** Official Ubuntu Thread **

[opethdisciple]

Thunderbird is being moved over to snap and they plan on releasing an all snap desktop in a few months built around Ubuntu Core.

I dont like how some apps are shunning snaps in favour of flatpak.

The community needs to just decide on one and make it the best it can be.

Looks like Flatpak is gonna be the winner though due to security.

 

[Throrik]

I dont like how some apps are shunning snaps in favour of flatpak.

The community needs to just decide on one and make it the best it can be.

Unfortunately, it's nothing to do with the community, the vocal community is against snaps, however Canonical are being Canonical, just as they did with Mir/Unity and pushing ahead, and then no doubt in a few years they'll give up and deprecate them. It's super frustrating from a user perspective, but this is part of FOSS unfortunately.

 

[Ice Tea]

Security Experts Warn of “Snap Trap” Exploit in Ubuntu

Researchers at Aqua Security say they've identified a security flaw in the way Ubuntu's "command not found" feature works, which attackers could exploit

www.omgubuntu.co.uk

Flaws being found in Snap again.

 

[pete910]

Really can't see the point of any of them to be frank. Just go to your package manager and install what you need/want.

 

[Ice Tea]

First Look at Ubuntu’s New ‘Desktop Security Center’

Ubuntu is working on a new Desktop Security Center that aims to make it easier for users to access some of the distro's underlying security features. An

www.omgubuntu.co.uk

Really can't see the point of any of them to be frank. Just go to your package manager and install what you need/want.

Your average Ubuntu user doesn't understand the necessary hooks and apt pinning to override the snap/snap core on installs and canonical is pushing snaps as a enhanced security feature rather than its flaws.

 

[Ice Tea]

Canonical's Snap store found to be distributing malware

Canonical, the software company behind Ubuntu, came under scrutiny this week with regards to its Snap software repository and the processes by which software authors can publish packages in their curated store. One of the reasons Linux distributions tend to provide central software repositories is to provide users with software which has been tested and verified as safe to use in some fashion. This past week Alan Pope reported a Snap package claiming to be a Bitcoin wallet called Exodus was downloaded from Canonical's Snap repository and used to steal digital coins from its user. An examination of the malicious package revealed it was a low effort piece of malware which should have been caught if Canonical had any vetting processes in place. Pope's overview of the malicious package reveals the details:

"I wanted to take a look at the application itself. So on my workstation, in a separate virtual machine, I ran 'snap download exodus' to download, but not install the application. I don't have any cryptocurrency wallets on my system, but I didn't know what the application might try to do, so for safety I didn't run it directly on my computer. A snap is just a squashfs file, typically containing an application, libraries, assets and metadata. I unpacked the snap with unsquashfs and briefly poked around at the resulting files. Notably much of the metadata in the snap.yaml file was still the developer defaults such as 'Single-line elevator pitch for your amazing snap'. Further investigation revealed this was an application developed using Flutter. The application binary was quite small, and there weren't a lot of bundled libraries beyond the essentials, potentially indicating limited features." The offending application has since been quarantined to prevent it from spreading.

Sigh, never ends!

Alan Pope was never happy about snaps and took a step back from being a lead developer at the time and has now posted this on the dev forum that he no longer wants to run the UK section either.

I’m keen to find a new leader for the UK LoCo.
I sadly no longer have the energy or enthusiasm to continue working on this.

 

[Ice Tea]

There's talk by the Devs on removing the default games from ubuntu as it no longer fits with the default gnome suite?

 

[Cromulent]

Ubuntu was the first distro I ever used but after playing around with a few others I switched for reasons similar to this. So my absolute favourite distro is OpenSUSE Tumbleweed and if that is not available for some reason then I go with Fedora.

I was just playing around on the Oracle Cloud and it seems that they push Oracle Linux (no surprise) and Ubuntu. I think you can run your own distro but they it make it more difficult than AWS.

 

[Ice Tea]

openSUSE Tumbleweed Is Finding Success Moving From GRUB To systemd-boot - Phoronix

www.phoronix.com

my absolute favourite distro is OpenSUSE Tumbleweed and if that is not available for some reason then I go with Fedora.

To think there was a time when people would have had an absolute breakdown at the idea of systemd having full control of boot.

 

[Ice Tea]

Ubuntu 24.04 LTS (codenamed ‘Noble Numbat’) has been released.

Comical that they are now blocking 3rd-party deb files for security but they seem perfectly happy with bitcoin miner infected snaps.

 

[Mesai]

Ubuntu 24.04 LTS (codenamed ‘Noble Numbat’) has been released.

Comical that they are now blocking 3rd-party deb files for security but they seem perfectly happy with bitcoin miner infected snaps.

The Snap double down is so weird. Linux desktop suffers in the app space so why not all work towards a single solution to encourage developers to release their apps on Linux.