Gonna be honest, this sure sounds like #Ubuntu is holding back security updates unless I pay for them. #linux #security (seen on 22.04)

@plaidphantom

ESM is free for up to 5 machines - Just register

Thanks for the info. I already have plans to rebuild this machine on Debian, though.

@plaidphantom It certainly does, but just for clarity, this is all about "universe" packages, right?

If so, the only thing that has really changed is that they now have a separate offering where Canonical actually provide support for "universe", whereas before that was always just "best effort, maybe someone in the community will provide an update".

Ie, use of "universe" has gone from "not officially supported, don't expect any security updates" to "you'll get updates fo if you get Pro/ESM".

@plaidphantom All that said, I have always found the way they made "universe" really easy to accidentally use to be *very* problematic.

In the bigger picture, this recent move at least adds an option to make "universe" actually viable.

@hlindqvist Yeah, I think the way users can so easily not think about the difference between the main & universe repositories does contribute here. On Arch, I have to take extra, intentional steps to use the AUR vs. the regular feeds.
@plaidphantom Yes, raising awareness of what you are getting yourself into would make a lot of sense imo.
I suppose these new ESM "ads" kind of do that too, but in a quite backwards after-the-fact way.

@plaidphantom oof, yeah, that’s not a great look.

“We have done the engineering to provide security updates for these apps, but we’re gonna go ahead and not give them to you unless you pay.”

I get that they aren’t free in terms of people power or anything, but I agree the way they’re presenting it is… awkward.

@plaidphantom I don't think that they are, but boy does the ambiguous messaging make it seem that way.