Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ubuntu 16.04 (Xenial Xerus)

releases.ubuntu.com

Post reply on HN
Print view View original

291–300 of 303 posts

Re: Ubuntu 16.04 (Xenial Xerus)

#291

Post by the_why_of_y »

dajohnson89 wrote: post #230
Rezo wrote: post #121

PSA: If you're running a HTTP/2 server like NGINX on the 14.04 LTS you'll want to upgrade to this release. Google Chrome will no longer support HTTP/2 on vanilla 14.04 after May 15th [0], even if you're using the latest official upstream NGINX packages. This is because 14.04 ships with a version of OpenSSL that does not support the ALPN extension (prior to OpenSSL 1.0.2 you're limited to NPN, now deprecated). There w…

Why isn't just upgrading OpenSSL to version 1.0.2 enough? Seems easier than a wholesale OS upgrade.

With OpenSSL's complete lack of anything resembling a stable ABI, and it's popularity, there is no meaningful difference between an OpenSSL upgrade and a wholesale OS upgrade.

Re: Ubuntu 16.04 (Xenial Xerus)

#292

Post by digi_owl »

majewsky wrote: post #274
bryanlarsen wrote: post #90

Earlier quoted context omitted.

What did you switch to? Fedora is switching to xdg-app, which basically does the same thing. Now that those two are using such an approach, I imagine that app developers are increasingly going to drop support for distros that don't use snap, xdg-app or docker. Snap/xdg-app/docker are a lot more convenient for those app developers. Edit: forgot appc. Thank goodness they're all planning on supporting the Open Container…

I'm on Arch, which has none of that bullshit.

Given their history, expect Arch to adopt xdg-app.

Re: Ubuntu 16.04 (Xenial Xerus)

#293

Post by maaku »

maaku wrote: post #190
Analemma_ wrote: post #172

Earlier quoted context omitted.

If you don't trust the Ubuntu release team, why are you downloading Ubuntu to begin with? Your threat model makes no sense.

It is not trust in Canonical itself that is the problem, but the constant threat of coercion it puts on both the organization and the people that compromise it. This is why I work on generalized multi-signature schemes and deterministic builds.

s/compromise/comprise/

Re: Ubuntu 16.04 (Xenial Xerus)

#294

Post by noisy_boy »

takno wrote: post #204
noisy_boy wrote: post #93

> Online searches in the dash are now disabled by default [1] A welcome and saner default. I'm thinking of moving back to Ubuntu from LinuxMint (I was thinking of Arch as well but not too confident of being on the bleeding edge). [1]: https://wiki.ubuntu.com/XenialXerus/ReleaseNotes

I never moved to mint, but I did recommend trying it to some people who really didn't like unity. I pretty much stopped doing that when they had the security issues last year. Is that what is prompting you to look at switching back, or are you just more reconciled to unity in general now?

That is one and I read online (can't find the source now) that Mint development doesn't respect compatibility/play well with other open source developers. I don't know how much of it is true but for me, compatibility is important. For almost 5-6 years, I have never formatted my home directory. So if my distribution is, for example, creating config in a non-compatible fashion, I won't be able to move to another distro. I know that typically distros don't modify individual program's dotfile/config etc but I guess I'm a bit paranoid about it.

Re: Ubuntu 16.04 (Xenial Xerus)

#295

Post by hatsunearu »

mceachen wrote: post #289
hatsunearu wrote: post #258

Earlier quoted context omitted.

yeah, you're right. my bad.

(how many sites on the internet have a discussion where people are both patient and civil with each other, and the discussion results in mutual understanding?)

Hmm, I personally haven't seen action in discussion where this kinda stuff doesn't happen; maybe I just pick the comments I reply well.

Re: Ubuntu 16.04 (Xenial Xerus)

#296

Post by cat-dev-null »

symtos wrote: post #232
dz0ny wrote: post #50

Mozilla will release Firefox directly via snaps https://blog.mozilla.org/futurereleases/2016/04/21/firefox-d...

Using binaries provided by Mozilla is not a good idea (unless they do things differently with the snaps). They are not hardened in any way; ie. no PIE (rendering ASLR pretty much useless), no stack canaries, no relro, ..., making it a lot easier to exploit any given sec-related bug. $ hardening-check ./firefox ./firefox: Position Independent Executable: no, normal executable! Stack protected: no, not found! Fortify S…

More "innovations" which "justify" their own existence with novelty, but eliminate useful properties, backward compatibility, interoperability and standards with blissful ignorance. Standardization is a Good Thing(TM)... many formats creates a confusing dependency hell across multiple systems. Deb/apt works well. This will be deprecated in 6 months after a major security incident. Canonical is mismanaged and capricious, and this is just another in a long line of examples.

Re: Ubuntu 16.04 (Xenial Xerus)

#297

Post by cat-dev-null »

criddell wrote: post #67
creshal wrote: post #25

Earlier quoted context omitted.

> I love the part about simplifying packaging via 'snap'. Bleargh. More container bullshit, now with even less control over it by end users. Now each tiny library update (think OpenSSL security fixes) will pull hundreds of "snaps" instead of a single package… assuming the developers even realize they have to rebuild their snaps.

> Now each tiny library update (think OpenSSL security fixes) will pull hundreds of "snaps" Do you think that's worse than the alternative where each tiny (shared) library update potentially breaks hundreds of programs?

False dichotomy fallacy. Linux distributions need to engineer for side-by-side installation of multiple versions and not get tied up to those common locations. nix is just one example as an interesting idea, while Homebrew and stow are better ideas.

Re: Ubuntu 16.04 (Xenial Xerus)

#298

Post by cat-dev-null »

creshal wrote: post #69
criddell wrote: post #67

Earlier quoted context omitted.

> Now each tiny library update (think OpenSSL security fixes) will pull hundreds of "snaps" Do you think that's worse than the alternative where each tiny (shared) library update potentially breaks hundreds of programs?

ABI breaks from security patches for stable releases, especially of Linux distributions, happen how often? In comparison, outdated npm/gem/pip/hipster-package-manager-of-the-week or docker installations happen how often? With the former, the burden of updating and testing lies with a small handful of distribution maintainers. With the latter, every single developer has to worry about deployment and maintenance.

Distros shouldn't waste time and effort on supporting and packaging language-specific, high-churn code packages except in very limited circumstances. Let the language specific-tools do those. Upstream is best, local fragmentation is wasteful.

Re: Ubuntu 16.04 (Xenial Xerus)

#299

Post by therealmarv »

alyandon wrote: post #116
therealmarv wrote: post #60

If somebody needs a Vagrantfile for testing: https://gist.github.com/therealmarv/555f7efc1c55ffa288bca091... but it seems even Ubuntus Server are not speedy today (Atlas server are also slow) (Update) it seems I'm getting an error with it :/ The guest machine entered an invalid state while waiting for it to boot. Valid states are 'starting, running'. The machine is in the 'gurumeditation' state. Please verify everyth…

If you've recently upgraded to VirtualBox 5.0.18 you might try downgrading to 5.0.16 as I had a similar issue earlier this week.

I've updated to the VirtualBox 5.0.19 test build which also fixes that. Bad timing for Ubuntu: https://www.virtualbox.org/wiki/Testbuilds
Post reply on HN