Comment on Deep Pause Aims To Give The Steam Deck True Quick Resume Features
thingsiplay@lemmy.ml 2 weeks ago
The way how this works in XBOX Series consoles is, that each game is containerized and isolated from the OS. I’m not entirely sure how this works in detail and always assumed its kind of like a hypervisor style container. Steam doesn’t do that. Steam has its own runtime and some isolation, but games and apps generally could do whatever they want on the system and they are not confined and completely isolated from the OS like a XBOX game is.
I actually wouldn’t mind if one day Steam runs each game (or its an option) in a virtual environment. That would bring compatibility and security to a whole new level.
Fubarberry@sopuli.xyz 2 weeks ago
Just for the security part of it, you can isolate steam games from your file system. Some people prefer flatpak steam on regular linux because you can easily block it’s access to system/user files and only let it access steam files and library directories.
For steamOS, you can create a fake home folder and add a bwrap command to the launch options, which will set system files as read only and only let it have direct access to the fake home folder.
thingsiplay@lemmy.ml 2 weeks ago
Yeah I guess Flatpak could help here. But I always read there can be issues with some games, due to the double isolation from WINE / Proton layer too. I thought about installing Flatpak version instead, but to be honest, it’s not a real issue in my opinion that warrants this (at the moment).
As for the SteamOS fake home folder, interesting method. Is this command active in the Steam game parameters (commandline call)? So that when closing the game then everything is normal. Sounds pretty good to me. For the read only system files, aren’t the system files in SteamOS read only anyway? I’m currently not really concerned with the security in SteamOS / Deck, but its good to know that there are solutions (or helpers) to that.
Fubarberry@sopuli.xyz 2 weeks ago
Yeah SteamOS is read only anyways, so you could skip the systems part of the bwrap command when using it on steamOS.
As for games inside proton, they have full access to your files mounted as a Z: drive iirc. So it’s possible for them to mess with your files, if the dev prepares for it.
thingsiplay@lemmy.ml 2 weeks ago
Ah right, forgot about that Z: drive. I actually just loaded stuff from the Z: drive (Wave Race 64 PC recomp, but using GE Proton) before making that reply, so my brain was shut off I guess.