Sandstorm requires rewriting of every app to make it compatible with its security architecture. You can look at Cloudron to see what it's missing. Last I checked, Yuno was a close second, but not nearly as polished.
Regardless, that does not diminish its usefulness. I ran it for several years and love the idea of isolated instances one can share with unique links. Learned a lot just hosting it, so thanks again, Kenton - he was on IRC chat when I had a question. True geek through and through.
"Rewriting" is perhaps a slight exaggeration, but packaging apps for Sandstorm usually requires some changes. A lot of time the features we need apps to have are useful for apps to support anyways. Sometimes we are able to get improvements included upstream which make Sandstorm packaging easier. But it is definitely fair to say some apps require some significant work to adapt to Sandstorm, and some don't make sense on Sandstorm at all.
Honestly my strong preference is for apps to be written directly for Sandstorm, though obviously there is a big chicken and egg problem to getting people to build apps to run on Sandstorm instead of Docker-based tools.
