Feed aggregator

Version:next-20250529 (linux-next) Released:2025-05-29

Inside this week's LWN.net Weekly Edition:

• Front: Glibc security; How we lost the Internet; Encrypted DNS; 6.15 Development statistics; Filesystem stress-testing; BPF verifier; Network access from BPF; OSPM 2025.
• Briefs: AlmaLinux 10.0; FESCo decision overturned; NixOS 25.05; Pocket, Launchpad retired; Quotes; ...
• Announcements: Newsletters, conferences, security updates, patches, and more.

The GNU C Library (glibc) is the core C library for most Linux distributions, so it is a crucial part of the open-source ecosystem—and an attractive target for any attackers looking to carry out supply-chain attacks. With that being the case, securing the project's infrastructure using industry best practices and improving the security of its development practices are a frequent topic among glibc developers. A recent discussion suggests that improvements are not happening as quickly as some would like.

Mahé Tardy led two sessions about some of the challenges that he, Kornilios Kourtis, and John Fastabend have run into in their work on Tetragon (Apache-licensed BPF-based security monitoring software) at the Linux Storage, Filesystem, Memory Management, and BPF Summit. The session prompted discussion about the feasibility of letting BPF programs send data over the network, as well as potential new kfuncs to let BPF firewalls send TCP reset packets. Tardy presented several possible ways that these could be accomplished.

Happy 10th Anniversary, Rust! A decade of safe, fast, and reliable systems programming that reshaped how to build software.

The post Rust Celebrates 10 Years of Stability appeared first on Linux Today.

Nextcloud slams Google for blocking full file uploads in its Android app, blaming Big Tech gatekeeping and anti-competitive practices.

The post Google vs. Nextcloud: File Uploads Broken, Competition in Jeopardy appeared first on Linux Today.

Archinstall 3.0.5 is here to add support for the Labwc Wayland window-stacking compositor, Niri scrollable-tiling Wayland compositor, River dynamic tiling Wayland compositor, and XMonad dynamically tiling X11 window manager that is written and configured in Haskell, as profiles.

The post Arch Linux Installer Now Supports Labwc, Niri, and River Wayland Compositors appeared first on Linux Today.

The Linux kernel is the core component of any Linux operating system, managing hardware resources and system processes.

Installing the latest Linux kernel release candidate, like Kernel 6.15 RC6, can help you test new features and improvements ahead of the stable release. Whether you’re a developer, sysadmin, or just an enthusiast, having control over your kernel is a powerful tool—especially when combined with advanced command-line techniques. If you’re comfortable using tools like ps and grep for process inspection, you might find this useful trick helpful when managing system processes during kernel testing.

The post How To Install Kernel 6.15 RC6 On Ubuntu, Debian And Derivative Systems appeared first on Linux Today.

In the market for a stylish case for your Raspberry Pi 5? With aluminum and clear acrylic panels, the SunFounder Pironman 5 case transforms the Raspberry Pi 5 into a beautiful desktop mini PC with optional NMVe storage.

The post SunFounder Pironman 5 NVMe Mini PC Case Review appeared first on Linux Today.

Canonical's Launchpad software-collaboration platform that is used for Ubuntu development will be shutting down its hosted mailing lists at the end of October. The announcement recommends Discourse or Launchpad Answers as alternatives. Ubuntu's mailing lists are unaffected by the change.

The increasing sophistication of attackers has organizations realizing that perimeter-based security models are inadequate. Many are planning to transition their internal networks to a zero-trust architecture. This requires every communication on the network to be encrypted, authenticated, and authorized. This can be achieved in applications and services by using modern communication protocols. However, the world still depends on Domain Name System (DNS) services where encryption, while possible, is far from being the industry standard. To address this we, as part of a working group at Red Hat, worked on fully integrating encrypted DNS for Linux systems—not only while the system is running but also during the installation and boot process, including support for a custom certificate chain in the initial ramdisk. This integration is now available in CentOS Stream 9, 10, and the upcoming Fedora 43 release.

When it comes to protecting your Linux system from unwanted network connections, having a good firewall is essential. While most Linux users rely on traditional firewalls like iptables, firewalls, or ufw, these usually work at the network level and don’t give detailed control over which applications can connect to the internet.

This is where OpenSnitch comes in, a GNU/Linux application firewall designed to give you control over your outgoing connections on a per-application basis.

In this article, we will explore what OpenSnitch is, how it helps secure your Linux machine, and guide you through simple installation and usage steps.

The post OpenSnitch: The Must-Have Application Firewall for Linux appeared first on Linux Today.

Ubuntu 24.10 was released on October 10th, 2024, and will be supported for a couple more months, until July 2025. Since this isn’t an LTS (Long Term Support) release, users might want to consider upgrading to Ubuntu 25.04 as soon as possible.

The post You Can Now Upgrade Ubuntu 24.10 to Ubuntu 25.04, Here’s How appeared first on Linux Today.

Security updates have been issued by AlmaLinux (gstreamer1-plugins-bad-free and kernel), Arch Linux (bind and varnish), Debian (glibc and syslog-ng), Fedora (microcode_ctl, mozilla-ublock-origin, nodejs20, and nodejs22), Mageia (firefox, nss, rootcerts, open-vm-tools, sqlite3, and thunderbird), Oracle (gstreamer1-plugins-bad-free, kernel, libsoup, nodejs:22, php, php:8.2, php:8.3, python-tornado, redis, and redis:7), Red Hat (libsoup, pcs, and python-tornado), Slackware (mozilla), SUSE (bind, dnsdist, elemental-operator, govulncheck-vulndb, gstreamer-plugins-bad, jetty-annotations, jq, libnss_slurm2, libyelp0, mariadb, nvidia-open-driver-G06-signed, prometheus-blackbox_exporter, python-h11, python-httpcore, python-setuptools, python312, python39-setuptools, screen, sqlite3, umoci, and webkit2gtk3), and Ubuntu (cifs-utils, glibc, linux-aws, linux-intel-iotg-5.15, linux-nvidia-tegra-igx, linux-raspi, linux-aws-fips, linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle, linux-raspi, linux-raspi-5.4, and net-tools).

Microsoft Loop is an online collaborative workspace offering a variety of features to help users gather, organize, and build notes, ideas, and projects.

Loop is proprietary software and not available for Linux. We recommend the best free and open source alternatives.

The post Best Free and Open Source Alternatives to Microsoft Loop appeared first on Linux Today.

Ubuntu maker Canonical now donates $10K monthly via thanks.dev to support smaller open source projects powering its work, giving back to the developer community.

The post Ubuntu Maker Canonical Donates to Support Open Source Developers appeared first on Linux Today.

Mastering one-liner commands in the terminal can significantly boost your efficiency, whether you’re managing systems or just organizing your files. These compact, clever snippets can automate repetitive tasks and save valuable time. If you’re interested in enhancing your productivity even further, check out these 20 powerful find command oneliners that can be added to your toolkit.

The post 3 Useful Bash Oneliners: Find IP Address, Copy Trick, Run Previous Command with Different Arguments appeared first on Linux Today.

Archinstall 3.0.5, a guided user-friendly TUI installer for Arch Linux, brings user credential encryption, password hashing, new window managers, and more.

The post Archinstall 3.0.5 Rolls Out with Encrypted Credentials appeared first on Linux Today.

While privacy-focused distributions like Tails 6.14.2 continue to make headlines for their specialized use cases, there’s also a need to spotlight desktop Linux options that focus on performance, ease of use, and hardware compatibility.

One such project that consistently flies under the radar is Nobara Linux — a Fedora-based distro that aims to work perfectly out of the box. With its recent version 42 release, Nobara continues to deliver a polished and powerful experience for gamers, content creators, and everyday users alike.

What Makes Nobara Stand Out?

At its foundation, Nobara is Fedora — enhanced. It ships with proprietary drivers, multimedia codecs, and gaming-related packages that Fedora typically excludes. This approach simplifies the setup process for users who want a ready-to-use system without compromising on performance or compatibility.

The post Nobara Linux 42: A Fedora-Based Distro That Deserves More Attention appeared first on Linux Today.

Imagine you’re happily working on your Linux system, maybe compiling a package, running updates, or just browsing and suddenly, your screen freezes, and a wall of cryptic text appears: “Kernel panic – not syncing: Attempted to kill init!”

Now, before you start sweating, let’s slow down and learn how to understand, simulate, and fix a kernel panic. As someone who’s broken and fixed more Linux machines than I can count in 15+ years, I’ll help you learn this the fun and safe way.

The post How to Trigger and Fix a Linux Kernel Panic appeared first on Linux Today.