 DistroWatch Weekly |
| DistroWatch Weekly, Issue 221, 24 September 2007 |
|
Welcome to this year's 39th issue of DistroWatch Weekly! GNOME 2.20 is finally here and we can soon look forward to a range of releases from all the major distributions incorporating the new version into their products; Mandriva Linux 2008 is expected later this week, but openSUSE 10.3 won't be far behind. In other news: Fedora introduces a new desktop theme called Nodoka, Mandriva simplifies its product range before the upcoming release of version 2008, and Ian Murdock reveals some details about Project Indiana, Sun Microsystems' new Solaris-based desktop distribution. The featured story in this week's issue looks at the security and bug fix infrastructure in today's leading distributions, while those readers who were curious about DistroWatch's recent migration from FreeBSD to Debian GNU/Linux will find the answer in the "Site News" section. Happy reading!
Content:
 Listen to the Podcast edition of this week's DistroWatch Weekly in ogg (6.8MB) and mp3 (6.5MB) formats (many thanks to Jim Putman)
 Join us at irc.freenode.net #distrowatch
|
| Editorial |
Security and bug fix infrastructures in distributions
In the world of open source operating systems, what exactly is it that differentiates the "big boys" from the "also runs"? Why is one distribution considered "major" or "mainstream", while another keeps being looked at as just somebody's "hobby project", irrespective of how many satisfied users it has? While there are many different criteria one could pick to demonstrate the differences between the two groups, there are two features that I believe are important factors that shape the user's perception about any distribution: its security and bug tracking infrastructure.
Security updates and security mailing list. Critical bugs, buffer overflows and other potential exploits are part of any software developed today and open source is no exception. Serious problems are regularly found in the Linux and BSD kernels, as well as many widely used Internet applications. As such, many distributions have created dedicated security teams responsible for promptly fixing all newly discovered security problems and for issuing security advisories. Yet, it's surprising to see how many of today's Linux distributions pay little attention to security and merrily provide their users with an operating system that doesn't get patched in case a vulnerability is found in one of its components! Any distribution worth its salt should have a dedicated, read-only mailing list that sends security notifications to the user's inbox (no, a desktop update notifier is NOT enough, since some users might not run X window on their computers or they might run it with the notifier turned off).
Bug trackers. Open source software has changed the way users interact with software developers. Many projects nowadays maintain a bug-tracking facility (Mozilla's Bugzilla is the best-known one, but there are others) that not only allows users to report problems with the software, it also enables them to see whether any action has been taken to resolve the issue and even provides a way to discuss the bug with the developers in more detail. They also show that the developers care about their users' problems, and are confident enough to maintain a facility that lists bugs in their software. Granted, bug trackers aren't the only way of reporting software issues and some developers prefer to use mailing lists, forums or IRC channels to communicate with their users; nevertheless, they have proven themselves as the most sophisticated method for tracking and fixing bugs in open source software.
So without further ado, let's take a look at the list of the top 25 distributions (as per DistroWatch's Page Hit Ranking) and see which ones provide their users with dedicated security mailing lists and a public bug tracker.
Interesting reading. Some readers might argue that security updates and bug trackers are not really important in desktop distributions, where risks are comparatively low. Nevertheless, their existence (or lack of it) provides an interesting indicator about how complete and balanced a distribution is. Providing security fixes is a tedious, thankless task, much less glamorous than releasing new CD/DVD images with all the latest applications and countless new features. But this is exactly what separates the serious distro contenders from hobby projects. Finding time away from all the exciting work to provide their users with boring, but necessary work isn't always easy, but that shouldn't be an excuse for not doing it, particularly if the project cares about its users and if it wants to be taken seriously.
|
| Miscellaneous News |
GNOME 2.20, Mandriva 2008 editions, Fedora's new Nodoka theme, Project Indiana
 The biggest event on the open source software calendar last week was undoubtedly the release of GNOME 2.20, a popular desktop environment. What's new in the latest release: "Improved support for right-to-left languages; desktop search integrated into the file chooser dialog; convenient new features in the Evolution email and calendar client; enhanced browsing of image collections; simplified system preferences; efficient power management and incredibly accurate laptop battery monitoring. Developers receive more help with application development thanks to a new version of the GTK+ toolkit, improved tools, and a great new documentation web site." As has become tradition, Foresight Linux was the first distribution to integrate the latest GNOME into their product; released almost simultaneously with GNOME 2.20 last week was Foresight Linux 1.4 (an installation DVD based on rPath Linux) and GNOME 2.20 live CD.
Foresight Linux 1.4 - the first distribution shipping with GNOME 2.20 and OpenOffice.org 2.3
(full image size: 375kB, screen resolution: 1280x1024 pixels)
* * * * *
 Mandriva has published an official press release announcing the upcoming release of Mandriva Linux 2008. It will come in three editions: a commercial Mandriva Powerpack (available as a box set or download from Mandriva Store), freely downloadable Mandriva One live CDs (with proprietary device drivers) and freely downloadable Mandriva Free (a traditional installation CD set or DVD without any proprietary components): "After the 2007 Spring edition, Mandriva Linux 2008 is the next major new release of Mandriva to take advantage of the faster 6-month development cycle. With this new release, Mandriva is upgrading its commercial offer around a single unified product: Mandriva Linux Powerpack. It integrates a unique set of commercial packages and services to offer a whole Linux solution. The best-seller Powerpack is the commercial edition of Mandriva Linux and the recommended extension for users of the community version." The press release does not include expected release dates, but according to the distribution's development Wiki page, Mandriva Linux 2008 is scheduled for release in just a few days - on Thursday, 27 September.
* * * * *
 The Fedora project has launched what they call a series of feature previews as part of the build up to the Fedora 8 release. The first among them is an introduction to "Nodoka", Fedora's new default theme: "We managed to create something that has a sense of 3D, it uses soft gradients, the look is pleasant, not too much shiny or glossy - that's what I intended it to be and I am glad that we managed to make it so. The Metacity theme is however another tale. It's simple and fast, but it seems that I went too far with the simplicity. There are still some hiccups that need to be fixed. I have already in mind some improvements to it and I hope I will have time to incorporate the changes before Fedora 8 is released. And yes, it seems to work well both with Infinity and Mist, though I personally think that the best icon set for the Nodoka theme is Echo - it makes it look warmer."
* * * * *
 Ever since Ian Murdock (the founder of Debian GNU/Linux) has taken a project management position at Sun Microsystems, we keep hearing about a new Solaris-based desktop distribution that is referred to as Project Indiana. But details have been sketchy - until now. Last week, Phoronix attended a presentation given by Ian Murdock with the goal of introducing Project Indiana to the public: "Among the advantages of Project Indiana is that it will use Sun's ZFS as the default file system, and Project Indiana will be taking full advantage of its abilities to create snapshots and perform rollbacks if something with the system's software goes wrong. With Sun's past work with the GNOME project, GNOME will be the desktop environment in Project Indiana, said Ian Murdock. He had gone on to reiterate several other points such as the single CD installation with network-based package management (likely powered by APT). Project Indiana will also be easier to acquire, as it will be available through mirrors that do not need registration and will be distributed via BitTorrent. Another goal of Ian's is also to modernize the command line."
|
| Released Last Week |
KateOS 3.6
KateOS 3.6 has been released: "The final version of KateOS 3.6 is now available. This new version contains hundreds of updated packages, lots of bugfixes, and many improved solutions. The most important new features in KateOS 3.6 are: software-driven system hibernation; a GUI installer (included in the LIVE edition); a new version of update-notifier; new start-up scripts which are accessible via the service command; better support for HP printers (via hplip); internationalization support in the whole system (using gettext); new French translation of the CORE installer and many system components; a new GUI network configuration tool; simplified CORE installer; several new packages such as Audacious and Pidgin; initrd has been replaced with initramfs." Visit the project's home page to read the full release announcement.
KateOS 3.6 - the live CD now comes with a graphical installer
(full image size: 638kB, screen resolution: 1280x1024 pixels)
Foresight Linux 1.4
Ken VanDine has announced the release of Foresight Linux 1.4, the first distribution to feature the latest GNOME 2.20: "The Foresight Linux Project is proud to announce the release of Foresight Linux 1.4. Foresight Linux is a Linux distribution for your desktop that features a rolling release schedule that always keeps your desktop up to date; a revolutionary package manager, Conary; the latest GNOME desktop environment and an innovative set of excellent, up to date packages. Foresight is proud to be the first distribution to ship with GNOME 2.20. Foresight Linux 1.4 features the latest GNOME mentioned above, including updates to Evolution email and calendar, Tomboy notes, Power Manager, Epiphany web browser, the GNOME Image Viewer, Eye of GNOME and more." Read the release announcement and release notes for further information and screenshots.
Kaella 3.2
Kaella is a French Linux distribution based on KNOPPIX and localised into French. Version 3.2 is the first release that comes in the form of a live DVD, with 2 GB of supplementary applications (e.g. Amarok, Blender, Dia, Emacs, Evolution, Gramps, Inkscape, QCad, QEMU, Scribus, XMMS, games, etc.) and an integration of three free software projects - Dogmazic, GeeXboX and Compile Tux & Astux. Among other interesting software, Kaella 3.2 ships with OpenOffice.org 2.0.4, IceWeasel 2.0.0.6, IceDove 1.5.0.12, GCompris 8.3.2 and Tuxpaint 0.9.17. Apart from these new features, the distribution also includes the usual customisations, such as support for popular USB modems used throughout France and a number of Linux user guides and tutorials. Please read the complete release notes (in French) for further details.
BOSS GNU/Linux 2.0
The BOSS development team has announced the release of BOSS GNU/Linux 2.0, a Debian-based distribution with support for Hindi and Tamil: "BOSS version 2.0 successfully released. Finally our Indian GNU/Linux distribution is released on 17th September 2007 in the Connect 2007 program. Features: GNOME 2.18; Orca screen reader; Espeak; gDesktlets; Beryl 2.0 - an excellent 3D desktop; 2.6.21 kernel; on-screen keyboard support; OpenOffice.org 2.2 with support for two Indian languages (Hindi and Tamil), with plans to move to other languages as well; a pleasing desktop background and icons; enhanced BOSS presentation tool; complete Tamil and Hindi desktops; update manager for updating your BOSS to the latest packages." Read the release announcement and release notes for more details.
X/OS Linux 5.0
X/OS Linux 5.0, a distribution rebuilt from source RPM packages for Red Hat Enterprise Linux (RHEL) 5, has been released: "X/OS Linux 5.0 is now available for public download." From the release notes: "The X/OS Linux 5.0 package set for i386 systems is identical to the combined package sets of RHEL 5.0 Client and RHEL 5.0 Server, with the following exceptions: all updates released for RHEL5 up to August 7, 2007, have been included, this also includes additional packages, as well as the replacement of GAIM by Pidgin; the yum package has been updated to version 3.2.1, the version included with the RHEL 5.1 beta release, as the yum version (3.0.1) that was included with RHEL 5.0 contains serious problems; an installclass has been added to Anaconda, supporting various alternatives for installing X/OS Linux 5...." Read the release announcement and release notes for more information.
dyne:bolic 2.5
Denis "Jaromil" Rojo has announced the release of dyne:bolic 2.5, a multimedia live CD designed for media activists, artists and creative individuals: "After 6 months of development, this release stabilizes and updates the core system, also providing recent versions of most used software and some important new functionality. New features: writable NTFS support (ntfs-3g) now lets you save data and nest also on Windows NT formatted partitions, Firewire audio cards are now supported by Jack (Freebob); nesting capability is made even easier to operate as nests can be mounted without reboot; new software: Ekiga, Guarddog and Wireshark plus all the gtkpython and wxPython libraries; text console usage is enhanced by a fully functional mail setup with Mutt, msmtp, Fetchmail, Procmail, and SpamAssassin; graphical desktop repair button and a mount utility for SSH accounts...." Read the full release notes for more details.
Sabayon Linux 3.4 "miniEdition"
Fabio Erculiani has announced the release of Sabayon Linux 3.4 "miniEdition", a single-CD variant of the Gentoo-based desktop distribution: "We are happy to announce Sabayon Linux 3.4 'miniEdition'. Sabayon Linux x86/x86_64 'miniEdition' is a CD release of the latest Sabayon Linux x86/x86-64 DVD. The creation of this special edition, has been made with an automatic script that shrinks down the whole chroot jail by removing every duplicated, useless or server-oriented package. The multimedia features of this special edition are kept intact. Distribution updates: improved OpenGL configuration reliability; NVIDIA driver updated to 100.14.19; CompizFusion stability fixes (will be soon enabled by default on supported hardware); boot time 15% faster." Read the brief release notes for more information.
AliXe 0.11
Sylvie Migneault has announced the final release of AliXe 0.11, a SLAX-based live CD featuring the Xfce desktop: "It is my pleasure to announce that the CD of AliXe 0.11 is now finalized. AliXe v0.11 is a bilingual (English and French) live CD based on SLAX, including the Xfce window manager with GTK+ applications. In addition to the correction of bugs and package updates, the CD has had a major transformation and most of the modules have been re-created. This work had two goals: to facilitate the task of remastering the live CD and to write a comprehensive HOWTO. Changes: various problems with localization were corrected; xine, Totem and Audacious were removed, while MPlayer, Gnome MPlayer and Beep Media Player continue to be provided for audio and video playback; MPlayer audio bug fixed; upgraded Firefox 2.0.0.7, Pidgin 2.2.0 and Parted 1.8.8; added Dia 0.96.1." Read more in this brief changelog.
* * * * *
Development, unannounced and minor bug-fix releases
|
| Upcoming Releases and Announcements |
|
Summary of expected upcoming releases
|
| DistroWatch.com News |
From FreeBSD to Debian GNU/Linux
After last week's DDoS attack on DistroWatch.com and the subsequent server operating system switch from FreeBSD to Debian GNU/Linux, many readers have asked about the reasons for this move. Did I lose my trust in FreeBSD? Or were there other reasons that prompted the move? With such questions being asked both in the DistroWatch forums and in emails filling my inbox during the week, I thought it would be best to answer them here, rather than replying individually to each person who wanted an explanation.
First thing first: no, I have no problem with FreeBSD as an operating system. Ever since I started running DistroWatch on a dedicated server, I always used Debian - until November 2004, that is, when I switched to FreeBSD. The reason? I needed some features in PHP 5 which was not yet officially supported in the then stable version of Debian. With Debian GNU/Linux 3.1 "sarge" in perpetual delay, I decided to switch to what many consider to be one of the best server operating systems on the market - FreeBSD.
Then last week came the devastating DDoS attack. When the technician responsible for the server finally disconnected the server from all outside traffic, he found that no services were responding on the server. His solution was to bring in a new hard disk, install a fresh copy of FreeBSD and mount the existing hard disks to investigate the problem. That's exactly what he did, so finally I was able to connect to the server and start getting the web site back online.
And there I was - looking at a very basic FreeBSD installation. With my first priority being the need to get DistroWatch up and running as soon as possible, I was about to start configuring the system, installing the necessary ports, and restoring the essential services. Normally, I'd consider this a fairly enjoyable task, were it not for the fact that it was getting late and I was feeling increasingly tired. "Ah, if only it were Debian and not FreeBSD," I told myself, "everything would be up and running in a snap!" Then, rather than spending a better part of the night setting up a fresh FreeBSD installation, I decided to ask the technician to install Debian instead.
And that's the simple explanation for the switch: setting up a Debian system is just so much faster than setting up a FreeBSD system. Even if one would choose to run a binary FreeBSD (as opposed to taking advantage of FreeBSD's famous ports), it would still take longer than with Debian. An example: let's install the NTP server on both operating systems. In Debian, issuing "apt-get install ntp" not only downloads and installs the application, it also starts the NTP daemon, synchronises the system clock with one of the servers from the pre-configured configuration file, sets up logging, and sets up NTP to start at boot. Contrast that with FreeBSD where, after compiling NTP, you would have to do all these tasks manually - not a difficult job, but still considerably more time consuming than the same on Debian. This is just one example - there are many others.
At the end of the day, the decision between running a Debian server and a FreeBSD server is fairly simple: if you want to run the latest software and have the time to baby-sit your server (remember that on FreeBSD, most security updates require compiling the kernel or the userland or both), then choose FreeBSD. But if you want to set up your server and then pretty much forget about it, then Debian is a better choice. With not having any special reason for wanting to run the latest and greatest, Debian seemed to me like an ideal solution.
One final observation that might interest some readers: the daily Page Hit Ranking updates is generated from log files by a bash script, which is launched by cron every day just after midnight GMT (it counts the clicks for the previous day, then performs all the necessary additions and divisions on the data before generating the HTML tables). On FreeBSD 6.2, the script normally completed its run in about 40 minutes. On Debian 4.0, the same now takes about 130 minutes. You draw your own conclusions!
* * * * *
New distributions added to database
* * * * *
New distributions added to waiting list
- 7linux. 7linux is small, fast distribution built from scratch. Its main characteristic are: use of 7z compression, pkgtools from Slackware, Enlightenment and KDE desktops.
- Greenie Linux. Greenie Linux is a Slovak distribution based on Ubuntu. It is intended as easy-to-use operating system localised into Slovak and Czech.
* * * * *
DistroWatch database summary
And this concludes the latest issue of DistroWatch Weekly. The next instalment will be published on Monday, 1 October 2007.
Ladislav Bodnar
|
|
|
| Archives |
| • Issue 508 (2013-05-20): Review of Debian 7.0, interviews with Clement Lefebvre and Gaël Duval, scripting with xdotool |
| • Issue 507 (2013-05-13): Impressions of Calculate Linux, 13.4, Ubuntu's portable packages, mintDrivers |
| • Issue 506 (2013-05-06): Ubuntu and Kubuntu 13.04, Debian "Wheezy", Slackware on systemd, distros for Raspberry Pi |
| • Issue 505 (2013-04-29): First look at PCLinuxOS 2013.04, Saucy Salamander, Remastersys and System Imager, Linux containers |
| • Issue 504 (2013-04-22): Look at Bodhi 2.3.0, Ubuntu 13.04 features, building OpenBSD ports, opening large files |
| • Issue 503 (2013-04-15): CentOS versus Scientific Linux, PCLinuxOS 64, Lucas Nussbaum, ZFS/Btrfs versus ext4 |
| • Issue 502 (2013-04-08): Look at Mint 201303 "Debian", Ubuntu versus openSUSE, comparing ZFS and Btrfs file systems |
| • Issue 501 (2013-04-01): KANOTIX 2013 and GhostBSD 3.0, openSUSE Rescue-CD, Haiku package management, computer forensics |
| • Issue 500 (2013-03-25): Look at openSUSE 12.3, Ubuntu release changes, Debian backports, growing divide |
| • Issue 499 (2013-03-18): MINIX 3.2.1, openSUSE 12.3 on desktop, Ubuntu GNOME and UbuntuKylin, distros for musicians, KolibriOS |
| • Issue 498 (2013-03-11): Sabayon Linux 11, Ubuntu's Mir, Linux malware |
| • Issue 497 (2013-03-04): Rebellin Linux 1.00 "Adrenaline", rolling-release Ubuntu, Arch vs spin-offs, justification and diversity |
| • Issue 496 (2013-02-25): Review of Chakra 2013.02, The Book of GIMP, Ubuntu and privacy, FreeNAS vs NAS4Free |
| • Issue 495 (2013-02-18): SparkyLinux 2.1 "Ultra", Fedora 19 schedule, Xubuntu on DVD, cloud privacy |
| • Issue 494 (2013-02-11): FreeBSD 9.1, web server stats, Anaconda, rolling-release PC-BSD, fixing broken packages in Arch |
| • Issue 493 (2013-02-04): UberStudent 2.0, OmniBoot 1.0, MariaDB, Enlightenment 0.17 |
| • Issue 492 (2013-01-28): Fedora 18 review, systemd, Kali Linux, Ubuntu Unleashed |
| • Issue 491 (2013-01-21): Fuduntu 2013.1, Fedora 18 desktop choices, Consort, accessing encrypted drive |
| • Issue 490 (2013-01-14): Look at Manjaro Linux 0.8.3, openSUSE on Chromebook, Able2Extract 8.0 |
| • Issue 489 (2013-01-07): PC-BSD 9.1, Arch spin-offs, rolling-releases, year-end PHR stats, removing applications |
| • Issue 488 (2012-12-24): Reviews of Unity and Puppy Linux 5.4 "Slacko", FreeBSD 10 |
| • Issue 487 (2012-12-17): Cinnarch 2012.11.22, OpenMandriva, Fedora Magazine, Tumbleweed, OpenJDK vs Oracle Java |
| • Issue 486 (2012-12-10): Linux Mint 14 review, Ubuntu "spyware" controversy, Haiku overview, troubleshooting Linux servers |
| • Issue 485 (2012-12-03): Kwort Linux 3.5, Mint bug-fix update, Fedora's new Anaconda, defining a distribution |
| • Issue 484 (2012-11-26): Look at SMS 2.0.1, Fedora pre-beta report, Illumos, Secure Boot update |
| • Issue 483 (2012-11-19): DragonFly BSD 3.2.1 and Xubuntu 12.10, Gentoo and udev, switching file systems |
| • Issue 482 (2012-11-12): Review of Zenwalk 7.2, Clang in FreeBSD, Omniboot 0.5, priorities on external drives |
| • Issue 481 (2012-11-05): Look at Tails 0.13, EFF on Ubuntu and privacy, Debian installer changes, ext4 data corruption bug |
| • Issue 480 (2012-10-29): Review of Ubuntu 12.10, Wayland 1.0, FreeBSD's pkgng |
| • Issue 479 (2012-10-22): Look at Zentyal 3.0, Debian bug reporting, initiating a halt |
| • Issue 478 (2012-10-15): Slackware 14.0 review, Ubuntu donations, connecting to multiple machines behind router |
| • Issue 477 (2012-10-08): Review of ODROID-X, OpenBSD's anti-Linux song, interview with Vincent Untz, Linux as operating system |
| • Issue 476 (2012-10-01): Review of openSUSE 12.2, Slackware 14.0 features, accessing home computer with SSH |
| • Issue 475 (2012-09-24): Look at PCLinuxOS 2012.08, Ubuntu and Amazon, SolusOS and PiSi, ownCloud |
| • Issue 474 (2012-09-17): Bodhi Linux 2.0.1, OpenIndiana interview, Frugalware history, update notifications |
| • Issue 473 (2012-09-10): The Linux Command Line, Slackware documentation project, Debian's new primary arch, Goobuntu |
| • Issue 472 (2012-09-03): Kororaa Linux 17, OpenIndiana and SchilliX, Ubuntu GNOME remix, home server tip |
| • Issue 471 (2012-08-27): Linux Mint 13 "KDE", Ubuntu 12.10 features, Slax update, folder quotas |
| • Issue 470 (2012-08-20): Liberté Linux 2012.2, Arch and systemd, NetBSD's sysbuild and sysupgrade, 19 years of Debian |
| • Issue 469 (2012-08-13): Peppermint OS Three, SUSE on Secure Boot, GNOME OS, moving email to Linux |
| • Issue 468 (2012-08-06): First look at CentOS 6.3, Debian installer beta, Fedora and MATE, Libtrash |
| • Issue 467 (2012-07-30): Ubuntu Made Easy, Debian "Jessie", OpenBSD on Secure Boot, Rawhide troubles |
| • Issue 466 (2012-07-23): Fuduntu 2012.3, Linux in PC-BSD jails, secure boot on older computers |
| • Issue 465 (2012-07-16): Netrunner 4.2, Mandriva's two codebases, firewalls and window frames |
| • Issue 464 (2012-07-09): Zorin OS 6, FSF's views on secure boot, Virtual PDF Printer |
| • Issue 463 (2012-07-02): TurnKey Linux 11.3, Red Hat and Btrfs, Sabayon's MATE spin, ZFS on Linux |
| • Issue 462 (2012-06-25): Sabayon 9, "Wheezy" freeze, Zorin OS overview, Vinux interview, mounting network shares |
| • Issue 461 (2012-06-18): Linux Mint 13, openSUSE 12. delays, Debian Multimedia, Mageia 3 roadmap |
| • Issue 460 (2012-06-11): Look at Fedora 17, PC-BSD and Slackware interviews, Openfiler and FuguIta |
| • Issue 459 (2012-06-04): Impressions of Mageia 2, Fedora updates, Debian or Raspberry Pie, improving software performance |
| • Issue 458 (2012-05-28): Impressions of SolusOS 1, Linux kernel 3.4, encrypting home folder |
| • Issue 457 (2012-05-21): Linux accessibility, Fedora 17 overview, MultiSystem, launching tasks |
| • Issue 456 (2012-05-14): Look at OpenBSD 5.1, Debian Installer 7.0 alpha, UDS news round-up |
| • Issue 455 (2012-05-07): Review of Ubuntu 12.04, "Quantal Quetzal" plans, Debian infographic |
| • Full list of all issues |
|
