Re: Three reasons why GNU/Linux is better for Web servers than OS X
Posted by: Anonymous
[ip: 66.240.11.2]
on July 11, 2008 02:15 PM
>going between Linux and Mac OS X is just frustrating
so is going between linux and BSD.
I work on OSX, linux (whatever flavor) and FreeBSD. They all have their quirks. With exposed web services I prefer to gcc everything, though I don't have the choice where I currently work.
my 2 cents from a developer's point of view. IMHO packages are a horrible choice for anything which is critical and exposed. When you are dependent on the package maintainers for your critical web services, you can be left high and dry when you need a package the most. If the maintainer isn't fast enough you become a victim. With source you have complete control, but you'd better know what you are doing 8) By compiling into /usr/local you avoid clobbering system files provided by packages, but can remove dependance on the vendor provided packages for the important stuff.
The last openssl worm is a perfect example. Our apache vendor was horribly slow to patch that and release packages. Once bitten, twice shy... Since then I've built my stack from source when allowed to. I don't like being made to wait for critical patches. Usually you aren't allowed to wait if you have a good infosec team who is serious about security.
Learn about Linux
Download Linux
Get Linux help
Re: Three reasons why GNU/Linux is better for Web servers than OS X
Posted by: Anonymous [ip: 66.240.11.2] on July 11, 2008 02:15 PMso is going between linux and BSD.
I work on OSX, linux (whatever flavor) and FreeBSD. They all have their quirks. With exposed web services I prefer to gcc everything, though I don't have the choice where I currently work.
my 2 cents from a developer's point of view. IMHO packages are a horrible choice for anything which is critical and exposed. When you are dependent on the package maintainers for your critical web services, you can be left high and dry when you need a package the most. If the maintainer isn't fast enough you become a victim. With source you have complete control, but you'd better know what you are doing 8) By compiling into /usr/local you avoid clobbering system files provided by packages, but can remove dependance on the vendor provided packages for the important stuff.
The last openssl worm is a perfect example. Our apache vendor was horribly slow to patch that and release packages. Once bitten, twice shy... Since then I've built my stack from source when allowed to. I don't like being made to wait for critical patches. Usually you aren't allowed to wait if you have a good infosec team who is serious about security.
-Viz
#