Ubuntu's trust problem in 4 concrete issues - verified facts, no FUD
Strong agree. I use a derivative that blocks snaps instead of direct Kubuntu now, and it wasn’t Just because of the snaps.

I use a derivative

Without Ubuntu Pro subscription the entire Universe repository does not receive any security updates by Canonical:

canonical.com/…/ubuntu-pro-enhanced-security-and-…

You should consider switching to an entirely independent distribution that does not lock security updates behind a paywall, perhaps something based directly on Debian or Fedora.

How Ubuntu Pro delivers enhanced security and manageability for Linux Desktop users | Canonical

This week Ubuntu Pro entered general availability, giving Ubuntu users access to expanded security coverage on top of key enterprise management features. […]

Canonical
It’s maintained by my hardware OEM (Tuxedo) and I’m not even sure it has Universe - most things are flatpaks.

I’m not even sure it has Universe

I strongly suggest looking it up.

I think Linux Mint has that. It really is the best of Ubuntu without all the bad.
What’s a better alternative that uses apt and KDE and has relatively up-to-date packages (other than Debian testing)?

Fedora offers apt. AFAIK not by default, so it has to be installed via dnf first but then it’s available.

It’s been like that for years.

https://www.google.com/search?q=why+shouldn%27t+you+use+apt+on+fedora&ie=UTF-8&oe=UTF-8&hl=en-us&client=safari&safe=active

It’s a really bad idea to have two package managers overlap (this is also why more “cross-system” package managers like nix and brew are okay: they consciously install to separate paths to avoid overlapping)

Fedora does not offer APT repositories, so if you somehow don’t overlap and pretty much exclusively use APT, you’re pretty much just converting your distro to Debian (or whatever’s providing your repos). In the forums we call this a Frankenstein; support is seldom given for raising the dead.

Before you continue to Google Search

www.google.com/search?q=why+shouldn't+you+use+apt…

Is your answer whatever Gemini happens to hallucinate on a given day?

Before you continue to Google Search

@grue @woelkchen maybe try KDE Neon or SparkyLinux... 🤔

You can also use stable debian but enable surgically testing repos for KDE packages. 🤔

SparkyIinux would be your best option to avoid completely Ubuntu even as a low level basis. Otherwise Neon would be an intetesting option.
The day when Neon switches to Debian I break open a bottle of... i dont know yet but definitely something nice. 😁

Linux mint Debian Edition, and just install KDE yourself ig, otherwise MX linux KDE

uses apt

May I ask why you seem to be married to the use of apt?

Just couldn’t pass up on the opportunity to insert this banger.

APT! APT! Install! ✨ #shorts

YouTube
Isn’t apt still better at resolving the dependency tree than other managers? (Idk if it is, but vaguely heard so.)

IIRC, historically, it was (one of) the first to do so. It took a significant time for (most^[Slackware, famously, continues to not have a dependency resolver. Though, they got their reasons.]) others to catch up.

still

Maybe. I honestly don’t know either.

slackware:package_management - SlackDocs

What’s wrong with Debian?
I already know about it, so there’s no need to tell me.

Fair enough.

There’s also Pop and Mint, though I don’t know if their update model differs from Ubuntu at all.

But if you’re already familiar with Debian, why not use it? It’s widely recommended for a reason, it’s hard to beat.

Pop!_OS uses COSMIC (a modified GNOME), not KDE.

Linux Mint uses Cinnamon (a modified GNOME 3) or MATE (a modified GNOME 2), not KDE.

The answer to “why not Debian” is that I try to install Debian first every time, but if it doesn’t work for whatever reason I grab Kubuntu instead of trying to troubleshoot it. 3 of the 4 desktop computers I’ve tried to install Linux on lately ended up with Kubuntu instead of Debian.

(For my personal desktop that tends to have a bleeding-edge graphics card at the time of building/installing, that’s understandable. For the other computers, for other members of my family who don’t need the latest and greatest, Debian’s failure to support several-year-old hardware – at least in the installation environment, without fiddling – was less forgivable.)

I’m sure you can install KDE on either of those.

I’m surprised Debian doesn’t Just Work for you though. I recently converted my laptop and desktop and had no issues.

Debian should be great on old hardware too. Longevity is part of their mission. The installation environent might be a bit tricky if you have really old or uncommon hardware, but in those cases I just pick the text installer, which has much fewer dependencies.

Its objective superiority puts others off.
Would MX Linux with KDE fit your needs?

It’s not KDE, but I think Linux Mint Cinnamon is a no-brainer for somebody who really just wants to use ubuntu.

However, as a long time Mint fan I recently had reason to switch to Debian 13 w/ KDE Plasma and it is pretty great.

The updates available through Ubuntu Pro wouldn’t have normally been available prior to Pro. It’s an added service, not something that was previously available that is now locked behind a paywall. There are plenty of reasons to not like Canonical but this isn’t one.

It’s an added service, not something that was previously available that is now locked behind a paywall.

I didn’t say anything about it having changed, so your “now” is disingenuous. Fact is, update support by Canonical for Universe is locked behind Ubuntu Pro. Non-Ubuntu distributions such as CachyOS/Fedora/Bazzite/openSUSE/Debian/… don’t have this hostile behaviour.

They also don’t provide those updates. I am a Fedora guy by the way. I’m not defending Canonical, just pointing out that this is a silly reason to dislike them.

They also don’t provide those updates.

Fedora allows all updates that do not break compatibility. To update packages in Universe means adhering to overly zealous version number freeze policy, whereas leaf packages in Fedora can be updates without much fuss. I contributed a small number (only two or three) of updates to Fedora packages years ago. Nothing was a core package, only tiny stand-alone utilities, so the stuff that would be in Universe under Ubuntu, but they had new version numbers. Updates were accepted by the maintainers without much trouble.

I am a Fedora guy by the way.

So you should know that I’m right.

Right, but if you’re after the level of “stability” that Canonical is offering, where are you getting it for free? Maybe there is another place but none that I’m aware of. I think it is perfectly fine for them to charge for that, especially if enterprise customers are the target audience and those who aren’t don’t have to pay for it.

Right, but if you’re after the level of “stability” that Canonical is offering, where are you getting it for free?

Fedora, Alma Linux, openSUSE Leap, LMDE,…

They’re giving you 10 years of updates on those packages for free? I know Alma is from Tux Care but that extended support comes at a price as well. Leap is two years. LMDE support ends soon after the newest version. Fedora gets 13 months after the newest version I believe. Maybe I’m wrong on some of those but none of those come close to the free support canonical provides on LTS or Pro.

Leap is two years. LMDE support ends soon after the newest version. Fedora gets 13 months after the newest version I believe.

And they do that without requiring anybody to sign up for a Pro plan. Ubuntu ships unmaintained software to people who don’t sign up for Pro. That’s a fact.

Wrong. They merely stop supporting it when a new version is released, just like everyone else. You can skip Pro and get the same experience you get with any other distro.

Wrong.

I’m 100% right.

You can skip Pro and get the same experience you get with any other distro.

And that’s where you are wrong. Fedora etc. ship package updates for the entire support cycle. Ubuntu only for Main. Universe is left without formal support. Fedora etc. have no problems shipping updates. I already explained it to you. You just don’t understand.

It’s unmaintained the same way Debian would be. It’s a community repository.

It’s unmaintained the same way Debian would be. It’s a community repository.

It’s a “community” repository that’s enabled by default and subject to Ubuntu’s draconian version number freeze rules. Fedora isn’t. I already explained that. I suggest you scroll back up and read what I wrote and try to understand what I wrote.

That is a fundamental difference, the Universe repository is community maintained outside of the Pro service. It always was before Pro too. I don’t think Fedora has a separate repo for community-maintained packages. I still don’t see the issue with offering something above and beyond what you traditionally have and charging a fee for it. They could just have easily never provided official support for Universe.

Update: Correction. While you do get five years of security updates for Universe on an Ubuntu LTS, those are updates done by the ubuntu community, not canonical. To get Universe security updates from Canonical, you do have to sign up to Ubuntu pro, which can be done without any payment, but as I describe in my original comment, does require creating an account.

While Canonical deserves the criticisms leveled by op (that I agree with), it’s also incorrect to say that they lock security updated behind a paywall.

Anyone that does use Ubuntu gets security updated until they stop supporting that particular release version, which iirc is for six years (I may be wrong, thus is from memory).

If you want extended security updates for a specific version of the os, you can elect to sign up to Ubuntu pro without paying any money. You do have to make an account, and if you so choose you can populate the account info with garbage info and a disposable email, and you’ll get extended security updates for that release version.

While Canonical deserves the criticisms leveled by op (that I agree with), it’s also incorrect to say that they lock security updated behind a paywall.

Anyone that does use Ubuntu gets security updated until they stop supporting that particular release version, which iirc is for six years (I may be wrong, thus is from memory).

I quoted the relevant part and yet you still don’t understand that Universe is explicitly not covered by security support by Canonical without Ubuntu Pro.

you can elect to sign up to Ubuntu pro without paying any money

you can elect to sign up to Ubuntu pro without paying any money

Yes, home users can sign up for Ubuntu Pro for free which means repository access is tracked on an account level. How isn’t this more shitty than for example plain Debian?

Debian also doesn’t offer security upgrades for contrib and non-free.
Only main is officially supported.

Same as Ubuntu, security upgrades for additional repos are handled by the community, not the distro maintainers themselves.

Debian also doesn’t offer security upgrades for contrib and non-free. Only main is officially supported.

So Fedora and openSUSE are most superior. OK.

No, it’s the same with every distro.
Distro maintainers CAN’T support repos containing non-free packages with security fixes.
Because they can’t fix security issues in the code.
Because the code is not free for them to edit.

This entire criticism just shows a lack of understanding of how distros work, and what security updates are.

Ubuntu Universe does not have licensing issues. Ubuntu’s nonfree repository is Multiverse. Universe is just the community- as opposed to project-maintained one
Same thing applies.
The AUR doesn’t get security updates from Arch,
RPM Fusion doesn’t get security updates from Fedora,
Packman doesn’t get security updates from OpenSUSE,
and Slackbuilds/Alienbob don’t get security updates from Slackware.
woelk did make a good point that based on submission processes, Fedora Main is basically their equivalent of Ubuntu Universe, though.

i’m not sure what that has to do with the argument

(curious, though: does the Fedora project even have an equivalent to universe? I also thought that OBS didn’t have security updates just like the AUR doesn’t.)

does the Fedora project even have an equivalent to universe?

No because all FOSS software distributed by Fedora is in the main repo.

Ah. Both misunderstood what you were saying and was uninformed. My apologies. Editing my original comment to reflect that.
Drink your verification can to install security updates.

lock security updates behind a paywall

Saying this is like screaming “I don’t know anything about Ubuntu except that I hate it!!!”

Saying this is like screaming “I don’t know anything about Ubuntu except that I hate it!!!”

I posted a screenshot from Ubuntu’s own blog. So they hate themselves and lie to the world?

Ubuntu Pro is free for personal use on up to five machines.

Also note that Universe is the community-maintained repository, sort of like the AUR but the community also reviews package creations. The Main repository is maintained by the Ubuntu Project and has always had free security updates.

Ubuntu Pro is free for personal use on up to five machines.

If you’re not paying for the product, you are the product.

Debian is free for any use for an unlimited number of machines without corporate tracking which packages you install.

If you’re not paying for the product, you are the product.

Debian is free for any use for an unlimited number of machines without corporate tracking which packages you install.

So I guess with Debian, you are the product.

Debian is a community, not a product.

Interesting. I can use a community for my OS? So every time I hear someone say “install debian”, they’re telling me to install a community?

Either way, it’s free, so I’m still the product.

I can use a community for my OS?

Debian is a community.

Debian GNU/Linux is a non-commercial Linux distribution, ergo not a product.

Well, I was just corrected by someone taking time out of their day to tell me it’s a community, not an OS.

I’ve installed Debian before, so I thought perhaps I was mistaken.

Context is really critical here.

Either way, it’s free, so I’m still the product.

it’s free, because people have decided to come together and volunteer to create something that is beneficial to them, allows them to express themselves, and distribute it for free to better other people’s lives and contribute to human existence. Part of their motivation to create such a thing is to not have the users be the product.

When there is a soup kitchen for homeless people, the homeless people are not a product.