New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide way to mount/extract AppImages without having user call them #830

Open
TheAssassin opened this Issue Jul 26, 2018 · 1 comment

Comments

Projects
None yet
2 participants
@TheAssassin
Copy link
Member

TheAssassin commented Jul 26, 2018

In situations when AppImages are not trustworthy, mounting AppImages becomes problematic. On the one hand a user doesn't want to execute the AppImage itself to use the --appimage-[mount|extract] options, as they can't know what's going to happen then (the runtime might be infected, for example). But on the other hand, mounting as root with sudo mount has a lot of disadvantages.

We should provide some tool for users to allow them to extract any AppImage without having to use the runtime in the AppImage. We've been talking about such an option for quite a while already, and I think it's time to finally implement it.

To Do:

  • extract mounting/extraction code for type 2 AppImages into a separate module, and provide it via the libappimage API
  • implement --mount option in appimagetool
  • eventually provide option to mount/extract type 1 AppImages as well (this is long overdue)

In my opinion, this should go into appimagetool rather than providing an extra application.

@probonopd

This comment has been minimized.

Copy link
Member

probonopd commented Jul 27, 2018

Imho, appimagetool should get the ability to extract type 1 and 2 AppImages. But the priority is lower than the number one and two annoyances :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment