7 ms·

Ubuntu 26.04

332 points by lxst 5mo ago

bashtoni 5mo ago
Also green light for Fedora 44 release on 28 April https://meetbot.fedoraproject.org/meeting_matrix_fedoraproject-org/2026-04-23/f44-final-go-no-go-meeting-2.2026-04-23-18.00.log.html https://meetbot.fedoraproject.org/meeting_matrix_fedoraproje...
- wao0uuno 5mo ago
  Cool. I'm pretty excited for the new login manager. Maybe now KDE will be able to fit all customization options (wallpaper, lockscreen, login screen) on a single Settings page.
  - everybodyknows 5mo ago
    Is there a CLI way to dump/restore those settings?
    - lozf 5mo ago
      I'm not certain about CLI, but Plasma 6.6 does allow preferences / settings to be exported & restored / shared. https://youtu.be/RuxNnfllxco?t=3894 https://youtu.be/RuxNnfllxco?t=3894 - Neal Gompa on the Fedora 44 Release party stream,
rasengan 5mo ago
> TPM-backed full-disk encryption This is going to be very useful for servers hosted in third party DCs.
- djkoolaide 5mo ago
  The beta installer was completely unsuccessful in setting the TPM-backed disk encryption on both a ThinkPad X1 Carbon (Intel 258V) and a ThinkPad P14s (AMD 300-something). Hopefully they ironed that part out in the release, but it seems still early for this feature (at least for my comfort level).
  - nechuchelo 5mo ago
    Same on my Framework Desktop. Looks like it works only with a limited number of TPM chips for now.
    - bboozzoo 5mo ago
      The constructed policy is quite strict and expects certain UEFI things to be set up correctly. For example both this https://github.com/canonical/secboot/blob/7434bac27844362ff882706130c5fa51862f2005/efi/pcr_profile.go#L84 https://github.com/canonical/secboot/blob/7434bac27844362ff8... and https://github.com/canonical/secboot/blob/7434bac27844362ff882706130c5fa51862f2005/efi/pcr_profile.go#L144 https://github.com/canonical/secboot/blob/7434bac27844362ff8... are enabled in the policy. The policy choices and various early checks, even as trivial as confirming that the TCG log content is correct after booting into installation system, are enough to rule out a lot of potentially problematic EFI deployments. Effectively making it more strict helps avoid a lot of funny issues where the firmware is clearly buggy and things would fall apart sooner or later.
      - hyperman1 5mo ago
        Strict is probably good. My company started to enable bitlocker this year on win11, and a non trivial amount of initial encryptions seem to be failing, destroying the user data and requiring a full reformat.
- senectus1 5mo ago
  oh man i hope this works on dell laptops
- Daviey 5mo ago
  Keeping the key in the same room as the padlock only protects against casual drive theft and secure disposal. Personally I'm more worried about someone stealing the entire server or a local threat actor. Sure, keep TPM to help with boot integrity, maybe even a factor for unlock, but things like Clevis+Tang (or Bitlock Network Unlock for our windows brethren) is essential in my opinion.
  - aaravchen 5mo ago
    TPM locking is for ensuring the disk isn't removed from your machine. It's technically possible that someone could tap the hardware while the disk is still in your machine, but otherwise they're stuck contending with whatever other security setup you have on your machine. The TPM locked disk encryption is more like embedding your safe in concrete with deep foundations. It doesn't affect the thickness or quality of your safe.
- Gigachad 5mo ago
  I want this on my own homeserver. Protection against someone stealing the server without requiring me to type a password every boot.
  - zenoprax 5mo ago
    In what way is TPM protecting your data if someone steals the entire server? TPM only ensures that the boot environment has not been modified. Whatever key is being used to automatically decrypt the disk would be in the clear. Unless I'm misunderstanding your situation, I think you should look up the "Evil Maid Attack" to better understand how to mitigate risk for your threat model.
    - hfjtnrkdkf 5mo ago
      assuming there are no bugs in linux and you enable full memory encryption in BIOS, it protects you in the same way the FBI cant get into a locked iphone they physically posess but linux is not as secure as an iphone, and linux users typically dont know how to set this up, so in practice you are right, it doesnt protect you
      - Gigachad 5mo ago
        My threat model is a junkie breaks in to my house and flips my server on facebook marketplace. Then the buyer curiously pokes through my hard drives. Of course if protecting against government agencies is the threat model then TPM alone isn't enough. For me, a zero friction way to have decent security is worlds better than the normal state where homeservers are not encrypted at all.
        zenoprax 5mo ago
        I just don't understand where the protection comes from if you have automatic password entry. If the thief boots up the server it is just as convenient for them as it is for you. Your threat model is the same as my use of a laptop: regular LUKS with a password is enough on its own. Add TPM if you want to know that you're entering your password in a secure boot environment (ie. protect against a fake LUKS screen that steals your password).
superkuh 5mo ago
The comments there note there is no official Ubuntu MATE release for the first time since Ubuntu 15 (and before 14.04 gnome2 was an option). That's a shame but probably most people who chose MATE (or gnome2) no longer chose Ubuntu due to the conflicting ideologies inherent in the two. MATE users generally don't like change for change's sake.
- razingeden 5mo ago
  its in the daily builds. I haven't tried it yet. not sure if this confirms the impression you have there... I wasn't like this until a couple of headless VPS'es (on Arm8) got through the upgrade from 18.x -> 20.x -> 22.x and then crashed out over -> 24.x for a still unknown reason. now I'm just afraid .. or I should say reluctant ..to repeat that whole fiasco. https://cdimage.ubuntu.com/ubuntu-mate/daily-live/current/ https://cdimage.ubuntu.com/ubuntu-mate/daily-live/current/
  - Joel_Mckay 5mo ago
    There were some issues with how the menu icon manager handled the new security policy defaults. This means the editor will break, and the displayed menu may be missing any item that didn't follow the naming convention syntax. Its a lot of packages to bring into compliance, for that one silly feature the devs had to put in before it was ready... Maybe they fixed it since the rc release, but there were some rough edges in Feb... the kernel USB support cooked the thumb drive partition structure. In 22.04 to 24.04 the kernel Nvidia GPU driver EOL abandonment began... In 26.04 people will discover most EOL hardware support prior to RTX series will be difficult to bring up. Probably wise to wait a few weeks for the bug reports to clear out a bit. =3
rs_rs_rs_rs_rs 5mo ago
Hard to get some spotlight for this with all these new models around, I feel bad for Canonical.
satvikpendem 5mo ago
What should I use if I like Ubuntu but not snap, just Debian? Or are there alternatives around? Seems like Ubuntu has the best hardware and driver support so just curious what's new in Linux land.
- compounding_it 5mo ago
  PopOS
  - satvikpendem 5mo ago
    This looks like it might be the best solution, no snap, maintained by an actual system integrator and laptop maker, and I also like the new Rust-based desktop environment. I wonder how well it runs on Framework laptops or MacBooks as well.
    - compounding_it 5mo ago
      Runs great on framework. Not sure about COSMIC on asahi.
  - bboozzoo 5mo ago
    Isn't that essentially a release of Ubuntu with a different kernel, DE and maybe some userspace utilities?
    - lproven 5mo ago
      Yes. Linux Mint, Zorin OS, Linux Lite, Pop OS, and several less famous distros are all based on Ubuntu. New versions of all of them will follow this new LTS release in time. Mint forked GNOME 3 to make something more Windows-like. Zorin customised upstream GNOME with a lot of extensions. Pop removed it and replaced it with their own homegrown desktop, written in Rust. It's actually pretty good and works well.
    - panick21_ 5mo ago
      PopOS started as Ubuntu with better hardware enablment but it has evolved far beyond that. They have been removing all the snap stuff. The have done tons of work on DE (Cosmic) and in general don't go along with Gnome or Ubuntu strangness. But yes its Ubuntu and Debian derived.
compounding_it 5mo ago
Ubuntu LTS is still the choice for many production environments and education and learning. As someone with Ubuntu from 2010 CDs, I find it refreshing that modern Ubuntu distros work OOB on most computers these days with excellent driver support.
- alprado50 5mo ago
  Is this even true? I mean, Windows is the main focus for all hardware vendors, and everybody who has owned a PC knows that malfunctions are unavoidable. If that is the case for Windows, then Linux cant be better.
  - Joel_Mckay 5mo ago
    Windows 11 set a low bar to clear... Most popular hardware will work on linux, but like always its better to check before your buy. Distro like Ubuntu are a fair compromise to get amd/nvidia GPU drivers, wifi, and brother laser printer/scanner networking installed. =3 edit: seriously, why down vote the guys karma if its a honest question. Try to be kind people.
  - abrookewood 5mo ago
    Windows is a dumpster fire at this point. Just unusable
  - dmos62 5mo ago
    Linux has been better for old hardware since early 00s. Just don't expect hw acceleration to work for older GPUs.
  - ButlerianJihad 5mo ago
    https://www.lenovo.com/us/en/glossary/linux-standard-base/ https://www.lenovo.com/us/en/glossary/linux-standard-base/ When I was shopping Lenovo.com for my ThinkPad in 2018, there was a table with ThinkPads certified for Ubuntu Linux in one column, and certified for Red Hat Enterprise Linux in another column. I chose the T580 as a RHEL-certified notebook, and it was fantastic. Lenovo.com let me configure each individual component exactly according to my needs and tastes, and it was custom-assembled and shipped from Shenzhen. It did arrive with Windows 10 pre-installed (this was the least hassle and most popular OS option). I initially installed CentOS, but quickly realized that Fedora would be the sweet spot, and so it was a Fedora system for most of its lifetime. Near the end, I did revert to Windows 10, which also worked flawlessly. The ThinkPad T580 literally never malfunctioned. It was still 100% working when I turned it in for recycling in 2025. I've also run Ubuntu on my "daily driver" desktop system, which ran from 2006-2022. Yes, that's 16 years' worth of Ubuntu installs and upgrades. It was mostly a KDE Plasma (Kubuntu) system. I enjoyed every bit of that. In 1999, I was avidly using OpenBSD on really old hardware (such as HP Apollo 425t workstations.) OpenBSD simply couldn't deal with the special graphics subsystem on those machines. I tried and tried to get something working, but there were obstacles, not only with the hardware and drivers, but also the monitor connection needed a particular type of cabling and a proprietary monitor, too. However, OpenBSD did great for networking, security, Squid cache, proxies, all kinds of things. And even in 1999, though it was early, I ran Linux on a 386DX-40, because Linux supported the "ftape" floppy tape driver at that time, and I had some kind of QIC tape backup from Eagle that wouldn't be recognized by OpenBSD or NetBSD. Meanwhile, in that same year, my "daily driver" desktop machine was a 486 with VLB, dual-booting Windows 98 and OpenBSD. The Windows 98 was set up with a Cygwin system and X11 server, so that I could run X11 clients on the OpenBSD machines, or the Linux machine, or whatever else was on the LAN.
hnuser123456 5mo ago
Fine print on coreutils rewrite: https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/80773 https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/8...
- throwa356262 5mo ago
  That was a lot of CVEs Goes to show that not all security bugs are memory related bugs
  - nine_k 5mo ago
    Indeed, many bugs are API usage bugs, something that no language can verify. (The API is implemented in C anyway.)
    - IshKebab 5mo ago
      No, but some languages make designing difficult-to-misuse APIs a lot easier than others.
      - nine_k 5mo ago
        It's Linux, it's a C API, so there's little hope. I wonder if Redox has a much better API; at least I hope it does.
  - IshKebab 5mo ago
    I wish they'd put the severity. There are 4 highs, the rest are medium or low. Here are the high ones: https://www.cve.org/CVERecord?id=CVE-2026-35338 https://www.cve.org/CVERecord?id=CVE-2026-35338 - `chmod --preserve-root` can be bypassed. That doesn't seem that bad tbh. https://www.cve.org/CVERecord?id=CVE-2026-35341 https://www.cve.org/CVERecord?id=CVE-2026-35341 - `mkfifo` accidentally resets the permissions of files that already exist, so if you manage to do `sudo mkfifo /etc/shadow` then it becomes world readable. https://www.cve.org/CVERecord?id=CVE-2026-35352 https://www.cve.org/CVERecord?id=CVE-2026-35352 - TOCTOU in `mkfifo` lets you do the symlink trick to get it to change permissions on an unrelated file. https://www.cve.org/CVERecord?id=CVE-2026-35368 https://www.cve.org/CVERecord?id=CVE-2026-35368 - You might be able to get chroot to execute arbitrary code. Tbh I doubt if any of these would ever result in a real hack, unless your system is doing really mental things like running shell scripts with untrusted input. I could only find a couple of CVEs that looked actually serious for GNU Coreutils too though. IMO if you're using these tools with untrusted input your system is janky enough that there are going to be serious flaws in it anyway. Probably though quoting mistakes.
ChrisArchitect 5mo ago
Earlier official blog: https://ubuntu.com/blog/canonical-releases-ubuntu-26-04-lts-resolute-raccoon https://ubuntu.com/blog/canonical-releases-ubuntu-26-04-lts-... (https://news.ycombinator.com/item?id=47878560 https://news.ycombinator.com/item?id=47878560)
teekert 5mo ago
It's nice as always, but I have some issues. * Select - Middle-click paste does not seem to work * When something requires a password (ie just tried a bitlocker volume) the whole screen is blocked, so no password manager for you (unless you copy it before, or cancel - unplug drive-copy password - replug drive - paste.) * The default tiling does not jive with me, sometimes I don't even know what it wants (it always tries to force you to also set a left windows if you tile right and vice versa) so I disabled it `gnome-extensions disable tiling-assistant@ubuntu.com`. Default Gnome tiling is ok (but missing quarter tiling (and 1/8th would be nice on my ultra-wide) imho so I use [0] * I've been trying to use Nix home-manager for packages but I have GPU errors, need workarounds, icons that just remain generic. But I guess that is not Ubuntu's fault. Ubuntu remains my nr. 2 choice, after NixOS (but I didn't get the latter to install on this Nuc, perhaps a bios update will help). The installer offered (under experimental) to run root on zfs, I didn't end up selecting it because only on the forth try (and by that time you're clicking at a fast rate just taking defaults) I understood that it would only download packages via wifi, not the cable (same for NixOS installer, so must be my network). [0] https://github.com/troyready/quarterwindows https://github.com/troyready/quarterwindows
- WD-42 5mo ago
  Select middle click not working is a stupid decision from GNOME to disable in 50. You can turn it back on with the tweak tool.
  - Gigachad 5mo ago
    Probably changed to work the same as macos. Not sure if windows does middle click paste.
    - NekkoDroid 5mo ago
      > Not sure if windows does middle click paste. It doesn't. X was the only place I know of where that was a thing.
      - 5mo ago
azalemeth 5mo ago
I know that the interim releases had issues with zfs and trying to update gave the message "Sorry, cannot upgrade this system to 25.04 right now System freezes have been observed on upgrades to 25.04 with ZFS enabled. Please see https://wiki.ubuntu.com/PluckyPuffin/ReleaseNotes https://wiki.ubuntu.com/PluckyPuffin/ReleaseNotes for more information. " The release notes don't seem to mention zfs. I hope these issues have been fixed?
- raudette 5mo ago
  Just FYI - That defect only impacted systems which boot from ZFS - mine did not. The installer would stop an upgrade if it found a mounted volume - it apparently checks for zfs volumes as follows: sudo zpool list -H I could get around the installer's ZFS check by unmounting the drive: sudo zpool export poolname I upgraded. Then remounted the volume: sudo zpool import poolname Then I was up and running...
throwa356262 5mo ago
I am thinking of testing one of those AMD Ryzen AI laptops for development and local LLM. These come with win11 copilot+. How well does 26.04 with the 7.0 kernel support these? Can it, say, use their GPU and NPU for compute out of the box?
- notLayz99 5mo ago
  Kindly keep us updated with your findings. Please also let me know where you publish it. Thanks
- tuna74 5mo ago
  Not very good: https://www.phoronix.com/news/Ubuntu-26.04-With-ROCm https://www.phoronix.com/news/Ubuntu-26.04-With-ROCm
jklmnopqrstuvw 5mo ago
Ubuntu 26 + KDE Plasma 6.6 perfectly handles high-DPI scaling for me. I was originally planning to buy a Mac, but luckily I saw the news about Ubuntu 26 being released a few days ago.
- abrookewood 5mo ago
  I've just moved to a Mac for the first time, after using Windows for work for decades and Linux as my primary desktop for about 3 or 4 years. It certainly takes some getting use to: - Keyboard shortcuts are all different - Doesn't seem to like my Microsoft ergonomic keyboard (lots of keys do nothing) - I really hate the dock - Limited customisation on the menu bar - I also hate the universal menu thing / menu bar in general ... I run a really wide monitor and having to go all the way to the left hand side to access the menu when working on an app that is on the far right is crazy - Fonts look fat or washed out I am sure a lot of this is fixable and will jsut take time to get used to, but honestly, at this point, I think I prefer ubuntu/linux to both Mac & Windows at this point. I do love the hardware on the Mac and would probably try Asahi out if it wasn't a work machine. Also worth pointing out that macOS is still better than Windows 11 at this point - MS should be ashamed at what they did to that OS.
  - IshKebab 5mo ago
    > I am sure a lot of this is fixable It is - sucks that you have to though. For keyboard shortcuts use Karabiner Elements.
  - rswail 5mo ago
    As a both old Linux and now decade user of MacOS, after I got used to no middle-click paste and no focus-follows-mouse: 1. Keyboard shortcuts are Emacs, Ctrl-A: start of line, E: end of line, K: kill selected or to end of line, Y to paste, etc. https://support.apple.com/en-au/102650#text https://support.apple.com/en-au/102650#text 2. Karabiner elements (FOSS) fixes keyboard mappings outside of the Settings: https://karabiner-elements.pqrs.org/ https://karabiner-elements.pqrs.org/ 3. I have the dock on the left hand side, not bottom and I have a 2 monitor (iMac 5K 27"+ Dell 4K 27") setup with the iMac flat in front of me and the curve/2nd to the right. Menu bar is then close to the main windows. 4. Menu bar widgets etc are fixable with thaw https://github.com/stonerl/Thaw https://github.com/stonerl/Thaw 5. Window management via keyboard is fixable with rectangle https://rectangleapp.com/ https://rectangleapp.com/ 6. Use Macports to add all the Linux/Unix utilities, works with MacOS properly (eg Python/Java frameworks). Ports can have variants, plus you can have multiple versions installed side-by-side with `port select`. https://www.macports.org/ https://www.macports.org/ Not sure about fonts, on a 5K iMac they're fine and the 4K Dell works too. You need to use a resolution that fits with Mac's ideas of resolution, so I've got the 5K and 4K both at 2560x1440, which is Mac's idea of 2x resolution.
scorpioxy 5mo ago
After using Ubuntu for many years both on the desktop and server, recent decisions have got me thinking that Canonical has lost a lot of its community spirit. That got me switching over machines to Debian which, to me, still feels like a community project. It's a shame. I am pragmatic about it though so I still run Ubuntu for some things but it's no longer my first recommendation.
- ErroneousBosh 5mo ago
  > recent decisions have got me thinking that Canonical has lost a lot of its community spirit The rot set in when #ubuntu on Freenode (now Libera) became rigidly enforced as on-topic discussions of Ubuntu support only. The channel is absolutely dead now. Maybe one person will say something in any given 12-hour period and no-one replies, just page after page of joins and parts.
egorfine 5mo ago
Unfortunately they forgot to remove Rust coreutils and sudo-rs from Ubuntu prior to releasing 26.04. I am starting to suspect this even might be intentional.
- Joel_Mckay 5mo ago
  Those packages can simply be reverted like dracut, at least for a few months of testing. And yes, using a user-base as Beta testers is fairly cheeky. =3
  - egorfine 5mo ago
    > Those packages can simply be reverted For now, that is. I am afraid that they will stop providing coreutils and sudo for some of the future releases (like they did with upstart) because obviously they know better what's good for the users.
Qem 5mo ago
Unfortunately my favourite flavor, Ubuntu MATE, will sit out this release cycle: https://distrowatch.com/dwres-mobile.php?resource=showheadline&story=20173 https://distrowatch.com/dwres-mobile.php?resource=showheadli...
- ndsipa_pomu 5mo ago
  That doesn't bode well for the future of MATE if they skip the 26.04 LTS releases.
- ulrikrasmussen 5mo ago
  I'm sad about that too. I have been running MATE with XMonad for a very long time and has been very happy with it, primarily because the experience has remained entirely unchanged except for a few bugs which have crept in and have never been fixed, probably due to the maintainers not really being active. A particularly hilarious one is that every time the update notifier wants to restart the computer it tries to show an icon in the status bar which begins with `un-<...>.png`. The real icon file is actually missing, but some helpful fallback logic defaults to the closest match which happens to be a 512 pixel wide logo for the United Nations which gets vertically cropped and placed in the status bar. I just got a new laptop this month and saw that Ubuntu MATE was probably going to be unsupported, so I switched to Manjaro Sway.
  - Qem 5mo ago
    From Ubuntu MATE I went to Mint MATE, then LMDE (Linux Mint Debian Edition).
- kuschku 5mo ago
  As this is an LTS, that means another 2 years with the old version, and having to support the old version of MATE until 2036? That's... A long time.
haunter 5mo ago
What happened to the Ubuntu Core Desktop? Snap only immutable variant (like Fedora Silverblue/Kinoite). It was delayed in 2024 and haven’t seen anything about it ever since https://www.omgubuntu.co.uk/2024/02/ubuntu-core-desktop-delayed/ https://www.omgubuntu.co.uk/2024/02/ubuntu-core-desktop-dela...
- aaravchen 5mo ago
  I think it basically died for general consumers because of the Canonical-only licensed software lock in, and consequent limited software support. Snaps are hard coded to only be able to get snaps from the official Canonical-licensed store URL. Especially on Ubuntu Core, where everything can only be a snap. Even the commercial licensed version for embedding in products requires private companies to use a private space on the Canonical Snap store to distribute thier custom/proprietary software. Absolutely no one is willing to let Canonical become the Apple Store of thier devices, especially given thier even shittier track record.
naveen99 5mo ago
Does it respect your choice to not connect to internet during install now ?
ProllyInfamous 5mo ago
Has the MacPro5,1 community already booted this new version? ...interested to know since I couldn't ever get v25 to work — never tried using OCLP, but v24 is absolutely stable (for some reason not directly; had to USB install v22 then internet update to v24 (i.e. v24 USB wouldn't finish install).
foxwolf 5mo ago
I installed 26.04 on one of my laptops last night. The latest version of PrivateInternetAccess doesn't seem to run (the window never opens). I also could not get my wifi connection to use my local DNS server.
mrkeen 5mo ago
Just tried installing the server variant on a dell precision. The installer let me connect to my WiFi, but then spun indefinitely trying to get an ipv4 address. If I skip connecting to WiFi, and just let the installer do its thing, I get no network on the fresh install either (all the tutorials say to use nmcli, which I don't have).
- rationalist 5mo ago
  I might have experienced the same. It spun and spun after connecting to the WiFi on an Intel NUC 13.
rationalist 5mo ago
Not a fan of the new boot animation, the old one was way better. Why must everyone feel the need to change things for change's sake?
mixxit 5mo ago
Kubuntu has way easier integration for windows people migrating and expecting similar mouse and touchpad interactive and intertia Something gnome could do well to learn

332 points by lxst 5mo ago

Also green light for Fedora 44 release on 28 April https://meetbot.fedoraproject.org/meeting_matrix_fedoraproject-org/2026-04-23/f44-final-go-no-go-meeting-2.2026-04-23-18.00.log.html https://meetbot.fedoraproject.org/meeting_matrix_fedoraproje...

wao0uuno 5mo ago
Cool. I'm pretty excited for the new login manager. Maybe now KDE will be able to fit all customization options (wallpaper, lockscreen, login screen) on a single Settings page.
- everybodyknows 5mo ago
  Is there a CLI way to dump/restore those settings?
  - lozf 5mo ago
    I'm not certain about CLI, but Plasma 6.6 does allow preferences / settings to be exported & restored / shared. https://youtu.be/RuxNnfllxco?t=3894 https://youtu.be/RuxNnfllxco?t=3894 - Neal Gompa on the Fedora 44 Release party stream,

rasengan 5mo ago

> TPM-backed full-disk encryption This is going to be very useful for servers hosted in third party DCs.

djkoolaide 5mo ago
The beta installer was completely unsuccessful in setting the TPM-backed disk encryption on both a ThinkPad X1 Carbon (Intel 258V) and a ThinkPad P14s (AMD 300-something). Hopefully they ironed that part out in the release, but it seems still early for this feature (at least for my comfort level).
- nechuchelo 5mo ago
  Same on my Framework Desktop. Looks like it works only with a limited number of TPM chips for now.
  - bboozzoo 5mo ago
    The constructed policy is quite strict and expects certain UEFI things to be set up correctly. For example both this https://github.com/canonical/secboot/blob/7434bac27844362ff882706130c5fa51862f2005/efi/pcr_profile.go#L84 https://github.com/canonical/secboot/blob/7434bac27844362ff8... and https://github.com/canonical/secboot/blob/7434bac27844362ff882706130c5fa51862f2005/efi/pcr_profile.go#L144 https://github.com/canonical/secboot/blob/7434bac27844362ff8... are enabled in the policy. The policy choices and various early checks, even as trivial as confirming that the TCG log content is correct after booting into installation system, are enough to rule out a lot of potentially problematic EFI deployments. Effectively making it more strict helps avoid a lot of funny issues where the firmware is clearly buggy and things would fall apart sooner or later.
    - hyperman1 5mo ago
      Strict is probably good. My company started to enable bitlocker this year on win11, and a non trivial amount of initial encryptions seem to be failing, destroying the user data and requiring a full reformat.
senectus1 5mo ago
oh man i hope this works on dell laptops
Daviey 5mo ago
Keeping the key in the same room as the padlock only protects against casual drive theft and secure disposal. Personally I'm more worried about someone stealing the entire server or a local threat actor. Sure, keep TPM to help with boot integrity, maybe even a factor for unlock, but things like Clevis+Tang (or Bitlock Network Unlock for our windows brethren) is essential in my opinion.
- aaravchen 5mo ago
  TPM locking is for ensuring the disk isn't removed from your machine. It's technically possible that someone could tap the hardware while the disk is still in your machine, but otherwise they're stuck contending with whatever other security setup you have on your machine. The TPM locked disk encryption is more like embedding your safe in concrete with deep foundations. It doesn't affect the thickness or quality of your safe.
Gigachad 5mo ago
I want this on my own homeserver. Protection against someone stealing the server without requiring me to type a password every boot.
- zenoprax 5mo ago
  In what way is TPM protecting your data if someone steals the entire server? TPM only ensures that the boot environment has not been modified. Whatever key is being used to automatically decrypt the disk would be in the clear. Unless I'm misunderstanding your situation, I think you should look up the "Evil Maid Attack" to better understand how to mitigate risk for your threat model.
  - hfjtnrkdkf 5mo ago
    assuming there are no bugs in linux and you enable full memory encryption in BIOS, it protects you in the same way the FBI cant get into a locked iphone they physically posess but linux is not as secure as an iphone, and linux users typically dont know how to set this up, so in practice you are right, it doesnt protect you
    - Gigachad 5mo ago
      My threat model is a junkie breaks in to my house and flips my server on facebook marketplace. Then the buyer curiously pokes through my hard drives. Of course if protecting against government agencies is the threat model then TPM alone isn't enough. For me, a zero friction way to have decent security is worlds better than the normal state where homeservers are not encrypted at all.
      - zenoprax 5mo ago
        I just don't understand where the protection comes from if you have automatic password entry. If the thief boots up the server it is just as convenient for them as it is for you. Your threat model is the same as my use of a laptop: regular LUKS with a password is enough on its own. Add TPM if you want to know that you're entering your password in a secure boot environment (ie. protect against a fake LUKS screen that steals your password).

superkuh 5mo ago

The comments there note there is no official Ubuntu MATE release for the first time since Ubuntu 15 (and before 14.04 gnome2 was an option). That's a shame but probably most people who chose MATE (or gnome2) no longer chose Ubuntu due to the conflicting ideologies inherent in the two. MATE users generally don't like change for change's sake.

razingeden 5mo ago
its in the daily builds. I haven't tried it yet. not sure if this confirms the impression you have there... I wasn't like this until a couple of headless VPS'es (on Arm8) got through the upgrade from 18.x -> 20.x -> 22.x and then crashed out over -> 24.x for a still unknown reason. now I'm just afraid .. or I should say reluctant ..to repeat that whole fiasco. https://cdimage.ubuntu.com/ubuntu-mate/daily-live/current/ https://cdimage.ubuntu.com/ubuntu-mate/daily-live/current/
- Joel_Mckay 5mo ago
  There were some issues with how the menu icon manager handled the new security policy defaults. This means the editor will break, and the displayed menu may be missing any item that didn't follow the naming convention syntax. Its a lot of packages to bring into compliance, for that one silly feature the devs had to put in before it was ready... Maybe they fixed it since the rc release, but there were some rough edges in Feb... the kernel USB support cooked the thumb drive partition structure. In 22.04 to 24.04 the kernel Nvidia GPU driver EOL abandonment began... In 26.04 people will discover most EOL hardware support prior to RTX series will be difficult to bring up. Probably wise to wait a few weeks for the bug reports to clear out a bit. =3

rs_rs_rs_rs_rs 5mo ago

Hard to get some spotlight for this with all these new models around, I feel bad for Canonical.

satvikpendem 5mo ago

What should I use if I like Ubuntu but not snap, just Debian? Or are there alternatives around? Seems like Ubuntu has the best hardware and driver support so just curious what's new in Linux land.

compounding_it 5mo ago
PopOS
- satvikpendem 5mo ago
  This looks like it might be the best solution, no snap, maintained by an actual system integrator and laptop maker, and I also like the new Rust-based desktop environment. I wonder how well it runs on Framework laptops or MacBooks as well.
  - compounding_it 5mo ago
    Runs great on framework. Not sure about COSMIC on asahi.
- bboozzoo 5mo ago
  Isn't that essentially a release of Ubuntu with a different kernel, DE and maybe some userspace utilities?
  - lproven 5mo ago
    Yes. Linux Mint, Zorin OS, Linux Lite, Pop OS, and several less famous distros are all based on Ubuntu. New versions of all of them will follow this new LTS release in time. Mint forked GNOME 3 to make something more Windows-like. Zorin customised upstream GNOME with a lot of extensions. Pop removed it and replaced it with their own homegrown desktop, written in Rust. It's actually pretty good and works well.
  - panick21_ 5mo ago
    PopOS started as Ubuntu with better hardware enablment but it has evolved far beyond that. They have been removing all the snap stuff. The have done tons of work on DE (Cosmic) and in general don't go along with Gnome or Ubuntu strangness. But yes its Ubuntu and Debian derived.

compounding_it 5mo ago

Ubuntu LTS is still the choice for many production environments and education and learning. As someone with Ubuntu from 2010 CDs, I find it refreshing that modern Ubuntu distros work OOB on most computers these days with excellent driver support.

alprado50 5mo ago
Is this even true? I mean, Windows is the main focus for all hardware vendors, and everybody who has owned a PC knows that malfunctions are unavoidable. If that is the case for Windows, then Linux cant be better.
- Joel_Mckay 5mo ago
  Windows 11 set a low bar to clear... Most popular hardware will work on linux, but like always its better to check before your buy. Distro like Ubuntu are a fair compromise to get amd/nvidia GPU drivers, wifi, and brother laser printer/scanner networking installed. =3 edit: seriously, why down vote the guys karma if its a honest question. Try to be kind people.
- abrookewood 5mo ago
  Windows is a dumpster fire at this point. Just unusable
- dmos62 5mo ago
  Linux has been better for old hardware since early 00s. Just don't expect hw acceleration to work for older GPUs.
- ButlerianJihad 5mo ago
  https://www.lenovo.com/us/en/glossary/linux-standard-base/ https://www.lenovo.com/us/en/glossary/linux-standard-base/ When I was shopping Lenovo.com for my ThinkPad in 2018, there was a table with ThinkPads certified for Ubuntu Linux in one column, and certified for Red Hat Enterprise Linux in another column. I chose the T580 as a RHEL-certified notebook, and it was fantastic. Lenovo.com let me configure each individual component exactly according to my needs and tastes, and it was custom-assembled and shipped from Shenzhen. It did arrive with Windows 10 pre-installed (this was the least hassle and most popular OS option). I initially installed CentOS, but quickly realized that Fedora would be the sweet spot, and so it was a Fedora system for most of its lifetime. Near the end, I did revert to Windows 10, which also worked flawlessly. The ThinkPad T580 literally never malfunctioned. It was still 100% working when I turned it in for recycling in 2025. I've also run Ubuntu on my "daily driver" desktop system, which ran from 2006-2022. Yes, that's 16 years' worth of Ubuntu installs and upgrades. It was mostly a KDE Plasma (Kubuntu) system. I enjoyed every bit of that. In 1999, I was avidly using OpenBSD on really old hardware (such as HP Apollo 425t workstations.) OpenBSD simply couldn't deal with the special graphics subsystem on those machines. I tried and tried to get something working, but there were obstacles, not only with the hardware and drivers, but also the monitor connection needed a particular type of cabling and a proprietary monitor, too. However, OpenBSD did great for networking, security, Squid cache, proxies, all kinds of things. And even in 1999, though it was early, I ran Linux on a 386DX-40, because Linux supported the "ftape" floppy tape driver at that time, and I had some kind of QIC tape backup from Eagle that wouldn't be recognized by OpenBSD or NetBSD. Meanwhile, in that same year, my "daily driver" desktop machine was a 486 with VLB, dual-booting Windows 98 and OpenBSD. The Windows 98 was set up with a Cygwin system and X11 server, so that I could run X11 clients on the OpenBSD machines, or the Linux machine, or whatever else was on the LAN.

hnuser123456 5mo ago

Fine print on coreutils rewrite: https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/80773 https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/8...

throwa356262 5mo ago
That was a lot of CVEs Goes to show that not all security bugs are memory related bugs
- nine_k 5mo ago
  Indeed, many bugs are API usage bugs, something that no language can verify. (The API is implemented in C anyway.)
  - IshKebab 5mo ago
    No, but some languages make designing difficult-to-misuse APIs a lot easier than others.
    - nine_k 5mo ago
      It's Linux, it's a C API, so there's little hope. I wonder if Redox has a much better API; at least I hope it does.
- IshKebab 5mo ago
  I wish they'd put the severity. There are 4 highs, the rest are medium or low. Here are the high ones: https://www.cve.org/CVERecord?id=CVE-2026-35338 https://www.cve.org/CVERecord?id=CVE-2026-35338 - `chmod --preserve-root` can be bypassed. That doesn't seem that bad tbh. https://www.cve.org/CVERecord?id=CVE-2026-35341 https://www.cve.org/CVERecord?id=CVE-2026-35341 - `mkfifo` accidentally resets the permissions of files that already exist, so if you manage to do `sudo mkfifo /etc/shadow` then it becomes world readable. https://www.cve.org/CVERecord?id=CVE-2026-35352 https://www.cve.org/CVERecord?id=CVE-2026-35352 - TOCTOU in `mkfifo` lets you do the symlink trick to get it to change permissions on an unrelated file. https://www.cve.org/CVERecord?id=CVE-2026-35368 https://www.cve.org/CVERecord?id=CVE-2026-35368 - You might be able to get chroot to execute arbitrary code. Tbh I doubt if any of these would ever result in a real hack, unless your system is doing really mental things like running shell scripts with untrusted input. I could only find a couple of CVEs that looked actually serious for GNU Coreutils too though. IMO if you're using these tools with untrusted input your system is janky enough that there are going to be serious flaws in it anyway. Probably though quoting mistakes.

ChrisArchitect 5mo ago

Earlier official blog: https://ubuntu.com/blog/canonical-releases-ubuntu-26-04-lts-resolute-raccoon https://ubuntu.com/blog/canonical-releases-ubuntu-26-04-lts-... (https://news.ycombinator.com/item?id=47878560 https://news.ycombinator.com/item?id=47878560)

teekert 5mo ago

It's nice as always, but I have some issues. * Select - Middle-click paste does not seem to work * When something requires a password (ie just tried a bitlocker volume) the whole screen is blocked, so no password manager for you (unless you copy it before, or cancel - unplug drive-copy password - replug drive - paste.) * The default tiling does not jive with me, sometimes I don't even know what it wants (it always tries to force you to also set a left windows if you tile right and vice versa) so I disabled it `gnome-extensions disable tiling-assistant@ubuntu.com`. Default Gnome tiling is ok (but missing quarter tiling (and 1/8th would be nice on my ultra-wide) imho so I use [0] * I've been trying to use Nix home-manager for packages but I have GPU errors, need workarounds, icons that just remain generic. But I guess that is not Ubuntu's fault. Ubuntu remains my nr. 2 choice, after NixOS (but I didn't get the latter to install on this Nuc, perhaps a bios update will help). The installer offered (under experimental) to run root on zfs, I didn't end up selecting it because only on the forth try (and by that time you're clicking at a fast rate just taking defaults) I understood that it would only download packages via wifi, not the cable (same for NixOS installer, so must be my network). [0] https://github.com/troyready/quarterwindows https://github.com/troyready/quarterwindows

WD-42 5mo ago
Select middle click not working is a stupid decision from GNOME to disable in 50. You can turn it back on with the tweak tool.
- Gigachad 5mo ago
  Probably changed to work the same as macos. Not sure if windows does middle click paste.
  - NekkoDroid 5mo ago
    > Not sure if windows does middle click paste. It doesn't. X was the only place I know of where that was a thing.
    - 5mo ago

azalemeth 5mo ago

I know that the interim releases had issues with zfs and trying to update gave the message "Sorry, cannot upgrade this system to 25.04 right now System freezes have been observed on upgrades to 25.04 with ZFS enabled. Please see https://wiki.ubuntu.com/PluckyPuffin/ReleaseNotes https://wiki.ubuntu.com/PluckyPuffin/ReleaseNotes for more information. " The release notes don't seem to mention zfs. I hope these issues have been fixed?

raudette 5mo ago
Just FYI - That defect only impacted systems which boot from ZFS - mine did not. The installer would stop an upgrade if it found a mounted volume - it apparently checks for zfs volumes as follows: sudo zpool list -H I could get around the installer's ZFS check by unmounting the drive: sudo zpool export poolname I upgraded. Then remounted the volume: sudo zpool import poolname Then I was up and running...

throwa356262 5mo ago

I am thinking of testing one of those AMD Ryzen AI laptops for development and local LLM. These come with win11 copilot+. How well does 26.04 with the 7.0 kernel support these? Can it, say, use their GPU and NPU for compute out of the box?

notLayz99 5mo ago
Kindly keep us updated with your findings. Please also let me know where you publish it. Thanks
tuna74 5mo ago
Not very good: https://www.phoronix.com/news/Ubuntu-26.04-With-ROCm https://www.phoronix.com/news/Ubuntu-26.04-With-ROCm

jklmnopqrstuvw 5mo ago

Ubuntu 26 + KDE Plasma 6.6 perfectly handles high-DPI scaling for me. I was originally planning to buy a Mac, but luckily I saw the news about Ubuntu 26 being released a few days ago.

abrookewood 5mo ago
I've just moved to a Mac for the first time, after using Windows for work for decades and Linux as my primary desktop for about 3 or 4 years. It certainly takes some getting use to: - Keyboard shortcuts are all different - Doesn't seem to like my Microsoft ergonomic keyboard (lots of keys do nothing) - I really hate the dock - Limited customisation on the menu bar - I also hate the universal menu thing / menu bar in general ... I run a really wide monitor and having to go all the way to the left hand side to access the menu when working on an app that is on the far right is crazy - Fonts look fat or washed out I am sure a lot of this is fixable and will jsut take time to get used to, but honestly, at this point, I think I prefer ubuntu/linux to both Mac & Windows at this point. I do love the hardware on the Mac and would probably try Asahi out if it wasn't a work machine. Also worth pointing out that macOS is still better than Windows 11 at this point - MS should be ashamed at what they did to that OS.
- IshKebab 5mo ago
  > I am sure a lot of this is fixable It is - sucks that you have to though. For keyboard shortcuts use Karabiner Elements.
- rswail 5mo ago
  As a both old Linux and now decade user of MacOS, after I got used to no middle-click paste and no focus-follows-mouse: 1. Keyboard shortcuts are Emacs, Ctrl-A: start of line, E: end of line, K: kill selected or to end of line, Y to paste, etc. https://support.apple.com/en-au/102650#text https://support.apple.com/en-au/102650#text 2. Karabiner elements (FOSS) fixes keyboard mappings outside of the Settings: https://karabiner-elements.pqrs.org/ https://karabiner-elements.pqrs.org/ 3. I have the dock on the left hand side, not bottom and I have a 2 monitor (iMac 5K 27"+ Dell 4K 27") setup with the iMac flat in front of me and the curve/2nd to the right. Menu bar is then close to the main windows. 4. Menu bar widgets etc are fixable with thaw https://github.com/stonerl/Thaw https://github.com/stonerl/Thaw 5. Window management via keyboard is fixable with rectangle https://rectangleapp.com/ https://rectangleapp.com/ 6. Use Macports to add all the Linux/Unix utilities, works with MacOS properly (eg Python/Java frameworks). Ports can have variants, plus you can have multiple versions installed side-by-side with `port select`. https://www.macports.org/ https://www.macports.org/ Not sure about fonts, on a 5K iMac they're fine and the 4K Dell works too. You need to use a resolution that fits with Mac's ideas of resolution, so I've got the 5K and 4K both at 2560x1440, which is Mac's idea of 2x resolution.

scorpioxy 5mo ago

After using Ubuntu for many years both on the desktop and server, recent decisions have got me thinking that Canonical has lost a lot of its community spirit. That got me switching over machines to Debian which, to me, still feels like a community project. It's a shame. I am pragmatic about it though so I still run Ubuntu for some things but it's no longer my first recommendation.

ErroneousBosh 5mo ago
> recent decisions have got me thinking that Canonical has lost a lot of its community spirit The rot set in when #ubuntu on Freenode (now Libera) became rigidly enforced as on-topic discussions of Ubuntu support only. The channel is absolutely dead now. Maybe one person will say something in any given 12-hour period and no-one replies, just page after page of joins and parts.

egorfine 5mo ago

Unfortunately they forgot to remove Rust coreutils and sudo-rs from Ubuntu prior to releasing 26.04. I am starting to suspect this even might be intentional.

Joel_Mckay 5mo ago
Those packages can simply be reverted like dracut, at least for a few months of testing. And yes, using a user-base as Beta testers is fairly cheeky. =3
- egorfine 5mo ago
  > Those packages can simply be reverted For now, that is. I am afraid that they will stop providing coreutils and sudo for some of the future releases (like they did with upstart) because obviously they know better what's good for the users.

Qem 5mo ago

Unfortunately my favourite flavor, Ubuntu MATE, will sit out this release cycle: https://distrowatch.com/dwres-mobile.php?resource=showheadline&story=20173 https://distrowatch.com/dwres-mobile.php?resource=showheadli...

ndsipa_pomu 5mo ago
That doesn't bode well for the future of MATE if they skip the 26.04 LTS releases.
ulrikrasmussen 5mo ago
I'm sad about that too. I have been running MATE with XMonad for a very long time and has been very happy with it, primarily because the experience has remained entirely unchanged except for a few bugs which have crept in and have never been fixed, probably due to the maintainers not really being active. A particularly hilarious one is that every time the update notifier wants to restart the computer it tries to show an icon in the status bar which begins with `un-<...>.png`. The real icon file is actually missing, but some helpful fallback logic defaults to the closest match which happens to be a 512 pixel wide logo for the United Nations which gets vertically cropped and placed in the status bar. I just got a new laptop this month and saw that Ubuntu MATE was probably going to be unsupported, so I switched to Manjaro Sway.
- Qem 5mo ago
  From Ubuntu MATE I went to Mint MATE, then LMDE (Linux Mint Debian Edition).
kuschku 5mo ago
As this is an LTS, that means another 2 years with the old version, and having to support the old version of MATE until 2036? That's... A long time.

haunter 5mo ago

What happened to the Ubuntu Core Desktop? Snap only immutable variant (like Fedora Silverblue/Kinoite). It was delayed in 2024 and haven’t seen anything about it ever since https://www.omgubuntu.co.uk/2024/02/ubuntu-core-desktop-delayed/ https://www.omgubuntu.co.uk/2024/02/ubuntu-core-desktop-dela...

aaravchen 5mo ago
I think it basically died for general consumers because of the Canonical-only licensed software lock in, and consequent limited software support. Snaps are hard coded to only be able to get snaps from the official Canonical-licensed store URL. Especially on Ubuntu Core, where everything can only be a snap. Even the commercial licensed version for embedding in products requires private companies to use a private space on the Canonical Snap store to distribute thier custom/proprietary software. Absolutely no one is willing to let Canonical become the Apple Store of thier devices, especially given thier even shittier track record.

naveen99 5mo ago

Does it respect your choice to not connect to internet during install now ?

ProllyInfamous 5mo ago

Has the MacPro5,1 community already booted this new version? ...interested to know since I couldn't ever get v25 to work — never tried using OCLP, but v24 is absolutely stable (for some reason not directly; had to USB install v22 then internet update to v24 (i.e. v24 USB wouldn't finish install).

foxwolf 5mo ago

I installed 26.04 on one of my laptops last night. The latest version of PrivateInternetAccess doesn't seem to run (the window never opens). I also could not get my wifi connection to use my local DNS server.

mrkeen 5mo ago

Just tried installing the server variant on a dell precision. The installer let me connect to my WiFi, but then spun indefinitely trying to get an ipv4 address. If I skip connecting to WiFi, and just let the installer do its thing, I get no network on the fresh install either (all the tutorials say to use nmcli, which I don't have).

rationalist 5mo ago
I might have experienced the same. It spun and spun after connecting to the WiFi on an Intel NUC 13.

rationalist 5mo ago

Not a fan of the new boot animation, the old one was way better. Why must everyone feel the need to change things for change's sake?

mixxit 5mo ago

Kubuntu has way easier integration for windows people migrating and expecting similar mouse and touchpad interactive and intertia Something gnome could do well to learn