Hacker News new | ask | show | jobs
by treekogreen 1528 days ago
Bit of a weak argument as you require and internet conneciton to pull the source.
7 comments

I can go to my nearest journal kiosk and I'm pretty confident I can find a paper Linux magazine which comes a cd with recent kernel source
> I can go to my nearest journal kiosk and I'm pretty confident I can find a paper Linux magazine which comes a cd with recent kernel source

This has to be one of the most insane threads I've read in a while.

In all likelihood, no you couldn’t. Because nobody buys those anymore.
Funny, here in Europe there are plenty of those on sale, so apparently people do still buy them.
Not in my European country at least. I haven't see a magazine with CD-ROM in years. And most people don't have a cd-dom reader anymore
The argument isn’t that they don’t exist or are not published, it’s that they are not published widely.

Given that the circulation for Linuxformat was just 19,000 in 2014, it seems that that number backs up the position that you wouldn’t find this at a street level vendor.

Street level magazine kiosks sell magazines with up to date Linux kernel CD roms? That’s a lie. I’ve literally never seen that anywhere in Europe in the last decade. You might be able to find them in specialist shops or larger supermarkets, as you can in the UK, but street level kiosks? Get real.
I'm in france, I regularly buy one of those when I take the train lol.

We have quite a bit of choice and they all have recent-ish issues: https://www.journaux.fr/linux_informatique_1_0_130.html and you can find at least a couple of them in most kiosks ; at least Linux Identity always comes with a physical disk

After using your time machine to go back to 2010.
Just went to the first one I could find and there are 4 different Linux magazines lol, here's a pic: https://ibb.co/djscJ94
If that's the case, you can do this with cargo vendor, as many other threads have mentioned
Do paper linux magazines actually exist any more?

10-15 years ago I'd agree with you, now... that would actually surprise me.

you have a cd reader...?
This is not particularly relevant, as it could also be an USB stick or a SD card.

(But why wouldn't you have readers for all 3, potentially as peripherals if you don't have a desktop ?)

The last CD or DVD I had was over ten years ago. I just have no use for them.
And you don't have any friends & family that regularly come for help ?

When I built my current PC, I didn't bother with a 3.5" floppy drive, but I still had to get an USB one a couple of years ago when an acquaintance showed up needing to read some files from them...

I do but they don't use them either.
...and you don't? I can lend you mine :3
I am not sure if you are even serious
Not at all. Pulling sources, reviewing and vetting them and finally building are completely different steps.

Linux package maintainers do the vetting. Buildbots build in a clean room environment, without Internet access.

If you mix up the steps supply chain security is gone.

In certain environments i have extensively worked in, the machines on which one builds are only allowed internet access on an ip:port basis after months long process involving dozens of people in multiple teams.

Working offline is needed

And you can then stick that on a network drive or scp it on internal airgapped networks without direct internet access.
And you can do the same with the Rust dependencies (with cargo-vendor for example) Cargo has even an --offline flag.
A DVD on a Linux magazine will do.
Many people download once, use constantly and on many machines. My dev PC was never online since it was put together, all patching and updating was performed offline. All builds were bit-to-bit reproducible.
Says who? (inserts CDROM…)