# Flatpak

181 Hacker News commenters recommended Flatpak and 146 criticized it, November 2025 to November 2026. It was recommended in 12 of 13 months.

**Verdict:** Recommended for installing up-to-date Linux desktop apps on any distro from one package with user-controllable sandbox permissions, though critics call the sandbox weak and permissions awkward to manage.

## Why people recommend it

- Sandboxing and app isolation (9 comments): "Flatpaks, from the source if available, are excellent: you get the latest versions of the app from the official source, with permissions set for a pretty locked-down sandbox." ([source](https://news.ycombinator.com/item?id=45800388)) "You can trivially sandbox your Steam installation with pretty much zero performance overhead, if you install it through Flatpak." ([source](https://news.ycombinator.com/item?id=45793550)) "Flatpak seems to be a neat advancement, at least in regard to stopping things from basically uploading your filesystems" ([source](https://news.ycombinator.com/item?id=46461524))
- Works across Linux distros (8 comments): "Flatpak gives me cross-platform/cross-distro software directly/certified by the project or company that has additional security sandboxing" ([source](https://news.ycombinator.com/item?id=47979321)) "I know it's has its rough edges, but I use many apps across arch/Fedora/Ubuntu that are delivered as a single flatpak" ([source](https://news.ycombinator.com/item?id=48435801)) "The Windows way, used by Flatpak and Snap, of targetting known-good sets of libraries will work around that." ([source](https://news.ycombinator.com/item?id=49219988))
- User controls app permissions (3 comments): "things like Flatpak give me, the user, the power over application's permissions and I can take them away (or give more) in a few taps at will" ([source](https://news.ycombinator.com/item?id=45995892)) "the user has recourse: you can globally block all installed flatpaks from having access to a specific resource" ([source](https://news.ycombinator.com/item?id=46292426)) "Flathub is very explicit and obnoxious about such unsafe permissions and can easily be modified by the user." ([source](https://news.ycombinator.com/item?id=46287954))
- Latest apps from official sources (4 comments): "Flatpaks, from the source if available, are excellent: you get the latest versions of the app from the official source, with permissions set for a pretty locked-down sandbox." ([source](https://news.ycombinator.com/item?id=45800388)) "Flatpak gives me cross-platform/cross-distro software directly/certified by the project or company that has additional security sandboxing" ([source](https://news.ycombinator.com/item?id=47979321)) "I know I've noticed a big uplift in stability by using a rolling release base, or Flatpak if stuck on "stable"." ([source](https://news.ycombinator.com/item?id=47826552))

## What people warn about

- Weak or leaky sandbox (2 comments): "Flatpak isn't a proper sandbox due to it not being fine-grained, not being properly run-time based and having numerous sandbox escape possibilities." ([source](https://news.ycombinator.com/item?id=50268756)) "Flatpak is just a cheap container copy. Can't do anything beyond what cgroups and things like apparmor and selinux can do" ([source](https://news.ycombinator.com/item?id=49501815))
- Clunky permission management (4 comments): "Isolating individual apps and having to deal with permission prompts and protals, and persistence of permissions is uh, not very user friendly anyway." ([source](https://news.ycombinator.com/item?id=49477245)) "it's technically implemented uniformely without thought of user access patterns, then yes it's a bad idea causing friction and frustration" ([source](https://news.ycombinator.com/item?id=49476908)) "That is actually very poor design that a user requires a separate app (flatseal) to configure how the sandbox works." ([source](https://news.ycombinator.com/item?id=48630747))
- Graphics driver and runtime issues (3 comments): "I especially love how flatpak has its own version of graphics drivers, which results in my browser flatpak updating to a version that has a mismatch" ([source](https://news.ycombinator.com/item?id=47841496)) "all the machinations that Flatpak goes through to get userspace Mesa drivers etc. working on a different glibc version than the base system" ([source](https://news.ycombinator.com/item?id=46499039)) "Flatpak steam runs like poo for a lot of people. Really, flatpak should be avoided if there are other installation methods" ([source](https://news.ycombinator.com/item?id=45794179))

## Alternatives hackers recommend

- [AppImage](https://hackerapproved.com/p/appimage.md): 51 recommend
- [Snap](https://hackerapproved.com/p/snap.md): 48 recommend

## Cite as

Hacker Approved, "Flatpak", https://hackerapproved.com/p/flatpak/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).
