I do this using lxc, all my environments are different, debian base, arch gaming and some browsing, Ubuntu for work, etc.
Look at lxc-create -t download
Then you just add permissions for the child os to access the x11 and dri and it's gorgeous.
this post was submitted on 25 Sep 2023
33 points (100.0% liked)
Linux
48184 readers
1343 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
I guess the flatpak package would be the easiest, and most supported, option you have. You can use flatseal to restrict what permissions it has, including what directories it has access to.
If I just use the flatpak as is, does it already provide filesystem isolation akin to a chroot? I dont need it to be incredibly secure, just some basic isolation is enough for me. I just want the installation to be easily reversible rather than having to track down installed files. Lutris installs a lot of stuff outside of the package manager, so I figured filesystem isolation would provide easy means of undoing everything it does
Flatpak can provide file system isolation, but not to the level of chroot. It provides a sandbox for things to run in and a way to distribute packages and dependencies. And it has a permission system to keep things in check. But with lutris, you may want to let it write to ~/Games/ or whenever you want your games at.
Maybe give the docs a skim for more details.
Install it using the flatpack and tweak the desired access with FlatSeal
Bottles has isolation. You can further that with the flatpak version of bottles.
You can do that with distrobox, which uses podman