| DistroWatch Weekly
|DistroWatch Weekly, Issue 30, 5 January 2004
- Hardened Linux From Scratch
- JAMD and Xdefine Linux
- Most visited pages in 2003
- Released last week
- Upcoming releases: Knoppix 3.4
- New additions: Tilix, Shabdix, SCI.Linux, Overclockix, Tao, ZENIX, Polar Bear, Slix, WOMP!
- New on the waiting list: Litrux, Lineox, Rocks Cluster, Vermillion, Routix, Kanotix, LIVUX, Dave/Dina, Bluewall
- Reader feedback: TurboUpdate
Welcome to this year's first edition of DistroWatch Weekly. If pages seem to load slower than usual, that's because the Knoppix review published here yesterday proved extremely popular with the Slashdot crowd for much of today. Things should be slowly coming back to normal now, so let's get on with the programme.
Hardened Linux From Scratch
The 4th quarter of 2003 brought us a surprisingly high number of successful attacks on servers hosting high-profile Linux projects. Some of the compromised machines included servers running the Debian project, GNU, MPlayer, Savannah and others, and there was even an attempt to sneak a Trojan Horse into the Linux kernel development tree. While none of these attacks caused any serious damage to the affected projects, they have succeeded in making parts of the projects' web sites inaccessible for a prolonged period of time, causing annoyance to many of us. They have also highlighted the need to take security issues more seriously than ever.
One of the new projects aiming to educate Linux users about various methods of preventing common exploits is the newly launched Hardened Linux From Scratch (HLFS) project. This is part of the growing family of Linux From Scratch (LFS) projects, which includes the original LFS, as well as Automated Linux From Scratch (ALFS), Beyond Linux From Scratch (BLFS) and other subprojects. What is HLFS all about? Let the developers explain:
"Over the past few weeks, a discussion about a security-oriented LFS book has dominated the lfs-security list. Some clear ideas about the form and content of this initiative are crystalizing, and it was decided to give the initiators of this project a decent platform to work on. So far, a mailinglist (hlfs-dev)
has been created for Hardened Linux From Scratch, as it was dubbed. HLFS will become a book that provides the reader with a fundamental understanding of security that can be used as a base for further research. Part of the process in teaching this will be to build a hardened system step-by-step."
The security of Linux servers is something that, quite frankly, most of us would rather not deal with: an unexciting world of buffer overflows, hardened kernel patches and mandatory access control policies. Yet, that's the price to pay for the convenience of the World Wide Web of interconnected computers. And if the other LFS projects are anything to go by, Hardened Linux From Scratch will not only provide great educational value for absolutely free, it will do so in a hands-on and fun way for the benefit of all of us. Interested? Then join the mailing list and start learning.
JAMD and Xdefine Linux
Some of you might recall the good words we have put in for the JAMD Linux project, based on positive reviews and user feedback on the distribution's forums. Unfortunately, the project's future has become somewhat uncertain, due to the continued absence of the project's developer Jim Lucha from the forums, as well as a lack of any development roadmap. Upon some investigation, it turned out that Jim's name had resurfaced somewhere else, on a web site belonging to a new commercial Linux company called Xdefine. This is from the Xdefine's about pages:
"James Lucha, Chief Technical Officer, Xdefine, Inc. Graduated from University of California, Mr. Lucha who has extensive knowledge of Linux operating system joined Xdefine to take over the whole development of Xdefine Linux 2003. His feeling was that the customer has to always get 100% satisfaction and know they got a fair deal. Mr. Lucha met Mr. Sultani online, after talking for a while, he decided to join Xdefine as Chief Technical Officer."
The above note has since been removed from Xdefine's web site, but you can find a discussion about it on the JAMD Linux forums.
This brings up a question: do Free Software developers have some kind of responsibility towards the users of their products? Should they inform us about the project's status and any major changes to it? After all, many of them make no money from it and we are not paying customers, so why bother? On the other hand, there are human considerations - honesty and openness, especially in what we often perceive as our more honest and open world of Linux development, free of commercial considerations. Or is it all a lie? If a successful developer of Free Software is suddenly offered a regular paycheck to continue his or her work for a commercial company, can we really complain that we, the non-paying users, are suddenly abandoned?
If you are using one of the smaller distributions, how do you feel about it? Do you have a backup plan in case the developer gives up? Do you feel comfortable using one of the "one-man" distributions? Please discuss below.
Most visited pages in 2003
With the year 2003 behind us, let's take a quick look at the ranking of 20 most visited distribution-specific pages on this site and compare it to year 2002. The figures represent HPD or "Hits Per Day". Mandrake and Red Hat have retained their top two spots for the second year in a row, while some might be surprised by a rapid climb of Knoppix to the third position. You can view the 100 most visited pages of 2003 on the right column of the main index page.
|Released Last Week
LRs GNU/Linux Creme-13
A new version, Creme-13, of the recently revived LRs GNU/Linux distribution is out: "Merry Christmas and happy LRs with our brand new release Creme-13. Includes LFS-5.0, Linux-2.4.23, KDE-3.1.4 and much more. Some people don't need a full-blown LRs, so we will release three more ISO images in the next few days: LRs_with_X_and X-stuff (without KDE); LRs_Only_Console_tools; LRs_Pure_LFS." Visit the distribution's web site to learn more.
The long awaited CollegeLinux 2.5 has been released: "We are glad to announce the long awaited release of CollegeLinux 2.5 'Obi Wan'. Once again we did a release taking the necessary 6 months to bring something new, exclusive and never seen within the Linux community. Whilst there is a growing trend to release as often as possible, we have chosen to implement some important and innovative features and release only when there is something worth your time and bandwidth." Among the more interesting new features are a server robot which automatically installs and configures Apache, PHP, MySQL, SQLite, Webmin and PHPMyAdmin, and a slapt-get based auto-update engine integrated into Konqueror. See the full announcement for details. CollegeLinux is a Slackware-compatible Linux distribution designed for desktop and development workstations with many user-friendly enhancements.
Gibraltar Firewall 1.1
A new version of the Debian-based Gibraltar Firewall has been released. From the changelog: "Version 1.1, published 2003-12-23. This is the Christmas release, with only a few new features, but being a lot more resistant against buffer overflows and thus more secure due to the use of the PAX kernel patch. Updated the kernel to 2.4.23, which fixed the recently discovered brk() vulnerability. In addition to the update, the context patch (for virtual servers), the PAX patch and support for the zorp transparent proxy suite were added. Minor additions are an AES optimization and cryptoloop." Read the rest of the changelog for full details.
Openwall GNU/*/Linux 1.1
Openwall GNU/*/Linux 1.1 has been released: "After another year of development and many public Owl-current snapshots, Openwall GNU/*/Linux (Owl) release 1.1 is finally out. Owl 1.1 is currently available for purchase on a CD and will also be available for download after January 7, 2004. The major changes made since 1.0 are documented." Read the announcement on the distribution's web site and the complete changelog for further details. The product can be ordered from the distribution's online store for US$9.35. Openwall GNU/*/Linux is a security-enhanced operating system with Linux and GNU software as its core, intended as a server platform.
Ankur Bangla 1.0
FootNotes reports that Ankur Bangla 1.0 has been officially released: "The Ankur Bangla Project is proud to release version 1.0 final of the Ankur Bangla Live CD, running GNOME 2.4 localized into the Bangla (Bengali). The Live CD is based on Morphix and runs off the CD drive itself with little invasiveness to the existing setup. It is designed to be primarily a tool for collecting end user feedback on usability (especially of the translations of the GUI messages)." Read the rest of the announcement and release notes.
Aurox Live 1.2.0
This is a new release of Aurox Live CD, based on Aurox Linux 9.2. Changes: "This edition has NVIDIA binary drivers 44.96 and Macromedia Flash plugin installed. Aurox Live 1.2.0 contains: KDE 3.1.4 (default graphical desktop); web browsers Mozilla 1.5 and KDE's Konqueror; Office suites (KOffice 1.2.1, OpenOffice.org 1.1.0); multimedia support: sound and movie players Kaboodle, Xine (libs 1.0.0 RC2), non-accelerated games (KDE games); examples of games using hardware acceleration (Chromium, GLaxium); graphical e-mail clients (KMail, Evolution 1.4.5)..." Read the rest of the release notes.
Buffalo Linux 1.0.5
A new version of Buffalo Linux has been released: "This is a new bug-fix/update release in the 1.0.x series. Current version 1.0.5. Changes include: more cleanup of install procedure, includes patch for some hangs in AUTOSETUP. Improved integration with Codeweavers Crossover Office. Upgraded to latest version of Sylpheed (0.9.8a) mail client. Added more internal help files. Bug squashing and file cleanup." Buffalo Linux is a derivative distribution based on Vector and Slackware; it is targeted at the small business workstation market.
Damn Small Linux 0.5.2
Version 0.5.2 of Damn Small Linux has been released. From the changelog: "New for 0.5.2: mkisofs; cdrecord; bashburn (easy to use text mode CD burning utility); gTuxnes (interactive GUI for tuxness); smbclient; smbtree; a working /opt that is writable from the CD; midnight commander (many features stripped); skel now works for root when installed."
SLAX - Live CD 3.0.24
The honour of the first release of 2004 goes to SLAX - Live CD (formerly known as Slackware - Live CD), with the release of version 3.0.24 only a few hours into the new year. From the changelog: "v 3.0.24 (1th of January 2004): SLAX is the new name for Slackware-Live; now created by Linux Live scripts. Using KDE 3.2beta2 and KOffice 1.3beta2; removed quanta; configsave and configrestore doesn't work; added glut, libid3tag; added Linux kernel 2.4.23; removed printing and PDF/PS applications; sound volume is set to 88% automatically; rc.6 script modified, removed swap unmounting because of ovlfs..." Find out more on the distribution's new web site at slax.org.
Feather Linux 0.3.0 and 0.3.1
Feather Linux 0.3.1 has been released. From the distribution's changelog: "Fixed a known bug of LinNeighborhood; fixed HD install so that X starts automatically; removed mkcfm and mkfontdir, both extraneous with Kdrive; added script to save configuration to a USB pendrive and some bootup code to restore it." Feather Linux is a light-weight desktop Linux distribution based on Knoppix.
CRUX 1.3 (PowerPC edition)
A PowerPC edition of CRUX 1.3 is now available for download: "Port for PowerPC platform of CRUX 1.3. Uses kernel 2.4.23-ben1 with improved support for iBook G4 PowerMAC G5 and CPU Frequency Scaling. The distribution is source-based and uses the same ports tree from CRUX Linux Community available for CRUX x86." The project's web site has more information about the release (in Italian).
|Upcoming Releases and Announcements
Klaus Knopper has published information about the upcoming releases of the Knoppix live CD, with an updated version 3.3 expected this week and a brand new version 3.4 with kernel 2.6 before the end of March: "Preliminary release plan: update to Kernel 2.4.23 for the download edition of Knoppix 3.3, should be finished next week. ... Parallel working on version 3.4 with some major changes: switching to ISOLinux plus a 2 floppy boot option in order to allow inclusion of more drivers in the kernel and initrd (USB and Firewire, possibly), since the space on the 1.44 MB floppy is used up by the kernel 2.6 alone." Read the rest of the plan on the developers' mailing list.
|Web Site News
New on the waiting list
Removed from the waiting list
- Litrux. "What is Litrux? Litrux is a brand new Linux distribution, running completely from CD. No installation needed, just boot from CD. It automatically recognizes all supported types of network cards, graphic cards, sound cards, SCSI devices and other hardware devices."
- Lineox Enterprise Linux. "Lineox Enterprise Linux 3.0 contains all freely distributable packages from Red Hat Enterprise Linux 3.0 Advanced Server ($1499), Red Hat Cluster Suite ($499), and Red Hat Developer Suite (free as an introductory offer for RHEL subscribers). Lineox Enterprise Linux 3.0 does not contain any support. Lineox is however preparing a separately offered program package update option. Support option pricing and availability will be announced later."
- Rocks Cluster Distribution. Rocks is a specialist Linux distribution designed for clustering and cluster management.
- Routix. Routix is a Linux-based distribution for routers (web site in German).
- Vermillion. Vermillion is a custom Linux distribution based on Red Hat Linux.
- KANOTIX is a new Linux live CD based on Knoppix.
- Fermi Linux is a Linux distribution based on Red Hat Linux.
- LIVUX is a new Linux live CD based on Knoppix (web site in Spanish).
- The Dave/Dina Project. "The Dave/Dina Project was created to satisfy all the home entertainment needs of the average hacker. A Dave/Dina box is a computer connected to your TV screen, stereo, phone, and other stuff, running open-source software."
- Bluewall GNU/Linux. "Bluewall is a GNU/Linux distribution that allows you to install a system from a small set of preconfigured binary packages based on Debian Linux. Bluewall doesn't have any specific installation procedure, the idea behind it is that you can get installed Linux in the way you want, using command line tools."
DistroWatch database summary
- Zynot Linux. Zynot was a high-profile Gentoo fork when it started over 6 months ago, but now it seems to concentrate on development of embedded Linux solutions, rather than a general purpose distribution. As such, Zynot has been listed under Embedded Linux Distributions on the links page. Please let me know if my conclusion is incorrect.
- Momonga Linux. This is one of those never ending development projects, sprouted from the ashes of the discontinued Kondara MNU/Linux in July 2002. But despite its having been around for over 16 months and a promised final release by October 2002, we have yet to see any release.
- Number of distributions in the database: 230
- Number of discontinued distributions: 26
- Number of distributions on the waiting list: 66
On Turbolinux's TurboUpdate
"Turbolinux update utility seems to try to go to ftp.turbolinux.com. It has been down since I purchased the desktop 10D two weeks ago. Just thought I'd let someone know."
I have Turbolinux 10D installed and have had no problems using the TurboUpdate program to download and install all updates since the product release. Is there anybody else having the same problem as the reader above?
That's all for this week, see you next Monday :-)
If you've enjoyed this week's issue of DistroWatch Weekly, please consider sending us a tip.
(Tips this week: 0, value: US$0.00)
|Linux Foundation Training
|• Issue 793 (2018-12-10): openSUSE Tumbleweed, finding non-free packages, Debian migrates to usrmerge, Hyperbola gets FSF approval|
|• Issue 792 (2018-1203): GhostBSD 18.10, when to use swap space, DragonFly BSD's wireless support, Fedora planning to pause development schedule|
|• Issue 791 (2018-11-26): Haiku R1 Beta1, default passwords on live media, Slax and Kodachi update their media, dual booting DragonFly BSD on EFI|
|• Issue 790 (2018-11-19): NetBSD 8.0, Bash tips and short-cuts, Fedora's networking benchmarked with FreeBSD, Ubuntu 18.04 to get ten years of support|
|• Issue 789 (2018-11-12): Fedora 29 Workstation and Silverblue, Haiku recovering from server outage, Fedora turns 15, Debian publishes updated media|
|• Issue 788 (2018-11-05): Clu Linux Live 6.0, examining RAM consumpion, finding support for older CPUs, more Steam support for running Windows games on Linux, update from Solus team|
|• Issue 787 (2018-10-29): Lubuntu 18.10, limiting application access to specific users, Haiku hardware compatibility list, IBM purchasing Red Hat|
|• Issue 786 (2018-10-22): elementary OS 5.0, why init keeps running, DragonFly BSD enables virtual machine memory resizing, KDE neon plans to drop older base|
|• Issue 785 (2018-10-15): Reborn OS 2018.09, Nitrux 1.0.15, swapping hard drives between computers, feren OS tries KDE spin, power savings coming to Linux|
|• Issue 784 (2018-10-08): Hamara 2.1, improving manual pages, UBports gets VoIP app, Fedora testing power saving feature|
|• Issue 783 (2018-10-01): Quirky 8.6, setting up dual booting with Ubuntu and FreeBSD, Lubuntu switching to LXQt, Mint works on performance improvements|
|• Issue 782 (2018-09-24): Bodhi Linux 5.0.0, Elive 3.0.0, Solus publishes ISO refresh, UBports invites feedback, Linux Torvalds plans temporary vacation|
|• Issue 781 (2018-09-17): Linux Mint 3 "Debian Edition", file systems for SSDs, MX makes installing Flatpaks easier, Arch team answers questions, Mageia reaches EOL|
|• Issue 780 (2018-09-10): Netrunner 2018.08 Rolling, Fedora improves language support, how to customize Kali Linux, finding the right video drivers|
|• Issue 779 (2018-09-03): Redcore 1806, keeping ISO downloads safe from tampering, Lubuntu makes Calamares more flexible, Ubuntu improves GNOME performance|
|• Issue 778 (2018-08-27): GuixSD 0.15.0, ReactOS 0.4.9, Steam supports Windows games on Linux, Haiku plans for beta, merging disk partitions|
|• Issue 777 (2018-08-20): YunoHost 188.8.131.52, limiting process resource usage, converting file systems on Fedora, Debian turns 25, Lubuntu migrating to Wayland|
|• Issue 776 (2018-08-13): NomadBSD 1.1, Maximum storage limits on Linux, openSUSE extends life for 42.3, updates to the Librem 5 phone interface|
|• Issue 775 (2018-08-06): Secure-K OS 18.5, Linux is about choice, Korora tests community spin, elementary OS hires developer, ReactOS boots on Btrfs|
|• Issue 774 (2018-07-30): Ubuntu MATE & Ubuntu Budgie 18.04, upgrading software from source, Lubuntu shifts focus, NetBSD changes support policy|
|• Issue 773 (2018-07-23): Peppermint OS 9, types of security used by different projects, Mint reacts to bugs in core packages, Slackware turns 25|
|• Issue 772 (2018-07-16): Hyperbola GNU/Linux-libre 0.2.4, UBports running desktop applications, OpenBSD auto-joins wi-fi networks, boot environments and zedenv|
|• Issue 771 (2018-07-09): Linux Lite 4.0, checking CPUs for bugs, configuring GRUB, Mint upgrade instructions, SUSE acquired by EQT|
|• Issue 770 (2018-07-02): Linux Mint 19, Solus polishes desktop experience, MintBox Mini 2, changes to Fedora's installer|
|• Issue 769 (2018-06-25): BunsenLabs Helium, counting Ubuntu users, UBports upgrading to 16.04, Fedora CoreOS, FreeBSD turns 25|
|• Issue 768 (2018-06-18): Devuan 2.0.0, using pkgsrc to manage software, the NOVA filesystem, OpenBSD handles successful cron output|
|• Issue 767 (2018-06-11): Android-x86 7.1-r1, transferring files over OpenSSH with pipes, LFS with Debian package management, Haiku ports LibreOffice|
|• Issue 766 (2018-06-04): openSUSE 15, overview of file system links, Manjaro updates Pamac, ReactOS builds itself, Bodhi closes forums|
|• Issue 765 (2018-05-28): Pop!_OS 18.04, gathering system information, Haiku unifying ARM builds, Solus resumes control of Budgie|
|• Issue 764 (2018-05-21): DragonFly BSD 5.2.0, Tails works on persistent packages, Ubuntu plans new features, finding services affected by an update|
|• Issue 763 (2018-05-14): Fedora 28, Debian compatibility coming to Chrome OS, malware found in some Snaps, Debian's many flavours|
|• Issue 762 (2018-05-07): TrueOS 18.03, live upgrading Raspbian, Mint plans future releases, HardenedBSD to switch back to OpenSSL|
|• Issue 761 (2018-04-30): Ubuntu 18.04, accessing ZFS snapshots, UBports to run on Librem 5 phones, Slackware makes PulseAudio optional|
|• Issue 760 (2018-04-23): Chakra 2017.10, using systemd to hide files, Netrunner's ARM edition, Debian 10 roadmap, Microsoft develops Linux-based OS|
|• Issue 759 (2018-04-16): Neptune 5.0, building containers with Red Hat, antiX introduces Sid edition, fixing filenames on the command line|
|• Issue 758 (2018-04-09): Sortix 1.0, openSUSE's Transactional Updates, Fedora phasing out Python 2, locating portable packages|
|• Issue 757 (2018-04-02): Gatter Linux 0.8, the UNIX and Linux System Administration Handbook, Red Hat turns 25, super long term support kernels|
|• Issue 756 (2018-03-26): NuTyX 10.0, Neptune supplies Debian users with Plasma 5.12, SolydXK on a Raspberry Pi, SysV init development|
|• Issue 755 (2018-03-19): Learning with ArchMerge and Linux Academy, Librem 5 runs Plasma Mobile, Cinnamon gets performance boost|
|• Issue 754 (2018-03-12): Reviewing Sabayon and Antergos, the growing Linux kernel, BSDs getting CPU bug fixes, Manjaro builds for ARM devices|
|• Issue 753 (2018-03-05): Enso OS 0.2, KDE Plasma 5.12 features, MX Linux prepares new features, interview with MidnightBSD's founder|
|• Issue 752 (2018-02-26): OviOS 2.31, performing off-line upgrades, elementary OS's new installer, UBports gets test devices, Redcore team improves security|
|• Issue 751 (2018-02-19): DietPi 6.1, testing KDE's Plasma Mobile, Nitrux packages AppImage in default install, Solus experiments with Wayland|
|• Issue 750 (2018-02-12): Solus 3, getting Deb packages upstream to Debian, NetBSD security update, elementary OS explores AppCentre changes|
|• Issue 749 (2018-02-05): Freespire 3 and Linspire 7.0, misunderstandings about Wayland, Xorg and Mir, Korora slows release schedule, Red Hat purchases CoreOS|
|• Issue 748 (2018-01-29): siduction 2018.1.0, SolydXK 32-bit editions, building an Ubuntu robot, desktop-friendly Debian options|
|• Issue 747 (2018-01-22): Ubuntu MATE 17.10, recovering open files, creating a new distribution, KDE focusing on Wayland features|
|• Issue 746 (2018-01-15): deepin 15.5, openSUSE's YaST improvements, new Ubuntu 17.10 media, details on Spectre and Meltdown bugs|
|• Issue 745 (2018-01-08): GhostBSD 11.1, Linspire and Freespire return, wide-spread CPU bugs patched, adding AppImage launchers to the application menu|
|• Issue 744 (2018-01-01): MX Linux 17, Ubuntu pulls media over BIOS bug, PureOS gets endorsed by the FSF, openSUSE plays with kernel boot splash screens|
|• Issue 743 (2017-12-18): Daphile 17.09, tools for rescuing files, Fedora Modular Server delayed, Sparky adds ARM support, Slax to better support wireless networking|
|• Issue 742 (2017-12-11): heads 0.3.1, improvements coming to Tails, Void tutorials, Ubuntu phasing out Python 2, manipulating images from the command line|
|• Full list of all issues|
|Random Distribution |
Snowlinux was a set of Linux distributions based on Debian's latest stable release and featuring four different desktop environments - GNOME, KDE, LXDE and Xfce. It aims to be user-friendly, incorporating many useful tweaks and carefully selected software applications. The project also develops a separate, Ubuntu-based edition featuring the MATE (a GNOME 2 fork) desktop.