Download Safing's Portmaster, or subscribe to the SPN, and take control of your network traffic: https://safing.io/ Grab a brand new laptop or desktop running Linux:https://www.tuxedocomputers.com/en 👏 SUPPORT THE CHANNEL: Get access to a weekly podcast, vote on the next topics I cover, and get your name in the credits: YouTube: null Patreon: https://www.patreon.com/thelinuxexperiment Or, you can donate whatever you want: https://paypal.me/thelinuxexp?locale.x=fr_FR 📹 MORE VIDEOS FROM ME Linux news in Shorts format: https://www.youtube.com/channel/UCtZp0mK9IBrpS2-jNzMZmoA Gaming on Linux: https://www.youtube.com/channel/UCaw_Lz7oifDb-PZCAcZ07kw I'm also on ODYSEE: https://odysee.com/$/invite/@TheLinuxExperiment:e 🏆 FOLLOW ME ELSEWHERE: Twitter : http://twitter.com/thelinuxEXP Instagram: https://www.instagram.com/nick_thelinuxexp/ Mastodon: https://mastodon.social/web/@thelinuxEXP Pixelfed: https://pixelfed.social/TLENick This video is distributed under the Creative Commons Share Alike license. #manjaro #linux 00:00 Intro 00:41 Sponsor: Monitor and secure your internet connection with Safing 01:45 How Manjaro works 03:39 Security problems 05:20 Packaging non-stable changes without talking with upstream 07:30 AUR integration and issues 09:55 Bad image, and bad decisions 12:43 What's the issue? 14:46 Sponsor: Get a device that's fully Linux compatible with Tuxedo 15:53 Support the channel The first problem, which might seem small, is in how the company handles very basic stuff, like security certificates. Manjaro has let their certificates expire 4 times now. It might seem like a very small issue, but it's extremely basic. Renewing certificates is extremely easy, and can be automated. Manjaro's inability to anticipate this or automate it isn't a good sign in terms of how seriously they take their security. Manjaro also has the habit of trying to release things that aren't ready, without checking with the upstream devs first. One example is with the Asahi Linux project, where Manjaro decided that having Apple Silicon support early would be cool, and shipped a broken kernel. https://fosstodon.org/web/@calebccff/108645930580968593 https://www.reddit.com/r/linux/comments/xtylya/manjaro_is_shipping_an_unstable_kernel_build_that/ This is what led to the "don't ship it" manifesto from various developers, and probably what led the Bottles developer to also ask distros to not repackage their software without talking to them first. https://dont-ship.it/ https://usebottles.com/blog/an-open-letter/ Another problem that arose was the use of the AUR in Manjaro. Except the AUR doesn't really work well on Manjaro. Because the AUR assumes you're using the latest Arch software, with the latest versions Arch releases. Which Manjaro doesn't, because they hold back packages for testing. Which means that installing stuff from the AUR can seriously break your Manjaro system if you're not careful. Manjaro's AUR helper had a bug in it, that sent thousands of requests to the AUR's servers for each Manjaro user. This resulted in an involuntary DDOS attack, short for distributed denial of service https://www.reddit.com/r/linux/comments/q85t8n/pamac_manjaros_package_manager_gui_has_been/ https://gitlab.manjaro.org/applications/pamac/-/issues/1135 And then there are a few other issues. The project lead wanted to buy a new laptop using Manjaro funds, for about 2000€. The treasurer refused the expense, because it went against Manjaro's policy. This led to an argument with the project lead, and surfaced other expenses that hadn't been discussed according to Manjaro's Policy, and led the treasurer to leave the company, leaving the project lead in full control of all the community funds. https://web.archive.org/web/20200807042341/https://forum.manjaro.org/t/change-of-treasurer-for-manjaro-community-funds/154888 Then Manjaro announced that they would be shipping SoftMaker office by default instead of LibreOffice. Replacing an open source component with a proprietary one isn't really something you'd expect from a Linux distribution. http://web.archive.org/web/20191210181928/https://forum.manjaro.org/t/testing-update-2019-07-29-kernels-xfce-4-14-pre3-haskell/96690 Manjaro has also often been accused of not contributing to upstream, especially on the mobile front. Someone involved in the Pine64 community points out that the fact that most mobile Pine64 projects are starting to falter is due to the fact that only Manjaro is a supported distribution for the Pinephone, where before there were a myriad of community editions, and that Manjaro doesn't really contribute to supporting the hardware. https://blog.brixit.nl/why-i-left-pine64/