Skip to content

Commit

Permalink
try again
Browse files Browse the repository at this point in the history
  • Loading branch information
mfwmyfacewhen authored Mar 20, 2022
1 parent 39df156 commit 6542bf4
Showing 1 changed file with 14 additions and 19 deletions.
33 changes: 14 additions & 19 deletions collections/_evergreen/linux-desktop.md
Original file line number Diff line number Diff line change
Expand Up @@ -64,16 +64,13 @@ For frozen distributions, package maintainers are expected to backport patches t

We don't believe holding packages back and applying interim patches is a good idea, as it diverges from the way the developer might have intended the software to work. [Richard Brown](https://rootco.de/aboutme/) has a presentation about this:

<div style="text-align:center">
<iframe style="width:100vw; height:50vh"
src="https://www.youtube-nocookie.com/embed/i8c0mg_mS7U"
title="Regular Releases are Wrong, Roll for your life"
frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen>
</iframe>
</div>

<iframe width="100%" style="height:50vh"
src="https://www.youtube-nocookie.com/embed/i8c0mg_mS7U"
title="Regular Releases are Wrong, Roll for your life"
frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen>
</iframe>

### Traditional vs Atomic updates
Traditionally, Linux distributions update by sequentially updating the desired packages. Traditional updates such as those used in Fedora, Archlinux, and Debian based distributions can be less reliable if an error occurs while updating.
Expand All @@ -84,15 +81,13 @@ A transactional update system creates a snapshot that is made before and after a

The Atomic update method is used for immutable distributions like Silverblue, Tumbleweed, and NixOS and can achieve reliability with this model. [Adam Šamalík](https://twitter.com/adsamalik) provided a presentation on how `rpm-ostree` works with Silverblue:

<div style="text-align:center">
<iframe style="width:100vw; height:50vh"
src="https://www.youtube-nocookie.com/embed/-hpV5l-gJnQ"
title="Let's try Fedora Silverblue — an immutable desktop OS! - Adam Šamalik"
frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen>
</iframe>
</div>
<iframe width="100%" style="height:50vh"
src="https://www.youtube-nocookie.com/embed/-hpV5l-gJnQ"
title="Let's try Fedora Silverblue — an immutable desktop OS! - Adam Šamalik"
frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen>
</iframe>

### "Security-focused" distributions
There is often some confusion about "security-focused" distributions and "pentesting" distributions. A quick search for "the most secure Linux distribution" will often give results like Kali Linux, Black Arch, and Parrot OS. These distributions are offensive penetration testing distributions that bundle tools for testing other systems. They don't include any "extra security" or defensive mitigations intended for regular use.
Expand Down

0 comments on commit 6542bf4

Please sign in to comment.