We kick off a brand new show with a discussion about Jason's elementary OS community challenge. Then we get into the pros and cons of setting up your own NAS with OpenMediaVault.

Plus, find out more about your hosts and what we have in store for future episodes.

Links:

• Introducing The Elementary OS 5 Linux Community Challenge — The basic premise of the elementary OS Challenge is simple: ditch Windows, macOS or your current Linux OS of choice and exclusively use elementary OS 5 Juno as your daily driver for two weeks. Explore the curated AppCenter and the bundled software to get all of your working and playing done. For email, for music, for coding, for gaming, for whatever.
• Elementary OS Challenge: Let's Talk About Dark Themes — Like every other deliberate choice the elementary OS developers make (such as minimizing windows), the absence of an optional dark mode reflects their clear and unwavering vision of what a desktop experience should be.
• openmediavault — openmediavault is the next generation network attached storage (NAS) solution based on Debian Linux. It contains services like SSH, (S)FTP, SMB/CIFS, DAAP media server, RSync, BitTorrent client and many more. Thanks to the modular design of the framework it can be enhanced via plugins.

Mike and Wes are back to debate the state of developer tools and ask where Jenkins fits in 2019.

Plus some some anger at Apple, and Mike reveals the latest language that's caught his eye.

Special Guest: Wes Payne.

Links:

• Dokku — A docker-powered PaaS that helps you build and manage the lifecycle of applications.
• Jenkins — The leading open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.
• Jenkins Evergreen — Evergreen is an automatically updating rolling distribution system for Jenkins. It consists of server-side, and client-side components to support a Chrome-like upgrade experience for Jenkins users.
• Jenkins Blue Ocean — Blue Ocean is a project that rethinks the user experience of Jenkins, modelling and presenting the process of software delivery by surfacing information that’s important to development teams with as few clicks as possible.
• Introducing Jenkins X — Jenkins X automates CI/CD and DevOps best practices for you.
• Jenkins Helm Chart — Jenkins master and slave cluster utilizing the Jenkins Kubernetes plugin.
• Jenkins Chef Cookbook — Installs and configures Jenkins CI master & node slaves. Resource providers to support automation via jenkins-cli, including job create/update.
• Why on earth did we choose Jenkins for 2019? — This article tries to explain why the hell Rookout, a relatively new SaaS company, chose to use Jenkins, and what the big advantages are that make Jenkins so great even now, eight years in.

An embarrassing vulnerability has been found in the apt package manager, we’ll break it all down. Plus Alessandro Castellani tells us about his plans to build a professional design tool for Linux.

We also have a batch of big community news, and the case for the cloud killing Open Source.

Special Guests: Alessandro Castellani and Brent Gervais.

Links:

• OggCamp 19 — OggCamp is an unconference celebrating Free Culture, Free and Open Source Software, hardware hacking, digital rights, and all manner of collaborative cultural activities.
• OggCamp on Twitter
• Remote Code Execution in apt-get — A vulnerability in apt allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a machine installing any package. The bug has been fixed in the latest versions of apt.
• Why does APT not use HTTPS?
• Turkish ISP Swapped Downloads of Popular Software with Spyware-Infected Apps
• Which block I/O scheduler is the best? We asked eBPF. — I set out expecting to see differing distributions of latencies for each block scheduler, but ultimately found that I didn’t understand low-level systems behavior to the degree I thought I did.
• Want to spin up Ubuntu VMs from Windows 10's command line, eh? We'll need to see a Multipass. — Windows 10 developers have been gifted yet another way of running Linux on their desktop in the form of Canonical's Multipass.

We welcome Jim to the show, and he and Wes dive deep into all things Let’s Encrypt.

The history, the clients, and the from-the-field details you'll want to know.

Links:

• Let’s Encrypt and CertBot – JRS Systems
• Automatic Certificate Management Environment (ACME) — The surprisingly readable IETF draft.
• How It Works - Let's Encrypt
• ACME Client Implementations
• Certbot — Certbot is EFF's tool to obtain certs from Let's Encrypt.
• acme-nginx: python acme client for nginx — A particularly simple client that is useful for understanding the protocol details.
• Caddy - The HTTP/2 Web Server with Automatic HTTPS
• mod_md: Let's Encrypt (ACME) support for Apache httpd
• Traefik - The Cloud Native Edge Router
• Looking Forward to 2019 - Let's Encrypt — We’re now serving more than 150 million websites while maintaining a stellar security and compliance track record. Most importantly though, the Web went from 67% encrypted page loads to 77% in 2018, according to statistics from Mozilla. This is an incredible rate of change!
• Let's Encrypt ACME v2 API Announcements — Now that the draft standard is in last-call and the pace of major changes has slowed, we’re able to release a “v2” API that is much closer to what will become the final ACME RFC.
• Let's Encrypt disables TLS-SNI-01 validation — The researcher noticed that "at least two" large hosting providers host many users on the same IP address and users are able to upload certificates for arbitrary names without proving they have control of a domain.
• A Technical Deep Dive on Using Certbot to Secure your Mailserver from the EFF — With the most recent release of Certbot v0.29.1, we’ve added some features which make it much easier to use with both Sendmail and Exim.

Another troubling week for MongoDB, ZFS On Linux lands a kernel workaround, and 600 days of postmarketOS.

Plus our thoughts on the new Project Trident release, and Mozilla ending their Test Pilot program.

Links:

• MongoDB removed from major distros — Red Hat won't use MongoDB in Red Hat Enterprise Linux or Fedora thanks to MongoDB's new Server Side Public License.
• ZFS On Linux Landing Workaround For Linux 5.0 Kernel Support — There's no word yet on how this would affect ZFS Linux performance for end-users.
• First release of Project Trident — This version is based off the 18.12-stable branch of TrueOS (FreeBSD 13-CURRENT), using the new TrueOS distribution framework with several add-ons by Project Trident itself.
• Android-x86 8.1-r1 (Oreo-x86) released — Add Taskbar as an alternative launcher which puts a start menu and recent apps tray on top of your screen and support freeform window mode.
• 600 days of postmarketOS — postmarketOS is aiming for a ten year life-cycle for smartphones
• Mozilla kills Test Pilot Program — So today, we are announcing that we will be moving to a new structure that will demonstrate our ability to innovate in exciting ways and as a result we are closing the Test Pilot program as we’ve known it.
• Mozilla Kills Default Support for Adobe Flash in Firefox 69

Wes and Jim have some great new SNAP in the works, in the meantime Chris stops by to keep you updated and share his favorite "hacker" story of the week.

Is the decision to listen to this really up to you, or is it predetermined by chemistry and physics? Can mobile Linux ever succeed beyond a small niche?

Plus hoarding physical media, terrible books, and extreme weather.

00:00:35 #AskError: What's the worst book you've ever read?

SCP client vulnerabilities, BSDs vs Linux benchmarks on a Tyan EPYC Server, fame for the Unix inventors, Die IPv4, GhostBSD 18.12 released, Unix in pictures, and more.

ZFS on Linux is becoming the official upstream project of all major ZFS implementations, even the BSDs. But recent kernel changes prevent ZFS from even building on Linux. Neal Gompa joins us to discuss why it all matters.

Plus some surprising community news, and a few great picks!

Special Guests: Dalton Durst and Neal Gompa.

Links:

• This Guy Made a Computer Mouse That Is Itself a Computer
• Apple’s FoundationDB open sources CloudKit database layer — The FoundationDB Record Layer is an open source library that provides a record-oriented datastore with semantics similar to a relational database, implemented on top of FoundationDB.
• FoundationDB Record Layer: A Multi-Tenant Structured Datastore
• 'Celluloid' is the new name of GNOME MPV — “The current name is a bit unelegant, and doesn’t really fit in with other apps on the GNOME platform. Good app names are usually a single noun that’s related to the app’s domain (e.g. “Fragments” for a torrent app, or “Peek” for a screen recorder).”
• Google is Adding 'Apt Search' to the ChromeOS App Launcher — Now, based on a code commit uncovered by Chrome Story, users of the Linux (beta) for Chromebooks will also be able to search for and install Linux apps from the Chrome OS launcher.

Wes joins Mike for a special Coder. They share thoughts on the costs and benefits of Optionals in Swift, uncover Mike's secret love affair with F#, and debate the true value of serverless.

Special Guest: Wes Payne.

Links:

• Mark's IoT Feedback
• IOKit — The I/O Kit framework implements non-kernel access to I/O Kit objects (drivers and nubs) through the device-interface mechanism.
• Does iPad Pro (2018) support IOKit? — IOKit has included iOS support since 2.0
• Elixir — Elixir is a dynamic, functional language designed for building scalable and maintainable applications.
• Craft and deploy bulletproof embedded software in Elixir
• NervesHub — NervesHub helps you manage firmware updates for Nerves devices.
• Elixir Mix Podcast — A weekly discussion with Elixir developers.
• Optional - Swift Standard Library — A type that represents either a wrapped value or nil, the absence of a value.
• Swift optionals explained simply
• F# Software Foundation — F# is a mature, open source, cross-platform, functional-first programming language
• Datomic Ions — Ions let you develop applications for the cloud by deploying your code to a running Datomic cluster.