this post was submitted on 24 Oct 2025
41 points (91.8% liked)

Linux

9942 readers
2055 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS
 

Sometimes people tell me I should have gone with either Linux Mint or EndeavourOS, and otherwise don't really tell me why it's bad, just that it's bad. So far I only could find one thing, which is that their repo isn't 100% rolling for stability, and sometimes it does not guarantee stability.

you are viewing a single comment's thread
view the rest of the comments
[–] danielton1@lemmy.world 1 points 14 hours ago (1 children)

I'm sorry, but the fact that they failed to renew their SSL certificates and told their users to change their system clocks as a workaround, not once, not twice, but FIVE times so far... well, that's not petty. That's security 101. That tells me they can't be trusted to provide a secure operating system.

The rest of your points, I mostly agree with you on. I really wanted to like Manjaro when I tried it a few years ago. I would love to see more newbie-friendly distros that aren't based on Ubuntu and GNOME. But I can't recommend a distro that can't even manage to do SSL renewals right.

[–] Fizz@lemmy.nz 1 points 14 hours ago (1 children)

I am defending Manjaro not because I think its a top tier distro that people NEED to use but only because I think the criticism is overblown and its becoming dogma and it needs to be pushed back. I also do not like seeing users who would be fine on the distro are pushed away with scary warnings. There are very few distro choices that new users would pick that would actually be a bad choice, the ones I would say would be Kali and Arch. The rest are fine. Remember when a user asks hey I wanted to try out this distro call Manjaro it seems good and there is like 100 comments making it seem like the stupidest most dangerous choice and recommending a slew of other options they're probably less likely to suddenly trust that advice and more likely to just stay in the comfort of what they are already on.

For the Manjaro defense I only find 3 instances of their SSL failing and they seem to be for non critical subdomains on the web. Its avoidable but its a mild inconvenience with no critical impact. During my search I see that a ton of the biggest tech companies in the world have had the same issue multiple times on actually critical domains and other distros have had the same issue. Its an SSL cert expiring its like one of the most basic fuckups in IT and it catches everyone thats why a whole industry got made out of products that fix the problem.

The other thing people bring up is the AUR DDos which sounds bad but reading through the AUR bug thread it didnt seem to be a big deal and it had happened multiple times before from bugs in aur helpers. Its software this shit happens, it happens everywhere at every level. Why are we holding a mid tier linux distro with probably 10k users to the standards of apple/microsoft (who have all had similar issues and far far bigger fuckups).

[–] danielton1@lemmy.world 1 points 3 hours ago

All five times are listed here.

None of that other stuff matters if they're this incompetent at something as basic as SSL certificates. It's not dogma. It's not nitpicking. This is Security 101. I can't recommend a distro that fails this badly at a basic security task to newcomers.