Given Oracle's rather well-earned reputation, that does not sound like an attractive proposal to me, but there's a chance orgs that are on the hook for anything Oracle already might not share that assessment.
IIRC, Oracle's move to eat part of Red Hat's lunch was considered the reason Red Hat stopped making the kernel source available in the form of mainline tree + patches, thus making it less convenient for Oracle's staff to provide support at the same level of expertise as Red Hat, but I don't think anyone working at Red Hat has commented on this on the record.
That is not the case, RHEL is not possible with out the wider ecosystem, and to say Rocky Linux is a "dirtbag" for repacking RHEL, would be like saying RedHat is a "dirtbag" for packaging any number of free software projects they consume into their product.
It completely antithetical the free software movement for which Linux is Licensed
However it is perfectly on brand of the "Open Source" corporatist movement that seems to be supplanting free software
This has been happening on HN too. The vilification of GPL and AGPL as ”not free in the truest sense of the word”, the usage of RMS and his personal image to label the free software movement outdated/fanatical/toxic is a testament to how corporate rebranding efforts have succeeded in replacing free software with open-source — software that is conveniently licensed so that corporations can bake it into their product without a single concern for the longevity or well-being of the developer or the software itself.
Free Software and Open Source are essentially the same, despite the philosophical differences. The issue here is against the copyleft (GPL and AGPL).
No ... no they are not
>>despite the philosophical differences.
And those differences are HUGE and make them incompatible
Then see how many of those are OSI approved licences (thus open source).
It was like this at least 20 years ago.
Really as an end user, I just don't understand who would be against the Free Software philosophy: either you don't care, or you want as much control as you can on what you buy, but why would you ever say: "I don't want those weird licenses that give me more access to the stuff I buy, I want the other ones that make it completely proprietary and inaccessible".
Of course as a company, you want permissive licenses, such that you can use it for free, but keep it proprietary (because companies like to think that this one bugfix they made is very strategic IP).
> When we call software “free,” we mean that it respects the users' essential freedoms: the freedom to run it, to study and change it, and to redistribute copies with or without changes. This is a matter of freedom, not price, so think of “free speech,” not “free beer.”
https://www.gnu.org/philosophy/open-source-misses-the-point....
https://www.gnu.org/licenses/license-list.en.html#apache2
https://www.gnu.org/licenses/license-list.en.html#X11License
Permissive licenses are "free" in the sense that they allow to distribute free software (e.g. I can distribute a binary together with its sources even if they are MIT-licensed, and that would be free), but they also allow to distribute non-free software (e.g. I can take MIT code and distribute a proprietary binary).
Copyleft licenses enforce the freedom downstream.
I guess my original point is that I don't understand why people don't like copyleft, because copyleft enforces free binaries.
Does that make sense? Thanks for the correction.
To answer your underlying question: I like permissive licenses because I am not ideologically opposed to unfree software, and I’d rather software be used by a company than not at all.
My opinion differs here. First, the free philosophy is nice for me as a user: for instance say I buy a Marshall "smart" speaker, for which the software kind of sucks and is essentially not maintained (but still it connects to the internet...). I don't see how it would hurt Marshall to enable an open source ROM. After all, they sell the hardware, right? And a big part of the software running on that speaker is open source; they did not pay anything for it, and more often than not, they "forget" attribution for permissive code.
But companies try to minimize their costs, and contributing a bugfix back upstream is seen as a cost (conveniently ignoring that they did not pay for the software in the first place). With a copyleft license, of course the company can keep ignoring the license (like they do for attribution in permissive licenses), but at least it gives the developer an argument for contributing back upstream.
And it doesn't have to be GPL. LGPL and MPL are easy to handle.
> I’d rather software be used by a company than not at all.
If the software has value, I am convinced that they can deal with copyleft (see Linux). And if the majority of open source software was copyleft, then companies would be used to it. Copyleft is really not that bad, it is just perceived as a source of cost by companies.
> When we call software “free,” we mean that it respects the users' essential freedoms: the freedom to run it, to study and change it, and to redistribute copies with or without changes. This is a matter of freedom, not price, so think of “free speech,” not “free beer.”
This Venn diagram is FSF's view of the taxonomy:
Permissive licenses are free in the sense that they allow making free software (but they also allow making non-free software).
GPLv3 enforces the complete derived work to be free. LGPLv3 says that the particular library should stay free.
GPLv2, LGPLv2 and MPLv2 say that the source code (either of the whole derived work or just the library) should stay free, but tivoization allows making the product non-free.
Is that about right?
That was what I meant initially: in HN there's a strong opinion against copyleft, not necessarily free software.
To me, writing software in my free time and open sourcing it under a permissive license is shooting myself in the foot. I did the work for free, it may as well benefit me as a user. At minimum it should be MPLv2.
https://sfconservancy.org/blog/2021/mar/25/install-gplv2/ https://sfconservancy.org/blog/2021/jul/23/tivoization-and-t... https://events19.linuxfoundation.org/wp-content/uploads/2017...
I wonder if this is a point of disagreement between FSF and SFC -- I know they now have several disagreements.
In a similar time frame, I criticized attestation features in trusted computing because they would allow (in fact one of their main purposes was to allow) network services to allow only certain software configurations to interact with them. And I thought I was talking about a similar concept!
Thanks for sharing those links.
Attestation is indeed a big problem today, especially around Android devices and proprietary apps that won't run on libre Android distributions. The attestation feature of WebAuthn could also become a problem, but that is somewhat mitigated by the Apple passkeys not being attestable.
(that doesn't mean the difference isn't important though)
I don't really get why people are for non-copyleft licenses. LGPL is fine license.
Yes they are, according to people who use both terms. All “free software” licenses are also “open source” licenses and vice versa.
In practice, pretty much every Open Source license is also Free Software license and vice versa (there are some very nitpicky exceptions, but I guarantee they're not where you'd expect them to be).
* the term "open source" predates the term "free software" in the FSF sense
* "open source" was proposed as a synonym for "free software" in the late 90s
* liguistically, the term "free software" emphasizes freedom, while "open source" emphasizes source-available * there is no law mandating everyone use OSI's definition of "open source"
* consequently, there is ambiguity in the term "open source", ambiguity exploitable by those who want the social cachet of free software but are not philosophically aligned with it
* there is ambiguity in the term "free software" as well but don't worry, if they mean it in the FSF sense they will certainly take the time to explain
I humbly submit therefore that the GP framing is essentially correct, that RMS was right not to endorse the term "open source", and that whatever OSI says the term is philosophically compromised and should be "considered harmful".
What if i love and use the AGPL, but also won't involve myself with the FSF because I think they are runining the movement and also definitely want no direct association with RMS.
I think RMS is an active harm to the cause of Free Software.
GPL, only enforces redistribution of software you distribute, "to" the people you desteibute it to, aka customers.
Most other licenses (MIT, Apache, BSD, etc) don't require any code redistribution (though some require attribution).
GPL ~= redistribution to customers Other ~= no redistribution
Red Hat is complying with the GPL requirements even for BSD, Apache, and BSD licensed code, which I think is good.
I think a more sinister trend forming is around open core, and essentially proprietary code mixed with no code redistribution at all. This makes open core essentially closed source for all intents and purposes. Companies are using open core simply for free marketing and to drive technology adoption in the sales/marketing funnels.
RHEL Clones: Take finished source code, rebuild, test, release.
RHEL: Work upstream to develop features / submit features upstream before inclusion in RHEL, maintain specific versions of upstream, test hundreds of upstreams together to make sure they can be shipped together as an operating system, develop "glue" software like Anaconda to install + manage the whole thing, take source, build, test, release, accept bugs, start over again for next minor release or major release as needed.
And, of course, this elides all the certification work that makes RHEL an attractive enough project to rebuild in the first place because people want very specifically a RHEL compatible distribution to run an application or applications on top of.
What people get pissed at Red Hat about isn't that they don't get to access the source. They're pissed they don't get the convenience. Largely speaking, the people who get pissed aren't concerned about Free Software, either - they just want easy to run binaries. As I understand it "get binaries for free" is not mandated by the four freedoms. The source code is still out there for people to study, change, use, and redistribute. That seems entirely compatible with the free software ethos - but incompatible with the freeloader ethos.
Red Hat might have the legal right to gate their product, but it seems really slimy to build RHEL on the work of who knows how many people that publish it for free and then to put road blocks around their derivative.
I don't really like reductionist blaming, but I feel basically forced to wonder what Red Hat would be doing if IBM wasn't involved.
I'm always curious that people get angry at Red Hat profiting on the work of others, but few people get angry at the companies that use a RHEL clone to run their business and pay nothing and contribute nothing.
Red Hat is still releasing source code. The only thing that it's not doing is making it super-convenient to rebuild exactly its product.
Seriously - for most purposes CentOS Stream is just fine if what you want is a distro that feels like RHEL. Its one drawback is that it's not a one-for-one clone of RHEL, which generally only really matters if you are using it to run your business. Which gets me back to - why are people so pissed at Red Hat but not all the organizations that make money using RHEL but don't pay towards its development?
Releasing only to their customers and only if not redistributed. If you held redhat to the same standard for the open source they redistribute they couldn't exist.
CentOS wasn't selling support contracts tho.
Not that I think anything they are doing is in any way wrong mind you.
[1] https://www.redhat.com/en/about/open-source-program-office/c...
And I think an analogy is apt. Someone was one telling me that religions that are slightly different (think Protestantism versus Catholicism) lead to far greater strife than religions that are vastly different (like Buddhism and Catholicism.) Maybe people are just louder about the things they care about and feel close to.
GPL tries to guarantee an environment for user freedom (not developer convenience, like permissive licenses). It has builtin protection against someone closing the source. It doesn't protect against some company pulling an Internet Explorer on you (i.e. providing a free equivalent) with your own code, because this doesn't directly concern user freedoms. You don't have to be actively helping them though.
I think ultimately free-of-charge mirrors should exist, but I see good potentials in companies discovering business merits of GPL, and hopefully AGPL. We need more vigor for those, after getting lucky once with Linux. We cannot rely on good will of corporations (only enforced law works on them), so any sign of luring them into copyleft somehow is a good thing. This would be a long road, but who knows what could happen in the current "AI" chaos and regulation scares.
[1] Of course only have to assuming that you are not the original author and you're building on someone else's code received under GPL.
The "Unbreakable Enterprise Kernel" includes full btrfs, extensive device support (that is removed from the stock kernel), is tuned for the eponymous database, and is always more current. There are several scenarios where it is very attractive.
Oracle bought K-Splice several years ago, which was the first rebootless patch solution for Linux. It's only available with a premium license; Kernelcare is a lot cheaper.
Supported Oracle Linux versions are also available for WSL1 inside of Windows.
C:\>wsl.exe -l -o
The following is a list of valid distributions that can be installed.
The default distribution is denoted by '*'.
Install using 'wsl --install -d <Distro>'.
NAME FRIENDLY NAME
Ubuntu Ubuntu
Debian Debian GNU/Linux
kali-linux Kali Linux Rolling
Ubuntu-18.04 Ubuntu 18.04 LTS
Ubuntu-20.04 Ubuntu 20.04 LTS
Ubuntu-22.04 Ubuntu 22.04 LTS
OracleLinux_7_9 Oracle Linux 7.9
OracleLinux_8_7 Oracle Linux 8.7
OracleLinux_9_1 Oracle Linux 9.1
SUSE-Linux-Enterprise-Server-15-SP4 SUSE Linux Enterprise Server 15 SP4
openSUSE-Leap-15.4 openSUSE Leap 15.4
openSUSE-Tumbleweed openSUSE Tumbleweed
Oracle Linux came into existence shortly after Red Hat bought JBoss. As Oracle had also bought BEA Weblogic (IIRC), this was not taken well.v7-rhck-3.10.0-1160.92.1.0.1
v7-uek-5.4.17-2136.320.7.1
v8-rhck-4.18.0-477.13.1
v8-uek-5.15.0-102.110.5
v9-rhck-5.14.0-284.11.1
v9-uek-5.15.0-102.110.5.1
Kernel version 3.10 has always been stock rhel7's version, but the UEK has jumped through v4 to v5.
Red Hat made a big deal about io_uring availability in v9, but I am guessing that it is available in v8's UEK.
I will say that the Oracle database group's support for v9 is very poor at this point; for some reason, they are holding to v8, and releasing few products for the newer platform.
I'd never go for btrfs in anything enterprise.
But it does annoy me how RHEL moves normal open source software to the separate repos that are available with extra support packages, it just makes managing it annoying
Oracle fixes that.
The only outcome I see for these "business models" at Oracle, Rocky, Alma, etc. is increasingly less availability of software for us regular users. Say what you might about RH but you can't argue that they put out massive amounts of open source code out there for all to use. Or they did anyway.
I can see their problem with Oracle, but Rocky linux is probably bringing them business.
If my job wouldn't mandate a specific distro, I would use Rocky Linux where the management doesn't want to pay for support, and RHEL whenever possible.
So, while they definitely aren't ideal, its hard to point to another company that does more across as much of the opensource ecosystem. Maybe google these days? But one needs only look at some of the google projects governance model to see the difference between RH and Google.
Pre-IBM sure... Post IBM hardly
>>its hard to point to another company that does more across as much of the opensource ecosystem. Maybe google these days?
Really, you think google is a good example of Open Source... wow how far we have come..
Google worse than Microsoft when it comes to the EEE model
You are correct Canonical is not ideal, but I find them to be more ethical and upfront than Post-IBM RedHat and for sure google
Can you put some substance on that statement?
We are having this conversation on an article about them doing their best to avoid sharing their source code in order to kill their downstreams.
Because CentOS existed, I made sure most of my open source work would run just as well on all RHEL derivatives as it does on Debian.
If Rocky didn't exist, I would quickly drop all my RHEL support because operating thousands of test machines and containers based on UBI and having to keep up with their licensing game would cost too much of my time.
Rocky and Alma are the only reason devs like me still build anything for RHEL.
Containers are mostly ephemerals when used for build and test purpose.
That's why I stuck with Rocky Linux instead of just dropping all RHEL support entirely.
And there are _a lot_ of test runs where I have more than 20-30 test containers running simultaneously with Rocky Linux 8 and 9.
Do I have to write new software that limits my test infrastructure to only run 16 tests at a time or something idiotic like that? Do I have to even wonder about that using Debian, Arch, heck even Amazon Linux? No.
So basically you are saying the author of an ansible book do not care spending a couple of minutes understanding a simple process to automatise it.
Sounds like great advertising for your books really.
(That said I agree that dealing with subscription-manager at all is a lot more annoying than ... not having to do so with RHEL derivatives!)
So yeah, 5 years is pretty recent, unless you started using linux last week.
If you have a source with the original announcement, by all means share it.
EDIT: found an announcement of march 2016 so we are talking +7years at least.
> The Individual Developer Subscriptions allow you (as an individual, natural person) to use certain Red Hat Subscription Services in connection with Red Hat Software for Individual Development Use and for Individual Production Use subject to these Program Terms at no cost.
> “Individual Production Use” means any use other than for Individual Development Use including, but not limited to, using the Software (a) in a production environment, (b) with live data and/or applications and/or (c) for backup instances
Red Hat also have a no-cost Developer Subscription for Teams agreement for organizations.
https://www.infoworld.com/article/3697733/chatgpt-s-parasiti...
That's funny, because that's how I tend to feel about Red Hat.
I avoid anything Oracle. Their licensing model is hell. Their products are usually terrible compared to competition. Cloud products are subpar. Products tend to require a support contract since it’s proprietary dogshit.
Some tidbits of Oracle and Larry Ellison (founder, CEO):
- in the early days of Oracle DB, it was benchmarked and compared against other RDBMS and Oracle DB was found to have poor performance. Ellison and Oracle tried to get the professor fired and introduced language into their EULA preventing benchmarking [1,2]
- then there is the growing list of controversies documented on Wikipedia [3]
[1] https://web.archive.org/web/20150313140846/https://starcount... (2015, archive.org)
Or they argue to exhaustion that MySQL (not MariaDB) is totally fine for production, despite decades the company who now owns MySQL strangling companies to near death over minutia.
It boggles my mind.
> Nobody ever got fired for buying IBM
Nobody ever got fired for buying, Oracle or Microsoft or any big incumbent. The same could definitely not be said for choosing any free software.
Ironically RHEL is IBM now.
Fail to make your budget work 5 quarters in a row and see how long you last. ;)
Or wait for a legal case to come up: someones getting fired, wether its you or a scapegoat you sacrifice.
Any org with deep enough pockets to afford Oracle at scale has a deep enough org structure and bureaucracy that those huge wasteful projects produce nothing but promotions.
Then my account was put in such state where I couldn't even pay to upgrade it to paid one
> Or they argue to exhaustion that MySQL (not MariaDB) is totally fine for production, despite decades the company who now owns MySQL strangling companies to near death over minutia.
Who you gonna trust, billion dollar corporation, or man that sold that DB off to them then started making a fork ?
Oh, that’s easy. neither.
I use postgres predominantly.
The full article: https://web.archive.org/web/20190919121901/https://www.reddi...
There are so many CVEs for Oracle specifically that are just bad default usernames and passwords, where they still dispute the CVE reports because it is "intended behaviour".
So ridiculous...
I remember our amazement on how we failed audit on having a cipher enabled in OpenSSH version that had that cipher removed in upstream...
Losely related: I've audited so many BSD instances that were using MD4/NTHASH in their passwd and shadow files because they wanted to keep compatibility with their Windows infrastructure... it's stunning to see what is still possible in terms of misconfigurations. Things that should have been removed a long time ago.
Regarding SSH, the FUTURE policy removes AES128, HMAC-SHA1 and DH Group 14.
I'm reminded of the definition of a linux distribution: a package manager and a source repository.
(that said, unbreakable linux, yeah)
But imagine being a contributor to a package which redhat incorporates and using it via centos/rocky.
CentOS was huge towards equipping smaller IT departments, startups and student on the RHEL ways, allowing them to jump on "real RH" when they got bigger. Alma Linux is the same. Rocky Linux does sell support, but even then it's still advertising RHEL.
However you may feel about Red Hat's actions, I'd trust that folks at Red Hat have done enough legwork to figure out that "CentOS as a loss leader for RHEL" wasn't working out the way people like to imagine it would.
(Note: I am a former Red Hat employee, but I do not have and haven't had specific access to any data estimating what CentOS Linux was expected to add to or subtract from the bottom line. But I feel pretty sure that many deals won and lost have been examined, many customers spoken to, and numbers crunched to inform their actions.)
If larger companies can run CentOS in production, they also can run Debian or any other distro without a support contract. They could even use a competing loss leader distro like OpenSuse Leap.
Don't get me wrong - I think it'd be great if Debian became the standard, assuming that meant that companies helped develop Debian and poured resources into it as a commons. That'd be much better than depending on Red Hat to do all the work and then not paying for it.
https://wiki.debian.org/LTS/Funding https://wiki.debian.org/ExternalEntities
And from a company perspective, Red Hat has already done a big swap out from satallite to Foreman / Puppet to really pushing Ansible. Similarly, they've stopped doing oVirt in favor of cloud style OpenStack, nee OpenShift. Which is great if you're building your own cloud fabric, but not really the VMWare / HyperV competitor oVirt was which is something lots of mid size orgs need. ProxMox still seems to be going.
And for people who aren't paying for support - I imagine they have skilled in house teams that can certainly figure out Debian if they've been orchestrating CENTOS and now Alma say.
And it turned out near-nobody did so they turned it into stream so you could no longer have "same as RHEL" version.
I have no love for Oracle but I would imagine one of the reasons Oracle embraced RedHat Enterprise Linux early on was the fact they could fork it if it was in their interest - this was tremendous value for RedHat for a time and helped its establishment as leading Linux for Enterprise.
Remember also what RedHat itself "stands on the shoulders of the giants" - there are a lot of packages which RedHat includes. Years ago when I worked at MySQL AB RedHat used to include MySQL packages, say they are covered by their "subscription" but have no revenue share with MySQL AB (as creators)
Note I'm not complaining I'm saying this is exactly how things upposed to work - MySQL got great value from being Open Source and allowing Linux distributions to include it (and make money on it) freely.
MySQL got great value
Mindshare? Market share? Support contracts?But other distros are much better IMO.
There's good reasons that a totally free distro like Debian is forked so much. It's just a really solid base. Software doesn't need to have a business model to be great.
I'd be a lot sadder to see Debian disappear than RHEL and its derivatives.
All I know is anecdotes. RHEL 7 and Ubuntu 14.04 came out around the same time. Around May, upstream QEMU started getting bug reports from Canonical developers that you couldn't reset a virtual machine that had been created in 12.04 and migrated to 14.04 due to some firmware incompatibility.
In RHEL we had started testing cross-version migration 6 months in advance.
They are not. Maybe this is how the YC/VC crowd sees everything. Dollar went in, two dollars come out. Two points:
1) RHEL is not an island. It uses (and contributes) upstream.
2) They undercut the spirit, if not the letter, of GPL by forbidding customers from releasing the sources. Don't want derivatives ? Don't use copyleft free software. Can't have your cake and use it too.
Alma/Rocky aren't to my knowledge offering any support (and if they plan to, they shouldn't). Are customers cross-shopping RHEL with Alma? You either want support, and buy RHEL, or you don't, and you use something else (Alma/Rocky, or Debian/Ubuntu etc..)
RHEL became the enterprise Linux distribution because it was the one used and supported by Oracle, back then, when many companies still used Oracle as their database.
I am talking about 15 years ago.
Even nowadays at work, we all use Ubuntu in our workstations, but the servers run CentOS (another repackaging of RH).
Without the support of Oracle, we all would be using SUSE in our servers, instead of a Red Hat based distro.
> Since the earliest days of Linux or MySQL, there were companies set up to profit from others’ contributions. Most recently in Linux, for example, Rocky Linux and Alma Linux both promise “bug for bug compatibility” with Red Hat Enterprise Linux (RHEL), while contributing nothing toward Red Hat’s success. Indeed, the natural conclusion of these two RHEL clones’ success would be to eliminate their host, leading to their own demise, which is why one person in the Linux space called them the “dirtbags” of open source.
> If there are any real parasites, it's Oracle Linux.
https://en.wikipedia.org/wiki/Oracle_Linux
> Oracle Linux (abbreviated OL, formerly known as Oracle Enterprise Linux or OEL) is a Linux distribution packaged and freely distributed by Oracle, available partially under the GNU General Public License since late 2006.[4] It is compiled from Red Hat Enterprise Linux (RHEL) source code, replacing Red Hat branding with Oracle's.
I had no idea that Oracle Linux was essentially RHEL with %s/Red\ Hat/Oracle/g and Oracle has a market cap of $330bn