9 ms·
Rocky Linux shares how they may continue to obtain the RHEL source code
- Proven 3y ago[dead]
- verdverm 3y agoNot sure these "options" are going to satisfy business risk analysis. We are looking into moving away from all things CentOS, RHEL, or projects like Rocky. It was going to be Rocky, but no more. Red Hat got blue washed and is now ruining their reputation
- freedomben 3y agoMy impression from being somewhat involved in the (early) communities of Rocky and Alma, is that the Rocky people are quite a bit looser with violating EULAs, ToS, etc. Sometimes that is the superior approach, but with something like RHEL rebuilt it makes me nervous. Alma by contrast are very professional. Rocky also has an antagonistic view toward Red Hat, while Alma views Red Hat as partners. People can hate on Red Hat, but without them none of the rebuilds would even be possible. There's still a lot that Red Hat could do to kill them if they wanted to. Anyway my main point, I'm not worried about Alma getting wiped out, or about them making a bad decision that ends them in legal hot water and jeopardizes the project.
- hospitalJail 3y agoI havent been following the saga, just learned about it last week. Was Red Hat losing money? Or they wanted more money?
- deleted 3y ago[deleted]
- fuzzylightbulb 3y ago"It's not the pile, it's piling it higher."
- verdverm 3y agoThey sold out to IBM which was already dying, now they are taking Red Hat down with them... sad times I worked at a different office that got blue washed, it was depressing af, feel bad for the long-time redhatters
- sudosysgen 3y agoIBM thought they could extract more than the already nice margins Red Hat was generating.
- yndoendo 3y agoIBM sees economic utility as just making money. They don't see the utility of name branding and ease of transition. For example, I was using CentOS for prototype development. No way would I be able to get RHEL for this. CentOS allowed for not having to hassle with development license management with RHEL. Meaning more time spent on trying to get something work vs handling business to business logistics. This way, if the prototype was deemed acceptable, I could hand off OS management to IT and they could handle B2B logistics. Now I no longer prototype with an easily transferable RHEL style OS. Means IBM just reduced their probability of receiving future support contracts. This is where IBM lacks understanding of economic utility.
- lamontcg 3y agoThe better example is that small companies could build on CentOS and when those small companies become big or get bought by someone big and get infested with useless middle management, RedHat could then sell support contracts into those businesses. CentOS was basically a big loss-leader to get lock-in and just wait until middle management went looking to throw money at vendor support to have someone else to blame. IBM is now going to be cutting that channel off. They might juice a few more contracts in the short term, but mostly they're going to push small businesses away from the RHEL ecosystem entirely and cut off their pipeline of new leads.
- LordKeren 3y agoCan you share the top contenders for replacements?
- verdverm 3y agodebian most likely, still have to do a proper evaluation, it's a big lift to go from yum to apt though...
- Spivak 3y agoYeah, the saddest bit about RHEL dying is that they really were the best distro by a wide margin. Redhat beat every piece of software into the RHEL way and what came out was an incredibly cohesive system. SELinux for all the years everyone cursed its name ended up working great in the end. All while being the most adventurous and ambitious distro in terms of adopting new userspace primitives.
- cratermoon 3y agoRedHat was the first linux distro I ever installed on one of my own machines, so it has some sentimental value for me, but it's been a long time since I used it either personally or at work.
- CookieCrisp 3y agoI started doing this yesterday, and with chatgpt 4’s help it hasn’t been as bad as I feared - I’ve been able to dump Ansible playbooks into it and ask for Debian package names/alternatives - obviously it depends on what you have, and my needs are definitely not nearly as demanding as they will be for a lot of companies, but I have around 100 servers that I will be switching over, and what I feared would be a mammoth task is now looking like something I can knock out in a couple weeks
- aeyes 3y agoNot really because people who are using RHEL in the first place are $BigCorp which run enterprise software (for example Oracle) for which you can only get support if you run on a supported enterprise OS. So we'd just run RHEL for the clients who needed these support contracts and used CentOS for everyone else to still have a homogeneous environment. With Debian I can't get this kind of support. So the options are reduced to Oracle Linux and SLES/openSUSE.
- traceroute66 3y agoAnd now with the release of Debian 12 ("bookworm"), Debian is now sufficiently up-to-date for most users.
- NegativeK 3y agoHas RHEL ever been about being up to date? I thought their selling point was maintaining ancient ass software.
- rurban 3y agoYou are mixing that up with Debian
- brazzledazzle 3y agoThey backport a lot so you can run your ancient-ass software knowing you have maintained security patches.
- betaby 3y ago> sufficiently up-to-date for most users Always has been, compared to RHEL
- Twirrim 3y agoThe "problem" with Debian is the lifecycle. You get about a 12-24 months at most of security patches, and that's effectively it (the patching model after that is unreliable). That means you've got to allocate resources for upgrading/validating far more regularly than you would with other distributions. Depending on the size of your business, that could get really expensive and disruptive, for negligible benefit. Canonical Ubuntu has a longer support on their LTS releases, and may be preferable. If you can get past annoyance with things like snaps.
- tsimionescu 3y agoIt should be noted, as many businesses are finding out, that you can't redistribute Ubuntu binaries or sources as-is, since they contain registered trademarks of Canonical. So, if you want to ship Ubuntu-based systems, you actually have to maintain your own version of all of their software stripped of the trademarks and re-compiled, or pay them. It seems Canonical is getting more interested in actually enforcing this, I believe they mostly ignored it for a long time now. Debian seems like a much simpler alternative than doing all this. Source: https://ubuntu.com/legal/intellectual-property-policy https://ubuntu.com/legal/intellectual-property-policy > Any redistribution of modified versions of Ubuntu must be approved, certified or provided by Canonical if you are going to associate it with the Trademarks. Otherwise you must remove and replace the Trademarks and will need to recompile the source code to create your own binaries [emphasis mine]. This does not affect your rights under any open source licence applicable to any of the components of Ubuntu. If you need us to approve, certify or provide modified versions for redistribution you will require a licence agreement from Canonical, for which you may be required to pay. For further information, please contact us (as set out below).
- p_l 3y agoI'll admit it's a big source of schadenfreude for me and I hope compliance reaches similar decisions at $DAYJOB.
- techwizrd 3y agoThis has definitely spooked us as well. We have numerous images based on our rocky base image, so we're looking at what moving away from all things RHEL, Rocky, etc. as well.
- brnt 3y agoI don't understand all these CentOS forks: you're still dealing with Red Hat and reinforcing their ecosystem for free. What if those forks poured the effort behind Debian? A truly democratic distro that cannot pull rugs from under your feet.
- Kwpolska 3y agoIf you want Debian, just use Debian. The idea behind CentOS and its successors is to have a free distro that is bug-for-bug compatible with RHEL, so that you can support users of your software who are on RHEL, or use software supported only on RHEL for free.
- brnt 3y agoThat's the idea, but Red Hat is making that ever more difficult. And I can understand why. Why would you build your world on such shifting sands, when all those forks could pitch in on Debian long term support instead? Or just shell out for RHEL?
- fragmede 3y agoBecause it hasn't hurt Apple to have their proprietary garden and Red Hat has learned from that. Once you're big enough, people are going to do the work to support your nonsense (eg Asahi Linux) and build their world on your shifting sand. So why would you, as Red Hat, put in extra effort and not be capricious and hard to work with? It just costs you money that you apparently don't have to spend. Call it the Elon Musk is an Asshole (EMA) era of business.
- garbagecoder 3y agoThe gratuitous anti-Apple remark. Walled gardens are at least as old as video game consoles and I can run whatever I want on macOS even if I can’t on my phone. Somehow, whenever anyone spots a flaw in the FOSS model, it’s Apple’s fault. This is what people wanted, this is libre. Red Hat can sell for money. Remember, kids, CC violates a freedom!
- _ea1k 3y agoI'm not sure that the old model did either, tbh. The clones were never a great choice if you needed to satisfy business concerns.
- cratermoon 3y ago> Red Hat got blue washed I'm not sure I understand the term. Wikipedia says, "Bluewashing is term used to describe deceptive marketing that overstates a company's commitment to responsible social practices. It can be used interchangeably with the term greenwashing but has a greater focus on economic and community factors." If I follow your usage, you're saying that Red Hat states they are committed to the ethics and social responsibilities of FOSS and the GPL but the actual practices violate those factors. If they are using GPL code but not releasing their code, then I would tend to agree, but IANAL. Can you clarify a bit?
- CHY872 3y agoIBM = big blue. Red Hat were bought by IBM a few years back.
- cratermoon 3y agoAh, I hadn't thought of that angle. IBM has become the CA Technologies (formerly Computer Associates International) or MicroFocus of the 21st century.
- that_guy_iain 3y agoI read messages like this and it always seems like folk think Red Hat are missing out because people aren't using a free competitor. What I think this change will make happen, 80-95% of the companies using CentOS or Rocky stop using RHEL based linux distros. But the rest start paying Red Hat. Those who moved away were never going to buy anyways so why should Red Hat care if they don't use a free competitor that used their work?
- ROTMetro 3y agoThere's two ways to increase business income, extract more $$$ from a captured user base or create value to attract revenue. One is a sign of a healthy company looking at future growth, the other the sign of a zombie company that has to put a tighter squeeze on you quarter after quarter to keep their numbers up. The people making purchasing/vendor decisions take into consideration the risk of going with a 'zombie' company, so those that do pay are also likely to consider moving away as well.
- that_guy_iain 3y ago"Zombie company" is a weird way to describe a profitable company. How many people are going to say "You know what, this solves my problem really well but I am scared they're not going to solve future problems?" Especially in the sector that Red Hat are in, a world where there is a famous quote of "No one gets fired for buying IBM". IBM/Red Hat are not in the cycle where they create new products and create value that way, they're in the business of buying things and increasing their market share that way. And have been for quite some time.
- theandrewbailey 3y agoSee also https://news.ycombinator.com/item?id=36526453 https://news.ycombinator.com/item?id=36526453
- throwaway2990 3y agoFound out that Amazon Linux 2023 is based on fedora (announced in March). They moved quickly from 2022 to 2023!
- anyoneamous 3y ago2022 was never released - the AL2 successor was supposed to be AL2022, but delays meant it actually arrived this year.
- parasense 3y agoI think the cloud instance is a pretty good option, and is effectively what the old-gangsta CentOS team was doing, with more or different steps. Back in the old days the RPMs were manually imported, there was no RH provided pipeline to get unbranded RPM sources. So it's really not a big deal to go back to the bad old ways, and if they want to ignore the new shiny CentOS stream way of things, well they are free to be as masochistic as they desire. Certainly nobody is forcing math students to use a graphing scientific calculator if they instead prefer to use a slide rule, because we sent men to the moon with slide rules... so I see no point in complaining about Linux neckbeards preferring to stay with the crufty old ways of importing package sources devoid of GIT history, or any modern pleasantries provided by CentOS Stream. I actually respect these rebuilders, although I think they are zealots to some extent, they are zealots in the good way, highly principled on the idea that software builds should be reproducible, for the sake of validating the software supply chain. But there is an insidious side, their user community is not aligned with the noble ideals of rebuilds, and tend to want the value without the costs. It's one thing to rebuild packages, and another to spin a compose of those rebuilt packages into a distro. That's what RH is apparently all bothered about, and I cannot blame them to some extent. But that said, the user community around the foot hills is still the RH user community for them all the way up high on mount Olympus. So I think Rocky, Alma, or whoever else will still get the package sources, no biggy. But what I wonder about is how RH will treat subscribers who deploy RH and the rebuilds.
- _ea1k 3y agoI think in those old days of CentOS, they had direct access to the srpms from an ftp server. This is marginally harder.
- linuxftw 3y agoRed Hat currently releases all sources as if they were GPL sources, but that may stop in the future. EG, an Apache 2 licensed project, they're under no obligation to release the source, but they currently choose to. That will be the next move for the RHEL sources IMO. They'll probably stop releasing all non-GPL licensed code from RHEL proper.
- Tepix 3y agoRedHat is unlikely to do that. After all, why would anyone still use RedHat if their competetive advantage (i.e. open source) is lost? As a RedHat customer i want to be able to take their packages (which include the open source software and their changes to it) and rebuild them from source with both their and my patches whenever i feel like doing so.
- tsimionescu 3y agoTheir competitive advantage compared to whom, Windows? Their competitive advantage compared to other Linux distros or to the BSDs is enterprise support, not being open source (all of them are). Apple doesn't even sell their OS at all. So who are you comparing RH to?
- Tepix 3y agoYes, the competitive advantage when compared to non-open source operating systems. If they stop publishing non-GPL source code, they have a distinct disadvantage when compared to open source alternatives.
- that_guy_iain 3y ago>After all, why would anyone still use RedHat if their competetive advantage (i.e. open source) is lost? Who do you think finds that a competitive advantage? What company is saying "You know what, we can use Red Hat spend millions and worst case we just hire some devs to continue the work?" I doubt any are. Their competitive is what support so many packages and companies can not worry about issues. Open source has no part in that.
- whalesalad 3y agomeanwhile Debian users are continuing on with their blissful utopian lives. stay away from rhel ecosystem for your mental health =)
- themerone 3y agoDebian once went 5 years between major releases. They got their act together, but at one time there were legitimate worries about the project's future.
- doublerabbit 3y agoIts not like that Debian is completely drama free. Ubuntu and Canonical happily provides that mess.
- whalesalad 3y agoUbuntu and Canonical are downstream. So yes, Debian is more or less drama free. I run Debian on all my servers and, knock on wood, I have not had an issue in over 15 years of usage. It quite literally is the most rock solid and trouble-free OS I have ever used. I have a ton of experience with Ubuntu, too, but these days there is no compelling reason to use their stuff. The contrary actually - considering all the telemetry, motd integrations, etc and don't forget snap. Debian 12 is a really outstanding release.
- doublerabbit 3y agoI wouldn't diss the use Debian. I use it always if the software package provides it. Debian does tend to keep to its principles. As I'm not wanting to dogfight the drama, I feel that Canonical, and with documented "heated" discussion on the mail list has, to me tainted the same waterhole that Debian uses. It has done well to snuff the same flames that flare with RedHat.
- Shorel 3y agoThe snaps thingie can probably make me replace Ubuntu with Debian in some future date. For now I run 22.04 stable.
- Ericson2314 3y agoGood times for NixOS
- _ea1k 3y agoI really need to dedicate some time to studying that. It sounds like a really solid way to host containers. Compared to the mess that is ansible+ubuntu, it must be an improvement.
- pkulak 3y agoI'm in the middle of switching now, from Silverblue. It's a lot of fun. The Arch wiki to do something will have you changing three files and restarting 2 services, while with NixOS you add a line to your config and you're done. And when something doesn't exist as a Nix package/config, it seems somewhat easy to build your self (compared to other package managers, at least). I realized there's no "game-devices" package last night, for example, but I was able to get this working in about an hour of Googling: https://github.com/pkulak/dotfiles/blob/nix/nix/gamedevices.nix https://github.com/pkulak/dotfiles/blob/nix/nix/gamedevices.... Still not all the way in. Like, I'm still going to use Chezmoi for my home directory because I don't quite see the value-add of Home Manager, but who knows; maybe I'll be a super fan next year and move everything over.
- drumhead 3y agoThe days of community and cooperation are coming to an end. Reddit ditches the relationship it had with it's users, and now Red Hat is turning into more of a proprietary software company. Did we take the spirit of the old internet for granted? Who's next I wonder.
- _ea1k 3y agoIn many respects, I feel like it already ended. - How many companies still offer free APIs for access to their data? This used to be amazingly common. Now, even my garage door wants a paywall. - Google bragged about not selling search placement. But is what they are doing now really any different than the old keyword buying engines? - How many people still use email? And of those, how many just use gmail, effectively giving Google a near-monopoly - It used to be that MS Office competed with other office suites and there was a lot of talk pushing for long term interoperability. But all of that seemingly died with the shift to online services. Free as in speech is in worse shape now than it was 20 years ago.
- havnagiggle 3y agoI see lots of people standing up for good principles. The status quo is trying to cash in on complacency, but IMO it's just a catalyst for good things to come. People that know why they picked RHEL also know why they will be moving on.
- choeger 3y agoI dislike this move from Red Hat, but I think that bug-for-bug compatibility is overvalued. Everyone who either likes the general RH ecosystem or has to support RH customers could probably continue working on CentOS. People could also just fork and long-term-support CentOS to provide a more stable platform.
- pierat 3y agoWell, then let's play the prisoner's dilemma best solution thus far, and do "tit for tat". That's a nice EPEL you got there. Sure'd be ashame if it went away or if it got left-pad'd!