Bonum Certa Men Certa

I Found a Two Year Old BtrFS Programs Bug in openSUSE; Still Better Than Fedora/RHEL

Reprinted with permission from Ryan Farmer

S

o far the worst thing I have to say about openSUSE Leap is that I found a bug in btrfsprogs.



When I told it to defrag and compress, I assumed it would use what the /etc/stab was set to and give me ZStandard compression.



I was wrong.



The kernel had already started compressing some files and so part of them are in ZStd and some in zlib (DEFLATE). No problem. Just redo btrfs filesystem defragment with -czstd and / and nope.



Error that Zstd is not a recognized compression format. What?



I tracked it down to an issue with openSUSE Leap’s version of btrfsprogs which is frozen on a version that had a regression and has not been fixed.



I could start jamming in updates to btrfsprogs and call it solved or I could just have it recompress as lzo for now.



Fortunately, this was the worst issue I’ve encountered so far.



I quickly ruled out openSUSE Tumbleweed after hearing stories like I woke up a laptop that hadn’t been updated in a few months and updated it all and it broke.



Rolling releases need a lot of administrative attention and that’s a cognitive load that I was just sick and damn tired of with Fedora, which isn’t even a full rolling distribution (things like glibc and the desktops still follow a major version).



The kid in you wants rolling release froot loops but the adult in you wants boring fiber cereal.



Like RHEL, the kernel stuff from SLE/D is kept back and SUSE backports hardware enablement and features and bug fixes selectively. But with openSUSE Leap, you can see the source code without the company threatening that there will be “consequences” for you, even though the GPL doesn’t allow these “consequences”.



So instead of a drama bomb sometimes when you update a Fedora kernel and get an error mounting the file system or Intel fuckery about turning off your graphics card for an entire release series before turning it back on months later and declaring that they gave up trying to fix a security issue in the driver, which is exposed to the Web platform thanks to Mozilla and Google, things kind of tend to stay working.



Unless you have a very new laptop and need a certain distribution that just brought it all in because they never support their releases very long, there’s basically no reason to mess with the “fuck around and find out” nature of installing Fedora and their broken updates.



That’s why I gave up on Debian 11 and moved over in the first place. My graphics acceleration was just doing odd things in my games and I figured I’d roll with the punches for a while and never moved distributions again until now.



Fedora is in a retrograde state at this point. Things break randomly and don’t get much or any attention even on very common hardware



“It Must Be My Huge CoC”. Another Fedora Rant. (Sorry.)



Roy and I were talking last night about the Fedora developers that have given up and threw their hands in the air and left or got banned for “CoC” despite doing exceptional work for Red Hat, unpaid work, for many years.



My CoC complaint against IBM/Red Hat Fedora’s IRC Moderator, Walter Francis, was acted on, kind of, by “jflory7”.



jflory7 CoC

In TechRights IRC, Roy Schestowitz commented.



[8/14/23 14:09] DaemonFC: do you know jflory?
[8/14/23 14:09] justin
[8/14/23 14:09] he prosted how ICBM banned an Iranian who had contributed to Fedora
[8/14/23 14:09] just because of natiionality
[8/14/23 14:10] i think jflory is with UNESCO now
[8/14/23 14:11] https://www.reddit.com/r/Fedora/comments/6ygtb3/why_i_have_deleted_fedora_and_wont_recommend_it/
[8/14/23 14:11] [Notice] -TechrightsBot-tr to #techrights- Reddit – Dive into anything
[8/14/23 14:11] “
[8/14/23 14:11] *Fedora is always free for anyone to use, modify, and distribute. It is built and used by people across the globe who work together as a community: the Fedora Project. *
[8/14/23 14:11] “
[8/14/23 14:11] ” From Fedora Export Control Product Matrix we can conclude that people that happen to be born and live in Cuba, Iran, North Korea, Sudan, Syria, and the Crimea Region of Ukraine are not part of the global community. I smell US politics here. It’s a shame, Fedora “
[8/14/23 14:11] 6 years ago
[8/14/23 14:12] years later:
[8/14/23 14:12] https://ahmadhaghighi.com/blog/2021/us-restricted-free-software/
[8/14/23 14:12] [Notice] -TechrightsBot-tr to #techrights- ahmadhaghighi.com | Free Software NOT as in free speech, NOR as in free beer
[8/14/23 14:12] “On 13th Jul 2021, I’ve been removed from Fedora Project with no prior notice because of this”
[8/14/23 14:12] “I don’t have any access to my Email (haghighi@fedoraproject.org) and my other FP resources (e.g., Fedora Ambassadors, Fedora People space, Git repo, etc.). My account was completely removed from Ask Fedora (I was an admin). All my posts in Ask Fedora (including the Welcome page for the Farsi section) were removed, and…”
[8/14/23 14:12] “My Fedora Project Wiki page User:Haghighi has been deleted on 2 September 2021. ‘

-Techrights IRC Log


So jflory bans people because of their nationality and then deletes them from the Fedora project. Nice. So much for not discriminating due to national origin, I guess.



IBMs lawyers buzz around and exclude tens of MILLIONS of people from Fedora, due to where they were born, and then says it’s “Free Software”.



Roy also mentioned:



[8/14/23 13:51] jflory will cover up for him [Walter Francis/Khaytsus]
[8/14/23 13:51] for sure
[8/14/23 13:52] they are the same “clique”
[8/14/23 13:52] like family
[8/14/23 13:52] you are always wrong
[8/14/23 13:52] by default
[8/14/23 13:52] presumed guilty
[8/14/23 13:52] at best he might apologise and remove the ban
[8/14/23 13:52] but needs to grow a pair and swallow his pride

-Techrights IRC Log


Needless to say, I doubt they’ll take action against their toxic individual. Perhaps more disturbingly, Khaytsus is also a moderator in the IRC channel #linux on Libera Chat.



I think one time he k-lined me just for saying Windows was garbage and asking when #linux became the ##windows channel in a one liner.



## means that the channel is not about Free Software, but like Reddit, someone always derails the #linux channel to talk about Microsoft Java Subsystem For Windows, errr, I mean Windows Subsystem For Linux, of course.



Like Microsoft Java, Microsoft is “extending” the “Linux Subsystem” so the applications you build for it wouldn’t even run on a real Linux system anymore. It’s a trap!



Another Big IBM/Red Hat/Fedora Rant. (Sorry.)



The carnage also affects Red Hat employees. IBM is putting Red Hat through attrition seeing just how cheaply they can run it and have something calling itself RHEL.



Like Canonical, they barely pitch it as a bare metal solution anymore. They encourage their customers to put it in Microsoft Azure, where banks and governments go to get security breaches that Microsoft doesn’t even do anything about.





“Last week, Senator Ron Wyden sent a letter to the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Justice and the Federal Trade Commission (FTC) asking that they hold Microsoft accountable for a repeated pattern of negligent cybersecurity practices, which has enabled Chinese espionage against the United States government. According to data from Google Project Zero, Microsoft products have accounted for an aggregate of 42.5% of all zero-days discovered since 2014.



Microsoft’s lack of transparency applies to breaches, irresponsible security practices and vulnerabilities, all of which expose their customers to risks they are deliberately kept in the dark about.



In March 2023, a member of Tenable’s Research team was investigating Microsoft’s Azure platform and related services. The researcher discovered an issue which would enable an unauthenticated attacker to access cross-tenant applications and sensitive data, such as authentication secrets. To give you an idea of how bad this is, our team very quickly discovered authentication secrets to a bank. They were so concerned about the seriousness and the ethics of the issue that we immediately notified Microsoft.



Did Microsoft quickly fix the issue that could effectively lead to the breach of multiple customers’ networks and services? Of course not. They took more than 90 days to implement a partial fix – and only for new applications loaded in the service.



That means that as of today, the bank I referenced above is still vulnerable, more than 120 days since we reported the issue, as are all of the other organizations that had launched the service prior to the fix. And, to the best of our knowledge, they still have no idea they are at risk and therefore can’t make an informed decision about compensating controls and other risk-mitigating actions. Microsoft claims that they will fix the issue by the end of September, four months after we notified them. That’s grossly irresponsible, if not blatantly negligent. We know about the issue, Microsoft knows about the issue, and hopefully, threat actors don’t.

-Tenable CEO, Amit Yoran


When a “Linux” company, like IBM, pretty much stops talking about how good their product is, and starts recommending you shovel it into a pile of shit that leaks people’s Social Security numbers and banking information, from Microsoft, and think of it like a compatibility layer, as IBM and Canonical have, then you can consider the project pretty much on death’s doorstep.



To quote Walter Francis, I think “something slid off [their] cracker”. First systemd, then XFS and Stratis, now Microsoft Azure promotion.



Recent Techrights' Posts

There Are More Devuan-Based Distros of GNU/Linux Each Year
"The Veteran Unix Admin collective salutes you"
In Gambia, According to statCounter, Windows "Market Share" is Down to 3%
in some countries Windows is already down to 1%
The Web is Becoming Social Control Media Junk and Fake Text Crafted by Machines (Boosted by Social Control Media via Bots Which Game Visibility/Popularity)
The misinformation machines are being increasingly automated to promote dictators and bigots
 
Materialistic Culture of Fake Possessions and Fake Popularity
Fake popularity is part of a "chicken and egg" thing
If the Reputation of the European Union for Rule of Law Has Diminished, Blame EPO and the German (Also the Dutch) Government for Facilitating It
We'll soon publish some new EPO material
[Meme] Same Thing, Different Job Title
"Server sysadmin; Clown computing consultant"
Imagine Patents on Musical Compositions and Cooking Recipes
The very existence of software patents must come to an end
"Latest Technology News" in BetaNews is Press Release SPAM (or LLM Slop, Marketing, Fake 'Review')
What they call "reviews" are just ads
[Meme] Kramer is Done
Devuan is turning 10
Go Offline for a Bit
yup!
Windows Falls to All-Time Low (12%) in Gabon
Gabon's data from statCounter shows this
[Meme] When Words Come to Mean the Opposite
"Keep the 'dumb' stuff, be smart about it"
In Defence of Analog (Sometimes Digital and/or "Smart" is Objectively a Lot Worse)
This past weekend (2-3 days) I spent a few hours per day saving us 250 - 400 pounds in repair bills
It Takes Microsoft Over a Day to Restore 'Microsoft 365' (360, 5 Days of Downtime)
Microsoft/Windows TCO will always be huge
[Meme] In Some Countries, Android (Linux) is Already 'the Standard'
"Wait. Sorry, we don't do Windows here, we barely use laptops."
In Defence of CDs...
Let's say that some environmentalists focus only on visible things like plastics
This Holiday Season Dump Companies That Offload Everything to Skinnerbox "Apps", Un-Encrypted E-mail, and 'Webapps' (Proprietary JS Applications in 'Web Site' Clothing)
bot disservice
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, November 26, 2024
IRC logs for Tuesday, November 26, 2024
When Social Control Media in the European Union is Controlled by BRICS
Who controls TikTok?
Links 27/11/2024: Zoom Waning (Stock Falls), More Microsoft Shutdowns, and European Commission Flags Bluesky for Breaches
Links for the day
Gemini Links 26/11/2024: Disease, Vibrations, and Grief
Links for the day
Links 26/11/2024: Microsoft 360 Users Report Outages, Attacks on Journalists Plentiful Worldwide
Links for the day
Same Month Judge Suggests Selling Chrome (Compelling Google to Give It Away) Chrome Surpasses Two-Thirds of "The Market", Based on Surveyor
tackling Google's browser monoculture is still a priority
[Meme] Trying to Terrorise Critics
How Microsofters roll...
Illegitimi Non Carborundum
If you try to suppress our publication, we'll not just bark back but also bite
Why This Site Became "Simple" a Year Ago
Light is good, heavy is bad
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, November 25, 2024
IRC logs for Monday, November 25, 2024
Links 26/11/2024: International Microsoft Outages, Microsoft Mass Layoffs Bigger Than Reported Last Friday
Links for the day, Deutsche Welle and CBC focus
Gemini Links 26/11/2024: Not Pagan, Emacs Wiki, and More
Links for the day
Links 25/11/2024: Egypt Harasses Bloggers, The University of Michigan Has Become Like a Corporation
Links for the day
Links 25/11/2024: Climate News, Daniel Pocock Receives a Fake/Fraudulent €17,000 Electricity Bill
Links for the day
On Groupthink, Mindless 'Sheep', and Toxic Online Cults
This week, treat yourself to a life free of social control media
[Meme] Microsoft: Our "Hey Hi" Hype is Going So Well That We Have MASS Layoffs Every Month. Makes Sense?
Contradiction
Latest Mass Layoffs at Microsoft Are Confirmed, Bing and Vista 11 Losing Market Share
They tried to hide this. They misuse NDAs.
BetaNews is Run and Written by Bots That Make Clickbait
At least one author is doing this
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, November 24, 2024
IRC logs for Sunday, November 24, 2024
Gemini Links 25/11/2024: Purity and Cory Doctorow's Ulysses Pact, Smolnet Portal and SGI
Links for the day