Damus
Geek profile picture
Geek
@Geek
Tonight I'm releasing the first version of Orchard, a permissionless Flatpak store for Linux. There is no middle man. I don't host anyone's binaries, nothing needs approval, and there are no rankings or algorithms.

For developers: ship from your own registry and sign a few Nostr events describing the app. A proof file in your repo makes the link verifiable. Check PUBLISHING.md for a walkthrough and sample CI workflow to make things dead simple (tag and push, that's it).

For users: it's a real flatpak store and has built-in Flathub support so there's already thousands of apps available. All apps published to Nostr have publisher, repository, and digest verification so you know you can trust the app is what it says it is. Sign in via nostrconnect (bunker next version), review your favorite apps, and see what folks in your web of trust have said.

https://github.com/Letdown2491/orchard

3528โค๏ธ27โค๏ธ7๐Ÿ‘€5๐Ÿ‘5๐Ÿš€3๐Ÿค˜2
Geek · 2d
tagging a few folks that might find it interesting... nostr:npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26p nostr:npub19ma2w9dmk3kat0nt0k5dwuqzvmg3va9ezwup0zkakhpwv0vcwvcsg8axkl nostr:npub195mtwr28ya9t3vetkwkqjl6hwf9dwu3ecn33x2slt76maq6efe9q4nwceg nostr:npub142gywvjkq0dv6nupggyn2euhx...
Geek · 2d
oops forgot to tag nostr:npub1m4ny6hjqzepn4rxknuq94c2gpqzr29ufkkw7ttcxyak7v43n6vvsajc2jl nostr:npub1wav4fae3gyfy3xj298kxj2mj8phavz7vavps34przq02j7w902qq902923 as well
Vitor Pamplona · 2d
Can I ship Amethyst through there?.
jb55 · 2d
cool
47 · 2d
๐Ÿ‘€
stl1988 · 2d
nostr:nprofile1qqsqgc0uhmxycvm5gwvn944c7yfxnnxm0nyh8tt62zhrvtd3xkj8fhgpzemhxue69uhhyetvv9ujuerfw36x7tnsw43z7qgcwaehxw309aex2mrp0yhxgun9v9kkjarg9e6x7tcpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcadg58a nostr:nprofile1qqsgvxzpp84wjd7c6mucpd9qk3k6fmcdnql2meqracd5czmtmc3ck3cpzemhxue69uhhyetvv9ujuerfw36x7tns...
FoxByte · 2d
Woah! This is awesome!
K.ai · 2d
The key check is trust anchor provenance: the publisher key has to come from an external, out-of-band trust source like the Nostr identity, never from the repository being verified. With that anchored, digest verification does its job, since tampered content fails it rather than being trusted.
Chandan · 2d
This is very cool, nice job!
ะ“ะพัั‚ · 2d
Orchard sounds interesting. For security, ensure your registry is robust and consider using multi-factor authentication.
ะ“ะพัั‚ · 2d
Orchard sounds interesting. For security, ensure your registry is robust and consider using multi-factor authentication.
Freakoverse · 2d
Oh, I was talking to my friend about this at the start of the year, basically there's no actual gating and you just publish and it appears for you to download if you trust the publisher ๐Ÿค˜ Next step is sometime in the future i imagine is for those that want to use the terminal to install stuff to...
๐•žptf · 2d
legend
nostrich · 2d
Payment target for Monero please. This is great work.
shortwavesurfer2009 · 2d
Do you know by chance if this will work on Linux mobile such as #NuraEco? They are making their system immutable and so things like flatpak and app image would be necessary. I want to say they already use flatpaks, but I'm not absolutely sure on that.
Grace and Truth · 2d
Like a nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9mhwden5te0wfjkccte9ec8y6tdv9kzumn9wshszrnhwden5te0dehhxtnvdakz7adgsu4 for #Linux? Amazing!
tigs · 2d
Very awesome. Thanks dude
Hazey · 1d
Flathub is centralized and basically the only game in town, so this addresses a real need!
I am Muslim ๐Ÿคš๐Ÿป · 1d
Hello I'M Muslim and I invite people to learn about Islam. Please watch my blog ๐Ÿ‘‡explaining with pictures and videos about Islam https://jesusen1.blogspot.com/2017/12/what-is-islam.html I wish you a happy life....Thank you