* Select - Middle-click paste does not seem to work
* When something requires a password (ie just tried a bitlocker volume) the whole screen is blocked, so no password manager for you (unless you copy it before, or cancel - unplug drive-copy password - replug drive - paste.)
* The default tiling does not jive with me, sometimes I don't even know what it wants (it always tries to force you to also set a left windows if you tile right and vice versa) so I disabled it `gnome-extensions disable tiling-assistant@ubuntu.com`. Default Gnome tiling is ok (but missing quarter tiling (and 1/8th would be nice on my ultra-wide) imho so I use [0]
* I've been trying to use Nix home-manager for packages but I have GPU errors, need workarounds, icons that just remain generic. But I guess that is not Ubuntu's fault.
Ubuntu remains my nr. 2 choice, after NixOS (but I didn't get the latter to install on this Nuc, perhaps a bios update will help).
The installer offered (under experimental) to run root on zfs, I didn't end up selecting it because only on the forth try (and by that time you're clicking at a fast rate just taking defaults) I understood that it would only download packages via wifi, not the cable (same for NixOS installer, so must be my network).
I find it hilarious how much religion is put into Gnome vs. KDE in this case. I did use both. I honestly have no strong favourite. After that many years of Linux desktop environment DE hopping I came to the conslusion that the DE should get out of your way and allow you to focus on your work.
Both Gnome and KDE support that. Actually Gnome a tad better as it gives you less knobs to turn an waste your time. Accept the defaults and if defaults are bad move somewhere else.
I pick the software best for my uses and then look at which desktop supports that software and workflows around them the best.
Not always clear/clean selections possible in my situation - I've a jumble of GUI designs and frameworks used, so I favour a more agnostic desktop.
Preferences don't form in a vacuum though. There's a perception that GNOME is the "good environment" which means its decisions get treated as more important than other DEs' when things change: and that's somewhat self-reinforcing.
Distro: "The most used DE needs first class support, we should probably bend to it" → Distro: "We should probably make this DE the default since it's so widely used and supported" → User: "I choose the default" → Distro: "The most used DE…"
So yes, people have different preferences; but if your preference is GNOME today, it might not be GNOME tomorrow, and "I picked the default" isn't quite the neutral signal it looks like.
Since GNOME is the default Ubuntu DE, they have a certain responsibily to listen to the users/devs and leave the system open (to an extent). But their direction is the opposite:
They've been doing massive reduction in functionalities, really insane like limiting copy/past of terminals just to the current screen (which hurts any sysadmin), generally without any way to enable them back.
I haven't heard of any other OSS organization trying so hard to limit freedom of their users/devs, and this is an explicit goal - they don't want to weaken their brand.
GNOME is nothing short of the Oracle of open source.
I fundamentally agree with you. I don't think responsibility is quite the right word. But if they don't seem to care about a massive portion of their users, why are they building gnome at all?
I think power users are not the main target of Ubuntu.
I have put my parents on Ubuntu (gnome) in 2013 to replace windows XP. My mother is 88 now. I think it is the perfect fit for her (dad is dead years ago).
I use ubuntu gnome because tweaking my computer is not where I want to spend my time. YOLO. Using a "mainstream" desktop that can be explained to "non specialist" has its benefits. I accept to suffer some annoyances and there is always a way to fix the most annoying ones by sacrificing time.
>I think power users are not the main target of Ubuntu.
Then who is? Normies buy iPads and casuals stay on Windows. Is this why Linux can't gain any market share?
It is a preference - and not everyones. I always hated middle click paste, middle click is amongst the first thing I remap on my systems to do the macOS "exposé"-style of window rearrangements. Other people will have other preferences.
I suppose you use Super+Middle Click? Not a bad idea, I dislike hot corners, and the "exposé" feature of niri is quite good. I might actually remap it to Super+Middle Click.
(I use Super+side mouse buttons to move between workspaces, I hate the keyboard-centric workflow when one hand is always on the mouse)
THANX! I don't know how people live on platforms that don't have this :)
As for the negative Gnome feedback (not from you but others) I do like Gnome, it's just enough window manager for me, I like the defaults and I like the touchpad gestures etc. Generally looks and works well for all I do. I always feel swamped by KDE.
Neither Windows nor macOS have it, so it's surprising to new users. If your target market (as in support contracts) is EU public servants, it's sort of understandable.
To you it is, plenty of people -including myself- don’t find it so. And considering the ratio of MacOS+Windows desktop users to those of ‘nix (an increasing number of which are new converts), middle clickers are a minority here.
But hey! At least they are only flipping defaults, not removing the feature outright, like they did type-ahead search. [Insert angry rant here]
I agree with the point about this being configurable.
About your first point, however, keep in mind that "middle click insert" has been the default behavior in X since the 1980s, long before Windows or current generation MacOS's were around. To me, this is such a basic functionality, I would compare it something as fundamental as CTRL-X/C/V for cut/copy/paste on Windows.
That is gnome's standard play: move a feature to a preference (“you can just turn it back on”), remove the preference from the control panel (“you can still turn it back on using ‹whatever conf backend they're using this year›”), and then finally remove the feature (“you could only turn it on by using an unsupported mechanism, and ‹conf backend they used last year› is deprecated anyway”).
As a trackpoint user, I am glad it's off by default.
Because of scrolling on Thinkpad keyboards (using the middle click), I had to turn that feature of every time, especially while working on longer documents I would otherwise accidentally paste stuff at random places.
I was never a fan of it. I always turned it off. And now it also freed up middle click for auto scrolling which is actually great, especially when the scrollwheel is somewhat broken.
As someone that habitually highlights what they are reading it was generally beyond useless for me. It was actively making me mad when I accidenatally pasted some non-sense because I just highlighted a paragraph before and accidentally inserted it into something.
> only made because the same feature does not exist in MacOS.
Or in anything that's not X?
Speaking personally for me only, I don't think it's a great thing. The <however many> clipboards on Linux is... not really a great thing. I for one never know which of the buffers contain what. And this is compounded by the fact that selection may or may not overwrite what's in one of the buffers, and middle click may or may not paste whatever was in that buffer. Additionally compounded by how inconsistent the behavior is across apps.
I, for one, use the different clipboards concurrently all the time, with "highlight & middle-click" probably being the one I use most often. It's the most convenient for me most of the time:
- only two interactions (one drag & one click)
- completely mouse-based (no keyboard interaction necessary)
I've been using the Kubuntu 26.04 prereleases for a few weeks. No surprises from KDE, but Wayland has broken a few things. Autotype in Keepass does not work, keynav and even the Wayland keynav forks don't work, and Wayland does not support priority keyboard layouts for switching between two specific layouts.
“battle tested for decades” just lost a lot of its value with Mythos and the likes unfortunately. Rewriting in a different language became much faster with Coding agents at the same time.
I do agree that the second system effect is real, it’s just that the balance of benefits and drawbacks significantly shifted when it comes to “rewrite in Rust” (not limited to Rust though).
https://www.cve.org/CVERecord?id=CVE-2026-35341 - `mkfifo` accidentally resets the permissions of files that already exist, so if you manage to do `sudo mkfifo /etc/shadow` then it becomes world readable.
Tbh I doubt if any of these would ever result in a real hack, unless your system is doing really mental things like running shell scripts with untrusted input.
I could only find a couple of CVEs that looked actually serious for GNU Coreutils too though. IMO if you're using these tools with untrusted input your system is janky enough that there are going to be serious flaws in it anyway. Probably though quoting mistakes.
Well the TOCTOU issues do not require you to run untrusted scripts to be exploited. Another user on your system can use a legitimate command that you may run to make changes to files they shouldn’t be able to, or further escalate privileges.
Ubuntu 26 + KDE Plasma 6.6 perfectly handles high-DPI scaling for me. I was originally planning to buy a Mac, but luckily I saw the news about Ubuntu 26 being released a few days ago.
I've just moved to a Mac for the first time, after using Windows for work for decades and Linux as my primary desktop for about 3 or 4 years. It certainly takes some getting use to:
- Keyboard shortcuts are all different
- Doesn't seem to like my Microsoft ergonomic keyboard (lots of keys do nothing)
- I really hate the dock
- Limited customisation on the menu bar
- I also hate the universal menu thing / menu bar in general ... I run a really wide monitor and having to go all the way to the left hand side to access the menu when working on an app that is on the far right is crazy
- Fonts look fat or washed out
I am sure a lot of this is fixable and will jsut take time to get used to, but honestly, at this point, I think I prefer ubuntu/linux to both Mac & Windows at this point.
I do love the hardware on the Mac and would probably try Asahi out if it wasn't a work machine.
Also worth pointing out that macOS is still better than Windows 11 at this point - MS should be ashamed at what they did to that OS.
3. I have the dock on the left hand side, not bottom and I have a 2 monitor (iMac 5K 27"+ Dell 4K 27") setup with the iMac flat in front of me and the curve/2nd to the right. Menu bar is then close to the main windows.
6. Use Macports to add all the Linux/Unix utilities, works with MacOS properly (eg Python/Java frameworks). Ports can have variants, plus you can have multiple versions installed side-by-side with `port select`. https://www.macports.org/
Not sure about fonts, on a 5K iMac they're fine and the 4K Dell works too. You need to use a resolution that fits with Mac's ideas of resolution, so I've got the 5K and 4K both at 2560x1440, which is Mac's idea of 2x resolution.
Another point, if you enable Settings > Desktop & Dock > Mission Control > Displays have separate Spaces, then you get a menu bar for each display, which helps with the menubar / window being far apart.
What should I use if I like Ubuntu but not snap, just Debian? Or are there alternatives around? Seems like Ubuntu has the best hardware and driver support so just curious what's new in Linux land.
Now Debian is packaging non-free drivers in the iso images directly. I would suggest to try Debian first, if it works well for you just keep it.
If you feel the need for newer packages, try other alternatives (or Debian unstable). I’ve set down on Fedora with XFCE, it’s really stable yet packages feel new.
Dunno about the this release, but till 24.4 it was simply a matter of removing some packages then holding/masking the primary snapd one, followed by manually adding the official PPAs for Mozilla’s stuff (or just use the Flatpak).
Of course, there’s still the philosophical and long term issues with staying on a distro that’s promoting and continuosuly expanding the thing you dislike…
This is what I do, because on my work computer IT imposed Ubuntu.
I initially tried to just use snaps but firefox was crashing quite often so I had to go with adding the mozilla's repository and of course configure the fake "firefox" package that actually installs the snap to be low priority for apt.
I can't believe people like Snap when in the name of security it breaks basic things such as accessing a folder on a different mount point that the user normally can access perfectly fine.
A packaging system should not break the basic abstractions of an OS.
I’m curious about proprietary Nvidia drivers. Ubuntu normally comes with fairly outdated, if not obsolete ones, but there’s a semi-official PPA with more recent versions. How does Debian handle this?
Debian has their own nvidia driver packages (it's nvidia's drivers repackaged in a nice way that integrates with the system well). I can't say if they're "outdated" or how different they are from what ubuntu ships, but they've always worked very well for me.
Debian offers Nvidia drivers as well although they tend to be outdated. Thankfully you can use Nvidia's official .deb repos to get the latest drivers on both Debian and Ubuntu.
I have used Pop OS for years and for me it was the most smooth desktop environment I've ever used.
They have been working on a custom Desktop Environment which sadly still isn't very stable yet. Promising development, but putting me off of using Pop for a while.
I just put the new popos on my laptop and am still running the old version on my primary desktop. Agreed that Cosmic is not quite ready for prime time yet, but it is pretty impressive the state it's in for how new it is. Haven't had any show stopping bugs on the laptop, just a few small quirks.
I switched to Debian and have been happy with it. The release cycle is less frequent than Ubuntu Desktop, which means fewer disruptions, and Debian Backports make it easy to pick new versions of the important stuff. Flatpak is also available on Debian.
Linux Mint is widely praised for being basically Ubuntu without the worst Canonicalisms (such as Snap). They maintain a Debian edition in parallel to their main one, as an exit strategy in case Ubuntu ever becomes unsuitable for their base. Some people already use that as their daily driver.
Just in case you're not aware, the default desktop environment on whatever distro you pick doesn't have to be what you use. I switched to KDE Plasma when Gtk-based desktops became intolerable, and haven't looked back.
The issue is them adding it back, sometimes even on apt upgrade, or silently installing it as a dependency for certain apps without mentioning it unless you look closely. That gets tiring after a while and I gave up on Ubuntu as even after having removed snap multiple times it always returned.
I've not used Linux on the desktop for some years⁰ but as I move back this sort of thing is why I'm not considering Ubuntu². If I want to dig into settings like that to keep my preferences I might as well stick with Windows.
Yes, the control to be able to tweak the system to my liking is one of the attractions or Linux, but not when I have to in order to avoid behaviours that I don't want being reasserted.
----
[0] heading back there now as Windows11 is not happening on my home machines¹, I feel that I shouldn't have let Windows10 happen, looking back.
[1] aside from the laptop that came with it that I'll keep there for Office and DayJob compatibility for a while.
[2] Currently running Debian³ on the other laptop, main desktop will likely go that way if it isn't decommissioned completely, and I use a dock with the laptops instead.
[3] As that is what I use server-side more often than not.
I was using Ubuntu and installed the apt version of Firefox as the snap version would not open html files in locations like /var/tmp and would not work with USB devices. Every time I ran `do-release-upgrade`, all of that work would need to be redone. It was very annoying.
I have a year ago switched from Ubuntu to Fedora and I like it. Clean and stable. Uses Flatpak. I'm using Fedora Workstation which is the default, but Fedora KDE Plasma seems to be nice as well if you want to have more configuration options available directly in the GUI. And the layout is more Windows like with start button menu etc for people coming from the Windows side.
I distro hopped for a while and settled on Linux mint. Uses flat packs. Hits the spot for easy to use and easy to maintain without needing to use terminal scripts to get things my way. Just my opinion.
“Urban myth” kind of suggests that it was never true, which isn't the case, though it is one of those out-dated truths that doesn't go away quickly.
At one time Ubuntu as the easiest distro to get certain hardware running with because of the inclusion of proprietary drivers & codecs (unlike its Debian parent, amongst others, at least at the time) and making them easy, near-automatic, to configure compared to others that did include them. The distinction is long gone, and Ubuntu is simply one of several (many) good ones in that regard, but the perception that others have not long since caught up persists.
I was in the same spot recently, and my friends recommend Linux Mint. It is built on top of Ubuntu LTS, and no snap. I've been using it for the past few weeks in my old desktop computer. Definitely Good. Perfect fit for your needs
This looks like it might be the best solution, no snap, maintained by an actual system integrator and laptop maker, and I also like the new Rust-based desktop environment. I wonder how well it runs on Framework laptops or MacBooks as well.
Gaming-oriented distros like CachyOS and Bazzite might be what you want. I'm on Cachy and can recommend it. Because they try to "just work" without jumping through hoops.
Even though I very much intenseley dislike the completely unintuitive idiosyncratic package management that Arch has. Which is further not helped by the fact that Cachy's default GUI for it isn't even integrated properly.
Ubuntu LTS is still the choice for many production environments and education and learning. As someone with Ubuntu from 2010 CDs, I find it refreshing that modern Ubuntu distros work OOB on most computers these days with excellent driver support.
Is this even true? I mean, Windows is the main focus for all hardware vendors, and everybody who has owned a PC knows that malfunctions are unavoidable. If that is the case for Windows, then Linux cant be better.
20 years ago your Linux installation might not include wifi drivers, bluetooth support, decent GPU drivers, fat32/ntfs drivers, or the widely used video/audio codecs of the era. And you had to be careful when shopping for things like wifi cards, as only certain chipsets could be made to work.
Much of which was kinda fair enough, because if you're a volunteer making an open source OS because of a strong belief on the open source ideal, you don't want to distribute closed-source driver blobs or patent-encumbered codecs. But it meant mean the initial installation process was not always easy. One of the things that contributed to the success of Ubuntu was a particularly easy initial setup process.
Today, things are a lot better - you'll still get unsupported hardware from time to time, but it'll be much less severe. If your laptop has a non-USB integrated camera you might have to download and install a kernel module. Your corporate laptop's built in fingerprint scanner might not work, but who cares?
When I was shopping Lenovo.com for my ThinkPad in 2018, there was a table with ThinkPads certified for Ubuntu Linux in one column, and certified for Red Hat Enterprise Linux in another column.
I chose the T580 as a RHEL-certified notebook, and it was fantastic. Lenovo.com let me configure each individual component exactly according to my needs and tastes, and it was custom-assembled and shipped from Shenzhen.
It did arrive with Windows 10 pre-installed (this was the least hassle and most popular OS option). I initially installed CentOS, but quickly realized that Fedora would be the sweet spot, and so it was a Fedora system for most of its lifetime. Near the end, I did revert to Windows 10, which also worked flawlessly.
The ThinkPad T580 literally never malfunctioned. It was still 100% working when I turned it in for recycling in 2025.
I've also run Ubuntu on my "daily driver" desktop system, which ran from 2006-2022. Yes, that's 16 years' worth of Ubuntu installs and upgrades. It was mostly a KDE Plasma (Kubuntu) system. I enjoyed every bit of that.
In 1999, I was avidly using OpenBSD on really old hardware (such as HP Apollo 425t workstations.) OpenBSD simply couldn't deal with the special graphics subsystem on those machines. I tried and tried to get something working, but there were obstacles, not only with the hardware and drivers, but also the monitor connection needed a particular type of cabling and a proprietary monitor, too.
However, OpenBSD did great for networking, security, Squid cache, proxies, all kinds of things. And even in 1999, though it was early, I ran Linux on a 386DX-40, because Linux supported the "ftape" floppy tape driver at that time, and I had some kind of QIC tape backup from Eagle that wouldn't be recognized by OpenBSD or NetBSD.
Meanwhile, in that same year, my "daily driver" desktop machine was a 486 with VLB, dual-booting Windows 98 and OpenBSD. The Windows 98 was set up with a Cygwin system and X11 server, so that I could run X11 clients on the OpenBSD machines, or the Linux machine, or whatever else was on the LAN.
After using Ubuntu for many years both on the desktop and server, recent decisions have got me thinking that Canonical has lost a lot of its community spirit. That got me switching over machines to Debian which, to me, still feels like a community project. It's a shame.
I am pragmatic about it though so I still run Ubuntu for some things but it's no longer my first recommendation.
> recent decisions have got me thinking that Canonical has lost a lot of its community spirit
The rot set in when #ubuntu on Freenode (now Libera) became rigidly enforced as on-topic discussions of Ubuntu support only.
The channel is absolutely dead now. Maybe one person will say something in any given 12-hour period and no-one replies, just page after page of joins and parts.
For now, that is. I am afraid that they will stop providing coreutils and sudo for some of the future releases (like they did with upstart) because obviously they know better what's good for the users.
Cool. I'm pretty excited for the new login manager. Maybe now KDE will be able to fit all customization options (wallpaper, lockscreen, login screen) on a single Settings page.
I know that the interim releases had issues with zfs and trying to update gave the message "Sorry, cannot upgrade this system to 25.04 right now System freezes have been observed on upgrades to 25.04 with ZFS
enabled. Please see https://wiki.ubuntu.com/PluckyPuffin/ReleaseNotes for more
information. "
The release notes don't seem to mention zfs. I hope these issues have been fixed?
The comments there note there is no official Ubuntu MATE release for the first time since Ubuntu 15 (and before 14.04 gnome2 was an option). That's a shame but probably most people who chose MATE (or gnome2) no longer chose Ubuntu due to the conflicting ideologies inherent in the two. MATE users generally don't like change for change's sake.
not sure if this confirms the impression you have there... I wasn't like this until a couple of headless VPS'es (on Arm8) got through the upgrade from 18.x -> 20.x -> 22.x and then crashed out over -> 24.x for a still unknown reason. now I'm just afraid .. or I should say reluctant ..to repeat that whole fiasco.
There were some issues with how the menu icon manager handled the new security policy defaults. This means the editor will break, and the displayed menu may be missing any item that didn't follow the naming convention syntax. Its a lot of packages to bring into compliance, for that one silly feature the devs had to put in before it was ready...
Maybe they fixed it since the rc release, but there were some rough edges in Feb... the kernel USB support cooked the thumb drive partition structure.
In 22.04 to 24.04 the kernel Nvidia GPU driver EOL abandonment began... In 26.04 people will discover most EOL hardware support prior to RTX series will be difficult to bring up.
Probably wise to wait a few weeks for the bug reports to clear out a bit. =3
Keeping the key in the same room as the padlock only protects against casual drive theft and secure disposal.
Personally I'm more worried about someone stealing the entire server or a local threat actor.
Sure, keep TPM to help with boot integrity, maybe even a factor for unlock, but things like Clevis+Tang (or Bitlock Network Unlock for our windows brethren) is essential in my opinion.
The beta installer was completely unsuccessful in setting the TPM-backed disk encryption on both a ThinkPad X1 Carbon (Intel 258V) and a ThinkPad P14s (AMD 300-something). Hopefully they ironed that part out in the release, but it seems still early for this feature (at least for my comfort level).
The constructed policy is quite strict and expects certain UEFI things to be set up correctly. For example both this https://github.com/canonical/secboot/blob/7434bac27844362ff8... and https://github.com/canonical/secboot/blob/7434bac27844362ff8... are enabled in the policy. The policy choices and various early checks, even as trivial as confirming that the TCG log content is correct after booting into installation system, are enough to rule out a lot of potentially problematic EFI deployments. Effectively making it more strict helps avoid a lot of funny issues where the firmware is clearly buggy and things would fall apart sooner or later.
In what way is TPM protecting your data if someone steals the entire server? TPM only ensures that the boot environment has not been modified. Whatever key is being used to automatically decrypt the disk would be in the clear.
Unless I'm misunderstanding your situation, I think you should look up the "Evil Maid Attack" to better understand how to mitigate risk for your threat model.
assuming there are no bugs in linux and you enable full memory encryption in BIOS, it protects you in the same way the FBI cant get into a locked iphone they physically posess
but linux is not as secure as an iphone, and linux users typically dont know how to set this up, so in practice you are right, it doesnt protect you
It's nice as always, but I have some issues.
* Select - Middle-click paste does not seem to work
* When something requires a password (ie just tried a bitlocker volume) the whole screen is blocked, so no password manager for you (unless you copy it before, or cancel - unplug drive-copy password - replug drive - paste.)
* The default tiling does not jive with me, sometimes I don't even know what it wants (it always tries to force you to also set a left windows if you tile right and vice versa) so I disabled it `gnome-extensions disable tiling-assistant@ubuntu.com`. Default Gnome tiling is ok (but missing quarter tiling (and 1/8th would be nice on my ultra-wide) imho so I use [0]
* I've been trying to use Nix home-manager for packages but I have GPU errors, need workarounds, icons that just remain generic. But I guess that is not Ubuntu's fault.
Ubuntu remains my nr. 2 choice, after NixOS (but I didn't get the latter to install on this Nuc, perhaps a bios update will help).
The installer offered (under experimental) to run root on zfs, I didn't end up selecting it because only on the forth try (and by that time you're clicking at a fast rate just taking defaults) I understood that it would only download packages via wifi, not the cable (same for NixOS installer, so must be my network).
[0] https://github.com/troyready/quarterwindows
> Select - Middle-click paste does not seem to work
Good. It shouldn't be on by default. It's surprising behavior, too easy to fat-finger, and too disruptive when it accidentally triggers.
Select middle click not working is a stupid decision from GNOME to disable in 50. You can turn it back on with the tweak tool.
Why do we still put up with GNOME?
I've spent the last 10 years off and on from Linux. Had I used something other than GNOME, I believe my experience would have been better.
I've been on KDE for the last 3-4 years and things work so well I could never imagine going back to GNOME.
I find it hilarious how much religion is put into Gnome vs. KDE in this case. I did use both. I honestly have no strong favourite. After that many years of Linux desktop environment DE hopping I came to the conslusion that the DE should get out of your way and allow you to focus on your work.
Both Gnome and KDE support that. Actually Gnome a tad better as it gives you less knobs to turn an waste your time. Accept the defaults and if defaults are bad move somewhere else.
I pick the software best for my uses and then look at which desktop supports that software and workflows around them the best. Not always clear/clean selections possible in my situation - I've a jumble of GUI designs and frameworks used, so I favour a more agnostic desktop.
> Why do we still put up with GNOME?
Because maybe not all people have the same preferences as you?
Preferences don't form in a vacuum though. There's a perception that GNOME is the "good environment" which means its decisions get treated as more important than other DEs' when things change: and that's somewhat self-reinforcing.
Distro: "The most used DE needs first class support, we should probably bend to it" → Distro: "We should probably make this DE the default since it's so widely used and supported" → User: "I choose the default" → Distro: "The most used DE…"
So yes, people have different preferences; but if your preference is GNOME today, it might not be GNOME tomorrow, and "I picked the default" isn't quite the neutral signal it looks like.
There's much more to the story. GNOME is a sort of authoritarian organization known for their antisocial behavior: https://igurublog.wordpress.com/2012/11/05/gnome-et-al-rotti... (and there's much, much more).
Since GNOME is the default Ubuntu DE, they have a certain responsibily to listen to the users/devs and leave the system open (to an extent). But their direction is the opposite:
https://web.archive.org/web/20210901171117/https://twitter.c...
They've been doing massive reduction in functionalities, really insane like limiting copy/past of terminals just to the current screen (which hurts any sysadmin), generally without any way to enable them back.
I haven't heard of any other OSS organization trying so hard to limit freedom of their users/devs, and this is an explicit goal - they don't want to weaken their brand.
GNOME is nothing short of the Oracle of open source.
A distro making your project the default doesn't give you any responsibility.
I fundamentally agree with you. I don't think responsibility is quite the right word. But if they don't seem to care about a massive portion of their users, why are they building gnome at all?
Who is "we"? I find GNOME great.
On the other hand, I'm not a fan of people disparaging free open source software that they've never contributed anything to, either money or code.
I think power users are not the main target of Ubuntu.
I have put my parents on Ubuntu (gnome) in 2013 to replace windows XP. My mother is 88 now. I think it is the perfect fit for her (dad is dead years ago).
I use ubuntu gnome because tweaking my computer is not where I want to spend my time. YOLO. Using a "mainstream" desktop that can be explained to "non specialist" has its benefits. I accept to suffer some annoyances and there is always a way to fix the most annoying ones by sacrificing time.
>I think power users are not the main target of Ubuntu. Then who is? Normies buy iPads and casuals stay on Windows. Is this why Linux can't gain any market share?
Been a long time i3 user. Usually works well if you put in the initial time. But of late been very happy with Xubuntu (xfce)
Why not both? XFCE + i3 make a great pair.
I use XFCE too, simple and doesn’t get in the way.
Because Cinnamon exists and has a delightful commitment to functional minimalism.
Glad you like yours. I like (Vanilla) Gnome + PaperWM.
But seriously why would they disabled the middle mouse copy paste buffer by default? Anyways, gnome tweaks to the rescue I guess
It is a preference - and not everyones. I always hated middle click paste, middle click is amongst the first thing I remap on my systems to do the macOS "exposé"-style of window rearrangements. Other people will have other preferences.
I suppose you use Super+Middle Click? Not a bad idea, I dislike hot corners, and the "exposé" feature of niri is quite good. I might actually remap it to Super+Middle Click.
(I use Super+side mouse buttons to move between workspaces, I hate the keyboard-centric workflow when one hand is always on the mouse)
THANX! I don't know how people live on platforms that don't have this :)
As for the negative Gnome feedback (not from you but others) I do like Gnome, it's just enough window manager for me, I like the defaults and I like the touchpad gestures etc. Generally looks and works well for all I do. I always feel swamped by KDE.
Did they publish some rationale somewhere? It’s a useful feature.
Neither Windows nor macOS have it, so it's surprising to new users. If your target market (as in support contracts) is EU public servants, it's sort of understandable.
it's surprising to new users (in a good way, i was happy when i found it) let's remove it.
Probably changed to work the same as macos. Not sure if windows does middle click paste.
> Not sure if windows does middle click paste.
It doesn't. X was the only place I know of where that was a thing.
...and it's a great thing. Turning it off is another one of those GNOME decisions that are only made because the same feature does not exist in MacOS.
To you it is, plenty of people -including myself- don’t find it so. And considering the ratio of MacOS+Windows desktop users to those of ‘nix (an increasing number of which are new converts), middle clickers are a minority here.
But hey! At least they are only flipping defaults, not removing the feature outright, like they did type-ahead search. [Insert angry rant here]
I agree with the point about this being configurable.
About your first point, however, keep in mind that "middle click insert" has been the default behavior in X since the 1980s, long before Windows or current generation MacOS's were around. To me, this is such a basic functionality, I would compare it something as fundamental as CTRL-X/C/V for cut/copy/paste on Windows.
That is gnome's standard play: move a feature to a preference (“you can just turn it back on”), remove the preference from the control panel (“you can still turn it back on using ‹whatever conf backend they're using this year›”), and then finally remove the feature (“you could only turn it on by using an unsupported mechanism, and ‹conf backend they used last year› is deprecated anyway”).
As a trackpoint user, I am glad it's off by default.
Because of scrolling on Thinkpad keyboards (using the middle click), I had to turn that feature of every time, especially while working on longer documents I would otherwise accidentally paste stuff at random places.
(It's not just macOS.)
I’ve used a thinkpad for 26 years, 18 with Ubuntu. I’ve always had middle click enabled.
I like middle click copy/paste but I really don't mind the change as long as I can still configure it with gnome-tweaks.
I was never a fan of it. I always turned it off. And now it also freed up middle click for auto scrolling which is actually great, especially when the scrollwheel is somewhat broken.
As someone that habitually highlights what they are reading it was generally beyond useless for me. It was actively making me mad when I accidenatally pasted some non-sense because I just highlighted a paragraph before and accidentally inserted it into something.
> only made because the same feature does not exist in MacOS.
Or in anything that's not X?
Speaking personally for me only, I don't think it's a great thing. The <however many> clipboards on Linux is... not really a great thing. I for one never know which of the buffers contain what. And this is compounded by the fact that selection may or may not overwrite what's in one of the buffers, and middle click may or may not paste whatever was in that buffer. Additionally compounded by how inconsistent the behavior is across apps.
Sure, de gustibus non est disputandum.
I, for one, use the different clipboards concurrently all the time, with "highlight & middle-click" probably being the one I use most often. It's the most convenient for me most of the time:
- only two interactions (one drag & one click)
- completely mouse-based (no keyboard interaction necessary)
- hence only requires one hand (look, ma!)
Jesus, do the people who work on GNOME even like Linux?
In Icaza's case I think he just always wanted to work for Microsoft. I don't know about the less famous developers though.
Well he did, in the end until he quit Microsoft (and Linux) and moved to macOS/iOS and Swift development.
icaza hasn't dev or used gnome for like decades.... and i am not sure why you assume the intent of miguel like that.
> * Select - Middle-click paste does not seem to work
They did it on purpose for some reason. If I were you I'd give Plasma a try.
Plasma, meaning KDE.
I've been using the Kubuntu 26.04 prereleases for a few weeks. No surprises from KDE, but Wayland has broken a few things. Autotype in Keepass does not work, keynav and even the Wayland keynav forks don't work, and Wayland does not support priority keyboard layouts for switching between two specific layouts.
It's called plasma now :) KDE is the association, the desktop is plasma.
I still mostly use Xorg though, I only have wayland on a tablet.
Fine print on coreutils rewrite:
https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/8...
That was a lot of CVEs
Goes to show that not all security bugs are memory related bugs
Not aimed at you but... no sh*t. The "Rewrite it in Rust" community never heard of the second-system effect.
I'd rather use something written in a crappier language that has been battle-tested for decades, personally.
“battle tested for decades” just lost a lot of its value with Mythos and the likes unfortunately. Rewriting in a different language became much faster with Coding agents at the same time.
I do agree that the second system effect is real, it’s just that the balance of benefits and drawbacks significantly shifted when it comes to “rewrite in Rust” (not limited to Rust though).
Indeed, many bugs are API usage bugs, something that no language can verify. (The API is implemented in C anyway.)
No, but some languages make designing difficult-to-misuse APIs a lot easier than others.
I wish they'd put the severity. There are 4 highs, the rest are medium or low. Here are the high ones:
https://www.cve.org/CVERecord?id=CVE-2026-35338 - `chmod --preserve-root` can be bypassed. That doesn't seem that bad tbh.
https://www.cve.org/CVERecord?id=CVE-2026-35341 - `mkfifo` accidentally resets the permissions of files that already exist, so if you manage to do `sudo mkfifo /etc/shadow` then it becomes world readable.
https://www.cve.org/CVERecord?id=CVE-2026-35352 - TOCTOU in `mkfifo` lets you do the symlink trick to get it to change permissions on an unrelated file.
https://www.cve.org/CVERecord?id=CVE-2026-35368 - You might be able to get chroot to execute arbitrary code.
Tbh I doubt if any of these would ever result in a real hack, unless your system is doing really mental things like running shell scripts with untrusted input.
I could only find a couple of CVEs that looked actually serious for GNU Coreutils too though. IMO if you're using these tools with untrusted input your system is janky enough that there are going to be serious flaws in it anyway. Probably though quoting mistakes.
Well the TOCTOU issues do not require you to run untrusted scripts to be exploited. Another user on your system can use a legitimate command that you may run to make changes to files they shouldn’t be able to, or further escalate privileges.
Not to mention sudo-rs.
I think this should be the real news.
Ubuntu 26 + KDE Plasma 6.6 perfectly handles high-DPI scaling for me. I was originally planning to buy a Mac, but luckily I saw the news about Ubuntu 26 being released a few days ago.
I've just moved to a Mac for the first time, after using Windows for work for decades and Linux as my primary desktop for about 3 or 4 years. It certainly takes some getting use to: - Keyboard shortcuts are all different - Doesn't seem to like my Microsoft ergonomic keyboard (lots of keys do nothing) - I really hate the dock - Limited customisation on the menu bar - I also hate the universal menu thing / menu bar in general ... I run a really wide monitor and having to go all the way to the left hand side to access the menu when working on an app that is on the far right is crazy - Fonts look fat or washed out
I am sure a lot of this is fixable and will jsut take time to get used to, but honestly, at this point, I think I prefer ubuntu/linux to both Mac & Windows at this point.
I do love the hardware on the Mac and would probably try Asahi out if it wasn't a work machine.
Also worth pointing out that macOS is still better than Windows 11 at this point - MS should be ashamed at what they did to that OS.
As a both old Linux and now decade user of MacOS, after I got used to no middle-click paste and no focus-follows-mouse:
1. Keyboard shortcuts are Emacs, Ctrl-A: start of line, E: end of line, K: kill selected or to end of line, Y to paste, etc. https://support.apple.com/en-au/102650#text
2. Karabiner elements (FOSS) fixes keyboard mappings outside of the Settings: https://karabiner-elements.pqrs.org/
3. I have the dock on the left hand side, not bottom and I have a 2 monitor (iMac 5K 27"+ Dell 4K 27") setup with the iMac flat in front of me and the curve/2nd to the right. Menu bar is then close to the main windows.
4. Menu bar widgets etc are fixable with thaw https://github.com/stonerl/Thaw
5. Window management via keyboard is fixable with rectangle https://rectangleapp.com/
6. Use Macports to add all the Linux/Unix utilities, works with MacOS properly (eg Python/Java frameworks). Ports can have variants, plus you can have multiple versions installed side-by-side with `port select`. https://www.macports.org/
Not sure about fonts, on a 5K iMac they're fine and the 4K Dell works too. You need to use a resolution that fits with Mac's ideas of resolution, so I've got the 5K and 4K both at 2560x1440, which is Mac's idea of 2x resolution.
Another point, if you enable Settings > Desktop & Dock > Mission Control > Displays have separate Spaces, then you get a menu bar for each display, which helps with the menubar / window being far apart.
That doesn't work with a single monitor though.
I have the dock on auto-hide with a fairly slow timer for it to pop up, as I never actually use it. May be useful to you as well
> I am sure a lot of this is fixable
It is - sucks that you have to though. For keyboard shortcuts use Karabiner Elements.
What should I use if I like Ubuntu but not snap, just Debian? Or are there alternatives around? Seems like Ubuntu has the best hardware and driver support so just curious what's new in Linux land.
Best of luck avoiding all of the system level packages that just shim a snap.
Use Fedora if you dislike snap. Canonical has made their stance clear and are hostile to users for a long time now on this matter.
Now Debian is packaging non-free drivers in the iso images directly. I would suggest to try Debian first, if it works well for you just keep it.
If you feel the need for newer packages, try other alternatives (or Debian unstable). I’ve set down on Fedora with XFCE, it’s really stable yet packages feel new.
You can de-snap Ubuntu itself.
Dunno about the this release, but till 24.4 it was simply a matter of removing some packages then holding/masking the primary snapd one, followed by manually adding the official PPAs for Mozilla’s stuff (or just use the Flatpak).
Of course, there’s still the philosophical and long term issues with staying on a distro that’s promoting and continuosuly expanding the thing you dislike…
This is what I do, because on my work computer IT imposed Ubuntu.
I initially tried to just use snaps but firefox was crashing quite often so I had to go with adding the mozilla's repository and of course configure the fake "firefox" package that actually installs the snap to be low priority for apt.
Just don't use snap. No need to throw out the baby woth the bathwater.
Easier said than done, surprise: that apt command you know and love is redirected to Snap for specific packages.
Debian would have my vote, if not for Fedora.
Problem is most things are only snap. You can get them ocherwise but not by default
I can't believe people like Snap when in the name of security it breaks basic things such as accessing a folder on a different mount point that the user normally can access perfectly fine.
A packaging system should not break the basic abstractions of an OS.
Debian is great, and is where the distro development actually happens. What doesn't it do that you want?
I’m curious about proprietary Nvidia drivers. Ubuntu normally comes with fairly outdated, if not obsolete ones, but there’s a semi-official PPA with more recent versions. How does Debian handle this?
Debian has their own nvidia driver packages (it's nvidia's drivers repackaged in a nice way that integrates with the system well). I can't say if they're "outdated" or how different they are from what ubuntu ships, but they've always worked very well for me.
Debian offers Nvidia drivers as well although they tend to be outdated. Thankfully you can use Nvidia's official .deb repos to get the latest drivers on both Debian and Ubuntu.
I think Pop does Nvidia well, but have no real experience with that.
I have used Pop OS for years and for me it was the most smooth desktop environment I've ever used.
They have been working on a custom Desktop Environment which sadly still isn't very stable yet. Promising development, but putting me off of using Pop for a while.
I just put the new popos on my laptop and am still running the old version on my primary desktop. Agreed that Cosmic is not quite ready for prime time yet, but it is pretty impressive the state it's in for how new it is. Haven't had any show stopping bugs on the laptop, just a few small quirks.
You can get an overview of that status by looking at the "version" box on https://tracker.debian.org/pkg/nvidia-graphics-drivers
> Ubuntu normally comes with fairly outdated, if not obsolete ones
Ubuntu 24.04 currently comes with 590, which is the most recent working driver.
I switched to Debian and have been happy with it. The release cycle is less frequent than Ubuntu Desktop, which means fewer disruptions, and Debian Backports make it easy to pick new versions of the important stuff. Flatpak is also available on Debian.
Linux Mint is widely praised for being basically Ubuntu without the worst Canonicalisms (such as Snap). They maintain a Debian edition in parallel to their main one, as an exit strategy in case Ubuntu ever becomes unsuitable for their base. Some people already use that as their daily driver.
Just in case you're not aware, the default desktop environment on whatever distro you pick doesn't have to be what you use. I switched to KDE Plasma when Gtk-based desktops became intolerable, and haven't looked back.
Just install Ubuntu and remove snap. We are doing this for our University pool etc and encountered no issues.
Make a list of all ppa before proceeding.
What is your use case?
The issue is them adding it back, sometimes even on apt upgrade, or silently installing it as a dependency for certain apps without mentioning it unless you look closely. That gets tiring after a while and I gave up on Ubuntu as even after having removed snap multiple times it always returned.
This is my experience, too, and my solution has been to run Debian.
Did you pin the package's priority or just apt removed it?
I've not used Linux on the desktop for some years⁰ but as I move back this sort of thing is why I'm not considering Ubuntu². If I want to dig into settings like that to keep my preferences I might as well stick with Windows.
Yes, the control to be able to tweak the system to my liking is one of the attractions or Linux, but not when I have to in order to avoid behaviours that I don't want being reasserted.
----
[0] heading back there now as Windows11 is not happening on my home machines¹, I feel that I shouldn't have let Windows10 happen, looking back.
[1] aside from the laptop that came with it that I'll keep there for Office and DayJob compatibility for a while.
[2] Currently running Debian³ on the other laptop, main desktop will likely go that way if it isn't decommissioned completely, and I use a dock with the laptops instead.
[3] As that is what I use server-side more often than not.
Never happened in the last several years.
run "apt install firefox" and you'll end up with having snaps again.
Doesn't snap come back on the next OS upgrade?
I was using Ubuntu and installed the apt version of Firefox as the snap version would not open html files in locations like /var/tmp and would not work with USB devices. Every time I ran `do-release-upgrade`, all of that work would need to be redone. It was very annoying.
If you're using Ubuntu on Jetson then you're out of luck. That platform is tied to Ubuntu.
https://en.wikipedia.org/wiki/Nvidia_Jetson#Software
I have a year ago switched from Ubuntu to Fedora and I like it. Clean and stable. Uses Flatpak. I'm using Fedora Workstation which is the default, but Fedora KDE Plasma seems to be nice as well if you want to have more configuration options available directly in the GUI. And the layout is more Windows like with start button menu etc for people coming from the Windows side.
I distro hopped for a while and settled on Linux mint. Uses flat packs. Hits the spot for easy to use and easy to maintain without needing to use terminal scripts to get things my way. Just my opinion.
I think snap is not preinstalled in Kubuntu.
> Seems like Ubuntu has the best hardware and driver support
It is an urban myth
“Urban myth” kind of suggests that it was never true, which isn't the case, though it is one of those out-dated truths that doesn't go away quickly.
At one time Ubuntu as the easiest distro to get certain hardware running with because of the inclusion of proprietary drivers & codecs (unlike its Debian parent, amongst others, at least at the time) and making them easy, near-automatic, to configure compared to others that did include them. The distinction is long gone, and Ubuntu is simply one of several (many) good ones in that regard, but the perception that others have not long since caught up persists.
I was in the same spot recently, and my friends recommend Linux Mint. It is built on top of Ubuntu LTS, and no snap. I've been using it for the past few weeks in my old desktop computer. Definitely Good. Perfect fit for your needs
PopOS
This looks like it might be the best solution, no snap, maintained by an actual system integrator and laptop maker, and I also like the new Rust-based desktop environment. I wonder how well it runs on Framework laptops or MacBooks as well.
Runs great on framework. Not sure about COSMIC on asahi.
Isn't that essentially a release of Ubuntu with a different kernel, DE and maybe some userspace utilities?
Linux Mint.
Gaming-oriented distros like CachyOS and Bazzite might be what you want. I'm on Cachy and can recommend it. Because they try to "just work" without jumping through hoops.
Even though I very much intenseley dislike the completely unintuitive idiosyncratic package management that Arch has. Which is further not helped by the fact that Cachy's default GUI for it isn't even integrated properly.
I hate snap as well. Use flatpak and KDE on Ubuntu. Never have been happier.
Ubuntu LTS is still the choice for many production environments and education and learning. As someone with Ubuntu from 2010 CDs, I find it refreshing that modern Ubuntu distros work OOB on most computers these days with excellent driver support.
Is this even true? I mean, Windows is the main focus for all hardware vendors, and everybody who has owned a PC knows that malfunctions are unavoidable. If that is the case for Windows, then Linux cant be better.
There's working, and there's working.
20 years ago your Linux installation might not include wifi drivers, bluetooth support, decent GPU drivers, fat32/ntfs drivers, or the widely used video/audio codecs of the era. And you had to be careful when shopping for things like wifi cards, as only certain chipsets could be made to work.
Much of which was kinda fair enough, because if you're a volunteer making an open source OS because of a strong belief on the open source ideal, you don't want to distribute closed-source driver blobs or patent-encumbered codecs. But it meant mean the initial installation process was not always easy. One of the things that contributed to the success of Ubuntu was a particularly easy initial setup process.
Today, things are a lot better - you'll still get unsupported hardware from time to time, but it'll be much less severe. If your laptop has a non-USB integrated camera you might have to download and install a kernel module. Your corporate laptop's built in fingerprint scanner might not work, but who cares?
Linux has been better for old hardware since early 00s. Just don't expect hw acceleration to work for older GPUs.
Windows 11 set a low bar to clear... Most popular hardware will work on linux, but like always its better to check before your buy.
Distro like Ubuntu are a fair compromise to get amd/nvidia GPU drivers, wifi, and brother laser printer/scanner networking installed. =3
edit: seriously, why down vote the guys karma if its a honest question. Try to be kind people.
https://www.lenovo.com/us/en/glossary/linux-standard-base/
When I was shopping Lenovo.com for my ThinkPad in 2018, there was a table with ThinkPads certified for Ubuntu Linux in one column, and certified for Red Hat Enterprise Linux in another column.
I chose the T580 as a RHEL-certified notebook, and it was fantastic. Lenovo.com let me configure each individual component exactly according to my needs and tastes, and it was custom-assembled and shipped from Shenzhen.
It did arrive with Windows 10 pre-installed (this was the least hassle and most popular OS option). I initially installed CentOS, but quickly realized that Fedora would be the sweet spot, and so it was a Fedora system for most of its lifetime. Near the end, I did revert to Windows 10, which also worked flawlessly.
The ThinkPad T580 literally never malfunctioned. It was still 100% working when I turned it in for recycling in 2025.
I've also run Ubuntu on my "daily driver" desktop system, which ran from 2006-2022. Yes, that's 16 years' worth of Ubuntu installs and upgrades. It was mostly a KDE Plasma (Kubuntu) system. I enjoyed every bit of that.
In 1999, I was avidly using OpenBSD on really old hardware (such as HP Apollo 425t workstations.) OpenBSD simply couldn't deal with the special graphics subsystem on those machines. I tried and tried to get something working, but there were obstacles, not only with the hardware and drivers, but also the monitor connection needed a particular type of cabling and a proprietary monitor, too.
However, OpenBSD did great for networking, security, Squid cache, proxies, all kinds of things. And even in 1999, though it was early, I ran Linux on a 386DX-40, because Linux supported the "ftape" floppy tape driver at that time, and I had some kind of QIC tape backup from Eagle that wouldn't be recognized by OpenBSD or NetBSD.
Meanwhile, in that same year, my "daily driver" desktop machine was a 486 with VLB, dual-booting Windows 98 and OpenBSD. The Windows 98 was set up with a Cygwin system and X11 server, so that I could run X11 clients on the OpenBSD machines, or the Linux machine, or whatever else was on the LAN.
Windows is a dumpster fire at this point. Just unusable
After using Ubuntu for many years both on the desktop and server, recent decisions have got me thinking that Canonical has lost a lot of its community spirit. That got me switching over machines to Debian which, to me, still feels like a community project. It's a shame.
I am pragmatic about it though so I still run Ubuntu for some things but it's no longer my first recommendation.
> recent decisions have got me thinking that Canonical has lost a lot of its community spirit
The rot set in when #ubuntu on Freenode (now Libera) became rigidly enforced as on-topic discussions of Ubuntu support only.
The channel is absolutely dead now. Maybe one person will say something in any given 12-hour period and no-one replies, just page after page of joins and parts.
Unfortunately they forgot to remove Rust coreutils and sudo-rs from Ubuntu prior to releasing 26.04.
I am starting to suspect this even might be intentional.
Those packages can simply be reverted like dracut, at least for a few months of testing.
And yes, using a user-base as Beta testers is fairly cheeky. =3
> Those packages can simply be reverted
For now, that is. I am afraid that they will stop providing coreutils and sudo for some of the future releases (like they did with upstart) because obviously they know better what's good for the users.
Also green light for Fedora 44 release on 28 April
https://meetbot.fedoraproject.org/meeting_matrix_fedoraproje...
Cool. I'm pretty excited for the new login manager. Maybe now KDE will be able to fit all customization options (wallpaper, lockscreen, login screen) on a single Settings page.
I know that the interim releases had issues with zfs and trying to update gave the message "Sorry, cannot upgrade this system to 25.04 right now System freezes have been observed on upgrades to 25.04 with ZFS enabled. Please see https://wiki.ubuntu.com/PluckyPuffin/ReleaseNotes for more information. "
The release notes don't seem to mention zfs. I hope these issues have been fixed?
I am thinking of testing one of those AMD Ryzen AI laptops for development and local LLM. These come with win11 copilot+.
How well does 26.04 with the 7.0 kernel support these? Can it, say, use their GPU and NPU for compute out of the box?
Kindly keep us updated with your findings. Please also let me know where you publish it. Thanks
The comments there note there is no official Ubuntu MATE release for the first time since Ubuntu 15 (and before 14.04 gnome2 was an option). That's a shame but probably most people who chose MATE (or gnome2) no longer chose Ubuntu due to the conflicting ideologies inherent in the two. MATE users generally don't like change for change's sake.
its in the daily builds. I haven't tried it yet.
not sure if this confirms the impression you have there... I wasn't like this until a couple of headless VPS'es (on Arm8) got through the upgrade from 18.x -> 20.x -> 22.x and then crashed out over -> 24.x for a still unknown reason. now I'm just afraid .. or I should say reluctant ..to repeat that whole fiasco.
https://cdimage.ubuntu.com/ubuntu-mate/daily-live/current/
There were some issues with how the menu icon manager handled the new security policy defaults. This means the editor will break, and the displayed menu may be missing any item that didn't follow the naming convention syntax. Its a lot of packages to bring into compliance, for that one silly feature the devs had to put in before it was ready...
Maybe they fixed it since the rc release, but there were some rough edges in Feb... the kernel USB support cooked the thumb drive partition structure.
In 22.04 to 24.04 the kernel Nvidia GPU driver EOL abandonment began... In 26.04 people will discover most EOL hardware support prior to RTX series will be difficult to bring up.
Probably wise to wait a few weeks for the bug reports to clear out a bit. =3
> TPM-backed full-disk encryption
This is going to be very useful for servers hosted in third party DCs.
Keeping the key in the same room as the padlock only protects against casual drive theft and secure disposal.
Personally I'm more worried about someone stealing the entire server or a local threat actor.
Sure, keep TPM to help with boot integrity, maybe even a factor for unlock, but things like Clevis+Tang (or Bitlock Network Unlock for our windows brethren) is essential in my opinion.
The beta installer was completely unsuccessful in setting the TPM-backed disk encryption on both a ThinkPad X1 Carbon (Intel 258V) and a ThinkPad P14s (AMD 300-something). Hopefully they ironed that part out in the release, but it seems still early for this feature (at least for my comfort level).
Same on my Framework Desktop. Looks like it works only with a limited number of TPM chips for now.
The constructed policy is quite strict and expects certain UEFI things to be set up correctly. For example both this https://github.com/canonical/secboot/blob/7434bac27844362ff8... and https://github.com/canonical/secboot/blob/7434bac27844362ff8... are enabled in the policy. The policy choices and various early checks, even as trivial as confirming that the TCG log content is correct after booting into installation system, are enough to rule out a lot of potentially problematic EFI deployments. Effectively making it more strict helps avoid a lot of funny issues where the firmware is clearly buggy and things would fall apart sooner or later.
I want this on my own homeserver. Protection against someone stealing the server without requiring me to type a password every boot.
In what way is TPM protecting your data if someone steals the entire server? TPM only ensures that the boot environment has not been modified. Whatever key is being used to automatically decrypt the disk would be in the clear.
Unless I'm misunderstanding your situation, I think you should look up the "Evil Maid Attack" to better understand how to mitigate risk for your threat model.
assuming there are no bugs in linux and you enable full memory encryption in BIOS, it protects you in the same way the FBI cant get into a locked iphone they physically posess
but linux is not as secure as an iphone, and linux users typically dont know how to set this up, so in practice you are right, it doesnt protect you
oh man i hope this works on dell laptops
Earlier official blog: https://ubuntu.com/blog/canonical-releases-ubuntu-26-04-lts-... (https://news.ycombinator.com/item?id=47878560)
Hard to get some spotlight for this with all these new models around, I feel bad for Canonical.