Slashdot Mirror


Red Hat Announces Product EOL Calendar

BrunoC writes "Looks like Red Hat is getting a little Microsoftish and is quietly introducing its brand new 12-month-only Errata. Quoting The Reg: 'Red Hat's current death list EOLs RH 7.1-8.0 at the end of this year, while 6.2 and 7.0 get theirs as of the end of March.' You can read the whole article here." I don't see how this is "Microsoftish" -- the code Red Hat creates or includes is still GPL, and you can pay anyone willing to fix it. They're not required to support it forever :)

52 of 532 comments (clear)

  1. That's correct.. by leerpm · · Score: 5, Insightful

    They are a company afterall. You can't expect them to support all their products for an indefinite amount of time. They would go bankrupt!

    1. Re:That's correct.. by BarrettAnderson · · Score: 4, Funny

      and this of course does not apply to microsoft; you can still yell at them.

    2. Re:That's correct.. by Anonymous Coward · · Score: 5, Insightful

      I totally agree. I have yet to install a distro from any Un*x company that I haven't paid for. Yeah, I'm sure plenty of people are saying "sucker", but I don't see it that way at all. I've been running RH for my mail/web/cvs server for a few years now (starting with 6.2) and really can't complain. Okay, I suppose my $$$ helps a bunch of lifer deadbeats that don't want to pay for anything....but I'll risk that whopping $180/yr (or so; whenever I decide to upgrade) to help a company that actually tries to do a good job. As far as I'm concerned, they have a good business model and the money I pay is certainly worth keeping them around... So God forbid they'd want to stay in business...that's so terrible :-P

    3. Re:That's correct.. by Eric+Damron · · Score: 4, Insightful

      "I've paid for distros when it was more convenient for me to do so. Once I got broadband and a cd burner it was more convenient to d/l it. And that's the way it should be, each user deciding what's best for him/her."

      So as more and more people get broadband and CD burners less and less people will contribute to a fine open source company and that is the "way it should be..."

      This of course will kill open source companies but hey, that's the way it should be...

      After all the open source companys give up because of people like you we will be forced to pay outragouse prices from Microsoft but hey, that's the way it should be...

      --
      The race isn't always to the swift... but that's the way to bet!
    4. Re:That's correct.. by Lemmy+Caution · · Score: 3, Insightful
      The point is that most distro-manufacturers are selling a product largely consisting of work done for free by people "scratching an itch" or just helping out. If they can add value in a way that's worthwhile - providing services and support or documentation and training or the like - and sustain their businesses, that's great. Good for them. But if they can't, the open source projects will carry on without them - after all, free software came before them, and Debian looks like it's doing just fine with any for-profit company behind it.

      You probably should learn a lot more about the history of free software. The "open source companies" are a late development, and hardly as crucial to the survival and well-being of free software as your post would imply.

  2. Microsoftish ? by dnaumov · · Score: 4, Insightful

    Pardon me, but if using short product support policies is "microsoftish", then Redhat is more microsoftish than Microsoft itself. Last time I checked, support for Windows 95 was dropped on December 31 and support for Win2000 will be dropped in 2008. That's 8 YEARS per product with a possibility of extening support for corporate customers.

    I do not recall Redhat supporting any of their distro releases for 8 years.

    1. Re:Microsoftish ? by weave · · Score: 5, Insightful

      Redhat 6.2 is currently supported. That's been out for quite a few years... But yeah, certainly no one is expecting 8 years, but just one year is way too short.

    2. Re:Microsoftish ? by Pros_n_Cons · · Score: 5, Interesting

      You mean we can't download a free product and suck down bandwith from the company for the rest of our lives?! REVOLUTION! Maybe some people haven't noticed but Mandrake who we thought was doing great is all but dead, how Redhat pays thier bills I have no idea. Look people, It's time we allow some of these open source companies to ern some money, they have done alot for us and are still doing more than just about any other company. The only companys I can think of off the top of my head that do more for the people are charitys and ones funded by tax dollars. The only thing I would ask is that, when I buy redhat 7.3 the errata will last untill redhat 8.3. I look at everything inbetween as a sort of beta software, I have no problem spending $50 every year and a half, but not every 6 months.

      --

      -- "of course thats just my opinion, I could be wrong." --Dennis Miller
    3. Re:Microsoftish ? by Anonymous Coward · · Score: 4, Informative

      End of life:
      Win2000 is March 31, 2008
      WinXP Pro is Dec 31, 2009
      WinXP Home is Dec, 31 2007
      Read more about the Microsoft Desktop Product life cycle Here.

    4. Re:Microsoftish ? by NineNine · · Score: 4, Insightful

      The whole point of Redhat's very existence is SUPPORT. Their product is free. You pay for support. If support consists of a whopping year, then there's no way in hell I'd buy Redhat for my company. I'd just download it, and pay someone else for support. Redhat is essentially removing their very own source of revenue. In my opinion, this has got to be one fo the *worst* decisions possible for them. I don't care how easy/cheap an upgrade is... it's a real PITA that I want to do as little as possible. I bought W2K, and I expect to use it for many, many more years, regardless of whether something "better" comes out.

    5. Re:Microsoftish ? by weave · · Score: 4, Interesting
      The whole point of Redhat's very existence is SUPPORT.

      Amen, and this is the argument I threw at my RH account rep. We currently pay a few grand annually for RHN enterprise and I am very happy with it. But if RHN stops offering errata after just one year, it's utility goes away from me and hence I'll stop paying for it. I'd bet others in my shoes will do the same thing. I'll either have to switch to another distro or start hand patching systems or just switch to Windows Server (well, hmm, I'm not *THAT* pissed off... :)

    6. Re:Microsoftish ? by NineNine · · Score: 3, Insightful

      Well, not only that, but the reason that Unix had done so well in the past was that it was so stable, that you could run it for many, many years and just forget about it. Windows has just now gotten to that level with W2K, making it viable for those companies who do want to install and forget (my company included). I don't make any money, and I don't gain any productivity installing software. I don't want to do it any more than I have to. I want to concentrate on the revenue earning aspects of my business. Computers aren't just some game for me, they're not toys... they're tools that help me run my business which in turns pays my bills! They should last a long time, and like any other tool, I'm going to use what I've already got and paid for until it ceases to function.

  3. tired of calls like this: by Anonymous Coward · · Score: 5, Funny

    noob - "I am having a problem with USB..."

    RH person - "What version are you using?"

    noob - "Uhh... version 5.0 I think..."

    RH person - "FUCK OFF AND UPDATE YOUR SHIT MAN!!! IT IS FREE!!!"

  4. When the OS is free, what can you complain about? by ObviousGuy · · Score: 5, Insightful

    It isn't like anyone was paying for their distros anyway.

    The whole concept behind Open Source is that selling service is the way to make money. However, when no one is paying you and demanding your services even still, there's got to come a point where you realize that your "customers" are simply taking advantage of you.

    Bravo, Redhat. For finally realizing that money doesn't come from beggars. Now maybe my RHAT shares will be a shit.

    --
    I have been pwned because my /. password was too easy to guess.
  5. OMG! by MisterFancypants · · Score: 3, Insightful
    Really!? OMG!.

    Um, seriously. End-of-lifing a product is just a plain good idea, whether you're talking about open source, closed source, or something that isn't even computer software. In the real world, it costs way too much to keep a support infrastructure in place for a product that is only being used by a small amount of the population due to its having become "obsolete" (even if only as a marketing matter). While it sucks to be one of the people who still uses the product and doesn't want to upgrade, there's really no alternative but to cut people off eventually.

  6. Why support obsolete products? by jdgeorge · · Score: 4, Insightful

    One of the virtues of free software is its rapid development/update cycle. Why would should a company based on this development model sell software as if it were never updated?

  7. No by Anonymous Coward · · Score: 5, Insightful

    I don't see how this is "Microsoftish"

    Maybe that's because you don't have to admin anything important. An annual upgrade treadmill is a huge burden on IT staffs that have to prototype and test rollouts for upgrades. There is a reasonable support timeframe between zero and indefinite and one year is not it.

    1. Re:No by twivel · · Score: 4, Insightful

      True, Production Servers don't really work well with a 12-month release cycle. This is really a part of their push for Red Hat Advanced Server. I met a Red Hat rep on the Road Tour who said: "Red Hat Linux Is just something we produce for the community..." "Red Hat Advanced Server is the one you should use for production quality enterprise systems..."

      Twivel

  8. Re:When the OS is free, what can you complain abou by weave · · Score: 4, Informative

    No one pays? My employer shells out a few grand a year for enterprise RHN...

  9. I spy with my "Microsoft" eye.... by Anonymous Coward · · Score: 3, Interesting

    "I don't see how this is "Microsoftish" -- the code Red Hat creates or includes is still GPL, and you can pay anyone willing to fix it. They're not required to support it forever :)"

    I think the more important question is. Why is everyone so gung ho about seeing every RH action as "Microsoftish"? As many have already argued RH couldn't be another Microsoft. Has Microsoft scared us all so bad that we jump at the slightest movement by a commercial company? What about all the other commercial companies out there? Aren't they doing something "Microsoftish", or is it just RedHat?

  10. Lifespan of servers? by Colitis · · Score: 3, Insightful

    Since three years warranty on server hardware seems to be not uncommon, possibly this is the thin air Redhat seem to have plucked this number from?

    It's nice to know that when you get your shiny new 8-way Xeon with untold amounts of RAM you'll be able to leave it in production for the span of its warranty without having to worry about re-installing due to the OS release on it being EOL'ed.

    Where this falls down is twofold: 1) servers are still useful well past three years, whether they're warrantied or not, and 2) some vendors for extra money will extend warranties up to five or so years (my employer has started buying Dell boxes with five year warranties pretty much as standard).

  11. I spy a troll! by Anonymous+Hack · · Score: 5, Insightful

    Come on, Timothy, that was cheap :-) Of course it's "Microsoft-ish" because it forces companies who want support to upgrade. Yeah, sure, you still have the source code, but in a company that doesn't mean anything if you're not getting support. Half the reason why Red Hat is so popular (over the "free beer" Linuxes like Debian) is because when a company puts it on their systems, they can be assured of getting professional support. This is really important for the PHBs of the world - they don't want to hire some in-house hacker with tattoos and spikey hair to "support" their installation.

    Of course, even though it is Microsoft-ish, i don't think that's a bad thing. Forcing your clients to upgrade is better all round - it's better for the economy because it's creating sales which lead to more R&D spending, plus you can ensure your clients are running the latest version which should cut down on the bugginess or flakiness of their software. If Microsoft had had a more aggressive "push upgrades onto the client" scheme, all the internet problems we saw last week wouldn't've happened, because everyone would've been running patched SQL Servers anyway.

    --
    I got a sig so you would remember me.
  12. Microsoftish by airrage · · Score: 4, Insightful

    Maybe the word 'quietly' is what's microsoftish. But actually Microsoft is quite vocal about end-of-life announcements hoping to spur new sales of the latest product suites. Actually, the poster really should reference Oracle, whom is the master of desupport notices; often on the order of 'this product will self-destruct in ten..nine..'.

    I guess Red Hat is being microsoftish by trying to make a profit (maybe someday), or trying to keep the majority of it's users somewhere in the middle of the bell-curve (you spend 90% of your time supporting 10% of your users who refuse to upgrade), or maybe it's the windowsupdate.com like ability to patch over the web.

    I think they're more Microsoftish than you may think, and I say 'right on!'.

    --
    "This isn't a study in computer science, its a study in human behavior"
  13. I don't like this. by the_real_tigga · · Score: 4, Insightful

    One of the major reasons to choose RedHat is their reliability. Thouroughly tested software you can rely to have on your server for at least a year without having to worry about it except for bug- and securityfixes.

    Ok, 7.1 is rather old, but discontinuing support for 8.0?

    IMO professional distros should always support their latest, and their last major release, so in RedHats case 8.x and 7.3, and not drop support for 7.3 until 9.0 is out.

    After all, support is, like, the thing theiy make money in the first place!

    --
    my .sig is better than yours.
  14. Not a fair comparison by psychosis · · Score: 4, Insightful

    I think that one of the major beefs against Microsoft is that they require you to PAY to upgrade to the latest version. I don't see that dropping errata support for something that will cost you a grand total of $0 (if you have fast net access) or a few bucks to get new discs from one of the cheapbytes-type places out there.
    Personally, I'd rather see them drop the old support in favor of providing a higher level of service to the paying customers. (This isn't a dig on their service, which I think is great - we're paying customers at work, and RHN is a tremendous tool.)

    1. Re:Not a fair comparison by weave · · Score: 4, Informative
      I don't mind paying $100/year/box like we do now for RHN. That's reasonable. But $800+/year for Advanced server is nuts. I can get (as an academic institution) Windows 2000 server for $350 perpetual, and Windows update is free. (ok, it doesn't include CALs, but we get them as part of our microsoft campus agreement)

      I just can't update all of my linux servers and desktops every year. There's too much going on, like going to 8.0 means moving apache from 1.3 to 2.0 for example (or downgrading once installed). It takes time to test everything before doing big migrations.

      Some people here might be able to fine tune their personal linux boxes with ease and see this as no big deal, but get into a corporate IT world where everything must be tested to death before even hotfixes or errata are applied, and then talk about dozens or hundreds of servers, and you'll understand that upgrading that quick isn't just possible.

      You think it won't matter? I'm an IT manager with deadlines, stress, labor resource issues, budget shortages, etc, and it concerns me greatly. Won't take much for Microsoft to make a pitch for a stable and predictable environment to people like me to sway us... If you don't think so, you don't understand corporate mentality...

    2. Re:Not a fair comparison by flacco · · Score: 5, Interesting
      I sure hope to hell someone at red hat reads and takes to heart the parent.

      It was the availability of a cheap base price and an affordable RHN subscription that got me the green light to replace our NT servers with Red Hat servers. I expended a lot of political capital making arguments about savings in maintenance and deploring the Microsoft upgrade treadmill. Management was suspicious but in the end trusted my judgement as the "expert" opinion.

      I'm going to look like a fucking asshole if red hat puts us on the same high cost / upgrade treadmill program that I convinced everyone we were getting out of.

      Note to red hat: continue to provide an affordable RHN subscription and don't force us to upgrade our servers every 12 months. If you do, during one of those upgrade cycles, you will find yourselves alongside MS in the dustbin, and we'll move to another distro. Or, worst case scenario, management will no longer see the monetary benefit and decide to return to the comforting familiarity of Microsoft's eager clutches, and I'll be "that dick with no sense of judgement" for the rest of my career.

      --
      pr0n - keeping monitor glass spotless since 1981.
    3. Re:Not a fair comparison by weave · · Score: 3, Insightful
      I feel your pain. Now you will learn what old IT farts learn early on in their career. Sticking your neck out to do the right thing means getting shafted in the end. Eventually, after getting screwed a few times, you learn to play it safe and go with the flow. That's what kept IBM succesful for decades, and that is what is carrying Microsoft now.

      I'm in the same boat. Sure, I can divert more of my tech staff to spend the extra time on a constant upgrade cycle, or manually patching older revs, but then that plays right into the hands of Microsoft's argument that Linux is more expensive in the long run because it's more of an effort to run it.

      I thought I hit bliss city when I saw RHN. Management of all of my linux boxes, desktops and servers, with a few clicks on a web page. I eagerly got the funding to pay for it. Now, if it's only good for a year or I have to pay high dollars for AS, I start looking like the fool for switching.

  15. Well had they posted MY story instead.... by Anonymous Coward · · Score: 5, Interesting

    This ISN'T microsoft-ish. Microsoft atleast supports their products for a little while. What this is, is a company screwing the living hell out of the community that's supported it. I've sat here and sold personal version after personal version alot with errata accounts to clients because a) cheaper b) would be supported for quite some time with good security updates and wouldn't always require upgrades to continue to use their other products.

    Now I have to turn around and tell them that Redhat changed it's game plan and convert each one of these clients over, or let them continue to pay me to constantly upgrade their network just to keep them within their errata entitlements. I for one....basically said to hell with redhat about 5 hours ago (incidently right after I submitted my story that /. apparently didn't like). I've started installing Gentoo on my workstations here already and within the next 4 weeks my redhat boxes will be gone as well.

    Face it people, the people like "us" have made redhat and they just turned their back on us for the corperate world.

    Don't get me wrong, I have NO problem with end of life, but 1 year for what's there now. The woman I spoke with at Redhat (yes I did research it directly with the company not just reading what nimrods say) she said that after this first round, there's going to be another change. Anyone using personal or the "free" version (and probably the professional) will ONLY be eligable for errata during the time that the release they are using is current. As soon as they release another version, errata for the older is gone. In other words, since redhat releases usually twice a year....that would me 2 upgrades a year just to keep yourself up2date. Screw that.

  16. Not true. by intermodal · · Score: 5, Insightful

    It becomes microsoftish when an upgrade is not a free download away.

    --
    In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
  17. Re:Eh? by The+Bungi · · Score: 4, Insightful
    You can grab "Redhat's code" and maintain it yourself, or pay anyone you like to maintain it.

    That would make sense except for the fact that it invalidates the very reason for RH's existence, which is to provide precisely that sort of service. People who buy RH are the ones least likely to maintain the code.

  18. RedHat's whole business is support by geekee · · Score: 4, Insightful

    "I don't see how this is "Microsoftish" -- the code Red Hat creates or includes is still GPL, and you can pay anyone willing to fix it. They're not required to support it forever :)"

    But isn't that what you're paying RedHat for when you buy support from RedHat? By cutting their support, they're cutting the one service that paying customers actually want (unless they buy the software as a donation). MS just patched NT4, which has been out since '95 or so, and you're criticizing MS and excusing RedHat. Give me a break.

    --
    Vote for Pedro
  19. Right by CaptainZapp · · Score: 5, Insightful
    I don't see how this is "Microsoftish" -- the code Red Hat creates or includes is still GPL, and you can pay anyone willing to fix it. They're not required to support it forever :)

    Yeah, as the product responsible for Linux I can sure see myself explaining this to my boss (who is very pro-free software): Er, yeah mate. We just hire a bunch of hippies if Red Hat support runs out on the server products we run. I'm sure Oracle will be more then happy to support our home modified kernel sources. Sure a great career move on my side.

    Sorry, this is just plain dumb and makes me wonder if Red Hat indeed is a good choice for this company. We are talking of a major divison of one of the biggest logistics companies worldwide.

    A one year time frame is just plain unacceptable in a corporate environment.

    I think it very much depends how Red Hat handles this on their enterprise level support contracts.

    (I read the part about the three year life cycle for their "advanced server" products. Which ,imo are just a scam in the first place).

    --
    ich bin der musikant

    mit taschenrechner in der hand

    kraftwerk

  20. Re:Here's Your Answer by DragonMagic · · Score: 4, Insightful

    Different things.

    MS requiring an upgrade is forced because no one else can support or fix bugs or security issues on old Windows or MS-DOS versions.

    Red Hat is just stopping their own support for old versions, but anyone else can fix their bugs or security issues, and support it, because they have the source code to it.

    No one's forcing an upgrade on Red Hat's half.

    --

    Human nature is the same everywhere; the modes only are different. -- Earl of Chesterfield
  21. Re:Here's Your Answer by binner1 · · Score: 3, Insightful

    I agree with your post. Honestly, I don't generally like much that MS does on the business side, but product support is one that seems _fairly_ reasonable (at least in the OS realm). Really, '95 support just expired...that's a long time to support a piece of junk.

    I also don't think that a year is unreasonable for RedHat to support an OS for...especially considering we're talking about Open Source products here. Really, RHN/up2date is nice, but not a necessary component.

    There are two things to consider here.

    1) Home users: who cares if they have to D/L a new ISO every 12 months...sure, it'll cut into the pr0n allowance, but no biggie (sorry dial-up users, you'll have to shell out $5+shipping for a disc).

    2) Corporate users: upgrading servers is a pain. It's done as little as possible. Open Source is great in this situation. Upgrade on a package by package basis. It's fairly easy to build an RPM...especially when a lot of projects include the .spec file. Upgrade yourself, or even better, setup your own local RHN server to roll them out for you. You don't have to patch things like Evolution (not installed on your servers anyway, right??) on a server, just the security related errata!

    And to top it off, corporations should be using Advanced Server anyway, or have the $$ to pay RedHat for some on-the-side support deal...this happens all the time.

    Even a non-RedHat supported RedHat is still a very maintainable system.

    -Ben

  22. redhat lifecycle - tie to RHCE validity? by mokeyboy · · Score: 3, Interesting

    Why not tie the EOL for redhat desktop products to the vailidity of of the RHCE for it? For corporates, its going to be very hard to get approval for certification training if you know the EOL of the product is less than the period of the certification (I recall the figure of 2 major releases being mentioned by the instructor). This could damage RedHat's rep in the training market (one of their key publicity points in the last few years).
    I'm surprised that people are still running RH6.0. It's far less secure than 7.x or 8.0. The desktop (and server environment) are much better as well. Sure there are some libc5 legacy apps but there's really no excuse for a server to be running it. Upgrade or do a fresh install and use the newer features (like journalling, LVM, iptables, 2.4 series kernels etc) because they make an immense difference. RH7.2 really should be a minimum if you are serious.

  23. LWN had some discussion on this by Sits · · Score: 3, Insightful

    Way back in December LWN covered this and I think Alan Cox voiced his thought that people (not RedHat) may try and make a business out of support 6.2. Now there's an idea...

  24. Really. by Anonymous Coward · · Score: 3, Funny

    I mean, even Linus himself end-of-lifed the fantastic 1.2.13 kernel a long time ago.

  25. RHCE irony... by weave · · Score: 4, Interesting
    OK, so they now say Redhat 8.0 etc releases are "consumer" releases only. You're supposed to use Advanced Server 2.x in business.

    But the RHCE program is geared towards this same "consumer" release. Current RHCE is for Redhat 8.x version and you have to get recertified every other (consumer) major release number. So, what good is RHCE? You get certified to run your home Linux box then?

  26. Bad for produciton sites by Black+Copter+Control · · Score: 4, Insightful
    This isn't that bad for a geek running a home box and willing to go through the upgrade cycle every year, but it's pretty bad to be EOLing a product (8.0) at the end of the year which starts with it's replacement is only beta.

    I know some sites are still running Solaris 5.2 (which was de-emphasised about 5 years ago). It takes some companies almost a year to get their software really stable. Forcing them to replace their OS on a yearly basis is going to discourage movement to redhat

    From a marketing (as well as technical) point of view, theis seem s like a really bad idea(tm).

    --
    OS Software is like love: The best way to make it grow is to give it away.
  27. M$ by yerricde · · Score: 4, Funny

    Also, cut it out with the "M$" crap.

    Microsoft built its early business on porting its BASIC programming language interpreter to several 8-bit microcomputer platforms and licensing it to the computer manufacturers. In line-numbered BASIC, the name of a variable of type string ends in '$'. A valid program in "Applesoft BASIC" (the BASIC interpreter in the Apple II ROM, developed by Microsoft):

    10 LET M$ = "Microsoft"
    20 PRINT M$; " introduces the Windows XP operating system"
    30 END

    I find using a BASIC expression to refer to a BASIC vendor just as valid as using the pattern *n?x to refer to a family of operating systems whose shells recognize the name of the operating system in that glob pattern.

    --
    Will I retire or break 10K?
  28. Re:Eh? by kwerle · · Score: 3, Insightful

    That would make sense except for the fact that it invalidates the very reason for RH's existence, which is to provide precisely that sort of service. People who buy RH are the ones least likely to maintain the code.

    You missed the "or pay anyone you like to maintain it" part.

    It turns out (I'm certain) that if you REALLY wanted M$ to support '95 for you, they would. You'd just have to fund the entire effort yourself, plus whatever profit they wanted.

    Likewise for Redhat. However, there are a lot of other folks you could convince to support whatever old version you want in the case of Redhat. It's not really feasible to try to get someone else to support M$ software - not the way you'd like, anyway.

    I actually worked for a company where this was done. We were paid VERY good money to support a free (as in speech) product. This back in '96 or so.

  29. Re:When the OS is free, what can you complain abou by Blkdeath · · Score: 4, Informative
    But, in the real world, you just don't upgrade each week. First of all, you don't have the time to do it, second many of your services are so complicated they might break seriously if a patch is applied, and ofc. all of this has to be done on a working live system in a very narrow timeframe, which leaves you very little time for errors.

    Perhaps in the real world of beanie-wearing community college graduates, yes. But in the real corporate world, there are testbed servers on which to test upgrades, patches, etc. before rolling them onto the production servers. Often times there are also redundant servers which can be taken down, upgraded, tested, and put live one at a time.

    Further - there's no requirement to upgrade once/week, but at the very least keep packages less than one year stale. The Internet as a whole got a kick in the goodies this past weekend by sysadmins who wouldn't patch a software vulnerability that was more than 7 months old (and by the network admins who allowed access to the servers via the public Internet, but I digress).

    If you haven't upgraded your Linux systems in 6-12 months, I'd love for you to send me your IP address(es), because I'd like to send you a few packets pertaining to;

    • Double-Free Bug in CVS Server
    • ISC DHCPD Buffer Overflow
    • Multiple Vulnerabilities in ISC BIND
    • Apache/mod_ssl Worm
    • Multiple Vulnerabilities in OpenSSL
    • Vulnerability in PHP
    • libbind DNS Resolver Library Vulnerability
    • OpenSSH Challenge Response Vulnerability
    • Apache Web Server Chunk Handling Vulnerability
    • Multiple Vulnerabilities in PHP Upload
    • Multiple Vulnerabilities in zlib compression library
    • SNMP Vulnerability
    • etc.

    Out in the "real world", systems administrators apply patches, fixes, and upgrades to their software regularly to avoid being used as a staging ground for one of our recent many DDoS attacks, or having their corporate data stolen.

    It's the lazy, incompetent, certifications-are-king sysadmins out there who give us a bad name. They're the ones who adopt the theory that applying updates is "too hard", and claim that "things could break" which they use to justify their ignorance of best-practises security.

    If your company's assets are riding on IT software and you're having trouble keeping up-to-date, talk to your vendor and ask for help. Have them justify the money you fork over to them every year and do something for you. If RedHat is your vendor, ask them for assistance in migrating your server farm from 6.0 to 8.0. If they won't give it to you, inform them that you'll find another vendor, and that you won't be spending $30k on another support contract. If you've already spent it, contact your lawyer.

    "Real World" does not, nor should it ever be confused with or used to justify laziness, ignorance, or apathy. It's thinking like that that got us into our present state of dissaray.

    --
    BD Phone Home!

    Shameless plug. Like you weren't expecting it.

  30. Re:thats too bad by Black+Copter+Control · · Score: 4, Insightful
    but i dont understand while people are getting antsy and making m$ related accusations...

    how about: 8/0 is obsolete in less than a year, but 8.1 isn't even out of beta yet!

    Unlike Windows, Unix people are often used to running their machine for more than a year without a reboot. When you have to upgrade your OS more often than you would (otherwise) have to reboot it, there's something wrong with the EOL calendar.

    My roommate (along with lots of other MS-bound friends) is still running win98. My box dual boots to '95. If this were done on the RH calendar, our OSs would have been EOL'd 5-7 years ago.

    NOT going to replace their OS every year. OS boasts aside, things still break in the move. If I weren't a geek I'd have absolutely no interest in going through migration sickness every 10-14 months. As long as this calendar stands, there's no way that I can realisticly encourage friends and clients to move to RedHat. For some of them, it's going to take more than a year to convince them to change over. Providing a moving target simply makes things that much harder.

    Can you understand the consternation of a non-geek friend running 7.1 being forced to move to 8.0 (the 8.1 beta refused to recognize his new HD) -- knowing that the OS is going to be obsolete by the end of the year? good reason to go ballistic.

    This is one big step away from getting a solid foothold on the desktop.

    --
    OS Software is like love: The best way to make it grow is to give it away.
  31. Re:Price is the Issue by Albanach · · Score: 3, Insightful

    I suspect that's why they are releasing Advanced Workstation

  32. Hello....McFly!?!?! by lspd · · Score: 4, Interesting

    It's suprising that some folks are just now finding this out. I noticed this a while back while trying to get a decent fix for the fubar xinetd package Redhat is pushing on its pre-8.0 distros.

    I was really suprised by this since a long lifespan is the one thing that RedHat had over Mandrake (Mandrake's product lifespan is 2 years from date of initial release..) I don't know about the rest of you, but I have servers running right now with 2 years of uptime..some are in the same city as me, some are colocated in other cities. I can't upgrade these systems without either flying to the colocation site or having them mailed to me.

    I came to precisely the same conclusion as the folks in this article. If you're using Linux on a server, it's stupid to use anything other than Debian. The commercial distros NEED you to upgrade, whether or not there are any compelling new features in their new versions. The Debian developers could care less about you buying a new set of CDs every six months.

    It's pretty funny that RedHat seems to be following right in Mandrake's footsteps here. It will be a great boon for virus writers if they really do drop support for all those 7.2 installs out there...but I can't imagine that serious sysadmins will put up with this for very long.

  33. This is terrible for Linux in real businesses. by treat · · Score: 4, Insightful

    Real businesses, with thousands of servers, can not upgrade every year. Besides the actual time to do the work of upgrading, there is testing that must be done when you have real money at stake, downtime caused by the upgrade, etc.

    I work for a real company. I can't use an unsupported operating system. I can't upgrade every machine every year. I can't even upgrade to the latest and greatest (e.g. RedHat 8 and Solaris 9 are out of the question), because it is too untested. These are the business realities, not factors that I or any other individual have control over. A single incident (e.g. a server crashes and whatever sort of failover is in place does not work) can cost more money than my yearly salary. A single hiccup (e.g. a 1 second network outage for a single machine) can cost more than my paycheck.

    Sun at least makes guarantees that binaries that worked on previous versions of Solaris will work on new versions. (If they pass a test suite). RedHat makes no such guarantee.

    I thought I was making real progress to replacing Solaris servers with Linux servers. But with this announcement, I don't know what to do. If I deploy RedHat, I am adding a substantial (and mostly hidden) cost and risk. RedHat seemed like the logical choice, but my next course of action is going to be to investigate alternate supported Linux distros (IBM, Sun).

  34. Re:When the OS is free, what can you complain abou by vondo · · Score: 3, Insightful
    So except in some very rare cases, I can't see a reason to run a Linux distro that's over a year old.

    You can't? Just guessing here, but I bet you use linux in your dormroom or your bedroom.

    In April, a co-worker and I upgraded roughly 15-20 machines from RH 6.1 to RH 7.2. We don't have IT staff as such, we are both scientists in academia who happen to know a fair bit about system admin. We work in an academic environment.

    Our 15-20 machines are all slightly different. They all needed to have certain config files backed up and restored. They each have a different person with different skills and different requirements sitting in front of them. So, how did it go?

    The first machine probably took 2 hours of fairly close attention to install. Everything had to be documented so we could reproduce it. Then, I used that machine for a few weeks, noting what else needed to be tweaked and installed. Then, one by one, we installed the OS on the other machines. This process took about 2-3 weeks and took say 30-60 minutes of real work per machine including the updates. Then the users got a hold of them. One person notices that program X doesn't exist anymore. Another notices Y doesn't exist. Someone else notices that xvscan doesn't work, so we have to figure out how to use xsane. This continues for a month or more, each time requiring one of us to install more software on the systems and test it out. The first machine (mine) is determined to be completely out of sync due to different choices in the installer, so it is done from scratch.

    I highly doubt this is a "rare case." These are just desktop machines, not even mission critical servers (although one was a web/db server).

    I sure don't look forward to repeating this excercise in January 2004. If Red Hat's options are a 12-month upgrade cycle or $800/machine, we'll find some other company. But, their promised corporate desktop may be the answer for us if its priced reasonably.

  35. Business desktops need to last a lot longer by msobkow · · Score: 4, Insightful

    If you're trying to purchase a few dozen (much less a hundred or a thousand) desktop machines for corporate rollout, it's going to take you a few months to get the budget approved. Then you spend a month or two on the RFQ and RFPs, another month or so going through them, and another month or so finalizing the decision. Add on the order time, receiving time, and software installation/configuration time, and you're hitting 9-12 months before they're even hitting a user's desktop.

    So you've got a good chance that by the time your users first turn on a RedHat desktop, the support has been dropped.

    Congratulations, RedHat, you just knocked yourself out of competition for the corporate desktop. With Mandrake dead, that leaves SuSE as the only real contender for a corporate solution on the desktop.

    On the server side, consider that it typically takes at least a year for third-party vendors to certify a distro as "supported" for their products. Sometimes it even matters -- Sybase 12.5 would only run on a certain patch level of RedHat 7.1 last time I tried it (Mandrake 8.1, 8.2, and SuSE 8.0 could not even prepare the storage space for the database without crashing, much less run a server.)

    I know that most corps are going to have special contracts set up for support, but that doesn't help those of us on the development or consulting side of things who don't have the budget to pay for full AS licenses just to get a system that doesn't need to be rebuilt annually.

    If I want to rebuild systems annually, I'll go back to Microsoft-based development -- there's more work supporting that junk anyhow.

    I do buy full distros to support the vendors -- and end up spending far more on Linux distros per year than I ever did on Microsoft products as a result. I have RH 5.2, 6.2, 7.0, 7.1, Mandrake 7.2, 8.0, 8.1, SuSE 8.0 and 8.1 -- all full box sets at $75-100 each. Even when I don't install them, I buy kits just to help keep the companies I believe in afloat.

    I sure don't appreciate RH trying to rip me off as payback. Even with RH normal pricing, who in their right mind is going to pay $150 for a full current release of RH, for which you only get a few months update support, vs. buying a generic copy of the disks for $20 plus shipping and paying less than $150 for a full year of RH update support? Such nonsense would be why RH 7.1 was the last distro of theirs I bought or installed -- I don't believe in their model anymore.

    --
    I do not fail; I succeed at finding out what does not work.
    1. Re:Business desktops need to last a lot longer by rhavyn · · Score: 4, Insightful

      Umm, that is why they released Advanced Server and are releasing a Corporate Desktop and Advanced Workstation products. Those come with several years of support.

      And their $150 box is probably going to go away, and there will just be the $40 box. You're better off paying $60 for a years worth of RHN and skipping the box set entirely anyways.

      Anyways, I would doubt that someone who doesn't even follow the company, use their product, or "believe in their model" to care about any of this in the first place (of even do some research about what Red Hat *is* doing for big companies before spouting off).

  36. How is that a bad thing? by intermodal · · Score: 4, Insightful

    You're a fool. You've been bamboozled into believing that everything has to be a commercial solution or it's worthless, dead, or unsuccessful. I've said it before, and I'll say it again: (sing along, kids!)

    Communism sucks for governments, but it works great for groups of people with a common goal!

    That's right, kids...opensource is good for you. It lets you give your time to the group, or COMMUNE, and give back the results of your productivity to the masses for equal division! and the great thing about software is, that unlike the finite products that software corporations wish it to be, can be copied effortlessly countless times, with little distribution cost to anyone!

    So let's all try a nice big glass of Communism today, and stop worrying about whether Capitalism is going to benefit from our pinko operating system!

    but seriously, this whole copyright and software thing is just like the cold war all over again, except this time everyone who has actually researched their stuff realizes that there's far more atrocities on the pro-IP side than the commie rat bastards they want you all to think us OSS people are. I could say generic "when you support..." joke, but its no joke. thats why so many of us here on /. are not buying music and movies. thats why we would rather run anything at all but MS operating systems. And that is why we would rather code opensource than closed. The playing field is a place of crossfire and even friendly fire, so no matter what position you take, somebody will believe (not just think, believe) you to be wrong. Trust me.

    --
    In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
  37. Not always because of different hardware by msobkow · · Score: 3, Insightful

    Large clients (e.g. banks) have the clout to ensure that once they select a hardware platform with a large provider like IBM, Dell, or Compaq, they will continue to get identical hardware on subsequent orders, even after the regular consumer can no longer order the components.

    The same applies to the software they run. End of life to a large corporation only means that the general public can't get support for the product and is forced to upgrade; corps keep getting support for as long as they are paying enough.

    Most corps I've worked for are running software that no one would even think of buying or installing anywhere else. It's all about maintaining compatability, and lock-stepped upgrades of entire farms of corporate systems. Even applying a software patch for the OS requires regression testing of third-party and internally-developed software that the OS vendor often does not have access to.

    The last large client I worked for takes about three months to determine if an OS patch can be rolled out. Until then, you live with the problems caused by the OS bug, even if that means getting paged every morning to restart servers, or that users are going to have to put up with periodic dead sessions.

    Absolutely nothing is more important to a large corp than data integrity. Not the sanity of the support staff, the profit margins of the vendors, or the "improvements" of a newer OS release. Nothing is allowed to change that might risk the data, and making changes without proper verification and authorization is a firing offense -- no matter whether they eventualy apply the update you forced or not.

    --
    I do not fail; I succeed at finding out what does not work.