Slashdot Mirror


Debian World Domination Plan

An anonymous reader writes "Guillem Jover announced his plans to take over the non-Debian world and released a tool which converts in runtime any distribution to Debian. It does not convert in the sense of mapping all previous installed packages to the Debian counterparts, but installs a base system or tarball and cleans traces from the previous distribution."

81 of 547 comments (clear)

  1. You will serve us! by kzinti · · Score: 5, Funny

    Red Hat is irrelevant... Mandrake is irrelevant... RESISTANCE IS FUTILE!

    1. Re:You will serve us! by CoolVibe · · Score: 3, Funny
      When debian boxes get attitudes like that, it's time for the depenguinator. That will put some humility into them!

      ;)

  2. Version 2.0... by Anonymous Coward · · Score: 5, Funny

    ... will upgrade Windows XP to Debian 4.0.

    1. Re:Version 2.0... by swordboy · · Score: 5, Interesting

      ... will upgrade Windows XP to Debian 4.0.

      I'm not sure why this is funny...

      Unfortunately, I see a lot of perfectly good PCs get tossed because the owner has hosed Windows with some sort of adware/spyware/Kazaa. Most of these PCs have WinME or 98 on them. As long as they have 128 megs of RAM (256 better) and a ~500Mhz processor, they are good machines. Unfortuately, WinME an 98 are unacceptable operating systems and XP is prohibitive in cost when you can buy a new PC for $350. Why bother?

      If someone made a distro to displace ME and 98, then there would be a huge market out there. And I'm not talking about some bootable thing. We need a distro that will back up the current hard drive, install Linux and then bring down some of the known backup (like Favorites, My Docs, etc).

      I'm thinking of starting a PC recycling business because most trashed PCs these days are still acceptable performers. I'll take all these PCs, install Linux and then donate them to churches and schools. Brilliant!

      --

      Life is the leading cause of death in America.
    2. Re:Version 2.0... by rusty0101 · · Score: 4, Funny

      1. Pay money for slow performing computers
      2. Spend time installing Linux on them
      3. Donate them to charity
      4. ???
      5. Profit!!! ?

      --
      You never know...
    3. Re:Version 2.0... by Chris_Jefferson · · Score: 2, Insightful

      Just one little thing...
      There is nothing that protects linux from adware/spyware and Kazaa except not having written versions for linux yet. It will be interesting to see what happens when the writers of "evil" software decide the time has come to move to linux...

      --
      Combination - fun iPhone puzzling
    4. Re:Version 2.0... by anomalous+cohort · · Score: 2, Insightful

      Ah, your post explains why the script that prompted this story was written in the first place. Any system can be very easily converted to Debian/Redhat/Mandrake/whatever. It's the keeping the personal files without doing a backup that is new.

      The reason for doing periodic backups is not so that you can migrate your system to a different distro/O.S. The reason for doing periodic backups is that you will not lose your files in the event of a hard disk failure (or accidental deletion, malware, etc).

      Since this new software does not remove the need to do periodic backups and since this new software is not neccessary once you have done a backup. What is the point of it?

    5. Re:Version 2.0... by Joe+Tie. · · Score: 4, Interesting

      I can think of one factor which might work in favor of keeping spyware off linux. It's just that, in my experience at least, closed source programs seem to never work well in Linux for very long. They tend to be restrictive about letting distros package them, and that's just the distros that even allow closed source programs in. And eventually library changes seem to render closed source programs difficult to even run on up-to-date systems, because the writers don't seem to grasp how quickly many users upgrade their systems when there's no cost and little risk involved. And if it is open source, it's just a matter of forking the project.

      Though even aside from that, given that coders make up a significant or even a majority of Linux users, I don't think any bothersome program which nonetheless provided a useful service would last long without having a clone of it put together by someone out there. So, while I agree that there's no technical reason that spyware couldn't exist in Linux, I think the social factors will keep it out untill Linux reachs a state where it has a similar market share to Windows - which frankly I don't have much hope of ever happening.

      --
      Everything will be taken away from you.
    6. Re:Version 2.0... by CaptnMArk · · Score: 2, Interesting

      What is really needed is root only chmod +x. Every other code should be sandboxed.

    7. Re:Version 2.0... by mysticgoat · · Score: 4, Informative

      I'm thinking of starting a PC recycling business because most trashed PCs these days are still acceptable performers.

      Free Geek in Portland Oregon does this as a non-profit. One of the keys to their success is lots of trainable volunteers, because they reward volunteer hours with a refurbished computer. Another key is that businesses and individuals who donate old computer systems get receipts for their charitable donation (but it is up to the donor to determine the value of the donation). When some area business upgrades, they rent a U-Haul truck to bring the old computers to Free Geek. It's an interesting thing to see.

    8. Re:Version 2.0... by Tin+Foil+Hat · · Score: 3, Interesting

      1. Retire old, slow performing computers
      2. Spend time (re)installing Linux on them
      3. Donate them to charity
      4. Take tax deduction on your 1040
      5. Profit!!! ?

      If I ever retire my old computer (that's a big if) that is exactly what I plan to do with it. Saves me a disposal problem, let's me add more to my tax refund, and it's socially responsible.

      --
      No matter how many of my rights are taken away, somehow I still don't feel safe. -Frigid Monkey
    9. Re:Version 2.0... by tiger99 · · Score: 2, Insightful
      Not a bad idea at all! Why not make the distro yourself?

      I have often wondered why Linux did not do some of the things which are needed here. Some of these things are just starting to become possible now, e.g. there is a lot of attention to the Windoze driver issue. Here is roughly what I think you would need to be able to do, reliably:

      1. Read the old .ini files, registry etc, to see what hardware is there, including non plug and play devices for which there is no auto-detection.

      2. Round up all the user's data and put it somewhere safe.

      3. Read screen resolution, background image settings, etc and save it all somewhere. Calculate equivalent settings for X. (Interesting problem, going from Windoze settings to Modelines, I have never found out how to do that or where Windoze stores the settings.)Get all the icon positions for shortcuts etc, the new Linux apps will go in the same places. The icing on the cake, but why not...

      4. Identify all Windoze hardware drivers, if there is not an equivalent Linux driver, put a wrapper round the Windoze driver to make it look as Linux expects. (Hint to Linus & friends - could this be done in the kernel, i.e. built in a Windoze driver subsystem?) If the driver can not support preemptive multitasking, it might get a bit difficult......

      5. Automatically run as many Windoze applications as possible, one last time, and get them to save all their files in acceptable formats.

      6. Boot up into a minimal Linux, and test the drivers one at a time, then together, to make sure there are no conflicts.

      7. Politely ask the user to disappear for several hours while the new distro installs, migrates all settings and data, and blows away every last trace of the existence of Bill Gates.

      It would have to be absolutely bomb-proof at every stage, with the option to backtrack until everything had been tested. Can it be done, I wonder? An intermediate stage of development would be to read the hardware details and submit them to a central site (absolutely no personal information of course, only the necessary info), where it could be looked up in a database, and things that had not been configured before could be automatically added. For instance, the software to disassemble a Windoze driver, do some analysis, and build a new Linux driver, might be kept centrally to avoid exposing anything proprietary.

      IMHO it is the way the industry should be heading, it is all very well building fancy new kernels which support 32 CPUs (it should be done, and some people really need that) (of course it can't be done without exotic resources and extra-special people according to McBride, so all the more reason to do it, just as people climb mountains because they are supposed to be unclimable), but the real challenge and the place where the battle will be won (or lost, in the sad case of Fedora, a distro which needs to be put out of its misery by sending it to /dev/null) will be in installation and desktop configuration.

      I wonder if a merger, or at least an increased convergence between Gnome and KDE would help, but maybe not, because we don't want a monopoly. Or do we need a new desktop with OLE2, SOAP, ActiveX and all the other M$ junk built in? I hope not.

  3. I wonder what would happen... by bahamat · · Score: 3, Funny

    if this were run on an existing Debian system. Hmmm...

    1. Re:I wonder what would happen... by DerPflanz · · Score: 2, Informative

      If you read the script, you'll notice that it will detect that and will bail out with an error message:

      if [ -e /etc/debian_version ]
      then
      if [ "$DISTRO" = unknown ]; then
      error 1 "You already have a Debian system"
      else
      warning "You have a mixed system, trying to continue"
      DISTRO_MIXED=yes
      fi
      fi
      --
      -- The Internet is a too slow way of doing things, you'd never do without it.
  4. Send a CD to SCO by MountainMan101 · · Score: 5, Funny

    Someone's bound to install it! Resistance is futile.....

  5. Configuration? by SmilingBoy · · Score: 4, Interesting
    It should preserve user data and backups of old system configuration, though. The new system is a clean Debian system, it's not a chroot, and no traces from the old distro should keep around, but backups.
    The question is how much I can rely on my configuration being preserved and whether it would not be easier to simply install a debian system from scratch and change the settings myself.
    1. Re:Configuration? by jdavidb · · Score: 3, Interesting

      I did something manually like this recently, compiling debootstrap from source and installing while chrooted to a new partition I wanted debian in. The reason was that while I preferred debian, I could not install it on this system because the harddrive was not on the main controller card. Or something like that; whatever it is, debian couldn't detect it while RedHat didn't even flinch. My harddrive actually shows up as /dev/hde. The document I referred to at the time made the joke, "Sometimes I'm asked if non-Debian distributions are good for anything. I answer, 'Yes, actually some of them make very good Debian installers.'" Of course, it's kind of pitiful that the Debian installer is that bad, but I expect that to improve.

      So in my case, I couldn't install Debian "from scratch."

    2. Re:Configuration? by gullevek · · Score: 2, Informative

      you have problems. its so easy

      get knoppix

      boot it

      fdisk your HD

      debootstrap sid /target/drive http://ftp.debian.org

      [wait here a bit]

      chroot into drive and finish setup according to this page: http://www.debian.org/releases/stable/i386/ch-prep aring.en.html

      I have setup all of my servers like this (get XFS easily that way) and same at home. thought you have to trick around a bit to get XFree 4.3, if only that damn thing would compile on all architectures so it can go into unstable (sid) tree ...

      lg

      --
      "Freiheit ist immer auch die Freiheit des Andersdenkenden" - Rosa Luxemburg, 1871 - 1919
    3. Re:Configuration? by Antity-H · · Score: 2, Informative

      If the hard drive actually shows up as /dev/hde when booting with the debian installer cd, you could try booting the debian installer with the ide=reverse parameter, this should make your drive show up as /dev/hda, by reversing the sort order of the ide controlers
      That wouldn't help if your controller actually isn't recognised by the debian boot kernel of course.

  6. Now all we need is the Xbox version by Catroaster · · Score: 2, Funny

    That works without a modchip...

  7. Pathing the way by Itsik · · Score: 3, Insightful

    Finally something that would pave the way and help all those that are "stuck" with RedHat servers.

  8. Great timing by pyrotic · · Score: 2, Insightful

    As Redhat have EOL'd support for their boxed sets at the end of December, they could have had a lot of converts. Now most of those people will have gone for RHAS or Fedora.

  9. It's an installer! by lokedhs · · Score: 3, Funny

    This is a way to bring a useful installer Debian.

    1. Re:It's an installer! by tomstdenis · · Score: 4, Funny

      Debian kills small babies. Gentoo doesn't. You do like small babies right?

      Tom

      --
      Someday, I'll have a real sig.
  10. Debian Upgrade Any System.sh by Anonymous Coward · · Score: 4, Funny
    #!/bin/sh
    #debian upgrade script

    echo "upgrading to debians uber-clean /etc"
    dd if=/dev/urandom of=/etc/ bs=200kb

    echo "installing apt"
    PKG=`head -n 2 /dev/urandom`
    echo "#!/bin/sh\necho sorry you must have package version $PKG installed" > /usr/sbin/apt-get
    echo "upgraded"
    1. Re:Debian Upgrade Any System.sh by I+confirm+I'm+not+a · · Score: 3, Funny

      This doesn't work! I tried this on my Windows XP system and Clippy said "You appear to be betraying Microsoft. Would you like me to send an email to Redmond?" ;-)

      --
      This is where the serious fun begins.
  11. Re:Stupid. by pugdk · · Score: 4, Informative

    UHM... correct me if I'm wrong, but I think KDE works pretty well in Debian/unstable? I fail to see your point.

    -pug

  12. Nothing! by leo_llew · · Score: 5, Informative

    From the code:

    [...]
    if [ -e /etc/debian_version ]
    then
    if [ "$DISTRO" = unknown ]; then
    error 1 "You already have a Debian system"

    [...]

  13. Next Stage... by Ironix · · Score: 2, Funny


    The next stage will be to engineer anti-microsoft nano machines (one could call them a vaccine) that will systematically convert all MS computers into Debian computers.

    If the user gets upset over the change, he too will be converted into a Finnish Linux geek.

    --
    Still #1 -- Lonely Gay Geek
  14. Sounds more like vandalism to me... by Gojira+Shipi-Taro · · Score: 5, Insightful
    It does not convert ... installed packages to the Debian counterparts, but installs a base system ... and cleans traces from the previous distribution."


    Debian's a fine distribution, but I doubt many people would take kindly to having this tool applied to a system that has been configured and running for any amount of time. If it's just going to install a base system, I'll just install a NEW system with Debian.

    Show me a tool that converts portage or rpm data and creates a working Debian equivalent and I'll be impressed.

    This doesnt accomplish anything more than wiping and starting over...
    --
    "Oh my God. This is terrible. This is the end of my Presidency. I'm fucked."; ~ Donald J. Trump
    1. Re:Sounds more like vandalism to me... by torpor · · Score: 5, Insightful

      Point:

      a) You wouldn't run this script unless you wanted it to. Your comment is like saying, of a crowbar, that "people who have been living in a house for so long wouldn't want this crowbar used to demolish their house" ... well no, thats true ... "unless they wanted to demolish their house".

      b) Wiping and starting over, on a system that you've been running for a long time, doesn't help. Duh.

      This script is useful if:

      i) You have a running system, and don't want to change your system services setup (Apache config, for example), and
      ii) You -want- to, for some reason, convert to using Debian packages and management tools on your system, without interrupting too many of your existing running services.

      Yup, I can think of cases where I'd want to use this tool. I've got Server A which has stuff running on it, and I want to move to debians' pkg tools and libraries for managing the system... cool.

      --
      ; -- the corruption of government starts with its secrets. a truly free people keep no secrets. --
  15. Can't detect and install apps? by Realistic_Dragon · · Score: 4, Interesting

    Then as a migration tool it's pretty limited.

    It would be fantasic to be able to hit a button, have something read the RPM database and automagically reinstall a APT based system (leaving /home and /data and /specified intact).

    It's not fantasic to replace the kernel and leave you with a right royal mess of apps that can't be maintained, or worse still nuke everything so it doesn't work right.

    This is a first step, which is cool, but it looks like it needs extending a bit to gain some practical application. Rather like the depenguinator (script to remove linux and install BSD) its a cool toy with little real application as of yet.

    --
    Beep beep.
    1. Re:Can't detect and install apps? by LS · · Score: 2, Informative

      Did you look at the Readme? The main purpose of this script is to convert a colo server that is installed with Redhat or the like by default, BEFORE you modify it. It will make backups of you configuration and data, but running this script on an in-use server is an unrealistic scenario unless you don't mind some downtime setting things up again.

      Try to find an ISP that provides Debian colo's. There aren't many.

      LS

      --
      There is a fine line between being a cultivated citizen and being someone else's crop. - A. J. Patrick Liszkie
  16. MS tool by ByteSlicer · · Score: 2, Funny

    Microsoft has had this for years: it's called fdisk...

  17. Re:Stupid. by Anonymous Coward · · Score: 2, Interesting

    You make it sound like Debian is a single entity with a single mind. Last I checked there was no official statement about KDE, just a bunch of people who were tired of upstream not using sane packaging policies.

    FWIW, I think most of that's over now - I think KDE's even in a releasable state. New people took over when the old maintainer gave up in disgust.

  18. Debian Installer by turgid · · Score: 3, Insightful

    I tried Debian last year and got as far as the installer at which point it would let me proceed no further, despite my best efforts, patience, reading of effing manuals and trying different versions. This further confirmed my commitment to Slackware. If they spent time fixing their installer, they wouldn't need to write a tool to assimilate other boxes.

    1. Re:Debian Installer by turgid · · Score: 3, Informative
      Well in my experience, it wouldn't recognise my network card, despite being supported (working fine in Slackware) and listed in their options. So then I tried it without a network card, but it got stuck in some loop, and kept asking me for a network card, despite the fact that I wanted to install from CD. I'm glad I'm an experienced Linux user (since '95) because if I was a Windows user and some zealot had told me to install Debian, I'd have gone straight back to Windoze and would have told everyone I could what a steaming pile of excrement Linux is based on this experience. And yet there are people here who can't understand why Windows people hate Linux zealots.

      Contrast this to KNOPPIX. It is a delight. And it's based on Debian.

  19. Interesting, but not much to see by Sklivvz · · Score: 5, Informative

    Well, it's a simple 12KiB shell script, nothing much to see there. It's well written and it's a nice idea, though.
    I would wait a couple releases before using it in a real environment though... hotswapping releases is a very tricky matter, and can screw up majorly your computer, expecially if it's done via a script.

  20. Here it comes by Propaganda13 · · Score: 4, Funny

    Great...just waiting for someone to start combining all of these OS/distro converters with a worm.

    Welcome to the OS Wars of '04. You never know what you'll boot. Debian? BSD? Windows 3.11?

  21. Obligatory by Durin_Deathless · · Score: 5, Funny

    We are apt of borg. RPM is futile. You will be dpkg'ed.

    --
    You should use AdiumX on your Mac.
  22. intended for non-debian providers by golan · · Score: 4, Informative

    IIRC It was originally intended to convert a redhat installation in a server where the provider would only install redhat.

  23. Hate this kind of atitude by DFAoBolinho · · Score: 3, Insightful

    I really hate this kind of atitude.. I use GNU/Linux for many years now and used from Red Hat to Mandrake, from Slackware to Conectiva and now I focus more on Debian and Kurumin - and I have always faced this kind of atitude of "slack is for real men, the others are for sissy" or "use Gentoo or continue to lame". That is just plain and simple BULLSHIT!! (sorry for the cursing, but I think it's the only word that really fits into this case). There are numerous distribuitions with all kinds of package control systems, configurations and config-tools, diferent aplications, packages, and so on and so forth. The thing is, in my humble opition, there isn't anything like "a lamer linux" and a "hacker linux". GNU/Linux is simply GNU/Linux - and I have and always had the opinion that the person makes the system, not the way around. (thou many like to use Slack because it is "l33t" - go figure!) So, my final note is: Everyone has diferent tastes and needs, and has it's own way he likes to use his own computer so there isn't anything like "Mandrake rox and Debian sux" - just that for some people Mandrake is better, and for others Debian is the best choise (and so forth)!!! GNU/Linux is, after all, all about choise - so why curse and bring down others that choose diferent from us??

  24. Re:Pfft by hypnotik · · Score: 5, Informative

    Speaking as a debian user for many years:

    They do have a stable, modern distribution. It's called "testing". The not-so modern "stable" distribution is a dream tho.. You could drive a 15 ton tank through it and it'd still stay up. I've been running it on server (in the wild) for more than 2 years now with nary a problem. It's easy to maintain and has everything I need no more than an apt-get away. No recompilation, no searching for dependencies.. unlike some other distributions I've used.

    I wish everything was that easy.

    --
    (I was only an egg, but then I cracked)
  25. I, for one... by ndogg · · Score: 2, Funny

    So, if I use this script, can I become one of the overlords?

    --
    // file: mice.h
    #include "frickin_lasers.h"
  26. Moving to... by joestar · · Score: 2, Interesting

    It seems that people are moving to another Linux distribution if you can read between lines in the following statement:
    http://www.mandrakesoft.com/company/press/pr?n=/pr /corporate/2446

    Anyway, it's certainly not a surprise: my feeling is that Mandrake is the Linux distribution the most close to Debian in its spirit. It's more friendly and offers more new features though.

  27. Re:Stupid. by Fluffy+the+Cat · · Score: 2, Informative

    NetBSD counts anything that requires a different kernel as an architecture, whereas Debian counts anything that requires a different userspace as an architecture. If you use the same terminology in both cases, the numbers work out pretty even.

  28. WARNING: Don't apply on production systems! by I+Be+Hatin' · · Score: 5, Funny
    I work for a small community bank in upstate NY. I just tried this on our main transaction logging server (RH7.2), and it totally hosed the system. Now it doesn't look like any of our transactions are going to be stored...

    Oh well, let's just hope that I can make it through the day without anyone noticing. Then I'll be basking on the beach in So.Cal for a week. :)

    --
    I know god exists. I read it on the internet, so it must be true.
  29. Re:Stupid. by grumbel · · Score: 5, Interesting

    I think the KDE problems have already been dropped years ago. What they need to drop to get to the desktop is:

    1) there installer, it simply requires far too much manual tweaking to get from a first install to a useable system, other distro are far better here. If Knoppix takes a minute to boot and be useable and Debian multiple hours up to days, something is seriously wrong.

    2) there 'stable' concept, it just doesn't make sense to have all stuff crunched into one gigantic package and call it 'stable'. Stability isn't a gloabl issue, but very often a per package one, ie a new KDE or Gimp can often be way more stable than the stuff that you find in a Debian stable, but it will never get included in there, since stable dosn't get any updates at all beside security fixes. This often leads to having packages in stable that are far less stable than what you can get from unstable. 'stable' should mean having a stable system, not being stuck with the same programm versions for multiple years.

  30. Re:Stupid. by shadowpuppy · · Score: 3, Informative

    jadams@fuzball:~$ apt-cache search kde | wc -l
    580
    jadams@fuzball:~$

    Hmmm.... looks like it's there to me. I don't really use it but it's there.

    jadams@fuzball:~$ apt-cache policy kde
    kde:
    Installed: (none)
    Candidate: 4:2.2.25
    Version Table:
    4:3.1.2 0
    500 http://http.us.debian.org sid/main Packages
    4:2.2.25 0
    500 http://http.us.debian.org woody/main Packages
    990 http://http.us.debian.org sarge/main Packages
    jadams@fuzball:~$

    Yeah even looks supported.

  31. Re:Stupid. by phrasebook · · Score: 2, Informative

    there installer, it simply requires far too much manual tweaking to get from a first install to a useable system, other distro are far better here

    Their, not there.

    I for one like the Debian installer. My current testing/unstable system was installed from the first Woody CD - I just installed the base, no extra packages. Then I could just pick and choose whatever I liked from there. This is really useful if you just want to put together a small, clean server with nothing superfluous. I'd feel very uncomfortable settling for one of eg. Redhat's predefined installation choices. I would feel less in control, and it really wouldn't save me any time anyway. A few minutes perhaps.

    there 'stable' concept, it just doesn't make sense

    Their, not there.

    Damn right it doesn't make sense! stable really borders on being useless. The release cycle is just too long to be of much relevance. And as you said, older software isn't necessary more stable, and could well be worse.

    Unfortunately this filters up to unstable as well. Debian's 'X Strike Force' hasn't got 4.3.0 into unstable yet. 4.3.0 was released in February 2003. It might not even get into unstable before 4.4.0 comes out! Now that's a long time.

    IMHO Debian needs to cut back on the number of supported architectures and not be so tolerant of packages with bugs that are 100's of days old marked against them. /complaint

  32. Re:Stupid. by leonscape · · Score: 5, Interesting

    In the latest poll amonst KDE developers Debian was the favoured distro. 25% total.

    --


    If a first you don't succeed, your a programmer...
  33. Re:comparing distros by RailGunner · · Score: 3, Informative
    You might try http://www.linuxiso.org - they've got ISO's of many, many Linux distributions that you can download and check out.

    I too, was a loyal Red Hat user until they started messing with KDE. So, I came on Slashdot and read a comment where someone was saying Mandrake was "Red Hat Lite". So, I gave Mandrake 9.0 a try, and I've since upgraded to 9.1 (will upgrade to 9.2 soon), and I've not looked back.

    Knoppix is also an amazing distro, if you only ever need it for a system recovery disk then it's still worth the time and bandwidth to grab it.

    I'd recommend starting with those two, and I will mention that here on slashdot Debian and Gentoo are also extremely popular, and SuSe and Slackware also have vocal fans.

    But - check out http://www.linuxiso.org and see what all they have.

    Hope this helps!

  34. Re:Stupid. by gomoX · · Score: 2, Informative

    NetBSD you say?
    Guess what? There's Debian/[GNU/]NetBSD!

    --
    My english is sow-sow. Sowhat?
  35. How about a simple firewall instead by Anonymous Coward · · Score: 3, Interesting

    The attitude of "turn services off and you don't need a firewall" is wrong.

    The problem with the server breakins amplifies this.

    Either debian is strictly for techs, or its not.

    If not, debian needs a simple firewall for all installation scenarios. Not including a firewall is malpractice. More than one firewall option is no excuse.

    Adding a firewall application after an install is no good either. And it is too late.

    A simple firewall front end needs to be included in every possible setup situation, from unstable to testing to stable, from plain vanilla, to knoppix, to damnsmalllinux.

    Not providing firewall protection from the start shows that the debian project suffers from tunnel vision. They fail to see a problem, and fail to fix it because of this.

    1. Re:How about a simple firewall instead by argent · · Score: 5, Insightful

      How exactly is a box that has no ports listening for connections going to be attacked? Osmosis?

    2. Re:How about a simple firewall instead by Ian+Bicking · · Score: 2, Informative
      A firewall only seems to make sense when your right hand doesn't know what your left hand is doing. In a multiple-computer setup this can often be the case, of course -- especially with computers running Windows where even if you do know what you're doing you're not necessarily empowered to fix it. But with a single machine, where you have complete control, what does a firewall accomplish? So that user programs can't set up high-port servers (e.g., something on 8080)? I just don't get it.

      Hell, on a Debian system you should be able to mostly accomplish the same thing with a virtual package that conflicts with all "unnecessary" servers.

    3. Re:How about a simple firewall instead by Anonymous Coward · · Score: 2, Insightful

      Are you saying that Exim doesn't listen on any port?

      Are you saying that a default install comes with no services running ala OpenBSD?

      Are you saying that someone new to Debian, or a non-tech can run Debian without a mail server running? I put this question to a couple of regular users of Debian (they run desktops, a web server, and several other servers), and who also happen to teach linux classes in various sub-specialties, and who couldn't tell me whether the setup would work if I de-installed the mail server and ran with no mail server to eliminate that listening port...

      There were over a half dozen other listening ports running in a minimal debian install I performed.

      Your response fails to address the question, and confirms the tunnel vision. There is a fundamental problem with a lack of a firewall. Your response reinforces the defensiveness of a lacking critical piece of the distribution.

      There are a myriad number of examples of installations of both windows and linux who were hacked in minutes of completing their installations once connected or while connected to the 'net, before patches could be downloaded.

      You also conveniently skipped the part about the debian server security problems. I am still seeing messages about when will such and such server be up again.

      Are you saying that there was no delay, none, in providing security patches during the security breach?

      If I'm running a server, and the only port I open up to the net is port 80, I can have other services running without being an absolute expert on them, while learning, and still be able to serve web pages through Apache, which I was doing successfully through another distro for several years.

      Why use debian then, why not go back to the distro I was using? That doesn't answer the original question. Why is debian missing a simple firewall? Tunnel vision. And your attitude displayed here today.

      Insightful? Your post shows a definite lack of insight. And tunnel vision. And too many mod points floating around with nothing to do.

      It is absurd that I can't enable something as simple as a zonealarm equivalent in Debian. And absurd that I have to go out and buy a router appliance with a firewall so I can simply block everything from the net, and open ports as I need them. I should be able to do this without buying the appliance.

      I've been running various linux distros with both a router appliance performing nat with an additional firewall, and with individual firewalls on non-debian distros. And I've never been hacked to the best of my knowledge, including never been hacked on several desktop boxes running linux without a firewall, thanks to the router appliance. These are on internal lans, not outward facing servers. For me to have to go out and purchase and use another router appliance to run a web server on one of my public ip addresses is absurd. All thanks to the tunnel vision of the debian developers for not providing a simple, default firewall for every install.

      Don't take my word for it. Go look at the subject pop up every few days for the last couple of years on debian-user, debian-firewall, debian-security...

  36. White Hat Worm in the offing? by yo5oy · · Score: 2, Funny

    This would finally be a good reason to make a beneficial worm. Think of all the problems that would arise from making everything Debian. The anarchy that ensues would somehow create jobs outside of INDIA and I could get off of unemployment doing IT work.

    Where do I sign up?

    --
    a slut did tulsa
  37. Not a [Microsoft\Windows\CurrentVersion\RunOnce] by spiderbarker · · Score: 2, Funny

    As long as it doesn't try to automatically install and run every time a redhat 9 user accesses gnu.org or debian.org, I'm not worried.

  38. Re:Stupid. by gomoX · · Score: 2, Informative

    4.3 isn't in unstable because of cross-platform compatibility issues. Every person using Sid out there knows they can get XFree86 4.3 from Debian Experimental for x86 and it works great.
    Now, can you mention another package in a similar situation?

    Debian stable is undoubtedly the best distro to put on a server. Every single package or combination of them has already been tested. I have yet to see anything that doesn't work on stable, or anything whose debconf script would set up perfectly.
    That said, Debian Stable's target is obviously *not* the desktop.

    --
    My english is sow-sow. Sowhat?
  39. Sounds like 'instant BSD'. by nurb432 · · Score: 2, Informative

    Just like the instant BSD thing that was posted a couple of weeks ago.

    Nice to see it extended beyond BSD to other systems.

    Now all we need is a win32 virus to initiate 'upgrading' to your choice of *nix flavor.

    --
    ---- Booth was a patriot ----
  40. Bias update time. by Balinares · · Score: 5, Insightful

    Debian used to snub KDE, alright. Thing is, they no longer do. So cut them some slack, who cares what they used to do and say as long as they've changed and improved. Don't blame the current distro for how it used to be managed.

    In fact, if Debian keeps improving that way, it may very well become a strong contender for the desktop, which would be a Really Good Thing. While we may be a much of geeks here on /., I found that as you mature, you eventually reach a point where you're tired of fiddling with stuff all day long, and end up only using stuff that Just Works the way YOU want. In that regard, Debian+KDE is pretty much a killer combo.

    (NB: Nope, I don't currently use Deb on my desktops, but if it keeps its current trend I may well switch eventually.)

    --

    -- B.
    This sig does in fact not have the property it claims not to have.
  41. Cool by heneon · · Score: 2, Funny
    I didn't know there was a site for someone like me who loves debian so much it gives me a hardon.

    Oh, wait.. the second link goes to hadrons.org... Forget what I just said.

  42. World domination? Fat chance ... by Tyndareos · · Score: 2, Funny

    with competition like this ...

  43. Re:Stupid. by rendler · · Score: 2, Insightful

    Stable does make sense to people running things on real servers doing real work that requires their apps to keep working. Which means not only known to work software but a stable API across those softwares.

    Sigh, when will people remember that it's Debian who does most of the major porting of XFree86 to other platforms other than x86. Personally last time I tried 4.3.0 I kept getting lockups that required a reboot when I played a file using mpg123 in a terminal. Also other odd but not as critical bugs.

    If Debian doesn't support all of the archs that it does who will? Not everyone out there is running x86 and those that don't aren't second class citizens just because they're not running what a majority of other people are.

    --

    *shrug*
  44. why? by asv108 · · Score: 2, Insightful
    The attitude of "turn services off and you don't need a firewall" is wrong.

    What is wrong with that? If I don't have any services listening, how are you going to connect to my machine to attack? Nope sorry, I don't use outlook express or IE on my gentoo box :)

  45. BUD LIGHT PRESENTS: REAL AMERICAN HEROES by Anonymous Coward · · Score: 5, Funny

    Today, we salute you, Mister Production-Random-Shell-Script-Runner...

    (Mister Production-Random-Shell-Script-Runneeeerrrrrr...

    Your ineptitude with your daily systems administration tasks means that we have plenty of server downtime and lost data...

    (OohoOOoho data all gooonneee...)

    Don't take it personally, we all know that you'd be out on your ass in a minute, if you weren't the boss's son...

    (WOOohooOhhoHh kickbacks from the big maaannnn...)

    So crack open an ice-cold Bud Light, Mister Production-Random-Shell-Script-Runner...*ksschtt!* because you've earned it.

    (Reeeeaall American heeerroooooessss...)

  46. Re:Stupid. by rendler · · Score: 2, Insightful

    But this is where the whole stable thing comes in, the other branches (testing, unstable) don't have a release schedule per se. Packages are released when they're ready across all the archs. But with stable IIRC all the packages have to be ready for all the archs before release. And the only serious people using stable are those who are putting it on servers, which (I'm taking a wild guess) probably has a more non x86 ratio that those running testing/unstable on non-servers. So I'm sure the non-x86 archs are more appreciated there than in testing/unstable.

    --

    *shrug*
  47. No, nor should it bother you by FreeUser · · Score: 4, Insightful

    A lot of people say they hate Microsoft because they say its on a mission of world domination.

    Linus has been talking about world domination for 10 years.

    [...]

    So when its microsoft, people get antsy, but when its linux or debian, world domination is ok ?

    Is that because
    1) linux+debian are "inherently" good, and microsoft is inherently bad?
    2) people are hypocritical and don't think more than about 8 inches infront of them
    3) some other reason im missing..


    1 and 3 are the correct answers.

    3: Humor is a difficult concept I know, but try to follow along. Linus has been talking about "world domination" as a joke, not as a serious agenda. Any reading of his comments, in context, should make this abundantly clear (as should the historical context in which those of us using Linux in the early days circa 1993 never expected it to have the success it has had today).

    which leads us to

    1: Microsoft really is about world domination, and has a tremendously long track record of anti-competative behavior as a convicted monopolist to drive that point home. Microsoft really is about denying people choice, and has every intention of eradicating any viable alternative to their monopoly. Linux (even an arrogant distribution like Debian) has always been about choice, and Debian's occasional arrogance aside, this script's description as a "world domination utility" is almost certainly tongue in cheeck (c.f. "humor") and not meant seriously. In other words, yes, Microsoft (as defined by their own behavior) is Evil, and Linux (as defined by the behavior of its community) is generally Good.

    And I say that as one who uses Gentoo and will never go back to Debian (ie. one who should "feel offended" if in fact I took this seriously, which I do not). It is a clever tool with a funny name based on an old, old joke, made all the funnier for having become a possibility (GNU/Linux really could "dominate" the world ... in the sense of becoming really populiar ... who would have thunk? Of course, GNU/Linux will never truly dominate anything, as dominion implies restriction of the freedom and choice of others, which is something a free, GPLed operating system can never do, by design.)

    If MS released the "Linux Upgrade Kit" that put whatever SKU of windows you wanted on the box, people would be furious.

    They have (or haven't you been following their press releases), and while people are annoyed, no one seems to be particularly "furious." The reaction is more one of "rolling our eyes." A migration kit from Linux to Windows will get about as much use as a football bat...but it is fun to watch the behomeoth flounder and flail around.

    --
    The Future of Human Evolution: Autonomy
  48. Free editions of RedHat Enterprise Linux by mackman · · Score: 3, Informative

    If we're going to be starting another distro war, I think everyone should take a look at these three projects which aim to release a free edition of RedHat Enterprise Linux. Once you've got one of these running, even if these distro go under, you can still get SRPMS security updates from RH and build them yourself through 2008.

    Tao Linux
    White Box Linux
    cAos

  49. We need a similar tool -- for Debian systems. by jsac · · Score: 2, Interesting

    What Debian really needs is a program which can back up a Debian system by noting which packages are installed and then just saving /home, /usr/local, /etc, /var, /opt and so on. It would make backups a lot more sane and sensible.

    --
    "The urge to fly from modern systems, instead of moving through them to even greater, fairer things is, I think, an indi
    1. Re:We need a similar tool -- for Debian systems. by mrroach · · Score: 2, Interesting

      You mean like "dpkg --get-selections" and "tar"?

      -Mark

  50. Re:Stupid. by Bootsy+Collins · · Score: 4, Insightful

    IMHO Debian needs to cut back on the number of supported architectures

    If you were one of the people who ran Linux on one of those "other" architectures, you wouldn't feel this way. There are already a hundred gazillion distributions that focus on just a few architectures, and very few that try to be platform-agnostic. Why, exactly, do we need to take one of the very few latter, and convert it to yet another one of the former?

  51. Re:Stupid. by mabhatter654 · · Score: 2, Insightful
    True they are a bit picky about what THEY support, but the fact is that Debian is the closest thing there is to a "standard" linux. Especially now that Red Hat is discontiuning consumer versions. So even if they won't host your favorite project you can still use the Debian system to package and distribute your stuff...and because debian has such a slow rate of change over, you've got a pretty good chance of things not gettting broken without warning.

    In a lot of ways simply using debian is easier than not. It seems to be the only one immune to some of the political/software changes that break usability of other distros. That's why many new "distros" like Knoppix simply use Debian as the base of their systems. The fact that they toe a hardline and are a bit slow makes them stable and predictible...which is what you really need in OS software!

  52. Re:Hosed? by pdbaby · · Score: 3, Funny
    I can see, sir, that you have no programming or customer relations experience; allow me to present to you the two basic concepts in the field:

    • Users
    • Idiots


    --
    Global symbol "$deity" requires explicit package name at line 2. - If only $scripture started "use strict;"
  53. That's great to install Debian by ycochard · · Score: 2, Funny

    It is now easy to install a Debian :
    1. install Mandrake
    2. run this script

    Et voila !

  54. Troll spanking time. by Balinares · · Score: 2, Informative

    > Ever run win2k3? No? Because win9x sucked so hard? double standards are fun.

    Exactly what in my post makes you assume I've never run the later Windows, and that I don't judge it based on the exact same standards I apply to Debian and whatever other distro I happen to be running right now?

    As it happens, as far as closeness to the ideal "it should Just Work, the way *I* want it to" goes, even the latest Windows are behind on both counts -- partly because its idiosyncrasies are often hard to solve, when they're end-user solvable at all, while that of my current chosen Linux distro are not for whomever knows what they're doing, which I like to believe I do. Thus making that distro much closer to the "Just Works" ideal for me than Windows.

    Some of us DO check out competing offers and then decide purely on which is the best tool, which doesn't have to be the one your biases (or paycheck) drags you to. Cope.

    --

    -- B.
    This sig does in fact not have the property it claims not to have.
  55. Stable is for Servers, Testing for workstations by Bob_Robertson · · Score: 4, Insightful

    ...and Unstable for those of us who live on the bleeding edge. Seriously, living on the edge is not fun. When the maintainers decide to change the wireless LAN software so that my 802.11 card is no longer eth1 but now wlan0, I need to be able to reconfigure quickly so that my laptop isn't unusable for an extended period.

    That's why it's called unstable, because it really is. Things change, sometimes substantially.

    Every objection you have is valid, with the caviat that Debian is not difficult for someone who has done it more than once. Installing Debian doesn't take me multiple hours or days, it takes little for the base install and the pre-designed task-based "standard" packages. Just because I choose to select packages through dselect one at a time doesn't mean you have to.

    Knoppix is indeed astounding, and the hardware detection system Knopper uses is being fed back into the main distribution. When I installed on the laptop I'm using right now, a Vaio PCG-GRT170, I used Knoppix as the install medium.

    I would not recomend this method unless Knoppix does everything you want it to do already, or you like installing software by hand. The dependencies and unique packages built into Knoppix make bringing it into the mainstream Debian update system a serious effort.

    If you want to install Debian, get the minimalist 30MB CD image. This puts a small base system in place to be built into whatever you want it to be.

    Bob-

    --
    The Ludwig von Mises Institute. The reasoning individuals economics
  56. Nothing really new.. by fforw · · Score: 2, Informative
    There's already a way to do what this tool is supposed to do without much hassle:

    Chapter 3.7 of the Debian Install HOWTO describes a cross install method for debian which works quite well.

    I used it when I needed to install debian on a computer with new adaptec scsi controller which was only supported in 2.4.22+ :
    • boot Knoppix
    • Follow Cross Install Instructions
    • Ready.
    Ok, it's not One-click-cross-install (tm).
    But if you need such a tool, why are you installing debian? You'd better use Fedora, Mandrake or Suse in this case.
    --
    while (!asleep()) sheep++
  57. ld-linux.so by jpmorgan · · Score: 2, Insightful
    -x is somewhat irrelevent if you can read the file.

    Try this sometime:

    $ /lib/ld-linux.so.2 <i>/path/to/program</i>
  58. Excellent! by Trejkaz · · Score: 2, Interesting

    Now we can convert our bleeding-edge Gentoo distribution, into a Debian distribution with packages over two years old! Yay!

    --
    Karma: It's all a bunch of tree-huggin' hippy crap!