flatpak/flatpak

Features

• Package Distribution - Packages desktop applications into a single, standardized format that runs across multiple Linux distributions.
• Linux Sandboxes - Implements a comprehensive framework for packaging and running desktop applications in isolated Linux sandboxes.
• Cross-Distribution Formats - Provides a standardized packaging format that eliminates the need for per-distribution builds of Linux desktop apps.
• Manifest-Based Build Systems - Uses a declarative manifest file to define build-time dependencies and runtime permissions for reproducible packaging.
• Shared Library Bundling - Bundles shared libraries and core system components into versioned images to ensure binary compatibility across distributions.
• Dependency Management Utilities - Manages the bundling of specific library versions and shared runtimes to create predictable execution environments.
• Runtime Dependency Bundlers - Bundles specific library versions and shared runtimes to ensure predictable execution across different Linux hosts.
• Application Packaging Formats - Implements a standardized packaging format for portable, isolated application units across Linux systems.
• Repository Hosting - Publishes and hosts application bundles through remote repositories or standalone files for client installation.
• Namespace-Based Isolation - Leverages Linux kernel namespaces and cgroups to create secure process isolation for applications.
• Permission Managers - Provides a security layer that controls application access to system hardware and resources through a defined permission system and portals.
• Out-of-Process Resource Brokers - Ships a portal-based interface that acts as a broker for sandboxed applications to securely access system resources.
• Application Repository Systems - Provides a distribution model for hosting and publishing sandboxed application bundles via remote repositories.
• Content-Addressed Versioning Systems - Implements an OSTree-based system for efficient application versioning and delta updates using content-addressable storage.
• Application Sandboxing - Packages desktop applications into secure, isolated environments using defined manifests and dependencies.
• Sandbox Permissions - Controls access to system resources and hardware through a specialized permission system and portal interfaces.
• Desktop Environment Integrations - Manages installation locations and environment variables to enable seamless application discovery by desktop shells.
• Desktop Integration - Provides a standardized portal interface to connect sandboxed applications with system notifications and global menus.
• Development Environment Standardization - Ensures the build and test environments are identical to the end-user runtime environment for consistency.
• Application Sandbox Inspection - Offers diagnostic tools including debug shells and bus traffic auditing to inspect isolated application environments.

Star history