9 comments

  • randomblock1 1 minute ago
    This is trivial to fix, at least for you.

      %corestaff ALL=NOPASSWD: /usr/bin/mailq "", \
                               /usr/sbin/exim -bp, \
                               /usr/sbin/exim -bpa, \
                               /usr/sbin/exim -bpc, \
                               /usr/sbin/exim -bpr, \
                               /usr/sbin/exim -bpu
    
    That being said there definitely should be an automated way to check for incompatibilities between normal and rust sudo.
  • davb 25 minutes ago
    Further validation of our decision to move to Debian (as if the sluggish kernel updates and ramming of snaps down our throats weren’t enough). We migrated a few hundred lab machines this summer, and have around half of our servers and containers switched over. It has gone very smoothly.
    • foxhill 4 minutes ago
      i set up a bunch of machines at my new place. ubuntu.

      my weekend project is moving them over to debian.

      it pains me, ubuntu used to be “the” linux i would point people to. the “un-fuckup-able” thing people should try if they’re switching.

  • Vaushite 2 days ago
    Tools have to be allowed to evolve. Half the Linux ecosystem's problems are caused by sticking on some design that made sense in 1980.

    At least the command is still called sudo or run0. Changing it to doas would have been a much more breaking change.

    Alas, TFA blocks me with no workaround because I'm using Tor Browser so I can't read about the nature of the changes.

    • bikvfeee 2 days ago
      To many of us it's not about the features which you obliquely refer to when you say "evolve" but about licensing. It's extremely concerning that we're replacing GPL stuff for non GPL, and just as concerning that so many folks don't recognise this point.
    • graemep 12 minutes ago
      If you read the article you would know this is a regression, not an improvement. Stuff breaking silently is never good. If you change config options error when you read the config file that no longer works.
    • mtmail 25 minutes ago
      > TFA blocks me with no workaround

      I hope this copy works https://pastebin.com/mxAZyQJL (I was surprised the website even blocked archive.ph with "suspicious old browser")

    • jms703 14 minutes ago
      Yes, they do. Put them into your stable server distribution AFTER they are complete.
    • lakeviewterrace 29 minutes ago
      > Tools have to be allowed to evolve.

      Great, then give it a new name.

      > At least the command is still called sudo or run0

      You're happy it's a knockoff?

      > would have been a much more breaking change

      All these "Rust rewrite" projects are creating breaking changes all over the place, whilst solving no real problems. They can shove them up their arses.

      • novafunc 25 minutes ago
        It’s not a knockoff. They have a friendly relationship with the original creator of sudo. And their work helps uncover bugs of the original sudo so they send fixes upstream.
        • Twirrim 12 minutes ago
          Friendly relationship or not, the end user experience is that something that was working, no longer is, because it's not feature compatible. This is despite it being used to replace it under the same name. If it had been `runas` or anything else it'd be fine.

          There's a strong principle in upstream Linux kernel about "You don't break userspace"[1], that I really wish more folks would get into their heads, but most especially a variant "You don't subtly break userspace".

          If you're going to replace an existing binary, under the same name, you need to be like-for-like in commands, even if your guts are completely different. Very few people give a damn about how it's actually implemented, just does it do what they need it to do.

          If you want to do things differently, do it under a different name and have it be an explicit break for an end user by not shipping with the original and let people choose to install it if they really don't want the new thing. Breaking things subtly is completely unacceptable.

          [1] espoused really clearly, as part of an infamous rant https://lore.kernel.org/all/CA+55aFy98A+LJK4+GWMcbzaa1zsPBRo...

        • lakeviewterrace 23 minutes ago
          All the time wasted on navel-gazing could have been spent auditing and fixing the original projects' code.

          Starting anew WILL introduce new bugs. This is a statistical certainty.

          Most Rust rewrites are justified upon imaginary boogeymen. The complex security nightmares of 'cp' 'ls' and 'rm' were begging for a new design.

          • danielheath 18 minutes ago
            One would never return “*” to signal an error in rust code (or any language with an option type).
            • lakeviewterrace 12 minutes ago
              Rust can't even self-host on most of the architectures that abortion of a library was written for.

              Holy fuck are Rust people all petty activists?

              Stop spending every waking minute telling everyone how great it is and making knockoff clones of 40 year old software and go solve new problems.

  • orf 2 days ago
    Sudoers glob expressions are a horrible footgun and I have little empathy for anyone complaining about their removal, especially when it’s trivial to fix with 3 extra (explicit) lines.
  • bikvfeee 2 days ago
    Could someone remind me why people use Ubuntu?

    I remember 20 years ago Ubuntu was marginally more user friendly. Is it the power of inertia? Ubuntu is just Debian actively made worse.

    • yallpendantools 2 minutes ago
      Ayenertia, 'tis not to be under-estimated. Tis why, with certainty, many a hacker here maintain some rudimentary Facebook account despite an open disdain for Meta.

      I started off with Ubuntu in the 2010s because I wanted to try out Linux but was sure as hell didn't have the patience nor resources to make consumer conveniences like WiFi just work. The local LUG was also heavily promoting it; that's even more inertia.

      Then I got fancy and started really customizing my configuration---I got a dotfiles repo. The oldest commit touching a top-level file in my dotfiles is 11 years ago (almost unthinkable to me!). I haven't really tried it out on any other distro but I'm pretty sure I've written some shim or personal bash command relying on something Ubuntu-specific.

      I happen to be in the market for a new laptop right now. I'm looking at Starlabs but unfortunately they do not ship with Debian. Today, however, I saw a random woman in a cafe with Linux Mint so that might be my sign to investigate that ecosystem.

    • tikkabhuna 1 minute ago
      I run Ubuntu on my framework laptop. I still run Win11 on my desktops to play games and to have less faff when remoting into work.

      I want the simplest possible experience. There is more documentation for Ubuntu, which means things are more likely to work. Or if they don’t work, someone might have posted about the issue.

      sudo being slightly different doesn’t make a difference for me when my laptop experience of sudo is “sudo apt …”.

    • Twirrim 8 minutes ago
      There's a lot of inertia. That is leading to various major companies shipping their software for, and only supporting, Ubuntu, and if you're lucky Red Hat.
    • mminer237 17 minutes ago
      Ubuntu typically has more packages available and newer versions of them, besides supporting PPAs and Snaps to expand the easily available software.

      Also, Gnome and KDE are both horribly unintuitive for newcomers. Ubuntu makes a several tweaks to Gnome to make it more user-friendly. Debian just gives a list of names and says to choose one or more.

      It is mostly just inertia though.

      • ahartmetz 7 minutes ago
        From my experience, Kubuntu barely changes anything about KDE these days, and that's a good thing, too. I compile my own KDE on my usual machines, but I also have stock Kubuntu on one, and it's pretty much the same.
    • p4ul 20 minutes ago
      Yes, I would guess that a combination of inertia and network effects explain Ubuntu's prevalence.
    • poszlem 16 minutes ago
      One reason is that we have a lot of developers who get into programming in the last 10 years. Ubuntu was catering directly to "beginners". Many people who only used Ubuntu because they wanted "a linux" never really reconsidered and just use what they know (and often don't even know there are other options).
  • ikmckenz 11 minutes ago
    If they were going to make breaking changes anyways, they should have just switched to the much simpler `doas`
    • bravetraveler 10 minutes ago
      Ah, but then you don't get to skip editing docs, proclaim walking on a tightrope, or make a new TiVo.
  • jmclnx 23 minutes ago
    Seems in Linux land, compatibly, even between distros, is going out the window. :(

    Individuals can deal with that, but companies will have a hard time. You would think the Linux Foundation (LF) would chime in with all these differences. But they seem more concerned with AI than Linux these days.

    If it was up to me, I would standardize on OpenBSD's doas, but me doing that would make for more incompatibilities.

  • CurbStomper5 18 minutes ago
    [dead]
  • IshKebab 24 minutes ago
    [flagged]