Hacker News Reader

Comment by tannhaeuser | Hacker News Reader

> I can't figure out why RHEL compat is so desirable

RHEL compat per se is irrelevant, it's the 10 years guaranteed maintenance enterprise customers are after, plus a path forward for their third-party software investments only certified on RHEL (because of said guarantees) and internal IT deployment/admin line processes. Despite making the rounds on HN, enterprise and other commercial users give a flying fuck to io_uring, systemd (up until RHEL 7 when they were forced to), namespaces, and other Linux "innovations" which in fact are just annoyances to justify contracts for 30+ years of ongoing maintenance of an age-old POSIX core operating system once developed in a couple of months and praised for its minimalism.

View on HN

So the enterprise and commercial users do care?

Or perhaps they "don't give a flying fuck"?

This ommission of the negative really grinds my gears, and I couldn't care less about American Idiom when it literally changes the meaning of the words.

> I couldn't care less about American Idiom

Sorry for my choice of words, you may be right after all, English isn't my native language. But of all idioms, yours isn't without irony either ;)

You know what grinds my gears? Needless pedantry and linguistic prescriptivism.

> This ommission of the negative really grinds my gears, and I couldn't care less about American Idiom when it literally changes the meaning of the words.

Tough luck? Language is like that, idioms especially. Just get used to the fact that not everybody speaks the same dialect of English as you do, and none of them are objectively the correct one in any sense.

You clearly knew what they meant, so there's no communication barrier here. You're being pedantic for the sake of it.

Perhaps I understood, because I have previous knowledge of the idiom, especially when it comes to the "couldn't care less" variation. However someone encountering it for the first time can only go with what is written, which clearly states that the subject "could care less" or "give a flying fuck", when the intent is entirely opposite.

Irregardless is a word.[74][75] Nonstandard, slang, or colloquial terms used by English speakers are sometimes alleged not to be real words, despite appearing in numerous dictionaries. All words in English became accepted by being commonly used for a certain period of time; thus, there are many vernacular words currently not accepted as part of the standard language, or regarded as inappropriate in formal speech or writing, but the idea that they are not words is a misconception.[76] Other examples of words that are sometimes alleged not to be words include burglarize, licit,[77] and funnest[78] which appear in numerous dictionaries as English words.[79]

https://en.m.wikipedia.org/wiki/List_of_common_misconception...

This specific case has been addressed multiple times by an authority. https://www.merriam-webster.com/words-at-play/could-couldnt-...

If LTS contracts are that lucrative, are the new Stream release models missing the market?

Are there time-to-patch metrics for comparison with and without stream as compared with IDK Fedora git?

Rpms/kernel explains: https://src.fedoraproject.org/rpms/kernel :

> The kernel is maintained in a source tree rather than directly in dist-git. The specfile is maintained as a template in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository.

Here are fedora's kernel patches: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patc...

RHEL <= 9 has kernel-lt (Long Term) and kernel-ml (mainline) kernel patchsets and packages: https://pkgs.org/search/?q=kernel-lt https://www.google.com/search?q=kernel-lt+kernel-ml

Notable Red Hat Enterprise Linux derivatives: https://en.wikipedia.org/wiki/Red_Hat_Enterprise_Linux_deriv...

List of commercial products based on Red Hat Enterprise Linux: https://en.wikipedia.org/wiki/List_of_commercial_products_ba...

There used to be a stack of numbered kernel patches in the kernel SRPM Source RPM, but now what is the best way to diff centos-stream-9's main branch with Torvalds/git:main? AFAIU kernel distributors must dist patches because GPLv2; packaging workflows are irrelevant to license terms? https://gitlab.com/redhat/centos-stream/src/kernel/centos-st...

Fedora and many other distros do a lot of valued work, too.

FWICS there are FIPS kernel variants for Ubuntu <= 20.04 LTS (2020) but not 22.04 LTS (2022), and Debian and Ubuntu don't have the selinux policy set that Fedora and RHEL+EPEL have. https://ubuntu.com/kernel

From https://news.ycombinator.com/item?id=36480033 :

> Would it be feasible to sed-replace the RHEL and/or Fedora selinux and container-selinux rulesets for use with other Linux distros?

> "AFAIU only SUSE can run both AppArmor and SELinux?

> And browsers are running as unconfined in selinux with like all major distros; even on ChromiumOS

Act like you added `systemd-nspawn respawn` to every SysV-init script and correctly formatted the epoch time in the correct column of each of the log files to merge and then logship again.

Conda-forge's GitHub PRs to feedstocks model works, but there are no grub or uboot or selinux-policy-targeted or container-selinux or kernel packages in conda-forge or Alpine linux.

containers/container-selinux: https://github.com/containers/container-selinux/tree/main https://src.fedoraproject.org/rpms/container-selinux/blob/ra...

From "Systemd service sandboxing and security hardening" (2022) https://news.ycombinator.com/item?id=29995566 :

> Which distro has the best out-of-the-box output for:?

   systemd-analyze security

And e.g. this in systemd units:

   SystemCallFilter=@basic-io
   SystemCallLog=~@basic-io

Reply on news.ycombinator.com