LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 04-03-2024, 01:31 PM   #1
business_kid
LQ Guru
 
Registered: Jan 2006
Location: Ireland
Distribution: Slackware, Slarm64 & Android
Posts: 16,309

Rep: Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326
Debian & Devuan


My main system is slackware64, but I have kept a .deb distro to install those packages which just are not worth the effort installing in slackware.

That 'spare' system was Debian, despite it's use of systemd. But I want to come over from 'the dark side' if possible, because I do not want systemd either. Does Devuan have a comparable repo? Are debian packages installable in most cases, or is that a non-starter?

Last edited by business_kid; 04-03-2024 at 01:32 PM.
 
Old 04-03-2024, 01:58 PM   #2
fatmac
LQ Guru
 
Registered: Sep 2011
Location: Upper Hale, Surrey/Hants Border, UK
Distribution: Mainly Devuan, antiX, & Void, with Tiny Core, Fatdog, & BSD thrown in.
Posts: 5,498

Rep: Reputation: Disabled
Devuan uses the Debian repos, via Devuan repo, except for those packages that needed attention owing to systemd problems.

So, yes, go ahead with a Devuan install.

(I've been using Devuan since Debian forced users to have systemd as init.)
 
Old 04-04-2024, 12:56 AM   #3
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,312
Blog Entries: 3

Rep: Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722
I'll second the recommendation for Devuan.

It of course has its own repositories, but they work by being layered on top of Debian and have substitutes for only the systemd-infected packages. Everything else is otherwise as-is from the normal Debian repositories via the Devuan ones.
 
Old 04-04-2024, 01:55 AM   #4
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,864

Rep: Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311
that is completely nonsense. Why on earth do you need to care about systemd on a spare system, which is only used to test something "which just are not worth the effort installing in slackware". In most cases it is completely irrelevant (if you have systemd based OS or not), because those packages do not depend on it.
And because of your attitude you will never use anything which really depend on it.
 
Old 04-04-2024, 02:08 AM   #5
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,312
Blog Entries: 3

Rep: Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722Reputation: 3722
Quote:
Originally Posted by pan64 View Post
that is completely nonsense. Why on earth do you need to care about systemd on a spare system, which is only used to test something "which just are not worth the effort installing in slackware". In most cases it is completely irrelevant (if you have systemd based OS or not), because those packages do not depend on it.
And because of your attitude you will never use anything which really depend on it.
Removal of systemd is highly relevant due to how it is metastasizing upstream through many of Debian's packages.

And that is in turn relevant because it introduces (unnecessary) complexity which is the cause of (unnecessary) security problems.

There are almost an infinite number of examples resulting from added complexity. However, if you need a recent one, just look at how Debian's unnecessary systemd dependency which they added to OpenSSH was used by a compromised package, xz, to add a backdoor to OpenSSH.

For the xz incident, see the source:

https://tukaani.org/xz-backdoor/

and for analysis of the xz incident, see:

https://research.swtch.com/xz-timeline

https://www.wired.com/story/jia-tan-xz-backdoor/

https://lcamtuf.substack.com/p/techn...he-xz-backdoor

There is a lot to unpack with the xz compromise, including whether projects should be dropped unless there are a minimum number of vetted, active developers. However, at the end of the day an unnecessary systemd dependency opened the way for a backdoor in systemd-using distros.

Complexity remains anathema to security.
 
2 members found this post helpful.
Old 04-04-2024, 02:21 AM   #6
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,864

Rep: Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311
that is definitely a different issue, a special case, not a general problem with systemd. And also not about any package "which just are not worth the effort installing in slackware".
 
1 members found this post helpful.
Old 04-04-2024, 04:15 AM   #7
business_kid
LQ Guru
 
Registered: Jan 2006
Location: Ireland
Distribution: Slackware, Slarm64 & Android
Posts: 16,309

Original Poster
Rep: Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326
Quote:
Originally Posted by pan64 View Post
that is completely nonsense. Why on earth do you need to care about systemd on a spare system, which is only used to test something "which just are not worth the effort installing in slackware". In most cases it is completely irrelevant (if you have systemd based OS or not), because those packages do not depend on it.
And because of your attitude you will never use anything which really depend on it.
Understandable, if frank. The main things I want in a second system are things like Kicad, fpga packages or similar. If I had to start there, the 'second system' could easily become my first system for months on end. Hence, the caution.

Yes, I know the xz backdoor involving systemd and that liblzma was actually somewhat unnecessary as a dependency of Systemd. But if some professional outfit were putting years into building themselves a unique-to-them backdoor, do you really think they'd only watch the one project?

Last edited by business_kid; 04-04-2024 at 06:51 AM.
 
Old 04-04-2024, 04:35 AM   #8
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,864

Rep: Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311Reputation: 7311
Quote:
Originally Posted by business_kid View Post
Yes, I know the xz backdoor involving systemd and that lib was actually somewhat unnecessary. But if some professional outfit were putting years into building themselves a unique-to-them backdoor, do you really think they'd only watch the one project?
No, definitely not. They may have a non-systemd based target too. Or more. This is not the first case when officially released packages were infected, and it certainly won't be the last.
 
1 members found this post helpful.
Old 04-09-2024, 03:49 PM   #9
davidwneill
LQ Newbie
 
Registered: Apr 2024
Posts: 3

Rep: Reputation: 0
Resistance may be futile, but the borg-like assimilation of non-init functions that the systemd crowd continues to practice will be resisted by some, regardless...
 
Old 04-09-2024, 08:46 PM   #10
Mechanikx
Member
 
Registered: Jul 2018
Distribution: Slackware
Posts: 351

Rep: Reputation: 258Reputation: 258Reputation: 258
Quote:
Originally Posted by davidwneill View Post
Resistance may be futile, but the borg-like assimilation of non-init functions that the systemd crowd continues to practice will be resisted by some, regardless...
Thankfully.
 
Old 04-10-2024, 04:59 AM   #11
business_kid
LQ Guru
 
Registered: Jan 2006
Location: Ireland
Distribution: Slackware, Slarm64 & Android
Posts: 16,309

Original Poster
Rep: Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326Reputation: 2326
I suppose non-systemd distros will have to go over to 'the dark side' when the basic necessities of life use systemd to function without it.

Or Perhaps there'll be a "compatibility" fork of systemd which meets all the compatibility criteria but actually does nothing, much like a BogoMip.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Devuan - Devuan based distros fatmac Linux - Distributions 50 02-19-2018 08:15 AM
Devuan & Devuan based distro thread fatmac Linux - General 8 07-30-2017 02:55 AM
Gotta love those ٱٱٱٱٱٱٱ&# iLLuSionZ Linux - General 5 11-18-2003 07:14 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 12:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration