News for hackers. Stuff that matters.
Re:What I learned while securing Ubuntu (2015) by chrisper on Friday June 10, 2016 @02:42PM (#11878838)
My only problem with CentOS is that it is "outdated." A few times this was annoying because I had hit a bug that was fixed in newer versions. I understand that outdated is a feature of CentOS, but it comes with a trade off.

I switched my servers to Ubuntu for now.

Re:What I learned while securing Ubuntu (2015) by rdtsc on Friday June 10, 2016 @03:21PM (#11879200)
There is https://access.redhat.com/documentation/en-US/Red_Hat_Softwa... but we didn't use it. Not sure how successful others are with it.

But yeah it was a major pain. Remember all the time wasted getting things to work or compile on outdated kernels or standard library...

Re:What I learned while securing Ubuntu (2015) by merb on Friday June 10, 2016 @05:40PM (#11880281)
Thats not true compared to ubuntu. while centos 7 included java8, ubuntu 14.04 did not, both released on 2014. And on CentOS 6 I'm not sure but I think EPEL (which is way more official than any ubutnu PPA) has openjdk 8 for centos 6. there is some software that is maybe "old" but not "outdated" on centos, however as far as I know most software runs on centos, really good. The only thing which has bad support on CentOS at the moment is openssl 1.0.2 and newer nginx/haproxy.
Re:What I learned while securing Ubuntu (2015) by rdtsc on Friday June 10, 2016 @06:48PM (#11880759)
In general EPEL should never override packages from the base system. Other repos do that but EPEL's mission is to provide extra package not newer packages.

Otherwise it creates a mess. Someone adds EPEL, updates, now their software which was based of a base package is broken because EPEL upgraded libc or something like that.

Re:What I learned while securing Ubuntu (2015) by chrisper on Friday June 10, 2016 @10:00PM (#11881612)
How is it not true? CentOS is still at version 7 with a 3.x kernel, while Ubuntu is now at version 16.04 with a 4.x kernel. Many os-level packages are not going to get updated until a new major version of RHEL comes out.
Re:What I learned while securing Ubuntu (2015) by 6581 on Friday June 10, 2016 @10:08PM (#11881640)
Why are you mentioning 7 and 16.04? Those numbers mean nothing when you compare different distributions.
Re:What I learned while securing Ubuntu (2015) by chrisper on Friday June 10, 2016 @10:44PM (#11881753)
I am not comparing the numbers in a mathematical way (I am not saying 16 is better than 7). I meant more like that packages get updates to next major versions when the OS jumps to the next major version. Somehow, I felt that Ubuntu releases new major versions more often than RHEL. But checking the release dates it seems that I was wrong.
Re:What I learned while securing Ubuntu (2015) by merb on Saturday June 11, 2016 @02:56AM (#11882412)
Actually 7 is released on 2012 while 16.04 is released on 2016. You could compare 14.04 and 7 but not 16.04 and 7. Eventually you could compare CentOS 8 when it comes out this year.
Re:What I learned while securing Ubuntu (2015) by sciurus on Saturday June 11, 2016 @11:04AM (#11883672)
No, RHEL 7 was released in June 2014, not 2012. There's no sign of RHEL 8 yet either; it would be quite surprising for it to come out this year.

https://access.redhat.com/articles/3078

Re:What I learned while securing Ubuntu (2015) by JdeBP on Saturday June 11, 2016 @07:58AM (#11883136)
> Actually 7 is released on 2012 while 16.04 is released on 2016.

Observe that that was chrisper's original very point.

Re:What I learned while securing Ubuntu (2015) by wildmusings on Friday June 10, 2016 @10:16PM (#11881663)
Those are the current versions of each. The comparison is between the kernel versions, not the distro version numbers.
Re:What I learned while securing Ubuntu (2015) by coredog64 on Friday June 10, 2016 @10:37PM (#11881724)
Even the kernel version isn't particularly helpful, as Red Hat is backporting new features into the version shipped by RHEL 6 and 7.

One specific example is the SO_REUSEPORT socket option which was added to Linux kernel 3.9, and was subsequently backported and became available since RHEL 6.5, which uses version 2.6.32 of the Linux kernel.[0]

[0] https://en.wikipedia.org/wiki/Red_Hat_Enterprise_Linux#Kerne...

Re:What I learned while securing Ubuntu (2015) by 6581 on Friday June 10, 2016 @10:22PM (#11881674)
"still at version 7" strongly implies a comparison of the distro version numbers.
Re:What I learned while securing Ubuntu (2015) by JdeBP on Saturday June 11, 2016 @07:56AM (#11883127)
No, it does not. It implies that one has been at a particular level for some time, whilst the other has only reached its current level recently. chrisper was very clearly not comparing the release numbers, as xe said. One only need read xyr prior comment in this very same thread where xe was talking about outdatedness of what is currently available.
Re:What I learned while securing Ubuntu (2015) by Daviey on Saturday June 11, 2016 @05:40AM (#11882827)
Which reminds me of 1999 when Slackware jumped from version 4 to 7, purely to keep up with competition.
Re:What I learned while securing Ubuntu (2015) by IE6 on Friday June 10, 2016 @04:05PM (#11879579)
I think, at least for RHEL, that is a feature.
Re:What I learned while securing Ubuntu (2015) by digi_owl on Friday June 10, 2016 @04:34PM (#11879791)
And Debian stable, see JWZs ranting on that regarding xscreensaver...
Re:What I learned while securing Ubuntu (2015) by meddlepal on Friday June 10, 2016 @02:52PM (#11878919)
You could always run Fedora Cloud: https://getfedora.org/en/cloud/

But you're back in the world of not having all those certifications which enterprise customers may want. On the other hand it shares common package infrastructure with RHEL so that's a bonus.

We used Fedora Cloud for a bit and I liked it. Be prepared for cutting-edge though, for example, journalctld rather than syslog.

We switch to Ubuntu for reasons not related to Fedora in particular but just ease of running an Apt repository on S3 vs Yum/Dnf.

Re:What I learned while securing Ubuntu (2015) by ProAm on Friday June 10, 2016 @03:25PM (#11879233)
Cutting edge is terrible for running a business on though.