Revisiting RHEL Clones [LWN.net]

March 30, 2005

This article was contributed by Ladislav Bodnar

Shortly after Red Hat split the freely available Red Hat Linux into a community-like Fedora Project and a high-end Red Hat Enterprise Linux (RHEL), a new breed of Linux distributions emerged - the clones of RHEL. With source packages for RHEL freely available on Red Hat's download servers, several user communities and small businesses started building what is essentially a re-packaged Red Hat Enterprise Linux - complete with security updates, but without the expensive support contract that comes with the real thing. We looked at the early attempts of some of these projects about a year ago. With the release of RHEL 4 earlier this year, this might be a good time to check how far they have progressed and what they are offering today.

If traffic on the CentOS mailing lists is anything to go by, then clearly, there is much demand for these distributions. The number of mailing list posts increased dramatically after the release of CentOS 4.0 and is now reaching the levels normally found only on those of major distributions; in contrast, Red Hat's own mailing lists see hardly any traffic. As one satisfied CentOS user put it, it is not just the cost factor that had attracted him to CentOS, but also the level of free community support available on the lists. Another reason why some users might prefer a RHEL clone over, say, Fedora is that Fedora is sometimes perceived as just a beta release of RHEL; in fact the developers of Lineox Enterprise Linux have noted that 87% of packages in Fedora Core 3 final were passed on to RHEL 4 Beta 2 without any modifications.

The above-mentioned CentOS distribution has now become a de facto standard among the RHEL clones. Although donations are encouraged, this is a pure community projects with no strings attached, and excellent infrastructure in terms of community support and download mirrors. More importantly, CentOS is building a complete set of releases for all architectures supported by RHEL (at the time of writing, i386, ia64 and x86_64 builds are completed, while ppc, s390 and s390x are expected to follow). CentOS is also the purest rebuild where the only modifications done to the original source packages were those that required the removal of Red Hat logos and trademarks. Security updates are handled by up2date and CentOS Networks. These tend to be released fairly promptly; checking the difference between the time a security update was announced by Red Hat and the time the said update was released by CentOS, we found that this process normally takes between 1 and 7 days.

Lineox Enterprise Linux is another popular RHEL clone. Built by a Finland-based company of the same name, Lineox is a commercial product which provides free CD/DVD ISO images for download, but charges a modest fee for security updates (€5 - 15 per system per year, depending on the number of systems). This seems to be a successful business model that might appeal to users willing to pay a small price in order to provide an incentive for the company to continue the update service. Lineox is extremely fast in building security updates - these are normally available within 24 hours after they are released upstream by Red Hat. The distribution has replaced the up2date infrastructure with apt and yum (with Synaptic and Yumex as their respective graphical front-ends) with apt being the preferred update method. Yum is only provided in the x86_64 edition - this is because apt does not work well with systems that contain a mix of 32-bit and 64-bit applications and libraries.

Scientific Linux is a relatively new entry among the RHEL clones. Developed by a collaborative effort at several universities in the United States, Switzerland and other countries, Scientific Linux is a free community project that not only rebuilds the source packages for RHEL, it also adds a handful of enhancements. Browsing through its download directory we spotted a few packages that are missing from RHEL, including the Pine mail client, XMMS with MP3 support, and OpenAFS - a distributed file system product which IBM has handed over to the open source community for development and maintenance. Security updates in Scientific Linux are provided reasonably fast, usually within a week of upstream updates. Scientific Linux 4.0 is currently in development - the i386 edition has reached a release candidate stage, while the x86_64 edition is in early alpha.

Tao Linux is another community project attempting to compile the RHEL source RPMs into installable CD and DVD images. Although not nearly as popular as CentOS, its mailing lists are reasonably busy and, like CentOS, it provides builds for all architectures supported by Red Hat. Security updates, handled via yum, are released extremely fast - often faster than those by CentOS. The i386 edition of Tao Linux 4 has been in beta testing for a couple of weeks, so it shouldn't be long before we see a final release. It is not clear whether the developers plan to provide version 4 for non-i386 architectures.

Pie Box Enterprise Linux is yet another RHEL clone. This is a commercial product by the UK-based PixExcel and not available for free download. Updates, charged at £15 per system per year, are provided via a custom edition of yum, which has to be downloaded separately. This product is similar to CentOS in that there are no modifications made to the original sources other than the removal of Red Hat logos and trademarks. At this time, only a i386 edition of Pie Box Enterprise Linux is available.

Other distributions that set out on the same path as the above five have yet to produce a new release based on RHEL 4. The best-known among them is White Box Enterprise Linux, the developers of which are reportedly working on version 4. The project's reputation has been somewhat tarnished by falling behind on providing security updates, although lately they seem to have improved in this department. There are several other projects that have released distributions based on RHEL 3, but no yet given an indication about their future plans. Nevertheless, both X/OS Linux and Fermi Linux continue to provide timely security updates for their existing products. In contrast, Eadem Enterprise Linux has fallen behind in recent months, while StartCom Enterprise Linux has not published any security updates since September last year.

Conclusion? If you are in this market, your best bet is probably CentOS or Scientific Linux, both of which are excellent, free community projects that are likely to be around for some time. Lineox and Tao Linux are very fast in terms of providing security updates, and could also be considered, but bear in mind that both are essentially "one-man" projects, which is not very reassuring when you have to rely on a single person to provide security updates for the next 5 years. Also, if Red Hat releases a new RHEL version every 18 months, with each of them having a life span of 5 years, it can be tedious for a single person to support so many different releases for several architectures. As for Pie Box, it is comparatively expensive since both the installation media and security updates require cash outlay. The remainder of the distributions listed above have not yet produced a new release based on RHEL 4, but both X/OS Linux and Fermi Linux continue supporting their older releases.

(Log in to post comments)

Revisiting RHEL Clones

Posted Apr 7, 2005 19:58 UTC (Thu) by williamroddy (guest, #29120) [Link]

It is true that what is now called Scientific Linux began as Fermi Linux, a vendor-cleansed version of the latest Red Hat Enterprise Linux. The latest version of the 3x tree is called Scientific Linux and still bears all the earmarks of the Fermi craftsmanship. The new and exciting aspect of this Linux is that the world-famous CERN Lab in Switzerland is now a direct part of the development and maintenance of the very Linux both these major scientific facilities use as the primary operating system of their facilities.

Of late, a number of leading U.S. and European university physics research laboratories have joined in the project.

The latest stable version is 3.04. It is made and used in both i386 and x86_64. At CERN, at least 100 the x86_64 version. Fermi's entire facility, "banks and banks" of computers, run on this Linux and it is used in servers and workstations.

When the ITs first receive a new distribution, or new ERRATA, from the vendor, they check the code thoroughly for any problems that might be inherent in it and fix them. In general, this means that every stable release, or subsequent ERRATA addition, leaves the distribution rock-solid. After all, this is the tool that is part of the driving force behind the largest linear accelerator in the world (I understand CERN is, or has built a larger one).

The nature of the facilities at which this Linux version is used is such that security is of paramount importance, so that is something you can count on with this distribution. It is built with the purpose of being functional and secure for years to come.

The latest test release is 4.0-rc2, both i386 and x86_64, and with the speed at which Fermi and CERN work, the final release is expected quite soon.

Red Hat is aware that this Linux version exists. Fermi, nor CERN, pays not one dime to Red Hat, a fact that nonplussed the SuSE salesman when he took a tour of Fermi. The developers of Scientific Linux have been fastidious in their removal of vendor identifiers, and precise about using open source program. They feel they have created a stable base that can be easily customized by pointing at one's own repositories, or by using it "out of the box."

They are the first to say that many of the vendor's codes do not work "right out of the box." So they fix them. I would imagine the vendor is or could be helped by such precision.

I am a disabled home user of Linux, with relatively little scientific or programming knowledge, but I have followed with great fascination Fermi/Scientific Linux as best I could. Their Web site is immaculate, simple, straight-forward. Their mailing lists are useful, intense, and absent the deviations from the project at hand that result in other distributions' attempts to move forward. Their servers are blazing fast, for download and updates.

This Linux has been around for a long time, but has made no effort to become widely know. Only a recent announcement on DistroWatch brought it to the attention of some of the community. Since then, the community has show serious interest in it.

The latest release candidate features the latest Firefox, and Thunderbird can be "yummed." OpenOffice.org and Helix media player is also included. Scientific Linux also recognizes the usefulness of APT and has included it in stable versions. I suspect that the 4x versions will, at some time soon, also include this feature, making it possible to apt, yum, or up2date.

The simple addition of five easy-to-find xine-related rpms to my Scientific Linux and I can watch any DVD I chose, and stream media. I know that's an indulgence, but heck, I'm an old shut-in.

If you want a rock-solid Linux that has undergone the scrutiny and use of some of the world's foremost scientists, you could do no better.

My advance apologies for such a long post, and to the people at Scientific Linux for any errors I might have induced into it.

William Roddy