sh
is for shell.
If you want to control users, don't give them admin privileges.
Most of things you enumerated solve windows specific problems and therefore have no analogs in other OSes.
Use vanilla Debian. It is well suited for that purposes and it is great in terms of long time support: stable distro updates almost never break anything and upgrading to new release is possible and relatively simple. Don't listen to those recommending Arch or Fedora, upgrading them is a pain especially when you have to support many servers.
If you want something more lightweight, you may try Alpine. It is also a distro of choice for docker containers. However I'd prefer Debian for the host.
I agree that autocrap is the worst build system in use now. However writing plain Makefile
s is not an option for projects that are more complex than hello world. It is very difficult to write them portably (between various OSes, compilers and make
implementations) and to support cross compiling. That's why developers used to write configure
scripts that evolved to autocrap.
Happily we have better alternatives like cmake
and meson
(I personally prefer cmake
and don't like meson
, but it is also a good build system solving the complexity problem).
Look at what libs zstd
is linked to. You'll be surprised.
In Debian and, probably, Ubuntu you may install the wine-binfmt
package to get all *.exe
s running with wine automatically. However I don't recommend doing so because it is very easy to run some windows trojan with this.
You can host your project anywhere you want, setup mirroring to github and drop a link in its description. So you'll have github visibility and won't depend on github. Addiitional repo backup is a bonus.
I wonder if Matt calculated CVSS score before calling this vulnerability "critical".
TL;DR: rm
calls the unlink
syscall and the author wasted a lot of time to find this out and even more time to describe this.
TLDR: Companies should be required to pay developers for any open source software they use
You need to read the article yourself before writing TLDR. Spoiler: it is not about payments, it is about source code availability.
man ssh_config
A bit too late. 20 years ago this would be great. (I started 12 years ago, used it for couple of hobby projects.)