News for hackers. Stuff that matters.
Re:Google discloses CentOS Linux kernel vulnerabilities citi... by josefx on Friday March 24, 2023 @12:04PM (#35291018)
As far as I can tell IBM officially nuked CentOS long term support in the same step it killed Red Hat compatibility with 7 being the last supported version.

The replacement for CentOS seems to be Rockit Linux, which continues with tracking Red Hat packages like CentOS did in the past.

Re:Google discloses CentOS Linux kernel vulnerabilities citi... by dralley on Friday March 24, 2023 @12:41PM (#35291710)
That is not true.

CentOS Stream is just as "LTS" as Debian, Ubuntu, or OpenSUSE - supported for 5 years. That is admittedly not as generous as the 10 years CentOS provided previously (and what Alma / Rocky linux have promised to provide), but it's definitely still "long term".

Re:Google discloses CentOS Linux kernel vulnerabilities citi... by josefx on Friday March 24, 2023 @01:25PM (#35292465)
That is probably what I get for checking my assumptions against wikipedia. One of the tables on the CentOS page makes it looks as if only CentOS 7 is still supported. On a closer check the table may just be incomplete. https://en.wikipedia.org/wiki/CentOS
Re:Google discloses CentOS Linux kernel vulnerabilities citi... by dralley on Friday March 24, 2023 @01:59PM (#35293080)
Oof, that table is very wrong. Even the release date for 8-stream is wrong. Thanks for pointing this out.
Re:Google discloses CentOS Linux kernel vulnerabilities citi... by anonymousiam on Friday March 24, 2023 @12:26PM (#35291434)
I always looked upon Scientific Linux as the CentOS replacement.

https://scientificlinux.org/

Re:Google discloses CentOS Linux kernel vulnerabilities citi... by scheme271 on Friday March 24, 2023 @12:42PM (#35291737)
Scientific Linux was killed in 2019 although security releases for SL 6 and 7 will probably continue as long as Centos 6 and 7 get them. I'd go with AlmaLinux or Rocky Linux if you want to something that's a free copy of RHEL 8 or 9
Re:Google discloses CentOS Linux kernel vulnerabilities citi... by jaboutboul on Friday March 24, 2023 @01:48PM (#35292895)
CERN chose to move forward with AlmaLinux: https://linux.web.cern.ch/which/
Re:Google discloses CentOS Linux kernel vulnerabilities citi... by chronogram on Friday March 24, 2023 @01:45PM (#35292840)
That's mostly replaced by Alma with the CERN repository: https://linux.web.cern.ch/which/
Re:Google discloses CentOS Linux kernel vulnerabilities citi... by red-iron-pine on Friday March 24, 2023 @02:02PM (#35293116)
RockyLinux is by the guy who did CentOS, and seeks to follow it's principles.

Scientific Linux is no longer a thing, essentially; from wikipedia:

> In April 2019, it was announced that feature development for Scientific Linux would be discontinued, but that maintenance will continue to be provided for the 6.x and 7.x releases through the end of their life cycles. Fermilab and CERN will utilize CentOS Stream[4] and AlmaLinux[5] for their deployment of 8.x release instead.

Re:Google discloses CentOS Linux kernel vulnerabilities citi... by carlwgeorge on Monday March 27, 2023 @11:10PM (#35335414)
> RockyLinux is by the guy who did CentOS, and seeks to follow it's principles.

Not quite. Back in 2003, when folks were first coming up with the idea of creating a distro that matched RHEL as closely as possible, Greg Kurtzer (the Rocky founder) explicitly stated that he would be interested in helping host it, but that he was "totally not interested" in leading it.

https://web.archive.org/web/20040909231336/http://www.caosit...

It wasn't until much later (~2019) that he started trying to retcon history by claiming he was the original CentOS founder.

Re:Google discloses CentOS Linux kernel vulnerabilities citi... by chasil on Friday March 24, 2023 @12:57PM (#35291978)
Rockit?

Oracle Linux 7 is guaranteed binary compatible with RHEL/CentOS 7, although there is only (a little over) a year of support left on the whole platform.

Scientific Linux was also on v7, but I thought there was some kind of ongoing apoptosis with this repackaged distro.

Neither Alma nor Rocky implemented v7. I thought that CentOS left that version untouched.

I wonder if the Oracle UEK has addressed these problems. If so, it would be a reason to run Oracle's kernel on CentOS, supported or not.

For those poeple who can tolerate neither these bugs nor Oracle's kernel, another option is ElRepo's "Kernel of Last Resort."

"We stress that we consider such kernels as a last resort..."

http://elrepo.org/tiki/kernel-ml

Re:Google discloses CentOS Linux kernel vulnerabilities citi... by snits on Friday March 24, 2023 @02:46PM (#35293715)
UEK can run into the same issue. It is just a picked upstream kernel with a bunch of stuff that Oracle cares about dropped on top of it, and managed by a much smaller team.
Re:Google discloses CentOS Linux kernel vulnerabilities citi... by chasil on Friday March 24, 2023 @05:34PM (#35295904)
It can run into the same issue, but they are all v5 kernels.

Rhel7 is running a v3 kernel; the UEK will have a lot less to do.

I will admit that they are with a few point releases on rhel9.

How many people maintain elrepo-ml?