• Changing how we handle non-free firmware

    From Steve McIntyre@21:1/5 to All on Thu Aug 18 22:00:01 2022
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the
    decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com You raise the blade, you make the change... You re-arrange me 'til I'm sane...

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmL+md0ACgkQWHl5VzRC aE6JTg/8DB7w/YuH2IGV0/tXofeYj6n63eh6QFH2JrUu8FMpiUKKQHld7XArd/6J mlYbX9phpgqrEfS+EN4us4d0KvsIh48jN09VKLFGErmW0z4j8e0y9TiavrZNqjuT Yao0p8IlyZkuFzeGJcfpZ4qGf4n6xhXGTkFvOYWkRPqyEpRChX5bBY+qtdETZAAk jgFeYTZOTWbPMbyJoGpVlGMo5bwkxvtjpGwF+Ig8OA0o70Mkj30igYM7k6VakIHd g6ec6y+t7nVYIbnyhwiE0S3u163550UyKeXbjKZZdPmb5kWvy1DOq1tuX0nTAU+m 5ax3aYqHYmHlg/TQM6hQffjMof66wn3dEVOYDnIQgV7F6LBnMCwzeB0mniUelwjB ha896kZWTA1YvthfobNyr9bnor2tw/ZqFURlGrDyDZcv5xHXbSONbK9/z5ZyFWeu PPKQTKdJNWqd2BhDxwyENavFjPukKQCxS3HEMOg7x7VaNiAxc8jN60zO8l5jYtoN AC+79FpqlreopY0pwKhDZBwT8UwRdbMBRon2lGLFfmewMrsKL+y/13qLG6VGJ2KO SUUjykq1FIrysVhkk71U0xQWizUyJLKYc3hNf9nx6tK4Qf+FnqteG4/drNJ1FX5w APkXERC9uZ2azBj04Ovwlo4Jjg7bEdcOcLXCF7slPutGr1DwlLU=
    =QVSG
    -----END PGP SIGNATURE-----

    --- So
  • From Tobias Frost@21:1/5 to Steve McIntyre on Thu Aug 18 22:40:01 2022
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    You raise the blade, you make the change... You re-arrange me 'til I'm sane...

    Thanks Steve for this going forward!
    (seconded.)


    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmL+oSMACgkQkWT6HRe9 XTaokQ/+NRTsI0QzkLVp1gCqaj67USJ2VQ4Z8Hp3KcW9I1dZE2pBhxUIh5GmRmo7 IkYbjLKHboF1rnQzq4p4A/M18dXxO2tmBdQUzNZI4VRlahKuy/v+YFjG6I9YpOoQ Ind5gDGHSAIDSaVUBopoJFvqFRIoadqdaxzHlmiXbyxI5UF02hTe/Ur1gAAqPmc4 +BQ2ivubt4SAT5loB/ngn8pNgC0WprK00KgD9u4RGnmgYaU/Pc6/qX+U4fsMneG8 TFge0VQjZkkt+sJX4cE2sdrv65RIyEtJ5O+HzIX20iDsKryxzaVaPwG/AnOJklFI g6eyiGuM5EO8fkzIhcgKlx1Ha2HMM6n95uCIV0aaiaTO+8m6rRZuHI7YU20Itwp3 e+GLzzCr1TdSCg4luuB0zALQUMenOQDWuv/TxL0D09kXCTgWlWHrdcRlzA8RufLW Aj20fCwVfEGmlrUnsyJWaluu3b5fe6TahEzCQUplkcY7som7dEbPd4UVG6JUtdFU mLgJgvId+Alc6cJ3X4YvVwXcKRm0EYOh67LwdkXFIneQPXwSNkhUDXIzO459ZsAM 3GTw5KCNkKd3uclaApZVvlbjHyFLTfxheYBHTlfl5A1MICXWtaSgP4Ih6iutfxVy lCSzVDIWTGQI/KaI4ANmiIp56uOax9kJjYWxHGh3MGHKmbLcjZI=
    =z+ay
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Tobias Frost on Thu Aug 18 22:40:01 2022
    On Thu, 2022-08-18 at 22:29 +0200, Tobias Frost wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1,
    2]
    and I ran a session on the subject at DebConf [3].
       
    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and
    including
    (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when
    trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is
    needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what
    we
    do with non-free firmware. I see several possible paths forward,
    but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make
    the
    decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will
    include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide
    information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries
    just
    like any other installed software.

    We will publish these images as official Debian media, replacing
    the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by
    default*
    is accessibility. A blind user running the installer in text-to-
    speech
    mode may need audio firmware loaded to be able to drive the
    installer
    at all. It's going to be very difficult for them to change this.
    Other
    people should be able to drive the system (boot menus, etc.) to
    *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still
    do
    not want to see other non-free software in use. Users may still
    enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

     * in d-i, live-boot and elsewhere to make information about
    firmware
       available.

     * add support for the non-free-firmware section in more places:
       ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3]
    https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    --
    Steve McIntyre, Cambridge, UK.                               
    steve@einval.com
    You raise the blade, you make the change... You re-arrange me 'til
    I'm sane...

    Thanks Steve for this going forward!
    (seconded.)

    Looks great, thank you Steve - seconded.

    --
    Kind regards,
    Luca Boccassi

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEErCSqx93EIPGOymuRKGv37813JB4FAmL+omoACgkQKGv37813 JB4ZYw//ReqZbIxkegf+I4S+fnW6cCtZP7uaGUi0CqQKzmSgHON23Nyvo2Sb8sD6 YCq+O7gjPQ4W1XZr+s0Yn5vN5WWCQOohwTon3tX8+obeH8ggqOklvI0Pp6iAlpfI H1AoW87rX0HLEvgQavDAEHCl2iBG25+gPy9mWbQw+SzaSRbneStwxZcfAYjQ+mJE nEwFvsoUoYPofq86imd3LrY/+3nABcB+dt9ID0BAc3eDOCLrrCfjCLFeyJ4DvGjI 3frT7flKLy/9VPknt4bdX24K2vD1q4es9/P4yrz0kwlv/iNXAbAadyv1ooQ6RQGs IMYpoNNPUrzC0f/za34BrnAq6yk5iXQKCtcantFJatQC8I2XAP73Lab0YOvMN8si y+H1vnMEFk/+ZmlgMDqBb85krCN1I3nJQ7EqMWX0Qb9C6AZ9ouyMzaKX4YsrgE4k ZuUHKZd5LhXxhhQaQqP6rBKHFkvvaa/opo9Km74FceP07Qz9faV4tM7tMxOp1sGN jmp/AAumIdEWQUFHW0vE6oNeSBKvYea3gz86kaizi3C+E/kccl8wXTonLjAXyIFk y/ycRKRWCjhqA1UgRUwBWgr3wx/XCY/KM6385Wt2ayRWlcJW5VB4+LwVQIZAe30H AcDdf1jpDQLoBqj94E+IVsbqiQWiqojAVfmZLzdkvmqH/7UkorY=
    =YrcV
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ansgar@21:1/5 to Steve McIntyre on Thu Aug 18 23:10:01 2022
    Steve McIntyre writes:
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    Seconded.

    Ansgar

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIgEARYKADAWIQR3hZU8YXPYylUJRxfDof4h+X+qzwUCYv6peRIcYW5zZ2FyQGRl Ymlhbi5vcmcACgkQw6H+Ifl/qs/R6gEA1M0F1eh4pM4c41X+RhNobYM8Q/Fx3F1D nPsQG0cx+rEBAIJUEPbAA0Oeo0QMDICJZcH3WxolYHjeLAMee6cZdwgO
    =kQRy
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Louis-Philippe_V=c3=a9ron@21:1/5 to All on Thu Aug 18 23:10:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------NyA4fpPzzEoS9OuURrK0GVcG
    Content-Type: multipart/mixed; boundary="------------4kzcsGUUfWUaBzKduXtwpqu1"

    --------------4kzcsGUUfWUaBzKduXtwpqu1
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gMjAyMi0wOC0xOCAxNSBoIDU4LCBTdGV2ZSBNY0ludHlyZSB3cm90ZToNCj4gSGkgYTEx IQ0KPiANCj4gSSdtIHByb3Bvc2luZyB0byBjaGFuZ2UgaG93IHdlIGhhbmRsZSBub24tZnJl ZSBmaXJtd2FyZSBpbg0KPiBEZWJpYW4uIEkndmUgd3JpdHRlbiBhYm91dCB0aGlzIGEgZmV3 IHRpbWVzIGFscmVhZHkgdGhpcyB5ZWFyIFsxLCAyXQ0KPiBhbmQgSSByYW4gYSBzZXNzaW9u IG9uIHRoZSBzdWJqZWN0IGF0IERlYkNvbmYgWzNdLg0KPiAgICAgIA0KPiBUTDtEUjogVGhl IHdheSB3ZSBkZWFsIHdpdGggKG5vbi1mcmVlKSBmaXJtd2FyZSBpbiBEZWJpYW4gaXNuJ3QN Cj4gZ3JlYXQuIEZvciBhIGxvbmcgdGltZSB3ZSd2ZSBnb3QgYXdheSB3aXRob3V0IHN1cHBv cnRpbmcgYW5kIGluY2x1ZGluZw0KPiAobm9uLWZyZWUpIGZpcm13YXJlIG9uIERlYmlhbiBz eXN0ZW1zLiBXZSBkb24ndCAqd2FudCogdG8gaGF2ZSB0bw0KPiBwcm92aWRlIChub24tZnJl ZSkgZmlybXdhcmUgdG8gb3VyIHVzZXJzLCBhbmQgaW4gYW4gaWRlYWwgd29ybGQgd2UNCj4g d291bGRuJ3QgbmVlZCB0by4gSG93ZXZlciwgaXQncyBubyBsb25nZXIgYSBzZW5zaWJsZSBw YXRoIHdoZW4gdHJ5aW5nDQo+IHRvIHN1cHBvcnQgbG90cyBvZiBjb21tb24gY3VycmVudCBo YXJkd2FyZS4gSW5jcmVhc2luZ2x5LCBtb2Rlcm4NCj4gY29tcHV0ZXJzIGRvbid0IGZ1bmN0 aW9uIGZ1bGx5IHdpdGhvdXQgdGhlc2UgZmlybXdhcmUgYmxvYnMuDQo+IA0KPiBTaW5jZSBJ IHN0YXJ0ZWQgdGFsa2luZyBhYm91dCB0aGlzLCBBbnNnYXIgaGFzIGFscmVhZHkgYWRkZWQg ZGFrDQo+IHN1cHBvcnQgZm9yIGEgbmV3LCBzZXBhcmF0ZSBub24tZnJlZS1maXJtd2FyZSBj b21wb25lbnQgLSBzZWUNCj4gWzRdLiBUaGlzIG1ha2VzIHBhcnQgb2YgbXkgb3JpZ2luYWwg cHJvcG9zYWwgbW9vdCEgTW9yZSB3b3JrIGlzIG5lZWRlZA0KPiB5ZXQgdG8gbWFrZSB1c2Ug b2YgdGhpcyBzdXBwb3J0LCBidXQgaXQncyBzdGFydGVkISA6LSkNCj4gDQo+IEkgYmVsaWV2 ZSB0aGF0IHRoZXJlIGlzIHJlYXNvbmFibHkgd2lkZSBzdXBwb3J0IGZvciBjaGFuZ2luZyB3 aGF0IHdlDQo+IGRvIHdpdGggbm9uLWZyZWUgZmlybXdhcmUuIEkgc2VlIHNldmVyYWwgcG9z c2libGUgcGF0aHMgZm9yd2FyZCwgYnV0DQo+IGFzIEkndmUgc3RhdGVkIHByZXZpb3VzbHkg SSBkb24ndCB3YW50IHRvIGJlIG1ha2luZyB0aGUgZGVjaXNpb24NCj4gYWxvbmUuIEkgYmVs aWV2ZSB0aGF0IHRoZSBEZWJpYW4gcHJvamVjdCBhcyBhIHdob2xlIG5lZWRzIHRvIG1ha2Ug dGhlDQo+IGRlY2lzaW9uIG9uIHdoaWNoIHBhdGggaXMgdGhlIGNvcnJlY3Qgb25lLg0KPiAN Cj4gSSdtICpub3QqIGdvaW5nIHRvIHByb3Bvc2UgZnVsbCB0ZXh0IGZvciBhbGwgdGhlIHBv c3NpYmxlIGNob2ljZXMNCj4gaGVyZTsgYXMgZWxvcXVlbnRseSBzdWdnZXN0ZWQgYnkgUnVz cyBbNV0sIGl0J3MgcHJvYmFibHkgYmV0dGVyIHRvDQo+IGxlYXZlIGl0IGZvciBvdGhlciBw ZW9wbGUgdG8gY29tZSB1cCB3aXRoIHRoZSB0ZXh0IG9mIG9wdGlvbnMgdGhhdA0KPiB0aGV5 IGZlZWwgc2hvdWxkIGFsc28gYmUgb24gdGhlIGJhbGxvdC4NCj4gDQo+IFNvLCBJIHByb3Bv c2UgdGhlIGZvbGxvd2luZzoNCj4gDQo+ID09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQ0KPiANCj4gV2Ugd2lsbCBpbmNsdWRlIG5vbi1mcmVlIGZpcm13YXJlIHBhY2thZ2Vz IGZyb20gdGhlDQo+ICJub24tZnJlZS1maXJtd2FyZSIgc2VjdGlvbiBvZiB0aGUgRGViaWFu IGFyY2hpdmUgb24gb3VyIG9mZmljaWFsDQo+IG1lZGlhIChpbnN0YWxsZXIgaW1hZ2VzIGFu ZCBsaXZlIGltYWdlcykuIFRoZSBpbmNsdWRlZCBmaXJtd2FyZQ0KPiBiaW5hcmllcyB3aWxs ICpub3JtYWxseSogYmUgZW5hYmxlZCBieSBkZWZhdWx0IHdoZXJlIHRoZSBzeXN0ZW0NCj4g ZGV0ZXJtaW5lcyB0aGF0IHRoZXkgYXJlIHJlcXVpcmVkLCBidXQgd2hlcmUgcG9zc2libGUg d2Ugd2lsbCBpbmNsdWRlDQo+IHdheXMgZm9yIHVzZXJzIHRvIGRpc2FibGUgdGhpcyBhdCBi b290IChib290IG1lbnUgb3B0aW9uLCBrZXJuZWwNCj4gY29tbWFuZCBsaW5lIGV0Yy4pLg0K PiANCj4gV2hlbiB0aGUgaW5zdGFsbGVyL2xpdmUgc3lzdGVtIGlzIHJ1bm5pbmcgd2Ugd2ls bCBwcm92aWRlIGluZm9ybWF0aW9uDQo+IHRvIHRoZSB1c2VyIGFib3V0IHdoYXQgZmlybXdh cmUgaGFzIGJlZW4gbG9hZGVkIChib3RoIGZyZWUgYW5kDQo+IG5vbi1mcmVlKSwgYW5kIHdl IHdpbGwgYWxzbyBzdG9yZSB0aGF0IGluZm9ybWF0aW9uIG9uIHRoZSB0YXJnZXQNCj4gc3lz dGVtIHN1Y2ggdGhhdCB1c2VycyB3aWxsIGJlIGFibGUgdG8gZmluZCBpdCBsYXRlci4gVGhl IHRhcmdldA0KPiBzeXN0ZW0gd2lsbCAqYWxzbyogYmUgY29uZmlndXJlZCB0byB1c2UgdGhl IG5vbi1mcmVlLWZpcm13YXJlDQo+IGNvbXBvbmVudCBieSBkZWZhdWx0IGluIHRoZSBhcHQg c291cmNlcy5saXN0IGZpbGUuIE91ciB1c2VycyBzaG91bGQNCj4gcmVjZWl2ZSBzZWN1cml0 eSB1cGRhdGVzIGFuZCBpbXBvcnRhbnQgZml4ZXMgdG8gZmlybXdhcmUgYmluYXJpZXMganVz dA0KPiBsaWtlIGFueSBvdGhlciBpbnN0YWxsZWQgc29mdHdhcmUuDQo+IA0KPiBXZSB3aWxs IHB1Ymxpc2ggdGhlc2UgaW1hZ2VzIGFzIG9mZmljaWFsIERlYmlhbiBtZWRpYSwgcmVwbGFj aW5nIHRoZQ0KPiBjdXJyZW50IG1lZGlhIHNldHMgdGhhdCBkbyBub3QgaW5jbHVkZSBub24t ZnJlZSBmaXJtd2FyZSBwYWNrYWdlcy4NCj4gDQo+ID09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQ0KPiANCj4gQSByZWFzb24gZm9yIGRlZmF1bHRpbmcgdG8gaW5zdGFsbGlu ZyBub24tZnJlZSBmaXJtd2FyZSAqYnkgZGVmYXVsdCoNCj4gaXMgYWNjZXNzaWJpbGl0eS4g QSBibGluZCB1c2VyIHJ1bm5pbmcgdGhlIGluc3RhbGxlciBpbiB0ZXh0LXRvLXNwZWVjaA0K PiBtb2RlIG1heSBuZWVkIGF1ZGlvIGZpcm13YXJlIGxvYWRlZCB0byBiZSBhYmxlIHRvIGRy aXZlIHRoZSBpbnN0YWxsZXINCj4gYXQgYWxsLiBJdCdzIGdvaW5nIHRvIGJlIHZlcnkgZGlm ZmljdWx0IGZvciB0aGVtIHRvIGNoYW5nZSB0aGlzLiBPdGhlcg0KPiBwZW9wbGUgc2hvdWxk IGJlIGFibGUgdG8gZHJpdmUgdGhlIHN5c3RlbSAoYm9vdCBtZW51cywgZXRjLikgdG8gKm5v dCoNCj4gaW5zdGFsbCB0aGUgbm9uLWZyZWUgZmlybXdhcmUgcGFja2FnZXMgaWYgZGVzaXJl ZC4NCj4gDQo+IFdlIHdpbGwgKm9ubHkqIGluY2x1ZGUgdGhlIG5vbi1mcmVlLWZpcm13YXJl IGNvbXBvbmVudCBvbiBvdXIgbWVkaWENCj4gYW5kIG9uIGluc3RhbGxlZCBzeXN0ZW1zIGJ5 IGRlZmF1bHQuIEFzIGEgZ2VuZXJhbCBwb2xpY3ksIHdlIHN0aWxsIGRvDQo+IG5vdCB3YW50 IHRvIHNlZSBvdGhlciBub24tZnJlZSBzb2Z0d2FyZSBpbiB1c2UuIFVzZXJzIG1heSBzdGls bCBlbmFibGUNCj4gdGhlIGV4aXN0aW5nIG5vbi1mcmVlIGNvbXBvbmVudCBpZiB0aGV5IG5l ZWQgaXQuDQo+IA0KPiBXZSBhbHNvIG5lZWQgdG8gZG8gdGhlIHdvcmsgdG8gbWFrZSB0aGlz IGhhcHBlbjoNCj4gDQo+ICAgKiBpbiBkLWksIGxpdmUtYm9vdCBhbmQgZWxzZXdoZXJlIHRv IG1ha2UgaW5mb3JtYXRpb24gYWJvdXQgZmlybXdhcmUNCj4gICAgIGF2YWlsYWJsZS4NCj4g DQo+ICAgKiBhZGQgc3VwcG9ydCBmb3IgdGhlIG5vbi1mcmVlLWZpcm13YXJlIHNlY3Rpb24g aW4gbW9yZSBwbGFjZXM6DQo+ICAgICBmdHBzeW5jLCBkZWJpYW4tY2QgYW5kIG1vcmUuDQo+ IA0KPiBhbmQgSSBwbGFuIHRvIHN0YXJ0IG9uIHNvbWUgb2YgdGhvc2Ugc29vbi4NCj4gDQo+ IFsxXSBodHRwczovL2Jsb2cuZWludmFsLmNvbS8yMDIyLzA0LzE5I2Zpcm13YXJlLXdoYXQt ZG8td2UtZG8NCj4gWzJdIGh0dHBzOi8vbGlzdHMuZGViaWFuLm9yZy9kZWJpYW4tZGV2ZWwv MjAyMi8wNC9tc2cwMDEzMC5odG1sDQo+IFszXSBodHRwczovL2RlYmNvbmYyMi5kZWJjb25m Lm9yZy90YWxrcy80My1maXhpbmctdGhlLWZpcm13YXJlLW1lc3MvDQo+IFs0XSBodHRwczov L2luY29taW5nLmRlYmlhbi5vcmcvZGViaWFuLWJ1aWxkZC9kaXN0cy9idWlsZGQtdW5zdGFi bGUNCj4gWzVdIGh0dHBzOi8vbGlzdHMuZGViaWFuLm9yZy9kZWJpYW4tZGV2ZWwvMjAyMi8w NC9tc2cwMDIxNC5odG1sDQo+IA0KDQpTZWNvbmRlZC4NCg0KLS0gDQogICDiooDio7TioL7i oLviorbio6bioIANCiAgIOKjvuKggeKioOKgkuKggOKjv+KhgSAgTG91aXMtUGhpbGlwcGUg VsOpcm9ubmVhdQ0KICAg4qK/4qGE4qCY4qC34qCa4qCLICAgcG9sbG9AZGViaWFuLm9yZyAv IHZlcm9ubmVhdS5vcmcNCiAgIOKgiOKgs+KjhA0KDQo= --------------4kzcsGUUfWUaBzKduXtwpqu1
    Content-Type: application/pgp-keys; name="OpenPGP_0xE1E5457C8BAD4113.asc" Content-Disposition: attachment; filename="OpenPGP_0xE1E5457C8BAD4113.asc" Content-Description: OpenPGP public key
    Content-Transfer-Encoding: quoted-printable

    -----BEGIN PGP PUBLIC KEY BLOCK-----

    xjMEYEPdjBYJKwYBBAHaRw8BAQdA5yh8SOHhcvKeX/A4rv0/JTCL8Kgnnwy4/okK h1Htbs3NOExvdWlzLVBoaWxpcHBlIFbDqXJvbm5lYXUgPGxvdWlzLXBoaWxpcHBl QHZlcm9ubmVhdS5vcmc+wpkEExYKAEECGwMFCQHhM4AFCwkIBwMFFQoJCAsFFgID AQACHgECF4AWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCYEPeHgIZAQAKCRDh5UV8 i61BE0xKAP4oRsMaA2T/Zjge126dwHbnxBsjI/Q3ky8QkGlOffUKJAEA9dWm0hE4 0URSXM8Ndtf+GeHxvNeryVMCtVDUfjHMBA/CmQQTFgoAQQIbAwULCQgHAwUVCgkI CwUWAgMBAAIeAQIXgAIZARYhBPZNYdMh88tIkVZ1PeHlRXyLrUETBQJiEWgLBQkD rr3/AAoJEOHlRXyLrUETOK0BAM9I6BMMiqhsORsRcDVcM4VTm8G67YHapBW5zdl/ llfxAPwLAsi32TCPWjuwD3UdKig+6syvKFsiIfjiNBweNIQED80sTG91aXMtUGhp bGlwcGUgVsOpcm9ubmVhdSA8cG9sbG9AZGViaWFuLm9yZz7ClgQTFgoAPhYhBPZN YdMh88tIkVZ1PeHlRXyLrUETBQJgQ93rAhsDBQkB4TOABQsJCAcDBRUKCQgLBRYC AwEAAh4BAheAAAoJEOHlRXyLrUETeLMBAJAAznKkFo3Cm0pAW6klHv6jnDeMLS/6 9tAbJQRDNEAhAQDGQTrcAJZAcAFKoYeh2UlRokm1xG3Lc+FDpZGOKJBaBcKWBBMW CgA+AhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAFiEE9k1h0yHzy0iRVnU94eVF fIutQRMFAmIRaAsFCQOuvf8ACgkQ4eVFfIutQRMItwD+Oce5l0QBRJsax1C5MXe3 7Jk5cIMV2eOH0i4hd6c2wqYA/31Wn0qt5bv7i1y+2JsCeKtv0MIsYQ3LU1XG8k9h pb8BzjMEYEPg0RYJKwYBBAHaRw8BAQdASbekNA3xJnxUhMenK8ttfm8OTepniXHJ EN0Sm1/zmifCwDUEGBYKACYWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCYEPg0QIb AgUJAeEzgACBCRDh5UV8i61BE3YgBBkWCgAdFiEEyqdABweoFrAgL8PN9CV6ULIc +oUFAmBD4NEACgkQ9CV6ULIc+oWswwEAoRTzlukc6Ss4PaChogmudTzMdezF1FQz T5HH0C4EVawA/1JfaysK+seL/zdEQKUHD3cMdg8NvMtOXfcMg4EiFRYE1SQBAPKi UCqSMLql7QtWiB/xmDFUYltNa3+NLjRYRsNKfe9JAP9ZEaXY6oO+3owwpxbNphBp hSkH+9lEag0Dd3BEowOKDMLANQQYFgoAJgIbAhYhBPZNYdMh88tIkVZ1PeHlRXyL rUETBQJiEnvDBQkDr85yAIF2IAQZFgoAHRYhBMqnQAcHqBawIC/DzfQlelCyHPqF BQJgQ+DRAAoJEPQlelCyHPqFrMMBAKEU85bpHOkrOD2goaIJrnU8zHXsxdRUM0+R x9AuBFWsAP9SX2srCvrHi/83REClBw93DHYPDbzLTl33DIOBIhUWBAkQ4eVFfIut QRPY6AEAn9YvrTzliAvnyPef3kXXCvyH973dPn/539suXireBnsA/iqtwiOe4758 +28fgsXaVUpyFcEhirsu0/IhzSnpVXUNzjgEYEPg5RIKKwYBBAGXVQEFAQEHQIES 2w30v+hi13deaiPcx7KPVMCUIA25nu6by9Wfa5BuAwEIB8J+BBgWCgAmFiEE9k1h 0yHzy0iRVnU94eVFfIutQRMFAmBD4OUCGwwFCQHhM4AACgkQ4eVFfIutQRMNhgD9 HkVqB+Vy+F9EAzjHilHnSPft2xfLdhTrqzh6O0jEhqsA/2dd/AMSsZNAH8FYQKq3 Th+Hikj+jXXs+P9HYlULp1UHwn4EGBYKACYCGwwWIQT2TWHTIfPLSJFWdT3h5UV8 i61BEwUCYhJ72AUJA6/OcwAKCRDh5UV8i61BE2CVAP9+JHidrPFWE7WwNskxdVY1 YzHxGihO20Zt65AagSMVgAD9FlBCTPfQKpvC5jBax89pLAg07QsLq1wJ5U5v1zV5 JQTOMwRiEWorFgkrBgEEAdpHDwEBB0BkhUACsGCOaaPRY4H2lJiegjp8hFrduGkl t4qxMygJ88J4BCgWCgAgFiEE9k1h0yHzy0iRVnU94eVFfIutQRMFAmLoLeYCHQMA CgkQ4eVFfIutQROVZAD9E2NDG9xBqa7gZjYprQkY4EzUgUkZY5g5l046jI0WvN8B APK0Ab4Sjx7ekPJDDa4gB/Mr1htCyoZrPysKB7tkuCQDwsA1BBgWCgAmFiEE9k1h 0yHzy0iRVnU94eVFfIutQRMFAmIRaisCGwIFCQHhM4AAgQkQ4eVFfIutQRN2IAQZ FgoAHRYhBJBd8+ORq1094UcSk2a2zWq+wNuWBQJiEWorAAoJEGa2zWq+wNuWOv8B AKfeLq2soJeiHDAdoV0spQxoVJDme2FzgmBCxr0KxRfQAP9zaHwI9+NjirmC8Gov IGveZ7wxXJ/v8jYFnZadVhIRBqk+AQDXKlTmPsWLD6SnMvW+kF1SbHUq6aPqALXb nEai/hTTrAD+Pt7NZO1KqJQiIJ+miP1LIlPqiZKMPt8uNdw8KKqHVwbOOARiEXES EgorBgEEAZdVAQUBAQdAZSMCxsNHkDiI2tnp9FX1Xl+39/Knre9jd7exta0LGAED AQgHwngEKBYKACAWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCYuguFwIdAwAKCRDh 5UV8i61BE3D3APsH9gDArOrY6/d2/Lefpymj+yR5DHDEWpEvQ+GTnnA9ewEA6LgH Gx3DRN/KfkW1eoXxlnaFeQPXqggLOFj8kzYkDgDCfQQYFgoAJhYhBPZNYdMh88tI kVZ1PeHlRXyLrUETBQJiEXESAhsMBQkB4TOAAAoJEOHlRXyLrUETinYA93idFyhp u054EVRbFz/ybVAlpGqkdt69+LYt3Cr0RIkBANARMMYd47lV/1/C1fWsemRuZDCd +BzH/o7byibkUa4O
    =hixQ
    -----END PGP PUBLIC KEY BLOCK-----

    --------------4kzcsGUUfWUaBzKduXtwpqu1--

    --------------NyA4fpPzzEoS9OuURrK0GVcG--

    -----BEGIN PGP SIGNATURE-----

    iHUEARYKAB0WIQTKp0AHB6gWsCAvw830JXpQshz6hQUCYv6ptwAKCRD0JXpQshz6 hQaCAP9/EHL2cd3xRezONsMHA/Q9ku1jVtlxdLCtqIMO83E9EwEA0yXDfYNEfiUe F+/qc+V/7k9tyvN0nPfb0yB3rDOLhAw=
    =J+FF
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Samuel Henrique@21:1/5 to All on Thu Aug 18 23:30:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    To debian-vote on 18/08/22 - Changing how we handle non-free firmware:

    Seconded, thanks a lot for working on this, Steve!
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmL+rIEACgkQu6n6rcz7 RweacQ//Rg9LmEe1Mty4GssykiJFaX8TSXFDWYKHO8FbYQ3r4kg6gntaiU0mEwxx M6Ct2DBHr3BNR0AyXycE8UB+I7vZhinJsy8FpMqa+EO7crTvkNS6c55zbOYXVwNO W+RoLFJLXfnbj83iyNuEwg0Lxx0e8AmzktVZPUgqWzm6T6tWpoDEhXpKE3ykh0/f 0Fbu2Hhx8EpswlYsW+BrKYQ9rXO5uqClKUDqTCLJQAOVtoTqslskwXsf5umX8KEn iVRg8PN+oSJuKv/hcICVK/I8+OUqYD1rpzt7bgG18bYsvQs6GffHiyPoDJDkKO/q Cz2iOz+beAnJRgO49kGyDfAw2KPqAu5H+Oh002TyzWVRIg9Auob+AkeEtmkjEueI SdeoR676uK0Ezfq2nFZYOp/qrO8v8Zo96NKkai6KeDjbkpMNpt9kV64xhN2jNvV3 C0rnKH3HbxFBy50CX0+C/sjZ/5+ZUwM2iOO0PHkLv6Z6iK+7o8lwIGmVVmBsL0Qy LY8lA+J4QTiZsLyGU1pHYzTTVXof7Tci6g/UEV5LMwmNz5exb+DsgI3xsScyOBah Eh1ikNZZoQkp86xWIqhVBNs6KGNyappieQvXo/PjyAxa2Ujj/gQkhgghpNLwdLTK /jPrsZvwUaMEQyj/sFPXe4XpKTOQMoTJYiMdlSkbpwKl+Qoc928=
    =3YYO
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sebastian Ramacher@21:1/5 to Steve McIntyre on Thu Aug 18 23:20:01 2022
    On 2022-08-18 20:58:21 +0100, Steve McIntyre wrote:
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    Seconded

    Cheers


    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html
    --
    Sebastian Ramacher

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE94y6B4F7sUmhHTOQafL8UW6nGZMFAmL+rCIACgkQafL8UW6n GZMVuBAAwColZQGHIomnOpo0gIbvXSkcYkK5hOJjA7qzzzVfSmNUwEtAEiuXSnB1 dEsYZTVfzhx6gRhErNtwO3edn/diovSW1VnEosBBFWMA0AzIe+jXa5rIgarkVken 7NZm8VlazMMeSP0JTYPJYeZljESPKv6a6bdIFbezguTS7NyCTuCreDE8SlkW3KlJ sBViyq5pQCf8tYuc4zPGieniji3jI2MP7b3gzU1TcZCtYHLl9GNFt8svr6ra5wKj YeoXnfKNEhwwXdr/j3ZKoXCTmmKJnb1V1kXfMCWuK0XXSIJSxv6B3Mz03D9EArf2 Enph1DIIoBHHX4rilY5K4bQ85cPSJ0Nnmce0XAh8HzT7onFuXEmEqE8NZ0SHS4d1 rQwNY6InBCC0Aukrip1ooob1OKUFIXhF41Mkf/DhKojAOOaGxMIPm3jxPq5VuXNg /FYmy+ek+f7DWXp8pQcUzUtNe5mDHdANmZhRpDSFx6zTEzNp7BHu/IMe4PQK90av LLrLffrYlySXO0gUq0pjxtEu5Esm42mVOk+aXNsw12YNNY3Na+tj3ven6csn1QFg ZhHiWfuIQqf8a/3h+CP0rooBxRqwzIs+9rD3oAAKdhQtinDbVE9xstdZxtdg28Dc ICM9DopNLgoxLhYZOygbm46ZbZi4es2mYsx9F/AWGdxodfXb+hM=
    =TyHl
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Steve McIntyre on Thu Aug 18 23:30:01 2022
    Steve McIntyre <93sam@debian.org> writes:

    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    You raise the blade, you make the change... You re-arrange me 'til I'm sane...

    Seconded.

    Thanks Steve.
    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmL+rpsACgkQ0EujoAEl 1cBnTg/+PCCAOdv2y4WAVzsqbvwMcr3vqo404+NXNQopD71LTk33lJJfa9mA4Kov 6uJTQfWa7ZMyqEKMi6H2cb+YQW84rnCyx8MEFZyq9Mp8FAdc5FSgWjPXXo18aOHm veCxstexZTe39V1rNPyTeOjOT4tRDzX9lp2MAsdhCWW7gIPwo+xMNHOIwnjVUkQW AL5koObHiR3PzLYiz3BU7lheKWKxq3pK1LYn8UCnesLRi11v7dXWvFqGkzpJEKNH zHdIYtX4HvqG5FdQM7DAVo93Gh6e2YZYWmmVzvssj2nCAFrMKfQm+1I5MfCQTypN ccLG9UA7CWUaTmCn9i1z/8VvuiK7YZYSHKkQtWE0CoZtdpIaVpI8EzHJkQJiHW0X Zfk02JS6R3G45hbUARtMEJSk/Td6pzyM9w2btc+gOs3bkPQhnGJkyCvGQtc31r3V O7HD8g0WbumtvlPKKMBX53yaLrEb8btQhy4yyyzKCgzuN2IQsDAlSJOzTRoTD3Qu Cd4e940Tl03+3T9317SGlCC+RlVochgOxsedQ+xt4jrIwAbiXaBJpxs99LhArdLm OTU0yyVLtO24mllLw7Y6jByRYLiYFwFPDnHbziggxKvl4YG2KbNib+wFD0winDRs aDgN5iP1uYBw1Rb
  • From Timo =?utf-8?Q?R=C3=B6hling?=@21:1/5 to All on Thu Aug 18 23:30:01 2022
    * Steve McIntyre <93sam@debian.org> [2022-08-18 20:58]:
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including >(non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the >decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com >You raise the blade, you make the change... You re-arrange me 'til I'm sane...

    Seconded.

    --
    ⢀⣴⠾⠻⢶⣦⠀ ╭────────────────────────────────────────────────────╮
    ⣾⠁⢠⠒⠀⣿⡁ │ Timo Röhling │
    ⢿⡄⠘⠷⠚⠋⠀ │ 9B03 EBB9 8300 DF97 C2B1 23BF CC8C 6BDD 1403 F4CA │
    ⠈⠳⣄⠀⠀⠀⠀ ╰────────────────────────────────────────────────────╯

    -----BEGIN PGP SIGNATURE-----

    iQGzBAEBCgAdFiEEJvtDgpxjkjCIVtam+C8H+466LVkFAmL+rnMACgkQ+C8H+466 LVlakAv/Zt26VZdqtWUjOwaZRbKpStCQs//zd29EgE1bS8H34Mh4F2A7gtxEZgLw EwkMANA+nTeHSvr7eN1W+zlKRVHX8jjL9/NfBBLGFcifbmNHuC+CXEY6Pn2eNMw3 SjgMletdhTNHYE/4jdYkD+D3TEIlWSilZWUnm7yTGaIbc9GqwYiY+IWQk+uWnOa7 f+mUtotQ3G450JbV4ybtDdvJ11JWsjrGmeu4oz03khH+5ls0LoL5UGCHw0jf3Ugs o/NkSv6saijZczazooxqugMac2Bbg04Dj+GsxgREBT35MvTFgdlj87CTTQQP7zn0 hVo29nNY2P7POTUvRLJm51IrP47mdUM8rGxGRkxNjSq
  • From Joerg Jaspert@21:1/5 to Timo Lindfors on Thu Aug 18 23:40:02 2022
    On 16594 March 1977, Timo Lindfors wrote:

    3) Ensure that the filename of the installation media includes
    "non-free-firmware" or something similar so that it is clear to
    everyone what they are getting into. Debian has had such a long
    history of not including non-free bits in the installation image
    that people will definitely be surprised if the filename does not
    reflect this change.

    Actually, people are surprised we are hiding the useful images (with
    firmware) somewhere in some subdirectory away currently.

    --
    bye, Joerg

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Timo Lindfors@21:1/5 to Steve McIntyre on Thu Aug 18 23:40:02 2022
    On Thu, 18 Aug 2022, Steve McIntyre wrote:
    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    Thanks for working on this somewhat controversial topic. I haven't spend
    that much time thinking about the issue yet but perhaps the following
    steps could help make this less controversial:

    1) As it is pretty impossible to write a clear definition of
    firmware, we should require packages in non-free-firmware to clearly
    explain where the code will get executed to allow people to make
    informed decisions. Some people are more ok with having code run on
    an external device than on the main CPU.

    2) Ensure that the installer will inform users about non-free-firmware
    packages that are about to be installed and possibly also allow the
    user to see their full description.

    3) Ensure that the filename of the installation media includes
    "non-free-firmware" or something similar so that it is clear to
    everyone what they are getting into. Debian has had such a long
    history of not including non-free bits in the installation image
    that people will definitely be surprised if the filename does not
    reflect this change.

    4) If at all possible, keep the fully free installation media available as
    was already suggested earlier.

    -Timo

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Jaspert@21:1/5 to Steve McIntyre on Thu Aug 18 23:40:02 2022
    On 16594 March 1977, Steve McIntyre wrote:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    Seconded.

    --
    bye, Joerg

    -----BEGIN PGP SIGNATURE-----

    iQJFBAEBCgAvFiEEcty+znVan90Ug4AV81V4v5iAVmAFAmL+sHERHGpvZXJnQGRl Ymlhbi5vcmcACgkQ81V4v5iAVmD8EBAA150dYGhjjm69gyvQN/D0zZuNA2xj6k1X 92OM7mn8v8m72YtL7AVKbd71QBHfMsbhYivXyRdiVB8vY26m6W+NXlGVPmBdORTZ SXuJGwtm026S6w5N4u+OW5G2Z+1wczw0k8Gi0jk3fTKCfaOdZhvT8/OfBuPae3El kbiPdPSqnlszY2E7Y6PSnAHQF2kFEBEHOrafgdz/gTYn9MUanSFJ4AtmEw8NqiF9 CnPi2p2x/8jSHPNAWBOubdutI4AzfcuGJM8O0Z78YX0b25CX36gOc177y0ZijuR+ fXYT6SefY8PIvqdvQ9AbbZGpANxIMJNoJmgmUJQuEyUnFLcEOjW3a+woedeRSCwu 5qVqWfmMSwD5xr54jz346xQXdOqWeGRTcbmnLq4rOdSAdvC/mxojEjNbn0GXfBvK 2NQ4gCQNd0KCtuHyA4lifQL+sBKvmWM2U4gHmggXR2uiQW/qyhs4aG7OWwz3wJ3G ozRYaMCSCrveYDsesTNR4vj26lu/3JON3aRhQLGiTTE8lN0VauAzP+NIl8zVCS43 M6t9Z659VD1uySkNeUff8kCZCA5M0+cNqIbPgxXjOHyu2zc1b4fYmF68zAfYJdLK WITT234Nm9GWixORN7AoFm6Z3i3c0KZ50Ba2aRL3jo8xkvSq5oQyLGscQSJgkxLj
    9DcayLftBhg=
    =DnnT
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Timo Lindfors on Fri Aug 19 00:00:01 2022
    Hey Timo!

    On Thu, Aug 18, 2022 at 10:18:13PM +0300, Timo Lindfors wrote:
    On Thu, 18 Aug 2022, Steve McIntyre wrote:
    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    Thanks for working on this somewhat controversial topic. I haven't spend that >much time thinking about the issue yet but perhaps the following steps could >help make this less controversial:

    1) As it is pretty impossible to write a clear definition of
    firmware, we should require packages in non-free-firmware to clearly
    explain where the code will get executed to allow people to make
    informed decisions. Some people are more ok with having code run on
    an external device than on the main CPU.

    Sure, that sounds like a reasonable thing to do as part of the
    "information about the firmware step"!

    2) Ensure that the installer will inform users about non-free-firmware
    packages that are about to be installed and possibly also allow the
    user to see their full description.

    That's a hard one to do reliably - see my example of a biind user
    needing audio firmware to be able to interact with the
    installer. That's a real case that Samuel Thibault has worked on.

    Of course we want to give people the information, but in some cases we
    may have to choose to load the firmware *before* asking.

    3) Ensure that the filename of the installation media includes
    "non-free-firmware" or something similar so that it is clear to
    everyone what they are getting into. Debian has had such a long
    history of not including non-free bits in the installation image
    that people will definitely be surprised if the filename does not
    reflect this change.

    4) If at all possible, keep the fully free installation media available as
    was already suggested earlier.

    These two are separate options IMHO - see my initial blog post. If you
    want to write them up, I imagine that you will quite easily get
    seconds here.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Since phone messaging became popular, the young generation has lost the
    ability to read or write anything that is longer than one hundred and sixty
    characters." -- Ignatios Souvatzis

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Cyril Brulebois@21:1/5 to All on Fri Aug 19 00:40:01 2022
    Hi Steve,

    And thanks for your work on this.

    Steve McIntyre <93sam@debian.org> (2022-08-18):
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    Seconded.

    And I'm happy to help in any way I can for d-i at least.


    Cheers,
    --
    Cyril Brulebois (kibi@debian.org) <https://debamax.com/>
    D-I release manager -- Release team member -- Freelance Consultant

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEtg6/KYRFPHDXTPR4/5FK8MKzVSAFAmL+vmEACgkQ/5FK8MKz VSBA/A/9Hgbyk01bvtePQZadGXGErLJQOQ8s8v4dU+3nZnhyBoIX68ObDd2p9BP8 E9/ewrGm+L6FFVgqtNd2lZrM8pqrW4/FKBRvpnfBb6+9ILxxSS+QpGjHhhz1pWQk gL9f82dy41mRVNK/YHp9wbQxDFrrCzUhJJw58peOJhBXYrfe+jnNEY/2yrcRMyeG UkxVPXRYYVyKgn5/31sz2fjl838ha4gDyZWpTgjX933SJkkO3DjFMRkjfyCyCTe5 HYoeQB9wGRBxCyLVbIGKtXksOFHN5E5Xv6w7FIbN2J6PQY4NRc3HCR6pkXuoPlb3 +RAHE0SxVbplv381+aB60IcnPFRbwGbU/EvgS0u/7YbiKlnOuyciCy4i+sdx77TY zx0aIEMgFn35441qEBq5wGEeB5CIvLPJnB7P14L85eqVaK8ODxBBqxerU1ZWRwNt odLPfVHprq501OzEcXrFiUHwzT2PcNUc40QDDeA5iaqrHa6kEYO11oSPiFk8JCW8 nRHohwojLWolPux/V5geHsIluh1jRJF0xCDAlDJwMqZefsZ/uJQES/48XDBEaq9d ugkQirVqV661rRt+aGiBmYi3VJK/7UoiaXKsIzhij86BpnW8ff4MH6AmRFqvfJGN Ori9wFDCu1IIqxAhNzD6PVcWGpBj51Ve4rMUk3fJzzN4tpb0ySM=
    =v+il
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    *
  • From Iain Lane@21:1/5 to Steve McIntyre on Fri Aug 19 11:50:01 2022
    Thanks Steve, it's really great you've taken this topic on, much kudos.

    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    Seconded.

    As a potential tweak:

    The text says that we will include ways to disable this at *boot time*;
    how about being explicit that we will provide ways to disable at
    *installation time* too? Arguably this is implied by '[t]he target
    system will *also* be configured to use the non-free-firmware component
    _by default_ …' already but I think we could stand to be more concrete
    about that.

    Cheers,

    --
    Iain Lane [ iain@orangesquash.org.uk ]
    Debian Developer [ laney@debian.org ]
    Ubuntu Developer [ laney@ubuntu.com ]

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEPQ77lee1I38W6CJY41LVxRxQQdQFAmL/WRMACgkQ41LVxRxQ QdR82A//bPAr0NcHdfp20d72RrALfoVXKjY/zdifQT5dT+z/wOZ50bgF8zTkpIoE UvzQNK0mLrDK1TRxugCxXaIZNa36cp995puxYsR5Mtqtl+pZmPhZX8ff4tDGyTJ9 tP5lRtJS+FuU94pMubEvELTwwcrGDsOvnHhrdpahbtiGwyTSsSPEWsyvUMnPHsr4 98EfAQlBmsaobUP/1jeyCSR9pGbuWXmd+KuOWwXEzPjNGLhiMDaKrT5yXpGOSXBx oNA0zF8K6ucaptgwGnZWU8hrSg35GBgDb4QkwMtjaJ5lAL7QJwVDK3imYXPvXOLC +O/kgj/80aV9tqWr4Ne5c9p5xiQqQN53BvFfc99Ffznaw8JSNJphk60SGx2GtH8M zs1rnuVT/4dr5bKa5tRwPwbtfJJIx7oAhYPHLrcU2OYKpWGrbTpcZ9t+BsWo383a 9TdwM3H9yynjZXC+GV3bdSpB4dWj5EReLTVJOZdIA7f82VuHXXi572G3kGY3t9eF QFgTNG0si8zzK6pp4t635fxlrht2DmAMPshyQ6Jtv3Q1EQyxRubUcG6jXmZeveWW dkWHuEYbbZB0360t+UHjiKnENLgTh3DjWtfh9wqkCgbwY1heQJEKoDv4ilhUo2zx NmfqZJsoQbmuWM3SLuunlX2c47M0ppcCYQzuZqr
  • From Ansgar@21:1/5 to Wouter Verhelst on Fri Aug 19 12:40:01 2022
    On Fri, 2022-08-19 at 12:19 +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable
    the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    I think this would be confusing: detachable hardware (e.g., USB
    devices) would work or not work depending on whether it was connected
    at installation time. At least for amd64 it wouldn't make a different
    either way due to the microcode firmware packages.

    For the same reason the system should probably install all (reasonable) firmware by default, just like we install all kernel drivers even for
    devices that are not present on the target system.

    Ansgar

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Iain Lane on Fri Aug 19 12:30:01 2022
    Hi Iain!

    On Fri, Aug 19, 2022 at 10:34:20AM +0100, Iain Lane wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    Seconded.

    As a potential tweak:

    The text says that we will include ways to disable this at *boot time*;
    how about being explicit that we will provide ways to disable at >*installation time* too? Arguably this is implied by '[t]he target
    system will *also* be configured to use the non-free-firmware component
    _by default_ …' already but I think we could stand to be more concrete >about that.

    Hmmm, maybe. To clarify: are you thinking about:

    * adding an option to not install the firmware while the installation
    happens; or
    * adding a (boot?) option to not load it once the new system is
    installed and booted

    ? I'm not sure the latter is much use, so I'm thinking you mean the
    former. I think we can do that (in expert mode / low-prio debconf
    question?) as part of what we're looking at, but I'm not 100% sure it necessarily has to be spelled out in this much detail in the GR?

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "You can't barbecue lettuce!" -- Ellie Crane

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Wouter Verhelst on Fri Aug 19 12:30:01 2022
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable
    the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    If I'm not mistaken, code to do this already exists, and seems to work
    well (but do correct me if I'm wrong).

    Ish! :-)

    We don't have any code in d-i to deal with the *non-free-firmware*
    component yet, but I#m sure we can adapt the existing stuff around
    non-free / contrib to suit.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Because heaters aren't purple!" -- Catherine Pitt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Iain Lane@21:1/5 to Steve McIntyre on Fri Aug 19 13:00:01 2022
    Ahoy,

    On Fri, Aug 19, 2022 at 11:20:07AM +0100, Steve McIntyre wrote:
    Hmmm, maybe. To clarify: are you thinking about:

    * adding an option to not install the firmware while the installation
    happens; or
    * adding a (boot?) option to not load it once the new system is
    installed and booted

    ? I'm not sure the latter is much use, so I'm thinking you mean the
    former. I think we can do that (in expert mode / low-prio debconf
    question?) as part of what we're looking at, but I'm not 100% sure it necessarily has to be spelled out in this much detail in the GR?

    Yep, you got it.

    Basically I was thinking that since you sensibly spelled out that there
    will be a boot-time method to disable this - in effect requiring it of
    the resulting implementation - it would make sense to spell out the same
    for install-time too. I think it's a similar level of detail, in that if
    we're requiring a method to not load non-free-firmware in the
    installation environment then the same holds for keeping it out of the
    target system too.

    I'd imagined something like

    ...where possible we will include ways for users to disable this at
    boot-time (boot menu option, kernel command line etc.) and
    install-time (e.g. via a low-priority Debconf question which can be
    preseeded or shown in expert mode)...

    (Implementation details:

    * low prio debconf question would be great I think
    * if you've skipped at installation-media-boot time that could imply
    skipping at install time too)

    But just to be clear: not a blocker for me in any sense. I'm sure this
    kind of thing will end up being done *anyway* regardless of whether the
    GR itself requires it.

    Cheers,

    --
    Iain Lane [ iain@orangesquash.org.uk ]
    Debian Developer [ laney@debian.org ]
    Ubuntu Developer [ laney@ubuntu.com ]

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEPQ77lee1I38W6CJY41LVxRxQQdQFAmL/bN8ACgkQ41LVxRxQ QdR2Rw//ZSI9ay19mtgPX5SjvaFOKdzTyEZss34IOkKEVQrXkXiScpIyBGPNeSA5 0+TsAES1buqEf08faa71BQt99vNxWkx+5I+8u7pU982WLsLjIpVyfJ/6XiC4vaQG wT1Fnxyi1JrS3uYtVJYDMayiWamLWi3GVvAQyJmur2GwfcY4v8cPx5pBvSEkqqOc uCF6d+uo6C3qXe+H9iWg1E41m4P9ELiRaullqdmYLfGDaSOB/+HT4XV/L3ThNhs3 CN9zvWMBUvg3zV3sdt6nqJh5usx8Sh2uOJAEXYQ50d18bRsiXNkqzul/24AsEb/s WC/LGsSoJCPnSGEuEKP8TdKTyrZUFQkvYMW0cuzlOA1KW0GtLPlVvVEA69NrUTFO FCnHpWCMOksBoFH5OJj+hAtuqZ08vtsN5x5ICYnGs4Pry6EasIPMahzNoiWOMJOF E653b+eWc5nlFfkfHmqaRYcTukvaPlr247FAtA/HilW5ByMJuXwJ6wakCtsahnrv rCUiQHnw2+nH4nz+zLk9FjblaP7XJTynOouZH1RvR1PBZXt4VGdvv/DCd6mvy93R oWYj9hf1xiliJO7aH/55I5/PEENwr8aqTYI1br776lqaub+w5hfI+FxDhaeWTc6W PUbrC9CqQl3BybmWEs64TGlO1XvwGJNDxll6hXL
  • From Devin Prater@21:1/5 to 93sam@debian.org on Fri Aug 19 14:40:02 2022
    Seconded, thanks for mentioning the accessibility aspect!
    Devin Prater
    r.d.t.prater@gmail.com




    On Thu, Aug 18, 2022 at 2:59 PM Steve McIntyre <93sam@debian.org> wrote:

    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    --
    Steve McIntyre, Cambridge, UK.
    steve@einval.com
    You raise the blade, you make the change... You re-arrange me 'til I'm sane...


    <div dir="ltr">Seconded, thanks for mentioning the accessibility aspect!<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr">Devin Prater</div><div><a href="mailto:r.d.t.
    prater@gmail.com" target="_blank">r.d.t.prater@gmail.com</a></div><div><br></div><div><br></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Aug 18, 2022 at 2:59 PM Steve McIntyre &lt;<a href="
    mailto:93sam@debian.org">93sam@debian.org</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi a11!<br>

    I&#39;m proposing to change how we handle non-free firmware in<br>
    Debian. I&#39;ve written about this a few times already this year [1, 2]<br> and I ran a session on the subject at DebConf [3].<br>

    TL;DR: The way we deal with (non-free) firmware in Debian isn&#39;t<br>
    great. For a long time we&#39;ve got away without supporting and including<br> (non-free) firmware on Debian systems. We don&#39;t *want* to have to<br> provide (non-free) firmware to our users, and in an ideal world we<br> wouldn&#39;t need to. However, it&#39;s no longer a sensible path when trying<br>
    to support lots of common current hardware. Increasingly, modern<br>
    computers don&#39;t function fully without these firmware blobs.<br>

    Since I started talking about this, Ansgar has already added dak<br>
    support for a new, separate non-free-firmware component - see<br>
    [4]. This makes part of my original proposal moot! More work is needed<br>
    yet to make use of this support, but it&#39;s started! :-)<br>

    I believe that there is reasonably wide support for changing what we<br>
    do with non-free firmware. I see several possible paths forward, but<br>
    as I&#39;ve stated previously I don&#39;t want to be making the decision<br> alone. I believe that the Debian project as a whole needs to make the<br> decision on which path is the correct one.<br>

    I&#39;m *not* going to propose full text for all the possible choices<br>
    here; as eloquently suggested by Russ [5], it&#39;s probably better to<br> leave it for other people to come up with the text of options that<br>
    they feel should also be on the ballot.<br>

    So, I propose the following:<br>

    =================================<br>

    We will include non-free firmware packages from the<br> &quot;non-free-firmware&quot; section of the Debian archive on our official<br> media (installer images and live images). The included firmware<br>
    binaries will *normally* be enabled by default where the system<br>
    determines that they are required, but where possible we will include<br>
    ways for users to disable this at boot (boot menu option, kernel<br>
    command line etc.).<br>

    When the installer/live system is running we will provide information<br>
    to the user about what firmware has been loaded (both free and<br>
    non-free), and we will also store that information on the target<br>
    system such that users will be able to find it later. The target<br>
    system will *also* be configured to use the non-free-firmware<br>
    component by default in the apt sources.list file. Our users should<br>
    receive security updates and important fixes to firmware binaries just<br>
    like any other installed software.<br>

    We will publish these images as official Debian media, replacing the<br> current media sets that do not include non-free firmware packages.<br>

    =================================<br>

    A reason for defaulting to installing non-free firmware *by default*<br>
    is accessibility. A blind user running the installer in text-to-speech<br>
    mode may need audio firmware loaded to be able to drive the installer<br>
    at all. It&#39;s going to be very difficult for them to change this. Other<br> people should be able to drive the system (boot menus, etc.) to *not*<br> install the non-free firmware packages if desired.<br>

    We will *only* include the non-free-firmware component on our media<br>
    and on installed systems by default. As a general policy, we still do<br>
    not want to see other non-free software in use. Users may still enable<br>
    the existing non-free component if they need it.<br>

    We also need to do the work to make this happen:<br>

     * in d-i, live-boot and elsewhere to make information about firmware<br>
       available.<br>

     * add support for the non-free-firmware section in more places:<br>
       ftpsync, debian-cd and more.<br>

    and I plan to start on some of those soon.<br>

    [1] <a href="https://blog.einval.com/2022/04/19#firmware-what-do-we-do" rel="noreferrer" target="_blank">https://blog.einval.com/2022/04/19#firmware-what-do-we-do</a><br>
    [2] <a href="https://lists.debian.org/debian-devel/2022/04/msg00130.html" rel="noreferrer" target="_blank">https://lists.debian.org/debian-devel/2022/04/msg00130.html</a><br>
    [3] <a href="https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/" rel="noreferrer" target="_blank">https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/</a><br>
    [4] <a href="https://incoming.debian.org/debian-buildd/dists/buildd-unstable" rel="noreferrer" target="_blank">https://incoming.debian.org/debian-buildd/dists/buildd-unstable</a><br>
    [5] <a href="https://lists.debian.org/debian-devel/2022/04/msg00214.html" rel="noreferrer" target="_blank">https://lists.debian.org/debian-devel/2022/04/msg00214.html</a><br>

    -- <br>
    Steve McIntyre, Cambridge, UK.                                <a href="mailto:steve@einval.com" target="_blank">steve@einval.com</a><br>
    You raise the blade, you make the change... You re-arrange me &#39;til I&#39;m sane...<br>
    </blockquote></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Steve McIntyre on Fri Aug 19 15:00:01 2022
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    seconded & thanks for working on this, Steve & everybody else!


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Where will your kids go when they become climate refugees?

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmL/h7sACgkQCRq4Vgaa qhwfwg/6AijvdBzAePrgI09MFlTdGNt5prPCBFPxuwk5ESQOwNr58NZSYxo38MGi 9zZ8V6XdspqDfpyhAP5wsZhni2Ss9M6lKHUMkT7jQhuu9Ka49+xEg0IXHR7RDi1t Pyro4ozFSh9SFgwA+6FrI5J9lDan+eRvu1WCd/PF0t4Q69dQQQM2uJ8lPqxRzCOr pzLaRMnhN7PkAHF9Nteq6yhyZwQV/3sx7WFqtcmiqptK6+sMV/BuMXn74I0n8PJp cveREFaBUG4Y4T43WDsUbrMvypvwgD06b84jioCOLQX/ep0ukft3TMKYEFTjPb3C uq8ucPfVWnSWdZ8wGEmJNOSyFV6cZ+sp3ju5B+IkjhAcwqX+rQ76cEtbIVFb/J70 /xoiS8vNm27eMU0QR3Sy7+FJ34QDB+n+MFyCHEB67c0/KyslGG/B4BF5uVZ68PUr gbjuwZoyE1jqaQJfOlZgE1Scp99EyEV9b9qrYOiOi8qznWFuj5YT0xosgYOWik/V sY4OgaPowHHIYUCn29NbISBb+Ui1zRECdS++pNhcn9JIIAw1SLqO+dCOrBtLXoow RG36poYfHTPNk6DOSPOov8Lh21az2I9ecLNbh0csVTCEr/jxEVtdkP
  • From Wouter Verhelst@21:1/5 to Steve McIntyre on Fri Aug 19 14:40:02 2022
    On Fri, Aug 19, 2022 at 11:26:51AM +0100, Steve McIntyre wrote:
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable
    the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Much!

    With that tweak, I would second it, except that I am out of a GPG key currently.

    If I'm not mistaken, code to do this already exists, and seems to work
    well (but do correct me if I'm wrong).

    Ish! :-)

    We don't have any code in d-i to deal with the *non-free-firmware*
    component yet, but I#m sure we can adapt the existing stuff around
    non-free / contrib to suit.

    Well, yes, that's what I meant.

    --
    w@uter.{be,co.za}
    wouter@{grep.be,fosdem.org,debian.org}

    I will have a Tin-Actinium-Potassium mixture, thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ansgar@21:1/5 to Simon Richter on Fri Aug 19 17:10:01 2022
    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

         Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for
    having https://deb.debian.org/debian/pool/non-free/: we just ship
    additional files that might be useful for people having specific
    hardware.

    I don't see a difference between having non-free files in the archive
    and non-free files on the installation images. If having individual
    non-free files was not acceptable then we would have to define the
    archive not part of Debian as well.

    In addition the Social Contract explicitly asks people building
    installation images[1] to include the "contrib" and "non-free" parts of
    the archive. With this change we just follow that ourselves 😼

    Ansgar

    [1]: Okay, it talks about CDs.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Michel Alexandre Salim@21:1/5 to Ansgar on Fri Aug 19 18:40:02 2022
    On Fri, Aug 19, 2022 at 12:29:42PM +0200, Ansgar wrote:
    On Fri, 2022-08-19 at 12:19 +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable
    the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    I think this would be confusing: detachable hardware (e.g., USB
    devices) would work or not work depending on whether it was connected
    at installation time. At least for amd64 it wouldn't make a different
    either way due to the microcode firmware packages.

    For the same reason the system should probably install all (reasonable) firmware by default, just like we install all kernel drivers even for
    devices that are not present on the target system.

    openSUSE has this clever system that hooks into zypper (their apt
    equivalent) to install the firmware package on demand if a matching PCI
    ID is found (presumably USB device identifiers too, but I'm not sure).

    This could be a nice longer-term solution? In the shorter term, for
    another distro comparison, Fedora does what Ansgar suggests and just preinstalls a lot of firmware.

    Best regards,

    --
    Michel Alexandre Salim
    identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQRdzi5+nDsc/9M1wdeLIp0vfMwE8gUCYv+8dgAKCRCLIp0vfMwE 8pvWAP0YhfgRmOpg0dqwun5bUY3i+A0eMVr8HesVtRT3Da8mTgEA3t9aedPO2te4 V8y3hKZX5tFj7YvAvhr21E83zcaCqwA=
    =Bit7
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Ansgar on Fri Aug 19 19:40:01 2022
    Hi Ansgar,

    On 8/19/22 17:09, Ansgar wrote:

    I don't see a difference between having non-free files in the archive
    and non-free files on the installation images. If having individual
    non-free files was not acceptable then we would have to define the
    archive not part of Debian as well.

    Yes, and the DSC explicitly does that in paragraph 5.

    That is my point: with the current DSC, the Installer images cannot be
    "part of Debian" according to this definition, because that would
    misrepresent the license as being DFSG compliant.

    There *is* an important difference between the availability of non-free packages and their inclusion on installation media: the installation
    media includes many of these, and all of their licenses need to be
    followed by all users downloading these images regardless of whether
    they actually need a particular package.

    Thus, we need a third kind of software between "vetted to be DFSG
    compliant as promised in the DSC" and "you're entirely on your own
    because this package is not officially part of Debian" for this to be
    useful for users.

    In addition the Social Contract explicitly asks people building
    installation images[1] to include the "contrib" and "non-free" parts of
    the archive. With this change we just follow that ourselves 😼

    Yes, and that very same sentence instructs people to be wary of
    licensing issues when doing so. The same requirement applies to us as well.

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Michel Alexandre Salim on Sat Aug 20 05:30:01 2022
    On Fri, 2022-08-19 at 11:38 -0500, Michel Alexandre Salim wrote:

    openSUSE has this clever system that hooks into zypper (their apt
    equivalent) to install the firmware package on demand if a matching PCI
    ID is found (presumably USB device identifiers too, but I'm not sure).

    This could be a nice longer-term solution? In the shorter term, for
    another distro comparison, Fedora does what Ansgar suggests and just preinstalls a lot of firmware.

    Debian has this too, the package is isenkram (and -cli). It also allows installing non-firmware packages like tools to manage external devices.

    https://wiki.debian.org/Firmware#Firmware_after_installation https://wiki.debian.org/AppStream/Guidelines#Announcing_supported_hardware https://wiki.debian.org/USB/GadgetSetup

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMAUy8ACgkQMRa6Xp/6 aaNU5Q//esMHTLE9zruqgk+G3U6tPu/k8G8oODDNYj6aPq2Zyn8FUWDYzoy1Nr7U AiYt6rI0RN9lhlDxSVrMWxsUCI45ElCVxNzXUnCwQn8dAB7yhSS5GplxMBlDIzRn yF+tZMyFcFv8dYRLuYJcgVB/YRXwZ5yDD/1FKgNsTG08HRYvnTRGAjEPWVsS48Rh u53AO1stVHBdF0F0eVXsm6zDktTx5YsYOr2QJBX+zIDwsD8HzMisFNmWQQU5H+Fo OMpf5wBq/mnD02FExdO2ab91/tMFkC1VDtHu3gQjm7vcz3n2eNXEqaIyEdPWFGhw kBisyk4jCsgbv3+qqMzaNyQV98rwB5zkylWVW2umgY4FZwlh8Yx8Yl3daOFuPahQ Zu/PULOzABqAdKxouLclq351pQjc/UcytZIloWejnpxEAnm3J7fOSEhGqrjzcVoG oV0STChxDWHSkjhcGEX1FJekri2xyqNUI65WapSypKIBuV84zptM8iOXhFvK+rHo gEMH+abCKXbclvHUXpBUhjVOWJ0sbsBcRYY2w/XcAFfuq/TANsHfpopFpZwEHy8O h40hk1ibAFAdH3Tnq5VpTzaST40UJ+LQcGVaWh7oPwcr8CQfFLaRS4ZS6Sef0InY WaY8lvOwTIX+O8Gipm1CWFcrMRob2qd+0cMYY/tMI4aOfnxv6YU=
    =BH23
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philipp Kern@21:1/5 to Steve McIntyre on Sat Aug 20 13:40:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    On 18.08.22 21:58, Steve McIntyre wrote:
    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    Seconded. I'll also second the updated wording suggested by Steve in <20220819102651.GV2641389@tack.einval.com>

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Kind regards and thanks Steve for finally pushing this through
    Philipp Kern
    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEPzuChCNsw7gPxr3/RG4lRTXQVuwFAmMAx58ACgkQRG4lRTXQ VuyYcwf7BNGysJ7UKEaWA56hfKmTJGv7Xi9jB+9zkRTsL/lNF9BQG81wW2TOQMQd AVewPUXXzHtQBT/z2gEI+0M00dOT1jOYIoryueFKd7V40F4JAUJFaWrNabQPvV6Q TjkxfYTPuoLbcSXlUtzp4DUJDh3rQj87EhfOdSSOdLcxnAkMCB9+4S4ETS3zjPFH rCtS4qhFZToZfAyFh4tdWV4FHtQMyjGcJBeO8KmXFUoyJPbRkY7pcuhp/ZS/Ywu+ 7nDhJp2T4ePApsrH8pvU4F0d6n8uzawuYMVDdTQeyW+Xjs+ZObqM9yfbvOBrF6Yc S5xs98XrsDRSptXrLG7DlZh0Ml8IbQ==
    =wd4R
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Anton Gladky@21:1/5 to All on Sat Aug 20 17:40:01 2022
    Copy: debian-vote@lists.debian.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------tVJfDl78rdH1cLWdp0Q5Ld4N
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGkgU3RldmUsDQoNCj4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo+IA0K PiBXZSB3aWxsIGluY2x1ZGUgbm9uLWZyZWUgZmlybXdhcmUgcGFja2FnZXMgZnJvbSB0aGUN Cj4gIm5vbi1mcmVlLWZpcm13YXJlIiBzZWN0aW9uIG9mIHRoZSBEZWJpYW4gYXJjaGl2ZSBv biBvdXIgb2ZmaWNpYWwNCj4gbWVkaWEgKGluc3RhbGxlciBpbWFnZXMgYW5kIGxpdmUgaW1h Z2VzKS4gVGhlIGluY2x1ZGVkIGZpcm13YXJlDQo+IGJpbmFyaWVzIHdpbGwgKm5vcm1hbGx5 KiBiZSBlbmFibGVkIGJ5IGRlZmF1bHQgd2hlcmUgdGhlIHN5c3RlbQ0KPiBkZXRlcm1pbmVz IHRoYXQgdGhleSBhcmUgcmVxdWlyZWQsIGJ1dCB3aGVyZSBwb3NzaWJsZSB3ZSB3aWxsIGlu Y2x1ZGUNCj4gd2F5cyBmb3IgdXNlcnMgdG8gZGlzYWJsZSB0aGlzIGF0IGJvb3QgKGJvb3Qg bWVudSBvcHRpb24sIGtlcm5lbA0KPiBjb21tYW5kIGxpbmUgZXRjLikuDQo+IA0KPiBXaGVu IHRoZSBpbnN0YWxsZXIvbGl2ZSBzeXN0ZW0gaXMgcnVubmluZyB3ZSB3aWxsIHByb3ZpZGUg aW5mb3JtYXRpb24NCj4gdG8gdGhlIHVzZXIgYWJvdXQgd2hhdCBmaXJtd2FyZSBoYXMgYmVl biBsb2FkZWQgKGJvdGggZnJlZSBhbmQNCj4gbm9uLWZyZWUpLCBhbmQgd2Ugd2lsbCBhbHNv IHN0b3JlIHRoYXQgaW5mb3JtYXRpb24gb24gdGhlIHRhcmdldA0KPiBzeXN0ZW0gc3VjaCB0 aGF0IHVzZXJzIHdpbGwgYmUgYWJsZSB0byBmaW5kIGl0IGxhdGVyLiBUaGUgdGFyZ2V0DQo+ IHN5c3RlbSB3aWxsICphbHNvKiBiZSBjb25maWd1cmVkIHRvIHVzZSB0aGUgbm9uLWZyZWUt ZmlybXdhcmUNCj4gY29tcG9uZW50IGJ5IGRlZmF1bHQgaW4gdGhlIGFwdCBzb3VyY2VzLmxp c3QgZmlsZS4gT3VyIHVzZXJzIHNob3VsZA0KPiByZWNlaXZlIHNlY3VyaXR5IHVwZGF0ZXMg YW5kIGltcG9ydGFudCBmaXhlcyB0byBmaXJtd2FyZSBiaW5hcmllcyBqdXN0DQo+IGxpa2Ug YW55IG90aGVyIGluc3RhbGxlZCBzb2Z0d2FyZS4NCj4gDQo+IFdlIHdpbGwgcHVibGlzaCB0 aGVzZSBpbWFnZXMgYXMgb2ZmaWNpYWwgRGViaWFuIG1lZGlhLCByZXBsYWNpbmcgdGhlDQo+ IGN1cnJlbnQgbWVkaWEgc2V0cyB0aGF0IGRvIG5vdCBpbmNsdWRlIG5vbi1mcmVlIGZpcm13 YXJlIHBhY2thZ2VzLg0KPiANCj4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 DQoNCg0KdGhhbmtzIGZvciBwcm9wb3NpbmcgdGhpcyBhbmQgZm9yIHdvcmtpbmcgb24gdGhp cyBpbXBvcnRhbnQgdG9waWMhDQpTZWNvbmRlZC4NCg0KUmVnYXJkcw0KDQpBbnRvbg0K

    --------------tVJfDl78rdH1cLWdp0Q5Ld4N--

    -----BEGIN PGP SIGNATURE-----

    wsF5BAABCAAjFiEEu71F6oGKuG/2fnKF0+Fzg8+n/wYFAmMA/egFAwAAAAAACgkQ0+Fzg8+n/waG SQ//d62QA6f3/Q52tb295g0Pc4l9Lp0UltlvP7+gBRYAnAvreMneTQwKe0s4A+wh4O8oP8rcovra D1rOUJPStW8snllD6elTk5sOFmv3x8IPKGp3xGcEpsQUdFNuqAlkDmu8QENhoPp5hMkrwo0cLxe8 HNfDj7iKMpjDy3kgEHB9p/K8Hh/WhTutLuJXZRWqWe++g1FkBCGz8bU5GgCdqmaexZfCpkR8IkC7 IcC6D4lajITOAW2/64AsLaZCS81jK2P6XBsy0Vchl1IJGYtgiBlJ7Rf1VJB23vwiV9EKjZgwugiX yT11k15Yq3fLq6qrhSqmKSIVf/JDMDUyAJAnxM3xiQCVm9qOjd4ChULdI15zq0HI2T5sYTw7cTRW JK+L6nw3bJwPtVc0JnyhbRl/bdmYiypmATvkvUmQGZr+buHAoT5UspYh+KhWPPrZAcdUuaP8DxGu XqhzLYJ8wRzcURlDxlFKPrS2QkK2Rcjf3qXxs70VOyaz79P8WibARB4wzbxhg+Q7w4bixhMU92ZT 9HqRu9YqWbPXRByhIXZLYigS5q0knElsy9cfqTwn1IManNtA1aM+jEkT4vZAbX/xw5bC6Lnuju0R IYjBpV5iUH/UIG+sqzpAhoyWiaea2KvA65v/LLRp/cCxvhJY+fXTYl2h/JlWnLoLsYxNejXLUcvn 3IM=
    =0dvw
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Moritz_M=C3=BChlenhoff?=@21:1/5 to All on Sat Aug 20 19:10:01 2022
    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    Seconded, thanks for pushing this forward.

    Cheers,
    Moritz

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmMBFJkACgkQEMKTtsN8 Tjab/w/7By7v9p3Bj1y9YVABJGF215nbNz9tmpjF5Pi3mB3prCXmNu5e8Zs8aEyC aiR4xNA8ShqpzwHDzHUYspSPRuTupi8Zhq/4y1iCdFNjIXNxhy0SVg9U2Refm6xE sR8v/lPHX10nbWyvA9VnOaep74Jy3v4e8y+4VZAOQDPBy4C+53GxOgKp1DooTIkk fpnRDqX/0GPf+JhKj8vQDeOhY3IRB7hUOc+QvBHGU3vK6y42Y42RrpCxo7DshEry XCVp74EF62swhk2jF+QgPeF8WrMwLFo7o2bPSAWOmwMp8PhDoTRIHZLldAJolRn4 UAVQaS1E5yKWADDqSVRZISP+QkAIqA8HtSoqpo3uo21rBtllOtcIj/65ELTig60y 0YTu8QOoKEi91Y61lXDKKnVW+/GlbbbKfL+Hav5VmFPwR82+0NWSwPZasKoLdifV HW1ahWMrvA7TVR390SRoH++LcKLl3WTW0IO4HawvqoYUv/2RX+zJDCPt5ouYUQh3 7GKcrXTDGFUAZohTPDSXBAuj61tbBlJ0rSMogR3z9Agy6g6w66IOe8F9w+guJ3+J HaBjz3ZMgHmon4awfbJ/sd4vtZCNENPnoBZURPF40KKfEcim0jSuZh6bXVjYtlJ6 JMGtQZ8mFjcHJ7ttjKKctP8qTc8SoNbCycBWV+BXk/mX2Y1P/MQ=
    =pWRQ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Joerg Jaspert on Sat Aug 20 22:00:01 2022
    On Thu, Aug 18, 2022 at 11:36:33PM +0200, Joerg Jaspert wrote:
    On 16594 March 1977, Timo Lindfors wrote:

    3) Ensure that the filename of the installation media includes
    "non-free-firmware" or something similar so that it is clear to
    everyone what they are getting into. Debian has had such a long
    history of not including non-free bits in the installation image
    that people will definitely be surprised if the filename does not
    reflect this change.

    Actually, people are surprised we are hiding the useful images (with firmware) somewhere in some subdirectory away currently.

    I recognize myself in both. I prefer the installer not including non-free bits, and the ("unofficial") installer is difficult to find when I need it. Why not advertise the free and non-free installers side-by-side?

    Cheers,
    Bart

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Vincent Bernat@21:1/5 to Bart Martens on Sat Aug 20 22:50:01 2022
    On 2022-08-20 21:49, Bart Martens wrote:

    3) Ensure that the filename of the installation media includes
    "non-free-firmware" or something similar so that it is clear to
    everyone what they are getting into. Debian has had such a long
    history of not including non-free bits in the installation image
    that people will definitely be surprised if the filename does not
    reflect this change.

    Actually, people are surprised we are hiding the useful images (with
    firmware) somewhere in some subdirectory away currently.

    I recognize myself in both. I prefer the installer not including non-free bits,
    and the ("unofficial") installer is difficult to find when I need it. Why not advertise the free and non-free installers side-by-side?

    Some people may not understand when they need one or the other. They may
    choose the free one and run into trouble and give up.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Sun Aug 21 05:30:01 2022
    Steve McIntyre dijo [Thu, Aug 18, 2022 at 08:58:21PM +0100]:
    (...)
    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    I know this is no longer needed, but...

    * Seconded *

    Thank you very much, Steve, for the effort you have put, are putting
    and will put on this thorny issue.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYwGl/AAKCRDi9jtDU/RZ iVZZAP4oVkjo17svhMQVIoh5Pdq8E1Dgw2mNYLX7ZM2T3dXRowEAzn1WCA+OnPEz CplcaSZgPiFluia2iD55REAbj5fzKA4=
    =ZGlr
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Sun Aug 21 05:40:01 2022
    Hello Simon,

    Simon Richter dijo [Fri, Aug 19, 2022 at 07:34:10PM +0200]:
    I don't see a difference between having non-free files in the archive
    and non-free files on the installation images. If having individual non-free files was not acceptable then we would have to define the
    archive not part of Debian as well.

    Yes, and the DSC explicitly does that in paragraph 5.

    That is my point: with the current DSC, the Installer images cannot be "part of Debian" according to this definition, because that would misrepresent the license as being DFSG compliant.

    I thank you for bringing forward this issue.

    I agree that the non-free firmware packages cannot and should not be
    considered as part of Debian. They are not free. If we get a bug
    report, we can only (in the best case) forward it to the firmware
    upstreams -- and I expect most of them will not be very interested in
    patching. We cannot offer our traditional support level for the
    firmware we ship.

    But "our priorities are our users and free software", right?
    Increasingly, if we don't ship non-free firmware, we will lose the
    users who don't have at least decent support for their hardware. And
    free software will lose as well, because unhappy users are unlikely to
    return.

    FWIW, I feel the installer (and the install media) can still be seen
    as "part of Debian" -- but they will *include* bits (that can be
    disabled) that don't meet our standards.

    Thus, we need a third kind of software between "vetted to be DFSG compliant as promised in the DSC" and "you're entirely on your own because this
    package is not officially part of Debian" for this to be useful for users.

    Well, we do have contrib ("yes, you know, this is DFSG-compliant as
    promised in the DSC, but you might need some ugly bits for it to be
    useful"). But this is not the main point of this mail.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Ansgar on Mon Aug 22 08:30:03 2022
    Ansgar <ansgar@43-1.org> writes:

    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

    Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for
    having https://deb.debian.org/debian/pool/non-free/: we just ship
    additional files that might be useful for people having specific
    hardware.

    I disagree -- what is being proposed here is to replace our current DSC-compatible free software installer images with non-free. That goes significantly further than what the spirit of DSC5 suggests.

    I think the right balance for Debian would be to continue publish free
    and non-free installer images. I would prefer if Debian becamse a 100%
    free software project, but alas that doesn't seem to be the majority
    opinion.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwMWiRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFoi6VAP9Hjr6yYb2M3aHfKFvxhqcGX+GwCUqT dW0T3vKh9YwBdAEA9oFSNh/3xEzTbhYgUXo4gwlDBu6crS5Ch9q4WE/5bwc=+CKr
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tobias Frost@21:1/5 to Simon Josefsson on Mon Aug 22 16:00:02 2022
    On Mon, Aug 22, 2022 at 07:39:21AM +0200, Simon Josefsson wrote:
    Ansgar <ansgar@43-1.org> writes:

    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

         Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for
    having https://deb.debian.org/debian/pool/non-free/: we just ship additional files that might be useful for people having specific
    hardware.

    I disagree -- what is being proposed here is to replace our current DSC-compatible free software installer images with non-free. That goes significantly further than what the spirit of DSC§5 suggests.

    It not being replaced; there are just additional bits in there which
    help people to actually be able to install Debian on some modern machines.

    The guarantee in SC1 that we will never *require* those non-free bits, as writen
    out in "We will never make the system require the use of a non-free component." This GR does not violate this promise.


    --
    tobi's 0.02 €

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmMDiyoACgkQkWT6HRe9 XTbNmg/+NrvAoYqlQw7XOBGA8kcByFvbAWNgHlS9DtFJOggkPUaAfdarkwBM8wEP RjhM5fvE8jBj8OVB4gMs6CNL4iPp9ZiZoRj4oyigNZB9kS4Z1bLt2pGt4KtHl0RU zBCL5Os3gKGQk1dZcPUVkEPTZ4J3REfgThttleS/tU9EPLlYVyqGjUUuMKSZXFXl f8o7AXvQlxEiATtj2RuLUGml6S1kwj2sHtkA1K8n+wijXnHIK45B41d7UyF6UIN6 2QpTpLTgJN9E+rKUlOQd+GVN4fwMwPB8eUKEYdZCZUoqIWGPDvyb74wPZznO7i/1 lmZiGuJk0mulljyAuW4fFtllvkAsCPVpQnTvpShc3Rika++NUctdzW18lqlpcVak XXF45rZPIhVPewkmwaW96tbKJ0wSCWV8KSDzW6Vd9ztIGyjiYvEIJ9rnll3qRExH kMCQMBLxMUFX7gB3KLPWBVwCKICrhUWt363go1DREigQNJw9LVs9NzzfJUIdVDnX elm/Tar3zFebCZAjiq9VFxu+/PwlAo13WEX6Vs9uHm6K+oJ2WoVm5szvC4UBOtTe OjywfdG/VZGAO7zgxrlS9tDdP+BqZlw3h0/OQIjviKrEyhJ5rZ1TI8FtNeE2uXEm h5CfoD/H+P9mFelvNwV7B4R1I+zP+VpFWmgueW5rOUmN5NVKfEE=
    =eCgZ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Mon Aug 22 16:20:01 2022
    Quoting Tobias Frost (2022-08-22 15:57:01)
    On Mon, Aug 22, 2022 at 07:39:21AM +0200, Simon Josefsson wrote:
    Ansgar <ansgar@43-1.org> writes:

    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

         Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for having https://deb.debian.org/debian/pool/non-free/: we just ship additional files that might be useful for people having specific hardware.

    I disagree -- what is being proposed here is to replace our current DSC-compatible free software installer images with non-free. That goes significantly further than what the spirit of DSC§5 suggests.

    It not being replaced; there are just additional bits in there which
    help people to actually be able to install Debian on some modern machines.

    The guarantee in SC1 that we will never *require* those non-free bits, as writen
    out in "We will never make the system require the use of a non-free component."
    This GR does not violate this promise.

    I understand how we will not require non-free bits getting *installed*.

    The way I see it, with this change we will require non-free bits for *distribution* of our system, because our official installer will now
    include non-gree bits.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============y07635448957629799=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMDj/EACgkQLHwxRsGg ASHKBQ//ceQIUeBzWvA+0f5Nhisi8zblBiy4OGbZQIcYbRNj5pshV8FgzVUVKFvQ uJHZ6Bfs4uHQbJdi3nlUUmwcVJ37oHyUT6GgFFOQM/WRWl2NGjWStGXL3IC92Vq6 7jwBioHB+5vBOI0SpI9ZxgblXfMJRrcNQd8AgaWXq1v3HHV3d3IPXtSi54DoHiXs i1ooLKi5ztlb/HM3L1x41YsXMHzZiSCps+IGJXf7AMk5CGP3VRoBODjvP0oG0OxI GahA9CNa3WzMa4f3l+RZaSJvxuaFkf2BIvJhKGjjgOvl3XP4Pl25j4IiJSTTD92P dH8fnOEx+O9xVZkGJDJChd0G21fgcD/+cSZ8fxZSeVCbcyl+JYqH4Pj6hDBAHkbL zE0/Bc7/4n9ulZfY8DP+kTV+FV/9M22BFFYa6hFwhXnoM/n10iX0ME2+lmBSUGJj m29UZ78zXV3WYZ7P1O8/zl5ReNbomEGiJE1cuJDUcqZ/iYgiFbr835Pvjs62fF4g mQzt1rRiOP5vfSa6W
  • From Tobias Frost@21:1/5 to Simon Josefsson on Mon Aug 22 18:00:02 2022
    On Mon, Aug 22, 2022 at 05:48:28PM +0200, Simon Josefsson wrote:
    Tobias Frost <tobi@debian.org> writes:
    That seems incorrect. Here is a quote from the proposal:

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images).
    ...
    We will publish these images as official Debian media, replacing the
    ^^^^^^^^^
    current media sets that do not include non-free firmware packages.

    We are replacing stuff very often, for example when we update the installer it is replaced too. For me, the replace in the proposal is meaning that kind of replacing. We'd not taking anything away in respect to the spirit of SC-1.

    --
    tobi


    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmMDp24ACgkQkWT6HRe9 XTaS4A/+IadgZaFGsjpM3Uf5NdDN8lYQDUw3jdAm/+SL1hAraok5YlIL5xYJT8uz TvUrW5hBTU2DlqkB2mx2QsHQk5PN54nwVR38LeDW25sPf5e4Ts5XN+rqvGn7zKD3 qQHvBf28G49wti8XxY4/aojvplX1jBYtbY+8bjW7T50u+gJmwT8GUvfqM6lMnQYp obp4d7jtaTg7Q2d3ARmpE8nrUd6xCJhez179OPH8hhzqKLB5amyeY4VxScV7qJuH R/xKnA5mLR2LDv+lv+uIJ7gJVfw5jOvGXUskSVJHPX/NDa8n6D6sbS0MKP13ZJzT UOEGfP/FPqWx/1S6VFhujqVf4ZLfnkozk4Pr9XUDi27WEIqCRCJSfkCiyFxSOcVI kkU6r4zKom4BG+bR/ahgmH9Vroe30nJfAc9Vl8oOa+de9oJG0D0e3V9h8z/DgQlM CgEty4Qg7v8FmAjJsW5qOMS9X0xesVFv6EQdGRdTaJ0/YZLF1oQaUMOeS7zQ7ChH cOXxh+xXpiWnYsuwrGJ5V8QOSLSW6zQ3Lf831KkVtDHJfFPaDqyHZBcpCXfBy+An 1n+ZCivoqrb2740MpV/GA3G86IS9tvD44MNXv5fVtqs9KhdRYg/6W2peBGph1QTA NOUxk7RV9GpMXtjaWGwqfyezsh4zixApphoUEGjCovo6b0TswR4=
    =9uaF
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Thomas Goirand@21:1/5 to Ansgar on Mon Aug 22 18:00:02 2022
    On 8/18/22 23:04, Ansgar wrote:
    Steve McIntyre writes:
    Hi a11!

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including
    (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the
    decision on which path is the correct one.

    I'm *not* going to propose full text for all the possible choices
    here; as eloquently suggested by Russ [5], it's probably better to
    leave it for other people to come up with the text of options that
    they feel should also be on the ballot.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    Seconded.

    Ansgar

    Seconded.

    Thomas Goirand (zigo)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Tobias Frost on Mon Aug 22 17:50:01 2022
    Tobias Frost <tobi@debian.org> writes:

    On Mon, Aug 22, 2022 at 07:39:21AM +0200, Simon Josefsson wrote:
    Ansgar <ansgar@43-1.org> writes:

    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

    Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for
    having https://deb.debian.org/debian/pool/non-free/: we just ship
    additional files that might be useful for people having specific
    hardware.

    I disagree -- what is being proposed here is to replace our current
    DSC-compatible free software installer images with non-free. That goes
    significantly further than what the spirit of DSC5 suggests.

    It not being replaced; there are just additional bits in there which
    help people to actually be able to install Debian on some modern machines.

    That seems incorrect. Here is a quote from the proposal:

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images).
    ...
    We will publish these images as official Debian media, replacing the
    ^^^^^^^^^
    current media sets that do not include non-free firmware packages.

    I think this is both a step in the wrong direction, and a step too far
    in the wrong direction.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwOlTBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFoiSiAQCviTERSxplP5H+XpybKuHsR/lSLz+Q lE6Lv/vfuabG4AD/d3sUiW4t2ZmpX7lKUWPBzOFTWUiVjFkdGtb4QMqxyAQ=ZLYv
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Gunnar Wolf on Mon Aug 22 18:40:01 2022
    On Mon, Aug 22, 2022 at 11:32:23AM -0500, Gunnar Wolf wrote:
    Bart Martens dijo [Mon, Aug 22, 2022 at 06:24:32PM +0200]:

    We'd take away the free installer.

    If a free installer is still produced and offered alongside the one
    including non-free-firmware, would you feel more at ease? That sounds
    like an easy compromise to make, and many people would probably
    welcome it.

    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.

    Absolutely!

    As I said in the first mail in this thread: please suggest
    alternatives that you might prefer. I'm fully hoping and expecting
    that we will have a few alternatives on the GR ballot here, so as a
    project we can choose our preferred way forward. I mainly held back
    from suggesting other options muself because of advice in the d-devel
    thread.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com “Changing random stuff until your program works is bad coding
    practice, but if you do it fast enough it’s Machine Learning.”
    -- https://twitter.com/manisha72617183

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Tobias Frost on Mon Aug 22 18:30:01 2022
    On Mon, Aug 22, 2022 at 05:57:36PM +0200, Tobias Frost wrote:
    On Mon, Aug 22, 2022 at 05:48:28PM +0200, Simon Josefsson wrote:
    Tobias Frost <tobi@debian.org> writes:
    That seems incorrect. Here is a quote from the proposal:

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images).
    ...
    We will publish these images as official Debian media, replacing the
    ^^^^^^^^^
    current media sets that do not include non-free firmware packages.

    We are replacing stuff very often, for example when we update the installer it
    is replaced too. For me, the replace in the proposal is meaning that kind of replacing.

    Yes indeed. It's replacing a free installer by a non-free one.

    We'd not taking anything away in respect to the spirit of SC-1.

    We'd take away the free installer.


    --
    tobi




    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Mon Aug 22 18:40:01 2022
    Bart Martens dijo [Mon, Aug 22, 2022 at 06:24:32PM +0200]:
    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images).
    ...
    We will publish these images as official Debian media, replacing the
    ^^^^^^^^^
    current media sets that do not include non-free firmware packages.

    We are replacing stuff very often, for example when we update the installer it
    is replaced too. For me, the replace in the proposal is meaning that kind of
    replacing.

    Yes indeed. It's replacing a free installer by a non-free one.

    We'd not taking anything away in respect to the spirit of SC-1.

    We'd take away the free installer.

    If a free installer is still produced and offered alongside the one
    including non-free-firmware, would you feel more at ease? That sounds
    like an easy compromise to make, and many people would probably
    welcome it.

    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Mon Aug 22 19:40:01 2022
    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYwO9wQAKCRDi9jtDU/RZ iZpPAP9JAotgXAF8Nlayb1rBkbxz6aKJT4Z3locJrT6ls295SgD/ZSEPdBleexDH sMWUD1DmiWJwlQ5kQbWpkttoTq6OWQ8=
    =ZiKn
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Gunnar Wolf on Mon Aug 22 19:50:01 2022
    On Mon, Aug 22, 2022 at 12:32:54PM -0500, Gunnar Wolf wrote:
    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    seconded, thanks Gunnar.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Make earth cool again.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmMDwMcACgkQCRq4Vgaa qhy/3w/8Dqy3j5ibZV3N84xqcoEQ62oDFDBkhBIK2BpnBUDl1qBCYRoC+nycrHde r9aJtE4yCgwtvJBdnhwUE9gC5v2YQETlG7rKbHEI5rD4pEMCVSZfoZxuvPO/v8Tz ZmKWl9KaAvj81L0ttAiqpsAnor30e8cI7vKydaPKnqkdLO/fNH7Yp8f5TIa4RJci /kkwSpKDsyS60B3zWcrbwK5/aQN8gUqLsVOteFTMSSxyYRIWTOo/XlLRpU+gXNZy ho9WCuaR469w77FAUcozcS01kygtk1h35WPS5pzydoYq30+BBZinn9ey7sQ6jj5z KEf6zRGZUM6tVYOtFzHGxotqQ3AyxBB+k9amCHDivogpqF4MexH8TwjKd+KkBHbS 4+NLI7UYph2nzd+6u38pgfPHd9pYdIybiZuOULHiSqp6PK2Ijv1Ei33lkpQjUlxg 04sCS4bvbJdK/PkXLl2ZqFTjunU0AUqfJzqpCBdrCCQI1yACicvXEAI8tQOeJj0Q iQANUBiof2lkx3o+jFXjmFC6d9peyJXCqG5q8jmArdUlknhwIEHigEz7FHF+RXTJ 85NYQJAvk495boFDqKsX1DwPJ2IzyuiyTRSvuzz2TwhZLocRfoP8N1qZwc321GRl UrrxnS0RZ7dnbZ8dEK+BKKSr
  • From Tobias Frost@21:1/5 to Gunnar Wolf on Mon Aug 22 19:40:01 2022
    On Mon, Aug 22, 2022 at 12:32:54PM -0500, Gunnar Wolf wrote:
    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    Thanks Gunnar; I think it is important to have on the ballot, so:
    seconded.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmMDvmMACgkQkWT6HRe9 XTY0Xg//fFMtrCQj/y1W9jg/LJxGdVE6+0F/KrMFczfZvLUXhSnmKoRodV7Ea2zv IFEHttLMwOMw8rd030OV6icsZDatiWLlMx2P/cba2oxMtvWFxmV8/FfGgq6VA4wk KLi2DkgcundfoDq+3cAxK6dh+42bGfkj2Kf+5rjbjrJHNYluagkLYBJ6P0/bEMej 39J+j456aPFXIVcfjRs7cM5KxGMXS26+zuneX2EmezepoY1kOWSxO8sHWVrcB+I8 9zsruoPAgV7FkS1eoSxDH7iMz1bxYlMIg1FN4oNBdl12iX36c3svGZHOx/VjLwJw HvhYUBCEd5DL+uldglAmB3c2r3ymb90+jekP1xMUp14Z9Aw4m4artu1t9kW9lK1e IZTlkSlAiWsf6L9j933vU4meD5TeIi+XW+m7SpNUIJ/AA+bsfLKqN//LDwlYiaL4 O9ORNClzBAqYw1llwFe4QupV1+Vg/Ui5gWkM0yTuOxGk9TEGN0R/CUUbLArsn1ZA brsr1/3YyCKcq4DieeVxWebqfLnUOZs+UWDC6DOnHyj8+oY8ictRy2VNuk/CgSWI yniPXBGOR3TWYYlV1m/zk0eivQ1NvRpLHoIZuiLML+uF9mM5DqSLXE1xb6J49vOt 76xZ6oyKs/5CcWWS0YT7whQR6ig5peUerWxfmXO5XjmE+oEuwFI=
    =mhEV
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew M.A. Cater@21:1/5 to Gunnar Wolf on Mon Aug 22 20:00:01 2022
    On Mon, Aug 22, 2022 at 11:32:23AM -0500, Gunnar Wolf wrote:
    Bart Martens dijo [Mon, Aug 22, 2022 at 06:24:32PM +0200]:
    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images).
    ...
    We will publish these images as official Debian media, replacing the
    ^^^^^^^^^
    current media sets that do not include non-free firmware packages.

    We are replacing stuff very often, for example when we update the installer it
    is replaced too. For me, the replace in the proposal is meaning that kind of
    replacing.

    Yes indeed. It's replacing a free installer by a non-free one.

    We'd not taking anything away in respect to the spirit of SC-1.

    We'd take away the free installer.


    In practice, the free installer is useless on its own. Your laptop or
    desktop already includes Intel/AMD firmware whether you update it or not.
    Your disk drives have firmware - your WiFi card also has firmware (and it is barely possible to secure WiFi cards/dongles with free firmware any longer).

    If you have next to each other:

    The installer disk which includes firmware-nonfree with a note that this
    may be preferred for a straightforward install.

    The installer disk which does not include non-free firmware - with a note
    that this is ideal for virtualisation where the virtual machine is sitting
    on masses of emulated firmware anyway.

    The installer for Raspberry Pi - which has a note that for most models of Raspberry Pi the only way to boot is to include non-free firmware available from the Raspberry Pi Foundation.

    The installer for WSL2 - which sits on an entire non-free operating system
    but will allow you to run Debian on top of Microsoft's kernel.

    you will then have a choice. The fact that Debian can't guarantee to fix
    any firmware and is unconditionally reliant on what vendors provide can be stated as a given.

    Our priorities are our users and free software. If we produce something
    that is uninstallable by anyone except experts with laptops running
    coreboot or similar, are we helping the situation / encouraging people
    to use the free software we provide?

    If you find a laptop made in the last five years that requires no firmware whatever, I'll be somewhat surprised. As Steve says, our current installer locks out some users from using Debian _at_all_

    Other people look to Ubuntu - which routinely bundles firmware - as the
    source for their firmware-free distribution. Fedora is the other distribution that really cares about the status of firmware and there are differences between what they accept and what Debian accepts.

    If a free installer is still produced and offered alongside the one
    including non-free-firmware, would you feel more at ease? That sounds
    like an easy compromise to make, and many people would probably
    welcome it.

    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.


    With every good wish, as ever,

    Andy Cater

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Vincent Bernat@21:1/5 to Theodore Ts'o on Mon Aug 22 22:50:01 2022
    On 2022-08-22 22:13, Theodore Ts'o wrote:

    So there may be some unintended consequences where new users may
    associate "100% free software" with "not functional" and "induces pain
    and frustration", such that it might end up *hurting* the cause of
    free software.

    Well, that's the truth when it comes to laptops. I myself consider that
    Debian is harming free software by making it difficult to deal with this
    issue, leaving the user with broken hardware that is working correctly
    on Windows. Even in unstable, we ship out-of-date firmware. For example, rtl_bt/rtl8761bu_fw.bin is outdated and the associated adapter may not
    work correctly on resume. Just putting the up-to-date version shipped in
    the latest tarball from the linux-firmware repository is enough to make
    it work correctly.

    Back to the vote, another option would be to not consider firmware (not
    running on the CPU) as software and we keep the 100% free software
    images with non-free firmware included. This implies this new component
    should only include firmware (there were discussions to broaden its use
    in the past).

    I can briefly rehash the rationale: firmware were previously shipped in
    a ROM with the hardware and they have been moved to being loaded by the
    OS instead for various reasons (cost, ease of update), but this does not fundamentally change their nature, except that we have to distribute
    them. There is no difference in the level of "freeness" we provide to
    the user, but there is a huge difference in usability.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Theodore Ts'o@21:1/5 to Gunnar Wolf on Mon Aug 22 22:20:01 2022
    On Mon, Aug 22, 2022 at 11:32:23AM -0500, Gunnar Wolf wrote:

    If a free installer is still produced and offered alongside the one
    including non-free-firmware, would you feel more at ease? That sounds
    like an easy compromise to make, and many people would probably
    welcome it.

    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.

    Whether we recommend the one with non-free firmware or not (some have
    proposed that the "free" installer would have "visual priority",
    whatever that means), I suspect there will be various Linux newbie or
    FAQ's, external to Debian, that will warn users that the using the
    "free" installer will just cause them pain and frustration.

    So there may be some unintended consequences where new users may
    associate "100% free software" with "not functional" and "induces pain
    and frustration", such that it might end up *hurting* the cause of
    free software.

    - Ted

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nick black@21:1/5 to All on Mon Aug 22 22:20:01 2022
    Theodore Ts'o left as an exercise for the reader:
    Whether we recommend the one with non-free firmware or not (some have proposed that the "free" installer would have "visual priority",
    whatever that means), I suspect there will be various Linux newbie or
    FAQ's, external to Debian, that will warn users that the using the
    "free" installer will just cause them pain and frustration.

    i furthermore suspect that most people with a highly developed
    opinion regarding Free Software are technically apt users.

    --
    nick black -=- https://www.nick-black.com
    to make an apple pie from scratch,
    you need first invent a universe.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEmi//dHmU4oe+xCLxX0NADCHL+swFAmMD5FEACgkQX0NADCHL +syNPg//XS/O4zIuZHMkMMl/PceLmyC1HetsFl+ClNBmRx1t4lPjfUemtvrecfGR U6aTLy1HSxF3Ih9KRN4c8zSbXuxaS9HS27EBmIlRrQXZ53xTz4TbF5qqdoTyyABX NgAqGgFV9+d44oIZmXGQu8xLDtdC5FWKmksLgYhkBmZOGH5uEiP6iebR5uaBU+0i ZjcQzBWhX1vWrMb85wUbzzy0X0oCfUN4+Eh5jcjuZM1gNCIlaLM5ZBUtsfPtswzz wagkv+a5gN/0w40YqzjwNjb53MEzMFfHwr5gHFTNjEAVpuoOU7rpMiqNIHHWM/e2 kne3w/S/1vMHelB0uxlEuqw+GljTX/8DEzfOdPkfR++4YBDzqA4Ixr4xumZFjMpW U544gHmrwH2W1mjAUEiuxUt4R3O779Yqvk4bG8ti8xH6ldhyI9pZ2/PSZ4d88xdh JXM8FoX2pAXztU7FOQoz+bJPwETZCv8wCgXNVQytamYdn+oiAykgPcFFLfKdENFX jlfhtM3Mi3tLRcLbkj3hTqg0SKOedGaZLexx14Pr5RCrahM2beeGrKnQtkV8c04F Eea4ib8MrhrzQXz8o7k91n+A2AXkoRgl/krts063NtYjhqJg9VPnpe6nhbSwujpK LKznQvsHEFA6ZJx1rWmBIEWjVcQTSZpx0I2MauzJxeKWMciE71I=
    =fbch
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet G
  • From Sean Whitton@21:1/5 to Gunnar Wolf on Mon Aug 22 23:50:01 2022
    Hello,

    On Mon 22 Aug 2022 at 12:32PM -05, Gunnar Wolf wrote:


    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    Seconded.

    Many thanks to both Steve and Gunnar.

    --
    Sean Whitton

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmMD+cUZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQNn1D/4pUTmUFCXnPydIiXkibsQu 5g63bh8DRjIgThDC0c75Ayqwz9N4FpYAKKor6E7suz3ziTrs8getDqhSCU4/TRsB n7Oq263VfMIWqKAzmSxRq3M1BMR699qt9D3k13uByxYiSCcWVKLk1GxseZEN54JZ foxknOPV8qq41qdAPaVcvKegMHlFlpDUIvf9+SuDmG05GKv2sDdXrHUxddKKA5T0 CXu46uH0xEMS1iHiC4boum+1HXUT0F7TWi5O+3wOePaeZsirCjkE1RX4CrxCh2r9 NRkUgqVJKhu04o36yb3bW8ZNeBH7ZafF95S3D2E67qA/WHAnYtccsSPx07kuGkSs Fc09zYP3yq6LtP7KxmGUdLT97/9BAvsWJgIwvHLXkhPkvTTpbqkfTkEXpaxW5aPQ pzqyfkDAywtPZ1p16Yoj+edrW6X/QBMbIhkycvdRXn3w0ozdkueWGGpZGi2SPABF eZ5+ks+UNJ52bl37cEZR7hfMIhAjbefrtUmx1n3ns6A5RCnWcwjRQXsrSrouiZ8Q zf/p8/fVi8xHbk5J7JqpTE30ETxeWMkZzco9S7uEFaG2IiJ4BA1EkaLMszHP7h6A h9VUQ8oDdtkG3YiY3e75tyzdtXptK4+uQ2PYN5b7UKBg5+6mNdOm4LjefcR4pzTW 2Cs12QdILVKFhBn4qOtdSg==tJ+l
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Us
  • From Steve McIntyre@21:1/5 to Gunnar Wolf on Tue Aug 23 02:10:01 2022
    Thanks Gunnar,

    I'm happy that somebody has suggested another option for a ballot!

    On Mon, Aug 22, 2022 at 12:32:54PM -0500, Gunnar Wolf wrote:
    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    Seconded.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com Welcome my son, welcome to the machine.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMEGi4ACgkQWHl5VzRC aE4xWxAAo9oN1Mb1fZvA2Kwh3E4geGwNDzgw9NlEeWFzdi45+j+XQMQ/pV+Vsxyz oS074BIbQCsoqt+W/c/bnDdhea8lgaz/vU9kYk5KtqQxLuGjxBQDvpe0OhK6l25r 15wSXJEOU4aXgxQn7Cf1hrsrDFA6loht+0QdpuQh4h1VmQodVax+U+8OyDDJb8u6 T9iQG7AxEgInNC9MnmtUpRvaibh7l52+dGCL2bOGf2rN2wVm4uNmsOJSCCl3fvYx Uh4oTF1D/koDe2FbnZHaUZRFKQm21EJnIj+4IVrgQio2atlP+tmfB23utGn5vePH k57FHBDEIqOQdSCaywAJjrIvuzM280zt+CF/h6kgMMGL4N2o8ycNAaPOrcZqrl2z JlxNCk2oUhzoVu2V3W9I3AoDJNd70YqCdQZWVzYHM7BPt4DkfFHnQnDWIqTny1Vj 6yGemRmDpCSKV69Vd0bmUWKd1RAD2E0/CSCmSbHlcjtULbrW5jYfFGW24wy5Nlgn kFi/34OYfJ6BjQSxsvdtvzTRNxEHqctleTlM1PJ7Oih266jnpF7WuCAsRGQnFWSI LZMd0TcZpotNF/kEvIaqCif30GiUF2A8SQ4GzdGyvac1u9HEjM6Fn3RqY6XTCifQ AqccRk8DtbSKbAZoGSnoc1jeu0y4EEBX0TwpAoFFk0WXoMT7S4w=
    =8xke
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet U
  • From Gunnar Wolf@21:1/5 to All on Tue Aug 23 01:50:01 2022
    Theodore Ts'o dijo [Mon, Aug 22, 2022 at 04:13:20PM -0400]:
    Whether we recommend the one with non-free firmware or not (some have proposed that the "free" installer would have "visual priority",
    whatever that means), I suspect there will be various Linux newbie or
    FAQ's, external to Debian, that will warn users that the using the
    "free" installer will just cause them pain and frustration.

    Of course. OTOH, without the firmware, we cause that same pain and
    frustration. You might be making a good point for Steve's original
    proposal, of course.

    So there may be some unintended consequences where new users may
    associate "100% free software" with "not functional" and "induces pain
    and frustration", such that it might end up *hurting* the cause of
    free software.

    The sad thing is... That it is true :-(

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Gunnar Wolf on Tue Aug 23 05:50:01 2022
    On Mon, 2022-08-22 at 12:32 -0500, Gunnar Wolf wrote:

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    Is the Debian Images team willing to continue to produce the images
    containing only packages from main?

    I understood from the initial blog post they aren't willing to do that. 

    I wouldn't want Debian to vote for them to work on fully-free images if
    they still don't want to do that, so I'm not sure of the practicality
    of this proposal and so I would find it hard to rank it on the ballot.

    PS: this seems similar to but less detailed than my earlier proposal:

    https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMETdMACgkQMRa6Xp/6 aaOt/A/+JWfX0UT0f/Tnn+LvyY8skZE8/1Y79i5Cvo/jiyWUvqZ42SXBOmQtIout +vJNbZX9sA6D6DsjQG7RhfwJnG/pWGFE+Gxr9yRI3cF2ulWKIz0C6X+zoUP8NIrv AyC72smTR6ltAn6NgL0bO9CQ+vniWiBPAbbMySnwhhDvkBjwS51KQ4/wkPHWKK+c OxVlg3tdKAYs1ASeTLij4w7h/58Rk7YA6/PI4p/cAP8B4HJXlRCYGtpx5PCVJvI1 TDoYL3dGf1yI6MGqLIQ8eEFGFDucezvUfk/nUfcC2edyFs1PO+xiObuwhFBVLaWm HAIRSG774uUncU7Wn7+GrDvGJCBe2j835ekznExdcZctpfZkgKzs7LhxMi4nHKlw eItkkXOL/Xvcho3ftwirCKvExmprYcbZgrQoYSRP7eIaEV7kmRnrUNEsG2uOOh8T O9+ZTMr9VNzxa8erfMB8k2Fm7vAaBAn+QyTj6WIbLd3BQsfoGk7jQJ8SxcqcDcPU ODzSbmRFzNXqEDYVD5y03NGRJ4zY+OWureVgswMdcZ4Kbmxff25XVLbNU61tavBE oeehrFCHuxtR1Ns0ahNXWjl8+QJkG+S0xGQk0AxEGZjgyk+ICSYkhXClHb6P81mk JaQgyxsHdki4sHAa5uUxMh9kHpqtP+O+A+Vdvj2yroJ2Mq009yc=
    =rmMp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Theodore Ts'o@21:1/5 to Gunnar Wolf on Tue Aug 23 05:40:01 2022
    On Mon, Aug 22, 2022 at 06:43:41PM -0500, Gunnar Wolf wrote:
    Theodore Ts'o dijo [Mon, Aug 22, 2022 at 04:13:20PM -0400]:
    Whether we recommend the one with non-free firmware or not (some have proposed that the "free" installer would have "visual priority",
    whatever that means), I suspect there will be various Linux newbie or FAQ's, external to Debian, that will warn users that the using the
    "free" installer will just cause them pain and frustration.

    Of course. OTOH, without the firmware, we cause that same pain and frustration. You might be making a good point for Steve's original
    proposal, of course.

    So there may be some unintended consequences where new users may
    associate "100% free software" with "not functional" and "induces pain
    and frustration", such that it might end up *hurting* the cause of
    free software.

    The sad thing is... That it is true :-(

    In case it wasn't clear, yes, I was indeed trying to make an argument
    in favor for Steve's original proposal.

    I would consider making both installers equally easy to find a better
    outcome than the current status quo, where the version which is more
    likely to be useful for modern laptops is kept hidden and hard to find
    (under the sign, "beware of the leopard"). But I consider it an
    inferior choice to Steve's original proposal.

    - Ted

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Tue Aug 23 05:50:01 2022
    Vincent Bernat dijo [Mon, Aug 22, 2022 at 10:46:56PM +0200]:
    Back to the vote, another option would be to not consider firmware (not running on the CPU) as software and we keep the 100% free software images with non-free firmware included. This implies this new component should only include firmware (there were discussions to broaden its use in the past).

    I can briefly rehash the rationale: firmware were previously shipped in a
    ROM with the hardware and they have been moved to being loaded by the OS instead for various reasons (cost, ease of update), but this does not fundamentally change their nature, except that we have to distribute them. There is no difference in the level of "freeness" we provide to the user,
    but there is a huge difference in usability.

    I think this would not fly. Back in 2004, the "Editorial amendments"
    GR¹ that led to several long mail threads²,³,⁴ (well, our project was
    way more hostile 18 years ago than what it is today!), but most
    particularly, the thread started by our then-Release Manager Anthony
    Towns⁵.

    ¹ https://www.debian.org/vote/2004/vote_003
    ² https://lists.debian.org/debian-devel/2004/04/msg00910.html
    ³ https://lists.debian.org/debian-devel/2004/04/msg01115.html
    https://lists.debian.org/debian-devel/2004/04/msg01488.html
    https://lists.debian.org/debian-devel/2004/04/msg01929.html

    Of course, it is not set in stone -- but these threads, and
    particularly the last one, did shape Debian's work long-term. They did
    carry a _lot_ of beneficial stuff (i.e. the firmware is no longer
    bundled within Linux source), but Sarge's release was delayed at least
    by a year from the original plans.

    There are many, many, many (, many, many, many... Did I mention we
    were more verbose and had stricter habits of beating dead horses until
    their fleas were also dead?) mails where this discussion is
    re(tro)hashed.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rahmatullin@21:1/5 to Theodore Ts'o on Tue Aug 23 09:10:01 2022
    On Mon, Aug 22, 2022 at 11:30:43PM -0400, Theodore Ts'o wrote:
    I would consider making both installers equally easy to find a better
    outcome than the current status quo, where the version which is more
    likely to be useful for modern laptops is kept hidden and hard to find
    and also described as "For *convenience* for *some users*, this
    *unofficial alternative* build includes non-free firmware for *extra
    support* for *some* *awkward* hardware." (emphasis mine).

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmMEe94tFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh nhEP/jizMMl7tP1RR+cDE0Qw7qLd3e4BXAFozrPYgIpcy+1Qq2VPUcAk9lQ3p0UM SWPe4qbVYmsYdupSM634+xsVPJcuVZ9zGEJl2F+IKO4wsbqWlB6Y+qFFfP5CzC32 hLWEYDk9l81F0x1yJYXYN9bfT2Yu1vRA7Tbaq5q6D3rLPzwK9WVmBNu04ywVcowP 4pKRWW3dDodHNJlCQOm60cSRr7gJ/imxb6z50ZFxcTDe0d49nW5yLc/rUsa7kqqK foJ7sgUcmu+KE1YY7bnfRB0jNREYRtXV8lGKF7apBjy/Hz733MKJHp/BqLPKNxVi 4SeI3AFaeCDQg/TLqt/d2ZPXPqgbZtdhnjj/56N/f2PxSBBMpc5s6WAshsb4rj2s suHJ++iAafEqz+Q9Ka+GtLXkQi7AUpIli8vPujxMENgRzhNhJQt70l8669zZLYuc juIjWMxpxN3wryZGjdNzvPwUHp/ad+5GZ9kL3QsaWDUJGiK1RBEDaXzs6q2duycY J80xxTszkzLy5dYHj5oBDI8Hmso9zDKcjFjCr4myzQA/n9p9iosxpzsD9plv2Vgj h7smcQH1iFXPyX2H/BlspW8AaIo6Pr/9pVA+TKnVyyz8gn0lAtjJnzdAepGqqEDi v3oro3P1aCvNteNVUskCAytbD4WnPvChF9LKFUUdZj00gNrm
    =GhkN
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Jonas Smedegaard on Tue Aug 23 10:50:01 2022
    Jonas Smedegaard <jonas@jones.dk> writes:

    Quoting Tobias Frost (2022-08-22 15:57:01)
    On Mon, Aug 22, 2022 at 07:39:21AM +0200, Simon Josefsson wrote:
    Ansgar <ansgar@43-1.org> writes:

    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

         Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for
    having https://deb.debian.org/debian/pool/non-free/: we just ship
    additional files that might be useful for people having specific
    hardware.

    I disagree -- what is being proposed here is to replace our current
    DSC-compatible free software installer images with non-free. That goes
    significantly further than what the spirit of DSC§5 suggests.

    It not being replaced; there are just additional bits in there which
    help people to actually be able to install Debian on some modern machines. >>
    The guarantee in SC1 that we will never *require* those non-free bits, as writen
    out in "We will never make the system require the use of a non-free component."
    This GR does not violate this promise.

    I understand how we will not require non-free bits getting *installed*.

    The way I see it, with this change we will require non-free bits for *distribution* of our system, because our official installer will now
    include non-gree bits.

    Would those arguing for the availability of the 100%-free installer find
    it acceptable if there was a way of cleansing the non-free bits from the includes-nonfree-firmware installer images?

    I'd guess that one could put the non-free bits on the end of the image,
    as an additional session, or perhaps just mark them in the image, and
    then reasonably trivially trim them off, or blank them out.

    We could then generate the firmware-included images, but make the
    cleansed ones available on-line by having a server-side script trim out
    the non-free bits on the fly.

    If that still makes you feel dirty, because the free bits were once
    next-door to some non-free bits, would it make any difference if the
    resulting images could be built reproducibly without access to any of
    the non-free components?

    I'm mostly asking this to find out where people's lines are, but also in
    the hope that we could come up with a compromise that allows us to get
    away from the enthusiasm sapping situation where the debian-cd team is
    required to make images that they know are sub-optimal for many of our
    users.

    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmMEk4cACgkQ0EujoAEl 1cCtsQ//XlJUtX0GNNTmkX/tPi3iLwp7oWl/IFM/35Fe7vEYXkD+k9QX3j8ry7+N 6S/fMjiNSsmQqJ8XUml/YqibPla46PruKazDyTrmxECStcMT6b5somZjCr91FMS+ Ror/cziFEMdKd8dDZbl546bJT5uHssavOoYBd3plomzpmeF3RZPaW4oEkLLRaWv2 96jelkaqXPzaw3nIqHASxhPICAY0f+OvSoIlB5LeiVGnHKXKiQm/weq3h4KTsJ2z Dfl5C58J/O32aWCxE8cTfAsX+SoX4YWBW3CuG2BRiWtj7OTias6v+94ImFvcCExU 9ciw2KUDjKX8yNWs1q790n+DcMkFnUt2S/nSr23meUBO646eAw7yH1pQ19qUGo2H UtnVZ2GPgE/0tTJUN6cOh5/8+oSnB7fAEQqeexmbSDtliepIwIJi7bOJ3m1x6pWH anR3oi3y2OgXhdpjeRGRjNeuEce838CscOIQi3FT8Fj4G1cO4ug1lcz2bhf/5q0W nf0GsKHsliYlZgBmScExoQrHGQz4Wtd+Kf9SX/xgfjR2wVSWdHD367NhEnsni/Sn npsHy0uKt6+nTbM3Y3EQH/AbOqDtaCWpG2q9IWpUI21prA4Td8VdrBjEPMdqdsH2 uXmygXq5eP9GJ46
  • From Simon Josefsson@21:1/5 to Andrew M.A. Cater on Tue Aug 23 11:00:01 2022
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a
    number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support. You may have other purposes for which it does not
    work, but that doesn't make it useless for everyone, and there are
    alternatives available to solve your use-case (unofficial non-free
    installer) that doesn't entail the cost of abandoning the free software
    ideals of the Debian project.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwSVmxQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFopcPAQDlFsxnuqREsH+THlDSUjXkielenq7R MGMW1zaVQFmovQEA86N/5TccH/teog42BSozzFYnkQDVyZFa5Imb/8sR9wU=
    =DnP3
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to All on Tue Aug 23 10:50:01 2022
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That
    makes me sad. My preference for an outcome would be along the following
    lines.

    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract 5
    which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwSSXRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFonWZAQC4injmydAl6XWzZIp0ACk2Z/SSEBop 3HVAf2SRIdYo0wEAuzg2RQYaBMSsl3lZ9RXN2McvV3cF4ZtQrO31dllhSQo=Eiy9
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Mathias Behrle@21:1/5 to All on Tue Aug 23 10:20:01 2022
    * Gunnar Wolf: " Re: Changing how we handle non-free firmware" (Mon, 22 Aug
    2022 12:32:54 -0500):

    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    Seconded. Thanks!

    --

    Mathias Behrle
    PGP/GnuPG key availabable from any keyserver, ID: 0xD6D09BE48405BBF6
    AC29 7E5C 46B9 D0B6 1C71 7681 D6D0 9BE4 8405 BBF6

    -----BEGIN PGP SIGNATURE-----
    Comment: Signed by Mathias Behrle

    iQIzBAEBCgAdFiEErCl+XEa50LYccXaB1tCb5IQFu/YFAmMEjOcACgkQ1tCb5IQF u/b+7g/+IXdu+7sCuxYnDEyQ+9sM3FZh0PJXCKCwRO73nv+TBlbo0VjBxmdByjzW 9guTYA/Wp79XxBbin8KZ9kOS+x7vxGscBuqVWyBzAoSUs67qthiviGYVOPkhONJZ E63qLZXomRVCHzm5zlw1ok35YxD+rT8k4hvbvzgFMJzzeLPwxJ1xDTjl4jVuiH0E xAnXOEvsJ4oyy6C50LKbpK/wD6FmDZNWlxhuiZro89WFqyWVJhgsysKL/K6k2Q0Z S9xZKRnsaHFsavcDn8gIf3/C9mOrkPilCGnaC5Oaj4OoonGIMu6pNRO00TCw0zmb oiaD0s+p85IfaU7WxGXxzzPbYTPqoJYAbJECoO5LNCnSByN2KulBD1KuMsZ6Se2i BHC9sXQRSCg1RcaU1hDRNNwt7Ue3dRmk+sSX/MsRtKd3KwTL6AwHJLKst+uIjgky 9jQjffsomkoqkA8wYG+nltUgZxlebNJlmLgYePtP9cc8SZTEHPUMZzxWchiMYtMM kgZVw/zb1zRaG/T2Tlx6EjZYhFAkrrxXOh/3TMqhPzehmoZZwrBvfU6cv/yJRSam UwaMhNli6gNxKVxcNZtZkXYRCX4EMOzbpBUyRvMRGaOhy1ngkS3lCPMzvykcwr9B u3dLfkc/WofWY0jRm1/bBOBm0JNU1qg+zKFsUyUjXl1naeIDjcc=
    =hZuj
    -----END P
  • From Philip Hands@21:1/5 to Simon Josefsson on Tue Aug 23 13:00:01 2022
    Simon Josefsson <simon@josefsson.org> writes:

    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support. You may have other purposes for which it does not
    work, but that doesn't make it useless for everyone, and there are alternatives available to solve your use-case (unofficial non-free
    installer) that doesn't entail the cost of abandoning the free software ideals of the Debian project.

    I would suggest that "abandoning the free software ideals of the Debian project" is significantly mis-characterising what's going on here.

    Debian has always been pretty pragmatic about enabling the use of
    non-free software by our users, even while maintaining the strict
    separation of non-free from main.

    That is after-all what's kept the FSF mildly upset with us all these
    years. I don't suppose that including non-free-firmware on our ISOs
    will help with that, but it also doesn't really make things any worse.

    By not having the non-free-firmware on our media, we really do lose new
    users, all the time.

    In particular, people that don't have any choice regarding their
    hardware often fail to install anything useful with our 100% pure ISOs.

    Those people are likely to have obtained some old hardware either as a
    gift or very cheaply, and do not have a budget for an RFY wifi stick.

    Debian with the non-free drivers often runs really well on such
    hardware, giving people that would otherwise be digitally excluded a
    viable option.

    Encouraging such people to waste their efforts downloading an ISO that
    we know is quite likely to fail for them, while hiding the image we know
    they really need strikes me as a form of abuse.

    A lot of people will abandon the attempt after a single failure.

    Every one of these lost users is a potential Debian contributor. Driving
    them away is an act of self-harm, and does more damage to Free Software
    than could possibly be done by admitting the truth that for many
    (newbies in particular) the tainted ISOs are what people really want.

    There will be plenty of time to explain that their they should choose a
    better wifi card if they get the chance once they have managed their
    first install, but if we continue to set up obstacles at the start then
    they won't even be around to listen.

    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmMEsR4ACgkQ0EujoAEl 1cCRMQ/8D6mj9SQWD7zdjSXLz4xr+3JdxSq/0M6HlsFS1xa4ffN0BgKliXwh35iG fpmCWEkrEUINR/xj0hUgPnGwS4SDN2PATj0PtyxjPUXaIvOQIUnIDwd/etAwozwQ ENb9SDrNR4Nc871SCtfhuuo59+qojriBoa404hZN7kiazRVxSF5DQZJzg8TtxDgR h7hL+m6xwHVe1XxQaAPaPQtnAuuzhWDIoWlJcyWxcniCRfz+dVyrp8mOfLy3DJbT LGQOUwPOHbBvTqVfyi00XiZqBDJ1lZQ1iI0qZShjxgrd+Rr4+t9zQOlXY2z3IEVW dFBoqCZ+LRWkMnsdU+Bpgw4dO3ZFs8cPvmoqDg7gg6Rjs2zRPDEFB309VHgiqVSN UzyOXJ0ElGWUOeM1ar6Qq1dU+nDTIKHuIJC7bHKNLYFZ4X25YSCAS+rp8qvwW6fq Sas0lzyBbNkD8ancigVV3jTXXUDhBRqDB9JGIzfDK+eA4xcpjuY0ZzSZhX2lc+0X 5HDZbzegYPMYceg3R6Ekhg6koy2vxSV3loxorlNC/YkXq88rnEl4/xS+bk6JmZoX qQ/Na6iTd+amPn4UvfhLiZHV4pcTm1bgliPFlGAk78KS6YXx/Siboft87gsD/+b0 DpaBR5RpZiupBtS
  • From Kurt Roeckx@21:1/5 to Steve McIntyre on Tue Aug 23 14:40:01 2022
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    It seems this has at least enough seconds. I will try to process
    everything tomorrow.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Louis-Philippe_V=c3=a9ron@21:1/5 to All on Tue Aug 23 15:20:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------I7cIEEclJpHslqiwNf0A0t3P
    Content-Type: multipart/mixed; boundary="------------AkH4OaHCIF6jRyaxL0CYBCgO"

    --------------AkH4OaHCIF6jRyaxL0CYBCgO
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gMjAyMi0wOC0yMyAwNCBoIDM5LCBTaW1vbiBKb3NlZnNzb24gd3JvdGU6DQo+IEFzIGZh ciBhcyBJIGNhbiB0ZWxsLCBib3RoIFN0ZXZlJ3MgYW5kIEd1bm5hcidzIHByb3Bvc2FsIHdv dWxkIG1ha2UNCj4gRGViaWFuIGxlc3Mgb2YgYSBmcmVlIHNvZnR3YXJlIG9wZXJhdGluZyBz eXN0ZW0gdGhhbiBpdCBpcyB0b2RheS4gIFRoYXQNCj4gbWFrZXMgbWUgc2FkLiAgTXkgcHJl ZmVyZW5jZSBmb3IgYW4gb3V0Y29tZSB3b3VsZCBiZSBhbG9uZyB0aGUgZm9sbG93aW5nDQo+ IGxpbmVzLg0KPiANCj4gPT09PT09PT09PT09PT09PT09DQo+IA0KPiBXZSBjb250aW51ZSB0 byBzdGFuZCBieSB0aGUgc3Bpcml0IG9mIHRoZSBEZWJpYW4gU29jaWFsIENvbnRyYWN0IMKn MQ0KPiB3aGljaCBzYXlzOg0KPiANCj4gICAgIERlYmlhbiB3aWxsIHJlbWFpbiAxMDAlIGZy ZWUNCj4gDQo+ICAgICBXZSBwcm92aWRlIHRoZSBndWlkZWxpbmVzIHRoYXQgd2UgdXNlIHRv IGRldGVybWluZSBpZiBhIHdvcmsgaXMNCj4gICAgICJmcmVlIiBpbiB0aGUgZG9jdW1lbnQg ZW50aXRsZWQgIlRoZSBEZWJpYW4gRnJlZSBTb2Z0d2FyZQ0KPiAgICAgR3VpZGVsaW5lcyIu IFdlIHByb21pc2UgdGhhdCB0aGUgRGViaWFuIHN5c3RlbSBhbmQgYWxsIGl0cyBjb21wb25l bnRzDQo+ICAgICB3aWxsIGJlIGZyZWUgYWNjb3JkaW5nIHRvIHRoZXNlIGd1aWRlbGluZXMu IFdlIHdpbGwgc3VwcG9ydCBwZW9wbGUNCj4gICAgIHdobyBjcmVhdGUgb3IgdXNlIGJvdGgg ZnJlZSBhbmQgbm9uLWZyZWUgd29ya3Mgb24gRGViaWFuLiBXZSB3aWxsDQo+ICAgICBuZXZl ciBtYWtlIHRoZSBzeXN0ZW0gcmVxdWlyZSB0aGUgdXNlIG9mIGEgbm9uLWZyZWUgY29tcG9u ZW50Lg0KPiANCj4gVGhlcmVmb3Igd2Ugd2lsbCBub3QgaW5jbHVkZSBhbnkgbm9uLWZyZWUg c29mdHdhcmUgaW4gRGViaWFuLCBub3IgaW4gdGhlDQo+IG1haW4gYXJjaGl2ZSBvciBpbnN0 YWxsZXIvbGl2ZS9jbG91ZCBvciBvdGhlciBvZmZpY2lhbCBpbWFnZXMsIGFuZCB3aWxsDQo+ IG5vdCBlbmFibGUgYW55dGhpbmcgZnJvbSBub24tZnJlZSBvciBjb250cmliIGJ5IGRlZmF1 bHQuDQo+IA0KPiBXZSBhbHNvIGNvbnRpbnVlIHRvIHN0YW5kIGJ5IHRoZSBzcGlyaXQgb2Yg dGhlIERlYmlhbiBTb2NpYWwgQ29udHJhY3Qgwqc1DQo+IHdoaWNoIHNheXM6DQo+IA0KPiAg ICAgV29ya3MgdGhhdCBkbyBub3QgbWVldCBvdXIgZnJlZSBzb2Z0d2FyZSBzdGFuZGFyZHMN Cj4gDQo+ICAgICBXZSBhY2tub3dsZWRnZSB0aGF0IHNvbWUgb2Ygb3VyIHVzZXJzIHJlcXVp cmUgdGhlIHVzZSBvZiB3b3JrcyB0aGF0DQo+ICAgICBkbyBub3QgY29uZm9ybSB0byB0aGUg RGViaWFuIEZyZWUgU29mdHdhcmUgR3VpZGVsaW5lcy4gV2UgaGF2ZQ0KPiAgICAgY3JlYXRl ZCAiY29udHJpYiIgYW5kICJub24tZnJlZSIgYXJlYXMgaW4gb3VyIGFyY2hpdmUgZm9yIHRo ZXNlDQo+ICAgICB3b3Jrcy4gVGhlIHBhY2thZ2VzIGluIHRoZXNlIGFyZWFzIGFyZSBub3Qg cGFydCBvZiB0aGUgRGViaWFuIHN5c3RlbSwNCj4gICAgIGFsdGhvdWdoIHRoZXkgaGF2ZSBi ZWVuIGNvbmZpZ3VyZWQgZm9yIHVzZSB3aXRoIERlYmlhbi4gV2UgZW5jb3VyYWdlDQo+ICAg ICBDRCBtYW51ZmFjdHVyZXJzIHRvIHJlYWQgdGhlIGxpY2Vuc2VzIG9mIHRoZSBwYWNrYWdl cyBpbiB0aGVzZSBhcmVhcw0KPiAgICAgYW5kIGRldGVybWluZSBpZiB0aGV5IGNhbiBkaXN0 cmlidXRlIHRoZSBwYWNrYWdlcyBvbiB0aGVpciBDRHMuIFRodXMsDQo+ICAgICBhbHRob3Vn aCBub24tZnJlZSB3b3JrcyBhcmUgbm90IGEgcGFydCBvZiBEZWJpYW4sIHdlIHN1cHBvcnQg dGhlaXINCj4gICAgIHVzZSBhbmQgcHJvdmlkZSBpbmZyYXN0cnVjdHVyZSBmb3Igbm9uLWZy ZWUgcGFja2FnZXMgKHN1Y2ggYXMgb3VyIGJ1Zw0KPiAgICAgdHJhY2tpbmcgc3lzdGVtIGFu ZCBtYWlsaW5nIGxpc3RzKS4NCj4gDQo+IFRoZXJlYnkgcmUtaW5mb3JjaW5nIHRoZSBpbnRl cnByZXRhdGlvbiB0aGF0IGFueSBpbnN0YWxsZXIgb3IgaW1hZ2Ugd2l0aA0KPiBub24tZnJl ZSBzb2Z0d2FyZSBvbiBpdCBpcyBub3QgcGFydCBvZiB0aGUgRGViaWFuIHN5c3RlbSwgYnV0 IHRoYXQgd2UNCj4gc3VwcG9ydCB0aGVpciB1c2UgYW5kIHdlbGNvbWUgb3RoZXJzIHRvIGRp c3RyaWJ1dGUgc3VjaCB3b3JrLg0KPiANCj4gPT09PT09PT09PT09PT09PT09DQo+IA0KPiAv U2ltb24NCg0KSSBkaXNhZ3JlZSB3aXRoIHlvdSwgYnV0IEkgdW5kZXJzdGFuZCB0aGUgcmF0 aW9uYWxlLiBJIHRoaW5rIGhhdmluZyBzdWNoIA0KYW4gb3B0aW9uIG9uIHRoZSBiYWxsb3Qg bWFrZXMgc2Vuc2UuDQoNClNlY29uZGVkLg0KDQotLSANCiAgIOKigOKjtOKgvuKgu+KituKj puKggA0KICAg4qO+4qCB4qKg4qCS4qCA4qO/4qGBICBMb3Vpcy1QaGlsaXBwZSBWw6lyb25u ZWF1DQogICDior/ioYTioJjioLfioJrioIsgICBwb2xsb0BkZWJpYW4ub3JnIC8gdmVyb25u ZWF1Lm9yZw0KICAg4qCI4qCz4qOEDQoNCg==
    --------------AkH4OaHCIF6jRyaxL0CYBCgO
    Content-Type: application/pgp-keys; name="OpenPGP_0xE1E5457C8BAD4113.asc" Content-Disposition: attachment; filename="OpenPGP_0xE1E5457C8BAD4113.asc" Content-Description: OpenPGP public key
    Content-Transfer-Encoding: quoted-printable

    -----BEGIN PGP PUBLIC KEY BLOCK-----

    xjMEYEPdjBYJKwYBBAHaRw8BAQdA5yh8SOHhcvKeX/A4rv0/JTCL8Kgnnwy4/okK h1Htbs3NOExvdWlzLVBoaWxpcHBlIFbDqXJvbm5lYXUgPGxvdWlzLXBoaWxpcHBl QHZlcm9ubmVhdS5vcmc+wpkEExYKAEECGwMFCQHhM4AFCwkIBwMFFQoJCAsFFgID AQACHgECF4AWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCYEPeHgIZAQAKCRDh5UV8 i61BE0xKAP4oRsMaA2T/Zjge126dwHbnxBsjI/Q3ky8QkGlOffUKJAEA9dWm0hE4 0URSXM8Ndtf+GeHxvNeryVMCtVDUfjHMBA/CmQQTFgoAQQIbAwULCQgHAwUVCgkI CwUWAgMBAAIeAQIXgAIZARYhBPZNYdMh88tIkVZ1PeHlRXyLrUETBQJiEWgLBQkD rr3/AAoJEOHlRXyLrUETOK0BAM9I6BMMiqhsORsRcDVcM4VTm8G67YHapBW5zdl/ llfxAPwLAsi32TCPWjuwD3UdKig+6syvKFsiIfjiNBweNIQED80sTG91aXMtUGhp bGlwcGUgVsOpcm9ubmVhdSA8cG9sbG9AZGViaWFuLm9yZz7ClgQTFgoAPhYhBPZN YdMh88tIkVZ1PeHlRXyLrUETBQJgQ93rAhsDBQkB4TOABQsJCAcDBRUKCQgLBRYC AwEAAh4BAheAAAoJEOHlRXyLrUETeLMBAJAAznKkFo3Cm0pAW6klHv6jnDeMLS/6 9tAbJQRDNEAhAQDGQTrcAJZAcAFKoYeh2UlRokm1xG3Lc+FDpZGOKJBaBcKWBBMW CgA+AhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAFiEE9k1h0yHzy0iRVnU94eVF fIutQRMFAmIRaAsFCQOuvf8ACgkQ4eVFfIutQRMItwD+Oce5l0QBRJsax1C5MXe3 7Jk5cIMV2eOH0i4hd6c2wqYA/31Wn0qt5bv7i1y+2JsCeKtv0MIsYQ3LU1XG8k9h pb8BzjMEYEPg0RYJKwYBBAHaRw8BAQdASbekNA3xJnxUhMenK8ttfm8OTepniXHJ EN0Sm1/zmifCwDUEGBYKACYWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCYEPg0QIb AgUJAeEzgACBCRDh5UV8i61BE3YgBBkWCgAdFiEEyqdABweoFrAgL8PN9CV6ULIc +oUFAmBD4NEACgkQ9CV6ULIc+oWswwEAoRTzlukc6Ss4PaChogmudTzMdezF1FQz T5HH0C4EVawA/1JfaysK+seL/zdEQKUHD3cMdg8NvMtOXfcMg4EiFRYE1SQBAPKi UCqSMLql7QtWiB/xmDFUYltNa3+NLjRYRsNKfe9JAP9ZEaXY6oO+3owwpxbNphBp hSkH+9lEag0Dd3BEowOKDMLANQQYFgoAJgIbAhYhBPZNYdMh88tIkVZ1PeHlRXyL rUETBQJiEnvDBQkDr85yAIF2IAQZFgoAHRYhBMqnQAcHqBawIC/DzfQlelCyHPqF BQJgQ+DRAAoJEPQlelCyHPqFrMMBAKEU85bpHOkrOD2goaIJrnU8zHXsxdRUM0+R x9AuBFWsAP9SX2srCvrHi/83REClBw93DHYPDbzLTl33DIOBIhUWBAkQ4eVFfIut QRPY6AEAn9YvrTzliAvnyPef3kXXCvyH973dPn/539suXireBnsA/iqtwiOe4758 +28fgsXaVUpyFcEhirsu0/IhzSnpVXUNzjgEYEPg5RIKKwYBBAGXVQEFAQEHQIES 2w30v+hi13deaiPcx7KPVMCUIA25nu6by9Wfa5BuAwEIB8J+BBgWCgAmFiEE9k1h 0yHzy0iRVnU94eVFfIutQRMFAmBD4OUCGwwFCQHhM4AACgkQ4eVFfIutQRMNhgD9 HkVqB+Vy+F9EAzjHilHnSPft2xfLdhTrqzh6O0jEhqsA/2dd/AMSsZNAH8FYQKq3 Th+Hikj+jXXs+P9HYlULp1UHwn4EGBYKACYCGwwWIQT2TWHTIfPLSJFWdT3h5UV8 i61BEwUCYhJ72AUJA6/OcwAKCRDh5UV8i61BE2CVAP9+JHidrPFWE7WwNskxdVY1 YzHxGihO20Zt65AagSMVgAD9FlBCTPfQKpvC5jBax89pLAg07QsLq1wJ5U5v1zV5 JQTOMwRiEWorFgkrBgEEAdpHDwEBB0BkhUACsGCOaaPRY4H2lJiegjp8hFrduGkl t4qxMygJ88J4BCgWCgAgFiEE9k1h0yHzy0iRVnU94eVFfIutQRMFAmLoLeYCHQMA CgkQ4eVFfIutQROVZAD9E2NDG9xBqa7gZjYprQkY4EzUgUkZY5g5l046jI0WvN8B APK0Ab4Sjx7ekPJDDa4gB/Mr1htCyoZrPysKB7tkuCQDwsA1BBgWCgAmFiEE9k1h 0yHzy0iRVnU94eVFfIutQRMFAmIRaisCGwIFCQHhM4AAgQkQ4eVFfIutQRN2IAQZ FgoAHRYhBJBd8+ORq1094UcSk2a2zWq+wNuWBQJiEWorAAoJEGa2zWq+wNuWOv8B AKfeLq2soJeiHDAdoV0spQxoVJDme2FzgmBCxr0KxRfQAP9zaHwI9+NjirmC8Gov IGveZ7wxXJ/v8jYFnZadVhIRBqk+AQDXKlTmPsWLD6SnMvW+kF1SbHUq6aPqALXb nEai/hTTrAD+Pt7NZO1KqJQiIJ+miP1LIlPqiZKMPt8uNdw8KKqHVwbOOARiEXES EgorBgEEAZdVAQUBAQdAZSMCxsNHkDiI2tnp9FX1Xl+39/Knre9jd7exta0LGAED AQgHwngEKBYKACAWIQT2TWHTIfPLSJFWdT3h5UV8i61BEwUCYuguFwIdAwAKCRDh 5UV8i61BE3D3APsH9gDArOrY6/d2/Lefpymj+yR5DHDEWpEvQ+GTnnA9ewEA6LgH Gx3DRN/KfkW1eoXxlnaFeQPXqggLOFj8kzYkDgDCfQQYFgoAJhYhBPZNYdMh88tI kVZ1PeHlRXyLrUETBQJiEXESAhsMBQkB4TOAAAoJEOHlRXyLrUETinYA93idFyhp u054EVRbFz/ybVAlpGqkdt69+LYt3Cr0RIkBANARMMYd47lV/1/C1fWsemRuZDCd +BzH/o7byibkUa4O
    =hixQ
    -----END PGP PUBLIC KEY BLOCK-----

    --------------AkH4OaHCIF6jRyaxL0CYBCgO--

    --------------I7cIEEclJpHslqiwNf0A0t3P--

    -----BEGIN PGP SIGNATURE-----

    iHUEARYKAB0WIQTKp0AHB6gWsCAvw830JXpQshz6hQUCYwTSCgAKCRD0JXpQshz6 hVYKAP4mA/Mmp4pHtfbiOXtbg2mMi3et6Xi1mZIqBlxg4e+0SwEA9+sFx7JAx5Ly jk76w5VJ7TdC1He1S09CoF3dRSdyPgY=
    =7J0r
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Antonio Terceiro@21:1/5 to Simon Josefsson on Tue Aug 23 15:30:01 2022
    On Tue, Aug 23, 2022 at 10:53:46AM +0200, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support.

    That's very interesting. Can you share the spec for those machines, and
    if possible point to where they can be bought?

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEst7mYDbECCn80PEM/A2xu81GC94FAmME0/IACgkQ/A2xu81G C97UgxAA2RK1Quqz/MCBQFnkKfdwDBsjqBeDIbDEC2v7S9uV53vNLwXlpKUlJHL4 6eZ2XxcnhOpkzZtuSWKmKeYephlCnJDdnfAV9qnpRdn7SptVBG4ySOx9wi/PbjB/ 6Q3ZMbC0y3EWKiCVcz3qcsVg+Tim5pjmUa+5sPSCRV4eI1lPU5ybLIsN8CMEZOap f4HTkWyCpVJE7knDYvNhH3cQrgwcfzxDh/Xrv0Suo91tH0Jd8JZ16ACkvpwGTOQu 0HZV42oaWUYeZdQnDUVxP+uepStuO5dA7KEru2p9JNNjUq9HpZqc2WEJpJCfXWOw 1dNKwNxIQUBHUdDUO4nFSTTZYC0Z/DZRXYQBhRZJaSH8rnPGJern/DJyPAT5Wl36 nVTkHIyszYKp+GbkTSXbcZbiuDo4h0WBqIulZzvlI08sYFBYcKRolQm0m3StR6ry VM02pr+90XNatu4ii5+1v5cLn8Dgzj/aqes5MueaxbUvN0tSgCieX0zCmt8rLt22 56DxvANQEEvawAXeGfoAoya3orl6P7Ox2T3kKevYZGnaPigorKST2VHpLoU+6Apv 3NHprATiAfHu9ueai79XDkLKXxBG9YfgwH9DpXqZy6hAA6Yn4jAKBxYPQhaOaPtz p9vqd8EpxHSg5O0a9hwfW7Lng66Fjjk+SK2I+n4IRQRClB+GJUE=
    =LZDk
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Tue Aug 23 16:30:01 2022
    Quoting Simon Josefsson (2022-08-23 10:39:57)
    ==================

    We continue to stand by the spirit of the Debian Social Contract �1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract �5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    Seconded.

    I would like to add, that I really appreciate the efforts of Steve and
    think that I understand where he is coming from with his proposal - I
    just fails to see how those concerns can be addressed within the
    constraints that we have strongly defined as core scope for our system
    (because in my understanding "our system" includes our official install
    image for our system).

    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============90491198942899610=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmME4tUACgkQLHwxRsGg ASF59RAAnbPd7tFFFUKWP5XqetNjwQ0Jlqw01SeP8Ju6SmoisgJu6Trw7FxKvB+A mI7nz8tB9oooY2zJW2gZ7WZQhBCc+TDPuc6AhPcZEB/ZTHa908ZoXo/gHXHEJZVz v3z41ycArsem0AZrbnfD5ygAZ2KYm65LoltIwf8CbXlOei8IkF8pTiKohf950i9x o0gT9UY/5xTIAtP0VX9cFYFqN2XoSQSK4FEg3V9upObYT0xsUq1nHa0N8yBomKUj 0KN3jiNoFt8+xAl/ANNUz5K1OS1EuZh2iYKH2pC/kYiMtjQKw9g0BL7cOu7wyni6 otH/gh/kglVBcrv+cmAH9qijJFVptFlg953RBTFCvfr4iqGg21CURJra+FcVcFn9 n/uLYiQ6Fxd+EiNlYUnCVsL6LRE4XNZVA8US5P6dW2/OW135FkdtVW+9k8f4yzgB lnTt7PuXQHHAM8PTx9St20qawFPsR8EehhDQZqu5NohisUZWKEhxJNnGEBCwFzrS JJg0/GN6snnaZ/VIr
  • From Enrico Zini@21:1/5 to Bart Martens on Tue Aug 23 16:40:01 2022
    On Mon, Aug 22, 2022 at 06:20:15PM +0200, Bart Martens wrote:

    With this GR proposal there would no longer be an installer without those non-free bits.

    Would you consider proposing an alternative ballot option, instead of repeatedly stating your dislike of this one?

    Debian's voting system allows anyone to propose a ballot option that has
    their position represented, and Steve explicitly invited it. This will
    lead to a ballot which represents the various positions in the project
    and allows anyone to rank them.

    This is a rather beautiful way to turn the conflict of different
    opinions into value, rather than hostility.


    Enrico

    --
    GPG key: 4096R/634F4BD1E7AD5568 2009-05-08 Enrico Zini <enrico@enricozini.org>

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEJJAhGtA2CH5tHZqS0P9Jy+P0+2gFAmME5psACgkQ0P9Jy+P0 +2jfQg/+LGMPbfQfbBdhMrLDzELZxlQDkyPphD1vmdamWtmuEIZVA49My9mf1fNb tAmB8owQ0rFLIEJfzavm0RuiFYRjx1/pl/9QvHog02KTM1wzvqIUaedEYFjjXsjR 5ZUgIoBwr7lTIhWMEhFVCiOVGTBdiQcneVQemAI0LbsxzghaE5bDE5P9CnATXUAJ UWiQP2qj8M33ySRKqSBEXxmhO7Z+aQeSQ7H8kFZRtnt3jCAvAKA3wgzhntibtbSJ JyUiZGK5UGBj6Qf48V/4GfPbsk6X+qEScP+PsWDwcklEJAk3NCbiFeggLFCKKHqU zgEhjx/7dIyK/ZnslCQ94CIMHfE6ie1k4R5YeRCenrEbv2UPPPMC07GQ43JpyEkS FfWtwtcjFjo0TJCOjdmiwGEGmHOHsgT5O8vHo9JQTxxQruujcgo2uM+3oRriAbqX FRTFge33902R5ziOCt6L5nOlFO0erMf+hTUNRbYaTqibMqP6Cc5TjHTQhxXfiKpx 6rraLppjP2ESIhF9dxF1pNGs8XeG+5f2P5m0VqYfx3D+gYla9jtFqMnQJDnKRLTV k5oBucG8qtw32nvZg0XJHGn2mJK36CI3MB/Iwkwwit62PjdZlb0BRKOHIzi3RsRp tQrk2sA6+9d5mGolET485tnfvSGuZCMoF+1UW2n10VykPbQdWg8=
    =tTwV
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hubert Chathi@21:1/5 to Simon Josefsson on Tue Aug 23 17:00:01 2022
    My original mail doesn't seem to have come through, so I'm re-sending. Apologies if this comes through twice.

    On Tue, 23 Aug 2022 10:39:57 +0200, Simon Josefsson <simon@josefsson.org> said:

    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today.
    That makes me sad. My preference for an outcome would be along the
    following lines.

    ==================

    We continue to stand by the spirit of the Debian Social Contract §1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people who
    create or use both free and non-free works on Debian. We will never
    make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in

    s/Therefor/Therefore

    the main archive or installer/live/cloud or other official images, and
    will not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract
    §5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have created "contrib" and "non-free" areas in our archive for these works. The
    packages in these areas are not part of the Debian system, although
    they have been configured for use with Debian. We encourage CD
    manufacturers to read the licenses of the packages in these areas and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their use
    and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image
    with non-free software on it is not part of the Debian system, but
    that we support their use and welcome others to distribute such work.

    ==================

    /Simon

    I believe that this should be on the ballot so: seconded.

    --
    Hubert Chathi <uhoreg@debian.org> -- https://www.uhoreg.ca/
    Jabber: hubert@uhoreg.ca -- Matrix: @uhoreg:matrix.org
    PGP/GnuPG key: 4096R/F24C F749 6C73 DDB8 DCB8 72DE B2DE 88D3 113A 1368

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE3juhvb4UN2X4rCw4rXmvZUDjNa8FAmME6o8ACgkQrXmvZUDj Na/7ywf+ID/TtdDdeHm9PAJtaH/jdI+na4gc7vPr6nvh7CMBKFrD0ZCj7zx+5E6w 4HJJwEQnfwcYix9jTbn1c+RG38qfRfgPOwFVdznvrKd9ApnjvayKBpVCgNHx3kzw fmodMPpZBt4V/CHdk98Aoo7cuuhRY80YuTjPBckJu7JzUGtkspFLMkNIGzm1gYzM xMFEYE6j44pfGKZUhrOI4WYY5iyf6J8lf49UqpTBbqdwmQz5k6hsiyJ+zkZzCtMg 9Z0EsWGJbwhHrW6Aad084fvhUpKWYEXjWyLl6xf77ct2SbA7I6SuQixJkraP4e5r OYBFeP4eguOF0eCU6CRndMYj0a4tZg==HcEf
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hubert Chathi@21:1/5 to Gunnar Wolf on Tue Aug 23 16:30:02 2022
    On Mon, 22 Aug 2022 12:32:54 -0500, Gunnar Wolf <gwolf@debian.org> said:

    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    Seconded.

    --
    Hubert Chathi <uhoreg@debian.org> -- https://www.uhoreg.ca/
    Jabber: hubert@uhoreg.ca -- Matrix: @uhoreg:matrix.org
    PGP/GnuPG key: 4096R/F24C F749 6C73 DDB8 DCB8 72DE B2DE 88D3 113A 1368

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE3juhvb4UN2X4rCw4rXmvZUDjNa8FAmME42MACgkQrXmvZUDj Na8iiQf+MyJ5ojc3FspFZsS/FokENV0oFoO36XWfOFw3fItaDmJU6qJldtVd77uR /xH6yAyllGpT1UIZ4izCVVdFWdwXYbyrjK6In1aZLfL+r7vRECuRb/RQo6huL21f X43afcRylu2rr9hXpWBLQhHAaxUVSaKAXOuPakaLKGrZvi8XKYvz6D7cRIPRL8GY 1eVCbydw5sbUd3qtZXK98BW4lbJ42XX6vplB0YCWHXK+261MTIHyL7LH5sFM8HIt ha8c7KJfG0TMR9opIbaRYkPzS2I7zI+XH0BZvhmH32XhFEn4v2bpJgICkSXoMJZQ L+Ljtt0SYVCCP6Wo8af3qgKKKUUI4w=e/
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Simon Josefsson on Tue Aug 23 17:00:01 2022
    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That
    makes me sad. My preference for an outcome would be along the following lines.

    ==================

    We continue to stand by the spirit of the Debian Social Contract §1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract §5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    as pollo said:

    I disagree with you, but I understand the rationale. I think having such an option on the ballot makes sense.

    Seconded.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Every time you see the word "smart" used to describe a device, replace it with "surveillance." Surveillance watch. Surveillance streetlights. Surveillance oven. Surveillance toilet. Surveillance car. Surveillance city. (@mollyali)

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmME6S4ACgkQCRq4Vgaa qhxXPhAAsHpmWbARTd8lFsZX8k5LSkksYfL6Odf2U/CtBne3fFpSg/v+gccHpI4E k3DtbhAoA6SdEIW2wIAeYvI3Ofa5xHUWJZ7SubzfDnXjdR7L/44F/Vh+RmVQ9Gpp 2bqOVIf01XuyAaerv7nGAgRXcSl/3oM4yA1mqeiH2tr2/DDdSYT1WvaTVYIeyf2G aWDBAht4gabhNX8taBXjJ6+Wb7PGntLlki7ijDh1hE1U+52EDOn+ilWlQMDyeoyj locRzMH1Pmsg0/2LPWKQFYhLHWbnjT2Nws27X8o6ZUZdJj7caBBWRORIbD7zVwoT wLIZliNA2PaEZjtDi6xAwoxfVT7KIIvyIPTIb7LTb97Ym/O/w/s+L9sXZ/IptKEr TPe2yoVzYCPH8W844NU7pkKW/218Tflx1fERyYMGJIC1MuvucMvn2cBMzz9R6GDp
    fKhghMFro9ge
  • From Jonas Smedegaard@21:1/5 to All on Tue Aug 23 17:10:01 2022
    Quoting Philip Hands (2022-08-23 10:44:55)
    Jonas Smedegaard <jonas@jones.dk> writes:

    Quoting Tobias Frost (2022-08-22 15:57:01)
    On Mon, Aug 22, 2022 at 07:39:21AM +0200, Simon Josefsson wrote:
    Ansgar <ansgar@43-1.org> writes:

    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

         Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for >> > > having https://deb.debian.org/debian/pool/non-free/: we just ship
    additional files that might be useful for people having specific
    hardware.

    I disagree -- what is being proposed here is to replace our current
    DSC-compatible free software installer images with non-free. That goes >> > significantly further than what the spirit of DSC§5 suggests.

    It not being replaced; there are just additional bits in there which
    help people to actually be able to install Debian on some modern machines. >>
    The guarantee in SC1 that we will never *require* those non-free bits, as writen
    out in "We will never make the system require the use of a non-free component."
    This GR does not violate this promise.

    I understand how we will not require non-free bits getting *installed*.

    The way I see it, with this change we will require non-free bits for *distribution* of our system, because our official installer will now include non-gree bits.

    Would those arguing for the availability of the 100%-free installer find
    it acceptable if there was a way of cleansing the non-free bits from the includes-nonfree-firmware installer images?

    I'd guess that one could put the non-free bits on the end of the image,
    as an additional session, or perhaps just mark them in the image, and
    then reasonably trivially trim them off, or blank them out.

    We could then generate the firmware-included images, but make the
    cleansed ones available on-line by having a server-side script trim out
    the non-free bits on the fly.

    If that still makes you feel dirty, because the free bits were once
    next-door to some non-free bits, would it make any difference if the resulting images could be built reproducibly without access to any of
    the non-free components?

    I'm mostly asking this to find out where people's lines are, but also in
    the hope that we could come up with a compromise that allows us to get
    away from the enthusiasm sapping situation where the debian-cd team is required to make images that they know are sub-optimal for many of our
    users.

    Thanks, Phil, for "reaching out".

    I view the official Debian install image as a component of Debian, and consequently if the (only) official Debian install image were to contain non-free bits then we would violate DSC#1.

    It is my understanding that those viewing this move to include non-free
    bits in the official Debian install image consider the install image
    *not* one of "its components" as defined in DSC#1.

    I would find it problematic if the official way to install Debian
    *required* a non-DFSG image.

    To clarify: I would *not* find it problematic if an image containing
    non-free bits were produced and promoted more prominently by us, as long
    as it would remain *unofficial* - i.e. a DFSG-compliant image would
    continue to be provided and supported.

    As I understand it, your first suggestion above (building image with
    non-free bits but in a way that supports stripping again afterwards)
    would not address my concern, but the second one might (if actually
    done officially, but not if offered only as an unofficial option).

    I hope that my concern is clear, that you recognize it as real (not me
    being a lunatic), and that we can address the concern in a way that does
    not burden the debian-cd team.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============V36907500489110440=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmME7IwACgkQLHwxRsGg ASHXXxAAgqA7gnht2KsFdsB9Zluwbhztd/g5ORErRCNrwNaH8snNQgA3sDvvC87h xhjJimPlgYTruFE5dtHDJClQQJ73BY9HvbLcsS8Jq4O6DLJZx5s40rjd077uLI4H C4thECDBvA0YYGy+y76QH/lvBs3XhFl3LcUfb1faBL2fLjsLcZfPQ2qQSh3dcs5M mzoQGI7ZLzwnZpwo28It8iYp0RaUb+BE2j40Woen6i+DyAxHxiKEr/DSUulco6zU rwzdSSngQucA79zPRYA3n0FIxiPdcxWVOpQJdhXefgEV5tbxWNojNXN3JjsRYs8/ Pfhdcr52SOEymRgJLAcJHji3bHOFidTQ+DHkcuGHRKgDpUgSjfUv1XWmjLXZ2slu 1TvR+ENVCpCbGkOYD3eM27W6Y9pg2sXOPKd+syZpcT/g+R7y36jAbEJITPZYbP7B 4pynw7LGLojw7/+GZNXZaqXhpXASO8Ns8siVok3qVyoADKA1L+1vsBAUxSAKQoPW +z2YNwhqeOKQQwEg7
  • From Simon Josefsson@21:1/5 to Antonio Terceiro on Tue Aug 23 17:40:01 2022
    Antonio Terceiro <terceiro@debian.org> writes:

    On Tue, Aug 23, 2022 at 10:53:46AM +0200, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a
    number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support.

    That's very interesting. Can you share the spec for those machines, and
    if possible point to where they can be bought?

    I use Dell R630 servers, Talos II workstation, HP ProLiant ML310e small
    server, and Lenovo X200/X201 laptops. Yeah the laptop is 10+ years old,
    but to be honest every time I try a modern laptop I don't notice any
    real difference except fancier display and longer battery life, neither
    of which I find important.

    Yes I am aware that I can install non-free firmware on the R630, but for
    my purposes (VM host, CI/CD, fuzzing, crypto/math computations) they do
    more harm than good so I chose not to.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwTy4RQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFooBVAP93VwPt4deiv6Pjv1S9kuf/3d28Jcdm d46mwzo3fodqjwEAmakPNNaapYhTmX3V4VoUi6tG+5Lv0lJ+xc4o/vPZTAc=vXzu
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Jonas Smedegaard on Tue Aug 23 17:40:02 2022
    On Tue, Aug 23, 2022 at 05:04:49PM +0200, Jonas Smedegaard wrote:
    I would find it problematic if the official way to install Debian
    *required* a non-DFSG image.

    would you also find it problematic if there were *two* official
    images, a "free one" (as we know it) and a "free one plus firmwares"?


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    There are no jobs on a dead planet.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmME80cACgkQCRq4Vgaa qhzLVw//b8zc1MfVuNMTwphtUskb8LxIuEhy2/o3C1BjC+/eicCR4fUX9b1eg8f2 k2JyD3CeONlb5aTmgzf9dBdi2+z4Xyb+WMpn91ZAkjRH+3yfAySMq+iwtMsUfw1I VG9LI3Yq9BnwRbPrGPxEqzw0rB7wT/JT1UkfFqYvva9WUgoeTI3yWvJ1oHr6dmn8 s/+JuGX6MuQUaygTWheTOBZqxQa6x/9gwdF5o12lOaC/18N2GFYmeJQRF3eBz5yE UYT2RYjr1f57fLvtAlqURyHyZ8kuY4dLZI1I9QL8uRLMzBGgbeXxcA5FJa9q1P41 rbSt1pA25HsF+m5MeSbl76BkXdgqshrh3Iqf5VbXwjZWDiAE6oln2DahFn9f7EZa Op8/BVbhU/WTjTKl77iM1enuzx2//zHD8N8F2M09k8XoK7YLfd6J8vewgLVl4Kdu 1lwp+qPkr0lMWrn+S+1t/K8I+iMF2KgyGALG8xO7APtpDVnJ2FMZ1YeEvIioVh+i t9WcBopjrO5XF51nIe+9U3TS3QvYtmDS0avP4XmgCi+ghwSr7LX3YIOIRKuyv588 xUOtf1cyRtYzqkV0p6B75psLsWsP5g04tx9PIRmighCrUKCYHnOv7IFElKkyvVjW
    SrPGvEMPrJj
  • From Hubert Chathi@21:1/5 to Simon Josefsson on Tue Aug 23 17:20:02 2022
    On Tue, 23 Aug 2022 10:39:57 +0200, Simon Josefsson <simon@josefsson.org> said:

    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today.
    That makes me sad. My preference for an outcome would be along the
    following lines.

    ==================

    We continue to stand by the spirit of the Debian Social Contract §1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people who
    create or use both free and non-free works on Debian. We will never
    make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in

    s/Therefor/Therefore/

    the main archive or installer/live/cloud or other official images, and
    will not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract
    §5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have created "contrib" and "non-free" areas in our archive for these works. The
    packages in these areas are not part of the Debian system, although
    they have been configured for use with Debian. We encourage CD
    manufacturers to read the licenses of the packages in these areas and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their use
    and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image
    with non-free software on it is not part of the Debian system, but
    that we support their use and welcome others to distribute such work.

    ==================

    /Simon

    I believe this should be on the ballot. Seconded.

    --
    Hubert Chathi <uhoreg@debian.org> -- https://www.uhoreg.ca/
    Jabber: hubert@uhoreg.ca -- Matrix: @uhoreg:matrix.org
    PGP/GnuPG key: 4096R/F24C F749 6C73 DDB8 DCB8 72DE B2DE 88D3 113A 1368

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Tue Aug 23 19:00:01 2022
    Quoting Holger Levsen (2022-08-23 17:33:27)
    On Tue, Aug 23, 2022 at 05:04:49PM +0200, Jonas Smedegaard wrote:
    I would find it problematic if the official way to install Debian *required* a non-DFSG image.

    would you also find it problematic if there were *two* official
    images, a "free one" (as we know it) and a "free one plus firmwares"?

    As I laid out my reasoning (which you partly snipped), I see no way that
    could be achieved. Do you?

    I mean, DSC#1 says that "Debian will remain 100% free" - how is that
    possible if an official part of Debian is omitted?
    Or how is it possible for the firmware-containing image to be free?

    (I only see that being possible by treating the install image as not
    part of Debian, which I consider an unacceptable interpretation).


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============&89332895180844131=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMFBUoACgkQLHwxRsGg ASG3yBAAin8K/Jw09Wm74udCxR5sUcq8y9UsFIQ/gRn2BCCYzyR9FG3rR6q7QQAV who2Ek8wVpZ576JF8VJ+7A4IVo7gLTm8DfV+gnVAjTIud3D2vqGcI3rm56pUIsdE WsBBdgn2ZHpeElg/6tC6NmsyGB00hAFl9a3S1Xw+GNZt4Awg8SVUHseake91MKXO fN4y4aE1kmcnQ8LyKq7V7nVFeBNHLXVKZvKTt6mKdplETeoi3EebOV12TwS1UHc9 IBKmgSUw8s2mlKOA6EdFG+EVGUy4HFumYJIDx1bGm9wXz2zDOi6kTh8UtXwf+ucn jCrcpXzEf+unmc4k+zXD8GaXtXcTM/kJmei4QIvlrIKTyPvFq2pS6JSgVPVnZ53p ZOb3nbPBL25ehWZB9f99izEiBlSsA9qnwrucE4WN0TtebXqDdYMBKiq2QdK1EPZn luhWJ9vpj0XThKAq9eZTFLafNz4iRRlYi4e+XZyFmbSzyERhSIth9b/elXFo/dpT 8P5xKMrSeDXPiZMpK
  • From Vincent Bernat@21:1/5 to Jonas Smedegaard on Tue Aug 23 19:10:01 2022
    On 2022-08-23 18:50, Jonas Smedegaard wrote:

    I would find it problematic if the official way to install Debian
    *required* a non-DFSG image.

    would you also find it problematic if there were *two* official
    images, a "free one" (as we know it) and a "free one plus firmwares"?

    As I laid out my reasoning (which you partly snipped), I see no way that could be achieved. Do you?

    I mean, DSC#1 says that "Debian will remain 100% free" - how is that
    possible if an official part of Debian is omitted?
    Or how is it possible for the firmware-containing image to be free?

    If we consider firmware (not running on the CPU) to not be software.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ansgar@21:1/5 to Simon Josefsson on Tue Aug 23 18:30:01 2022
    On Tue, 2022-08-23 at 17:31 +0200, Simon Josefsson wrote:
    Antonio Terceiro <terceiro@debian.org> writes:

    On Tue, Aug 23, 2022 at 10:53:46AM +0200, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a number of laptops, desktops and servers, and for my purposes it works fine and in general I have not needed to enable non-free/contrib for hardware support.

    That's very interesting. Can you share the spec for those machines, and
    if possible point to where they can be bought?

    I use Dell R630 servers,

    From 2014 according to https://en.wikipedia.org/wiki/List_of_PowerEdge_servers#Generation_13

    Talos II workstation,

    I'm not sure how old these are, but they are really expensive and seem
    to have a very small userbase.

    HP ProLiant ML310e small server,

    The CPU is from 2011 according to https://ark.intel.com/content/www/de/de/ark/products/52269/intel-xeon-processor-e31220-8m-cache-3-10-ghz.html

    (I took the CPU from https://www.reichelt.de/de/de/hp-proliant-ml310e-gen8-v2-server-1-wahl-hp-pl-ml310e-p331526.html?r=1)

    and Lenovo X200/X201 laptops.  Yeah the laptop is 10+ years old,
    but to be honest every time I try a modern laptop I don't notice any
    real difference except fancier display and longer battery life, neither
    of which I find important.

    Yes I am aware that I can install non-free firmware on the R630, but for
    my purposes (VM host, CI/CD, fuzzing, crypto/math computations) they do
    more harm than good so I chose not to.

    I don't think everyone can affort the energy (in)efficiency of a decade
    old hardware. Most users will also have more recent hardware; I don't
    know much 10+ years hardware still in productive use...

    Either way, such ancient hardware is probably not a good example for
    the firmware problem: it was a significantly smaller problem back then.

    Ansgar

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Andrew M.A. Cater on Tue Aug 23 18:40:02 2022
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    On Tue, Aug 23, 2022 at 10:53:46AM +0200, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a
    number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support. You may have other purposes for which it does not
    work, but that doesn't make it useless for everyone, and there are
    alternatives available to solve your use-case (unofficial non-free
    installer) that doesn't entail the cost of abandoning the free software
    ideals of the Debian project.

    /Simon

    Hi Simon,

    I don't think you quite picked up on my meaning. The free installer is absolutely useless _because_ you are already using a machine containing a bunch
    of firmware (that you may or may not know anything about) - disk drives, basic
    drivers for graphics cards. If the free installer works, it's because you already have firmware.

    Hi Andrew. Ah, thanks for explaining what you meant. I have no problem
    with builtin non-upgradeable firmware -- see
    https://ryf.fsf.org/about/criteria for rationale. So I still disagree
    with you, but now for a different reason.

    Now we're in a situation where non-free firmware is absolutely required for basic functionality - without the Intel non-free firmware, you can't run sound for a visually impaired user to install if you have some Intel laptops. That VI user will *never* be able to install Debian.

    That is not true. They can chose not to buy a machine with that
    unwanted property. There is a gazillion devices that won't be able to
    run Debian for many different reasons, I don't see how this is an
    argument to necessarily include proprietary software in Debian.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwT0jBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFonpUAQDIsq59B2L83gsrPdLQlmJeSM0rBepx R20ZAJxzc1qhAwD7BN2gA1IEcJIujbGMKMtbABUeZFajE+nRcgUzK8CoTwk=2Yqf
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Tue Aug 23 19:10:01 2022
    Ansgar dijo [Tue, Aug 23, 2022 at 06:24:40PM +0200]:
    I don't think everyone can affort the energy (in)efficiency of a decade
    old hardware. Most users will also have more recent hardware; I don't
    know much 10+ years hardware still in productive use...

    Either way, such ancient hardware is probably not a good example for
    the firmware problem: it was a significantly smaller problem back then.

    Back in the day (~20-25 years ago), I was considering to switch from
    Linux to OpenBSD. I prefered their stands on many aspects, starting
    with security. Back then, you were warned quite out-front by their
    developers: You don't shop for an operating system that suits well
    your hardware: You get the right hardware to run the operating system
    you have chosen.

    You know, like the serial port #1 should be at memory location 0x03e8
    using IRQ 4; if you had it configured at 0x02f8 and IRQ 3, it would be
    reported as serial port #2 even if #1 does not exist... and that sort.

    But while we sysadmins, developers and in general techy users can find
    some beauty in building just the perfect machine with precisely the
    hardware we want... End users will often not want to unscrew their
    laptop to gaze at its inner beauties. And will not even *want* to know
    the driver their wireless NIC uses. Debian should try to cater (more)
    for those users, becauser if we reject newbies, they will take the
    curiosity somewhere else -- and quite probably, when they advance and
    become sysadmins, developers or techy enough... they will only have a
    bad memory about us.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Phil Morrell@21:1/5 to Simon Josefsson on Tue Aug 23 19:10:01 2022
    On Tue, Aug 23, 2022 at 05:38:52PM +0200, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:
    On Tue, Aug 23, 2022 at 10:53:46AM +0200, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:
    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a >> number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support.

    I don't think you quite picked up on my meaning. The free installer is absolutely useless _because_ you are already using a machine containing a bunch
    of firmware (that you may or may not know anything about) - disk drives, basic
    drivers for graphics cards. If the free installer works, it's because you already have firmware.

    Hi Andrew. Ah, thanks for explaining what you meant. I have no problem
    with builtin non-upgradeable firmware -- see https://ryf.fsf.org/about/criteria for rationale. So I still disagree
    with you, but now for a different reason.

    Just be aware that this rationale can have the opposite of its intended
    effect in the long term:

    https://ariadne.space/2022/01/22/the-fsfs-relationship-with-firmware-is-harmful-to-free-software-users/

    Purism Librem 5 pursued RYF and as a result its users are unable to
    exercise Freedom 1. Novena open laptop required non-free-firmware upon
    release, but users are now able to enable previously proprietary
    features using libre software.

    On Mon, 22 Aug 2022 at 07:22, Simon Josefsson <simon@josefsson.org> wrote:
    Ansgar <ansgar@43-1.org> writes:
    On Fri, 2022-08-19 at 16:23 +0200, Simon Richter wrote:
    Do we need to update the Debian Social Contract for that?
    Specifically paragraph 1, which currently reads

    Debian will remain 100% free

    No. Just like we don't need to update the Debian Social Contract for
    having https://deb.debian.org/debian/pool/non-free/: we just ship additional files that might be useful for people having specific
    hardware.

    I disagree -- what is being proposed here is to replace our current DSC-compatible free software installer images with non-free. That goes significantly further than what the spirit of DSC5 suggests.

    Yours is certainly the historical consensus, but the entire point of
    this GR is to re-examine if that's the current interpretation. It might
    well be, which is why even its supporters have been keen to second a
    wording for the status-quo - the DebConf22 talk was quite clear they
    don't want to be blindsided by their social bubble.

    I find that if I assume the DSC points are unordered, and numbered only
    for reference, then there's sentences in there that support the offering
    of official images including firmware by default, even while considering
    the iso as a Debian component.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYwUI2QAKCRDbymUJHySO bH5oAP0aS0360Qx2sn8DZ6oG8jmwduWA9uDryKQ16Ex///1KDQEAkUZKl502PJ50 ngbYXCcob3Zqd9SaCYmEHdrmBPDaigk=
    =n7vj
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ansgar@21:1/5 to Vincent Bernat on Tue Aug 23 19:50:01 2022
    On Tue, 2022-08-23 at 19:04 +0200, Vincent Bernat wrote:
    On 2022-08-23 18:50, Jonas Smedegaard wrote:
    I mean, DSC#1 says that "Debian will remain 100% free" - how is
    that possible if an official part of Debian is omitted?
    Or how is it possible for the firmware-containing image to be free?

    If we consider firmware (not running on the CPU) to not be software.

    We decided that all of Debian, including non-software such as
    documentation, images, game data, ... should be under a free license.
    So "not software" doesn't make a difference.

    However I think it's fine to include non-free data on installation
    media, just as one would get non-free bits when copying the Debian
    archive. We aren't enthusiastic about it, so we just include a small
    part of non-free that is practically required in many cases.

    (I only see that being possible by treating the install image as not
    part of Debian, which I consider an unacceptable interpretation).

    For me installation media are more or less just a glorified non-tarball
    of archive contents. So I apply the same standards I would apply to a
    tarball of the Debian archive (which would include non-free).

    Though I understand some people would like if non-free was removed from
    the archive as well (possibly to a separate archive).

    But reading this discussion I came up with a question: we currently
    ship some version of the Debian installer as part of Debian in main.
    There is [1] and also the debian-installer-11-netboot-amd64 packages.
    I'm not sure if these would also include firmware or only the "large" installation media built by the CD team? Do network install images need
    to include it or can they reliably download it? The audio and video
    examples suggest that firmware might be needed here early as well.

    Ansgar

    [1]: https://ftp.debian.org/debian/dists/bullseye/main/installer-amd64/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew M.A. Cater@21:1/5 to Simon Josefsson on Tue Aug 23 19:50:01 2022
    Forwarded following a bounce to debian-vote for completeness

    Date: Tue, 23 Aug 2022 14:03:57 +0000
    From: "Andrew M.A. Cater" <amacater@einval.com>
    To: Simon Josefsson <simon@josefsson.org>
    Cc: debian-vote@einval.com
    Subject: Re: Changing how we handle non-free firmware

    On Tue, Aug 23, 2022 at 10:53:46AM +0200, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support. You may have other purposes for which it does not
    work, but that doesn't make it useless for everyone, and there are alternatives available to solve your use-case (unofficial non-free
    installer) that doesn't entail the cost of abandoning the free software ideals of the Debian project.

    /Simon

    Hi Simon,

    I don't think you quite picked up on my meaning. The free installer is absolutely useless _because_ you are already using a machine containing a bunch of firmware (that you may or may not know anything about) - disk drives, basic drivers for graphics cards. If the free installer works, it's because you already have firmware.

    Non-free firmware often adds a better driver - see Intel/AMD microcode / amdgpu - which extends the minimal functionality you have. Microcode is there even
    if you never upgrade it, essentially, as is other firmware.

    Now we're in a situation where non-free firmware is absolutely required for basic functionality - without the Intel non-free firmware, you can't run
    sound for a visually impaired user to install if you have some Intel laptops. That VI user will *never* be able to install Debian.

    The new installer would include optional non-free firmware needed to make
    the machine work. It's still not including non-free in Debian - but it's
    making a machine usable. The free installer is ideal for virtualisation
    only because it's sitting on top of a bunch of idealised hardware.

    All the best, as ever,

    Andy Cater




    ----- End forwarded message -----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Phil Morrell on Tue Aug 23 20:00:01 2022
    Phil Morrell <debian@emorrp1.name> writes:

    Just be aware that this rationale can have the opposite of its intended effect in the long term:

    https://ariadne.space/2022/01/22/the-fsfs-relationship-with-firmware-is-harmful-to-free-software-users/

    My reading of that is that the FSF RYF program does not meet the needs
    of people who do not care about having a fully free software system. I
    don't see how that is unexpected.

    I find that if I assume the DSC points are unordered, and numbered only
    for reference, then there's sentences in there that support the offering
    of official images including firmware by default, even while considering
    the iso as a Debian component.

    Interesting, can you explain quoting the text supporting that?

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwUVEBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFokkZAQDWjFgM68UFurmB8b6EcppjqUVPOXkX jPx6Wg4qXDc9kwEA3Zzm6aBC27Agv26W7q5XnX2l0qBZCYW6k+aM/dV+yw0=
    =G6EA
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Tue Aug 23 20:10:01 2022
    Simon Josefsson dijo [Tue, Aug 23, 2022 at 07:57:36PM +0200]:
    I find that if I assume the DSC points are unordered, and numbered only
    for reference, then there's sentences in there that support the offering
    of official images including firmware by default, even while considering the iso as a Debian component.

    Interesting, can you explain quoting the text supporting that?

    Simon, while the topic we are discussing is clearly divisive and close
    to the heart for many of us, we should try to keep the debate as civil
    as possible.

    No, you didn't insult anybody. But there are ways of saying the same
    without raising the confrontational threshold.

    Phil's text reflects on his personal opinions and reading angles ("I
    find that if I assume..."). You could probaby say "I cannot find the
    same meaning you propose, even while reading the items with random
    ordering" or something like that, and it would feel
    less... Aggressive.

    Thanks!

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Gunnar Wolf on Tue Aug 23 20:20:01 2022
    Gunnar Wolf <gwolf@debian.org> writes:

    Simon Josefsson dijo [Tue, Aug 23, 2022 at 07:57:36PM +0200]:
    I find that if I assume the DSC points are unordered, and numbered only
    for reference, then there's sentences in there that support the offering >> > of official images including firmware by default, even while considering >> > the iso as a Debian component.

    Interesting, can you explain quoting the text supporting that?

    Simon, while the topic we are discussing is clearly divisive and close
    to the heart for many of us, we should try to keep the debate as civil
    as possible.

    No, you didn't insult anybody. But there are ways of saying the same
    without raising the confrontational threshold.

    Phil's text reflects on his personal opinions and reading angles ("I
    find that if I assume..."). You could probaby say "I cannot find the
    same meaning you propose, even while reading the items with random
    ordering" or something like that, and it would feel
    less... Aggressive.

    Thanks!

    My apologies. Phil, I didn't mean to offend you, and I'm sorry if you
    took it that way. I'm genuinely interested in your reading of DSC to
    support including firmware in official images. Gunnar, I found your
    correction confrontational to me, but I'll abstain from posting for a
    couple of days to let things pass.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwUZdBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFomIKAQCnsSUIax0E84RzEkarPCsXVTvEBCL7 JL2ZGU4qtfIADwEA7RCsFUzDYiXomgeX9xyVpaMMWGj6nm1kvAGSsDFl1A8=X1R1
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Tue Aug 23 20:40:01 2022
    Quoting Ansgar (2022-08-23 19:44:17)
    On 2022-08-23 18:50, Jonas Smedegaard wrote:
    (I only see that being possible by treating the install image as not
    part of Debian, which I consider an unacceptable interpretation).

    For me installation media are more or less just a glorified non-tarball
    of archive contents. So I apply the same standards I would apply to a
    tarball of the Debian archive (which would include non-free).

    So you do not consider installation media part of Debian?


    Though I understand some people would like if non-free was removed from
    the archive as well (possibly to a separate archive).

    I don't want non-free removed from the archive, and I would appreciate
    if we could avoid expanding the topic of this discussion.

    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============p62881707989938245=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMFHpsACgkQLHwxRsGg ASFYEw//dyAEf6v6gGqqUnsN0wqGYy8qT+r09sMYtfAuj18EMd4zZi9L+ZTWnrym xdQwQRdfmsLt4C5jhrSSS2Oe7DPdO3BwkcJeDIrlEvrCYgCIKZbRWzAgiuhm8D1A EISOrz4cv9rLTe6sCw7/h1ITkx++r6MZ/dR+kt7VBxhnscXNZI86TaCla/8fa1JL F81bINiV3ed2orjiwR2ZxFG3/nsBTI+doy8ZlaR6GNX7GovpYpfC2F0kRb/+Fm3D dOenTdchv4TivUaWCjv24glws3a/iK/s0xlaTR8vTlO/gckNpXFJwanpbeCMA4vK vvCgcaR3fHVaXeU5T9OjAcjAoLtBpLyOg+GZE2l2F0jHiOQNSJ1Y6nJIGsu4pjQi SvhF+CYZ0rmqwspvFnWaofDtBJna8MvUGZMJUttCNvxZ3wde19ti7odET3vBa5Ck Tsgd5vPcBjUcQ9HKLzpWWOh5SW1IPTQRBsY2WWywyZGA+o82QkoYYz5cQBQlDEmG m4pDH+oqDStTYlSz2
  • From Jonas Smedegaard@21:1/5 to All on Tue Aug 23 20:50:01 2022
    Quoting Gunnar Wolf (2022-08-23 19:06:50)
    Debian should try to cater (more) for [less-technical] users, becauser
    if we reject newbies, they will take the curiosity somewhere else

    I wholeheartedly agree. I don't think anyone here disagrees wuth that.

    What I disagree with is that we should move away from Debian Social
    Contract #1 by redefining the official installer as no longer a
    component of Debian.

    Yes, I dare say that that is redefining: why else have we avoided
    non-free bits in the installer till now, if not because we consider it
    part of Debian-the-thing-we-promised-to-stay-100%-free (as opposed to Debian-the-archive-that-has-had-non-free-bits-for-ages)?


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============e27551852437185645=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMFIDEACgkQLHwxRsGg ASHA7A//VAFA/JnQeM3ecXYB+sHAoNQSlfR4/U9EC0cF4UwXevToMtQa7c5cx2Ls 6sY/o2lfMDXaO62plIQUNgOIE8p9zGkEe8Rxbb/PVrNkSYFscMhOIOMZPUK1csyE yY1HeInXu7//rIYY7JC6uX8RhIVdvkFRrarrzTO+e43MQLVBOy68TtjANs+FmOuV w9N30mkhp0ngMeSua+QQ52Z/Bxq08q6kwgYiH2/iDcbbBDvhZBpEPPTMW+0afC4h fuoVJBq/hql5QBxCripb6wDDKVnPiCDVzmVSe+pLySjIPhSWq/FO0Y8XTnzQ+aiu 8A/oPjY/Ci7oGgaxxgwIYVwHwHoiD1Bql5P9H8MyO2ZgP/886HpYAAwCGbJ8es1S yPfZ+JFHrNb3QtPGOG269xQtdlvApkFZY9VuX/CQaR9G33Oy6z65kwYGcT6n5jVh TQdrpoj0gEl9zMNOZUG5JfyViwF1U2sOWU7iPVkWGW3mZdX/aunkbY6G1qHPzk0B KUpbaRvQbyEh/s2SO
  • From Ansgar@21:1/5 to Jonas Smedegaard on Tue Aug 23 21:40:03 2022
    On Tue, 2022-08-23 at 20:38 +0200, Jonas Smedegaard wrote:
    Quoting Ansgar (2022-08-23 19:44:17)
    On 2022-08-23 18:50, Jonas Smedegaard wrote:
    (I only see that being possible by treating the install image as not part of Debian, which I consider an unacceptable interpretation).

    For me installation media are more or less just a glorified non-tarball
    of archive contents. So I apply the same standards I would apply to a tarball of the Debian archive (which would include non-free).

    So you do not consider installation media part of Debian?

    Not really. "Debian" (the distribution) is the installed system or the
    software repository where I install software from.

    I see installation media as a partial offline mirror of the archive
    (with several options what "partial" means between netinst media and
    large BD media) plus some technical bits so it starts the debian-
    installer software (which is part of Debian).

    So as far as I am concerned the GR only changes what the partial
    offline mirror contains.

    Ansgar

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Gunnar Wolf on Tue Aug 23 22:30:02 2022
    On Mon, Aug 22, 2022 at 11:32:23AM -0500, Gunnar Wolf wrote:
    Bart Martens dijo [Mon, Aug 22, 2022 at 06:24:32PM +0200]:
    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images).
    ...
    We will publish these images as official Debian media, replacing the
    ^^^^^^^^^
    current media sets that do not include non-free firmware packages.

    We are replacing stuff very often, for example when we update the installer it
    is replaced too. For me, the replace in the proposal is meaning that kind of
    replacing.

    Yes indeed. It's replacing a free installer by a non-free one.

    We'd not taking anything away in respect to the spirit of SC-1.

    We'd take away the free installer.

    If a free installer is still produced and offered alongside the one
    including non-free-firmware, would you feel more at ease?

    Yes, alongside would be perfect for me.

    That sounds
    like an easy compromise to make, and many people would probably
    welcome it.

    That could be true, indeed.


    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.

    Do we need to recommend one above the other? I'd rather use some short explanation per installer to help the user choose.

    Cheers, Bart

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Theodore Ts'o on Tue Aug 23 22:20:01 2022
    On Mon, Aug 22, 2022 at 11:30:43PM -0400, Theodore Ts'o wrote:
    I would consider making both installers equally easy to find a better
    outcome than the current status quo, where the version which is more
    likely to be useful for modern laptops is kept hidden and hard to find

    I like your idea of "equally easy to find". It's a quick-win: present the existing installers side-by-side so the user can easily choose. - B.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tiago Bortoletto Vaz@21:1/5 to Gunnar Wolf on Tue Aug 23 22:50:01 2022
    On Mon, Aug 22, 2022 at 12:32:54PM -0500, Gunnar Wolf wrote:
    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    Seconded.

    --
    Tiago

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEYsAXsSqWkZu7etRd2EdHrOS2gT0FAmMFPDkACgkQ2EdHrOS2 gT3xmA//Uwj9snpOKVd9/ejibW5DLgQU7R8L0fH/E5qPZ1sYbM3xBVIVbUNKZ3Gw EjtlU3zWc145Uz1NHrjKZoYW0FjKDWCEVQzyCZ7lX/ZP+yv7zQojJSEYpOEVEA8r RivvFx427ZGUMhjzr6VA7lGYL7QYvogPnJ4VuUKee7cNZNbAzEWdBPd2taDF9ptP eaoC5q2wLOko7LF9OWwV5g8GJrxZG0sZjpq7UNJXFbSYY98zAbHHiNDCXunYaTnh XxrjXpYUDCwpXeEyeRfZtHrH3/wj0W2P3QQNEQ34lZtpDZOKGxGSofvZz7ZvCcaC ntyhOU5UwP3KGodYz9MJDxv0+HHPV4FrnUC8+aeOPGTaDY+6AkNMqQcjvApgLRTG 7+6lCQdloy9loICHxwKKak963b0xV2xcCKHvZRPi9vGsGo5nnR3/ITICBJebU5D1 kd76q/c0bOdRMJi9h62WoT+BR02mtORGfPRzgic/HrdBptOI/HWH9pcog5fBz6Dy 9WSIOGXMdfgC/UF2aILQFEUBpc3uym8a9p1Uhu9oc6FSSz4qIexu0BxDQbuHKO+o cDgqWG/bflJR++hypRGZkSUr3izxipPbqqMLHtNt2b0OobIHWyOeViK/bWSfkjxV bJIiWG1aDZIltLJ5KE6Xg4AAPoTBcX2P+TfSGimvodTnjN4DPLA=
    =RBNm
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Holger Levsen on Tue Aug 23 23:30:01 2022
    On Tue, Aug 23, 2022 at 03:33:27PM +0000, Holger Levsen wrote:
    On Tue, Aug 23, 2022 at 05:04:49PM +0200, Jonas Smedegaard wrote:
    I would find it problematic if the official way to install Debian *required* a non-DFSG image.

    would you also find it problematic if there were *two* official
    images, a "free one" (as we know it) and a "free one plus firmwares"?

    It would be nice to have both installers presented on the front page, so users can choose. I have no strong opinion on whether the "plus" installer would be called official or not.



    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    There are no jobs on a dead planet.



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Vincent Bernat@21:1/5 to Bart Martens on Tue Aug 23 23:40:01 2022
    On 2022-08-23 22:22, Bart Martens wrote:

    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.

    Do we need to recommend one above the other? I'd rather use some short explanation per installer to help the user choose.

    Maybe we should put the wording on the ballot. Some people may want to
    be plain factual (this one is 100% free, this one has several non-free
    bits that may be needed on some hardware), some people may want minimize
    one (non-free firmware needed in some situations), or the other
    (non-working installer on most modern hardware). For example, I would
    vote for the last one. Users may not try the second image if the first
    one fails because they don't know if their problem may be related.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tiago Bortoletto Vaz@21:1/5 to Bart Martens on Wed Aug 24 00:00:01 2022
    On Tue, Aug 23, 2022 at 11:20:09PM +0200, Bart Martens wrote:
    On Tue, Aug 23, 2022 at 03:33:27PM +0000, Holger Levsen wrote:
    On Tue, Aug 23, 2022 at 05:04:49PM +0200, Jonas Smedegaard wrote:
    I would find it problematic if the official way to install Debian *required* a non-DFSG image.

    would you also find it problematic if there were *two* official
    images, a "free one" (as we know it) and a "free one plus firmwares"?

    It would be nice to have both installers presented on the front page, so users
    can choose. I have no strong opinion on whether the "plus" installer would be called official or not.

    Same here. I've seconded Gunnar's proposal because it's the one which adds the option. However, referring to it as official is not something I'm fully comfortable at this point.

    I'm wondering how the d-i team feels about that (having the image with non-free bits called unofficial). Or whether it makes any sense at all, say, having such an essential component developed by fellow Debian members, using official Debian resources, and still being named 'unofficial', just for our convenience (?)

    Btw, thanks Steve and all involved on this front, I'm just a bit confused and appreciating the discussion.

    Bests,

    --
    Tiago

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEYsAXsSqWkZu7etRd2EdHrOS2gT0FAmMFS+4ACgkQ2EdHrOS2 gT1TiQ/8CDMGGlV9S2tr5QtTAkNM1ugTByG9XiqS+IGM9Zvlq1pSTz6CrzO8s/5K JuCRjUryi+Y/4yy5eY2EloMx9Nq51CY9cIGPIkD2gXqoCF4od/F3IrvjnWsIQqs0 WZ3RE5+kuggLbS+tuqvepRwvdPz36t62+IsyEm+mAo5BNaxq3CG1lMc4SVEzJJlf niM3LJy1G7uRzvucCUL3a6FrlhyxXBunrLqxM1UhaMg2aLLD65gfTH3N+ZBf/Q/W hCPzack12TjvijVsOGwUB6YISXjdEqHdcQlwCPpWV37Qc3DgCIvkIWBSjX93NWEV 5TvJrTIhCDkt+Xz+CP/ctF0BQKh+0l2sXJ6shZSBLKUrfgbyrxScyapMWWI1ba5M 8EzdlFm1DKR1Qn0Qw3gu7poLtLiNEbRTVuGDKwO4u7dRmkdMzXje7BUkGQ5zx7jK KJ423jTdipeLygDjp4sHTjx/VAQ3JBG+IhEJ4OKr2yhLyDTFJU77nnLLjihFBt+8 aaCyGEzf+FUDgKLIn6d0k1PDG6yClqH5mgJUPnPODXK+xNKL4DBmiz+r4jaVeWQu Qn+lN1iBVct82dJudrwqSs4fROJYd7vSwyrSe9FIxSTz5d71lrTZ9O4yCRoBYigv C+9qR9MGUhYHthzGwIRuXxSxYKqPCmHEXc7NRJ+6r1EhDumcPgo=
    =hJD9
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Paul Wise on Wed Aug 24 02:40:01 2022
    On Tue, Aug 23, 2022 at 11:47:34AM +0800, Paul Wise wrote:
    On Mon, 2022-08-22 at 12:32 -0500, Gunnar Wolf wrote:

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    Is the Debian Images team willing to continue to produce the images >containing only packages from main?

    I understood from the initial blog post they aren't willing to do that.

    I'd personally rather *not* do that, but if that'w what the project
    wants then it'll happen. The amount of extra work is not huge; we're
    already doing similar with the second set of non-free images
    anyway. I'm more interested in streamlining the choice for the sake of
    users, tbh.

    I wouldn't want Debian to vote for them to work on fully-free images if
    they still don't want to do that, so I'm not sure of the practicality
    of this proposal and so I would find it hard to rank it on the ballot.

    PS: this seems similar to but less detailed than my earlier proposal:

    https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org

    It's similar, agreed.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "When C++ is your hammer, everything looks like a thumb." -- Steven M. Haflich

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Bart Martens on Wed Aug 24 03:00:02 2022
    Hi Bart!

    On Tue, Aug 23, 2022 at 10:22:39PM +0200, Bart Martens wrote:
    On Mon, Aug 22, 2022 at 11:32:23AM -0500, Gunnar Wolf wrote:

    ...

    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.

    Do we need to recommend one above the other? I'd rather use some short >explanation per installer to help the user choose.

    Sure, we can add explanatory text here. But in terms of recommending
    one, *whether we say it explicitly or not* one will get more downloads
    and users than the other. Most likely the first one listed on the
    download page, just *because*.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "You can't barbecue lettuce!" -- Ellie Crane

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Philip Hands on Wed Aug 24 02:50:01 2022
    Hey Phil,

    Thanks for writing this, I think you're explaining this well. Except...!

    On Tue, Aug 23, 2022 at 12:51:10PM +0200, Philip Hands wrote:

    I would suggest that "abandoning the free software ideals of the Debian >project" is significantly mis-characterising what's going on here.

    Debian has always been pretty pragmatic about enabling the use of
    non-free software by our users, even while maintaining the strict
    separation of non-free from main.

    That is after-all what's kept the FSF mildly upset with us all these
    years. I don't suppose that including non-free-firmware on our ISOs
    will help with that, but it also doesn't really make things any worse.

    By not having the non-free-firmware on our media, we really do lose new >users, all the time.

    In particular, people that don't have any choice regarding their
    hardware often fail to install anything useful with our 100% pure ISOs.

    Those people are likely to have obtained some old hardware either as a
    gift or very cheaply, and do not have a budget for an RFY wifi stick.

    Debian with the non-free drivers often runs really well on such
    hardware, giving people that would otherwise be digitally excluded a
    viable option.

    We're talking about non-free **firmware, not non-free
    **drivers**. Sorry to play the pedant card here (and I know you know
    the difference!), but this is a common mistake and a lot of users
    really get the two confused. </rant>

    Encouraging such people to waste their efforts downloading an ISO that
    we know is quite likely to fail for them, while hiding the image we know
    they really need strikes me as a form of abuse.

    A lot of people will abandon the attempt after a single failure.

    Every one of these lost users is a potential Debian contributor. Driving
    them away is an act of self-harm, and does more damage to Free Software
    than could possibly be done by admitting the truth that for many
    (newbies in particular) the tainted ISOs are what people really want.

    There will be plenty of time to explain that their they should choose a >better wifi card if they get the chance once they have managed their
    first install, but if we continue to set up obstacles at the start then
    they won't even be around to listen.

    *nod* Exactly.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "We're the technical experts. We were hired so that management could
    ignore our recommendations and tell us how to do our jobs." -- Mike Andrews

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Simon Josefsson on Wed Aug 24 03:30:01 2022
    On Tue, 2022-08-23 at 19:57 +0200, Simon Josefsson wrote:

    My reading of that is that the FSF RYF program does not meet the needs
    of people who do not care about having a fully free software system.

    My reading of it was the opposite, that the FSF RYF program doesn't
    take into account the potential for reverse engineering of firmware and
    in doing so it encourages locking down processors currently running
    non-free firmware to ensure updates don't detrimentally affect users,
    but that inadvertently prevents libre firmware from being created,
    which Free Software advocates should agree is a suboptimal situation. 

    While I understand the tradeoff of blocking updates to non-free
    firmware, that also blocks libre firmware forever and I think that
    just isn't something that Free Software advocates should support.

    Personally I think the FSF RYF program should change their requirements
    to require non-free firmware on secondary processors be able to be
    upgraded, downgraded, modified, replaced or reverse engineered.
    I think that some freedoms are better than zero freedoms here.

    Alternatively, they could ban proprietary firmware and or hardware
    altogether, but I don't think that the hardware industry is quite at
    the point where this would be achievable nor help the situation.

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMFfS8ACgkQMRa6Xp/6 aaMyIhAAsfIf0UJGiAb1Wp7/iSrjan+pIr4Zs3CH8qV36Q+ESRJ/mSVe82U0kZyf GM2/K8JE8JTJTHAtSXEqpaCUOo0hbSETNVEsrHInik0CrJ7MsyaEVB0JXjWnBvQg 9Hq1u+BcM51gX46qXCW/xkyNUKSg14KP8VRMFt7kCtksb4TBYubcKhCgY5/wRjEt M/BEmeHndgdJpwn+qq+OhQaIcZD1RFFR9TC1eTcB9ud+43sntw4aNxR1PrLf67ji TUqd5r5s6QEs2I7w4leOPRzQZ3xWEipK8l0DERtAeBtxRIcLNNvR7HrKsmmS0VOC Wznm9wrkEj68hiqk4mYqVlu/7iovbXS51CzASJ2qqhSy3YeFiD43iBCydonrboZ8 kegFcusvJkb1vLf7fuzXjhPxqzkPp7cZnTAAQU9ucCToEqhgC65Ja8HgWh+X83dB to6crxFbglnoOtZetZvKxvdRy+4QblB/XCdhs+/1hS7/mJIMsUpfeGLAMUiv9o6W sjYx2HJZERrwKC2BEKWuWmTBatqIftR5qv7RfqidUtzN85ctK2vjZ8GI5kBbb1BX OKCi1lxVKaouFTkXDjAFg2qEH2ErP7Nz0WOjML+nKZtldZUjShS6kIWCrfmgc/jR t06+OER4ZZScJQXhmhKU1wUc0SMx19kgCWcrUVTtl2HGsKFMybs=
    =1l42
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Andrew M.A. Cater on Wed Aug 24 03:50:01 2022
    On Tue, 2022-08-23 at 17:47 +0000, Andrew M.A. Cater wrote:

    Now we're in a situation where non-free firmware is absolutely required for basic functionality - without the Intel non-free firmware, you can't run sound for a visually impaired user to install if you have some Intel laptops.

    A correction here; that Intel audio firmware is libre firmware with
    source code publicly available under a libre license.

    https://www.sofproject.org/

    The problem is that the vendors for most devices that include the Intel hardware require Intel signatures on the firmware binaries.

    Some devices (Intel based Chromebooks and UP boards) allow firmware
    binaries to be signed by a "community" private key that is public.

    In the future Intel may enable a scenario similar to Secure Boot's
    Machine Owner Key setup, where device owners can add new signing keys.

    https://github.com/thesofproject/sof/issues/5814

    In that situation, Debian could sign the audio firmware binaries
    instead and allow users to sign their own modified firmware binaries.

    The free installer is ideal for virtualisation only because it's
    sitting on top of a bunch of idealised hardware.

    It could also be useful for devices that run libre firmware, such as
    Raptor Computing's ppc64el devices, although Debian does not have
    packages of the libre firmware projects for these devices so in
    practice it isn't yet useful for those scenarios.

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMFgYQACgkQMRa6Xp/6 aaP4+hAAspIcwohxaarWr7/H7X7YWdrZF+FTAtBlcjgP6vcqtGuaC5zow5Jo0O2y 47FGeyNMrOJnwXlUnoE3M3Zw4vFi4Xv5uhQpN99D16Z8m1ZjmHy0b3199dKlXpWI tXB+o6Pn/T7qXSWPJ1VvKMIqYBrJE69iTG7sfBor17cqWAjffzlSh1zjX7QTRgkY IkDaytKOSLomSbGXWpV0EAue+LyCqE1ipHNowuv3caIfZWgXoGNNuE12WA4NKfr7 fJhx9G//CLJmu4XquAow4bViBPuN0LRd3VAJpd9Eklte1J8qtE1Gt15SOcx1fShl tPhFglKqJCgmvQQEz0flC/kZM3P/MkQCV89HjxaX03WLgHXWXG6ZyysyagKmKHSO /kYTZbIlvvydKDxyq2Aa40tH1fIuhie3wiGgHRP7s9p5TdyP1ggLxAxeMOp/tjt3 iXUECcoKlBT0m2cGOpMaStTHkXN0ztSZMkpDRFS1ciS2tgvbCx6xNuIua+Ye02IH 1CVJv6RZmuhc9OBgaEzFl+QZXFky5H6SlN9Xq57ZmXfmm0cIgZd3Zl6GOm2w1x4v o6pMZs5UaTw4aumgBgnu2+yUCGh7l/ut4kzELPkBGclZYR7pVucdtJ4b4ilXOTSl 8t5hoTlg5frmGC1nY/sPHlWJ39jlEsIPCH5v4PdgMNAtS5NqSHg=
    =lafB
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bastian Blank@21:1/5 to Bart Martens on Wed Aug 24 07:40:01 2022
    On Tue, Aug 23, 2022 at 11:20:09PM +0200, Bart Martens wrote:
    It would be nice to have both installers presented on the front page, so users
    can choose. I have no strong opinion on whether the "plus" installer would be called official or not.

    While we are at it, can you please propose a wording of this choice that
    a non-technical user can understand?

    Bastian

    --
    Bones: "The man's DEAD, Jim!"

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gard Spreemann@21:1/5 to Simon Josefsson on Wed Aug 24 09:00:01 2022
    On August 23, 2022 5:38:52 PM GMT+02:00, Simon Josefsson <simon@josefsson.org> wrote:
    I have no problem
    with builtin non-upgradeable firmware -- see >https://ryf.fsf.org/about/criteria for rationale.
    Hi!

    I've always had a really hard time understanding that rationale, despite not doubting the FSF's good intentions. Would you indulge in an exaggerated thought experiment to help me understand?

    Machine A is a pretty normal laptop. It runs whatever you want, but in order for it to be usable, it needs non-free firmware. Say CPU microcode and some GPU firmware blob. Said firmware is upgradable (the user has to initiate the upgrade, but may not be
    able to load any code they want).

    Machine B has two independent CPUs. CPU 1 is wonderfully free, and in itself requires no non-free firmware to run. However, CPU 2 is completely outside of the user's control. It runs 10 GB worth of proprietary OS. On top of that is a proprietary emulator
    for CPU 1. CPU 1 is hard-wired to pass any instruction it executes on to the proprietary OS running on CPU 2, which executes it in its proprietary emulator. But hey, all that stuff running on CPU 2 is completely non-upgradable, burned in at the factory
    only and physically unchangeable.

    A debate about whether A or B is more free can perhaps be nuanced. But does the FSF rationale really imply that machine A is non-free while machine B is free?

    Thanks for indulging me with this silly thought experiment.

    --
    Sent from my Android device with K-9 Mail. Please excuse my brevity.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Steve McIntyre on Wed Aug 24 10:00:01 2022
    Steve McIntyre <steve@einval.com> writes:

    ..
    On Tue, Aug 23, 2022 at 12:51:10PM +0200, Philip Hands wrote:
    Debian with the non-free drivers...

    We're talking about non-free **firmware, not non-free
    **drivers**. Sorry to play the pedant card here (and I know you know
    the difference!), but this is a common mistake and a lot of users
    really get the two confused. </rant>

    Oops! Sorry, that was a slip-of-the-keyboard -- I stand appropriately admonished. Thanks for the correction. :-)

    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmMF2N0ACgkQ0EujoAEl 1cCVpQ/+JIKNqM7XKZuMRswQEn2NhDLpZ7LgMMvs9VPaCVqsA/eyxoTBWq26J5AQ ZAoYLjfY6yoovs/kvvFQb0GzkcFqLvsdpZ0XpF9wQbBcToTnm/pHQrtaEiFYBd4p BzDRWt2NRQ8/L7Xn68yIZAiZSIFAA800gKkMEoXSukt5yygv2v1QJBNASIlDZqkq k6AHTkgXTB8Fh/GRRBkaRKNE8c6K3eucoQSTbx8qXS7E2B5j8XIoCgr5D2VnEhB1 5w2Lvvl8IssLp4m4RqAGqON2PNIe8omr0bjz5iIZLuevhVN1G3x7pcL3osS6wKh0 C1EKFHjOYrn6nHME+nmGLuYnNc/lJ5XdxN18y4HusdwkdpdRAz+UmCiu1aBSgeaj VnMUEgD6/byiltylTPsaCfQJzNIqe5Cq2hDpPDOSz1tDdUhh7qS05zRCnBb9n/Bj C95forjRUdT1OOgjlgqCv3gfI+KxJcySaNxsnPZEX5N/XWkcpVjKcbtV9xMIcfzb Gt7gdyyMANZneD7eEbP/wJymkzUFGi9Qht0NX4jycVy7dPk29YyuBIDIjjdOi/0h CG8pf5oMk7XIsYCIFx9BeB25bEoZInO8s8b7TrcTjmxogqORhawmHEb6cTzLoR8h LYx61iFreJYgao/
  • From Philip Hands@21:1/5 to Tiago Bortoletto Vaz on Wed Aug 24 10:20:01 2022
    Tiago Bortoletto Vaz <tiago@debian.org> writes:

    ...
    I'm wondering how the d-i team feels about that (having the image with non-free
    bits called unofficial). Or whether it makes any sense at all, say, having such
    an essential component developed by fellow Debian members, using official Debian resources, and still being named 'unofficial', just for our convenience (?)

    IIRC the "official" thing came in because someone produced a CD for a
    magazine cover for some early release (1.2 maybe?) that was actually
    slightly pre-release, because their publication date was set to coincide
    with the actual release, but there was a significant bug with that CD
    image, so we were forced to call the actual release CDs 1.2.1 (or
    whatever) in order to distinguish between the other (widely distributed,
    buggy) version and the actual release.

    I seem to remember that is was quite annoying at the time.

    Calling certain images "official" was an attempt to stop that sort of
    thing happening again.

    Does anyone still mass-produce CDs?

    I think we could simply forget about the term "official" now, and just
    let people download whatever's current, in whichever variant suits their purpose best ("free" vs. "free+firmware").

    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmMF3QkACgkQ0EujoAEl 1cDXChAAp/ffCEaovxYonXH4R/BsrMCsNqz/82aqqkKBl4etLN119+wsoxgFBHY6 +sLNt7K3ODzOKGJOPeyRfdkypkSBPXsAMEJBWcdLLeGJ+Z4fthQ0+lNpY5lq6Ai1 tvFQCeMiU1h7gzErAHM2dBA0ENVxHvJsZZNJCeOI2ZRJaxlqJhuNqAaK5fEFEvwX uYzKhi70RbNnexDCeUcuzKuhLjB5ipVVmKIMlF7QUr0nW5aPXe120MApFZpwAweG RJjG7Sz1HCHXEHh1P3YXtVnhHVfN6PpPcbgc/4ijeAfN7XeRKRHyk/TuTKXa/lzY aCliZvOuUiVkuAuTkg/gnpPpIsDeowcT7l+PXMp0BK8wbpM+zgSF+jiDp4+81CEZ 23dwSgqg7JQJ5QKqSE1L2zkkOmoSo5eykS/E/sE5fsCLDferiMU+imyNwnIPmTh3 8t3n91bFpWQpo6PWWeF1k5STOnirzjP/EI65ZZOBuu4fsClbdBv7RfDfBooVkirl Veb+RVjZIvRPJpBFA2MTZhzMNqfs+B7jJ0STmy9crowRIq+z9eKWlTvE1tRnr06z KWXZzTZWKqTJw5Zg4ZlIn+3SaOMKl4KlCGqNGBa1U/2Nw5K83JnHJhWRRvr77R2B 3cSZNbMbKnCAw94
  • From Bart Martens@21:1/5 to All on Wed Aug 24 10:20:01 2022
    Hello,

    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing packages from the non-free section of the Debian archive available for download alongside with the free media in a way that the user is informed before downloading which media are the free ones.

    =================================

    The text focuses on how we make the existing and any new non-free installers available to our users: less hidden. Other discussed aspects are intentionally left out of this text.

    Cheers,
    Bart


    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEZaEt9P4xrWusTXauM1X01jtYIcwFAmMF3YAACgkQM1X01jtY IcyjRw//fA7npcnaMLjHdx9LZkboosfvtEmZpXWmPdllOKaX4j+Rh1b1OK5IL2Yi Kk1Yi+R4yOFLDHK5GDALWe4t5IPCMINjZwbs06/1SbsGkbxNUEXgeCU9RZMLesu6 t8FtZIFtFa1nKV72hkUnE/nJbiH5sap87frYdePK1yl+Ynt6XK0/fQr+EL8hN9d0 r3ZRuPtm1tsXK8wMLbHRyavUCfEy3Fuia9nuZ4m9h9FDGmtA6wpwXmMzOr2kJl2L 5vKgNsfA4hRt1LwgsPg67znJ1mCZGOcu7sWWCyoAuZn4rRHmWjztfLsGvvA5zK6+ 3UePYwrEUHBXXID3t1S6eGPVhhIswCdT4YnAJMb+qdJk7SoNOouwGfTVSVvDXvBa YpXOTVVVJPqazwNF661rZYC9mBSloN4HzwjDvUcYWtDyu0VTGZ4wf2QlsU4TY41X 2eIoA389EMftLJ07n+GsCKQXFcp0tabed3Sibfe/KxJ+j2pALxf0shxJkySGuMIa sl4eRqwLYw3dDaNGrSE8vWz0n/3kG5tMdavoWg17bYM8KcidvMtIEbV7hA91sgaN /uiNbQQ+at9iXC8cigTk9s3pmccbrkTeivqwJQ2LD2RWuiUhlO7yJPfst7sNt0pL js1VBlkaKcYUTV6ApgVyBENsqcz1OGWHerZnFgSLGSnCi3skdxY=
    =2Zt0
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Thomas Goirand@21:1/5 to Simon Josefsson on Wed Aug 24 11:10:02 2022
    On 8/23/22 10:53, Simon Josefsson wrote:
    "Andrew M.A. Cater" <amacater@einval.com> writes:

    In practice, the free installer is useless on its own.

    That is not my experience -- I'm using Debian through its installer on a number of laptops, desktops and servers, and for my purposes it works
    fine and in general I have not needed to enable non-free/contrib for
    hardware support. You may have other purposes for which it does not
    work, but that doesn't make it useless for everyone, and there are alternatives available to solve your use-case (unofficial non-free
    installer) that doesn't entail the cost of abandoning the free software ideals of the Debian project.

    /Simon

    My recent experience with servers (10 and 25 Gbits/s dual port SFP+) is
    that you need firmware for network cards when running with:
    - Broadcom (bnx2 / bnx2x)
    - Qlogic
    - Intel (they partially work without the firmware-misc-nonfree package
    though)

    No additional package is needed for Mellanox cards. We very much prefer
    this brand (also for non-firmware related issues). However, we had
    troubles buying them this year (it went out of stock everywhere), and
    had to get QLogic and Intel (avoiding the horribly crashing Broadcom
    boards at all costs).

    Also, from the security point of view, and when running VMs on a public
    cloud, it's not reasonable to avoid updating the microcode for CPUs.

    Note: we don't use d-i for setting-up servers.

    Cheers,

    Thomas Goirand (zigo)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marc Haber@21:1/5 to Thomas Goirand on Wed Aug 24 11:30:01 2022
    On Wed, Aug 24, 2022 at 11:14:38AM +0200, Thomas Goirand wrote:
    For ecological reasons, we decided to try (whenever possible) to use servers as long as possible, as much as 15 years. In many cases that's possible. For example, old Dell PowerEdge R610 servers can be equipped with 2x newer CPUs (it's a 2 socket mother board), more RAM, and recent network boards (like Mellanox ConnectX4). All of that costs a fraction of the price of a new server. In many cases, this type of server can handle the workload very
    well. For example, it's ok for a Ceph MON machine, or a Swift proxy machine (as long as you need only CPU + network load, not storage, this kind of servers are fine).

    Many Enterprise users will strictly refuse to do such operations to
    hardware that is not yet written off, and of course after it has been
    written off as well.

    Ironically, those are the user groups that don't use Debian because we
    release too often and that you cannot buy commercial support from
    Debian.

    Greetings
    Marc

    -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Thomas Goirand@21:1/5 to Ansgar on Wed Aug 24 11:20:01 2022
    On 8/23/22 18:24, Ansgar wrote:
    I don't
    know much 10+ years hardware still in productive use...

    For ecological reasons, we decided to try (whenever possible) to use
    servers as long as possible, as much as 15 years. In many cases that's possible. For example, old Dell PowerEdge R610 servers can be equipped
    with 2x newer CPUs (it's a 2 socket mother board), more RAM, and recent
    network boards (like Mellanox ConnectX4). All of that costs a fraction
    of the price of a new server. In many cases, this type of server can
    handle the workload very well. For example, it's ok for a Ceph MON
    machine, or a Swift proxy machine (as long as you need only CPU +
    network load, not storage, this kind of servers are fine).

    Either way, such ancient hardware is probably not a good example for
    the firmware problem: it was a significantly smaller problem back then.

    I do not agree that these Dell servers do not need firmware though. When equipped with QLogic, Intel or Broadcom NICs, you *must* install the
    non-free firmware packages, as I wrote earlier (and the CPU microcode
    updates too...).

    Cheers,

    Thomas Goirand (zigo)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Wed Aug 24 19:20:01 2022
    Quoting Bart Martens (2022-08-24 10:12:48)
    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing packages from the non-free section of the Debian archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Seconded. Thanks for proposing this alternative, Bart.

    In my view, this alternative and the one proposed by Simon achieve
    technically the same but communicated vastly different - which to me is (unfortunately) a sensible reason to have them both on the ballot.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============U74144150708494602=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMGXG8ACgkQLHwxRsGg ASHTPg/+PHuGrB8OgObRRQZhoFV8RmrxK77PGO+mlVtlkCaaz7K88VZWIsrBdB7H 2EguDeEqEnrHsmleQ+KCu+vBcV8RkHdsoGqx9XELnNq3MxmQdiabqxZz4UpQqNCN kgrV4kVCnr1Yv3LgEU8WW5wrIjKh3a4ffwTBvxZwWOcrT0Z87wZzgkjBtkLxq9a+ Ky07ix0OejqB2Wxuh9LEuRMvYvP620tug9O5BI0eLGCqR1jIj8wP6yaIn/jmsVPq zg3vmQdriWquTVhBj8S9EzkrZ5RfRqevLLgV1Xp0ORP0Nmpw36QrfOuM+BkrL/uN eqHxagtiYR58aPoYPPlMKhE0WEzEmaKCHq1PhjKy05mdl8ePFag/gq/N3mSsEbDC UIX5L91iUzVQLda6vDV6GssrkjU+XSsqhpjLyw8Y5YrCqs6N+xAs2iqeWJKdywr7 +N4XcQ/JRIbwR5616bGuSFHHiQZWGqZyhKYoyYNpTGYed4kQaVwfmTUWvuMRI18i apULUZzE51UknSylq
  • From Ross Vandegrift@21:1/5 to Steve McIntyre on Wed Aug 24 20:40:01 2022
    Hi Steve,

    Thanks for this. I have two questions about your proposal. Apologies
    if these are answered elsewhere already.

    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    I'm proposing to change how we handle non-free firmware in
    Debian.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    First question:

    The substantial issue here that requires a GR is the treatment of non-free-firmware packages. The bits about installation media are kind
    of fallout, or implementation details. It might be better to leave
    those out of the GR, and just get crystal clear on the project's
    treatment of non-free firmware.

    Would you feel empowered to implement your changes if the GR passed
    without these implementation details? That is, if we voted to permit non-free-firmware packages on official installation media, live images,
    and default installations.



    Second question:

    It might be good to have rules spelling out what can go into
    non-free-firmware. This would help clarify how non-free-firmware isn't
    just non-free. Is this in place or in progress? Does the GR need to
    include it, or is there some other appropriate mechanism?


    Thanks,
    Ross

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Wed Aug 24 20:50:01 2022
    Gard Spreemann dijo [Wed, Aug 24, 2022 at 08:58:47AM +0200]:
    On August 23, 2022 5:38:52 PM GMT+02:00, Simon Josefsson <simon@josefsson.org> wrote:
    I have no problem
    with builtin non-upgradeable firmware -- see >https://ryf.fsf.org/about/criteria for rationale.
    Hi!

    I've always had a really hard time understanding that rationale,
    despite not doubting the FSF's good intentions. Would you indulge in
    an exaggerated thought experiment to help me understand?

    We are famous for our thought experiments, aren't we?

    Machine A is a pretty normal laptop. It runs whatever you want, but
    in order for it to be usable, it needs non-free firmware. Say CPU
    microcode and some GPU firmware blob. Said firmware is upgradable
    (the user has to initiate the upgrade, but may not be able to load
    any code they want).

    Machine B has two independent CPUs. CPU 1 is wonderfully free, and
    in itself requires no non-free firmware to run. However, CPU 2 is
    completely outside of the user's control. It runs 10 GB worth of
    proprietary OS. On top of that is a proprietary emulator for CPU
    1. CPU 1 is hard-wired to pass any instruction it executes on to the proprietary OS running on CPU 2, which executes it in its
    proprietary emulator. But hey, all that stuff running on CPU 2 is
    completely non-upgradable, burned in at the factory only and
    physically unchangeable.

    Are you talking about a situation comparable to Transmeta's chips?
    Well, yes, forgiving the fact that they died... But yes, it was a
    woefully closed chip with an absolutely closed firmware. But people
    regarded its freedom status as if it were a run-off-the-mill
    x86. (Besides, they employed Linus! Goodwill points!)

    We all draw our lines somewhere. We could expand on what CPU means¹; I
    wanted to refer also to an article that shows how little what we call
    "CPU" is in terms of the components on the single chip (and I don't
    even mean the "big" SoCs)... and the amount of black magic going
    around it.

    ¹ I like this article, and sometimes give it to my Operating Systems
    students: https://danluu.com/new-cpu-features/ "What's new in CPUs
    since the 80s?"

    Anyway... Off to get some lunch, as I sorely need it ;-)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bastian Blank@21:1/5 to Thomas Goirand on Wed Aug 24 20:30:01 2022
    Moin

    On Wed, Aug 24, 2022 at 11:05:21AM +0200, Thomas Goirand wrote:
    My recent experience with servers (10 and 25 Gbits/s dual port SFP+) is that you need firmware for network cards when running with:
    - Broadcom (bnx2 / bnx2x)
    - Qlogic
    - Intel (they partially work without the firmware-misc-nonfree package though)

    Sure, why add expensive flash if you got a pretty good operating system available to feed you everything in properly sized bites.

    No additional package is needed for Mellanox cards.

    The kernel drivers for newer Mellanox cards contain some support for
    firmware loading. I haven't checked what they feed, but they can.

    It comes all down to cost. Hardware is often bootstrapped with SPI
    flash, which is slow, much slower then the PCIe interface.

    But this gets off-topic.

    Bastian

    --
    Captain's Log, star date 21:34.5...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Wed Aug 24 20:40:01 2022
    Philip Hands dijo [Wed, Aug 24, 2022 at 10:10:49AM +0200]:
    IIRC the "official" thing came in because someone produced a CD for a magazine cover for some early release (1.2 maybe?) that was actually
    slightly pre-release,

    1.0, no less. With all the magic that 1.0 implies.

    because their publication date was set to coincide with the actual
    release, but there was a significant bug with that CD image, so we
    were forced to call the actual release CDs 1.2.1 (or whatever) in
    order to distinguish between the other (widely distributed, buggy)
    version and the actual release.

    I seem to remember that is was quite annoying at the time.

    https://en.wikipedia.org/wiki/Debian_version_history

    Debian 1.0 was never released, as a vendor accidentally shipped a
    development release with that version number. The package
    management system dpkg and its front-end dselect were developed
    and implemented on Debian in a previous release. A transition from
    the a.out binary format to the ELF binary format had already begun
    before the planned 1.0 release. The only supported architecture
    was Intel 80386 (i386).

    Calling certain images "official" was an attempt to stop that sort of
    thing happening again.

    Does anyone still mass-produce CDs?

    Of course, anybody still can take a snapshot of testing and distribute
    it on a (huge amount of) CDs, calling it "Official Debian 12 (Bugworm)".
    There is no magic in the "Official" word. Much less in 1996, where we
    didn't even have a trademark (or did we? I'm too young to know... Hey!
    I was looking for an opinion to flash that card! 😉)

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYwZvHgAKCRDi9jtDU/RZ iQIdAQC2ULwYVGRf1NFf3tefw/6GjHAv5c9+V/y0W6uzoD3juAEAuH/aqw3OL1Cb 81o0+X2yaWgPc/Uk8QOsvkQV3w2w9Q0=
    =Inb4
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Enrico Zini on Wed Aug 24 22:00:01 2022
    On Tue, Aug 23, 2022 at 04:39:27PM +0200, Enrico Zini wrote:
    On Mon, Aug 22, 2022 at 06:20:15PM +0200, Bart Martens wrote:

    With this GR proposal there would no longer be an installer without those non-free bits.

    Would you consider proposing an alternative ballot option,

    I just did. Thanks for encouraging me to do that.

    instead of
    repeatedly stating your dislike of this one?

    Debian's voting system allows anyone to propose a ballot option that has their position represented, and Steve explicitly invited it. This will
    lead to a ballot which represents the various positions in the project
    and allows anyone to rank them.

    This is a rather beautiful way to turn the conflict of different
    opinions into value, rather than hostility.


    Enrico

    --
    GPG key: 4096R/634F4BD1E7AD5568 2009-05-08 Enrico Zini <enrico@enricozini.org>



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stefano Zacchiroli@21:1/5 to Bart Martens on Wed Aug 24 22:10:01 2022
    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing packages from the non-free section of the Debian archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Seconded.

    Rationale: while it is not lost on me that in terms of usability having
    to choose between two options is a net loss for newcomers, I think this
    might be the only way to not run afoul of the Social Contract. Also, I
    think that on users that are even a little bit more knowledgeable and
    come to Debian for software freedom reasons, this choice might carry
    some real educational value (on how bad the consumer hardware market is
    these days, mostly).

    Thanks Bart!

    Cheers
    --
    Stefano Zacchiroli . zack@upsilon.cc . upsilon.cc/zack _. ^ ._
    Full professor of Computer Science o o o \/|V|\/ Télécom Paris, Polytechnic Institute of Paris o o o </> <\> Co-founder & CTO Software Heritage o o o o /\|^|/\
    Former Debian Project Leader & OSI Board Director '" V "'

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE8ZooXsFA+JEz681OfH5Cj5NBJ5kFAmMGhWsACgkQfH5Cj5NB J5kwRA//acKgPCWRdme3Pr2w/blQtLyCke4MtAcccxorvlJJfPvqBF8cuzSsY9Iq ZDyQxRHZt81pj4b/BK3/+MPLnUnEamP445w1CVBRn1dd42IqlQWoTcEFt5sjgytU QBAzY0HV7zE8Swxomo3bU2FwSLwkgPLtTVrWbX3xUcX7K4PaRrGOVtqLnMuMqSLP rGf2Gs7235WutNL+k7dJDsFMjYZSMIAhbkN8NiTLYEEjJ5Igpy31cwn5htiWslIj q0Ma+7r9GQOMAzx11bI+W1c8p4PP1HgX7H6nSsdklFMG9YAVALs5JP7bYxdJ7dl6 2+2rRLcdFmUGgnIdKK3XtvljehaOuKPT7vE4qGubLz8sdyQm5pWNWxcjtD2w+dxq JstYXXjyLT68oBNH6Pt2rw7DaardPuvtS4iVTGa97dUfZz1JHPCTtlbF3S1EAGeg lLVbUF3lGSU0yZ/m2PrqxHJOwnAYc19DJKOvn2yVMQpNbOCaykMXQ+Ub9d/L0AtM Jc6pfNaPonGUH9xRVgcIm7
  • From Bart Martens@21:1/5 to Jonas Smedegaard on Wed Aug 24 23:10:01 2022
    On Wed, Aug 24, 2022 at 07:14:26PM +0200, Jonas Smedegaard wrote:
    Quoting Bart Martens (2022-08-24 10:12:48)
    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Seconded. Thanks for proposing this alternative, Bart.

    In my view, this alternative and the one proposed by Simon achieve technically the same

    Really? My text is meant to cover the concerns of both Simon and Steve. I
    share Simon's concern on keeping free and non-free strictly separate, and I also share Steve's concern on users needing non-free firmware for smoothly installing Debian on their hardware.

    but communicated vastly different - which to me is
    (unfortunately) a sensible reason to have them both on the ballot.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Philip Hands on Thu Aug 25 03:10:02 2022
    On Wed, 2022-08-24 at 10:10 +0200, Philip Hands wrote:

    Does anyone still mass-produce CDs?

    I don't know about mass-produce, but surprisingly there are still
    Debian CD vendors in parts of the world where Internet is everywhere.

    https://www.debian.org/CD/vendors/

    I think we could simply forget about the term "official" now, and just
    let people download whatever's current, in whichever variant suits their purpose best ("free" vs. "free+firmware").

    Agreed, I tried to achieve that in my earlier proposal:

    https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMGy68ACgkQMRa6Xp/6 aaNemxAAqG8MdfbNB/FNqhdqCRWt2JT7aILoCiw372x0o+002v1tkJWfuzkUiJxx z9zA60qhxULDrJhlBZRlAmxPy9SUGgycWvBhWvG/dK0NUQ2NVp1qZVCwpumSz7/C RHsPSzs8cvgdOVcN1sB5Zcn4OTxT6WMDFD1hlLU4tMPBNQNQ/8z551473yGDTMRQ vDWmSJst8wYQ1YTDyGeHVGQt/DP1hxhzQ0MNMC5bVsIzeYNDDLULWXIS12OJJVOV 4N/RrGROt6+/641t7A7xLr+teNtGYUoIqkhxQAxN4hiHIZJK5LmWllI2xanh1t8u 1b+SubAO3Xb6bGTQZksszMXhNnu4izkiTo86g6ZnHJ++Igz/FhOpxpDiCgCTZArB WIRoi2D8v0gfZ9ma72DK7MG/BTzTGDMkGkbMiomWqXZV8UVMhN49YRPTsVg88L0l a88wez1wYgknfI51k3QgsfNO7yYc3KL52xWbBf9MVzGiPCw+Mt/ddVtCgynl+qhJ 71GAW18oN9VJEn0OJD9I/EBdQKl49IetP4ZfvrUwN7aX0TJTew9wPRvhhCLXtMx1 rFk3hXbAAx2duV8hxJ+HHEqO5DZbLX4vUyppkbfDXR0z+WAYu4ufJkv+BjITyrQr EMGxdvLD/wylPgJJYHhaSt6IJ5FYn02EvkLjdyP+wEMJySYlLaI=
    =jAcE
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Laura Arjona Reina@21:1/5 to All on Thu Aug 25 03:50:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------deoivzQIBrCLeWGkYr8Bdq6r
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGVsbG8gYWxsDQoNCkVsIDIyLzgvMjIgYSBsYXMgMTk6MzIsIEd1bm5hciBXb2xmIGVzY3Jp YmnDszoNCj4gSSBoZXJlYnkgcHJvcG9zZSB0aGUgZm9sbG93aW5nIGFsdGVybmF0aXZlIHRl eHQgdG8gU3RldmUncyBvcmlnaW5hbA0KPiBwcm9wb3NhbC4NCj4NCj4gSSdtIG9ubHkgc3Vn Z2VzdGluZyB0byBtb2RpZnkgdGhlIHRoaXJkIHBhcmFncmFwaCwgb2ZmZXJpbmcgdG8gcHJv ZHVjZQ0KPiB0d28gc2V0cyBvZiBpbWFnZXMgKGZ1bGx5LWZyZWUgYW5kIHdpdGgtbm9uLWZy ZWUtZmlybXdhcmUpLCBiZWluZyB0aGUNCj4gbGF0ZXIgbW9yZSBwcm9taW5lbnQuDQo+DQo+ ID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KPg0KPiBXZSB3aWxsIGluY2x1 ZGUgbm9uLWZyZWUgZmlybXdhcmUgcGFja2FnZXMgZnJvbSB0aGUNCj4gIm5vbi1mcmVlLWZp cm13YXJlIiBzZWN0aW9uIG9mIHRoZSBEZWJpYW4gYXJjaGl2ZSBvbiBvdXIgb2ZmaWNpYWwN Cj4gbWVkaWEgKGluc3RhbGxlciBpbWFnZXMgYW5kIGxpdmUgaW1hZ2VzKS4gVGhlIGluY2x1 ZGVkIGZpcm13YXJlDQo+IGJpbmFyaWVzIHdpbGwgKm5vcm1hbGx5KiBiZSBlbmFibGVkIGJ5 IGRlZmF1bHQgd2hlcmUgdGhlIHN5c3RlbQ0KPiBkZXRlcm1pbmVzIHRoYXQgdGhleSBhcmUg cmVxdWlyZWQsIGJ1dCB3aGVyZSBwb3NzaWJsZSB3ZSB3aWxsIGluY2x1ZGUNCj4gd2F5cyBm b3IgdXNlcnMgdG8gZGlzYWJsZSB0aGlzIGF0IGJvb3QgKGJvb3QgbWVudSBvcHRpb24sIGtl cm5lbA0KPiBjb21tYW5kIGxpbmUgZXRjLikuDQo+DQo+IFdoZW4gdGhlIGluc3RhbGxlci9s aXZlIHN5c3RlbSBpcyBydW5uaW5nIHdlIHdpbGwgcHJvdmlkZSBpbmZvcm1hdGlvbg0KPiB0 byB0aGUgdXNlciBhYm91dCB3aGF0IGZpcm13YXJlIGhhcyBiZWVuIGxvYWRlZCAoYm90aCBm cmVlIGFuZA0KPiBub24tZnJlZSksIGFuZCB3ZSB3aWxsIGFsc28gc3RvcmUgdGhhdCBpbmZv cm1hdGlvbiBvbiB0aGUgdGFyZ2V0DQo+IHN5c3RlbSBzdWNoIHRoYXQgdXNlcnMgd2lsbCBi ZSBhYmxlIHRvIGZpbmQgaXQgbGF0ZXIuIFRoZSB0YXJnZXQNCj4gc3lzdGVtIHdpbGwgKmFs c28qIGJlIGNvbmZpZ3VyZWQgdG8gdXNlIHRoZSBub24tZnJlZS1maXJtd2FyZQ0KPiBjb21w b25lbnQgYnkgZGVmYXVsdCBpbiB0aGUgYXB0IHNvdXJjZXMubGlzdCBmaWxlLiBPdXIgdXNl cnMgc2hvdWxkDQo+IHJlY2VpdmUgc2VjdXJpdHkgdXBkYXRlcyBhbmQgaW1wb3J0YW50IGZp eGVzIHRvIGZpcm13YXJlIGJpbmFyaWVzIGp1c3QNCj4gbGlrZSBhbnkgb3RoZXIgaW5zdGFs bGVkIHNvZnR3YXJlLg0KPg0KPiBXaGlsZSB3ZSB3aWxsIHB1Ymxpc2ggdGhlc2UgaW1hZ2Vz IGFzIG9mZmljaWFsIERlYmlhbiBtZWRpYSwgdGhleSB3aWxsDQo+ICpub3QqIHJlcGxhY2Ug dGhlIGN1cnJlbnQgbWVkaWEgc2V0cyB0aGF0IGRvIG5vdCBpbmNsdWRlIG5vbi1mcmVlDQo+ IGZpcm13YXJlIHBhY2thZ2VzLCBidXQgb2ZmZXJlZCBhbG9uZ3NpZGUuIEltYWdlcyB0aGF0 IGRvIGluY2x1ZGUNCj4gbm9uLWZyZWUgZmlybXdhcmUgd2lsbCBiZSBwcmVzZW50ZWQgbW9y ZSBwcm9taW5lbnRseSwgc28gdGhhdA0KPiBuZXdjb21lcnMgd2lsbCBmaW5kIHRoZW0gbW9y ZSBlYXNpbHk7IGZ1bGx5LWZyZWUgaW1hZ2VzIHdpbGwgbm90IGJlDQo+IGhpZGRlbiBhd2F5 OyB0aGV5IHdpbGwgYmUgbGlua2VkIGZyb20gdGhlIHNhbWUgcHJvamVjdCBwYWdlcywgYnV0 IHdpdGgNCj4gbGVzcyB2aXN1YWwgcHJpb3JpdHkuDQo+DQo+ID09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PQ0KDQpTZWNvbmRlZC4NCg0KVGhhbmtzIGV2ZXJ5Ym9keSB3b3Jr aW5nIGluIHNvbHZpbmcgdGhpcyBpc3N1ZS4NCg0KS2luZCByZWdhcmRzLA0KDQotLSANCkxh dXJhIEFyam9uYSBSZWluYQ0KaHR0cHM6Ly93aWtpLmRlYmlhbi5vcmcvTGF1cmFBcmpvbmEN
    Cg0K

    --------------deoivzQIBrCLeWGkYr8Bdq6r--

    -----BEGIN PGP SIGNATURE-----

    iQGzBAEBCgAdFiEEZin0RNRxg3W3fj8cTDhhvcxwa3QFAmMG1KsACgkQTDhhvcxw a3SbggwAgbTxB7p9BomznwBcLPHAbsZ1eqMi/g77Egr7+ORA8HTi22INGLVFGt8C 0OV0Ag8bcVajdWUw7H3VX/J6OVNzbiJGU+JuSrEbrgyKv80quQrWfGWJQxdE6Tkh Kv++nRLim85ZLpIFGiDxlavSb7Zt/JMNEL5VGRJ+0IhFORM5xJD7tVulCX2rlASl g1sco84LBRgYTeMOaVrbNdUWJFiM0TuJbpl4w1Kna9F4loY1gnwaqCaz1VMnrPMn b1DjoUULcv0ir8IDKiwXsf7aMZHG2FHq3y3Ggv4j8gBmF9wbPGU4kQrNa1oR9NaT x7P5NxPr4ZiByhZdYebFA3U7Y2oODwwZ2tBT7g8Vto+/dBylKKIEHTek/jIbUm7Y pdbQ+UOW9qlOIL8yPC/HtldU7gn0iv7yHFB29OsXADkfTCqQcyatZv3yFcdaqIW6 N9nDyCD8hU09QWw+8N1j/9m9IbRT7BKnLPEXi/pAK/V1xeks+wAhxk5w4S5doPBE
    XnoP9Krl
    =T6ub
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Thu Aug 25 06:50:01 2022
    Quoting Bart Martens (2022-08-24 23:08:12)
    On Wed, Aug 24, 2022 at 07:14:26PM +0200, Jonas Smedegaard wrote:
    Quoting Bart Martens (2022-08-24 10:12:48)
    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Seconded. Thanks for proposing this alternative, Bart.

    In my view, this alternative and the one proposed by Simon achieve technically the same

    Really? My text is meant to cover the concerns of both Simon and Steve. I share Simon's concern on keeping free and non-free strictly separate, and I also share Steve's concern on users needing non-free firmware for smoothly installing Debian on their hardware.

    Perhaps I impose too much wishful thinking into these proposals, but as
    I read it, Simons "we will not include any non-free software in Debian"
    do not exclude making a [non-free] installer image available for
    download alongside free media [e.g. by linking prominently from our main
    page to a non-free archive section].


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============&89094348086685981=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMG/RIACgkQLHwxRsGg ASF5GA//fNJTfecIOIXEFAl/UIhkcgByMvxvQ9xwTCqHTsdN1SBLwLxVZpBEzu3R iDQC2dGNqQzQYLmspcwZ9rA7+dy9pkCtHPblz/iMHF8FMEuzq12yNrg7IcSRJ1Y5 b/ByU3UnW5qor1AqwDcunMLU3qr8yefh419k9FD7AH51ZKpyHEQkETz7UAd6Y7fC iT9e9guSuUU3xvzfjYfm/aFFnLUH3b8PxIDU88aaMCdbVdtSfJfT1iBaa7eEHU59 yeP4DwwPpEPJAncTyY0ykhWkjquQkoDWafNQM36i3cQI3CUYxKYbrRCFc9iDCZrj IyIfCyWn7arkLVY/KC/ZrhYzzZX1cXWLzQWUKyK9+/2M0urr94Aev0aE5RIsbBL2 6VBCjCKVTVo+fmPXB76+Y48Q5T4/iJHxdes3VZymvFWRnGuKtteavzYlXHcLnvp6 DXx5Oqlj4ZIe3y2KRpdU3Yh152XOohPxb5Db+Ef9744yM7vbRLIWxF3ktppdK0sA bozuN2tYnVm0I/pj9
  • From Jonathan Carter (highvoltage)@21:1/5 to All on Thu Aug 25 13:00:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------XJIg5S4RxvjDgCzjndqnuVbq
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gMjAyMi8wOC8yMiAxOTozMiwgR3VubmFyIFdvbGYgd3JvdGU6DQo+ID09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQ0KPiANCj4gV2Ugd2lsbCBpbmNsdWRlIG5vbi1mcmVl IGZpcm13YXJlIHBhY2thZ2VzIGZyb20gdGhlDQo+ICJub24tZnJlZS1maXJtd2FyZSIgc2Vj dGlvbiBvZiB0aGUgRGViaWFuIGFyY2hpdmUgb24gb3VyIG9mZmljaWFsDQo+IG1lZGlhIChp bnN0YWxsZXIgaW1hZ2VzIGFuZCBsaXZlIGltYWdlcykuIFRoZSBpbmNsdWRlZCBmaXJtd2Fy ZQ0KPiBiaW5hcmllcyB3aWxsKm5vcm1hbGx5KiAgYmUgZW5hYmxlZCBieSBkZWZhdWx0IHdo ZXJlIHRoZSBzeXN0ZW0NCj4gZGV0ZXJtaW5lcyB0aGF0IHRoZXkgYXJlIHJlcXVpcmVkLCBi dXQgd2hlcmUgcG9zc2libGUgd2Ugd2lsbCBpbmNsdWRlDQo+IHdheXMgZm9yIHVzZXJzIHRv IGRpc2FibGUgdGhpcyBhdCBib290IChib290IG1lbnUgb3B0aW9uLCBrZXJuZWwNCj4gY29t bWFuZCBsaW5lIGV0Yy4pLg0KPiANCj4gV2hlbiB0aGUgaW5zdGFsbGVyL2xpdmUgc3lzdGVt IGlzIHJ1bm5pbmcgd2Ugd2lsbCBwcm92aWRlIGluZm9ybWF0aW9uDQo+IHRvIHRoZSB1c2Vy IGFib3V0IHdoYXQgZmlybXdhcmUgaGFzIGJlZW4gbG9hZGVkIChib3RoIGZyZWUgYW5kDQo+ IG5vbi1mcmVlKSwgYW5kIHdlIHdpbGwgYWxzbyBzdG9yZSB0aGF0IGluZm9ybWF0aW9uIG9u IHRoZSB0YXJnZXQNCj4gc3lzdGVtIHN1Y2ggdGhhdCB1c2VycyB3aWxsIGJlIGFibGUgdG8g ZmluZCBpdCBsYXRlci4gVGhlIHRhcmdldA0KPiBzeXN0ZW0gd2lsbCphbHNvKiAgYmUgY29u ZmlndXJlZCB0byB1c2UgdGhlIG5vbi1mcmVlLWZpcm13YXJlDQo+IGNvbXBvbmVudCBieSBk ZWZhdWx0IGluIHRoZSBhcHQgc291cmNlcy5saXN0IGZpbGUuIE91ciB1c2VycyBzaG91bGQN Cj4gcmVjZWl2ZSBzZWN1cml0eSB1cGRhdGVzIGFuZCBpbXBvcnRhbnQgZml4ZXMgdG8gZmly bXdhcmUgYmluYXJpZXMganVzdA0KPiBsaWtlIGFueSBvdGhlciBpbnN0YWxsZWQgc29mdHdh cmUuDQo+IA0KPiBXaGlsZSB3ZSB3aWxsIHB1Ymxpc2ggdGhlc2UgaW1hZ2VzIGFzIG9mZmlj aWFsIERlYmlhbiBtZWRpYSwgdGhleSB3aWxsDQo+ICpub3QqICByZXBsYWNlIHRoZSBjdXJy ZW50IG1lZGlhIHNldHMgdGhhdCBkbyBub3QgaW5jbHVkZSBub24tZnJlZQ0KPiBmaXJtd2Fy ZSBwYWNrYWdlcywgYnV0IG9mZmVyZWQgYWxvbmdzaWRlLiBJbWFnZXMgdGhhdCBkbyBpbmNs dWRlDQo+IG5vbi1mcmVlIGZpcm13YXJlIHdpbGwgYmUgcHJlc2VudGVkIG1vcmUgcHJvbWlu ZW50bHksIHNvIHRoYXQNCj4gbmV3Y29tZXJzIHdpbGwgZmluZCB0aGVtIG1vcmUgZWFzaWx5 OyBmdWxseS1mcmVlIGltYWdlcyB3aWxsIG5vdCBiZQ0KPiBoaWRkZW4gYXdheTsgdGhleSB3 aWxsIGJlIGxpbmtlZCBmcm9tIHRoZSBzYW1lIHByb2plY3QgcGFnZXMsIGJ1dCB3aXRoDQo+ IGxlc3MgdmlzdWFsIHByaW9yaXR5Lg0KPiANCj4gPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09DQoNClNlY29uZGVkLCBhbHRob3VnaCBJJ2QgZHJvcCB0aGUgImJ1dCB3aXRo IGxlc3MgdmlzdWFsIHByaW9yaXR5IiBiZWNhdXNlIA0KZGVwZW5kaW5nIG9uIHBhZ2UgZGVz aWduIGl0IG1pZ2h0IGJlIGdvb2QgaW4gc29tZSBjYXNlcyB0byBoYXZlIHRoZW0gDQplcXVh bGx5IHByb21pbmVudCBpbiBsaXN0cyAoc29tZSBtaWdodCBhc3N1bWUgdGhhdCB0aGlzIEdS IG1lYW5zIHRoYXQgDQp0aGUgZnJlZSBpbWFnZXMgL211c3QvIGFsd2F5cyBiZSBsZXNzIHBy b21pbmVudCB0aGFuIHRoZSBub24tZnJlZSBvbmVzIA0KaWYgdGhleSBhcmUgbGlzdGVkIGFu eXdoZXJlKS4NCg0KLUpvbmF0aGFuDQo=

    --------------XJIg5S4RxvjDgCzjndqnuVbq--

    -----BEGIN PGP SIGNATURE-----

    wsF5BAABCAAjFiEExyA8CpIGcL+U8AuxsB0acqyNyaEFAmMHVHoFAwAAAAAACgkQsB0acqyNyaFF KQ//eLCtsPfw958EwwaW6uzsVGmO7v+kAskrzTu7DGAB/QPGjex+dTW9K76TgXz9o2q5ifCcpo7j neAKGlh3kW3DXiWKaBN8UrXNWmK32mZ63k3E742AJ7AroP1kjuLv2cndp5L1l8wg9TniKnmA+Izi dyv2bWrRLhfM/p6tRFq5uFYy/qIhmQV/WYvjGyGePXz5jyY2q/EtInhJD03XfPeCToeqUimxqrxN lem/kDbRcMFL8CKoXhc2B9Qthyg7DFNUY9hFaXzJ+ZU1P0py1nl59LZiLKgOAYBwo6w5Xxh4xD1+ qjAjFg6plZigClM7Y3uuWC9JNdAW6qfp7rQA0Qrk5AVbFrUGsVCwMyAj53was/4fvmCcshIZh1sG 8VTEW1uCq1f2IQwcJKm7/lSv25YpoiLAB8InHjjrnattCA+kOzqaRKkFa+gwFT+92gD6k51ilC58 1beQYaaLYwgqkESCrPW/TbrRP1hhPB2oY/hIxjD2D6Y754e1eDrZ4BUaqN0sbInG8YpseuXwJeaG nNhmPFlm/jcneX2Da7/I9LboTisk+STvZTbXKUQgIju96IOkthGBHnVLLrrXghZ2O2ZaUW1XFCD2 +Wvc7+PcvtM0gvt0/xE/wujCZ2yLhJkGpnHHKBt1vCIXnEyi8cIb0stuvgXMb/yvP1H8ug+AZ09z /eI=
    =zT+a
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Bart Martens on Thu Aug 25 14:30:01 2022
    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing packages from the non-free section of the Debian archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    seconded, thanks, Bart.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Make earth cool again.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmMHabUACgkQCRq4Vgaa qhykog//f8P8EVJTT2MMq9iWObNJHhwr2pBGCRR1FX74yqlVOEAkmyExdg4106uu w8OW1aoCmIG8tMw+ocdOGiLw/XUAOPF/tACeuPs9BI9vzQ44+8VRwAoBHBAFwOh4 dgZ2YPqgNNPGXHsIkWANC1oxMh77Lfut7lV+s2IY098v2OfJVFnBqgSc5MdKAXDR vAvoCfCG4LZFJgNgHjwJuqaB9IkFS6GrTlGoxIxK+6rDXjCSG5D57W3727BxJy+T kEI5Xo5cG0Xn4P9ogSMIkoPYlgSTZUBNmG/yChaF2yEh0VQ1MZT2R3eFm5ibJWot hS1rInl7vxACKYo2INoW7aqKs+e+j8TTpOzEDmer8OnpPEN1g61/2CGyajCxAb2r v7qt4QidsfwrVP5j1z78dLOB5a7By2Ndh6CrNjkT/mOgmun+Kuqk4tRstHok2wQ0 oQOuSEEPdtXaxIK+SlJ5BmBVlFF7qiLxJ6a5XdyBYFZQ4761e5r7Ybo1UaJWcoaT YOUp1AHJOgKrdGh9MpKPqbgD7yrCx/5ckgeU/nA4rjyDqi3pSijCGOe9Q1hggqhL CcN89i7A6WdK1EbwHAiNFK5T6ankM0BFkHwbC2nA8MLVKKsAwo/vjtQCCgwluZxI w5XMnAd6OroRaOy02w2+oKzz
  • From Ross Vandegrift@21:1/5 to Bart Martens on Thu Aug 25 17:20:01 2022
    Hi Bart,

    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    The Debian project is permitted to make distribution media (installer images and live images) containing packages from the non-free section of the Debian archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    Do you mean that official or unofficial media can contain packages from non-free?

    If you mean official media, this is more radical than Steve's proposal.
    It would permit arbitrary non-free packages as long as users were
    informed.

    If you mean unofficial media - that's the status quo. In which case,
    this option is the same as Simon's and none of the above.

    Ross

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew M.A. Cater@21:1/5 to Ross Vandegrift on Thu Aug 25 20:40:02 2022
    On Thu, Aug 25, 2022 at 08:18:55AM -0700, Ross Vandegrift wrote:
    Hi Bart,

    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    Do you mean that official or unofficial media can contain packages from non-free?

    If you mean official media, this is more radical than Steve's proposal.
    It would permit arbitrary non-free packages as long as users were
    informed.

    If you mean unofficial media - that's the status quo. In which case,
    this option is the same as Simon's and none of the above.

    Ross


    /packages from the non-free *firmware* section/

    This is _only_ firmware and not arbitrary non-free packages. It's not drivers per se.

    The "official" and "unofficial" media are currently prepared by the same
    team on the same machines. The "unofficial" media contains non-free firmware (and drivers of all sorts, potentially, that go wider than firmware).

    IMHO, they're both official - one is free + free firmware, one is free+non-free firmware.

    Steve's proposal is strictly limited to firmware, here, and there is a
    separate non-free firmware portion of the archive that was created at
    Debconf22 in Pristina.

    All best, as ever,

    Andy Cater

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Phil Morrell@21:1/5 to Simon Josefsson on Thu Aug 25 22:00:01 2022
    On Tue, Aug 23, 2022 at 07:57:36PM +0200, Simon Josefsson wrote:
    Phil Morrell <debian@emorrp1.name> writes:

    Just be aware that this rationale can have the opposite of its intended effect in the long term:

    https://ariadne.space/2022/01/22/the-fsfs-relationship-with-firmware-is-harmful-to-free-software-users/

    My reading of that is that the FSF RYF program does not meet the needs
    of people who do not care about having a fully free software system. I
    don't see how that is unexpected.

    I'm not following the double negative here. I specifically mentioned
    Freedom 1 (study & change) because RYF's encouragement of secondary
    processors explictly blocks this. As pabs says, reverse engineering
    efforts described in the link I shared means that one can *only* achieve
    a fully free software system by rejecting the use of secondary
    processors.

    I find that if I assume the DSC points are unordered, and numbered only
    for reference, then there's sentences in there that support the offering
    of official images including firmware by default, even while considering the iso as a Debian component.

    Interesting, can you explain quoting the text supporting that?

    Apologies for the bait and switch, but I've been trying to word this for
    a while - I don't think it's possible (for me) to convey the nuance in
    async text, but I'd be happy to jump on Jitsi/Mumble to achieve shared understanding. Perhaps these points are enough for you to get the gist:

    Our priorities are our users and free software
    Steve's Debconf22 talk points out both are *equally* important.
    Therefore it could be acceptable to provide a compromise to get our
    users started towards their free software endgame.

    We encourage CD manufacturers to .. distribute the packages
    Treat "CD manufacturers" as "Debian Images Team" and you get the
    conclusion that there's nothing wrong with Official Debian media
    containing nonfree bits inside.

    We will support people who ... use ... non-free works on Debian.
    We will never make the system require the use of a non-free component.
    Emphasis on the *we* here, Debian is not adding any intermediary
    blockers between the user and their hardware. The hardware in question
    is either 0% functional from cold boot, or is *already* running non-free
    code as soon as it receives power that you simply can't interact with
    without loading the firmware.

    This GR isn't about hardware feature enhancement or optional user
    experience peripherals, this is about *core functionality* that d-i
    needs to support before the user can even express any libre choices.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYwfSewAKCRDbymUJHySO bC1KAQDhiNY3/JJ9sz4oG5IGNuA07r9mD0aQLtPXAJjX0cNWkQEA4h0/tVGYt1tG WVh5BznK4qou03tvkmSqfVboi6j0oA4=
    =6pDm
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Ross Vandegrift on Fri Aug 26 00:10:01 2022
    Hey Ross!

    On Wed, Aug 24, 2022 at 11:36:00AM -0700, Ross Vandegrift wrote:

    Thanks for this. I have two questions about your proposal. Apologies
    if these are answered elsewhere already.

    No worries.

    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    I'm proposing to change how we handle non-free firmware in
    Debian.

    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    First question:

    The substantial issue here that requires a GR is the treatment of >non-free-firmware packages. The bits about installation media are kind
    of fallout, or implementation details. It might be better to leave
    those out of the GR, and just get crystal clear on the project's
    treatment of non-free firmware.

    I'm not sure I agree with you here.

    We already have firmware packages in the non-free component of the
    archive. Ansgar's work on dak has added a new non-free-firmware
    component, and the plan is that we'll start moving some packages
    across there soon. For a long time we've said (*handwave*) that
    non-free is not really part of Debian, so we're not compromising our principles.

    I don't particularly care about the details of that piece right here
    and now. The issue I want solved here in the GR is *precisely* what
    we're going to do about Debian-produced media:

    * installation media

    * live images (both traditional "live" images for x86, and the newer
    raspi images)

    * (*potentially*) cloud and container images; they're not likely to
    use non-free firmware, and I hope it stays that way. But you never
    know...

    We currently have two sets of installation media and live images:

    * "official" ones without anything from non-free, that are entitely
    free and could live in Debian main, *but* are not useful for use
    and/or installation on lots of current machines these days.

    * "unofficial" ones which include firmware packages from non-free,
    but no other non-free packages. These are more useful for many
    people, but are not fully DFSG-free. The raspi images live in this
    area, as most of the raspi hardware depends on a non-free primary
    bootloader that can't love in Debian main.

    with the latter set not as well publicised. That's not a great
    story. So I'm describing exactly what we want to change in our images
    such that:

    * it's clear we'll be adding non-free-firmware
    * we're explaining how it will be used, and how users can control
    that

    That may sound like implementation details to you, but to me those are
    the important parts of the change. I'd rather not be in this position,
    and I have a lot of sympathy for the people pushing back on the idea
    of maybe compromising our Freeness. This is why I want to spell it out
    clearly.

    Would you feel empowered to implement your changes if the GR passed
    without these implementation details? That is, if we voted to permit >non-free-firmware packages on official installation media, live images,
    and default installations.

    I'm not sure that really makes much difference here, I'll be honest?

    Second question:

    It might be good to have rules spelling out what can go into >non-free-firmware. This would help clarify how non-free-firmware isn't
    just non-free. Is this in place or in progress? Does the GR need to
    include it, or is there some other appropriate mechanism?

    A few of us have spoken about it, but it's not something that we've
    laid down in stone yet. We're looking at packages that install only
    non-free binary blobs in /lib/firmware, containing only firmware /
    software that executes separately to the control of the main OS. So,
    that includes things like firmware for wifi hardware *and* CPU
    microcode, but *not* (e.g.) the non-free Nvidia drivers that integrate
    with the OS kernel.

    I'm less worried about this side - AFAICS ftpmaster and the the people
    already packaging these things already have a reasonable idea on what
    goes where.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com “Why do people find DNS so difficult? It’s just cache invalidation and
    naming things.”
    -– Jeff Waugh (https://twitter.com/jdub)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Bart Martens on Fri Aug 26 00:10:01 2022
    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    Hello,

    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images >and live images) containing packages from the non-free section of the Debian >archive available for download alongside with the free media in a way that the >user is informed before downloading which media are the free ones.

    =================================

    Seconded!

    Thanks for this, I'm happy to see sensible alternatives for the GR!

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "I've only once written 'SQL is my bitch' in a comment. But that code
    is in use on a military site..." -- Simon Booth

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMH8cEACgkQWHl5VzRC aE5FvQ/9EGr5B2zVrmrZesH32IQMCdCtGBC8muB2HFBB+gueg43Om+JlGd+edxKm chKU32KJWx1uUY+7qy3VzAnKyuJUrsZxoBuTi05G7Lujw+UqydUhQexFYD9t8HJu sTjhGKjTxDNjSuxR2d4N6FBakuNbG3RmodvBIbaM1OrX4Zxms+CoNma6vSWwsyDc 0qz1i1lABSYccPlLfkSXmJy88+QfjYjL3R84+spFRCosfyVCc1v1xh+cxAjaaRhi Kx8aTQfAIZj971/nEcWlefivvBcCqt3sG8kJprdasSY6pFv6RhWRWitIrQ22GSIU 4/DZC2rsU/qGYpMPuZSo9alBPfXI4qUE6jeZ32BRH4l1dUH2YbvjpdYBP0hXR5OI HyNQlWEVnmsV3eDw81dZUJ6aPdv1qEg3uu+c8y1G8FpRcJrM28e94spa8ZuN2W2j 7dFnsgz0f9BueV8zpWAz9OoT2JgVZSOi8+RtDp7lxgRkxotuOeL+Jos5sCXqymAO AnPZ8onzdfP9n9jIpOpXoi5EfEz7NOPIEFY2V3psRttQzQXTXzUhM76l6HD3pQlI ZNcgpaHuNyRHrpRxU0KRPupReLchqnah7CowReKLEPkGr9aB9kDSc67QdRK5UOcy 2xskZvkvrvTuO/7aknGhDbjIvk6NcgPNv1ld3oao4FS+L0A3sQA=
    =q
  • From Steve McIntyre@21:1/5 to Paul Wise on Fri Aug 26 00:30:01 2022
    On Wed, Aug 24, 2022 at 09:40:24AM +0800, Paul Wise wrote:

    The problem is that the vendors for most devices that include the Intel >hardware require Intel signatures on the firmware binaries.

    Some devices (Intel based Chromebooks and UP boards) allow firmware
    binaries to be signed by a "community" private key that is public.

    In the future Intel may enable a scenario similar to Secure Boot's
    Machine Owner Key setup, where device owners can add new signing keys.

    https://github.com/thesofproject/sof/issues/5814

    In that situation, Debian could sign the audio firmware binaries
    instead and allow users to sign their own modified firmware binaries.

    Yup, that would be a lovely big win!

    The free installer is ideal for virtualisation only because it's
    sitting on top of a bunch of idealised hardware.

    It could also be useful for devices that run libre firmware, such as
    Raptor Computing's ppc64el devices, although Debian does not have
    packages of the libre firmware projects for these devices so in
    practice it isn't yet useful for those scenarios.

    Right.

    I'd prefer us not to get dragged down the "users just need to pick the
    right hardware" path. That way potentially lies a (slightly snobbish?)
    "you chose wrong, try harder" message that will just push users (and
    eventually developers) to other distros.

    There are always going to be machines that we can't/won't be able to
    support, but when the vast majority of current laptops don't function
    sensibly without non-free firmware I think we have to adapt to reality
    in supporting our users.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com Welcome my son, welcome to the machine.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Tiago Bortoletto Vaz on Fri Aug 26 00:20:01 2022
    On Tue, Aug 23, 2022 at 05:51:46PM -0400, Tiago Bortoletto Vaz wrote:
    On Tue, Aug 23, 2022 at 11:20:09PM +0200, Bart Martens wrote:
    On Tue, Aug 23, 2022 at 03:33:27PM +0000, Holger Levsen wrote:
    On Tue, Aug 23, 2022 at 05:04:49PM +0200, Jonas Smedegaard wrote:
    I would find it problematic if the official way to install Debian
    *required* a non-DFSG image.

    would you also find it problematic if there were *two* official
    images, a "free one" (as we know it) and a "free one plus firmwares"?

    It would be nice to have both installers presented on the front page, so users
    can choose. I have no strong opinion on whether the "plus" installer would be
    called official or not.

    Same here. I've seconded Gunnar's proposal because it's the one which adds the >option. However, referring to it as official is not something I'm fully >comfortable at this point.

    ACK.

    I'm wondering how the d-i team feels about that (having the image with non-free
    bits called unofficial). Or whether it makes any sense at all, say, having such
    an essential component developed by fellow Debian members, using official >Debian resources, and still being named 'unofficial', just for our convenience (?)

    Well, when we started making the "firmware-included" images it seemed
    like a clear way to separate them from the *official* free
    images. It's a bit like having non-free included on ftp.debian.org -
    we push things to a slightly different area. We already had the
    "unofficial" area on cdimage.debian.org as a catch-all for other
    media, so I just added a new unofficial/non-free tree there.

    Btw, thanks Steve and all involved on this front, I'm just a bit confused and >appreciating the discussion.

    Cool. :-)

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "...In the UNIX world, people tend to interpret `non-technical user'
    as meaning someone who's only ever written one device driver." -- Daniel Pead

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Steve McIntyre on Fri Aug 26 04:00:01 2022
    On Thu, 2022-08-25 at 23:21 +0100, Steve McIntyre wrote:
    On Wed, Aug 24, 2022 at 09:40:24AM +0800, Paul Wise wrote:
    In the future Intel may enable a scenario similar to Secure Boot's
    Machine Owner Key setup, where device owners can add new signing keys.

    https://github.com/thesofproject/sof/issues/5814

    In that situation, Debian could sign the audio firmware binaries
    instead and allow users to sign their own modified firmware binaries.

    Yup, that would be a lovely big win!

    Unfortunately it seems like they were leaning towards the key enrolment interface being in the UEFI menus, I asked them to allow shim too tho.

    I'd prefer us not to get dragged down the "users just need to pick the
    right hardware" path. That way potentially lies a (slightly snobbish?)
    "you chose wrong, try harder" message that will just push users (and eventually developers) to other distros.

    Agreed. We could still promote hardware that works best with Debian
    somehow, for example on mobile you can run mainline Linux on some
    phones but the initial setup procedure is so painful that promoting
    Librem and PinePhone might be better despite their cost/quality issues.

    https://drewdevault.com/2022/08/25/pmOS-on-xiaomi-poco-f1.html

    There are always going to be machines that we can't/won't be able to
    support, but when the vast majority of current laptops don't function sensibly without non-free firmware I think we have to adapt to reality
    in supporting our users.

    Agreed. We could do that with "for most laptops, click here" links that
    lead to a non-free image section with something like "Please note this
    image contains and installs proprietary firmware that is needed to make
    parts of the hardware work and will likely work but is not FOSS and so
    Debian cannot fix any issues with it ourselves, we have to rely on the
    firmware vendor to fix any issues reported". For the free platforms we
    could have "for Raptor Computing, click here" go to the free images.

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMIKM0ACgkQMRa6Xp/6 aaMuJw//dYV2PLpX4tI7WsbVYdOu0Re3x9Jf8VIh8WYKsegSz3/b8Q0cgxnc4gut 9m1Lp+YAlJdyQoFq9qIEakGsE+oefXYs9Mg5jktnS7boo8dCW9MfoNn1jcsK37UX fFTUn1ExCVVbSc7KW3xfoeSiPrYAerVwV/Rub14psa7uYJnCy9geelCmGuVNO8Jb XIDduRTVGZLNiqFdz44v6Nz8sAwAJUQlJRJDykBMT67CSdIhuobHlT87lMc2yS+D Lhl5x6MCMN631c3N3e00oJUimEVF+k90eLMavmPDzU73g03wUmZR8wHxJs9RFO31 bY90UjnyO2mNJP8Cy1xD9cw0lIbfbarpcq+HUooK8NZjuCQEMYnz6RJbjpguV9yG iFu49KFj68sCkRmgGon2Y9xev0t5NU8GpdPqpe/9Cw0sMeTIXvDUwhaiqZrv3db8 3qG4klOKoqfpOY5TD5/GnrfPhUPVXsUioOl25Kdbd5RB6UPpnLs+WvQphQwrlnNY zVgq8XjK4ZA1yDF/F5wJLLd5LysoDMaUbMz6f9Iwu9lLXiVL8kBjx5icfTEBxYgJ fA/hCe4e7IozMP+54F71BGBM3f0H706AzKS0o7kwLzqbvx5F3FLeiXKXgxnM9vGz lDTOpFnS91FaiIRJdUkWVP0MkTVPB44Y2d/1Brpgt1dXLZuwZk4=
    =0Q5Q
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ross Vandegrift@21:1/5 to Andrew M.A. Cater on Fri Aug 26 07:00:01 2022
    On Thu, Aug 25, 2022 at 06:36:36PM +0000, Andrew M.A. Cater wrote:
    On Thu, Aug 25, 2022 at 08:18:55AM -0700, Ross Vandegrift wrote:
    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    Do you mean that official or unofficial media can contain packages from non-free?

    If you mean official media, this is more radical than Steve's proposal.
    It would permit arbitrary non-free packages as long as users were
    informed.

    If you mean unofficial media - that's the status quo. In which case,
    this option is the same as Simon's and none of the above.

    Ross


    /packages from the non-free *firmware* section/

    This is _only_ firmware and not arbitrary non-free packages. It's not drivers per se.

    Sorry if I'm missing something here, but Bart's proposal doesn't mention the non-free-firmware section - only non-free. That's why I asked.

    Am I being dense?

    Ross

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ross Vandegrift@21:1/5 to Steve McIntyre on Fri Aug 26 06:50:01 2022
    On Thu, Aug 25, 2022 at 11:00:35PM +0100, Steve McIntyre wrote:
    That may sound like implementation details to you, but to me those are
    the important parts of the change. I'd rather not be in this position,
    and I have a lot of sympathy for the people pushing back on the idea
    of maybe compromising our Freeness. This is why I want to spell it out clearly.

    Got it, and fair enough! Thanks for explaining.

    [snip]
    Second question:

    It might be good to have rules spelling out what can go into >non-free-firmware. This would help clarify how non-free-firmware isn't >just non-free. Is this in place or in progress? Does the GR need to >include it, or is there some other appropriate mechanism?

    A few of us have spoken about it, but it's not something that we've
    laid down in stone yet. We're looking at packages that install only
    non-free binary blobs in /lib/firmware, containing only firmware /
    software that executes separately to the control of the main OS. So,
    that includes things like firmware for wifi hardware *and* CPU
    microcode, but *not* (e.g.) the non-free Nvidia drivers that integrate
    with the OS kernel.

    I'm less worried about this side - AFAICS ftpmaster and the the people already packaging these things already have a reasonable idea on what
    goes where.

    Totally agreed, I expect everyone to make reasonable decisions about it.

    Sometimes writing down these sorts of expectations helps avoid confusion and ease peoples' minds. Your proposal already makes me feel okay about the freeness tradeoffs. But I can imagine someone who might need to (or benefit from) understand the limits of non-free-firmware to feel okay about the proposal.

    Just to be clear, I don't think it's essential for the GR.

    Thanks again,
    Ross

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Fri Aug 26 07:10:01 2022
    Quoting Jonas Smedegaard (2022-08-24 19:14:26)
    Quoting Bart Martens (2022-08-24 10:12:48)
    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Seconded. Thanks for proposing this alternative, Bart.

    I hereby withdraw my second for the above proposal.

    Reason is that I now realize that it lacks a detail I find crucial:
    Explicitly spelling out whether or not images containing non-free bits
    are official part of Debian or not. Personally I find it obvious that
    anything that would not be allowed into main also would not be treated
    as official part of Debian, but I have learned that others in the team
    find it equally natural to apply a different reasoning, and I find the distinction crucial.

    Sorry for my earlier sloppy endorsement.

    If Bart chose to extend the proposal to include that such media
    containing non-free bits (although permitted "alongside with the free
    media) would *not* be considered official part of Debian, then I would
    endorse the amended proposal.

    Oh, and since some has discussed abolishing the word "official", I am
    quite open to using a different word instead, that covers the same as I
    have meant all along in this thread: (not products released by others
    than the Debian organisation as happened decades ago, but) products
    released by the Debian organisation itself *and* considered part of our
    main product "Debian", i.e. in the spirit of our "main" archive section.

    I feel my abilities to express myself sharply is weak. That's the
    reason I don't put together a proposal on my own. I appreciate *all*
    proposals put forward - I recognize quite some work has been put into
    all of them - thanks to all contributors!


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============06815435321631099=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMIVLYACgkQLHwxRsGg ASFuYxAAhzf12YaYX0EX0nIxUJPY+o0Jme430FSDYHKCTdo74lJVbSgzL0C2OAH5 Kd34e6wPXpPrJKD0At9S5VHceHafnUR0rRd8lvnVfmqTuRW1P9gHYHtAmomgIECH vJXRgHXkB7k+rqUy8IQFLLagkDCfor0dUN2GnFo/QR9RBb0QIiUdJYA/AA93SOWz Al1GZdmwE+Ed834XCabIx3BpWUSjLrTDaBCaST2HCfeyhinhjn/kW1P/NonQFulL 56nwZ26n2223P/B69+72oBj+JhSmMhfpSWJPFSHlFuYnLFiKOP6lo6spGz29Nppy Et7FCGf10tSlaE6mgcHow8TMNJ01eN7sKzJwn+drgrS6Keuaj4guvu0gT3C7qk/n /BD1MBkAvzboFnie1mfoGxzIVYRaWD/Fi9YWpYV60CPIenI0+oc87YFBTGCVAAMS QxqTgLubs5Q/tA/e/3RYpIFRNS2mC0VxAu0+kE5XKlzGvGi+tiSbKbL2nXJaQpPB M/+Gv5WC8e1e5xn6P
  • From Jonas Smedegaard@21:1/5 to All on Fri Aug 26 07:20:01 2022
    Quoting Steve McIntyre (2022-08-26 00:21:20)
    On Wed, Aug 24, 2022 at 09:40:24AM +0800, Paul Wise wrote:

    The problem is that the vendors for most devices that include the Intel >hardware require Intel signatures on the firmware binaries.

    Some devices (Intel based Chromebooks and UP boards) allow firmware >binaries to be signed by a "community" private key that is public.

    In the future Intel may enable a scenario similar to Secure Boot's
    Machine Owner Key setup, where device owners can add new signing keys.

    https://github.com/thesofproject/sof/issues/5814

    In that situation, Debian could sign the audio firmware binaries
    instead and allow users to sign their own modified firmware binaries.

    Yup, that would be a lovely big win!

    The free installer is ideal for virtualisation only because it's
    sitting on top of a bunch of idealised hardware.

    It could also be useful for devices that run libre firmware, such as
    Raptor Computing's ppc64el devices, although Debian does not have
    packages of the libre firmware projects for these devices so in
    practice it isn't yet useful for those scenarios.

    Right.

    I'd prefer us not to get dragged down the "users just need to pick the
    right hardware" path. That way potentially lies a (slightly snobbish?)
    "you chose wrong, try harder" message that will just push users (and eventually developers) to other distros.

    There are always going to be machines that we can't/won't be able to
    support, but when the vast majority of current laptops don't function sensibly without non-free firmware I think we have to adapt to reality
    in supporting our users.

    I agree with the above.

    (I don't recognize anyone dragging us down said path in this thread,
    but I could perhaps be perceived like that, which is the reason I
    respond here)

    I see two ways that we can "adapt to reality", however:

    a) We point our users up front to non-free components they likely need

    b) We give users up front what they likely need

    Problem I see in the second approach is that we then effectively make it *harder* for those wanting to prioritize Free Software to do so, which
    in my opinion goes against a core principle of our community.

    Let's promote non-free installer more aggressively, but please let's
    explicitly label it as not part of the product we claim is 100% free.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============10761032057869870=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMIVqcACgkQLHwxRsGg ASFkbA//RZ0XOgsJfmGeJh3iPTCE1R9ioXFslgwU/JDGBfIqAdVPAGeBalm+Mu5K ix6T5EhbcHpjuj2sdGFljx0rWiWQOK46uzQoO/CJS7BKlV8v5K4pEYpZ4Rd/2dbO 2fujiC5MixhaxVEfOtmK8Vm+YgtV5WI4dR+yOVrUfMMNGIsaoCWvVt8rxnFtvb4H wVRa1uo9KRR3bkMd8NRv5bxgtAMYl9YKpePDRhzqhHbprx4wg5ZqY5+69GajlRjh //LapZIvrSqVlZbZ7uvdnJEX/CbA9OJE3DGqUUrurzKplfh8a8pAJTUfimvMfQn7 CrVLipUr9d+ofc0p5cR8IHJ9puPr1cvm8vWVko2jCN/jf3xQPZzyqEBUcYLuyIk+ /W3GdOix8xDlMhxGs5ktltXtxG0gMxJSvBddCPigEKuPha7ofwoZkUrF5tz4v6fE H/FU1dcFYNl4na6IDjgn4UjIFvXvZYpugv7fHhSMMKXcTKZnQrR2mV0ih6ox7RKO Bbao47xj6zr8Ok12j
  • From Bart Martens@21:1/5 to Jonas Smedegaard on Fri Aug 26 10:10:01 2022
    On Fri, Aug 26, 2022 at 07:06:01AM +0200, Jonas Smedegaard wrote:
    [...] it lacks a detail I find crucial:
    Explicitly spelling out whether or not images containing non-free bits
    are official part of Debian or not. Personally I find it obvious that anything that would not be allowed into main also would not be treated
    as official part of Debian,

    I share the same concern as you: Steve's proposal would mean that installers containing non-free firmware become official part of Debian. My text does not.

    If Bart chose to extend the proposal to include that such media
    containing non-free bits (although permitted "alongside with the free
    media) would *not* be considered official part of Debian, then I would endorse the amended proposal.

    That would be repeating what's already true. My text includes only things that I propose to change. So what is off/unofficially today, remains that. It's like "the name of the project remains Debian". Why would I mention that.

    Does this cover your concern?



    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Ross Vandegrift on Fri Aug 26 10:30:01 2022
    On Thu, Aug 25, 2022 at 08:18:55AM -0700, Ross Vandegrift wrote:
    Hi Bart,

    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    Do you mean that official or unofficial media can contain packages from non-free?

    If you mean official media, this is more radical than Steve's proposal.
    It would permit arbitrary non-free packages as long as users were
    informed.

    My text not propose that installers containing non-free bits would become official part of Debian.


    If you mean unofficial media - that's the status quo. In which case,
    this option is the same as Simon's and none of the above.

    The difference with Simon's text and NOTA is that I do propose a change.


    Ross


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Andrew M.A. Cater on Fri Aug 26 12:10:02 2022
    On Thu, Aug 25, 2022 at 06:36:36PM +0000, Andrew M.A. Cater wrote:
    On Thu, Aug 25, 2022 at 08:18:55AM -0700, Ross Vandegrift wrote:
    Hi Bart,

    On Wed, Aug 24, 2022 at 10:12:48AM +0200, Bart Martens wrote:
    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    Do you mean that official or unofficial media can contain packages from non-free?

    If you mean official media, this is more radical than Steve's proposal.
    It would permit arbitrary non-free packages as long as users were
    informed.

    If you mean unofficial media - that's the status quo. In which case,
    this option is the same as Simon's and none of the above.

    Ross


    /packages from the non-free *firmware* section/

    My proposal does not add such new section ...


    This is _only_ firmware and not arbitrary non-free packages. It's not drivers per se.

    ... does not make such distinction ...


    The "official" and "unofficial" media are currently prepared by the same
    team on the same machines. The "unofficial" media contains non-free firmware (and drivers of all sorts, potentially, that go wider than firmware).

    IMHO, they're both official - one is free + free firmware, one is free+non-free
    firmware.

    ... and does not change the meaning and scope of "official".


    Steve's proposal is strictly limited to firmware, here, and there is a separate non-free firmware portion of the archive that was created at Debconf22 in Pristina.

    Steve's proposal is adding non-free firmware in our currently free installer. Introducing a new section in the archive doesn't change that.

    My proposal focuses on one thing: helping our users find the installer they need for their hardware by no longer hiding our non-free installers. This applies to the existing non-free installers and also to the new kind of installer Steve has in mind. So our free installer remains free.



    All best, as ever,

    Andy Cater


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Phil Morrell@21:1/5 to All on Fri Aug 26 12:40:02 2022
    From absorbing this lengthy thread, my impression is that most folks are considering the nature of "officialness", therefore I'd like to ask any proposed text to elaborate on intentions for what "Official Debian"
    means such that voters can express their opinions on this aspect.

    * Images are officially produced by DDs via Debian infrastructure
    * Software that officially meets our highest policy ideals and standards
    * The officially recommended way to end up with a Debian install
    * Officially supporting humanitarian aid and accessibility because those
    who don't need it are already capable of meeting their needs in Debian

    ---

    I hope this kind of email is ok here, even though I'm not able to
    directly interact with the GR process (proposing/seconding etc.). If
    not, sorry for adding to the 138 messages.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYwig9AAKCRDbymUJHySO bDswAQDdswmeomePe6VXmm4SwfIz94V9O/Fg4sbI/qZnVbeBiQD/QlMXQckbYrnk E7/ugtVw4SoKArnlCzpusrruWftb3wU=
    =0Y+Y
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dr. Bas Wijnen@21:1/5 to Bart Martens on Fri Aug 26 12:30:01 2022
    First of all, thanks everyone for working on this. It's much needed.

    On Tue, Aug 23, 2022 at 10:22:39PM +0200, Bart Martens wrote:
    Do we need to recommend one above the other? I'd rather use some short explanation per installer to help the user choose.

    My main concern is that users should end up with a good system after installing. This means two things:

    - The install must succeed and (all) the hardware must be usable. For that,
    non-free firmware is often required.
    - If non-free firmware is used, it must be updated along with the rest of the
    system.

    It is important to me that those things are not only possible, but that they will happen without any mental effort from the user. I'm all for users who like to think, but if they don't do that, they should still end up with a good system. This means the default installer needs to contain the non-free firmware.

    In fact, I am not sure if there are any real world examples of modern machines that would work properly without such firmware. Are there any machines on the market nowadays that do not require cpu microcode and do not require firmware in their network card? And if that is true for less than 1% of modern computers, do we really want to tell more than 99% of our potential users that they must read up on the details of their hardware and understand what "non-free firmware" means, before they can be confident that they chose the right installer?

    My point is: "giving people a choice" has a cost: that people need to spend time on making that choice. This is acceptable if there is no good default for most people, or if the amount of time spent is small. In this case, neither of those things is true: there is a good default for the overwhelming majority of people (at least I think so, but I'm interested to hear numbers about this), and it takes serious effort to understand the subject so a choice can be made.

    I think forcing users to choose would be a very bad outcome, and because of that I like Steve's proposal: include the non-free firmware on installation *BY DEFAULT* and automatically keep it updated. People who are not interested in studying the details should get a system they will be happy with. Which means their hardware should be supported, which means the non-free firmware must be installed. While I'm not against presenting a totally free installer, it needs to be done in such a way that absolutely nobody will think that they NEED the installer without the non-free firmware.

    I'll note that this argument can also be made for non-free drivers (like those from nVidia), but I don't think we should install those with our main installer. The main difference is that their drivers are not as important to the users: without cpu microcode updates, the user is vulnerable to security issues. Without wifi firmware, many people cannot connect to the internet. For many people this means they may as well not have the computer. Without the non-free nVidia drivers, they can still do everything, but the newest games won't work as smoothly (or at all). That is something that can be solved later (by installing the non-free drivers, hopefully after being informed of why those aren't in Debian). And people who need them are capable of doing that.

    Finally, I want to make some comparisons:

    1. We don't tell people that they must not buy devices that contain a ROM chip
    with non-free firmware. I believe that moving the code from the ROM to RAM,
    thus requiring it to be sent by the OS, should not make any difference. We
    should still not tell people that those devices are bad, and we should
    support uploading the firmware to the device.

    2. We don't enforce the DFSG on art. It's not uncommon that art is generated
    and thus has source code. Or at least that the version that was used (for
    example: a PNG image) is not the version that the artist works on. Their
    "source" version may be using a non-free editor. For code, that would mean
    the build system cannot be in main and thus the package should go in
    contrib. While some people (including me) have in the past argued for this,
    it's obvious that we don't have the same rules for art that we do for our
    programs. While not completely identical, I believe it is reasonable to
    consider firmware blobs to be more like art (in the sense that they are not
    running in our OS).

    Thanks,
    Bas

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEKI9JSvHOfJKJyDQanNF9WAfAcToFAmMInIYACgkQnNF9WAfA cTr+Ig/+NjXQXJqdjmydkeaGpA2qwpYcohzkWNVxoUN8TiDH2tUoccXdFrdELjLg dQWpQaGIu1YwgSq1SelX0xuKJDYyew3LussvCj/i0AenP0aiA32z9HUMJCZ3mw6z OZDWbwzAZzb87DJXRV3UWM2EOhnlE1yqWpxDfz5L7QgEwfW6fuHW2NT4EPMQKdQw krnIA7HquoXINPR47bEyaPieCrgMEk3b6DdLCQd9ru/FI20wffRahVFsIZAc91iU UbGwdXo9vBA9iaYn4nqGNtTJTvwyAl2RNt+kxPltjpMl0+3jpKdtMblxkHj/Y63N kSm6R+9WBzt50KOhvMSr3ew4r9//1nLnBnB0Aesc8SlkllU2tEsNODmEcZbtp6F9 qf+OpQ/8iJuxJgfrzY9vpiHdpW+omQJKJWkgck4ePZ7jdQJEOCDKEpA5YTHdfbck Tq2IKRjmHEcaetTDB1bfs8Fsb64cHtZ5qwOM2kq11hTYmGrSYJTyRdSRmzrL8zOz bnCV82qbyzSsOLpPR7GcgvOD55ntawnLViE26tpMzgKT4GcQ16mVtUNEaFk0nDRq DK50MCqYfNzNIzZzr04QePE6+2EpEhtBd7qsszflldrCupUQIphB0Zi0ycAHtf2R Oa09UzfnP62eolWsjW04CVowRodQAfQeGm8WohJ4xjtylAP2uhA=
    =qADX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rahmatullin@21:1/5 to Dr. Bas Wijnen on Fri Aug 26 12:50:02 2022
    On Fri, Aug 26, 2022 at 10:12:24AM +0000, Dr. Bas Wijnen wrote:
    In fact, I am not sure if there are any real world examples of modern machines
    that would work properly without such firmware. Are there any machines on the market nowadays that do not require cpu microcode and do not require firmware in their network card?
    There is a significant number of people that explicitly ignore soldered firmware so yes, there are such machines according to them.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmMIpNQtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh 0aYQAIdhLSIFaSModDenQT37SisNh/NJ8j2hBbNgwEUqKN+t/WDYX3e+LseytejL e6sUfrmd/Izjke2k21J3a03Yihpjt4NDR6ZH7IsK3bUrQEBL1p0YSYU0U9SNEtY9 7YtObXxQIo1RwqrmroSKtIm0vRjG3aZfLC3WIHNlcuqS81z4zwl/kise3GjaW/sY +NhZOJ3EGUI2SSBn1OWlntwifOLUBUVtQdoR1bH9s/c0Y+v1gE0yzihd1vXyTRJK CujurhZvoJxCDS9GtREqK326K19VsHU89wkwzbvd94eaJJaL1PRzNMIiePPYas14 qKW4RQHlavWBNZooRZHQEyFwJ+YzJNDoCkcqo/kv2lVUXBxmSAOkxBXlgKpp7mBE dfzrPqKQBRQNZ9OQPbCMuT+C89zf6zUCEFJd3eJ8HynYCRrnb62racAhUrdPpK/4 wGwWdIbqKPbTgNnubuifZcF1EiHsVed71slPBBYFzP+C+khS2YjkDQD0q1HM3b7W u8fdxOKTSb0jdI1qIcMffOuVnOvi0JYpPaTvciFs5gcIRqva1/TWCKSaANIwljru Y0Yrg8ibftpVnmO0dlh8eZdTZTllagS6Pqn4iVvXoAhgAhYI4eOCcoDM/jvtsYwt osMjRnEOoW3QCXroqxLGZTJPVolD7APrbMrKP6D82ha31ZIY
    =lCy4
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Phil Morrell on Fri Aug 26 13:00:01 2022
    On Fri, Aug 26, 2022 at 11:31:19AM +0100, Phil Morrell wrote:
    From absorbing this lengthy thread, my impression is that most folks are considering the nature of "officialness",

    I would keep that separate from this GR.

    therefore I'd like to ask any
    proposed text to elaborate on intentions for what "Official Debian"
    means

    In my proposal I intentionally left out "official".

    I think that with this GR we can help our users more easily find the installer they need for their hardware without reopening the debate on what we call official and what our users perceive as official.

    [...]

    I hope this kind of email is ok here, even though I'm not able to
    directly interact with the GR process (proposing/seconding etc.). If
    not, sorry for adding to the 138 messages.

    Sure! I can only hope that with this GR we keep the focus on helping the users.

    Cheers, - Bart

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to All on Fri Aug 26 15:10:02 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------QAz7NxNjn9SMs5FN2UEZI6TD
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGksDQoNCk9uIDgvMjMvMjIgMjI6MjIsIEJhcnQgTWFydGVucyB3cm90ZToNCg0KPj4gRGVi aWFuIHdvdWxkIHJlY29tbWVuZCB0aGUgb25lIHdpdGggbm9uLWZyZWUtZmlybXdhcmUsIGZv ciB0aGUNCj4+IHB1cnBvc2VzIG9mIGVuYWJsaW5nIHVzZXJzIHRvIGluc3RhbGwgb24gY3Vy cmVudCBoYXJkd2FyZSwgYnV0IGJvdGgNCj4+IHdvdWxkIGJlIGF2YWlsYWJsZS4NCg0KPiBE byB3ZSBuZWVkIHRvIHJlY29tbWVuZCBvbmUgYWJvdmUgdGhlIG90aGVyPyBJJ2QgcmF0aGVy IHVzZSBzb21lIHNob3J0DQo+IGV4cGxhbmF0aW9uIHBlciBpbnN0YWxsZXIgdG8gaGVscCB0 aGUgdXNlciBjaG9vc2UuDQoNClRoaXMuIEJvdGggaW5zdGFsbGVycyBoYXZlIHRyYWRlLW9m ZnM6DQoNCkZyZWUgaW5zdGFsbGVyOg0KDQogIC0gd2lsbCBub3Qgd29yayB3aXRoIHNvbWUg aGFyZHdhcmUNCiAgKyBmdWxseSBzdXBwb3J0ZWQNCiAgKyBjYW4gYmUgcmVkaXN0cmlidXRl ZCBmcmVlbHkNCg0KSW5zdGFsbGVyIGluY2x1ZGluZyBmaXJtd2FyZToNCg0KICArIHN1cHBv cnRzIG1vcmUgaGFyZHdhcmUNCiAgLSBzb21lIGJ1Z3MgbWlnaHQgYmUgdW5maXhhYmxlDQog IC0gdXNlcnMgbmVlZCB0byBiZSBhd2FyZSBvZiBub24tZnJlZSBsaWNlbnNlcw0KDQpUaGUg dGhpcmQgcG9pbnQgaXMgc29tZXRoaW5nIHdlIGNhbiBhbmQgc2hvdWxkIGFkZHJlc3MgaW4g dGhlIG1lZGl1bSANCnRlcm06IHNvIGZhciwgbGljZW5zZSBjaGVja3MgZm9yIG5vbi1mcmVl IGNvbXBvbmVudHMgaGF2ZSBiZWVuIG1vc3RseSANCiJjYW4gRGViaWFuIHJlZGlzdHJpYnV0 ZSB0aGlzIiBhbmQgImNhbiB1c2VycyBpbnN0YWxsIHRoaXMiLiBEU0MjNSANCmV4cGxpY2l0 bHkgc2F5cyB0aGF0IGlmIHlvdSB3YW50IHRvIHJlZGlzdHJpYnV0ZSBub24tZnJlZSBwYWNr YWdlcyANCnlvdXJzZWxmLCB0aGUgb251cyBvZiBjaGVja2luZyBhbGwgdGhlIGluZGl2aWR1 YWwgbGljZW5zZXMgaXMgb24geW91Lg0KDQogRnJvbSB0aGUgcGVyc3BlY3RpdmUgb2YgYW4g ZW5kIHVzZXIgd2hvIGFscmVhZHkgaGFzIGJvdWdodCB0aGUgDQpoYXJkd2FyZSwgYW5kIHdo byB3aWxsIGhhcHBpbHkgY2xpY2sgb24gZXZlcnkgIkkgYWdyZWUiIHRvIGdldCBhIHdvcmtp bmcgDQpzeXN0ZW0gYW5kIHRoZW4gcHJvY2VlZCB0byBpZ25vcmUgYW55IGxpY2Vuc2UgdGVy bXMgdGhleSB3ZXJlIHByZXNlbnRlZCANCndpdGgsIGl0IGlzIGNsZWFyIHdoaWNoIGluc3Rh bGxlciBpcyBwcmVmZXJhYmxlLg0KDQpIb3dldmVyLCBEZWJpYW4gaXMgb25lIG9mIHRoZSBm ZXcgZGlzdHJpYnV0aW9ucyBsZWZ0IHRoYXQgYWN0dWFsbHkgDQpzdXBwb3J0IHVzZXJzIG90 aGVyIHRoYW4gaW5kaXZpZHVhbHMgd2l0aG91dCBhIHN1cHBvcnQgY29udHJhY3QsIGFuZCB0 aGUgDQpmcmVlIGluc3RhbGxlciBpcyBkZWZpbml0ZWx5IGludGVyZXN0aW5nIHRvIGNvcnBv cmF0ZSB1c2VycyBmb3IgdGhlIHNhbWUgDQpyZWFzb24gZnJlZSBzb2Z0d2FyZSBpczogYmVj YXVzZSBpdCBpcyBzYWZlIGZyb20gYSBsZWdhbCBwb2ludCBvZiB2aWV3LCANCmFuZCBiZWNh dXNlIGl0IGlzIHZpcnR1YWxseSBndWFyYW50ZWVkIHRoYXQgeW91IHdpbGwgYmUgYWJsZSB0 byBnZXQgDQpzdXBwb3J0IGZyb20gKnNvbWVvbmUqIGFzIHRoZXJlIGFyZSBubyBnYXRla2Vl cGVycy4NCg0KSSB3YXMgYWJsZSB0byB1c2UgRGViaWFuIGluIGEgbG90IG9mIHBsYWNlcyBi ZWNhdXNlIEkgY291bGQgcG9pbnQgdGhlIA0KbGVnYWwgZGVwYXJ0bWVudCBhdCB0aGUgRFND IGFuZCB0aGUgREZTRywgYW5kIHNheSAiSSdtIGdvaW5nIHRvIG5lZWQgDQphYm91dCAzMDAg ZGlmZmVyZW50IHNvZnR3YXJlIHBhY2thZ2VzLCBhbGwgb2YgdGhlaXIgbGljZW5zZXMgZnVs ZmlsbCANCnRoZXNlIGNyaXRlcmlhLCBpcyB0aGF0IGdvb2QgZm9yIHlvdT8iDQoNCklNTzog Qm90aCBpbnN0YWxsZXJzIHNob3VsZCBiZSBvbiB0aGUgc2FtZSBkb3dubG9hZCBwYWdlLCB3 aXRoIGEgYnJpZWYgDQpleHBsYW5hdGlvbiBvbiB3aG8gc2hvdWxkIHNlbGVjdCB3aGljaCAo bGlrZSB3ZSB1c2VkIHRvIGhhdmUgaW4gcGFja2FnZSANCmRlc2NyaXB0aW9ucyksIGFuZCBw b3NzaWJseSBhIGxvbmdlciBwYWdlIGV4cGxhaW5pbmcgdGhpcyBpbiBtb3JlIGRldGFpbC4N Cg0KVGhpcyBzdGlsbCBuZWVkcyB0byBiZSByZWNvbmNpbGVkIHdpdGggdGhlIERTQywgaG93 ZXZlciwgYmVjYXVzZSB0aGUgRFNDIA0KcHJvbWlzZXMgc29tZXRoaW5nIHRoZSBpbnN0YWxs ZXIgd2l0aCBub24tZnJlZSBmaXJtd2FyZSBkb2VzIG5vdCBob2xkLg0KDQpUaGUgd2F5IEkn ZCBwdXQgaXQ6DQoNCiAgICAgICAgICAgICAgICAgICAgICAgICBDaG9vc2UgeW91ciBpbnN0 YWxsZXINCg0KICAgICBXaXRoIG5vbi1mcmVlIGZpcm13YXJlOiAgICAgICAgICAgICAgIFdp dGhvdXQgbm9uLWZyZWUgZmlybXdhcmU6DQogICAgIEJldHRlciBoYXJkd2FyZVsxXSBzdXBw b3J0ICAgICAgICAgICAgQ29tcGxldGVseSBmcmVlIHNvZnR3YXJlWzJdDQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYWNjb3JkaW5nIHRvIHRoZSBEZWJp YW4gU29jaWFsDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Q29udHJhY3RbM10NCg0KICAgICAqICoqbXVsdGlhcmNoIG5ldGluc3RhbGwqKiAgICAgICAg ICAgICogbXVsdGlhcmNoIG5ldGluc3RhbGwNCiAgICAgKiAqKm11bHRpYXJjaCoqICAgICAg ICAgICAgICAgICAgICAgICAqIG11bHRpYXJjaA0KICAgICAqIGFtZDY0IChQQykgICAgICAg ICAgICAgICAgICAgICAgICAgICogYW1kNjQgKFBDKQ0KICAgICAqIGFybTY0ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICogYXJtNjQNCiAgICAgKiBPdGhlciBhcmNoaXRlY3R1 cmVzWzRdICAgICAgICAgICAgICAqIE90aGVyIGFyY2hpdGVjdHVyZXNbNF0NCg0KICAgICBJ ZiB5b3UgYXJlIHVuc3VyZSB3aGljaCBpbnN0YWxsZXIgdG8gc2VsZWN0LCB1c2UgYSB2YXJp YW50IGluY2x1ZGluZw0KICAgICBub24tZnJlZSBmaXJtd2FyZSwgYXMgaXQgY29udGFpbnMg ZmlsZXMgdGhhdCBtYXkgYmUgcmVxdWlyZWQgdG8NCiAgICAgb3BlcmF0ZSBzb21lIGhhcmR3 YXJlLiBJZiBub25lIGFyZSBuZWNlc3Nhcnkgb24geW91ciBtYWNoaW5lLCB0aGVyZQ0KICAg ICB3aWxsIGJlIG5vIGRpZmZlcmVuY2UgaW4gd2hhdCBib3RoIHZhcmlhbnRzIGluc3RhbGwu IFlvdSB3aWxsIGFsc28NCiAgICAgYmUgZ2l2ZW4gYSBzdW1tYXJ5IGF0IHRoZSBlbmQgb2Yg dGhlIGluc3RhbGxhdGlvbiBpZiBub24tZnJlZQ0KICAgICBmaXJtd2FyZSBmaWxlcyBhcmUg cmVxdWlyZWQgb3IgYXZhaWxhYmxlIGZvciB5b3VyIGhhcmR3YXJlLCBhbmQgbm8NCiAgICAg cmVpbnN0YWxsYXRpb24gaXMgbmVlZGVkIHRvIHN3aXRjaCBsYXRlci4NCg0KICAgICBJZiB5 b3UgYXJlIGluc3RhbGxpbmcgYSBzaW5nbGUgbWFjaGluZSB0aGF0IGhhcyBhbiBJbnRlcm5l dA0KICAgICBjb25uZWN0aW9uLCB1c2UgdGhlICJuZXRpbnN0YWxsIiBpbWFnZSwgd2hpY2gg aXMgc2lnbmlmaWNhbnRseQ0KICAgICBzbWFsbGVyIGFuZCB3aWxsIGRvd25sb2FkIG9ubHkg c2VsZWN0ZWQgY29tcG9uZW50cy4NCg0KICAgICBBZGRpdGlvbmFsIGxpY2Vuc2UgdGVybXMg bWF5IGFwcGx5IHRvIHRoZSBub24tZnJlZSBmaXJtd2FyZQ0KICAgICBjb21wb25lbnRzLiBE ZWJpYW4gaGFzIHZlcmlmaWVkIG9ubHkgdGhhdCB0aGV5IGNhbiBiZSBsZWdhbGx5DQogICAg IGRpc3RyaWJ1dGVkIHRvIGFuZCB1c2VkIGJ5IGVuZCB1c2Vycy4gSWYgeW91IGhhdmUgYWRk aXRpb25hbA0KICAgICByZXF1aXJlbWVudHMgaXQgaXMgYWR2aXNlZCB0aGF0IHlvdSBjaGVj ayB0aGVzZSBhZ2FpbnN0IHRoZSB0ZXJtc1s1XQ0KICAgICBpbXBvc2VkIGJ5IHRoZSBoYXJk d2FyZSB2ZW5kb3JzLiBEZWJpYW4gY2FuIGFsc28gb25seSBvZmZlciBsaW1pdGVkDQogICAg IHN1cHBvcnQgZm9yIHRoZXNlIGNvbXBvbmVudHMsIGFzIGxpY2Vuc2UgdGVybXMgdXN1YWxs eSBwcm9oaWJpdA0KICAgICBkZWVwZXIgaW52ZXN0aWdhdGlvbiBpbnRvIHByb2JsZW1zLCBv ciBtb2RpZmljYXRpb25zLg0KDQpbMV0gcG9pbnRzIHRvIGEgaGFyZHdhcmUgY29tcGF0aWJp bGl0eSBsaXN0DQpbMl0gcG9pbnRzIHRvIHRoZSBERlNHDQpbM10gcG9pbnRzIHRvIHRoZSBE U0MNCls0XSBwb2ludHMgZWl0aGVyIHRvIGFuIGFuY2hvciBvbiB0aGUgc2FtZSBwYWdlLCBv ciBhIHNlcGFyYXRlIHBhZ2Ugd2l0aCANCmEgZnVsbCBsaXN0DQpbNV0gcG9pbnRzIGVpdGhl ciB0byB0aGUgaGFyZHdhcmUgY29tcGF0aWJpbGl0eSBsaXN0IGlmIHRoZSBsaWNlbnNlcyBh cmUgDQpsaW5rZWQgdGhlcmUsIG9yIGEgc2VwYXJhdGUgcGFnZSB3aXRoIGEgY29sbGVjdGlv biBvZiB0aGUgbGljZW5zZSBmaWxlcyANCmZyb20gdGhlIG5vbi1mcmVlIGZpcm13YXJlIHBh Y2thZ2VzIGluY2x1ZGVkIGluIHRoZSBpbnN0YWxsZXINCg0KS2V5IGRlc2lnbiBwb2ludHM6 DQoNCiAgLSB0d28gY29sdW1ucywgc2lkZS1ieS1zaWRlDQogIC0gYXZvaWRpbmcgdGhlIHdv cmQgIm9mZmljaWFsIiBjb21wbGV0ZWx5DQogIC0gdGhlIERGU0cgYW5kIERTQyBoYXZlIGEg cHJvbWluZW50IHBsYWNlIGFuZCBhcmUgc2V0IGluIGNvbnRyYXN0IHdpdGggDQp0aGUgbm9u LWZyZWUgaW1hZ2VzDQogIC0gdGhlICJtdWx0aWFyY2ggbmV0aW5zdGFsbCIgYW5kICJtdWx0 aWFyY2giIHZhcmlhbnRzIGluY2x1ZGluZyANCm5vbi1mcmVlIGZpcm13YXJlIGFyZSBoaWdo bGlnaHRlZA0KICAtIHRoZSBsaXN0IG9mIGFyY2hpdGVjdHVyZXMgaXMga2VwdCBzaG9ydCBz byBwZW9wbGUgZG9uJ3QgbWlzcyB0aGUgDQpmb2xsb3dpbmcgcGFyYWdyYXBoDQogIC0gVGhl IGV4cGxhbmF0aW9uIHN0YXJ0cyB3aXRoICJJZiB5b3UgYXJlIHVuc3VyZSIsIHdoaWNoIHNo b3VsZCBwaWNrIA0KdXAgZXhhY3RseSB0aG9zZSB1c2VycyB3aG8gbmVlZCBpdC4NCiAgLSBU aGUgZXhwbGFuYXRpb24gaGlnaGxpZ2h0cyB0aGF0IHRoaXMgaXMgbm90IGEgZ3JhdmUgY2hv aWNlIHlvdSBoYXZlIA0KdG8gbGl2ZSB3aXRoIGZvciBhbGwgZXRlcm5pdHkuDQogIC0gVGhl ICJuZXRpbnN0YWxsIiBleHBsYW5hdGlvbiBnb2VzIGFib3ZlIHRoZSBpbmZvcm1hdGlvbiBm b3IgDQpjb3Jwb3JhdGUgdXNlcnMuDQoNCkknbSBub3QgZW50aXJlbHkgc3VyZSB3aGF0IHRo aXMgd291bGQgdHJhbnNsYXRlIHRvIGluIEdSIHRlcm1zLCBwcm9iYWJseSANCnNvbWV0aGlu ZyBhbG9uZyB0aGUgbGluZXMgb2YNCg0KLS0tDQpEZWJpYW4gcmVjb2duaXplcyB0aGF0IHNv bWUgbW9kZXJuIGhhcmR3YXJlIHJlcXVpcmVzIGZpcm13YXJlIGNvbXBvbmVudHMgDQp0aGF0 IGRvIG5vdCBmdWxmaWxsIHRoZSBERlNHLCBhbmQgdGhhdCB0aGVzZSBtYXkgYmUgbmVlZGVk IGF0IA0KaW5zdGFsbGF0aW9uIHRpbWUuIEFzIG91ciBwcmlvcml0aWVzIGFyZSBvdXIgdXNl cnMsIGFuZCBmcmVlIHNvZnR3YXJlLCANCndlIHByb3ZpZGUgYW4gaW5zdGFsbGVyIGltYWdl IHRoYXQgaW5jbHVkZXMgdGhlc2UgY29tcG9uZW50cywgYW5kIGluZm9ybSANCnVzZXJzIHRo YXQgdGhlc2UsIGxpa2UgdGhlICJub24tZnJlZSIgYXJjaGl2ZSBjb21wb25lbnQsIGFyZSBu b3QgY292ZXJlZCANCmJ5IHRoZSBEZWJpYW4gU29jaWFsIENvbnRyYWN0IGFuZCBwcm92aWRl ZCBvbiBhIGJlc3QtZWZmb3J0IGJhc2lzLg0KLS0tDQoNClRoaXMsIElNTywgcmVzb2x2ZXMg dGhlIGNvbmZsaWN0IHdpdGggdGhlIERTQyBieSBjbGFyaWZ5aW5nIHRoYXQgd2UgYXJlIA0K bWFraW5nIGFuIGV4Y2VwdGlvbiBoZXJlIGFuZCB3aHksIGFuZCBoaWdobGlnaHRzIHRoYXQg d2Ugc3RpbGwgZG8gbm90IA0KYmVsaWV2ZSBvdXIgdXNlcnMnIG5lZWRzIGFyZSBvciBjYW4g YmUgYWRlcXVhdGVseSBtZXQgYnkgbm9uLWZyZWUgc29mdHdhcmUuDQoNCiAgICBTaW1vbg0K


    --------------QAz7NxNjn9SMs5FN2UEZI6TD--

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEtjuqOJSXmNjSiX3Tfr04e7CZCBEFAmMIxDUACgkQfr04e7CZ CBG/2wgAoDHHjWVS2hrZ9du4+7Ec4xTX76FcYCdjkgYubl8g6Bbizkl9+do8lM/Z 25nczYnlQF4psOsMp/dKvSyHsimLWhQTaaFjimdh33KRR647TKMHFnEMLpn2cITA Y3HpUeMwf22yTTb42WMv0XxK0oUiF8mMdDAME3x48iM9sF/i3TVHdnZzH1wLQPAF ZSLUTaLI5X2EDGuAvxCxs1wwils7gD7TX1FDMYk95IlLl4pX2RfrUi++zLr9400c 9R3vSXE+DHVmn55NodS79hS7NdL+IpkZ9NffrZ2r2yeWnk4jW5Tpq6dHSRsTBP4e OI1raSFgHZ9dU7lOr6wL2lgHqiyqSA==
    =6pkp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Fri Aug 26 16:20:01 2022
    Quoting Simon Richter (2022-08-26 15:01:41)
    IMO: Both installers should be on the same download page, with a brief explanation on who should select which (like we used to have in package descriptions), and possibly a longer page explaining this in more detail.
    [...]
    Key design points:

    - two columns, side-by-side
    - avoiding the word "official" completely
    - the DFSG and DSC have a prominent place and are set in contrast with
    the non-free images
    [...]

    I'm not entirely sure what this would translate to in GR terms, probably something along the lines of

    ---
    Debian recognizes that some modern hardware requires firmware components
    that do not fulfill the DFSG, and that these may be needed at
    installation time. As our priorities are our users, and free software,
    we provide an installer image that includes these components, and inform users that these, like the "non-free" archive component, are not covered
    by the Debian Social Contract and provided on a best-effort basis.
    ---

    This, IMO, resolves the conflict with the DSC by clarifying that we are making an exception here and why, and highlights that we still do not believe our users' needs are or can be adequately met by non-free software.

    Thanks a lot, Simon.

    I would vote for a proposal like the above. What I mean by that is (not
    that I think we should all post "me too" posts here but) since I have
    strongly ben in favor of using "offficial" label to indicate what we as
    project can support, I agree that this is an approach that abandons such
    label yet ensures explicitly in the text we vote on that "non-free" will
    be clearly communicated to our users.

    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============30432529860645227=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMI1B0ACgkQLHwxRsGg ASHNLRAAkviINO5wqBAxP5wDrJtVsVljalT/iyK6bG3x1yFb+HtOmi49P+8OhmYT 31Ml1jvlAY2QllqnineBGFvdjzjqDjtHdYdrVkBwMYiI7BUYxiBThdfQu0Jqd+BC agok5ndo9pBitpsG8ejh0DdC6QDMyaXZsfqTvAwAmbaWNxNQvwuXReHCLFZygIJO RGm+wQCP5H35e01Q+gO5J5gBf2NANwnGEAxU467LduiwYwTytvdoxqIKccbG38jZ 4c/27LFOpBqqAJ6qIuo0qeIBzUDtd6P7XLZEO5gV025nMSv1ur44KiXmj3mrqLtg sEs3o6uIvZZYGHV1Dl/hb7N7gBXwhy1LXI0eXn/sy2gUkRCZb6CdG8SjS++BOBAB T+tj4pYpMBupSS1CNqBrsl9pvu2P5tIDC6wZSVRjB1CB2tMgX4TnvKTq/6fN/Kcm S3ETBVVhQ72hQ5K6G57qesB4hSytg/e5QZ98jmPRLQaG6ER4D+/EuitDhgfJRefx Eg5tbptr7U2YLA0mf
  • From Jonas Smedegaard@21:1/5 to All on Fri Aug 26 16:30:01 2022
    Quoting Jonas Smedegaard (2022-08-26 16:18:19)
    I still urge you to make explicit what will not change. Perhaps borrow
    from Simons text, if you (like me) like that?

    ...Simon Richter!

    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============016372836479462060=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMI1tYACgkQLHwxRsGg ASGZBBAArXHF2c3swSFUziF9ys0IaubvGy2EOAkFBoMVi3g9Ib05/UH9iPCO9bZy JpLB6kW2BXowOUoF0u7MVOOaCJ7blM1JazDA2Y6xh50iJHvnRdp96u3xxpe2hw5n TmT/fRfPzejsFeIMQsJ1Piak/5CELFFDaKowzeWlhSYUCBeW05LtvI1ZNVmfdyBw YTHdyh6Kx8EU0Ndj55SSKM6yGlRiexcXWh/VtD/F167cknvmoiNpABvVrtRciEyo ySI0gfrxxX+o6JW7AUB8OuWv9a6/KY0BtaH4Ix8Gc+NDzlZwvnMq9/qEOcl3o+V4 sdfbvDS+2GymOk6Jna3eOce6H5xOsMEtqO95GO3e8wcyM/MDtE5nf3YlavRKKWzt HTmZ+jUdA6TeKtBNtXTtrzx6C2O1g1j+TqriNmTdCVPLVZ+jQXwgA3Os7tSIhyON 4TTd6I8Ggnm3fKO2A0oLVO2FqU5tvTeQJQ7ZVoPSW/ttw4+83ZiSNX+7c2b7F/F+ i+svjuNmQHAaOVbu4
  • From Bart Martens@21:1/5 to Jonas Smedegaard on Fri Aug 26 18:10:02 2022
    On Fri, Aug 26, 2022 at 04:18:19PM +0200, Jonas Smedegaard wrote:
    Quoting Bart Martens (2022-08-26 10:02:16)
    On Fri, Aug 26, 2022 at 07:06:01AM +0200, Jonas Smedegaard wrote:
    [...] it lacks a detail I find crucial:
    Explicitly spelling out whether or not images containing non-free bits are official part of Debian or not. Personally I find it obvious that anything that would not be allowed into main also would not be treated
    as official part of Debian,

    I share the same concern as you: Steve's proposal would mean that installers
    containing non-free firmware become official part of Debian. My text does not.

    If Bart chose to extend the proposal to include that such media containing non-free bits (although permitted "alongside with the free media) would *not* be considered official part of Debian, then I would endorse the amended proposal.

    That would be repeating what's already true. My text includes only things that
    I propose to change. So what is off/unofficially today, remains that. It's like
    "the name of the project remains Debian". Why would I mention that.

    Does this cover your concern?

    It clarifies that my reading matches your intended reading. Thanks!

    Haa wonderful.

    Unfortunately it does not cover my concern that the text is ambiguous -
    i.e. despite intent your choice of words can lead voters to vote for
    this text but with varying expectations, which is a very bad situation.

    What exactly in my text do you mean?


    I still urge you to make explicit what will not change. Perhaps borrow
    from Simons text, if you (like me) like that?

    Simon Richter's text would permit the Debian project to replace the free installer by a non-free one. My text clearly mentions that the free installer is still there. Didn't you prefer the free installer to remain available?



    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Fri Aug 26 18:50:01 2022
    Bart Martens dijo [Fri, Aug 26, 2022 at 11:59:44AM +0200]:
    If you mean official media, this is more radical than Steve's proposal. It would permit arbitrary non-free packages as long as users were informed.

    If you mean unofficial media - that's the status quo. In which case, this option is the same as Simon's and none of the above.

    Ross


    /packages from the non-free *firmware* section/

    My proposal does not add such new section ...

    Right. I would _oppose_ your proposal if it is to appear in the
    ballot, because a freeness _win_ of Steve's proposal is that... People
    that need to enable non-free firmware don't need to pull in all of
    non-free in order to keep it updated.

    I often install packages for getting to know them, just because they
    appeared in my list. And my list nowadays includes non-free because of
    some firmware. So I have installed non-free software without
    noticing. Splitting non-free firmware grants the user some more system
    freeness guarantees.

    Greetings,

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Gunnar Wolf on Fri Aug 26 23:50:01 2022
    On Fri, Aug 26, 2022 at 11:39:42AM -0500, Gunnar Wolf wrote:
    Bart Martens dijo [Fri, Aug 26, 2022 at 11:59:44AM +0200]:
    If you mean official media, this is more radical than Steve's proposal. It would permit arbitrary non-free packages as long as users were informed.

    If you mean unofficial media - that's the status quo. In which case, this option is the same as Simon's and none of the above.

    Ross


    /packages from the non-free *firmware* section/

    My proposal does not add such new section ...

    Right. I would _oppose_ your proposal if it is to appear in the
    ballot, because a freeness _win_ of Steve's proposal is that... People
    that need to enable non-free firmware don't need to pull in all of
    non-free in order to keep it updated.

    I often install packages for getting to know them, just because they
    appeared in my list. And my list nowadays includes non-free because of
    some firmware. So I have installed non-free software without
    noticing. Splitting non-free firmware grants the user some more system freeness guarantees.

    My proposal does not forbid adding such new section.


    Greetings,

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Sat Aug 27 13:10:01 2022
    Quoting Bart Martens (2022-08-26 18:03:30)
    On Fri, Aug 26, 2022 at 04:18:19PM +0200, Jonas Smedegaard wrote:
    Quoting Bart Martens (2022-08-26 10:02:16)
    On Fri, Aug 26, 2022 at 07:06:01AM +0200, Jonas Smedegaard wrote:
    [...] it lacks a detail I find crucial:
    Explicitly spelling out whether or not images containing non-free bits are official part of Debian or not. Personally I find it obvious that anything that would not be allowed into main also would not be treated as official part of Debian,

    I share the same concern as you: Steve's proposal would mean that installers
    containing non-free firmware become official part of Debian. My text does not.

    If Bart chose to extend the proposal to include that such media containing non-free bits (although permitted "alongside with the free media) would *not* be considered official part of Debian, then I would endorse the amended proposal.

    That would be repeating what's already true. My text includes only things that
    I propose to change. So what is off/unofficially today, remains that. It's like
    "the name of the project remains Debian". Why would I mention that.

    Does this cover your concern?

    It clarifies that my reading matches your intended reading. Thanks!

    Haa wonderful.

    Unfortunately it does not cover my concern that the text is ambiguous - i.e. despite intent your choice of words can lead voters to vote for
    this text but with varying expectations, which is a very bad situation.

    What exactly in my text do you mean?

    The part you *didn't* include (so I cannot point at it or quote it) ;-)


    I still urge you to make explicit what will not change. Perhaps borrow from Simons text, if you (like me) like that?

    Simon Richter's text would permit the Debian project to replace the free installer by a non-free one. My text clearly mentions that the free installer is still there. Didn't you prefer the free installer to remain available?

    Ha! Indeed Simon Richter's text omit explicitly mentioning that a
    non-free installer is in _addition_ to the already free one - although
    that intent is clear from his more elaborate text before the concrete
    draft ballot text.

    ...or paraphrased in your style: His text doesn't say "replace".

    Perhaps you see now - through an example not your own - how being
    explicit helps avoid ambiguity?


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============59197370147136440=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMJ+cMACgkQLHwxRsGg ASH0ng/+OKTaZFsrWNenZsuuXHQu5BVR3v560i86O34LP04sfte6AUYFPUtoAAhp H69E6l/sf6J3AiP7KlXhz8QA8kTMl4iywG+SUT6/edzQXrvuTz+F0VLZ9nt6LDqU faFhT3LrxI/46dQFRMPjjyVCEOwnWYm455TOKvhOsOCZWYqczWCYLi9DSONwF7Ig Nin1cK627kNy2sfzdspz+vOWzX2wGUhghFTKNnrF8sCy248VDWY+wGUW0Qph7+f9 SvVZD1LIsmh/LvprKGhADzfQNmNrVqdIrsLKf3GQxLoxr+NsX9OxpPqffMVuJdGq IHlJUUYuvqEA7QBvkonyaa9Z872jbZCVlb5RdLznK0fVPNmiv6z5ne1sJ2VqKB77 B858FvodbImv5ScAIRQGOFfFVjKjDZ2eUocgVJjADQrspCX9g6j8vNgrZlqJTvga pPjDj+EUoPrxgCqedyi8SbFlLnAWb0ziNxqX1aFQDvtkINwSLTY21wStxklNwZeZ CqkYG6xGk+FpZIKfY
  • From Wouter Verhelst@21:1/5 to Simon Richter on Sat Aug 27 12:20:01 2022
    On Fri, Aug 26, 2022 at 03:01:41PM +0200, Simon Richter wrote:
    Hi,

    On 8/23/22 22:22, Bart Martens wrote:

    Debian would recommend the one with non-free-firmware, for the
    purposes of enabling users to install on current hardware, but both
    would be available.

    Do we need to recommend one above the other? I'd rather use some short explanation per installer to help the user choose.

    This. Both installers have trade-offs:

    Free installer:

    - will not work with some hardware
    + fully supported
    + can be redistributed freely

    Installer including firmware:

    + supports more hardware
    - some bugs might be unfixable
    - users need to be aware of non-free licenses

    The third point is something we can and should address in the medium term:
    so far, license checks for non-free components have been mostly "can Debian redistribute this" and "can users install this".

    The suggestion is for there to be a new section, "non-free-firmware".
    The requirements on this new section need not be the same as those on
    non-free.

    Thus, your concern can easily be handled by requiring maintainers and/or ftpmasters to vet licenses of packages before they are moved to non-free-firmware.

    --
    w@uter.{be,co.za}
    wouter@{grep.be,fosdem.org,debian.org}

    I will have a Tin-Actinium-Potassium mixture, thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Jonas Smedegaard on Sat Aug 27 13:40:01 2022
    On Sat, Aug 27, 2022 at 01:02:31PM +0200, Jonas Smedegaard wrote:
    Quoting Bart Martens (2022-08-26 18:03:30)
    On Fri, Aug 26, 2022 at 04:18:19PM +0200, Jonas Smedegaard wrote:
    Quoting Bart Martens (2022-08-26 10:02:16)
    On Fri, Aug 26, 2022 at 07:06:01AM +0200, Jonas Smedegaard wrote:
    [...] it lacks a detail I find crucial:
    Explicitly spelling out whether or not images containing non-free bits
    are official part of Debian or not. Personally I find it obvious that
    anything that would not be allowed into main also would not be treated
    as official part of Debian,

    I share the same concern as you: Steve's proposal would mean that installers
    containing non-free firmware become official part of Debian. My text does not.

    If Bart chose to extend the proposal to include that such media containing non-free bits (although permitted "alongside with the free media) would *not* be considered official part of Debian, then I would
    endorse the amended proposal.

    That would be repeating what's already true. My text includes only things that
    I propose to change. So what is off/unofficially today, remains that. It's like
    "the name of the project remains Debian". Why would I mention that.

    Does this cover your concern?

    It clarifies that my reading matches your intended reading. Thanks!

    Haa wonderful.

    Unfortunately it does not cover my concern that the text is ambiguous - i.e. despite intent your choice of words can lead voters to vote for
    this text but with varying expectations, which is a very bad situation.

    What exactly in my text do you mean?

    The part you *didn't* include (so I cannot point at it or quote it) ;-)

    Indeed, I see now that it's the point you made earlier.



    I still urge you to make explicit what will not change. Perhaps borrow from Simons text, if you (like me) like that?

    Simon Richter's text would permit the Debian project to replace the free installer by a non-free one. My text clearly mentions that the free installer
    is still there. Didn't you prefer the free installer to remain available?

    Ha! Indeed Simon Richter's text omit explicitly mentioning that a
    non-free installer is in _addition_ to the already free one -

    Indeed, it's a difference that is easily overlooked.

    although
    that intent is clear from his more elaborate text before the concrete
    draft ballot text.

    Very true, it's not in the draft ballot text, my point exactly.


    ...or paraphrased in your style: His text doesn't say "replace".

    I wrote "would permit to replace", not "will replace".


    Perhaps you see now - through an example not your own - how being
    explicit helps avoid ambiguity?

    True. Humans tend to read what's not written. That said, it is hard to prevent all possible unintended interpretations.



    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Thomas Goirand on Sat Aug 27 14:30:01 2022
    On Mon, Aug 22, 2022 at 05:50:43PM +0200, Thomas Goirand wrote:

    Seconded.

    Your message was not signed.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Simon Josefsson on Sat Aug 27 15:00:01 2022
    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That
    makes me sad. My preference for an outcome would be along the following lines.

    The key you signed this with (A3CC9C870B9D310ABAD4CF2F51722B08FE4745A2)
    is not in the debian keyring.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Devin Prater on Sat Aug 27 14:20:01 2022
    On Fri, Aug 19, 2022 at 07:36:17AM -0500, Devin Prater wrote:
    Seconded, thanks for mentioning the accessibility aspect!
    Devin Prater
    r.d.t.prater@gmail.com

    Your message was not signed, nor can I find you in the list of Debian Developers. So I'm not registering this as a second. There are already
    more than seconds enough.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Hubert Chathi on Sat Aug 27 15:20:01 2022
    On Tue, Aug 23, 2022 at 10:56:06AM -0400, Hubert Chathi wrote:

    s/Therefor/Therefore

    I've adopted this change.

    Thereby re-inforcing the interpretation that any installer or image

    I've also changed that to reinforcing.


    Let me know if that's not ok.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Jonas Smedegaard on Sat Aug 27 16:00:01 2022
    On Fri, Aug 26, 2022 at 07:06:01AM +0200, Jonas Smedegaard wrote:
    Quoting Jonas Smedegaard (2022-08-24 19:14:26)
    Quoting Bart Martens (2022-08-24 10:12:48)
    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Seconded. Thanks for proposing this alternative, Bart.

    I hereby withdraw my second for the above proposal.

    That changes it from 5 to 4 seconds. It's unclear to me what I need to
    do with the discussion period because of this. If I process the message
    in order, I think this was accepted and A.1.4 changes the discussion
    period.

    If only the 2nd option is accepted, I believe the end of the discussion
    period was the 2022-08-23 + 7 day, so 2022-08-30, which is still before
    the original 2022-09-01, so we keep that.

    With this option accepted, it would be 2022-08-26 + 7 days, which is 2022-09-02, which is the one I'm using.

    We currently have 4 proposals, of which 2 make have enough seconds.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Wouter Verhelst on Sat Aug 27 16:20:01 2022
    Hi Wouter,

    On 8/27/22 12:18, Wouter Verhelst wrote:

    The third point is something we can and should address in the medium term: >> so far, license checks for non-free components have been mostly "can Debian >> redistribute this" and "can users install this".

    Thus, your concern can easily be handled by requiring maintainers and/or ftpmasters to vet licenses of packages before they are moved to non-free-firmware.

    Indeed, that was the implied suggestion, because the "if you build a
    collection including non-free stuff, you're on your own" from DSC#5 no
    longer works when it's us who are preparing the collection.

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Rinn@21:1/5 to All on Sat Aug 27 16:50:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------I3S5ZaZ2RZnZCYVXwEdDRuRW
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gV2VkLCBBdWcgMjQsIDIwMjIgYXQgMTA6MTI6NDhBTSArMDIwMCwgQmFydCBNYXJ0ZW5z IHdyb3RlOg0KID4gSSBoZXJlYnkgcHJvcG9zZSB0aGUgZm9sbG93aW5nIGFsdGVybmF0aXZl IHRleHQgdG8gU3RldmUncyBvcmlnaW5hbCBwcm9wb3NhbC4NCiA+DQogPiA9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0NCiA+DQogPiBUaGUgRGViaWFuIHByb2plY3QgaXMg cGVybWl0dGVkIHRvIG1ha2UgZGlzdHJpYnV0aW9uIG1lZGlhIChpbnN0YWxsZXIgaW1hZ2Vz DQogPiBhbmQgbGl2ZSBpbWFnZXMpIGNvbnRhaW5pbmcgcGFja2FnZXMgZnJvbSB0aGUgbm9u LWZyZWUgc2VjdGlvbiBvZiB0aGUgRGViaWFuDQogPiBhcmNoaXZlIGF2YWlsYWJsZSBmb3Ig ZG93bmxvYWQgYWxvbmdzaWRlIHdpdGggdGhlIGZyZWUgbWVkaWEgaW4gYSB3YXkgdGhhdCB0 aGUNCiA+IHVzZXIgaXMgaW5mb3JtZWQgYmVmb3JlIGRvd25sb2FkaW5nIHdoaWNoIG1lZGlh IGFyZSB0aGUgZnJlZSBvbmVzLg0KID4NCiA+ID09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQ0KDQpTZWNvbmRlZC4gVGhhbmtzLCBCYXJ0IC0gYW5kIFN0ZXZlIGFuZCBldmVy eW9uZSBlbHNlIGludm9sdmVkIGluIHRoaXMgZGlzY3Vzc2lvbi4NCg==

    --------------I3S5ZaZ2RZnZCYVXwEdDRuRW--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEK9jU45eVX3dG2zuJrWkWlnOTmCsFAmMKLTIACgkQrWkWlnOT mCsRSQ/6Aod+IG9J+8rWckgfqn24j1DnLGK0FZUHjsNfrtSpmpilFATX+4ZBcQms BoRHPYtyx6T1kFxJot4EH/s4F7tIT4/QuFpEVgtEj+s33jw1SDAh22FIh1VwkRYQ xRiIK/Du3mzP/roD/LoilN3Tns4DNh8mumBCaMrkhWNJeT8WnjUeEy/UkT48B7Lq 5NQU8Dje3ZrzEo9V6mgMLcCRGWg751LsUT+4EcpVt0keFIqhbAt2dRj2m6JsrKzG rtghEW4Mnofxhnbbnt5kwsNGr0Q60KnBYxiQ2kS0scdr5Jo1FCGXhoBczbq+0DV0 rvsoXve3MwHkSVbWDht2rDHFdcjv3V5CUNtwNvyFDZVDwQfA7Cxyi7rWCeXCB17K VuImOq3C5ElY4G8d1x0nlA+DzrbgbSQcHgATH1MtyqdkmqmjuUV4Q45ueXkKlAqr JXBMnqjs+Gz4WUi7VMYuBzdhPkiIM6Ak3cALBpy9yXGjhWHd6Epdfdf4vU0PjTW/ mwIBdoCyX2dY/EhFSFEbC4yARvXMtdV3TuSpiSAKSzQoaDUEbMByY0rRz/MddiCb TowEhUZPqF/m32bgIOzg77ysPry3t2x9cU4hLnFO8gd5a8yPc0xqD6g0P1e72oqN C6o/M+NBHrjSyHSHysk9tpYpwZE2/fFZaVQCNmJkiHwBTwowncA=
    =jVES
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Steve McIntyre on Sat Aug 27 16:30:01 2022
    On Fri, Aug 19, 2022 at 11:26:51AM +0100, Steve McIntyre wrote:
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable
    the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Is this something you want to adopt?

    Would a non-free-firmware section in the archive be useful, so
    that other non-free software is not enabled by default?


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Kurt Roeckx on Sat Aug 27 17:50:01 2022
    On Sat, Aug 27, 2022 at 03:56:25PM +0200, Kurt Roeckx wrote:

    That changes it from 5 to 4 seconds. It's unclear to me what I need to
    do with the discussion period because of this. If I process the message
    in order, I think this was accepted and A.1.4 changes the discussion
    period.

    If only the 2nd option is accepted, I believe the end of the discussion period was the 2022-08-23 + 7 day, so 2022-08-30, which is still before
    the original 2022-09-01, so we keep that.

    With this option accepted, it would be 2022-08-26 + 7 days, which is 2022-09-02, which is the one I'm using.

    So we're at 5 again, it's now set to 2022-09-03.

    We currently have 4 proposals, of which 2 make have enough seconds.

    Now we have 3.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew M.A. Cater@21:1/5 to Kurt Roeckx on Sat Aug 27 19:30:01 2022
    On Sat, Aug 27, 2022 at 04:26:40PM +0200, Kurt Roeckx wrote:
    On Fri, Aug 19, 2022 at 11:26:51AM +0100, Steve McIntyre wrote:
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable >the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Is this something you want to adopt?

    Would a non-free-firmware section in the archive be useful, so
    that other non-free software is not enabled by default?


    Hi,

    The placeholder in the archive has already been set up: I think that
    happened in Kosovo.

    All the very best

    Kurt


    Andy Cater

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Kurt Roeckx on Sun Aug 28 04:30:01 2022
    Kurt Roeckx <kurt@roeckx.be> writes:

    That changes it from 5 to 4 seconds. It's unclear to me what I need to
    do with the discussion period because of this. If I process the message
    in order, I think this was accepted and A.1.4 changes the discussion
    period.

    Yes, this was the intent. If a ballot option is accepted, the discussion period changes. If sponsors of that ballot option then withdraw so that
    it falls below the required number of sponsors, that triggers A.2.3, and there's a 24-hour period where new sponsors can step forward. If that
    does happen, there's no change to the ballot. If that doesn't happen, the option is withdrawn, but as A.2.3 says, that doesn't change the discussion period. So, either way, the discussion period is lengthened by the
    initially accepted ballot option.

    (The rationale here is that the discussion period is extended if there is
    churn in the ballot because that probably means people are processing and
    may need more time.)

    That said, if someone sponsors a ballot option and then withdraws the sponsorship before the secretary sees it, so that the secretary sees both messages at the same time, I think it's entirely reasonable to just
    disregard that sponsorship entirely.

    So in other words I think either approach works at the secretary's
    discretion, in the case where the threshold sponsorship was made and then withdrawn before the secretary saw it.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Russ Allbery on Sun Aug 28 11:00:02 2022
    On Sat, Aug 27, 2022 at 07:26:04PM -0700, Russ Allbery wrote:
    Kurt Roeckx <kurt@roeckx.be> writes:

    That changes it from 5 to 4 seconds. It's unclear to me what I need to
    do with the discussion period because of this. If I process the message
    in order, I think this was accepted and A.1.4 changes the discussion period.

    Yes, this was the intent. If a ballot option is accepted, the discussion period changes. If sponsors of that ballot option then withdraw so that
    it falls below the required number of sponsors, that triggers A.2.3, and there's a 24-hour period where new sponsors can step forward. If that
    does happen, there's no change to the ballot. If that doesn't happen, the option is withdrawn, but as A.2.3 says, that doesn't change the discussion period. So, either way, the discussion period is lengthened by the
    initially accepted ballot option.

    So reading A.2.3, there was a 24 hour window between the withdrawal and
    finding a new sponsor. It seems that there was more than 24 hours. Does
    that mean the option should have been proposed and sponsored again?


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Kurt Roeckx on Sun Aug 28 11:10:01 2022
    On Sun, Aug 28, 2022 at 10:52:42AM +0200, Kurt Roeckx wrote:
    On Sat, Aug 27, 2022 at 07:26:04PM -0700, Russ Allbery wrote:
    Kurt Roeckx <kurt@roeckx.be> writes:

    That changes it from 5 to 4 seconds. It's unclear to me what I need to
    do with the discussion period because of this. If I process the message in order, I think this was accepted and A.1.4 changes the discussion period.

    Yes, this was the intent. If a ballot option is accepted, the discussion period changes. If sponsors of that ballot option then withdraw so that
    it falls below the required number of sponsors, that triggers A.2.3, and there's a 24-hour period where new sponsors can step forward. If that
    does happen, there's no change to the ballot. If that doesn't happen, the option is withdrawn, but as A.2.3 says, that doesn't change the discussion period. So, either way, the discussion period is lengthened by the initially accepted ballot option.

    So reading A.2.3, there was a 24 hour window between the withdrawal and finding a new sponsor. It seems that there was more than 24 hours. Does
    that mean the option should have been proposed and sponsored again?

    An other interpretation is that if it happens within 24 hours, the
    period doesn't change. If it doesn't happen within 24 hours it does. I
    think at least that was the intention, and that is what I did.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Guilhem Moulin@21:1/5 to Simon Josefsson on Sun Aug 28 11:10:01 2022
    On Tue, 23 Aug 2022 at 10:39:57 +0200, Simon Josefsson wrote:
    ==================

    We continue to stand by the spirit of the Debian Social Contract §1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract §5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system, although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus, although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    Seconded

    --
    Guilhem.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmMLLsUACgkQ05pJnDwh pVKbsQ/+OOWzKdUEgpwCYXuSBngg5CIn64dhoTLEDfjng1TKDA+ojKrzDhnUwaRC PSQIcN/2kvS6Zp4/3rsmA+MuPeldp0LzMEuGLORJJd5NJbORUAjh/nk1p1wO01Gn VJVanfwk1YcLSqBhT/m3MT/o9E3CglP+dKGlZ1lydvFrlc3mLMexDSer8SjjWEbh Is8xi52hsrkFeuKQmn3Su0nQtM4HdkGbSWeHgTIjOHBYBNgZT4JEtDoh3fdVRVrq HfgC8HI8ieNIMHqKiMdpOCskRF+sHW5r2JD6T5ukPy4to0aW0RtCS46o2qfFfl28 z/FsN0jtyNlVX65rPda+v+48BjbwfAuh8Mi6FG6E+J+NQLJ5b165OwCMS17mtyWI IxqEJTFHNhpUEKx4mVfybK+NrtfpRduoSo1EteOF2fnQ/qWmXYDN00yg1GrUo3y/ vKzvRaqPTC/iE0wUNPjt4NcB4l5+HlyHZPuDb5106NIYvCw62pBI717o6gy8soV1 Nhk8eh796MEIuw8z1XU1gmBjhb9saRXBdNLhBQiNdqvqVqDdJzZ6ExH+7jYD0cbm HJXC5jw4k77zR1MsZitO42lv8s7mxhktnlbjDv4XjmsR7l2mKcCUXbqu1S8M10JX ywqvu76i176rs3wLMXMmpQmaXKst8dG5FPwMHdbKFBOaNCw0NRE=
    =Duxg
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philipp Kern@21:1/5 to Gunnar Wolf on Sun Aug 28 17:20:02 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    On Mon, Aug 22, 2022 at 12:32:54PM -0500, Gunnar Wolf wrote:
    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be
    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    =================================

    Seconded. Thanks, Gunnar!

    Kind regards
    Philipp Kern
    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEPzuChCNsw7gPxr3/RG4lRTXQVuwFAmMLhycACgkQRG4lRTXQ VuzKWgf6AnMIJi7hiIguYO9DK5c+thSvfBVQTAG11bBj7/Aa5fhRUgRvEs7kfVFY r1NINdru/FeJT6v2TZwZpLhI65J2F495cgeEm+VN3xfYuPVSx+1N+eLBTsRLzwhE vjKUMAs+mhvgiPNCmOdTIo5sNqVKZZHY83GoBsE2bv5J3GlWNpwp/00Cfghvvqpb g0/37W1wtcn+n8BQZRPY0cmXxk07501i7sxgzDuDuH1Bn/d3g+ZI3aAA6hKQBpCx YK/9PwzUC7RzH7Bl4wbspP3Ciypsg4c5CO+Zs/j//3NgM3XoHYflkd2ZYEONPenq 83PKiWplJxibIwDU0AahI+7kqYamrA==
    =Tmjl
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Kurt Roeckx on Sun Aug 28 18:20:02 2022
    Kurt Roeckx <kurt@roeckx.be> writes:
    On Sun, Aug 28, 2022 at 10:52:42AM +0200, Kurt Roeckx wrote:

    So reading A.2.3, there was a 24 hour window between the withdrawal and
    finding a new sponsor. It seems that there was more than 24 hours. Does
    that mean the option should have been proposed and sponsored again?

    An other interpretation is that if it happens within 24 hours, the
    period doesn't change. If it doesn't happen within 24 hours it does. I
    think at least that was the intention, and that is what I did.

    Oh, I see what you're saying. Yes, I agree with your interpretation. I
    missed that it had been more than 24 hours.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco d'Itri@21:1/5 to sjr@debian.org on Sun Aug 28 21:10:01 2022
    sjr@debian.org wrote:

    Free installer:

    - will not work with some hardware
    This is a bit more complex than that. The current installer is insecure
    for all systems which use Intel and AMD CPUs (i.e., with very good approximation, almost all of them), because microcode updates provide mitigations for speculative attacks and other various bug fixes.

    + fully supported
    Is the kernel team actually willing to support systems not running
    current microcode?

    + can be redistributed freely
    Just like the installer containing non-free firmwares, then.

    Installer including firmware:

    + supports more hardware
    Actually: needed to support all the most widely used hardware, i.e. x86
    systems and Raspberry Pis.

    - some bugs might be unfixable
    True, but OTOH not updating the system firmwares guarantees that some
    known bugs are not being fixed.

    - users need to be aware of non-free licenses
    I believe that "need" here is a strong word. Some users will /like/ to
    know which non-free firmwares they need to use (I do!), but I cannot
    think of any reasonable scenario in which somebody /needs/ to know that.

    IMO: Both installers should be on the same download page, with a brief >explanation on who should select which (like we used to have in package >descriptions), and possibly a longer page explaining this in more detail. Looks like you are volunteering to build the firmware-free media then,
    good to know.

    --
    ciao,
    Marco

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to All on Sun Aug 28 23:20:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------aibO2qFPt8Q0JGY9uhNqOaQY
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGkgTWFyY28sDQoNCj4+IC0gdXNlcnMgbmVlZCB0byBiZSBhd2FyZSBvZiBub24tZnJlZSBs aWNlbnNlcw0KDQo+IEkgYmVsaWV2ZSB0aGF0ICJuZWVkIiBoZXJlIGlzIGEgc3Ryb25nIHdv cmQuIFNvbWUgdXNlcnMgd2lsbCAvbGlrZS8gdG8NCj4ga25vdyB3aGljaCBub24tZnJlZSBm aXJtd2FyZXMgdGhleSBuZWVkIHRvIHVzZSAoSSBkbyEpLCBidXQgSSBjYW5ub3QNCj4gdGhp bmsgb2YgYW55IHJlYXNvbmFibGUgc2NlbmFyaW8gaW4gd2hpY2ggc29tZWJvZHkgL25lZWRz LyB0byBrbm93IHRoYXQuDQoNCkFzIEkndmUgbWVudGlvbmVkIGVhcmxpZXIsIERlYmlhbiBo YXMgb3RoZXIgdXNlcnMgdGhhbiBlbmQgdXNlcnMgDQppbnN0YWxsaW5nIHRoZWlyIHBlcnNv bmFsIGxhcHRvcHMuIEkgd2hvbGx5IGFncmVlIHRoYXQgInBlcnNvbmFsIA0KY29tcHV0ZXIi IHVzZXJzIGFyZSBiZXN0IHNlcnZlZCB3aXRoIGEgZGVmYXVsdCBpbnN0YWxsYXRpb24gdGhh dCANCmluY2x1ZGVzIG5vbi1mcmVlIGZpcm13YXJlLg0KDQpIb3dldmVyIGluIGEgcHJvZmVz c2lvbmFsIGVudmlyb25tZW50LCBib3RoIGxpY2Vuc2luZyBhbmQgYXZhaWxhYmlsaXR5IA0K b2Ygc3VwcG9ydCBvcHRpb25zIGFyZSBpbXBvcnRhbnQgY29uY2VybnMuIFRoZXJlIGFyZSBj b21wYW5pZXMgYW5kIA0KaW5kaXZpZHVhbCBjb25zdWx0YW50cyB3aG8gY2FuIGZpeCBkcml2 ZXIgaXNzdWVzIHllYXJzIGFmdGVyIHZlbmRvciANCnN1cHBvcnQgaGFzIHJ1biBvdXQuIEkn dmUgZm9yd2FyZC1wb3J0ZWQgcXVpdGUgYSBmZXcgZHJpdmVycyBmb3IgDQppbmR1c3RyaWFs IG1hY2hpbmVzIGFuZCBzcGVjaWFsaXplZCBoYXJkd2FyZSBsaWtlIGJhZGdlIHJlYWRlcnMg ZnJvbSANCjIuNi4xOCB0byAyLjYuMzYgdG8gNC4xOCB0byA1LjEwWzFdLg0KDQpOb25lIG9m IHVzIGNhbiBoZWxwIHdpdGggZmlybXdhcmUgaXNzdWVzIHdpdGhvdXQgdmVuZG9yIHN1cHBv cnQsIHRob3VnaCwgDQpzbyB0aGVzZSB1c2VycyBhYnNvbHV0ZWx5IGhhdmUgYSAqbmVlZCog dG8ga25vdyB3aGF0IG5vbi1mcmVlIGZpcm13YXJlIA0KdGhleSBhcmUgdXNpbmcsIHdobyBp cyBwcm92aWRpbmcgdGhhdCwgYW5kIHdoYXQgbGV2ZWwgb2Ygc3VwcG9ydCB0aGV5IA0KY2Fu IGV4cGVjdCBpbiB0aGUgZnV0dXJlLCBqdXN0IGZyb20gYSBjb250aW51aXR5IG9mIGJ1c2lu ZXNzIA0KcGVyc3BlY3RpdmUsIGFuZCB0aGV5IGFsc28gbmVlZCB0byBiZSBmdWxseSBjb21w bGlhbnQgd2l0aCBhbnkgbGljZW5zZXMsIA0Kc28gdGhleSAqbmVlZCogdG8gcnVuIHRoZXNl IGJ5IHRoZWlyIGxlZ2FsIHRlYW0uDQoNCkludGVsIG1pY3JvY29kZSB1c2VkIHRvIGNvbWUg d2l0aCBhIGxpY2Vuc2UgdGhhdCBpbmNsdWRlZA0KDQogICAgIERPIE5PVCBET1dOTE9BRCwg SU5TVEFMTCwgQUNDRVNTLCBDT1BZLCBPUiBVU0UgQU5ZIFBPUlRJT04gT0YgVEhFDQogICAg IFNPRlRXQVJFIFVOVElMIFlPVSBIQVZFIFJFQUQgQU5EIEFDQ0VQVEVEIFRIRSBURVJNUyBB TkQgQ09ORElUSU9OUw0KICAgICBPRiBUSElTIEFHUkVFTUVOVC4gQlkgSU5TVEFMTElORywg Q09QWUlORywgQUNDRVNTSU5HLCBPUiBVU0lORyBUSEUNCiAgICAgU09GVFdBUkUsIFlPVSBB R1JFRSBUTyBCRSBMRUdBTExZIEJPVU5EIEJZIFRIRSBURVJNUyBBTkQgQ09ORElUSU9OUw0K ICAgICBPRiBUSElTIEFHUkVFTUVOVC4NCg0KVGhleSBoYXZlLCBhdCB0aGUgaW5zaXN0ZW5j ZSBvZiB0aGUgY29tbXVuaXR5LCByZXZpc2VkIHRoZXNlIHRlcm1zIHRvIA0KYWxsb3cgdXMg dG8gcmVkaXN0cmlidXRlIHRoZSBtaWNyb2NvZGUgZmlsZXMsIGFuZCB0aGlzIGV4dGVuZHMg ZG93biB0byANCmRlcml2ZWQgZGlzdHJpYnV0aW9ucyBhbmQgbWVkaWEgcHJvZHVjZXJzLCBz byBjb3Jwb3JhdGlvbnMgYXJlIGxpa2VseSBpbiANCnRoZSBjbGVhciBmcm9tIGEgbGVnYWwg cG9pbnQgb2YgdmlldyBpZiB0aGV5IGRpc3RyaWJ1dGUgdGhlc2UgZmlsZXMgZnJvbSANCnRo ZWlyIGluLWhvdXNlIHNlcnZlcnMgYXMgd2VsbC4NCg0KV2hhdCBpcyB0aGUgbGljZW5zZSBz dGF0dXMgb2YgYWxsIHRoZSBvdGhlciBmaXJtd2FyZSBmaWxlcz8gSSBkbyBub3QgDQprbm93 LiBJIGRvbid0IGhhdmUgdG8gY2FyZSwgSSdtIG5vdCBpbiBjaGFyZ2Ugb2YgYSBjb21wYW55 IG5ldHdvcmsuDQoNCklmIERlYmlhbiBwcm92aWRlcyBhbiBpbnN0YWxsZXIgaW1hZ2UsIGJ1 dCBkb2VzIG5vdCBhdCB0aGUgc2FtZSB0aW1lIA0KcHJvbWlzZSB0byBoYXZlIHZldHRlZCBh bGwgYXBwbGljYWJsZSBsaWNlbnNlcyBhZ2FpbnN0IGEgbGlzdCBvZiANCmNyaXRlcmlhIHRo YXQgaXMgYWNjZXB0YWJsZSB0byB0aGUgbGVnYWwgZGVwYXJ0bWVudCwgdGhpcyBpbnN0YWxs ZXIgDQppbWFnZSBiZWNvbWVzIGNsb3NlIHRvIHVzZWxlc3MgdG8gY29ycG9yYXRlIHVzZXJz Lg0KDQpXaGF0IGlzIGNvbnZlbmllbmNlIHRvIGVuZCB1c2VycyBpcyBhIGxpYWJpbGl0eSBp biB0aGUgcHJvZmVzc2lvbmFsIA0Kd29ybGQsIGFuZCBjb252ZW5pZW5jZSB0byBjb3Jwb3Jh dGUgdXNlcnMgaXMgYSBibGFua2V0IHN0YXRlbWVudCB0aGF0IA0KYWxsIHRoZSBsaWNlbnNl cyBoYXZlIGJlZW4gdmV0dGVkIHRvIGNvbXBseSB3aXRoIHRoZSBERlNHLg0KDQpGb3IgdGhh dCByZWFzb24gYWxvbmUgSSBkb24ndCBiZWxpZXZlIHdlIGNhbid0IGdldCByaWQgb2YgdGhl ICJmcmVlIA0Kc29mdHdhcmUgb25seSIgaW5zdGFsbGVyLiBEZWJpYW4ncyBmb3VuZGF0aW9u IGRvY3VtZW50cyBhcmUgYW5vdGhlci4NCg0KVGhlIGFjdHVhbCB0ZWNobmljYWwgZGlmZmVy ZW5jZSBiZXR3ZWVuIHRoZSB0d28gaW5zdGFsbGVyIGltYWdlcyBzaG91bGQgDQpiZSBvbmx5 IHdoZXRoZXIgdGhlIGZpbGVzIGFyZSBhY3R1YWxseSBpbmNsdWRlZC4gRXZlbiB0aGUgZnJl ZSBpbnN0YWxsZXIgDQp3aWxsIG5lZWQgdG8gYmUgYWJsZSB0byBnZW5lcmF0ZSBhIHJlcG9y dCBvZiBtaXNzaW5nIGZpcm13YXJlIGZpbGVzLCBhbmQgDQpzbyB3aWxsIHRoZSBub24tZnJl ZSBpbnN0YWxsZXIgKGJlY2F1c2UgdGhlcmUgYXJlIGZpcm13YXJlIGZpbGVzIHdlIA0KY2Fu J3QgaW5jbHVkZSBsZWdhbGx5LCB0aGF0IGFyZSBub3QgaW4gbm9uLWZyZWUgZWl0aGVyLCBi dXQgdGhhdCB1c2VycyANCm1heSB3YW50IHRvIGluc3RhbGwgb24gdGhlaXIgb3duKSwgYW5k IHRoZSBydW5uaW5nIHN5c3RlbS4NCg0KICAgIFNpbW9uDQoNClsxXSBUaGVzZSBrZXJuZWwg dmVyc2lvbnMgYXJlIG5vdCBieSBhY2NpZGVudCB0aG9zZSB0aGF0IERlYmlhbiBzaGlwcGVk IA0KaW4gc3RhYmxlIHJlbGVhc2VzLg0K

    --------------aibO2qFPt8Q0JGY9uhNqOaQY--

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEtjuqOJSXmNjSiX3Tfr04e7CZCBEFAmML2CEACgkQfr04e7CZ CBG9vQf+PFzVKj3RRgsRKn4jLMG7kWVLT5Y8171DrTyBY7JkJ6T3/8aL3Nz0xOvo o+pJ0jMdhfzR2sKd1LcFDNq9H/+gnLbVkLx/UNWOBwf9LgJultyGDl9EzsOSALE0 rU+fTrgGZGQKye5ikXb+JN31u5mJibh2TNFTdfUJWMcfLjgrFCflhPsZWINal+Zy 0JWZRE88hzmDn6ngWYdtNWgCG//WyQlHy1t9PNSa7P4G+gzLmLbqfrorzCzcwYb/ MGwgD8FJhCIqVSJtNY6WxCBmKtXgbIDA6yWfMY0mraev3x7/7uc4uLaZY2y0nl0V aUbyTIoWR2t3R8QhAwF8p1cxOEh6Og==
    =8FNz
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco d'Itri@21:1/5 to Simon.Richter@hogyros.de on Mon Aug 29 00:20:03 2022
    Simon.Richter@hogyros.de wrote:

    If Debian provides an installer image, but does not at the same time
    promise to have vetted all applicable licenses against a list of
    criteria that is acceptable to the legal department, this installer
    image becomes close to useless to corporate users.
    I *am* a corporate user and I believe that the scenario that you are
    describing is highly unusual.

    Anyway, nothing of this really matters and it is pointless to argue this
    point because:
    - corporate users need non-free firmwares like everybody else, and
    - nobody is arguing that installation of non-free firmwares should be
    somehow hidden from users

    --
    ciao,
    Marco

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Kurt Roeckx on Mon Aug 29 09:10:01 2022
    Kurt Roeckx <kurt@roeckx.be> writes:

    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That
    makes me sad. My preference for an outcome would be along the following
    lines.

    The key you signed this with (A3CC9C870B9D310ABAD4CF2F51722B08FE4745A2)
    is not in the debian keyring.

    I'm signing this with my debian RSA key.

    /Simon

    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefore we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract 5
    which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQFIBAEBCgAyFiEEmUFc4ZBdDlWp+IAmhgt/uzL4EZ0FAmMMZX8UHHNpbW9uQGpv c2Vmc3Nvbi5vcmcACgkQhgt/uzL4EZ1b+Qf9GM6h8TFNYrVCmfVKFWyh+v4i4ml1 0puPMhMMeqgmkf2CCBIcvH1kjGnOdUhLmPhA/DvIpm9a5vwWAHsUveIUBHL7Ghjd VV9jbD1w7BYv/HvYvUkURKevnZDIliXsA2DsTPBd9F+bkLxJ22j9Ukz+m4zfSu9L DIl2Ncw1763yZvVndyC+oTCm2zMjtfIRi4JCSczqc8e+6ojubOVTwzRl+gpId+If neUFfZkDIsBW6K7rNW/nVrrjLg7/wz7ak8Q6RGruDPyA4WmLSeKCGTahhcoiI/aT P9a2fkbtOJOvwlwWswNOc8RonxvQUmcjSmsfIMOQ3YVo/3usoroyXrNq/g==gLEs
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Jonas Smedegaard on Mon Aug 29 09:40:01 2022
    Jonas Smedegaard <jonas@jones.dk> writes:

    I view the official Debian install image as a component of Debian, and consequently if the (only) official Debian install image were to contain non-free bits then we would violate DSC#1.

    I also find this problematic. As far as I can tell, the alternatives on
    this vote that results in Debian shipping non-free software will make
    the project violate the current DSC.

    Reading https://www.debian.org/devel/constitution.en.html I don't
    understand who decides the majority requirements for voting options, can someone explain? Is it the project secretary? What are they for the
    current vote?

    I believe it would be bad for the project if the supermajority
    requirements of changing a fundational document is worked around by
    approving a GR vote with simple majority that says things contrary to
    what the DSC says.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYwxshhQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFogrKAQD9toV9uE4WVYAxlSBRRSOFoi/UqCGm Kyl3WcV82cofRwD/TkkpP0//rYQhhNJSSEe2vLhYl05r2xyJtIYfJbZr9wY=
    =bv+x
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Vincent Bernat@21:1/5 to Simon Josefsson on Mon Aug 29 12:30:01 2022
    On 2022-08-23 10:39, Simon Josefsson wrote:

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    The initial proposition was also pushing a new non-free-firmware
    component. Are you also against a new component that could be enabled by
    users without enabling contrib/non-free?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Simon Josefsson on Mon Aug 29 23:10:02 2022
    On Mon, Aug 29, 2022 at 09:36:37AM +0200, Simon Josefsson wrote:
    Jonas Smedegaard <jonas@jones.dk> writes:

    I view the official Debian install image as a component of Debian, and consequently if the (only) official Debian install image were to contain non-free bits then we would violate DSC#1.

    I also find this problematic. As far as I can tell, the alternatives on
    this vote that results in Debian shipping non-free software will make
    the project violate the current DSC.

    Reading https://www.debian.org/devel/constitution.en.html I don't
    understand who decides the majority requirements for voting options, can someone explain? Is it the project secretary? What are they for the
    current vote?

    The majority requirement depends on which of the powers in 4.2 they
    want to use. Some of the previous GRs where very explicit in which power
    they want to use, like saying it's a position statement.

    I currently believe that non of the options require a 3:1 majority since
    they do not amend the constitution or a Foundation Document.

    But it's currently not clear if this is a technical or non-technical
    decision, and so might require a 2:1 majority.

    I believe it would be bad for the project if the supermajority
    requirements of changing a fundational document is worked around by
    approving a GR vote with simple majority that says things contrary to
    what the DSC says.

    If you believe that any of the options conflict with the DSC, I would
    like to see a discussion about that too.

    It's my current interpretation that all voting options, even if they
    might conflict with the DSC, will be on the ballot, and might not
    require a 3:1 majority. That is, I don't think the Secretary can decide
    not to include an option that might conflict, or put a 3:1 majority
    requirement on it because they think it conflicts.

    However, if an option that might conflict wins, the Secretary might
    have to decide if it conflicts or not, and if it conflicts void the
    GR.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Vincent Bernat on Mon Aug 29 22:30:01 2022
    Vincent Bernat <bernat@debian.org> writes:

    On 2022-08-23 10:39, Simon Josefsson wrote:

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    The initial proposition was also pushing a new non-free-firmware
    component. Are you also against a new component that could be enabled
    by users without enabling contrib/non-free?

    I don't know what that is so have not formed an opinion, but introducing
    a new component or not sounds orthogonal to the question whether to
    include non-DFSG content in the installer and enable it on installed
    systems by default -- which I believe is against both the spirit and
    letter of Debian's social contract.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYw0gcBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFongrAQCiswhFWOy4rHr5i/mRSetl24oRiMRg mrau/WB0OdgVmwD6ApByVBKxDKNXmf+7GDsn4tsFdHQv0Ukc+161c01Pogc=
    =hLxp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Steve McIntyre on Mon Aug 29 23:10:02 2022
    On Mon, Aug 29, 2022 at 09:38:52PM +0100, Steve McIntyre wrote:
    Hi Kurt!

    On Sat, Aug 27, 2022 at 04:26:40PM +0200, Kurt Roeckx wrote:
    On Fri, Aug 19, 2022 at 11:26:51AM +0100, Steve McIntyre wrote:
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable >> >the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Is this something you want to adopt?

    Yes, I think it improves things.

    So can you send a signed message saying that?


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Simon Josefsson on Mon Aug 29 23:00:01 2022
    Hi Simon!

    On Mon, Aug 29, 2022 at 09:06:38AM +0200, Simon Josefsson wrote:

    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefore we will not include any non-free software in Debian, nor in the >main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract 5 >which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with >non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    This last bit of wording is slightly unclear to me. Should *Debian* be
    allowed to distribute an installer or image with non-free software on
    it?

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com < liw> everything I know about UK hotels I learned from "Fawlty Towers"

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Kurt Roeckx on Mon Aug 29 22:40:01 2022
    Hi Kurt!

    On Sat, Aug 27, 2022 at 04:26:40PM +0200, Kurt Roeckx wrote:
    On Fri, Aug 19, 2022 at 11:26:51AM +0100, Steve McIntyre wrote:
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable
    the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Is this something you want to adopt?

    Yes, I think it improves things.

    Would a non-free-firmware section in the archive be useful, so
    that other non-free software is not enabled by default?

    Definitely, that's an important feature here IMHO. We already have
    that new section available, it's just not supported everywhere yet.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "C++ ate my sanity" -- Jon Rabone

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Kurt Roeckx on Tue Aug 30 05:00:01 2022
    Kurt Roeckx <kurt@roeckx.be> writes:

    If you believe that any of the options conflict with the DSC, I would
    like to see a discussion about that too.

    It's my current interpretation that all voting options, even if they
    might conflict with the DSC, will be on the ballot, and might not
    require a 3:1 majority. That is, I don't think the Secretary can decide
    not to include an option that might conflict, or put a 3:1 majority requirement on it because they think it conflicts.

    I'm not disagreeing with Kurt's interpretation here, but as a voter I
    would love for one of the proponents of a ballot option to add non-free firmware to the installer to state that they are going for a 3:1 majority
    to modify the Social Contract and add an explicit statement to this effect
    to point 5 of the Social Contract. It would only take a sentence, I
    suspect, something like:

    The Debian installer may include firmware that does not conform to the
    Debian Free Software Guidelines to enable use of Debian with hardware
    that requires such firmware.

    (I hear the folks who think we need to define firmware; I don't agree, but
    I respect the argument and wouldn't vote against an option that tried to
    do that.)

    The failure mode that I'm worried about here is that a ballot option
    passes expressing a position that we should include non-free firmware but
    since it doesn't explicitly update the Social Contract some folks who
    disagree with this direction for Debian continue to believe doing so is
    invalid and we don't actually put the argument to rest. Also, if the 3:1 majority option doesn't pass but a 1:1 option that doesn't require a supermajority does pass, that's also useful information. (For example, I believe that would imply that such an installer has to continue to be
    labeled as unofficial and not a part of the Debian system, since I think
    that's the plain meaning of point 5 of the Social Contract.)

    However, if an option that might conflict wins, the Secretary might have
    to decide if it conflicts or not, and if it conflicts void the GR.

    It would be better if we could figure that out in advance of the vote, of course, since it might be relevant to choice ranking.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Steve McIntyre on Tue Aug 30 04:20:01 2022
    On Mon, 2022-08-29 at 21:49 +0100, Steve McIntyre wrote:

    This last bit of wording is slightly unclear to me. Should *Debian* be allowed to distribute an installer or image with non-free software on it?

    and if so, how/where should we be allowed to mention/document/promote
    the images containing non-free firmware?

    Currently the existing images containing non-free firmware are
    mentioned on the download page linked from the website front page,
    but are labelled "unofficial" and in the "Other Installers" section.

    https://www.debian.org/download

    The longer older download pages similarly labels the non-free firmware
    images as "unofficial" and mention them at the very end of the page.

    https://www.debian.org/distrib/

    The even older Debian CD page doesn't mention non-free firmware at all.

    https://www.debian.org/CD/

    The Debian installation guide has sections on non-free firmware, the
    first one seems to be outdated as it seems to imply the firmware images
    are not possible.

    https://www.debian.org/releases/stable/amd64/ch02s02.en.html https://www.debian.org/releases/stable/amd64/ch06s04.en.html

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMNcxYACgkQMRa6Xp/6 aaOwtQ//SfrHepl+7EtrUOvxgIBmswKjj08ZF14paUUDWUTdRP2ggGfIRQuwWY2H UPy8JsmhKED/l0imixAUVysHXAQCJWkbVHWMfMMLSXtvcGLutqbambE1zMArPHdJ dF1NFlMULD7tT6ruX30H7HVAAQqAHqfRH+LQngDHS6dkpyw3GQ5L/8e7Qep4caA7 xJhQEpmXsn+LSPcODKX6aD1gqz1Y1DcAepKpZGKggMNerbZQKGpQ1cjG5yD3N5RE x+XtHjYbiYTuQ0p9ywzuU8a3AAco4BhoJ3gEikW0IbUsuUyIx/490oqWGQfft+8L M1/dKYzMRvmYhQZ+ZXjX4i83+nZ7xRnJZGWW6fxOK7ugVbc2uFmZCdDtFYsmA1dy bqIoTUzxpv+8LvI1ZxiVe7II28M4t6NCRsjb+u1lpmGiMLz5RhNIT7BrcuOuENbq J4Pele9+WR6UN+OTfqsOhxRKxqLkrBxf+5xJyxATIK1FHSeNWJdRjuZ1OqtG+ixO m7eIBK6wRzddQoBfwAWKa3yK5nzi2wYBF367mfPYJIelH9i2NKFw7NNokzKmSF2t JjchK5W8gb8B3x9PDgZiZpl/NvaEdjSryP+fV8m3ZoI3TmxUnv6WMQO0l+6iRGBv 3MzICpN2mZgiceZKMz5k1WeQCfUh5+nw2WYzP8dwNO0iZnypePs=
    =77IW
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Steve McIntyre on Tue Aug 30 09:30:02 2022
    Steve McIntyre <steve@einval.com> writes:

    Hi Simon!

    On Mon, Aug 29, 2022 at 09:06:38AM +0200, Simon Josefsson wrote:

    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefore we will not include any non-free software in Debian, nor in the >>main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract 5 >>which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with >>non-free software on it is not part of the Debian system, but that we >>support their use and welcome others to distribute such work.

    ==================

    This last bit of wording is slightly unclear to me. Should *Debian* be allowed to distribute an installer or image with non-free software on
    it?

    Hi Steve. I'm not sure I can reliably answer -- the distinction between "Debian" as the project and "Debian" as the operating system is (for me) somewhat blurry and inconsistent throughout the current foundational
    documents, and it is equally unclear (to me) in your question.

    Do you intend the Debian OS (which to me includes various installers and
    other auxilliary software that is needed to produce and maintain an OS)
    or the Debian project (which to me is about the community and not the deliverable)? Or is your understanding of the situation different than
    mine so your question really mean different things to us? I have a
    feeling that is the case, but it is subtle.

    I believe it used to be better in the older social contract which used
    'Debian GNU/Linux' in a couple of places which made it clear that the
    sentence referred to the deliverable and not the community. That was
    lost a couple of years ago, replacing it with 'Debian' which makes it
    unclear what it refers to. The website has been similary modified
    throughout the years, leading to the same ambiguity.

    Speaking personally (and thus merely as an anecdote), my way to resolve
    this conflict (when I belatedly decided to join as DD) has been that
    'Debian' as an OS is promised to be 100% DFSG free but 'Debian' as a
    project will accept to distribute certain non-free material on its
    servers. Thus Debian can be labeled as a 100% free OS but Debian as a
    project deals with non-free content but not as a first-class citizen.
    This has lead to forks that don't want to be stuck with the same dilemma
    -- Ubuntu/etc as a non-free variant and gNewSense/PureOS/etc as a free
    variant. This inconsistency may continue to be both a curse and a
    blessing, allowing Debian to be relevant to both worlds.

    I agree with you that improving clarity on this topic will be a good
    thing. Fixing that is outside of my current goals though, as what I
    want to achieve is to see Debian continue to deliver a 100% DFSG-free
    Debian OS. It makes me sad to see such efforts to stop that.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYw26wBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFojMtAPsFxM4jsPtmyOOz0JOdRKCYFjHyr1Oi usMn/9DpfExwxQEA6k9kDGL5B8yWrO+SIUtKkDNPnWI093ZvrsKkxSawowk=pdnJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Tue Aug 30 10:30:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------34pxbHsJRcN8Z2BmOjsGnT04
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gOC8yOS8yMiAxNjowMiwgS3VydCBSb2Vja3ggd3JvdGU6DQo+IEl0J3MgbXkgY3VycmVu dCBpbnRlcnByZXRhdGlvbiB0aGF0IGFsbCB2b3Rpbmcgb3B0aW9ucywgZXZlbiBpZiB0aGV5 DQo+IG1pZ2h0IGNvbmZsaWN0IHdpdGggdGhlIERTQywgd2lsbCBiZSBvbiB0aGUgYmFsbG90 LCBhbmQgbWlnaHQgbm90DQo+IHJlcXVpcmUgYSAzOjEgbWFqb3JpdHkuIFRoYXQgaXMsIEkg ZG9uJ3QgdGhpbmsgdGhlIFNlY3JldGFyeSBjYW4gZGVjaWRlDQo+IG5vdCB0byBpbmNsdWRl IGFuIG9wdGlvbiB0aGF0IG1pZ2h0IGNvbmZsaWN0LCBvciBwdXQgYSAzOjEgbWFqb3JpdHkN Cj4gcmVxdWlyZW1lbnQgb24gaXQgYmVjYXVzZSB0aGV5IHRoaW5rIGl0IGNvbmZsaWN0cy4N Cj4gDQo+IEhvd2V2ZXIsIGlmIGFuIG9wdGlvbiB0aGF0IG1pZ2h0IGNvbmZsaWN0IHdpbnMs IHRoZSBTZWNyZXRhcnkgbWlnaHQNCj4gaGF2ZSB0byBkZWNpZGUgaWYgaXQgY29uZmxpY3Rz IG9yIG5vdCwgYW5kIGlmIGl0IGNvbmZsaWN0cyB2b2lkIHRoZQ0KPiBHUi4NCkknbSBoYXZp bmcgdHJvdWJsZSByZWNvbmNpbGluZyB0aGUgdHdvIHBvc2l0aW9ucyBvZiAiW25vdF0gcHV0 IGEgMzoxIA0KbWFqb3JpdHkgcmVxdWlyZW1lbnQgb24gaXQgYmVjYXVzZS4uLml0IGNvbmZs aWN0cyIgYW5kICJpdCBjb25mbGljdHMgDQp2b2lkIHRoZSBHUiIuDQoNCg0KVGhlIG9ubHkg d2F5IEkgY2FuIHNlZSB0byByZWNvbmNpbGUgeW91ciBwb3NpdGlvbnMgaXMgaWYgYSBHUiBp cyBub3QgDQphbGxvd2VkIHRvIHN1cGVyc2VkZSBhIEZvdW5kYXRpb24gRG9jdW1lbnQgYnkg aW1wbGljYXRpb24sIGJ1dCBtdXN0IGRvIA0Kc28gZXhwbGljaXRseS4gSXMgdGhhdCB5b3Vy IHJhdGlvbmFsZT8NCg0KSSB0aGluayBpdCdzIHJlYXNvbmFibGUgdG8gdGFrZSB0aGUgcG9z aXRpb24gdGhhdCBHUnMgY2FuIG9ubHkgYW1lbmQgdGhlIA0KY29uc3RpdHV0aW9uIGV4cGxp Y2l0bHkuIFRoZSBjb25zdGl0dXRpb24gaXMgd3JpdHRlbiBpbiBsZWdhbGlzdGljIA0KbGFu Z3VhZ2UgYW5kIHRoZXJlIGlzIG9idmlvdXMgdmFsdWUgaW4gaGF2aW5nIHRoZSBydWxlcyB3 cml0dGVuIGluIG9uZSANCnBsYWNlLg0KDQpGb3IgdGhlIEZvdW5kYXRpb24gRG9jdW1lbnRz LCBpdCBzZWVtcyBsZXNzIGN1dC1hbmQtZHJpZWQuIFRoaXMgaXMgDQplc3BlY2lhbGx5IHRy dWUgaWYsIGZvciBleGFtcGxlLCBhIEdSIGNvdWxkIHB1cnBvcnQgdG8gb3ZlcnJpZGUgYSAN CkZvdW5kYXRpb24gRG9jdW1lbnQgdGVtcG9yYXJpbHkgKHN0aWxsIGJ5IDM6MSBtYWpvcml0 eSkuDQoNCldoZXRoZXIgcGVybWFuZW50bHkgc3VwZXJzZWRpbmcgcGFydCBvZiB0aGUgRFND IGJ5IGltcGxpY2F0aW9uIGlzIA0KY29uc3RpdHV0aW9uYWxseSBwZXJtaXNzaWJsZSBpcyBk aWZmZXJlbnQgZnJvbSB3aGV0aGVyIGl0IGlzIGEgZ29vZCANCmlkZWEuIFRoZSBmb3JtZXIg aXMgYSBxdWVzdGlvbiBmb3IgdGhlIFNlY3JldGFyeS4gVGhlIGxhdHRlciBpcyBhIA0KcXVl c3Rpb24gZm9yIHRoZSBEZXZlbG9wZXJzIHRocm91Z2ggdGhlIEdSLg0KDQoNClJlZ2FyZGxl c3Mgb2YgdGhhdCwgYW5kIHByb2JhYmx5IG1vcmUgaW1wb3J0YW50bHksIEkgb2JqZWN0IHRv IHRoZSBpZGVhIA0KdGhhdCBhIEdSIG9wdGlvbiB3aW5uaW5nIGNvdWxkIHJlc3VsdCBpbiB0 aGUgd2hvbGUgR1IgYmVpbmcgdm9pZGVkLiBPdXIgDQp2b3Rpbmcgc3lzdGVtIGlzIGV4cGxp Y2l0bHkgZGVzaWduZWQgdG8gdGFrZSBpbnRvIGFjY291bnQgc3VwZXJtYWpvcml0eSANCnJl cXVpcmVtZW50cy4gQSBHUiBvcHRpb24gZmFpbGluZyBhIHN1cGVybWFqb3JpdHkgcmVxdWly ZW1lbnQgc2hvdWxkIA0KZmFpbCBieSBpdHNlbGYsIG5vdCB0YWtlIGRvd24gdGhlIHdob2xl IEdSIHdpdGggaXQuDQoNClNpbmNlIHRoZXJlJ3MgYSBnb29kIGNoYW5jZSB5b3UgaGF2ZSB0 byBtYWtlIHRoZSBkZXRlcm1pbmF0aW9uIGVpdGhlciANCndheSwgSSB0aGluayBpdCdzIGZh ciBiZXR0ZXIgdG8gbWFrZSB0aGF0IGRldGVybWluYXRpb24gYmVmb3JlIHRoZSB2b3RlIA0K dGhhbiBhZnRlci4gTWFraW5nIHRoZSBkZXRlcm1pbmF0aW9uIG5vdyBnaXZlcyBwZW9wbGUg dGhlIG9wdGlvbiB0byANCmFtZW5kIHRoZWlyIEdSIG9wdGlvbnMgYmVmb3JlIHdlIGdvIHRo cm91Z2ggYSB2b3RlLiBUaGF0IHNhdmVzIHRpbWUgYW5kIA0KZW5lcmd5Lg0KDQpJdCBhbHNv IGp1c3QgZG9lc24ndCBsb29rIGdvb2QgZm9yIHRoZSBTZWNyZXRhcnkgdG8gdm9pZCB0aGUg R1IgYmFzZWQgb24gDQp3aGljaCBvcHRpb24gd29uLiBUaGF0IG1ha2VzIGl0IGxvb2sgbGlr ZSB5b3UncmUgZG9pbmcgc28gYmVjYXVzZSB5b3UgDQpkaXNhZ3JlZSB3aXRoIHRoZSByZXN1 bHQuIEknbSBub3Qgc2F5aW5nIHRoYXQgaXMgdGhlIGNhc2UgaGVyZS4gSSdtIA0Kc2F5aW5n IHRoZSBvcHRpY3MgYXJlIHdvcnNlIHdpdGggZGVjaWRpbmcgYWZ0ZXIsIHNvIEkgdGhpbmsg eW91IHNob3VsZCANCmRlY2lkZSBiZWZvcmUuDQoNCg0KSW4gbXkgdmlldywgaWYgdGhlIFNl Y3JldGFyeSBkZXRlcm1pbmVzIHRoYXQgYSBHUiBvcHRpb24gaXMgDQpjb25zdGl0dXRpb25h bGx5IGRlZmVjdGl2ZSAoZm9yIHdoYXRldmVyIHJlYXNvbiksIGl0IHNob3VsZCBub3QgYmUg b24gDQp0aGUgYmFsbG90LiBJIHRoaW5rIHlvdSBzaG91bGQgKGluIHRoaXMgYW5kIGFsbCBH UnMpIHJ1bGUgZWFjaCBHUiBvcHRpb24gDQpvbmUgb2Y6DQotIHJlcXVpcmVzIDE6MQ0KLSBy ZXF1aXJlcyAyOjENCi0gcmVxdWlyZXMgMzoxDQotIGludmFsaWQNCg0KDQpodHRwczovL3d3 dy5kZWJpYW4ub3JnL3ZvdGUvMjAwOC92b3RlXzAwMyBpcyBwcmVjZWRlbnQgZm9yOg0KICAg LSBhIEdSIG9wdGlvbiBjb3VsZCBzdXBlcnNlZGUgYSBGb3VuZGF0aW9uIERvY3VtZW50IGlt cGxpY2l0bHksDQogICAtIGEgR1Igb3B0aW9uIGNvdWxkIHN1cGVyc2VkZSBhIEZvdW5kYXRp b24gRG9jdW1lbnQgdGVtcG9yYXJpbHkgKG5vdA0KICAgICByZWxldmFudCBoZXJlLCBidXQg SSBtYWRlIHRoZSBwb2ludCBhYm92ZSksIGFuZA0KICAgLSB0aGF0IHN1Y2ggb3B0aW9ucyBy ZXF1aXJlIDM6MS4NCg0KaHR0cHM6Ly93d3cuZGViaWFuLm9yZy92b3RlLzIwMDYvdm90ZV8w MDcgaXMgcHJlY2VkZW50IGZvcjoNCiAgIC0gYSBHUiBvcHRpb24gY291bGQgc3VwZXJzZWRl IGEgRm91bmRhdGlvbiBEb2N1bWVudCBwZXJtYW5lbnRseSBhbmQNCiAgICAgZXhwbGljaXRs eSBidXQgd2l0aG91dCBhbWVuZGluZyBpdHMgdGV4dCwgYW5kDQogICAtIHRoYXQgc3VjaCBh biBvcHRpb24gcmVxdWlyZXMgMzoxLg0KDQpodHRwczovL3d3dy5kZWJpYW4ub3JnL3ZvdGUv MjAwNi92b3RlXzAwMSBpcyBwcmVjZWRlbnQgZm9yOg0KICAgLSBhIEdSIG9wdGlvbiBjb3Vs ZCBzdXBlcnNlZGUgYSBGb3VuZGF0aW9uIERvY3VtZW50IHBlcm1hbmVudGx5IGFuZA0KICAg ICBpbXBsaWNpdGx5ICh0aG91Z2ggY3VyaW91c2x5IHRoZSB2b3RlIHN0YXRlbWVudCBzYXlz ICJERlNHIGFydGljbGUgMw0KICAgICB3b3VsZCBuZWVkIHRvIGJlIGNoYW5nZWQsIG9yIGF0 IGxlYXN0IGNsYXJpZmllZC4iKQ0KICAgLSB0aGF0IGludGVycHJldGluZyBhIEZvdW5kYXRp b24gRG9jdW1lbnQgbmVlZHMgb25seSAxOjEuDQoNCmh0dHBzOi8vd3d3LmRlYmlhbi5vcmcv dm90ZS8yMDA0L3ZvdGVfMDA0IGlzIHByZWNlZGVudCBmb3I6DQogICAtIGEgR1Igb3B0aW9u IGNvdWxkIHN1cGVyc2VkZSBhIEZvdW5kYXRpb24gRG9jdW1lbnQgdGVtcG9yYXJpbHkNCiAg ICAgKHRob3VnaCB0aGlzIHRvb2sgYSB2ZXJ5IGRpZmZlcmVudCBhcHByb2FjaCB0aGFuIDIw MDgtMDAzIGRpZA0KICAgICBsYXRlcikuDQoNCi0tIA0KUmljaGFyZA0K

    --------------34pxbHsJRcN8Z2BmOjsGnT04--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMNygIACgkQ+HlhmcBF hs7IjQ//b1gyId+MYKFHxd9E9XZUFqtEQ4HIsciSMLSlbi1bDuhqA561Wg/JrhjY dcWrAStY36x/n2SfpYJQuFzKjnlxvqL4nmbS8/JOx2vTPqEDkx0SoMw9FCVuVamX m6tp2HEJCZ8Quoo7eDq/XvPlqSvyHBomOM/BupSgdJ5SDlaIpXUyPy6heQrw1lDq YXTD9MVZmAherkgP++mjHA6hKy7WlLfhquA7qSer0lfw+XtZJk7SDgtwMYd5ET/d RGkuY0IlGj9PBfxdxgVJkEoU3RlcNrY5CHj27nvLcRO+WRMuair3zIAmbyigY5n4 XA2x6Oo3yNn+A8rkbGYeSyfJeViof8kqki+Y8GmB9+qVonDxhdXKEO5tJECxuRHy 1U+kxJFINiyjSQQAvXT/oqXtnWCOEPqeVbE6bgBrPBKwwmE8oi39hWVsvEbZtLoV 1WlZChodH2q0KSDCQKj3TfTEZhCFnT2bU4DOEaVMSyoAP39Lq3HGl6gMDWXReylD 8uqcWKu/aopbruskEehy33VwgaVzPIGWLWwmiYbSad7njUBsx6OMbf5P+ezFlIpb DusGfI2i+dkzT/7TUpP8/3aV4QTXnaqAxUjTa0ooQ6OiMZOiwM+LUZZZ7RVcaHM5 LJVo9jY9AjnnMCxL0fRGt4+Hg+RaPTbasIkKQWQOvusQyHNlzg8=
    =hOD/
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?utf-8?Q?Antoine_Beaupr=C3=A9?=@21:1/5 to All on Tue Aug 30 17:40:01 2022
    Hi Steve (and everyone else),

    I'm proposing to change how we handle non-free firmware in
    Debian. I've written about this a few times already this year [1, 2]
    and I ran a session on the subject at DebConf [3].

    TL;DR: The way we deal with (non-free) firmware in Debian isn't
    great. For a long time we've got away without supporting and including (non-free) firmware on Debian systems. We don't *want* to have to
    provide (non-free) firmware to our users, and in an ideal world we
    wouldn't need to. However, it's no longer a sensible path when trying
    to support lots of common current hardware. Increasingly, modern
    computers don't function fully without these firmware blobs.

    First, I want to thank you for your patience and dedicated in working on
    all those difficult problems. The installer is a difficult piece of
    software to master and work on, and I cannot imagine all the work you
    have poured into this.

    I particularly want to salute your work on making our users actually
    capable of using more modern hardware. I think the proposal you bring up
    (and the others that were added to the ballot) will really help move
    this problem ahead. I'm actually quite happy with how the conversation
    went so far, it seems we have matured quite a bit in our capacity in
    handling difficult decisions such as this one.

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    This, however, strikes me as odd: I would have expected this to be part
    of the proposal, or at least discussed here, not implemented out of band directly. I happen to think this is a rather questionable decision: I
    would have prefered non-free to keep containing firmware images, for
    example. Splitting that out into a different component will mean a lot
    of our users setup will break (or at least stop receiving firmware
    upgrades) unless they make manual changes to their sources.list going
    forward. This feels like a regression.

    In general, I feel we sometimes underestimate the impact of sources.list changes to our users. I wish we would be more thoughtful about those
    changes going forward. It seems like this ship has already sailed, of
    course, but maybe we could be more careful about this in the future, *especially* since we were planning on having a discussion on
    debian-vote about that specific issue?

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    Gulp, such a big jump! :) I personnally feel that we should make it
    easier for people to install Debian, but I'm not quite sure I'm ready to completely ditch the free images just yet. Maybe we could just promote
    non-free images a little better, but I would much rather keep the free
    images around. I guess that makes me a supporter of option "B", if I
    understand correctly, but I am known for struggling with parsing GR
    proposals. :)

    Thanks again for all your work, and for everyone for having a (so far)
    rather polite discussion on this possibly difficult topic.

    a.

    --
    Time is a created thing. To say, "I don't have time" is like saying,
    "I don't want to."
    - Lao Tzu

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCAAdFiEEexZCBNCWcjsBljWrPqHd3bJh2XsFAmMOLbwACgkQPqHd3bJh 2XvcLgf7BFf8sliYnls4nma1Kz81F4NSNnn1+Pf4LQ7AUWMp9kKsmpXGdNRA63Yt nU0WYaU+lr9sAM8kiqBDMSgi5uOH9BJ/PMdaikgQLYjeFktY5d0TeCIE7RmYr22m ODoH4YEi4Dg18Hb7D+EP8G4lTiqwc8kHqtNfb9iqoJpEFa97hmk5PJqs5hWON5r7 n31wZtoOs0yBMNTUHW8MkdSTOo0fNjJ2Y0VH4F3mXGXJngrGyFJ7PTxXzaaFSaeC MmhOPWjCYuXwyLoyro3NBsUmnxFfFSZlZ8b0yrhGWGhqaU8nh7mqRauwvFV4CTom hkEnV6K3P8aEBXo22/vzSq3HO1jyVQ==RzCP
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Kurt Roeckx on Tue Aug 30 17:50:01 2022
    Kurt Roeckx <kurt@roeckx.be> writes:

    But it's currently not clear if this is a technical or non-technical decision, and so might require a 2:1 majority.

    I forgot to comment on this point in my other message, but for what it's
    worth, I have a hard time seeing any of the current ballot options as technical. They all state policy decisions and desired outcomes and don't specify a techncial means to accomplish those outcomes (which is the sort
    of thing that I think would trigger the 2:1 majority requirement).

    The phrasing of the constitution here is that the 2:1 majority is required
    for decisions that are authorized by the powers of the Technical
    Committee, and I think this sort of policy decision about how to handle non-free software is clearly outside the scope of the Technical Committee.
    I can't imagine the TC being comfortable making a decision like this, or
    the project being comfortable having them do it.

    For others reading, here's what the constitution says are the powers of
    the Technical Committee (there are other clauses, but I don't think
    they're relevant here):

    1. Decide on any matter of technical policy.

    This includes the contents of the technical policy manuals, developers'
    reference materials, example packages and the behaviour of
    non-experimental package building tools. (In each case the usual
    maintainer of the relevant software or documentation makes decisions
    initially, however; see 6.3(5).)

    2. Decide any technical matter where Developers' jurisdictions overlap.

    In cases where Developers need to implement compatible technical
    policies or stances (for example, if they disagree about the priorities
    of conflicting packages, or about ownership of a command name, or about
    which package is responsible for a bug that both maintainers agree is a
    bug, or about who should be the maintainer for a package) the technical
    committee may decide the matter.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Richard Laager on Tue Aug 30 19:10:01 2022
    On Tue, Aug 30, 2022 at 03:27:46AM -0500, Richard Laager wrote:
    On 8/29/22 16:02, Kurt Roeckx wrote:
    It's my current interpretation that all voting options, even if they
    might conflict with the DSC, will be on the ballot, and might not
    require a 3:1 majority. That is, I don't think the Secretary can decide
    not to include an option that might conflict, or put a 3:1 majority requirement on it because they think it conflicts.

    However, if an option that might conflict wins, the Secretary might
    have to decide if it conflicts or not, and if it conflicts void the
    GR.
    I'm having trouble reconciling the two positions of "[not] put a 3:1
    majority requirement on it because...it conflicts" and "it conflicts void
    the GR".

    I think that the Secretary when running a vote should just follow the procedures for the vote. There is no text saying that the Secretary
    should make sure that the option is valid. If there are enough people
    to put an option on the ballot, the Secretary should put that option
    on the ballot, even when it's clearly invalid. The Secretary can of
    course say that they think it's not a valid option, and what might need
    to change for it to be, but I think it should be on the ballot even
    when not valid. We can still deal with it being not valid if it ends
    up winning.

    The only way I can see to reconcile your positions is if a GR is not allowed to supersede a Foundation Document by implication, but must do so
    explicitly. Is that your rationale?

    I have not made any decision about this yet, but if asked, will most
    likely say so.

    It's at least a reason why an option might not be valid.

    Regardless of that, and probably more importantly, I object to the idea that a GR option winning could result in the whole GR being voided. Our voting system is explicitly designed to take into account supermajority requirements. A GR option failing a supermajority requirement should fail by itself, not take down the whole GR with it.

    I'm not sure it's a good idea to reinterpret the results with that
    option removed. I think if an option wins and is later determine not
    to be valid, the GR should just be done again.

    Since there's a good chance you have to make the determination either way, I think it's far better to make that determination before the vote than after. Making the determination now gives people the option to amend their GR options before we go through a vote. That saves time and energy.

    I'm not sure how fast I will be to make such determinations.

    https://www.debian.org/vote/2008/vote_003 https://www.debian.org/vote/2006/vote_007 https://www.debian.org/vote/2006/vote_001 https://www.debian.org/vote/2004/vote_004

    Note that I've been Secretary since February 2009.

    Disagreement about how vote 2008/vote_003 was run is what made the
    previous Secretary quit.

    I like to discussion about anything related to this, so that I can at
    least get an idea what the consensus is.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Kurt Roeckx on Tue Aug 30 20:50:01 2022
    On Mon, Aug 29, 2022 at 11:02:09PM +0200, Kurt Roeckx wrote:
    If you believe that any of the options conflict with the DSC, I would
    like to see a discussion about that too.

    It's my current interpretation that all voting options, even if they
    might conflict with the DSC, will be on the ballot, and might not
    require a 3:1 majority. That is, I don't think the Secretary can decide
    not to include an option that might conflict, or put a 3:1 majority requirement on it because they think it conflicts.

    However, if an option that might conflict wins, the Secretary might
    have to decide if it conflicts or not, and if it conflicts void the
    GR.

    Or not void the GR and inform the DPL that the outcome of the GR cannot be implemented until another GR about the DSC...



    Kurt


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Bart Martens on Tue Aug 30 21:30:01 2022
    On Tue, Aug 30, 2022 at 09:22:51PM +0200, Bart Martens wrote:
    On Tue, Aug 30, 2022 at 11:33:15AM -0400, Antoine Beaupr wrote:
    Hi Steve (and everyone else),
    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    Gulp, such a big jump! :) I personnally feel that we should make it
    easier for people to install Debian, but I'm not quite sure I'm ready to completely ditch the free images just yet. Maybe we could just promote non-free images a little better, but I would much rather keep the free images around. I guess that makes me a supporter of option "B",

    Rather option C. Option B is reinforcing the current situation. C proposes to promote non-free images a little better while keeping the free images.

    Oops, my bad. B and C are similar on this aspect. A relevant difference is however that in B the non-free images are promoted above the free ones.


    if I
    understand correctly, but I am known for struggling with parsing GR proposals. :)

    Thanks again for all your work, and for everyone for having a (so far) rather polite discussion on this possibly difficult topic.

    a.

    --
    Time is a created thing. To say, "I don't have time" is like saying,
    "I don't want to."
    - Lao Tzu




    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to All on Tue Aug 30 21:30:01 2022
    On Tue, Aug 30, 2022 at 11:33:15AM -0400, Antoine Beaupr wrote:
    Hi Steve (and everyone else),
    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the decision on which path is the correct one.

    Gulp, such a big jump! :) I personnally feel that we should make it
    easier for people to install Debian, but I'm not quite sure I'm ready to completely ditch the free images just yet. Maybe we could just promote non-free images a little better, but I would much rather keep the free
    images around. I guess that makes me a supporter of option "B",

    Rather option C. Option B is reinforcing the current situation. C proposes to promote non-free images a little better while keeping the free images.

    if I
    understand correctly, but I am known for struggling with parsing GR proposals. :)

    Thanks again for all your work, and for everyone for having a (so far)
    rather polite discussion on this possibly difficult topic.

    a.

    --
    Time is a created thing. To say, "I don't have time" is like saying,
    "I don't want to."
    - Lao Tzu

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Steve McIntyre on Tue Aug 30 21:20:01 2022
    On Mon, Aug 29, 2022 at 09:49:14PM +0100, Steve McIntyre wrote:
    Hi Simon!

    On Mon, Aug 29, 2022 at 09:06:38AM +0200, Simon Josefsson wrote:


    Thereby re-inforcing the interpretation that any installer or image with >non-free software on it is not part of the Debian system, but that we >support their use and welcome others to distribute such work.

    ==================

    This last bit of wording is slightly unclear to me. Should *Debian* be allowed to distribute an installer or image with non-free software on
    it?

    Debian already does that. Anything available for download on *.debian.org is in fact distributed by Debian. The label "unofficial" doesn't change that.
    My point is that the last paragraph in Simon J's proposal correctly reflects the current reality. (But I fail to see the value of Simon J's proposal on the ballot because it is in my understanding equivalent with "further discussion" / "none of the above" which is already on the ballot.)


    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    < liw> everything I know about UK hotels I learned from "Fawlty Towers"


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?utf-8?Q?Antoine_Beaupr=C3=A9?=@21:1/5 to Bart Martens on Tue Aug 30 21:50:02 2022
    On 2022-08-30 21:28:08, Bart Martens wrote:
    On Tue, Aug 30, 2022 at 09:22:51PM +0200, Bart Martens wrote:
    On Tue, Aug 30, 2022 at 11:33:15AM -0400, Antoine Beaupré wrote:
    Hi Steve (and everyone else),
    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the
    decision on which path is the correct one.

    Gulp, such a big jump! :) I personnally feel that we should make it
    easier for people to install Debian, but I'm not quite sure I'm ready to >> > completely ditch the free images just yet. Maybe we could just promote
    non-free images a little better, but I would much rather keep the free
    images around. I guess that makes me a supporter of option "B",

    Rather option C. Option B is reinforcing the current situation. C proposes to
    promote non-free images a little better while keeping the free images.

    Oops, my bad. B and C are similar on this aspect. A relevant difference is however that in B the non-free images are promoted above the free ones.

    Right, I think that something I agree with, even if I don't like it. :/

    a.

    --
    My passionate sense of social justice and social responsibility has
    always contrasted oddly with my pronounced lack of need for direct
    contact with other human beings and communities. I am truly a "lone
    traveler" and have never belonged to my country, my home, my friends,
    or even my immediate family, with my whole heart; in the face of all
    these ties, I have never lost a sense of distance and a need for
    solitude.
    - Albert Einstein

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Kurt Roeckx on Tue Aug 30 22:10:01 2022
    Hi Kurt! Let's send this signed now,

    On Sat, Aug 27, 2022 at 04:26:40PM +0200, Kurt Roeckx wrote:
    On Fri, Aug 19, 2022 at 11:26:51AM +0100, Steve McIntyre wrote:
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable
    the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Is this something you want to adopt?

    Yes, I think it improves things.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    Armed with "Valor": "Centurion" represents quality of Discipline,
    Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
    concord the digital world while feeling safe and proud.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMObHIACgkQWHl5VzRC aE68HA//UXCyPRI7bKvnXlTlEv81TkMrDwjC8uOHZ2FaMJrgFuA4uVjjbe6/152o EF5mFSWRsnQWLU+aoKDlJ/LiYaKAnXInYoWUpx022kBO5RZY00QgvduzEnZ8yUAf z0TOiG8uZj3FBzhrY922o3MXM2J6f1rVMSDbCJkOTMgsZikjwlqoZhEE/hFIjF2q w/AM2qBdC5i5aylwvjo16UH3c8VxI0oHv1Emwllkubimd9EPI9YM4wbAPMY33dfj r4vvLgplgIR+YHse9/YM8yZFbUuKLYzNjSqg0VpmrmBCr3K5I50zER66kqpQMBJz LxvaUpjrhM7bPrlN4hyV/3wsnc0fhJA+KMapLY3cszQ7hnZwDaBUJnDtBOZB2HCd H38ERisHZ/ZjFDelv/iOmTUngyzfSsR8lNerjEBkTKaRBd7n2NubAHeFk81iITGU Vkj4lr+qLCn/LaM3t271npQKci50LDVI31fD/Lktc1vr2g7DmfomuWGFfimYNpg/ UMNVpiv6BqYD0NnjXtv1BLGrk2hDDkBIwD9EnW3TqW53FLo1KSl2vrWAmHIJuvLX LxIDSZevCn4H0EMjotg93pR4hwY1pFsHN8/qYUBFGiQyAG
  • From Steve McIntyre@21:1/5 to Bart Martens on Tue Aug 30 22:10:01 2022
    Hi Bart!

    On Tue, Aug 30, 2022 at 09:12:23PM +0200, Bart Martens wrote:
    On Mon, Aug 29, 2022 at 09:49:14PM +0100, Steve McIntyre wrote:
    Hi Simon!

    On Mon, Aug 29, 2022 at 09:06:38AM +0200, Simon Josefsson wrote:


    Thereby re-inforcing the interpretation that any installer or image with
    non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    This last bit of wording is slightly unclear to me. Should *Debian* be
    allowed to distribute an installer or image with non-free software on
    it?

    Debian already does that. Anything available for download on *.debian.org is in
    fact distributed by Debian. The label "unofficial" doesn't change that.
    My point is that the last paragraph in Simon J's proposal correctly reflects >the current reality. (But I fail to see the value of Simon J's proposal on the >ballot because it is in my understanding equivalent with "further discussion" /
    "none of the above" which is already on the ballot.)

    I'm directly asking Simon for *his* thoughts here, though. It's *not* necessarily the same as the status quo, and I think this needs to be
    explored more.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Because heaters aren't purple!" -- Catherine Pitt

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMObBgACgkQWHl5VzRC aE7iUQ/9F4GdeyrS+SlkwXxScXw0PyTVkTqKq08TsaH9RFH0UPLU65vTXW4IRx0c KHI1y7rxCk63TDN04U6VDSjjazAfeOfUSAagvDE9Kr31nKgEL8hkBy/fqX1aouBS DBaMSuhRsIPDuMsYZt0Hg93MAwl+KDj1s0SZKuqfsGIJDuDLUcbx5KHyMBYRPN7D HkmvvhpVtL+YfZLElZCANS8EaowwvR/LgECBnLoxvL2JZnFZLhjVAo+v9sjKxdJF 2vs79YglLs3+qAbq6bk1weec0JHRY8CW2YdEN3rveyJv7gxbUy4oVSv7RaTKelBp zG4QD4K59OV00BLHAQ1+HPK+QgQ8HxZsfAiw0DJgiGvbSS34NNjb86Cj/VlKq84O ScFB8YFKxx9imwSSSQxV/OeJ7MlDYIWUFaGdYqME5tjHLmrxzqno3K9W5y7YCgdJ B4Or3mK1R836X6G1E9mXkfzIL2/LAvf7tBS8cYNjiJIdQvmqe3ZNcaGxbZy9XTbT T4YxusS6PxdygFahx9s9dRbuxME7Iy0zAq35JYoU9ytLOjwMNily4kfqkFXenliH eFXPNb0kbXZCvLciPm4MZpvOngmFpnh8wKu82xTZYWHymu4Rd69AtwaLoSXwnbjl V0vcAF4DtWMLRqD2e8wmf8MaebXN4JS3V/qEV/xViB3/oglVnMI=
    =ERfb
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origi
  • From =?utf-8?Q?Antoine_Beaupr=C3=A9?=@21:1/5 to Steve McIntyre on Tue Aug 30 22:30:02 2022
    On 2022-08-30 21:11:07, Steve McIntyre wrote:
    Hey Antoine!

    On Tue, Aug 30, 2022 at 11:33:15AM -0400, Antoine Beaupré wrote:

    [...]

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    This, however, strikes me as odd: I would have expected this to be part
    of the proposal, or at least discussed here, not implemented out of band >>directly. I happen to think this is a rather questionable decision: I
    would have prefered non-free to keep containing firmware images, for >>example. Splitting that out into a different component will mean a lot
    of our users setup will break (or at least stop receiving firmware >>upgrades) unless they make manual changes to their sources.list going >>forward. This feels like a regression.

    So we'll need to advertise it well so that people pick these changes
    up. That's important.

    But I want to be *very* clear here that we *don't* want to enable the
    whole of the non-free component for all users by default. That would
    be a grave disservice, and I think Ansgar agrees with me. There's no
    need to hold this back to be part of the GR here IMHO.

    Yeah, so I think that's a great advantage of splitting firmware out of non-free: it keeps the "non-free blast radius" to a minimum, just to
    make sure people can get their hardware working without getting all that
    other stuff that they should really opt into.

    Yet I actually use non-free for other stuff as well, at a personal
    level. Things like documentation, for example, often end up in non-free
    for $reasons and I have non-free enabled for *both* this and firmware.

    In that sense, why wasn't it possible to have (say) non-free/firmware as
    a component, so that when you opt-in to non-free you *also* get
    firmware? That would have been a backwards-compatible change...

    Thanks for the response,

    a.
    --
    That's the kind of society I want to build. I want a guarantee - with
    physics and mathematics, not with laws - that we can give ourselves
    real privacy of personal communications.
    - John Gilmore

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Tue Aug 30 22:20:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------8mhYPfKrI3lTEuCnqLBLmW2K
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gOC8zMC8yMiAxMjowMCwgS3VydCBSb2Vja3ggd3JvdGU6DQo+IE9uIFR1ZSwgQXVnIDMw LCAyMDIyIGF0IDAzOjI3OjQ2QU0gLTA1MDAsIFJpY2hhcmQgTGFhZ2VyIHdyb3RlOg0KPj4g UmVnYXJkbGVzcyBvZiB0aGF0LCBhbmQgcHJvYmFibHkgbW9yZSBpbXBvcnRhbnRseSwgSSBv YmplY3QgdG8gdGhlIGlkZWEgdGhhdA0KPj4gYSBHUiBvcHRpb24gd2lubmluZyBjb3VsZCBy ZXN1bHQgaW4gdGhlIHdob2xlIEdSIGJlaW5nIHZvaWRlZC4gT3VyIHZvdGluZw0KPj4gc3lz dGVtIGlzIGV4cGxpY2l0bHkgZGVzaWduZWQgdG8gdGFrZSBpbnRvIGFjY291bnQgc3VwZXJt YWpvcml0eQ0KPj4gcmVxdWlyZW1lbnRzLiBBIEdSIG9wdGlvbiBmYWlsaW5nIGEgc3VwZXJt YWpvcml0eSByZXF1aXJlbWVudCBzaG91bGQgZmFpbCBieQ0KPj4gaXRzZWxmLCBub3QgdGFr ZSBkb3duIHRoZSB3aG9sZSBHUiB3aXRoIGl0Lg0KPiANCj4gSSdtIG5vdCBzdXJlIGl0J3Mg YSBnb29kIGlkZWEgdG8gcmVpbnRlcnByZXQgdGhlIHJlc3VsdHMgd2l0aCB0aGF0DQo+IG9w dGlvbiByZW1vdmVkLg0KDQpJIGFncmVlIHdpdGggdGhhdCBzdGF0ZW1lbnQgMTAwJS4NCg0K SWYgd2UgZmluZCBvdXJzZWx2ZXMgaW4gdGhhdCBwb3NpdGlvbiwgSSBhZ3JlZSB3ZSBzaG91 bGQgbm90IHRyeSB0byANCnJlaW50ZXJwcmV0IGEgR1IuDQoNCkJ1dCBteSBwb2ludCB3YXMg dG8gYXZvaWQgZ2V0dGluZyBpbnRvIHRoYXQgc2l0dWF0aW9uIGluIHRoZSBmaXJzdCANCnBs YWNlLCBieSBlaXRoZXIgZGVjbGFyaW5nIG9wdGlvbnMgaW52YWxpZCBvciByZXF1aXJpbmcg MzoxICh3aGljaGV2ZXIgDQppcyBhcHByb3ByaWF0ZSkuIFRoZW4gdGhlIHJlc3VsdCBvZiB0 aGUgR1IsIHdoYXRldmVyIGl0IGlzLCBpcyB2YWxpZC4NCg0KPiBJIHRoaW5rIGlmIGFuIG9w dGlvbiB3aW5zIGFuZCBpcyBsYXRlciBkZXRlcm1pbmUgbm90DQo+IHRvIGJlIHZhbGlkLCB0 aGUgR1Igc2hvdWxkIGp1c3QgYmUgZG9uZSBhZ2Fpbi4NCg0KUmlnaHQuDQoNCj4gSSdtIG5v dCBzdXJlIGhvdyBmYXN0IEkgd2lsbCBiZSB0byBtYWtlIHN1Y2ggZGV0ZXJtaW5hdGlvbnMu DQoNCkZhaXIgZW5vdWdoLiBCdXQgdGhlcmUgZG9lcyBjb21lIGEgcG9pbnQgd2hlcmUgYWRk aXRpb25hbCB0aW1lIHdpbGwgbm90IA0KYWRkIGFkZGl0aW9uYWwgY2xhcml0eSBhbmQgYSBk ZWNpc2lvbiBoYXMgdG8gYmUgbWFkZS4NCg0KPiBJIGxpa2UgdG8gZGlzY3Vzc2lvbiBhYm91 dCBhbnl0aGluZyByZWxhdGVkIHRvIHRoaXMsIHNvIHRoYXQgSSBjYW4gYXQNCj4gbGVhc3Qg Z2V0IGFuIGlkZWEgd2hhdCB0aGUgY29uc2Vuc3VzIGlzLg0KDQpEU0MgMSBhbmQgRFNDIDUg aGF2ZSBzb21lIGltcGxpY2F0aW9ucyBhYm91dCAidGhlIERlYmlhbiBzeXN0ZW0iIA0Kdmlz LWEtdmlzIG5vbi1mcmVlLCBidXQgdGhlIHBsYW4gaGVyZSBpcyB0byBrZWVwIHRoZSBmaXJt d2FyZSBpbiBhIA0Kc2VwYXJhdGUgbm9uLWZyZWUtZmlybXdhcmUgYW5hbG9nb3VzIHRvIG5v bi1mcmVlLiBUaGF0IHNlZW1zIGZpbmUgdG8gbWUuDQoNCkRTQyAxIHNheXMgd2Ugd2lsbCBu ZXZlciAicmVxdWlyZSB0aGUgdXNlIG9mIGEgbm9uLWZyZWUgY29tcG9uZW50Ii4gVG8gDQpt ZSwgdGhpcyBpcyB0aGUgbWFqb3IgcmVsZXZhbnQgaXNzdWUuDQoNClByb3Bvc2FscyBCIGFu ZCBDIG9mZmVyIHVzZXJzIHRoZSBleHBsaWNpdCBjaG9pY2Ugb2YgbWVkaWEuIFRoYXQgZmVl bHMgDQpjbGVhcmx5IGNvbXBhdGlibGUgd2l0aCB0aGUgRFNDLCBhcyB1c2VycyBhcmUgbm90 IHJlcXVpcmVkIHRvIHVzZSANCm5vbi1mcmVlIGJpdHMuDQoNClByb3Bvc2FsIEEgd2lsbCB1 c2Ugbm9uLWZyZWUtZmlybXdhcmUgYnkgZGVmYXVsdCwgYnV0ICJ3aGVyZSANCnBvc3NpYmxl Li4ud2lsbCBpbmNsdWRlIHdheXMgZm9yIHVzZXJzIHRvIGRpc2FibGUgdGhpcyIuIFdpdGhv dXQgdGhlIA0KIndoZXJlIHBvc3NpYmxlIiwgSSB0aGluayB0aGlzIG9wdC1vdXQgaXMgY29t cGF0aWJsZSB3aXRoIHRoZSBEU0MuIA0KSG93ZXZlciwgaWYgaXQgaXMgbm90IHBvc3NpYmxl IHRvIGRpc2FibGUgdGhlIG5vbi1mcmVlLWZpcm13YXJlLCB0aGVuIGl0IA0KZmVlbHMgbGlr ZSB0aGUgc3lzdGVtIGlzLCBpbiBmYWN0LCByZXF1aXJpbmcgaXQuIFRodXMgdGhpcyBvcHRp b24sIGFzIA0Kd29yZGVkLCBmZWVscyBwb3RlbnRpYWxseSBpbmNvbXBhdGlibGUgd2l0aCB0 aGUgRFNDLg0KDQpOb3RlIHRoYXQgUHJvcG9zYWwgQiwgd2hpbGUgc2hhcmluZyB0aGUgc2Ft ZSB3b3JkaW5nIGZvciB0aGlzIHBvcnRpb24sIA0KZG9lcyBOT1QgaGF2ZSB0aGUgc2FtZSBE U0MgY29uZmxpY3QuIFRoaXMgaXMgYmVjYXVzZSBQcm9wb3NhbCBCIHJldGFpbnMgDQp0aGUg ZnJlZSBpbWFnZXMgYXMgYW4gb3B0aW9uLg0KDQpQb3NzaWJsZSByZW1lZGllcyAob3JkZXJl ZCBmcm9tIGJlc3QgdG8gd29yc3QsIGluIG15IHZpZXcpOg0KDQphLiBUaGUgcHJvcG9zZXIg YW1lbmRzIGl0IHRvIGV4cGxpY2l0bHkgcmVtb3ZlIHRoZSB3b3JkcyAid2hlcmUNCiAgICBw b3NzaWJsZSIgKGFuZCBubyBzcG9uc29ycyBvYmplY3QpLg0KYi4gV2UgdGFrZSB0aGUgcG9z aXRpb24gdGhhdCwgaWYgUHJvcG9zYWwgQSB3aW5zLCBpbXBsZW1lbnRvcnMgYXJlIGJvdW5k DQogICAgYnkgaXQgYW5kIHRoZSBEU0MuIFRoZSBvbmx5IHdheXMgdG8gZnVsZmlsbCBib3Ro IGFyZToNCiAgICBiMSkgcHJvdmlkZSBvcHRpb25zIHRvIGRpc2FibGUgdGhlIG5vbi1mcmVl LWZpcm13YXJlOyBpbiBvdGhlciB3b3JkcywNCiAgICAgICAid2hlcmUgcG9zc2libGUiIGlz IHJlbmRlcmVkIGlub3BlcmF0aXZlLCBvcg0KICAgIGIyKSByZXRhaW4gZnJlZSBpbWFnZXMg KGFzIGluIFByb3Bvc2FsIEIpLg0KYy4gVGhlIFNlY3JldGFyeSBkZWNsYXJlcyB0aGUgb3B0 aW9uIGlzIGFtZW5kaW5nIHRoZSBEU0MgYnkgaW1wbGljYXRpb24NCiAgICBhbmQgcmVxdWly ZXMgMzoxLg0KZC4gVGhlIFNlY3JldGFyeSBkZWNsYXJlcyB0aGUgb3B0aW9uIGludmFsaWQg YW5kIHN0cmlrZXMgaXQgZnJvbSB0aGUgR1IuDQogICAgVGhpcyBmZWVscyBoZWF2eSBoYW5k ZWQgZ2l2ZW4gdGhhdCBvdGhlciByZW1lZGllcyBhcmUgYXZhaWxhYmxlLA0KICAgIG1vc3Qg bm90YWJseSAoYiksIHdoaWNoIGlzIGF2YWlsYWJsZSBldmVuIGFmdGVyIChhbmQgaWYpIEEg d2lucy4NCmUuIElmIFByb3Bvc2FsIEEgd2lucywgdGhlIGVudGlyZSBHUiBpcyBkZWNsYXJl ZCBpbnZhbGlkLiBUaGlzIGlzIHRoZQ0KICAgIHRoaW5nIEknbSBvYmplY3RpbmcgdG8uDQoN ClVuZGVyIChiMiksIFByb3Bvc2FsIEEgYmVjb21lcyBlcXVhbCB0byBQcm9wb3NhbCBCIGFu ZCBQcm9wb3NhbCBBIHNob3VsZCANCmp1c3QgYmUgd2l0aGRyYXduLiBUaGUgZmFjdCB0aGF0 IGJvdGggQSAmIEIgYWxyZWFkeSBleGlzdHMgc3VnZ2VzdHMgDQpQcm9wb3NhbCBCIGFuZCB0 aHVzIChiMikgaXMgb2JqZWN0aW9uYWJsZSB0byBQcm9wb3NhbCBBJ3MgUHJvcG9zZXIgJiAN ClNwb25zb3JzLg0KDQpJZiB0aGUgY29uc2Vuc3VzIGFtb25nIFByb3Bvc2FsIEEncyBQcm9w b3NlciBhbmQgU3BvbnNvcnMgaXMgKGIxKSwgdGhlbiANCnRoZXkgc2hvdWxkIGp1c3QgbWFr ZSBpdCBleHBsaWNpdCB3aXRoIChhKS4NCg0KSWYgdGhleSBvYmplY3QgdG8gKGEpLCB0aGVu IEknZCBiZSB2ZXJ5IGN1cmlvdXMgZm9yIHRoZWlyIHJhdGlvbmFsZTsgaWYgDQp0aGV5IGFy ZSB0cnlpbmcgdG8gYW1lbmQgdGhlIERTQyBieSBpbXBsaWNhdGlvbiwgdGhlbiAoYykgc2Vl bXMgbGlrZSB0aGUgDQpyaWdodCBhbnN3ZXIuDQoNCi0tIA0KUmljaGFyZA0K

    --------------8mhYPfKrI3lTEuCnqLBLmW2K--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMObu4ACgkQ+HlhmcBF hs4T+Q//bQ5rH+NjpmwY38fkR6sD/+fX1kD/pJQVlQT72oL9fly+ouatEPl3rQZi xJCF0t9D5AtCqR/BWZXvCXzgwruOU140oXyAXyyYXKZjwFPsUdAInIN0NhE5Pz/x t3INP+uLo6btUKcl8EsqaKbRj85MaKnmYPrIVV8qxBa7ExLPip9YG5CUC7ccEQQv HWqI34wis5Tf1y0pxO4ROoI/v4FWH/g8z27yR7er5D+iWibFl0f2KIYq6yd9U3Zi RyoL77FTvg7fe9RhsiUfgRxCR94sZGA6G46qQABf/1BdNATf+bX4WMiqUZ2BObWX 1RHsPkINf8OBwtAnp+MtSTBD804frKsBuaNlmkQbAnSgBvl4+OSFD5P0uWJKsYIe 860O2vo5MNYVCaXIZPI9X1Gs8wRwidD5912ygL4y4Yhx48Lqguj6BQThKD1nwfuM VmJVE1dWiRF+tro91zIspo3CYyJzq9r0zamt5XDzC/KHVRVRTcwgKxEq6Tletnwt AcFDOq4YUpaBFSIxPLl54g4eUA4UcGuUeU+mMTDrkoAYKK1puabrwGrPeK1V4sKr 6aX/dEqcczfs8igfCE2JEqkc6WrflVo/ed8e6Wd2G4fepUbiJkh2esqnHLYOPJcu ZSqf8/Udit+2Tb/Nhl08sRDWKaYXn5FaTwkaH04WChtJcUl6d6Q=
    =9y0d
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Steve McIntyre on Tue Aug 30 22:30:02 2022
    On Tue, Aug 30, 2022 at 09:00:50PM +0100, Steve McIntyre wrote:
    Hi Kurt! Let's send this signed now,

    On Sat, Aug 27, 2022 at 04:26:40PM +0200, Kurt Roeckx wrote:
    On Fri, Aug 19, 2022 at 11:26:51AM +0100, Steve McIntyre wrote:
    Hey Wouter!

    On Fri, Aug 19, 2022 at 12:19:55PM +0200, Wouter Verhelst wrote:
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable >> >the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if
    the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Is this something you want to adopt?

    Yes, I think it improves things.

    I've modified the vote page with what I think you wanted to change.

    Gunnar, do you also want this change in your text?


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to All on Tue Aug 30 22:20:01 2022
    Hey Antoine!

    On Tue, Aug 30, 2022 at 11:33:15AM -0400, Antoine Beaupr wrote:

    ...

    I particularly want to salute your work on making our users actually
    capable of using more modern hardware. I think the proposal you bring up
    (and the others that were added to the ballot) will really help move
    this problem ahead. I'm actually quite happy with how the conversation
    went so far, it seems we have matured quite a bit in our capacity in
    handling difficult decisions such as this one.

    Yes, definitely! I've been very happy that we can talk about
    potentially divisive topics in a reasonable fashion. :-)

    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    This, however, strikes me as odd: I would have expected this to be part
    of the proposal, or at least discussed here, not implemented out of band >directly. I happen to think this is a rather questionable decision: I
    would have prefered non-free to keep containing firmware images, for
    example. Splitting that out into a different component will mean a lot
    of our users setup will break (or at least stop receiving firmware
    upgrades) unless they make manual changes to their sources.list going >forward. This feels like a regression.

    So we'll need to advertise it well so that people pick these changes
    up. That's important.

    But I want to be *very* clear here that we *don't* want to enable the
    whole of the non-free component for all users by default. That would
    be a grave disservice, and I think Ansgar agrees with me. There's no
    need to hold this back to be part of the GR here IMHO.

    In general, I feel we sometimes underestimate the impact of sources.list >changes to our users. I wish we would be more thoughtful about those
    changes going forward. It seems like this ship has already sailed, of
    course, but maybe we could be more careful about this in the future, >*especially* since we were planning on having a discussion on
    debian-vote about that specific issue?

    ACK, I understand.

    I believe that there is reasonably wide support for changing what we
    do with non-free firmware. I see several possible paths forward, but
    as I've stated previously I don't want to be making the decision
    alone. I believe that the Debian project as a whole needs to make the
    decision on which path is the correct one.

    Gulp, such a big jump! :) I personnally feel that we should make it
    easier for people to install Debian, but I'm not quite sure I'm ready to >completely ditch the free images just yet. Maybe we could just promote >non-free images a little better, but I would much rather keep the free
    images around. I guess that makes me a supporter of option "B", if I >understand correctly, but I am known for struggling with parsing GR >proposals. :)

    Nod, that's fair! I proposed option A as my personal favourite for the
    GR to remove (YA) possible point of confusion for our users, but I'm
    definitely not blind to the size of the change that it makes for us.
    Option B definitely sounds like a preferred option for some, and I'm
    OK with that. :-)

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "This dress doesn't reverse." -- Alden Spiess

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMObtsACgkQWHl5VzRC aE6cYg//becnt+63kbDTfW9lk50+Mtl5rgPcX7qdomgWVmg2ZPHVMWadylK0nZlP xiRs/ah4qebNQEKEab8a21O0MzvI5jGQieLh673HoCl//5DQL+a1qyQd4pw9z6iu 5pZJ7R3M3Ae57sFv39JBdxSvvD8oVLODiqrQfyRRBxKfxXkOHWdIh3/NDtwxUJxu y+L7gNAF4q9O8JIyQUSU1GVfIhVInrMYsqrsJkLHM7En0OI8JQ4gvEw8/bMVesxK 7t/982v3AjXKQZ1o4DH3qZaIDeu1hNB+nnabxqiL7XIe3ZNteKJM8F/WGp+n526B L/rMn9dugPPjLcqK9DuAFNMJ84pRjLFLtOFEeNVMo29AGqUtcXJg2pshcsSR3Xdz v3DFQSaSL2KB4CxSVpNh68rI+CtEMvaqzRNBuaHYTAbNKF3oVFcty8iyjTMEZXaw bsXzFmz61k/YYw7JqPfLn3zTskbH6JVDLt2BbmCDmWn4UbdETYFxOdqjF+hFmUk8 4ohWVCk04eyeo3Kq/4aLVJd7Gwx/tw0Bnez7paxfToFhsaPkQKgzawQaWoMjXj74 4UYgmFQNni8cPrR/qDwMxTX5EuScCJqf6vIeLaJEFGjX2IwKHEQ3dJ/qHPQoQJTB jJTkmtd5u44iKusAZa6fmjUC2cxLIUDHBRUL4tWKFcx8Lhmi5rU=
    =HbUz
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fs
  • From Steve McIntyre@21:1/5 to Simon Josefsson on Tue Aug 30 22:30:02 2022
    On Tue, Aug 30, 2022 at 09:22:39AM +0200, Simon Josefsson wrote:
    Steve McIntyre <steve@einval.com> writes:

    ...

    Thereby re-inforcing the interpretation that any installer or image with >>>non-free software on it is not part of the Debian system, but that we >>>support their use and welcome others to distribute such work.

    ==================

    This last bit of wording is slightly unclear to me. Should *Debian* be
    allowed to distribute an installer or image with non-free software on
    it?

    Hi Steve. I'm not sure I can reliably answer -- the distinction between >"Debian" as the project and "Debian" as the operating system is (for me) >somewhat blurry and inconsistent throughout the current foundational >documents, and it is equally unclear (to me) in your question.

    Do you intend the Debian OS (which to me includes various installers and >other auxilliary software that is needed to produce and maintain an OS)
    or the Debian project (which to me is about the community and not the >deliverable)? Or is your understanding of the situation different than
    mine so your question really mean different things to us? I have a
    feeling that is the case, but it is subtle.

    To me, saying "we support their use and welcome others to distribute
    such work" has an *implicit* suggestion that "the Debian project will
    not distribute such work itself". I could be reading more into that
    than was intended, so I thought it was worth checking! :-)

    I believe it used to be better in the older social contract which used >'Debian GNU/Linux' in a couple of places which made it clear that the >sentence referred to the deliverable and not the community. That was
    lost a couple of years ago, replacing it with 'Debian' which makes it
    unclear what it refers to. The website has been similary modified
    throughout the years, leading to the same ambiguity.

    Speaking personally (and thus merely as an anecdote), my way to resolve
    this conflict (when I belatedly decided to join as DD) has been that
    'Debian' as an OS is promised to be 100% DFSG free but 'Debian' as a
    project will accept to distribute certain non-free material on its
    servers. Thus Debian can be labeled as a 100% free OS but Debian as a >project deals with non-free content but not as a first-class citizen.
    This has lead to forks that don't want to be stuck with the same dilemma
    -- Ubuntu/etc as a non-free variant and gNewSense/PureOS/etc as a free >variant. This inconsistency may continue to be both a curse and a
    blessing, allowing Debian to be relevant to both worlds.

    Right, thanks for clarifying here!

    I agree with you that improving clarity on this topic will be a good
    thing. Fixing that is outside of my current goals though, as what I
    want to achieve is to see Debian continue to deliver a 100% DFSG-free
    Debian OS. It makes me sad to see such efforts to stop that.

    ACK, understood. It doesn't make me happy *either* that we're in this situation, but there are often tradeoffs to be made where we collide
    with the outside world. :-(

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com Who needs computer imagery when you've got Brian Blessed?

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMOcPkACgkQWHl5VzRC aE5jgQ/9GCxM6PbUMEZwyf3n+LyxczvM71GW58ksQ4fr8b2+xqVmE+wubAf8kacI g97wP/wAj6SMqL2AYTT/pVsAv7GGMFpRH4MODSP3RVscEFx6MmaxCuvIawjmQzMQ PB1d4hgRBdDm7LF5kSuV68Wp3kzvy8NJnXzcCmruyTRL21zvC/OPjmFb4+kq1XAx 838kClXQDNACyH/W2TjAG6fBYCAQ0kiItchlYwEhZgZsZk8DOW5J3iw11M8Jnvey u7QeWKCxt4LWluZ8SuWYd/XRW6mI4wyJEQu+rV+8OQaWr8XX0yXvyTp1Hm5fu4/6 F26gAFeSltxAWBiz9K/wsDUFp3pGIDrkFo+DJdvOvyDrNB5q3CwRqNucfweq9GSY 9RRr3aIdaV3k4g0O/en/JmmAPKPmaN5UoL+EHPESdx/b1FnQpWOYGfA8baSbTWcp mX6FxJTf/vDw+bIH23dqVtNlVMOY8a4iHz4SQQc96yVqMRNYJhjRSmNWrmESNmA7 e5U2r2bV0P4Ni5JOE36TzXxPUZG+Ptr9Dd0k0C3h38R1ej2EWdFgJ2RQBjq3iD1J f9h8V0eBLhoRv0DBasLywOx4L+p4TWGc+/wJ9Xmh5+hkhVf2mLTJHdebx+JX6Q4t 70tz1zqdYoG+SLDV2UJY+014MbPbFOxNlQySVKR9j73b8d+EjbU=
    =y1zC
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
  • From Steve McIntyre@21:1/5 to Russ Allbery on Tue Aug 30 23:00:02 2022
    Hey Russ!

    On Mon, Aug 29, 2022 at 07:55:11PM -0700, Russ Allbery wrote:
    Kurt Roeckx <kurt@roeckx.be> writes:

    It's my current interpretation that all voting options, even if they
    might conflict with the DSC, will be on the ballot, and might not
    require a 3:1 majority. That is, I don't think the Secretary can decide
    not to include an option that might conflict, or put a 3:1 majority
    requirement on it because they think it conflicts.

    I'm not disagreeing with Kurt's interpretation here, but as a voter I
    would love for one of the proponents of a ballot option to add non-free >firmware to the installer to state that they are going for a 3:1 majority
    to modify the Social Contract and add an explicit statement to this effect
    to point 5 of the Social Contract. It would only take a sentence, I
    suspect, something like:

    The Debian installer may include firmware that does not conform to the
    Debian Free Software Guidelines to enable use of Debian with hardware
    that requires such firmware.

    If you were to propose an alternative to option A that added a 3:1
    majority change to patch the SC, I would happily second it. But I
    certainly don't personally feel strongly enough about that change to
    propose it myself.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Further comment on how I feel about IBM will appear once I've worked out
    whether they're being malicious or incompetent. Capital letters are forecast."
    Matthew Garrett, http://www.livejournal.com/users/mjg59/30675.html

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMOeOoACgkQWHl5VzRC aE6scg/+M6gTCWlWfABqawNh7DU8CXAFYQNixeadK4ahA5vZ/rlvcMaJzNnoq9bD igwcC3g5q8gCc1U5KIQPM3/Y+TapgOlLGnZmhVT5NeVNsSCtOYAe5KkADuzjC0YV uHTVbNAK8+LBwJkLBnMhE1EegqYipCqpgkQ4mkVc+hk7C03M1K9GyC+jAvCE8Tzy I0YqKQhqRLz+EnDX4ueK786I0ot+YFO4x850r4yehSeS/D6r1YBJEBGNz8vsmojE P5NWFvRQXt9thpFuZonU0qsIkWJxQ9Sp+EzqGAHHpD36836PBZjWPG/xW1Q+x93Z WWW/o4yhcGKeEDSQ6g5pbvKo2KIkao2La3DI1aBJrc1GWZqCoi7ZifbdU5KzqDMv n8pSk80/NsNPQjCmbW91Y240uxkAot2PLXJzq4ykeNzugmUmMT2NVp9LQV+Oymy0 D8xsU3/u5cPjwB6IfjeLmoGr8rZlzmmg6WficHNw7DdeNDEDvObZi1Yj5Jfgt1Wu L7Lzrsnhh5sw1/GAIbkrR7oAo8cavx/EX6gxWV5oUvWh0vAtKNASAckJ+ZWH3kBb VB7Jor+TkLMtth91u/q
  • From Steve McIntyre@21:1/5 to All on Tue Aug 30 23:00:02 2022
    On Tue, Aug 30, 2022 at 04:27:17PM -0400, Antoine Beaupr wrote:
    On 2022-08-30 21:11:07, Steve McIntyre wrote:

    But I want to be *very* clear here that we *don't* want to enable the
    whole of the non-free component for all users by default. That would
    be a grave disservice, and I think Ansgar agrees with me. There's no
    need to hold this back to be part of the GR here IMHO.

    Yeah, so I think that's a great advantage of splitting firmware out of >non-free: it keeps the "non-free blast radius" to a minimum, just to
    make sure people can get their hardware working without getting all that >other stuff that they should really opt into.

    Yet I actually use non-free for other stuff as well, at a personal
    level. Things like documentation, for example, often end up in non-free
    for $reasons and I have non-free enabled for *both* this and firmware.

    In that sense, why wasn't it possible to have (say) non-free/firmware as
    a component, so that when you opt-in to non-free you *also* get
    firmware? That would have been a backwards-compatible change...

    I genuinely am not sure how various tools will interact with that kind
    of change to have nested components, tbh. I'd rather be clean and
    consistent here, and I believe Ansgar agrees. Similarly that's why the
    new non-free-firmware component has no special handling to try and and
    override package uploads there. Special cases suck, particularly
    as/when/if they stack on top of each other...

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Every time you use Tcl, God kills a kitten." -- Malcolm Ray

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMOedQACgkQWHl5VzRC aE5J4BAAiyockhKi8ur9VB1fNoxfypgtCCohhDelZ1Mw0CaYQhF54031DilkbFI1 fWowtgFfhhFI7bA3Sv/9plIlWKlZts4mH2iTQHaRvUL3NgzACNzvr9T9zJj+kJD2 JWfn5mMHf8Iqh1ZywKJRvR01zSbUgV5kr8DrwjlPfmoVHW0k4S2I3Trw2Mzz2X90 0REnFYIBmWoXBOS8lmd4tFjw9uqijClKjI9d+uKJAIBdlOlQveA1YxWnNdYfC4yt H2HvYf1gXnN7v8RgVQbbXy1pqnlkAYB/U4dikwi9UMz56n8tTLvhMfhtUsCQltqd OoYsUaiRMvlJL2irWQK/RyQ74Wp/uDSGsP8kKPiy/qXn2RIhAQmdtyDvKJcx7owj Yo0S8MJsBhdK6ybTVLExBzdL7PFFqPju83V3Ylhd8aTAJG0iOFF85PjW0N34Qv8t vAL/vDRrxd+qOHKVEcBg+KfUSSYSXVR/y/cFJt67pVcio53OFlQVinAOkOY6FkMl PWlhbldZfJtoFu10PNfXYbJvKmd9X6jFjMvk/SVnAfL4rzzzF5l6D3mohYpcdRPt fRBpjKsfZ8xte+cUlzz1tD8KRMY341263XDMqFBgiWYkmeyNlYbZTEaQHcjBWrnL qb7Ges8aaD+VPMxt1blPDSasmo+MvtTPFe7Rd9r78GrI3BkyNNQ=
    =zg7W
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
  • From =?utf-8?Q?Antoine_Beaupr=C3=A9?=@21:1/5 to Steve McIntyre on Tue Aug 30 23:10:01 2022
    On 2022-08-30 21:57:56, Steve McIntyre wrote:
    On Tue, Aug 30, 2022 at 04:27:17PM -0400, Antoine Beaupré wrote:
    On 2022-08-30 21:11:07, Steve McIntyre wrote:

    But I want to be *very* clear here that we *don't* want to enable the
    whole of the non-free component for all users by default. That would
    be a grave disservice, and I think Ansgar agrees with me. There's no
    need to hold this back to be part of the GR here IMHO.

    Yeah, so I think that's a great advantage of splitting firmware out of >>non-free: it keeps the "non-free blast radius" to a minimum, just to
    make sure people can get their hardware working without getting all that >>other stuff that they should really opt into.

    Yet I actually use non-free for other stuff as well, at a personal
    level. Things like documentation, for example, often end up in non-free
    for $reasons and I have non-free enabled for *both* this and firmware.

    In that sense, why wasn't it possible to have (say) non-free/firmware as
    a component, so that when you opt-in to non-free you *also* get
    firmware? That would have been a backwards-compatible change...

    I genuinely am not sure how various tools will interact with that kind
    of change to have nested components, tbh. I'd rather be clean and
    consistent here, and I believe Ansgar agrees. Similarly that's why the
    new non-free-firmware component has no special handling to try and and override package uploads there. Special cases suck, particularly
    as/when/if they stack on top of each other...

    Didn't we have buster/updates for a while? Is breakage related to that
    the reason why we're not doing this here?

    --
    The United States is a nation of laws:
    badly written and randomly enforced.
    - Frank Zappa

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bastian Blank@21:1/5 to Richard Laager on Tue Aug 30 23:10:01 2022
    Hi

    On Tue, Aug 30, 2022 at 03:11:25PM -0500, Richard Laager wrote:
    DSC 1 says we will never "require the use of a non-free component". To me, this is the major relevant issue.

    Nothing in Debian requires any non-free component. Require would be:
    can't be used without, which clearly is not true.

    Proposal A will use non-free-firmware by default, but "where possible...will include ways for users to disable this". Without the "where possible", I think this opt-out is compatible with the DSC. However, if it is not
    possible to disable the non-free-firmware, then it feels like the system is, in fact, requiring it. Thus this option, as worded, feels potentially incompatible with the DSC.

    It is always possible to disable it: remove the entry from the
    sources.list and the packages.

    Also, you may want to explain why the installer is part of the system at
    large. Also please explain it in the context of DSC 4, the sections of
    the DSC don't stand on it's own.

    d. The Secretary declares the option invalid and strikes it from the GR.
    This feels heavy handed given that other remedies are available,
    most notably (b), which is available even after (and if) A wins.

    I fail to see where the secretary may do that. The supermajority rules
    are declarative, they don't need to be invoked.

    e. If Proposal A wins, the entire GR is declared invalid. This is the
    thing I'm objecting to.

    I fail to see where this is allowed.

    Bastian

    --
    One does not thank logic.
    -- Sarek, "Journey to Babel", stardate 3842.4

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bastian Blank@21:1/5 to All on Tue Aug 30 23:30:01 2022
    On Tue, Aug 30, 2022 at 05:05:35PM -0400, Antoine Beaupré wrote:
    Didn't we have buster/updates for a while? Is breakage related to that
    the reason why we're not doing this here?

    We didn't have "buster" and "buster/updates" in the same place. And
    less "buster/updates" being a subset of "buster".

    The support for "buster/updates" is a hack also.

    Bastian

    --
    "Get back to your stations!"
    "We're beaming down to the planet, sir."
    -- Kirk and Mr. Leslie, "This Side of Paradise",
    stardate 3417.3

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Gunnar Wolf on Tue Aug 30 23:40:01 2022
    Gunnar Wolf <gwolf@debian.org> writes:

    If it does not require the explicit approval of the sponsors, yes, I
    agree this text clarifies and makes better the text I proposed.

    I'm not Kurt, but I think A.1.3 applies here:

    The proposer of a ballot option may amend that option provided that
    none of the sponsors of that ballot option at the time the amendment
    is proposed disagree with that change within 24 hours. If any of them
    do disagree, the ballot option is left unchanged.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Tue Aug 30 23:40:01 2022
    Kurt Roeckx dijo [Tue, Aug 30, 2022 at 10:29:28PM +0200]:
    What's the rationale for this one?

    I think it would make more sense to only configure the system to enable >> >the non-free-firmware component if the installer determines that
    packages from that component are useful for the running system (or if >> >the user explicitly asked to do so).

    That's a fair point, my text was unclear here. Let's tweak it:

    "Where non-free firmware is found to be necessary, the target system
    will *also* be configured to use the non-free-firmware component by
    default in the apt sources.list file."

    Does that sound better?

    Is this something you want to adopt?

    Yes, I think it improves things.

    I've modified the vote page with what I think you wanted to change.

    Gunnar, do you also want this change in your text?

    If it does not require the explicit approval of the sponsors, yes, I
    agree this text clarifies and makes better the text I proposed.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYw6B+gAKCRDi9jtDU/RZ ifS/AP4lRgTyF/UCzzJK828ocXx0A7/u68awY3VgOnKog++PnwEAj3qpix8sMzix +GEy4sf3Gtw4cqeV3isOhJ8sP6sU+Q4=
    =em0+
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stefano Rivera@21:1/5 to All on Wed Aug 31 11:50:01 2022
    Hi Russ (2022.08.30_02:55:11_+0000)
    Also, if the 3:1 majority option doesn't pass but a 1:1 option that
    doesn't require a supermajority does pass, that's also useful
    information. (For example, I believe that would imply that such an
    installer has to continue to be labeled as unofficial and not a part
    of the Debian system, since I think that's the plain meaning of point
    5 of the Social Contract.)

    Reading this in LWN reminds me that I would don't agree with this interpretation.

    I'd probably vote both the 3:1 option and the 1:1 above NOTA.
    This is because I believe that if enough of us agree, we should update
    the Social Contract to explain how our non-free-firmware section works,
    and what the images provide.

    If the 3:1 option didn't pass, that wouldn't mean I don't stand behind
    the 1:1 option of including non-free-firmware on images. It just means
    we didn't get enough votes to change the SC.

    Voting for the 3:1 option shouldn't effectively bury the 1:1 option, or vice-versa. The point of ranked-choice voting is to be able to select
    either of two acceptable options.

    SR

    --
    Stefano Rivera
    http://tumbleweed.org.za/
    +1 415 683 3272

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wouter Verhelst@21:1/5 to Gunnar Wolf on Wed Aug 31 13:20:01 2022
    On Mon, Aug 22, 2022 at 12:32:54PM -0500, Gunnar Wolf wrote:
    I hereby propose the following alternative text to Steve's original
    proposal.

    I'm only suggesting to modify the third paragraph, offering to produce
    two sets of images (fully-free and with-non-free-firmware), being the
    later more prominent.

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later. The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file. Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    While we will publish these images as official Debian media, they will
    *not* replace the current media sets that do not include non-free
    firmware packages, but offered alongside. Images that do include
    non-free firmware will be presented more prominently, so that
    newcomers will find them more easily; fully-free images will not be

    I would state here instead

    "Images that do include non-free firmware *may* be presented more
    prominently, at the relevant teams' discretion".

    (or something along those lines)

    Rationale: we don't want to bind ourselves to an action that we're
    taking because the situation is *currently* problematic. While unlikely,
    it is certainly possible (given enough pressure) that at some undefined
    point in the future the *majority* of firmware packages will no longer
    be in the non-free section. At that point, we may want to decide to give
    the image without non-free firmware priority again.

    hidden away; they will be linked from the same project pages, but with
    less visual priority.

    Other than that, I would second this if I had a functional GPG key ;-)

    --
    w@uter.{be,co.za}
    wouter@{grep.be,fosdem.org,debian.org}

    I will have a Tin-Actinium-Potassium mixture, thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Santiago Ruano =?iso-8859-1?Q?Rinc=@21:1/5 to All on Wed Aug 31 16:10:01 2022
    El 29/08/22 a las 09:06, Simon Josefsson escribi:
    Kurt Roeckx <kurt@roeckx.be> writes:

    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That
    makes me sad. My preference for an outcome would be along the following >> lines.

    The key you signed this with (A3CC9C870B9D310ABAD4CF2F51722B08FE4745A2)
    is not in the debian keyring.

    I'm signing this with my debian RSA key.

    /Simon

    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefore we will not include any non-free software in Debian, nor in the main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract 5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    I won't vote for this, but I think it is important to have this option
    on the ballot.

    Seconded,

    -- Santiago

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRZVjztY8b+Ty43oH1itBCJKh26HQUCYw9qWAAKCRBitBCJKh26 HQQgAQDAR1y3RX6YOLsTe4p0pqgBpIJv9Fh4Kzq3sESGEv2LcAEA5iLdlLZ3fnT2 veUAGJohN+Z3JNZ29QCHuXhs5XByjgU=
    =NqDc
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Steve McIntyre on Wed Aug 31 18:00:01 2022
    On Thu, Aug 18, 2022 at 08:58:21PM +0100, Steve McIntyre wrote:
    So, I propose the following:

    =================================

    We will include non-free firmware packages from the
    "non-free-firmware" section of the Debian archive on our official
    media (installer images and live images). The included firmware
    binaries will *normally* be enabled by default where the system
    determines that they are required, but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel
    command line etc.).

    When the installer/live system is running we will provide information
    to the user about what firmware has been loaded (both free and
    non-free), and we will also store that information on the target
    system such that users will be able to find it later.

    The target
    system will *also* be configured to use the non-free-firmware
    component by default in the apt sources.list file.

    This means that non-free-firmware would be always enabled, also when the system would not determine that the included firmware binaries are required. Intended?

    Our users should
    receive security updates and important fixes to firmware binaries just
    like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    =================================

    A reason for defaulting to installing non-free firmware *by default*
    is accessibility. A blind user running the installer in text-to-speech
    mode may need audio firmware loaded to be able to drive the installer
    at all. It's going to be very difficult for them to change this. Other
    people should be able to drive the system (boot menus, etc.) to *not*
    install the non-free firmware packages if desired.

    We will *only* include the non-free-firmware component on our media
    and on installed systems by default. As a general policy, we still do
    not want to see other non-free software in use. Users may still enable
    the existing non-free component if they need it.

    We also need to do the work to make this happen:

    * in d-i, live-boot and elsewhere to make information about firmware
    available.

    * add support for the non-free-firmware section in more places:
    ftpsync, debian-cd and more.

    and I plan to start on some of those soon.

    [1] https://blog.einval.com/2022/04/19#firmware-what-do-we-do
    [2] https://lists.debian.org/debian-devel/2022/04/msg00130.html
    [3] https://debconf22.debconf.org/talks/43-fixing-the-firmware-mess/
    [4] https://incoming.debian.org/debian-buildd/dists/buildd-unstable
    [5] https://lists.debian.org/debian-devel/2022/04/msg00214.html

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    You raise the blade, you make the change... You re-arrange me 'til I'm sane...



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Stefano Rivera on Wed Aug 31 18:30:01 2022
    Stefano Rivera <stefanor@debian.org> writes:

    Reading this in LWN reminds me that I would don't agree with this interpretation.

    I'd probably vote both the 3:1 option and the 1:1 above NOTA. This is because I believe that if enough of us agree, we should update the
    Social Contract to explain how our non-free-firmware section works, and
    what the images provide.

    My concern is that this in proposal A:

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    and this in the Social Contract:

    The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian.

    fit together oddly. I think I can see the reasoning behind why folks
    don't believe they conflict, but I must admit that my first reaction is
    that they conflict. I think the implication of them not conflicting is
    that our official installers are not part of the Debian system? Which
    seems like an odd conclusion to me.

    I don't really want to be the proponent of an option here, but I'm a bit worried about not addressing this head-on. So far, no one else who
    supports including non-free firmware in the installer (as I do) has also indicated that this bothers them, though, which to me argues against
    adding yet another option for something that maybe only I care about.

    (Proposal B and proposal C both avoid this problem. I personally prefer proposal A, though.)

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Wed Aug 31 18:20:01 2022
    Antoine Beaupré dijo [Tue, Aug 30, 2022 at 11:33:15AM -0400]:
    Since I started talking about this, Ansgar has already added dak
    support for a new, separate non-free-firmware component - see
    [4]. This makes part of my original proposal moot! More work is needed
    yet to make use of this support, but it's started! :-)

    This, however, strikes me as odd: I would have expected this to be part
    of the proposal, or at least discussed here, not implemented out of band directly. I happen to think this is a rather questionable decision: I
    would have prefered non-free to keep containing firmware images, for
    example. Splitting that out into a different component will mean a lot
    of our users setup will break (or at least stop receiving firmware
    upgrades) unless they make manual changes to their sources.list going forward. This feels like a regression.

    In general, I feel we sometimes underestimate the impact of sources.list changes to our users. I wish we would be more thoughtful about those
    changes going forward. It seems like this ship has already sailed, of
    course, but maybe we could be more careful about this in the future, *especially* since we were planning on having a discussion on
    debian-vote about that specific issue?

    You make a very important and interesting point. I guess that part of
    the fallout might be offset by the changes being part of the release
    notes, and being enabled in practice starting with the new
    release.

    However, just pushing a not-well-thought-idea: Would dak, apt, or any
    other bit of our infrastructure be very angry if non-free-firmware
    were to be not an additional component, but a strict subset of
    non-free?

    That is, all packages accepted to non-free-firmware would still appear
    as part of non-free (and thus, users having non-free listed would
    still continue to receive updates).

    I am sure this would have as a consequence the prominence of several
    thorns I haven't thought about :-) but it might be a way to address
    your point.

    Gulp, such a big jump! :) I personnally feel that we should make it
    easier for people to install Debian, but I'm not quite sure I'm ready to completely ditch the free images just yet. Maybe we could just promote non-free images a little better, but I would much rather keep the free
    images around. I guess that makes me a supporter of option "B", if I understand correctly, but I am known for struggling with parsing GR proposals. :)

    As the proposer of option B: That's basically what I want. "Here,
    these images have little bits of evil, but are necessary to boot on
    most modern hardware. Of course, we also carry those, that are
    completely non-evil".

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYw+KCAAKCRDi9jtDU/RZ ievhAQD8MjQV7+ZqxtbEkbDiR6Y1hsRCOw0jge65WwN4IZ2xbAD/ZqTTcmP2u2wy W36oIImbShLIeEBIzuvs8/ksniIndwQ=
    =6K6Q
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Wed Aug 31 18:40:01 2022
    Russ Allbery dijo [Tue, Aug 30, 2022 at 08:41:59AM -0700]:
    The phrasing of the constitution here is that the 2:1 majority is required for decisions that are authorized by the powers of the Technical
    Committee, and I think this sort of policy decision about how to handle non-free software is clearly outside the scope of the Technical Committee.
    I can't imagine the TC being comfortable making a decision like this, or
    the project being comfortable having them do it.

    I agree with what you say. Wearing my TC hat, I'd say this kind of
    issue should be debated and voted by the project, not by the TC. Even
    though the role of firmware, or the layout of archive components, are
    brought in and somewhat discussed, this is not a vote on technical
    issues.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYw+MywAKCRDi9jtDU/RZ iYpRAQCrm+Tumxixk/UJnsFLF/aQwS/aeUkqz+2qG/yWAE96qQD/S0vvPuCMP+4a pdJ+/Gt0mO+hDJVqDm2lxefWfaosxQg=
    =AVUb
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Wed Aug 31 18:50:01 2022
    Quoting Russ Allbery (2022-08-31 18:27:07)
    Stefano Rivera <stefanor@debian.org> writes:

    Reading this in LWN reminds me that I would don't agree with this interpretation.

    I'd probably vote both the 3:1 option and the 1:1 above NOTA. This is because I believe that if enough of us agree, we should update the
    Social Contract to explain how our non-free-firmware section works, and what the images provide.

    My concern is that this in proposal A:

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    and this in the Social Contract:

    The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian.

    fit together oddly. I think I can see the reasoning behind why folks
    don't believe they conflict, but I must admit that my first reaction is
    that they conflict. I think the implication of them not conflicting is
    that our official installers are not part of the Debian system? Which
    seems like an odd conclusion to me.

    I don't really want to be the proponent of an option here, but I'm a bit worried about not addressing this head-on. So far, no one else who
    supports including non-free firmware in the installer (as I do) has also indicated that this bothers them, though, which to me argues against
    adding yet another option for something that maybe only I care about.

    (Proposal B and proposal C both avoid this problem. I personally prefer proposal A, though.)

    Can you elaborate on how you support including non-free firmware in the installer *and* find the quoted paragraphs in conflict?

    Because I _want_ to support an installer as proposed in option A
    *except* that very conflict.

    The only way I could see to solve that conflict (other than interpreting
    the official installer as not part of Debian) was to keep the free-only installer around for purity reason even though generally we would
    promote another unofficial installer (and here the word "official"
    refers to what is treated as formally our main project deliverable).

    I expect your elaborating would help me see more possibilities.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============A45951543032823406=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMPj5UACgkQLHwxRsGg ASFxPw//TWiT7Q3/dG/ngxeloZ2c+Re+1GYScdv++WTPdDN45hg2E4WTlwoKrZcE 4xtbCP90zBNcqikfqOF17ChqaAgVauqtFMcElZ4Fud+LX4eL9ThLXV4sD6dAMfzE ITWGD848Evqm4sxTieV4YQ5JaEQ0XHgiCpUvG1O/y1/daf9il7wta9UvqYMNQ3XD 37GOTVxKBq/45zON9aAdlYwFtNe29tTjbPkE+IrsyyspRrG9VW2blvUOTLu33QGw LfxWA+15ovv90AMSMtewlIuUQFfv/1tQttbDO68FixtdHjsI7iK2pXNaxOp2+Ck+ dJW6B4Yy1BZ7Y95ojinXwWPfn7U6Jh7OcAGEK39s2ZrATqEZl4j/O5+rBpMA2uwz tkLP1lg3UrvKTDoxA2+CyIWm503ECSHUIvMRyfZ33GYYF8M5E8ho7MH2nT2iooA+ nrXUmddhVugVj7hGS0L3be7jWLVq3B8lQJ0DRp8ejEl4wupKQv9PDFXHmB+vi3zY lzBZNeA6ps/3K2USf
  • From Gunnar Wolf@21:1/5 to All on Wed Aug 31 18:30:01 2022
    Russ Allbery dijo [Tue, Aug 30, 2022 at 02:38:13PM -0700]:
    If it does not require the explicit approval of the sponsors, yes, I
    agree this text clarifies and makes better the text I proposed.

    I'm not Kurt, but I think A.1.3 applies here:

    The proposer of a ballot option may amend that option provided that
    none of the sponsors of that ballot option at the time the amendment
    is proposed disagree with that change within 24 hours. If any of them
    do disagree, the ballot option is left unchanged.

    Thanks, Russ. I don't have mind-cached all of the constitution. OK, I
    confirm then my acknowledgement to Kurt's suggestion: Please add the
    paragraph to my option.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYw+K2QAKCRDi9jtDU/RZ ifomAQD5eMY3uU2HWzOBtM6IyzosOhNLoYItnZfu14KqPpmzewD7BnzGmXaVMTNl ZauMyfWM7xvH+SHn1GSpTL15q3YGBgo=
    =Ra5h
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Jonas Smedegaard on Wed Aug 31 21:30:01 2022
    Jonas Smedegaard <jonas@jones.dk> writes:

    Can you elaborate on how you support including non-free firmware in the installer *and* find the quoted paragraphs in conflict?

    I believe our Social Contract ideally should change. I would not want to indiscriminately add more non-free software (even drivers are iffy to me),
    but I think it is currently unrealistically restrictive about including firmware that is required to use most modern hardware without bugs and
    other problems. I'm happy to have firmware in a separate archive area so
    that people who want to avoid it can, but I personally would rather treat
    it differently than non-free, including considering it part of the Debian system.

    One of the things that I like about Debian is that it is not gNewSense and
    we take a more practical and less ideologically purist approach to free software. I would prefer that we move in a direction of even more
    pragmatism than we currently have.

    To be clear, I do understand that I joined a project with the Social
    Contract that it has, and unless we change it, those are the rules I
    follow when working on Debian. But I still have my own preferences about
    the direction in which I'd like to see the project evolve.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Gunnar Wolf on Thu Sep 1 05:50:01 2022
    On Wed, 2022-08-31 at 11:19 -0500, Gunnar Wolf wrote:

    However, just pushing a not-well-thought-idea: Would dak, apt, or any
    other bit of our infrastructure be very angry if non-free-firmware
    were to be not an additional component, but a strict subset of
    non-free?

    That is, all packages accepted to non-free-firmware would still appear
    as part of non-free (and thus, users having non-free listed would
    still continue to receive updates).

    I suggested this in the earlier discussion:

    https://lists.debian.org/msgid-search/56b88c450a464743f84a2f451d20d554d81c3546.camel@debian.org

    It sounds like that this isn't going to happen:

    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012533#25

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMQKlcACgkQMRa6Xp/6 aaOFjQ/9G60PsjLEL5hlOUkOgQ1El8GxU4ETt/ZNmAPVEZir3i7GstfHF7dDN+PE CvqNz0j4B0B1saTW6lA6M7/f0/BDRBPwbZtVrH1HzdkqIaD33xmOJNq83N9K5G6f B8aAccR5Tj76Umcu1NNRm1JV1pkcSzlQVUI3qD6YKua6knJbEqgtccfpKzrfkCrx NgaklvNtCPC+IbS0mYpYrLtFTgtTD3SQRadVrZS3dJjb5Q3EedOMLoEBnYICoPsf b/Fm3OQAThYC6Oqn2KBTlVDYbOFQL3YyFfoR7IZjuWmwQkN24d07aBA1GOGEvb7R 28BLSQeNMVNTd4CGSG7kC/7G6aHrrK5uMaUoxX0jBSHFGCwQqbIHsmuR2K/iQrNq lVI0GMeq1k3TvQBuRa9jWL00lMugpiWyVPWR5gtXlf+u3e8nAyb7bUbweiBSCreN Kdk04zCiCk606UwtmTBZWazcRp0WKc3IbHV6h4ceHj5kfZo75ISpjqrV8ObplxG4 H1kXBB8UwRcEQFgC6rJb3jIqEN8sA9tCVrGcagtaLPNvO+FeD4j7tt89hfK3fmFl 1FQVmCqocuh/1cJ/rew5ANSf4oVaLttrl68Hue+ic/y8w4N3J9rSCi/Db//Asm8t bvwnlyMC5Xr47Rse4PKoPrqSd34u2EZjrjvktxSXo6s1Nviu7aQ=
    =E6w1
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Shengjing Zhu@21:1/5 to Simon Josefsson on Thu Sep 1 05:20:01 2022
    On Mon, Aug 29, 2022 at 09:06:38AM +0200, Simon Josefsson wrote:
    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefore we will not include any non-free software in Debian, nor in the main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    We also continue to stand by the spirit of the Debian Social Contract 5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    ==================

    Second.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCYxAj2wAKCRB/RPol6lUU y5kFAP4tuEiIekEQoXxzhk1w7j/ciVdh9IGTcecWRPyJ4NrHqwD+MEFGkk6YNwFd ZUsz9DJtcHNSEEeLRLWCyET8SSPI9wQ=
    =mBtP
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luna Jernberg@21:1/5 to Russ Allbery on Thu Sep 1 10:40:01 2022
    https://youtu.be/csdtAcf5ZMs

    On 8/31/22, Russ Allbery <rra@debian.org> wrote:
    Jonas Smedegaard <jonas@jones.dk> writes:

    Can you elaborate on how you support including non-free firmware in the
    installer *and* find the quoted paragraphs in conflict?

    I believe our Social Contract ideally should change. I would not want to indiscriminately add more non-free software (even drivers are iffy to me), but I think it is currently unrealistically restrictive about including firmware that is required to use most modern hardware without bugs and
    other problems. I'm happy to have firmware in a separate archive area so that people who want to avoid it can, but I personally would rather treat
    it differently than non-free, including considering it part of the Debian system.

    One of the things that I like about Debian is that it is not gNewSense and
    we take a more practical and less ideologically purist approach to free software. I would prefer that we move in a direction of even more
    pragmatism than we currently have.

    To be clear, I do understand that I joined a project with the Social
    Contract that it has, and unless we change it, those are the rules I
    follow when working on Debian. But I still have my own preferences about
    the direction in which I'd like to see the project evolve.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>



    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luna Jernberg@21:1/5 to Luna Jernberg on Thu Sep 1 10:50:01 2022
    i vote for Proposal B

    On 9/1/22, Luna Jernberg <droidbittin@gmail.com> wrote:
    https://youtu.be/csdtAcf5ZMs

    On 8/31/22, Russ Allbery <rra@debian.org> wrote:
    Jonas Smedegaard <jonas@jones.dk> writes:

    Can you elaborate on how you support including non-free firmware in the
    installer *and* find the quoted paragraphs in conflict?

    I believe our Social Contract ideally should change. I would not want to
    indiscriminately add more non-free software (even drivers are iffy to
    me),
    but I think it is currently unrealistically restrictive about including
    firmware that is required to use most modern hardware without bugs and
    other problems. I'm happy to have firmware in a separate archive area so
    that people who want to avoid it can, but I personally would rather treat
    it differently than non-free, including considering it part of the Debian
    system.

    One of the things that I like about Debian is that it is not gNewSense
    and
    we take a more practical and less ideologically purist approach to free
    software. I would prefer that we move in a direction of even more
    pragmatism than we currently have.

    To be clear, I do understand that I joined a project with the Social
    Contract that it has, and unless we change it, those are the rules I
    follow when working on Debian. But I still have my own preferences about
    the direction in which I'd like to see the project evolve.

    --
    Russ Allbery (rra@debian.org)
    <https://www.eyrie.org/~eagle/>




    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Simon Richter on Thu Sep 1 18:50:01 2022
    On Thu, Sep 01, 2022 at 06:02:38PM +0200, Simon Richter wrote:
    A large part of installations now run inside virtual machines and have no
    use for device firmware.

    yes.

    Having a free-software-only installer is an easy
    way for image builders to ensure that anything they build will be redistributable.

    no. if you build images, you don't use d-i but fai, debuerreotype, mmedebstrap debootstrap or your-custom-script-being-used-since-1997 or something else, but hardly anyone uses d-i for this use-case.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    https://showyourstripes.info

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmMQ4HkACgkQCRq4Vgaa qhxYrBAAs0BAtzqxpXoG14TBdsCEVf3int4avck+oIzjNS/T9pufQ4nKOJFlkhBQ hIYuIvOsIL5Ltjd+QvU/Aew7hTSFFR25PNIXyKoh4uuO1z/bcUarmBCr/q4wzpij WxMtxn2zN7612/YYW3RVDCPYrJgCSt8B/rsycY5fvkM7fd9VgOl6Cp1UGZpKiIQq AUDhn9OOGENDRwm+s42RLqPPXzbtgoxjE6jsg/Xy8s7F0r3V6nDGN2tl9BuUtdq2 VL338e7GacS8tV7zIhjLw3F8eZZMUJ/oLDag2G+Ezg7eJLPb4qZZpPra0Gcy8kal XoGEuUJ7moTalw1nHDAKm4tnK87OTjXDfGEo5c5dyDrDUX6oTbMl19oI2QOyWcxZ 686bIFApoNwGmqqw+M/QoEefJsqwzPF8s6IsbL0hgwyg5nvtT2pQw4e8WIX1M6KM 3LQ5Deu+ZGavlXubAREr8fT6ILOLTeFirN7KSsI6yklV9YW5wT8EQ+Y/aZ5iGsUS dLt+s0tQyvS3lJmu4Q4XAw92NwufD9I/ulxi7AzmwjPmQBGEG0s8HTQfcsB/hCkZ lV+DDfjsSoFsRES2SZi57o6u98CqksFoH2zEapd2RxTZnIBE0+CWd4/JZBqNrhq7 PrVu5rpoUa6eZeb1Ch
  • From Jonas Smedegaard@21:1/5 to All on Thu Sep 1 19:30:01 2022
    Quoting Holger Levsen (2022-09-01 18:40:30)
    On Thu, Sep 01, 2022 at 06:02:38PM +0200, Simon Richter wrote:
    A large part of installations now run inside virtual machines and have no use for device firmware.

    yes.

    Having a free-software-only installer is an easy
    way for image builders to ensure that anything they build will be redistributable.

    no. if you build images, you don't use d-i but fai, debuerreotype, mmedebstrap
    debootstrap or your-custom-script-being-used-since-1997 or something else, but
    hardly anyone uses d-i for this use-case.

    I suspect that the above response provides a clue to why some find it
    important to label an install image as "official" and others find that irrelevant: I am the developer of one such bootstrapping tool - boxer -
    but I consider my tool stable only when it can mimick the installation
    as done by debian-installer. My tool is far from that goal, but that
    goal nevertheless exists for my view on what is a canonical Debian
    system: A system spawned using official Debian install process.

    When you use debootstrap (which for *most* parts is the canonical tool)
    then you are left with a few files missing (at some point that included /etc/resolv.conf and /etc/apt/sources.list) and filing a bugreport that packages behave weirdly for a system with those core files missing will
    most likely lead to that bugreport being quickly closed as not-a-bug.
    Which is the reason that I consider debian-installer an important part
    of our main deliverable.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============33637816674658910=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMQ6eUACgkQLHwxRsGg ASGzYQ//TYhw1sW6qpXOLvsPanGPvvlhoaxC0cY3I4udEbd7WA559GlXuqTzNGZd dF8UUeqCq5zcTw9UV5hb4Fn+QDw+wgPDWjy0CwnLPlQHunrASzKYI8eWcVHpQnRh PuMsV3XfsiYkmgS1tMzM4dViYmcy2InGbsHg4/7wsYiCIwE7lDLd0IsB6Jc6C5sS Tl+VB/sIp92xDcw2VdANmCDf4ekdml/ocXxO/IUcQUsdgttSwzteTd9ZO9QmUtEw HTt2UPF5VJK+CcFPJ3jCEYNAp6BkjGlIAB7QU0WueKqKVKn3QeHYNHnk6ct5QJmj Co+zms33o9uVFrMsPdPoZd6TO7HY3d+p71kGQI25dvMNr6QaW+xDy+3mg7S0ZGME vAsa2kok59DzaGzwMj0jT0g8XBFS/7ghNngO/m4hFejm/Pbb+F1TlZgzP02ABmS8 I3WnRamhYn58fLbj1nnbAUtrOoHSVxGSL6DzurdRPn9UgsxxHzz6WXcYUgxNuviM m7Qn2b06egbJA2zi7
  • From Luna Jernberg@21:1/5 to Luna Jernberg on Thu Sep 1 20:30:01 2022
    https://linuxactionnews.com/256

    On 9/1/22, Luna Jernberg <droidbittin@gmail.com> wrote:
    https://youtu.be/csdtAcf5ZMs

    On 8/31/22, Russ Allbery <rra@debian.org> wrote:
    Jonas Smedegaard <jonas@jones.dk> writes:

    Can you elaborate on how you support including non-free firmware in the
    installer *and* find the quoted paragraphs in conflict?

    I believe our Social Contract ideally should change. I would not want to
    indiscriminately add more non-free software (even drivers are iffy to
    me),
    but I think it is currently unrealistically restrictive about including
    firmware that is required to use most modern hardware without bugs and
    other problems. I'm happy to have firmware in a separate archive area so
    that people who want to avoid it can, but I personally would rather treat
    it differently than non-free, including considering it part of the Debian
    system.

    One of the things that I like about Debian is that it is not gNewSense
    and
    we take a more practical and less ideologically purist approach to free
    software. I would prefer that we move in a direction of even more
    pragmatism than we currently have.

    To be clear, I do understand that I joined a project with the Social
    Contract that it has, and unless we change it, those are the rules I
    follow when working on Debian. But I still have my own preferences about
    the direction in which I'd like to see the project evolve.

    --
    Russ Allbery (rra@debian.org)
    <https://www.eyrie.org/~eagle/>




    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Richard Laager on Fri Sep 2 21:20:02 2022
    On Tue, Aug 30, 2022 at 03:11:25PM -0500, Richard Laager wrote:

    I like to discussion about anything related to this, so that I can at
    least get an idea what the consensus is.

    DSC 1 and DSC 5 have some implications about "the Debian system" vis-a-vis non-free, but the plan here is to keep the firmware in a separate non-free-firmware analogous to non-free. That seems fine to me.

    DSC 1 says we will never "require the use of a non-free component". To me, this is the major relevant issue.

    Proposals B and C offer users the explicit choice of media. That feels clearly compatible with the DSC, as users are not required to use non-free bits.

    Proposal A will use non-free-firmware by default, but "where possible...will include ways for users to disable this". Without the "where possible", I think this opt-out is compatible with the DSC. However, if it is not
    possible to disable the non-free-firmware, then it feels like the system is, in fact, requiring it. Thus this option, as worded, feels potentially incompatible with the DSC.

    It that it says "at boot". That seems to imply that it will get
    installed, but it might not get used, which might at least surprise
    some people. But maybe that's only for the live images.

    Note that the SC only says: "require the use of a non-free component".
    This can be interpreted as having it installed is not a problem as
    long as it's not used.

    I think there are people that want to use the official image but don't
    want anything non-free installed, nor want it in the sources.list file.
    So they might want to have an installer that supports that.

    So I think I have to agree that the "where possible" is probably not
    compatible with the SC. I think it should be more explicit that it will
    be possible to disable the use of non-free firmware.

    SC #5 says that contrib and non-free is not part of the Debian system.
    But talks about CDs that can include such packages. It seems that we
    find it acceptable that installation and live media contains non-free
    software. But clearly there are people who don't agree with this.

    Other questions I still have:
    - Can a GR overrule the SC without explicitly saysing so, and does it
    then need a 3:1 super majority? Currently I think it should explicitly
    change the SC.
    - Is opt-out good enough, or does it need to be opt-in?
    - Does SC #5 need to be changes since we're adding a non-free-firmware
    section?

    I will likely say that option A is not compatible with the SC and
    invalid. Please either change the text, or try to convince me otherwise.
    I did not see any arguments of why it would not conflict.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Sat Sep 3 21:10:01 2022
    Quoting Kurt Roeckx (2022-09-03 20:28:35)
    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That makes me sad. My preference for an outcome would be along the following lines.

    ==================

    We continue to stand by the spirit of the Debian Social Contract §1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in the main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    I can interprete that as having non-free available and installed by default is acceptable, as long as there is a way not to use the non-free part.

    We also continue to stand by the spirit of the Debian Social Contract §5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we support their use and welcome others to distribute such work.

    As you indicate yourself, this is an interpretation of the SC. I would
    really prefer that such a question was not open to interpretation and
    that the SC was changed to make it more clear what we mean.

    I don't actually understand what this part of your text is saying. Are
    you saying that an image with non-free software on it is non-official
    because it's not part of the Debian system? That is not something I read
    in that text.

    I think the key to understanding that paragraph is an implied assumption
    that some installer *is* considered part of the Debian system - i.e. "a
    system of installer and installable packages" (which is different from
    "an operating system resulting from executing an installer").

    I worry that the multiple meanings of "system" in ballot texts will lead
    to confusion/frustration over how to vote and how to interpret the
    result of the vote.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============67608429301779959=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMTpHoACgkQLHwxRsGg ASEEXw//Zb/EeNFNRFdWcHl6LAet2r6aPXixYFmQnEH7MswsIrhW1GZPRJHFz2Ns zfi+e5QU7F2zHQRe/SJSQi3pV492Uu+nk5vIbQvdskvJDxIz4aIrZfICLlBp+lCw uSgMl+ROJUKCXgGk5ecsqHY4orco1Mq6AGC/cQLJkYJiPP3c5nO/K3SvkX+ltlct rxcjcsqXWDIqtVQBSHgH82xsQLVLj2xSc66ny1virsI9vkY3iDNUjyX/nS+/yefO krwUPoFO7VtT22fxyZnyRBMJYJLOcBs3fSzULQHmHRNVeJrjnskqnUDrmGOxlNZi C8xMYfqbKzOg+fZVPYmSYS+0r3dHxbxqCuuifk7kd2Ci2E0h3Hs1ZxgCJeEyomUo vMqFcG9CT5a6q7ATUaQrb+dfh0DZ8/x5lUHIKyHW6HPKnSS96tkvVlF5pdD6Op+a FF/PJfAhvqT1niKH4tzvHslNEitRMWp+KeedpYX3P64/K5CbAE60SPVkKDWkp4d2 LI8KOzLwdPkyil1JV
  • From Kurt Roeckx@21:1/5 to Simon Josefsson on Sat Sep 3 20:30:01 2022
    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That
    makes me sad. My preference for an outcome would be along the following lines.

    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    I can interprete that as having non-free available and installed by default
    is acceptable, as long as there is a way not to use the non-free part.

    We also continue to stand by the spirit of the Debian Social Contract 5 which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    As you indicate yourself, this is an interpretation of the SC. I would
    really prefer that such a question was not open to interpretation and
    that the SC was changed to make it more clear what we mean.

    I don't actually understand what this part of your text is saying. Are
    you saying that an image with non-free software on it is non-official
    because it's not part of the Debian system? That is not something I read
    in that text.

    I would also like to point out that the Secretary has the power to
    adjudicates any disputes about interpretation of the constitution, but
    not about the foundation documents.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Judit Foglszinger@21:1/5 to All on Sun Sep 4 03:43:36 2022
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing packages from the non-free section of the Debian archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEeh+1J5uI1UvU9CMA9TaqcBEdVxYFAmMTvHgACgkQ9TaqcBEd VxbkxQ//TI08ScCe47QoZYLHaq353CH6D5YpMeHXX8At4v8NZDF1Oibv41xHFJaw iyIDKBpmpWTQQ/oIjyOtzrqd9MJWw+HA4c9lIEhKdBZx0wd64a+qWiBfGPxB6nee kGIGYRbLP6BSwrqx4Npf4OoPkf+AiCMgchciE6FEJxY1GF2fdQ8RLPhMxo6+dYqT GO+f2zahd8LTh4jw36QxmnUteP56vJi5sLUWfAVb+UPCgKkorOgm+XMDH6xw7NBU bMd+L8ORlSE9ZCrSkL037O2WmvYxpCDpjw+AXvAc8JDT0HypnfczhsO8rmmoFEOP 7H/vgHhA+Nym2uQ0JmnyZAl7/Ipob3ABCtsNsSjrOlnYP98S2+IqzEvA9zxoRO5p T/z+wkYRHs25GQgcPBG/O07fZ/EQAVPtME3y1cq+2LW9Yv8W7CS8TK5zUiMp7cHS mQRqFqcCBbFvF3FCCklJfh19QGsVkfoza/PxhZnxfyfhk+tbkEeqAN9shIS+DYGc 7wq+u99kjE8cd7PHYZG1IFYlbIXoHmmVNUf70weQnEElZJ2GtO+7DPVuIJEagEth LENYJ6fRBn4NHhSZ2oLWk97pChJaqFLaTerthNz9tjOID83uuYlOihZbStK1rxap KJejxXCxc5sus+8V5AjnWV77Nbcok6eRFmRGZQBu24Xp1dNVCTY=
    =uJ2c
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tobias Frost@21:1/5 to Kurt Roeckx on Sun Sep 4 10:00:02 2022
    Hi Steve,

    On Fri, Sep 02, 2022 at 09:14:53PM +0200, Kurt Roeckx wrote:
    On Tue, Aug 30, 2022 at 03:11:25PM -0500, Richard Laager wrote:

    I like to discussion about anything related to this, so that I can at least get an idea what the consensus is.

    DSC 1 and DSC 5 have some implications about "the Debian system" vis-a-vis non-free, but the plan here is to keep the firmware in a separate non-free-firmware analogous to non-free. That seems fine to me.

    DSC 1 says we will never "require the use of a non-free component". To me, this is the major relevant issue.

    Proposals B and C offer users the explicit choice of media. That feels clearly compatible with the DSC, as users are not required to use non-free bits.

    Proposal A will use non-free-firmware by default, but "where possible...will
    include ways for users to disable this". Without the "where possible", I think this opt-out is compatible with the DSC. However, if it is not possible to disable the non-free-firmware, then it feels like the system is,
    in fact, requiring it. Thus this option, as worded, feels potentially incompatible with the DSC.

    It that it says "at boot". That seems to imply that it will get
    installed, but it might not get used, which might at least surprise
    some people. But maybe that's only for the live images.

    Note that the SC only says: "require the use of a non-free component".
    This can be interpreted as having it installed is not a problem as
    long as it's not used.

    I think there are people that want to use the official image but don't
    want anything non-free installed, nor want it in the sources.list file.
    So they might want to have an installer that supports that.

    So I think I have to agree that the "where possible" is probably not compatible with the SC. I think it should be more explicit that it will
    be possible to disable the use of non-free firmware.

    SC #5 says that contrib and non-free is not part of the Debian system.
    But talks about CDs that can include such packages. It seems that we
    find it acceptable that installation and live media contains non-free software. But clearly there are people who don't agree with this.

    Other questions I still have:
    - Can a GR overrule the SC without explicitly saysing so, and does it
    then need a 3:1 super majority? Currently I think it should explicitly
    change the SC.
    - Is opt-out good enough, or does it need to be opt-in?
    - Does SC #5 need to be changes since we're adding a non-free-firmware
    section?

    I will likely say that option A is not compatible with the SC and
    invalid. Please either change the text, or try to convince me otherwise.
    I did not see any arguments of why it would not conflict.


    I think that "where possible" is aimed towards that there might be systems that won't boot (properly) anymore, or possibly the system would not be usable for some people (e.g people requiring TTS), so it could be hard for them to actually disable them.

    Disabling _might_ be even impossible during boot, if those bits are required so early in the boot process that there is no way to intervene. (e.g Raspberry Pi)

    Steve, to fix the concerns by Kurt, would you accept some changes

    - to remove the words "where possible"
    - and change the next sentence to:
    "When the installer/live system is running we will provide
    informationa to the user about what firmware has been loaded (both
    free and non-free) and offer to abort the installation if non-free
    firmare has been loaded. And we will also …"

    (please rephrase as you see appropiate; English is not my native
    language and I might have missed subtlities in my wording…)

    My rationale for the second sentence is:

    (I first had this version in mind, to be added to the sentence that has
    the "where possible: I quote that now because I believe that makes it
    clearer what I have in mind, but I believe the proposoal above is more practical:
    "Where disabling the firmware is not possible or feasible, (e.g it is
    required to boot the system/installer, required by active accessiblity
    features, etc), we will inform the user about this, and offer to abort
    the installation.")

    - if there is a system that won't work without firemware, there won't be
    a usable free installer for them, so for people who care, the only
    option will be not using that system, so we should give them this
    option as well at all. At that point, everything happended in RAM, so
    aborting the installation will return to the previous state of the
    device, without any permanent modifications.
    - people might not be able to make this decission before they have
    actually loaded firmware. IIUIC for TTS systems, some AMD APU won't
    display *anything* without firmware… So a chicken-egg problem; with the
    second sentence they'll explicitly get a "you do not have to…" option.

    I changed my original sentence, because I'm not sure if we indeed can *always* *correctly* determine if a specific firmware is required in the spirit of that sentence.

    Kurt: Would something like my proposal be able to fix your concerns?

    --
    tobi


    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmMUWncACgkQkWT6HRe9 XTbBsQ//a+LQc3L8+Pu/B+GXXtRfFT4EzvW6EJOGw44HHfEqjxATwdta3gC1F81r RNMLmMeZlJni9b07EnKOr7TRsRRNoqUfgdgmdlT9+EWiLLj/rWwmQEd6Fy4pDPpx sWeoXVezUPRbvvCDQ1mLNxM9SLlvRWb/ksU53uMkVzMHCl2M0XQG7woVJWDT6hxb 8ZPJ14gmmAe8a/4sF6fyOg4kzvDzPGQDq4wy5xi1gT1DX36WE7E+HhNAsPmZh4sT H8VsHX1mydthoTyOi0dZujh8D6ImylnhmRVjys6klJGAGrMPtMPQoYoIUZvhTn6p FBQ0wp75zETkUdCumlx/oOkQpOzinTZbPAnTi7A5n0V+srU9OY7Ulkd0XhmMcxYM jJqqUE6FFXsxUPaEMUfhuZoV8QuUORTlkXB6SG8m+65wuHG5q9a28aaerd6NruRA u2aHHVpo1vJ5kA7E/jhy2J7wSm6xnEurijli1EZqqhz/zGipuRB2PEEW0DsXZczD OH0wDEL8k/bdtCBCeyJ5jyU7mV8RAkx9MXGGLfza07FxhIwPvHo2ABzOsUniekYp 4UMIcZMABL9oIIw+/dSsrxY4H9LRjbPo7102pY+Qtx34CvWrhm9mzRM2FAi+hk8I lNuJWKbTZA87ZONjI5LkbdkmQq516bkxpa87sJoJy6Qkw5YGojk=
    =F0TK
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Tobias Frost on Sun Sep 4 21:40:01 2022
    On Sun, Sep 04, 2022 at 09:57:45AM +0200, Tobias Frost wrote:
    Hi Steve,

    On Fri, Sep 02, 2022 at 09:14:53PM +0200, Kurt Roeckx wrote:
    On Tue, Aug 30, 2022 at 03:11:25PM -0500, Richard Laager wrote:

    I like to discussion about anything related to this, so that I can at least get an idea what the consensus is.

    DSC 1 and DSC 5 have some implications about "the Debian system" vis-a-vis
    non-free, but the plan here is to keep the firmware in a separate non-free-firmware analogous to non-free. That seems fine to me.

    DSC 1 says we will never "require the use of a non-free component". To me,
    this is the major relevant issue.

    Proposals B and C offer users the explicit choice of media. That feels clearly compatible with the DSC, as users are not required to use non-free
    bits.

    Proposal A will use non-free-firmware by default, but "where possible...will
    include ways for users to disable this". Without the "where possible", I think this opt-out is compatible with the DSC. However, if it is not possible to disable the non-free-firmware, then it feels like the system is,
    in fact, requiring it. Thus this option, as worded, feels potentially incompatible with the DSC.

    It that it says "at boot". That seems to imply that it will get
    installed, but it might not get used, which might at least surprise
    some people. But maybe that's only for the live images.

    Note that the SC only says: "require the use of a non-free component".
    This can be interpreted as having it installed is not a problem as
    long as it's not used.

    I think there are people that want to use the official image but don't
    want anything non-free installed, nor want it in the sources.list file.
    So they might want to have an installer that supports that.

    So I think I have to agree that the "where possible" is probably not compatible with the SC. I think it should be more explicit that it will
    be possible to disable the use of non-free firmware.

    SC #5 says that contrib and non-free is not part of the Debian system.
    But talks about CDs that can include such packages. It seems that we
    find it acceptable that installation and live media contains non-free software. But clearly there are people who don't agree with this.

    Other questions I still have:
    - Can a GR overrule the SC without explicitly saysing so, and does it
    then need a 3:1 super majority? Currently I think it should explicitly
    change the SC.
    - Is opt-out good enough, or does it need to be opt-in?
    - Does SC #5 need to be changes since we're adding a non-free-firmware
    section?

    I will likely say that option A is not compatible with the SC and
    invalid. Please either change the text, or try to convince me otherwise.
    I did not see any arguments of why it would not conflict.


    I think that "where possible" is aimed towards that there might be systems that
    won't boot (properly) anymore, or possibly the system would not be usable for some people (e.g people requiring TTS), so it could be hard for them to actually disable them.

    Disabling _might_ be even impossible during boot, if those bits are required so
    early in the boot process that there is no way to intervene. (e.g Raspberry Pi)

    Steve, to fix the concerns by Kurt, would you accept some changes

    - to remove the words "where possible"
    - and change the next sentence to:
    "When the installer/live system is running we will provide
    informationa to the user about what firmware has been loaded (both
    free and non-free) and offer to abort the installation if non-free
    firmare has been loaded. And we will also …"

    (please rephrase as you see appropiate; English is not my native
    language and I might have missed subtlities in my wording…)

    My rationale for the second sentence is:

    (I first had this version in mind, to be added to the sentence that has
    the "where possible: I quote that now because I believe that makes it
    clearer what I have in mind, but I believe the proposoal above is more practical:
    "Where disabling the firmware is not possible or feasible, (e.g it is
    required to boot the system/installer, required by active accessiblity
    features, etc), we will inform the user about this, and offer to abort
    the installation.")

    - if there is a system that won't work without firemware, there won't be
    a usable free installer for them, so for people who care, the only
    option will be not using that system, so we should give them this
    option as well at all. At that point, everything happended in RAM, so
    aborting the installation will return to the previous state of the
    device, without any permanent modifications.
    - people might not be able to make this decission before they have
    actually loaded firmware. IIUIC for TTS systems, some AMD APU won't
    display *anything* without firmware… So a chicken-egg problem; with the
    second sentence they'll explicitly get a "you do not have to…" option.

    I changed my original sentence, because I'm not sure if we indeed can *always*
    *correctly* determine if a specific firmware is required in the spirit of that
    sentence.

    Kurt: Would something like my proposal be able to fix your concerns?

    It addresses at least one of my concerns, so that I don't see a conflict
    with one possible way to interpret the SC. But there are other ways to interpret it, where option D seems to do it in an other way. And as
    Secretary I can't say which of the interpretations is (currently)
    the correct one.

    I'm not sure that a GR should say what the interpretation of a document
    should be. I really prefer that the document is changed instead so that
    it's more clear on what it says. Is this just a "nontechnical policy statements"? Or is a modification of foundation document without
    actually modifying it? And should just a non-modification be allowed, or
    does it require a 3:1 majority requirement?

    I'm currently leaning towards not allowing interpretations and requiring
    to actually modify the Social Contract.

    Please note that the current discussion period ends the 7th, the maximum discussion period is the 8th, which probably means I'll start the vote
    the 9th or the 10th, and I think we're not actually going to be ready to
    have all options like we want them by then.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Sun Sep 4 22:10:01 2022
    To: leader@debian.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------BmYs618BrDOIuj2F4DYUbunL
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gOS80LzIyIDE0OjM4LCBLdXJ0IFJvZWNreCB3cm90ZToNCj4gUGxlYXNlIG5vdGUgdGhh dCB0aGUgY3VycmVudCBkaXNjdXNzaW9uIHBlcmlvZCBlbmRzIHRoZSA3dGgsIHRoZSBtYXhp bXVtDQo+IGRpc2N1c3Npb24gcGVyaW9kIGlzIHRoZSA4dGgsIHdoaWNoIHByb2JhYmx5IG1l YW5zIEknbGwgc3RhcnQgdGhlIHZvdGUNCj4gdGhlIDl0aCBvciB0aGUgMTB0aCwgYW5kIEkg dGhpbmsgd2UncmUgbm90IGFjdHVhbGx5IGdvaW5nIHRvIGJlIHJlYWR5IHRvDQo+IGhhdmUg YWxsIG9wdGlvbnMgbGlrZSB3ZSB3YW50IHRoZW0gYnkgdGhlbi4NCg0KVW5kZXIgwqdBLjEu MSwgdGhlIFByb2plY3QgTGVhZGVyIGNhbiBpbmNyZWFzZSB0aGUgbWF4aW11bSBkaXNjdXNz aW9uIA0KcGVyaW9kIGJ5IDEgd2Vlay4gVGhhdCB3b3VsZCBleHRlbmQgdGhlIDh0aCB0byB0 aGUgMTV0aC4gSXQgc291bmRzIGxpa2UgDQp0aGF0IG1pZ2h0IGJlIGEgZ29vZCBpZGVhIGhl cmUuDQoNCklmIGFuIG9wdGlvbiBpcyBhbWVuZGVkIG9yIGEgbmV3IG9wdGlvbiBhZGRlZCwg dGhhdCB3b3VsZCBleHRlbmQgdGhlIDd0aCANCnRvIG9uZSB3ZWVrIHBhc3QgdGhlIGFtZW5k bWVudCAob3IgdGhlIDE1dGgsIHdoaWNoZXZlciB3YXMgZWFybGllcikuDQoNCi0tIA0KUmlj aGFyZA0K

    --------------BmYs618BrDOIuj2F4DYUbunL--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMVBXAACgkQ+HlhmcBF hs6XqxAAmKS8YQTJAu0qf7I+8p0ZtLFKhncm4LKSlGOWY7wIIGmkn0SvEP6ONuGO CbKBcwbkYQMTkGeL4e+spM2Nk/tBxR//Q37CYKeMsQK4ylnl14LTTE7+LFxfnL1W lOzyywn5AgVgPsk/ITELsX6RWlq2r4c42y+VwUQIN0/+NzIHRlk+AxNtbPn/gwIg wTQgMPLkXgaDiRMJZQPG23ovPQ74+BJ/2eui7iydfYyutztYNRSbEZEgfJNsAJRV M08GdeXmsyEx+MZ/R/qyNg/kRAs+pPfOIh0urM8xp8bZyLC5yIIvWd6s1EJAQZ06 lNyCH1yK0ANDKedPLHffdU2L+NGbc+rD5iWhZeNzlWkYqLvSg/cJwrV1OnGmdhrx DGIC4BXNHhAFcB/SbwcrX37BhAuL5bneJC+2ozaY97wvesnhM/fM7w4IZX47vpDB jFdNuT59r3Ff2cbU1s7rvynTUy1m41DtT52ArHOa31bq2r9nuiqUiXVlZspKdVCB ca/yv1mU8smd8BYtwwPicbFvtpyrkQ4GLgxqGV8xjjsKeDIXSu0WKJxWoiM28zN+ 8LkSNzB+W0koRrfpBkhPea226uopyPZbITX2xVGXsKfcQLQVuHaNX3RngTtC/1JU yY2GBX1gfBJBt/05r6zVOlrw/MvU+y4ySBH0+u+625f6rtOQcjg=
    =+jw3
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Mon Sep 5 03:10:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------dpEs7eONqmNAUZqi8kU18zTB
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gOS80LzIyIDE0OjM4LCBLdXJ0IFJvZWNreCB3cm90ZToNCj4gSSdtIG5vdCBzdXJlIHRo YXQgYSBHUiBzaG91bGQgc2F5IHdoYXQgdGhlIGludGVycHJldGF0aW9uIG9mIGEgZG9jdW1l bnQNCj4gc2hvdWxkIGJlLiBJIHJlYWxseSBwcmVmZXIgdGhhdCB0aGUgZG9jdW1lbnQgaXMg Y2hhbmdlZCBpbnN0ZWFkIHNvIHRoYXQNCj4gaXQncyBtb3JlIGNsZWFyIG9uIHdoYXQgaXQg c2F5cy4NCg0KSSBhZ3JlZSB3aXRoICJwcmVmZXIiLCBidXQgSSBjYW4ndCBicmluZyBteXNl bGYgdG8gc2F5ICJyZXF1aXJlIA0KW2FtZW5kbWVudF0iIG9yICJwcm9oaWJpdCBpbnRlcnBy ZXRhdGl2ZSBHUnMiLg0KDQpJIHRoaW5rIGl0J3MgcmVhc29uYWJsZSwgYXQgbGVhc3QgaW4g c29tZSBjYXNlcywgZm9yIGEgR1IgdG8gbWFrZSBhbiANCmludGVycHJldGF0aW9uLiBXaGls ZSBhbWVuZGluZyB0aGUgRm91bmRhdGlvbiBEb2N1bWVudCB0byBtYWtlIGl0IG1vcmUgDQpj bGVhciBpcyBpZGVhbCBpbiBtYW55IHNpdHVhdGlvbnMsIEknbSBub3Qgd2lsbGluZyB0byBz YXkgdGhhdCBfYWxsXyANCnNpdHVhdGlvbnMgcmVxdWlyZSB0aGF0Lg0KDQpMZXQncyBzYXkg dGhhdCB3ZSBoYXZlIGFuIG5vbi1oeXBvdGhldGljYWwgcXVlc3Rpb24sICJJcyBYIGFsbG93 ZWQgYnkgDQpGb3VuZGF0aW9uIERvY3VtZW50IFk/Ii4gQnkgbm9uLWh5cG90aGV0aWNhbCwg SSBtZWFuIHRoaXMgaXMgYSBsaXZlIA0KaXNzdWUgZm9yIHNvbWUgcGVvcGxlOyB0aGUgcXVl c3Rpb24gbmVlZHMgYW4gYW5zd2VyIG9uZSB3YXkgb3IgYW5vdGhlciANCl9hbmRfIHRoZXJl IGlzIGRpc2FncmVlbWVudCBvbiB0aGUgYW5zd2VyLg0KDQpJIHRoaW5rIHdlIGNhbiBzYWZl bHkgYXNzdW1lIHRoZXNlIHNvcnQgb2YgaW50ZXJwcmV0aXZlIHF1ZXN0aW9ucyBkbyANCmNv bWUgdXAgaW4gcmVhbCBsaWZlLiBGb3IgZXhhbXBsZSwgZnRwbWFzdGVyIGludGVycHJldGlu ZyB0aGUgREZTRyBzZWVtcyANCmxpa2UgYSBjb21tb24gY2FzZS4gKE9mIGNvdXJzZSwgbW9z dCBvZiB0aGUgdGltZSB0aG9zZSB3b3VsZCBub3QgbGVhZCB0byANCkdScy4pDQoNClRodXMs IGEgcG9zc2libGUgcHJlY3Vyc29yIHRvIGFuIGludGVycHJldGl2ZSBHUiBpcyB0aGF0IHNv bWUgDQpwZXJzb24vZ3JvdXAgKGUuZy4gZnRwbWFzdGVyLCBQcm9qZWN0IExlYWRlciwgVEMs IFNlY3JldGFyeVsxXSkgbWFrZXMgDQp0aGUgaW50ZXJwcmV0aXZlIGRlY2lzaW9uLg0KDQpJ ZiBzb21lb25lIGNhbiBtYWtlIHRoZSBkZWNpc2lvbiwgdGhlbiB0aGV5IGNhbiBiZSBvdmVy cnVsZWRbMl1bM10gYnkgDQp0aGUgRGV2ZWxvcGVycyB0aHJvdWdoIGEgR1IuIEkgZG9uJ3Qg dGhpbmsgYSBibGFua2V0IHByb2hpYml0aW9uIG9uIA0KRm91bmRhdGlvbiBEb2N1bWVudC1p bnRlcnByZXRpbmcgR1JzIG1ha2VzIHNlbnNlIGluIHRoYXQgY29udGV4dC4gSXQgDQpkb2Vz bid0IHNlZW0gY29ycmVjdCB0aGF0IERldmVsb3BlcnMgc29tZWhvdyBsb3NlIHRoZWlyIHBv d2VyIHRvIA0Kb3ZlcnJ1bGUgaWYgdGhlIGlzc3VlIGludm9sdmVzIGludGVycHJldGF0aW9u IG9mIGEgRm91bmRhdGlvbiBEb2N1bWVudC4NCg0KT25lIG1pZ2h0IGFyZ3VlIHRoYXQgdGhl IERldmVsb3BlcnMgcmV0YWluIHRoYXQgcG93ZXIgdGhyb3VnaCBhbiANCmFtZW5kaW5nIEdS LiBCdXQgSSBhcmd1ZSB0aGF0IHRob3NlIGFyZSBzZXBhcmF0ZSBwb3dlcnMgKGZyb20gdGhl IA0KZXhwbGljaXQgdGV4dCBvZiB0aGUgY29uc3RpdHV0aW9uKSwgd2l0aCBzZXBhcmF0ZSBt YWpvcml0eSByZXF1aXJlbWVudHMsIA0KYW5kIGZvciBnb29kIHJlYXNvbi4gQW1lbmRpbmcg YSBGb3VuZGF0aW9uIERvY3VtZW50IHJlcXVpcmVzIDM6MS4gSXQgaXMgDQp0aHVzIHBvc3Np YmxlIGZvciBhbiBhbWVuZGluZyBHUiB0byBmYWlsLCBldmVuIGlmIGl0IGhhcyBiYWxsb3Qg b3B0aW9ucyANCnRvIHJlc29sdmUgdGhlIHF1ZXN0aW9uIGVhY2ggd2F5LiBUaGF0IGlzLCBp ZiB0aGUgaXNzdWUgaXMgc3BsaXQgYW5kIA0KbmVpdGhlciBzaWRlIGlzID49IDM6MSwgIk5v bmUgb2YgdGhlIEFib3ZlIiB3aW5zLiBUaGlzIGxlYXZlcyB0aGUgDQpxdWVzdGlvbiB1bmRl Y2lkZWQuIFRoZSBhbWJpZ3VpdHkgc3RpbGwgZXhpc3RzIGFuZCB0aGUgbGl2ZSBpc3N1ZSBz dGlsbCANCm5lZWRzIGFuIGFuc3dlci4gSG93ZXZlciwgaWYgd2UgaGF2ZSBhbiBpbnRlcnBy ZXRpbmcgR1IsIHRoZW4gaXQgY2FuIA0KcHJvZHVjZSBhbiBhbnN3ZXIgKGFzc3VtaW5nIGl0 J3MgYSB5ZXMvbm8gcXVlc3Rpb24gYW5kIHBlb3BsZSBvbiBlYWNoIA0Kc2lkZSByYW5rIHRo ZWlyIGFuc3dlciBhYm92ZSBOT1RBKS4NCg0KVGhlIERldmVsb3BlcnMnIHBvd2VycyB0byBv dmVycnVsZSBhbHNvIGNvbWUgd2l0aCB0aGUgcG93ZXIgdG8gbWFrZSB0aGUgDQpkZWNpc2lv biBpbiB0aGUgZmlyc3QgaW5zdGFuY2UuIFNvIHdoaWxlIG92ZXJydWxpbmcgaXMgb25lIHNj ZW5hcmlvLCBpdCANCmlzIG5vdCB0aGUgb25seSBzY2VuYXJpby4NCg0KWzFdIEkgdW5kZXJz dGFuZCB0aGF0IHlvdXIgKHRoZSBTZWNyZXRhcnkncykgY3VycmVudCBwb3NpdGlvbiBpcyB0 aGF0IA0KeW91IGRvIG5vdCBoYXZlIHRoZSBwb3dlciB0byBpbnRlcnByZXQgRm91bmRhdGlv biBEb2N1bWVudHMuIEkgY29udGVuZCANCnRoYXQgeW91IGltcGxpY2l0bHkgZG8sIGF0IGxl YXN0IGluc29mYXIgYXMgc3VjaCBhbiBpbnRlcnByZXRhdGlvbiBpcyANCnJlcXVpcmVkIHRv IGZ1bGZpbGwgb25lIG9mIHlvdXIgZXhwbGljaXQgZHV0aWVzLiBJZiB5b3UgZG8gbm90LCB0 aGVuIGl0IA0Kc2VlbXMgdGhlIFByb2plY3QgTGVhZGVyIHdvdWxkLCB0aHJvdWdoIGEgY29t YmluYXRpb24gb2YgNS4xLjMgKHJlcXVpcmVzIA0KdXJnZW50IGFjdGlvbikgYW5kL29yIDUu MS40IChub29uZSBlbHNlIGhhcyByZXNwb25zaWJpbGl0eSkuDQoNCkJ1dCwgYXQgbGVhc3Qg aW4gdGhlIFUuUy4sIHRoZXJlIGlzIGEgZ2VuZXJhbCBydWxlIG9mIGNvbnN0aXR1dGlvbiAN CmludGVycHJldGF0aW9uOiBpZiB0aGVyZSBpcyBhIChJJ2Qgc2F5IF9yZWFzb25hYmxlXykg d2F5IHRvIGludGVycHJldCANCnNvbWV0aGluZyB0aGF0IGRvZXMgbm90IG1ha2UgaXQgdW5j b25zdGl0dXRpb25hbCwgdGhlbiB0aG9zZSANCmludGVycHJldGF0aW9ucyBzaG91bGQgYmUg cHJlZmVycmVkIG92ZXIgaW50ZXJwcmV0YXRpb25zIHRoYXQgbWFrZSBpdCANCnVuY29uc3Rp dHV0aW9uYWwuDQpodHRwczovL3d3dy5icml0YW5uaWNhLmNvbS90b3BpYy9jb25zdGl0dXRp b25hbC1kb3VidA0KaHR0cHM6Ly93d3cubGF3LmNvcm5lbGwuZWR1L3dleC9jb25zdGl0dXRp b25hbF9hdm9pZGFuY2UNCmh0dHBzOi8vY29uc3RpdHV0aW9uLmNvbmdyZXNzLmdvdi9icm93 c2UvZXNzYXkvYXJ0SUlJLVMyLUMxLTktNy9BTERFXzAwMDEzMTU5Lw0KDQpUaGlzIGlzIHdo eSwgd2hpbGUgSSB3b3VsZCBwcmVmZXIgdGhhdCAid2hlcmUgcG9zc2libGUiIGJlIGV4cGxp Y2l0bHkgDQphbWVuZGVkIG91dCBieSBpdHMgUHJvcG9zZXIsIGlmIHRoYXQgZG9lcyBub3Qg aGFwcGVuLCBJIHRoaW5rIGl0IGlzIA0KYmV0dGVyIHRvIGludGVycHJldCB0byBpbXBsaWNp dGx5IHN0cmlrZSB0aGF0IHBocmFzZSByYXRoZXIgdGhhbiANCmRlY2xhcmluZyB0aGUgd2hv bGUgYmFsbG90IG9wdGlvbiB2b2lkLg0KDQpUaG91Z2gsIHRvIGJlIGNsZWFyLCBpZiB0aGVy ZSBpcyBfbm9fIHJlYXNvbmFibGUgaW50ZXJwcmV0YXRpb24gdGhhdCANCm1ha2VzIGEgYmFs bG90IG9wdGlvbiBjb25zdGl0dXRpb25hbCwgdGhlbiBJIHN0aWxsIGNvbnRlbmQgdGhhdCB0 aGUgDQpTZWNyZXRhcnkgaGFzIHRoZSBwb3dlciBfYW5kIGR1dHlfIHRvIGRlY2xhcmUgaXQg dW5jb25zdGl0dXRpb25hbGx5IHZvaWQuDQoNClsyXSBPdmVycnVsaW5nIFRDIHJlcXVpcmVz IDI6MS4NCg0KWzNdIFRoaW5ncyBnZXQgbW9yZSBjb21wbGljYXRlZCBpZiB0aGUgU2VjcmV0 YXJ5IGlzIGRvaW5nIHRoZSANCmludGVycHJldGluZy4gV2UgY2FuIGdhbWUgb3V0IGhvdyB0 aGF0IHBsYXlzIG91dCBpZiB0aGUgRGV2ZWxvcGVycyANCmNvbGxlY3RpdmVseSBkaXNhZ3Jl ZSB3aXRoIHRoZSBTZWNyZXRhcnksIGJ1dCBmdW5kYW1lbnRhbGx5LCBpZiB0aGUgDQpEZXZl bG9wZXJzIGNvbGxlY3RpdmVseSBkaXNhZ3JlZSBlbm91Z2gsIHRoZXkgaGF2ZSB0aGUgcG93 ZXIgdG8gZW5mb3JjZSANCnRoZWlyIHdpbGwgKGFuZCB0ZWNobmljYWxseSBvbmx5IG5lZWQg MToxLCB0aG91Z2ggcG9saXRpY2FsbHkgaXQgaXMgbW9yZSANCmNvbXBsaWNhdGVkKS4NCg0K LS0gDQpSaWNoYXJkDQo=

    --------------dpEs7eONqmNAUZqi8kU18zTB--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMVSkAACgkQ+HlhmcBF hs5PxhAAlpwgD69xSXhtwujD0FtZZp5b1Dlb/lsyOcxVRCNgg1qxulsXd1WA3147 uXGOArrFTiVzwEtd+Af3em+q51TEc/L4ZEezDBe3+aDtK42Lz15HfTiM9RwvUd1c rZZUPkmM4931FTfCFL6Ch0d3Gx3r2JJrCEyAIO2x+TaoLtxAI2C0PTTkmJwmgWNy 21HU/SkELZz9XRZ0RwfykIrzX9YB6u+3rIzx4VVduhkFvlCnceorryWWSEoSfns7 oqZ2J7/uVlZGnOjnrLHJkCDGuw1JiyhTZGQYEPoTy/CwYV5Xmue0bHYwGp7cGk4z sSWQB473PggQN+Gl92PoBo0jjtQNfeDOJuDoTY0wVp5+/pa2c6vr4ZdP2hlPcXJu FWoK0wQBMbHK7M+llOvLXHXrwL0r+CGzkVCkvw9AFAt7B06/UHSNhOiLItGQIFtv ZLoOXHbFwwoPng47XteXd7UMX0Sd7xoNvEYpP9utLeGxuqSshnJHGYUK5aUbdJGI mWF99JQvN+3hGHtBiuELf2ptNIHLLEv3s/RhAeZDunAHOT3n2+GVdgR38D2jsPpH GuVRXN9MFnshiAjoH5uIlvX6bvw8fLctBWZ66ycYbEe9HP+fttaejFmqRAr9o/pz 9AJipHO3j2VdWhnlsYHCjG8cCrlHCVjxyM4WQeDm+YyunNcpVZ4=
    =gF3A
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Paul Wise on Mon Sep 5 02:40:02 2022
    On Wed, 2022-08-24 at 09:21 +0800, Paul Wise wrote:
    On Tue, 2022-08-23 at 19:57 +0200, Simon Josefsson wrote:

    My reading of that is that the FSF RYF program does not meet the needs
    of people who do not care about having a fully free software system.

    My reading of it was the opposite, that the FSF RYF program doesn't
    take into account the potential for reverse engineering of firmware

    PS: if there is anyone interested in reforming the FSF RYF program,
    I note the FSF are hiring someone to lead the program and other things:

    https://www.fsf.org/resources/jobs/fsf-job-opportunity-licensing-and-compliance-manager

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMVRBUACgkQMRa6Xp/6 aaMslQ//fBXjx9KMCXQ/I27GY3d8HzF5ygVRdYZ1RQrcv+bsbbw4nBlfgBAnj+eA X3kBPXqJug8XAy6p6/l7VPQl+dz8Yzsrq8PnU5RTvoqaXCyB1iPNuzpGgOboFH0j oAKtCKcDFiOkMegDKwv8zo53WN0SfFhj3v3Zj3fPoWM7MqXiXzF1tDywQt1w7OGc gkiMD4KfrwDVDrVICv01Rc6B8t/d4SUI69vR35JKpP87RzP6sOAhQz1s2Ar++OUy ix2NiqWrrxa6DRKSaq/YqHmnp6A+BN/FL/OGGRAJDcXeLX/u1VIEm7kQBfeDJu6/ FdHSg0tetmzyC3G2wgymfobsJd+IdXrYV7rnoFKUero8hDcNJFgcJVuIpPhgmVJx 6L4iKeN8JcTB1swMgsPlaTqr5uwln1ZOJ9LQWBo2uAJlJeQsOmO4mSGU5TgPFI98 Md3ahmrMTEuBqe6uY+IBJQUyxYZxWU2nsEFg+l/oZJzzzxizbCe63n47iaZ6vVCQ sgvDNKL7037uVr3KluoJWmxX/iMDZImBA/YrOjLW1T1dfNqLUiZ1k/e5lH6MJ5Zk MP4mjOjmJyX5ItS5ysiiJ09CdgJsrGXl4t8KQu0a2SAPA4nqGHLRNMlv7zFYqkAn m62qZIKyihJtqBhENY8wELHEFlPimS93b/T0alEKWvT5iKRLYx0=
    =XY8m
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Richard Laager on Mon Sep 5 22:00:01 2022
    On Sun, Sep 04, 2022 at 08:00:48PM -0500, Richard Laager wrote:

    Thus, a possible precursor to an interpretive GR is that some person/group (e.g. ftpmaster, Project Leader, TC, Secretary[1]) makes the interpretive decision.

    If someone can make the decision, then they can be overruled[2][3] by the Developers through a GR. I don't think a blanket prohibition on Foundation Document-interpreting GRs makes sense in that context. It doesn't seem correct that Developers somehow lose their power to overrule if the issue involves interpretation of a Foundation Document.

    You can argue that the developers making the installer and live images,
    and those maintaining the website can make those decisions. You can even
    say that they have made decisions. So those options could be seen as
    overriding a Developer, using the power of the Technical Committee.

    Assuming we actually went that way, 6.1.4 requires a 3:1 majority, but
    4.1.4 only a 2:1 majority. I think we take the highest majority
    requirement in that case, so 3:1.

    [1] I understand that your (the Secretary's) current position is that you do not have the power to interpret Foundation Documents. I contend that you implicitly do, at least insofar as such an interpretation is required to fulfill one of your explicit duties. If you do not, then it seems the
    Project Leader would, through a combination of 5.1.3 (requires urgent
    action) and/or 5.1.4 (noone else has responsibility).

    As part of this GR, I'm just trying to make sure you can interpret the
    SC in a consistent way that matches the ballot option.

    Thank you for discussion this, I wish more people would participate in
    this.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Kurt Roeckx on Tue Sep 6 01:50:01 2022
    On Fri, Sep 02, 2022 at 09:14:53PM +0200, Kurt Roeckx wrote:
    On Tue, Aug 30, 2022 at 03:11:25PM -0500, Richard Laager wrote:

    I like to discussion about anything related to this, so that I can at
    least get an idea what the consensus is.

    DSC 1 and DSC 5 have some implications about "the Debian system" vis-a-vis >> non-free, but the plan here is to keep the firmware in a separate
    non-free-firmware analogous to non-free. That seems fine to me.

    DSC 1 says we will never "require the use of a non-free component". To me, >> this is the major relevant issue.

    Proposals B and C offer users the explicit choice of media. That feels
    clearly compatible with the DSC, as users are not required to use non-free >> bits.

    Proposal A will use non-free-firmware by default, but "where possible...will >> include ways for users to disable this". Without the "where possible", I
    think this opt-out is compatible with the DSC. However, if it is not
    possible to disable the non-free-firmware, then it feels like the system is, >> in fact, requiring it. Thus this option, as worded, feels potentially
    incompatible with the DSC.

    It that it says "at boot". That seems to imply that it will get
    installed, but it might not get used, which might at least surprise
    some people. But maybe that's only for the live images.

    I don't think we're on the same page here. The point of "at boot" and
    "where possible" here is just to describe possibilities for how users
    would interact with the firmware-included media. For example: if a
    user selected a boot option saying "use no non-free firmware, then it
    would be neither used *nor* installed. I added "where possible" as I
    can't state with *100%* certainty that we'd be able to expose that
    choice in every possible boot method - we haven't worked through all
    the possibilities yet!

    If those bits of extra text are causing you problems, then let's
    remove them?

    Note that the SC only says: "require the use of a non-free component".
    This can be interpreted as having it installed is not a problem as
    long as it's not used.

    I think there are people that want to use the official image but don't
    want anything non-free installed, nor want it in the sources.list file.
    So they might want to have an installer that supports that.

    So I think I have to agree that the "where possible" is probably not >compatible with the SC. I think it should be more explicit that it will
    be possible to disable the use of non-free firmware.

    Right. See above...

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Because heaters aren't purple!" -- Catherine Pitt

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMWisQACgkQWHl5VzRC aE74sg/8CteD0aDc77pObxrCwm7X7LvKKzNqLzoEFkRwqUy59W2tT1RCjir5pRbw MgH7ac1MI2BTjVBY785/PmvqZ/f0nldhsPtvSz3h4YlPfjBOXEF6riwXIwryvqVX Qvw+LIaCAWb5hI8HnbOgYYKNcKo29dRQ6kQTTimSTCfJw+9OYL8OycVpfn+KAMSY IapMDTlORm1GCZj2wIb5ZP/HKrGhdu3+oqvnktgYdCXiH7qqvsKCIq7Y5aWdbGjt UQX7f/ytkg5T+s/A7HrqhYJDmVjiBl8bCX3n6G3zJFVEfKanzvwegQhUp1m0yWSP 3NG7ZlFNz5tEPmX0TFiy7rP5DZmjVndnZ99NxiXAi+nppEuuwbnXx11+RCzyqR32 6crELaNgsIkzP3iKGQbA0dACOYcNxmI0vrs7MZQiErjw+PiIWZM+f2Yu8FHmOEcp Y0YzvRFAi/aPF8R+QryxTGrhcDQAY1VZSSvYMGyzDEXoX6vaC9mqQGswKVw8WyG6 7OKcNu8X4s03HyKYj6m+Fsd5krjjGKD/7U58jjvasfREqvMs7b9OJj311sx1hU5V 1E7ajzwxjwryb3MD9gTwPnvhJvOL38I0YQW6nnnbdXlfsIPv0UuprRJjdwJaz74X F3/MntvZdeh0mvI9nYHj3eawGdlMTTrBcThB6czZa0ROl0oG6j0=
    =7rbM
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origi
  • From Steve McIntyre@21:1/5 to Kurt Roeckx on Tue Sep 6 01:40:01 2022
    Hey guys,

    Apologies for not responding more promptly on this sub-thread :-/

    On Mon, Sep 05, 2022 at 09:51:24PM +0200, Kurt Roeckx wrote:
    On Sun, Sep 04, 2022 at 08:00:48PM -0500, Richard Laager wrote:

    ...

    [1] I understand that your (the Secretary's) current position is that you do >> not have the power to interpret Foundation Documents. I contend that you
    implicitly do, at least insofar as such an interpretation is required to
    fulfill one of your explicit duties. If you do not, then it seems the
    Project Leader would, through a combination of 5.1.3 (requires urgent
    action) and/or 5.1.4 (noone else has responsibility).

    As part of this GR, I'm just trying to make sure you can interpret the
    SC in a consistent way that matches the ballot option.

    Thank you for discussion this, I wish more people would participate in
    this.

    Would you be more comfortable if we added an extra option like Russ
    suggested [1], explicitly adding extra text to the SC?

    [1] https://lists.debian.org/debian-vote/2022/08/msg00182.html

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "You can't barbecue lettuce!" -- Ellie Crane

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMWhvMACgkQWHl5VzRC aE6AqRAAxUMft/ta6+ZyRYIje4IKpGFqiNfpCcJ47AnASxmgFK6qTXIMyF/dkMzO 28RBUGGK7w/wqRLg+VFKnhvXGEWHFSWTBAJt9mtgA2SBHGd07mu88kyNhDnV2BUB z3dNqfBqdwUgoT0Lxk6577LsAQHoWK7prpBJBHBiZxDlLFbGbmS5eL6wZa5xnQY5 xvKkmdbVO2zW8nKFsG5TCwzg0US6V0Tjim1MvbVhk397DhO2TV3AkbtxsCXcQzDi JdcFLF3KswIZ1h2oqD5EGNZ8TJX7BjHG0nZH9f0RPDeA1qobk+aBOg9AtZZrKjwL 12tyACyqMX4XTp9bdmbDVAIEGfy6KupsB2lWgV9Ljc7mrkezSKopcjyvLx/uIDYV X9qy+DovdIgFlS8A2a9i+DEekuJQDMeUdGh84y+YoQKQWvobpGfGtrLp1ejnsi2h i5+JPFk+yU0rji40HDq0GNjVXiGqCszAo14DdTDQJyv4Z7bIV3JWGiaJY6S23fqu k4iZLoKvuvqE37j/TOR+rUj24usfj8Tn4Ae7i40MbylpWe/JKmg0B+/X7C/ELjUS vR/1U0ovptSCvk/Kc6/qVvIQvQ46CFQDOJQjCg5uf8YQvvhHnRoR4bxBW9NBzX0+ gYVAp7SELB1AyTy44mmZe/fXIojAJuCPksc6z3H4wmoAuPuoRms=
    =gN2H
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsx
  • From Yao Wei@21:1/5 to Kurt Roeckx on Tue Sep 6 03:30:01 2022
    Kurt Roeckx wrote:
    As you indicate yourself, this is an interpretation of the SC. I would
    really prefer that such a question was not open to interpretation and
    that the SC was changed to make it more clear what we mean.

    Is it possible that we can risk 3:1 supermajority and change SC so that
    we allow distributions of non-free software as an official image?

    Like changing 1 so that "Debian will remain free by default" and
    explicitly claiming that in order to support basic function of the user hardware we provide distributable firmware in our (firmware-non-free) repository and installation media.

    We could also explicitly claiming that such repository is part of
    Debian to have a proper ground.

    If we are heading towards the direction, could we ask for an extension
    of the discussion period in order to come up with a reasonable changes?

    Yao Wei

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE8htgli/cvAeDZWXRl1ewRNNETDMFAmMWofwACgkQl1ewRNNE TDMW9hAAveZGDw+WckVPu/JSpV5XseOCeaWzxKKL4UceVJlMR5ZldyiAN+ZUqvEy mQ3ryoVQo7OxUa1mJ0uutUxI3bvy7ywpf0VsiJYkOGyH5vBxExwKISUJNWBSCzlU vN7Xrzl81ZHYcn4f8NaEMTD+PhIzA2Fjcjv5yoJ8WVd1tD2kO1O7FmaFXM19rFI3 afKdqsUA6mVT7BPdi6K9c6BVUcBEWk8U4+e+fZZ23YgCmcOh4pTFliVrirMBVVb4 j3NQ70gAtw+uW8aAIsmyG3Ql0noT0uxP+KWFuZuYVULZ5syaYVz6NNc2RfJVwC2d /ctM8KYedJ5C5jEmt3sbS6tXJXJmmXVa+lQgcG8nLiIgcneuyliq+sy0gXMkJgwC Hw02cN+A/WTqukVIx+LqLMHbDWcmWEfdEmGX1I0mU9/net2LUIWK3zNsqpwTDKpN /4CVWuQMyQprSa0mHz10h7art7C2eP/tOJ7coXUkt9fQxx1f0fakFNoWvmFypZkJ 9u+PvFm8Buw3nlokz/9LL1JtjU3ZB4RWWDB3rnNyoaQ1WPoa6U9pOi/l43P3krN3 p/5yQaqEvLPnDRth8fVHGlnxdDKLS7v8azYlsL0mw3a1sF5lGnttlnvThq1Gs4Dp chlMxg7JxQVTXiZoV4lk9mmu7bj0a5BnV8XaAI/JXThURTIupSI=
    =rlPu
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Judit Foglszinger on Tue Sep 6 18:20:01 2022
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short, keeping the focus on the smallest possible action we can do for helping those users that need non-free firmware: allowing ourselves to advertise non-free installers just as visible as our free installer. Moving non-free firmware to a separate section might be useful, but it is in my view not part of that smallest possible action. So what's my position on such new section? Well, what is not mentioned is not proposed and not opposed. That's all. - B.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Bart Martens on Tue Sep 6 18:30:01 2022
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short, >keeping the focus on the smallest possible action we can do for helping those >users that need non-free firmware: allowing ourselves to advertise non-free >installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that >smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already
    started*, where we're going to move firmware things to
    non-free-firmware instead. Please switch to "non-free and/or
    non-free-firmware sections" in your text.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    Armed with "Valor": "Centurion" represents quality of Discipline,
    Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
    concord the digital world while feeling safe and proud.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMXdKEACgkQWHl5VzRC aE42SA//QGVW5Rgm7C/csWbbKbX4J7XtEyrwMOMUh9erkkdjiMTVcZLpZPEj5PtZ VPiaLYFxJPhjmUyV6rcpwY9Qm+I+/Q1iPhVQJhD8G9/y/ysomfZkdg+Vb8qORdBv qAwVPtp24/80OM7Zb80orA8fs68lbUcGRcPOg2EAJld620frTb6i8ZiB3TSsqXmq wQKjHJOvizJJK0Df2mtpQ2rX76X3ARo/xdBCqoVJAnooVfs11+vXT/AcnboGPhBh 394IXCQmwAL5/+4tZQY5PmlZHiqr8o27E0XhGjjtJF5spxsj60MpAfc/YiA6VUtI 2PDR9ni0PeBuihmM2w0PrmSaNCxdiJvaApd9+dxhVs004J4EQJoHkQdG0le4AieC ZJ/UtTfE4hcZGTz0sbbW2YWC948IDoOFpP5vkAyEMScPYCV1FzGmZ0tw9p0n/rvP afaOl63fHX7uEu9lE30nX7Zw33eVhev8zGNlkl+JSdy0jYLnqbgBJmlnXqxHapJn B5hFeCwsdWaMybPEjKiZQFNzchTFg1LYbt/wvJ99txijYGRwT0dlvbWLJKGuA38r HQQX6xRC6drz2go4tORVt0gxl2DwQvPajb8yboy0bzd6SN
  • From Bart Martens@21:1/5 to Steve McIntyre on Tue Sep 6 20:40:01 2022
    On Tue, Sep 06, 2022 at 05:26:10PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short, >keeping the focus on the smallest possible action we can do for helping those
    users that need non-free firmware: allowing ourselves to advertise non-free >installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that >smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already
    started*, where we're going to move firmware things to
    non-free-firmware instead. Please switch to "non-free and/or non-free-firmware sections" in your text.

    I'm surprised. Please read what is written. Proposal C leaves open whether such new section would be added in the future. So if proposal C would win, then the started work you describe can continue. Proposal C uses the term "non-free" because that is where all non-free packages are still residing today.

    Does this cover your concern?


    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    Armed with "Valor": "Centurion" represents quality of Discipline,
    Honor, Integrity and Loyalty. Now you don't have to be a Caesar to
    concord the digital world while feeling safe and proud.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Bart Martens on Tue Sep 6 21:30:01 2022
    On Tue, Sep 06, 2022 at 08:33:51PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 05:26:10PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/ >> >
    Thanks for asking. The short answer is no. I kept my proposal very short, >> >keeping the focus on the smallest possible action we can do for helping those
    users that need non-free firmware: allowing ourselves to advertise non-free >> >installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that
    smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already
    started*, where we're going to move firmware things to
    non-free-firmware instead. Please switch to "non-free and/or
    non-free-firmware sections" in your text.

    I'm surprised. Please read what is written. Proposal C leaves open whether such
    new section would be added in the future. So if proposal C would win, then the >started work you describe can continue. Proposal C uses the term "non-free" >because that is where all non-free packages are still residing today.

    Does this cover your concern?

    No, it doesn't. Your words may cover where those packages are *today*,
    but they most likely will *not* be in "non-free" when we come to make
    the changes. "non-free-firmware" != "non-free". Please tweak your
    wording to be more flexible and cover what we're aiming to do.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "This dress doesn't reverse." -- Alden Spiess

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMXnrgACgkQWHl5VzRC aE4WDg/8CoKZb8AnTB21PkYX03LmpT5VLVq9th2Cgphnkt8FOfyp47gDw3dBv4xU bp8ck0cdP5k7wlvrabi7aggAkPz+SXvcCDMOhujZdrM4/B4tL9ll2xH+jDUF5JCL 13lxE2X1joAyw7Amiul4BZ28UkhOQFgHNywyc/SqMdccof3GruLP8oTmElzKrUBF fBiekiZkoJZehG5Emj3fX5xcFJeEqK4CaEIHMxxISxHQsqumCQBzFSRslAhZLnZu nk1SQC6sXa3THu7XMf2fYE4/ACZk8kLor1Ll//1eQTczzm/dYu6LFbnNcsEoKgbg lmkEE/FBPLl96fvHaadWGfpuMi9dCu2VhhonSOXZFUAZZnXnNUbTnGGRpLI8TZUq zdQkEWvkHbWwQJ/MSWEkIUr/K67NHjs7smtAvtmuLBkopPwuUPVVwD3s1D9JrHAa GxBUFLNjMJ5gtAkhqDtYgvtgAtNU4WaT5jvJGnYyh71QIwkQmu8tXGmGPx5/IuCN Nla4R0LoLE5MhPJtE5KPLZsTcR072zon4TGcRxanEgPiFzbXYogGFSzfCnHkLGOB OXJKV4FU5X3A7UW/mYSfedpPZ+9lnJQ2e4yMuMV9CDknrjE0/vjtr7RkSaAN7v7E sAOwYh5KPaoP4yk9GRJWMXUo54rOluzga6/XklWhTk76vKAjlsM=
    =QP20
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fs
  • From Kurt Roeckx@21:1/5 to Bart Martens on Tue Sep 6 23:10:01 2022
    On Tue, Sep 06, 2022 at 08:33:51PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 05:26:10PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short, >keeping the focus on the smallest possible action we can do for helping those
    users that need non-free firmware: allowing ourselves to advertise non-free
    installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that >smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already
    started*, where we're going to move firmware things to
    non-free-firmware instead. Please switch to "non-free and/or non-free-firmware sections" in your text.

    I'm surprised. Please read what is written. Proposal C leaves open whether such
    new section would be added in the future. So if proposal C would win, then the
    started work you describe can continue. Proposal C uses the term "non-free" because that is where all non-free packages are still residing today.

    I think the problem is with "non-free section". I think Steve looks at
    that like the non-free-firmware section is now allowed. I suggest you
    just rewrite it as: "containing non-free software from the Debian
    archive".


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Judit Foglszinger@21:1/5 to All on Wed Sep 7 03:30:31 2022
    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short, keeping the focus on the smallest possible action we can do for helping those users that need non-free firmware

    Thanks for your answer.

    What about not mentioning archive area and explicitly referring to firmware instead?

    "The Debian project is permitted to make distribution media (installer images and live images) containing packages with non DFSG compatible firmware ..."

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEeh+1J5uI1UvU9CMA9TaqcBEdVxYFAmMXrecACgkQ9TaqcBEd VxbzKA/8D1GCeC4Pb5sQc2Th0CV1UlLq+wZNQp13kb6aQKT2+dJ05zy9X4jH9Gsy 4LZ9dsHmNT+b8Bu/1byffG7/5tcZ4eMO6sc81Dd20c+fRdRoH5h+kYwccif9FS8G +NGzjKFKEXI11mFSWspbXzWnct5YSDWO/yXn1AcEZXojXvUXysSgovn2kBiVZFWg t8+G3SjVUHMAr/eLSSF2sGhEh5AiqUHpoYbf1KKXtLkVQz+lNL7sHweDOWnVFbAN i/scLPu6WAbAa2nddVFWc5FsFc+UhevqEx++DNUUE2kTJ8LyDxMlSUGF18J8r7fd EmEtPHtSmJiOub1ERywxMEOtgkXfoaRB35tQr4XRgLyF2Zz5htN4b5GfdBxAPT2U 53gdsKhh5WQ6zLKfWGe9OXgK+pIa8PMOsPAbfiF3QvkAsBOi6qj03SdWXGsuZENI WGLLDCrgnU0iuzGkv9DegymS8QR+qLEiT3liyQtrgAWrbfLk9xcxzQZwHXy31q8X KdVYStqRK8IBFjtV4+45Dx7dl0u3U7gCtMC8K9KyjLIHTlUTeLXpAwsJpnqqEZ49 LPHAJ4jPiIuIXmXa+I3nVLLsAVxTpSAxC48dwl9WbwthtumketMrHStYpejx2qBL N4+U8vY5fLQ4ArBzU6knCDchav2z6h2ppgSj+VJYi6NnQbQWgnc=
    =mWQF
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Steve McIntyre on Wed Sep 7 00:00:01 2022
    On Tue, Sep 06, 2022 at 08:25:44PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 08:33:51PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 05:26:10PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones.

    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short, >> >keeping the focus on the smallest possible action we can do for helping those
    users that need non-free firmware: allowing ourselves to advertise non-free
    installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that >> >smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already
    started*, where we're going to move firmware things to
    non-free-firmware instead. Please switch to "non-free and/or
    non-free-firmware sections" in your text.

    I'm surprised. Please read what is written. Proposal C leaves open whether such
    new section would be added in the future. So if proposal C would win, then the
    started work you describe can continue. Proposal C uses the term "non-free" >because that is where all non-free packages are still residing today.

    Does this cover your concern?

    No, it doesn't.

    Your words may cover where those packages are *today*,

    Exactly.

    but they most likely will *not* be in "non-free" when we come to make
    the changes. "non-free-firmware" != "non-free".

    I understood that part.

    Please tweak your
    wording to be more flexible and cover what we're aiming to do.

    I think we have a different view on which proposal is the most flexible. And I understand that you want my proposal to cover what you are aiming at.


    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    "This dress doesn't reverse." -- Alden Spiess

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Kurt Roeckx on Wed Sep 7 00:30:01 2022
    On Tue, Sep 06, 2022 at 11:00:25PM +0200, Kurt Roeckx wrote:
    On Tue, Sep 06, 2022 at 08:33:51PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 05:26:10PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones. >> >
    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short,
    keeping the focus on the smallest possible action we can do for helping those
    users that need non-free firmware: allowing ourselves to advertise non-free
    installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that >smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already started*, where we're going to move firmware things to
    non-free-firmware instead. Please switch to "non-free and/or non-free-firmware sections" in your text.

    I'm surprised. Please read what is written. Proposal C leaves open whether such
    new section would be added in the future. So if proposal C would win, then the
    started work you describe can continue. Proposal C uses the term "non-free" because that is where all non-free packages are still residing today.

    I think the problem is with "non-free section". I think Steve looks at
    that like the non-free-firmware section is now allowed.
    not

    He wants "non-free-firmware section" mentioned in proposal C, see above.

    I suggest you
    just rewrite it as: "containing non-free software from the Debian
    archive".

    That would indeed leave out the existing section name. I'll consider it.



    Kurt


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Bart Martens on Wed Sep 7 00:20:01 2022
    On Tue, Sep 06, 2022 at 11:56:23PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 08:25:44PM +0100, Steve McIntyre wrote:

    No, it doesn't.

    Your words may cover where those packages are *today*,

    Exactly.

    but they most likely will *not* be in "non-free" when we come to make
    the changes. "non-free-firmware" != "non-free".

    I understood that part.

    Please tweak your
    wording to be more flexible and cover what we're aiming to do.

    I think we have a different view on which proposal is the most flexible. And I >understand that you want my proposal to cover what you are aiming at.

    Bart, I genuinely don't understand why you're so wedded to this
    specific wording even after multiple people have tried to explain the
    problems they see here. Do you have a particular beef with the non-free-firmware section?

    As written, I believe your ballot option will cause more confusion and
    problems down the line. Therefore, regretfully I have to withdraw my
    seconding of your ballot option.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    Getting a SCSI chain working is perfectly simple if you remember that there
    must be exactly three terminations: one on one end of the cable, one on the
    far end, and the goat, terminated over the SCSI chain with a silver-handled
    knife whilst burning *black* candles. --- Anthony DeBoer

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMXxq8ACgkQWHl5VzRC aE5OtA/+Oi9gDwNN8ByNepxF/jBJrx4uS/V8r07ntZB+lo8OQ81mmx9qsL1URCYg G4khR64IW0QbvRtFjZ4pnD3O8aaPqebXtcTI0xg27M32qyMRmh3H/j25fkJ929QI hqXn+uDfUmFWnZvz8c+HHpe4LAgYGjwWRTpugg2kL0yT23Jwcbf7cTdBG6Ds8lmB 4NpxBx3zhO7ezTFhPqjTkceOaJi3hBZ9xJtGbQJWd0fdo0r7AJxTyX9Tegl5PFkv XY/aLZTKwQbZtmzonlCA1+G4cXuHXx9ywHopRuQhBXVv9GMSprqrvUain9hn1rg3 8hlVf/z4gykW7SbqdL+hgtWrrNjxYxbQSQg0WO0E7BqZBG/ou2qgp8AKQWE8/cM2 JLMCElMNZ9wWzzXBXxPteq+XNyrzrJImcQUw/3r1bM27qHKKIIwx9loZaewABevc AedHk0TfPqSC7XA7MO/2layo/U0jfHNXyj5jiJARDd1Vnyc+uVKgHoYLEvk6d6DB
    HhkwWxlJ56H/F
  • From Jonas Smedegaard@21:1/5 to All on Wed Sep 7 07:00:01 2022
    Quoting Bart Martens (2022-09-07 00:27:40)
    On Tue, Sep 06, 2022 at 11:00:25PM +0200, Kurt Roeckx wrote:
    On Tue, Sep 06, 2022 at 08:33:51PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 05:26:10PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones. >> >
    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short,
    keeping the focus on the smallest possible action we can do for helping those
    users that need non-free firmware: allowing ourselves to advertise non-free
    installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that
    smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already started*, where we're going to move firmware things to non-free-firmware instead. Please switch to "non-free and/or non-free-firmware sections" in your text.

    I'm surprised. Please read what is written. Proposal C leaves open whether such
    new section would be added in the future. So if proposal C would win, then the
    started work you describe can continue. Proposal C uses the term "non-free"
    because that is where all non-free packages are still residing today.

    I think the problem is with "non-free section". I think Steve looks at
    that like the non-free-firmware section is now allowed.
    not

    He wants "non-free-firmware section" mentioned in proposal C, see above.

    I suggest you
    just rewrite it as: "containing non-free software from the Debian
    archive".

    That would indeed leave out the existing section name. I'll consider it.

    If the purpose of this option is to not shift where the line is drawn
    regading Debian understanding of what is Free and what is not, then I
    suggest a "slightly" different wording of "containing software that is
    free according to The Debian Free Software Guidelines".

    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============H39061337566977694=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMYI7oACgkQLHwxRsGg ASHijg//acKCluQE5+8DkFUZ2Q8A1JbYZqYYQRkDkIQ6gbf0RqWCP5pHuJphN1yd SaaeI6e76QJOyrjwUbFFX30rGRvo226ImR+Bduge3y2/q2jW9GNptePIfCsytcZc hZ+XMbJIGihLAqIHfpHabiBgfuQPkd+xkmDkOdUIMvQTEkMcdaXzDC2z9OGnH9Rs iqAYSMf4tKeo6RE2N6EH6vWQvo3+ajS2V+M8kpLSOYBXJq76mWGYQXiuYS2PfV6Y 4iBOHlwUj5rXspPokJqzjAIMD3VV9bqscfrqEyl6iS59/F9fMkZ58+JysnQE/yIV MseyVG5rRkfywbABrvkn8qsweiDQa+v8jr7NqTbwAUUvlwUN246ea9dbOsDUK2+h KKLW/DG91N7yRwAltMG9ubRKqwLgIXd1pe36rDZdcLXMZ8mYFp0R+uFp58doeDjP Nz7EjLVnio01aJgWeubBStsbpjV3tq3k5MjjPPDnyof6KCYWTf1FGutJHHm9rACw m+zEaQL3Sasd7+D2h
  • From Bart Martens@21:1/5 to Kurt Roeckx on Wed Sep 7 08:30:01 2022
    On Tue, Sep 06, 2022 at 11:00:25PM +0200, Kurt Roeckx wrote:
    On Tue, Sep 06, 2022 at 08:33:51PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 05:26:10PM +0100, Steve McIntyre wrote:
    On Tue, Sep 06, 2022 at 06:15:21PM +0200, Bart Martens wrote:
    On Sun, Sep 04, 2022 at 03:43:36AM +0700, Judit Foglszinger wrote:
    I hereby propose the following alternative text to Steve's original proposal.

    =================================

    The Debian project is permitted to make distribution media (installer images
    and live images) containing packages from the non-free section of the Debian
    archive available for download alongside with the free media in a way that the
    user is informed before downloading which media are the free ones. >> >
    =================================

    Wondering if this should be s/non-free section/non-free-firmware section/

    Thanks for asking. The short answer is no. I kept my proposal very short,
    keeping the focus on the smallest possible action we can do for helping those
    users that need non-free firmware: allowing ourselves to advertise non-free
    installers just as visible as our free installer. Moving non-free firmware to a
    separate section might be useful, but it is in my view not part of that >smallest possible action. So what's my position on such new section? Well, what
    is not mentioned is not proposed and not opposed. That's all. - B.

    Argh. So this does *not* work with the plan that we have *already started*, where we're going to move firmware things to
    non-free-firmware instead. Please switch to "non-free and/or non-free-firmware sections" in your text.

    I'm surprised. Please read what is written. Proposal C leaves open whether such
    new section would be added in the future. So if proposal C would win, then the
    started work you describe can continue. Proposal C uses the term "non-free" because that is where all non-free packages are still residing today.

    I think the problem is with "non-free section". I think Steve looks at
    that like the non-free-firmware section is now allowed. I suggest you
    just rewrite it as: "containing non-free software from the Debian
    archive".

    Steve, would this idea from Kurt bring you back?



    Kurt


    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Kurt Roeckx on Wed Sep 7 20:40:01 2022
    On Tue, Sep 06, 2022 at 11:00:25PM +0200, Kurt Roeckx wrote:
    I think the problem is with "non-free section". I think Steve looks at
    that like the non-free-firmware section is now allowed. I suggest you
    s/now/not/
    just rewrite it as: "containing non-free software from the Debian
    archive".

    Hi Kurt,

    Yes, let's do that, thanks. So here is the adapted proposal C:

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing non-free software from the Debian archive available for download alongside with the free media in a way that the user is informed before downloading which media are the free ones.

    =================================

    The modification:
    Old: containing packages from the non-free section of the Debian archive
    New: containing non-free software from the Debian archive

    The old phrase was misunderstood as if this proposal would be opposing the addition of a new section named non-free-firmware. The new phrase better reflects that software in section non-free-firmware is also covered.

    Then why not simply mention section non-free-firmware? Well, this proposal is meant to be more future proof. This proposal is applicable to an installer using the non-free-firmware section, and also to the existing non-free installer. And to any future designs of non-free installers.

    My subjective comparison of the available proposals so far:

    - Proposal A replaces the free installer by one containing non-free firmware.
    - Proposal B gives the free installer less visibility than the non-free one.
    - Proposal C keeps the free installer and no longer hides the non-free ones.
    - Proposal D would be equivalent to NOTA in my understanding.

    Proposal C could use some more seconding. If you find that proposal C is a valid option on the ballot (regardless of what you'll later vote for), then you're most welcome to add your seconding.

    Cheers,

    Bart


    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEZaEt9P4xrWusTXauM1X01jtYIcwFAmMY44UACgkQM1X01jtY IcyceQ//ToS8wenBCwynT4A3yWF4N0NfNMyY5ggbZfUI7yPKSGKvHPARJeY6BxDP Y/f1Zm1N3vPQuU3oza7UrlkbNrhlj4CzidLvXLouCbLRzo314yY9JPMBjjf8Lqih ZzzzfY2+7BPfgAuDr15AVXCoArJeonktz5CNME3Wf3Fvc5Zj37yzdc9wqg1sL/fo WjbpQvTrhXL1mH54NPNYmtLZ5IXPwtHn7QEjyeEZMxTdPhcyk2w0dQ9TCevnDEbS anNvy6L/tbDnGHTPkYTRREyrHEYfOSsxNWbuwQkieS0JV96Nm1YKL6xSkz73wTz2 YtVUblfD/+VatUXPJFc6jAFDBdfPdiQQ1kUIsx60G/KYC5N1rgjfYOWmoroJYNPN dYeczGUrKVhq2Kaf1e2TL5ZvOcmGJU+1vVDUdmBkNyH75mDAO0Meue5XpBCeFTUq oO/W46cZI/YY8vAcgsz/VOBJv1MY4jodrTx2rsqPPgZfHaKUAtcUClYSbI3N6PuE AjkPN+uOuT4JVmIRWVYA6tiTfeR//fD3r8pB42Yknpf2XvCCAgx47K5OYgs4gJyC +edV6eUGOZHmFLbvXCCjwyT52HgOemiTRT3KZH7CnJPSljNY7l87BQHSAsTRlIfk gSCtAKjoh8iil0+Z10wEluvhNCzZjb+jVqY0T9D1ltuf2WrR5xY=
    =v8/O
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Wed Sep 7 20:50:01 2022
    Quoting Bart Martens (2022-09-07 20:31:34)
    On Tue, Sep 06, 2022 at 11:00:25PM +0200, Kurt Roeckx wrote:
    I think the problem is with "non-free section". I think Steve looks at
    that like the non-free-firmware section is now allowed. I suggest you
    s/now/not/
    just rewrite it as: "containing non-free software from the Debian
    archive".

    Hi Kurt,

    Yes, let's do that, thanks. So here is the adapted proposal C:

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing non-free software from the Debian archive available
    for download alongside with the free media in a way that the user is informed before downloading which media are the free ones.

    =================================

    The modification:
    Old: containing packages from the non-free section of the Debian archive
    New: containing non-free software from the Debian archive

    The old phrase was misunderstood as if this proposal would be opposing the addition of a new section named non-free-firmware. The new phrase better reflects that software in section non-free-firmware is also covered.

    Then why not simply mention section non-free-firmware? Well, this proposal is meant to be more future proof. This proposal is applicable to an installer using the non-free-firmware section, and also to the existing non-free installer. And to any future designs of non-free installers.

    My subjective comparison of the available proposals so far:

    - Proposal A replaces the free installer by one containing non-free firmware. - Proposal B gives the free installer less visibility than the non-free one. - Proposal C keeps the free installer and no longer hides the non-free ones. - Proposal D would be equivalent to NOTA in my understanding.

    Proposal C could use some more seconding. If you find that proposal C is a valid option on the ballot (regardless of what you'll later vote for), then you're most welcome to add your seconding.

    Seconded.

    Thanks!

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============B04028139944581690=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMY5bkACgkQLHwxRsGg ASHq5A//QweksUgPS2IYlJxClH2fOgumChIiW4en4TZmkRc5DkZNem3CUcOCh5ke E6CN16EbSxiZSFHkTwaJwZ55qlF64/RqjlZZew7cBS0+lEJICRIJ6TcPOOm7znFj km+UsrXlzfLPBo7OHoTZ3Oz11J/kN+nsPHGcR7vzxeEs5REUWxY3tnksOnyz8/jD EDqjv6RZ1WfWyne8TEmGbflz1ZvBHTr0yssUfcnEqSIXM3H2i3sA2HaplkeFbM6b sk3o3H3Bqvuut1U3xgu1FmTAiM8HYrI4TzILUWqXYxp/hS25snbMSLnc3ubeRg4I lbbCWQgBNjCFa8ThtCDMXGPpF1OAmoFyVSB7dl2bEzsI+4lm8OvE5zI+0thum4dv qbuh7d2QiEWFEYLTilcpLQYk1kvEIwbiV5uPfs6mDzwq9J2zCjEXZKQlzS76qrJk tULrw/F1q5qFs9ElPdOvoarXBHxFE95L8iL56PNiTafu2T0XSNRAp5wMXjshmVuV 27JcUjhzM/cmT6BbC
  • From Steve McIntyre@21:1/5 to Bart Martens on Wed Sep 7 23:10:01 2022
    On Wed, Sep 07, 2022 at 08:31:34PM +0200, Bart Martens wrote:
    On Tue, Sep 06, 2022 at 11:00:25PM +0200, Kurt Roeckx wrote:
    I think the problem is with "non-free section". I think Steve looks at
    that like the non-free-firmware section is now allowed. I suggest you >s/now/not/
    just rewrite it as: "containing non-free software from the Debian
    archive".

    Hi Kurt,

    Yes, let's do that, thanks. So here is the adapted proposal C:

    =================================

    The Debian project is permitted to make distribution media (installer images >and live images) containing non-free software from the Debian archive available
    for download alongside with the free media in a way that the user is informed >before downloading which media are the free ones.

    =================================

    Thanks Bart, I'm much happier with this.

    Seconded.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "I used to be the first kid on the block wanting a cranial implant,
    now I want to be the first with a cranial firewall. " -- Charlie Stross

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMZB8AACgkQWHl5VzRC aE4iOw//Tf5tHKvn/uHBPwuntuSQ5rp7GfnkBIYMMgszBOuY7C/E0yWukbJLDlsN J/94i0qXyngpZB2Wxny1Le1CyKI/t8BzNAIMm/k17yiBfSMERY/swCXe6O5wq4It uWxzzRor9fBDBKBNL89HDgT8BdyUXu1TNfpC0e2CNUU92q4pGIawsfvxWN7r3DAG faXzyWlTpyjIlFbatUXwmyFkpnTCZ4+wLLhXe44t8iVT/6ZPYgqUkXTPKeKZA1u6 JtCY2iqJ6Qj92dw7R1W9xtf0wHj18w6hGAzyXCn999nFrwGeat+/ePNvEXQ3AZZr Ra6r+CU+Pu627c9gaMW54xr60nd8JqcgMpIB3HDrUg7K7ITNI23fsBEEnJPt2qJ9 8CrflDd5kaJZOK+DoNeo5XGNxJYSZ90lth/loz7JEm+PlHE9KCqc32v9UBWAeU4L v8kAhNFMSHnvBxSgFWUh27QkWfOKEe+X/9qq58zKhDJj5WBSyMrpZo6i31S9bqNT UE8xoUB9YF31X8UYMVgQ/PW41vF4TvzvaoijaFXDpex47BLi/3iPiSe/QJJqXyYb F9Abv49zaFFD+2GT2Qj/YYzLHrFSjaiCIM91M3WJjE1XbqtfpC8YXXt9ihESHqfU A+YwLGUlHn451E1jC5b63J2rn15lx5kMgkV
  • From Laura Arjona Reina@21:1/5 to All on Wed Sep 7 22:50:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------vWpP8bTncfymGJPWPywSr9Tf
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGVsbG8NCg0KRWwgNy85LzIyIGEgbGFzIDIwOjMxLCBCYXJ0IE1hcnRlbnMgZXNjcmliacOz Og0KPiBPbiBUdWUsIFNlcCAwNiwgMjAyMiBhdCAxMTowMDoyNVBNICswMjAwLCBLdXJ0IFJv ZWNreCB3cm90ZToNCj4+IEkgdGhpbmsgdGhlIHByb2JsZW0gaXMgd2l0aCAibm9uLWZyZWUg c2VjdGlvbiIuIEkgdGhpbmsgU3RldmUgbG9va3MgYXQNCj4+IHRoYXQgbGlrZSB0aGUgbm9u LWZyZWUtZmlybXdhcmUgc2VjdGlvbiBpcyBub3cgYWxsb3dlZC4gSSBzdWdnZXN0IHlvdQ0K PiBzL25vdy9ub3QvDQo+PiBqdXN0IHJld3JpdGUgaXQgYXM6ICJjb250YWluaW5nIG5vbi1m cmVlIHNvZnR3YXJlIGZyb20gdGhlIERlYmlhbg0KPj4gYXJjaGl2ZSIuDQo+IEhpIEt1cnQs DQo+DQo+IFllcywgbGV0J3MgZG8gdGhhdCwgdGhhbmtzLiBTbyBoZXJlIGlzIHRoZSBhZGFw dGVkIHByb3Bvc2FsIEM6DQo+DQo+ID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PQ0KPg0KPiBUaGUgRGViaWFuIHByb2plY3QgaXMgcGVybWl0dGVkIHRvIG1ha2UgZGlzdHJp YnV0aW9uIG1lZGlhIChpbnN0YWxsZXIgaW1hZ2VzDQo+IGFuZCBsaXZlIGltYWdlcykgY29u dGFpbmluZyBub24tZnJlZSBzb2Z0d2FyZSBmcm9tIHRoZSBEZWJpYW4gYXJjaGl2ZSBhdmFp bGFibGUNCj4gZm9yIGRvd25sb2FkIGFsb25nc2lkZSB3aXRoIHRoZSBmcmVlIG1lZGlhIGlu IGEgd2F5IHRoYXQgdGhlIHVzZXIgaXMgaW5mb3JtZWQNCj4gYmVmb3JlIGRvd25sb2FkaW5n IHdoaWNoIG1lZGlhIGFyZSB0aGUgZnJlZSBvbmVzLg0KPg0KPiA9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCj4NClNlY29uZGVkLg0KDQpUaGFua3MgZm9yIG1ha2luZyB0 aGUgdXBkYXRlLg0KDQpLaW5kIHJlZ2FyZHMsDQoNCi0tIA0KTGF1cmEgQXJqb25hIFJlaW5h DQpodHRwczovL3dpa2kuZGViaWFuLm9yZy9MYXVyYUFyam9uYQ0KDQo=

    --------------vWpP8bTncfymGJPWPywSr9Tf--

    -----BEGIN PGP SIGNATURE-----

    iQGzBAEBCgAdFiEEZin0RNRxg3W3fj8cTDhhvcxwa3QFAmMZAYsACgkQTDhhvcxw a3SKKQwAuWEqrA9pZ4mLr+e48XRImA9n7dWaeGlwO2u47cz2yWQBpmFdDaFdvQp8 gaf1QkcJFHh4MmVDpJ5YMB3adliUxhkV52bzTiwgm1a40oIlzCcK5jI715TeV3rp pbeXkKQtIor3XTGXYGNi51wMZvsnIQK19vKFkFFCs7fQQJillog5f2UTtRz3f5Qk PeeRjT34lFf/fhldhj8VOTXAo2x99oiDoRS+7r0bP4CqUuRd5U1LV2F5ea06uuVT AWy0KKfiKYpqRConjGq7tyq3KjgXbavC+NQhHeLN179r4AGw8rviIQDyh1OawIgm 1s+/6m2bSTuE6pEGRtIxyX9pa/ksUXFUxe9EchBse+0TSrcHPEe/tX2dg9G4ZvQh 91uNjjY6MI7w30VKAsmsUorzEd1ZzNHPOkCcmyZPBXc99NorHAhLH9QrgV3Ma1xR ZQQg9XIBS+m4oLn7DmIBBKdfRBUGOJq/ScgZKNcoNFKdIwJPavOLe45asZ/f8UG9
    6Kb/8n3T
    =6ePK
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Bart Martens on Thu Sep 8 01:10:01 2022
    On Wed, 2022-09-07 at 20:31 +0200, Bart Martens wrote:

    The Debian project is permitted to make distribution media (installer images and live images) containing non-free software from the Debian archive available
    for download alongside with the free media in a way that the user is informed before downloading which media are the free ones.

    Seconded.

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMZI7oACgkQMRa6Xp/6 aaMbVA/+MNWTytxyW5Tw78VHbKFEjfCXiTjZseHeq1Lb9+zP6ezMASx5qy7Kc7H8 Ijbu/L2IOTjC/322JW/y6RL+KUFXLrVXsrhS8myjDbVXqgwbL0EgY0Tp1y0Orntz drEpFNDQa3yLmzWt7N1/D0Kt5KJcY/abprU9QpLk8DTcllgtL0qpI1YRr8nbgaO8 p7cbTL1PalqP8f7rsezeDaEVSpUBNQ6HRGHmNuhQWiWTLrueGVrfnV1OvHz68S7J PgtuCGxbPb4wmSLx3D+DeEfg/3Tfh4+IXsIcnmQblLBRFlM6ViktQJhcLZes1TP+ nosZ0YuwDuddZLkm/mHGU47wcv/F+7lnD82gApvW0Bgw7jx8SvfJL2kXPycBLt6A Pdp1ROZau2qY0cGr9/KpqugUJYoBiDiRnRDHp0HkZKMAt8Jy4kiQ9gnt4Jh8DepH UeSGqTeIxwwxIcGSl2/R+ghphM+QGfOCE+cPu2DVeP+0CsRhRcuQ1J71CxqpN0z5 LOBP5JyoOTJBMBVQH3OiWtBzwSRhFHGuZKB1vxF0tPHb6f2Zu01vGhKlzvZSZHmF psacPCozeJGBzKWXERrQ9TO1NSVtQKqXxeWxnHbh7zK15P/hPSgVMa0kD619QbFV UHiDDvUhKH5So1TB+9YiUTpZVGRUGyACY1JuLzukNtfUODRvo6k=
    =jcZr
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stefano Zacchiroli@21:1/5 to Bart Martens on Thu Sep 8 09:50:01 2022
    On Wed, Sep 07, 2022 at 08:31:34PM +0200, Bart Martens wrote:
    Yes, let's do that, thanks. So here is the adapted proposal C:

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing non-free software from the Debian archive available
    for download alongside with the free media in a way that the user is informed before downloading which media are the free ones.

    =================================

    Not sure if at this stage you need re-seconds from people who seconded
    the original version, but just in case:

    Seconded.

    --
    Stefano Zacchiroli . zack@upsilon.cc . upsilon.cc/zack _. ^ ._
    Full professor of Computer Science o o o \/|V|\/ Télécom Paris, Polytechnic Institute of Paris o o o </> <\> Co-founder & CTO Software Heritage o o o o /\|^|/\
    Former Debian Project Leader & OSI Board Director '" V "'

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE8ZooXsFA+JEz681OfH5Cj5NBJ5kFAmMZncoACgkQfH5Cj5NB J5noGg/8DVsKsIlmC7hgvcwMs1RPPdBi/3XlIcB9nfa4SFIcCce+X5MzhxCP9rVR IWH6l+0A7AaHdHvZfb3wUFbCSCU2Gd+/BvKyxuCftTpdb06bdIPUlEW3+t+bkSJA F/3clcl91sYiP0dLMYRhy1h/n5iQI89/y8QjZCP4j43oTjWopo+wDxAlRfbtg7+n S1fl7PTZAEb28qrvQXkNuVUpH9VJ4BL3m6bmBkSeHTxFhcwXbRMhTFWJD+Jbc+Zf Qzdkjtxxro5a4NJK2lRuIwMhYOhuG2zurtGUa/nMqP6zdtjEdVRcaZ4OcLwa6F39 ulAF8h+cX77l6YHay8FoIf5vUcWl/El3t9qdaIwt57Va0weS4C2WJBatKw4V55F/ ndG0O/bGAGbuziBbS7R/+GtjtNqlcU4QusE9iHlEvNKZbERpw7Vl39Oye6AJUJWN cyw3UAOzK235ImyFZ6YfWidKbTUKb2Lv3xRwV+ZTmO0ECs77i56krX2eFuYZfiOG /PYQDw6Jr0wVvWxtPGuu29
  • From Phil Morrell@21:1/5 to Simon Josefsson on Thu Sep 8 12:00:01 2022
    On Thu, Sep 08, 2022 at 11:38:09AM +0200, Simon Josefsson wrote:
    Kurt Roeckx <kurt@roeckx.be> writes:
    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    Thereby re-inforcing the interpretation that any installer or image with >> non-free software on it is not part of the Debian system

    As you indicate yourself, this is an interpretation of the SC. I would really prefer that such a question was not open to interpretation and
    that the SC was changed to make it more clear what we mean.

    I don't actually understand what this part of your text is saying. Are
    you saying that an image with non-free software on it is non-official because it's not part of the Debian system? That is not something I read
    in that text.

    I don't think the word "official" is defined or used in any foundational document, nor that its meaning is well agreed on or actually helps the discussion. It seems easier to talk about what is considered part of
    the Debian system or not: the foundation documents imply (to me) that anything not following DFSG is not part of Debian. Therefor, an
    installer that includes non-free content would not be part of Debian.
    That does not prevent the project from distributing it, we do that today
    and we distribute non-free/contrib today too without trouble.

    For me it helps to think that what the Debian project ships is a
    superset of what is considered to be the Debian system.

    Policy on the other hand is very explicit (perhaps unintentionally):

    The Debian system is maintained and distributed as a collection of packages. The main archive area forms the Debian distribution.

    By that definition, no installation media are part of the Debian system
    and so are already permitted to use non-free components? Obviously
    Policy is "lower" in interpretation value that Constitution or Social
    Contract. It also has a note about "component", and I'd point out the
    term "section" is often used too (see rewording of Proposal C).

    The Debian archive software uses the term “component” internally and
    in the Release file format to refer to the division of an archive. The
    Debian Social Contract simply refers to “areas.” This document uses terminology similar to the Social Contract.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYxm7sQAKCRDbymUJHySO bAVzAP4xmt0BjIEqF8ynYHNh96xLUNfQbE3zrREAi8vvO3DeNAD+KRUac5f6Vvwz uzBPJh1216EWKjEPrubRIhv6FgevCAI=
    =i0zy
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Kurt Roeckx on Thu Sep 8 11:40:01 2022
    Kurt Roeckx <kurt@roeckx.be> writes:

    On Tue, Aug 23, 2022 at 10:39:57AM +0200, Simon Josefsson wrote:
    As far as I can tell, both Steve's and Gunnar's proposal would make
    Debian less of a free software operating system than it is today. That
    makes me sad. My preference for an outcome would be along the following
    lines.

    ==================

    We continue to stand by the spirit of the Debian Social Contract 1
    which says:

    Debian will remain 100% free

    We provide the guidelines that we use to determine if a work is
    "free" in the document entitled "The Debian Free Software
    Guidelines". We promise that the Debian system and all its components
    will be free according to these guidelines. We will support people
    who create or use both free and non-free works on Debian. We will
    never make the system require the use of a non-free component.

    Therefor we will not include any non-free software in Debian, nor in the
    main archive or installer/live/cloud or other official images, and will
    not enable anything from non-free or contrib by default.

    I can interprete that as having non-free available and installed by default is acceptable, as long as there is a way not to use the non-free part.

    Sounds right, if I understand what you mean correctly.

    We also continue to stand by the spirit of the Debian Social Contract 5
    which says:

    Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created "contrib" and "non-free" areas in our archive for these
    works. The packages in these areas are not part of the Debian system,
    although they have been configured for use with Debian. We encourage
    CD manufacturers to read the licenses of the packages in these areas
    and determine if they can distribute the packages on their CDs. Thus,
    although non-free works are not a part of Debian, we support their
    use and provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists).

    Thereby re-inforcing the interpretation that any installer or image with
    non-free software on it is not part of the Debian system, but that we
    support their use and welcome others to distribute such work.

    As you indicate yourself, this is an interpretation of the SC. I would
    really prefer that such a question was not open to interpretation and
    that the SC was changed to make it more clear what we mean.

    Agreed. I believe both Steve's and Gunnar's proposals both assume a
    particular interpretation of the DSC (and one that I disagree with), but
    it is not explicit in the proposal.

    I don't actually understand what this part of your text is saying. Are
    you saying that an image with non-free software on it is non-official
    because it's not part of the Debian system? That is not something I read
    in that text.

    I don't think the word "official" is defined or used in any foundational document, nor that its meaning is well agreed on or actually helps the discussion. It seems easier to talk about what is considered part of
    the Debian system or not: the foundation documents imply (to me) that
    anything not following DFSG is not part of Debian. Therefor, an
    installer that includes non-free content would not be part of Debian.
    That does not prevent the project from distributing it, we do that today
    and we distribute non-free/contrib today too without trouble.

    For me it helps to think that what the Debian project ships is a
    superset of what is considered to be the Debian system.

    I would also like to point out that the Secretary has the power to adjudicates any disputes about interpretation of the constitution, but
    not about the foundation documents.

    How are disagreements over foundation documents handled in Debian?

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYxm4AhQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFomr2AP4yHm1YVelVYqXPaVJ86CPWDTvDj4mL r7zfbXudgTZuYgEArTiZNMLrNwSU6sfEdkAUcYalc66uEdEdHPgXlHEwRAY=WbHC
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Bart Martens on Thu Sep 8 13:50:02 2022
    On Wed, Sep 07, 2022 at 08:31:34PM +0200, Bart Martens wrote:
    Yes, let's do that, thanks. So here is the adapted proposal C:

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing non-free software from the Debian archive available
    for download alongside with the free media in a way that the user is informed before downloading which media are the free ones.

    =================================

    seconded, thank you!


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    If you liked Corona, you will also enjoy the upcoming global climate disaster.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmMZ1SgACgkQCRq4Vgaa qhxjAA//d34A6ErylOQRw5IKNY/1xgnS+HJRJDX5AMBT7dkSfjc3ni1YFSyiGsck XTQhn6Pp5T9C0IjsFRHHt9n9lNz70sFxsmRWSPw3MFW+xJGDSonChOKicZmWMOVv +lAr2CR+AXzbPuW9nlp5MwPF4F8zu5rRHsBP2x4L5z9TL8fXy780I7xs8qddWa6U 5slmAteTIUTVmIfVD4fO0luuI8JUeRSbWn0HAz7HGoS/JET6C3s9nD6euBcoKvkc g9zy4lU8BqENo+loOOLI9iesZIWDHkQvdOhwZxaJtl8DMNcGQwO+N/7/xRqSVC3m j5n+jd21OQSBbg7kNHiLPW97mIzzLn9UHXf0ASK1mjSbeWEpxBlaGKEB7zVazUMb 2DJsoBaGdJoxWZ9YPDSUZSxMPJlkMyrNFgJmtlLJg8rlQhcsLqgQqgrLfq0l/sUJ pyUv6A1DqZ15Re6mZpPmT0y0lbg/AAT8C+wNV6MHrizeotFMtK9aycWW/vHLy0bD 1oxfPIHug0+I1zPHLrhWcXXFCoqhZPf5JHaKi7ONAj0kmZNkX3hD46dj4rkazM3y abMNshycorXWKGq1ZieajQpE3U/AU3tNex
  • From Ross Vandegrift@21:1/5 to Simon Josefsson on Thu Sep 8 17:10:02 2022
    On Thu, Sep 08, 2022 at 11:38:09AM +0200, Simon Josefsson wrote:
    I don't think the word "official" is defined or used in any foundational document, nor that its meaning is well agreed on or actually helps the discussion.

    I had assumed "official" was in more common usage. It seems like that's
    false. Since the cloud team uses that term, here's a bit of detail I
    can offer.

    The best doc that I know of is here:
    https://wiki.debian.org/Teams/DPL/OfficialImages
    This tracks Steve's usage from earlier in the thread. The cloud team
    uses it like this too --- we probably got it from him, back when he was
    on the team. We also used to have DSA members on the team who seemed
    keen on the term.

    So while it doesn't appear in any foundational document, it does have
    traction amongst folks that are affected by these issues.

    That page describes itself as not final - but it's changed little since
    2013. It doesn't offer an opinion on some of the issues being raised
    since it just says "the image includes only software available in
    Debian".

    Hope that's useful,
    Ross

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEsAjXULa3g2HtU1bw2rOJMppM+hYFAmMaBHgACgkQ2rOJMppM +hZH+A/9GNs0U+ubrwfAS4JKfsUpo0GGKqtrI7e5BZI6Bv0stE1mW43ZDrmIvF+q kqn5C9H/UKzVhBS7kszT0mbnWDXd7VaZblRX9m4mdzQ7lLx58FonZsm7Zx6LNg+F e5YY5YzLLQ0QWMGMIMw9pvzZQp/ck951P8tGo2D2QIDDYgf4aG6k893Vex8sfw3f W50u1DgaAyxmelsLDz00UsGAlxA8WENkAT/m5w61W3DARZsmE4r1EYWMPQy6C8sz eD8JlLxgma6JWM2ANY459gsPVCPXl+6Q4kckURNvJEFEUfEQWHJRn/p1QGCd9jrV NLt52peLrhhmBB8BYM3f7jVZiUA03diAfbUZ0qd9lnhbuwSfVzKz0c9VYJNz1W8o 4zozNVYUjxSyHVCsmAjHC6YVr125f8U5fVVGbZ7YOWv+iez2nLOB4R4FYwYGN1yP /FbRcz9z0qRCEiY8pEToExUlBNaz3p9tQmpAhqVnGZ19hwM9vfHlGYxenclcFdDX 7+cnA8EWAbhr4LFBA1UqmGkOhR9k0C+aDaTUuHvgXOVG1HU7npbwpgThc1SCujpf x8NhX1eulPv6fNIpMe+YGv+gCyrhzEjFpJQqz2Ce7Nzf0BYydSS+wZq8nPFMYYKs Krg3ZOk5iP7iTlf3G77U3wMMASYx7kUZ3fTeMn5JcGW0s8TtH4E=
    =wurh
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Ross Vandegrift on Thu Sep 8 20:00:01 2022
    Hey Ross!

    On Thu, Sep 08, 2022 at 08:04:24AM -0700, Ross Vandegrift wrote:
    On Thu, Sep 08, 2022 at 11:38:09AM +0200, Simon Josefsson wrote:
    I don't think the word "official" is defined or used in any foundational
    document, nor that its meaning is well agreed on or actually helps the
    discussion.

    I had assumed "official" was in more common usage. It seems like that's >false. Since the cloud team uses that term, here's a bit of detail I
    can offer.

    The best doc that I know of is here:
    https://wiki.debian.org/Teams/DPL/OfficialImages
    This tracks Steve's usage from earlier in the thread. The cloud team
    uses it like this too --- we probably got it from him, back when he was
    on the team. We also used to have DSA members on the team who seemed
    keen on the term.

    So while it doesn't appear in any foundational document, it does have >traction amongst folks that are affected by these issues.

    Nod. It's been in common use amongst a number of teams over the
    years. It's been useful particularly when denoting stuff that is *not*
    official but still distributed by various Debian teams - e.g. test
    builds or builds including non-free bits. It's been a subject of
    discussion with the trademark team in the past, too.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com “Changing random stuff until your program works is bad coding
    practice, but if you do it fast enough it’s Machine Learning.”
    -- https://twitter.com/manisha72617183

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Bart Martens on Fri Sep 9 09:50:01 2022
    Bart Martens <bartm@knars.be> writes:

    Yes, let's do that, thanks. So here is the adapted proposal C:

    =================================

    The Debian project is permitted to make distribution media (installer images and live images) containing non-free software from the Debian archive available
    for download alongside with the free media in a way that the user is informed before downloading which media are the free ones.

    =================================

    Seconded.

    The modification:
    Old: containing packages from the non-free section of the Debian archive
    New: containing non-free software from the Debian archive

    The old phrase was misunderstood as if this proposal would be opposing the addition of a new section named non-free-firmware. The new phrase better reflects that software in section non-free-firmware is also covered.

    Then why not simply mention section non-free-firmware? Well, this proposal is meant to be more future proof. This proposal is applicable to an installer using the non-free-firmware section, and also to the existing non-free installer. And to any future designs of non-free installers.

    My subjective comparison of the available proposals so far:

    - Proposal A replaces the free installer by one containing non-free firmware. - Proposal B gives the free installer less visibility than the non-free one. - Proposal C keeps the free installer and no longer hides the non-free ones. - Proposal D would be equivalent to NOTA in my understanding.

    I see C, D and NOTA as equivalent. I think the term "hidden" is as
    helpful to the discussion as talking about "official" images. The terms confuse things rather than clarify. I believe that anything the Debian
    project publishes is official and also not hidden. Perhaps the only
    useful use of "hidden" is when talking about security advisories or
    patches under embargo. I also believe that what the Debian project
    publish is a superset of what makes up the Debian system. What we mean
    is probably that the non-free images are hard to find today, but that's
    just cosmetics as far as I am concerned. I find ANY non-x86 installer
    image hard to find and "hidden" on the current www.debian.org web page.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iQFIBAEBCgAyFiEEmUFc4ZBdDlWp+IAmhgt/uzL4EZ0FAmMa730UHHNpbW9uQGpv c2Vmc3Nvbi5vcmcACgkQhgt/uzL4EZ1x0QgAlPH4qb0IFMjIsfhyMkYXsEWY2UOX gqzuUAD6SJjaMK0FjTcWEuImZsdaTZ7PPq1/eb/C+qGMK5EbR0r7nJe6WOHNyIsM XwU+BfhpbSmnAwodf0jVeeH10PZJ69+sduu5W0JDtIDuX9OD3KUejkca+Bhk2lDu rFDC2bVXIRbmhaYbllB9bUko9YnRUTozV05Tj1XfN5eRm1o1InzowPzaYslJl+nK Hu5X/IcXq4LkIJ+XH2J428myaygM/iE3B6WY+838taFEhyKKzns/GtdMZiK7SayB sbLTuuqtKlpRXV995xTIQwBTq8KVVcZiCgsW+bpGtugM6N+Rb6XEdLF6ug==
    =vyEH
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Paul Wise on Sun Sep 11 10:30:01 2022
    I was asked offlist to answer how Proposal D would affect the display of
    the non-free installer on Debian websites, and in particular:

    * Would it prevent the current presentation of the non-free installer?

    tl;dr: No

    * Would it prevent the alternative presentation suggested in
    https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org
    ?

    tl;dr: No

    tl:

    Proposal D by itself offers no explicit guidance on these questions. D
    is a NOTA choice to stand by our current foundation documents, allowing developers to do what they want within those constraints and our usual
    conflict resolution processes.

    Thus my answer will be my interpretation of what our current policies
    already says. I'm sure others will have (hopefully only slightly)
    different interpretations, and I also realize I'm junior when it comes
    to these documents and their history and intended interpration. I'll
    try to provide my answer below. If there is strong disagreement of my interpretation, more discussion to clarify the situation may help.

    The social contract says Debian [system] will always be 100% free. I
    include the installers in the system -- it could be argued that an
    installer isn't part of the installed Debian system, but I don't think
    that is a useful way of reasoning. An operating system without any way
    to install it is not a operating system, in my opinion, but rather an
    academic work or piece of art.

    The social contract says some people need non-free works and have
    committed to supporting that. It says that these works is not part of
    the Debian system but that Debian still sponsor their existance for
    hosting and bug trackers etc. I don't think the intention was that
    there would ever be a non-free installer originally, but there is
    explicit acceptance towards non-free works in the Debian project
    generally, and a non-free installer would be one example of that.

    Now back to the questions. First, I think the terms "hidden" and
    "official" are not that helpful, so I will not use them, and given the uncertainty about what they mean I suggest we use them less than we do
    today.

    I don't see any conflict with our social contract for the Debian project
    to publish a non-free installer. However the installer would not be
    part of the Debian system, by implication, since that would violate
    DSC1.

    The social contract allows the Debian project to publish non-free works
    through non-free/contrib areas, so while probably not initially intended
    to happen, interested folks could always upload a non-free Debian
    installer to non-free and have that be published by Debian. I don't see
    how anyone could object to that, under our current policies.

    Linking to the non-free installer from the Debian front page seems
    acceptable (or at least not in direct conflict with the social
    contract), but depending on how it is executed may be poor judgement and
    would give a strange impression of what Debian is about.

    To make sense for a user coming to Debian and wondering what we are
    about and what we provide, I believe we need to provide a free installer
    and that the distinction between the installers are described and
    preferably that it is clear that while the non-free installer is not
    part of the Debian system, it can be used to install the Debian system.

    So with all these words, my belief is that publications of non-free
    installers are already acceptable under the social contract as long as
    they don't claim to be part of the Debian system, and that it isn't the
    case that the non-free installer is the only installer available.

    /Simon

    Paul Wise <pabs@debian.org> writes:

    On Mon, 2022-08-29 at 21:49 +0100, Steve McIntyre wrote:

    This last bit of wording is slightly unclear to me. Should *Debian* be
    allowed to distribute an installer or image with non-free software on it?

    and if so, how/where should we be allowed to mention/document/promote
    the images containing non-free firmware?

    Currently the existing images containing non-free firmware are
    mentioned on the download page linked from the website front page,
    but are labelled "unofficial" and in the "Other Installers" section.

    https://www.debian.org/download

    The longer older download pages similarly labels the non-free firmware
    images as "unofficial" and mention them at the very end of the page.

    https://www.debian.org/distrib/

    The even older Debian CD page doesn't mention non-free firmware at all.

    https://www.debian.org/CD/

    The Debian installation guide has sections on non-free firmware, the
    first one seems to be outdated as it seems to imply the firmware images
    are not possible.

    https://www.debian.org/releases/stable/amd64/ch02s02.en.html https://www.debian.org/releases/stable/amd64/ch06s04.en.html

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx2cExQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFojnSAP4kJg8JqZVLhEeRv8eoeINfaCgsCNil VXdKEqgAP0f3JwD/QIiJniM7qGve31mCLmg6UCIZ/z9ghn6sf46hOtOSCg0=0kfN
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Simon Josefsson on Mon Sep 12 03:40:01 2022
    On Sun, 2022-09-11 at 10:28 +0200, Simon Josefsson wrote:

    * Would it prevent the current presentation of the non-free installer? tl;dr: No
    * Would it prevent the alternative presentation suggested in https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org
    tl;dr: No
    ...
    Linking to the non-free installer from the Debian front page seems
    acceptable (or at least not in direct conflict with the social
    contract), but depending on how it is executed may be poor judgement and would give a strange impression of what Debian is about.
    ...
    So with all these words, my belief is that publications of non-free installers are already acceptable under the social contract as long as
    they don't claim to be part of the Debian system, and that it isn't the
    case that the non-free installer is the only installer available.

    Thanks. So it seems B/C/D/NOTA are approximately duplicates,
    except that B/C specify slightly more about non-free presentation.

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMejC4ACgkQMRa6Xp/6 aaPWUQ//QTJD5bvYbo/B3NwUDw2gpPRPOsB7UyqecTj+FbcmWAa0PwGAiC1EsSRK EV5G/Ggcngg4KfyyuAD1rNj5ABK9PiXnHbJuKjc9S+pWgkCfRD/bQJGOV2GljbXa sZKKYrf62MR50Ui5/xE+MeWi1qoqxnHa3UhlUeKbpeiFyiPE/hOVnE1UL0SStEYC BJsohY/DD1GIHAwTN64tIcaMwqEO4fwFy+d2KDM7wgN8TeZlQeqgqtVdlBdvIr2y D7MaKf6mLIw9712gP1ctYBQlGjbQjRxYA7EQpGLeUNaO2+IFzbRbDMvfF1wDipiz C4Rn9mnWD0d9SLpkSTXtpht2VZcH6sMxV+QxeFtFDVRNHVqM16TjO95cJTeVZ5QK aFZl7+EEmxHAARpKXNzRdWk6xodJHD0N9Inl++IKKt0FX3anByXLRAOxOe77gcMP yt3dGCXTmT+x5xjQg6pnBLqALEz9SQ/VWrEFlWptXypZUM1AoVOy0nToG3LVYjkE 6uEm7qMmk0eFn8wzgT/Olu1+l7BkvitJ5r/oPjm96ZgjonMqKhFFQkXeUrEbbITy V0ENqkDPnNwXuBoR4i6Q0Ml2kjM2rrxqVPDqJ6lxllTGydAqEK5kU0DI4CANuDh9 oUY9xHd+Bp+eC9fTV/SwIxMsq1fZChoi9l+TPrlzCIN4+B7KUtQ=
    =hzlk
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Paul Wise on Mon Sep 12 05:00:01 2022
    Paul Wise <pabs@debian.org> writes:

    Thanks. So it seems B/C/D/NOTA are approximately duplicates,
    except that B/C specify slightly more about non-free presentation.

    I think that may be true from the perspective of what Debian is *allowed*
    to do, but not in the sense of the guidance that the project is providing
    to the team maintaining the installer and the install media. They're
    asking for the project to tell them what to do here, and I think those
    options tell them to do different things with respect to how prominant the non-free installer is on our communication channels.

    B says to make the non-free installer the most prominant and recommended option, C says to make them roughly equivalent, and D says to maintain something more like the status quo (although possibly with a bit less
    "buried in the basement" difficulty in finding the non-free installer).

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Paul Wise on Mon Sep 12 16:00:01 2022
    Agreed. Maybe it helps to summarize the options, my take is:

    Proposal A replaces the free installer by one containing and sometimes
    enabling non-free firmware -- there is no more free installer Proposal B gives the free installer less visibility than the non-free one Proposal C allows presenting free and non-free installers equally visible. Proposal D is NOTA thus permit publishing a non-free installer like
    today, reinforcing that interpretation of the social contract Proposal E is proposal A plus change to social contract to permit it

    /Simon

    Paul Wise <pabs@debian.org> writes:

    On Sun, 2022-09-11 at 10:28 +0200, Simon Josefsson wrote:

    * Would it prevent the current presentation of the non-free installer?
    tl;dr: No
    * Would it prevent the alternative presentation suggested in
    https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org
    tl;dr: No
    ...
    Linking to the non-free installer from the Debian front page seems
    acceptable (or at least not in direct conflict with the social
    contract), but depending on how it is executed may be poor judgement and
    would give a strange impression of what Debian is about.
    ...
    So with all these words, my belief is that publications of non-free
    installers are already acceptable under the social contract as long as
    they don't claim to be part of the Debian system, and that it isn't the
    case that the non-free installer is the only installer available.

    Thanks. So it seems B/C/D/NOTA are approximately duplicates,
    except that B/C specify slightly more about non-free presentation.

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx86BBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFogJmAP9zZZ9WtOzNCrqjF3sDlE6WAhHduIO2 h9yEnD0cG+PQkAEAgrWRfbpqhvN+wWkdZOF4Hjl8G60IjZXU34yvBVhv7AU=
    =NeoX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)