I rebase my work machine to rawhide just for fun and testing

what’s your plan on teaching these people to maintain their selfhosted instances? Are you selling support? I mean you could script pulling and recreating containers, but without eyeballs on it, that stuff will die eventually.

I just build what they need, networks, auth, security etc -I’ll leave teaching to the teachers

I Sysadmin in education here in Brisbane. Half our server stack is Linux on a Nutanix hypervisor. I do all my work from Linux, my junior admin recently moved his workstation to Fedora KDE, I use Kinoite.

The student and staff devices are 95% Windows, manager doesn’t care what we use to administer. Officially we’re a “Microsoft School”

On an atomic distro your build environment should be in container, where it doesn’t matter what ships with the base image

It also taints the kernel with a useless module and doesn’t really offer much in the way of features over plain old kvm qemu

Haven’t you just recommended 3 stale Ubuntu variants there?

I can’t remember if it was 99 or 2000, I got a copy of Red Hat 6.0 (Hedwig) on the cover of a magazine and installed it. I remember the Lilo boot manager giving me trouble and then it was multiple days of dialing up the internet on my dad’s PC to find info on getting X11 to run correctly on my graphics hardware. Once I got that going it was my win modem that defeated me in the end, couldn’t get any internet. So was back to Windows for another couple of years.

In 2003 my university course had a Linux Administration subject and the lecturer had built a live cd of Fedora Core 2 (this was in the days before live cds were a regular thing) it was a revelation and it worked with much less setup. We had a Linux lab, but the livecd allowed us to work on Linux on our personal machines. I’d dabble with Linux and explore distros for a few years, depending on hard ware compatibility, I’d always have at least one Linux box. I remember attempting to get HalfLife 2 running in Cedega (a commercial fork of wine), even played the original left4dead with friends, this was in 2008. I was there when pulse audio launched before it was ready and when KDE moved to version 4 and was an absolute resource hog. I bought the unreal and tournament games on disc to play on Linux. Was Disappointed when the UT3 release got delayed and then eventually canceled. I remember going to the id software ftps to get the Linux binaries for all the quakes. There were a few other Linux adventures in there, like a misguided attempt at compiling Gentoo in 2007 and working out mythtv server as a media pc and pvr.

Was excited when I got beta access to steam in 2012, and I haven’t had Windows on my personal computers since then.

This is true, because each layered package is reinstalled every time a new compose is pulled. If you layer 100 packages, 100 packages get re-installed. Which massively slows the update process

They didn’t murder centos, they changed its development so that its upstream of RHEL, one point release ahead. For 95% of deployments it makes no difference, for the last few percent RHEL proper is available for free for non-commercial purposes and if it’s commercial then buy a license or use another clone.

Most people have bought into FUD, and spout off the same BS points, and were never centos users to begin with.

I’ve been running Fedora OStree variants for over two years. I version upgraded and rebased between entirely different spins, rawhide and over to ublue variants then back to fedora mainline. All off the original install, keeping my userspace intact. Never once has it self destructed.

I run it in podman in user context, root is not required

Nothing, someone who never needed access to the RHEL snapshot source is butt hurt that it only exists as part of centOS stream, making it harder for community rebuilds to exist.

It’s no big deal for 95% of users, truly a nonissue. That last 5% can buy RHEL for production or use it for free for personal hosting or development.

I understand that the Linux ecosystem in general was ultimately the target, yes.

I was answering “how many people use those?”

I was on Fedora Kinoite 40 testing compose when it hit… so me

Fedora 40 testing branch and rawhide got it as well, as well tumbleweed and debian sid

Obviously it’s a difficult sell - but if this got positive attention I could see Fesco relenting and “upgrading” the branding on Fedora KDE to Fedora Plasma Workstation

Nuke from orbit might be an overreaction, if you need that machine perhaps disable ssh or turn the machine off until later next week when the postmortems happen. If you need that trusted machine now, then yes fresh install

Perhaps it was a poorly worded way of suggesting that invalidating host keys would invalidate all client keys it could potentially generate? Either way it’s a lot of speculation.

Resetting the keys and SSH config on any potentially compromised host is probably not a terrible idea

some people in my mastodon feed are suggesting that the backdoor might have connected out to malicious infrastructure or substituted its own SSH host keys, but I can’t find any clear confirmation. More info as the investigation progresses.

I guess at this point if you’re on Fedora 40 or rawhide clear / regen your host keys, even after xz version rollback