A bug in APT shines a light on a long-standing issue, backing up databases in containers, the pros and cons of using FreeBSD to host Linux VMs, network isolation for VMs, and using another backup technology in addition to ZFS. With guest host Sean from Hybrid Cloud Show.

Plug

Support us on patreon and get an ad-free RSS feed with some early episodes

News/discussion

APT can merge two different package downloads after an HTTP redirect gives them the same URI

Free Consulting

A modern Proxmox Docker architecture with disposable VMs, VirtIO-FS, and ZFS

See our contact page for ways to get in touch.

Lots of security news including PHP, comically weak SSL cert keys, and accidental Linux kernel CVE disclosure. Plus Canonical is ramping up development of its immutable version of the Ubuntu desktop, and it (hopefully) won’t just be GNOME.

News

Today’s PHP Security Release, and How We’re Strengthening PHP Security

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot

The Internet goes on high alert after discovery of 8 compromised TLS certs

eMudhra to Exit global SSL/TLS Certificate Business

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

A kernel bug for last weekend while we are at it

Accelerating Ubuntu Core Desktop

Support us on patreon and get an ad-free RSS feed with some early episodes

See our contact page for ways to get in touch.

RSS: Subscribe to the RSS feeds here

Why estimating how long it will take to write a piece of software is hard, why using units of time isn’t very helpful, and why breaking the process down into small chunks is ultimately how to do it.

Support us on Patreon and get an ad-free RSS feed with early episodes sometimes

See our contact page for ways to get in touch.

Subscribe to the RSS feed

Is cloud native getting too complex?

Dan’s Mastodon post

Support us on patreon and get an ad-free RSS feed with some early episodes

Subscribe to the RSS feed.

Why you should be watching for SSL certificates that you didn’t issue, Let’s Encrypt is shortening the length of certs to 64 days, Ubuntu tightens up GRUB with secure boot, an Intel driver bug breaks IPv6 for major services, and running websites from a home Internet connection.

Plugs

FreeBSD Release Cycles and Enterprise Requirements: Why LTS Matters

News/discussion

Chrome’s Response to Recent ccTLD Registry Hijacks

64-Day Certificate Lifetimes Coming Feb 2027 – Let’s Encrypt

Ubuntu 26.10 drops Btrfs, XFS & ZFS /boot with Secure Boot

A preinstalled Intel driver is silently breaking IPv6, OneNote and Microsoft 365

See our contact page for ways to get in touch.

Mozilla has a new revenue stream that might actually work, GNOME OS gets closer to a stable release, Raspberry Pi OS for x86 machines returns, and Amazon has expensive new Android tablets that have the Play Store. Plus hacking old Echo Dots to work with Home Assistant, building ad blocking lists, and unbricking an M1 Mac with Linux in discoveries.

News

Mozilla introduces Firefox Enterprise

Introducing GNOME OS Preview

Raspberry Pi Desktop now available for PC and Mac

Amazon’s new Alexa Tablets drop the Fire branding but are more Android than ever

Discoveries

Echo Dot Hacks

PiHole Blocking Tool

idevicerestore

Tailscale

Tailscale is a modern, secure, zero-trust connectivity platform. Tailscale’s personal plan will be free forever for up to 6 users and unlimited devices! No credit card required. Go to tailscale.com/lnl to get started. If you’d like to bring Tailscale to work, use code latenightlinux for three free months of any paid plan.

Support us on patreon and get an ad-free RSS feed with some early episodes

See our contact page for ways to get in touch.

RSS: Subscribe to the RSS feeds here

Some of our hot Linux takes including software bloat, ChromeOS being the best set and forget system, touch screen Linux still not being quite there, and Xfce being (nearly) dead to us.

Support us on Patreon and get an ad-free RSS feed with some early episodes

See our contact page for ways to get in touch.

Subscribe to the RSS feed.

Supermarkets found out why their fridges shouldn’t be on the Internet and Samsung smart fridges broke after a firmware update, why we don’t recommend MoCA, some tips for running ethernet cables in your house, and why it’s fine to use a short TTL with your domains.

Plugs

Support us on patreon and get an ad-free RSS feed with some early episodes

Biggest ZFS Misconfigurations and How to Fix Them: Part 2

News/discussion

Hackers heat French supermarket fridges, sparking fires and spoiling food

The username is admin and the password changes every day automatically to.. the current date

Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers

Owners mourn spoiled food after firmware update bricks Samsung smart fridges

Free consulting

Example coax cable tester

See our contact page for ways to get in touch.