German city wants to ditch Microsoft for Linux
androidrookies.com
androidrookies.com
Uh oh.
Currently transitioning:
- Astra Linux (Russia) https://www.zdnet.com/article/russian-military-moves-closer-...
- Kylin Linux? (China) https://www.techradar.com/news/china-to-ditch-all-windows-pc...
- South Korea https://www.zdnet.com/article/south-koreas-government-explor...
Already transitioned:
- Red Star OS (DPRK) https://www.pcworld.com/article/2862737/meet-red-star-os-the...
- Nova (Cuba) https://www.omgubuntu.co.uk/2017/07/nova-os-new-release-scre...
https://www.microsoft.com/en-us/securityengineering/gsp
It's more about long-term strategy. China wants full control over their OS. They want features Microsoft would never add. They want support for their own hardware, etc.
Probably just easier to do it on your own and if at some point one of the distributions is gaining some momentum maybe then others will adopt it and send patches upstream.
Some listed countries are banned or blocked from major company services that might be default on a normal distro, such as Google or GitHub as well. So beyond just setting country-relevant defaults, using a standard distro may present problems for some countries.
If this is about trust, then it makes sense that you don't choose between trusting a corporation or a group of hobbyists, but take control and eliminate one layer of things to trust altogether. Bonus points, you get control too and don't have to fight upstream to pursue and care about your interests.
Also if your country does not need to follow the laws about the codecs you can include them and not have your users have to install them.
What interested me most is that Pardus project had its own packaged manager called PiSi, which was then adopted by Solus.
I bet Pardus project had their own reasons to adopt the apt system and rely on Debian volunteers for all packaging support. As the OS is largely maintained by a government institution, I'd imagine it doesn't have the large userbase as Debian does.
There are also some other cool projects made for Pardus, for example Zemberek, a spell checker for the Turkish language that uses natural language processing for Libreoffice and Openoffice: https://github.com/ahmetaa/zemberek-nlp
https://youtu.be/8LGDM9exlZw?t=2122
Previous discussion: https://news.ycombinator.com/item?id=8856979
Not just jobs for consultants, this would be a shot in the arm for all opensource tech. Over time, we could have a greater adoption of open source databases, BI tools and whatnot. This could lead more support for open source, more monetisation opportunities.
IMO, this is a great start and if more public institutions were to follow in the same vein, would lead to a virtuous cycle.
Anyways, I worked in collaboration with Munich at the time and I believe it was a great project governments should embrace open source. We already pay taxes to them, so we should own the software as well.
https://www.theregister.com/2017/11/13/munich_committee_says...
Sounds a little ominous, did it not?
Hamburg will either get open source or a large ms office there if this goes the same way. Sooner or later MS will have to stop moving offices .
The half-baken "Flat UI" trend in Windows or the telemetry does not really concern me. Really, it is no deal for me and my colleagues. Embrace, Extend, Extinguish? Oh come on. I'm far more concerned about Microsoft losing against other players. That's the world you should be afraid of.
The best thing about Windows though is Visual Studio. The general consensus is, that it's slow, clunky and hard to use. But actually, that tool is so utterly powerful, streamlined and deep, that every other development environment I every used is missing something of its glory.
And I also love Linux in some ways. I used all different kinds of distributions, either through dual-boot or through Virtualbox, but actually the only thing I really use it for is server-side web-development. And well, what can I say. I love the server side applications. But all those arcane commandline wizardry and the configuration madness still irks me now and then.
But well, to return on topic: It's clear that I mostly work with clients, which mainly use Windows. And there is a lot of software written for Windows environments which can probably never be replaced by other software running on Linux. The thing is, that the push of Microsoft to cross-platform .NET Core or even cross-platform UI (MAUI) opens up those applications to other environments. I'm not fully convinced, yet, but we'll see.
Sorry, for rambling. Just my thoughts.
If Linux sorted the desktop issues out or windows sorted the server issues out it’d change the market.
Unfortunately it's hard for me to read more into your argument or position after I read the opening line.
Microsoft has the software support it does due to the monopoly position it has enjoyed for 30 years- this is not an argument to continue that lest we crown Microsoft "lord of the operating systems" because people actually pay them attention;
Thousands upon thousands of hours of non-microsoft employed developers time goes into supporting Microsoft's bottom line, only microsoft benefits from that.
Also I get a very "I had to go through a punishing time so I would prefer everyone else to be punished in perpetuity" vibe from your comments; similar to adults spanking children because they were spanked themselves and "they turned out fine".
I think we can do better, all of us.
Partially, but one must also give a huge amount of credit their efforts at maintaining binary compatibility of the userland for decades. This is something Linux Desktop fails at in spectacular fashion.
In Windows land you can download a binary and it will almost certainly run, and 10 years of updates later it will still almost certainly still run.
In Linux land you'll probably have to compile it yourself. And 10 years from now you will probably have to make changes to C files manually because APIs have been changed in your dependencies and then compile it.
Recompiling is just another option you have in case nothing else works, and it's an option that you do not have on windows. If you really REALLY don't want to recompile then I would suggest you start mirroring some of those old distros/packages yourself so that you can guarantee they will remain available to you. It would probably be prudent to keep the source packages around as well just in case you need them.
On Linux, that's often the rule for software that is 2 years old!
A quick search around the net reveals this to be false, because Windows XP Mode doesn't work in windows 10. I haven't used windows in many years so you'll have to forgive me if there's something I'm missing here, but I see quite a few pages like this complaining about XP programs being broken or requiring a lot of fiddling to get working: https://www.dosgamers.com/windows-xp/windows-xp-games
It makes no sense to me that you have no problem with this, but at the same time you're complaining about having to type something like "docker run ubuntu:precise" to get an old version of a Linux userspace running inside a container. If this is too much work then you can pay Canonical or Red Hat or any of the other numerous Linux companies for a support contract for an LTS distro. This seems to be very similar to the situation in redmond where you now have to pay for an extended support contract if you realistically want to keep using Windows XP/7.
In the Linux world, the community is pretty actively hostile to people simply wanting to run software not in the repo let alone originally compiled 20 years ago.
>In the Linux world, the community is pretty actively hostile to people simply wanting to run software not in the repo
This is wrong. Supporting software that is not in the repo has been the primary reason for adoption of containers, and also other similar things like flatpak and snap. The only difference with these is that the upstream distro cannot possibly support them because it goes outside their scope, so you have to get support from somewhere else.
Now that I'm thinking about it, I wonder if, given proprietary (no source) software A, you couldn't recompile every open-source dependency of A from their sources around A's release time, and get it running. Sticking to open source software as much as you can tends to be a winning strategy in the long term.
The other day I linked the sdl12-compat project, that allows programs such as UT2004 to make use of modern Linux desktop features. Sure, the original sdl 1.2 might not feel at home on a modern Linux desktop (icculus'demonstration[1] showed it was not much better on mac). But as long as the foundations are open, they can be improved upon.
Windows tend to fare better with binary compatibility. But old software feels more and more alien on recent windows versions, and sometimes just stops working, and there's very little you can do about it then, in most cases :/
This is a consequence of a userspace where most software is open source, and where distributions systematically recompile every package. As a side-effect, it is also generally more portable across architectures.
If Windows was free, and Linux cost $200, I'd still go with Linux.
I guess my point is that a lot of the reason so many people use Windows is because it's what they are used to, not because it's actually better.
A bit unrelated: In the beginning, I was on Ubuntu, and I almost got sick of it as the extremely ancient packages were driving me crazy. I had to have numerous PPAs just to get the latest versions of GCC, Clang, Inkscape, and various other tools. Even with all the PPAs it was a huge pain to always do extra work to get a version of some package that wasn't stale. Finally though, I discovered rolling distros, and made the switch to Arch, and never looked back. (The thought of using anything but rolling distros makes me shudder.)
Right now, I feel very comfortable and at home with KDE and Arch. KDE is simply just a very reasonable and well-thought-out desktop environment. Apart from that, I've been getting back into gaming (on Linux) thanks to Steam's Proton.
[1] At some jobs, the work computers were Macs. And before I started using Steam's Proton, I did have Windows on my desktop solely for gaming. Fortunately, I've never had a job that required me to use a Windows computer. At one job where I was provided Windows computer, I (along with my whole team) just installed Arch on it. Strangely, each person on my team was on a different lineage of Linux. One person was using a Redhat derivative, another person the Debian-derived Ubuntu, I was on Arch, someone else might have been on SuSE. (It was primarily a Java and JS/React web dev shop, so nothing was tying us to Windows.)
Maybe I just had some bad luck regarding Linux. I started with Suse, switch to Gentoo, then Ubuntu and Fedora and others inbetween. I remember the fights I had to take to make 3D acceleration work, strange problems with hardware, things which could not be solved easily where you instead search for step-by-step tutorials on every corner of the internet, distributions which completely failed after certain updates...
You know, it's interesting and all. But in some way I got older and value my time more. So I always went back to the tool I know best, which is Windows. And I think, many many people had similar experiences I had.
What I found most interesting was that I saw a video of the creators of plan9 who were running it inside a Windows VM. At that time, I thought if those guys formerly working in the experimental OS division of Bell Labs are not bothering with Linux hardware support and simply using Windows, why shouldn't I. I forced myself to use Windows as a host and ran a Linux VM for development for 6 months or so, then I gave in again and formatted back to Linux.
The same stubbornness that led me use Linux for years also led me to switch to FreeBSD, because off-the-shelf Linuxes became so decent that no config was necessary. (I also jumped on the systemd hate train.) After switching computers and getting a modern one I couldn't use FreeBSD because of GPU support. Now it has support but I don't go back to FreeBSD. I got older and valued my time more. Debian is what I feel the most comfortable with and I shall use Debian for a while.
OTOH, I really also want to try NixOS and DragonFlyBSD as my daily drivers at least for a couple of months :).
One thing that tells me is, that it is good to have multiple operating systems, open ones and proprietary ones. They can all learn from each other. And I long for the day where Windows will offer me an equal commandline experience like Linux and where Linux will give me a decent desktop environment, where "it just works". In some ways we're really close to that day. In many ways not so much.
The only thing which sometimes gets me is, when I think about all the time me and mankind in general did (and will) waste on learning the intricacies of operating systems. It's funny and sad at the same time :)
I have been a tinkerer all my life. I've installed and played with pretty much any OS you can think of (From BeOS to Solaris to Linux. Even DragonFlyBSD - which I wish would take off as I like the community). I will always continue to play and check Distrowatch, but I have started to value time more and more as the years add up {sigh}.
So with that, my love child though is, and always will be, Microsoft OS's. Started with DOS as a 10 year old and each new one I've enjoyed better than the last with Win10 being the best yet. Although I do deep down wish it wasn't full of telemetry and such, I don't get caught up in the FUD. I disable most of it and with the rest I just hope Microsoft uses it well/privately and that I am helping to make Windows better.
I have friends who do macOS or iOS dev (I don't know many win devs), and it's strange to hear them complain that Apple "won't let them" do something (distribute unsigned binaries, etc). It's my computer, I would never let someone prevent me from using it!
I feel like I am being suffocated when I'm using windows for development. My current solution is to keep a windows laptop for browsing/light gaming/travel, keep a Linux desktop for programming.
But we probably feel this way because we know Linux and many things are incorporated in our muscle memory. If we spent nearly equal time on Windows, it could be hard to switch back.
You can still do that on Windows: https://en.wikipedia.org/wiki/Windows_Subsystem_for_Linux
...yeah, I realize the hypocrisy of preaching about open software and using nvidia... but it's definitely not seamless
I'll take this over the seemingly endless layers of GUI based configuration screens that Windows servers use. A text based configuration file is much easier to understand, and well, configure, imo.
My desktop I just want to plug hardware into and see it work, and run proprietary binaries without ever configuring anything.
Too bad there are dozens of different incompatible text-based formats for everything... oh and that they completely lack discoverability.
Now, I said "better" but still not "good" as the powershell APIs for many critical windows features are a nightmarish trashfire of multiple buggy overlapping implementations of the same thing, but they exist. It is now very possible to admin a Windows box from the console. And as much as Powershell is a bad programming language, it's a very powerful and expressive one that bridges the gap between shell scripting and full-fledged programming.
Granted your self-statement about being in a minority: I’ve used Windows for as long as you have and I say the quirks of Windows is what made me ditch it for Linux.
For a long time I was a naive Window Hero. Then I got smart.
I’ve been done with Windows for over 10 years now. I’m full Linux at home [I include Virtual Machine here].
I tolerate Mac//Apple OS at work. I try very hard to do the same for Windows at work. All of this is if I simply just must as required by Big Boss Say So.
I really _want_ to like Windows 10. I like the direction it's moving with WSL2/VSCode remote connections, but man am I scared by all the zero-day exploits and all the windows 10 releases that screw up machines. I can't take it seriously.
I am hopeful that MSFT can do something with Windows 10X containers that get rid of these security risks.
So Munich goes open source -> Hamburg gets inspired
and BAM - 14 years later it follows suit.
Projected costs for the switch back: 86.5 million Euro within the first six years.
A study by the city revealed that LiMux saved the city 10 million Euro over its lifetime.
Now Hamburg, where the Green party also won big, wants to change as well. Hamburg is even more significant since Hamburg not only is Germany's second largest city (Berlin first, Munich third) but also a state, which means it has more tasks than a "pure" municipal administration like Munich, while Munich administration sees pride in being "largest municipal administration" in Germany.
munic can not decide to put linux into its schools, because as a decision that would have to happen at the state level, that is bavaria.
but hamburg can. so if the hamburg transition is successful, that may translate into more Free Software in schools, which will be a model for the other german states.
It's true that entering the Linux world is a bit like entering a shoe shop: why can't they just make two versions, home and professional? ;)
i'd like the summer outdoor casual all natural materials pair please.
the 'problem' is that there are a dozen shoe factories, sorry, linux distributors, each with their own idea of what is home and professional.
But if these cities are smart, they would pool their resources together to fund common tools. All the bits and pieces are already here. What is needed is a solid package that can be deployed and maintained easily, with user friendly GUI.
Also, AD is becoming less comprehensive on windows, later versions of many MS packages require powershell and textual config additionally or solely. Not to speak of third-party software where AD group policy support was always spotty at best.
Yes, easy clicky setup is possible with AD, but your software options are severely limited, not even exchange is point&click-only nowadays
That's true, but Puppet and Ansible aren't meant for end user device management. They're primarily for deploying/running services. AD is the opposite, it's strong in end user scenarios and weak for running services.
Give it a bit more adoption, though, with more examples, snippets and tools, and that specific solution could do wonders. This is often a problem in the Open-Source world: little manpower, so works progresses slowly.
I'm pretty sure there are more (or less) obscure solutions.
https://guix.gnu.org/manual/devel/en/html_node/Invoking-guix... https://guix.gnu.org/blog/2019/towards-guix-for-devops/
Plus, it doesn't seem well suited to changing configuration on already deployed machines. If corporate comes and tells you all users must have their machines configured to automatically lock the screen after 5 minutes idle and enable some password requirements this tool would struggle.
I'll grant you that it seems to require a wizard to operate, or at least write a tutorial and investigate that use-case, but so does most software: I would be clueless in a AD environment, and it would take me a few hours to catch up on some basic concepts.
Now, it hasn't been designed with your specific example in mind (it could have been), so some wizard would most likely need to expose these knobs (lockscreen timeout, password policy)as easily accessible config items.
Don't most modern companies have web services for their internal apps? I don't have AD - I have an SSO web login for a variety of web sites and SAS products.
Who uses a printer these days?
File shares? That's Dropbox or Google Drive now.
Email? In your browser.
> These things all seem less and less important, though? Don't most modern companies have web services for their internal apps?
Actually it's more important than ever. All these cloud services means when staff leave there's more risk of an account accidentally being left open. Federated access resolves this problem.
> I don't have AD - I have an SSO web login for a variety of web sites and SAS products.
That "SSO web login" might still be Active Directory (it might not, but in many organisations it is).
> File shares? That's Dropbox or Google Drive now.
Or Microsoft OneDrive -- which would be authenticated against AD.
> Email? In your browser.
I'm a big fan of local mail clients but Microsoft have supported web mail longer than most people might realise. Quite a few years long than Google Mail. Longer even than Yahoo! Mail. OWA (Outlook Web Access) was first shipped in Microsoft Exchange 5 released sometime in mid to late 90s on Windows NT4. Sure, OWA was pretty basic but did a good enough job.
Microsoft also bought Hotmail back in '97
These days Microsoft have a pretty extensive suite of web-based office applications from Word and Excel through to Outlook. You might have heard of Office 365? Well that can also authenticate against Active Directory.
What Microsoft Active Directory buys you is easy integration with other Microsoft products like Windows; which is also a de facto standard in most organisations. However go anywhere that is a UNIX, Linux or Apple shop and Active Directory quickly becomes the wrong tool.
If it's not managed through the AD, it's often not allowed to exist. It's also (legitimate or not) often the reason to go for a microsoft tool or (azure) service, because it 'integrates more easily' with the access management stuff that is in place.
When IT administer thousands of Windows PC on domain, thats the kind of stuff they appreciate as it make their lives easier.
1. Remote management of company IT assets including individual users' computers.
2. Single source of truth for single sign-on.
3. Access control and remote configuration for network servers/resources.
If you dig further, there's even more stuff that connects into AD. For example, you can use it to set up and deploy internal certificate authorities for intranet apps.
If you're using Azure AD, you can extend single sign-on into non-Microsoft web apps. It includes an implementation of zero-trust networking.
The fact that it comes out of the box and is widely used is crucial, it means that as an IT professional you have less hassle with purchasing/configuring/deploying management software, and when you move between companies you already know the tools.
I think it's a good thing that governments are considering switching to Linux, but AD/AAD is a legitimately sticky product for IT management.
There's issues with Windows Server, sure, but AD and its relatives aren't one of them.
AD is a misnomer. It's not simply a directory. It not only does what OpenLDAP does but also what Kerberos does.
Openldap is aweful to configure by the way. The documentation is terrible, sometimes lacking important piece of information. I remember TLS being a pain to setup. Actually I think everything having to do with authentication (PAM, OpenLDAP, Kerberos, nss) on Linux is a pain to setup.
By comparison, AD is fairly nice.
Difficult question: how do you make people in power agree on a solution? Not even universities managed so far to standardize their IT infra.
Germany is a country where one city orders would new trains which would eventually crash into the next city's platform due to different platform dimensions [0]...
[0] https://rp-online.de/nrw/staedte/duesseldorf/duesseldorfer-r...
Most universities probably already standardized on Microsoft's ecosystem of product and solutions.
Question is: why change for something open source?
Answer: licenses for MS are costing a fortune and privacy considerations.
Later they rolled back then entire migration just to re-announce a new Linux migration more recently, see https://www.zdnet.com/article/linux-not-windows-why-munich-i...
i don't know if that even was the goal because realistically that is hard to achieve.
all in all it was quite a success for a transition at that scale.
the rollback was entirety politically motivated, and would have happened even if the transition was 100%.
likewise the new announcement is a political change.
https://arstechnica.com/information-technology/2009/03/frenc...
My favorite quote:
"Moving from XP to Ubuntu, however, proved very easy. The two biggest differences are the icons and the games. Games are not our priority." -- Lt. Col. Guimard
February 2017 - Politicians discuss proposals to replace the Linux-based OS used across the council with a Windows 10-based client.[37]
October 2017 - Once seen as a stalwart supporter of open source, the city council last week said that running a Linux-based operating system on its PCs would not be cost efficient in the long run.[38]
November 2017 - The city council decided that LiMux will be replaced by a Windows-based infrastructure by the end of 2020. The costs for the migration are estimated to be around 90 million Euros.[39]
May 2020 - Newly elected politicians in Munich take a U-turn and implement a plan to go back to the original plan of migrating to LiMux.[40]
Dataport is a sort of state owned software company for Hamburg and some other northern states. This appears to be the product: https://www.youtube.com/watch?v=Zpl0Xds1NMU
I couldn't find any open repos on the dataport website. Maybe I haven't looked hard enough. But that doesn't look like the big Open Source revolution to me.
Edit: I think people recommending jitsi below misunderstood my comment
I know from an insider that one of the largest areas of Sweden, at least one, has been moving to office365. While conscious people inside the very same organisation have been trying to prevent the move of data into the hands of a foreign company.
And at the same time large telcos with a lot of government clients have also moved to office365 but with warnings to their employees that they should avoid storing certain client files in this cloud solution until the legal situation is resolved. WTF
So basically these consultancy companies have a legal requirement not to store client data in a foreign cloud if that client is part of the Swedish government. But at the same time healthcare is moving to the cloud.
I wish I knew more about the legal situation, all I can give you are the observations and musings of a geek.
It's soul crushing.
The cloud provider is where it's at. AWS, Azure, GCloud ... and nothing from Europe.
The appropriate question to ask is: at which size can you afford a competent security team in-house for what you would pay for a secure cloud offering. I would actually love to know the answer to that question.
You realize that AWS/AZURE ect. all have GOVERNMENT contracts right? They have special infrastructure and portals just for government customers.
The special infrastructure is for users subject to certain federal government data rules, which isn't coextensive with “government customers”. Most government use of cloud services from the big public cloud vendors is exactly the public commercial offering. Most government data is, both legally and practically, less protected than HIPAA PHI, which both government and non-government customers use commercial cloud offerings for.
https://www.nytimes.com/2019/06/27/us/lake-city-florida-rans...
> A total of 214 schools using Skolelinux are currently listed on the DebianEdu Wiki. This case study[1] of implementing Skolelinux at a school in Greece is typical of user experiences.
[1] https://schoolforge.net/education-case-study/skolelinux-thin...
Hugh!
edit: Especially https://www.dataport.de/was-wir-bewegen/portfolio/projekt-ph...
disclaimer: No affiliation apart from being resident of said town. https://www.hamburg.com/residents/about/11853222/government/
They are probably doing to put pressure on Microsoft license fees..
[1] https://www.golem.de/news/von-microsoft-zu-linux-und-zurueck...
How does that work out in situations where Linux is adapted? Do they pickup a distro which provides support?
It's actually impressive that Microsoft has been able to pivot to such an extent that this news doesn't sound the death knell.
absolutely everyone who has used any of the alternatives for more than a few days.
I am finding it hard to think the city would have engineers releasing their own Kernel.
I am genuinely curious why would someone think that's an advantage. Please give some explanation atleast after the downvote.
But yeah I don't see why they still charge for Home Edition licences. Surely the focus should be on keeping people using Windows. It probably makes sense in the short term to charge but more and more people are either moving away from Windows or using unlicensed installs.
My impression from years of working with Windows 10 is that large parts of Microsoft actually would prefer that people stop using Windows. Windows is a personal computer operating system, which means that the user is in control of it, and the modern tech world abhors that notion. Case in point: they spent years trying to force updates with no user input.
Though I do not have significant data myself.
I did a transition for a company back around 2003. Total cost of transition was a net saving already in the first year. Including training, my work, minor new hardware, etc. A couple of their guys learned the systems maintenance enough to take over my work, so I made myself redundant. Just like it should be.
"German city of Munich, famous for rejecting Windows in favour of using Linux on its PCs, will return to Windows after the move won the backing of the full council."
Source: https://www.techrepublic.com/article/end-of-an-open-source-e...
https://www.zdnet.com/article/linux-not-windows-why-munich-i...
Apparently Ballmer visited Munich a lot trying to persuade the politicians to stay/switch back to Windows, even moving Microsoft's German HQ to the city.
From a long term perspective, my bet is on Linux.
"We're very happy that they're taking on the points in the 'Public Money, Public Code' campaign we started two and a half years ago," Alex Sander, EU public policy manager at the Berlin-based Free Software Foundation Europe, tells ZDNet. But it's also important to note that this is just a statement in a coalition agreement outlining future plans, he says.
"Nothing will change from one day to the next, and we wouldn't expect it to," Sander continued, noting that the city would also be waiting for ongoing software contracts to expire. "But the next time there is a new contract, we believe it should involve free software."
Any such step-by-step transition can be expected to take years. But it is also possible that Munich will be able to move faster than most because they are not starting from zero, Sander noted.