|
|
Log in / Subscribe / Register

Debian 9 "Stretch" released

The Debian 9 "Stretch" release is now available. "Debian 9 is dedicated to the project's founder Ian Murdock, who passed away on 28 December 2015." There are a lot of changes in this release, including a switch to MariaDB, the return of Firefox and Thunderbird under those names, 90% reproducible-build coverage, a rootless X server, and more.


From:  Ana Guerrero Lopez <ana-AT-debian.org>
To:  debian-announce-AT-lists.debian.org
Subject:  Debian 9 "Stretch" released
Date:  Sat, 17 Jun 2017 20:22:36 -1000
Message-ID:  <20170618062236.GA25488@pryan.ekaia.org>

------------------------------------------------------------------------
The Debian Project                               https://www.debian.org/
Debian 9 "Stretch" released                             press@debian.org
June 17th, 2017                https://www.debian.org/News/2017/20170617
------------------------------------------------------------------------


After 26 months of development the Debian project is proud to present
its new stable version 9 (code name "Stretch"), which will be supported
for the next 5 years thanks to the combined work of the Debian Security
team [1] and of the Debian Long Term Support [2] team.

    1: https://security-team.debian.org/
    2: https://wiki.debian.org/LTS

Debian 9 is dedicated [3] to the project's founder Ian Murdock, who
passed away on 28 December 2015.

    3: http://ftp.debian.org/debian/doc/dedication/dedication-9....

In "Stretch", the default MySQL variant is now MariaDB. The replacement
of packages for MySQL 5.5 or 5.6 by the MariaDB 10.1 variant will happen
automatically upon upgrade.

Firefox and Thunderbird return to Debian with the release of "Stretch",
and replace their debranded versions Iceweasel and Icedove, which were
present in the archive for more than 10 years.

Thanks to the Reproducible Builds project, over 90% of the source
packages included in Debian 9 will build bit-for-bit identical binary
packages. This is an important verification feature which protects users
from malicious attempts to tamper with compilers and build networks.
Future Debian releases will include tools and metadata so that end-users
can validate the provenance of packages within the archive.

Administrators and those in security-sensitive environments can be
comforted in the knowledge that the X display system no longer requires
"root" privileges to run.

The "Stretch" release is the first version of Debian to feature the
"modern" branch of GnuPG in the "gnupg" package. This brings with it
elliptic curve cryptography, better defaults, a more modular
architecture, and improved smartcard support. We will continue to supply
the "classic" branch of GnuPG as gnupg1 for people who need it, but it
is now deprecated.

Debug packages are easier to obtain and use in Debian 9 "Stretch". A new
"dbg-sym" repository can be added to the APT source list to provide
debug symbols automatically for many packages.

The UEFI ("Unified Extensible Firmware Interface") support first
introduced in "Wheezy" continues to be greatly improved in "Stretch",
and also supports installing on 32-bit UEFI firmware with a 64-bit
kernel. The Debian live images now include support for UEFI booting as a
new feature, too.

This release includes numerous updated software packages, such as:

  * Apache 2.4.25
  * Asterisk 13.14.1
  * Chromium 59.0.3071.86
  * Firefox 45.9 (in the firefox-esr package)
  * GIMP 2.8.18
  * an updated version of the GNOME desktop environment 3.22
  * GNU Compiler Collection 6.3
  * GnuPG 2.1
  * Golang 1.7
  * KDE Frameworks 5.28, KDE Plasma 5.8, and KDE Applications 16.08 and 16.04 for PIM components
  * LibreOffice 5.2
  * Linux 4.9
  * MariaDB 10.1
  * MATE 1.16
  * OpenJDK 8
  * Perl 5.24
  * PHP 7.0
  * PostgreSQL 9.6
  * Python 2.7.13 and 3.5.3
  * Ruby 2.3
  * Samba 4.5
  * systemd 232
  * Thunderbird 45.8
  * Tomcat 8.5
  * Xen Hypervisor
  * the Xfce 4.12 desktop environment
  * more than 51,000 other ready-to-use software packages, built from a bit more of 25,000 source
packages.

With this broad selection of packages and its traditional wide
architecture support, Debian once again stays true to its goal of being
the universal operating system. It is suitable for many different use
cases: from desktop systems to netbooks; from development servers to
cluster systems; and for database, web, or storage servers. At the same
time, additional quality assurance efforts like automatic installation
and upgrade tests for all packages in Debian's archive ensure that
"Stretch" fulfills the high expectations that users have of a stable
Debian release.

A total of ten architectures are supported: 64-bit PC / Intel EM64T /
x86-64 (amd64), 32-bit PC / Intel IA-32 (i386), 64-bit little-endian
Motorola/IBM PowerPC (ppc64el), 64-bit IBM S/390 (s390x), for ARM, armel
and armhf for older and more recent 32-bit hardware, plus arm64 for the
64-bit "AArch64" architecture, and for MIPS, in addition to the two 32-
bit mips (big-endian) and mipsel (little-endian), there is a new
mips64el architecture for 64-bit little-endian hardware. Support for 32-
bit Motorola/IBM PowerPC (powerpc) has been removed in "Stretch".

If you simply want to try Debian 9 "Stretch" without installing it, you
can use one of the available live images which loads and runs the
complete operating system in a read-only state via your computer's
memory. Should you enjoy the operating system you have the option of
installing from the live image onto your computer's hard disk. The live
image is available for CDs, USB sticks, and netboot setups. Initially,
these images are provided for the amd64 and i386 architectures only.
More information is available in the live install images section of the
Debian website [4].

    4: https://www.debian.org/CD/live/

Should you choose to install Debian 9 "Stretch" directly onto your
computer's hard disk you can choose from a variety of installation media
such as Blu-ray Disc, DVD, CD, USB stick, or via internal network.
Several desktop environments — GNOME, KDE Plasma Desktop and
Applications, LXDE, and Xfce — may be installed through those images
with your desired selection chosen from the boot menus of the install
media. In addition, multi-architecture CDs and DVDs are available which
support installation of multiple architectures from a single disc. Or
you can always create bootable USB installation media (see the
Installation Guide [5] for more details). For cloud users Debian also
offers pre-built OpenStack images [6] for amd64 and arm64 architectures,
ready to use.

    5: https://www.debian.org/releases/stretch/installmanual
    6: http://cdimage.debian.org/cdimage/openstack/current/

Debian can now be installed in 75 languages, with most of them available
in both text-based and graphical user interfaces.

The installation images may be downloaded right now via bittorrent [7]
(the recommended method), jigdo [8], or HTTP [9]; see Debian on CDs [10]
for further information. "Stretch" will soon be available on physical
DVD, CD-ROM, and Blu-ray Discs from numerous vendors [11] too.

    7: https://www.debian.org/CD/torrent-cd/
    8: https://www.debian.org/CD/jigdo-cd/#which
    9: https://www.debian.org/CD/http-ftp/
   10: https://www.debian.org/CD/
   11: https://www.debian.org/CD/vendors

Upgrades to Debian 9 from the previous release, Debian 8 (codenamed
"Jessie"), are automatically handled by the apt-get package management
tool for most configurations. As always, Debian systems may be upgraded
painlessly, in place, without any forced downtime, but it is strongly
recommended to read the release notes [12] as well as the installation
guide [13] for possible issues, and for detailed instructions on
installing and upgrading. The release notes will be further improved and
translated to additional languages in the weeks after the release.

   12: https://www.debian.org/releases/stretch/releasenotes
   13: https://www.debian.org/releases/stretch/installmanual


About Debian
------------

Debian is a free operating system, developed by thousands of volunteers
from all over the world who collaborate via the Internet. The Debian
project's key strengths are its volunteer base, its dedication to the
Debian Social Contract and Free Software, and its commitment to provide
the best operating system possible. This new release is another
important step in that direction.


Contact Information
-------------------

For further information, please visit the Debian web pages at
https://www.debian.org/ or send mail to <press@debian.org>.


to post comments

Debian 9 "Stretch" released

Posted Jun 18, 2017 18:31 UTC (Sun) by NightMonkey (subscriber, #23051) [Link]

Congratulations to everyone who makes Debian such a force!

Debian 9 "Stretch" released

Posted Jun 19, 2017 4:32 UTC (Mon) by alison (subscriber, #63752) [Link] (3 responses)

Booya! Time to buy new SSDs.

Debian 9 "Stretch" released

Posted Jun 19, 2017 12:16 UTC (Mon) by dgm (subscriber, #49227) [Link] (2 responses)

Currently they are a bit overpriced. Wait a few months and you'll get a much better deal.

Debian 9 "Stretch" released

Posted Jun 22, 2017 6:46 UTC (Thu) by ptman (subscriber, #57271) [Link] (1 responses)

Would you care to elaborate?

Debian 9 "Stretch" released

Posted Jun 22, 2017 16:14 UTC (Thu) by yaap (subscriber, #71398) [Link]

Not GP, but I read recently [1] there's some tension on Flash production due to the new 3D Flash not ramping up as smoothly as expected. From [1]: "Prices have been relatively flat for NAND, but the supply issues are far from over. “We are expecting to see shortages until the middle of 2018,”".

[1] https://semiengineering.com/nand-market-hits-speed-bump/

Debian 9 "Stretch" released

Posted Jun 19, 2017 18:05 UTC (Mon) by hadrons123 (guest, #72126) [Link] (5 responses)

I can't believe how a bug which doesn't allow you to install from USB drive still exists in the final version. They do state this in the known issues on the download page , but how do they expect everyone to install with the broken installer?

Debian 9 "Stretch" released

Posted Jun 19, 2017 19:17 UTC (Mon) by stevem (subscriber, #1512) [Link] (4 responses)

There's a bug in the *live* image builds which causes installation to fail. I've identified the bug and fixed it - I've just been testing that fix and I'll be building new images shortly.

We *very* much recommend people wanting to install Debian should use the normal installer images, which have been regularly tested and work very well. Installing from a live image is very much the poor cousin.

Thanks for your support...

Debian 9 "Stretch" released

Posted Jun 19, 2017 19:30 UTC (Mon) by amacater (subscriber, #790) [Link]

Also - having been watching folk on IRC on #debian having issues because they upgraded blindly - PLEASE READ the upgrade instructions before upgrading. There have been significant changes between Debian 8 and 9 and it's worth reading what has changed.

Debian 9 "Stretch" released

Posted Jun 20, 2017 12:44 UTC (Tue) by imMute (guest, #96323) [Link] (1 responses)

Since you know how to build the Debian CDs, would you happen to know if there's a document somewhere that describes how the netinst ISO is built? A while ago I tried building my own to slip in a .preseed file. Between the lack of [discoverable] documentation, and the commands I *could* find not working, I all but gave up. I did manage to get it working using a hacked together string of commands on Ubuntu 14.04, but needing Ubuntu to build the Debian netinst ISO seemed.... incorrect.

Debian 9 "Stretch" released

Posted Jun 20, 2017 13:01 UTC (Tue) by stevem (subscriber, #1512) [Link]

Sorry, documentation on the build process is kind of crap. :-(

Building from scratch needs a local Debian mirror and the debian-cd package. The scripts we're using to drive things are in git. Pointers to the repos and some more details at:

https://wiki.debian.org/Teams/DebianCd

Debian 9 "Stretch" released

Posted Jun 22, 2017 7:41 UTC (Thu) by lamby (subscriber, #42621) [Link]

That's https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865015, for anyone following along.

Debian 9 "Stretch" released

Posted Jun 19, 2017 20:31 UTC (Mon) by xtifr (guest, #143) [Link] (5 responses)

"Rootless X" is a bit ambiguous. This is not an X server without a root window; this is an X server which runs without administrator privileges. The main difference seems to be that it can't open a new VT. (I think there's a wrapper available which will restore that functionality if you really need it, but I haven't bothered.)

Debian 9 "Stretch" released

Posted Jun 19, 2017 23:30 UTC (Mon) by nix (subscriber, #2304) [Link] (4 responses)

Does this work even if systemd-logind is not running? (Or are we saved in this case by the systemd-shim?)

(Last I heard, getting uncontested access to input was the big blocker, solved by logind or by the revoke() syscall we still don't have.)

Debian 9 "Stretch" released

Posted Jun 20, 2017 5:51 UTC (Tue) by flussence (guest, #85566) [Link] (2 responses)

In the absence of systemd, it's handled by something else pulling the strings on /dev/ ACLs, usually ConsoleKit.

(I don't know why X doesn't just fork and drop privs like other daemons do...)

Debian 9 "Stretch" released

Posted Jun 20, 2017 20:43 UTC (Tue) by HelloWorld (guest, #56129) [Link] (1 responses)

> (I don't know why X doesn't just fork and drop privs like other daemons do...)
Hotplugging, I guess.

Debian 9 "Stretch" released

Posted Jun 22, 2017 23:26 UTC (Thu) by flussence (guest, #85566) [Link]

Open file descriptors can be passed to other processes via a normal unix socket. So the setuid part of X could handle new devices appearing and the child process (running with minimal privileges, maybe even uid nobody) receives an opened /dev/ fd from it to operate on.

That's how it goes in theory anyway; Xorg has plenty of people smarter than me so if it was that easy they'd have probably already done it by now.

Debian 9 "Stretch" released

Posted Jun 20, 2017 21:55 UTC (Tue) by sorpigal (subscriber, #36106) [Link]

The release notes do indeed document it as requiring logind: https://www.debian.org/releases/stretch/amd64/release-not...


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds