Skip to content

"AM" 6.12
Compare
Choose a tag to compare
@ivan-hc ivan-hc released this 15 Jun 20:53
· 1915 commits to main since this release
6.12
2c8e3a9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

Better sandboxing method for your AppImages!

Dropping Firejail for "Aisap", Bubblewrap frontend

Since version 5.3 you can use the --sandbox option to run AppImages using a sandbox, but from now Firejails has been dropped in favour of "Aisap", a Bubblewrap frontend for AppImages. The now obsolete --firejail option has been removed as well.

This method works as follows:

am --sandbox $APP

or

appman --sandbox $APP
  • if the "aisap" package is not installed, you will be asked if you want to install it via "AM"/AppMan;
  • requires replacing the symlink in $PATH with a script;
  • to work, the Appimage will be set to "not executable", and the AM-updater will also have its chmod command set to a-x instead of a+x.

The default location for the sandboxed homes is at $HOME/.local/am-sandboxes, but that location can be changed by setting the $SANDBOXDIR env variable.

To restore the use of the AppImage without sandbox, you need to run the application command with the "--disable-sandbox" option:

$APP --disable-sandbox

Scenario, you've installed "Anydesk" and you want it to be sandboxed as first, but "Aisap" is not installed, so the new --sandbox option prompts if you want to install it before. In this video I anso enable/disable the sandbox for both Anydesk and Lxtask:

simplescreenrecorder-2024-06-15_20.15.46.mkv.mp4

NOTE, "AM" users will need to use the root password to replace the symlink in $PATH with the script, while AppMan users will need to close the terminal for the changes to take effect.

For more information aboit "Aisap", visit https://github.com/mgord9518/aisap

DISCLAIM: at the time of writing, "Aisap" is still experimental and the supported profiles are still few compared to the number of applications in this database. For example, in the video above, Lxtask was running in sandbox, Anydesk was not. So not all apps will run in sandbox. A Flatseal-style tool for Flatpak would be needed, but it is not available at the moment. Please support the "Aisap" project as much as you can.

Below are useful links to the official "Aisap" documentation:

EXTRA: The behavior of this option can be tested in a completely standalone way by consulting the repository of its creator, at Samueru-sama/aisap-am

Thanks to:

Other changes:

  • Fix an inconsistency in "install.am" during patching the installation scripts for AppMan e6f1e27
  • Fix a bug with suboption --debug and --force-latest in "install.am" ae3266d
  • There are now 2034 installation scripts for the x86_64 architecture available in the database

Full Changelog*: 6.11...6.12

Contributors

Samueru-sama and mgord9518
Assets 2
Loading