233
Ubuntu's trust problem in 4 concrete issues - verified facts, no FUD (media.piefed.social)
submitted 5 months ago by to c/linux@programming.dev
92 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 25 points 5 months ago (8 children)

I use a derivative

Without Ubuntu Pro subscription the entire Universe repository does not receive any security updates by Canonical:

https://canonical.com/blog/ubuntu-pro-enhanced-security-and-manageability-for-linux-desktop

You should consider switching to an entirely independent distribution that does not lock security updates behind a paywall, perhaps something based directly on Debian or Fedora.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 16 child comments
    •
  • [–] 19 points 5 months ago (2 children)

    While Canonical deserves the criticisms leveled by op (that I agree with), it's also incorrect to say that they lock security updated behind a paywall.

    Anyone that does use Ubuntu gets security updated until they stop supporting that particular release version, which iirc is for six years (I may be wrong, thus is from memory).

    If you want extended security updates for a specific version of the os, you can elect to sign up to Ubuntu pro without paying any money. You do have to make an account, and if you so choose you can populate the account info with garbage info and a disposable email, and you'll get extended security updates for that release version.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 5 months ago (1 child)

    While Canonical deserves the criticisms leveled by op (that I agree with), it’s also incorrect to say that they lock security updated behind a paywall.

    Anyone that does use Ubuntu gets security updated until they stop supporting that particular release version, which iirc is for six years (I may be wrong, thus is from memory).

    I quoted the relevant part and yet you still don't understand that Universe is explicitly not covered by security support by Canonical without Ubuntu Pro.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 5 months ago (1 child)

    you can elect to sign up to Ubuntu pro without paying any money

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago (1 child)

    you can elect to sign up to Ubuntu pro without paying any money

    Yes, home users can sign up for Ubuntu Pro for free which means repository access is tracked on an account level. How isn't this more shitty than for example plain Debian?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 5 months ago

    Debian also doesn't offer security upgrades for contrib and non-free.
    Only main is officially supported.

    Same as Ubuntu, security upgrades for additional repos are handled by the community, not the distro maintainers themselves.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 13 points 5 months ago* (1 child)

    The updates available through Ubuntu Pro wouldn’t have normally been available prior to Pro. It’s an added service, not something that was previously available that is now locked behind a paywall. There are plenty of reasons to not like Canonical but this isn’t one.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -2 points 5 months ago (1 child)

    It’s an added service, not something that was previously available that is now locked behind a paywall.

    I didn't say anything about it having changed, so your "now" is disingenuous. Fact is, update support by Canonical for Universe is locked behind Ubuntu Pro. Non-Ubuntu distributions such as CachyOS/Fedora/Bazzite/openSUSE/Debian/... don't have this hostile behaviour.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 5 months ago* (1 child)

    They also don’t provide those updates. I am a Fedora guy by the way. I’m not defending Canonical, just pointing out that this is a silly reason to dislike them.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 5 months ago

    They also don’t provide those updates.

    Fedora allows all updates that do not break compatibility. To update packages in Universe means adhering to overly zealous version number freeze policy, whereas leaf packages in Fedora can be updates without much fuss. I contributed a small number (only two or three) of updates to Fedora packages years ago. Nothing was a core package, only tiny stand-alone utilities, so the stuff that would be in Universe under Ubuntu, but they had new version numbers. Updates were accepted by the maintainers without much trouble.

    I am a Fedora guy by the way.

    So you should know that I'm right.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 6 points 5 months ago (5 children)

    What's a better alternative that uses apt and KDE and has relatively up-to-date packages (other than Debian testing)?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 3 points 5 months ago (1 child)

    What's wrong with Debian?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago (1 child)

    Fedora offers apt. AFAIK not by default, so it has to be installed via dnf first but then it's available.

    It's been like that for years.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -1 points 5 months ago* (1 child)

    https://www.google.com/search?q=why+shouldn%27t+you+use+apt+on+fedora&oe=UTF-8&hl=en-us&safe=active

    It's a really bad idea to have two package managers overlap (this is also why more "cross-system" package managers like nix and brew are okay: they consciously install to separate paths to avoid overlapping)

    Fedora does not offer APT repositories, so if you somehow don't overlap and pretty much exclusively use APT, you're pretty much just converting your distro to Debian (or whatever's providing your repos). In the forums we call this a Frankenstein; support is seldom given for raising the dead.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 5 months ago (1 child)

    https://www.google.com/search?q=why+shouldn%27t+you+use+apt+on+fedora&oe=UTF-8&hl=en-us&safe=active

    Is your answer whatever Gemini happens to hallucinate on a given day?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago (1 child)

    lock security updates behind a paywall

    Saying this is like screaming "I don't know anything about Ubuntu except that I hate it!!!!"

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago*

    Saying this is like screaming “I don’t know anything about Ubuntu except that I hate it!!!”

    I posted a screenshot from Ubuntu's own blog. So they hate themselves and lie to the world?

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 5 months ago* (last edited 5 months ago) (1 child)

    Ubuntu Pro is free for personal use on up to five machines.

    Also note that Universe is the community-maintained repository, sort of like the AUR but the community also reviews package creations. The Main repository is maintained by the Ubuntu Project and has always had free security updates.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 5 months ago (1 child)

    Ubuntu Pro is free for personal use on up to five machines.

    If you're not paying for the product, you are the product.

    Debian is free for any use for an unlimited number of machines without corporate tracking which packages you install.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago (1 child)

    If you’re not paying for the product, you are the product.

    Debian is free for any use for an unlimited number of machines without corporate tracking which packages you install.

    So I guess with Debian, you are the product.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •