strongly recommends flatpak) than with winehq.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 5
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727353125 {#2410
      date: 2024-09-26 14:18:45.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1884 …}
    +votes: Doctrine\ORM\PersistentCollection {#1973 …}
    +reports: Doctrine\ORM\PersistentCollection {#1959 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 32001
    -titleTs: "'distrobox':4 'flatpack':1 'instal':2 'within':3"
    -bodyTs: "'/var/lib/flatpak':100 '39':114 'abl':51 'actual':42 'anyon':40,128 'anyth':54 'big':137 'bork':34 'bottl':142,151 'bunch':25 'bus':92 'cannot':65 'connect':88 'doesn':82 'enjoy':122 'environ':37 'even':62 'experi':22 'fail':72,86 'far':147 'fedora':113 'file':74,79 'flatpak':10,155 'found':76 'fwiw':135 'get':53,66 'goal':138 'help':84 'hi':1 'honest':118 'host':17,36 'ing':60 'initi':102 'instal':56 'isol':14 'keep':12 'll':71 'luck':108,131,149 'm':4,111,120 'make':7,44 'mode':81 'need':20 'post':97 'pursu':134 'rather':121 'recommend':154 'run':69,141 'seen':95 'set':27 'strong':153 'success':43 'sudo':59 'sudo-':58 'system':91 'techniqu':126 'thing':67 'tri':5 'unmount':99 'use':8 've':48,94,105,145 'verbos':80 'want':32 'winehq':158 'work':46 'worth':133"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705871577
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/13700056"
    +editedAt: DateTimeImmutable @1727185733 {#1850
      date: 2024-09-24 15:48:53.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705785177 {#2420
      date: 2024-01-20 22:12:57.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4103
    +user: App\Entity\User {#3975 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4045
      +user: Proxies\__CG__\App\Entity\User {#1970 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4027
        +user: App\Entity\User {#3975 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: """
          Distrobox, by default, doesn’t provide much isolation/sandboxing - it’s main aim is desktop integration and filesystem transparency. So if you’re trying to use it for isolation, it’s a bad idea.\n
          \n
          However, you can create a new container which will isolate your filesystem and prevent such conflicts, using the `–unshare-devsys` flag. (if you want FULL isolation though, use the `–unshare-all` flag).\n
          \n
          Then enter the container and install the flatpak app as usual.\n
          \n
          I just tested this on Fedora uBlue and an Arch container and it works fine, didn’t have to unmount anything.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 10
        +score: 0
        +lastActive: DateTime @1727353125 {#4037
          date: 2024-09-26 14:18:45.0 +02:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
          "@indigomirage@lemmy.ca"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4025 …}
        +nested: Doctrine\ORM\PersistentCollection {#4023 …}
        +votes: Doctrine\ORM\PersistentCollection {#4021 …}
        +reports: Doctrine\ORM\PersistentCollection {#4019 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3987 …}
        +notifications: Doctrine\ORM\PersistentCollection {#3991 …}
        -id: 326571
        -bodyTs: "'aim':12 'anyth':99 'app':76 'arch':88 'bad':32 'conflict':49 'contain':40,71,89 'creat':37 'default':3 'desktop':14 'devsi':54 'didn':94 'distrobox':1 'doesn':4 'enter':69 'fedora':84 'filesystem':17,45 'fine':93 'flag':55,67 'flatpak':75 'full':59 'howev':34 'idea':33 'instal':73 'integr':15 'isol':28,43,60 'isolation/sandboxing':8 'main':11 'much':7 'new':39 'prevent':47 'provid':6 're':22 'test':81 'though':61 'transpar':18 'tri':23 'ublu':85 'unmount':98 'unshar':53,65 'unshare-al':64 'unshare-devsi':52 'use':25,50,62 'usual':78 'want':58 'work':92"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.nz/comment/5247930"
        +editedAt: DateTimeImmutable @1727187124 {#3973
          date: 2024-09-24 16:12:04.0 +02:00
        }
        +createdAt: DateTimeImmutable @1705786482 {#4036
          date: 2024-01-20 22:34:42.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4027}
      +body: """
        Thanks - this gives me a few leads.\n
        \n
        I know that I’m not getting a full sandbox - that’s ok. Ultimately I’m trying to get bottles running in the hopes of getting a semi-contained environment for me to test out yabridge and getting reaper to load the vsts without crashing. (Reaper is the easy part, the plugins not so much…)\n
        \n
        A modicum of isolation here (even if not complete) will help me figure things out. Obviously, if I need different kernel/flags the host will get it too.\n
        \n
        If I unshare-devsys, will that disable audio? (I’m still trying to get a clear picture of what’s shared and what isn’t with distrobox/podman (with docker, it feels a bit more straightforward, but I’m not sure docker would be the right choice here…)
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1705787159 {#4050
        date: 2024-01-20 22:45:59.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@indigomirage@lemmy.ca"
        "@d3Xt3r@lemmy.nz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4053 …}
      +nested: Doctrine\ORM\PersistentCollection {#4059 …}
      +votes: Doctrine\ORM\PersistentCollection {#4061 …}
      +reports: Doctrine\ORM\PersistentCollection {#4044 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4042 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4040 …}
      -id: 326594
      -bodyTs: "'audio':99 'bit':124 'bottl':27 'choic':137 'clear':107 'complet':72 'contain':37 'crash':53 'devsi':95 'differ':83 'disabl':98 'distrobox/podman':118 'docker':120,132 'easi':57 'environ':38 'even':69 'feel':122 'figur':76 'full':16 'get':14,26,33,46,88,105 'give':3 'help':74 'hope':31 'host':86 'isn':115 'isol':67 'kernel/flags':84 'know':9 'lead':7 'load':49 'm':12,23,101,129 'modicum':65 'much':63 'need':82 'obvious':79 'ok':20 'part':58 'pictur':108 'plugin':60 'reaper':47,54 'right':136 'run':28 'sandbox':17 'semi':36 'semi-contain':35 'share':112 'still':102 'straightforward':126 'sure':131 'test':42 'thank':1 'thing':77 'tri':24,103 'ultim':21 'unshar':94 'unshare-devsi':93 'vsts':51 'without':52 'would':133 'yabridg':44"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.ca/comment/6549557"
      +editedAt: null
      +createdAt: DateTimeImmutable @1705787159 {#4047
        date: 2024-01-20 22:45:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4027}
    +body: """
      Audio works. Not sure *how* though, `–unshare-devsys` is supposed to not share the hosts devices, but I guess audio devices are an exception.\n
      \n
      The full isolation flags are:\n
      \n
      ```\n
      \n
      <span style="color:#323232;">--unshare-devsys:          do not share host devices and sysfs dirs from host\n
      </span><span style="color:#323232;">--unshare-ipc:          do not share ipc namespace with host\n
      </span><span style="color:#323232;">--unshare-netns:        do not share the net namespace with host\n
      </span><span style="color:#323232;">--unshare-process:          do not share process namespace with host\n
      </span><span style="color:#323232;">--unshare-all:          activate all the unshare flags below\n
      </span>\n
      ```
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1705789111 {#4106
      date: 2024-01-20 23:18:31.0 +01:00
    }
    +ip: null
    +tags: [
      "323232"
    ]
    +mentions: [
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
      "@indigomirage@lemmy.ca"
      "@d3Xt3r@lemmy.nz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4101 …}
    +nested: Doctrine\ORM\PersistentCollection {#4099 …}
    +votes: Doctrine\ORM\PersistentCollection {#4098 …}
    +reports: Doctrine\ORM\PersistentCollection {#4113 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4115 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4117 …}
    -id: 326686
    -bodyTs: "'activ':78 'audio':1,21 'devic':17,22,38 'devsi':9,33 'dir':41 'except':25 'flag':29,82 'full':27 'guess':20 'host':16,37,43,53,64,74 'ipc':46,50 'isol':28 'namespac':51,62,72 'net':61 'netn':56 'process':67,71 'share':14,36,49,59,70 'suppos':11 'sure':4 'sysf':40 'though':6 'unshar':8,32,45,55,66,76,81 'unshare-al':75 'unshare-devsi':7,31 'unshare-ipc':44 'unshare-netn':54 'unshare-process':65 'work':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.nz/comment/5249067"
    +editedAt: DateTimeImmutable @1727196809 {#4109
      date: 2024-09-24 18:53:29.0 +02:00
    }
    +createdAt: DateTimeImmutable @1705789111 {#4111
      date: 2024-01-20 23:18:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4027}
  +body: """
    Thank you! I just read that and assumed audio wouldn’t. I don’t have warm fuzzies about this.\n
    \n
    That said, I’ll give it a go.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705789534 {#4141
    date: 2024-01-20 23:25:34.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@indigomirage@lemmy.ca"
    "@d3Xt3r@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4144 …}
  +nested: Doctrine\ORM\PersistentCollection {#4146 …}
  +votes: Doctrine\ORM\PersistentCollection {#4148 …}
  +reports: Doctrine\ORM\PersistentCollection {#4150 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4152 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4154 …}
  -id: 326714
  -bodyTs: "'assum':8 'audio':9 'fuzzi':17 'give':24 'go':27 'll':23 'read':5 'said':21 'thank':1 'warm':16 'wouldn':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6550673"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705789534 {#4142
    date: 2024-01-20 23:25:34.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\Magazine {#266
  +icon: Proxies\__CG__\App\Entity\Image {#247 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#276
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#238 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
  +entries: Doctrine\ORM\PersistentCollection {#181 …}
  +posts: Doctrine\ORM\PersistentCollection {#139 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
  +bans: Doctrine\ORM\PersistentCollection {#118 …}
  +reports: Doctrine\ORM\PersistentCollection {#104 …}
  +badges: Doctrine\ORM\PersistentCollection {#82 …}
  +logs: Doctrine\ORM\PersistentCollection {#72 …}
  +awards: Doctrine\ORM\PersistentCollection {#61 …}
  +categories: Doctrine\ORM\PersistentCollection {#1820 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#270
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#272
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
"App\Security\Voter\UserVoter"

Symfony Profiler

GET https://kbin.spritesserver.nl/m/linux@lemmy.ml/t/32001/Flatpacks-installing-within-Distrobox/newest

Configuration Settings

Theme

Page Width

Security

Token

Firewall

Configuration

Listeners

Authenticators

Access Decision

Access decision log