LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 03-09-2016, 12:56 PM   #1
asarangan
Member
 
Registered: Jul 2009
Posts: 89

Rep: Reputation: 18
After 23 years, I am considering abandoning slackware


I've been using Slackware since the very first version came out in 1993, and I have about 10 machines currently running. While don't claim to be an expert, I am not timid when it comes to linux either. May be this is the wrong forum to ask, but am looking for some suggestions on what other distributions might be worth checking out. Here are some of my issues with slack:

- There have not been any Slackware updates in 3 years. I had to update some security patches at the insistence of our IT department. I installed these from Slackware-current but they failed due to inconsistent dependencies. So I installed the entire Slackware-current, and now even slackpkg is broke. It fails with "awk: error while loading shared libraries: libsigsegv.so.2: cannot open shared object file: No such file or directory". I can track down these libraries by hand one by one, but it seems to go on and on forever. Its probably easier to wipe out everything and start from scratch.

- Despite years of use, I am still unclear how to automate package updates. I have been using Sbopkg, which syncs with slackbuilds, but slackbuilds does not contain any of the stock packages that come with the default distribution. So for security patches to critical packages, the only place seems to be slackware-current, which turns out may break the entire system due to dependency problems, including slackpkg itself.


I would appreciate any input you may have.
 
Old 03-09-2016, 01:18 PM   #2
DarkVision
Member
 
Registered: Jul 2007
Posts: 199

Rep: Reputation: Disabled
Quote:
Originally Posted by asarangan View Post
- There have not been any Slackware updates in 3 years. I had to update some security patches at the insistence of our IT department. I installed these from Slackware-current but they failed due to inconsistent dependencies.
Bad idea to install packages from -current on top of 14.1... AFAIK security updates will get backported to 14.1... have a look to the ChangeLog here.

If you are missing a security update... message the developers. Installing updates from -current on top of 14.1 must leave your system in a unknown state of stability. -current is far ahead of 14.1.
 
2 members found this post helpful.
Old 03-09-2016, 01:37 PM   #3
bassmadrigal
LQ Guru
 
Registered: Nov 2003
Location: West Jordan, UT, USA
Distribution: Slackware
Posts: 8,792

Rep: Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656
There have been plenty of updates over the past 2+ years (see the stable changelog and maybe consider signing up for the mailing list or grab the rss url and plug it into your favorite rss reader). While there hasn't been any stable releases in that time, security updates have been continually pumped out. 14.1 has had continual updates since it was released, with the latest one only being released yesterday (security updates for firefox and samba). Are you aware of the patches/ directory on your favorite Slackware mirror? If you are, what did you get from -current that wasn't updated in 14.1? Also, it is never a good idea to grab packages from a different version and try to install it on yours (in your case, getting packages from -current and install them on 14.1). As you found, you run into dependency issues. If the updates you need are not actually in 14.1 and they do exist in -current, it is much better to grab the source directory and compile the package yourself using Pat's SlackBuild.

And if stability is a concern, -current should not be used. While it does tend to be stable, it is not guaranteed to be and there is definitely the possibility of breakage. Production systems should especially steer clear of -current unless you are very familiar with how to fix possible breakages (and you're willing to do it). Now, if slackpkg is broken, then something went wrong with the upgrade. What steps did you follow to upgrade? What is the full error? libsigsegv.so.2 is part of aaa_elflibs and libsigsegv, but it isn't recommended to just blindly upgrade the aaa-elflibs package unless you've been keeping up with -current and a new aaa-elflibs was just released. You could try reinstalling the libsigsegv package, but as you already guessed, depending how what all has been done, you might need to reinstall a lot more to get a properly working system.

Automatic package updates just doesn't occur with Slackware without some work on your end. The closest you can get is using slackpkg for official packages, which will keep you up-to-date with any security updates that Pat releases. If you maintain several 3rd-party packages, it might be worth looking into slackrepo in conjunction with the slackpkg+ plugin, as that will allow you to compile programs from SBo and create a repo that you can then use with slackpkg+. You'll still need to launch slackpkg on each computer to keep it up-to-date, unless you're willing to set up something more automated like using a cron job, but it would probably be best to not completely automate something like that in case an update requires some work on your part (like the semi-recent update of openssh that changed the login defaults for root, which there was a large announcement on the changelog trying to let people know).

And, finally, it probably isn't best to come in here and state your possible intentions to ditch Slackware because of a misunderstanding (especially after 23 years). And without knowing more of what you need a distro to accomplish, it would just be shots in the dark in trying to find you a better distro.
 
6 members found this post helpful.
Old 03-09-2016, 01:45 PM   #4
dugan
LQ Guru
 
Registered: Nov 2003
Location: Canada
Distribution: distro hopper
Posts: 11,223

Rep: Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320
Quote:
Originally Posted by asarangan View Post
So I installed the entire Slackware-current, and now even slackpkg is broke. It fails with "awk: error while loading shared libraries: libsigsegv.so.2: cannot open shared object file: No such file or directory".
It took me about 5 minutes to determined what you did wrong. You used slackpkg to upgrade 14.1 to -current, and you left aaa_elflibs in the blacklist when you did so.

Last edited by dugan; 03-09-2016 at 01:57 PM.
 
2 members found this post helpful.
Old 03-09-2016, 01:52 PM   #5
kikinovak
MLED Founder
 
Registered: Jun 2011
Location: Montpezat (South France)
Distribution: CentOS, OpenSUSE
Posts: 3,453

Rep: Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154Reputation: 2154
Quote:
Originally Posted by asarangan View Post
- There have not been any Slackware updates in 3 years. I had to update some security patches at the insistence of our IT department.
You're wrong, and here's why.

Security updates for Slackware stable:

ftp://ftp.osuosl.org/pub/slackware/s.../ChangeLog.txt

Slackware -current:

ftp://ftp.osuosl.org/pub/slackware/s.../ChangeLog.txt

I suggest reading the Slackware documentation before moving to a different distribution.

Cheers,

Niki
 
1 members found this post helpful.
Old 03-09-2016, 02:57 PM   #6
mostlyharmless
Senior Member
 
Registered: Jan 2008
Distribution: Arch/Manjaro, might try Slackware again
Posts: 1,851
Blog Entries: 14

Rep: Reputation: 284Reputation: 284Reputation: 284
On another note, I used Slackware since the 90's also, basically from the beginning. I just got tired, I guess, for the contortions to get some things running, so I switched to Arch last year. Arch is also a keep it simple distro, not a hand holder, but as a rolling release, it is always up to date. That, of course, has pros and cons, but the documentation for Arch is legendary and I have found it much more stable than, say, Fedora. So if you wanted an alternative suggestion from a long term Slacker who's switched, there it is. If you wanted to complain about Slackware, then I think the previous suggestions are great.
 
Old 03-09-2016, 03:10 PM   #7
allend
LQ 5k Club
 
Registered: Oct 2003
Location: Melbourne
Distribution: Slackware64-15.0
Posts: 6,371

Rep: Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749
I am reminded of the Will Rogers phenomenon
 
8 members found this post helpful.
Old 03-09-2016, 03:37 PM   #8
mostlyharmless
Senior Member
 
Registered: Jan 2008
Distribution: Arch/Manjaro, might try Slackware again
Posts: 1,851
Blog Entries: 14

Rep: Reputation: 284Reputation: 284Reputation: 284
Gee, thanks. That's probably the most sophisticated insult I'll get all week. Much better than the Arch forum, where they're usually much more direct.
 
2 members found this post helpful.
Old 03-09-2016, 03:56 PM   #9
Richard Cranium
Senior Member
 
Registered: Apr 2009
Location: McKinney, Texas
Distribution: Slackware64 15.0
Posts: 3,858

Rep: Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225Reputation: 2225
Quote:
Originally Posted by mostlyharmless View Post
Gee, thanks. That's probably the most sophisticated insult I'll get all week. Much better than the Arch forum, where they're usually much more direct.
Hey, stick around. I'm sure we can do better.
 
4 members found this post helpful.
Old 03-09-2016, 04:20 PM   #10
asarangan
Member
 
Registered: Jul 2009
Posts: 89

Original Poster
Rep: Reputation: 18
Quote:
Originally Posted by dugan View Post
It took me about 5 minutes to determined what you did wrong. You used slackpkg to upgrade 14.1 to -current, and you left aaa_elflibs in the blacklist when you did so.
I'm glad I asked. I guess I have not been using the /patches directory from the mirrors properly. I'll stick around with Slackware and see if I can somehow automate that process.
 
4 members found this post helpful.
Old 03-09-2016, 04:23 PM   #11
dugan
LQ Guru
 
Registered: Nov 2003
Location: Canada
Distribution: distro hopper
Posts: 11,223

Rep: Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320
Quote:
Originally Posted by asarangan View Post
I'm glad I asked. I guess I have not been using the /patches directory from the mirrors properly. I'll stick around with Slackware and see if I can somehow automate that process.
When I switched from 14.1 to -current, I backed up my data, made a -current boot USB, let the installer format the partition, and did a fresh install.
 
Old 03-09-2016, 04:28 PM   #12
jamison20000e
Senior Member
 
Registered: Nov 2005
Location: ...uncanny valley... infinity\1975; (randomly born:) Milwaukee, WI, US( + travel,) Earth&Mars (I wish,) END BORDER$!◣◢┌∩┐ Fe26-E,e...
Distribution: any GPL that work on freest-HW; has been KDE, CLI, Novena-SBC but open.. http://goo.gl/NqgqJx &c ;-)
Posts: 4,888
Blog Entries: 2

Rep: Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567
Hope this doesn't happen for me and Debian but we adapt... I never have m$ and always more than one GNU!
 
Old 03-09-2016, 04:47 PM   #13
bassmadrigal
LQ Guru
 
Registered: Nov 2003
Location: West Jordan, UT, USA
Distribution: Slackware
Posts: 8,792

Rep: Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656Reputation: 6656
Quote:
Originally Posted by asarangan View Post
I'll stick around with Slackware and see if I can somehow automate that process.
As I mentioned in my initial post, be careful about complete automation as some security patches may have a significant impact on the system. I'll quote Pat's changelog entry below...

Code:
Fri Jan 15 02:29:54 UTC 2016
patches/packages/openssh-7.1p2-x86_64-1_slack14.1.txz: Upgraded.
       This update fixes an information leak and a buffer overflow. In particular,
       the information leak allows a malicious SSH server to steal the client's
       private keys. Thanks to Qualys for reporting this issue.
       For more information, see:
       https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt
       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777
       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778
       *****************************************************************
       * IMPORTANT: READ BELOW ABOUT POTENTIALLY INCOMPATIBLE CHANGES *
       *****************************************************************
       Rather than backport the fix for the information leak (which is the only
       hazardous flaw), we have upgraded to the latest OpenSSH. As of version
       7.0, OpenSSH has deprecated some older (and presumably less secure)
       algorithms, and also (by default) only allows root login by public-key,
       hostbased and GSSAPI authentication. Make sure that your keys and
       authentication method will allow you to continue accessing your system
       after the upgrade.
       The release notes for OpenSSH 7.0 list the following incompatible changes
       to be aware of:
       * Support for the legacy SSH version 1 protocol is disabled by
       default at compile time.
       * Support for the 1024-bit diffie-hellman-group1-sha1 key exchange
       is disabled by default at run-time. It may be re-enabled using
       the instructions at http://www.openssh.com/legacy.html
       * Support for ssh-dss, ssh-dss-cert-* host and user keys is disabled
       by default at run-time. These may be re-enabled using the
       instructions at http://www.openssh.com/legacy.html
       * Support for the legacy v00 cert format has been removed.
       * The default for the sshd_config(5) PermitRootLogin option has
       changed from "yes" to "prohibit-password".
       * PermitRootLogin=without-password/prohibit-password now bans all
       interactive authentication methods, allowing only public-key,
       hostbased and GSSAPI authentication (previously it permitted
       keyboard-interactive and password-less authentication if those
       were enabled).
       (* Security fix *)
This is why I would recommend subscribing to the security mailing list or follow one of the rss feeds provided by SBo (links to both are in my above post -- I am just too lazy to repost them here). This way you are notified as soon as patches are released and you can gauge their potential impact before upgrading systems.

If you do want to more fully automate it without blindly upgrading, you could maintain your own internal "mirror" and create a slackpkg script that will check and upgrade their systems based on your local mirror. You can initially clone your favorite 14.1 mirror and then once you see a security advisory posted, you can verify how that package will work with your system. If you don't see any problems, you can add that package to your local mirror and then a scheduled slackpkg script (probably through cron) could update all the local computers you're managing based on that local mirror (I would maintain that mirror manually rather than scheduled rsync updates).
 
Old 03-09-2016, 05:43 PM   #14
hitest
Guru
 
Registered: Mar 2004
Location: Canada
Distribution: Void, Debian, Slackware
Posts: 7,342

Rep: Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746Reputation: 3746
Quote:
Originally Posted by bassmadrigal View Post
As I mentioned in my initial post, be careful about complete automation as some security patches may have a significant impact on the system.
Indeed. That's one of the many reasons why I prefer and run Slackware. I enjoy reading the changelogs for the stable and -current branches. It is desirable to be informed before you patch your systems. I prefer package management systems that are not automated. It is better to have your hand on the tiller than rely on auto pilot in my opinion.
 
3 members found this post helpful.
Old 03-09-2016, 05:43 PM   #15
CTM
Member
 
Registered: Apr 2004
Distribution: Slackware
Posts: 308

Rep: Reputation: 287Reputation: 287Reputation: 287
Quote:
Originally Posted by asarangan View Post
I'm glad I asked. I guess I have not been using the /patches directory from the mirrors properly. I'll stick around with Slackware and see if I can somehow automate that process.
slapt-get is probably the solution to most of your problems.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Slackware is 21 Years Old jeremy Linux - News 1 07-18-2014 11:33 PM
Abandoning Fedora; Need a new distro tnandy Linux - Newbie 10 10-17-2012 08:10 PM
Considering abandoning slackware for new distro, but i cant decide... Suggestions? onda_trollet Linux - Distributions 9 02-11-2010 04:30 PM
Trying Slackware after years away Agent69 Slackware 5 06-04-2002 06:30 AM
abandoning windoze Lennart Linux - General 8 03-30-2002 09:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 07:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration