| 31 Dec 2023 |
| @genericnerdyusername:matrix.org joined the room. | 16:33:20 |
@genericnerdyusername:matrix.org | is there a way i can run games in a container so i dont need to worry about malicious mods? | 16:33:29 |
@genericnerdyusername:matrix.org | i dont want to straight up use a vm, both bc of the performance overhead and i dont want to set up gpu passthrough | 16:33:35 |
K900 | You can try bubblewrap | 16:42:02 |
K900 | Depends on what you're trying to isolate really | 16:42:09 |
@angryant:envs.net | Could the flatpak steam distribution have any isolation extended to the games it launches? Or has it already been poked so full of holes it doesn't matter? | 16:44:42 |
K900 | It's not particularly sandboxed to begin with | 16:45:12 |
K900 | Like it's a little sandboxed but it's not a lot | 16:45:21 |
K900 | All the games still run inside that little bit of sandbox | 16:45:33 |
K900 | But it's just not a lot | 16:45:48 |
K900 | Honestly I wish Flatpak was more explicit about this | 16:46:51 |
K900 | I understand why they aren't | 16:47:03 |
K900 | And I don't know what the solution to that would be | 16:47:10 |
@angryant:envs.net | Yeh I figured. Seems likely to be a distant secondary priority. | 16:47:19 |
K900 | But sometimes I wish they were | 16:47:22 |
K900 | In reply to @angryant:envs.net Yeh I figured. Seems likely to be a distant secondary priority. The Steam Flatpak is notably unofficial | 16:47:36 |
K900 | So Valve isn't really actively invested in it | 16:47:44 |
K900 | They're definitely not unaware of it and they've done things to support it better | 16:48:11 |
K900 | But it's not an official distribution method | 16:48:21 |
@angryant:envs.net | Exactly. Hence an understandable primary priority of "just make it work" with other considerations very distant. | 16:48:47 |
K900 | They have been moving towards using more portal APIs | 16:49:21 |
K900 | Just for better desktop integration | 16:49:29 |
K900 | So maybe over time it'll get better | 16:49:34 |
@angryant:envs.net | Ah that very nice in general. | 16:49:38 |
@angryant:envs.net | * Ah that's very nice in general. | 16:49:49 |
| @philiptaron:matrix.org changed their display name from Philip Taron to Philip Taron (UTC-8). | 18:10:52 |
@genericnerdyusername:matrix.org | In reply to @k900:0upti.me Depends on what you're trying to isolate really all games, native and proton, from being able to read/write anything on the local filesystem, bar the game files + save dir | 19:42:14 |
K900 | Not in a generic way then | 19:47:49 |
K900 | You'll need to actually specify where all of that stuff is | 19:47:58 |
@genericnerdyusername:matrix.org | should I just make gaming user and let the unprivileged account run things as it using doas/sudo | 19:55:51 |