641
submitted 4 months ago by pnutzh4x0r@lemmy.ndlug.org to c/linux@lemmy.ml

Last Tuesday, loads of Linux users—many running packages released as early as this year—started reporting their devices were failing to boot. Instead, they received a cryptic error message that included the phrase: “Something has gone seriously wrong.”

The cause: an update Microsoft issued as part of its monthly patch release. It was intended to close a 2-year-old vulnerability in GRUB, an open source boot loader used to start up many Linux devices. The vulnerability, with a severity rating of 8.6 out of 10, made it possible for hackers to bypass secure boot, the industry standard for ensuring that devices running Windows or other operating systems don’t load malicious firmware or software during the bootup process. CVE-2022-2601 was discovered in 2022, but for unclear reasons, Microsoft patched it only last Tuesday.

...

The reports indicate that multiple distributions, including Debian, Ubuntu, Linux Mint, Zorin OS, Puppy Linux, are all affected. Microsoft has yet to acknowledge the error publicly, explain how it wasn’t detected during testing, or provide technical guidance to those affected. Company representatives didn’t respond to an email seeking answers.

you are viewing a single comment's thread
view the rest of the comments
[-] dharmacurious@slrpnk.net 29 points 4 months ago

Y'all, help a dummy out. I dual boot windows and Fedora. I only keep windows around for a very few college classes that require for screenwriting software. I have not booted into windows in months. I have a screenwriting class coming up in a week.

How worried should I be? I am not great with computers, I run fedora mostly because I support the philosophy of Linux, less for the techy stuff. Please advice, Linux people. I'm scurred.

[-] nehal3m@sh.itjust.works 19 points 4 months ago

Does that screenwriting software require a lot of performance? You might opt to install Windows into a virtual machine, as described here: https://www.windowscentral.com/how-setup-windows-10-virtual-machine-linux

Essentially you're using some software to emulate a computer inside your computer that can run any operating system you want. It doesn't need to touch your actual operating system installation, you can treat it as just another program. For your use case that sounds appropriate; you occasionally need to run specific software that has low system requirements. This way you can do that without risking Microsoft borking your Linux machine any time it feels like it.

[-] dharmacurious@slrpnk.net 9 points 4 months ago

I'd imagine it requires about as much as a word processor, since that's basically what it is. A word processor with a specialized template and some nifty autofill options. Again, dummy here. If I'm running a virtual machine, can I create a file in it that is saved to my actual machine, or would I need to, like, email it to myself using the virtual windows os?

[-] nehal3m@sh.itjust.works 9 points 4 months ago* (last edited 4 months ago)

The latter thing you mentioned would work, but you can set up some shared storage between the VM and your machine. Here is some more info: https://www.makeuseof.com/how-to-create-virtualbox-shared-folder-access/

This describes a Windows host and a Linux VM, I'm sure you'll be able to figure out the other way around. :)

[-] possiblylinux127@lemmy.zip 2 points 4 months ago

Don't use Virtualbox as it is a Hype 2 hypervisor not a hype 1. You want actually KVM via Libvirt. Libvirt also has the advantage of not requiring any proprietary software. (Just make sure to install the virtual drivers)

[-] nehal3m@sh.itjust.works 3 points 4 months ago* (last edited 4 months ago)

That's all fine and dandy but OP said they're not very technical. Conceptually Virtualbox is a lot simpler to deal with. There's a lot of advantages (philosophical and practical) to be had with a KVM or QEMU setup for sure, but if you want a simple to understand click-it-together setup then Virtualbox is better. If OP wants to graduate to a better setup then I hope they go for a good FOSS solution eventually but going straight for the deep end is rarely a good idea if you want people to understand what they're doing.

[-] possiblylinux127@lemmy.zip 1 points 4 months ago

Virtual manager is pretty straight forward. You click on create and follow the wizard. You can even have VMs running in the background

[-] beefbot@lemmy.blahaj.zone 12 points 4 months ago

Sorry idk specifically how to avoid the update, but the linked ArsTechnica article has some advice

Someone here advised & I’d agree: use a Windows VM, for things you haven’t found the Linux version of yet.

Windows’s plan to screenshot everything will include your private artistic work too, so you’ll be doing yourself a favor

[-] addie@feddit.uk 11 points 4 months ago

When I was still dual-booting Windows and Linux, I found that "raw disk" mode virtual machines worked wonders. I used VirtualBox, so you'd want a guide somewhat like this: https://superuser.com/questions/495025/use-physical-harddisk-in-virtual-box - other VM solutions are available, which don't require you to accept an agreement with Oracle.

Essentially, rather than setting aside a file on disk as your VM's disk, you can set aside a whole existing disk. That can be a disk that already has Windows installed on it, it doesn't erase what you have. Then you can start Windows in a VM and let it do its updates - since it can't see the bootloader from within the VM, it can't fuck it up. You can run any software that doesn't have particularly high graphics requirement, too.

I was also able to just "restart in Windows" if I wanted full performance for a game or something like that, but since Linux has gotten very good indeed at running games, that became less and less necessary until one day I just erased my Windows partition to recover the space.

[-] Wispy2891@lemmy.world 3 points 4 months ago

And probably disable quick boot as I'm guessing the kernel is going to get pissed when you suddenly switch between virtualization and native

[-] dharmacurious@slrpnk.net 2 points 4 months ago

I've never run a virtual machine, because I've always had, frankly, really shitty laptops. Like... Cheapest of the cheap without being a Chromebook. Only decent computer I've ever bought got broken within a month. :(

Can I run VMs on really low end specs? The screenwriting software is the only thing I need it for, and I'm assuming it's pretty much the same as running a word processor.

[-] nehal3m@sh.itjust.works 3 points 4 months ago

Provided your CPU has virtualization features (described here) then the performance overhead for virtualization is negligible. So very probably you'll be fine.

[-] rotopenguin@infosec.pub 3 points 4 months ago

The memory requirements for virtualization is not negligible.

[-] nehal3m@sh.itjust.works 1 points 4 months ago

That depends, if you're going to run a barebones W10 install with what amounts to a word processor I think 2GB should be enough. If you can run Chrome you can run a VM. 4GB if you're feeling generous, that's a fair compromise as compared to the disadvantages of dual booting.

[-] Sonotsugipaa@lemmy.dbzer0.com 1 points 4 months ago

I remember trying to push the limits with a Windows 10 VM, and 2GB was the bare minimum;
however, Windows loves to abuse virtual memory (basically using the main storage drive instead of RAM) and if that drive is a HDD the PC is little more than an IoT space heater.

A relative of mine has a Windows 10 PC with 4GB of memory and it takes ~ 5 minutes to start Chrome after booting it up; it does have a lot of miscellaneous bloatware on it, though.

[-] possiblylinux127@lemmy.zip 6 points 4 months ago

Does your device have 16gb of ram? If so install Windows in Virtual manager with the guest addons. It will allow copy and paste along with lots of other features while keeping Windows in its own area.

load more comments (2 replies)
[-] ReversalHatchery@beehaw.org 6 points 4 months ago

However bad that sounds, you're probably best off disabling all updates in windows. O&O shutup10 has a setting for that. Download it to a pendrive with Linux, and boot windows with network unplugged.

[-] dharmacurious@slrpnk.net 1 points 4 months ago

I will do this. Thank you!

[-] interdimensionalmeme@lemmy.ml 5 points 4 months ago

If you have trouble make a rEFInd USB stick and boot that

[-] areyouevenreal@lemm.ee 4 points 4 months ago

Do you know which bootloader you have? There are two popular ones in use currently, one called systemd boot, the other is called grub. From reading this post only grub seems to be affected. I don't really know which one fedora defaults to at the moment, and it likely depends on what happened during the installation process as well.

[-] russjr08@bitforged.space 2 points 4 months ago

If they're using Fedora, then it is highly likely that they are using GRUB as you have to very much go out of your way to utilize systemd-boot on Fedora the last time I checked.

[-] Iapar@feddit.org 3 points 4 months ago

What do you use? Maybe there is a Linux alternative to that so you don't have to bother with a VM.

[-] dharmacurious@slrpnk.net 4 points 4 months ago

They require a program called Final Draft. I looked around but couldn't find an alternative

[-] boredsquirrel@slrpnk.net 7 points 4 months ago* (last edited 4 months ago)

Try running it in Bottles. A lot of programs work there without many issues.

Use Bottles Flatpak

Bottles uses WINE which is way more performant than a VM.

[-] possiblylinux127@lemmy.zip 1 points 4 months ago

Technically it uses Soda + Proton but same diff

[-] boredsquirrel@slrpnk.net 2 points 4 months ago
[-] possiblylinux127@lemmy.zip 1 points 4 months ago

Proton works better and is generally more performant

[-] boredsquirrel@slrpnk.net 1 points 4 months ago

Yes Proton is different from Soda, but how is "technically Soda" actually what Bottles runs? I thought bottles runs WINE, which runs Soda as the runtime

[-] princessnorah@lemmy.blahaj.zone 1 points 4 months ago

Which are both custom versions of Wine with extra patches? They aren't something like Luxortorpeda where it replaces the Windows game engine with a Linux one.

[-] boredsquirrel@slrpnk.net 1 points 4 months ago

Soda is the default Runtime, Proton (and outside of steam you should use Proton-GE) is the Steam one with way more compatibility for Games

load more comments (2 replies)
[-] dharmacurious@slrpnk.net 1 points 4 months ago

Thank you for the advise! YouTube tutorials, here I come!

[-] Presently42@lemmy.ca 3 points 4 months ago

Out of curiosity, have you tried Fade In?

load more comments (7 replies)
[-] 01189998819991197253@infosec.pub 2 points 4 months ago

Which screenwriting software? Have you tried running it under WINE?

And do you HAVE to use that one in particular? Or can you use something like Trelby, Manuskript, or Scrite?

[-] dharmacurious@slrpnk.net 3 points 4 months ago

The school pays for final draft, and I am poor. But someone else just showed me fade in was free and works with Linux, so I'm gonna try that out!

[-] 01189998819991197253@infosec.pub 2 points 4 months ago

Ah. I did love final draft when my school paid for it. I've never used fade in, but the three I mentioned are all free, too. I'm not sure what version of final draft you're using, but it doesn't really matter for this, as its support under WINE is pretty lacking. Good luck!!

[-] milicent_bystandr@lemm.ee 2 points 4 months ago

It looks like some GRUB versions are fixed, e.g. possibly in Ubuntu from 22.10. Dunno if Fedora has the fixed version. I'm facing the same with my Mint/Windows dual boot; considering not booting windows till I'm ready to upgrade Mint to 22.

If you do get problems, it also looks like you can get around it by turning off secure boot until things are sorted.

If you're not an experienced Linux meddler I wouldn't recommend changing your bootloader from the default given by your distribution, but I guess if this is widespread most distros will upgrade their bootlodladers soon to deal with it.

[-] bionicjoey@lemmy.ca 2 points 4 months ago

Can you install windows in a VM instead? VirtualBox is easy to set up.

[-] possiblylinux127@lemmy.zip 4 points 4 months ago

Don't use Virtualbox as native libvirt will be faster and doesn't involve any licensing.

[-] bionicjoey@lemmy.ca 3 points 4 months ago

Depends if you care more about performance or ease of use. Based on the fact that OP hadn't considered VM as a solution, I assume they aren't super familiar with hypervisors.

[-] possiblylinux127@lemmy.zip 1 points 4 months ago

Virtualbox is a pain. Virtual manager is much easier and natively supported. You just click new and then follow the wizard

[-] areyouevenreal@lemm.ee 3 points 4 months ago

That's not at all the case in my experience. Sure virtual box modules can be harder to install, but libvirt has so many issues that the average user has no idea about. I've had networking issues, display issues, and so on. At one point it read the display scaling information and scaled down the VM display instead of scaling it up. Furthermore RedHat don't even support virt manager anymore. They want you to use Cockpit. Honestly the all around best virtualization solution is probably VMWare or something like Gnome boxes or QuickEmu.

[-] possiblylinux127@lemmy.zip 1 points 4 months ago

I would of agreed with you historically but these days I say libvirtd all the way.

load more comments (1 replies)
this post was submitted on 21 Aug 2024
641 points (99.4% liked)

Linux

48743 readers
892 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS