I’ve invested so much time and effort into CachyOS. I’ve been running it for over 2 years now. A switch would be very hard and unnecessary work for me since it works no issues for me. Otherwise, Debian would be on my machine.
Not only does cachy work perfectly, Debian needs so much fiddling around to get latest software versions it’s a hindrance for a lot of stuff including gaming
Gaming and getting the latest kernel is a big one for me. My gpu and cpu are very new and they require the latest kernels. I’m sure there are ways to bring in the newest kernel to Debian, or just use Sid or testing, but why do that and what I have works no problem?
Their security updates are some of the best you could find, my friend. They are only “slow” on features. Debian doesn’t fuck around when it comes to security.
debian’s security updates are faster than Arch’s, Ubuntu’s and many more, you seem to not understand what the “stable” in “stable distro” means, please, this has nothing with security updates
If that server includes the security repository in its source files, I disagree. In fact, the use of the security repository in Debian has a history spanning more than 20 years.
we are talking abou specificly security updates, upstream for most projects that are important for security have a concept of LTS releases, e.g the kernel’s LTS, debian updates their stable packages rellying on upstream’s LTS, debian does sometimes switches to newer LTS releases even if it means breaking the no new feature general rule of thumb, e.g kernel LTS goes EOL, debian maintainers sometimes do try to backport fixes themselves but generally debian prefers to follow upstream’s LTS EOL where possible, generally updating to the oldest LTS not in EOL yet
debian has a specific team dedicated to security, updating packages, contacting and colaborating with upstream, reporting potential vulnerabilities e.g the xz backdoor first was reported to the ssh package maintaince team from which the importance and the nature of the issue was discovered and then reported to the debian security team which confirmwd the findings and made reports to other teams and tried contacting the old owner of xz since xz was effectively taken over by the malicious actor
Technically, you are right. But this is due to the different release systems.
In Debian, security updates for the stable version are distributed via the security repository until a new point release is created. The last point release was two months ago.
However, in practice, on Debian Trixie, you get the fixed version by running a standard apt update& apt upgrade.
Amazing for a server. Both my servers run Debian and I have had no issues.
I run it on my daily driver laptop and I’m happy as a clam.
I did run it for a couple of year in the past. It was solid.
I run it with KDE for my daily driver & gaming and it is very boring and stable, which is what I want in my PC. Debian is 99% of the time supported.
I recommend it.
I’ve invested so much time and effort into CachyOS. I’ve been running it for over 2 years now. A switch would be very hard and unnecessary work for me since it works no issues for me. Otherwise, Debian would be on my machine.
Not only does cachy work perfectly, Debian needs so much fiddling around to get latest software versions it’s a hindrance for a lot of stuff including gaming
Gaming and getting the latest kernel is a big one for me. My gpu and cpu are very new and they require the latest kernels. I’m sure there are ways to bring in the newest kernel to Debian, or just use Sid or testing, but why do that and what I have works no problem?
Makes sense. I started with Ubuntu so Debian was a very natural move for me
I tried a few non-debian distro but always came back to it as it is the one I am most familiar with.
Due to slow update cadence it’s not a great idea for a server exposed to the internet
Their security updates are some of the best you could find, my friend. They are only “slow” on features. Debian doesn’t fuck around when it comes to security.
debian’s security updates are faster than Arch’s, Ubuntu’s and many more, you seem to not understand what the “stable” in “stable distro” means, please, this has nothing with security updates
If that server includes the security repository in its source files, I disagree. In fact, the use of the security repository in Debian has a history spanning more than 20 years.
Until some fucking php vulnerability grants root access
would arch have fixed this? no, what is your point?
Rolling releases better at updates, by definition, that’s my point. This can backfire, but also can save you sometimes.
we are talking abou specificly security updates, upstream for most projects that are important for security have a concept of LTS releases, e.g the kernel’s LTS, debian updates their stable packages rellying on upstream’s LTS, debian does sometimes switches to newer LTS releases even if it means breaking the no new feature general rule of thumb, e.g kernel LTS goes EOL, debian maintainers sometimes do try to backport fixes themselves but generally debian prefers to follow upstream’s LTS EOL where possible, generally updating to the oldest LTS not in EOL yet
debian has a specific team dedicated to security, updating packages, contacting and colaborating with upstream, reporting potential vulnerabilities e.g the xz backdoor first was reported to the ssh package maintaince team from which the importance and the nature of the issue was discovered and then reported to the debian security team which confirmwd the findings and made reports to other teams and tried contacting the old owner of xz since xz was effectively taken over by the malicious actor
If you are speaking about the latest php bug, debian stable and old stable were updated days ago, see https://security-tracker.debian.org/
it might be a failure to read on my part but this reads as unfixed on Debian but fixed on Arch
Edit: Oh, yeah ok, in the security repo it’s fixed, why is the vulnerable version distributed to stable though?
Technically, you are right. But this is due to the different release systems.
In Debian, security updates for the stable version are distributed via the security repository until a new point release is created. The last point release was two months ago.
However, in practice, on Debian Trixie, you get the fixed version by running a standard
apt update & apt upgrade.Eh. They’re actually pretty on top of security patches for pretty much any internet-exposed server software.
The OpenSSL incident was a long time ago at this point.