Based on Arch Linux with all updates on 07.09.21 (10:00 UTC).
pkg_list.txt contains a complete list of packages (and their versions) included in this release.
freetype2 has been manually downgraded to 2.10.4 to workaround this Steam issue. Steam Beta already has a fix for this, but since not everyone uses the beta client, i decided to temporarily downgrade freetype2.
SHA256:
6f2d7273c780cddae900d653d1fffc684e1aea3d4597ee3d0e6b7695153561b3 conty_dwarfs.sh
f068a41786d26a39bcf24e049a3d832ca1ad0de825dcec8628c4ecae5f84a3b3 conty_lite.sh
7223bade7821505858f99309656bebd4b3083dab780b9b24dbd8cddec2db5245 conty.sh
Changelog:
- Added sandbox levels and X11 isolation. The sandbox strictness can now be controlled via the SANDBOX_LEVEL environment variable. There are 3 available levels, the default is 1. Keep in mind that the sandbox itself is disabled by default and can be enabled with the SANDBOX environment variable.
- Level 1 isolates all user files.
- Level 2 isolates all user files, disables dbus and hides all running processes.
- Level 3 does the same as the level 2, but additionally disables network access and isolates X11 server with Xephyr.
- Added BIND_RO environment variable, which is the same as BIND, but mounts files and directories as read-only instead of read-write.
Usage:
chmod +x conty.sh
./conty.sh command command_arguments
The lite version (conty_lite.sh) includes everything from the regular version (conty.sh), except for: gcc, mingw-w64-gcc, firefox, meson, cmake and jre-openjdk. If you don't plan to use any of these programs, i recommend to use the lite version.
conty_dwarfs.sh is the same as conty.sh but compressed with dwarfs instead of squashfs, thus it takes less disk space. Mounting dwarfs-compressed images is relatively slow on HDDs (takes about 10 seconds), so i only recommend to use this version if you don't mind to wait a few seconds on Conty launch or if you are using an SSD.
zsync files are for zsync2 program. If you have any of the previous releases of Conty downloaded, you can use zsync2 to reduce data needed for downloading a new release. This may be useful if you have slow internet connection or internet data cap. Read zsync manual for more information.