736
Manjaro let their SSL certificate expire again (thelemmy.club)
submitted 7 months ago by to c/linuxmemes@lemmy.world
111 comments fedilink hide all child comments
 

top 50 comments

sorted by: hot top controversial new old
[–] 248 points 7 months ago (22 children)

Purple Arch has yet to fail me.

  • permalink
  • fedilink
  • source
  • hideshow 22 child comments
    •
  • [–] 38 points 7 months ago (11 children)

    I enjoyed my time with EOS but it had annoying bugs on my Thinkpad that I haven't had with CachyOS in a year+ of using it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 11 child comments
    •
  • [–] 25 points 7 months ago (10 children)

    Yeah, I am the same. CachyOS has been working better for me.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
    • load more comments (1 reply)
    • [–] 182 points 7 months ago (5 children)

    It kind of makes it hard to trust this distro when they fuck up the most basic things so often and frequently.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 54 points 7 months ago* (3 children)

    Not just with their web hosting. I've had so many updates break random crap it's not even funny. Recently, a random update I did not approve suddenly had kwallet not working. A core piece of a DE they provide a bundled version for. I had to start kwalletd myself every time I wanted to use it.

    It didn't start that way on the fresh install. I didn't do anything myself except reboot. Then suddenly my scripts that nab from the keystore are failing and asking me for passwords and what a mess.

    That's just a more recent example. I remember having quite a few random issues on update in the past, though the only other one I explicitly remember is the DE suddenly failing to start. Like, at all. Luckily I had a recent timeshift backup saved elsewhere, restored, and ignored the update notifications for a long while...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 16 points 7 months ago (2 children)

    Yeah Manjaro either needs to figure their shit out or everybody should stop using it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 26 points 7 months ago

    The one thing manjaro had going for it was it was easy install arch. Now we have endeavor, garuda, cachy, and several other easy install arch. Including archinstall. Who all follow vanilla arch much closer, not introducing major breaking changes. There's literally no good reason to still use manjaro.

    That said the servo aur is currently broken under catchy. Unable to update for the last couple of weeks. But that's been my only hiccup. And a negligible one at that.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (1 reply)
    • [–] 118 points 7 months ago* (18 children)

    Wow. How does this happen when letsencrypt exists? Or certbot?

    More importantly.. How does this happen again?

  • permalink
  • fedilink
  • source
  • hideshow 18 child comments
    •
  • [–] 58 points 7 months ago* (16 children)

    There is a significant amount of infrastructure that does not support cert bot out there.

    That being said they are using LE but looks like the renew failed.

    https://www.ssllabs.com/ssltest/analyze.html?d=manjaro.org&s=116.203.91.91&latest=

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 16 child comments
    •
  • [–] 29 points 7 months ago* (6 children)

    There is a significant amount of infrastructure that does not support cert bot out there.

    Example? I believe you, I just can't imagine what would preclude a public-facing server from using Caddy or certbot. Certainly not for a project maintaining an Arch-derivative distribution.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 14 points 7 months ago (5 children)

    I don’t have a concrete example but I’ve talked to an online friend who works in IT and he claims the majority of his work is just renewing and applying certificates. Now he made it sound like upper management wanted them to specifically use a certain certificate provider, and I don’t know their exact setup. I of course have mentioned certbot and letsecrypt to him but yea, he’s apparently constantly managing certs. Whether that’s due to lack of motivation to automate or upper managements dumb requests idk

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
    • load more comments (3 replies)
  • [–] 19 points 7 months ago

    I am trying to figure out how my little non interesting domains have kept certified for decades now without lapsing, while they can't seem to keep it together even after a failure.

    Hard to imagine that they are so big that people simply forgot to get notices or manage the certs after it has happened so many times before.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (3 replies)
    • [–] 69 points 7 months ago

    At this point is more of a tradition...

  • permalink
  • fedilink
  • source
    •
    [–] 63 points 7 months ago*

  • permalink
  • fedilink
  • source
    •
    [–] 48 points 7 months ago (1 child)

    This is at least the third time, how do they even manage to fail that

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 55 points 7 months ago

    At least the sixth time even. Four cases are documented here and another one was just three months ago. This last link points to reddit, but there a manjaro maintainer also explains why it keeps happening:

    Politics within the project are the issue.

    The fix for these issues have been build for about a year already. But those who have access to stuff like DNS and hosting are currently incapable of making any agreement on any topic preventing trivial fixes such as this from being implemented.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 43 points 7 months ago (5 children)

    Let's Encrypt's free and automatic certificate management has been around since November 16th, 2015, by the way.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
    load more comments (5 replies)
    [–] 32 points 7 months ago

  • permalink
  • fedilink
  • source
    •
    [+] 29 points 7 months ago* (last edited 2 months ago) (23 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • hideshow 23 child comments
    •
  • [–] 21 points 7 months ago (2 children)

    I used Manjaro for a few years before switching to Arch. Manjaro finds a nice sweespot for "Arch but also nice". Furthermore, Arch has gotten much more user friendly in the last 5 years or so. Back in late 2010s, Manjaro was adding a lot of value on top of Arch.

    What really bothered me about Manjaro was the "forum cops" they employ, who are super aggressive to newcomers and unhelpful. It was not a nice experience to seek help. Say what you will about Arch people, they are at least helpful.

    I finally switched to Arch when I got my new machine. I recommend the same.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    load more comments (2 replies)
    • load more comments (20 replies)
    [–] 26 points 7 months ago (1 child)

    Well shit... It looks like they were on a good run too.

    https://manjarno.pages.dev/

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    load more comments (1 reply)
    [–] 25 points 7 months ago (1 child)

    It's still technically automaton if your workflow depends on people poking you when things break.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    load more comments (1 reply)
    [–] 24 points 7 months ago (4 children)

    Systemd will auto renew an LE cert.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 35 points 7 months ago (2 children)

    With how it's going, Will systemd also eventually be able to occasionally remind my Asian ass that I am a failure?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    • load more comments (1 reply)
    [–] 23 points 7 months ago

    AGAIN?!

  • permalink
  • fedilink
  • source
    •
    [–] 22 points 7 months ago (7 children)

    Oh no, first lemmynsfw.com and now this

  • permalink
  • fedilink
  • source
  • hideshow 7 child comments
    •
  • [–] 10 points 7 months ago (6 children)

    wait what happened to lemmynsfw

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 13 points 7 months ago (2 children)

    As posted at this new instance which appears to be trying to fill the void (heh) left by lemmyNSFW:

    Xaeg/Yay was the owner of LemmyNSFW, and he had access to and paid for the domain, server, and everything else related to the site. He has been AWOL for about 6 months now, and suddenly this month, the server and the domain stopped being paid for. I have no access to the server to get the database.

    Because of this LemmyNSFW as it was, and all the content on it, much to my dismay, seems to have died.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    load more comments (2 replies)
    • load more comments (2 replies)
    • [–] 21 points 7 months ago (5 children)

    To be fair it's about to get even worse with the much smaller max validity periods.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
    • [–] 14 points 7 months ago (1 child)

    Is it so difficult to setup a Caddy with auto ssl?

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 11 points 7 months ago

    No. It's absurdly easy. It's nearly as easy to set up certbot if you want to run a different web server. Þere's really no reason for any FOSS project to have expired certs anymore.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 10 points 7 months ago

    unauthorized end-to-end encryption.

  • permalink
  • fedilink
  • source
    •
    load more comments
    view more: next β€Ί