I’ve been thinking lately, it would be nice to have some sort of a container format for video games. All these reverse engineered ports of console games, and new emulation is nifty, but I’m going to keep that code far away from my gaming PC.
I run a container called Wolf, that lets me do game streaming from a container, theoretically something like that would be great to minimize the risk of these. Flatpak might be able to do it, but by default the permissions are 100% from pak, so the pak can just default to having all the access it wants.
First: you want an application. Old traditional approach that does things that way for that reason.
Second, wolf is convient, but the permissions it needs to manage its sessions are abusable so if you are the only one using it, make a headless lingering user running sunshine.
If you have security concerns, then its probably a good idea not even to run the code. But if you really really want to, one could use Virtual Machines with CPU and graphics cards passthrough. In case of Linux, even the Kernel on your machine is reused in the Virtual Machine and the filesystem is nowadays very good optimized too. All of this gives you near native performance. The little bit performance hit I think is acceptable, given that security is high priority here.
I personally wanted to set this up, but honestly I’m too lazy. BTW Flatpak is not a good container, if security is a high priority.
