Open-source News

Intel + Microsoft Bring oneAPI L0 & OpenCL To WSL2 With Open-Source Stack + DXGKRNL  Phoronix

Using chpasswd to change account passwords on Linux  Network World

Managing Linux containers is about to get a lot easier on Chrome OS  Chrome Unboxed

With the embargo lifted following this morning's Intel Core i5 12600K + Core i9 12900K Linux review, I've begun uploading more public test data to OpenBenchmarking.org and making my earlier test results public. With that and initial data flowing in from others in the community, here is some more data to poke through if interested in Alder Lake on Linux...

S3 Ep57: Europol v. Ransomware, Shrootless bug, and Linux browser flamewars [Podcast]  Naked Security

Connect iPhone to Windows and Linux PCs: KDE Connect available as iOS beta  Market Research Telecast

Tuxedo Nano Pro Gen 11 is a compact Linux desktop with AMD Ryzen 4000U  Liliputing

Open source software tools and services are often created quickly and out of necessity. Linus Torvalds, for example, created the first version of git in a weekend when the Linux kernel team could no longer use BitKeeper for Source Control Management. 

sigstore was created earlier this year to address the massive gap for an easy, trustable and efficient digital signing tool to confirm the provenance (origin) of software. Since March 2021 sigstore has been growing rapidly and is being used for various projects. This includes Kubernetes, one of the world’s largest open source projects.

But like Let’s Encrypt and the Linux Kernel, sigstore requires resources. Building the first version of the tool is different from bringing together resources to enable widespread adoption and support it for the long term. That’s why we’re excited to announce today that the project has received generous contributions from Chainguard, Cisco, HPE, Google, Red Hat and VMware to conduct an extensive security audit and hire a full-time developer relations engineer. 

The reality is that today the majority of software isn’t digitally signed. Without signatures, there’s little evidence of the software’s provenance,  so most software consumed is cryptographically untrusted. With sigstore, developers can digitally sign containers, artifacts, config-as-code, policy, and any given computer file. sigstore has the potential of becoming to digital signing what Let’s Encrypt is to HTTPS. 

“By working to eliminate the requirements for specialized skills in cryptography, sigstore is committed to establishing trust and transparency in the open source supply chain. Removing this exclusivity is key to increasing developers’ access to cryptographic signing and creating an open log for accountability. Red Hat is proud to support sigstore’s constant commitment to open source in the supply chain security space,” said Luke Hinds, Senior Principal Software Engineer, Red Hat.

For more information about sigstore, please visit: https://blog.sigstore.dev/

The post sigstore, the free digital signing service for open source supply chain security, gets additional support appeared first on Linux Foundation.

Critical Linux Kernel Bug Allows Remote Takeover  Threatpost

Microsoft's latest surprise is adding native Linux support to their Endpoint Manager software...

Intel Core i5 12600K / Core i9 12900K "Alder Lake" Linux Performance  Phoronix

With the Intel 12th Gen Core processors shipping today along with the new line-up of Z690 motherboards, the review embargo lifts for talking about these Intel "Alder Lake" processors. While by now you've likely heard a lot about Intel Alder Lake on Windows and various leaked benchmarks with Windows 11, how does these processors with the new hybrid architecture work and perform on Linux? Here are the initial benchmarks and support information for Intel's Core i5 12600K and Core i9 12900K processors under Ubuntu Linux.

Red Hat engineer Michel Dänzer has uncovered and addressed another performance shortcoming within X.Org's XWayland code...

The first fruits of CentOS Stream: Red Hat Enterprise Linux 9 Beta  ZDNet

Remote code execution flaw patched in Linux Kernel TIPC module  ZDNet

Remote code execution flaw patched in Linux Kernel TIPC module  ZDNet

Facebook's BOLT project for optimizing the performance out of compiled binaries is nearing the point of being added to LLVM's official source tree with its mono repository...

Fedora Linux 35 now generally available  IT-Online

All of the Arm SoC/platform changes were merged on Wednesday evening for the Linux 5.16 kernel cycle...

Mesa 21.3 as the final feature release for this collection of open-source OpenGL and Vulkan drivers isn't yet ready to go as some blocker bugs persist, but available now is the fourth weekly release candidate...