Comment by bigyabai
13 hours ago
> In a different way you can see this in this thread where instead of discussing why Omarchy has the bug
There's nothing interesting to discuss. Rootless OCI-compliant containers exist, and Omarchy ignored them. The "convenience" of the solution they chose simultaneously opens an enormous attack surface that the maintainers didn't consider.
This is why I don't believe the "give me a macOS distro" people - even Apple wouldn't do this. If you want a preconfigured Mac-like distro, then you should use GNOME and not a pre-riced desktop with hundreds of dotfiles. You don't have to use Arch either, you can go with a graphical install of Fedora or CachyOS if you want. This will give you a system that you can understand, maintained by people with a minimum standard of quality, that actually resembles the workflow of macOS. There is no Niri or Sway rice that will magically make your system make sense, and this is why I think a lot of the Mac and Windows expats should just use a normal desktop.
> There's nothing interesting to discuss. Rootless OCI-compliant containers exist, and Omarchy ignored them.
Why Omarchy chose to ignore all the rootless OCI-compliant containers; and also why docker itself isn't rootless yet is a pretty interesting thing to discuss. I'm not aware of the specifics being a Mac user myself, but others in the thread (e.g. here https://news.ycombinator.com/item?id=49500186) say that podman still doesn't work 1:1 with docker exactly.
If you disagree, that's a reasonable thing to discuss; but otherwise just saying "ha ha just use the rootless thing" is missing the point.
If you're not going to use rootless containers, then you simply cannot ship the rootful solution as default in a desktop operating system.
There's absolutely meat on the bones regarding root/rootlessness, but that's not the problem at-hand. The problem is shipping vulnerable defaults, and the case is closed.