Let's Encrypt has announced that it will be reducing the validity period of its certificates from 90 days to 45 days by 2028: Most users of Let's Encrypt who automatically issue certificates will not have to make any changes. However, you should verify that your automation is compatible with certificates that have shorter validity periods. To ensure your ACME client renews on time, we recommend using ACME Renewal Information (ARI). ARI is a feature we've introduced to help clients know when they need to renew their certificates. Consult your ACME client's documentation on how to enable ARI, as it differs from client to client. If you are a client developer, check out this integration guide. If your client doesn't support ARI yet, ensure it runs on a schedule that is compatible with 45-day certificates. For example, renewing at a hardcoded interval of 60 days will no longer be sufficient. Acceptable behavior includes renewing certificates at approximately two thirds of the way through t
Open-source firmware consulting firm 3mdeb published a blog post today outlining their work on bringing their Coreboot-downstream Dasharo to the ASRock Rack SPC741D8/2L2T, a recent server motherboard for supporting Intel Xeon Sapphire Rapids and Emerald Rapids processors...
An important set of patches were just merged a few minutes ago to Linux Git for the ongoing Linux 6.19 kernel with some important performance implications...
FreeBSD 15.0 has been released. Notable changes in this release include a new method for installing the base system using the pkg package manager, an update to OpenZFS 2.4.0-rc4, native support for the inotify(2) interface, and the addition of Open Container Initiative (OCI) images to FreeBSD's release artifacts. See the release notes for a full list of changes, hardware notes for supported hardware, and check the errata before installing or upgrading.
The designers of the Zig programming language have been working to find a suitable design for asynchronous code for some time. Zig is a carefully minimalist language, and its initial design for asynchronous I/O did not fit well with its other features. Now, the project has announced (in a Zig SHOWTIME video) a new approach to asynchronous I/O that promises to solve the function coloring problem, and allows writing code that will execute correctly using either synchronous or asynchronous I/O.
Security updates have been issued by Fedora (gnutls, libpng, mingw-python3, python-spotipy, source-to-image, unbound, and webkitgtk), Mageia (libpng), SUSE (bash-git-prompt, gitea-tea, java-17-openjdk, java-21-openjdk, kernel, openssh, python, and shadowsocks-v2ray-plugin, v2ray-core), and Ubuntu (binutils, openjdk-17-crac, openjdk-21-crac, and openjdk-25-crac).
A massive overbuild of compute facilities, mostly to serve the mania for large language models (LLMs) and other AI applications, is propping up weak world economies and fueling near-universal warnings that a bursting of the bubble could bring those economies ... Read more The post We Will Need All Those Data Centers (Part 1) appeared first on Linux Professional Institute (LPI).
Merged as part of the objtool changes for the Linux 6.19 kernel is introducing the "klp-build" script as a new solution to generate livepatch modules using a source .patch file as the input. This klp-build effort was spearheaded by Josh Poimboeuf with ideas learned from the out-of-tree Kpatch project over the past decade...
TornadoVM 2.0 is out today as the newest feature release for this OpenJDK and GraalVM plug-in that allows Java programs to run on heterogeneous hardware. TornadoVM targets continue to be OpenCL, NVIDIA PTX, and SPIR-V compatible devices for a range of accelerator support for use from conventional Java code...
Linux Mint 22.3 โZenaโ nears release with a new Cinnamon menu, updated system tools, Wayland improvements, and many refinements now prepared for the upcoming beta.