top 98 comments

sorted by: hot top controversial new old
[–] 186 points 2 months ago (1 child)

I like a distro with problems that I can relate to.

  • source
  • hideshow 1 child comment
  • [–] 127 points 2 months ago (2 children)

    HOW THE FUCK DID THEY MANAGE IT AGAIN

  • source
  • hideshow 2 child comments
  • [–] 122 points 2 months ago (14 children)

    some iconic duos in the Linux community: Arch and AUR malware, Ubuntu and bad updates, NixOS and community/team members leaving, Manjaro and failing to renew its cert.

  • source
  • hideshow 14 child comments
  • [–] 21 points 2 months ago (3 children)

    Ubuntu and bad updates

    This is the only drama in your list I'm not familiar with already. What/when did they last break?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 8 points 2 months ago (1 child)

    Recently, the nvidia-dkms driver updates wouldn't build for 5.x series kernels, so if you hadn't cleaned up old kernels, the update bombed out before updating the initrd filesystem, the system couldn't boot without intervention. Thankfully, I noticed before trying to reboot my work desktop, and the solution was "apt autoremove && apt upgrade".

    But the install media for my desktop at home was 18.04, and it's running 26.04 now. It has an AMD GPU, so it hasn't had update problems.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 39 points 2 months ago (1 child)

    Welcome to Linux, do you want the BenevolentDictatorOS, WeaponsManifaturerOS, MalwareOS or Debian?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 2 months ago (3 children)

    Debian and shipping broken packages

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 2 months ago (2 children)

    Bruh what? I went to debian for server because of stability. It only updates like once a decade and still ships broken packages?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 2 months ago* (1 child)

    Its intended behavior from Debian team. because they ships a version of the software at the time and only backport security patches. So if the version they ship has bugs then those bugs stay for years. This generates quite a bit of noise for upstream projects but it is what it is.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 2 months ago (2 children)

    AUR malware

    Really, something like this ever happened lol?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 2 months ago (1 child)

    I'm sure it has. The idea that it's frequent is unhinged.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 247 points 2 months ago (1 child)
  • [–] 79 points 2 months ago (7 children)

    The funniest thing about this is that it needs a single Bash script and a cronjob to solve (unless they got a REALLY bad hoster).

    That bash script probably exists a bazillion times already… so even an LLM could spit it out for them.

    Their organisational structure must be abhorrent for nobody to feel even remotely responsible for this.

  • source
  • hideshow 7 child comments
  • [–] 55 points 2 months ago (6 children)

    Most web server have ACME support built-in nowadays, setup is a matter of minutes, no scripting required. This has been a solved problem for years, any sysadmin who can't handle this basic task has no business running public-facing servers.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 19 points 2 months ago (4 children)

    Yeah, caddy automatically renews certs by default, as does traefik as far as i can tell, and certbot installs a timer for this.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 2 months ago (2 children)

    Yeah sure but in significantly distributed environments I'm sure there's more complexity to it than that

  • source
  • parent
  • hideshow 2 child comments
  • [–] 75 points 2 months ago (1 child)

    Manjaro once again demonstrating they're not a serious distro/project, hahaha

  • source
  • hideshow 1 child comment
  • [–] 52 points 2 months ago (1 child)

    Again????? Again???????????

  • source
  • hideshow 1 child comment
  • [–] 37 points 2 months ago

    A little stability and consistency in the world, manjaro always delivers when it comes to this.

  • source
  • [–] 34 points 2 months ago (12 children)

    Why isn’t this an automated processs for them?

  • source
  • hideshow 12 child comments
  • [–] 14 points 2 months ago

    Why isn’t this an automated processs for them?

    Because manjaro.org is controlled personally by Phil, the CEO of the company, who's paranoid about letting anybody else handle it. And also can't figure out how to renew automatically, apparently. People have to remind him on Discord. 🀦

    Everything else *.manjaro.org (forums, mirrors etc.) is handled by different people and have never expired afaik.

    It's literally just the main webpage that has this problem, everything else about the distro is never impacted.

  • source
  • parent
  • [–] 13 points 2 months ago (6 children)

    Why isn't it for everyone? How often I see this with, I mean, major actors is head shakingly baffling.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 2 months ago (5 children)

    I work in tech for telco and the amount of people around me who have zero clue about x509/TLS/certificates in general is absolutely baffling

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 2 months ago (4 children)

    I work in a telco and I have no clue what you just said to me.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 2 months ago (3 children)
  • [–] 10 points 2 months ago (3 children)

    I wonder if they are still on an old cert system.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 17 points 2 months ago (2 children)

    This came up last time the cert expired iirc.

    Tl;dr one of the founders is holding up the infra not allowing any change. According to someone who worked on Manjaro, it was trivially easy to get this fixed, but that single person simply wouldn't approve it. Last I checked they sent the founder an ultimatum: either hand over the project or see the staff walk. I suppose the staff walked.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 32 points 2 months ago (12 children)

    Like, when you... "get" the certificate... Doesn't it say... "on it" exactly which date it expires? So maybe set a thing in your calendar or an alarm on your phone or some shit? How hard can this be?

  • source
  • hideshow 12 child comments
  • [–] 42 points 2 months ago (5 children)

    LetsEncrypt also gives you a month to update certificate, you don't even have to do it yourself, just run a script once a week in cron. That's such a level of incompetence I wonder why anyone will trust them with a distro when they can't even do such a simple task.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 13 points 2 months ago (4 children)

    yes, but the people who want to implement that are held back and sabotaged by the guy who owns the shit. this is not about incompetence.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 2 months ago (5 children)

    You could proactively take care of it with a reminder on the calendar. Or alternatively, just let the community inform you when you need to renew it. Both are effective methods.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 6 points 2 months ago (1 child)

    They use LetsEncrypt. There is literally a bot you can install to automate the renewal process daily on a cron schedule and notify you if it fails.

    They're just fucking morons managing the infra for their domain.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 months ago (2 children)

    The second alternative is a bit of a gamble with trust though eh πŸ˜…

  • source
  • parent
  • hideshow 2 child comments
  • [–] 61 points 2 months ago

    lmao, what're they up to now, 8 times?

  • source
  • [–] 24 points 2 months ago (1 child)

    Seems fine for me now. In fact it looks like they switched to Let's Encrypt for certification so maybe they learned something from last time.

  • source
  • hideshow 1 child comment
  • [–] 23 points 2 months ago

    Wait, again?

  • source
  • [–] 18 points 2 months ago

    Holy shit this is so stupid I can't defend them anymore πŸ˜‚πŸ˜‚

  • source
  • [–] 16 points 2 months ago (1 child)

    just install certbot + a daily cron

  • source
  • hideshow 1 child comment
  • [–] 16 points 2 months ago (1 child)

    My first distro & my never again distro. Rest in piss, manjaro

  • source
  • hideshow 1 child comment
  • [–] 29 points 2 months ago (3 children)

    This is literally why I stopped using Manjaro.

    I’ve botched 2 Manjaro installs just doing a pacman -Syu while their certs were expired and I ended up with an incomplete upgrade.

    Never once had this issue with EndeavorOS.

  • source
  • hideshow 3 child comments
  • [–] 0 points 2 months ago (1 child)

    Look, I don't want to call you a liar... so let's say maybe you meant to say pamac or got things wrong.

    Because:

    1. That's not how pacman works. If it hits a mirror with expired certs it just outputs a warning and uses another mirror.
    2. On a fresh install Manjaro will compile an optical subset of mirrors for you based on location and response time. Those mirrors are spread around the world on different domains. It's very unlikely that your list would include ONLY mirrors.manjaro.org and mirrors2.manjaro.org.
    3. But even if it did, and let's say for the sake of argument there is a bug in pacman AND you got those mirrors... those two hosts are on a different certificate from manjaro.org (the website), are CNAME'd to .rsc.cdn77.org hosts, get renewed automatically separately from the website cert, and have never been allowed to lapse afaik.
  • source
  • parent
  • hideshow 1 child comment
  • Maybe it wasn’t due to certs, but it still happened. That was enough for me to switch distros. I was much less experienced with Linux back then, so I wasn’t able to figure out how to get it working again.

    So far I’ve daily-driven EndeavorOS, Mint, PopOS, and Kubuntu. None of them have broken themselves with an apt or pacman upgrade.

  • source
  • parent
  • [–] 14 points 2 months ago

    Yep... Validation of my decision to cachyos after my last drive needed surgery.

  • source
  • [–] 14 points 2 months ago (1 child)

    Is there a running tally somehwere? I need something like the credible defense guys' "0 days since airplane dropped in oceans"

  • source
  • hideshow 1 child comment
  • [–] 12 points 2 months ago*

    Floorp sounds like an alien or galaxy from Rick and Morty

  • source
  • [–] 12 points 2 months ago

    We're gonna sse the year of the linux desktop long before we see the year of default ACME lmao

  • source
  • [–] 12 points 2 months ago (3 children)

    I thought the devs were supposed to be taking back the project. I'm guessing that didn't happen.

  • source
  • hideshow 3 child comments
  • [–] 10 points 2 months ago

    At this point, I’m totally convinced this is all deliberate. Why? I have no fucking clue.

  • source
  • [–] 10 points 2 months ago

    This is a PR stunt? There no such thing as bad publicity?

  • source
  • [–] 39 points 2 months ago (12 children)

    I’m shocked it even has any users tbh.

  • source
  • hideshow 12 child comments
  • [–] 14 points 2 months ago (6 children)

    Well, Manjaro popped up when a lot of people cannot install Arch on their own. Same thing with Ubuntu and Debian. Once a userbase formed, people follow suit I guess.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 9 points 2 months ago* (5 children)

    I mean they have their own repos and take a position of "hardened updates" that are two weeks older than the bleeding edge ones of Arch. I used it briefly out of curiosity a couple years ago. It seemed generally fine, although I seem to remember having issues with some AUR stuff. That's kinda to be expected and could even just be general fuckery on the part of the package maintainers, not manjaro. It could also be on manjaro's fault lol.

    I've just stuck to Arch since then. Garuda and endeavour OS are both cool but I don't feel like I'm gaining much by using either. And Garuda includes a bunch of packages that I don't even want.

    I'm more interested in what manjaro can do in the mobile phone sphere. If they can build something viable yet fun to tinker with in the next few years that has a rolling release schedule, it could make for a cool Linux phone. Ubuntu touch is probably the more stable choice tbh, but that's the beauty of Linux.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 12 points 2 months ago* (3 children)

    Manjaro was more unstable than Arch ever was, for me.

    My experience was:

    • They would mess with Arch packages and muck things up.

    • It relied on AUR some, which also messed things up.

    • 3rd party repos or AUR didn't work, as its not in sync with upstream arch.

    • ...Holding back packages didn't fix anything anyway. It just delayed fixes. I found myself trying to install upstream Arch packages.

    It turns out Arch Linux is more tested and "held back" than people give it credit for. There's little to gain from forking like that, instead of just contributing to upstream arch testing.

    Not to mention the cert thing. Manjaro really did let certs expire many times. When I was new to linux, that took me forever to figure out.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 2 months ago (2 children)

    I found myself trying to install upstream Arch packages.

    You realize that's how you broke, right? It's like installing Debian packages on Ubuntu.

    It relied on AUR some, which also messed things up.

    How does it rely on AUR?

    3rd party repos or AUR didn't work, as its not in sync with upstream arch.

    What 3rd party repos?

    AUR works perfectly fine.... when it works. AUR is a mess of its own. It's chock full of malware as we speak and it's not accepted as a reference on Arch or any other Arch-based distro. Saying an Arch distro "doesn't work with AUR" is completely irrelevant at the best of times.

    Not to mention the cert thing. Manjaro really did let certs expire many times. When I was new to linux, that took me forever to figure out.

    Did you spend a lot of time reading the webpage, or?... Because that's the only cert that expires, the mirros and the forums never did. What exactly were you figuring out?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago (1 child)

    Whoa nellie.

    This was many years ago, when I didnt know much about linux, and yes many lessons were learned. Though I distinctly remember instances where I couldnt update Manjaro packages because of expired certs.

    To clarify some points:

    • On packages/AUR, I was desperate, because upstream Arch had some critical fixes that werent shipped to Manjaro yet. Clearly this didnt work out well.

    • AUR specifically breaks with Manjaro because AUR targets upstream arch as a base. When a dependant Arch package updates, the AUR package immediately updates to that new dependecy if its being maintained. But since Manjaro delays the upstream updates, this AUR package will break if its updated.

    • Yes, I know AUR is filled with malware now.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 months ago

    AUR specifically breaks with Manjaro because AUR targets upstream arch as a base. When a dependant Arch package updates, the AUR package immediately updates to that new dependecy if its being maintained. But since Manjaro delays the upstream updates, this AUR package will break if its updated.

    Again, using the AUR as the standard for evaluating any Arch-based distro is really not cool.

    Leaving that aside, the exact thing you've mentioned can happen on vanilla Arch, if the AUR package you are trying to install is based on Arch packages that you haven't received yet. So you'd have to upgrade your system every time you're trying to update or install an AUR package to be sure.

    since Manjaro delays the upstream updates, this AUR package will break if its updated.

    It won't break, it will either succeed compiling or not with the older packages. If it succeeds, no harm done. If it doesn't, you still have the previous version.

    The unlikely corner case is that the new AUR package version relies on new API/features that only exist in newly released Arch packages and you absolutely must have the latest version right now. But then you're using the wrong distro for that.

    I was desperate, because upstream Arch had some critical fixes that werent shipped to Manjaro yet.

    Manjaro ships critical updates out of band, without waiting for regular batch updates.

  • source
  • parent
  • [–] 6 points 2 months ago

    It was a selling point for Manjaro at some point but people really shouldn't use AUR with it. That's just an invitation to a disaster. I think Manjaro is stable if you don't mix it with AUR. Used it for 6 years and the worst I remember was their Nvidia cataclysm, mostly it was fine.

    Not sure if I would want to use cutting edge on mobile though. I tried PostmarketOS and Ubuntu Touch a couple years ago and Ubuntu Touch was actually daily drivable-ish. Really loved SXMO too, it's a way different mobile experience.

  • source
  • parent
  • [–] 1 point 2 months ago

    The website cert is the one that expires. It doesn't impact anything else about the distro. The package mirrors are on different hosts (and certs). It's a good distro, wish they'd sort out the kerfuffle with the founder (who's the one holding them back).

  • source
  • parent
  • [–] 1 point 2 months ago (2 children)

    Honestly, I installed it on my 2nd laptop and workstation because I really wanted the AUR, but got tired of Arch unstable update process 15 years ago and left Linux for personal use for MacOS. It still has everything I want on my main laptop, home brew and a terminal with tmux.

    It just works and I just couldn't be arsed reinstalling, but yeah, if I would, I would just use Arch again now.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago

    I'm also in the club of having a couple of Manjaro installs that now date back a few years to when it was still cool.

    Honestly as a distro it works pretty well and my complaints are few. If I had to reinstall I'd take a closer look at CachyOS, EndeavourOS, or even just Arch, but I can't really be bothered to replace something that's working just fine so I'll stick with it for now.

  • source
  • parent
  • load more comments (1 reply)
  • [–] 8 points 2 months ago

    I thought this was an anniversary of a funny event that happened one time type of meme. But no. It has happened NINE TIMES, including today.

  • source
  • load more comments
    view more: next β€Ί