fidzu : Ubuntu

Ghostty's latest Linux builds adds dropdown terminal support on Wayland, integrated tabs and titlebars, background images, command palette and more.

You're reading Ghostty 1.2 Adds Quick Terminal on Linux, Command Palette + More, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

12 Oct 2025 10:40pm GMT

See live clock, calendar and weather icons on the Ubuntu Dock by installing this GNOME extension, compatible with GNOME 46 and later. A neat thing!

You're reading This Extension Adds Live Calendar & Clock Icons to Ubuntu Dock, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

10 Oct 2025 4:18pm GMT

October 9, 2025 - The Kubuntu team is thrilled to announce the release of Kubuntu 25.10, codenamed "Questing Quokka"!

As a community-driven flavor of Ubuntu, Kubuntu continues its mission to deliver the cutting-edge KDE software ecosystem on top of Ubuntu's rock-solid foundation. This interim release, aligned with Ubuntu's six-month cycle, packs in the freshest updates to Plasma, Frameworks, and applications, ensuring a smooth, performant desktop experience for millions of users worldwide.

Building on the Ubuntu 25.10 base released today by Canonical, Kubuntu 25.10 introduces Plasma 6.4 as the flagship update, alongside Qt 6.9, KDE Frameworks 6.17.0, and the latest KDE Gear 25.08 suite.

We've also upgraded to Linux kernel 6.17 for enhanced hardware support and efficiency. Whether you're a developer, creator, or everyday user, this release emphasizes Wayland adoption, modern security, and seamless integration with the open source world.

Kubuntu remains completely free to download, use, and share-empowering our global community to innovate without barriers. Download it now from kubuntu.org/getkubuntu and join the conversation in our forums or IRC channels.

Three Exciting New Features for Kubuntu Users

Here are three standout enhancements that Kubuntu 25.10 brings to your desktop, designed to make your workflow faster, more secure, and visually stunning:

• KDE Plasma 6.4: A Refined and Responsive Desktop Dive into the fifth feature release of Plasma 6, complete with Qt 6.8 and Frameworks 6.17.0. This update refines the desktop with smoother animations, improved widget customization, and better multi-monitor handling. It's a big win for productivity, letting you tailor your environment like never before while enjoying the stability of Ubuntu's core.
  
• Plasma Wayland as Default Session Say goodbye to legacy X11 limitations-Wayland is now the go-to session for superior graphics rendering, reduced latency, and enhanced security. With hardware-accelerated compositing baked in, you'll notice snappier video playback and app responsiveness. (X11 fans, no worries: it's still available via a simple package install.) This shift future-proofs your setup for the next era of Linux desktops.
  
• Rust-Powered sudo-rs for Safer System Management Leveraging Ubuntu's new memory-safe implementations, Kubuntu defaults to sudo-rs-a Rust-based reimplementation of sudo. It slashes vulnerabilities common in traditional tools, making privilege escalation quicker and more secure without compromising usability. Paired with NTS-enabled NTP for tamper-proof time syncing, your system stays locked down while you focus on what matters.

What's New Under the Hood

Beyond these highlights, Kubuntu 25.10 inherits Ubuntu's robust platform upgrades:

• Linux Kernel 6.17: Better Arm and RISC-V support, nested virtualization, and Intel TDX for confidential computing-ideal for developers and edge deployments.
  
• Updated Developer Tools: OpenJDK 25, Python 3.14 RC3, Golang 1.25, GCC 15, and Rust 1.85 (with 1.88 available) to supercharge your coding sessions.
  
• Enhanced Security and Accessibility: Experimental TPM-backed full disk encryption with recovery options, improved Bluetooth audio (AAC codecs via restricted extras), and broader accessibility features to meet global standards.
  
• KDE Applications Galore: Everything from Dolphin file manager to Konsole terminal refreshed to 25.08 versions, plus legacy Qt5/KF5 support for your favorite older apps.

This release underscores Kubuntu's commitment to being at the heart of the open source ecosystem-pushing boundaries with KDE while riding Ubuntu's reliable waves. A huge thank you to our volunteer contributors, testers, and the upstream KDE team for making this possible.

Ready to quokka-hop into the future? Upgrade today or install fresh. Questions? Head to https://discourse.ubuntu.com/c/flavors/kubuntu/187 or ping us on Matrix at #kubuntu:matrix.org.

Stay tuned for the Ubuntu Summit on October 23-24, where we'll showcase more on Kubuntu's role in open source innovation

P.S New updated website coming soon…. keep an eye on kubuntu.org for when we switch

10 Oct 2025 1:48pm GMT

Ubuntu 25.10, codenamed "Questing Quokka", is here. This release continues Ubuntu's proud tradition of integrating the latest and greatest open-source technologies into a high-quality, easy-to-use Linux distribution. The team has been hard at work through this cycle, partnering with the community and our partners, to introduce new features and fix bugs.

Ubuntu 25.10 introduces GNOME 49 with media and power controls on the lock screen, HDR brightness settings, and enhanced accessibility features in line with the European Accessibility Act. New apps include Loupe, a modern image viewer, and Ptyxis, a lightweight terminal emulator.

Built on the Linux 6.17 kernel, this release brings nested virtualization on Arm, early Intel TDX host support for confidential computing, and enhanced support for TPM-backed full disk encryption with passphrase support, recovery key management and better integration with firmware updates. Network Time Security (NTS) is enabled by default for more secure time synchronization.

Developer experience advances with updated toolchains for Python 3.13.7 and availability of 3.14 RC3, GCC 15, Rust 1.85, Go 1.25, OpenJDK 25, and previews of .NET 10 and Zig.

Ubuntu 25.10 also debuts Rust-based implementations of sudo and coreutils for improved memory safety, and adopts the new RVA23 profile as the baseline for RISC-V, paving the way to Ubuntu 26.04 LTS.

The newest Edubuntu, Kubuntu, Lubuntu, Ubuntu Budgie, Ubuntu Cinnamon, Ubuntu Kylin, Ubuntu MATE, Ubuntu Studio, and Xubuntu are also being released today. More details can be found for these at their individual release notes under the Official Flavours section:

https://discourse.ubuntu.com/t/questing-quokka-release-notes/59220#heading-official-flavours

Maintenance updates will be provided for 9 months for all flavours releasing with 25.10.

To get Ubuntu 25.10

In order to download Ubuntu 25.10, visit:

https://ubuntu.com/download

Users of Ubuntu 25.04 will be offered an automatic upgrade to 25.10 if they have selected to be notified of all releases rather than just LTS upgrades. For further information about upgrading, see:

https://ubuntu.com/download/desktop/upgrade

As always, upgrades to the latest version of Ubuntu are entirely free of charge.

We recommend that all users read the release notes, which document caveats, workarounds for known issues, as well as more in-depth notes on the release itself. They are available at:

https://discourse.ubuntu.com/t/questing-quokka-release-notes/59220

Find out what's new in this release with a graphical overview:

https://ubuntu.com/desktop
https://ubuntu.com/desktop/features

If you have a question, or if you think you may have found a bug but aren't sure, you can try asking in any of the following places:

https://matrix.to/#/#support:ubuntu.com
https://discourse.ubuntu.com/support
https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

Help Shape Ubuntu

If you would like to help shape Ubuntu, take a look at the list of ways you can participate at:

https://ubuntu.com/community/contribute

About Ubuntu

Ubuntu is a full-featured Linux distribution for desktops, laptops, IoT, cloud, and servers, with a fast and easy installation and regular releases. A tightly-integrated selection of excellent applications is included, and an incredible variety of add-on software is just a few clicks away.

Professional services including support are available from Canonical and hundreds of other companies around the world. For more information about support, visit:

https://ubuntu.com/support

More Information

You can learn more about Ubuntu and about this release on our website listed below:

https://ubuntu.com

To sign up for future Ubuntu announcements, please subscribe to Ubuntu's very low volume announcement list at:

https://lists.ubuntu.com/mailman/listinfo/ubuntu-announce

Originally posted to the ubuntu-announce mailing list on Thu Oct 9 09:46:52 UTC 2025 by Utkarsh Gupta, on behalf of the Ubuntu Release Team.

10 Oct 2025 3:35am GMT

Flatpak installs are failing in Ubuntu 25.10 with revokefs-fuse unmount errors. Here's what's causing it, why it's not a intentional, and when a fix is coming

You're reading Flatpak Doesn't Work in Ubuntu 25.10, But a Fix is Coming, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

10 Oct 2025 12:33am GMT

Mozilla Firefox will be enabling a profile management feature from 14 October 2025. The new profile manager lets users separate browsing activities easily.

You're reading Firefox's New Profile Manager Goes Live For Everyone Next Week, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

09 Oct 2025 10:15pm GMT

Ubuntu Summit's decision to go exclusively online, with the exception of those speaking at the Summit in London, UK, is anti-collaborative and turns its back on the very people who make Ubuntu what it is: its community of volunteers and developers. Ubuntu Summit was created from the dust of the Ubuntu Developer Summit in 2022 to recognize the community. It no longer serves that purpose.

As many know, I have been the lead of Ubuntu Studio for more than 7 years. I'm the longest-tenured Ubuntu Studio lead. I owe much of the foundation that was built to my predecessors: Luke Yelavich (founder), Scott Lavender, Kaj Ailomaa, and Set Halstrom. It is a true labor of love for me, and is the foundation for much of what I do.

I have worked myself through the ranks of Ubuntu, becoming a small-time packager for a small set of Ubuntu packages, then the Ubuntu Studio packageset, moving up to MOTU (Master of the Universe). I also served on the Ubuntu Community Council and am a current Discourse moderator.

Community and the love of people is a huge motivation for me. Granted, for those first four years, I hadn't ever met the people I was collaborating with to make Ubuntu Studio what it is.

Then in August 2022, I was invited to attend the first ever Ubuntu Summit 2022 in Prague, Czechia. Having never travelled abroad before and never having even been off the continent of North America, itself a challenge as getting a U.S. passport is neither cheap nor easy, I was reluctant at first. Then I managed to get my passport, as well as the funds and passports to bring my wife and son to Ubuntu Summit.

That experience changed my life and the life of my entire family. My son, 10 at the time, was the youngest registered attendee. My wife was inspired to bring back Edubuntu, which had been defunct for nine long years by the time it was revived that following spring.

These are the things that happen when you have personal connections with people. If you've never read the book before, I encourage you to read Hardwired to Connect, which is a research paper published by a bunch of scientists. In essence, it says that people's brains are wired, from birth, to engage in communities in for personal, in-person connections. It's a scientific study that took years and is an excellent introduction to why we are the way we are.

Much of my education revolves around the very idea of building personal communities, which is one reason I was appalled when Ubuntu Summit, starting with 25.10, while it would be twice a year, it would be online-only except for the speakers. Having spoken at the past three, I was planning to take a year off from speaking, while still being there to represent as an Ubuntu Flavor Lead with my wife, also a now Flavor Lead.

If it weren't for that initial Ubuntu Summit, in person, my wife and son would not have been as interested or as involved as they are today. The subsequent years only strengthened that involvement.

Now, it's going to be an online-focused approach. I get it. It's cheaper and easier. Also, those attending online were just watching a livestream anyhow. The Local Communities (LoCos) can get together on their own if they want to do a big event. It's easier to reach more people if you do everything online.

Except it's not.

For instance, the nearest active LoCo to me, in the Seattle-Tacoma area, is the Southern California LoCo. Meetups with them are logistically impossible. Same if I were to go to the Arizona LoCo; it's just not possible. Most of the states in the United States are huge, so if there were one LoCo per state, it wouldn't be correct. To be honest, I have no desire, time, or energy left to start and lead a LoCo in my area. Besides that, there used to be one for my state, but it's long gone.

Furthermore, with the exception of me and my wife, us flavor leads are scattered to the globe. It used to be that we would meet online throughout the year every other month and then meet together once a year at Ubuntu Summit. That's gone now.

Again, I get it. Canonical is a company that is and always has been majority remote work. Except for one thing: they get together twice a year in-person, and are even given T-Shirts to celebrate the immediately-prior release which was partially built by volunteers. Those of us who give our time, energy, and effort to the Ubuntu community aren't given that in-person experience, let alone a T-Shirt. The very lifeblood of what makes Ubuntu so great isn't given the ability to meet in-person. That's been stripped from us, and it came as a complete surprise.

I'm not without ideas for solutions to problems, though. Rather than be completely destructive in this post, I can be constructive. My solution to this would be a compromise:

• Have the Summit be in-person once a year following the yy.04 release
  • Have that one go back to being what it was. It can either have booths like 2024 did or go back to being talk/workshop-focused like years prior. It doesn't matter, it just needs to be in-person.
• Have the Summit be online once a year following the yy.10 release

I don't think this is too much to ask. The reward of personal connections when doing something remote for most of the year is a small price to pay, no matter the cost. Personal connections are tantamount to a healthy community.

I think my compromise would prevent the Summit from dying just like the Ubuntu Developer Summit did once it went online-only. The way I see it is with the current status-quo, history is repeating itself.

I'm sure people at Canonical don't see it this way because they meet with the people they work with the most twice a year. Those of us from the Ubuntu community that are developers aren't given that luxury. We're not even given that luxury once a year now. We're not even given a T-Shirt!

Am I angry? A little. Do I feel betrayed by the very community I have given so much to over the years? Absolutely. Either way, I believe an online-only Summit is anti-collaborative in that it removes personal connections from the equation, which goes against the very fiber of my being.

Thank you for reading this, and I hope this reaches the people I'm trying to reach and have it speak for those who either won't speak-up or don't think they can make a difference.

09 Oct 2025 10:01pm GMT

The Ubuntu Studio team is pleased to announce the release of Ubuntu Studio 25.10 code-named "Questing Quokka". This marks Ubuntu Studio's 37th release. This release is a Regular release and as such, it is supported for 9 months, until July 2026.

Since it's just out, you may experience some issues, so you might want to wait a bit before upgrading. Please see the release notes for a more complete list of changes and known issues. Listed here are some of the major highlights.

You can download Ubuntu Studio 25.10 from our download page.

Special Notes

The Ubuntu Studio 25.10 disk image (ISO) exceeds 4 GB and cannot be downloaded to some file systems such as FAT32 and may not be readable when burned to a standard DVD. For this reason, we recommend downloading to a compatible file system. When creating a boot medium, we recommend creating a bootable USB stick with the ISO image or burning to a Dual-Layer DVD.

Minimum installation media requirements: Dual-Layer DVD or 8GB USB drive.

Images can be obtained from this link: https://cdimage.ubuntu.com/ubuntustudio/releases/25.10/release/

Full updated information, including Upgrade Instructions, are available in the Release Notes.

Upgrades from 25.04 should be enabled within a month after release, so we appreciate your patience. Upgrades from 24.04 LTS will be enabled after 25.04 reaches End-Of-Life in January 2026.

New This Release

The Return of Internet DJ Console (IDJC)!

After a long hiatus, Internet DJ Console (IDJC) has returned. This package for creating and running Internet-based radio stations had been removed from Debian, but has returned, and therefore, returned to Ubuntu Studio!

JackTrip

Ubuntu Studio now includes JackTrip! JackTrip serves two purposes: low-latency networked JACK audio within your network, and low-latency Internet audio collaboration. Bands are even known to jam remotely using JackTrip's services!

It supports any number of channels (as many as the computer/network can handle) of bidirectional, high quality, uncompressed audio signal streaming.

More Musical Plugins

We came to the realization that we needed to support musicians a little better, so we added a few instrument and musical plugins to assist with that:

• din
• drumkv1
• freewheeling
• gxtuner
• Hydrogen Drumkit Effects
• kmetronome
• padthv1
• polyphone
• samplv1
• synthv1

More Photography Tools

• PhotoCollage - allows you to create photo collage phosters
• PicPlanner - Calculates and displays the positions of the Sun, Moon, and Milky Way for any time and location on earth, to help you get those perfect astronomical photos or for taking pictures during the Golden or Blue hours.

PipeWire 1.4.7

This release contains PipeWire 1.4.7.

PipeWire's JACK compatibility is configured to use out-of-the-box and is zero-latency internally. System latency is configurable via Ubuntu Studio Audio Configuration and can now be configured on a per-user basis instead of globally.

Ubuntu Studio Audio Configuration

Speaking of Audio Configuration, we have added a number of options for configuring the PipeWire JACK compatibility, as can be seen in the image below. Additionally, buffer size can now be configured from within any JACK application that supports it, such as Patchance, Carla, Ardour, and more!

Ardour 8.12

This is, as of this writing, the latest release of Ardour, packed with the latest bugfixes.

To help support Ardour's funding, you may obtain later versions directly from ardour.org. To do so, please one-time purchase or subscribe to Ardour from their website. If you wish to get later versions of Ardour from us, you will have to wait until the next release of Ubuntu Studio, due in April 2026.

Frequently Asked Questions

Q: Does Ubuntu Studio contain snaps?
A: Yes. Mozilla's distribution agreement with Canonical changed, and Ubuntu was forced to no longer distribute Firefox in a native .deb package. We have found that, after numerous improvements, Firefox now performs just as well as the native .deb package did.

Thunderbird also became a snap so that the maintainers can get security patches delivered faster.

Additionally, Freeshow is an Electron-based application. Electron-based applications cannot be packaged in the Ubuntu repositories in that they cannot be packaged in a traditional Debian source package. While such apps do have a build system to create a .deb binary package, it circumvents the source package build system in Launchpad, which is required when packaging for Ubuntu. However, Electron apps also have a facility for creating snaps, which can be uploaded and included. Therefore, for Freeshow to be included in Ubuntu Studio, it had to be packaged as a snap.

We have additional snaps that are Ubuntu-specific, such as the Firmware Updater and the Security Center. Contrary to popular myth, Ubuntu does not have any plans to switch all packages to snaps, nor do we.

Q: Will you make an ISO with {my favorite desktop environment}?
A: To do so would require creating an entirely new flavor of Ubuntu, which would require going through the Official Ubuntu Flavor application process. Since we're completely volunteer-run, we don't have the time or resources to do this. Instead, we recommend you download the official flavor for the desktop environment of your choice and use Ubuntu Studio Installer to get Ubuntu Studio - which does *not* convert that flavor to Ubuntu Studio but adds its benefits.

Q: What if I don't want all these packages installed on my machine?
A: Simply use the Ubuntu Studio Installer to remove the features of Ubuntu Studio you don't want or need! Additionally, we include a Minimal Install option that, when used with Ubuntu Studio Installer, will give you the Ubuntu Studio experience for whatever your desktop studio needs!

Get Involved!

A wonderful way to contribute is to get involved with the project directly! We're always looking for new volunteers to help with packaging, documentation, tutorials, user support, and MORE! Check out all the ways you can contribute!

Our project leader, Erich Eickmeyer, is now working on Ubuntu Studio at least part-time, and is hoping that the users of Ubuntu Studio can give enough to generate a monthly part-time income. We're not there, but if every Ubuntu Studio user donated monthly, we'd be there! Your donations are appreciated! If other distributions can do it, surely we can! See the sidebar for ways to give!

Contact the Team

The best way to contact the Ubuntu Studio team is via the Ubuntu Discourse.

Special Thanks

Huge special thanks for this release go to:

• Eylul Dogruel: Artwork, Graphics Design
• Ross Gammon: Upstream Debian Developer, Testing
• Sebastien Ramacher: Upstream Debian Developer
• Dennis Braun: Upstream Debian Developer
• Rik Mills: Kubuntu Council Member, help with Plasma desktop
• Scarlett Moore: Kubuntu Project Lead, help with Plasma desktop
• Len Ovens: Testing, insight
• Mauro Gaspari: Tutorials, Promotion, and Documentation, Testing, keeping Erich sane
• Erich Eickmeyer: Project Leader, Packaging, Development, Direction, Treasurer
• Steve Langasek: You are missed.

09 Oct 2025 5:11pm GMT

The Lubuntu Team is proud to announce Lubuntu 25.10, codenamed Questing Quokka. Lubuntu 25.10 is the 29th release of Lubuntu, the 15th release of Lubuntu with LXQt as the default desktop environment. Download and Support Lifespan With 25.10 being an interim release, it will follow the standard non-LTS support period of nine months; this means […]

09 Oct 2025 2:05pm GMT

Ubuntu 25.10 'Questing Quokka' released on October 9, 2025. Download it now to enjoy GNOME 49, new apps, Rust-based security, and a whole lot more.

You're reading Ubuntu 25.10 Released, Available to Download Now, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

09 Oct 2025 1:54pm GMT

The latest interim release of Ubuntu comes with compatibility enhancements at the silicon level, accessibility upgrades and a robust security posture that sets the stage for the next LTS.

October 9, 2025

Today Canonical announced the release of Ubuntu 25.10, codenamed "Questing Quokka," available to download and install from ubuntu.com/download.

Alongside GNOME 49 and new default applications such as the Ptyxis terminal emulator and the Loupe image viewer, Ubuntu 25.10 introduces notable platform upgrades, from improved Bluetooth audio handling to expanded support for confidential computing features. Ubuntu 25.10 is the first to benefit from memory-safe implementations of "coreutils" and "sudo-rs," as well as improvements in TPM-backed full disk encryption and support for nested virtualization on Arm.

Ubuntu 25.10 is a statement of intent for the next Ubuntu LTS in 2026. Canonical continues to deliver a resilient, performant Linux operating system trusted by individuals and enterprises alike, from makers and developers to Fortune 500 companies, across hardware from IoT devices to modern datacenters. I'm particularly pleased with the progress on memory-safe utilities, and the enhancements to our TPM-backed full disk encryption.

Jon Seager, VP of Ubuntu Engineering at Canonical

This Ubuntu release is also the first to coincide with a new format of the Ubuntu Summit, where viewers around the world can learn about the latest developments in Ubuntu and open source.

GNOME 49 and accessibility enhancements

Ubuntu 25.10 features GNOME 49. This update introduces media and power controls on the lock screen, improved accessibility and HDR brightness settings. Users will also find two new applications: Loupe, a modern image viewer, and Ptyxis, a new terminal emulator. These additions are part of a broader effort to modernize Ubuntu's application set. Selecting the "install restricted extras" option in the installer will now enable support for more Bluetooth codecs (AAC) and enable hardware accelerated screen recording in GNOME, further improving performance.

In line with the European Accessibility Act (EAA), Canonical continues its long-standing effort to make Linux easy for everyone to use. Ubuntu's App Center and Settings panels come with better support for high contrast mode, keyboard navigation, and screen reading. The login screen also introduces a more prominent accessibility menu, making assistive technologies easier to access from the start.

Next-generation toolchains bolster the developer experience

Ubuntu 25.10 ships with OpenJDK 25, the latest version of Java, and the latest upstream versions for Python (3.14 RC3), Golang (1.25), and GCC (15). Rust 1.85 will be the default, and 1.88 is also available. A preview of the new Zig language compiler is available in this release for amd64 and arm64.

In addition, this release includes a preview of .NET 10, which is the upcoming .NET LTS due for release in November.
Canonical continues to improve the .NET developer experience on Ubuntu with an enhanced .NET Snapcraft plugin to improve support for monorepo setups, delivering better developer experience with MSBuild through custom flag attributes. In addition, the popular tools from Powershell on Windows are now available in Ubuntu on arm64, ppc64el and s390x platforms through the Powershell snap.

Rust-based implementations of sudo and coreutils for improved memory safety

Canonical is committed to increase the resilience of critical system software in Ubuntu by adopting modern implementations of key components like sudo and coreutils. As part of this initiative, Ubuntu 25.10 uses sudo-rs, a new Rust implementation of the sudo tool. While the Rust-based sudo is the default in this new release, the traditional sudo tool is still available for users who need it.

The introduction of a memory-safe sudo delivers many benefits compared to the traditional implementation. For users, a reduced attack surface in the sudo tool will improve Ubuntu's overall security posture. Canonical welcomes users to test the tool and provide feedback ahead of its inclusion in the upcoming Ubuntu 26.04 LTS.

"At Trifecta Tech Foundation, we aim to make essential building blocks like sudo more secure and robust for everyone," said Erik Jonkers, Chair at Trifecta Tech Foundation. "Seeing sudo-rs landing in Ubuntu is a huge achievement we're very excited about. We applaud Canonical for pushing for memory safety and thank them for the collaboration over the past months to get sudo-rs ready for the 25.10 release. We're confident that by working together and taking in feedback, we can make this a seamless shift that will improve security for Ubuntu's users."
Similarly, Ubuntu 25.10 is the first major Linux distribution release to adopt uutils' implementation of coreutils, which is a ground up reimplementation of the traditional GNU coreutils package in Rust with like-for-like compatibility and memory safety as key goals.

Platform security improvements with TPM-backed FDE

Ubuntu 25.10 offers experimental support for TPM-backed Full Disk Encryption (FDE), providing a way to ensure all content on the disk is encrypted and inaccessible at rest. A TPM, or Trusted Platform Module is a chip found in most modern computers.

TPM-backed FDE is a security method that uses the Trusted Platform Module to store cryptographic keys to encrypt the hard drive, making data unreadable without the correct key at boot time. New features include passphrase support and management, regeneration of the recovery key and better integration with firmware updates, alongside stabilization of the core components of the system to pave the way for the next Ubuntu LTS release. Security-focused users can test this FDE implementation in 25.10, but it's not yet recommended for production environments.

Following the initial inclusion of Network Time Security (NTS) in Ubuntu 25.04, Questing Quokka ships with NTS enabled by default. NTS enhances Network Time Protocol (NTP) security by providing a cryptographic layer of authentication for the time synchronization process. This increases resilience against man-in-the-middle attacks and similar types of security risks. NTS uses Transport Layer Security (TLS) to ensure that time data comes from a trusted source.

Linux kernel 6.17 delivers nested virtualization and enhanced confidential workloads

In line with Canonical's commitment to enable the latest features and hardware support, Ubuntu 25.10 ships with the latest Linux kernel, version 6.17.

Ubuntu 25.10 brings early access to the nested virtualization feature on Arm, following its inclusion in the upstream Linux kernel. Nested virtualization allows cloud providers and developers to run hypervisors inside virtual machines, enabling advanced CI/CD pipelines, flexible testing environments, and stronger workload isolation. Ubuntu 25.10 introduces support of this technology on platforms like NVIDIA Grace and AmpereOne, paving the way for broader use and maturity of nested virtualization on Arm.

As cloud infrastructure becomes more dynamic, the ability to run securely nested workloads is essential to scaling services efficiently while maintaining strong isolation and operational flexibility. With Ubuntu 25.10 enabling nested virtualization on Arm-based platforms both in the cloud and on-premises, developers and operators can advance development and deployment of this powerful capability. Together with Canonical, we're accelerating the adoption of secure, scalable Arm-based cloud solutions.

Bhumik Patel, Director, Server Ecosystem Development, Infrastructure Business, Arm

This latest interim release of Ubuntu also lays the foundation for native support of Intel TDX with Ubuntu 26.04 LTS as the host operating system. Intel TDX is a technology that creates hardware-isolated virtual machines for confidential computing, making it ideal to support data clean rooms and confidential AI workloads. Ubuntu 25.10 kernels will ship with Intel TDX host support, enabling enterprises to run and receive support for confidential computing on their data centers or private clouds.

New RVA23 profile for accelerated RISC-V adoption

With Ubuntu 25.10, Canonical is adopting the recently ratified RVA23 as the baseline profile for its RISC-V builds. RVA23 helps accelerate the growth of the RISC-V ecosystem ensuring compatibility across RISC-V implementations. This early move aligns Ubuntu with RVA23-class solutions reaching the market, and enables early rigorous testing, bug fixing and issue triage. This effort enables RVA23 readiness in Ubuntu 26.04 LTS and provides the RISC-V ecosystem with a predictable roadmap and target.

RISC-V International is excited to see Canonical adopting the RVA23 profile for Ubuntu. RVA23 was ratified to help accelerate widespread implementation of RISC-V among toolchains and operating systems, set the base for high performing modern application processors with support for vectors and hypervisors, and ensure binary compatibility at the application level. Our collaboration with Canonical strengthens the RISC-V software ecosystem and advances the adoption of RISC-V in enterprise applications from IoT to HPC.

Andrea Gallo, CEO of RISC-V International

Readers can tune into the Ubuntu Summit on October 23-24 for a behind-the-scenes look at RVA23 advancements.

Next steps

• Read the release notes
• Follow the Ubuntu engineering team on Discourse

About Canonical

Canonical, the publisher of Ubuntu, provides open source security, support and services. Our portfolio covers critical systems, from the smallest devices to the largest clouds, from the kernel to containers, from databases to AI. With customers that include top tech brands, emerging startups, governments and home users, Canonical delivers trusted open source for everyone.
Learn more at canonical.com

09 Oct 2025 9:48am GMT

The latest interim release of Ubuntu comes with compatibility enhancements at the silicon level, accessibility upgrades and a robust security posture that sets the stage for the next LTS. October 9, 2025 Today Canonical announced the release of Ubuntu 25.10, codenamed "Questing Quokka," available to download and install from ubuntu.com/download. Alongside GNOME 49 and new […]

09 Oct 2025 9:48am GMT

A Critical Moment and a Glimpse of the Future

Xubuntu 25.10, codenamed "Questing Quokka," is the fortieth release of the Xfce-powered Ubuntu flavor. Built on the 6.17 Linux kernel, Xfce 4.20, MATE 1.26, and GNOME 49, this release continues to deliver the fast, tightly-integrated, and user-friendly experience that Xubuntu users expect, even on modest hardware.

Today, I&aposll explore where Xubuntu stands as it approaches its twentieth anniversary and share what&aposs new (and what&aposs still rough around the edges) in this release.

Xubuntu 25.10 "Questing Quokka": A screenshot of the desktop.

A Critical Juncture

The "Questing Quokka" arrives at a pivotal time in Xubuntu&aposs history. In just six months, we&aposll celebrate Xubuntu&aposs twentieth anniversary (technically eight months: 6.06 marks the only time Ubuntu was released in June).

In recent years, our small development team has faced the same challenges as many open-source projects: contributors stepping back, real-world responsibilities growing, and less time to dedicate to day-to-day development.

Beyond that, our involvement with the upstream Xfce project has slowed. Many of us, myself included, once played major roles in shaping Xfce's direction, contributing countless hours to its design, code, and outreach. Those efforts helped establish the strong foundation Xfce enjoys today.

While we remain proud supporters and collaborators, Xubuntu's continued growth depends on fresh energy and new contributors. If you've ever wanted to make a tangible impact on an open-source desktop environment, this is your moment. Visit the Get Involved page to learn how to help with artwork, development, documentation, QA, marketing, and more.

Now, let's look at what's new (and what still needs work) in 25.10.

Xubuntu 25.10: A Snapshot of the Future

As mentioned, Xubuntu 25.10 ships with Xfce 4.20, GNOME 49, and MATE 1.26. Like other Ubuntu flavors, it also introduces the new Rust-based sudo-rs.

If you're upgrading from Xubuntu 25.04, you'll find the experience familiar. Most applications have received incremental updates, theming remains consistent, and there are few new user-facing features. The most noticeable changes this cycle? The bugs. 🐞

Known Issues (and What to Expect)

libadwaita Apps and the Case of the Missing Close Button

Late in the cycle, we discovered that several GNOME and libadwaita-based apps have empty window close buttons when using the elementary-xfce icon theme. This affects Disk Usage Analyzer (baobab), Document Scanner (simple-scan), Fonts (gnome-font-viewer), Mines (gnome-mines), and Sudoku (gnome-sudoku).

Modern GNOME applications are missing the close window icon. Can&apost see it? Neither can I.

Missing Icon for Document Scanner&aposs Scan Options

The Scan Options menu icon in Document Scanner is currently invisible. This issue has been reported upstream to the elementary-xfce GitHub tracker.

To the right of the Scan button is a menu button for the Scan Options. Invisible unless you hover it.

Flatpak Packages Cannot Be Installed

Due to a Fuse/AppArmor conflict in Ubuntu 25.10, installing Flatpak packages currently fails. Work is underway to resolve this, and Flatpak support should return soon.

Graphical SSH Agent Unavailable

Xubuntu 25.10's graphical SSH agent isn't functioning as expected. Without it, SSH key passphrases must be entered each time. Investigation continues, and a fix may land before the next release.

Double Network Icons (Sometimes)

Some users may see duplicate network icons, especially in virtual machines. One appears via the Xfce Indicator Plugin and the other via the Systray Plugin. Removing the Indicator Plugin resolves this... something we're considering doing by default for 26.04.

Some users may be confused to see two network icons that look nearly identical and function the same.

Screensaver Wallpaper Discrepancy

When first locking your screen, you might notice that the lock screen wallpaper defaults to Xfce's background instead of Xubuntu's. Changing (and reapplying) your wallpaper fixes the mismatch.

If you lock your screen before changing your wallpaper, you&aposll be greeted by Xfce&aposs wallpaper.

Looking Ahead

At first glance, Xubuntu 25.10 might seem rough around the edges: more bugs than usual, fewer active contributors, and an LTS release on the horizon. But known issues are solvable issues. With six months until 26.04, we have time to address these challenges, polish the experience, and deliver a release worthy of Xubuntu's twentieth anniversary.

If you want to help shape that milestone release-whether through code, documentation, design, or outreach-please reach out. Together, we can ensure Xubuntu continues to thrive for another twenty years.

09 Oct 2025 6:58am GMT

The Xubuntu team is happy to announce the immediate release of Xubuntu 25.10.

Xubuntu 25.10, codenamed Questing Quokka, is a regular release and will be supported for 9 months, until July 2026.

Xubuntu 25.10, featuring the latest updates from Xfce 4.20 and GNOME 49.

Xubuntu 25.10 features the latest Xfce 4.20 and GNOME 49 updates. Xfce 4.20 updates feature stability improvements and enhanced Wayland support, for those adventurous enough to use it. GNOME 49 apps have received further polish and are well-suited for Xubuntu. MATE 1.26 apps are still included to round out Xubuntu's office suite.

The final release images for Xubuntu Desktop and Xubuntu Minimal are available as torrents and direct downloads from xubuntu.org/download/.

As the main server might be busy the first few days after the release, we recommend using the torrents if possible.

We want to thank everybody who contributed to this release of Xubuntu!

Highlights and Known Issues

Highlights

• Xfce 4.20 components have received several stability improvements. Minor integration issues persist in Xubuntu 25.10 and will be addressed for 26.04, scheduled for release in April.
• GNOME 49 apps are further refined with new features and usability improvements.

Known Issues

• Some missing icons mean that libadwaita apps (modern GNOME style) have graphical glitches. Notably, the window close icons are blank (LP: #2125025), and Document Scanner is missing an icon for the scanner options (LP: #2127071).
• The graphical SSH agent is unavailable due to a change in the GNOME Keyring Daemon (LP: #2125549).
• Flatpak packages will refuse to install due to a conflict between AppArmor and libfuse (LP: #2122161). A fix is in progress.

Please refer to the Xubuntu Release Notes for more obscure known issues, information on affecting bugs, bug fixes, and a list of new package versions.

The main Ubuntu Release Notes cover many other packages we carry and more generic issues.

Support

For support with the release, navigate to Help & Support for a complete list of methods to get help.

09 Oct 2025 1:06am GMT

About 90% of my Debian contributions this month were sponsored by Freexian.

You can also support my work directly via Liberapay or GitHub Sponsors.

Some months I feel like I'm pedalling furiously just to keep everything in a roughly working state. This was one of those months.

Python team

I upgraded these packages to new upstream versions:

• aiosmtplib
• billiard
• dbus-fast
• django-modeltranslation
• django-sass-processor
• feedparser
• flask-security
• jaraco.itertools
• mariadb-connector-python
• mistune
• more-itertools
• pydantic-settings
• pyina
• pytest-mock
• python-asyncssh
• python-bytecode
• python-ciso8601
• python-django-pgbulk
• python-ewokscore
• python-ewoksdask
• python-ewoksutils
• python-expandvars
• python-git
• python-gssapi
• python-holidays
• python-jira
• python-jpype
• python-mastodon
• python-orjson (fixing a build failure)
• python-pyftpdlib
• python-pytest-asyncio (fixing a build failure)
• python-pytest-run-parallel
• python-recurring-ical-events
• python-redis
• python-watchfiles (fixing a build failure)
• python-x-wr-timezone
• python-zipp
• pyzmq
• readability
• scalene (fixing test failures with pydantic 2.12.0~a1)
• sen (contributed supporting fix upstream)
• sqlfluff
• trove-classifiers
• ttconv
• vdirsyncer
• zope.component
• zope.configuration
• zope.deferredimport
• zope.deprecation
• zope.exceptions
• zope.i18nmessageid
• zope.interface
• zope.proxy
• zope.schema
• zope.security (contributed supporting fix upstream)
• zope.testing
• zope.testrunner

I had to spend a fair bit of time this month chasing down build/test regressions in various packages due to some other upgrades, particularly to pydantic, python-pytest-asyncio, and rust-pyo3:

• aiohappyeyeballs
• aiohttp-sse (filed bug and contributed fix upstream)
• aioimaplib (tried to fix upstream but failed to get tests working
• aiosmtplib (contributed upstream)
• app-model
• aresponses (contributed upstream)
• fastapi (filed bug and contributed fix upstream)
• ipython
• opendrop (filed bug and contributed fix upstream)
• pydantic-extra-types
• pytest-relaxed (contributed upstream)
• python-drf-spectacular
• python-fakeredis
• python-jsonrpc-websocket (contributed upstream, and sponsored upload for Tianyu Chen)
• python-odmantic
• python-pytest-trio (upstream issue, upstream PR, pytest issue about possible root cause)
• python-repoze.sphinx.autointerface
• python-sluurp
• python-youtubeaio (filed bug)
• rtsp-to-webrtc

After some upstream discussion I requested removal of pydantic-compat, since it was more trouble than it was worth to keep it working with the latest pydantic version.

I filed dh-python: pybuild-plugin-pyproject doesn't know about headers and added it to Python/PybuildPluginPyproject, and converted some packages to pybuild-plugin-pyproject:

• aresponses
• python-azure, fixing an autopkgtest failure in kombu
• python-ciso8601

I updated dh-python to suppress generated dependencies that would be satisfied by python3 >= 3.11.

pkg_resources is deprecated. In most cases replacing it is a relatively simple matter of porting to importlib.resources, but packages that used its old namespace package support need more complicated work to port them to implicit namespace packages. We had quite a few bugs about this on zope.* packages, but fortunately upstream did the hard part of this recently. I went round and cleaned up most of the remaining loose ends, with some help from Alexandre Detiste. Some of these aren't completely done yet as they're awaiting new upstream releases:

• zope.component (Debian bug, upstream PR)
• zope.configuration (Debian bug, upstream PR)
• zope.deferredimport (Debian bug, upstream PR)
• zope.deprecation (Debian bug, upstream PR)
• zope.exceptions (Debian bug, upstream PR)
• zope.i18nmessageid (Debian bug, upstream PR)
• zope.interface (Debian bug, upstream PR)
• zope.location (Debian bug, upstream PR)
• zope.security (Debian bug, upstream PR)
• zope.testing (Debian bug, upstream PR)
• zope.testrunner (Debian bug, upstream PR)

This work also caused a couple of build regressions, which I fixed:

• zope.hookable
• zope.location

I fixed jupyter-client so that its autopkgtests would work in Debusine.

I fixed waitress to build with the nocheck profile.

I fixed several other build/test failures:

• austin (contributed follow-up fix upstream)
• fsspec
• python-asgiref
• python-django-channels
• twisted

I fixed some other bugs:

• python-jpype: java.lang.ClassNotFoundException: org.jpype.classloader.DynamicClassLoader
• python-jpype: Please add autopkgtests (to add coverage for python3-numpy)

Code reviews

• debbugs: Fix dep8 autopkgtests, make Salsa CI fully green (still in progress)
• dput-ng: Add trixie-backports & bookworm-backports-sloppy
• openssh: Update sshd@.service to follow upstream
• openssh: authfd: fallback to default if $SSH_AUTH_SOCK is unset (still in progress)
• putty: d/rules: Use dh_assistant restore-file-on-clean
• python-debian: Update from pyupgrade to -py37-plus (still in progress)
• release-notes: issues: mention tzdata-legacy split

Other bits and pieces

I fixed several CMake 4 build failures:

• halibut
• hdf5-blosc
• hdf5-filter-plugin
• yubihsm-shell

I got CI for debbugs passing (!22, !23).

I fixed a build failure with GCC 15 in trn4.

I filed a release-notes bug about the tzdata reorganization in the trixie cycle.

I filed and fixed a git-dpm regression with bash 5.3.

I upgraded libfilter-perl to a new upstream version.

I optimized some code in ubuntu-dev-tools that made O(1) HTTP requests when it could instead make O(n).

08 Oct 2025 6:16pm GMT

Ubuntu Budgie 25.10 (Questing Quokka) is a Standard Release with 9 months of support by your distro maintainers and Canonical, from Oct 2025 to July 2026. These release notes showcase the key takeaways for 25.04 upgraders to 25.10. Please note - there is no direct upgrade path from 24.04.3 to 25.10; you must uplift to 24.10 first or perform a fresh install. In these release notes the areas…

Source

08 Oct 2025 5:26pm GMT

Oracle Kubernetes Engine now supports Ubuntu images for worker nodes natively, with no need for custom images 8 October 2025 - Today Canonical, the publisher of Ubuntu, announced that Ubuntu worker nodes for Oracle Kubernetes Engine (OKE) are now available in Limited Availability. This means that OKE now supports Ubuntu images for worker nodes natively, […]

08 Oct 2025 4:31pm GMT

Oracle Kubernetes Engine now supports Ubuntu images for worker nodes natively, with no need for custom images

8 October 2025 - Today Canonical, the publisher of Ubuntu, announced that Ubuntu worker nodes for Oracle Kubernetes Engine (OKE) are now available in Limited Availability. This means that OKE now supports Ubuntu images for worker nodes natively, with no need for custom images. You can find more detail on how to start using these in our documentation.

While applications on Kubernetes run within containers, the underlying operating system and kernel of the worker node still plays a critical role in performance, security, and management. Ubuntu provides a stable, widely-supported and securely-designed host environment that can optimize resource utilization for your Kubernetes workloads. Ubuntu's familiar tooling also simplifies debugging, maintenance, and integration with existing infrastructure across all the major public clouds, offering a consistent and reliable foundation for your containerized applications.

With the availability of Ubuntu worker nodes on OKE, developers can now enjoy a consistent Ubuntu experience across worker nodes on the managed Kubernetes offerings of Amazon AWS, Google Cloud Platform, IBM Cloud, Microsoft Azure and Oracle OCI - all without having to build or deploy any custom images.

You can find details on the Ubuntu releases and Kubernetes versions available on OKE in the Ubuntu Availability documentation.

The latest step in our decade-long partnership

Ubuntu worker images for Oracle OKE users were first released in August 2024. Today's announcement is the latest step in our efforts to make Ubuntu more accessible across a greater diversity of platforms and environments, particularly for AI/ML use cases or to have a consistent experience across on-premise and other public cloud environments.

Oracle and Canonical have been close partners since 2015, bringing Ubuntu images onto Oracle Cloud Infrastructure (OCI). Today, all currently-supported Long-Term Support releases of Ubuntu are available on OCI as images for VM instances (see, for example, Ubuntu 24.04).

Get started with Ubuntu OKE nodes

We are working with Oracle to make Ubuntu OKE node pools a fully-integrated experience. We have prepared specific guides on setting these up using the Oracle Cloud Console, CLI and Terraform.

If you're interested in using Ubuntu OKE nodes, please contact your Oracle account or support teams to express interest and explore access to this program.

If you'd like to share any feedback with us or the Oracle team, we'd love to hear your thoughts and experiences, which you can share with us on Discourse.

Ubuntu on OKE worker nodes documentation

08 Oct 2025 4:31pm GMT

Ubuntu 25.10 features GNOME 49, Rust sudo and coreutils, Linux 6.17, Mesa 25.2, and no X11 session. Complete guide to what's new in 'Questing Quokka'.

You're reading Ubuntu 25.10: What's New, What's Changed & Should You Upgrade?, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

08 Oct 2025 1:59am GMT

Happy birthday, OpenStack! It's astonishing how fast time flies - fifteen years already. Yet, here we are: OpenStack cloud still stands as a de facto standard for open source cloud infrastructure implementation. It powers thousands of organisations around the world, across telco, finserv, public sector, IT, research, manufacturing and more. With more than 45 millions […]

07 Oct 2025 7:00am GMT

Welcome to the Ubuntu Weekly Newsletter, Issue 912 for the week of September 28 - October 4, 2025. The full version of this issue is available here.

In this issue we cover:

• Ubuntu Project docs: Going (semi)official!
• Questing Quokka (25.10) Final Freeze
• Call for testing: first set of 25.10 RCs ready!
• Welcome New Members and Developers
• Ubuntu Stats
• Hot in Support
• Rocks Public Journal; 2025-10-03
• Other Meeting Reports
• Upcoming Meetings and Events
• Canonical at UbuCon Asia 2025
• Onboarding Event
• Ubuntu Korea @ FOSS for All Conference 2025
• LoCo Events
• Core24 Steam | Call for Testing
• Ubuntu Server Gazette - Issue 8 - Containers: Steady paths for agile stacks
• Mir Office Hours - 2025-09-25 15:15UTC
• Canonical News
• In the Blogosphere
• Featured Audio and Video
• Updates and Security for Ubuntu 22.04, 24.04, and 25.04
• And much more!

The Ubuntu Weekly Newsletter is brought to you by:

• Krytarik Raido
• Bashing-om
• Chris Guiver
• Wild Man
• Cristovao Cordeiro (cjdc)
• irihapeti
• And many others

If you have a story idea for the Weekly Newsletter, join the Ubuntu News Team mailing list and submit it. Ideas can also be added to the wiki!

.

06 Oct 2025 11:10pm GMT

GIMP 3.0.6 is the latest 'micro release' update to the current 3.0.x stable series, containing a bug and crash fixes, UI tweaks and other assorted changes.

You're reading GIMP 3.0.6 Update is a Bug-Fix Backport Bonanza, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

06 Oct 2025 10:55pm GMT

Ubuntu 26.04 LTS is out next April, serving as the next long-term support release of the Debian-based Linux distribution. Every version gets a unique codename.

You're reading Ubuntu Reveal Codename of Next Year's 26.04 LTS, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

06 Oct 2025 4:40pm GMT

London has called, and the Ubuntu community has answered! This year, the Ubuntu Summit has the ambitious goal of extending its reach to everyone, no matter where they are in the world. The event has not started yet, and we have been blown away by the excitement already! The desire to contribute to the community […]

06 Oct 2025 3:16pm GMT

Parallels Desktop 26.1 update adds a driverless version of Parallels Tools for Linux, using the in-kernel VirtIO to power guest and host system integrations.

You're reading Parallels Desktop Adds 'Future-Proof Linux Compatibility', a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

05 Oct 2025 3:35pm GMT

Check in for a recap of Linux app releases in September 2025, including updates to gThumb, Apostrophe, Rio Term, MPD Client Euphonica and more!

You're reading Linux App Release Roundup (September 2025), a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

04 Oct 2025 3:00am GMT

Linux Mint users can expect an easier time switching between keyboard layouts and input methods in the next version of the GTK-based Cinnamon desktop.

You're reading Linux Mint Improves Keyboard and Input Switching for Cinnamon, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

03 Oct 2025 8:23pm GMT

If you see the "unable to capture a screenshot, all possible methods failed" error when using GNOME Screenshot in Ubuntu, it is not a bug - but by design.

You're reading Why the (Old) GNOME Screenshot App Doesn't Work in GNOME 49, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

02 Oct 2025 10:28pm GMT

A new version of the Raspberry Pi Imager, a cross-platform and open source Qt-based image flashing tool is available for testing - with a BRAND NEW look.

You're reading Raspberry Pi Imager 2.0 Enters Testing with a Brand New Look, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

02 Oct 2025 3:07pm GMT

An update to the Floating Mini Panel GNOME Shell extension is out, adding the ability to move the compact panel to a different part of the screen by clicking.

You're reading Mini Floating Panel Adds New Auto-Positioning Options, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

01 Oct 2025 10:59pm GMT

UK users may be confused why Imgur is no longer working in the country. The owners of the image hosting platform has geo-blocked the country due to data privacy.

You're reading Imgur Not Available in the UK After Data Regulator Threatens Fine, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

30 Sep 2025 7:21pm GMT

The certification demonstrates alignment with cybersecurity standards that will further safeguard open source products and services for use in the most demanding enterprise environments. Canonical is proud to announce it has achieved the ISO/IEC 27001 certification for its Information Security Management System (ISMS), following an extensive assessment by A-LIGN, a respected certification provider. This milestone […]

30 Sep 2025 3:05pm GMT

Tiling Shell v17 is out with a handful of new options for keyboard-driven workflows, including shorts to switch between tiling layouts. GNOME 49 support also added.

You're reading GNOME 49 Support, New Keyboard Options Added to Tiling Shell, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

29 Sep 2025 9:21pm GMT

Ubuntu now supports Azure's Metadata Security Protocol (MSP), raising the baseline for VM security on Azure. MSP locks down IMDS and WireServer behind HMAC-signed, identity-aware requests enforced by the azure-proxy-agent (Canonical's integration of Microsoft's GPA) using eBPF interception and per-endpoint allowlists. It must be enabled from Azure (Portal/CLI). The package is ready for testing (including via -proposed) with SRUs planned for 24.04 LTS and 22.04 LTS. Start in Audit mode, then move to Enforce once behaviour is validated.

29 Sep 2025 5:59pm GMT

The Incus team is pleased to announce the release of Incus 6.17!

This release comes with an early CLI for IncusOS users, a couple of nice enhancements to OVN networking, more flexibility for cluster users and a couple of new instance options.

The highlights for this release are:

• IncusOS management commands
• Tunnel support on OVN networks
• Control over out-of-memory priority
• Override-able configuration and devices on backup import
• database-client cluster role
• Support for parent=none on OVN uplink networks
• Cluster groups in configuration preseed

The full announcement and changelog can be found here.
And for those who prefer videos, here's the release overview video:

You can take the latest release of Incus up for a spin through our online demo service at: https://linuxcontainers.org/incus/try-it/

And as always, my company is offering commercial support on Incus, ranging from by-the-hour support contracts to one-off services on things like initial migration from LXD, review of your deployment to squeeze the most out of Incus or even feature sponsorship. You'll find all details of that here: https://zabbly.com/incus

Donations towards my work on this and other open source projects is also always appreciated, you can find me on Github Sponsors, Patreon and Ko-fi.

Enjoy!

29 Sep 2025 3:36pm GMT

As I was shopping groceries I had a shocking realization: The active dependencies of packages in a solver actually form a trie (a dependency A|B - "A or B" - of a package X is considered active if we marked X for install).

Consider the dependencies A|B|C, A|B, B|X. In most package managers these just express alternatives, that is, the "or" relationship, but in Debian packages, it also expresses a preference relationship between its operands, so in A|B|C, A is preferred over B and B over C (and A transitively over C).

This means that we can convert the three dependencies into a trie as follows:

Solving the dependency here becomes a matter of trying to install the package referenced by the first edge of the root, and seeing if that sticks. In this case, that would be 'a'. Let's assume that 'a' failed to install, the next step is to remove the empty node of a, and merging its children into the root.

For ease of visualisation, we remove "a" from the dependency nodes as well, leading us to a trie of the dependencies "b", "b|c", and "b|x".

Presenting the Debian dependency problem, or the positive part of it as a trie allows us for a great visualization of the problem but it may not proof to be an effective implementation choice.

In the real world we may actually store this as a priority queue that we can delete from. Since we don't actually want to delete from the queue for real, our queue items are pairs of a pointer to dependency and an activitity level, say A|B@1. Whenever a variable is assigned false, we look at its reverse dependencies and bump their activity, and reinsert them (the priority of the item being determined by the leftmost solution still possible, it has now changed). When we iterate the queue, we remove items with a lower activity level:

1. Our queue is A|B@1, A|B|C@1, B|X@1
2. Rejecting A bump the activity for its reverse dependencies and reinset them: Our queue is A|B@1, A|B|C@1, (A|)B@2, (A|)B|C@2, B|X@1
3. We visit A|B@1 but see the activity of the underlying dependency is now 2 and remove it Our queue is A|B|C@1, (A|)B@2, (A|)B|C@2, B|X@1
4. We visit A|B|C@1 but see the activity of the underlying dependency is now 2 and remove it Our queue is (A|)B@2, (A|)B|C@2, B|X@1
5. We visit A|B@2, see the activity matches and find B is the solution.

27 Sep 2025 2:32pm GMT

Na semana que passou o Diogo andou a arrumar tudo em caixotes e aumentou o PIB Chinês em 127%! Toda a Glória ao Celestial Comprador de Electrónica dos Povos! E num verdadeiro Pro-Dígio de velocidade, brincou com RJ45, sfp+, OpenWRT e demais jigajogas para espremer 10 Gbps até ao último bit. Ainda trouxemos muitas novidades do Firefox 143, Questing Quokka, Gnome 49, Ubuntu Touch e coisas com nomes esquisitos, como Dracut, Cuda, Loupe, Rust e Ptyxis (pronuncia-se «Ptyxis»).

Já sabem: oiçam, subscrevam e partilhem!

• https://www.saitek.com/uk/down/drivers.php
• https://www.x-plane.com/
• https://pt.aliexpress.com/item/1005006900224809.html
• https://www.blender.org/
• https://www.amazon.es/dp/B0DNDS2NRJ
• https://www.amazon.es/dp/B0DQ4VVZKN
• https://www.youtube.com/watch?v=vvcMIoanhwE
• https://pt.aliexpress.com/item/1005009557703859.html?gatewayAdapt=glo2bra
• https://www.amazon.es/dp/B07LFKGP1L
• https://9to5linux.com/firefox-143-is-now-available-for-download-this-is-whats-new
• https://support.mozilla.org/en-US/kb/firefox-protection-against-fingerprinting#w_suspected-fingerprinters
• https://www.omgubuntu.co.uk/2025/09/firefox-143-release-key-changes
• https://www.omgubuntu.co.uk/2025/09/ubuntu-25-10-switches-to-dracut-by-default
• https://ubuntu.com/blog/canonical-announces-it-will-support-and-distribute-nvidia-cuda-in-ubuntu
• https://developer.nvidia.com/cuda-toolkit
• https://www.phoronix.com/news/Ubuntu-Better-CUDA
• https://9to5linux.com/canonical-to-package-and-distribute-nvidia-cuda-within-ubuntus-repositories
• https://www.omgubuntu.co.uk/2025/09/canonical-adds-nvidia-cuda-ubuntu-repos
• https://www.phoronix.com/news/Ubuntu-Ptyxis-Recommended
• https://gitlab.gnome.org/chergert/ptyxis/
• https://apps.gnome.org/pt/Loupe/
• https://lists.ubuntu.com/archives/ubuntu-announce/2025-September/000316.html
• https://www.phoronix.com/news/Ubuntu-25.10-Beta
• https://9to5linux.com/ubuntu-25-10-beta-released-with-linux-kernel-6-17-gnome-49-and-more
• https://www.omgubuntu.co.uk/2025/09/ubuntu-25-10-beta-released
• https://apps.gnome.org/pt/Loupe/
• https://lists.ubuntu.com/archives/ubuntu-announce/2025-September/000316.html
• https://www.phoronix.com/news/Ubuntu-25.10-Beta
• https://9to5linux.com/ubuntu-25-10-beta-released-with-linux-kernel-6-17-gnome-49-and-more
• https://www.omgubuntu.co.uk/2025/09/ubuntu-25-10-beta-released
• https://discourse.ubuntu.com/t/ubuntu-desktop-25-10-the-questing-quokka-roadmap/61159
• https://www.phoronix.com/news/GNOME-49-Released
• https://9to5linux.com/gnome-49-brescia-desktop-environment-officially-released-heres-whats-new
• https://www.osnews.com/story/143369/gnome-49-released/
• https://www.omgubuntu.co.uk/2025/09/gnome-49-officially-released
• Festa do Software Livre 2025, Porto, 3 a 5 de Outubro: https://festa2025.softwarelivre.eu/pt/
• Ubuntu Summit 2025, Londres, 23-24 de Outubro: https://ubuntu.com/blog/ubuntu-summit-25-10-is-coming-to-your-circle-of-friends-from-london
• LoCo PT: https://loco.ubuntu.com/teams/ubuntu-pt/
• Mastodon: https://masto.pt/@pup
• Youtube: https://youtube.com/PodcastUbuntuPortugal

Atribuição e licenças

Este episódio foi produzido por Diogo Constantino, Miguel e Tiago Carrondo e editado pelo Senhor Podcast. O website é produzido por Tiago Carrondo e o código aberto está licenciado nos termos da Licença MIT. (https://creativecommons.org/licenses/by/4.0/). A música do genérico é: "Won't see it comin' (Feat Aequality & N'sorte d'autruche)", por Alpha Hydrae e está licenciada nos termos da CC0 1.0 Universal License. Os separadores de péssima qualidade foram tocados ao vivo e sem rede pelo Miguel, pelo que pedimos desculpa pelos incómodos causados. OS efeitos sonoros têm os seguintes créditos: Sitar long.aiff by Kaiho - https://freesound.org/s/37715/ - License: Attribution 3.0; Red Choir in Beijing Park.wav by Refrain - https://freesound.org/s/266500/ - License: Creative Commons 0 Este episódio e a imagem utilizada estão licenciados nos termos da licença: Attribution-NonCommercial-NoDerivatives 4.0 International (CC BY-NC-ND 4.0), cujo texto integral pode ser lido aqui. Estamos abertos a licenciar para permitir outros tipos de utilização, contactem-nos para validação e autorização. A arte de episódio foi criada por encomenda pela Shizamura - artista, ilustradora e autora de BD. Podem ficar a conhecer melhor a Shizamura na Ciberlândia e no seu sítio web.

25 Sep 2025 12:00am GMT

Designing a new, robust, sustainable, and truly holistic approach to cybersecurity Talk to any cybersecurity expert or IT security manager, and they'll tell you they're sick of alerts and issues. For a while now, the industry has slowly been realizing that there's a better way to improve cybersecurity and resolve security issues in IT without […]

24 Sep 2025 3:00pm GMT

The purpose of this article is to share the technical realities of security patching for the Linux kernel, and the intended scope of the Linux kernel's livepatch capability. We'll cover when kernel live patching is most appropriate, and when updating deb and snap packages and then rebooting is the best option.

24 Sep 2025 3:12am GMT

I've been wanting to create some Bible study software for DOS for a while now. Why target DOS? Because it's a cool platform, it's still in use in some areas of the world, and I haven't been able to find readily available Bible software for DOS, whether open-source or not. Over the weekend, I was thinking about this project again, and decided that, for the sake of development ease and avoiding emulator quirks, I should set up a DOS installation on physical hardware and create the software on that machine.

I have tons of old computers in varying states of decay or usefulness; three of them still work pretty well. I decided to pick the weakest of the three for this project since it probably had more than enough grunt for the project at hand, but wouldn't be useful for much else. The chosen system was a Compaq Presario 6000 desktop, featuring some iteration of an AMD Athlon XP processor, 256 MB RAM, a 20 GB hard drive (which I was about to expand for reasons I'll get into later), a floppy drive, and dual optical drives (only one of which works). This particular system is a bit strange since its USB controller and network card are both NVIDIA hardware, even though NVIDIA is typically associated with graphics cards. Beyond that though, the system was pretty typical for the kind of hardware you'd see in the early 2000s - all of the drives use IDE to communicate with the motherboard, and most of the expansion slots are PCI (except for a couple of mystery slots, one of them might be AGP, and another one seems to be intentionally blocked off and I can't tell what it is). The back panel features PS/2 ports for a mouse and keyboard, a parallel port and a serial port, a VGA port for the monitor, and a few USB (probably USB 2) ports. There was also a 3Com network card installed in one of the slots, which I had put there when experimenting with OpenBSD on this system. The front panel had a couple more USB ports.

One downside of using DOS for development is a lack of good source code versioning systems. Git doesn't exist for DOS, and I don't have the time or willingness to learn RCS or similar (maybe I should?), so I decided I would implement version control by just copying the project every so often to a backup location, probably zipping it in the process. Anticipating that this would probably require a hefty chunk of disk space, I decided to add a 40 GB Maxtor drive taken from a Pentium 4 desktop I had laying around. Getting the drive installed was a bit of a challenge; many older computers have the drives slide out backwards into the system, but this Compaq has them slide out forward out the front of the machine. This meant I had to get the front panel off of the machine, which was hard because it was held on by four extremely stiff plastic latches that had to all be disengaged at the same time. Thankfully the plastic of the front panel was able to bend enough that I could disengage each latch individually, then keep it that way while I worked on another latch.

After getting the cover off, I had to fight with Compaq's drive mounting hardware. Rather than just screwing the drives directly into the bay like a normal computer would, Compaq elected to use a system of rails and latches to keep the drives fully hooked into the machine. The screws had very thick heads, and were intended to slide along the rails and then latch in place once inserted far enough. As strange as this already was, there was also the problem that the secondary drive bay had a malformed rail, that was just barely too narrow for the mounting screws to actually slide in. There were also separate screw types for the optical drives and the hard drives. What I ended up doing was using optical drive screws on the Maxtor hard drive, which seemed to fit correctly and were able to latch in place. After getting this kludgy setup to work, I then remembered that I needed to set jumpers on the drives to configure them as "master" and "slave" properly, so I then took both drives out, reconfigured the jumpers, and slid them back in. After a bit of cable routing shenanigans (including removing a rather unfortunately located zip tie), I finally had both drives installed.

To confirm that I hadn't made a total mess of my drive configuration, I decided to take some time to power the system on and check the BIOS. I had an old PS/2 Microsoft keyboard, and a small, 4:3 aspect ratio flatscreen display with a built-in VGA cable, so I decided to use those for the project. Nothing caught fire when I plugged it in and powered it on, and after getting into the BIOS settings I found that both drives appeared to be properly recognized. I also saw "Removable Media Boot", which made me hopeful that this machine might support USB boot. I turned off a bunch of settings related to "fast startup" to minimize the chances of having issues, then saved my changes and exited.

Since I thought USB boot might work, I downloaded the FreeDOS 1.4 FullUSB and flashed it to a USB drive. Unfortunately, my hopes were soon dashed; the USB drive did not appear in the BIOS's boot order settings. Crud.

I don't generally like burning CD-Rs if I don't have to, since they can't be rewritten, they probably won't keep being manufactured for much longer, and I only had 48 of my original stack of 50 left (oh horror!), but I didn't see another good option at this point, so I dragged out one of the other working old computers, a Panasonic Toughbook that had an old-ish install of Void Linux on it. This particular machine looks like it's been through a warzone, but it still works well enough, and most importantly, the CD burner in it seems to work flawlessly. In the hopes of not having to waste any further CDs in the future, I decided to burn Plop Boot Manager to the disc rather than burning FreeDOS itself. The burn went smoothly enough, the Compaq was happy to boot from it, and next thing I knew I was able to boot into FreeDOS from the USB! Woohoo!…

…or…. not. FreeDOS itself seemed to run without issues, and partitioning and formatting the drives wasn't a problem, but for some reason FreeDOS's installer didn't work when booted in this way. Despite the fact that it was installing to what it considered drive D:, it kept trying to write files to drive C:, which was the read-only volume on the USB drive. This resulted in lots of "Abort, Retry, Ignore, Fail?" error messages, and while the installer did seem to work (kinda) if I just "ignored" all the errors, I didn't trust the finished installation was going to work. I also couldn't just sit there and press and hold the "I" key to keep ignoring errors, since doing so slowed the copy process down (probably because it was spamming the keyboard interrupt, I would guess). So, one CD-R apparently wasted. Next!

Back on the Toughbook, I used wget to download both the FreeDOS 1.4 LiveCD and BonusCD. I needed both discs, since the OS was on the LiveCD and the development tools (like the C compiler I wanted to use) was on the BonusCD. Burning the discs was pretty easy, and FreeDOS seemed much happier installing from a CD than trying to install from a USB. Soon enough I had a working FreeDOS installation, and a little bit later I had a good text editor and the Open Watcom 1.9 compiler installed.

At this point I was almost ready to sit down and start coding, but decided I had better figure out how to get data off the system before I dedicated a bunch of time working on my project. I didn't want it to just rot on the machine it was coded on. At this point I discovered two frustrating facts:

• The USB driver included with FreeDOS only works with UHCI controllers, but the controller in this system is an OHCI controller.

• The network card wasn't supported out of the box - there were packet drivers out there for it most likely, but those weren't very useful since I couldn't get outside data onto the machine since USB didn't work.

(At this point one might reasonably ask why I don't just use the floppy disk drive. That's because I have exactly one functional computer with a floppy disk drive, that being the Compaq I was setting up. I can use floppies as storage if I'm willing to risk catastrophic data loss, but they're useless as a data transfer mechanism. There are also OHCI drivers for DOS available online, even open-source drivers, but of course those would have to be transferred to the system in order to use them.)

At this point what a normal person probably would do is accept the fact that they're going to have to burn some more CD-Rs, and proceed to get some USB and network drivers onto the machine. But due to being paranoid about running out of CD-Rs, that was an absolutely unacceptable solution to me. I had the OpenBSD disc I used some months ago laying around, so…

Dual-booting FreeDOS and OpenBSD didn't end up being all that hard. For one, BSD's partitioning system actually works really well for multibooting. Even though OpenBSD generally uses a whole bunch of partitions, it doesn't try to create them all directly on the drive. Instead, it creates one "container" partition, and then creates a bunch of OpenBSD-specific partitions within that container, separate from the drive's usual partitioning scheme. On top of that, the installer is pretty straightforward (once you realize that you need to skip all forms of network setup if you don't intend to plug the machine into a network), and an OpenBSD installation without an X server or games fits in 3 GB of disk space with a bit of wiggle room to spare. I don't expect I'll be able to update this installation without pain, but since all I need it to do is let me move files to and from a USB drive, I don't need to update it (and won't be connecting it to a network).

The only really painful part of the installation process was partitioning - every operating system seems to have a radically different idea of how fdisk is supposed to work, and OpenBSD's idea of fdisk is the most… um… interesting one I've seen to date. Rather than working in terms of unallocated space and partition creation, OpenBSD's fdisk just acts as if all four partitions MBR allows for always exist at all times. You don't create a partition, you just configure each of the partition slots you're interested in working with. If you don't want a partition to exit, you set its type code to "00" (unused). If you do want a partition to exist, you set its type code to whatever's appropriate for your use case, define a start and end sector, and you're done. I'm guessing this is probably a more accurate model of how MBR actually works, but it was nonetheless surprising to me. More surprising is that there don't seem to be any safeguards to make sure you don't do something completely ridiculous like define partitions that overlap each other, or put sector 0 as part of a partition. OpenBSD's fdisk also does not try to guess things like how large you want the partition to be, so you have to calculate everything by hand and double-check your work to keep from making a mess. To be honest, I actually kind of like this system, it was just very unexpected.

After fighting with the partitioner a bit, I made a 3 GB partition at the end of the 40 GB Maxtor drive to install OpenBSD to. The remaining 37 GB would still be dedicated to a FAT32 DOS system. (In retrospect, I wish I had split the drive 50-50 between DOS and OpenBSD so I could play with both, and in all likelihood I'll probably go back and do that at some point in the future, but this is the setup I have now.) Once that was done, OpenBSD installed just fine…

…and then I realized that the BIOS in this machine doesn't allow me to specify which hard drive I want to boot from. The boot order settings fail to list the secondary drive anywhere, and there's no boot menu button.

Thankfully there was a good workaround. Remember the Plop Boot Manager disc I burned near the beginning of this ordeal? Turns out it had no problem recognizing all of the partitions on all of the drives in this system. All I have to do is just leave the Plop CD in the bootable drive, and then I can choose whether i want to boot into FreeDOS or OpenBSD effortlessly.

That pretty much describes where my setup is at so far. I have been able to successfully transfer files between my main work laptop and the FreeDOS system using this OpenBSD "shim". I haven't gotten USB working in FreeDOS yet, and I haven't managed to get either of the network cards to work yet, but the system does work, and I had a lot of fun using "edit" and "fed" to write up a README.TXT for the Bible software project that inspired this whole endeavor. There's still more to do for setting up the workstation though:

• I really would like to have working USB in FreeDOS. There's a Panasonic driver floating around the Internet that people claim to have success with, I'll probably end up using that.

• I should replace the broken optical drive. Then I can have both Plop Boot Manager and the FreeDos 1.4 BonusCD inserted at the same time, which would make life quite a bit easier.

• I'm already regretting only giving OpenBSD 3 GB of space on the secondary drive. I'd like to be able to use it to chat on IRC, which means connecting it to the Internet, which means keeping it up-to-date, so I'll probably repartition the drive, allocate 20 GB to OpenBSD, and leave 20 GB for DOS. Even that's probably huge, but we'll find out. (I don't intend to connect FreeDOS to the Internet since I'm a bit scared of the security issues of doing that.)

• Embarrassingly, I'm using a Chromebook to let me look at Open Watcom's documentation in a web browser. I should set things up so that I can read the documentation from within DOS itself.

Other than the above points though, the system is working quite well, and I'm happy with it. Hopefully I won't end up spending so much time setting it up that I never use it for its intended purpose! :P

21 Sep 2025 6:04pm GMT

Why cloud gaming? Cloud gaming is changing the way we play. Instead of buying expensive hardware, players stream games from the cloud, like Netflix for games. This is no longer a futuristic idea, it's here. Services like NVIDIA GeForce Now, Sony PS Plus, and Xbox Cloud Gaming have shown what's possible: playing high-end games on […]

19 Sep 2025 8:00am GMT

Canonical is proud to announce it has achieved compliance with IEC 62443-4-1 for cybersecurity in Industrial Automation and Control Systems (IACS). Building on Canonical's existing ISO/SAE 21434 certification, this milestone expands Ubuntu's leadership in securing critical infrastructure at the intersection of IT and operational technology (OT) environments. Achieving IEC 62443-4-1 compliance ensures Canonical solutions can be deployed […]

18 Sep 2025 11:00am GMT

Today Canonical, the publisher of Ubuntu, announced support for the NVIDIA CUDA toolkit and the distribution of CUDA within Ubuntu's repositories. CUDA is a parallel computing platform and programming model that lets developers use NVIDIA GPUs for general-purpose processing. It exposes the GPU's Single-Instruction Multiple Thread (SIMT) architecture, enabling fine-grained control over threads, memory hierarchies, […]

15 Sep 2025 2:30pm GMT

How Vaultara achieved FedRAMP compliance with Ubuntu Pro Ubuntu Pro helps businesses worldwide to innovate and shape the future. In this edition of What our users make with Pro, we talk to Dave Monk, CTO of Vaultara, a FedRAMP approved data-sharing platform trusted by the US government. Dave shares how Ubuntu Pro became a cornerstone […]

11 Sep 2025 12:13pm GMT