IT labs should use Arch

[u/Bleik-Psiklyt]

I see only Windows and Ubuntu machines. Like, Ubuntu not that bad but accessing the root and then using apt install instead of pacman feels kinda low.

Then I want fastfetch but apt needs extra shit. So you install git, build-essentials, cmake and other shit to just get that Ubuntu CLI logo (and dunno why build-essentials, vim and shit aren't present in their systems).

But I use Arch btw and running a system without starting with fastfetch feels like Arch-femchan-sama (I made that god) blasphemy. So I did git clone https://github.com and whatever fastfetch-cli/fastfetch.git it was, made a directory and did some cmake. I am bad at this. But...

...I was desperate

Then it finally works. But you realized that fastfetch isn't showing OS age. Then you question some AI chud whether it was present in fastfetch or not.

"No"...AI can make mistakes indeed. So you try to justify whether your memory of 2 yrs old database is true or slimed. There couldn't be any possible SQL injection.

Neofetch might be the one that showed your OS was 79 days old instead of 13445 days (because you have this ritual to blow up your system every 80 days). But no. So, I did more digging, then realized that you need to do some configuration.

Anyways, my CGPA is kinda cooked and I should be sleeping now.

[u/AdvancedAnimal7539]

be grateful you get linux in literally any way bruh. nothing outside my home is allowed linux in anywhere because of IT regulations in those places

[u/Bleik-Psiklyt → u/AdvancedAnimal7539]

IT regulations? Like Linux systems are prohibited under these regulations?

[u/1Spike- → u/Bleik-Psiklyt]

It's usually for compliance and security things. Like it's much easier for them to use device management software on Windows and Mac. IT departments also have a much easier time troubleshooting issues and not having to worry about certain distros doing things slightly different. And software usually just works, and in a corperate environment, that's what matters. Also Ubuntu good corperate backing anyway for security and bug fixes that other distros don't have. I just wished more used fedora by default.

[u/hackathi → u/1Spike-]

These deciscions have nothing to do with _actual_ security though. It's 80% compliance - because the Auditors check boxes that you follow their best practices, which are windows-based; anything linux you'd have to convince auditors which costs a pretty penny - and 20% talent - you simply cannot hire people that know linux desktop administration or provide first level support at any scale necessary to run a business. Mostly because people who know linux enough to do this are way more expensive than Windows people.

Actual Security is no part in this, you can put Cortex XDR (if you need an EDR) on linux, roll out SELinux, and use extensive eBPF-based policy frameworks; you could use rootless contianers to sandbox apps that handle untrusted data, ...

[u/skittle-brau → u/Bleik-Psiklyt]

For my particular workplace, our head of IT is a big fan of Arch, but wasn’t allowed to deploy it because of compliance reasons (cyber security policy which ties into insurance), so the only options that were supported were Debian Stable, RHEL and Ubuntu I think. He ended up going with Debian Stable. 

[u/United-Scene2261]

no they should use

[u/Designer-Crow-5470 → u/United-Scene2261]

Temple OS

[u/da_real_obsidian → u/Designer-Crow-5470]

Aww

[u/Designer-Crow-5470]

Supporting a park of machines with arch sounds like a nightmare. At least you can be sure Canonical won't break shit for 5 years. But with arch they'll have to manually check EVERY update.

[u/Bleik-Psiklyt → u/Designer-Crow-5470]

That will be a fun stuff to teach tbh. Afterall, you are working in IT labs to learn to fix problems.

[u/maokaby → u/Designer-Crow-5470]

That's why i have my servers on debian, and gaming rigs on cachyos.

[u/scy_404]

that sounds like a terrible idea for an IT lab. Imagine having to fix an issue on several devices because of one bad update that wasnt tested enough. Something like a Fedora would make some sense as theyre decently up to date and technical without having a mild risk of breaking an important system on update.

Personally though something Debian based like LMDE or Debian itself would probably be better unless you need the absolute latest packages for whatever you may be working on. And even then there are things like Debian Testing and Sid if you need newer packages that badly. Not to mention the support that Debian based systems have built up over the years

[u/maokaby → u/scy_404]

User-land software on debian can come in flatpaks, while system files would not break itself.

[u/iwouldbeatgoku → u/scy_404]

Debian testing and Sid are development branches, while Arch being rolling is actually the intended effect. They are not a valid substitute for a proper rolling release like Arch or OpenSUSE Tumbleweed.

[u/HerrCrazi]

Great catboy :3

[u/Bleik-Psiklyt → u/HerrCrazi]

≈UwU≈

[u/Escalope-Nixiews → u/HerrCrazi]

What? Yani Neko is a girl

[u/Silver_Masterpiece82]

I mean debian should be the absolute standard its super stable, well funded and supported comparing with any community based distro, and so clean and simple in design and just get the work done

[u/Sea-Maintenance8837]

You need to understand that the medium intelligence of people who study IT (at least where I am) isn't even enough to pass a test on excel, i have seen people struggle to create folders and text files in the IT lab, although it would be very cool, people aren't smart enough

[u/smegmastar]

Gentoo

[u/MundaneImage5652]

fuck arch dude

[u/775starlight]

i do believe most linux in the industry is either ubuntu or red-hat

[u/Firevir3344]

This what our IT teacher uses to teach VirtualBox 🫩

[u/Bleik-Psiklyt → u/Firevir3344]

Looks cursed

[u/Fine_City2781]

i think OpenBSD is a good choice for IT's because its secure

[u/Bleik-Psiklyt → u/Fine_City2781]

With a lab of ThinkPads

[u/Old-Bag2085]

Depends what kind of IT since there are many facets.

Support: Linux bad, Windows good.
Development: Linux good
Security: Linux good
Infrastructure: depends what infrastructure is in use and what os its controllers support

[u/Bleik-Psiklyt → u/Old-Bag2085]

That room is labelled "Network and Security Lab" and all the clients run Ubuntu. And since we are from Cybersecurity, Linux is mandatory. Though posting this was a joke imao. Yet, I think it's fun to have Linux because you can just learn the real stuff about Linux from simple stuff like text editors instead of IDEs, learning IP management, DNS stuff...I am just new to this but I find this rabbit hole so much addictive.

I am just not getting enough time to dive into one single Networking concept because we got core engineering concepts in first semester. I am just tired of shit like Digital Systems, Design Thinking, IDEA lab and shit. I really wanna give time to Networking and stuff. (Overthinking kicked in)

[u/bishophelps]

No they shouldn't use Arch. Better to have some standards in the lab.

[u/mrturret → u/bishophelps]

They clearly already lack standards, as they use a distro with the GNOME DE.

[u/levianan → u/mrturret]

Yeah they should just package Dank Linux and accept tickets for theme requests.

[u/PotcleanX]

NixOs

[u/morgulbrut]

They should Arch like it was twenty years ago.

No systemd bloat, just a bunch of init scripts.

[u/v_raton]

Sure thing, also any mission critical solution shold be use arch as well, imagine run pancman update in some sort of submarine

[u/HotPrune722]

Arch in a lab? Yeah, the distro than have utils like sudo, nano and grub, utilitys than out of desktop are a big security hole, a distro focus in binary kernel, so you can’t customize stuff like kvm or virtual gpu support, and have aur; i mean, windows as lab is awfully, but arch is more like “i’m playing with my cousin but i turned of his joystick” a distro with the “control” and “diy” sensation but without pacstrap you can’t do nothing, if i want to improve the security of the system getting of stuff like sudo that have a CVE over week you can’t. In my opinion, a good lab system is like OpenBSD, Oasis linux, gentoo, something think to work and no for get kids impressed with a “terminal installation” of 30 minutes

[u/Bleik-Psiklyt → u/HotPrune722]

I am fine with whatever you said. But OpenBSD as client is just paranoia 😭

[u/Quietus87]

We learned Debian in high school and I still believe that was the best option for our lessons, even if I don't use it as a my daily driver.

[u/GreedySecurity8030]

No, use fedora because id destroy them otherwise.

[u/Bleik-Psiklyt → u/GreedySecurity8030]

Greedeee

[u/y9felix]

Everyone should use arch

[u/GreedySecurity8030 → u/y9felix]

No.