WebProNews

Tag: openSUSE

  • Linux Distro Reviews: openSUSE Tumbleweed — Part 2

    Linux Distro Reviews: openSUSE Tumbleweed — Part 2

    openSUSE Tumbleweed is a rolling release Linux distro, one that is something of a two-edged sword in terms of its features and usability.

    In Part 1 of this review, we looked at openSUSE’s background, its openQA-provided stability, outstanding installer, choice of desktop environments, and its security. All of these are significant advantages of the distro. Unfortunately, security is also where openSUSE’s disadvantages begin to shine through.

    Disclaimer: Some will say the following points are too critical of openSUSE since it’s a more technical distro and not necessarily aimed at desktop users. Nonetheless, openSUSE’s own website says it is: “The makers’ choice for sysadmins, developers and desktop users.” Therefore, my final rating will reflect the distro’s ability to meet the needs of all three of those categories.

    Too Much Security?

    Security is only a good thing if it’s not so restrictive that people begin disabling features for the sake of convenience, and this is where openSUSE’s disadvantages begin to shine through.

    Of all the distros that I have tried to date (Fedora, Manjaro, openSUSE, KDE Neon, Pop!_OS, Kubuntu, and Zorin OS), openSUSE’s security policies are by far the most restrictive. Want to adjust your network settings? You’ll need to enter your password. Want to install a Flatpak app? You’ll need to enter your password. Change your timezone? Enter your password.

    What’s more, the default firewall settings are so strict that printer discovery doesn’t work out of the box. To be clear, every single other distro I’ve tried automatically discovers my HP printer on my network and lets me print without installing any additional drivers.

    In contrast, openSUSE cannot even discover the printer without changing the firewall profile from the default ‘Public’ to ‘Home,’ or adding the mDNS service to the ‘Public’ profile. Even when making sure mDNS is enabled, openSUSE still requires “hplip” software/driver package installed.

    Is it possible to overcome these issues? Yes. But many people, especially less technical users, give up before figuring out how to jump through all these hoops. In fact, a quick look at openSUSE’s Reddit will reveal that two common solutions to printing on openSUSE are a) disable the firewall altogether or b) “don’t print on openSUSE.” Seriously…I have seen that advice multiple times…”don’t print on openSUSE.”

    The issues with printing on openSUSE are irritating enough that Linux creator Linus Torvalds famously dumped openSUSE and switched to Fedora because printing was just too hard to bother with. Fans of the distro will point out that it has gotten better since that day…but it’s still not good enough for the average desktop user.

    Yast

    Yast stands for Yet Another Setup Tool and is one of the defining characteristics of openSUSE. The tool is a throwback to the earlier days of Linux when such setup and configuration tools were more common.

    There’s no denying that Yast is a powerful tool, one that is available as both a graphical and command-line package. For system admins, Yast provides a powerful way to administer openSUSE instances. There is almost nothing you can configure via the terminal that can’t be configured via Yast’s GUI, and it’s a tool I miss on other distros.

    At the same time, however, like openSUSE’s other hallmark features, Yast is something of a two-edged sword. While it’s undeniably useful — and this is purely subjective — I’m not a fan of how it takes over functions normally handled by a distro’s built-in tools. For example, I run the KDE Plasma desktop, which has excellent built-in tools for printing and firewall management. Yast takes these tasks over, however. Gnome has similarly useful tools as part of the system settings.

    As I said, I realize this is very subjective. Some users prefer to have one tool to manage such tasks, regardless of the desktop environment they use. Many users prefer to have one desktop-agnostic tool that never changes. I am not one of those users. I would prefer to use Plasma’s tools when they’re available and fall back to Yast when they’re not.

    Btrfs and Snapper

    One of openSUSE’s greatest features is its use of the btrfs filesystem and built-in Snapper support. Btrfs is a relatively new filesystem that provides automated system snapshots. This gives users the option to rollback to a previous snapshot from the boot menu in the event something goes wrong.

    Tinkering with your system and mess something up? Not a problem, just rollback and it never happened. The same goes for an update that borks something. Just rollback and wait for the issue to be addressed. This is truly a must-have setup for a rolling release distro.

    There are two downsides to keep in mind with btrfs (there’s that two-edged sword again):

    Btrfs is one of the slower filesystems in use by Linux distros. The excellent DJ Ware, on YouTube, has done extensive benchmarks showing how much slower the filesystem is. While I’ve not done such extensive benchmarks myself, I do have an everyday data point.

    When setting up the digiKam photo organizing software for the first time, the app scans your Pictures folder. On any distro using the older ext4 filesystem, it takes digikam anywhere from 4:57 to 5:17 to scan my 49GB of photos. In contrast, digiKam on openSUSE takes more than 7:50 to complete. This result, which I have been able to consistently reproduce, jives with DJ Ware’s benchmarks.

    The other potential downside is in regard to data integrity. Given that it’s still a young filesystem, there are still an uncomfortable number of reports about btrfs filesystems becoming hopelessly corrupted. Without a doubt, openSUSE has the most mature implementation of btrfs, but your mileage may vary.

    Patterns and Recommendations

    One of the things that makes openSUSE so successful at providing stability with a rolling release is its use of Patterns and recommendations.

    Patterns are collections of software that are related and share dependencies. For example, there’s a KDE Plasma Pattern, KDE Apps Pattern, Office Suite Pattern, Mobile Pattern, and more.

    The power of patterns is that it allows openSUSE developers to update an entire collection of software rather than try to determine what is or is not installed on a machine. Similarly, openSUSE defaults to installing any and all recommended dependencies when installing an application, unlike almost every other distro, in the interest of making sure no app is installed with any missing features.

    On paper, both of these seem like good ideas, and, to be clear, they are…to a point. Both of these features contribute greatly to openSUSE Tumbleweed being one of the most stable rolling-release distros.

    Unfortunately, Patterns and recommendations also result in some unfortunate side effects. For example, if you delete an application that is included in one of the default Patterns, it will be reinstalled on the next update. You will need to manually block the package, or the entire Pattern, in order to prevent its reinstallation.

    Random Papercuts

    Slack Issues

    In addition to the major things highlighted above, openSUSE running KDE has a bug that makes it almost impossible to add the workspaces I’m subscribed to. I can easily add three of them with no problem, but the fourth one always fails.

    The only way I can get it added to the Slack client is to try importing that workspace along with three or four defunct workspaces. After trying this one or three dozen times, the troublesome workspace will finally get imported. From what I’ve been able to tell via research, the workspace string that gets passed from browser to Slack clients gets mangled.

    At one point, I thought this was a KDE Plasma bug since it doesn’t happen on Gnome or Xfce. However, this only happens on openSUSE. It doesn’t happen on Manjaro KDE, Kubuntu, or KDE Neon. I have no idea what the problem is but, at least in my experience, it is a uniquely openSUSE issue.

    Network Login

    On multiple installs of openSUSE, I’ve had issues where I was constantly prompted to enter my root password and network password in order to stay connected. Wake the computer from sleep…enter my passwords. Needless to say, this got old quick.

    Conclusion

    openSUSE Tumbleweed is one of the most well-engineered distros on the market and offers a tremendous amount of features and abilities. Unfortunately, some of those features are a two-edged sword that cause as many problems as they solve.

    openSUSE Tumbleweed is a distro I love to play with and would love to use as my daily driver. Unfortunately, the inconveniences quickly wears on my nerves in daily use, and I end up moving on.

    That being said, for the right person, openSUSE is hands-down the best distro available.

    Rating

    For System Admins: 5 out of 5 stars

    The combination of Yast and its enterprise connections makes openSUSE quite possibly the best distro for system admins.

    For Developers: 4 out of 5 stars

    On the one hand, having the latest and greatest packages can be a big help to developers. On the other hand, the papercuts and irritations may take unnecessary time away from development.

    For Desktop Users: 3 out of 5 stars

    Before writing about tech, I was a software developer for over a decade. I’ve created software for major universities, companies, and the commercial market. In spite of that high-tech background, openSUSE was just too irritating and difficult for me to use on a daily basis, and I would never recommend it to most everyday users. It would have to be a special breed of desktop user, one that wants to spend as much time managing their computer as using it before I could recommend it to them.

  • Linux Distro Reviews: openSUSE Tumbleweed — Part 1

    Linux Distro Reviews: openSUSE Tumbleweed — Part 1

    openSUSE Tumbleweed is a rolling release Linux distro, one that is something of a two-edged sword in terms of its features and usability.

    openSUSE Tumbleweed is a well-engineered Linux distro and is often brought up as an alternative to Arch, the best-known rolling distro.

    For the uninitiated, a rolling release distro is one that has no major or minor versions but is updated constantly as new packages become available. For example, Ubuntu is currently on version 22.10, with 23.04 right around the corner. Similarly, Fedora is on version 37, with 38 soon to be released. In contrast, a rolling release updates packages as they become available, eliminating the need to do a major upgrade or reinstall every couple of years.

    Given how complicated a product openSUSE Tumbleweed is, this review will be broken into two parts. In this first part, we’ll provide an overview of some of openSUSE Tumbleweed’s hallmark features.

    Background

    openSUSE Tumbleweed is the upstream distro for SUSE Enterprise Linux (SLE), much like Fedora is upstream to Red Hat Enterprise Linux. This means that Tumbleweed essentially serves as a testing ground for what will eventually become SLE.

    In contrast, openSUSE Leap is a point-release distro that is functionally identical to SLE, just without the paid support.

    microOS, on the other hand, is openSUSE’s equivalent of Fedora Silverblue, an immutable distro where the root file system is protected from tampering.

    ‘Rolling Done Right,’ Thanks to openQA

    One of the most common things said about Tumbleweed is that it’s “rolling done right.” Much of this is the result of openSUSE’s reliance on openQA, an automated quality control tool that runs packages and updates through their paces before pushing them out to users.

    openQA allows openSUSE to accomplish one of the most reliable and rock-solid rolling releases with a much smaller team than some other distros have.

    Despite the extra QA that goes into Tumbleweed, the distro still manages to roll at an impressive pace. In fact, it usually runs neck-and-neck with Arch. On any given day, Tumbleweed may get a package first, Arch may get it first, or they may get it at the same time.

    However, the big difference between Tumbleweed and Arch is that the former generally manages to avoid some of the bigger issues that Arch users sometimes face.

    Installer

    openSuse Installer Time Zone – Credit The Linux Cast

    The openSUSE installer is often maligned for being overly complicated, but that is an extremely unfair assessment. Calamares is the installer that most distros use and compared to it, openSUSE’s installer is a lot more complex.

    It’s important to note, however, that complex doesn’t equal bad. The openSUSE installer is certainly more complex than Calamares, but it offers a level of control that is unrivaled by virtually any other graphical installer on any platform.

    The installer gives you the option of choosing your partitioning scheme, setting up your network, and choosing the individual packages you want installed.

    Desktop Environments

    While some distributions focus on a single desktop environment (DE), openSUSE has options to install KDE, Gnome, and Xfce. With a little effort, users can install almost any other DE.

    openSUSE Installer DEs – Credit The Linux Cast

    What makes openSUSE unique when it comes to DEs is that no single DE ever feels like a second-class citizen. In fact, thanks to the quality of openSUSE and its openQA, every DE is rock-solid and feels like it’s the only DE on the distro.

    It should be noted, however, that contrary to popular opinion, KDE is not the default desktop environment. While that certainly may have been the case at one time, when Novell bought openSUSE, the focus for SLE shifted to Gnome, according to Richard Brown, Linux Distribution Engineer at SUSE. Therefore, it can be argued that openSUSE Tumbleweed does not have a default desktop, treating Gnome, KDE, and Xfce equally. If there was such a thing as a default, it would actually be Gnome, not KDE.

    Security

    Another area where openSUSE shines is in the area of security. Tumbleweed is built with a number of hardening options enabled that are not usually enabled. This results in one of the most secure Linux distros available.

    In fact, using the Lynis security auditing tool — where 70 is considered a passing score — Tumbleweed routinely scores in the upper 80s. In contrast, the next best score I’ve gotten out of the-box is Fedora, which only comes in right at 70.

    In Part 2 of this review, we’ll look at openSUSE Patterns, Yast, and how everything comes together.

  • openSUSE Begins Enforcing Secure Boot Kernel Lockdown

    openSUSE Begins Enforcing Secure Boot Kernel Lockdown

    Linux distro openSUSE has begun enforcing Kernel Lockdown when Secure Boot is enabled, creating issues for many users.

    Kernel Lockdown was introduced in version 5.4 of the Linux kernel and is designed to help protect the kernel from tampering and unauthorized modification, and serves as an important security feature. It works together with Secure Boot, which is a system to ensure the bootloader process is running legitimate, trusted code signed by Microsoft-controlled master keys.

    While openSUSE has long supported Secure Boot, it did not have Kernel Lockdown enabled for its Tumbleweed distro. Because Tumbleweed is a rolling distro, where updates are pushed out as they become available instead of waiting for a point release, leaving Kernel Lockdown disabled made it easier for users to deal with unsigned kernel modules and drivers, such as Nvidia drivers.

    Evidently, according to a Reddit thread that also links to an openSUSE mailing list, Microsoft evidently refused to continue signing openSUSE’s bootload shim unless Kernel Lockdown was enabled. As a result, beginning with kernel 6.2.1, openSUSE Tumbleweed will enable Kernel Lockdown whenever Secure Boot is also enabled.

    Microsoft’s reasons for insisting on Kernel Lockdown being enabled are easy to understand. Without it, Secure Boot is essentially useless, giving anyone who had it enabled a false sense of security.

    At the same time, users that rely on Nvidia drivers on the fast-moving Tumbleweed now have a choice to make: either disable Secure Boot or manually sign those modules so that the kernel can load them.

    Even for users without Nvidia cards, hibernation is another casualty of the change, and no longer works on systems with Secure Boot enabled, although there is ongoing discussion about how to re-enable it with Secure Boot.

    Contrary to many opinions, while Microsoft does serve as the central signing authority, Secure Boot is not a Microsoft attempt to control people’s hardware, as evidenced by the fact that users can sign their own modules. openSUSE provides instructions on how to do so in the following link:

    https://en.opensuse.org/SDB:NVIDIA_drivers#Secureboot

  • Fedora and openSUSE Disable GPU-Accelerated Video Over Patent Concerns

    Fedora and openSUSE Disable GPU-Accelerated Video Over Patent Concerns

    Fedora and openSUSE have taken a step backward in usability, disabling GPU-accelerated decoding for H.264, H.265, and VC1 codecs.

    Video codecs often rely on the GPU for encoding and decoding, as it is faster and less resource-intensive than relying on the CPU. After Red Hat’s lawyers raised concerns about the drivers, and associated patents, for the Mesa VA-API, specific to AMD GPUs. In response, Red Hat opted to drop support for the video acceleration feature, impacting H.264, H.265, and VC1 codecs, some of the most common video codecs.

    In short order, openSUSE followed suit, announcing VA-API would be disabled in that distro moving forward.

    Both distributions seemed to indicate they would disable the driver not only for upcoming builds but also retroactively for any build that had the feature enabled.

    Fortunately, Red Hat developers are already hard at work bundling Mesa libraries supporting VA-API for the RPM Fusion repository. Since Red Hat has a strict FOSS-only policy about what it bundles with its distribution, RPM Fusion is a community repo that contains many of the non-FOSS software, codecs, and drivers that are not shipped with Fedora.

    On the openSUSE side of things, nothing has been officially stated regarding a solution, although one is sure to be forthcoming.

    In both cases, the distros shipped VA-API support by mistake, without realizing the legal implications.

    To be clear, computers running Fedora and openSUSE will still be able to view videos encoded with H.264/H.265/VC1. However, the videos will be decoded by the CPU, which could lead to lower battery life on laptops. Desktop users will, obviously, not be impacted nearly as much.

    In the meantime, Ubuntu appears to be immune to the issue since it is based in the UK, with no offices in the US, unlike Red Hat, which is a US company. While SUSE is based in Germany, it still has offices in the US, making it subject to US patent law.

  • Microsoft Edge for Linux Getting Sign-In and Sync Support

    Microsoft Edge for Linux Getting Sign-In and Sync Support

    Microsoft is adding sign-in and sync support to the Linux version of its Edge web browser.

    Microsoft Edge is the company’s web browser that replaced its long-lived Internet Explorer. While Edge was originally powered by Microsoft’s own rendering engine, the company transitioned it to Chromium, the open source rendering engine that powers Google’s Chrome. Unlike Internet Explorer, Edge is available for several of the most popular Linux distributions, including Ubuntu, Fedora, Debian and openSUSE.

    In a post on the company’s Dev channel, Microsoft’s Josh Bodner announced that sign-in and sync are available in dev build 91.0.831.1.

    We’re also starting to roll out sign-in and sync for Linux users! Please note that this is only supported for personal Microsoft Accounts at the moment, and you may need to enable a flag in order to see this setting.

    The company does warn that there may be issues, given this is still a development feature.

    Users interested in more information can read the full release notes here.