15
submitted 4 months ago by [email protected] to c/[email protected]

A workflow video using Cosmic Epoch.

120
submitted 4 months ago by [email protected] to c/[email protected]

Aqua Nautilus researchers have identified a security issue that arises from the interaction between Ubuntu’s command-not-found package and the snap package repository. While command-not-found serves as a convenient tool for suggesting installations for uninstalled commands, it can be inadvertently manipulated by attackers through the snap repository, leading to deceptive recommendations of malicious packages.

85
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]

Ubuntu Core Desktop will not be released alongside Ubuntu 24.04 LTS in April, as originally hoped.

Canonical doesn’t go into details about what specific issues need resolving. One imagines, given that the first Ubuntu Core Desktop release was going to be a preview and not a recommended download, it’s a myriad bugs/difficulties — ones not easily sorted.

508
submitted 5 months ago* (last edited 5 months ago) by [email protected] to c/[email protected]

Mozilla Corp., which manages the open-source Firefox browser, announced today that Mitchell Baker is stepping down as CEO to focus on AI and internet safety as chair of the nonprofit foundation. Laura Chambers, a Mozilla board member and entrepreneur with experience at Airbnb, PayPal, and eBay, will step in as interim CEO to run operations until a permanent replacement is found.

https://archive.is/rmMEb

Official Blog Post: A New Chapter for Mozilla: Focused Execution and an Expanded Role in Charting the Internet’s Future

23
submitted 5 months ago by [email protected] to c/[email protected]

Today we have the one of the 2 founders of System76 and current CEO of the company Carl Richell on the show to chat about the history of the company, how we got here and some of the cool stuff they've got in store.

34
submitted 5 months ago by [email protected] to c/[email protected]

With today's repo-release PR #312, Pop!_OS is now building packages for 24.04 (Noble Numbat).

While this doesn't mean a release will happen any time soon, it does mean they are now beginning the process of testing and packaging for 24.04. In particular, they are now building many of the COSMIC DE components for 24.04 with this pull request.

147
Damn Small Linux 2024 (www.damnsmalllinux.org)
submitted 5 months ago by [email protected] to c/[email protected]

The New DSL 2024 has been reborn as a compact Linux distribution tailored for low-spec x86 computers. It packs a lot of applications into a small package. All the applications are chosen for their functionality, small size, and low dependencies. DSL 2024 also has many text-based applications that make it handy to use in a term window or TTY.

The new goal of DSL is to pack as much usable desktop distribution into an image small enough to fit on a single CD, or a hard limit of 700MB. This project is meant to service older computers and have them continue to be useful far into the future. Such a notion sits well with my values. I think of this project as my way of keeping otherwise usable hardware out of landfills.

As with most things in the GNU/Linux community, this project continues to stand on the shoulders of giants. I am just one guy without a CS degree, so for now, this project is based on antiX 23 i386. AntiX is a fantastic distribution that I think shares much of the same spirit as the original DSL project. AntiX shares pedigree with MEPIS and also leans heavily on the geniuses at Debian. So, this project stands on the shoulders of giants. In other words, DSL 2024 is a humble little project!

742
submitted 5 months ago by [email protected] to c/[email protected]

Timothée Besset, a software engineer who works on the Steam client for Valve, took to Mastodon this week to reveal: “Valve is seeing an increasing number of bug reports for issues caused by Canonical’s repackaging of the Steam client through snap”.

“We are not involved with the snap repackaging. It has a lot of issues”, Besset adds, noting that “the best way to install Steam on Debian and derivative operating systems is to […] use the official .deb”.

Those who don’t want to use the official Deb package are instead asked to ‘consider the Flatpak version’ — though like Canonical’s Steam snap the Steam Flatpak is also unofficial, and no directly supported by Valve.

152
submitted 5 months ago by [email protected] to c/[email protected]

Perens says there are several pressing problems that the open source community needs to address.

"First of all, our licenses aren't working anymore," he said. "We've had enough time that businesses have found all of the loopholes and thus we need to do something new. The GPL is not acting the way the GPL should have done when one-third of all paid-for Linux systems are sold with a GPL circumvention. That's RHEL."

Another straw burdening the Open Source camel, Perens writes, "is that Open Source has completely failed to serve the common person. For the most part, if they use us at all they do so through a proprietary software company's systems, like Apple iOS or Google Android, both of which use Open Source for infrastructure but the apps are mostly proprietary. The common person doesn't know about Open Source, they don't know about the freedoms we promote which are increasingly in their interest. Indeed, Open Source is used today to surveil and even oppress them."

Post-Open, as he describes it, is a bit more involved than Open Source. It would define the corporate relationship with developers to ensure companies paid a fair amount for the benefits they receive. It would remain free for individuals and non-profit, and would entail just one license.

Whether it can or not, Perens argues that the GPL isn't enough. "The GPL is designed not as a contract but as a license. What Richard Stallman was thinking was he didn't want to take away anyone's rights. He only wanted to grant rights. So it's not a contract. It's a license. Well, we can't do that anymore. We need enforceable contract terms."

80
submitted 5 months ago by [email protected] to c/[email protected]

This post is in part a response to an aspect of Nate’s post “Does Wayland really break everything?“, but also my reflection on discussing Wayland protocol additions, a unique pleasure that I have been involved with for the past months.

Before I start I want to make a few things clear: The Linux desktop will be moving to Wayland – this is a fact at this point (and has been for a while), sticking to X11 makes no sense for future projects.

By switching to Wayland compositors, we are already forcing a lot of porting work onto toolkit developers and application developers. This is annoying, but just work that has to be done. It becomes frustrating though if Wayland provides toolkits with absolutely no way to reach their goal in any reasonable way.

Many missing bits or altered behavior are just papercuts, but those add up. And if users will have a worse experience, this will translate to more support work, or people not wanting to use the software on the respective platform.

What’s missing?

  1. Window positioning
  2. Window position restoration
  3. Window icons
  4. Limited window abilities requiring specialized protocols
  5. Automated GUI testing / accessibility / automation

I spent probably way too much time looking into how to get applications cross-platform and running on Linux, often talking to vendors (FLOSS and proprietary) as well. Wayland limitations aren’t the biggest issue by far, but they do start to come come up now, especially in the scientific space with Ubuntu having switched to Wayland by default. For application authors there is often no way to address these issues.

42
submitted 6 months ago by [email protected] to c/[email protected]

The Solus team is proud to announce the release of Solus 4.5 Resilience. This release brings updated applications and kernels, refreshed software stacks, a new installer, and a new ISO edition featuring the XFCE desktop environment.

Highlights:

  • Calamares installer
  • Pipewire by default
  • ROCM support for AMD hardware
  • Hardware and kernel enablement

Behind the scenes, we made many improvements in 2023 to our tooling and infrastructure. While end users don’t see most of this directly, it means we are able to maintain and update Solus more efficiently. What end users will see is overall improvement in packages being kept up to date. Packagers and developers will notice many quality of life improvements, which enable our plans to migrate to Serpent tooling in 5.0. One of our future blog posts will summarize these changes.

9
submitted 6 months ago by [email protected] to c/[email protected]
[-] [email protected] 46 points 7 months ago

And that's exactly what happened in your case David. Which is why I'm so happy (also because I fixed the tools from an author I like and already had the books at home :-P):

Really detailed and cool response from the kernel developer. I also found the use of the recent BPF feature to provide a workaround until a proper kernel fix lands really interesting.

[-] [email protected] 52 points 8 months ago

Would to see them publish stable releases via this apt repository as well.

[-] [email protected] 27 points 8 months ago* (last edited 8 months ago)

Not a fan of the XPS line (expensive, not great thermals, and meh port selection) and I have never own one (though I've seen others with them). That said, I have a few of their Latitudes (currently using Latitude 7420) and one Precision and those run Linux really well.

One thing most people don't realize is that Dell does support Linux (ie. Ubuntu) beyond the XPS line and you can buy Latitudes or Precisions with Linux support OOTB. Additionally, Dell ships firmware updates via LVFS on their XPS, Latitude, and Precision lines. The support isn't perfect, but I have been happy with using Dell hardware and Linux for over a decade now.

PS. You can get really good deals via the Dell Outlet (my current laptop is refurbished from there), and you can usually find a number of off-lease or 2nd systems or parts on Ebay (very similar to Thinkpads).

[-] [email protected] 43 points 9 months ago

No word on how long it will get software support though. With everyone else going to 5 or 7 years of updates, Motorola's typical 2 year support cycle is a huge negative.

[-] [email protected] 26 points 9 months ago

FYI, Ubuntu/Pop!_OS have already pushed out updates.

[-] [email protected] 90 points 9 months ago

I wish they had a mastodon account... they have https://mozilla.social, but they don't have an account there... which is bizarre.

They do have an account for Firefox Nightly and Firefox Dev Tools account though.

[-] [email protected] 29 points 10 months ago

I think this is the author being humble. jmmv is a long time NetBSD and FreeBSD contributor (tmpfs, ATF, pkg_comp), has worked as a SRE at Google, and has been a developer on projects such as Bazel (build infrastructure). They probably know a thing or two about performance.

Regarding the overall point of the blog, I agree with jmmv. Big O is a measure of efficiency at scale, not a measure of performance.

As someone who teaches Data Structures and Systems Programming courses, I demonstrate this to students early on by showing them multiple solutions to a problem such as how to detect duplicates in a stream of input. After analyzing the time and space complexities of the different solutions, we run it the programs and measure the time. It turns out that the O(nlogn) version using sorting can beat out the O(n) version due to cache locality and how memory actually works.

Big O is a useful tool, but it doesn't directly translate to performance. Understanding how systems work is a lot more useful and important if you really care about optimization and performance.

[-] [email protected] 33 points 10 months ago

Headline is a bit misleading... This is just Tails updating to the latest LTS kernel, which has the security fix (which many other distributions have done).

This update is a good thing, but the headline made it sound like the Tails project was contributing a fix to the kernel.

Anyway, thanks for sharing.

[-] [email protected] 34 points 11 months ago

Currently self-hosting my own mastodon server and honestly the setup wasn't too bad (using docker)... much more straight-forward than I feared.

My main concerns, which Julia mentions, is that if you have a small instance, you are very much an island as the way federation work is not what you expect. For instance, as Julia notes, if you view a new person's profile on your own instance, it will look empty (as if they haven't posted anything). Lemmy also has this issue if you view a community you have not subscribed to yet for the first time.

Likewise, my "#explore" tab is basically always empty and discovering new tags or people is difficult if you are just looking on your own instance (I basically have to go to Fossotodon or another instance to find new things and then import them into my own instance). I've recently learned that you have to have a third party application basically seed your instance with posts... again, similar to the bot tricks use for seeding Lemmy with communities.

Overall, I think discovery is a big pain point for the fediverse and ActivityPub. It's great that we can have our own instances and control our own small communities, but it seems that we are lacking the ability to really connect across instances and form experiences that really bridge across multiple communities.

[-] [email protected] 37 points 11 months ago

As a parent... I feel this. Well, I remember feeling this. My small beings are a bit larger now and more autonomous :]

Still exhausted though. :|

[-] [email protected] 47 points 11 months ago

I wonder if it is because of the various outages on both instance and the new "dead instance" detection, lemmy.ml has temporarily stopped receiving updates?

The federation code now includes a check for dead instances which is used when sending activities. This helps to reduce the amount of outgoing POST requests, and also reduce server load.

[-] [email protected] 22 points 11 months ago

According to Debian Releases

Debian announces its new stable release on a regular basis. Users can expect 3 years of full support for each release and 2 years of extra LTS support.

So about 5 years, though it is not clear how well this works in practice (how much is actually updated and how well supported).

From the Debian Wiki - LTS:

Companies using Debian who benefit from this project are encouraged to either help directly or contribute financially. The number of properly supported packages depends directly on the level of support that the LTS team receives.

I think this is sort of what the article is pointing towards... long-term support really depends on commercial support, as volunteers are more likely to work on the current or more recent thing than go back and backport or update older things. If corporate funding dries up (which it appears to be doing), then while volunteers will still contribute some to long-term linux distributions, it won't be at the same level it currently is with commercial support.

view more: next ›

pnutzh4x0r

joined 11 months ago