Flatpak’s use of bubblewrap (it comes from flatpak but then it became its own project) is not a good example, see:

https://madaidans-insecurities.github.io/linux.html#flatpak

But in general this is true. I talked out of memory, but firejail given its suid way is considered insecure (possible privilege escalation), that’s right

apparmor comes with several profiles, and if in your distro it doesn’t include one for librewolf, you can use the firefox one. And if there’s no available one and you would be interested in combine it with firejail then most probably firejail will come with with a profile for firefox or librewolf and usually with support for apparmor. Regardless of the distros, the arch wiki can guide you with apparmor and firejail. I recommend becoming familiar with both. Another option if there’s no profile on your distro is to look into another distro’s profile. ubuntu used include some software with apparmor out of the box so perhaps it’s a good source of profiles…

Also in this same community there’s an old post precisely about what you’re asking for, though it’s a bit dated, you may want to scroll for some time until getting to it.

Edit:

Firejail is insecure, my bad. Better to use bubblewrap (I didn’t know about bubblejail). The thing is that firejail offers profiles combined with apparmor which might have solved the lack of apparmor profiles. For my personal purposes I hope to take a look at bubblejail to have an easier way to do sandboxing. You can see the arch wiki bubblewrap examples to notice how bubblewrap doesn’t help with apparmor profiles though. According to the arch wiki for bubblejail or the GH page for bubblejail profiles are used and can easily be created, however I have no idea of the interaction with apparmor, and if as with firejail such profiles include apparmor stuff, but intuitively I guess it doesn’t.

Going back to apparmor, which is MAC enforcement, if no profiles available on your distro for librewolf neither firefox, then looking at other distros is OK, and also one can create profiles as well as one can also modify existent or available ones. See for example the arch wiki for apparmor.

If you want to keep using google playstore and services, you no longer will be able to use f-droid, whether google or any aosp rom. grapheneOS claims it won’t be affected given their sandboxed google play and services. Though I’m not sure if eventually google would come up with a counter measure or it won’t ever care. They want to enforce that if anyone uses their proprietary stuff the apps interacting with it must be from register developers, which automatically exclude any libre/free app storage on which developers don’t want to register to google. GrepheneOS being the exception.

If you use microG with any custom rom, I guess that might work through fake registrations, but can’t be sure. But any custom rom without google play and services is supposed to be ok with f-droid. The thing is that google knows most if not all users need one app that depends on their stuff, perhaps bank apps, payment apps, and so on…

Papers or Zathura (+ required plugin)

Just so you know, if you like freetube, you can configure the external player to mpv, which underneath uses yt-dlp when streaming, and use the button to load the external player. Of course one can also launch smplayer, which underneath is using mpv, which underneath…

But the thing is content creators don’t move out of YT cause they’re there to monetize in the first place. So this thing seems never ending no matter alternatives like peertube exist.

Besides outertune there’s harmonymusic as well

None protect your IP if not using a non self hosted frontend like invidio or piped, cause if self hosted then you’re providing your IP any ways. So now a days actually private is kind of hard. But these applications for sure help a lot.

2025.09.26 can still do it without deno. Besides, when the change happens, node and bun (never heard about bun before) will be supported as well, not just deno, but they will require extra arguments passed to yt-dlp. If using yt-dlp directly, and already having node or bun installed, no need for deno then.

apkupdater installing from apkpure?

if someone is up to the challenge to take lemoa over, a gtk app, the original author seems to be open for that.

neonmodem

There’s this apps doc. From there I see in addition to others’ comments:

• mlmym
• neonmodem

Both being Go based apps. but the neonmodem looks more interesting to me.

Another option is a hybrid one, to add the rss feeds from the lemmy communities your’re interested in, or the rss feed from all of them together into your feed reader (even better if newsraft), but those feeds don’t show full lemmy conversations and one has to show them in the browser, and also if in need to comment or post one still need to use the browser.

apps doc is constantly evolving, so it’s good to keep an eye on it periodically, :)

There’s an AUR open-tv package for Arch/Artix/…, and there’s even an AUR open-tv-bin version, but I prefer looking at the build recipes if available, and if not using Arch/Artix/… one can read through the PKGBUILD and see how it builds.

available on AUR for Arch and derivatires

The AUR PKGBUILD shows a pretty simple recipe:

build() {
  arch-meson "${pkgname}-${pkgver//+/-}" build
  meson compile -C build
}

package() {
  meson install -C build --destdir "${pkgdir}"
  # permission fix
  chmod 755 "${pkgdir}/usr/bin/ascii-draw"
}

I’ve been seeing arch-meson often used, but haven’t explored what it does. Some day…

Though it’s way more fun to use text specification, like the one referenced by @fratermus@lemmy.sdf.org

My only experience with it was with harmony-music built/installed from AUR on artix, and I couldn’t keep using it, it was consuming too munch CPU, making the fans run nuts. Not sure if it was harmony-music itself, or flutter. Apparently not the same OP experience.

maybe, he mentioned stacked mode on a tiling compositor, which is valid, but that’s not a thing on stacking compositors… BTW, the stack mode on sway doesn’t mean it turns into a stacking compositor, rather it means tabbed mode with the tabs stacked vertically. But the OP knows better.

You might try tabbed mode instead of stacking mode. It’s great, as mentioned in some comment I made, I’m not a tiling guide, but the tabbed mode on sway is great. I would guess it’s available on hyprland since it borrows some concepts from sway. However if you find a lot of trouble on hyprland enabling it (I guess you shouldn’t) you might try sway. Beware you need exceptions because otherwise everything shows up maximized, but that’s not hard byt reading the man pages, compositor documentation, and looking around on the web. BTW, on sway this global config gives tabbed mode on all workspaces: workspace_layout tabbed and of course you can chenge it to stacking, or tiling whenever you want on any workspace…

I’m not a tiling guy, and the tabbed mode on sway seems to me like the best I’ve used. I believe it’s a much better experience than stacking compositors by a lot. Having a tab bar, and everything maximized to it (except what I consider is better off floating) is the best I’ve experienced. Stacking mode is the same just that is uses too much space by stacking the tabs, so I really don’t like stacking mode. So sway tabbed mode, in combination with a tiling concept of a workspace per particular objective (I use 10) and a simple bar (yamber) has no alternative on the stacking spectrum of compositors.

BTW, if going with a stacking compositor, I recommend labwc instead. I found a smoother and way more stable experience than wayfire (some functionality stops working often like sunset functionality, and usually way behind on wlroots support, not a take on wayfire devs, just that I find it more unstable than labwc).

Of course I’m biased towards less eye candy, though I still appreciate the equivalent to basic picom/compton on the Xorg world, which is the norm on any wayland compositor AFAIK.

ohh, now it makes sense. I was referring rather to:

I try to move away from centralised aggregation like Reddit.

believing you subscribe to reddit or similar link aggregators to keep up to date with certain topics (subreddits, communities on lemmy), and usually by subscribing to the rss/atom feeds from which people share URLs most of the time and which you are interested on, then you mostly can discard such link aggregators. Lemmy offers rss feeds in case you want to follow up a community without subscribing to any lemmy instance, and I believe reddit hadn’t killed it’s similar rss feeds per subreddit.

However if it’s just for one interesting post you find, then rss/atom feeds don’t provide what you want. However, if you like a post from a rss/atom feed, most rss/atom readers allow you to include the link into favorites, so that they are available for you whenever wanting to come back to such post or to actually get deeper into it. Favorites would have a somehow similar functionality to pocket, but I agree it’s not the same, since the sources have to come from a feed, as opposed to any generic URL, however if your URLs sources come from recurrent blogs or sites, and they offer rss/atom feeds, then this would work. I’m kind of following this approach to have my rss/atom personal link aggregator, :)

rss/atom feeds?