All posts by jzb

Thunderbird moving to monthly updates in March

Post Syndicated from jzb original https://lwn.net/Articles/1006917/

The Thunderbird project has announced
that it is making its Release
channel
the default download beginning with the 135.0 release in
March. This will move users to major monthly releases instead of the
annual major Extended Support Release (ESR) that is the current
default.

One of our goals for 2025 is to increase active installations on the
release channel to at least 20% of the total installations. At last
check, we had 29,543 active installations on the release channel,
compared to 20,918 on beta, and 5,941 on daily. The release channel
installations currently account for 0.27% of the 10,784,551 total
active installations tracked on stats.thunderbird.net.

Ubuntu developer discussion moving to Matrix

Post Syndicated from jzb original https://lwn.net/Articles/1006622/

Ubuntu will be moving its “official realtime communications
channels
” from IRC to Matrix, beginning March 1, 2025, following
a discussion
on the ubuntu-devel mailing list.

“Official” communication, such as making realtime requests of privileged
Ubuntu developer teams, could be expected to be actioned if requested on
Matrix only. Similarly, you can consider your social responsibility to
other developers in relation to your work in Ubuntu development to be
fulfilled if you are present on that platform. And Canonical will
follow in its requirement for its employed Ubuntu developers to be
present on that agreed platform during their working hours.

Security updates for Wednesday

Post Syndicated from jzb original https://lwn.net/Articles/1006677/

Security updates have been issued by AlmaLinux (bzip2, gimp:2.8, keepalived, mariadb:10.11, mariadb:10.5, python-jinja2, and redis), Debian (iperf3, libtar, and pdns-recursor), Fedora (abseil-cpp, dotnet8.0, dotnet9.0, golang, libsoup3, and vaultwarden), Oracle (gimp:2.8, iperf3, keepalived, kernel, redis:7, and unbound), Red Hat (libsoup), SUSE (amazon-ssm-agent, go1.22, go1.23, iperf, java-21-openjdk, nginx, openvpn, and python311-asteval), and Ubuntu (kernel, libmicrodns, linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe,
linux-kvm, linux-oracle, linux, linux-azure, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop,
linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg,
linux-intel-iotg-5.15, linux-kvm, linux-lowlatency,
linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15,
linux-raspi, linux, linux-azure, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop,
linux-hwe-6.8, linux-ibm, linux-lowlatency, linux-nvidia,
linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8,
linux-raspi, linux, linux-azure, linux-gcp, linux-oem-6.11, linux-raspi, linux-realtime, linux, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-ibm,
linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-oem-6.8, rsync, and tcpreplay).

[$] FOSDEM keynote causes concerns

Post Syndicated from jzb original https://lwn.net/Articles/1006351/

This year’s edition of the Free and Open
Source Software Developers’ European Meeting
(FOSDEM) begins on
February 1 in Brussels. The event is widely regarded as one of
the most important open-source conferences. One of the reasons that
FOSDEM is held in high esteem by the community is its non-commercial
nature. It does accept sponsors, but
sponsorships come with few perks and no “pay-for-play” speaking
slots. Thus, the scheduling of a keynote by Jack
Dorsey⁠—⁠primarily known for his role in co-founding Twitter, and
currently CEO and chairman of FOSDEM sponsor Block, Inc.⁠—⁠raised eyebrows and led to plans for a protest. The
keynote has since been removed from the schedule, but there are still
a number of lingering questions.

Vendoring Go packages by default in Fedora

Post Syndicated from jzb original https://lwn.net/Articles/1005655/

The Go language is designed to make it
easy for developers to import other
Go packages
and compile everything into a static binary
for simple distribution. Unfortunately, this complicates things for
those who package Go programs for Linux distributions, such as Fedora,
that have guidelines which require dependencies to be packaged
separately. Fedora’s Go special interest
group
(SIG) is asking for relief and a loosening of the bundling
guidelines to allow Go packagers to bundle dependencies into the
packages that need them, otherwise known as vendoring. So far, the
participants in the discussion have seemed largely in favor of the
idea.

Zero-trust builds for FreeBSD

Post Syndicated from jzb original https://lwn.net/Articles/1005838/

The FreeBSD Foundation
has announced that it has undertaken a project to deliver zero-trust
builds commissioned by the Sovereign Tech Agency (STA).

The Zero-Trust Build project is scheduled from Jan-Aug 2025 and
centers on the FreeBSD build process, and in particular, release
building. The primary goal of this work is to enable the entire
release process to run without requiring root access, and that build
artifacts build reproducibly – that is, that a third party can build
bit-for-bit identical artifacts.

Additionally, the project aims to enhance build process
documentation, ensuring that release building is straightforward and
does not require specialized knowledge. The work is targeted for
completion prior to the release of FreeBSD 15.0.

The Foundation says that updates should not impact users of FreeBSD
release images, but it may have an impact on developers basing
projects or products on FreeBSD that make modifications to its release
process.

A mouseless tale: trying for a keyboard-driven desktop

Post Syndicated from jzb original https://lwn.net/Articles/1005332/

The computer mouse is a wonderful invention, but for the past few
months I’ve been working to use mine as little as possible for
productivity and ergonomic reasons. It should not be surprising that
there are quite a few open-source applications, utilities, and
configuration options that are either designed to or incidentally
assist in creating a keyboard-driven desktop. This includes tiling window
management with PaperWM, the Vimium browser extension, Input Remapper, and more.

Puppet fork OpenVox makes first release

Post Syndicated from jzb original https://lwn.net/Articles/1005781/

The Vox Pupuli project has
announced the first release of OpenVox, a
soft-fork” of the Puppet
automation framework. The intention to fork was announced
in December 2024.

OpenVox 8.11 is functionally equivalent to Puppet and should be a
drop-in replacement. Be aware, of course, that even though you can
type the same commands, use all the same modules and extensions, and
configure the same settings, OpenVox is not yet tested to the same
standard that Puppet is. […]

Please don’t use these packages on critical production
infrastructures yet, unless you’re comfortable with troubleshooting
and reporting back on the silly errors we’ve made while rebranding and
rebuilding.

Security updates for Wednesday

Post Syndicated from jzb original https://lwn.net/Articles/1005798/

Security updates have been issued by Debian (snapcast), Fedora (python-jinja2), Mageia (rsync), SUSE (cdi-apiserver-container, cdi-cloner-container, cdi- controller-container, cdi-importer-container, cdi-operator-container, cdi- uploadproxy-container, cdi-uploadserver-container, cont, gh, kernel, kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t, nvidia-open-driver-G06-signed, and pam_u2f), and Ubuntu (linux-oem-6.11 and vim).

[$] Ghostty 1.0 has been summoned

Post Syndicated from jzb original https://lwn.net/Articles/1004377/

The Ghostty terminal emulator
project has generated a surprising amount of interest, even before
code was released to the public. This is in part due to the high
profile of its creator, HashiCorp founder
Mitchell Hashimoto. Its development was conducted behind closed doors
for beta testing, until version 1.0 was released
on December 26 under the MIT
license
. While far from finished, Ghostty is ready for day-to-day
use and might be of interest to those who spend significant amounts of
time at the command line.

RIP Helen Borrie

Post Syndicated from jzb original https://lwn.net/Articles/1005199/

We have just now received word of the passing
of Helen Borrie
, a longtime contributor to the Firebird relational
database project.

Helen’s quiet leadership and dedication left a lasting impact on
Firebird and its users. Her efforts helped build not just a powerful
database but also a strong, collaborative community. She will be
deeply missed by all who knew her and benefited from her work.

She will be greatly missed. (Thanks to Steve Friedl.)

Security updates for Wednesday

Post Syndicated from jzb original https://lwn.net/Articles/1005163/

Security updates have been issued by Arch Linux (rsync), Debian (rsync), Fedora (perl-Net-OAuth and redis), Red Hat (ipa, raptor2, rsync, and tuned), Slackware (rsync), SUSE (apache2-mod_jk, git, kernel, rclone, rsync, and webkit2gtk3), and Ubuntu (git, linux-azure-5.4, pdns, pdns-recursor, python-django, rlottie, and rsync).

The people should own the town square (Mastodon Blog)

Post Syndicated from jzb original https://lwn.net/Articles/1005007/

The Mastodon project has announced
that founder Eugen Rochko will be transferring “key Mastodon
ecosystem and platform components (including name and copyrights,
among other assets)
” to a new non-profit organization:

Practically Mastodon will remain headquartered in and operate from
Europe primarily. We will continue day-to-day operations through the
Mastodon GmbH for-profit entity, which will become wholly owned by the
new European not-for-profit entity. The Mastodon GmbH entity
automatically became a for-profit as a result of its charitable status
being stripped
away in Germany
. The existing US-based non-profit entity, the
501(c)(3), will continue to function as a fundraising hub.

[…] We are in the process of a phased transition. First we are
establishing a new legal home for Mastodon and transferring ownership
and stewardship. We are taking the time to select the appropriate
jurisdiction and structure in Europe. Then we will determine which
other (subsidiary) legal structures are needed to support operations
and sustainability.

Rochko has, naturally, also posted
about the transition
on Mastodon.social.

[$] The slow death of TuxFamily

Post Syndicated from jzb original https://lwn.net/Articles/1004988/

TuxFamily is a
French free-software-hosting service that has been in operation since
1999. It is a non-profit that acceptsany project
released under a free license
“, whether that is a software license
or a free-content license, such as CC-BY-SA. It is also,
unfortunately, slowly dying due to hardware failures and lack of
interest. For example, the site’s download servers are currently
offline with no plan to restore them.

IPU6 camera support status update

Post Syndicated from jzb original https://lwn.net/Articles/1005031/

Hans de Goede has posted an
update
about his work to support IPU6 cameras on Fedora and
submitting fixes upstream.

The initial IPU6 camera support landed in Fedora 41 only works on a
limited set of laptops. The reason for this is that with MIPI cameras
every different sensor and glue-chip like IO-expanders needs to be
supported separately.

I have been working on making the camera work on more laptop
models. After receiving and sending many emails and blog post comments
about this I have started filing Fedora bugzilla issues on a per
sensor and/or laptop-model basis to be able to properly keep track of
all the work.

LWN covered the lack
of IPU6 drivers in 2022.