Notices tagged with opensuse, page 2

xz-Attacke: Hintertür enträtselt, weitere Details zu betroffenen Distros

Experten halten die Hintertür in liblzma für den bis dato ausgeklügeltesten Supplychain-Angriff. Er erlaubt Angreifern, aus der Ferne Kommandos einzuschleusen.

https://www.heise.de/news/xz-Attacke-Hintertuer-entraetselt-weitere-Details-zu-betroffenen-Distros-9671588.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Debian #Fedora #Linux #LinuxDistribution #OpenSource #Opensuse #RedHat #Security #SSH #Ubuntu #news

@killyourfm @thunderbird for me, compared to other projects or even general topics, the chat is quite fragmented on the mozilla irc and matrix instance. without any plumbing/puppeting that i am aware of and a sheer mass of channels, without a curated list like: USE THESE for thunderbird, firefox, general mozilla and so on.
As a regular IRC user i struggled/failed to find a channel to idle and chat like i do in ##linux or #opensuse alltough i dont even use opensuse. 😁

@pitch @thunderbird You precisely nailed one of the problems I’m trying to solve, so it’s quite validating to see it. And of ALL those channels (at least on the Thunderbird side) there’s not one to just hang out and chat with the community.

(When I was running Linux For Everyone, we had a bunch of Windows and macOS users hanging out just because the community was so awesome. So I appreciate your comment about #opensuse too!)

In this week's #Linux and #OpenSource news video, we have:
- #OpenSUSE leap looking to push the immutable distro space forward
- #Ubuntu 's Steam snap becoming a problem for Valve, to the point they recommend you don't use it
- #Google pretty much giving up on their Fuchsia OS

And a lot more stuff!

https://www.youtube.com/watch?v=BH5ghaSLVUc

Even today it is still possible to use the KDE3 desktop on openSUSE. In this updated tutorial, I explain how: https://www.spacefun.ch/gos

#Linux #openSUSE #KDE3 #Retro #Retrocomputing

James Bottomley posted new version of the #HMAC encryption patches for #TPM2: https://lore.kernel.org/linux-integrity/20231127190854.13310-1-James.Bottomley@HansenPartnership.com/T/#t

I spent some time refactoring the tpm_buf changes because they were the major glitch for me in the earlier versions, and those patches have been included now to this series, which is of course great. The series is probably rather sooner than later ready for inclusion to the mainline.

This adds up to the TPM2 sealed hard drive encryption by mitigating bus interposers by a factor. An interposer anything interface the traffic between the CPU and a discrete TPM chip (i.e. not firmware TPM).

A bus interposer can reset a TPM and replay PCR’s as the chip returns to its initial state including PCRS. To mitigate this, kernel creates HMAC session for each TPM transaction and derives session key from the so.called null hierarchy, which essentially provides a new random seed per TPM reset.

Therefore, interposer’s ability to reset TPM decreases because kernel will not be able to communicate with the TPM and that way indirectly a malicious act can be detected by far better chances than ever before.

IMHO, this fits quite nicely to the stuff that #OpenSUSE and #Ubuntu have been working on lately.

@drewdevault glad that you posted and opened my eyes. going to remove `xdg-desktop-portal-hyprland` from #opensuse and onwards. and i will ask the packager for hyprland there as well.

We just used the new `podmansh` command in the latest version of #podman to shim in using an entirely different container when you login.

Here's #fedora but running an #openSUSE tumbleweed image as the userspace, no extra steps needed.

There's lots of things left to fix (it's an early MVP of course) but I've been able to "switch my terminal userspace" from ubuntu <-> opensuse no problem.

@anarchopunk_girl@kolektiva.social @AndersZorn@kolektiva.social thanks to YaST you'll never use the terminal for sysadmin stuff again hehe)....but you still will need terminal for system updates. Or, at least, back when i last used oS TW ~7 years ago, one of the best ways to break one's system was to use YaST for system updates. Back then, YaST was coded to do updates via sudo zypper up [which was only correct for & applicable to Leap], rather than the correct sudo zypper dup. Have they changed YaST for TW now? If not, i'd still avoid using it for updates in TW.

#openSUSE #Tumbleweed

Look like 'cyphar', who is a SUSE employee, made a Fork of Canonical's LXD https://github.com/cyphar/incus This fork was made in response to Canonical's takeover of the LXD project from the Linux Containers community. The main aim of this fork is to provide once again a real community project where everyone's contributions are welcome and no one single commercial entity is in charge of the project. #linux #ubuntu #debian #opensuse

#openSUSE #Tumbleweed is fucking amazing

- very lightweight and fast for a distro that comes with GNOME

- excellent battery life

- custom suse-prime tool

- one of the few distros that gets nvidia drivers supported directly by nvidia

- rolling release, but isn't just willy nilly package updates whenever upstream updates their packages, but synced per day, so you get a synced up set of updates for that day that can be heavily automatically tested on their continuous integration serves to make sure that combination of packages doesn't cause problems, meaning it's rolling release but every day you get a tested and stable build that won't have problems. NO OTHER DISTRO HAS AUTOMATED QA, and no other distro does synced and tested rolling release like this, it's amazing.

- a very powerful package manager with a full SAT solver built in, and tracks what source each package is from and lets you switch it, so you can't get into messes like on Arch

- btrfs deeply integrated into the entire OS and installer

- an extremely powerful and in-depth installer (very advanced partition manager that lets you mix ext4, XFS, btrfs, LVM, and FDE in whatever baroque way you want, lets you pick *every single* package installed on your computer if you want, or pick general patterns and then cut down the patterns, or even install arbitrary packages as part of the installation process), gives you Arch-level control but with a GUI and sanity checks

- btrfs snapshots integrated in the update and pkg install process and with easy to use tools so you can rollback easily after any big change

- supports Secure Boot

- one of the only (if not the only) distro that *properly* supports Trusted Boot, which uses the TPM to do a user-settable chain of verification and trust for the entire boot process, exactly like Graphene, to protect you from evil made and corruption of your core OS

- comes with AppArmor installed, configured, and enabled

- well integrated with vendor hardware, can actually do firmware updates from GNOME Software and such

- has a very nice stock GNOME option and KDE option, both well supported

- again, just really fast and lightweight and good on battery somehow

Every time I think about switching distros, I look at this list of features and realize that, like, honestly? I'm not gonna find anything this good overall even if other distros might have other cool features. It's rolling release to satisfy my need for the latest stuff without being unstable. It's light and fast and deeply customizable in advanced ways, and yet easy to do that for bc of YaST and the installer and the sanity checks those have.

The relationship between Fedora and @opensuse is unique among our sponsors because openSUSE is not a downstream project of Fedora. It goes to show the overlap in our two communities and how we've supported each other in different ways. Many thanks to our friend the Geeko!
:fedora: 🤝 :opensuse:

#Fedora #openSUSE #FlockToFedora #FlockIreland #Linux

Considering checking out an #immutable #Linux distro that uses #distrobox, like #openSUSE #MicroOS or #VanillaOS, because I like the extra security and separation and atomic updates and so on they offer, it's a lot like the stuff I like about #GrapheneOS, but I'm not sure if they're actually any more secure, since new root OS components can still be installed, it just requires a reboot. Does anyone know?

#Multimedia on #Linux has come a long way. Go down memory lane & see what is currently happening n the space like #h264 & #FFmpeg. #openSUSE #Conference talk. https://youtu.be/rKzEpopy-co

Calling all passionate #opensource enthusiasts! Join the #openSUSE movement & contribute to the incredible world of #Linux. If you're a #developer, #designer, #translator or #tester, your skills are valued! Start your #contribute journey by visiting https://contribute.opensuse.org

If you are interested in a building a system for either #aerospace, #telecommunications, #automotive, #defense, #healthcare, #hospitality, #manufacturing, #robotics, #blockchain or #web services, test out #openSUSE's Leap Micro 5.3 Beta. See how powerful it can be and find bugs before its release. https://news.opensuse.org/2022/09/09/leap-micro-beta-available-for-testing/