Anyone using Security Onion?

I’m waiting for SO 2.4 to come out since 2.3 is still based on a steaming pile of CentOS 7, and I have reinstalled 2.3 on boxes which refuse to boot from the standard SO ISO and require a CentOS 7 install then a SO install. I’m not doing that again, so I am waiting. It was supposed to be based on RL 9.2 but the whole RH source thing seemingly freaked them out:

Now they are basing SO 2.4 on Oracle Linux 9.2 instead, but allow (unsupported) installs on top of RL, Alma, RH, etc. I’m wondering if this is going to become common. Could Oracle Linux take over from RH as the standard enterprise Linux? The SO folks seem to think they have the background and means plus benefits like FIPS compliance. Will the rebuilds follow suit? You know, allow Oracle to be the standard bearer but hold them to their promise of releasing all source code to all. Any thoughts?

The SO folks seem to think they have the background and means plus benefits like FIPS compliance.

Oracle Linux 9 is still in modules-in-process for FIPS validation, and hasn’t finished validation. We haven’t started validation efforts for 9 yet. We started our validation efforts with Rocky Linux 8 because it was (and still is) the most used version of Rocky Linux:

Could Oracle Linux take over from RH as the standard enterprise Linux?

Unlikely.

Will the rebuilds follow suit?

No, other rebuilds have all made their intentions known already. FWIW, Rocky Linux 8 and Rocky Linux 9 will always be 1:1 RHEL rebuilds, because that’s exactly what we promised. Additional variants may be available sooner or later (for example alternative images of Rocky Linux that include updates from our fast-track SIG by default).