LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Cucumber Linux (https://www.linuxquestions.org/questions/cucumber-linux-124/)
-   -   Cucumber... (https://www.linuxquestions.org/questions/cucumber-linux-124/cucumber-4175612771/)

jsbjsb001 08-28-2017 09:11 PM

Quote:

Originally Posted by jhsdcsjdcvbdj (Post 5753065)
rofl, cucumber linux.

what's next, Pumpkin linux ?

I'm still laughing, but I have no opinion about it really, just thought I'd share that with you.

But given I'm not a 'Slacker' (but maybe one day), I'm leaving while the going's still good! ;)

montagdude 08-28-2017 09:36 PM

Quote:

Originally Posted by frankbell (Post 5753135)
I think you all are being a little hard on Cucumber.

If someone wants to fork Slackware, at least it's not yet another *buntu (though I do think the comment about the derivative website is valid).

I'm downloading the *.iso now and will throw into VirtualBox tomorrow or the next day, just to see what it looks like.

Don't get me wrong, I don't have any problem with it. I just don't see the point, other than someone got the itch to create a distro. For example, I'd like to hear why the creator thinks someone should run this instead of Slackware.

frankbell 08-28-2017 09:51 PM

I've already grabbed the *.iso.

I'll report back tomorrow.:)

un1x 08-29-2017 09:12 AM

It is a slack baby ... good to no !

:p

frankbell 08-29-2017 08:10 PM

I was unable to get Cucumber to install in a VM under VirtualBox. I had the 64-bit *.iso, so I created a 64-bit "Other Linux" VM with about a 20GB virtual HDD (dynamically allocated).

I fired up the *.iso and got as far as partitioning the drive with cfdisk. Formatting was not a discrete step in the default installation routine. I got an error that swap could not be mounted.

I deleted the VM and tried again. This time, after creating the partitions, I formatted / with mkfs, then formatted the swap with mkswap. I got the same error.

You can see a screenshot of the "select partition" dialog here: http://pineviewfarm.net/weblog/wp-co...partitions.jpg

You can see a screenshot of the error message here: http://pineviewfarm.net/weblog/wp-co...ber2_error.jpg

I'm pretty much booked tomorrow and the next day, so I won't have a chance to try this on another computer for a few days.

worsel 08-29-2017 09:24 PM

I installed cucumber linux (64 bit) on an unused partition of my main hardrive.

Had some trouble getting the install disk working. Don't remember the error, but
it kept looking for some i386 stuff. It finally booted, though.

Did a full install, returned to my main partition, reworked grub and reboot into
cucumber. Had only a few minutes to play with it, but it seemed to work okay in
a console.

Could not get X to come up. Major problem: startx is missing.

It's new so I expect a few problems, but I think I will still like Slackware better.

allend 08-30-2017 09:02 AM

Is this a Slackware derivative?
From the FAQ:
Quote:

What distribution is Cucumber Linux based on?

Cucumber Linux is an independent distribution, meaning it is not based on any specific distribution.

There is a common misconception that Cucumber Linux is based off of Slackware because it uses Slackware's package management system. This is not true; Cucumber Linux is not based off Slackware because they share a package manager any more than SUSE is based off RedHat because they share a package manager.
Imitation is the sincerest from of flattery.

Z5T1 08-31-2017 11:52 AM

Hello Everyone,

I'm Scott (A.K.A. Z5T1), the creator and BDFL of Cucumber Linux. Thank you all for taking the time to check out and discuss Cucumber Linux. I see you have some questions and I'm going to do my best to answer some of them.

Quote:

Originally Posted by montagdude (Post 5752891)
"A huge thanks goes out to Patrick Volkerding of Slackware Linux and the Linux from Scratch development team. I couldn't have done it without inspiration from your systems and guidance from your buildscripts."

That's fine and stuff, but I have to ask ... why? It seems like he's just trying to recreate Slackware, and even using parts of Slackware's SlackBuild scripts.

Edit: and also using the same package management tools.

I originally started Cucumber Linux as a personal Summer project. I have always been a big proponent of the Unix Philosophy and I have been unhappy with how most Linux distributions have been abandoning it recently. I've also been interested in the inner workings of Linux distributions and systems for many years. In May of 2016 I was a student looking for a fun Summer project, so I decided to combine these two passions and create my own Linux distribution. I did this primarily as a learning experience, but I also wanted to have distribution for my personal use that followed the Unix Philosophy and would always be free of Systemd, PulseAudio and all the other crap that flies in the face of the Unix Philosophy.

Now I could have easily just forked Slackware; however, I decided to build a new distribution from scratch, figuring that would provide a much more complete learning experience. I actually initially set out to create a disto based off of Linux from Scratch, not Slackware. There were some thing I thought Linux from Scratch did well, but there were some things I thought Slackware did better. Ultimately, I largely combined the two distributions together, drawing heavily from both distros but also doing certain things my own way. I actually used very few SlackBuild scripts; I wrote most of the buildscripts myself, and if you look at the way they build the packages you'll see they're closer to the Linux from Scratch/Beyond Linux from Scratch buildscripts than SlackBuild scripts.

After I spent over a year working on Cucumber Linux, I figured I may as well make it publicly available in case anyone else happened to find the project interesting.

Quote:

Originally Posted by kjhambrick (Post 5753017)
IANAL and I should MYOB ... but I wonder ...

Is it OK with Pat to re-license Slackware as Cucumber under the MIT License ?

-- kjh

Being that I wrote most of the buildscripts myself, I have the right to license those buildscripts as I see fit. For the few SlackBuild scripts I did incorporate into Cucumber Linux, I left Pat's original licensing in place. If you look at the Cucumber Linux License page, you will see that I said the distribution is licensed under the MIT license only as far as upstream licensing allows.

Quote:

Originally Posted by montagdude (Post 5753149)
Don't get me wrong, I don't have any problem with it. I just don't see the point, other than someone got the itch to create a distro. For example, I'd like to hear why the creator thinks someone should run this instead of Slackware.

Slackware's a great disto, don't get me wrong. I used Slackware for years before I created Cucumber Linux, and I still use Slackware on some of my systems. You're right that I largely did get an itch to create a distro; however, I do believe there is one key advantage that Cucumber Linux has over Slackware: security. I have found that, while Pat does a great job building Slackware, sometimes there are security vulnerabilities that go unpatched on Slackware, and sometimes these vulnerabilities can have a severe impact. There are several vulnerabilities that currently exist in Slackware 14.2 that I have long since patched on Cucumber Linux.

Also, Slackware's lifecycle is a little vague about security and can be deceiving. For example, Slackware 13.37 is still supported; however, it uses a kernel that hasn't been patched since upstream support ended for the Linux 2.6 kernel many years ago. Turns out this kernel is vulnerable to both dirty cow and stack clash, and probably several more vulnerabilities. With Slackware, if you don't dig deep enough, you can easily end up thinking your system is secure when it really is not. With Cucumber Linux, I have a much more clearly defined lifecycle and I make sure that if a version of Cucumber Linux is supported, it is really completely supported and up to date on all security patches, period.

- Scott

GazL 08-31-2017 04:43 PM

Thanks for taking time to respond here Scott. I suspect we'd see eye to eye on quite a few subjects based on what you've written above. Best of luck with your project.

Chuck56 08-31-2017 04:48 PM

Agreed! Good luck Scott and keep Cucumber going!

montagdude 08-31-2017 04:59 PM

Thanks for the explanation. It's always good to have alternatives in case something ever happened to Slackware.

RadicalDreamer 08-31-2017 05:08 PM

Quote:

Originally Posted by Z5T1 (Post 5754149)
There are several vulnerabilities that currently exist in Slackware 14.2 that I have long since patched on Cucumber Linux.

Care to elaborate?

ChuangTzu 08-31-2017 07:58 PM

Quote:

Originally Posted by RadicalDreamer (Post 5754266)
Care to elaborate?

Agreed, I am sure PV and team would like to know what those vulnerabilities are. Did you ever submit those patches to PV? You said you used Slackware for a long time on several boxes, did you ever participate in LQ, I noticed this was your first post as Z5T1.

Z5T1 08-31-2017 08:08 PM

Quote:

Originally Posted by RadicalDreamer (Post 5754266)
Care to elaborate?

Sure.

CVE-2016-1248 arbitrary code execution in Vim via a specially crafted text file.
CVE-2016-9273 and several vulnerabilities in libtiff that were fixed in libtiff 4.0.8 (Slackware is still on 4.0.7).
CVE-2017-3636, CVE-2017-3641 and CVE-2017-3653 all in MariaDB that allow unauthorized access of information and unauthorized inserts, deletes and updates.
CVE-2016-0634 arbitrary shell command execution as any user in Bash via a specially crafted hostname.
CVE-2017-10663 in the Linux kernel allows for arbitrary code execution in the kernel space when mounting a maliciously crafted F2FS filesystem.
CVE-2017-12424 a buffer overflow vulnerability in shadow that could result in a crash and other unspecified impacts, possible privilege escalation.

And I could go on, but I think you get the point :). I tried contacting the Slackware security team about some of these, but never got a response. All of these vulnerabilities have been patched in Cucumber Linux. Also, there are some vulnerabilities that have now been patched in Slackware, but went unpatched for several weeks after the upstream patches were released. In these cases, Cucumber Linux was patched within a day or two.

Z5T1 08-31-2017 08:11 PM

Quote:

Originally Posted by ChuangTzu (Post 5754298)
Agreed, I am sure PV and team would like to know what those vulnerabilities are. Did you ever submit those patches to PV? You said you used Slackware for a long time on several boxes, did you ever participate in LQ, I noticed this was your first post as Z5T1.

No I actually haven't posted on LQ before. I've been reading it for years, I just never found anything worth commenting on until today.

Also, as I mentioned in my previous post, I did try submitting some of the patches to the Slackware security team, but I never got a reply from them and the patches ultimately went unapplied. After this happened a couple of times, I gave up on submitting them.


All times are GMT -5. The time now is 11:22 AM.