| DistroWatch Weekly
|DistroWatch Weekly, Issue 253, 19 May 2008
Welcome to this year's 20th issue of DistroWatch Weekly! Fedora 9 came out last week as expected, but the many experimental features and software packages in the distribution seem to detract some would-be users from upgrading their distribution. Do you enjoy testing the latest and greatest the Linux development world has to offer? Then Fedora 9 is for you. Otherwise look elsewhere. In the news section, Ubuntu's Mark Shuttleworth calls on greater release synchronisation between the major Linux vendors, Debian struggles to come to terms with a massive OpenSSL vulnerability, ComputerWold Australia interviews Ian Murdock, the Sun Microsystems' vice president in charge of OpenSolaris, and Gentoo succeeds in reinstating Gentoo Foundation in New Mexico. Also in this issue, an explanation why DistroWatch does not focus more on GPL violations and other legal topics, and an opinion piece on the subject of growing mistrust of users towards Canonical and Ubuntu. Happy reading!
Join us at irc.freenode.net #distrowatch
Technology versus ideology
Some of the topics that have come up in the DistroWatch Weekly discussion forum recently is the issue of violating the GPL by some distributions and the question of boycotting Novell and its products due to the company's role in legitimising the infamous Linux patent claim by Microsoft. Some readers went as far as asking us to remove certain distributions from the DistroWatch list, while others want us take a more active role in exposing Novell's patent deal and its implications on the future of Linux and open source software. Although all these readers have valid points and we welcome the diversity of opinions in the forum, don't expect DistroWatch to become another Groklaw and to cover these topics extensively here.
Why? There are several reasons. Firstly, none of us is a lawyer and none of us intends to become one. While we do agree that a GPL violation is a very serious matter indeed, just because a reader emails us alleging that a project does not comply with its terms and conditions, it doesn't make him right. Until the project is convicted in the court of law, it is innocent. Secondly, there are web sites that are better equipped (in terms of expertise) to deal with GPL violations, patent protection agreements and other lawyer's stuff. Groklaw has been covering these topics for several years, while BoycottNovell.com is another web site that continues to expose the Novell-Microsoft patent protection agreement. For smaller community projects, our friend Béranger will uncover any distribution that does not have a "source" directory on their FTP server. If you feel strongly about licence violations and patent agreements, I suggest you spend more time on the above-mentioned web sites and their forums.
The most important reason, however, is the raison d'être of DistroWatch. Since the beginnings of the web site in 2001, we have always preferred to focus more on technology and less on ideology. I agree with Linus Torvalds in this respect - personally, I care less about what license the operating system or software package is released under and more about what it can do for us, its end users. Does it save us time and money? Does it make us more productive? Does it have useful features? Are the developers accessible? Do they accept input from users? Do they have innovative ideas? Do they take software security seriously? These are the questions that we prefer to answer here at DistroWatch. That's not to say that we condone GPL violations or that we agree with Novell's way of conducting its affairs. But we don't intend to turn DistroWatch into a portal promoting ideological purity of software at the expense of technological achievements of the OSS development communities.
Hate Ubuntu? It's normal!
If you believe online forums and blogs, Ubuntu must be the most hated Linux distribution on earth. Not only is it funded by a millionaire space tourist and aggressive capitalist, it also exists (according to another Linux company's CEO) for the sole purpose of destroying all other distributions that exist on the market. It is reportedly a parasite that takes all the code from Debian without contributing much back and despite all its "software for humanity" talk, it keeps developing proprietary software solutions (e.g. Launchpad). Mark Shuttleworth's recent suggestion to synchronise distribution releases in order to coordinate bug-fixing work was greeted with a suspicion that he merely wants "to benefit from a lot of work that Novell and Red Hat are already doing in the enterprise space." So what makes people dislike and mistrust Ubuntu so much?
I don't think it's specifically Ubuntu that many people have a problem with. Throughout the history of our coverage of distributions here at DistroWatch, it was always the top one that some readers appeared to dislike most. If you've been around in the early parts of this decade, you might remember that Mandrake Linux went through similar pains - it kept getting a high number of reviews, but it also attracted more than its fair share of negativity on user forums. Interestingly, now that it acts from the position of an underdog, it has suddenly become the darling of the distro world, with excellent products and barely any criticism - but also hardly any reviews. It is the same as when a group of unbiased spectators watches a sporting contest between a clear favourite and an unfancied underdog - they will undoubtedly support the latter with all their might! It's the human nature.
The fact that many people dislike the top distribution is not really a problem. The problem is that many of these folks are extremely vocal on the Internet to express their opinions. While no intelligent reader will ever take them seriously, they do give the Linux community a bad name and discourage potential Linux users from joining us. Can anything be done about this? Not much, it seems. Until people start reading their own posts and realise that senseless negativity towards the most popular distribution is counter-productive, we will have to live with the unfortunate fact that the top dog will always be the most hated one too - at least in the more immature and destructive circles on the Internet.
Bleeding-edge Fedora, Shuttleworth on release synchronisation, Debian's OpenSSL vulnerability, interview with Ian Murdock, Gentoo Foundation status update
Fedora 9 was released last week. As many users have discovered since then, the latest version of Red Hat's community distribution is a rather adventurous mix of bleeding-edge packages and experimental features. The development version of X.Org 1.5 does not work well with any of the proprietary NVIDIA graphics drivers, which were promptly left out from the stable Livna.org repositories. Similarly, Firefox 3.0b5 is a beta build, lacking support for many popular add-ons. And there is KDE 4.0.3, another experimental, buggy and feature-lacking desktop package that is forced onto Fedora's KDE users without an alternative. No wonder that many users are unhappy about some of the choices Fedora developers made prior to the release. But as is always the case with this popular distribution, things are bound to improve in the coming weeks. The first major batch of package updates has already entered the testing directory, so it shouldn't be long before they are pushed on to the end users. If you are a Fedora fan, but would prefer your Linux desktop to have fewer experimental software packages, you might want to postpone the upgrade for a month or two, or investigate one of the distributions with a policy of shipping stable and well-tested software only.
Fedora 9 - too bleeding-edge?
(full image size: 601kB, screen resolution: 1280x1024 pixels)
* * * * *
One of the most popular discussion topics of the past week was the long blog post by Mark Shuttleworth, Discussing free software synchronicity. In it, the Ubuntu founder suggested that it could be better for the entire free software community if major distribution releases were synchronised in order to share code, bug-fix patches and other work of common interest: "It's clear that there's a slower rhythm of 'enterprise', 'LTS' or 'major' releases. These are the ones that people end up supporting for years and years. They are also the ones that hardware vendors want to write drivers for, more often than not. And a big problem for them is still 'which version of X, kernel, libC, GCC' etc should we support? If the distributions can articulate, both to upstreams and to the rest of the ecosystem, some clear guidance in that regard then I have every reason to believe people would respond to it appropriates. I've talked with kernel developers who have said they would LOVE to know which kernel version is going to turn into RHEL or an Ubuntu LTS release, and ideally, they would LOVE it if those were the same versions, because it would enable them to plan their own work accordingly. So let's do it!"
* * * * *
Debian GNU/Linux has had a rough week. Thanks to the predictable randomness vulnerability in its OpenSSL package, many Debian and Debian-based servers that allow login using authorised keys were vulnerable to a brute-force attack. Erich Schubert: "Apparently, there are only about 2^15 different keys generated by the SSH versions shipped with Debian for 2 years. Hackers have already generated all these 32,767 different keys, for two key lengths and types." Russel Cocker: "It should also be possible to make up to 2^15 attempts to login to a session remotely if an attacker believes that an authorized key was being used - that would take less than an hour at a rate of 10 attempts per second (which is possible with modern net connections) and could be done in a day if the server was connected to the net by a modem." The reaction of the Debian developer community varied; some went as far as to call for firing the developer responsible for the error, but eventually reasons prevailed over emotions. John Goerzen: "I happen to know that the Debian programmer that made this patch is a very sharp individual. I have worked with him on several occasions and I would say that kicking him out of maintaining OpenSSL would be a quite stupid thing to do. He is, like the rest of us, human. We might find that other people are considerably less perfect than he."
* * * * *
Here is a good, 3-page interview with Ian Murdock, the founder of Debian GNU/Linux and the vice president of Sun Microsystems responsible for the recent launch of OpenSolaris 2008.05: "Q: What do you do at Sun? I see the OpenSolaris project seems to fall onto your plate. A: Initially I was working on OpenSolaris and started Project Indiana, which culminated this week [with] the first version of the OpenSolaris binary distribution. These days I am running the developer and community marketing organization, so I am responsible for marketing Sun's developer tools, the developer programs like Sun Developer Network and Tech Days Events, our open-source projects and communities. [Also, I do marketing for] StarOffice, OpenOffice, Network.com. So basically anything that relates to the developer community in some way, I run the marketing piece of that."
* * * * *
Finally, the Gentoo project has announced that the Gentoo Foundation was officially reinstated last week: "If you're interested in the legal standing of Gentoo, you can relax because in the past week, the State of New Mexico declared that the Gentoo Foundation Inc has returned to good standing and is free to do business. This accomplishment allows other aspects of the foundation's work to proceed again. The foundation takes care of Gentoo's intellectual property (copyrights, trademarks) and money. It ensures that nobody violates our copyrights and trademarks, serves as a place to hold money, and decides where to devote that money."
|Released Last Week
Fedora 9 has been released: "The Fedora Project, a Red Hat sponsored and community-supported open source collaboration, today announced the availability of Fedora 9, the latest version of its open source operating system distribution. Highlights: PackageKit, a cross-distribution package management solution; GNOME 2.22; KDE desktop 4.0.3 featuring upgrades to core components such as the port to Qt 4; NetworkManager improvements; Firefox 3 Beta 5; SELinux confined web browser; OpenJDK6, the release of Sun Java SDK under a free and open source license; X.Org updates; consolidated dictionary support; Bluetooth enhancements; persistent live USB support; Upstart init daemon; ext4 file system support...." See the formal press release and read the comprehensive release notes for more information.
Ark Linux 2008.1
Bernhard Rosenkraenzer has announced the release of Ark Linux 2008.1, an easy-to-use desktop Linux distribution with KDE and a selection of highly up-to-date applications: "The Ark Linux team is pleased to announce the immediate availability of Ark Linux 2008.1, a new version of its easy-to-use, easy-to-learn operating system. Contrary to our original plan for this release, we have decided to make one more release based on KDE 3.x, to provide a stable state-of-art system that fixes all known problems with earlier versions before the big move to KDE 4.x. Major changes from the last release include updates to KDE 3.5.9, kernel 22.214.171.124, glibc 2.8 and wine 1.0-rc1, building everything with GCC 4.3 for improved performance, greatly extended hardware support, and the addition of Gnash, a free player for Flash animations." Here is the brief release announcement.
MEPIS antiX 7.2
MEPIS has announced the release of MEPIS antiX 7.2, a lightweight, community variant of MEPIS Linux designed for older computers: "MEPIS has announced the release of antiX 7.2, 'Vetëvendosje.' Built using the MEPIS Linux 7.0 core including the MEPIS 2.6.22 kernel and utilities, along with selected additions from Debian Lenny, this lightweight operating system is especially appropriate for older hardware and users who like a very fast functional system. Pre-configured window managers Fluxbox and IceWM, as well as Conky and ROX Desktop, come ready to use. The search tool Catfish and the video player gxine have been added. New features based on community contributions include revised customized menus for better usability, a detailed set of FAQs for the new user, original wallpapers, and scripts for easy configuration of user and system files." Read the release announcement and check out the list of installed application for further details.
MEPIS antiX - a light-weight distribution designed to run efficiently on older computers
(full image size: 241kB, screen resolution: 1280x1024 pixels)
rPath Linux 2.0
Michael K. Johnson has announced the release of rPath Linux 2.0, a highly customisable appliance operating system featuring the Conary package management utility: "rPath is pleased to announce that rPath Linux 2 is now available and recommended for general use as an appliance platform. What's new? rPath Linux 2 is the next step in the evolution of the rPath Linux platform. In addition to a technology refresh (new versions of included packages), rPath Linux 2 is better tuned as a platform to show off your work. Just enough OS - rPath Linux 2 is smaller than rPath Linux 1. Boot splash branding - rPath Linux 2 implements a graphical boot process which is easy to customize to look the way you want. Additional security mechanisms: - several additional runtime security measures have been added to most packages. More robust system boot - the syslinux bootloader is now the default bootloader....." Read the complete release announcement for more information.
Ubuntu Muslim Edition 8.04
Ubuntu Muslim Edition (UbuntuME) 8.04, an Ubuntu-based distribution featuring Islamic software, a Quran study tool and a web content filtering utility, has been released: "The Ubuntu Muslim Edition team is proud to announce the final version of UbuntuME 8.04. It includes an installable live desktop CD, a second CD with additional software (OpenOffice.org, Arabic language packs, Quran recitations, etc.), an installable DVD (with more Quran recitations), and a script to convert standard Ubuntu installations to UbuntuME. Highlights: WebStrict (parental control tool) enabled by default; Zekr 0.7.0 (Quran study tool) installed and configured to play Quran recitations; Minbar and Firefox 'Pray Times' add-on installed; Monajat (display Islamic prayers); Thwab (encyclopedia); UbuntuME artworks: usplash, login screen, Islamic wallpapers, theme etc." See the complete release announcement for more information.
Ubuntu Muslim Edition 8.04 provides a variety of Islamic software.
(full image size: 569kB, screen resolution: 1280x1024 pixels)
* * * * *
Development, unannounced and minor bug-fix releases
- Linux Mint 5.0-beta1, the release announcement
- Beyond LFS 6.3-rc1, 6.3-rc2, the release notes
- Elive 1.7.2, the release announcement
- Frugalware Linux 0.9-pre1, the release announcement
- Endian Firewall 2.2-rc1, the release announcement
- Litrix Linux 8.5-rc1, the release announcement
- Sabayon Linux 3.5-beta3, the release announcement
- openSUSE 11.0-beta3, the release announcement
- Parsix GNU/Linux 1.5r0-test2, the release announcement
- PC-BSD 7.0-alpha3
- Clonezilla Live 1.0.11-19
- B2D Linux 20080513
- Big Linux 4-rc
- RIPLinuX 5.4, 5.5
- Berry Linux 0.90
|Upcoming Releases and Announcements
The Fedora project has published a draft release schedule leading towards the distribution's next stable release - Fedora 10. The development will start with the initial alpha release at the end of July and should culminate with a stable version on 28 October 2008. As always with Fedora, these dates are merely estimates and, judging by the project's previous development periods, they are more than likely to change. For more information please see the Fedora 10 Release Schedule page on FedoraProject.org.
* * * * *
Summary of expected upcoming releases
Statistics - note on user agent string in Ubuntu 8.04|
Those of you who follow the DistroWatch web server statistics might have been surprised to see a big drop in the number of visitors using Ubuntu - from over 11% last month to less than 4% this month. Upon closer investigation, it turned out that the reason is simple - the Firefox web browser in the recently released Ubuntu 8.04 "Hardy Heron" does not come with a custom user agent string, causing all visitors using Ubuntu 8.04 to fall into the "unknown OS" category. Hopefully, this "bug" will be updated in due course. In the meantime, Ubuntu still remains the most often-used distribution among the DistroWatch readers with 10.5% of all Linux-using visitors, followed by Debian GNU/Linux (9.2%), openSUSE (5.5%) and Fedora (5.3%).
* * * * *
New distributions added to database
* * * * *
New distributions added to waiting list
- Ubuntu Rescue Mix. Ubuntu Rescue Mix is a GNU/Linux live system which runs from CD or USB flash device. It provides the data recovery specialist with a command-line interface environment equipped with the best free and open source data recovery and forensics tools available.
* * * * *
DistroWatch database summary
And this concludes the latest issue of DistroWatch Weekly. The next instalment will be published on Monday, 26 May 2008.
|• Issue 573 (2014-08-25): SolydXK 201407, VPN gateway with FreeBSD, Ubuntu MATE, Raspbian, trusting binary packages|
|• Issue 572 (2014-08-18): ZFSguru 10.1, Fedora's Flock, beta installer for "Jessie", Ubuntu Core, rolling releases|
|• Issue 571 (2014-08-11): HandyLinux 1.6, LMDE update, default desktop in "Jessie", running out of disk space|
|• Issue 570 (2014-08-04): Neptune 4, Kubuntu's KDE Plasma 5, FreeBSD and UEFI, Linux servers|
|• Issue 569 (2014-07-28): Deepin 2014, Ask Fedora, Gentoo and LibreSSL, encrypted package downloads|
|• Issue 568 (2014-07-21): Antergos 2014.06.24, Mint based on Debian stable, upgrading CentOS, BinaryTides|
|• Issue 567 (2014-07-14): Manjaro 0.8.10, PC-BSD jails, Debian and glibc, Fedora's DNF, Xiki and Opera 24|
|• Issue 566 (2014-07-07): LXLE 14.04, OpenBSD's SimpleDE, openSUSE artwork, home security basics|
|• Issue 565 (2014-06-30): Chakra 2014.05, Fedora on BeagleBone, Matthew Miller interview, e-book readers|
|• Issue 564 (2014-06-23): Antergos 2014.05.26 and Q4OS 0.5.11, Debian LTS and glibc, Fedora DNF|
|• Issue 563 (2014-06-16): Mint 17, CentOS 7 pre-release, Debian MATE, accessing encrypted content|
|• Issue 562 (2014-06-09): GoboLinux 015, Gentoo interview, Fedora leader change, climagic tricks|
|• Issue 561 (2014-06-02): OpenMandriva 2014.0, Debian GNU/Hurd, Lubuntu and LXQt, Final Term, TrueCrypt|
|• Issue 560 (2014-05-26): KaOS 2014.04, Wayland and KDE 5 on Fedora, distros with commercial support, DenyHosts|
|• Issue 559 (2014-05-19): VortexBox 2.3, LTS-only Linux Mint, FreeBSD 11 ambitions, KDE 5 beta|
|• Issue 558 (2014-05-12): RHEL 7 Workstation impressions, LXQt and Lumina, Haiku interview|
|• Issue 557 (2014-05-05): Xubuntu 14.04, Ubuntu 14.10 roadmap, Fedora Workstation, ownCloud|
|• Issue 556 (2014-04-28): Ubuntu 14.04, LibreSSL, Lumina desktop, Deepin interview|
|• Issue 555 (2014-04-21): Robolinux 7.4.2, Ubuntu release day stats, Debian security, Porteus update|
|• Issue 554 (2014-04-14): Review of FreeNAS, OpenSSL bug, Fedora.next, Robolinux Stealth VM, measuring memory|
|• Issue 553 (2014-04-07): Puppy 5.7 "Slacko", end of Ubuntu One, file encryption with GPG|
|• Issue 552 (2014-03-31): Tanglu 1.0, Ubuntu GNOME LTS, SliTaz for ARM|
|• Issue 551 (2014-03-24): Linux Mint "Debian" 201403, call for end to proprietary firmware, LVM|
|• Issue 550 (2014-03-17): Review of NixOS 13.10, Lubuntu seeking feedback, Android-x86 4.4-rc1 impressions|
|• Issue 549 (2014-03-10): ClearOS 6.5 and UCS 3.2, Gentoo interview, Ubuntu app contest, Into the Core|
|• Issue 548 (2014-03-03): Review of Mageia 4, FreeBSD console driver, filtering web content, Pitivi fundraiser|
|• Issue 547 (2014-02-24): Chakra 2014.02, Ubuntu privacy, preventing unwanted remote logins|
|• Issue 546 (2014-02-17): Review of PC-BSD 10.0, Red Flag closure, Ubuntu and systemd, SlackE18, Fedora book review|
|• Issue 545 (2014-02-10): Impressions of FreeBSD 10.0, Debian votes systemd, Ubuntu file manager, server security|
|• Issue 544 (2014-02-03): Netrunner 13.12, openSUSE future, Ubuntu Touch in emulator, running commands in multiple places|
|• Issue 543 (2014-01-27): Review of Korora 20, FreeBSD 10.0, DNF, ZFS rescue CD, Bridge Linux interview|
|• Issue 542 (2014-01-20): QupZilla, Ubuntu with MATE, Arch on Raspberry Pi, best applications|
|• Issue 541 (2014-01-13): openSUSE 13.1 and Zentyal 3.3, CentOS joins Red Hat, Bodhi on Chromebooks|
|• Issue 540 (2014-01-06): SMS 2.0.6 and SME Server 8.0, Hawaii desktop, PHR statistics 2013, more on multi-part archives|
|• Issue 539 (2013-12-23): Centrych 12.04.3, Fedora 20 and its spins, dividing archives across multiple discs|
|• Issue 538 (2013-12-16): Mint 16 review, RHEL and CentOS 7 plans, SteamOS, Windows XP replacement suggestions|
|• Issue 537 (2013-12-09): OpenMandriva 2013.0, Gentoo developer interview, project Neon, Linux Mint and security|
|• Issue 536 (2013-12-02): Impressions of openSUSE 13.1, Ubuntu Touch, FreeBSD 10 delay, troubleshooting OS lock-ups|
|• Issue 535 (2013-11-25): GhostBSD 3.5, Debian and MATE, Ubuntu 14.04 features, security updates|
|• Issue 534 (2013-11-18): Review of OpenBSD 5.4, Fedora on ARM, menu names vs command-line names|
|• Issue 533 (2013-11-11): Point Linux 2.2, Pisi update, Debian and Xfce, Bruno Cornec interview|
|• Issue 532 (2013-11-04): Ubuntu and Kubuntu 13.10, Debian's init, FreeBSD's PKG-NG, Linux on ARM|
|• Issue 531 (2013-10-28): PC-BSD 9.2, openSUSE testing, nftables, upgrade pros and cons|
|• Issue 530 (2013-10-21): Kwheezy 1.2, DPL interview, Zenwalk's future, keeping up with vulnerabilities|
|• Issue 529 (2013-10-14): Ubuntu's Mir, dmesg and photorec tips, Tiny Tiny RSS|
|• Issue 528 (2013-10-07): Semplice 5, Haiku package management, Klaus Knopper interview, making custom distro|
|• Issue 527 (2013-09-30): Tiny Core Linux 5.0, SteamOS, moving operating system to new computer|
|• Issue 526 (2013-09-23): Look at ArchBang 2013.09.01, BSD Now, kernel stats, command-line tips|
|• Issue 525 (2013-09-16): The Official Ubuntu Server Book, FreeBSD 10 and OpenBSD 5.4, Skype alternatives|
|• Issue 524 (2013-09-09): Look at LXLE 12.04.3, Ubuntu's new package format, Secure Boot and dual-booting|
|• Issue 523 (2013-09-02): OpenIndiana 151a8, openSUSE "Evergreen", GNOME and DuckDuckGo, running apps from RAM|
|• Full list of all issues|