4 ms·
Ask HN: RHEL vs Debian?
Debian has 8086 CVE entries[1], as compared to only 1860 entries for RHEL.[2]
So, when it comes to security updates, RHEL blows away its competition?
If RHEL is so good, why isn't it more popular among tech startups?
Are any of FAANG using RHEL as their primary server OS? Maybe Cisco or Juniper uses them?
I read that Google uses Debian rolling releases.
What am I misunderstanding?
Why isn't RHEL the default choice for tech startups and indiehackers looking for peace of mind?
I use Arch, btw ;)
[1]
https://www.cvedetails.com/product/36/Debian-Debian-Linux.html?vendor_id=23
[2]
https://www.cvedetails.com/product/79/Redhat-Enterprise-Linux-Desktop.html?vendor_id=25
- PaulHoule 3y agoI didn't leave Red Hat, Red Hat left me. My guess is that Red Hat's business plan was to be bought buy IBM for a long time, actually serving customers and making money has been besides the point for a long time. Years ago I was a Fedora fanboy, but then I started finding more and more Fedora wouldn't install on my computer because it was too old or too new. Ubuntu "just worked". Time and time again I'd struggle for days to make something work w/ Red Hat but be able to look up a StackOverflow recipe to make it work in Ubuntu immediately. It's nice to know that someday when IBM realizes it's "old fogie" reputation has finally become a problem for its survival it can change its name to "Red Hat" and go on to fool people for another decade.
- textread 3y agoIt does seem like Ubuntu stacks up well on the 'CVE' scale.[1] Ubuntu has managed to pull in users with their "just works" reputation. Its actually impressive that they managed to pull such a heist, considering they were a late entrant to this market. I wonder if I am giving undue importance to CVE reputation. Should I just use an OS that is pleasant to use and call it a day? [1] https://www.cvedetails.com/product/20550/Canonical-Ubuntu-Linux.html?vendor_id=4781 https://www.cvedetails.com/product/20550/Canonical-Ubuntu-Li...
- PaulHoule 3y agoIt doesn’t surprise me at all. Red Hat’s “pay for play” support model is fundamentally self-destructive because if the product was perfect customers wouldn’t need to spend on support contracts. Technically Red Hat could have done much better than it did in the “just works” department but their business model says otherwise just as Google degrades search results to keep their advertising profitable. … and, could it be that Ubuntu just ships more software?
- nikau 3y agoIt's not like Ubuntu was made from scratch, it's on the well engineered shoulders of debian. Unfortunately that's going to shit now with snaps and similar choices.
- pestatije 3y agoRHEL - Red Hat Enterprise Linux CVE - Common Vulnerabilities and Exposures
- razodactyl 3y agoYou might be misunderstanding on your comparison of two populations using a shared metric. How many reported CVE's would RHEL have if it had zero users? --- I also asked GPT to elaborate: --- I understand your curiosity about the differences between Debian and RHEL and why one might be more popular than the other. Let me provide some insights on this topic. While it's true that Debian has more CVE entries than RHEL, it doesn't necessarily mean that RHEL is significantly more secure. The number of CVEs is just one aspect to consider when evaluating security. Other factors include the speed at which vulnerabilities are addressed, patch availability, and the overall security practices employed by the organization behind the OS. As for RHEL not being as popular among tech startups, there are several potential reasons. Startups usually have budget constraints, and the cost of RHEL licenses and support services can be a factor for them. Additionally, some startups prefer more flexible options like Debian or Ubuntu because of the large community, easy accessibility, and a wider range of compatible software packages. Regarding your question about FAANG companies and their primary server OS choices, it's important to note that these companies often have diverse technology stacks tailored to their unique needs. It's likely that they use a mix of operating systems, including RHEL, Debian, Ubuntu, and others, based on specific requirements or preferences. Google is known to use Debian rolling releases for some of its servers, as you mentioned. There isn't a single default choice for all tech startups or indiehackers when it comes to server operating systems. The decision depends on their specific needs, budget, compatibility requirements, and other factors. RHEL does offer robust security and enterprise-grade stability, but its cost and potential learning curve might make it less attractive to some startups. --- I also asked if it was survivorship bias: --- Your question about survivorship bias is an interesting one. While it's possible that survivorship bias plays a role in shaping perceptions about which operating systems are "better" or "more secure," many factors influence a company's choice of operating system. Ultimately, it's important for businesses to consider their unique requirements and constraints when deciding the best fit for them.