HACKER Q&A
📣 textread

RHEL vs Debian?


Debian has 8086 CVE entries[1], as compared to only 1860 entries for RHEL.[2]

So, when it comes to security updates, RHEL blows away its competition?

If RHEL is so good, why isn't it more popular among tech startups?

Are any of FAANG using RHEL as their primary server OS? Maybe Cisco or Juniper uses them? I read that Google uses Debian rolling releases.

What am I misunderstanding? Why isn't RHEL the default choice for tech startups and indiehackers looking for peace of mind?

I use Arch, btw ;)

[1] https://www.cvedetails.com/product/36/Debian-Debian-Linux.html?vendor_id=23

[2] https://www.cvedetails.com/product/79/Redhat-Enterprise-Linux-Desktop.html?vendor_id=25


  👤 PaulHoule Accepted Answer ✓
I didn't leave Red Hat, Red Hat left me. My guess is that Red Hat's business plan was to be bought buy IBM for a long time, actually serving customers and making money has been besides the point for a long time.

Years ago I was a Fedora fanboy, but then I started finding more and more Fedora wouldn't install on my computer because it was too old or too new. Ubuntu "just worked". Time and time again I'd struggle for days to make something work w/ Red Hat but be able to look up a StackOverflow recipe to make it work in Ubuntu immediately.

It's nice to know that someday when IBM realizes it's "old fogie" reputation has finally become a problem for its survival it can change its name to "Red Hat" and go on to fool people for another decade.


👤 razodactyl
You might be misunderstanding on your comparison of two populations using a shared metric.

How many reported CVE's would RHEL have if it had zero users?

---

I also asked GPT to elaborate:

---

I understand your curiosity about the differences between Debian and RHEL and why one might be more popular than the other. Let me provide some insights on this topic.

While it's true that Debian has more CVE entries than RHEL, it doesn't necessarily mean that RHEL is significantly more secure. The number of CVEs is just one aspect to consider when evaluating security. Other factors include the speed at which vulnerabilities are addressed, patch availability, and the overall security practices employed by the organization behind the OS.

As for RHEL not being as popular among tech startups, there are several potential reasons. Startups usually have budget constraints, and the cost of RHEL licenses and support services can be a factor for them. Additionally, some startups prefer more flexible options like Debian or Ubuntu because of the large community, easy accessibility, and a wider range of compatible software packages.

Regarding your question about FAANG companies and their primary server OS choices, it's important to note that these companies often have diverse technology stacks tailored to their unique needs. It's likely that they use a mix of operating systems, including RHEL, Debian, Ubuntu, and others, based on specific requirements or preferences. Google is known to use Debian rolling releases for some of its servers, as you mentioned.

There isn't a single default choice for all tech startups or indiehackers when it comes to server operating systems. The decision depends on their specific needs, budget, compatibility requirements, and other factors. RHEL does offer robust security and enterprise-grade stability, but its cost and potential learning curve might make it less attractive to some startups.

---

I also asked if it was survivorship bias:

---

Your question about survivorship bias is an interesting one. While it's possible that survivorship bias plays a role in shaping perceptions about which operating systems are "better" or "more secure," many factors influence a company's choice of operating system. Ultimately, it's important for businesses to consider their unique requirements and constraints when deciding the best fit for them.


👤 pestatije
RHEL - Red Hat Enterprise Linux

CVE - Common Vulnerabilities and Exposures