621–630 of 642 posts
Earlier quoted context omitted.
Ubuntu phones home a lot. Don't know if that applies to rhel
not the server. my biggest complaint about ubuntu server is that docker is packaged as a snap. But that takes 30s to fix (includding googling for a fix :) )
apt-get install docker.ioEarlier quoted context omitted.
> Nope, IBM, Azul, Amazon, Red-Hat, Alibaba, Twitter, Microsoft also seat at the Java table. I know Java has stakeholders but, what I'm trying to say is the table is at Oracle's HQ, not somewhere else. > Should I also start listing the dark sides of each company that seats at ISO C and ISO C++ table? A primer would be nice, actually. > Python working groups also need money from those corporations, and Python is yet t…
> A primer would be nice, actually. Microsoft, the evil company over here, that keeps being compared to Oracle. Several C++20 features like Modules and co-routines were driven by their VC++ implementations. Apple, the company hated over here by bringing the end of open platforms, without it LLVM and clang wouldn't ever exist. Google, the spying company and forking Linux with Android, the second major clang and llvm c…
Earlier quoted context omitted.
> never, Ever, EVER trust Oracle. Been burned by them before. Not at liberty to give details, but the outcome is that I never choose Oracle for anything for the rest of my career. Even if it would save time and money.
The fact that you aren't comfortable discussing the details of how you were screwed by Oracle, even anonymously on the internet, is really all anyone needs to know about Oracle.
Earlier quoted context omitted.
I don't think many people who want to use something stable like CentOS, but don't want to pay for a RHEL support contract would want to pay Oracle for RHEL-but-with-Oracle-sprinkles-on-top
Not to mention Oracle is not known to leave money on the table, and if they see they can start charging for Oracle Linux because there's no large well known free version, I wouldn't put it past them. Put another way, if you jump ship from CentOS because IBM caused Red Hat to change it into a funnel to pay them money, if you landed on Oracle, you might be setting yourself up to do it all over again fairly soon.
You're underselling it: Oracle grab money in a way that I would describe as "aplomb ruthlessness". They've managed to fuck no less than 3 orgs I've worked for.
If they ask you for a license count or how many cores are in use, ignore them. Larry Ellison doesn't need another boat.
Earlier quoted context omitted.
> >Java , postgres and tomcat > That's his stack... What’s your point and when did I ever mention Java? > It's not magic, just alien. Dumping the contents of an RPM archive on random distros is never going to work except for the most simple of cases.
>Dumping the contents of an RPM archive on random distros is never going to work except for the most simple of cases. That says allot about you packing hygiene, and you don't dump it..that you can do with tar alone. You convert it to a deb.
Earlier quoted context omitted.
How is "everything a little after" the same as "some things prior, other things after"?
Patches for those security issues are embargoed until specified dates. Red Hat simply cannot add them to CentOS stream before that date.
Earlier quoted context omitted.
>> Imagine if you were running a business, and deployed CentOS 8 based on the 10 year lifespan promise. You're totally screwed now, and Red Hat knows it. The hypothetical you posed is the actual situation, I am now learning, I have apparently forced on my team. We've ramped up labor 3x revenue preparing product launch in 90 - 180 days. We created an image containing centos 8 , Java , postgres and tomcat a year ago an…
What I don't get is this: You build software, you ship it on an OS so it works, cool, this makes sense (I assume you need hardware and VM support, not just VM). Why would you accept additional risk on the OS if you can easily reduce the risk, and ultimate cost, by going with an OS that has vendor support written into the actual contract? RHEL is 11-13 years total, Windows is... I'm guessing my grandkids will be using…
Earlier quoted context omitted.
C and C++ development is sponsored by the corporations of Apple, Microsoft, IBM, Oracle, Google.... PHP was mostly driven by Facebook needs. None of them is any different from Oracle. And apparently you fail to understand who has contributed to state of the art implemetnations of AOT compilation to toolchains like LLVM, hint the companies that HN loves to hate, it weren't weekend and late night coders.
> And apparently you fail to understand who has contributed to state of the art implemetnations of AOT compilation to toolchains like LLVM, hint the companies that HN loves to hate, it weren't weekend and late night coders. I'm pretty aware that nearly all clang/LLVM development is driven by apple. On the other hand you apparently fail to understand my point of view about Oracle and Java ecosystem. I'm neither agains…
Earlier quoted context omitted.
If only it had comprehensive SELinux support...
There is AppArmor (enabled by default) which is another Linux Security Module. I find it easier to configure than SELinux.
Specifically in RHEL/CentOS/Fedora I like that everything in the base system is reasonably well confined out of the box - including random container images that users insist on downloading/running. I don't know if AppArmor is even capable of doing this:
https://access.redhat.com/documentation/en-us/red_hat_enterp...
i.e., if I 'docker run --rm -it debian:unstable sleep 300' twice, then:
$ pgrep sleep | xargs ps -Z LABEL PID TTY STAT TIME COMMAND system_u:system_r:svirt_lxc_net_t:s0:c563,c603 1595289 pts/0 S+ 0:00 sleep 123 system_u:system_r:svirt_lxc_net_t:s0:c25,c163 1595325 pts/0 S+ 0:00 sleep 345
Both containers are confined by the svirt_lxc_net_t domain, but since they have different labels, they aren't able to interfere with each other, or the host system, even if the process inside the container is running as uid 0.
Earlier quoted context omitted.
>Dumping the contents of an RPM archive on random distros is never going to work except for the most simple of cases. That says allot about you packing hygiene, and you don't dump it..that you can do with tar alone. You convert it to a deb.
That says a lot about your packaging hygine. With alien, you're essentially dumping the contents of an RPM on hosts it wasn't meant for. It doen't matter that you converted it to deb format along the way, it's the same if you actually install it.