The release of Ubuntu 'Bionic Beaver' 18.04 is important.
Not only is it the LTS with five years worth of support that will see millions of users installing Ubuntu for the first time with GNOME firmly nestled in the desktop environment slot, but it could be the release that sees Canonical, the company behind Ubuntu, through IPO.
We spoke to Will Cooke, Canonical's desktop director and David Bitton, engineering manager of Ubuntu Server, about the overall goals for Ubuntu 18.04 LTS and future plans.WILL COOKE: So were at another LTS release, which comes with five years worth of support.
And thats important to our typical user base, because they dont want to be having to well, they want to be safe in the knowledge that the platform that theyre working on, and that they rely on, is going to be secure and up to date, and is going to be kept running for a long time.Typically, we find that most of our users like to install it once, and then leave it alone, and know that itll be looked after itself.
Thats more important in the cloud environment than it is on the desktop, perhaps.
But the joy of Ubuntu is that the packages that you run on your desktop lets say that youre a web developer, and you want to run an Apache instance and a MySQL instance, and you want to have your developer tools on there.
You can do all of that development on your machine, and then deploy it to the cloud, running the same version of Ubuntu, and be safe in the knowledge that the packages that are installed on your desktop are exactly the same as the ones that are in your enterprise installation.And having those supported for five years means that you dont have to keep upgrading your machines.
And when youve got thousands of machines deployed in the cloud in some way, the last thing you want to be doing is maintaining those every single year and upgrading it, and dealing with all the fallout that happens there.So the overarching theme for Ubuntu in 18.04 is this ability to develop locally and deploy to either the public cloud, to your private cloud, whatever you want to do your servers.
But also edge devices, as well.So weve made lots of advances in our Ubuntu Core products, which is a really small, cut-down version of Ubuntu, which shifts with just the bare minimum that you need to bring a device up and get it on the network.And so, the packages that you can deploy to your service, to your Desktop, can also be deployed to the IoT devices, to the edge devices, to your network switches you know, across the board.
And that gives you a really unparalleled ability and reliability to know that the stuff youre working on can be packaged up, pushed out to these other devices, and it will continue to work in the same way that it works on your Desktop as it does on all of these other devices.And a key player in that story is the snap packages that weve been working on.
These are self-contained binaries that work not only on Ubuntu, but also on Fedora or CentOS or Arch.So as an application developer, for example, [] you can bundle up all of those dependencies into a self-continued package, and then push that out to your various devices.
And you know that it will work, whether they run Ubuntu or not.Thats a really powerful message to developers: do your work on Ubuntu; package it up; and push it out to whatever device that is running Linux, and you can be reliant on it and continuing to work for the next five years.Ubuntu 18.04 has a strong focus on snaps.
This is a new package format, which enables app developers to bundle their software, with all dependencies included, into a secure, sandboxed container that runs on Ubuntu Linux (and other support Linux distributions, such as Solus).
This has prompted many high-profile but proprietary software products, including Slack and Skype, to appear in the Snap Store in time for the new release.What is the common problem that developers have with DEBs and RPMs thats led to the development of the snaps formatWC: There are a few.
Packaging DEBs or RPMs, for that matter are a bit of a black art.
Theres a certain amount of magic involved in that.
And the learning process to go through it, to understand how to correctly package something as a DEB or RPM the barrier to entry is pretty high, there.
So snaps simplify a lot of that.Again, part of the fact, really, is this ability to bundle all the dependencies with it.
If you package your application and you say, OK, I depend on this version of this library for this architecture, then the dependency resolution might take care of that for you.
It probably would do.But as soon as your underlying OS changes that library, for example, then your package breaks.
And you can never be quite sure where that package is going to be deployed, and what version of what operating system its going to end up on.So by bundling all of that into a snap, then you are absolutely certain that all of your dependencies are shipped along with your application.
So when it gets to the other end, it will open and run correctly.The other key feature, in my mind, of snaps, is the security confinement aspect.
X.Org, for example, is a bit long in the tooth now.
It was never really designed with secure computing in mind.
So its fairly easy well, not necessarily X.Org actually, but the whole OS; if something is running as a root, or its running as your user, then it has the permissions of that user thats running it.So you can install an application where the dev, for example, could go into your home directory, go into your SSH keys directory, make a copy of those, and email them off somewhere.
It will do that with the same permissions as the user thats running it.
And yeah, thats a real concern.With snaps and confinements, you can say, This application, this snap, is not allowed access to those things.
It physically wont be able to read those files off the disk.
They dont exist as far as its concerned.So from a users perspective, you can download this new application because you heard about it on the internet.
You dont know what it is, you dont know where it comes from, but you can install it and you can run it, safe in the knowledge that its not going to be able to just walk over your disk and have a look through all these files that you dont necessarily want it to have access to.So that, in my mind, are the two key stories.
The write once run anywhere side of things, and then the confinement security aspect as well.heBhRtg2aE6BK6S9qiGcye.jpg#