Say Hi To Microsoft's Own Linux: CBL-Mariner (zdnet.com) 110
An anonymous reader quotes a report from ZDNet, written by Steven J. Vaughan-Nichols: Microsoft now has its very own, honest-to-goodness general-purpose Linux distribution: Common Base Linux, (CBL)-Mariner. And, just like any Linux distro, you can download it and run it yourself. Microsoft didn't make a big fuss about releasing CBL-Mariner. It quietly released the code on GitHub and anyone can use it. Indeed, Juan Manuel Rey, a Microsoft Senior Program Manager for Azure VMware, recently published a guide on how to build an ISO CBL-Mariner image. Before this, if you were a Linux expert, with a spot of work you could run it, but now, thanks to Rey, anyone with a bit of Linux skill can do it.
CBL-Mariner is not a Linux desktop. Like Azure Sphere, Microsoft's first specialized Linux distro, which is used for securing edge computing services, it's a server-side Linux. This Microsoft-branded Linux is an internal Linux distribution. It's meant for Microsoft's cloud infrastructure and edge products and services. Its main job is to provide a consistent Linux platform for these devices and services. Just like Fedora is to Red Hat, it keeps Microsoft on Linux's cutting edge. CBL-Mariner is built around the idea that you only need a small common core set of packages to address the needs of cloud and edge services. If you need more, CBL-Mariner also makes it easy to layer on additional packages on top of its common core. Once that's done, its simple build system easily enables you to create RPM packages from SPEC and source files. Or, you can also use it to create ISOs or Virtual hard disk (VHD) images.
As you'd expect the basic CBL-Mariner is a very lightweight Linux. You can use it as a container or a container host. With its limited size also comes a minimal attack surface. This also makes it easy to deploy security patches to it via RPM. Its designers make a particular point of delivering the latest security patches and fixes to its users. For more about its security features see CBL-Mariner's GitHub security features list. Like any other Linux distro, CBL-Mariner is built on the shoulders of giants. Microsoft credits VMware's Photon OS Project, a secure Linux, The Fedora Project, Linux from Scratch -- a guide to building Linux from source, the OpenMamba distro, and, yes, even GNU and the Free Software Foundation (FSF). To try it for yourself, you'll build it on Ubuntu 18.04. Frankly, I'd be surprised if you couldn't build it on any Ubuntu Linux distro from 18.04 on up. I did it on my Ubuntu 20.04.2 desktop. You'll also need the latest version of the Go language and Docker.
CBL-Mariner is not a Linux desktop. Like Azure Sphere, Microsoft's first specialized Linux distro, which is used for securing edge computing services, it's a server-side Linux. This Microsoft-branded Linux is an internal Linux distribution. It's meant for Microsoft's cloud infrastructure and edge products and services. Its main job is to provide a consistent Linux platform for these devices and services. Just like Fedora is to Red Hat, it keeps Microsoft on Linux's cutting edge. CBL-Mariner is built around the idea that you only need a small common core set of packages to address the needs of cloud and edge services. If you need more, CBL-Mariner also makes it easy to layer on additional packages on top of its common core. Once that's done, its simple build system easily enables you to create RPM packages from SPEC and source files. Or, you can also use it to create ISOs or Virtual hard disk (VHD) images.
As you'd expect the basic CBL-Mariner is a very lightweight Linux. You can use it as a container or a container host. With its limited size also comes a minimal attack surface. This also makes it easy to deploy security patches to it via RPM. Its designers make a particular point of delivering the latest security patches and fixes to its users. For more about its security features see CBL-Mariner's GitHub security features list. Like any other Linux distro, CBL-Mariner is built on the shoulders of giants. Microsoft credits VMware's Photon OS Project, a secure Linux, The Fedora Project, Linux from Scratch -- a guide to building Linux from source, the OpenMamba distro, and, yes, even GNU and the Free Software Foundation (FSF). To try it for yourself, you'll build it on Ubuntu 18.04. Frankly, I'd be surprised if you couldn't build it on any Ubuntu Linux distro from 18.04 on up. I did it on my Ubuntu 20.04.2 desktop. You'll also need the latest version of the Go language and Docker.
MS-Linux? (Score:2, Troll)
Will it slowly infect the Open Source world, like SystemD did?
Only time will tell.
Re: (Score:2, Offtopic)
Just wait until systemd starts morphing all the separate plain text config files into a single binary database. It will happen, mark my words.
Re: (Score:3)
Re: (Score:1)
Re: (Score:2)
Thanks to the complete lack of documentation or, more precisely, a specification.
Re: (Score:2)
Re: (Score:2)
No it will never happen,
Why not? Then you can have a nice little configuration GUI.
Re: (Score:1)
Re: (Score:2)
Just wait until systemd starts morphing all the separate plain text config files into a single binary database. It will happen, mark my words.
For what benefit? The monolithic windows registry is an example of why we should avoid this.
Additionally, given where it sits in the operating system, the file system should be the only 'database' around that it depends on.
BTW an interesting video on Systemd and its background: https://www.youtube.com/watch?... [youtube.com]
Re: (Score:3)
Re: (Score:2)
I'll be waiting for gBob.
Bill had Melinda lead that project, turned out to be better than their marriage...
Who would have guessed?
--
If you're from Seattle you might know "Bob Is A Robot"
https://www.youtube.com/watch?... [youtube.com]
Re: (Score:2)
Will it slowly infect the Open Source world, like SystemD did?
Only time will tell.
Why would it? Does it provide technical benefits to the end user while making it easier for distribution maintainers to maintain?
I feel old (Score:5, Insightful)
I can't believe it but here we go.
Are the FreeBSD people still fuming?
Re: (Score:3)
Are the FreeBSD people still fuming?
Do BSD people ever stop fuming?
Re:I feel old (Score:4, Funny)
Are the FreeBSD people still fuming?
Do BSD people ever stop fuming?
I'm pretty sure they are made of the same stuff inside lithium batteries, catches fire when exposed to air and dowsing them in water only intensifies their burn.
Re: I feel old (Score:4)
made of the same stuff inside lithium batteries
You mean...lithium?
Re: I feel old (Score:4)
Oh hey, lithium is the reactive element. You learn something new every day.
Re: (Score:1)
Do BSD people ever stop fuming?
No, and BSD won't stop dying either.
Re: (Score:2)
>No, and BSD won't stop dying either.
At least Netcraft has stopped confirming it.
Re: (Score:2)
I have no opinion about the BSD people. However, I read today that utilities like 'tr' work with Unicode in BSD; they do not all work (in particular, 'tr' does not) with non-ASCII Unicode under Linux. I can see why UTF-16 would be a problem (the BOM), but why UTF-8 doesn't work is a mysterification to me, particularly since it (reportedly) works under BSD.
Re: (Score:2)
Why would we be fuming when you all still think it's a conspiracy of proprietary and open-source companies to subvert the GPL and take away your crown jewels? At least we knew what we were from day one.
Re: (Score:3, Interesting)
Yes, I've made more than a few comments to that effect over the years, and here we are.
I hate to say "I told you so", but I told you so.
And it won't stop there, trust me. MS is trying to figure out how they can infect and pollute the Linux ecosphere however they can.
They may not be able to kill Linux, but they will do their best to fuck it up so they can make money off of it. Look for Linux distros from MS with lots of binary blobs that the distro won't run without.
Does anyone think that if MS threw a few h
Re: (Score:2)
They don't even have to try to mess it up. They just have to contribute code.
Re: (Score:2)
They've been contributing kernel code for a while. IIRC a year or four ago they were in the most-number-of-commits list.
They realize that orgs will still need/want to run Linux for *something* and so they were making changes needed for it to run on Azure.
And their own distro is the obvious next step.
Re: I feel old (Score:2)
This has nothing to do with taking over Linux, from the linked-to article:
The goal of Mariner is to be used as an internal Linux distribution for Microsoftâ(TM)s engineering teams to build cloud infrastructure and edge products and services.
Re: (Score:2)
The goal of Mariner is to be used as an internal Linux distribution for Microsoftâ(TM)s engineering teams to build cloud infrastructure and edge products and services.
If I had a dollar for every time an "internal" tool ended up as a product I'd be a millionaire.
The bottom line is that if it's good enough for them to use in their infrastructure, it's good enough to turn into product and another revenue source. You'll see.
Re: (Score:2)
some form of shitty MS Linux is coming. It'll have a "Windows Compatibility Layer", and it'll work great.
If Microsoft put together a MS Linux that had a Windows compatibility layer that worked great, and if I could patch it to remove all the telemetry bullshit they would no doubt pack into it, I would definitely run it. It wouldn't be the only Linux I'd run, in part because I have machines where I have no need to run Windows applications, and in part because I only trust Microsoft so far. But I have a sizeable library of Windows software (mostly games, surprise!) and I'd like to have some plan as to how to run
Re: (Score:2)
Would be easier if they would just give knowledge and funding to the WINE project, they don't need to maintain a distribution.
Re: (Score:2)
Windows is layers upon layers of crap. Making a compatibility layer work basically involves putting windows into the compatibility layer. Microsoft is not going to give up the rights to the sources any time soon. So I could see them porting NTVDM et al to Linux, but I can't seem them giving Wine what it needs for "full" compatibility. (The quotes are because Windows doesn't have perfect backwards compatibility either, though it is admittedly very good.)
Re: I feel old (Score:4, Interesting)
Right. Their sharing an internal tool developed to support Azure is step one of their plan to what - sell it commercially?
There's little Microsoft could do to make it harder to install - they don't offer an ISO image, the base install is minimalist to the point SSH isn't included, there's no 'desktop' and by default almost nothing is installed.
Snd let's not forget the absolute lack of any announcement, release, or offers of available support - they simply shared out their code on GitHub and a couple MS employees shared blog posts about it. Wow. That's some stealth marketing designed to take over the Linux market!
Re: (Score:1)
https://web.archive.org/web/20... [archive.org]
When was the last time... (Score:2)
the Mariners made the playoffs ?
Re: (Score:1)
If you remove the "L"
irony (Score:2)
Pretty ironic that to compete in the 21st century Microsoft needs Linux.
Re: irony (Score:2)
To perform support functions inside azure.
So what?
Re: (Score:2)
MS has come a long way from 'linux is a cancer'.
https://slashdot.org/story/01/... [slashdot.org]
Apparently, Azure cannot compete without cancer.
Re: irony (Score:2)
It proves that Windows can't provide those support functions, at least not to an acceptable level. But everyone that's used Azure knows that already.
I predicted this 10+ years ago! (Score:3)
I added they would include exchange for free with the deal.
I just can't find the post(s). :(
Re: I predicted this 10+ years ago! (Score:1)
Re: (Score:3)
Same here, although I don't recall if I was labeled a troll for it. Pretty sure I didn't get a warm reception, though.
Windows 365 (Score:3)
This actually makes perfect sense in tandem with their release of Windows 365. Having a very small and secure kernel on a PC that is then used to "stream" a Windows 365 cloud-based desktop environment would be a big winner for them. They could hike up the price for OEM installations of Windows 11 and offer "free" 6 month subscriptions for new PCs. Then people would have to pay a subscription to Microsoft to keep using their own computer.
Re: (Score:2)
Re: Windows 365 (Score:2)
Yeah, I realize the short game is Enterprise but like you said, eventually they make Enterprise features to the public. In this case, I think it strengthens their push to getting folks accustomed to paying a subscription for everything they do on or with a computer.
Re: Windows 365 (Score:2)
This offering has no 'desktop' - its a server appliance distro, nothing more - and this hasn't been 'released' it's being shared, most likely to simplify compliance with GPL requirements.
Re: Windows 365 (Score:2)
This software has nothing to do with Windows 365 announcement - at all:
The goal of Mariner is to be used as an internal Linux distribution for Microsoftâ(TM)s engineering teams to build cloud infrastructure and edge products and services.
Re: (Score:2)
Then people would have to pay a subscription to Microsoft to keep using their own computer.
*sigh*. Repeat after me: Windows 365 is *NOT* a desktop OS for the home PC. It has use cases no different to what any Azure customer has today and the only thing new it brings to the table is being able to run without RDP.
Office 365 also doesn't "stream" from the internet, and locking a system down with subscription has nothing at all to do with where the OS is installed or which hardware it is running on.
These conspiracy theories are tired because they just don't make sense.
All roads lead to *nix? /s (Score:3)
1980: MS releases Xenix [wikipedia.org]
~30 years: MS ignores Linux
2020: MS submitting Hyper-V patches [kernel.org], 50% [microsoft.com] of Azure's VMs runs on Linux.
Re: (Score:2)
While 50% of Azure VMs run Linux, they are hosted on Windows Hyper-V.
Re: (Score:2)
AWS is KVM IIRC, but a bit less expensive. Might be a reason for that.
Re: (Score:2)
~30 years: MS ignores Linux
s/ignores/attacks/
World domination (Score:1)
Microsoft is slowly, but surely, warming up to the idea of Linux running stuff. Granted, they picked the wrong package manager (xbps would have been better), but they're starting to get the idea that resistance is futile.
Every day Linux is, slowly but surely, getting closer to world domination.
Re:World domination (Score:4, Informative)
Every day Linux is, slowly but surely, getting closer to world domination.
Linux already dominates the world. Very little doesn't run it at this point. It's so dominant that MS had to start including it in their OS as they were losing developer market share from lacking it. About the only place it hasn't taken over (yet) are desktops and laptops.
Re: World domination (Score:2)
Except desktops/laptops. Linux has the server market, and the 'shit that fits in your pocket' market, but not desktops or laptops, not even if you count Chromebooks.
Did you actually read the article? This is a minor distribution that MS created to use internally to support Azure infrastructure. They likely posted it on GitHub to comply with GPL requirements.
Re: (Score:2)
Did you actually read the article?
With a four digit uid, you should know it's tradition to not read the article ;-)
Re: (Score:2)
But the GPL doesn't require them to run/maintain RPM repos with binaries, generate documentation and install instructions, etc. This is more than "the legal department says we have to do this". I have a feeling if that were the case then you'd need to send a letter to them and they'd mail back the minimal source needed to comply on a CD.
important thing (Score:2)
but does it run Windows?
more important (Score:3)
Will it blend?
Still more important (Score:2)
Should call it (Score:1)
Bobix, Clippix, or BSODix
Re: Embrace! (Score:2)
Grow up.
It's a special-purpose distribution designed for use building network appliances for inside Azure. It is very stripped-down, a minimal distribution with no 'desktop' per se.
Not quite sure how Yet Another Linux Distribution is going to have any meaningful impact on Linux...
Does it have telemetry ... (Score:2)
that cannot be switched off ?
Has a single one of you... (Score:3, Interesting)
Has a single one of you who so far posted all the classic, stereotypical, anti-microsoft bullshit in this thread, actually tried this new distro ?
I thought so.
Basically, the vast majority of you are just talking out of their ass, because it's "kewl" to bash Microsoft of Slashdot. Tribalism.
Personnaly, I'm going to download, build, and try CBL-mariner, because I like to try new distros, because it seems to be strongly inspired by Fedora (which I like very much), because I can, and, incidentally, because it will piss off a whole bunch of people here.
Don't confuse quality with ideology. (Score:3)
The distro may be perfectly fine! That should not confer sainthood on Redmond. One thing is not the other.
Re: (Score:1)
Don't bother - it doesn't build cleanly - "Have you hydrated the filesystem" - error is in their issue tracker. Could do with better quality control
Re: (Score:2)
Time will tell. Has MS opened up MS Office, or at least maintained a build for Linux?
I thought so.
This isn't about tribalism this is about MS doing what MS wants to improve its market position how it thinks that may be perceived.
To me all their efforts so far seem self-centred and not at all for community good in the sense that Open Source and open standards thrives. If MS worked to make their office formats less binary blob and worked with Libre Office to assist with compatibility then I think we could say
Re: (Score:2)
Why should I try a piece of shit RPM distro?
This is old stuff (Score:2)
Re: (Score:2)
Consider the editors...
This is bad news for Linux security. (Score:3)
Re: (Score:1)
Re: (Score:2)
There is nothing obscure about linux. It may represent a tiny fraction of desktops/laptops, but it is common elsewhere and source is available to go looking for potential exploits to use.
Microsoft will replace their kernel with Linux (Score:2)
Once they have everyone on their cloud based services theyâ(TM)ll have no reason to maintain that bloated kernel.
Itâ(TM)ll take years, but it will happen.
Much like Appleâ(TM)s move from the old MacOS to the NeXT MACH kernel.
Re: (Score:2)
That's the direction I think they will take as it makes no sense now to maintain the Windows kernel when their development efforts are in Azure, that's what makes them the money now.
Wasn't there a computer/desktop as a service article in the last few days?
Typo (Score:1)
I'm assuming that the title for this piece is just an accidental typo, and that it was supposed to be:
Say NO To Microsoft's Own Linux: CBL-Mariner
CBL? (Score:2)
What's it based on? (Score:1)
At this point, it looks slightly messy. Building your own distro - and RPM-based at that - is not a great idea. I hope they've _really_ good dependency management and a top notch security team. If this is their distro for Azure - here's hoping they're prepared to sit on top of every CVE. There's Go in the mix - I hope they've got
enough expertise to keep it going well.
As well as this, let's also hope that they speed up their own internal processes - like getting shims signed for secure boot / accepting other
LinuxMEtoo (Score:2)
If this leads to MS patches to Wine (Score:2)
Trust Microsoft to make the worst choices (Score:2)
You can always trust Microsoft to make the worst choices. RPM. Feh.
Bunch of fucking redhat/gnome toxic retreads hired by Microsoft, that's what's going on here.
I'm waiting (Score:1)
Re:so after decades of trying to destroy GNU/Linux (Score:4, Informative)
> so after decades of trying to destroy Linux they're now our open source pals?
I'm no fan of MS but you DO realize that MS back in 2011 was the 5th largest contributor [zdnet.com] to Linux 3.0, right?
In 2016 they fell outside [linuxfoundation.org] the top 10.
For Linux 5.10 [lwn.net] they aren't even in the top 20 but they are still submitting patches [kernel.org] to Hyper-V.
Re: (Score:2)
Re: (Score:2)
Re: so after decades of trying to destroy GNU/Linu (Score:2)
Embrace, extend... You know how it goes.
Microsoft have to do a lot more to regain the trust they burnt with literally decades of immoral, illegal, corrupting, and anticompetitive behavior. "They have changed" is insufficient.
Re: (Score:1)
Their contributions weren't there to serve the community but to serve the interests of Microsoft so while the metric looks good what was actually contributed was exclusively to get Linux to run inside Azure. So while is nice to think that Microsoft is a great contributor to Linux the reality is if your not using Azure then you won't benefit from any of the work.
Re: (Score:2)
> Who should run Linux in a VM under Microsoft supervision? no one.
Just because you or I don't need this does NOT imply that no one doesn't either. MS feels they can serve their customers needs by supporting Hyper-V. i.e. If there wasn't a business case for it then MS wouldn't be doing it.
That's the beauty of open source -- if people need something they can fix it.
Comment removed (Score:4, Insightful)
Re: (Score:1)
VM on Hyper-V run slower compared to superior alternatives, so of cousre choosing Hyper-V is choosing to run sub-optimally. Besides which it's choosing a less reliable and less secure foundation for virtualization.
Only a Microsoft shill would claim it's well respected, those who virtualize for a living like me think it's hot garbage. Choosing Micosoft has proven to be huge mistake in last two months, easy pickings for malware and ransomware. Why pretend Microsoft can make Enterprise grade stuff? They ca
Re: (Score:2)
Re: (Score:1)
I don't like Microsoft's tactics either, but Azure is nothing to sneeze at.
https://www.parkmycloud.com/bl... [parkmycloud.com].
Re: (Score:2)
so after decades of trying to destroy Linux they're now our open source pals? No, go to hell, Microsoft. We don't need your tentacles in our data centers, nor do we need your Azure.
Microsoft had a different leadership back then and their priorities were different. Today with host services and VMs, in the cloud, making it easier to get people to run in their data centres is probably higher up on their list. Also, they probably have come to accept that as good as Windows is on the desktop, Linux is the current king of the server side, unless you are looking to run your Windows domain.
Also, back then Linux was still the up and coming threat, whereas today it is the server operating syste
Re: (Score:2)
I think if this is Microsoft's intention, they'll find they actually can't handle the community constantly doing stuff which they don't want.
Microsoft is going to contribute stuff and then discover some people don't want it, go their own way and implement it in their own, lighter, more logical way.
Microsoft may find the Linux community hard to deal with. Hard enough to throw up its hands in frustration and say: if you can't beat them, join them.
Then, all of a sudden, they discover they need to deliver actua
Re: Embrace: Check (Score:2)
What makes you think Microsoft is going to pull a 180 degrees turn and produce anything of quality? That would be a radical departure after spending decades producing big ridden software and relying entirely on marketing and anti-competitive practices.
Quoted as the REAL trolls downmodded you (Score:2)
"
Extend: In progress...
Now cue all the naysayers and kids who have yet to make their own experiences. ;)
Yes, we all wish that MS would better itself. I hope for the best too. But I have to accept my past experiences, or I'd be delusional: MS always tried to look like it was nice. And it was always a deliberate lie. Statistically, I'd have more luck getting some from Emma Watson, than not being back-stabbed by Microsoft.
--
I may be direct, and criticize. But I never hate anyone, and am only angry that things
Re: Anything to avoid CentOS Stream (Score:2)
AlmaLinux.
Re: (Score:2)
I haven't tried rocky yet. But so far Alma gives me that old-timey CentOS vibe.