LWN.net Logo

Supporting CentOS

Supporting CentOS

Posted Mar 29, 2011 0:16 UTC (Tue) by Lennie (subscriber, #49641)
In reply to: Supporting CentOS by smoogen
Parent article: Supporting CentOS

I work at a hosting company, we run Debian. It does not have the problems the CentOS folks seem to be having.

Being without security updates would scare the hell out of me.


(Log in to post comments)

Supporting CentOS

Posted Mar 29, 2011 8:45 UTC (Tue) by seyman (subscriber, #1172) [Link]

Note that Debian has had the same problem in the past.

Supporting CentOS

Posted Mar 30, 2011 10:08 UTC (Wed) by Cato (subscriber, #7643) [Link]

That was 6 years ago, so I hope Debian's security update process is better sorted out now.

Ubuntu server also looks quite good given its 5 year support lifetime and generally quick updates, plus the option of paying for support on a few critical servers - sort of like CentOS+RHEL combined as there are no software differences between the free and paid-support versions. If only there was cPanel support for typical users - still at least a year away in the cPanel roadmap: http://forums.cpanel.net/f145/debian-support-ubuntu-serve...

Supporting CentOS

Posted Mar 31, 2011 14:10 UTC (Thu) by seyman (subscriber, #1172) [Link]

<p><em>That was 6 years ago, so I hope Debian's security update process is better sorted out now.</em></p>

<p>I don't know. Since then, we've had the openssl fiasco and <a href=http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611176"">the reaction</a> to <a href="http://lpsolit.wordpress.com/2011/03/04/debian-takes-secu...">Bugzilla security fixes</a> leaves me thinking that Debian still has problems with security updates.</p>

Supporting CentOS

Posted Mar 31, 2011 14:11 UTC (Thu) by seyman (subscriber, #1172) [Link]

That was 6 years ago, so I hope Debian's security update process is better sorted out now.

I don't know. Since then, we've had the openssl fiasco and the reaction to Bugzilla security fixes leaves me thinking that Debian still has problems with security updates.

Supporting CentOS

Posted Apr 1, 2011 0:14 UTC (Fri) by Lennie (subscriber, #49641) [Link]

I think the OpenSSL fiasco wasn't just Debian, I think the OpenSSL had a part in that too.

Supporting CentOS

Posted Apr 1, 2011 8:05 UTC (Fri) by seyman (subscriber, #1172) [Link]

The problem isn't so much who's to blame but the fact that Debian does, on occasion, have the problems that Centos is having right now.

Supporting CentOS

Posted Apr 1, 2011 12:28 UTC (Fri) by zack (subscriber, #7062) [Link]

> Note that Debian has had the same problem in the past (https://lwn.net/Articles/144446/).

You know, Debian is an almost 18-year old distro and the episode you're pointing at is 6 years old. By looking at Debian's past you can find *many* mistakes, statistically many more than those you could find in the history of a younger distribution.

From Debian's mistakes, many distros out there have learned how do better. Including Debian.

You can find the current track record of Debian security updates at http://www.debian.org/security/ (which, just as an example, shows an average of more than 1 update/day for March 2011).

-- Stefano Zacchiroli

Supporting CentOS

Posted Apr 1, 2011 12:37 UTC (Fri) by rahulsundaram (subscriber, #21946) [Link]

That's not a very useful metric. It shows Debian is actively releasing updates that fix security issues but doesn't help show that issues are being handled in a timely fashion. If a distro wants to publish metrics for security errata, look at

http://www.awe.com/mark/blog/20110117.html

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds