You are not logged in.
I want to install Citrix Receiver, but it needs outdated libraries which have large security holes. I would like to run this application in a sandbox with these libraries. Is that possible using something like Docker, Snap or Flatpak?
Last edited by sxmwht (2020-10-21 13:25:47)
Offline
Which archlinux site and when he compiled it, then what?
Online
The point is that the OP asked "would like to run this application in a sandbox with these libraries" and your reply boils down to "download it from somewhere and compile it".
How does that answer the OPs question at all?
Online
Check https://wiki.archlinux.org/index.php/Se … plications and make sure to follow the links.
Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.
clean chroot building not flexible enough ?
Try clean chroot manager by graysky
Offline
Check https://wiki.archlinux.org/index.php/Se … plications and make sure to follow the links.
Thanks. That mentions Linux containers which were also mentioned by a colleague. I will give them a look
Offline
You do not need to use a container.
If you only want to ensure the application is used w/ a different version of a library and can use the rest of the software stack, get an older version of the librar{y,ies} and use LD_LIBRARY_PATH or LD_PRELOAD to ensure the linker resolves that version.
Where to get the lib specifically and how to build it actually depends on the specific library in question.
You can posibly lift the PKGBUILD of the current library and adjust the intallation path to build a package (but you'll also have to alter the package identifier to avoid a collision w/ the existing package)
Me being a lazy ass would just fetch the library source, build it, copy the resulting shared object into (probably) /opt/Citrix/ICAClient and ensure that's at front of the LD_LIBRARY_PATH
Also, do you use https://aur.archlinux.org/packages/icaclient/ ? There seems no "helps, I needs old library of foobar" comment?
Online
You do not need to use a container.
If you only want to ensure the application is used w/ a different version of a library and can use the rest of the software stack, get an older version of the librar{y,ies} and use LD_LIBRARY_PATH or LD_PRELOAD to ensure the linker resolves that version.
Where to get the lib specifically and how to build it actually depends on the specific library in question.
You can posibly lift the PKGBUILD of the current library and adjust the intallation path to build a package (but you'll also have to alter the package identifier to avoid a collision w/ the existing package)Me being a lazy ass would just fetch the library source, build it, copy the resulting shared object into (probably) /opt/Citrix/ICAClient and ensure that's at front of the LD_LIBRARY_PATH
Also, do you use https://aur.archlinux.org/packages/icaclient/ ? There seems no "helps, I needs old library of foobar" comment?
Hi. I had tried that package, but I got SSL errors as we require a prior version at work. However, there is icaclient-old in the AUR, which is the version I need. I had tried this before, but I hadn't got very far - it just wasn't working properly. It was down a rabbit hole of forums that I came to the conclusion I needed some different libraries.
Today, though, on a whim, I decided to install xfce4 (I usually use i3) and it loads up fine! So thanks for your help, even if it was just indirectly through the fact that you prompted me to try the AUR again before going further.
It's been an interesting learning experience - I have learned a bit about Docker which I wouldn't have otherwise used, and I've received some good pointers here, even if this thread did turn out to be a bit of an XY problem.
Thanks everyone!
Sam
Offline
Great.
Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.
Online
Khrere, you seem to have a history of blanking posts - perhaps when you realize you were mistaken or they are no longer relevant. If you realize you posted in error before someone replies, feel free to use the report button to ask a moderator to remove your post. Once someone has replied, and especially after there have been a couple rounds of back and forth, blanking your posts destroys the discussion and makes it very confusing for everyone else. This is extremely disrespectful (even if unintentionally so). Please break the habit ASAP. Note that repeated post blanking often results in a ban.
"UNIX is simple and coherent" - Dennis Ritchie; "GNU's Not Unix" - Richard Stallman
Offline