flatpak/flatpak
Flatpak
Flatpak is a sandboxed application framework and standardized packaging format for Linux desktop applications. It functions as a distribution system that allows a single application bundle to run consistently across multiple Linux operating systems without requiring per-distribution builds.
The project provides a runtime dependency manager that bundles specific library versions or shared runtimes to create predictable execution environments. It includes a sandbox permission manager to control application access to system hardware and resources, ensuring security and consistent behavior between development and production.
The system manages application lifecycle through a repository distribution model, utilizing manifest-driven builds and a content-addressed version control system for updates. It integrates isolated applications with the host desktop environment via standardized portal interfaces for system notifications, global menus, and theme settings.
Diagnostic tools are available for troubleshooting isolated environments through debug shells, stacktrace retrieval, and bus traffic auditing.
Features
- Package Distribution - Packages desktop applications into a single, standardized format that runs across multiple Linux distributions.
- Linux Sandboxes - Implements a comprehensive framework for packaging and running desktop applications in isolated Linux sandboxes.
- Cross-Distribution Formats - Provides a standardized packaging format that eliminates the need for per-distribution builds of Linux desktop apps.
- Manifest-Based Build Systems - Uses a declarative manifest file to define build-time dependencies and runtime permissions for reproducible packaging.
- Shared Library Bundling - Bundles shared libraries and core system components into versioned images to ensure binary compatibility across distributions.
- Dependency Management Utilities - Manages the bundling of specific library versions and shared runtimes to create predictable execution environments.
- Runtime Dependency Bundlers - Bundles specific library versions and shared runtimes to ensure predictable execution across different Linux hosts.
- Application Packaging Formats - Implements a standardized packaging format for portable, isolated application units across Linux systems.
- Repository Hosting - Publishes and hosts application bundles through remote repositories or standalone files for client installation.
- Namespace-Based Isolation - Leverages Linux kernel namespaces and cgroups to create secure process isolation for applications.
- Permission Managers - Provides a security layer that controls application access to system hardware and resources through a defined permission system and portals.
- Out-of-Process Resource Brokers - Ships a portal-based interface that acts as a broker for sandboxed applications to securely access system resources.
- Application Repository Systems - Provides a distribution model for hosting and publishing sandboxed application bundles via remote repositories.
- Content-Addressed Versioning Systems - Implements an OSTree-based system for efficient application versioning and delta updates using content-addressable storage.
- Application Sandboxing - Packages desktop applications into secure, isolated environments using defined manifests and dependencies.
- Sandbox Permissions - Controls access to system resources and hardware through a specialized permission system and portal interfaces.
- Desktop Environment Integrations - Manages installation locations and environment variables to enable seamless application discovery by desktop shells.
- Desktop Integration - Provides a standardized portal interface to connect sandboxed applications with system notifications and global menus.
- Development Environment Standardization - Ensures the build and test environments are identical to the end-user runtime environment for consistency.
- Application Sandbox Inspection - Offers diagnostic tools including debug shells and bus traffic auditing to inspect isolated application environments.
