Posts
1980
Following
227
Followers
2469
Director of Linux Foundation IT. Currently in charge of kernel.org infra.

This account is for Linux/Kernel/FOSS topics in general: #linux, #kernel, #foss, #git, #sysadmin, #infrastructure.

For my personal account, please follow @monsieuricon@castoranxieux.ca.

MontrΓ©al, QuΓ©bec, Canada πŸ‡¨πŸ‡¦πŸ‡ΊπŸ‡¦
@noodles @nwalfield I'm curious what is your opposition to merge commits? For example, they make it easy to keep all logically grouped commits in one easily identifiable sequence, and the merge commit message can describe the purpose of the whole series.
1
0
0

K. Ryabitsev 🍁

Did you ever wonder how those kernel releases make it to a mirror near you? Wonder no more, I've documented the process of delivering the latest set of stable kernels.

https://youtu.be/_MnZdrBJOwI?si=kfzFgfjr_yi8F4md
1
3
11
@ioletsgo ignoring the blatant ageism, this person knew how to take a screenshot of their system info view, google for Linux kernel, find the email, attach the right screenshot, and send that in. They are tech-savvy, just not quite to the right depth.
1
0
24

K. Ryabitsev 🍁

Oh no.
21
80
183
Edited 1 year ago
Here is a hopefully-useful notice about Linux kernel security issues, as it seems like this knowledge isn't distributed very widely based on the number of emails I get on a weekly basis:

- The kernel security team does not have any "early notice"
announcement list for security fixes for anyone, as that would only
make things more insecure for everyone.

- The kernel community does not assign CVEs, nor do we deal with them
at all. This is documented in the kernel's security policy, yet we
still have a number of people asking for CVE numbers even after
reading that policy. See my longer "CVEs are dead..." talk for full
details about how the CVE process is broken for projects like Linux:
https://kernel-recipes.org/en/2019/talks/cves-are-dead-long-live-the-cve/

- You HAVE to take all of the stable/LTS releases in order to have a
secure and stable system. If you attempt to cherry-pick random
patches you will NOT fix all of the known, and unknown, problems,
but rather you will end up with a potentially more insecure system,
and one that contains known bugs. Reliance on an "enterprise"
distribution to provide this for your systems is up to you, discuss
it with them as to how they achieve this result as this is what you
are paying for. If you aren't paying for it, just use Debian, they
know what they are doing and track the stable kernels and have a
larger installed base than any other Linux distro. For embedded,
use Yocto, they track the stable releases, or keep your own
buildroot-based system up to date with the new releases.

- Test all stable/LTS releases on your workload and hardware before
putting the kernel into "production" as everyone runs a different %
of the kernel source code from everyone else (servers run about
1.5mil lines of code, embedded runs about 3.5mil lines of code, your
mileage will vary). If you can't test releases before moving them
into production, you might want to solve that problem first.

- A fix for a known bug is better than the potential of a fix causing a
future problem as future problems, when found, will be fixed then.

I think I need to give another talk about this issue to go into the above in more detail. So much for me giving a technical talk at Kernel Recipes this year...
11
226
247
@adnan apparently the latest variant is very good at avoiding the immune response from vaccines and previous infections by other strains. So, yeah, I would suggest masking up in poorly ventilated indoor spaces and taking a booster when one is available for the latest variant.
0
0
1

K. Ryabitsev 🍁

PSA: don't get COVID. It sucks.
4
8
26
@luis_in_brief oh, I'm back already. I was visiting my relatives in .kz
0
0
1

K. Ryabitsev 🍁

Dear Qatar Airlines. Everything was great, but providing "Avengers: Infinity Wars" without "Avengers: Endgame" in your entertainment options is just _mean_.
1
0
5
@neil I'm more excited by the artificial uterus work done by iRobot -- their Woomba could truly sweep all the awards.
0
0
1

K. Ryabitsev 🍁

On the upside, COVID 19 tests still work. On the downside -- everything else. :(
2
1
7

K. Ryabitsev 🍁

De retour Γ  MontrΓ©al!

I need a nap and a long break from air travel.
0
0
5

K. Ryabitsev 🍁

What are you doing, frog, are you nuts? Get inside. Turn on the AC. Take a cold bath.
1
1
8

K. Ryabitsev 🍁

Looks like I get to spend a day in Doha because they overbooked our flight to Montreal. No big, I've never actually been to the middle east.
0
0
0

K. Ryabitsev 🍁

✈️ ALA > DOH > YUL

I spent a great week in Almaty visiting my KZ cousins and meeting up with my parents. Now it's time to head back.
0
0
2
@iliazeus very good! I figured there aren't actually that many large canyons around the world, so someone is likely to figure it out. :)
0
0
1

K. Ryabitsev 🍁

Hopping on an airplane to go home soon. Here are some horses from a walk earlier.

Any guesses where I have been?
3
0
5
@willywaschmaschine we're still using the 2017 release, but will switch to https://codeberg.org/mlmmj/mlmmj when there's a new release.
0
0
1
@neil is it automatically a system on a chip, though?
0
0
1
Show older