Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Akamai Warns Of “Panchan” Linux Botnet — The botnet introduces a unique (and possibly novel) approach to lateral movement by harvesting of SSH keys. Instead of just using brute force or dictionary attacks on randomized IP addresses like most botnets do, the malware also reads the id_rsa and known_hosts files to harvest existing credentials and use them to move laterally across the network.
• Canonical Continues Working On Ubuntu’s Firefox Snap Performance — On the Ubuntu blog is a new post by Canonical's Oliver Smith about their latest efforts to improve the Firefox Snap performance and other outstanding issues with this sandboxed version of the Mozilla web browser.
• Lars Knoll Announces His Successor For Qt Chief Maintainer — The voting period for the new Chief Maintainer has ended yesterday. This means Volker Hilsheimer will be our new Chief Maintainer. Congratulations!
• New Chief Maintainer for the Qt Project
• Talisman: Debut of X — I've spent the last couple weeks writing a window system for the VS100. I stole a fair amount of code from W, surrounded it with an asynchronous rather than a synchronous interface, and called it X. Overall performance appears to be about twice that of W.
• X Window System Turns 38 Years Old — It was on 19 June 1984 that Bob Scheifler announced the initial X window system release "X1" at MIT.
• X Windows System Design Principles, a lecture by James Gettys
• A Political History of X - Keith Packard (LCA 2020)
• Linus Torvalds: Rust For The Kernel Could Possibly Be Merged For Linux 5.20 — Torvalds commented that real soon they expect to have the Rust infrastructure merged within the kernel, possibly even for the next release -- meaning Linux 5.20.
• Open Source Summit North America 2022: Keynote: Linus Torvalds
• How are we improving Firefox Snap performance? Part 2

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• openSUSE Developing “Adaptable Linux Platform” For Next-Gen SUSE Linux Enterprise — Another important point is that we intend to split what was a more generic, everything is closely intertwined into two parts: One smaller hardware enabling piece, a kind of "host OS", and the and the layer providing and supporting applications, which will be container (and VM) based.
• Update on next generation of SLE - openSUSE Mailing Lists
• An update to Raspberry Pi OS Bullseye — With this latest release, the default “pi” user is being removed, and instead you will create a user the first time you boot a newly-flashed Raspberry Pi OS image. This is in line with the way most operating systems work nowadays, and, while it may cause a few issues where software (and documentation) assumes the existence of the “pi” user, it feels like a sensible change to make at this point.
• PipeWire 0.3.50 — WINE applications using the JACK backend should no longer crash.
• OpenSSH 9.0 released — It is claimed to be primarily a bug-fix release, but it also switches to a new, quantum-computer-proof key-exchange protocol by default and includes a number of sftp changes, some of which may create some compatibility issues with scp.
• Reiser5 Issues New Development Release, Performance Numbers For Scaling Out — Shishkin published an new Reiser5 unstable snapshot today that targets Linux 5.16 kernel compatibility. Along with updating Reiser5 for newer kernel compatibility and other changes since its prior snapshot, Shishkin accompanied today's announcement with some benchmark numbers.
• New NVIDIA Open-Source Linux Kernel Graphics Driver Appears — Appearing with NVIDIA's latest Linux4Tegra code drop is a new open-source kernel graphics driver not previously published. This driver isn't based on the existing Nouveau driver but rather appears to be derived from their internal driver code-base with some copyright references going back to 90's.
• NVIDIA Publishes Signed Ampere Firmware To Finally Allow Accelerated Open-Source Support — Even with the signed firmware images, there are still complications around re-clocking the GPU to get off the rather low boot clock frequencies. Those complications around power management in the context of signed firmware images have meant the GTX 900 series and newer hasn't been able to operate with the open-source driver at its optimal clock frequencies...
• Debian still having trouble with merged /usr — The addition of the "/usr merge" feature has been something of longstanding mess in the Debian world. It seems like a relatively innocuous change, but ever since we first covered the feature introduction for Debian—more than six years ago—it has a been a recurring series of headaches within that community. Recent events have seemingly simply prolonged the pain, though perhaps the end is in sight.
• Usr move status in various distros
• The Case For The Usr Merge

Plus a PSA for GNOME users, and a recently improved tool for the Raspberry Pi.

Special Guest: Dalton Durst.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Ubuntu Touch OTA-16 Release — Today we are happy to announce the release of Ubuntu Touch OTA-16, our sixteenth stable update to the system!
• Find your device: devices.ubuntu-touch.io — This list shows the devices which are currently under development in the Ubuntu Touch ecosystem. Mature devices have easy access to installation through the UBports Installer. Devices in an early state generally need to follow a manual installation procedure.
• Ubuntu Touch Q&A 96
• Extensions Rebooted: Porting your existing extensions to GNOME 40 — Since there have been significant changes in GNOME Shell – it will be important to understand where those changes are and how they might affect the various extensions that are out there.
• Guide: Port Extensions to GNOME Shell 40
• XWayland 21.1 Standalone Released To Offer Better X11 Client On Wayland Experience — With no one willing to step up and manage the X.Org Server 1.21 release Red Hat engineers are now moving ahead with standalone XWayland releases.
• Cloud CPU Benchmarking Report
• Google is preparing for Fuchsia’s first releases — For years now, we’ve been watching and waiting as Google has gradually developed their Fuchsia operating system from the ground up. Now evidence has appeared pointing to Google’s Fuchsia OS getting its first — and second — proper release.
• Raspberry Pi Imager Now Lets You Control Advanced OS Features When Flashing Images — The biggest new feature in this release is the implementation of a hidden advanced options panel which lets you control additional features for the operating system you’re about to flash on an SD card or SSD drive.
• GitHub: rpi-imager v1.6

Plus Mozilla and KaiOS team up to bring the modern web to feature phones, and the surprising way Microsoft is shipping a Linux kernel.

Support Linux Action News

Links:

• Firefox 74 arrives with stricter add-on rules, TLS 1.0 and TLS 1.1 disabled — Starting with Firefox 74, users will need to take explicit action to install the extensions they want, and will be able to remove previously sideloaded extensions when they want to.
• Introducing GNOME 3.36: “Gresik” — GNOME 3.36 is the latest version of GNOME 3, and is the result of 6 months’ hard work by the GNOME community. It contains major new features, such as new login and unlock experience, and a dedicated app for managing extensions.
• GNOME 3.36 Released with New Lock Screen, Better Performance — Six months of development later and the official GNOME 3.36 release is finally here, with source code available to download from the usual places.
• Announcing Bottlerocket — Bottlerocket comes with a single-step update mechanism and includes only the essential software to run containers. These properties enable customers to use container orchestrators to manage OS updates with minimal disruptions, enabling better uptime for containerized applications and lower operational cost.
• Docker: Helping You and Your Development Team Build and Ship Faster — How are we going to do this? By focusing on developer experience through Docker Desktop, partnering with the ecosystem, and making Docker Hub the nexus for all the integrations, configuration, and management of the application components which constitute your apps and microservices.
• VMware Announces Expanded Portfolio of Products and Services to Help Customers Modernize Applications and Infrastructure — Tanzu, first introduced at the VMworld event in August 2019, is a portfolio of products centered on K8s. Also announced was vSphere 7, newly rearchitected using Kubernetes, and optimized to run both modern container-based and traditional virtual machine-based workloads.
• KaiOS Technologies and Mozilla partner to enable a healthy mobile internet for everyone — This partnership bolsters the security and performance of KaiOS-enabled smart feature phones, as well as the platform’s developer tools, security, and available functions, including better Progressive Web App and WebAssembly support.
• Magisk may no longer be able to hide bootloader unlocking from apps — Users have noticed that their bootloader-unlocked devices are failing SafetyNet’s Basic Integrity check even though they used Magisk to patch the boot image. According to Magisk creator John Wu, this is because Google may have implemented hardware-level key attestation to verify that the boot image has not been tampered with.
• Kernels for WSL2 will come from Windows Update — WSL2 will soon be officially available as part of Windows 10, version 2004! As we get ready for general availability, we want to share one additional change: updating how the Linux kernel inside of WSL2 is installed and serviced on your machine.