←back to thread

63 points theYipster | 3 comments | | HN request time: 0.597s | source

An install script to create a strong and stable blend of Omarchy on top of CachyOS. You must install CachyOS first (please read the README file.)

Feedback and contributions welcome!

Show context
sunshine-o ◴[] No.45247511[source]
Omarchy and CachyOS are very interesting but they do not look serious about security [0] [1].

I mean in this day and age we all agree you need disk encryption (for a least 20 years) but what about SELinux, application sandboxing for example?

Especially for a desktop OS like Omarchy shipped with a bunch of apps and "plugins".

This has been a Linux Desktop weakness for more than a decade (compared to macOS, Windows and Android). App sandboxing is a bit sketchy and hard to get right.

The fact they do not explicitly state their strategy regarding those things make me believe this is a bit amateurish.

- [0] https://wiki.cachyos.org/cachyos_basic/faq/#security--best-p...

- [1] https://learn.omacom.io/2/the-omarchy-manual/93/security

replies(2): >>45247983 #>>45248117 #
Galanwe ◴[] No.45247983[source]
> Especially for a desktop OS like Omarchy shipped with a bunch of apps and "plugins".

Omarchy is _just_ a set of scripts to have a nice looking Arch Linux and some helper scripts for day to day tasks. It's not a distribution per se, it doesn't have repositories or packages of its own.

Therefore, your criticism of app sandboxing is more for Arch than Omarchy IMHO.

replies(2): >>45248317 #>>45250066 #
1. bjackman ◴[] No.45250066[source]
Not just Arch, all mainstream Linux distros have this problem.

It's totally right to point out that it's amateurish but it seems unfair to single out an individual project when it's an ecosystem level issue.

replies(1): >>45251253 #
2. Galanwe ◴[] No.45251253[source]
I mean, I don't have the market shares at hand, but if Ubuntu is still on the top, that's one _mainstream distribution_ that heavily emphasizes snaps.
replies(1): >>45254335 #
3. bjackman ◴[] No.45254335[source]
Hmm yeah I suppose that counts. I actually run Ubuntu, and I use very few Snaps. But I guess that's kinda on me!