I made this for you.

Manjaro let their SSL certificate expire again
8 months ago by qaz to c/linuxmemes
I made this about you

(Me too lmao)
But I mean the actual meme is pretty old one(so is the meme I made)
Yeah, I am the same. CachyOS has been working better for me.
Its funny because I used it to install onto a gaming laptop because everything configs for the laptop nvidia card with no effort on my part. But I don't game on it, lol.
It is remarkably snappy though, fastest feeling OS that has ever been on this laptop.
Edit: first time I mention it and first time it broke. Update today kde is broken with a black screen at login.
Having backups set up for us automatically makes me sweat less when I deal with a pacnew file, and I absolutely fucked SDDM the first time I tried to use diff lmao.
Garuda Arch has been my favorite, but Endeavor did me right for a while.
I really loved Garuda but the rolling updates kept breaking my NVIDIA drivers :(
It kind of makes it hard to trust this distro when they fuck up the most basic things so often and frequently.
Not just with their web hosting. I've had so many updates break random crap it's not even funny. Recently, a random update I did not approve suddenly had kwallet not working. A core piece of a DE they provide a bundled version for. I had to start kwalletd myself every time I wanted to use it.
It didn't start that way on the fresh install. I didn't do anything myself except reboot. Then suddenly my scripts that nab from the keystore are failing and asking me for passwords and what a mess.
That's just a more recent example. I remember having quite a few random issues on update in the past, though the only other one I explicitly remember is the DE suddenly failing to start. Like, at all. Luckily I had a recent timeshift backup saved elsewhere, restored, and ignored the update notifications for a long while...
Yeah Manjaro either needs to figure their shit out or everybody should stop using it.
The one thing manjaro had going for it was it was easy install arch. Now we have endeavor, garuda, cachy, and several other easy install arch. Including archinstall. Who all follow vanilla arch much closer, not introducing major breaking changes. There's literally no good reason to still use manjaro.
That said the servo aur is currently broken under catchy. Unable to update for the last couple of weeks. But that's been my only hiccup. And a negligible one at that.
I tried it out like 5 years ago. A month after using it a random update broke the DE.
Right then and there I wrote off the whole distro and haven't touched it since.
I don't know why people are even using it all these years later.
At this point, I have to assume they're doing it on purpose.
Wow. How does this happen when letsencrypt exists? Or certbot?
More importantly.. How does this happen again?
There is a significant amount of infrastructure that does not support cert bot out there.
That being said they are using LE but looks like the renew failed.
https://www.ssllabs.com/ssltest/analyze.html?d=manjaro.org&s=116.203.91.91&latest=
There is a significant amount of infrastructure that does not support cert bot out there.
Example? I believe you, I just can't imagine what would preclude a public-facing server from using Caddy or certbot. Certainly not for a project maintaining an Arch-derivative distribution.
I donโt have a concrete example but Iโve talked to an online friend who works in IT and he claims the majority of his work is just renewing and applying certificates. Now he made it sound like upper management wanted them to specifically use a certain certificate provider, and I donโt know their exact setup. I of course have mentioned certbot and letsecrypt to him but yea, heโs apparently constantly managing certs. Whether thatโs due to lack of motivation to automate or upper managements dumb requests idk
LetsEncrypt only does level one (domain validated certificates), it doesn't offer organisation or extended validation.
Basically they only prove you control example.com, they don't prove you are example PLC.
Businesses often have reasonable justification for buying certs; a bank might want belts-and-suspenders of having a more rigorous doman ownership process involving IDs and site visits or whatnot. It's a space where cert providers can add value. But for a FOSS project, it's akin to รพem self-hosting at a secure site; it's unnecessarily expensive and can lead to sotuatiokns like รพis.
I think he's referring to certain enterprise switches and other networking gear that has basically zero support for automation.
For me personally, I would be replacing that equipment but some businesses would rather pay a few hundred bucks every year + manpower to replace the certs than a few thousand once to replace the equipment.
I am trying to figure out how my little non interesting domains have kept certified for decades now without lapsing, while they can't seem to keep it together even after a failure.
Hard to imagine that they are so big that people simply forgot to get notices or manage the certs after it has happened so many times before.
There is a significant amount of infrastructure that does not support cert bot out there.
Then there should be a significant amount of infrastructure behind something like caddy.
Iโm not aware of any web server thatโs still maintained and has wide adoption (so no web servers written by a teenager in Haskell to just fuck around and figure out how web servers work) that doesnโt support the ACME protocol. I highly doubt Manjaro doesnโt use something mainline like nginx.
The renew failing shouldโve sent someone a warning that manual intervention is required. This happens from time to time but the fact this went longer than a few minutes unfortunately says a lot about the project.
There is a significant amount of infrastructure that does not support cert bot out there.
Skill issue
*again again
At least the sixth time even. Four cases are documented here and another one was just three months ago. This last link points to reddit, but there a manjaro maintainer also explains why it keeps happening:
Politics within the project are the issue.
The fix for these issues have been build for about a year already. But those who have access to stuff like DNS and hosting are currently incapable of making any agreement on any topic preventing trivial fixes such as this from being implemented.
You don't own the root certificate even when you aren't using Let's Encrypt, unless you self sign or want to become a certificate authority. Am I missing something? Is there some controversy about Let's Encrypt I'm unaware of?
I just mean they own it, I know that you can't decrypt encrypted messages with root certificate, but you can abuse it in the case of being man in the middle. Of course I don't think that let's encrypt are doing that, but there other entities that would really enjoy having that toolset for hundred of millions of services that rely on let's encrypt.
And if you look at the ones who sponsor Lets encrypt, I don't think that any of them would bat an eye (except for EFF) if for instance the pedophile chief decided that they need to change leadership. Or hey, we NSA also have access to the credentials to the root certificate.
Something being free is not always the best option, when it comes to security. And it's not impossible that such a large entity can become compromised through pressure, especially when they live on support from private organizations, who have time and time again, shown that they are not trust worthy and would choose to do unethical thing, if that benefits them.
I'm a little confused why you view this as an issue because in the alternative, manually installing certificates instead of using Let's Encrypt's tool, you still wouldn't own the root certificate.
I used Manjaro for a few years before switching to Arch. Manjaro finds a nice sweespot for "Arch but also nice". Furthermore, Arch has gotten much more user friendly in the last 5 years or so. Back in late 2010s, Manjaro was adding a lot of value on top of Arch.
What really bothered me about Manjaro was the "forum cops" they employ, who are super aggressive to newcomers and unhelpful. It was not a nice experience to seek help. Say what you will about Arch people, they are at least helpful.
I finally switched to Arch when I got my new machine. I recommend the same.
Just to add to the 2010s bit, I tried Arch in like... 2015 I think it would've been. I followed the wiki to the letter. It was not my first Linux install, I'd been experimenting with a lot of distros for five years by then. I could not get it to work. To be fair, I still haven't tried Arch in 2026, I use CachyOS, but I think back then Manjaro was really the only thing providing that type of experience. Everyone holds the Arch wiki on a pedestal because it's so useful, but the install guide and state of Arch back in 2015 simply wasn't what it is today. I haven't ever used Manjaro so I can't really speak for it, but that's just sort of my guess as someone who had difficulty with Arch from that era. Luckily we have CachyOS, EndeavorOS, and, presumably, a better install process on vanilla Arch now.
If someone still wants "Arch but also nice," I'd point them at Garuda tbh. I really liked it but the rolling updates kept breaking my NVIDIA drivers. If not for that I might still be using it.
Those cycles are meant for testing a coherent set of versions. If you update Arch on a monthly basis I'm not quite sure you got the same testing. I've been running Manjaro for 8 years now (laptop for business and family stuff) and I can't remember any issue with it. I also have Endeavour and Debian on my desktop (gaming / casual) and server.
My thinking process years ago was:
I had Debian and was not satisfied with the fact that I had to wait ages for updates of stuff like KDE Plasma. I wanted something with shorter update intervals.
I decided against Ubuntu because of the company behind it.
I decided against Mint, because it's on level 3 in the derivate tree, so more places where something can go wrong.
Then I found Manjaro and liked it from the beginning. Very easy to install (no script necessary), awesome custom Plasma theme, short update intervals, ...
Arch can be scary. I wanted a reliable, easy OS for private use and I knew, I get that with Manjaro. With Arch, I was not sure whether I might FCK something up.
from what ive heard of manjaro, they do less testing on new packages than arch. also, nothing on arch ever broke my pc except for the clock, which was probably because i configured it wrong (didn't use archinstall).
only time an update has ever done anything bad was like a week ago when plasma 6.6 launched and the login freezed the pc, but that was on cachyos, not main arch.
I think, I haven't had any mentionable problem with Manjaro over multiple years.
Because you can setup Vanilla Arch to be exactly like that derivative
There's the difference, you don't have to set the derivative up.
Back in 2015 for gaming PC: Steam and Nvidia driver updates via package manager, Xfce (used it before on multiple laptops), promise to be more stable than vanilla arch.
Well shit... It looks like they were on a good run too.
I wouldn't go that far
With how it's going, Will systemd also eventually be able to occasionally remind my Asian ass that I am a failure?
What?
As posted at this new instance which appears to be trying to fill the void (heh) left by lemmyNSFW:
Xaeg/Yay was the owner of LemmyNSFW, and he had access to and paid for the domain, server, and everything else related to the site. He has been AWOL for about 6 months now, and suddenly this month, the server and the domain stopped being paid for. I have no access to the server to get the database.
Because of this LemmyNSFW as it was, and all the content on it, much to my dismay, seems to have died.
If they were in the US then they might be in ๐ง custody
Damn. Fuck ice. In general, not for potentially being related to this.
install gentoo
Heh
Manjaro has always seemed a little iffy to me. Itโs a . . . clone of a Chinese distro? Or something? I dunno.
https://manjaro.org/ now is now for sale! Shit
It helps to type the url correctly
@lemmy.world
Hint: :q!
Community rules (click to expand)
sudo in Windows.We all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
ย
Please report posts and comments that break these rules!
Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.
go to feed...
@lemmy.world
Hint: :q!
Community rules (click to expand)
sudo in Windows.We all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
ย
Please report posts and comments that break these rules!
Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.
go to feed...
Purple Arch has yet to fail me.
save