Jonas Smedegaard:
> Quoting Hans-Christoph Steiner (2015-02-13 11:31:06)
>>
>> I had an idea for a feature that I think would make Lil' Debi a lot 
>> more useful for things like that.  Now I'm looking for feedback on how 
>> useful it would be, and anything else people might think of.
>>
>> Basically, Lil' Debi should support "installation profiles" On the 
>> install screen, there would be a menu of profiles to choose from.  
>> Some profiles could be "basic webserver", "wireshark", "minimal SSH", 
>> etc. etc.  The user would just choose one of those profiles, and then 
>> Lil' Debi would make that setup.
>>
>> I think this could be implemented as a folder like 
>> /data/data/info.guardianproject.lildebi/app_profiles, and each profile 
>> would be an sh script with a little metadata in it, like name and 
>> description.  The menu would be automatically built from whatever 
>> script are in that folder, so people could easily write and test their 
>> own profile scripts, just by copying them to that folder.
>>
>> Or maybe this profile would be even simpler, it is just a list of 
>> packages to install.  Then there would be much less security risk, and 
>> we could make it really easy for people to swap these profiles with 
>> each other, and have them installed into Lil' Debi.
> 
> Sounds like an excellent use of boxer: https://wiki.debian.org/Boxer
> 
> Declarative profile not only means much less security risk but also lees 
> derived from Debian - potentially none (a.k.a. a Debian Pure Blend).
> 
>  - Jonas

Nothing everything needed is possible just by installing packages, so a script
would be needed to actually get things working.  For example, any daemon or
app that uses internet would have to be granted INTERNET permission, i.e.
adding them to that permission group, i.e. `adduser app_123 internet`

.hc

-- 
PGP fingerprint: 5E61 C878 0F86 295C E17D  8677 9F0F E587 374B BE81
https://pgp.mit.edu/pks/lookup?op=vindex&search=0x9F0FE587374BBE81

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
To unsubscribe, email:  [email protected]

Reply via email to