Run More Stuff in Docker
For end user devices, I much prefer Nix/NixOS [1] for this kind of thing.<p>With Flakes [2] (experimental feature), you get full reproducibility.<p>The documentation is spotty and there is a considerable learning curve, but I've switched to NixOS on my laptop and desktop early this year and am mostly very happy with it.<p>That doesn't cover sandboxing though. I would actually agree that sandboxing / restricting applications (Mac OS style) would be sorely needed on Linux desktop.<p>Flatpak and Snap are trying to do this. A much saner approach than trying to find or maintain up to date, trustworthy Docker files for applications.<p>[1] <a href="https://nixos.org/" rel="nofollow">https://nixos.org/</a><p>[2] <a href="https://nixos.wiki/wiki/Flakes" rel="nofollow">https://nixos.wiki/wiki/Flakes</a>