<story><title>Antergos Linux Project Ends</title><url>https://antergos.com/blog/antergos-linux-project-ends/</url></story><parent_chain><item><author>subway</author><text>Does that mean part of your infrastructure saw no kernel patches in 4 years?&lt;p&gt;OS uptime gave me pride in the 90s. Today it&amp;#x27;s usually a bad sign.</text></item><item><author>axaxs</author><text>This makes me sad, but not completely unexpected.  I worked on Antergos a while early on and had a lot of fun.  That said, at least 2 of the core devs went more or less MIA for months at a time as they got busy with life, counting myself.  My hats off to the team but specifically Gustau and Dustin, who trudged along the entire journey through the years.  Seriously great developers to work with.&lt;p&gt;As an aside, I just checked the geolocation server I&amp;#x27;d setup for the installer.&lt;p&gt;03:14:51 up 1357 days,  3:43,  1 user,  load average: 0.00, 0.01, 0.05&lt;p&gt;It&amp;#x27;s been up 4 years continuously on a Scaleway ARM box.  I can&amp;#x27;t recommend them enough for such projects.</text></item></parent_chain><comment><author>buildzr</author><text>Unless you have untrusted users with SSH you can get away with a lot. I&amp;#x27;ve reviewed many major Linux patches for the past several years and found we weren&amp;#x27;t actually impacted by most of them.&lt;p&gt;For example, I don&amp;#x27;t need Zombieload&amp;#x2F;MDS patches as I don&amp;#x27;t have anyone running untrusted code on the servers, I didn&amp;#x27;t need the rds_tcp vulnerability patch from last week because I don&amp;#x27;t have RDS modules loaded on any of my servers. I didn&amp;#x27;t need client side OpenSSH patches on these servers either, nor OpenSSL patches for UDP SSL. Typically a quick check with ansible is all it takes to confirm if these things are or aren&amp;#x27;t real risks for you.&lt;p&gt;EDIT: 
Just looking at some CVE lists... It looks like assuming that the entire attack surface is the kernel and pre-auth openssh you may be in the clear running stock Ubuntu Server Minimal 14.04, a 5 year old OS today.&lt;p&gt;Kernel vulnerabilities resulting in code execution in the TCP stack or related code resulting in code execution are few and far between. OpenSSH vulnerabilities... well, the last pre-auth OpenSSH vulnerability, one of the two in it&amp;#x27;s entire lifetime had the severe consequence of... being able to check usernames too fast.&lt;p&gt;Please let me know if I&amp;#x27;ve missed a big one, but I don&amp;#x27;t see anything that could even be used to do more than DoS a system like this running an old kernel and openssh server.</text></comment>
<story><title>Antergos Linux Project Ends</title><url>https://antergos.com/blog/antergos-linux-project-ends/</url></story><parent_chain><item><author>subway</author><text>Does that mean part of your infrastructure saw no kernel patches in 4 years?&lt;p&gt;OS uptime gave me pride in the 90s. Today it&amp;#x27;s usually a bad sign.</text></item><item><author>axaxs</author><text>This makes me sad, but not completely unexpected.  I worked on Antergos a while early on and had a lot of fun.  That said, at least 2 of the core devs went more or less MIA for months at a time as they got busy with life, counting myself.  My hats off to the team but specifically Gustau and Dustin, who trudged along the entire journey through the years.  Seriously great developers to work with.&lt;p&gt;As an aside, I just checked the geolocation server I&amp;#x27;d setup for the installer.&lt;p&gt;03:14:51 up 1357 days,  3:43,  1 user,  load average: 0.00, 0.01, 0.05&lt;p&gt;It&amp;#x27;s been up 4 years continuously on a Scaleway ARM box.  I can&amp;#x27;t recommend them enough for such projects.</text></item></parent_chain><comment><author>axaxs</author><text>If by &amp;#x27;part of your infrastructure&amp;#x27; you mean a single API that emits geo coordinates based on client address, then yes.</text></comment>