Florian Weimer News Today

Not only is Canonical exploring Ubuntu x86-64-v3 builds for targeting Intel and AMD processors with AVX/AVX2 support, but Red Hat has publicly confirmed now they are exploring a possible x86-64-v3 requirement for next year's Red Hat Enterprise Linux 10.

The recently announced container-confinement breakout for containers started with runc is interesting from a few different perspectives. For one, it affects more than just runc-based containers as privileged LXC-based containers (and likely others) are also affected, though the LXC-based variety are harder to compromise than the runc ones. But it also, once again, shows that privileged containers are difficult—perhaps impossible—to create in a secure manner. Beyond that, it exploits some Li...

It is rare to see an extensive and unhappy discussion over the selection of compiler options used to build a distribution, but it does happen. A case in point is the debate over whether Fedora should be built with frame pointers or not. It comes down to a tradeoff between a performance loss on current systems and hopes for gains that exceed that loss in the future — and some disagreements over how these decisions should be made within the Fedora community.

Empowering everyone to build reliable and efficient software.