# What is subuser?

# Docker on the Desktop

# Bedrock linux meets Android permissions

# Qubes OS light

# A package manager with an undo function

# Docker on the Desktop

## Subuser is free open-source software

Subuser is licensed under the LGPL-3.0. You can download the source code by clicking here.

### Download source

## The problem

As free software developers we like to share. We surf the web and discover new code. We are eager to try it out. We live out an orgy of love and trust, unafraid that some code we cloned from git might be faulty or malicious. We live in the 60s, carefree hippies.

This is utopia.

But sharing code isn’t safe. Every time we try out some stranger’s script we put ourselves at risk. Despite the occasional claim that linux is a secure operating system, haphazardly sharing programs is NOT secure.

Furthermore, the fragmentation of the linux desktop means that packaging work is needlessly repeated. Programs that build and run on Fedora must be repackaged for Ubuntu. This takes time away from creating great free open source software.

Subuser with Docker attacks both problems simultaneously. Docker provides an isolated and consistent environment for your programs to run in. Subuser gives your desktop programs access to the resources they need in order to function normally.

## Subuser turns Docker containers into normal linux programs

Right now I’m editing this file in vim. vim is not installed on my computer though. It is installed in a docker container. However, in order to edit this file, all I had to do was type:

    $ vim README.md

Subuser turns a docker container into a normal program. But this program is not fully privileged. It can only access the directory from which it was called, not my entire home dir. Each subuser is assigned a specific set of permissions, just like in Android. You can see an example permissions.json file below:

    {
      "description"                : "A web browser."
      ,"maintainer"                : "Timothy Hobbs <timothyhobbs (at) seznam dot cz>"
      ,"executable"                : "/usr/bin/firefox"
      ,"user-dirs"                 : [ "Downloads"]
      ,"gui"                       : {"clipboard":true,"cursors":true,"border-color":"red"}
      ,"sound-card"                : true
      ,"allow-network-access"      : true
    }

For a list of all permissions supported by subuser, please see the subuser standard .

## Index

- Features!
  - Security features
  - Other features
- Screenshots
- Security
  - How secure is subuser?
  - Security Bulletins
- Installing subuser
  - System Requirements
  - Installation: Common steps
  - Install from your distributions package manager
  - Install with pip: Stable version
  - Install from git: Development version
  - Source
- Download source
- Using subuser - a quick tutorial
  - Installing a program with subuser
  - Running subusers
  - You don’t have to type `subuser run` every time you launch a program
  - Updating programs
  - Removing subusers
- Packaging programs to run with subuser
  - Quick packaging tutorial
  - Creating a permissions.json file
  - Creating a SubuserImagefile
- The Subuser Standard
  - Image source identifier paths
  - Subuser names
  - Special files found within the subuser image
  - Subuser repositories
  - What the subuser program serializes to disk
  - Subuser standard licence
- Developers Corner
  - Contributing
  - Coding guidelines
  - Maintainers
  - Implementation details
  - Travis-ci status
  - Common coding tasks
- News
  - Subuser 0.6 - More of what users want and less of me telling them what they want.
  - Subuser 0.5 - the path to stability
  - Subuser 0.4 - Revamped permissions code
  - Subuser 0.3 - Xpra X11 bridge + New update system
- Press
- Use cases
  - Use `subuser dev` to build freecad more easily
- Presentations
  - The subuser vision
- Community
  - Mailing list
  - Pull requests
  - Issues
  - Design discussions
  - I want to learn Python and contribute to Open Source. Will you tutor me?
  - IRC
- Community guidelines
  - We are an engineering-centric community
  - We are an emotional community
  - We are an equal community
  - We will not tolerate
- Related projects
  - Papers and publications
- Design flaws/bugs in subuser