3 ms·

> That's not true. CentOS Stream is literally the testing ground for RHEL patches. So CentOS gets patches much earlier now than it ever did as a community proje

> That's not true. CentOS Stream is literally the testing ground for RHEL patches. So CentOS gets patches much earlier now than it ever did as a community project. It definitely is true, in our RHEL subscriptions we get patches that do not exist in CentOS. We also see those differences in fully patched systems where the patch versions run different binary code. > I relied heavily on CentOS [..] > Fact is [..] > So this is why [..] All those other arguments are not very relevant, they bought CentOS and then broke community trust multiple times to the point where we now have multiple re-incarnations of the CentOS concept and RHEL (or IBM) thought they could prevent that by hiding the sources used for current RHEL builds from the public by default. Money-wise it's also not relevant because there are only two reasons you pay for support: 1. You actually need support (we never did in the past 15 years) 2. Corporate nonsense (this applies to some of our vendors) Red Hat is fully leaning into #2 and it's just not having any real value if you don't also fit in #1.

mmcgrath1 3y ago
>It definitely is true, in our RHEL subscriptions we get patches that do not exist in CentOS. Citation needed. Source: I work at Red Hat and made the policy that stuff needs to go to CentOS Stream first. The only exceptions should be embargoed or critical/important CVEs, those go to customers before CentOS Stream. If you find any code, features, or bug sizes in RHEL that aren't in stream, it's a bug, let us know and we will fix it.
- oneplane 3y ago
  Well, you already mentioned it: the important updates that already have PoC in the wild that are somehow patched for RHEL but not for CentOS. The lag isn't always huge, but we definitely can't consider CentOS a RHEL bug-for-bug compatible rebuild anymore. Maybe the issue wasn't highlighted as much in the past where the rebuild compatibility meant that packages could go out without also having the source (in CentOS).

mmcgrath1 3y ago

>It definitely is true, in our RHEL subscriptions we get patches that do not exist in CentOS. Citation needed. Source: I work at Red Hat and made the policy that stuff needs to go to CentOS Stream first. The only exceptions should be embargoed or critical/important CVEs, those go to customers before CentOS Stream. If you find any code, features, or bug sizes in RHEL that aren't in stream, it's a bug, let us know and we will fix it.

oneplane 3y ago
Well, you already mentioned it: the important updates that already have PoC in the wild that are somehow patched for RHEL but not for CentOS. The lag isn't always huge, but we definitely can't consider CentOS a RHEL bug-for-bug compatible rebuild anymore. Maybe the issue wasn't highlighted as much in the past where the rebuild compatibility meant that packages could go out without also having the source (in CentOS).