Run More Stuff in Docker
For end user devices, I much prefer Nix/NixOS [1] for this kind of thing.With Flakes [2] (experimental feature), you get full reproducibility.The documentation is spotty and there is a considerable learning curve, but I've switched to NixOS on my laptop and desktop early this year and am mostly very happy with it.That doesn't cover sandboxing though. I would actually agree that sandboxing / restricting applications (Mac OS style) would be sorely needed on Linux desktop.Flatpak and Snap are trying to do this. A much saner approach than trying to find or maintain up to date, trustworthy Docker files for applications.[1] https://nixos.org/[2] https://nixos.wiki/wiki/Flakes