cross-posted from: https://lemmy.world/post/49721314
I just discovered this. Has anyone tried it?
Basically, you install it on your home server and use it to stash your DRM-free games, and then install the client on your PC, Steam Deck, whatever… log in to your server and just use it like your own, selfhosted Steam app. Any PC gamer already running Jellyfin, RomM, or other selfhosted entertainment-related server might be interested in trying it, if you do… please share your experience! I’ll try it myself when I have time and post back here. If you know of any other alternatives, please share!
Self-hosted & open-source. Run Drop entirely on your own hardware. Your library, your data, your rules — all under the AGPLv3.
Rich metadata editing. Customise names, descriptions, and icons with full Markdown and image support.
Automatic imports. Pull cover art and game details straight from IGDB, GiantBomb, and PCGamingWiki.
A built-in store. Let users browse, filter, and collect games through a fully featured store.
Flexible authentication. Use simple accounts or hook into your existing SSO.
Native desktop client. Download, install, and play your whole library through a cross-platform desktop client.
Available for Windows, Mac & Linux (their web page lists a deb, their github repo publishes packages for all major distros and also an Appimage)
Website:
https://droposs.org/
The server part seems to be container-only. That’s a shame if you’re aware of iso27002 or SLSA.
ISO 27002 is a guidance and reference document for the ISO 27001 standard. There is no ISO 27002 certification. Organizations that wish to be ISO 27001 certified only have to follow the requirements listed in the ISO 27001 standard, not ISO 27002.
Regardless, I just reviewed the latest releases (ISO 27001:2022 and ISO 27002:2022). There is no mention of containers or containerization within ISO 27001. Containerization and virtualization are both mentioned within the 27002 reference, as a potential method of isolating confidential data. If anything, the document is recommending the use of containers as a preventive control measure.
Non-sysadmin here, I could only find some generic info on ISO 27002/27001, what does it say about containerized applications?
?? Containers can be ISO 27002 compliant, they don’t have a control against them to my knowledge
I’ve seen similar comments regarding this. I’m a noob selfhoster. I would be very grateful if you could explain the concept.