Language Selection

English French German Italian Portuguese Spanish

LWN

Syndicate content
LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page.
Updated: 2 hours 38 min ago

Three stable kernel updates

4 hours 1 min ago
Stable kernels 5.1.15, 4.19.56, and 4.14.130 have been released. The all contain important fixes and users should upgrade.

Security updates for Tuesday

4 hours 10 min ago
Security updates have been issued by CentOS (python), Debian (bzip2, libvirt, python2.7, python3.4, rdesktop, and thunderbird), Fedora (thunderbird and tomcat), openSUSE (aubio, docker, enigmail, GraphicsMagick, and python-Jinja2), SUSE (kernel, libvirt, postgresql96, and tomcat), and Ubuntu (ceph, firefox, imagemagick, libmysofa, linux, linux-hwe, neutron, and policykit-desktop-privileges).

Introducing people.kernel.org

4 hours 26 min ago
Konstantin Ryabitsev has announced a new public blogging platform for kernel developers. "Ever since the demise of Google+, many developers have expressed a desire to have a service that would provide a way to create and manage content in a format that would be more rich and easier to access than email messages sent to LKML. Today, we would like to introduce people.kernel.org, which is an ActivityPub-enabled federated platform powered by WriteFreely and hosted by very nice and accommodating folks at write.as." (LWN looked at WriteFreely back in March).

Changes at the Apache Software Foundation

4 hours 36 min ago
Here's a statement from the Apache Software Foundation regarding changes in its leadership: "It is with a mix of sadness and appreciation that the ASF Board accepted the resignations of Board Member Jim Jagielski, Chairman Phil Steitz, and Executive Vice President Ross Gardler last month." There is no indication of why all these people decided to leave at the same time.

[$] Lockdown as a security module

Monday 24th of June 2019 08:41:09 PM
Technologies like UEFI secure boot are intended to guarantee that a locked-down system is running the software intended by its owner (for a definition of "owner" as "whoever holds the signing key recognized by the firmware"). That guarantee is hard to uphold, though, if a program run on the system in question is able to modify the running kernel somehow. Thus, proponents of secure-boot technologies have been trying for years to provide the ability to lock down many types of kernel functionality on secure systems. The latest attempt posted by Matthew Garrett, at an eyebrow-raising version 34, tries to address previous concerns by putting lockdown under the control of a Linux security module (LSM).

Canonical backtracks on i386 packages

Monday 24th of June 2019 07:14:22 PM
Canonical has let it be known that minds have been changed about removing all 32-bit x86 support from the Ubuntu distribution. "Thanks to the huge amount of feedback this weekend from gamers, Ubuntu Studio, and the WINE community, we will change our plan and build selected 32-bit i386 packages for Ubuntu 19.10 and 20.04 LTS. We will put in place a community process to determine which 32-bit packages are needed to support legacy software, and can add to that list post-release if we miss something that is needed."

Two years of postmarketOS

Monday 24th of June 2019 04:39:53 PM
PostmarketOS is an Alpine Linux based operating system for mobile devices. The postmarketOS blog takes a look at the project after two years of development. "Wouldn't it be great if you could take any obsolete smartphone from the past ten years and replace its outdated and insecure software with a maintained, modular free software stack? How about then using it as a Raspberry Pi-like device for your next tinkering project? With some constraints, postmarketOS makes this possible today for 139 booting devices. Every single package in the whole OS can be updated, with the only exceptions being the vendor's Linux kernel and firmware blobs (if you plan on using them). In a few cases, it is even possible to switch out the discontinued vendor kernel forks with the upstream kernel releases straight from Linus Torvalds."

Security updates for Monday

Monday 24th of June 2019 03:32:39 PM
Security updates have been issued by Debian (jackson-databind, libvirt, pdns, and vim), Fedora (evince, firefox, gjs, libxslt, mozjs60, and poppler), openSUSE (dbus-1, firefox, ImageMagick, netpbm, openssh, and thunderbird), Oracle (libssh2, libvirt, and python), Scientific Linux (python), SUSE (compat-openssl098 , dbus-1 , evince , exempi , firefox , glib2 , gstreamer-0_10-plugins-base , gstreamer-plugins-base , java-1_8_0-ibm , libssh2_org , libvirt , netpbm , samba , SDL2 , sqlite3 , thunderbird , and wireshark ), and Ubuntu (web2py).

Kernel prepatch 5.2-rc6

Sunday 23rd of June 2019 01:10:04 PM
The 5.2-rc6 kernel prepatch has been released. Linus worries that the volume of changes has increased — but not too much. "With all that out of the way, I'm still reasonably optimistic that we're on track for a calm final part of the release, and I don't think there is anything particularly bad on the horizon." He also notes that, due to travel, he'll be releasing 5.2-rc7 later than usual.

Weekend stable kernel updates

Saturday 22nd of June 2019 03:12:19 PM
The 5.1.13, 4.19.54, 4.14.129, 4.9.183, and 4.4.183 stable kernels have all been released with another set of important fixes. A few milliseconds later, 5.1.14 and 4.19.55 came out with one more networking fix.

[$] FreeBSD turns 26

Friday 21st of June 2019 10:18:48 PM
The FreeBSD operating system is continuing to make progress, 26 years after it got its name. Among the areas where work is being done is on improved support for RISC-V, FUSE filesystem updates, C runtime changes, and security improvements. FreeBSD Day is celebrated on June 19, in recognition of the date in 1993 when the name FreeBSD was coined for a fork of the 386BSD project. The first official release of FreeBSD did not occur until November 1, 1993, however.

Ahead of FreeBSD Day, the project released its quarterly report for the first quarter of 2019, outlining some of its ongoing efforts. In addition to the quarterly report, the executive director of the FreeBSD Foundation provided LWN with some insights into the state of the project and the foundation that supports it.

[$] Statistics from the 5.2 kernel — and before

Friday 21st of June 2019 02:52:11 PM
As of this writing, just over 13,600 non-merge changesets have been pulled into the mainline repository for the 5.2 development cycle. The time has come, once again, for a look at where that work came from and who supported it. There are some unique aspects to 5.2 that have thrown off some of the usual numbers.

Huang: Open Source Could Be a Casualty of the Trade War

Friday 21st of June 2019 02:07:54 PM
Bunnie Huang writes about the escalating trade wars and how they could be harmful to the open-source community. "Because the administrative action so far against Huawei relies only upon export license restrictions, the Linux Foundation has been able to find shelter under a license exemption for open source software. However, should Huawei be designated as a 'foreign adversary' under EO13873, it greatly expands the scope of the ban because it prohibits transactions with entities under the direction or influence of foreign adversaries. The executive order also broadly includes any information technology including hardware and software with no exemption for open source."

Security updates for Friday

Friday 21st of June 2019 01:11:36 PM
Security updates have been issued by CentOS (libvirt and python), Debian (intel-microcode, php-horde-form, and znc), Fedora (firefox), Mageia (firefox, flash-player-plugin, git, graphicsmagick, kernel, kernel-linus, kernel-tmb, phpmyadmin, and thunderbird), Oracle (libssh2, libvirt, and python), Red Hat (libvirt and python), Scientific Linux (libvirt), Slackware (bind and mozilla), SUSE (enigmail), and Ubuntu (bind9, intel-microcode, mosquitto, postgresql-10, postgresql-11, and thunderbird).

[$] C, Fortran, and single-character strings

Thursday 20th of June 2019 03:16:53 PM
The calling interfaces between programming languages are, by their nature, ripe for misunderstandings; different languages can have subtly different ideas of how data should be passed around. Such misunderstandings often have the effect of making things break right away; these are quickly fixed. Others can persist for years or even decades before jumping out of the shadows and making things fail. A problem of the latter variety recently turned up in how some C programs are passing strings to Fortran subroutines, with unpleasant effects on widely used packages like LAPACK.

Kubernetes 1.15 released

Thursday 20th of June 2019 02:53:55 PM
The Kubernetes container orchestrator team has announced the release of Kubernetes 1.15; the main themes of this release are "extensibility and continuous improvement". One of the focus areas was on usability and lifecycle stability for clusters: "Work on making Kubernetes installation, upgrade and configuration even more robust has been a major focus for this cycle for SIG Cluster Lifecycle (see our last Community Update). Bug fixes across bare metal tooling and production-ready user stories, such as the high availability use cases have been given priority for 1.15. kubeadm, the cluster lifecycle building block, continues to receive features and stability work required for bootstrapping production clusters efficiently. kubeadm has promoted high availability (HA) capability to beta, allowing users to use the familiar kubeadm init and kubeadm join commands to configure and deploy an HA control plane. An entire new test suite has been created specifically for ensuring these features will stay stable over time." More information can be found in the release notes.

Security updates for Thursday

Thursday 20th of June 2019 01:06:39 PM
Security updates have been issued by Debian (firefox-esr, gvfs, intel-microcode, and python-urllib3), Fedora (advancecomp, firefox, freeradius, kubernetes, pam-u2f, and rubygem-jquery-ui-rails), openSUSE (elfutils and sssd), Red Hat (chromium-browser), SUSE (doxygen and samba), and Ubuntu (evince, firefox, Gunicorn, libvirt, and sqlite3).

[$] LWN.net Weekly Edition for June 20, 2019

Thursday 20th of June 2019 12:00:56 AM
The LWN.net Weekly Edition for June 20, 2019 is available.

[$] The TCP SACK panic

Wednesday 19th of June 2019 09:24:28 PM
Selective acknowledgment (SACK) is a technique used by TCP to help alleviate congestion that can arise due to the retransmission of dropped packets. It allows the endpoints to describe which pieces of the data they have received, so that only the missing pieces need to be retransmitted. However, a bug was recently found in the Linux implementation of SACK that allows remote attackers to panic the system by sending crafted SACK information.

Ubuntu dropping i386 support

Wednesday 19th of June 2019 09:14:59 PM
Starting with the upcoming "Eoan Ermine" (a.k.a. 19.10) release, the Ubuntu distribution will not support 32-bit x86 systems. "The Ubuntu engineering team has reviewed the facts before us and concluded that we should not continue to carry i386 forward as an architecture. Consequently, i386 will not be included as an architecture for the 19.10 release, and we will shortly begin the process of disabling it for the eoan series across Ubuntu infrastructure."

More in Tux Machines

GNOME Desktop/GTK: GNOME Shell 3.33.3, GStreamer Rust Bindings 0.14.0 and Sysprof

  • GNOME Shell 3.33.3

    GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. GNOME Shell takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts to provide a visually attractive and easy to use experience.

  • GNOME Shell & Mutter See Their 3.33.3 Releases With Notable X11/Wayland Changes

    Arriving late, a few days after the GNOME 3.33.3 development snapshot, the Mutter and GNOME Shell updates are now available. The Mutter 3.33.3 window manager / compositor update is notable with preparations for running XWayland on-demand -- a.k.a. just when needed for X11 client usage and not constantly. The Mutter update also now honors the startup sequence workspace on Wayland, fixes around fractional scaling, adds the new Sysprof-based profiling support, adds mouse and locate-pointer accessibility, consolidates the frame throttling code, improves screencasting support on multi-monitor systems, fixes running X11 applications with sudo under Wayland, adds initial KMS transactional support, and there are many bug fixes.

  • GStreamer Rust bindings 0.14.0 release

    Apart from updating to GStreamer 1.16, this release is mostly focussed on adding more bindings for various APIs and general API cleanup and bugfixes. The most notable API additions in this release are bindings for gst::Memory and gst::Allocator as well as bindings for gst_base::BaseParse and gst_video::VideoDecoder and VideoEncoder. The latter also come with support for implementing subclasses and the gst-plugins-rs module contains an video decoder and parser (for CDG), and a video encoder (for AV1) based on this.

  • Sysprof design work

    Since my last post, I’ve been working on a redesign of Sysprof (among other things) to make it a bit more useful and friendly to newcomers. Many years ago, I worked on a small profiler project called “Perfkit” that never really went anywhere. I had already done most of my UI research for this years ago, so it was pretty much just a matter of applying that design to the Sysprof code-base.

Intel UMWAIT Support Queued For Linux 5.3 - New Feature For Tremont Cores

Adding to the growing list of features for the upcoming Linux 5.3 kernel is now Intel UMWAIT support for better power-savings. UMWAIT is a new feature for Intel Tremont CPUs cores. UMWAIT can help enhance power savings during idle periods with "user mode wait" functionality. UMWAIT allows for monitoring a range of addresses in a lightweight power/performance state or an enhanced mode that can still help with conserving power but less so in order to offer lower latencies. UMWAIT is intended to be used as an alternative to kernel spinloops when needing to wait/sleep for short periods of time when the system is idle. Read more

today's howtos

Five Linux Server Administration Mistakes And How To Avoid Them

In 2017, an employee at GitLab, the version control hosting platform, was asked to replicate a database of production data. Because of a configuration error, the replication did not work as expected, so the employee decided to remove the data that had been transferred and try again. He ran a command to delete the unwanted data, only to realize with mounting horror that he had entered the command into an SSH session connected to a production server, deleting hundreds of gigabytes of user data. Every seasoned system administrator can tell you a similar story. The Linux command line gives server admins control of their servers and the data stored on them, but it does little to stop them running destructive commands with consequences that can’t be undone. Accidental data deletion is just one type of mistake that new server administrators make. Read more