• Possible draft non-free firmware option with SC change

    From Russ Allbery@21:1/5 to All on Wed Sep 7 19:50:01 2022
    Between one thing and another I've not been tracking the timeline of this
    vote and I'm worried we may be out of time for new ballot options and
    possibly extensions.

    (As promised in the previous vote for changing the timing of GRs, I've
    been watching the timing closely and the last couple have felt rushed.
    When there's a quiet period, I'm considering proposing a small
    constitutional amendment to relax the timelines a bit based on that
    experience. But we can discuss that separately.)

    If there is time left, though, I'm considering proposing the following
    option based on my earlier message, just so that there's something on the ballot that explicitly modifies the Social Contract to allow for non-free firmware, in case people want that for clarity.

    I should stress that I'm not involved in this part of Debian directly and
    am not a great choice for a proponent, so I'd be happy if someone else
    took that over, but it does feel to me like it would be good to have this explicitly on the ballot.

    Possible wording, which includes the existing option A verbatim:

    --------------------------------------------------------------------------

    This ballot option supersedes the Debian Social Contract (a foundation document) under point 4.1.5 of the constitution and thus requires a 3:1 majority.

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that it adds the following sentence to the end of point 5:

    The Debian official media may include firmware that is otherwise not
    part of the Debian system to enable use of Debian with hardware that
    requires such firmware.

    The Debian Project also makes the following statement on an issue of the
    day:

    We will include non-free firmware packages from the "non-free-firmware"
    section of the Debian archive on our official media (installer images and
    live images). The included firmware binaries will normally be enabled by default where the system determines that they are required, but where
    possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).

    When the installer/live system is running we will provide information to
    the user about what firmware has been loaded (both free and non-free), and
    we will also store that information on the target system such that users
    will be able to find it later. Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file. Our
    users should receive security updates and important fixes to firmware
    binaries just like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE1zk0tJZ0z1zNmsJ4fYAxXFc23nUFAmMY2XQACgkQfYAxXFc2 3nUu7gf7BW+pn7tVF8msxVyvgU8sxs5jtUcJwHvCK2DNP/PPBI7WcGjQVGIDeKcL hOeEQqLSkwE1FCUk7g/jJnmlRllRr0TIt4CF90Obm40jAR1xH3/PTeG62mBpdW2j tFz1c4IQjfROTvRsUHLkCqzw9mEAFh982HBv6gDuM+mCKARypWJ5xMrJYeUmamIV xJvN/q3zZ11h1KSERtbfgt1TWFzVGx2dndiCjZ/7e6/ltKKa4qK0kzc6mbnidiNC jBYJOh75mH+YDR6PPJLhQDcplCHmNYEPerXc1ebb6U8PHHeUEw2G8QItl/dKm6Cb uVyGTvTiP1NXd2cwF5XRDaQ7IRSgkw==bMwx
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Wed Sep 7 20:00:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------MSDqxaktZ8sjqS33wF8Pu0Gp
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SSBsaWtlIHRoZSBleGlzdGVuY2Ugb2Ygc3VjaCBhbiBvcHRpb24uDQoNClNlY29uZGVkLg0K DQpUaGUgUHJvamVjdCBMZWFkZXIgaGFzIGV4dGVuZGVkIHRoZSBkaXNjdXNzaW9uIHBlcmlv ZCAoYXQgbGVhc3QgdGhlIA0KbWF4aW11bSwgbWF5YmUgaXQncyBhbWJpZ3VvdXMgb24gYW4g ZXh0ZW5zaW9uIG9mIHRoZSBtaW5pbXVtLCBidXQgdGhhdCANCmlzIGxpa2VseSBtb290KSBi eSA3IGRheXMuIEJ5IG15IHJlYWRpbmcgb2YgdGhlIGNvbnN0aXR1dGlvbiwgdGhpcyBvbmx5 IA0KZXh0ZW5kcyB0aGUgcG9zc2libGUgbWF4aW11bS4gVG8gYWN0dWFsbHkgZ2V0IHRoYXQg dGltZSwgSSBiZWxpZXZlIHdlIA0KbmVlZCBhIG5ldyBvcHRpb24gb3IgYW4gYW1lbmRtZW50 IG9mIGFuIGV4aXN0aW5nIG9uZS4gQW5kIHRoYXQgbmVlZHMgdG8gDQpoYXBwZW4gdG9kYXku DQoNCk9uIDkvNy8yMiAxMjo0OCwgUnVzcyBBbGxiZXJ5IHdyb3RlOg0KPiBCZXR3ZWVuIG9u ZSB0aGluZyBhbmQgYW5vdGhlciBJJ3ZlIG5vdCBiZWVuIHRyYWNraW5nIHRoZSB0aW1lbGlu ZSBvZiB0aGlzDQo+IHZvdGUgYW5kIEknbSB3b3JyaWVkIHdlIG1heSBiZSBvdXQgb2YgdGlt ZSBmb3IgbmV3IGJhbGxvdCBvcHRpb25zIGFuZA0KPiBwb3NzaWJseSBleHRlbnNpb25zLg0K PiANCj4gKEFzIHByb21pc2VkIGluIHRoZSBwcmV2aW91cyB2b3RlIGZvciBjaGFuZ2luZyB0 aGUgdGltaW5nIG9mIEdScywgSSd2ZQ0KPiBiZWVuIHdhdGNoaW5nIHRoZSB0aW1pbmcgY2xv c2VseSBhbmQgdGhlIGxhc3QgY291cGxlIGhhdmUgZmVsdCBydXNoZWQuDQo+IFdoZW4gdGhl cmUncyBhIHF1aWV0IHBlcmlvZCwgSSdtIGNvbnNpZGVyaW5nIHByb3Bvc2luZyBhIHNtYWxs DQo+IGNvbnN0aXR1dGlvbmFsIGFtZW5kbWVudCB0byByZWxheCB0aGUgdGltZWxpbmVzIGEg Yml0IGJhc2VkIG9uIHRoYXQNCj4gZXhwZXJpZW5jZS4gIEJ1dCB3ZSBjYW4gZGlzY3VzcyB0 aGF0IHNlcGFyYXRlbHkuKQ0KPiANCj4gSWYgdGhlcmUgaXMgdGltZSBsZWZ0LCB0aG91Z2gs IEknbSBjb25zaWRlcmluZyBwcm9wb3NpbmcgdGhlIGZvbGxvd2luZw0KPiBvcHRpb24gYmFz ZWQgb24gbXkgZWFybGllciBtZXNzYWdlLCBqdXN0IHNvIHRoYXQgdGhlcmUncyBzb21ldGhp bmcgb24gdGhlDQo+IGJhbGxvdCB0aGF0IGV4cGxpY2l0bHkgbW9kaWZpZXMgdGhlIFNvY2lh bCBDb250cmFjdCB0byBhbGxvdyBmb3Igbm9uLWZyZWUNCj4gZmlybXdhcmUsIGluIGNhc2Ug cGVvcGxlIHdhbnQgdGhhdCBmb3IgY2xhcml0eS4NCj4gDQo+IEkgc2hvdWxkIHN0cmVzcyB0 aGF0IEknbSBub3QgaW52b2x2ZWQgaW4gdGhpcyBwYXJ0IG9mIERlYmlhbiBkaXJlY3RseSBh bmQNCj4gYW0gbm90IGEgZ3JlYXQgY2hvaWNlIGZvciBhIHByb3BvbmVudCwgc28gSSdkIGJl IGhhcHB5IGlmIHNvbWVvbmUgZWxzZQ0KPiB0b29rIHRoYXQgb3ZlciwgYnV0IGl0IGRvZXMg ZmVlbCB0byBtZSBsaWtlIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSB0aGlzDQo+IGV4cGxp Y2l0bHkgb24gdGhlIGJhbGxvdC4NCj4gDQo+IFBvc3NpYmxlIHdvcmRpbmcsIHdoaWNoIGlu Y2x1ZGVzIHRoZSBleGlzdGluZyBvcHRpb24gQSB2ZXJiYXRpbToNCj4gDQo+IC0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQo+IA0KPiBUaGlzIGJhbGxvdCBvcHRpb24gc3VwZXJzZWRlcyB0aGUg RGViaWFuIFNvY2lhbCBDb250cmFjdCAoYSBmb3VuZGF0aW9uDQo+IGRvY3VtZW50KSB1bmRl ciBwb2ludCA0LjEuNSBvZiB0aGUgY29uc3RpdHV0aW9uIGFuZCB0aHVzIHJlcXVpcmVzIGEg MzoxDQo+IG1ham9yaXR5Lg0KPiANCj4gVGhlIERlYmlhbiBTb2NpYWwgQ29udHJhY3QgaXMg cmVwbGFjZWQgd2l0aCBhIG5ldyB2ZXJzaW9uIHRoYXQgaXMNCj4gaWRlbnRpY2FsIHRvIHRo ZSBjdXJyZW50IHZlcnNpb24gaW4gYWxsIHJlc3BlY3RzIGV4Y2VwdCB0aGF0IGl0IGFkZHMg dGhlDQo+IGZvbGxvd2luZyBzZW50ZW5jZSB0byB0aGUgZW5kIG9mIHBvaW50IDU6DQo+IA0K PiAgICAgIFRoZSBEZWJpYW4gb2ZmaWNpYWwgbWVkaWEgbWF5IGluY2x1ZGUgZmlybXdhcmUg dGhhdCBpcyBvdGhlcndpc2Ugbm90DQo+ICAgICAgcGFydCBvZiB0aGUgRGViaWFuIHN5c3Rl bSB0byBlbmFibGUgdXNlIG9mIERlYmlhbiB3aXRoIGhhcmR3YXJlIHRoYXQNCj4gICAgICBy ZXF1aXJlcyBzdWNoIGZpcm13YXJlLg0KPiANCj4gVGhlIERlYmlhbiBQcm9qZWN0IGFsc28g bWFrZXMgdGhlIGZvbGxvd2luZyBzdGF0ZW1lbnQgb24gYW4gaXNzdWUgb2YgdGhlDQo+IGRh eToNCj4gDQo+IFdlIHdpbGwgaW5jbHVkZSBub24tZnJlZSBmaXJtd2FyZSBwYWNrYWdlcyBm cm9tIHRoZSAibm9uLWZyZWUtZmlybXdhcmUiDQo+IHNlY3Rpb24gb2YgdGhlIERlYmlhbiBh cmNoaXZlIG9uIG91ciBvZmZpY2lhbCBtZWRpYSAoaW5zdGFsbGVyIGltYWdlcyBhbmQNCj4g bGl2ZSBpbWFnZXMpLiBUaGUgaW5jbHVkZWQgZmlybXdhcmUgYmluYXJpZXMgd2lsbCBub3Jt YWxseSBiZSBlbmFibGVkIGJ5DQo+IGRlZmF1bHQgd2hlcmUgdGhlIHN5c3RlbSBkZXRlcm1p bmVzIHRoYXQgdGhleSBhcmUgcmVxdWlyZWQsIGJ1dCB3aGVyZQ0KPiBwb3NzaWJsZSB3ZSB3 aWxsIGluY2x1ZGUgd2F5cyBmb3IgdXNlcnMgdG8gZGlzYWJsZSB0aGlzIGF0IGJvb3QgKGJv b3QgbWVudQ0KPiBvcHRpb24sIGtlcm5lbCBjb21tYW5kIGxpbmUgZXRjLikuDQo+IA0KPiBX aGVuIHRoZSBpbnN0YWxsZXIvbGl2ZSBzeXN0ZW0gaXMgcnVubmluZyB3ZSB3aWxsIHByb3Zp ZGUgaW5mb3JtYXRpb24gdG8NCj4gdGhlIHVzZXIgYWJvdXQgd2hhdCBmaXJtd2FyZSBoYXMg YmVlbiBsb2FkZWQgKGJvdGggZnJlZSBhbmQgbm9uLWZyZWUpLCBhbmQNCj4gd2Ugd2lsbCBh bHNvIHN0b3JlIHRoYXQgaW5mb3JtYXRpb24gb24gdGhlIHRhcmdldCBzeXN0ZW0gc3VjaCB0 aGF0IHVzZXJzDQo+IHdpbGwgYmUgYWJsZSB0byBmaW5kIGl0IGxhdGVyLiBXaGVyZSBub24t ZnJlZSBmaXJtd2FyZSBpcyBmb3VuZCB0byBiZQ0KPiBuZWNlc3NhcnksIHRoZSB0YXJnZXQg c3lzdGVtIHdpbGwgYWxzbyBiZSBjb25maWd1cmVkIHRvIHVzZSB0aGUNCj4gbm9uLWZyZWUt ZmlybXdhcmUgY29tcG9uZW50IGJ5IGRlZmF1bHQgaW4gdGhlIGFwdCBzb3VyY2VzLmxpc3Qg ZmlsZS4gT3VyDQo+IHVzZXJzIHNob3VsZCByZWNlaXZlIHNlY3VyaXR5IHVwZGF0ZXMgYW5k IGltcG9ydGFudCBmaXhlcyB0byBmaXJtd2FyZQ0KPiBiaW5hcmllcyBqdXN0IGxpa2UgYW55 IG90aGVyIGluc3RhbGxlZCBzb2Z0d2FyZS4NCj4gDQo+IFdlIHdpbGwgcHVibGlzaCB0aGVz ZSBpbWFnZXMgYXMgb2ZmaWNpYWwgRGViaWFuIG1lZGlhLCByZXBsYWNpbmcgdGhlDQo+IGN1 cnJlbnQgbWVkaWEgc2V0cyB0aGF0IGRvIG5vdCBpbmNsdWRlIG5vbi1mcmVlIGZpcm13YXJl IHBhY2thZ2VzLg0KDQoNCi0tIA0KUmljaGFyZA0K

    --------------MSDqxaktZ8sjqS33wF8Pu0Gp--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMY22gACgkQ+HlhmcBF hs7E7g//d53iXRV50PSEN8C+BXS0dOjs+8S7k4LnFTaR3am+KmfNjQFe7k+ltDbq RgpPezLhmaS97B5jz25bpItNS08mh7iTOAbVIS3JO531sD5kjqCKsNgZel1bNfSE KjZJNuCg2GdlVqazJVYIO5sguM9OiCbKFI1LxNehNczHo75V633zfrFRUfwh9HJ8 hMBFdRyKf3D5V4sQD5ZsAYjRfy9DHRHc17piM1h+TDMDjsKZNlNrlwzlz84SRkVj gxGkKqJPxl8UejYQG1La4IptmUNbwvpuJbSN99/94RheSj616O3qhsxp9cpCDhfi t+yEEOzqpOA/E81Se2UJi89XY0bjG3jDdhwtHueZTb5L66eoU7XIYjRp4M/mmmUo Fx2I7ir5iyv61FkcDDxo5Bg1wpj4H63bFMTPc01NwjQzpmvrnqL/epG4AGKiKWlZ 1eAqVma5+bcs3sfD1WIED5yElzyget72tgpztcJSVV0b+aujtODKsJSKcjxErR42 oxyX53S8FLh6w0D1PTk22a9ZQdQ/K/T4t3SgR8vCfhnuD9SQSugq98m11HQAy6zG 5pujC/FAhMMv3uqzxr8b0F0cRtsPwG+v4nn8Tz8uxzcRb0tWOpr5pswLF0AVNkbZ iHyLGc10vIxEoHFZ5qnu+WdV9+T6Mj5gZd69euSlJBL79F5wAHg=
    =uqLc
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Richard Laager on Wed Sep 7 20:50:01 2022
    Richard Laager <rlaager@debian.org> writes:

    The Project Leader has extended the discussion period (at least the
    maximum, maybe it's ambiguous on an extension of the minimum, but that
    is likely moot) by 7 days. By my reading of the constitution, this only extends the possible maximum. To actually get that time, I believe we
    need a new option or an amendment of an existing one. And that needs to happen today.

    Oh, good call. Okay, for the record, since I didn't say that in my
    original message, I formally propose the ballot option at the start of
    this thread (the message was already signed).

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE1zk0tJZ0z1zNmsJ4fYAxXFc23nUFAmMY5YoACgkQfYAxXFc2 3nVg4wf/SjlZLWeSW6KuZgss0Vwx1xBq2Yu39LR0WtajWzPq63kqJhKNHOZTqHH3 2CCOQ81kUmNHS8yk3af5o3RW+iiDw3M41L+c4YzU6SI6rgIv+STynO88iTkGMq9d Hz2NYdrvIGj1x1tCeMgW7LS5akRMxc2VrASXoVyGIDogwl01YmpTbchivwhQiTA4 EYkYbgaSYZpAY1uLKka8AuAuiWAUgi5xe6bsZHV8+O93mQQFwcBz5Ujr8jx7J9NA 9N+pIzBQ/a7ZEmaLkTTbFhq8ChEMVCaZktffjmn9nsdabuSmZrtFT8x/hd1F24P6 QTJb87CTq0JF5Ji7+S1sxuGhqAkuBA=ëfV
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Ansgar on Wed Sep 7 20:40:01 2022
    Ansgar <ansgar@debian.org> writes:

    Seconded.

    One suggestion: if we modify the Social Contract then we can as well
    include "non-free-firmware" explicitly as well, i.e., replace

    We have created "contrib" and "non-free" areas in our archive for
    these works.

    by

    We have created "contrib", "non-free-firmware" and "non-free"
    areas in our archive for these works.

    I considered doing this, but then I decided against it because I think the current wording implicitly allows for there being multiple non-free areas.
    I know that's not how we're currently reading it, and probably not how it
    was intended, but one can interpret the same sentence as saying there is
    one or more contrib area and one or more non-free area.

    I like that a little better since it avoids having to update a foundation document for what's essentially bookkeeping. Suppose, for example, that
    we want to split out some other bit of non-free in the future for some non-SC-related reason (contrib or non-free debug symbols or whatever). It feels weird to have to amend the SC just to add the new name to a list.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ansgar@21:1/5 to Russ Allbery on Wed Sep 7 20:20:01 2022
    Russ Allbery writes:
    Possible wording, which includes the existing option A verbatim:

    --------------------------------------------------------------------------

    This ballot option supersedes the Debian Social Contract (a foundation document) under point 4.1.5 of the constitution and thus requires a 3:1 majority.

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that it adds the following sentence to the end of point 5:

    The Debian official media may include firmware that is otherwise not
    part of the Debian system to enable use of Debian with hardware that
    requires such firmware.

    The Debian Project also makes the following statement on an issue of the
    day:

    We will include non-free firmware packages from the "non-free-firmware" section of the Debian archive on our official media (installer images and live images). The included firmware binaries will normally be enabled by default where the system determines that they are required, but where possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).

    When the installer/live system is running we will provide information to
    the user about what firmware has been loaded (both free and non-free), and
    we will also store that information on the target system such that users
    will be able to find it later. Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file. Our users should receive security updates and important fixes to firmware binaries just like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    Seconded.

    One suggestion: if we modify the Social Contract then we can as well
    include "non-free-firmware" explicitly as well, i.e., replace

    We have created "contrib" and "non-free" areas in our archive for
    these works.

    by

    We have created "contrib", "non-free-firmware" and "non-free"
    areas in our archive for these works.

    Ansgar

    -----BEGIN PGP SIGNATURE-----

    iIgEARYKADAWIQR3hZU8YXPYylUJRxfDof4h+X+qzwUCYxjfYBIcYW5zZ2FyQGRl Ymlhbi5vcmcACgkQw6H+Ifl/qs/eIgD+IaOWWD3++Fg9onj4ZIW2XpZbMA6fhnHD kYdexEydxvYA/0XYDv9574FvTbraEpE5cELij9ZQglGO39RJqNAPi+sG
    =YmQp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tobias Frost@21:1/5 to Russ Allbery on Wed Sep 7 21:10:01 2022
    On Wed, Sep 07, 2022 at 10:48:36AM -0700, Russ Allbery wrote:
    Between one thing and another I've not been tracking the timeline of this vote and I'm worried we may be out of time for new ballot options and possibly extensions.

    (As promised in the previous vote for changing the timing of GRs, I've
    been watching the timing closely and the last couple have felt rushed.
    When there's a quiet period, I'm considering proposing a small
    constitutional amendment to relax the timelines a bit based on that experience. But we can discuss that separately.)

    If there is time left, though, I'm considering proposing the following
    option based on my earlier message, just so that there's something on the ballot that explicitly modifies the Social Contract to allow for non-free firmware, in case people want that for clarity.

    I should stress that I'm not involved in this part of Debian directly and
    am not a great choice for a proponent, so I'd be happy if someone else
    took that over, but it does feel to me like it would be good to have this explicitly on the ballot.

    Possible wording, which includes the existing option A verbatim:

    --------------------------------------------------------------------------

    This ballot option supersedes the Debian Social Contract (a foundation document) under point 4.1.5 of the constitution and thus requires a 3:1 majority.

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that it adds the following sentence to the end of point 5:

    The Debian official media may include firmware that is otherwise not
    part of the Debian system to enable use of Debian with hardware that
    requires such firmware.

    The Debian Project also makes the following statement on an issue of the
    day:

    We will include non-free firmware packages from the "non-free-firmware" section of the Debian archive on our official media (installer images and live images). The included firmware binaries will normally be enabled by default where the system determines that they are required, but where possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).

    When the installer/live system is running we will provide information to
    the user about what firmware has been loaded (both free and non-free), and
    we will also store that information on the target system such that users
    will be able to find it later. Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file. Our users should receive security updates and important fixes to firmware binaries just like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    Seconded.


    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmMY7DsACgkQkWT6HRe9 XTabeBAApv6V9YYRjvEPeM8Spx2N0ZB/K4nFWuza9DDH63Obvkl/+huIAu6AB9cZ aHjzPYK5EkYzeUKQlU3KBdHy3lUVJc3+JY82l+uvUQbhFWgeg3W5tz4XKn+3UTtd M2yJtzD3KMswIJQcLPGcm2lDiuFCum8CG/8OYaxf03Dua4Ns7wDgW4J15Q8vfcEl gC0GuUS1cmRP1UstY5wP71zIjGHoCGcylCQvCcPrN+X3EDoaK9wM9+hkbdjR0xxf gMwZdGWsf+6CHQugsdjsASnA75yUY4OTngp4n914vZra3o6h868DopozODcMhjrV sjgHfNt5VwbqHZAQ4NW6J3BqEL2ik7uaaSKh5HfDPp60uYNlw2SZJgW/bq4ZUXJT GFl8ap/4P6n8zM7+qY4y0PlJbs8RFqpqvB4EONjsXBr3pD3wAIvUb2EnDTt0rSK4 BQIGnJub2zd3JdeR7TfVUqGOc3cI5HLY3EajdyKsecyBmGnYp79Ve4JTGf7mjaZq wWW7JO7U29N9igfN3SK6XLS/8BXOP4ua5KRJop0vM+nGhw/4kvtRLfaBaw/iAzxl H5dW8ROcBwOLEw+olt48Ac9c7qm5tDKkmrVnIMUXPONq0vZUAifJ6YmcFEEwCh/c jl0drJnQYOiS3T26sG7RLuWjO37oZoNWznion1ItmFnucO1/ucg=
    =vkoQ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Richter on Wed Sep 7 22:00:01 2022
    Simon Richter <Simon.Richter@hogyros.de> writes:

    Seconded.

    Do users have the right to redistribute the installer?

    In this proposal it's left unspecified (in other words, it's not an
    inherent position of the Social Contract one way or the other), mostly
    because I'm trying to keep the change as simple as possible and
    redistribution of non-free software, in general, may depend on exactly how
    and what the user is doing. In practice, I would expect it to be a
    problem if a typical user couldn't and we would deal with that problem as
    part of the normal bug handling process.

    The basic theory here is that this amends the Social Contract to give the installer team *permission* to include firmware, but they're not
    *required* to include firmware and can continue to exercise judgment on
    what they do and don't include.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Russ Allbery on Wed Sep 7 23:20:01 2022
    On Wed, Sep 07, 2022 at 10:48:36AM -0700, Russ Allbery wrote:
    Between one thing and another I've not been tracking the timeline of this >vote and I'm worried we may be out of time for new ballot options and >possibly extensions.

    (As promised in the previous vote for changing the timing of GRs, I've
    been watching the timing closely and the last couple have felt rushed.
    When there's a quiet period, I'm considering proposing a small
    constitutional amendment to relax the timelines a bit based on that >experience. But we can discuss that separately.)

    If there is time left, though, I'm considering proposing the following
    option based on my earlier message, just so that there's something on the >ballot that explicitly modifies the Social Contract to allow for non-free >firmware, in case people want that for clarity.

    I should stress that I'm not involved in this part of Debian directly and
    am not a great choice for a proponent, so I'd be happy if someone else
    took that over, but it does feel to me like it would be good to have this >explicitly on the ballot.

    Possible wording, which includes the existing option A verbatim:

    --------------------------------------------------------------------------

    This ballot option supersedes the Debian Social Contract (a foundation >document) under point 4.1.5 of the constitution and thus requires a 3:1 >majority.

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that it adds the >following sentence to the end of point 5:

    The Debian official media may include firmware that is otherwise not
    part of the Debian system to enable use of Debian with hardware that
    requires such firmware.

    The Debian Project also makes the following statement on an issue of the
    day:

    We will include non-free firmware packages from the "non-free-firmware" >section of the Debian archive on our official media (installer images and >live images). The included firmware binaries will normally be enabled by >default where the system determines that they are required, but where >possible we will include ways for users to disable this at boot (boot menu >option, kernel command line etc.).

    When the installer/live system is running we will provide information to
    the user about what firmware has been loaded (both free and non-free), and
    we will also store that information on the target system such that users
    will be able to find it later. Where non-free firmware is found to be >necessary, the target system will also be configured to use the >non-free-firmware component by default in the apt sources.list file. Our >users should receive security updates and important fixes to firmware >binaries just like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    Thanks Russ!

    Seconded.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com The two hard things in computing:
    * naming things
    * cache invalidation
    * off-by-one errors -- Stig Sandbeck Mathisen

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMZCSIACgkQWHl5VzRC aE7JABAAgKoRRnGznnznnoPvWwXH86tV4u1mMW48VX1MhMiZoZFyeI+2T2e5wCzv PjS6gBeLWR5UeCebJj9xQWU3J/szqrti/XiH1EkS5xmsjlOvnUz1qQwp4U8WK6+j PI85acaMYO/xpAG9+sxo5NO1D1ck0cwnC4S5ix9lJ8wcXDWeY0G/2z5bvZ/kiODD 86X1lg62SBtucV5oVpRAHjcxuVsA7DqYzFwd1aJ1xZQxcWY582RtatRPeteVoglk QvuKAiFWaiAu2mYVHhYR1AbC5s+6o6DtMAhqPPnfp2kBNs+8LVHSh1O/wiHQDhJf VuRoa+LK66iuqdCi1a3QjA96sQpqdBoTnf83pEYDyVvj+dmSnAh6mzcZrnVT22nt Mc7DwrRAkp0JbejECNqDvhnPaIh1hQ4xprwZc6IEef5ebDL6Eke2mVbALY1fBwQr shR4Oe+lVRpxDLqxpMN8fy/GpmMjyJBdegZvYhgBHOGXF1eh1cOfVhosU9XvM6Cd icHi6NQoGJGPY4jReNKjg9cxkxPnj2qnmAqDJml9kjaXQdughD4isLSgCFocpCfw Mv849C5oC/161hpq5a58dOQ2S9J7SA6idefYjLheg5bQl6a+BYXuJEvlq8T7aWKj LLn9Y0uwGr8qate33FUqj90RmS7yvXlQfARla
  • From Russ Allbery@21:1/5 to Steve McIntyre on Thu Sep 8 06:50:01 2022
    Steve McIntyre <steve@einval.com> writes:
    On Wed, Sep 07, 2022 at 11:38:33AM -0700, Russ Allbery wrote:
    Ansgar <ansgar@debian.org> writes:

    One suggestion: if we modify the Social Contract then we can as well
    include "non-free-firmware" explicitly as well, i.e., replace

    We have created "contrib" and "non-free" areas in our archive for
    these works.

    by

    We have created "contrib", "non-free-firmware" and "non-free"
    areas in our archive for these works.

    I considered doing this, but then I decided against it because I think
    the current wording implicitly allows for there being multiple non-free
    areas. I know that's not how we're currently reading it, and probably
    not how it was intended, but one can interpret the same sentence as
    saying there is one or more contrib area and one or more non-free area.

    I like that a little better since it avoids having to update a
    foundation document for what's essentially bookkeeping. Suppose, for
    example, that we want to split out some other bit of non-free in the
    future for some non-SC-related reason (contrib or non-free debug
    symbols or whatever). It feels weird to have to amend the SC just to
    add the new name to a list.

    Right. Maybe it might be helpful to tweak the wording the *other* way
    then, something like:

    We have created extra areas in our archive for these works.

    so we don't specify the areas explicitly? Just a thought...

    I think this is better than the current SC phrasing, but I'm struggling to
    find a good, not-confusing way of phrasing the ballot option that people
    would vote on. Any suggestions welcome! Also, any other feedback, particularly from others who seconded the option, about whether they also
    think this is a good change.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Richter on Thu Sep 8 06:50:01 2022
    Simon Richter <sjr@debian.org> writes:

    I agree that from a practical standpoint, this is unlikely to be a
    problem. The new language for the DSC also solves the conflict, but it
    is a regression for user -- before, anything "official" could always be redistributed because it had to fulfill the DFSG in order to be
    considered.

    The exception this carves out allows us to call the new installer
    "official", but does not give users any guarantees beyond the old DSC#5, which is basically "you have to check all the licenses for yourself."

    We might want to have a commitment that goes further than that,
    e.g. have a minimum set of criteria for firmware as well, as a service
    to users.

    Yup, all of that makes sense to me.

    My inclination is to handle that outside of the Social Contract for a
    couple of reasons. One is that I think we may need to try a few different compromises and be adaptable to find the right policy, and while
    foundation documents are great for many things, encoding experiments isn't
    one of them since they're hard to change. And the other is that I suspect
    the policy is going to be complicated, or at least more complicated than
    the SC is now. There are a lot of different licenses and a lot of
    problems that come up and ideally we'd have a relatively comprehensive
    document laying out what we will and won't put in the installer.

    That's my rationale for making the SC relatively open-ended, even though
    it would, as worded, allow some serious regressions for users for the
    official media if we used the full scope of that additional exception.
    That said, this is definitely a choice, and I'll definitely consider
    alternate wording that would encode a more conservative choice if anyone
    has any suggestions. Maybe there's a good and fairly simple way to phrase
    this that I'd think is clearly better!

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Didier 'OdyX' Raboud@21:1/5 to All on Thu Sep 8 06:52:21 2022
    Thanks for that proposal Russ!

    While we're at updating the Social Contract's article 5, what about a more invasive cleanup, to reflect reality ?

    Le mercredi, 7 septembre 2022, 19.48:36 h CEST Russ Allbery a écrit :
    --------------------------------------------------------------------------

    This ballot option supersedes the Debian Social Contract (a foundation document) under point 4.1.5 of the constitution and thus requires a 3:1 majority.


    Instead of this:
    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that it adds the following sentence to the end of point 5:

    The Debian official media may include firmware that is otherwise not
    part of the Debian system to enable use of Debian with hardware that
    requires such firmware.

    What about this (which adds the non-free-firmware area, replaces
    "CD manufacturers" with "installation media providers", replaces "on their CD" with "on their installation media":

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that the point 5 reads as follows:

    5. Works that do not meet our free software standards
    We acknowledge that some of our users require the use of works that do
    not conform to the Debian Free Software Guidelines. We have created
    "contrib", "non-free" and "non-free-firmware" areas in our archive for
    these works. The packages in these areas are not part of the Debian
    system, although they have been configured for use with Debian. We
    encourage installation media providers to read the licenses of the
    packages in these areas and determine if they can distribute the
    packages on their installation medias. Thus, although non-free works are
    not a part of Debian, we support their use and provide infrastructure
    for non-free packages (such as our bug tracking system and mailing
    lists). The Debian official media may include firmware that is otherwise
    not part of the Debian system to enable use of Debian with hardware tha
    requires such firmware.

    The rest of your proposed draft reads excellent to me.
    --
    OdyX
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJ3k7rA0YCplkx4gZqcb6xg1jAWkFAmMZdQUACgkQqcb6xg1j AWmVVhAAvBd74KzyZNvmAfBlRT7QdYs2byVi2yYCCDQ65KjozoB4R0O+IhjCC61J /A02ZrfrXrHKPUHQErq7DVHuSaOkFU/R5F8ewZHr1fbcJKpGyZhoSrtosbTJQxj4 Y84LkwQLybxn54QtFww2+hnJ+4hM5gGJBOy6HVWdjhfEx62SeKgsAw3pMY4xoEfi 5I4dW4PCJF0/4bQ2uDIOidHSO2gnNI305ehblFacxOJ2i6MPvvcMqFlAFAnAFhon zeB9NJNuOhiIJqUtaoOQ1zliTYMV2pf2yAJzdpcsG74WZWC77prJ7+09F7G7LZpx rOMkocY71hUopGp1xli/UphKYQmCgVWVlEtzXqpZYZF9YPnVupAtkG4K4+hh0pTb 4SjDEkCbdXEqLWRLphVUgXT+Nf7DDFaTacTHGE8MLmWHxR+PeqpYNPaCmwQA4vTP iXSgj8TeV0LO2CrStcAMiTWVHgDeHgxYaxJynRLPp5Uol6rD2QFVFPSuFTui05tC 4e/rS0K6jHY3mUYN2CNkufUYBlUeK00H4pg7ydQohnRJrF9yWaDTLEbiEwEXx623 VmqzX80g/hTeR/+XeKbt5x0ryq+MnW6zaQ0XKTPQg50UvrdcixPHmXzYmTbWj002 45328b2sKf4TFzo9Mz+D0hmOxNZS/9Q1I5hUOeEMG6XMDS/x5WI=
    =0ZlU
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Didier 'OdyX' Raboud on Thu Sep 8 07:20:01 2022
    Didier 'OdyX' Raboud <odyx@debian.org> writes:

    Thanks for that proposal Russ!

    While we're at updating the Social Contract's article 5, what about a
    more invasive cleanup, to reflect reality ?

    [...]

    What about this (which adds the non-free-firmware area, replaces "CD manufacturers" with "installation media providers", replaces "on their
    CD" with "on their installation media":

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that the point 5
    reads as follows:

    5. Works that do not meet our free software standards
    We acknowledge that some of our users require the use of works that do >> not conform to the Debian Free Software Guidelines. We have created
    "contrib", "non-free" and "non-free-firmware" areas in our archive for >> these works. The packages in these areas are not part of the Debian
    system, although they have been configured for use with Debian. We
    encourage installation media providers to read the licenses of the
    packages in these areas and determine if they can distribute the
    packages on their installation medias. Thus, although non-free works are >> not a part of Debian, we support their use and provide infrastructure
    for non-free packages (such as our bug tracking system and mailing
    lists). The Debian official media may include firmware that is otherwise >> not part of the Debian system to enable use of Debian with hardware tha >> requires such firmware.

    With Steve's change and a few other tweaks to try to make this a bit more concise:

    5. Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created areas in our archive for these works. The packages in these
    areas are not part of the Debian system, although they have been
    configured for use with Debian. We encourage distributors of Debian
    to read the licenses of the packages in these areas and determine if
    they can distribute the packages on their media. Thus, although
    non-free works are not a part of Debian, we support their use and
    provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists). The Debian official media may
    include firmware that is otherwise not part of the Debian system to
    enable use of Debian with hardware tha requires such firmware.

    I do think this sounds more up-to-date, and getting rid of "CDs" does feel
    like an overdue edit. This would also resolve how to phrase the ballot
    option (although someone's going to ask for a diff). What does everyone
    else think about this?

    Going *way* out on a limb (and to be honest I'm leaning hard against
    proposing this because I think this level of change would require more
    than a week's worth of discussion), I think something like this that
    reorders and trims the section down would be even better:

    5. Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created areas in our archive for these works. These packages have
    been configured for use with Debian and we provide some
    infrastructure for them (such as our bug tracking system and mailing
    lists), but they are not part of the Debian system. We encourage
    distributors of Debian to read the licenses of the packages in these
    areas and determine if they can distribute these packages on their
    media. The Debian official media may include firmware from these
    areas that is otherwise not part of the Debian system to enable use
    of Debian with hardware that requires such firmware.

    This drops the "we support their use" statement which I think is a bit confusing; I believe the intention is that we, Debian Developers, support
    the non-free packages in the sense that we upload them and answer bug
    reports, but it could also be read as "we endorse their use," which we do
    not and don't really want to be saying. I think talking about
    infrastructure makes this clearer.

    But as mentioned, I think this is probably too big of a change for this
    point in the process. (I'll still throw it out there, though, in case
    there's overwhelming sentiment the other way.)

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Didier 'OdyX' Raboud@21:1/5 to All on Thu Sep 8 08:00:09 2022
    Le jeudi, 8 septembre 2022, 07.14:09 h CEST Russ Allbery a écrit :
    Didier 'OdyX' Raboud <odyx@debian.org> writes:
    Thanks for that proposal Russ!

    While we're at updating the Social Contract's article 5, what about a
    more invasive cleanup, to reflect reality ?

    [...]

    What about this (which adds the non-free-firmware area, replaces "CD manufacturers" with "installation media providers", replaces "on their

    CD" with "on their installation media":
    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that the point 5 >>
    reads as follows:
    5. Works that do not meet our free software standards
    We acknowledge that some of our users require the use of works that
    do
    not conform to the Debian Free Software Guidelines. We have created
    "contrib", "non-free" and "non-free-firmware" areas in our archive
    for
    these works. The packages in these areas are not part of the Debian
    system, although they have been configured for use with Debian. We
    encourage installation media providers to read the licenses of the
    packages in these areas and determine if they can distribute the
    packages on their installation medias. Thus, although non-free works >> are
    not a part of Debian, we support their use and provide infrastructure >> for non-free packages (such as our bug tracking system and mailing
    lists). The Debian official media may include firmware that is
    otherwise
    not part of the Debian system to enable use of Debian with hardware
    tha
    requires such firmware.

    With Steve's change and a few other tweaks to try to make this a bit more concise:

    5. Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created areas in our archive for these works. The packages in these
    areas are not part of the Debian system, although they have been
    configured for use with Debian. We encourage distributors of Debian
    to read the licenses of the packages in these areas and determine if
    they can distribute the packages on their media. Thus, although
    non-free works are not a part of Debian, we support their use and
    provide infrastructure for non-free packages (such as our bug
    tracking system and mailing lists). The Debian official media may
    include firmware that is otherwise not part of the Debian system to
    enable use of Debian with hardware tha requires such firmware.

    I do think this sounds more up-to-date, and getting rid of "CDs" does feel like an overdue edit. This would also resolve how to phrase the ballot option (although someone's going to ask for a diff). What does everyone
    else think about this?

    Yes. Yes. Yes.

    (Missing a "t" at the end of "tha*T* requires such firmware")

    Going *way* out on a limb (and to be honest I'm leaning hard against proposing this because I think this level of change would require more
    than a week's worth of discussion), I think something like this that
    reorders and trims the section down would be even better:

    5. Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created areas in our archive for these works. These packages have
    been configured for use with Debian and we provide some
    infrastructure for them (such as our bug tracking system and mailing
    lists), but they are not part of the Debian system. We encourage
    distributors of Debian to read the licenses of the packages in these
    areas and determine if they can distribute these packages on their
    media. The Debian official media may include firmware from these
    areas that is otherwise not part of the Debian system to enable use
    of Debian with hardware that requires such firmware.

    As-is (that is: "changing only SC5 with a 3:1 majority") seems to be one very simple way to express the change we (some of us) want. The "statement of the day" is a nice addition, but can risk being nitpicked-upon. I'd definitely second a ballot option that would propose just this.

    From my sparse reading of the discussion so far, it now seems clear that the SC needs amending; not doing so and finding convoluted ways to interpret its actual version risks creating more confusion and misunderstandings than it solves. And I think we need the courage to update our foundational documents when meaningful. Making official Debian Installer images with firmware seems like one of these important milestones; moments in which Debian-the-project needs to reflect what we Debian-the-people feel about these things.

    (And if we fail at finding the requested majorities to make these changes, maybe Debian is not the right project to provide these -with-firmware images from.)

    But as mentioned, I think this is probably too big of a change for this
    point in the process. (I'll still throw it out there, though, in case there's overwhelming sentiment the other way.)

    I disagree; this looks precisely like the change I think we should be making.

    --
    OdyX
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJ3k7rA0YCplkx4gZqcb6xg1jAWkFAmMZhOkACgkQqcb6xg1j AWmXJQ/+MsDMJk4QURMNEMBKFy0MME7xAWyQAw+6pifcqt14Did0TF2zq7OaZ9Jj AK8DS/3HRo8jsL8zJ5obkZMvhTCSc+OOo4/BkoOXPpNtK8oZ3O8+cM3AykXzfFc8 lC1A5F0bTiU3bYWUTUwUv+bLp+V9HBFxDk6g7quzVfdX8Ul6txwYm+1xwAiCcJS+ 5wgQVqM8uIc7Vk07P8A6xRlHkRot9+ECFkv9IAvx/cfHF2YXY+ZzHuF0wjUJSQZs QQ9uqKEDApyTLJdtTGfhFRpHDab3tqhK6k/fUADzcBzaWptAlaWctyKOqc0Czrwu P9bd1jERDr/i+kKJBuHcOyWdKWTF1xSLMOminLZ/+LVkhOJosdhboaBIVXrxr4O3 HBpcbmJwBH4UVBWeZSbVAa3P6u9R0owc1TJfSBkC2Dq3eqPsvU5EVkjCTVOr9D5R ef4tULVbuUwYDONwMjzOxKmE1zPifxsUlH9OKF9qRPX6Dc9tiRV2DJK4lHbmpvr/ o4A7EoAhfF2mOAb1kfjynH4sTVa8vk7DF+PRo0e/id07MbxzWzo2BEi3qzGwVMUO bHlQuMWJtA0oiWc7hDAoJ+zj70KwVeuuq4ypboTYFfAERr/pubBT5yY3sqrp8/0K KtWuaLooC0NLtr4n/hUDGLbiz8eWHsjTdfSaKXVJz8fT6D6oBhg=
    =20lt
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Thu Sep 8 09:20:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------kXdL67WHv8kRcw0iX4nWKmbH
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gOS84LzIyIDAwOjE0LCBSdXNzIEFsbGJlcnkgd3JvdGU6DQo+IFdpdGggU3RldmUncyBj aGFuZ2UgYW5kIGEgZmV3IG90aGVyIHR3ZWFrcyB0byB0cnkgdG8gbWFrZSB0aGlzIGEgYml0 IG1vcmUNCj4gY29uY2lzZToNCj4gDQo+ICAgICAgIDUuIFdvcmtzIHRoYXQgZG8gbm90IG1l ZXQgb3VyIGZyZWUgc29mdHdhcmUgc3RhbmRhcmRzDQo+IA0KPiAgICAgICBXZSBhY2tub3ds ZWRnZSB0aGF0IHNvbWUgb2Ygb3VyIHVzZXJzIHJlcXVpcmUgdGhlIHVzZSBvZiB3b3JrcyB0 aGF0DQo+ICAgICAgIGRvIG5vdCBjb25mb3JtIHRvIHRoZSBEZWJpYW4gRnJlZSBTb2Z0d2Fy ZSBHdWlkZWxpbmVzLiBXZSBoYXZlDQo+ICAgICAgIGNyZWF0ZWQgYXJlYXMgaW4gb3VyIGFy Y2hpdmUgZm9yIHRoZXNlIHdvcmtzLiBUaGUgcGFja2FnZXMgaW4gdGhlc2UNCj4gICAgICAg YXJlYXMgYXJlIG5vdCBwYXJ0IG9mIHRoZSBEZWJpYW4gc3lzdGVtLCBhbHRob3VnaCB0aGV5 IGhhdmUgYmVlbg0KPiAgICAgICBjb25maWd1cmVkIGZvciB1c2Ugd2l0aCBEZWJpYW4uIFdl IGVuY291cmFnZSBkaXN0cmlidXRvcnMgb2YgRGViaWFuDQo+ICAgICAgIHRvIHJlYWQgdGhl IGxpY2Vuc2VzIG9mIHRoZSBwYWNrYWdlcyBpbiB0aGVzZSBhcmVhcyBhbmQgZGV0ZXJtaW5l IGlmDQo+ICAgICAgIHRoZXkgY2FuIGRpc3RyaWJ1dGUgdGhlIHBhY2thZ2VzIG9uIHRoZWly IG1lZGlhLiBUaHVzLCBhbHRob3VnaA0KPiAgICAgICBub24tZnJlZSB3b3JrcyBhcmUgbm90 IGEgcGFydCBvZiBEZWJpYW4sIHdlIHN1cHBvcnQgdGhlaXIgdXNlIGFuZA0KPiAgICAgICBw cm92aWRlIGluZnJhc3RydWN0dXJlIGZvciBub24tZnJlZSBwYWNrYWdlcyAoc3VjaCBhcyBv dXIgYnVnDQo+ICAgICAgIHRyYWNraW5nIHN5c3RlbSBhbmQgbWFpbGluZyBsaXN0cykuIFRo ZSBEZWJpYW4gb2ZmaWNpYWwgbWVkaWEgbWF5DQo+ICAgICAgIGluY2x1ZGUgZmlybXdhcmUg dGhhdCBpcyBvdGhlcndpc2Ugbm90IHBhcnQgb2YgdGhlIERlYmlhbiBzeXN0ZW0gdG8NCj4g ICAgICAgZW5hYmxlIHVzZSBvZiBEZWJpYW4gd2l0aCBoYXJkd2FyZSB0aGEgcmVxdWlyZXMg c3VjaCBmaXJtd2FyZS4NCg0Kbml0OiB0eXBvICJ0aGEiIHNob3VsZCBiZSAidGhhdCINCg0K PiBJIGRvIHRoaW5rIHRoaXMgc291bmRzIG1vcmUgdXAtdG8tZGF0ZSwgYW5kIGdldHRpbmcg cmlkIG9mICJDRHMiIGRvZXMgZmVlbA0KPiBsaWtlIGFuIG92ZXJkdWUgZWRpdC4NCg0KWWVz Lg0KDQo+IFRoaXMgZHJvcHMgdGhlICJ3ZSBzdXBwb3J0IHRoZWlyIHVzZSIgc3RhdGVtZW50 IHdoaWNoIEkgdGhpbmsgaXMgYSBiaXQNCj4gY29uZnVzaW5nOyBJIGJlbGlldmUgdGhlIGlu dGVudGlvbiBpcyB0aGF0IHdlLCBEZWJpYW4gRGV2ZWxvcGVycywgc3VwcG9ydA0KPiB0aGUg bm9uLWZyZWUgcGFja2FnZXMgaW4gdGhlIHNlbnNlIHRoYXQgd2UgdXBsb2FkIHRoZW0gYW5k IGFuc3dlciBidWcNCj4gcmVwb3J0cywgYnV0IGl0IGNvdWxkIGFsc28gYmUgcmVhZCBhcyAi d2UgZW5kb3JzZSB0aGVpciB1c2UsIiB3aGljaCB3ZSBkbw0KPiBub3QgYW5kIGRvbid0IHJl YWxseSB3YW50IHRvIGJlIHNheWluZy4NCg0KWWVzLg0KDQpFaXRoZXIgc291bmRzIGdvb2Qg dG8gbWUuIEkgc2xpZ2h0bHkgcHJlZmVyIHRoZSBsYXR0ZXIsIGZvciB0aGUgcmVhc29uIA0K eW91IHNhaWQuDQoNCi0tIA0KUmljaGFyZA0K

    --------------kXdL67WHv8kRcw0iX4nWKmbH--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMZl04ACgkQ+HlhmcBF hs4atw//cDpmOj6xaQFAbMaI+GF3S/qr+9eCsFNwfh1I/ebXI51ttZuB3SL7JUjv /xNrznekgdXpnqEASbBAISCfX4OKmxvgwUXptkr4zGPOMfiyGyq0awlQ85UYHxCm lyW7B/9EY63aVsKI7/RzgFZYHm/uOOxuYHG90W199Rm8cTj0eLYapAeyJaTZIzP2 0pUzXTvHwKvNVqwll5Q7MvLSKjtGtd0o2G+GJ7oaf6HHVtcfsRuZK+Hcnr1c2XF5 Z88HmYUx75gmyyNSA2n0sZOtcvuu1dLn5oq3aAXLeeyUMQ157GJqJBLzCiktcjrO uHeRbu86U6RZdg+DyttUxZF81R5eL8gRI3wSmFRMvm3FMS32uJAtnH0uok0tG/KT wiG9p0VzB5X7NKTEAg0IT8WMgxLz4OjTkMzZYPKqmpG4CqI5jMF9EWSq6KOs1mvD ICmhM30/pRIt/NT76tNzKosrYCWT6iJPkMG64pxRIjdEYQ3HFMJLMcY06cMjvcuX 40Jw/Ae2eEjbMbOiSmrBEM890glJ9vnknq13XfjCXzwheRQPy9YqhNLKcZ4CV824 EGWAE3gbp1CEfefNG8r9u0R4iUngHXhR7Bk+RedoSXkd2GJkI9XaMdWea6TdDQYh q52UwUq+n9667CHRWHb+41/NDj4lJ4TvhvI7lxeMqvqVmfdPa6k=
    =Acjb
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Russ Allbery on Thu Sep 8 11:30:01 2022
    Russ Allbery <rra@debian.org> writes:

    Possible wording, which includes the existing option A verbatim:

    Thanks, I prefer this approach over Steve's initial proposal: it solves
    the problem that we would override a foundational document with a GR
    without the required 3:1 majority.

    I'm worried that if we publish only non-free installers, people will
    rightly be quite confused what the Debian project thinks about the
    meaning of the DSC/DFSG. I would personally believe that publishing
    non-free content as part of the Debian system will violate DSC/DFSG even
    if Steve's GR passed and were implemented: a 1:1 GR should not be
    sufficient to override the meaning of a foundational document.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    Like Steve's variant triggered Gunnar's modification to allow for both
    free and non-free installers to be published concurrently, what do you
    think about:

    1) Having two variants of your text -- one that replaces the free
    installer with a new non-free installer, and one that says we will
    publish both free and non-free installers?

    2) Remove the paragraph, effectively making your proposal orthogonal
    to the decision which images are published? This could be up to the
    individual developers to decide. Some people may want to work on a
    free installer, and some people may want to work on a non-free
    installer, and there doesn't necessarily have to be a conflict between
    those two interests.

    I believe the Debian project is permitted to publish non-free installers
    under the current DSC/DFSG (which it actually is doing today; just
    hidden), but according to the DSC it is not part of the Debian system.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYxm15BQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFot34AP96vMz1sBKtIjgUS0FQkLzrH6VzFuOU muNTPEt7O7OTcgD+K4oiRelXGW1b7EW+Z13II4rq1ARx7TzOS9m6yEJdzQI=
    =nBTG
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Phil Morrell@21:1/5 to Didier 'OdyX' Raboud on Thu Sep 8 11:30:01 2022
    On Thu, Sep 08, 2022 at 08:00:09AM +0200, Didier 'OdyX' Raboud wrote:
    Le jeudi, 8 septembre 2022, 07.14:09 h CEST Russ Allbery a écrit :
    Didier 'OdyX' Raboud <odyx@debian.org> writes:
    While we're at updating the Social Contract's article 5, what about a more invasive cleanup, to reflect reality ?

    Going *way* out on a limb (and to be honest I'm leaning hard against proposing this because I think this level of change would require more
    than a week's worth of discussion)

    5. Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that
    do not conform to the Debian Free Software Guidelines. We have
    created areas in our archive for these works. These packages have
    been configured for use with Debian and we provide some
    infrastructure for them (such as our bug tracking system and mailing
    lists), but they are not part of the Debian system. We encourage
    distributors of Debian to read the licenses of the packages in these
    areas and determine if they can distribute these packages on their
    media. The Debian official media may include firmware from these
    areas that is otherwise not part of the Debian system to enable use
    of Debian with hardware that requires such firmware.

    As-is (that is: "changing only SC5 with a 3:1 majority") seems to be one very
    simple way to express the change we (some of us) want. The "statement of the day" is a nice addition, but can risk being nitpicked-upon. I'd definitely second a ballot option that would propose just this.

    In that spirit, some more wording suggestions and justification below.

    5. Works that do not meet our free software standards

    We acknowledge that our users may require the use of works that do
    not conform to the Debian Free Software Guidelines. Such packages
    are not part of the Debian system, but we provide the enabling
    infrastructure as a convenience to our users. This includes the bug
    tracking system, installation media, mailing lists and separate
    archive areas.

    * "some of" implies a minority, but the GR was raised due to a lack
    of available new hardware meeting this except via ROM
    * "configured for use" always seemed like strange wording to me
    * "enabling" rather than supporting to avoid endorsing
    * "convenience to our users" shows up in some Disclaimers
    * "separate" applies to the archive areas, but not the install media?
    * "archive areas" to allow e.g. renaming contrib to non-free-depends
    * by mentioning installation media as infrastructure, shipping it
    ourselves with firmware, it becomes superfluous to "encourage" others
    to follow our recommendation in our own Social Contract (it's my
    understanding that was there back in the day so CDs wouldn't just
    limit to main out of paranoid safety, doing a disservice to users)
    * focussed on being short rather than mentioning every consequence -
    it's supposed to be a guiding mission statement, not Policy

    I'd like to include something around "otherwise meets all our other high standards" and "anything including these works will always remain
    clearly identified" (like non-free Disclaimer, sadly our ISO needs to
    include non-free firmware etc.) but I couldn't find a good wording.

    From my sparse reading of the discussion so far, it now seems clear that the SC needs amending; not doing so and finding convoluted ways to interpret its actual version risks creating more confusion and misunderstandings than it solves.

    Having contributed to some of those convoluted interpretations, I think
    you're right that there's enough support for change. I haven't seen much
    in the way of actual objections to the Images Team intention beyond the existence of Proposal D and complaining it's a breach of the SC.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYxm1lQAKCRDbymUJHySO bM1dAQC16QAt4A/4bflz3DmlBUuQ0wPm/4ttkF4C+PUOrODWIAD/eOvpIqr3hmsL LtIcmJtft9ROk5JOyvvoktf8UcrFYwE=
    =f33g
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Phil Morrell on Thu Sep 8 12:00:01 2022
    On Thu, Sep 08, 2022 at 10:27:52AM +0100, Phil Morrell wrote:
    On Thu, Sep 08, 2022 at 08:00:09AM +0200, Didier 'OdyX' Raboud wrote:
    Le jeudi, 8 septembre 2022, 07.14:09 h CEST Russ Allbery a écrit :
    Didier 'OdyX' Raboud <odyx@debian.org> writes:
    While we're at updating the Social Contract's article 5, what about a
    more invasive cleanup, to reflect reality ?

    Going *way* out on a limb (and to be honest I'm leaning hard against
    proposing this because I think this level of change would require more
    than a week's worth of discussion)

    5. Works that do not meet our free software standards

    We acknowledge that some of our users require the use of works that >> > do not conform to the Debian Free Software Guidelines. We have
    created areas in our archive for these works. These packages have
    been configured for use with Debian and we provide some
    infrastructure for them (such as our bug tracking system and mailing >> > lists), but they are not part of the Debian system. We encourage
    distributors of Debian to read the licenses of the packages in these >> > areas and determine if they can distribute these packages on their
    media. The Debian official media may include firmware from these
    areas that is otherwise not part of the Debian system to enable use >> > of Debian with hardware that requires such firmware.

    As-is (that is: "changing only SC5 with a 3:1 majority") seems to be one very
    simple way to express the change we (some of us) want. The "statement of the >> day" is a nice addition, but can risk being nitpicked-upon. I'd definitely >> second a ballot option that would propose just this.

    In that spirit, some more wording suggestions and justification below.

    5. Works that do not meet our free software standards

    We acknowledge that our users may require the use of works that do
    not conform to the Debian Free Software Guidelines. Such packages
    are not part of the Debian system, but we provide the enabling
    infrastructure as a convenience to our users. This includes the bug
    tracking system, installation media, mailing lists and separate
    archive areas.

    That looks good to me - concise and clear. Thanks!

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com Dance like no one's watching. Encrypt like everyone is.
    - @torproject

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Didier 'OdyX' Raboud on Thu Sep 8 12:20:01 2022
    Didier 'OdyX' Raboud <odyx@debian.org> writes:

    ...
    But as mentioned, I think this is probably too big of a change for this
    point in the process. (I'll still throw it out there, though, in case
    there's overwhelming sentiment the other way.)

    I disagree; this looks precisely like the change I think we should be making.

    Likewise -- I think dropping the "we support ..." language makes the
    meaning that we were always trying to convey much more obvious.

    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmMZwH8ACgkQ0EujoAEl 1cCWVw/9HQ+UE4cRIdcwnbelWw5D62uOxu6RHH+itIi35LtbpQeNOzjX+44nMCRL +trAMo+Dj2cbC635LN+YpVsESpNkfRr9NHPxOCRhgdGKUghve3MkZjPp/e/DsEAq SOdrWonFagarzG3vhn1H6lKzzCOR4mUHj3hjYXYHPfb+DIWbCeyrLfT2K7GM2V5z 2MyYlaqzZUFDhlnwettr2jzuZHKjenMu7wcGvdz31gumF36az1VLBkWEOr9gOWbj Zwwmo8aS24uXp+PiSJvHe7q5RSihv/Fl/mCVcnd2QXNQei3anyE4WftptCH6Nfz+ Kqm6wLOCRYLN2SUgAJrbJIVfXVR9iUzKIIpUOEPDe3YjToC7lK0fOiDUki2tFQcG er+IL7+D7l6UxacRoqysfYmFjXp6BFuwszugQbXfk3adhgMMa27riz3rBbrVJz4f 5oHX1OyWYb9lld7D8VUYwqHqpNl/iFB5WMP9tN6GT/iI7fOPHTweDVa1EP7IAhHp 1d+8iJjcTXJV7qqfiZ0Cq7dXbV+cJnjwwQAAiucvg0bY5CERfgyN8kVWkGKXiykv PB8eCYQcwK6rGrhug60n5LPlEGv1b99nXIIMA8Jn0TWFTW+lG0pxxpT6PnOH1kJS ouqEnGMdO/C//KF
  • From Jonathan Carter (highvoltage)@21:1/5 to Phil Morrell on Thu Sep 8 12:20:01 2022
    On 2022/09/08 11:27, Phil Morrell wrote:
    5. Works that do not meet our free software standards

    We acknowledge that our users may require the use of works that do
    not conform to the Debian Free Software Guidelines. Such packages
    are not part of the Debian system, but we provide the enabling
    infrastructure as a convenience to our users. This includes the bug
    tracking system, installation media, mailing lists and separate
    archive areas.

    I liked Russ's suggestion a lot, and also agreed with your comments (I
    had similar thoughts when reading it initially).

    I do think some parts are important to include though, how about:

    """
    5. Works that do not meet our free software standards

    We acknowledge that our users may require the use of works that do not
    conform to the Debian Free Software Guidelines. Such packages are not
    formally part of the Debian system, bug fixes and security updates
    depend entirely on their upstream developers. We provide the enabling infrastructure as a convenience to our users. This includes the bug
    tracking system, installation media, mailing lists and separate archive
    areas. We encourage software vendors who make use of non-free packages
    to carefully read the licenses of these packages to determine whether
    they can distribute it on their media or products.
    """

    An added goal I'm trying to achieve with this change is to explain some practical consequences of redistributing non-free software. It's not
    like we provide the non-free archives and it's *wink* *wink* kind of
    official because Debian people provide it but it's not, instead it's the
    case that everything that makes Debian great really doesn't apply to
    these packages.

    Also, I think a change like this is fine for this GR, but if it
    complicates things, then I think it's also worth while to tackle some
    finer points of the SC/DFSG in a follow-up GR really soon.

    -Jonathan

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Russ Allbery on Thu Sep 8 12:50:01 2022
    On Wed, Sep 07, 2022 at 10:48:36AM -0700, Russ Allbery wrote:
    Possible wording, which includes the existing option A verbatim:

    --------------------------------------------------------------------------

    This ballot option supersedes the Debian Social Contract (a foundation document) under point 4.1.5 of the constitution and thus requires a 3:1 majority.

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that it adds the following sentence to the end of point 5:

    The Debian official media may include firmware that is otherwise not
    part of the Debian system to enable use of Debian with hardware that
    requires such firmware.

    The Debian Project also makes the following statement on an issue of the
    day:

    We will include non-free firmware packages from the "non-free-firmware" section of the Debian archive on our official media (installer images and live images). The included firmware binaries will normally be enabled by default where the system determines that they are required, but where possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).

    When the installer/live system is running we will provide information to
    the user about what firmware has been loaded (both free and non-free), and
    we will also store that information on the target system such that users
    will be able to find it later. Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file. Our users should receive security updates and important fixes to firmware binaries just like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    seconded. I'll also second the revised version of this. (I just have
    refrained from doing so as its not clear to me yet whether a 'final'
    one has emerged.)


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾â â¢ â ’⠀⣿⡠holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    "It' easier to fool people than to convince them they have been fooled."
    (Mark Twain)

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmMZxpUACgkQCRq4Vgaa qhzXXQ/6Apju6uTvfSui0U3DoBWvWpEbRcZejriPEhi2uOXD5Nbg7NdG3hCg89dE TnW3kYLvXtsJd2aj+kGYBvwVtzGnCoH1ce7QlfYU05+/KplK2GzDbEmW0WI2+wUm Gfi7pvOE3kII02C12McmLR3IJVPOF1xYbMJhPVt2AJtOfiEVqrbnurOJL0qCG9ca gqp3MVEzKBo8T2VhtKj899DAKjSRYH0LETApeFu5PXAydpCHVWv0j4G9uQT8sKuF BdAipBpHKymoy+EiYtCceYczvlDufV0gJ4t8eIY1CPHjOVPqMUMlCRbJL9Q1aX3S cXqUjM4+iJn/8+KWP31e7vQXCuk/9xpGSmX4KPRDstp72YcpqzHIRdWTLyAombFN Px2syBfWagSnO8C3SOawF3+aoi1UmhCG5uM4pmvMo7JCB+qlG1bywVJNgj0MVLgP YYs9jCMRUhv5wOk0Lr8rpjUWf5/i9JBZ7dcR5zBE/i8edspKxZEyeS8AxMcQGB73 h9b8PYa/fK4kYtLj5yQDaaBWqmHFoGWx20Jkc2pR6d/5R+ajFx0qb22PRMaty2f/ J0ITFFcC/VFrct0HbW1HehQ4/
  • From Jonas Smedegaard@21:1/5 to All on Thu Sep 8 13:10:02 2022
    Quoting Simon Josefsson (2022-09-08 11:29:07)
    Russ Allbery <rra@debian.org> writes:

    Possible wording, which includes the existing option A verbatim:

    Thanks, I prefer this approach over Steve's initial proposal: it solves
    the problem that we would override a foundational document with a GR
    without the required 3:1 majority.

    I'm worried that if we publish only non-free installers, people will
    rightly be quite confused what the Debian project thinks about the
    meaning of the DSC/DFSG. I would personally believe that publishing
    non-free content as part of the Debian system will violate DSC/DFSG even
    if Steve's GR passed and were implemented: a 1:1 GR should not be
    sufficient to override the meaning of a foundational document.

    We will publish these images as official Debian media, replacing the current media sets that do not include non-free firmware packages.

    Like Steve's variant triggered Gunnar's modification to allow for both
    free and non-free installers to be published concurrently, what do you
    think about:

    1) Having two variants of your text -- one that replaces the free
    installer with a new non-free installer, and one that says we will
    publish both free and non-free installers?

    2) Remove the paragraph, effectively making your proposal orthogonal
    to the decision which images are published? This could be up to the
    individual developers to decide. Some people may want to work on a
    free installer, and some people may want to work on a non-free
    installer, and there doesn't necessarily have to be a conflict between
    those two interests.

    I believe the Debian project is permitted to publish non-free installers under the current DSC/DFSG (which it actually is doing today; just
    hidden), but according to the DSC it is not part of the Debian system.

    /Simon

    FWIW, I fully agree with Simon Josefsson on the above.


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============@29307354496132555=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmMZzL0ACgkQLHwxRsGg ASEPbxAAiyaIZaZX4X8PoZ40p/uK+fP2rQXiudsTX2Pu2i3lS4QHz70IZzjvBcAm JYijJi4qoPmgxxT74r8hzCIHwwBPe1DyGdxlX/vR8RQp0giopM+l6cPCmh+a1mw8 Yyf8ApW3F9fKe2pJZO0gqCKcbJhbTCA/aCqgD/yG32ZLUWpvwBwcJOUM7X6Ah9Pf qBHz3C0iqhkRBIrW2FtNq8MjJ+7otTekolLCwuedO0HrfwDziG3ZFeI7MoWN+8s+ acWAqqCx7J5HeOjL8+i7Kd2uXGBvCJuwjArn1TrXsopojrV4K27mBFtNVmBsdHNO aKH/8C6m4KaSL8Z/KY06mNJeG9HkrTMmEAQrKKIhesbbVcknG2JiuAZ84O/CaLNJ dH3/+C5XorDIm6CAsFen6bd5baWhGIinLMXUlBm3Xq8FGf9g0kO90Zqn69nOrFNP l4UOEsagvMQO6lsfmR/iiqFPmfA3uY8IoHR7ZCkoEiKr0O3hHFr7utU3Dh8BVWnN Mt96hp4rDqaZ5oAZ0
  • From Andrey Rahmatullin@21:1/5 to Simon Josefsson on Thu Sep 8 17:50:01 2022
    On Thu, Sep 08, 2022 at 05:22:58PM +0200, Simon Josefsson wrote:
    The reason I'm in favor of changing the SC is not that I believe it to
    be a good thing, but that I think we need to stay relevant for running
    on actual hardware, and changing the SC now is the only way to do so
    given that the actual hardware is non-free.

    What has changed making us fear Debian's relevancy,
    More hardware is now shipped without soldered firmware.
    And more distros are actually usable on such hardware unlike Debian.

    and is compromising on our ideals the best way to deal with that?
    We are already compromising on our ideals, see SC4, SC5 and what does FSF
    think about that.

    I recall the same situation with hardware requiring non-free software
    since I started with computers and free software back in the mid 1990's.
    It wasn't the same, but sure, keeping usability on the 1995 level is
    directly harmful to Debian's relevancy.
    You may be also confusing firmware and drivers.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmMaDYMtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh R08QAIlVnXNSyKvTBvpSyQVjHF7JXg7ktUcTcNe2UPohjzl6wBp8T8s3ity3i9vh shzt83+0eXxivCZqYWdOkvSS7rCgrFxjy9IRCOyuquXYGzs4pHKgLKlC+wYoawWi jWamzZRwS8D5nDvA7oqM2hN2M2PjNbqy+OjYSj+AaTEEXKxtBciZUWWh7VV2uGx6 cmoZsoxT1C3apjQuhdWw66pLT6JH9q+qtxNlmeqCov8aQ2cM2gnAJ4SiDZ9E2Dzh SOe8l3oczMkjmgeWVocZN/INxHpYtE/SmorwSe7whpi1fU1koi0oNd4Lxrhb6E2h e0WP4kB8OmyORonvzqtrvqyT8x2E3e4rY8N9lHiARJeXy0mJwNYP7ETFdTbAL0ur Tomkn8OBfLu5pmcCIkVfyQO/50O3vT2kdQ5Wh80JJNXg+GV05HXnonNv8KHitePe clQfnPQxRvbvPMRfdhatAXcKuRtzXY0GNFVuf2XszC1HcmusjBuLqAsOeYkm7JKk PBAQbEG//YxUv8Xnuw6TiQn/u62DfU/e1vzevHrgGJX0n+c3Z0SfC1evRjURdJw6 OI9MvDyymd+U6OZjCN9iu6tBweWXyQ5hxsClWZ6a6Wi1ETa3SeKwmewQxC8YsqJN J7vXGhBb140HVEBGlbXc8oBCiY+/UbqxHm0502+q7KqCnZaq
    =mID2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Simon Richter on Thu Sep 8 17:30:01 2022
    Simon Richter <sjr@debian.org> writes:

    The reason I'm in favor of changing the SC is not that I believe it to
    be a good thing, but that I think we need to stay relevant for running
    on actual hardware, and changing the SC now is the only way to do so
    given that the actual hardware is non-free.

    What has changed making us fear Debian's relevancy, and is compromising
    on our ideals the best way to deal with that?

    I recall the same situation with hardware requiring non-free software
    since I started with computers and free software back in the mid 1990's.
    The challenge will continue be the same as long as there is proprietary software. The amount of hardware compatible with free software is
    enourmously larger today than it was back then. I don't see that Debian
    or other free software projects having become less relevant over the
    years. In fact, I perceive sticking to these principles (while offering
    high quality products and processes) has been instrumental to shift the proprietary software industry our way. People will continue to talk bad
    about free software, and promote proprietary software, but I am hoping
    Debian will be a factor against that.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYxoI0hQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdForLxAQDHrGi5HIhOChXsLZAZGu5w7CMm9fUg WH0Y0pUmgj3SwAEAt8dYNBRn7DSOI9yClwEv/Lcqn4RWXhUT24PwuQ4i9wU=K9Ad
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rahmatullin@21:1/5 to Simon Richter on Thu Sep 8 17:40:01 2022
    On Thu, Sep 08, 2022 at 04:45:50PM +0200, Simon Richter wrote:
    As-is (that is: "changing only SC5 with a 3:1 majority") seems to be one very
    simple way to express the change we (some of us) want.

    It's the change we need to do in order to be consistent, so "want" is a pretty strong word here.

    It is a marked step back from our principles and will be perceived as such, and it will also be a disservice to our users if we don't at the same time start lobbying harder for free, user-controlled computing infrastructure, because ultimately the future of free software hinges on whether there can
    be another generation of tinkerers, or if they will be locked out and relegated to working for free to add value to proprietary offerings.
    Again, this assumes the firmware problems only exist when the said
    firmware is loadable, which is wrong.
    Lobbying for free, user-controlled hardware shouldn't depend on actual user-perceived installation problems if it's about ideology.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmMaDB4tFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh RdEP/jsljOcrdN+wVmLZcvdOWNUdo1LGBk4ZNkqfZqUeFjbk1MScBFjXol3Ek7pz 4Wxy2+iBO/E1qFJEqUsvWSD9uaKPxBWGJXIo15sfoWX1GzVcc+vqr3bH4MQz4f46 lXbUW9ZWKB5xpElEOdl+PhR+2h0rDwlyc6pY/5kmlM4cpiI1vMca+fggjM86/eoe euoRJqFUpSxZ/WkDZ9KhMTdggcBS14v/rTBFeN30BLEbB/7KfgmIqosvFH/QW132 OQOmTso0P6oGTDUBGf9o8Z6NwPs5/dCMp/s44fmv3K0deZweYEa7EA+k+Oy6aLDw b03Lw7AQS5/ODmxgySvBFPivzbg15eybYcHqd31qHMuOpNLRf6ohSk/dwxAXy6QA iXNTYyWoEjC+z1YewUHkXx8H0VK4x3zrBhKvP/KNywstB5DXOh0Xi4YRTSxvnlr8 jsN9mEHY3akXBoKmi3xvmwff5u8Eb0IGo+5o5SR6xH84evSk9YH/C5ykR8eBJ25x xl/1njuIdZFsWNVxC5XQuFzRY9bLVGD8L5zoUiFeeDDDtvrUdeIESyv/5Rnm3Oh9 XHtF6lNpMShgkprzn8GfdYi2g/qThXU3mDMRLk2Fp4aQbesjyMPGs3QyQCNOMpi2 jYK4lH4CchxhiotSDO1mKV58UU+aB2lff9RiXn1HpTu/Tjt3
    =XuCZ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Simon Josefsson on Thu Sep 8 17:50:01 2022
    On Thu, Sep 08, 2022 at 05:22:58PM +0200, Simon Josefsson wrote:
    Simon Richter <sjr@debian.org> writes:

    The reason I'm in favor of changing the SC is not that I believe it to
    be a good thing, but that I think we need to stay relevant for running
    on actual hardware, and changing the SC now is the only way to do so
    given that the actual hardware is non-free.

    What has changed making us fear Debian's relevancy, and is compromising
    on our ideals the best way to deal with that?

    I recall the same situation with hardware requiring non-free software
    since I started with computers and free software back in the mid 1990's.
    The challenge will continue be the same as long as there is proprietary >software. The amount of hardware compatible with free software is >enourmously larger today than it was back then. I don't see that Debian
    or other free software projects having become less relevant over the
    years. In fact, I perceive sticking to these principles (while offering
    high quality products and processes) has been instrumental to shift the >proprietary software industry our way. People will continue to talk bad >about free software, and promote proprietary software, but I am hoping
    Debian will be a factor against that.

    You're missing the point. Debian will *still* be producing Free
    Software. We're talking about enabling people to *use* that Free
    Software on the computers they already *have*, not some idealised Free
    Software compatible computers that barely exist today. It's just like
    the FSF providing support to users wanting to run software on top of proprietary OSes back in the day.

    If new users cannot sensibly install and use our Free Software on the
    computers they have, they'll go elsewhere. We won't get the
    opportunity to educate them about the benefits of Debian and Free
    Software if they've already discarded our installation media and moved
    on. We don't get new users, we don't get new developers.

    None of us *like* this situation, but we have a pragmatic solution.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com 'There is some grim amusement in watching Pence try to run the typical
    "politician in the middle of a natural disaster" playbook, however
    incompetently, while Trump scribbles all over it in crayon and eats some
    of the pages.' -- Russ Allbery

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMaDLoACgkQWHl5VzRC aE709xAAikhEYCFZMW5hKs9T/fLFUkG3QtJ7ZHp/YTiSmRj2i60lcwNdaKJaQMv4 LQXIPPfq8l54H4UbF6uE9H9c7ytFwgz00d/MjOvnCX/inQWHF/Upu1KY4rgHLAb2 ocmedjiiQTyZgKdIhpJx3uUAPB7QVxfOuy0MxVaho39ipV+blz1YYDlqkBuWbKSi 3cZT0XEBW6J2OgYXNJsaN1Koszi0oMk8lalI314uNndIdU8DyzFhGfOAHGj39rfi kpqE3ypJLGlED7326uL/LKJnyIkEo0Jv2uMlr0TXDZsFMAKuWp4ToOE1UCe9jY7d p+qBaBW7DBRVH7P/pVuOtba1kshKYAS1hBXLlTr4IWZKh7Wjo4Dc+Sne4ZSK+v3P nfpm8ASd0dZhu0jzggx+4oTz0Lw446G0ZVP9bDUzfGbQznm6fxOZ7LHqqUJAP1pl ijasurgsXm6IZZt1hAmpcQA/8e1grWXLmi6GzZUsLZcHUVxRwVm3hHwswoxAMfCo yjEY/y9TMJP6ETw89ywtdDvVdYnma6/WwUupadPMAFVoKEvWjGfsG3mezGP
  • From Russ Allbery@21:1/5 to jcc@debian.org on Fri Sep 9 02:00:01 2022
    "Jonathan Carter (highvoltage)" <jcc@debian.org> writes:

    I do think some parts are important to include though, how about:

    """
    5. Works that do not meet our free software standards

    We acknowledge that our users may require the use of works that do not conform to the Debian Free Software Guidelines. Such packages are not formally part of the Debian system, bug fixes and security updates depend

    (Noting mostly for my future self: I'd use a semicolon here instead of a comma.)

    entirely on their upstream developers. We provide the enabling
    infrastructure as a convenience to our users. This includes the bug
    tracking system, installation media, mailing lists and separate archive areas. We encourage software vendors who make use of non-free packages
    to carefully read the licenses of these packages to determine whether they can distribute it on their media or products.
    """

    An added goal I'm trying to achieve with this change is to explain some practical consequences of redistributing non-free software. It's not
    like we provide the non-free archives and it's *wink* *wink* kind of
    official because Debian people provide it but it's not, instead it's the
    case that everything that makes Debian great really doesn't apply to
    these packages.

    Yup, agreed. I like those changes.

    Also, I think a change like this is fine for this GR, but if it
    complicates things, then I think it's also worth while to tackle some
    finer points of the SC/DFSG in a follow-up GR really soon.

    The part of me that likes to do code refactorings and maintenance releases
    kind of wants to do a wording cleanup GR yearly or so, just to deal with ambiguous language and obsolete things like "CDs," but the rest of the
    project may find that annoying. :)

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Steve McIntyre on Fri Sep 9 02:00:01 2022
    Steve McIntyre <steve@einval.com> writes:
    On Thu, Sep 08, 2022 at 10:27:52AM +0100, Phil Morrell wrote:
    On Thu, Sep 08, 2022 at 08:00:09AM +0200, Didier 'OdyX' Raboud wrote:

    As-is (that is: "changing only SC5 with a 3:1 majority") seems to be
    one very simple way to express the change we (some of us) want. The
    "statement of the day" is a nice addition, but can risk being
    nitpicked-upon. I'd definitely second a ballot option that would
    propose just this.

    In that spirit, some more wording suggestions and justification below.

    5. Works that do not meet our free software standards

    We acknowledge that our users may require the use of works that do
    not conform to the Debian Free Software Guidelines. Such packages
    are not part of the Debian system, but we provide the enabling
    infrastructure as a convenience to our users. This includes the bug
    tracking system, installation media, mailing lists and separate
    archive areas.

    Yes, I think this is even better if we're interested in going for a more complete rework of that point.

    That looks good to me - concise and clear. Thanks!

    Steve, what do you think about the suggestion above that we have a ballot option that only changes the SC and doesn't issue a statement on an issue
    of the day, and thus doesn't include the text of your proposal? I'm
    worried that may feel like the project isn't providing enough guidance or
    a clear enough decision, but I'm not sure if that's true.

    The way I would read such a result is that the project leaves it up to the installer team whether to include firmware or not, and whether to have
    more than one installer, and I wasn't sure if that achieved what you
    wanted when starting this GR.

    I generally lean towards shorter GRs being better and leaving most
    decisions to the relevant team, but only if that works for the relevant
    team.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Jonathan Carter on Fri Sep 9 05:50:01 2022
    On Thu, 2022-09-08 at 11:55 +0200, Jonathan Carter wrote:

    Such packages are not formally part of the Debian system, bug fixes
    and security updates depend entirely on their upstream developers.
    ...
    An added goal I'm trying to achieve with this change is to explain some practical consequences of redistributing non-free software. It's not
    like we provide the non-free archives and it's *wink* *wink* kind of official because Debian people provide it but it's not, instead it's the case that everything that makes Debian great really doesn't apply to
    these packages.

    This claim that non-free isn't part of Debian has always made me
    slightly uncomfortable, since never appeared to be true to me, so I
    feel like we should remove it and replace it with something more clear.
    Your version goes part of the way there.

    We encourage software vendors who make use of non-free packages
    to carefully read the licenses of these packages to determine whether
    they can distribute it on their media or products.

    This vendor sentence seems like a subset of what we should warn about
    though, there is software in non-free that bans commercial use, so not
    just redistributors have to worry about it, but plain users too.


    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMatcAACgkQMRa6Xp/6 aaOhYhAAtSG+0EiYvYE86SvOHNR+5RS4iBlt9JHdjbQR6rPiIfKqS3IponLGeN7q 5JCG23MVV3fkprCcUUfWbY2lFnZ29ydzi9Gge9WGnneDXjNo+BT2wxpR3MwEorUM 4Ii5Bd91xPNqSdb6NzJqIgkxcM+CnEWjXsvYZU7NMM3nT0bKtbgig99yL8kdMq34 52QLSIcpPcaGZ7mAYmdaUkta+6trI1my8ecGmTjdrIn3fxYYB/L0sXCp1IWe5rMF nA9JoHbZ8WlDzh6l9HFkWZ2Hkf23O/Rato1LrQgxZSikck0so5zGoaJUDhMBKqDJ eR5ANkDn5E44zjvhXNeQHIxhtFR91qppoNndtoP36Wbh8svyxGAAvUcsPuMNemVy 4C3wsu5ElmrSbFjs3wfpLcJghJPWwdTXazCxIy+583jnRFNRt66N3lHSxB0SCnCt 0v0IdFtyp7iq8bOFpolEr0Y4UyFlHRCmOkGz5bfeKZnB7H4OyzllAMHSowMP4/B2 3lokYHqmnbhweUaGXIP7vTyHY3xIEzhrieBrkHXb5f314w8C2zlF6v+CDrMBN58t QOcV58EKhYS3g7381gVnu/OhVpoOgvH4Ch6x4Udp1YmiwswHIjbALtb43O8bEyWK l5hZHySSAj0vFEmdNGxUxuUBceMAtsSqonkoJY9cN1n8JhuY8LA=
    =mOa2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rahmatullin@21:1/5 to Simon Josefsson on Fri Sep 9 09:50:01 2022
    On Fri, Sep 09, 2022 at 09:16:48AM +0200, Simon Josefsson wrote:
    With your proposal, Debian 'main' would still consists of free content,
    but to practically install and run any of it, we and our users would
    have to download non-free content.
    So just like now.


    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmMa7fEtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh 1egQAJnWXjtBTJTlBZvyppqQg1eALllrVNO2mperbezKqGoPs3eVEuU5dTObyon9 TeD4TO7HAdcxHCaswyY2uKPw04HJvwLIETe+Yby4IXZYMFA7mdEi1Erz5tNB4kRZ RbMtH/PVCPlmSHf48j9dJhTCAp94DhiyCnwwwcRIuBpjjgq3peyRmx22J5iI8iLr EOh1nQorr9pMOy8DXWEU7xTMIH6tMkghTULDZ0FXxnRVCSPCRdZuIccrzGwTjwBG LR7C0t1d++aEFTUYFRHSAuFsgZEL8+b5gnUMEAcJSRF4qs6nqLkJAp4crBni3m5N VAy7YLI7UOA5GDTjlTPtL8COOWDIkLjV88vPteuq3a93gShJHNNO5ORWgedkVzOk KNheq8n2/a5d023fiF5tS6L5cEGIADI9UfgyDF5fNiN8m6EgynLpUHOnHePN37qG W3GcThj9dNaPFtmtKYmd345E8LyOHUlVU03wlfISAquq5XFb156uFnEr99CbHTHv hx2DCNh0aGOKrn6AX75/oL/4tg/xZkvHbP5E60oSRnVTuTWqYQPdpvFucRvHCzom tK7t5anvCOsZL4MYOew8cl6etlNcmAzet65UtmWv6x3SG6ZAGsR3JZOiWvEDDsQn gdU+ThJ2qOlG+lcqNOODKE+2BJRYF4JQtfWeRVOe6LXBy2je
    =ztnX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Steve McIntyre on Fri Sep 9 09:20:01 2022
    Steve McIntyre <steve@einval.com> writes:

    On Thu, Sep 08, 2022 at 05:22:58PM +0200, Simon Josefsson wrote:
    Simon Richter <sjr@debian.org> writes:

    The reason I'm in favor of changing the SC is not that I believe it to
    be a good thing, but that I think we need to stay relevant for running
    on actual hardware, and changing the SC now is the only way to do so
    given that the actual hardware is non-free.

    What has changed making us fear Debian's relevancy, and is compromising
    on our ideals the best way to deal with that?

    I recall the same situation with hardware requiring non-free software
    since I started with computers and free software back in the mid 1990's. >>The challenge will continue be the same as long as there is proprietary >>software. The amount of hardware compatible with free software is >>enourmously larger today than it was back then. I don't see that Debian
    or other free software projects having become less relevant over the
    years. In fact, I perceive sticking to these principles (while offering >>high quality products and processes) has been instrumental to shift the >>proprietary software industry our way. People will continue to talk bad >>about free software, and promote proprietary software, but I am hoping >>Debian will be a factor against that.

    You're missing the point. Debian will *still* be producing Free
    Software. We're talking about enabling people to *use* that Free
    Software on the computers they already *have*, not some idealised Free Software compatible computers that barely exist today. It's just like
    the FSF providing support to users wanting to run software on top of proprietary OSes back in the day.

    If new users cannot sensibly install and use our Free Software on the computers they have, they'll go elsewhere. We won't get the
    opportunity to educate them about the benefits of Debian and Free
    Software if they've already discarded our installation media and moved
    on. We don't get new users, we don't get new developers.

    None of us *like* this situation, but we have a pragmatic solution.

    I'm trying to understand, but as far as I can tell so far the problem
    isn't that I'm missing the point, it is that there is a difference of
    opinion on what the solution should be. Let me try to explain.

    I believe that this problem has been around since the start of the free software movement. Free software was developed on non-free OS's, and on hardware that required non-free software. That always caused
    frustration and a desire to "just get things to work". Debian was one distribution putting together the free GNU tools (developed on non-free
    Unixes) with Linux (also developed on a non-free OS) and made a free OS possible. There has always been an incredibly large amount of hardware
    that Debian cannot run on, because of missing firmware or other
    requirements of non-free software. A lot of people have gone elsewhere
    because of this (and other reasons), for example to Ubuntu.

    Over time, people engineer solutions to important hardware and that
    support end up in Debian so it is possible to use that (now slightly
    aged) hardware with free software.

    I read your proposals as a deep frustration with this situation and a
    desire to solve the problem faster than waiting for free software
    support for relevant hardware to materialize. I don't think this is a
    problem that Debian should solve by compromising on the free software principles. I think this is a problem Debian has been and is (slowly)
    solving by remaining what it has been: a free OS. There is much more
    hardware that works with free software today than it was 20 years ago.
    Many hardware vendors today realize that support for GNU/Linux
    distributions like Debian is important for their success.

    Let's see it from another side. What would make Debian different from,
    say, Mac OS X with your proposal?

    Apple produce a lot of free software, significantly more than what I
    perceive that the Debian organization produce. Apple also provide an OS
    that runs free software.

    The difference, to me, is that Debian is guided (so far) by the policy
    that the entire Debian system should be free. Mac OS X has no similar
    policy, and their source of revenue basically comes from keeping parts proprietary. The installer is non-free and important software
    components is non-free.

    With your proposal, Debian 'main' would still consists of free content,
    but to practically install and run any of it, we and our users would
    have to download non-free content. To me, that is a significant step
    back. The next step is to depend on non-free content when the OS is
    installed, which as far as I understand your proposal would be permitted
    and intended. That is another step back. The result, philosophically
    and from a free software perspective, is that there no longer is any
    difference between Mac OS X and Debian.

    I think the difference of opinion is that your proposal is based on the argument that it is worth compromising on the ideals of free software in
    order to allow users to be able to run free software. I disagree with
    that opinion. If you disagree with my characterization of your
    proposal, let's discuss and see if there is a middle ground somewhere.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYxroYBQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFouFMAQDK+mct7V4ZznFCUfpW+2VyhpPNzJRD 9Nh6yYZSfHfoswD+LO13aWKaSo8afGopKtewD+fnYnc4eC3kWphaOe7w9AY=eVWR
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Andrey Rahmatullin on Fri Sep 9 12:50:01 2022
    Andrey Rahmatullin <wrar@debian.org> writes:

    On Fri, Sep 09, 2022 at 09:16:48AM +0200, Simon Josefsson wrote:
    With your proposal, Debian 'main' would still consists of free content,
    but to practically install and run any of it, we and our users would
    have to download non-free content.
    So just like now.

    No, not like now. Today we and our users can chose to download non-free content if they want. Some do. Some don't. With Steve's proposal, as
    I understand it, that choice will be taken away.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYxsZbRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFopPLAP48t8mvt1Dw6hxtU5hf1WzLPo/QmuRM WyntLsUuPaT0CgEA0ekPs+R2wAIGetGpk7i5EwzUdAHFZI/DvAKxBYN3agI=
    =a/cT
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Phil Morrell@21:1/5 to All on Fri Sep 9 14:50:01 2022
    On Thu, Sep 08, 2022 at 11:55:43AM +0200, Jonathan Carter (highvoltage) wrote:
    On 2022/09/08 11:27, Phil Morrell wrote:
    5. Works that do not meet our free software standards

    We acknowledge that our users may require the use of works that do
    not conform to the Debian Free Software Guidelines. Such packages
    are not part of the Debian system, but we provide the enabling
    infrastructure as a convenience to our users. This includes the bug
    tracking system, installation media, mailing lists and separate
    archive areas.

    bug fixes and security updates depend entirely on their upstream developers

    This is definitely not *universally true*, think of e.g. GFDL invariants
    or packages that are "merely" non-commercial. Debian package maintainers
    can make absolutely any technical improvements they wish to these
    packages, the only thing they can't do is change the license to be
    DFSG-free. There's probably less motivation to work on non-free
    software, and there may not even be any remaining upstream, but I assume
    you were primarily thinking of non-free-firmware when drafting this
    phrase.

    We
    encourage software vendors who make use of non-free packages to carefully read the licenses of these packages to determine whether they can distribute it on their media or products.

    I deliberately removed mention of software vendors and their media as
    our Social Contract wouldn't bind them anyway. #5 should be relevant for
    all our users, third party redistributors are just a subset.

    An added goal I'm trying to achieve with this change is to explain some practical consequences of redistributing non-free software. It's not like we provide the non-free archives and it's *wink* *wink* kind of official
    because Debian people provide it but it's not, instead it's the case that everything that makes Debian great really doesn't apply to these packages.

    It'd be nice having a fourth sentence that is a bit more negatively
    worded to put people off non-free where feasible. How about:

    We encourage careful review of the licensing for your use-case and
    how they put limits on our packaging efforts.

    Disclaimer: I'm not a DD (yet) so cannot formally propose any of this
    and please take with a lump of salt.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYxs0MQAKCRDbymUJHySO bGwnAP9Jbi3LR8zXCnFv+jLlCvxV3e2Bv6KX8CESz786hB9lKwD/ZVX19CKK6pRk ENTzenwD+02/4o7nc0t+FXazW3ouGwU=
    =iKCD
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Phil Morrell on Fri Sep 9 18:10:01 2022
    Phil Morrell <debian@emorrp1.name> writes:
    On Thu, Sep 08, 2022 at 11:55:43AM +0200, Jonathan Carter (highvoltage) wrote:

    bug fixes and security updates depend entirely on their upstream developers

    This is definitely not *universally true*, think of e.g. GFDL invariants
    or packages that are "merely" non-commercial. Debian package maintainers
    can make absolutely any technical improvements they wish to these
    packages, the only thing they can't do is change the license to be
    DFSG-free. There's probably less motivation to work on non-free
    software, and there may not even be any remaining upstream, but I assume
    you were primarily thinking of non-free-firmware when drafting this
    phrase.

    Yeah, I think this wording is not quite 100% correct. I think what
    Jonathan is getting at is that we do not provide security support for
    non-free software as a matter of policy, in the sense that the security
    team doesn't support it (at least that's my recollection). But the
    package maintainers often do provide some level of support. I think we
    may need a slightly different wording of this that makes it clear that
    these packages receive a lower level of support and are therefore on
    average somewhat riskier to use.

    We encourage software vendors who make use of non-free packages to
    carefully read the licenses of these packages to determine whether they
    can distribute it on their media or products.

    I deliberately removed mention of software vendors and their media as
    our Social Contract wouldn't bind them anyway. #5 should be relevant for
    all our users, third party redistributors are just a subset.

    We probably do need to say something about how you need to review the
    licenses for non-free software before using or distributing it. This is
    true for users as well.

    It'd be nice having a fourth sentence that is a bit more negatively
    worded to put people off non-free where feasible. How about:

    We encourage careful review of the licensing for your use-case and
    how they put limits on our packaging efforts.

    Disclaimer: I'm not a DD (yet) so cannot formally propose any of this
    and please take with a lump of salt.

    I like the first part of that. I'm not sure anyone needs to care that
    much about the impact on packaging. I see what you're trying to get at,
    but I think it's a bit indirect.

    How about:

    We encourage careful review of the licensing of these packages before
    use or redistribution, since the guarantees of the Debian Free
    Software Guidelines do not apply to them.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Josefsson on Fri Sep 9 18:10:01 2022
    Simon Josefsson <simon@josefsson.org> writes:

    No, not like now. Today we and our users can chose to download non-free content if they want. Some do. Some don't. With Steve's proposal, as
    I understand it, that choice will be taken away.

    So, just to see if I understand, the part that you're specifically
    objecting to is the willingness of the installer to load non-free firmware before starting to prompt the user for their preferences, combined with
    the lack of an installer that has no non-free firmware in it?

    My understanding of the proposal is that the point of loading firmware as needed is to get graphics and sound working early for accessibility
    reasons. I personally do consider that more important than ensuring that
    no non-free software is ever used, but I can certainly see why this would
    be a point of principled disagreement. Is that the part that you're
    objecting to? Or is it the mere presence of non-free software in the
    installer image, even if you're prompted before any of it is used? Or something else?

    There are certainly arguments in favor of maintaining an entirely
    DFSG-free installer. I don't think anyone would deny that; I think the
    only dispute there is over whether the benefits of having that installer
    around exceed the costs of maintaining it and explaining to users which
    one to pick. (And like any other work tradeoff, presumably the tradeoff
    would look differently the more people volunteer to help.)

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bdale Garbee@21:1/5 to jcc@debian.org on Fri Sep 9 18:50:01 2022
    "Jonathan Carter (highvoltage)" <jcc@debian.org> writes:

    I do think some parts are important to include though, how about:

    I disagree strongly on this.

    We should work REALLY hard to have the SC capture the commitments we're
    making to our users, and then stop. Specifically, we should avoid
    including text that attempts to tell them what they need to do, such as:

    We encourage software vendors who make use of non-free packages
    to carefully read the licenses of these packages to determine whether
    they can distribute it on their media or products.

    If you really think we need to say this to downstream consumers /
    distributors of our work, I'm sure we can find a way to do that. But
    the Social Contract is the wrong place. It is, and must remain, an articulation of our values and the associated commitments we're making
    to our users. The fewer words it must contain to achieve those
    objectives, the better.

    An added goal I'm trying to achieve with this change is to explain some practical consequences of redistributing non-free software.

    I applaud and support this goal... but please don't burden our
    fundamental statement of core values with such content.

    Bdale

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEHguq2FwiMqGzzpLrtwRxBYMLn6EFAmMba68ACgkQtwRxBYML n6F9pw/7B9XnwPDHQ/NV/16dCb7EJhGz1nfxwok/hZzmfrA0HanrXjGuYK2kY3tq Kg9tgTzOLnC7a3lorKwcwxuxlMr5jEONzcBhyFZcohWqV5uI1j4VCfWwQOwFktHm edXmlYbEF0kZd8WMVX9vKNZRETygCBm1M9kESLU2G4F2QSn7h1JSsEG1dik/bh6m 8yhbSZFItzUpKyuh5CFchQOlkRP9Y/f8ZtRo1uc34HPHnWP1FVvlUFsI8/TzcLkM QyphUjgg/byPpmE0A2jxEMJ42P2fwqf/LiHuMy5FDLDEa8nGWCu6YZKOjSuxcfqe /oETvA2JP+00B1tvISXTmgOAu6j9SM43ZdmhnFDViWa2zFCMMZ82YTbxhcws9sIa juvurShNpXyuh3Ri+n3wDaHKy2AExqJpKf6g5xz4zx1nkZB1YhTLfBTYoc8l4Fml XUv/wkhKfVWe0tMJlg9P/9aSNR2H8Nx76rSFZYk4eI/9r3JJ0zcmGmSSFZp1Kd/y w//Uw0Mus5ATX5T/1Pa3Tp820Vc7apFiX6+H0wrfeEzO+eHTFTV/LildPqe+LS5d hjetr9eLtDBkLNaQrdFji6cswaNNHs+L/LY/KaUAa+rTLmog2UpYTvDPfvOXxxdH cU2VUV6s4md4zJ1aKKNk7LBW2YMOluJptsJVKa3r3sa6d2P8MQo=8gfx
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adam Borowski@21:1/5 to Ian Campbell on Fri Sep 9 20:00:02 2022
    On Fri, Sep 09, 2022 at 06:24:37PM +0100, Ian Campbell wrote:
    5. No Discrimination Against Persons or Groups
    6. No Discrimination Against Fields of Endeavor

    Cuba/Iran/North Korea/Syria are excluded by most non-free licenses.


    --
    ⢀⣴⠾⠻⢶⣦⠀
    ⣾â â¢ â ’⠀⣿⡠ʀᴜꜱꜱɪᴀɴᴇꜱ ᴇᴜɴᴛ á´…á´á´á´œêœ± ⢿⡄⠘⠷⠚⠋⠀
    ⠈⠳⣄⠀⠀⠀⠀

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Campbell@21:1/5 to Russ Allbery on Fri Sep 9 19:50:01 2022
    On Fri, 2022-09-09 at 09:04 -0700, Russ Allbery wrote:

    How about:

        We encourage careful review of the licensing of these packages before
        use or redistribution, since the guarantees of the Debian Free
        Software Guidelines do not apply to them.


    Would it be reasonable instead for text to enumerate which of the DSFG
    freedoms installers etc distributed by Debian are permitted to
    compromise on rather than just a blanket "allow non-DFSG-free"?

    If we say that images distributed by Debian would be permitted to
    compromise, for firmware only, on:

    2. Source Code
    3. Derived Works
    4. Integrity of The Author's Source Code

    But would required them to adhere to, for everything (including
    firmware):

    1. Free Redistribution
    5. No Discrimination Against Persons or Groups
    6. No Discrimination Against Fields of Endeavor
    7. Distribution of License
    8. License Must Not Be Specific to Debian
    9. License Must Not Contaminate Other Software

    (I'm not quite sure I've put #4 in the right list)

    This would, I think, allow anyone who received an installer from Debian
    to continue to redistribute them just as today, plus it more precisely
    limits the scope of exactly what we are willing to compromise on for
    the purposes of allowing people to use Debian on their hardware.

    Ian.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonathan Carter (highvoltage)@21:1/5 to Bdale Garbee on Fri Sep 9 20:40:02 2022
    On 2022/09/09 18:37, Bdale Garbee wrote:
    "Jonathan Carter (highvoltage)" <jcc@debian.org> writes:

    I do think some parts are important to include though, how about:

    I disagree strongly on this.

    We should work REALLY hard to have the SC capture the commitments we're making to our users, and then stop. Specifically, we should avoid
    including text that attempts to tell them what they need to do, such as:

    We encourage software vendors who make use of non-free packages
    to carefully read the licenses of these packages to determine whether
    they can distribute it on their media or products.

    If you really think we need to say this to downstream consumers / distributors of our work, I'm sure we can find a way to do that. But
    the Social Contract is the wrong place. It is, and must remain, an articulation of our values and the associated commitments we're making
    to our users. The fewer words it must contain to achieve those
    objectives, the better.

    I happen to agree with you, although at the same time, we can't make
    hard promises on some things and then also purposefully go ahead and do something that's the complete opposite.

    If we were to include any non-free software/firmware on something that's
    called official Debian installer media that is said to conform to our standards, then we either can't include such software or we need some
    form of exception to our standards that is explained somewhere prominently.

    If we ship non-free firmware/software (the lines between those have
    become *very* blurred, as seen with GPU drivers especially), and pretend
    that the current DFSG/SC applies, then I think we're being very
    dishonest and that is worse to me than the problems you have listed.

    -Jonathan

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonathan Carter (highvoltage)@21:1/5 to Russ Allbery on Fri Sep 9 20:20:02 2022
    On 2022/09/09 18:04, Russ Allbery wrote:
    We encourage careful review of the licensing of these packages before
    use or redistribution, since the guarantees of the Debian Free
    Software Guidelines do not apply to them.

    Looks good to me. It summarizes the gist of the issue very concisely
    without using any loaded terms.

    -Jonathan

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Phil Morrell@21:1/5 to All on Fri Sep 9 21:40:01 2022
    On Fri, Sep 09, 2022 at 08:13:23PM +0200, Jonathan Carter (highvoltage) wrote:

    If we were to include any non-free software/firmware on something that's called official Debian installer media that is said to conform to our standards

    That's exactly the point of changing the wording - by including the two
    words "installation media" as examples of infrastructure in #5 they are permitted to *not* meet our free software standards.

    The Images team is then trusted to determine how to achieve "a
    convenience to our users", thus supporting the original GR intent and
    making those images official (by the definition of the Images team).

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYxuVYQAKCRDbymUJHySO bOY+AQDwAw7NspSIDARVVTKHz4EmZyNK6/cvd4lds6vtR4vPFwEA1F0O5VSus4Kl rsLgIwRP+zc2t9LckP9DQcXPl1Uw8Ag=
    =U1vi
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Phil Morrell@21:1/5 to Russ Allbery on Fri Sep 9 21:30:01 2022
    On Fri, Sep 09, 2022 at 09:04:37AM -0700, Russ Allbery wrote:
    We probably do need to say something about how you need to review the licenses for non-free software before using or distributing it. This is
    true for users as well.

    How about:

    We encourage careful review of the licensing of these packages before
    use or redistribution, since the guarantees of the Debian Free
    Software Guidelines do not apply to them.

    You've gone back to specifics again with "use or redistribution" and I
    really don't think a third mention of our standards/DFSG in the same paragraph/heading will make any difference. I now think that any further wording should make some novel, specific, important point about the relationship between Debian and its users:

    On 2022/09/09 18:37, Bdale Garbee wrote:
    We should work REALLY hard to have the SC capture the commitments we're making to our users, and then stop.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSBP39/Unco6Ai78+TbymUJHySObAUCYxuSBQAKCRDbymUJHySO bBDHAQDpAEqL5UQ1wC0Qg3F7nJO2Tngix1yAr7nsyz0zSREkRAD/XMDID4pskgrt pcA0aPhIN1YbTyRTC7lFxdXjtbMRpgw=
    =rjgZ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to All on Fri Sep 9 22:10:01 2022
    On Fri, Sep 09, 2022 at 08:01:58PM +0200, Jonathan Carter (highvoltage) wrote:
    On 2022/09/09 18:04, Russ Allbery wrote:
    We encourage careful review of the licensing of these packages before
    use or redistribution, since the guarantees of the Debian Free
    Software Guidelines do not apply to them.

    Looks good to me. It summarizes the gist of the issue very concisely without using any loaded terms.

    The word "guarantees" can make Debian liable for mistakes.


    -Jonathan


    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Russ Allbery on Sat Sep 10 01:20:02 2022
    On Wed, 2022-09-07 at 10:48 -0700, Russ Allbery wrote:

    If there is time left, though, I'm considering proposing the following
    option based on my earlier message, just so that there's something on the ballot that explicitly modifies the Social Contract to allow for non-free firmware, in case people want that for clarity.

    I'm beginning to think that the SC update should be a separate GR
    since I would like to update the SC, but not drop the free installer.

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMbx7IACgkQMRa6Xp/6 aaODexAAgRtF0cJzm0nNUWLOJ9D3km6p5NK2JWLyrPRZ1npfiyrugIDBqVPmx85z h1gYjOcfps+ZdXS+2UmmjWIsKX18C64YwoH+u9nczFm/N6h03aFep35o44+2qJal eP3AoP7oApAGs+y3BHCCrrTDDm+Xw8QKF/ZpmpXZebwrZUO6bKJXt9CArCK+gLpb JH5p/dJW9v6vJS0a0EswEiEQHNKlyPeDsb0HI4Qa3N/voft3UCeFWiQ/LqMuYZ6F EUP405pttPr3JmKzCTa4wBjhx/0mIwPYtdNMHHP2t3CUIp8DSVgU53RdeYYDL3xp xqcL5LYBAASz6XVTOXBjo3oyfjDVCnEf/V3hnmaEeAdq/bSi2BFKAfasjwg525Ex jOJ0Wrwn5L5FHwKbN2vf/yiKjV5R/d+J0nmqqrcwi9K6+dkGGrAISjiVOGpsTieZ O7DPvS3Fyw+M07kHIYD2CGEoir8c0MHgIQC1kjxz6QRYpWUoGQDJ5hG1cB0Tcifg wKXW0edr7buVasdTvx249Dd5yO+iUmZVYTQMqo3PLsrK/3qlukK6d/cwo1rR9+7g Th1DDMPRBT9lqjbsm8AJfgIsLlZNYR//EM17Sysb6fj+IzuVI+2zJaZhNAZOGbzN seIXG/2mE4JUVOktfjUvQuJf9zvdYaxYKYGwTDxFxIA06q0qtkg=
    =b3HI
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Campbell@21:1/5 to Adam Borowski on Sat Sep 10 08:00:01 2022
    On Fri, 2022-09-09 at 19:54 +0200, Adam Borowski wrote:
    On Fri, Sep 09, 2022 at 06:24:37PM +0100, Ian Campbell wrote:
        5. No Discrimination Against Persons or Groups
        6. No Discrimination Against Fields of Endeavor

    Cuba/Iran/North Korea/Syria are excluded by most non-free licenses.

    Right, thanks. A non-starter then really.

    Ian.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Russ Allbery on Sat Sep 10 09:20:01 2022
    Russ Allbery <rra@debian.org> writes:

    Simon Josefsson <simon@josefsson.org> writes:

    No, not like now. Today we and our users can chose to download non-free
    content if they want. Some do. Some don't. With Steve's proposal, as
    I understand it, that choice will be taken away.

    So, just to see if I understand, the part that you're specifically
    objecting to is the willingness of the installer to load non-free firmware before starting to prompt the user for their preferences, combined with
    the lack of an installer that has no non-free firmware in it?

    My understanding of the proposal is that the point of loading firmware as needed is to get graphics and sound working early for accessibility
    reasons. I personally do consider that more important than ensuring that
    no non-free software is ever used, but I can certainly see why this would
    be a point of principled disagreement. Is that the part that you're objecting to? Or is it the mere presence of non-free software in the installer image, even if you're prompted before any of it is used? Or something else?

    There are certainly arguments in favor of maintaining an entirely
    DFSG-free installer. I don't think anyone would deny that; I think the
    only dispute there is over whether the benefits of having that installer around exceed the costs of maintaining it and explaining to users which
    one to pick. (And like any other work tradeoff, presumably the tradeoff would look differently the more people volunteer to help.)

    What I'm specifically objecting to is that if Steve's proposal were
    implemented I believe the result would violate our social contract that
    the Debian system is 100% free.

    There are many problems following from that initial problem: the one you describe in your first paragraph is one, that I agree is a problem, but
    not the only one.

    Another problem is the ability to distribute the installer. Even when
    non-free work is not executed by hardware during installation (e.g., by
    user choice) does not mean all is well: You usually need to comply with non-free licensing terms to be able to distribute non-free works. If
    they are included in the Debian installer by default, even if they are
    not run by the CPU or other hardware on your system, we would still be
    in violation with the social contract.

    Another problem is that our social contract becomes meaningless if we intentionally violate it ourselves.

    I think I'm missing a better problem statement to motivate any changes
    here. The ones I've tried to understand, by watching Steve's
    presentation this year and reading earlier mailing list posts, does not convince me: it appears to boil down to a desire to help more people be
    able to install Debian and join the community. That desire is
    understandable, but does not motivate compromising the social contract
    to me. We had the same problem installing free software on hardware
    requiring non-free software in the 1990s, and we'll have them as long as
    there is hardware that require non-free software. We can give up, or we
    can continue to provide a meaningful alternative to that situation.

    What surprises me is that there is any need of a change: the Debian
    project accepts non-free works and distribute non-free installers for
    anyone who wants them. So the practical problems facing people
    requiring non-free software appears solved or possible to solve. As you suggest in your final paragraph, maybe the issue is "merely" about the cost-tradeoff between having one installer and having two installer.
    One solution is to only have a free installer then, since there appears
    to be a lot of work involved to cater for all various kind of non-free
    content out there. If there are volunteers to work on a non-free
    installer, I wouldn't want to stop them, just like I wouldn't want them
    to stop work on a free installer.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYxw53xQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFoiwNAQDWO0vZqzinfIaXujHClKxN4YCVHZY2 R63fkWvwr6IENQEAgE38WrRBKcq1KUSVkTKDo5PMrNeSioNzqBCrb5QRxgk=
    =K84a
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Simon Josefsson on Sat Sep 10 13:00:01 2022
    On Fri, Sep 09, 2022 at 12:46:05PM +0200, Simon Josefsson wrote:
    No, not like now. Today we and our users can chose to download non-free content if they want. Some do. Some don't. With Steve's proposal, as
    I understand it, that choice will be taken away.

    good thing that we have 5 proposals right now on https://www.debian.org/vote/2022/vote_003
    and not just one.

    :)


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾â â¢ â ’⠀⣿⡠holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Bottled water companies don't produce water, they produce plastic bottles.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmMcbC0ACgkQCRq4Vgaa qhxJ2Q//YvtmgPdGK7xMAs/rWBcZTp8GeLuFdmiIwigCJIyIjBOyWSHmrEk1+Xx9 dH+T4rO0EC7Mqn/3KZ6wc7AYxFlO6GXNvFbhZzgjnRtTpVUtsd+fk/GW4CS9cZXW aa7qa6EmycycQ7WCl/uSlYRmF+cBBJC8+33X/fn1ghkbPjlwvrl61Qe8OWgtofwI 5yMxRofPiuBLTNr92opF7TcB8wm3krQ/71uxo6TAvfqr8W65lJiCVKvrhAl7kMha G9HeO/BZ9LvpOS7wsamOBi/h35zbnQa7Hb9BKlT4y/EksUTxVN3Co1ZLYKDJttMB FCxgnRD4cNEGpgiDLCXHBHw1RqljrWk3qdePmuAZFMdvK7PPkUWd6jF43Ewn+VRW NCmjsDiPsMf+NTaT3wCr5gmhoXx+13fHE8Jt3Rc6g3DweBaDstUFw7O9+NL/Ks1B DdLb2gGsYXYGoaHY2flaTzFo9uQMzouqaY0PpTWSABumGiSvP68scVIa/7OzwVR/ UVXyxDAj3os6N48MU1PWsx+RuO3RrayTmvpqxxbqduq3eMhCVcx8U+DASUfhF93a zH1jG7xZRUcC3iyJVnpRR80aLdo2clnGrO+3mf
  • From Paul Wise@21:1/5 to Simon Josefsson on Sun Sep 11 04:20:01 2022
    On Sat, 2022-09-10 at 09:16 +0200, Simon Josefsson wrote:

    So the practical problems facing people requiring non-free software
    appears solved or possible to solve.

    As I understand it there are two problems solved by proposal A/E:

    Users who aren't aware of the firmware problem are directed by the
    Debian website to download the free installer, they try it out, find it
    doesn't work on their hardware and then abandon Debian in favour of
    other distros, or ask questions about it to the Debian support channels
    or the Debian teams involved in the image creation/distribution. They
    always get the non-free installer eventually, but we have wasted their
    time and ours by directing them to the free installer by default.

    Since the hardware most users use causes the first problem, the people
    fielding these support requests see that the free installer is in most
    cases not useful and therefore want to stop building or working on it.

    My earlier proposal that solves these issues without a GR or SC change:

    https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMdREMACgkQMRa6Xp/6 aaNCDg//VA8ugDBPhy+DewF29yiLCj+VMIrM1TJEI1yly9T9Ol5YqWETlJjNecQW DHvkLeXtI45BySKVwClZu9Vlb/6qakyksDhDVGzROmY9GlGON/iupkURNtHrI4X2 DrhxqSC1bulVSk6QDqbfeYgB6dB9NOudYw/lcXR6ae13k/QfBbsAD5zOnFht8JMA 9z2EwRPMi9QAEDpiLSA03Puxq9XnIALAgGVrpwvz2aaCn0A3g94wRtsBEABVScrD /vRCv8FxuSDRo07VDvw6ZbSxTkkPO6waGkLJXSYUaQKXucGL0VOkbcyD+o7QrSJO UtMX4vvTojvYr2zlUy8AHWxfK7AiPiYNvzkpNB6Ry8BkCpOhAQtlrjreMtai6nPt Oq8RQh6WTC/w8ZKlKCJrLhbMwvSZOpMGvowgLw8u8Kei7zE4gqUyd3n8tuK/hO9y KCf/q/diJ/doiy6g5mDmZVnJcJAjZPiiUtjPSLXeVeEf6yCSQQABo8i5kiO0WBO2 43xFUFsEBAk7pf+mmGHAaYirJVKiiwgdjIAu4Yb4hKBCEdXnQdewyzWqB4KUGuhd rmcObVq/NfsZmc7gsFMxv48+bMk/lgrPlKhIwf4zll7h8XKqPdJX0k/Sw6CSscQb ZMZ1HBg4xHqeG/W/Cw2EFezhArxrbxNzHDyyMHIRY+I/F7N/Gyg=
    =ETvZ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Paul Wise on Sun Sep 11 08:40:01 2022
    On Sun, Sep 11, 2022 at 10:13:26AM +0800, Paul Wise wrote:
    On Sat, 2022-09-10 at 09:16 +0200, Simon Josefsson wrote:

    So the practical problems facing people requiring non-free software
    appears solved or possible to solve.

    As I understand it there are two problems solved by proposal A/E:

    Users who aren't aware of the firmware problem are directed by the
    Debian website to download the free installer, they try it out, find it doesn't work on their hardware and then abandon Debian in favour of
    other distros, or ask questions about it to the Debian support channels
    or the Debian teams involved in the image creation/distribution. They
    always get the non-free installer eventually, but we have wasted their
    time and ours by directing them to the free installer by default.

    Since the hardware most users use causes the first problem, the people fielding these support requests see that the free installer is in most
    cases not useful and therefore want to stop building or working on it.

    My earlier proposal that solves these issues without a GR or SC change:

    https://lists.debian.org/msgid-search/683a7c0e69b081aae8c46bd4027bf7537475624a.camel@debian.org

    Yes, that totally makes sense. I wansn't sure whether the mentioned "side-by-side" would be allowed without GR, so I made it a ballot option.
    And indeed, keeping the free media alive may require calling volunteers.
    It looks like this kind of solutions has been discussed already in April.


    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ansgar@21:1/5 to Simon Josefsson on Sun Sep 11 09:10:01 2022
    On Sun, 2022-09-11 at 08:19 +0200, Simon Josefsson wrote:
    Paul Wise <pabs@debian.org> writes:
    Since the hardware most users use causes the first problem, the people fielding these support requests see that the free installer is in most cases not useful and therefore want to stop building or working on it.

    The problem is caused by hardware manufacturer chosing to require
    non-free works for their use.  The blame for that choice lies on the hardware manufacturer, not on Debian.  Accepting the blame for someone else's choices and taking on the responsibility solve the consequences
    of that choice seems misguided to me.

    Hardware has always required non-free firmware (with very few
    exceptions); for various reasons less hardware preinstalls them. There
    is not much change in freeness here.

    It makes it harder for users to
    experience the frustration of such hardware themselves.

    Is making the experience of (trying to) use Debian on pretty much all
    modern hardware frustrating a design goal? I understand your comment as
    saying that making it harder to experience the frustration is a problem
    for you.

    I disagree they
    always get the non-free installer eventually: some end up learning about
    the problem and chose better hardware.

    Sure, from experience many will just use a different distribution. Is
    this a problem for you or does it not matter?

    What is this "better hardware" by the way? Hardware that comes with pre-installed non-free firmware so one can pretend the firmware isn't
    really there? (And reading LWN comments: does this also include the
    "Windows" firmware and just running WSL? That might be in line with how
    GNU's operating system based on Hurd seems to be mostly used: in a VM.)

    I'm tempted to suggest the free installer should refuse to work with preinstalled non-free firmware by default so users are not confused
    into believing they run only free software. ;-)

    If Debian takes on itself to solve the problems with non-free
    hardware, I think we are in more difficult position to ask for a
    change.

    So we should include firmware after all? Because Debian not including
    firmware seems to be trying to solve the problem on its own unlike the
    solution most others have adopted.

    Ansgar

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Paul Wise on Sun Sep 11 08:20:01 2022
    Paul Wise <pabs@debian.org> writes:

    On Sat, 2022-09-10 at 09:16 +0200, Simon Josefsson wrote:

    So the practical problems facing people requiring non-free software
    appears solved or possible to solve.

    As I understand it there are two problems solved by proposal A/E:

    Users who aren't aware of the firmware problem are directed by the
    Debian website to download the free installer, they try it out, find it doesn't work on their hardware and then abandon Debian in favour of
    other distros, or ask questions about it to the Debian support channels
    or the Debian teams involved in the image creation/distribution. They
    always get the non-free installer eventually, but we have wasted their
    time and ours by directing them to the free installer by default.

    Since the hardware most users use causes the first problem, the people fielding these support requests see that the free installer is in most
    cases not useful and therefore want to stop building or working on it.

    The problem is caused by hardware manufacturer chosing to require
    non-free works for their use. The blame for that choice lies on the
    hardware manufacturer, not on Debian. Accepting the blame for someone
    else's choices and taking on the responsibility solve the consequences
    of that choice seems misguided to me. It makes it harder for users to experience the frustration of such hardware themselves. I disagree they
    always get the non-free installer eventually: some end up learning about
    the problem and chose better hardware. Some end up reverse engineering
    their hardware, and contributing to a free solution. Some dislike other distributions taking a less rigid stance on non-free works, and will
    come up with work-arounds to get Debian to work on the hardware. If
    Debian takes on itself to solve the problems with non-free hardware, I
    think we are in more difficult position to ask for a change.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx197xQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFovN6AP0a4YluXjOsYcNnqRcvMw4PjpfULok0 msrY/N9IOYUWogEAkQYPVXebGqBSW9PDp/IQUFCYGhH1OnRzFiBBMexIWQo=
    =6GxO
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tobias Frost@21:1/5 to Simon Josefsson on Sun Sep 11 10:30:01 2022
    On Sun, Sep 11, 2022 at 08:19:26AM +0200, Simon Josefsson wrote:
    Paul Wise <pabs@debian.org> writes:

    On Sat, 2022-09-10 at 09:16 +0200, Simon Josefsson wrote:

    So the practical problems facing people requiring non-free software
    appears solved or possible to solve.

    As I understand it there are two problems solved by proposal A/E:

    Users who aren't aware of the firmware problem are directed by the
    Debian website to download the free installer, they try it out, find it doesn't work on their hardware and then abandon Debian in favour of
    other distros, or ask questions about it to the Debian support channels
    or the Debian teams involved in the image creation/distribution. They always get the non-free installer eventually, but we have wasted their
    time and ours by directing them to the free installer by default.

    Since the hardware most users use causes the first problem, the people fielding these support requests see that the free installer is in most cases not useful and therefore want to stop building or working on it.

    The problem is caused by hardware manufacturer chosing to require
    non-free works for their use. The blame for that choice lies on the
    hardware manufacturer, not on Debian. Accepting the blame for someone
    else's choices and taking on the responsibility solve the consequences
    of that choice seems misguided to me. It makes it harder for users to experience the frustration of such hardware themselves.

    How does frustation or blaming manufactores help our users?

    Also, our users will not blame the manufactores. They blame us.

    BTW, about choices…
    Especially for (modern) Wifi hardware, there is legistlation in place that forbids manufactores to enable users to operate outside of RF complicance. (e.g. Tx Power, DFS). This is usually done in the firmware.

    You can't expect manufactores to break regolatory rules, they do not
    have the option to choose.

    Sure, *some* parameters might be limitable by hardware design, but that
    is generally costier. And as it is *some* parameters, not *all*, this won't make the device compliant.
    Additionally, ithey dont really have incentives to let their competitors
    look into their code. Another incentive NOT to open up firmware is that
    this would actually cost them money to do so and maybe make the liable
    if a competitor detects that some code violates some IP…

    I disagree they
    always get the non-free installer eventually: some end up learning about
    the problem and chose better hardware. Some end up reverse engineering
    their hardware, and contributing to a free solution. Some dislike other distributions taking a less rigid stance on non-free works, and will
    come up with work-arounds to get Debian to work on the hardware. If
    Debian takes on itself to solve the problems with non-free hardware, I
    think we are in more difficult position to ask for a change.

    The thing I experience on some of our channels where many (potential) users are:
    - Can't install, $network not detected.
    - Installed it, network stopped working.
    - They usually pointed to use the non-free installer as first response.
    This is when they are in Debian channels.
    - In non-Debian forums, the response is too often:
    - Debian sucks. Just use another distro.
    - Especially for gaming


    Is this helping our users or does it help the free software cause if those users just go somewhere else and asscociate Debian with "broken"?
    Those are lost users, and they will never learn and then care about their missing freedoms.

    Yes, the situation could be better, but re-inforcing the current situation won't improve that. We tried that for a very long time already.


    --
    tobi

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Salvo Tomaselli@21:1/5 to All on Sun Sep 11 12:00:01 2022
    Is this helping our users or does it help the free software cause if those users just go somewhere else and asscociate Debian with "broken"?
    Those are lost users, and they will never learn and then care about their missing freedoms.

    Not only they are lost users; but they will spend the next 20 or 30 years commenting how debian is broken (regardless of what the current status
    might be at that point) putting off potential users that might actually believe them.

    I still regularly see comments on how KDE is bad because it relies on non-free qt libraries.


    --
    Salvo Tomaselli

    "Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
    -- Galileo Galilei

    http://ltworf.github.io/ltworf/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Josefsson on Sun Sep 11 22:30:01 2022
    Simon Josefsson <simon@josefsson.org> writes:

    What I'm specifically objecting to is that if Steve's proposal were implemented I believe the result would violate our social contract that
    the Debian system is 100% free.

    This part I understand, and indeed this is why I proposed a ballot option
    to modify the Social Contract. Obviously you and I disagree over the
    merits of the current Social Contract, to an extent that I would say that
    I think you and I view the purpose of Debian as a project in radically different ways. Which is fine; that's what we have votes for.

    Another problem is the ability to distribute the installer. Even when non-free work is not executed by hardware during installation (e.g., by
    user choice) does not mean all is well: You usually need to comply with non-free licensing terms to be able to distribute non-free works.

    Yes, this is a concern that we will want to address. I think we can
    address this with a vetting policy to avoid any license that would cause problems with distribution, but there is certainly a chance that I am underestimating the difficulties. But my impression is that the
    non-freeness of firmware is mostly about preferred form for modification
    and effective availability of source code, not about redistribution. The hardware companies generally *want* their users to have easy and
    convenient access to the firmware, although of course sometimes write very
    bad licenses or have lawyers try to insert intellectual property warfare clauses.

    But that's all an aside. The main point I wanted to make here is that I
    do understand this concern, and I think it's legitimate, even if we
    disagree about how to address it.

    Another problem is that our social contract becomes meaningless if we intentionally violate it ourselves.

    I think it is possible to argue in good faith that the Debian installer is
    not part of the Debian system as defined in SC 1. I would not personally
    make that argument, but I don't think it's an unreasonable argument to say
    that the Debian system is the packages in our "main" apt repository, and
    the installer is a separate thing from the system. This is how I would interpret the current proposal A as potentially not being in conflict with
    the SC.

    Obviously, I think it would be better to just explicitly change the SC to
    avoid needing to make this sort of interpretation, which is why I put
    forward the proposal that I did. But I think "intentionally violate" goes
    too far in characterizing other people's motives.

    I think I'm missing a better problem statement to motivate any changes
    here. The ones I've tried to understand, by watching Steve's
    presentation this year and reading earlier mailing list posts, does not convince me: it appears to boil down to a desire to help more people be
    able to install Debian and join the community. That desire is understandable, but does not motivate compromising the social contract
    to me.

    This position makes a lot of sense to me. I happen to disagree with it,
    but I think I understand why you hold it. I do think you're underplaying Steve's arguments here, but I get why it's hard to summarize arguments
    that you don't agree with.

    The way I would put the argument is that one of the critical goals of
    Debian is to be a universal operating system that prioritizes its users alongside free software, and implicit in that prioritization is that
    Debian is intended to be a practical, real-world, usable operating system
    for regular computers, not (solely) a research experiment or ideological statement. And I would say that one of the motives of Steve's proposal
    (or, at the least, one of my motives for agreeing with it) is that I think
    we, some time ago, reached the point where dynamically loadable firmware
    is necessary in normal cases for our users.

    In other words, I would say that an installer that doesn't support
    non-free firmware is verging on becoming a hobbyist experiment: usable in narrow situations with specially-constructed hardware but not really
    usable outside of the world of hobbyists with an interest in that specific construction of software freedom. To me, it therefore contradicts the *principles* of the Debian Project to be primarily pointing our users
    towards an installer that is prioritizing making an ineffectual
    ideological statement over making it possible for them to practically use
    the operating system.

    To be clear, I'm not saying this to try to convince you; I understand that
    you don't agree and I am not expecting you to change your mind. I'm
    saying this because I'm encouraging you to have a better summary of the opposing argument in your head. I'm a little worried that you are
    constructing a bit of a straw man by downplaying the argument in favor of supporting firmware by making it about accomodation and compromise rather
    than a principled statement about the purpose of Debian (that you may
    happen to disagree with).

    What surprises me is that there is any need of a change: the Debian
    project accepts non-free works and distribute non-free installers for
    anyone who wants them. So the practical problems facing people
    requiring non-free software appears solved or possible to solve.

    It is certainly possible to make a good-faith argument that we can solve
    this problem without SC changes.

    As you suggest in your final paragraph, maybe the issue is "merely"
    about the cost-tradeoff between having one installer and having two installer. One solution is to only have a free installer then, since
    there appears to be a lot of work involved to cater for all various kind
    of non-free content out there.

    I want to be quite clear here: I think that if Debian chose to take this
    route, to me that would be a project declaration that Debian is no longer interested in being a real operating system intended for day-to-day use on regular computers, and instead is intended to be an ideological statement
    above all else. Since I'm not interested in volunteering labor for an ideological statement with little practical use in the real world, if that
    were to happen I would stop contributing to Debian and start working on
    some other free operating system whose goals are more aligned with mine.
    This is what I meant when I said that one of the reasons why I contribute
    to Debian is that it's not gNewSense.

    The reason why I'm saying this so bluntly is that I am concerned that your wording is approaching the implication that the folks with concerns about
    this proposal are principled and the folks supporting this proposal are,
    well, less principled in some way, or are compromising their principles.
    I don't believe I am compromising my principles; I believe I am upholding *different* principles than you are, about building something that does
    things concretely in the world and values that utility at least equally
    with making ideological statements. My disagreement with you *is* a disagreement of principles, not a matter of you being more willing to
    stick with principles than I am.

    Also, to be clear, dropping the non-free installer is not on the ballot;
    none of the options, including yours as you point out, say that. So I am
    not worried that Debian is moving in this direction, and this is an
    abstract discussion rather than something I think is likely. But after
    reading your message a couple of times, it felt important to me to stress
    that I don't feel like those who would prioritize DFSG freeness have a
    monopoly on principles here.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Russ Allbery on Mon Sep 12 02:10:01 2022
    [ Apologies for going quiet again - it's been a busy few days,
    including testing and publishing two sets of point release images. ]

    On Thu, Sep 08, 2022 at 04:54:06PM -0700, Russ Allbery wrote:
    Steve McIntyre <steve@einval.com> writes:

    That looks good to me - concise and clear. Thanks!

    Steve, what do you think about the suggestion above that we have a ballot >option that only changes the SC and doesn't issue a statement on an issue
    of the day, and thus doesn't include the text of your proposal? I'm
    worried that may feel like the project isn't providing enough guidance or
    a clear enough decision, but I'm not sure if that's true.

    Quite. I can understand and sympathise with that suggestion, but I'm
    really hoping for specific direction from the wider project here
    rather than just a "we allow this" SC update. That latter would leave
    the decision on firmware-included images solely in my hands, along
    with the responsibility and (potentially) the blame here. I hope that
    makes my position clearer?

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "C++ ate my sanity" -- Jon Rabone

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMeduIACgkQWHl5VzRC aE4Row/9ELCetgx9W3ppUYxq9Ma8taP17RX18dl4rfbNjJov4RGf2FPv4U3HSdXZ YcWXMGkGZ+OaEbrR+Wyj/CsKEdQUmr/QH16TZlXVsSGHDAO3nxIOYK5PAeTS2PTZ g7vh1pQWBKvRQpBSCFkjZR8y2X2YxXNttxxzr51yghyPI5Y2oyD1/UKUSLqqwSeu 499Cc9zUHiTkX4SdTYhesNQY3/IjXrkgsiDeP2pOvXy3D5rrnD9ArNZ8feHR4YXu db2ELtR3MBXQI9vf3BTc+AfrF2JfeHRKxTptDMAN6+m1c5uLRyZ2/VkqgfPNAWBE L42FRIxiTHaOo9UGsspfCQytMowMfIokDmK2o2StHw4WqaFp8FtKJ6wR5zyHf+RV BkO5zk/zNJGHaVbfNaMxgOWwEyvDpAWLliaHJoisUq9cVwPhmk5Pau55beXfGlBO dRAnTGlilXDDGX/G6Zzeg4rLLwu6gisvSpR3e/O9TA4H5HwcIofOARRmoXH2W+wV caNiFBRf7jmwurEAErFf7YkZbg9+627/FmVDQEn8Kp4GiDERamuR3l0FWC8ioD48 bhUe9LjYNLlSLCrbYtsE0MlePcwyQE8v5A4cerB6/e5coUwBFMFFC9T2Nlt0XShe wWKXZa4eTwdw9whQ5ciC7L3M2KTYT/MqMp43QG5y/caWabKOk9Y=
    =5eBw
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet
  • From Steve McIntyre@21:1/5 to Bdale Garbee on Mon Sep 12 02:20:01 2022
    On Fri, Sep 09, 2022 at 10:37:03AM -0600, Bdale Garbee wrote:
    "Jonathan Carter (highvoltage)" <jcc@debian.org> writes:

    I do think some parts are important to include though, how about:

    I disagree strongly on this.

    We should work REALLY hard to have the SC capture the commitments we're >making to our users, and then stop.

    Yes! Thanks for pointing this out. I've been re-reading the various
    proposals around the thread here, and none of them really fit for
    me. You've hit the nail on the head for me. The point of the SC is
    describe what *we* aim to do, not what users should do.

    Specifically, we should avoid including text that attempts to tell
    them what they need to do, such as:

    We encourage software vendors who make use of non-free packages
    to carefully read the licenses of these packages to determine whether
    they can distribute it on their media or products.

    If you really think we need to say this to downstream consumers / >distributors of our work, I'm sure we can find a way to do that. But
    the Social Contract is the wrong place. It is, and must remain, an >articulation of our values and the associated commitments we're making
    to our users. The fewer words it must contain to achieve those
    objectives, the better.

    An added goal I'm trying to achieve with this change is to explain some
    practical consequences of redistributing non-free software.

    I applaud and support this goal... but please don't burden our
    fundamental statement of core values with such content.

    I think it *may* make sense to have some extra text *alongside* the SC
    to explain the ramifications for users, but it doesn't need to be in
    the main SC text itself. Does that sounds sensible?

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com < sladen> I actually stayed in a hotel and arrived to find a post-it
    note stuck to the mini-bar saying "Paul: This fridge and
    fittings are the correct way around and do not need altering"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMeePIACgkQWHl5VzRC aE7y8g/8CM4xEIoBKWpUSw1GjnhRWNbktsM6Hyt7yIYuYRP+beSvD9KfkZGIPe7j llUsr2D/cFk4sHgITKPw7yqGHztY1zS2blu8kRrKXyRsLvOysIRS+3IyFPAb31ct 01sEmdcXJ3tZMCQ4wr/7eZXSHV83thyPyNJVvchp5WOp643t9vrZmKihSzKX2Z5d 8cAmzENeUtDv2lwwxO3z4RO6HqyNwcIQdJr/xP4+MepFSxE0KURd4d4XXMduda9O RcNAiBSqzhGHpjCEpYb8YYWaFuar3kmlDXiMxULBQLDMNA8dnimoq3krngRz3Fy8 BWJVKtpjF4F/og+puVKFoKGj0H36NiJbb07UGoRJ/0Mz1Nm6F4KT2vCXf2llD9Fg unehYC4QxQyMpBqi4DP87pcAJvZlX2TneBjT5iPY1+Vc8+5vfe8Z4X56T0HrSeC1 G9Y6l+htjFP1lWR2pHSsXHtpLdzeJYjWQObdsX9qZfpTkxypbXVaR10+7cvttYaj 8y6xaJ1gcQSyJpCYXRqiPQs9C4h5W827xcFPTFi2++b3Tywjc51ONlymMGlFRNTk KLayx8QHrQjUTpodG41GBgRqCU9LUaTjY
  • From Steve McIntyre@21:1/5 to Simon Josefsson on Mon Sep 12 02:50:01 2022
    Hi Simon!

    On Fri, Sep 09, 2022 at 09:16:48AM +0200, Simon Josefsson wrote:
    Steve McIntyre <steve@einval.com> writes:

    I read your proposals as a deep frustration with this situation and a
    desire to solve the problem faster than waiting for free software
    support for relevant hardware to materialize. I don't think this is a >problem that Debian should solve by compromising on the free software >principles. I think this is a problem Debian has been and is (slowly) >solving by remaining what it has been: a free OS. There is much more >hardware that works with free software today than it was 20 years ago.
    Many hardware vendors today realize that support for GNU/Linux
    distributions like Debian is important for their success.

    But, being brutally honest, a much larger number of hardware vendors
    *don't* especially care about Debian and other Linux distros, at least
    not enough to design special hardware for us with a different firmware
    setup. As far as many vendors are concerned, the firmware blobs are
    basically part of the hardware. They're just provided in a cheaper,
    more flexible way - loading things at runtime. Lots of vendors have
    made those firmware blobs freely redistributable spefically to enable
    Linux distros to provide them to users, rather than only embedding
    them in the Windows or Mac OS drivers.

    In this world, we have a lot of users with hardware that currently
    depends on non-free firmware uploads to be functional. Telling users
    "you need 'better' hardware to run our OS" is self-defeating at best,
    elitist at worst.

    ...

    I think the difference of opinion is that your proposal is based on the >argument that it is worth compromising on the ideals of free software in >order to allow users to be able to run free software. I disagree with
    that opinion. If you disagree with my characterization of your
    proposal, let's discuss and see if there is a middle ground somewhere.

    I think you have it, yes. We're simply disagreeing about what
    compromises we're prepared to accept. I think that's fair, and fine -
    I'm explicitly asking for a project-wide opinion on this. This is
    also why I've seconded several of the competing ballot options. OK?

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Since phone messaging became popular, the young generation has lost the
    ability to read or write anything that is longer than one hundred and sixty
    characters." -- Ignatios Souvatzis

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMegCoACgkQWHl5VzRC aE7MBBAArPkdIJ8QXE9S3yWIBnX+O1p7OqYvokQIdyl++jCTMmKLg9eZqeH1ZbeO DEtb8I0XraZ8OSjhIG51W9vN0Q0ABl8ZqA5kUqoB4h+NzyphOQ2IQJ/+zEr5R+Wh tBrzED6MPfVmEQ4UQtfytLHEj9zoqtzuSBMYalsqiAE+S6Zw3KoP8CTRkt/wOpnE 0WFXRTlzinhhnFXbKXWS1cONKdGzhu9lbuuqSjQsXZjtwjRgQJ+/DGDL8pnI5f+L p1yiuQtAksgL1ghPXBH3g3cwt9tGVcaIAxn8Q+FT3IYURHn3JOqL7A9RuAgG6nmC xaDx9lErQ5tFDkeBWtBWMXk/99JC4Dlg7RUZ9B75lyAZB1F3ro/XL4BKNrSP3xgd Pkg0+zPL9txSBeqnfOQyJYCaw2QuIMjpc9zO952nlhYvLAF1301cLd+o4QW3Ba5t jdMHZCkRpIhQgniAAkvonSdreIdgqWvKBJ7bLF+ev6egqiyg7Skp/b7Xcbq0CVjp YEeEDLEt49DM2FCLDTIa1rmCqBCy7TXAPBd/KnTTtg67c3Ntg/7JF7fWtsnDpPQH CSAqPGNyLd9rgnhfbyuQAghIYqPAaMF3gUdVNX3VAdF4lB8iASZCLS
  • From Steve McIntyre@21:1/5 to Russ Allbery on Mon Sep 12 03:20:01 2022
    Hi Russ,

    As ever, I think you've described things very well here. Thanks for
    this!

    On Sun, Sep 11, 2022 at 01:22:58PM -0700, Russ Allbery wrote:
    Simon Josefsson <simon@josefsson.org> writes:

    ...

    I think I'm missing a better problem statement to motivate any changes
    here. The ones I've tried to understand, by watching Steve's
    presentation this year and reading earlier mailing list posts, does not
    convince me: it appears to boil down to a desire to help more people be
    able to install Debian and join the community. That desire is
    understandable, but does not motivate compromising the social contract
    to me.

    This position makes a lot of sense to me. I happen to disagree with it,
    but I think I understand why you hold it. I do think you're underplaying >Steve's arguments here, but I get why it's hard to summarize arguments
    that you don't agree with.

    The way I would put the argument is that one of the critical goals of
    Debian is to be a universal operating system that prioritizes its users >alongside free software, and implicit in that prioritization is that
    Debian is intended to be a practical, real-world, usable operating system
    for regular computers, not (solely) a research experiment or ideological >statement. And I would say that one of the motives of Steve's proposal
    (or, at the least, one of my motives for agreeing with it) is that I think >we, some time ago, reached the point where dynamically loadable firmware
    is necessary in normal cases for our users.

    This is the key point, exactly. I sincerely believe that Simon is
    *not* being dismissive of these needs here, but it *could* easily be
    read that way.

    ...

    The reason why I'm saying this so bluntly is that I am concerned that your >wording is approaching the implication that the folks with concerns about >this proposal are principled and the folks supporting this proposal are, >well, less principled in some way, or are compromising their principles.
    I don't believe I am compromising my principles; I believe I am upholding >*different* principles than you are, about building something that does >things concretely in the world and values that utility at least equally
    with making ideological statements. My disagreement with you *is* a >disagreement of principles, not a matter of you being more willing to
    stick with principles than I am.

    Nod. Believe me, I've agonised over raising this GR (or something like
    it) for several years before finally getting here. I know there is
    some soul-searching to be done, balancing the two priorities we
    identify in the SC: our users and free software. Each developer in the
    project will have their own position on this, and I'm immensely happy
    that we've had some healthy and respectful debate here. Thanks to
    everybody for that.

    Also, to be clear, dropping the non-free installer is not on the ballot;
    none of the options, including yours as you point out, say that. So I am
    not worried that Debian is moving in this direction, and this is an
    abstract discussion rather than something I think is likely. But after >reading your message a couple of times, it felt important to me to stress >that I don't feel like those who would prioritize DFSG freeness have a >monopoly on principles here.

    So...

    I *do* have concerns about fully advertising a non-free installer
    image that doesn't meet our stated principles.

    We've spent years asserting / pretending that non-free is not part of
    Debian, and we don't really advertise it much. Most people would never
    really care on their installed systems.

    However, I feel strongly that the non-free installer *has* to be
    handled differently. If not, we're choosing to fail on (some of) our principles. This is why I'm here with this GR after all.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "The problem with defending the purity of the English language is that
    English is about as pure as a cribhouse whore. We don't just borrow words; on
    occasion, English has pursued other languages down alleyways to beat them
    unconscious and rifle their pockets for new vocabulary." -- James D. Nicoll

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMeiIUACgkQWHl5VzRC aE4GqA//SrtN+Nl7O+wZ34vzvPHxT0+Hll6vgDvYaKWZ76xHZtnfZy9+uV+TL2mn 15qnztPIkJQlshulvYoU7mXJBwChRe7IbRBMN5igxrYAPYUZRDXGyVnDWHGRNg4N y4PrwFP1x5S4bm61mSfEoRErxaswTnfrKQ0RjvDBT+Ek/EnnECuvq0YA9c42Dp9r hR2q382ynFsueawFZHHioPm4nVq7rmtW5+PoH0MrPPkuQ8hRCE4uuJt8lATziUUf 7Uj3zIHWr0M/TCW0wlagEPBpe36PmuyH/P8gaL1XEXIWSn5Y83J68kQwa8iR33Ec p+ZQSnKvXDIoF4T2KSDGWDM16cDwEvfsr2W4nZ2PPOUPy0gDSX+7KPfi4evkA/KE +VLFyGlQUFrVy5vZasbHx13/ZMOiGnni3O0IWlu1mpqfqycwI3rBFnv3HcMCamVJ EgRkLIYz7mSpJmJjdLiNr/iaboUyouCgpZMvMywtIswhnDoT4Ls/Y8DWjuTC5IHw
    6Qv
  • From Richard Laager@21:1/5 to All on Mon Sep 12 07:00:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------MfK5jIgrnAjQ4qh4lm3sOeLC
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gOS8xMS8yMiAxOTo0MSwgU3RldmUgTWNJbnR5cmUgd3JvdGU6DQo+IEFzIGZhciBhcyBt YW55IHZlbmRvcnMgYXJlIGNvbmNlcm5lZCwgdGhlIGZpcm13YXJlIGJsb2JzIGFyZQ0KPiBi YXNpY2FsbHkgcGFydCBvZiB0aGUgaGFyZHdhcmUuIFRoZXkncmUganVzdCBwcm92aWRlZCBp biBhIGNoZWFwZXIsDQo+IG1vcmUgZmxleGlibGUgd2F5IC0gbG9hZGluZyB0aGluZ3MgYXQg cnVudGltZS4NClRvIG1lLCB0aGlzIGlzIGFuIGltcG9ydGFudCBwYXJ0IG9mIHRoZSBzaXR1 YXRpb24gd2UgZmluZCBvdXJzZWx2ZXMgaW4uIA0KSXQgc2VlbXMgdGhhdCB0aGVyZSBpcyBh IHRyZW5kIHdoZXJlICJmaXJtd2FyZSIgaXMgbW92aW5nIGF3YXkgZnJvbSANCiJST00iIChn ZW5lcmFsbHkgd3JpdGFibGUgZmxhc2gpIGludG8gUkFNLiBUaGF0IGlzLCBpbiB5ZWFycyBw YXN0LCB0aGUgDQpmaXJtd2FyZSBjYW1lIHByZWxvYWRlZCBvbiB0aGUgZGV2aWNlLCBidXQg bm93IHRoZSBkcml2ZXIgcHVzaGVzIGl0IGF0IGJvb3QuDQoNClRoaXMgaGFzIGNlcnRhaW5s eSBkcmF3biBvdXIgYXR0ZW50aW9uIHRvIHRoZSBub24tZnJlZSBiaXRzLiBCdXQgDQpzaGlw cGluZyB0aGUgbm9uLWZyZWUgYmxvYnMgYW5kIGxvYWRpbmcgdGhlbSBhdCBydW4tdGltZSBy ZXN1bHRzIGluIA0KZXhhY3RseSB0aGUgc2FtZSBmcmVlIGFuZCBub24tZnJlZSBiaXRzIGJl aW5nIGV4ZWN1dGVkIGFzIHRoZSBvbGQgbW9kZWwuDQoNCldoaWxlIEkgd291bGQgdmVyeSBt dWNoIHByZWZlciBmcmVlIGZpcm13YXJlIChhbmQgSSBhcHBsYXVkIHRob3NlIG1ha2luZyAN CmZyZWUgcmVwbGFjZW1lbnRzKSwgbXkgdmlldyBpcyB0aGF0IG1vdmluZyBub24tZnJlZSBi aXRzIGZyb20gIlJPTSIgdG8gDQppbnN0YWxsZXIgbWVkaWEgKGFuZCBpbnN0YWxsZWQgc3lz dGVtKSBkb2VzIG5vdCBtYWtlIHRoZSBwcm9ibGVtIHdvcnNlLiANCkluIGNvbnRyYXN0LCBO T1QgcHV0dGluZyB0aGUgYmxvYnMgb24gdGhlIGluc3RhbGxlciBtZWRpYSBoYXMgdGhlIA0K b2J2aW91cyBkb3duc2lkZSBvZiBoYXJkd2FyZSBub3Qgd29ya2luZy4NCg0KLS0gDQpSaWNo YXJkDQo=

    --------------MfK5jIgrnAjQ4qh4lm3sOeLC--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMeu1EACgkQ+HlhmcBF hs7nHQ//WHQoGO2G9xCza/E1j2qWXgddWgpS4oT3Ej/9+wzS0OGjKNQijrliL3La FIBYlpFIcqCpn8kVzJvgTgcjaG9bYZ4ofcRaJcNFFdpgZepJ9C+KiERuGbT5QFaZ V0cH0CCBdkxsSdh5JPT7FfWt8qyqkLXgbuiA7SjtirMBUtXPcSYzn/hsEA2NgF7R AJzRQL1ygjYDRutn4n5DnRCK7SoTNU/taZYAcYYKZjSD9KU6xSf/sgS8Fjhh3C5n ZpCQs1sT4Ycooyvps0+P1LLyAEugRcgfgJeA9TwY1lCQMxfJowIwkoxDF3tnE2jA f/0iRVJqxdho5p9+5A0NmDrdXESZ1VI8zMuLh5l+Jr2a2u8DCxkDrUlJqJ76zLfM tcXcqyWIJu3E9jJRW7mk7bCn7Xs2GWlSuWN9XwB9QjkhJU57IMnpvsZk/+jHMDUb Rmn1NMNhRrSpBSnioHDqFGZQ+8F/8M5AGooz+726kWBNI5xypvWnQiDVm/044H/s ph0w3Vk4FMUhjc6FCLQhdJ7zmSK+YXqDzosg5MllbtBhQrHeEO5JsLGMRpDpRdLX GtFGaIuLmJETK12d3VcotIBArTv1/9qHd5EmgLZ5JzmfK6xAQRUe07bdrrDk2CKi Wfd7iu87I8+gR12p2trxDjhDyrhYMabZsXmRJMWiCZXZavjCGM4=
    =cHfi
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bart Martens@21:1/5 to Steve McIntyre on Mon Sep 12 08:00:01 2022
    On Mon, Sep 12, 2022 at 02:16:53AM +0100, Steve McIntyre wrote:
    However, I feel strongly that the non-free installer *has* to be
    handled differently. If not, we're choosing to fail on (some of) our principles. This is why I'm here with this GR after all.

    So do I. Or does proposal A describe a free installer?


    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    "The problem with defending the purity of the English language is that
    English is about as pure as a cribhouse whore. We don't just borrow words; on
    occasion, English has pursued other languages down alleyways to beat them
    unconscious and rifle their pockets for new vocabulary." -- James D. Nicoll



    --

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Steve McIntyre on Mon Sep 12 17:10:01 2022
    Steve McIntyre <steve@einval.com> writes:

    I think the difference of opinion is that your proposal is based on the >>argument that it is worth compromising on the ideals of free software in >>order to allow users to be able to run free software. I disagree with
    that opinion. If you disagree with my characterization of your
    proposal, let's discuss and see if there is a middle ground somewhere.

    I think you have it, yes. We're simply disagreeing about what
    compromises we're prepared to accept. I think that's fair, and fine -
    I'm explicitly asking for a project-wide opinion on this. This is
    also why I've seconded several of the competing ballot options. OK?

    Thanks for confirming my understanding Steve -- and accept my apology
    for labeling it as a compromise of ideals. Russ' explanation made me
    realize that it is more constructive to see this as a prioritization of
    another ideal.

    What still puzzles me is that I regarded myself as having worked with a
    lot of computer hardware over the years, without experiencing the kind
    of situation described here. Yes, some hardware doesn't work with
    Debian, but no I would not blame Debian for that nor give up or stop contributing to Debian because of it, and no, I don't perceive such
    hardware to be as overwhelmingly dominant as described. I think the
    answer must be that people have different biases to what kind of
    hardware they are exposed to. And perhaps a different preference how to
    help people who are in an unfortunate situation.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx9JlRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFouXSAP9ISfyiSBtZDVOta1PFb8PYtPwoAPp1 5Z5usfr5oE8KLgEA7iRhhNUlWLN8ELBxdhZ6k2OHX8c6BFi/PQOenj05ygM=
    =QcD6
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Russ Allbery on Mon Sep 12 16:50:01 2022
    Russ Allbery <rra@debian.org> writes:

    I think it is possible to argue in good faith that the Debian installer is not part of the Debian system as defined in SC 1. I would not personally make that argument, but I don't think it's an unreasonable argument to say that the Debian system is the packages in our "main" apt repository, and
    the installer is a separate thing from the system.

    Right, this is convincing and I can see how that would work, and I was
    wrong to dismiss that approach. Where I think it is problematic is when
    Debian no longer ships a free installer (proposal A and E). How would
    you install any of the free Debian packages without a free installer, if
    you care about not running proprietary software? It seems similar to
    the walled garden of non-free app stores.

    I think I'm missing a better problem statement to motivate any changes
    here. The ones I've tried to understand, by watching Steve's
    presentation this year and reading earlier mailing list posts, does not
    convince me: it appears to boil down to a desire to help more people be
    able to install Debian and join the community. That desire is
    understandable, but does not motivate compromising the social contract
    to me.

    This position makes a lot of sense to me. I happen to disagree with it,
    but I think I understand why you hold it. I do think you're underplaying Steve's arguments here, but I get why it's hard to summarize arguments
    that you don't agree with.

    The way I would put the argument is that one of the critical goals of
    Debian is to be a universal operating system that prioritizes its users alongside free software, and implicit in that prioritization is that
    Debian is intended to be a practical, real-world, usable operating system
    for regular computers, not (solely) a research experiment or ideological statement. And I would say that one of the motives of Steve's proposal
    (or, at the least, one of my motives for agreeing with it) is that I think we, some time ago, reached the point where dynamically loadable firmware
    is necessary in normal cases for our users.

    In other words, I would say that an installer that doesn't support
    non-free firmware is verging on becoming a hobbyist experiment: usable in narrow situations with specially-constructed hardware but not really
    usable outside of the world of hobbyists with an interest in that specific construction of software freedom. To me, it therefore contradicts the *principles* of the Debian Project to be primarily pointing our users
    towards an installer that is prioritizing making an ineffectual
    ideological statement over making it possible for them to practically use
    the operating system.

    To be clear, I'm not saying this to try to convince you; I understand that you don't agree and I am not expecting you to change your mind. I'm
    saying this because I'm encouraging you to have a better summary of the opposing argument in your head. I'm a little worried that you are constructing a bit of a straw man by downplaying the argument in favor of supporting firmware by making it about accomodation and compromise rather than a principled statement about the purpose of Debian (that you may
    happen to disagree with).

    Thanks -- this helps me understand the two principles at play here:

    1) having a free Debian

    2) having a Debian that works on as much hardware as possible

    I see how you come to the conclusion that including non-free works is a
    good idea when you want to reach principle 2). It also makes it clear
    that there is a conflict and a trade-off to be made, faced with hardware
    that requires non-free works before it starts to work.

    Principle 2) is a respectable and useful principle, it helps to guide
    decisions and priorities. It is probably a much more common principle
    than 1) -- I assume Ubuntu, Windows, Android etc are guided by that
    principle to a large extent.

    For me, principle 1) is more important than 2). For you and Steve, if I
    may put words in your mouth, principle 2) is more important than 1).

    I don't think the principle in 2) is well supported by Debian
    documentation. You describe it as a critical goal of the project. I'm
    not going to convince you to give up principle 2), but maybe I can make
    a point that there appears to be a gap between that principle and the documentation describing what the Debian project is about.

    If we go to

    https://www.debian.org/devel/constitution.en.html

    it says

    The Debian Project is an association of individuals who have made
    common cause to create a free operating system.

    If we go to (linked from the front-page of debian.org):

    https://www.debian.org/intro/philosophy.en.html

    it says

    The Debian Project is an association of individuals, sharing a common
    goal: We want to create a free operating system, freely available for
    everyone. Now, when we use the word "free", we're not talking about
    money, instead, we are referring to software freedom.

    If we go to

    https://www.debian.org/code_of_conduct.en.html

    it says

    Debian Contributors have many ways of reaching our common goal of a
    free operating system which may differ from your ways. Assume that
    other people are working towards this goal.

    I could go on. I tried to find text that supports the position that
    Debian will work on all hardware and do whatever users wants to do, but
    I don't see -- most likely because I'm already deeply biased by my
    preference towards principle 1) rather than 2).

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx9EyRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFonq1AP0cUwPvfJyCaaPdDSvKKmFUirLouB1W XIEfAxd3j7u78gEA1MOi/R0T0ZqJdh6ljNPHxGOgphRhAPgnigbq3eAQCwo=
    =V+uf
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Simon Josefsson on Mon Sep 12 17:30:01 2022
    On Mon, Sep 12, 2022 at 05:00:37PM +0200, Simon Josefsson wrote:

    What still puzzles me is that I regarded myself as having worked with a
    lot of computer hardware over the years, without experiencing the kind
    of situation described here. Yes, some hardware doesn't work with
    Debian, but no I would not blame Debian for that nor give up or stop >contributing to Debian because of it, and no, I don't perceive such
    hardware to be as overwhelmingly dominant as described. I think the
    answer must be that people have different biases to what kind of
    hardware they are exposed to. And perhaps a different preference how to
    help people who are in an unfortunate situation.

    You've described it already - you're using a 12yo laptop (X200) with
    wired network (AFAICS?) and some other non-portable machines.

    Many common laptops in the last 5-10 years don't come with wired
    ethernet; it's becoming rarer over time. They ~all need firmware
    loading to get onto the network with wifi. Many now need firmware for
    working non-basic video, and audio also needs firmware on some of the
    very latest models. The world has changed here, and I think your
    perceptions may be out of date.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "Because heaters aren't purple!" -- Catherine Pitt

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmMfTngACgkQWHl5VzRC aE6vcxAAxPTR1Cqp3IjI4/OTNghfSwJGPJTimJqgT0c542n1PPXVSORGyPhWmzzs ru0pp9mgtYCmbpwH8QgUiizFsCwK1rChAXyJeCBqQYTVMtGn9jYluVndeZixiNCG B4RaHZid0636ksbkKBI3sMN35hiBo2oJ3UGgKdIoLj4XWblEBgdNuzhAZDKSNS/j OJ+Wj1Nj+1O1G/REnMeXiGErJTq3wrhpUS7qETNzQEJCdvFNM0hZLZGpqLnc0llJ RuZlvwcXAgOUgnSXh/i7aQkp4gZtZMMk8Y1v+J6rrbQAywG5z/Yhs9BnPAuwR8S7 +YuIE31JabiEkVvRn07d4L2h5lrBLo2gqAOg32GazuBubFRQ/l56fZlA9KnGLsDi dLZvVcGLh/7fWY1TljDHchsQEND9jl6ucT/aI3bEPLhs4t9BliCdUSjdWKVsEWwe H8Myp/VRP2+1s3AuvW8LX3mp+Sc7i3wOjglyQX+xE1m3BIaCSEsDyZw+Y+2fnfWp +Iss2JM79KjTaiSLX4o0kXueVowkNo9A5aY4p7DHla99eA10Vhm+iPDnafQB0v+s ReDP7BrZ+mhWnpHnYWlPGF2+fJxbN98wq2sL6jHMqAzXIxCJMF581M8SIxA724t3 H/hLdDbuVeHQg8K21qmQ7wPe6ZDNQkISugsbSV6XkWW0T4YovhU=
    =TihO
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origi
  • From Russ Allbery@21:1/5 to Simon Josefsson on Mon Sep 12 17:40:01 2022
    Simon Josefsson <simon@josefsson.org> writes:

    Thanks -- this helps me understand the two principles at play here:

    1) having a free Debian

    2) having a Debian that works on as much hardware as possible

    This summary is moving in the right direction! But your phrasing of 2)
    isn't the principle that I personally hold; it's a consequence of that principle. I would rather go one level deeper and phrase it something
    more like this:

    2) having a Debian that is useful for and supports the needs of its users

    In other words, the principle for me isn't about hardware or any other
    similar specific problem. It's about making Debian usable in the general sense. For me, this is an ideological principle in support of free
    software: I believe the only way to extend the spread of free software and
    make it an ideological force in the computing world is to make software
    people can actually use, while making it as free as possible without
    making it useless to them.

    When I first got deeply interested in free software in the late 1990s, I
    looked around and saw two basic mindsets towards free software. I'd
    classify those as the FSF approach and the Debian approach. The FSF
    decided to go down the route of ideological purism: they made the absolute minimum number of compromises possible and then shed them as soon as
    possible. Debian instead took the route of practicality and tried to make
    the operating system usable and flexible, recognizing that sometimes for
    some people that would include non-free software. That upset the FSF
    quite a bit; they considered (and I believe consider) Debian to not
    "really" be a free software project because of this stance.

    My opinion then, and my opinion now, is that Debian has the better of that argument. Debian's approach is simply more effective *at promoting free software*. As a result (not only of that stance, but largely I think
    because of that stance) the FSF's attempts at producing operating systems
    have been hobbyist experiments and ideological statements that almost no
    one uses. Meanwhile, Debian has become the foundation of numerous major
    free Linux distributions.

    For me, principle 1) is more important than 2). For you and Steve, if I
    may put words in your mouth, principle 2) is more important than 1).

    Ah, no, I have explained this poorly. This is not at all true for me, and
    I suspect also not true for Steve.

    For me, principle 1) is *equally important* than principle 2), and my disagreement with you is that I feel like you're discarding principle 2)
    rather than giving it equal weight.

    I don't think the principle in 2) is well supported by Debian
    documentation.

    I believe that you're missing point 4 of the Social Contract.

    We will be guided by the needs of our users and the free software
    community. We will place their interests first in our priorities. We
    will support the needs of our users for operation in many different
    kinds of computing environments.

    The purpose of the Debian Project is absolutely to create a free software distribution. We are not Apple; the point is to build on top of free
    software. If I really considered 2) much more important than 1), I'd be
    in favor of rolling non-free into main, including non-free drivers, and so forth. I am not.

    But Debian, very early on, decided to navigate the tension between those
    two equally-held principles by taking the route of making it usable
    *first* and then as free as possible. The guiding principle where we have options about how to do something where both can work for the user is free software; that's the point of this endeavor. But we don't tell users that their hardware is useless and they need to buy new hardware in order to maintain free software purity. We meet them where they are, and then help
    them make their system as free as possible.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Steve McIntyre on Mon Sep 12 19:30:01 2022
    Steve McIntyre <steve@einval.com> writes:

    Many common laptops in the last 5-10 years don't come with wired
    ethernet; it's becoming rarer over time. They ~all need firmware
    loading to get onto the network with wifi. Many now need firmware for
    working non-basic video, and audio also needs firmware on some of the
    very latest models. The world has changed here, and I think your
    perceptions may be out of date.

    I recall that it took ~5 years until hardware (usually audio, video,
    network cards) was well supported with stable releases of free software distributions in the 1990's. Often it was never possible to get some
    hardware to work with free software, especially laptops. This has
    pretty much been the same since then. I see no signs of this ever
    changing while new hardware that requires non-free software is
    introduced. It takes time until free software works with hardware made
    by cooperative manufacturers, and longer for uncooperative
    manufacturers. I don't consider this a problem a free OS can solve.
    Maybe the expectations of what hardware Debian should work on has
    changed, but my perception is not that the situation was significantly different 5, 10, 15 or 20 years ago. I accept that we will have
    different views of this.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx9qXRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFonjmAPwN+zZ8IBDzRtt41wrT77Di095VCNhb q9xq58yk15CMpQD+IakAQQPXvSQsbRG6VPu9HCHOOaXUraJ5Wo6WTAiuxgA=
    =Zuh0
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Josefsson on Mon Sep 12 19:50:01 2022
    Simon Josefsson <simon@josefsson.org> writes:

    I recall that it took ~5 years until hardware (usually audio, video,
    network cards) was well supported with stable releases of free software distributions in the 1990's. Often it was never possible to get some hardware to work with free software, especially laptops. This has
    pretty much been the same since then.

    I think what you're missing is that this changed about ten or fifteen
    years ago. I can now buy a new off-the-shelf computer and run Debian on
    it *immediately* because Linux now supports modern hardware and you don't
    have to run ancient gear.

    This is HUGE for free software because it increases our potential audience
    and reach by orders of magnitude. It lets Debian serve as the basis for
    modern server farms. It lets the sort of early adopters who tend to bring other people along with them to use free software because it works on the
    new, shiny things they're interested in. The days where you had to point people at extensive tables and wikis to figure out if Linux is even an
    option for them are long gone, and good riddance.

    These are people we always *wanted* to reach, and *tried* to reach with
    wikis of non-free drivers and configuration options and kernel patches and unreleased tarballs, and now *can* reach directly without all of that
    tedious nonsense that most people hated dealing with. This is an immense positive development for free software; it upends the perception that
    Linux is something that only hobbyists can run on ancient hardware and
    that's unsuitable for any serious work (an opinion that was nearly
    universal 20 years ago).

    Sometimes it feels to me like people think the mere presence of any
    non-free software in a system will interact with our message like
    antimatter to matter, and because non-free firmware was used to get Debian running, the user will now think "oh, free software is useless." (I would
    go so far as to say that this often seems like the official position of
    the FSF.) But this is nonsense. I cannot overstate how much the typical
    user does not care about firmware and how little it matters for their perceptions of the merits or lack thereof of free software. To them, it's
    an implementation detail of their hardware. The evaluation of free
    software succeeds or fails based on the applications and development
    enviroment and services they're directly interacting with. All they want
    from the hardware is to work.

    That doesn't mean non-free firmware is fine; it's not, and ideally we
    would have free firmware. (I have a much longer rant, though, about how ahistorical it is to think that non-free firmware is a step backwards,
    when it's the exact opposite.) But it's not the front on which the
    ideological fight over the merits of software freedom is fought. It is,
    at best, a tedious and irritating distraction.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon McVittie@21:1/5 to Simon Josefsson on Mon Sep 12 20:10:01 2022
    On Mon, 12 Sep 2022 at 19:20:29 +0200, Simon Josefsson wrote:
    Steve McIntyre <steve@einval.com> writes:
    Many common laptops in the last 5-10 years don't come with wired
    ethernet; it's becoming rarer over time. They ~all need firmware
    loading to get onto the network with wifi. Many now need firmware for working non-basic video, and audio also needs firmware on some of the
    very latest models. The world has changed here, and I think your perceptions may be out of date.

    I recall that it took ~5 years until hardware (usually audio, video,
    network cards) was well supported with stable releases of free software distributions in the 1990's.

    I don't think this is the same thing at all. In the 1990s, it took that
    length of time to get Free drivers that run on the main CPU, communicating
    with firmware that the devices already had on-board (in ROM or flash) - but
    it was usually unnecessary for the OS/driver vendor (in our case Debian)
    to supply the device's firmware, because that was already on-board in
    permanent storage, updated rarely or not at all.

    In the 2020s, independent of how quickly or slowly we get Free drivers
    that run on the main CPU, it's often the case that those Free drivers
    will need to know how to upload firmware that will run on the device
    itself into the device's RAM, and the OS/driver vendor is expected to
    supply that firmware, because the device simply does not have permanent
    storage on-board where it could keep its firmware any more - at power-on,
    all it knows how to do is accept a firmware upload, and it doesn't know
    how to play audio or join a network or whatever is its real job until
    that firmware arrives.

    This design isn't really any less Free than what you had in the 1990s:
    in both cases, if you're using a Free OS and Free drivers, you get
    total control over what's running on the main-CPU side of the bus, and
    no control over what's running on the peripheral device side of the bus
    (other than to the extent that it can be controlled by requests sent
    by the Free driver). However, the presence of non-Free firmware is a
    lot more visible now, because the hardware manufacturer now expects the OS/driver vendor to be involved in providing it to the hardware.

    For devices that *do* still have on-board storage (notably those that
    need to start up before the OS kernel), often there is a version of
    the non-Free firmware in permanent storage, which is enough to make the
    device basically work, but is likely to contain bugs or even security vulnerabilities (because firmware is software written by fallible humans,
    and therefore has bugs). In these cases, being able to upgrade it to a
    newer non-Free firmware blob is obviously less desirable than having a
    Free replacement, but it's better than being stuck with the version that originally shipped on your device, and doesn't really give you any less
    freedom than if you were stuck with the original version.

    In some ways the new situation is better for people who want to reverse-engineer device firmware - the proprietary firmware blob is right
    there for you to look at (rather than being hidden away), and if the
    device isn't checking a signature, modifying the Free driver to upload
    your replacement firmware blob into the device's RAM is going to be a
    lot simpler than reflashing the device using some out-of-band mechanism.

    I think you mentioned elsewhere in the thread that you're using a Lenovo
    X200? If that's the case, then I'm sorry to inform you that you're
    relying on a non-free BIOS (unless you replaced it with Coreboot, which
    most of our users are not going to be willing or able to do), non-free embedded-controller firmware (for the keyboard and battery charging,
    among other things), a CPU with non-free microcode, and probably a bunch
    of miscellaneous ROMs in things like audio hardware. They might never
    have gone through Debian's web servers, and you might never have upgraded
    them, but they're there (and you probably *should* upgrade some of them, particularly the BIOS and the CPU microcode, because otherwise there
    are likely to be unfixed security vulnerabilities).

    smcv

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Russ Allbery on Mon Sep 12 20:20:01 2022
    Russ Allbery <rra@debian.org> writes:

    Simon Josefsson <simon@josefsson.org> writes:

    Thanks -- this helps me understand the two principles at play here:

    1) having a free Debian

    2) having a Debian that works on as much hardware as possible

    This summary is moving in the right direction! But your phrasing of 2)
    isn't the principle that I personally hold; it's a consequence of that principle. I would rather go one level deeper and phrase it something
    more like this:

    2) having a Debian that is useful for and supports the needs of its users

    Thanks for calibrating it, that guiding principle makes sense as well.

    When I first got deeply interested in free software in the late 1990s, I looked around and saw two basic mindsets towards free software. I'd
    classify those as the FSF approach and the Debian approach. The FSF
    decided to go down the route of ideological purism: they made the absolute minimum number of compromises possible and then shed them as soon as possible. Debian instead took the route of practicality and tried to make the operating system usable and flexible, recognizing that sometimes for
    some people that would include non-free software. That upset the FSF
    quite a bit; they considered (and I believe consider) Debian to not
    "really" be a free software project because of this stance.

    Isn't the Debian approach you describe actually the open source (or
    later, open core) approach?

    What may be a problem is that the open source/core model came about
    inspired by the Debian model, but the open source terminology wasn't established at the time. So the wording of the Debian policies refer to
    free software and the FSF philosophical ideas, but the intention was not
    really the same and the gap between the words and intended meaning
    continue to haunt us here.

    My opinion then, and my opinion now, is that Debian has the better of that argument. Debian's approach is simply more effective *at promoting free software*. As a result (not only of that stance, but largely I think
    because of that stance) the FSF's attempts at producing operating systems have been hobbyist experiments and ideological statements that almost no
    one uses. Meanwhile, Debian has become the foundation of numerous major
    free Linux distributions.

    To me, the FSF's attempts to produce an operating system lead to the
    range of GNU/Linux distributions that came about during that time, which
    we all still use.

    For me, principle 1) is more important than 2). For you and Steve, if I
    may put words in your mouth, principle 2) is more important than 1).

    Ah, no, I have explained this poorly. This is not at all true for me, and
    I suspect also not true for Steve.

    For me, principle 1) is *equally important* than principle 2), and my disagreement with you is that I feel like you're discarding principle 2) rather than giving it equal weight.

    Okay. But given a situation when someone comes to you with a hardware component that requires non-free software to work, and asks you to
    install Debian on it, would you resolve that by

    1) install the free Debian system on it and provide them with the
    documentation and binaries how to install the non-free software
    required after they made their own informed decision

    or

    2) install the Debian system including the non-free work on it and
    provide them with documentation explaining what happened

    ?

    I take it yours and Steve's proposals is 2) while mine is 1).

    And, yes, approach 1) may result in the possibility that you have to say "sorry, I can't install Debian on your hardware, and here is why". We
    say the same when someone comes with an old 8086 processor or a quantum computer prototype too, too broaden the view a bit.

    In many situations there is no conflict between principle 1) and 2) but
    in the above case there is a direct conflict and you have to prioritize
    between them.

    I don't think the principle in 2) is well supported by Debian
    documentation.

    I believe that you're missing point 4 of the Social Contract.

    We will be guided by the needs of our users and the free software
    community. We will place their interests first in our priorities. We
    will support the needs of our users for operation in many different
    kinds of computing environments.

    The entire SC4 reads:

    Our priorities are our users and free software

    We will be guided by the needs of our users and the free software
    community. We will place their interests first in our priorities. We
    will support the needs of our users for operation in many different
    kinds of computing environments. We will not object to non-free works
    that are intended to be used on Debian systems, or attempt to charge a
    fee to people who create or use such works. We will allow others to
    create distributions containing both the Debian system and other
    works, without any fee from us. In furtherance of these goals, we will
    provide an integrated system of high-quality materials with no legal
    restrictions that would prevent such uses of the system.

    My reading is that the text assumes that the Debian system is 100% free
    (DSC1) but it says that we agree that our users may want to use non-free
    works on it. If the Debian system was not 100% free, not much of that
    text makes a lot of sense to me.

    I believe the last sentence reinforces my interpretation: an installer
    with non-free works on it would not fulfil the last criteria "with no
    legal restrictions".

    We read this paragraph differently. I'm trying to share my reading and
    realize my interpretation may not be the intended one, and I accept that
    your interpretation is nearer the intended reading because you are more familiar with the Debian project than I am. I'm trying to understand,
    but I'm struggling.

    The purpose of the Debian Project is absolutely to create a free software distribution. We are not Apple; the point is to build on top of free software. If I really considered 2) much more important than 1), I'd be
    in favor of rolling non-free into main, including non-free drivers, and so forth. I am not.

    But Debian, very early on, decided to navigate the tension between those
    two equally-held principles by taking the route of making it usable
    *first* and then as free as possible. The guiding principle where we have options about how to do something where both can work for the user is free software; that's the point of this endeavor. But we don't tell users that their hardware is useless and they need to buy new hardware in order to maintain free software purity. We meet them where they are, and then help them make their system as free as possible.

    My view is that the Debian resolved the tension by providing a 100% free
    Debian and include in -- and invite to -- the community help and
    resources to solve the situation with non-free works as much as Debian
    is able to do within the restriction of a 100% free Debian, to meet
    people where they are and to make their system as free as possible.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx935RQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFopXcAQDuNuOx1LExNYnYYRq9bA0Kbr+tvefQ AnMqyRqd06wuEAD9G8BkpxMxgGY/kIt0WLhSSmbSops35Sx8rbgAxpPDHwU=
    =cj1a
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Russ Allbery on Mon Sep 12 21:10:01 2022
    Russ Allbery <rra@debian.org> writes:

    Simon Josefsson <simon@josefsson.org> writes:

    I recall that it took ~5 years until hardware (usually audio, video,
    network cards) was well supported with stable releases of free software
    distributions in the 1990's. Often it was never possible to get some
    hardware to work with free software, especially laptops. This has
    pretty much been the same since then.

    I think what you're missing is that this changed about ten or fifteen
    years ago. I can now buy a new off-the-shelf computer and run Debian on
    it *immediately* because Linux now supports modern hardware and you don't have to run ancient gear.

    Do you mean install Debian using our non-free installer?

    I've seen several times here the argument that Debian does NOT work on
    modern hardware, and that's why Debian must change or we risk being
    obsolete and users go away.

    My experience is the same as you describe, with the free installer: if
    you pick the right hardware, Debian works directly today. If you pick
    the wrong hardware, you may need the non-free installer and/or wait a
    couple of years for support, and risk never being able to run Debian.

    The loop seems similar to what we did 20+ years ago: you buy a modern
    Sun, DEC, SGI etc workstation and install the GNU tools on it to get a
    decent free software environment.

    I believe Debian's primary contribution was that it put together all the
    free software in a way that I didn't first have to install (and
    maintain) SunOS, OSF/1, IRIX etc before getting to the decent free
    environment.

    Over time we added (as an option) the non-free installer so Debian also
    starts on uncooperative hardware. That's helpful.

    What it seems this vote is about is to go back to the time where a
    non-free work is required before you can get to the decent free
    environment.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx+CkxQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFoiSLAP9y5LfwV+nOojVE7pCCdzsm4lUWq6BI +T4Asg9fxFn1fQEAuSR9ZaXmMVDAOBGnIpXfvKmigQJdcHCYSwGWeeRw+wA=
    =8jM9
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to All on Mon Sep 12 21:50:01 2022
    Thanks for long post, thoughtful and I only have a reflection left:

    Okay. But given a situation when someone comes to you with a hardware
    component that requires non-free software to work, and asks you to
    install Debian on it, would you resolve that by

    1) install the free Debian system on it and provide them with the
    documentation and binaries how to install the non-free software
    required after they made their own informed decision

    or

    2) install the Debian system including the non-free work on it and
    provide them with documentation explaining what happened

    ?

    I take it yours and Steve's proposals is 2) while mine is 1).

    Correct.

    Wonderful -- it is good that I am able to finally express your view in a
    way that you actually agree with.

    And, yes, approach 1) may result in the possibility that you have to say
    "sorry, I can't install Debian on your hardware, and here is why". We
    say the same when someone comes with an old 8086 processor or a quantum
    computer prototype too, too broaden the view a bit.

    Right, but in that case you would say "no one has written the code to make this work." In the case of 1 above, honestly the way I would read that is that you are saying "the software to make this computer work exists, but
    it is a politically incorrect thoughtcrime and therefore I am not allowed
    to touch it because it would violate my purity," something that I would
    find INTENSELY off-putting. This is in part for personal reasons due to
    past experiences with religious cult behavior, which leaves me with a deep-seated flinch reaction to things that feel like purity culture.

    Sure, although I would settle with: "no one has written the free code to
    make this work" and point at the DFSG, the non-free code that exists and
    even explain how to use that non-free code, and the problems and
    consequences of doing that.

    I think precisely that has been the Debian way, and believe it is a
    successful recipe.

    It is a way that I practice myself, for example I got non-free GPS code
    to work on a free Android-clone: https://blog.josefsson.org/2017/03/04/gps-on-replicant-6/

    I think this is also the traditional FSF approach: develop free software
    on non-free systems (SunOS etc) and acknowledged that supporting free
    software on non-free environments is useful and important -- but not as
    useful and important as supporting free software on free environments,
    when that exists.

    I agree purity leads to cults and problems. My view of this situation
    is that the Debian project is climbing up the stairs of the pragmatists'
    ivory tower to the point where it suffers from the ills of purism: by forbidding the free installer, the pragmatist becomes the mirror image
    of a purist that wants to forbid everything that doesn't comply with its
    own ideal.

    In my mind, the pragmatic approch is to publish both the free and
    non-free installer.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYx+LRRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFoiA+AQCn3n5KsZkYZXMz63LRk0mIszURngbn At8CHnZpagaN7gD9F2tFVGWOFps4rDJPVIwZjMfvTKlWOpmRhN8KUDPJAgA=
    =W+Ch
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ansgar@21:1/5 to Simon Josefsson on Mon Sep 12 21:30:01 2022
    Hi,

    On Mon, 2022-09-12 at 21:03 +0200, Simon Josefsson wrote:
    My experience is the same as you describe, with the free installer:
    if you pick the right hardware, Debian works directly today.

    By "right hardware", I assume you mean hardware that comes with already preinstalled non-free software?

    Does choosing only hardware with preinstalled non-free software
    (instead of partially OS-supplied non-free firmware) make the non-free
    software more free?

    What it seems this vote is about is to go back to the time where a
    non-free work is required before you can get to the decent free
    environment.

    Try removing all non-free firmware then. Your system won't boot, not
    display anything and you won't be able to input anything either.

    Ansgar

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Josefsson on Mon Sep 12 21:20:01 2022
    Simon Josefsson <simon@josefsson.org> writes:
    Russ Allbery <rra@debian.org> writes:

    I think what you're missing is that this changed about ten or fifteen
    years ago. I can now buy a new off-the-shelf computer and run Debian on
    it *immediately* because Linux now supports modern hardware and you don't
    have to run ancient gear.

    Do you mean install Debian using our non-free installer?

    Yes. I've had to use the non-free installer for every system I've
    installed Debian on in the last ten years, and I have had to use at least
    some non-free packages on nearly every system I have used Debian on since
    I started using Debian. Without non-free, I would never have started
    using Debian in the first place because I literally could not have run it
    on the computers I owned (by which I mean that a purely free system might
    in some cases have technically "worked" but not had any graphics or other
    major problems that would have rendered it unusable for my purposes).

    What it seems this vote is about is to go back to the time where a
    non-free work is required before you can get to the decent free
    environment.

    This is the only part of your argument that I truly don't understand. It
    seems like you think that because the installer has the *option* of
    installing non-free firmware, it is somehow fatally compromised from a
    free software perspective, and that position doesn't make sense to me.

    Debian has always had the option of installing non-free software. Many of
    us have always used it; some of us do not use it. I don't feel like this fundamentally changes if the installer includes non-free firmware
    (provided, of course, that we are careful about the non-free license terms
    that we are willing to tolerate in the installer image, something that I completely agree is important).

    I do, for what it's worth, fully support having a way to tell the
    installer that you don't want any non-free bits, and I believe that's part
    of the plan with option A/E.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Josefsson on Mon Sep 12 22:20:01 2022
    Simon Josefsson <simon@josefsson.org> writes:

    Wonderful -- it is good that I am able to finally express your view in a
    way that you actually agree with.

    Yes, thank you very much for your thoughtful and productive engagement in
    this thread! It's really satisfying to be able to talk about things that provoke strong feelings and be able to have a productive conversation that helps both people understand each other.

    I realize that in places I stated some views quite strongly or bluntly,
    and I really appreciate your willingness to read past that and understand
    what I was trying to express rather than the sometimes-flawed tone in
    which I expressed it.

    I agree purity leads to cults and problems. My view of this situation
    is that the Debian project is climbing up the stairs of the pragmatists' ivory tower to the point where it suffers from the ills of purism: by forbidding the free installer, the pragmatist becomes the mirror image
    of a purist that wants to forbid everything that doesn't comply with its
    own ideal.

    In my mind, the pragmatic approch is to publish both the free and
    non-free installer.

    So, spoiler, while I'm going to vote E first (I have a policy of only
    proposing ballot options I would vote first), my guess is that B is going
    to win for precisely the reasons you describe. I will certainly vote B
    above NOTA. (For full disclosure, my vote is likely E>B>C>A>NOTA>D.)

    In other words, I think we have a fair bit of common ground. My concern
    about having both installers is pragmatic; I don't think it's necessary
    and I think it's confusing to users (not to mention additional work that divides our efforts). But it's certainly not a violation of Debian's principles. My general policy for votes is that I'll vote my own
    principles and let everyone else vote theirs and rely on the voting system
    to reach compromises, but the compromise in B (and for that matter C) are
    both ones I'm happy with.

    I don't think having only one installer carries the message that you're
    seeing in it. I think it's just a more elegant and straightforward way of providing the user with a choice about whether to use non-free software
    and respecting that choice. But I completely understand how you arrived
    at the conclusion that you did and I respect your reasoning. In some ways
    it's probably more sound than mine.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Mon Sep 12 22:30:01 2022
    Le Sun, Sep 11, 2022 at 08:19:26AM +0200, Simon Josefsson a écrit :
    The problem is caused by hardware manufacturer chosing to require
    non-free works for their use. The blame for that choice lies on the
    hardware manufacturer, not on Debian. Accepting the blame for someone
    else's choices and taking on the responsibility solve the consequences
    of that choice seems misguided to me. It makes it harder for users to experience the frustration of such hardware themselves. I disagree they always get the non-free installer eventually: some end up learning about
    the problem and chose better hardware. Some end up reverse engineering
    their hardware, and contributing to a free solution. Some dislike other distributions taking a less rigid stance on non-free works, and will
    come up with work-arounds to get Debian to work on the hardware. If
    Debian takes on itself to solve the problems with non-free hardware, I
    think we are in more difficult position to ask for a change.

    Seconded.
    We fought against lack of Linux drivers, then against the lack of free
    drivers. Now, since in a lot of situation it is not tenable not to
    provide Linux drivers (because Linux is the dominant server OS),
    since it is not tenable to provide only non-free drivers (because
    entreprise distros do not ship them), the move is toward smaller and
    smaller drivers loading larger and larger non-free firmware.

    Debian should not trick users into downloading non-free files.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to Bill Allombert on Mon Sep 12 23:30:01 2022
    On September 12, 2022 8:23:22 PM UTC, Bill Allombert <ballombe@debian.org> wrote:
    Le Sun, Sep 11, 2022 at 08:19:26AM +0200, Simon Josefsson a écrit :
    The problem is caused by hardware manufacturer chosing to require
    non-free works for their use. The blame for that choice lies on the
    hardware manufacturer, not on Debian. Accepting the blame for someone
    else's choices and taking on the responsibility solve the consequences
    of that choice seems misguided to me. It makes it harder for users to
    experience the frustration of such hardware themselves. I disagree they
    always get the non-free installer eventually: some end up learning about
    the problem and chose better hardware. Some end up reverse engineering
    their hardware, and contributing to a free solution. Some dislike other
    distributions taking a less rigid stance on non-free works, and will
    come up with work-arounds to get Debian to work on the hardware. If
    Debian takes on itself to solve the problems with non-free hardware, I
    think we are in more difficult position to ask for a change.

    Seconded.
    We fought against lack of Linux drivers, then against the lack of free >drivers. Now, since in a lot of situation it is not tenable not to
    provide Linux drivers (because Linux is the dominant server OS),
    since it is not tenable to provide only non-free drivers (because
    entreprise distros do not ship them), the move is toward smaller and
    smaller drivers loading larger and larger non-free firmware.

    Debian should not trick users into downloading non-free files.

    All this is, is a preference for permanent non-free firmware that can't be updated or fixed. I don't think it serves our users at all.

    Personally, I can't remember the last time I successfully (as in with networking) installed a system using the official installer. It's probably over a decade ago.

    I'm thrilled that the project is exploring providing a working installer.

    Scott K

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Simon Josefsson on Tue Sep 13 01:10:01 2022
    On Mon, Sep 12, 2022 at 08:18:13PM +0200, Simon Josefsson wrote:
    Russ Allbery <rra@debian.org> writes:

    ...

    Okay. But given a situation when someone comes to you with a hardware >component that requires non-free software to work, and asks you to
    install Debian on it, would you resolve that by

    1) install the free Debian system on it and provide them with the
    documentation and binaries how to install the non-free software
    required after they made their own informed decision

    or

    2) install the Debian system including the non-free work on it and
    provide them with documentation explaining what happened

    ?

    I take it yours and Steve's proposals is 2) while mine is 1).

    Yup, exactly!

    And, yes, approach 1) may result in the possibility that you have to say >"sorry, I can't install Debian on your hardware, and here is why". We
    say the same when someone comes with an old 8086 processor or a quantum >computer prototype too, too broaden the view a bit.

    Sure, but right up front those are much more obvious. Most users with
    a reasonable current-ish machine (FSVO "reasonable" and "current"!)
    will expect to be able to install and use Debian or some other Linux
    distro on their machine. If a new user comes along with such a machine
    and asks for help to install and we say "sorry, can't!" then that's
    quite an issue. There are lots of distros out there, and it's quite
    likely they'll just try another that's less picky. If that distro
    works, the chances are:

    * We'll never see the user as a Debian user again.

    * They'll happily share stories of how useless/crap Debian was. The
    actual details will be lost.

    Or they may just abandon things and go back to Windows/Mac and assume
    that Free Software isn't for them. None of these are good for us.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com Who needs computer imagery when you've got Brian Blessed?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Russ Allbery on Tue Sep 13 01:20:02 2022
    On Mon, Sep 12, 2022 at 01:13:33PM -0700, Russ Allbery wrote:
    Simon Josefsson <simon@josefsson.org> writes:

    Wonderful -- it is good that I am able to finally express your view in a
    way that you actually agree with.

    Yes, thank you very much for your thoughtful and productive engagement in >this thread! It's really satisfying to be able to talk about things that >provoke strong feelings and be able to have a productive conversation that >helps both people understand each other.

    I'd like to express my thanks here to *both* of you! It's been great
    to have a healthy debate, discussing principles and trying to
    understand each other. In the modern era of partisanry, this is
    depresssingly rare and even heart-warming!

    I agree purity leads to cults and problems. My view of this situation
    is that the Debian project is climbing up the stairs of the pragmatists'
    ivory tower to the point where it suffers from the ills of purism: by
    forbidding the free installer, the pragmatist becomes the mirror image
    of a purist that wants to forbid everything that doesn't comply with its
    own ideal.

    In my mind, the pragmatic approch is to publish both the free and
    non-free installer.

    So, spoiler, while I'm going to vote E first (I have a policy of only >proposing ballot options I would vote first), my guess is that B is going
    to win for precisely the reasons you describe. I will certainly vote B
    above NOTA. (For full disclosure, my vote is likely E>B>C>A>NOTA>D.)

    ACK. B may well win, and I'd be happy to accept that - it gives some
    clear direction! As I've expressed previously, my own personal
    *preference* is for Option A. but I expected there to be opposition
    there and I totally understand it. FTAOD, I'm expecting to be happy
    with whatever the project decides here.

    In other words, I think we have a fair bit of common ground. My concern >about having both installers is pragmatic; I don't think it's necessary
    and I think it's confusing to users (not to mention additional work that >divides our efforts). But it's certainly not a violation of Debian's >principles. My general policy for votes is that I'll vote my own
    principles and let everyone else vote theirs and rely on the voting system
    to reach compromises, but the compromise in B (and for that matter C) are >both ones I'm happy with.

    I don't think having only one installer carries the message that you're >seeing in it. I think it's just a more elegant and straightforward way of >providing the user with a choice about whether to use non-free software
    and respecting that choice. But I completely understand how you arrived
    at the conclusion that you did and I respect your reasoning. In some ways >it's probably more sound than mine.

    Right!

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com
    Getting a SCSI chain working is perfectly simple if you remember that there
    must be exactly three terminations: one on one end of the cable, one on the
    far end, and the goat, terminated over the SCSI chain with a silver-handled
    knife whilst burning *black* candles. --- Anthony DeBoer

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Tue Sep 13 02:30:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------jwtRIYazdFZawd0wmj00B8Pu
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SW4gcmVhZGluZyB5b3VyIG1lc3NhZ2VzLCBJIHRoaW5rIEkgaGF2ZSB0aGUgc2FtZSBwb3Np dGlvbiBhcyB5b3UsIGJ1dCANCkknbSBjb25mdXNlZCBieSBvdXIgZGlmZmVyZW50IHRlbnRh dGl2ZSByYW5raW5ncy4NCg0KT24gOS8xMi8yMiAxNToxMywgUnVzcyBBbGxiZXJ5IHdyb3Rl Og0KPiBGb3IgZnVsbCBkaXNjbG9zdXJlLCBteSB2b3RlIGlzIGxpa2VseSBFPkI+Qz5BPk5P VEE+RC4pDQoNCkkgYWdyZWUgaW5zb2ZhciBhczogRSA+IEIgPiBDID4gTk9UQSA+IEQNCg0K SSBwdXQgQSBpbiBhIGRpZmZlcmVudCBzcG90OiBBID4gQiA+IEMuIFlvdSBoYXZlIEIgPiBD ID4gQS4NCg0KRSBpcyBBIHBsdXMgdGhlIFNDIG1vZGlmaWNhdGlvbi4gV2l0aCBFIGFzIHlv dXIgZmlyc3QgY2hvaWNlLCB3aHkgDQp3b3VsZG4ndCB5b3UgcHV0IEEgPiBCPw0KDQotLSAN ClJpY2hhcmQNCg==

    --------------jwtRIYazdFZawd0wmj00B8Pu--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmMfzWAACgkQ+HlhmcBF hs6BnQ/9FNenYoEc3zcOrHB8ORVqyFqtTg4YXOdr+9h0tWQ3pD8DI3CvDHR/zRAB 3dh89kW2W88z2P/jxC6+lOshb8DS8xbXyIaavGP25BPKRubvdAiKsoDfJa6HnNih HE3QxYddoQqEvqLhzNG3Sv0NRZrufT1kdGtxCsvaro2ylEK2lbrSSExE5itlC8U1 GPX9RfYyH04JepB0rxRksm121CgmjuA4f1UtTAa2ipj13GWKU589t9VtC479gpsA gH+H+SWwXgjyDwdcI8LyFknrpuUOb4zo9ScNX4OtUrQ/1+9yX6iXUVY6maNFputg ORC6JTkxm1OT1BV5HEXy9cka3Tg8jq+FOMW7zvF8KZ8Uv1K4DX70j1/9lVIDtRp8 z+ASai00MRwtKf7okuvujBTYmfpu9ghnrgFxyMpwQZ9dJDn70YYbvV1wdRx2ZfCI K8SZVXh70wS9OcEbEEO6LQsvSpkDnywzn4j/BxShgiN09jz0xcD3+i1YnIquTw3i bdYAvTqFTqIYpiIyspAAOwwbX9U0sgclFiUkBOVSsgguxgfhr14GWFaEYJw2tghK f8uF6zlXT6oRvAuTP01bE17IGt1Ef479mhH9eqeKKnuii/nXUVy15DeomJMjoAxB A4y4lms/bqgv1Ybqix3Bc2q4TQipHUjzrNHGVVFcrzJzHeFNiC8=
    =cj4G
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Richard Laager on Tue Sep 13 02:50:01 2022
    Richard Laager <rlaager@debian.org> writes:

    I agree insofar as: E > B > C > NOTA > D

    I put A in a different spot: A > B > C. You have B > C > A.

    E is A plus the SC modification. With E as your first choice, why
    wouldn't you put A > B?

    I'm concerned about the potential complications of a conflict with the SC
    and would rather accept a different compromise than risk constitutional confusion if we're not willing to change the SC.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Ansgar on Tue Sep 13 07:30:01 2022
    Ansgar <ansgar@debian.org> writes:

    Hi,

    On Mon, 2022-09-12 at 21:03 +0200, Simon Josefsson wrote:
    My experience is the same as you describe, with the free installer:
    if you pick the right hardware, Debian works directly today.

    By "right hardware", I assume you mean hardware that comes with already preinstalled non-free software?

    Yes, or (preferrably) hardware that does not come with non-free software
    at all.

    Does choosing only hardware with preinstalled non-free software
    (instead of partially OS-supplied non-free firmware) make the non-free software more free?

    I don't believe so, no.

    What it seems this vote is about is to go back to the time where a
    non-free work is required before you can get to the decent free
    environment.

    Try removing all non-free firmware then. Your system won't boot, not
    display anything and you won't be able to input anything either.

    I think you (and Simon McVittie in his email) assume that I have as much
    of a problem with non-free works that comes with my system as I do with non-free works that comes from Debian. I don't.

    Lenovo never promised that my laptop would not contain any non-free
    software, and their commercial compromise to be able to sell a laptop is understandable. I prefer if that wasn't the case, and buy machines
    built in a different way (say Purism Libre or Talos II), but I chose to
    use my laptop anyway given its limitations.

    My reason for using Debian is that I can rely on getting a 100% free
    system, and then add non-free works on top of it when I chose to do so.

    For example, I install the firmware-iwlwifi package on my laptop because
    I haven't been bothered to replace the wifi module with an Atheros wifi
    module yet, even though I bought it five years ago. This flexibility
    suits me well, and it does not seem to be in conflict with the
    flexibility you appear to desire: using a non-free installer to install
    these things automatically for you. My flexibility will no longer be
    permitted by Proposal A and E.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYyAVIRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFom+9AP9ftPmQk/sQInmTOLW0QKrsV8yG02zj BzYl8pDE4+k3lAD+K4hFAmSiDz+L+r2KQWVXLw5SOPMj3/Kck39wPsyvZA8=
    =jzCk
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rahmatullin@21:1/5 to Bill Allombert on Tue Sep 13 09:00:02 2022
    On Mon, Sep 12, 2022 at 08:23:22PM +0000, Bill Allombert wrote:
    The problem is caused by hardware manufacturer chosing to require
    non-free works for their use. The blame for that choice lies on the hardware manufacturer, not on Debian. Accepting the blame for someone else's choices and taking on the responsibility solve the consequences
    of that choice seems misguided to me. It makes it harder for users to experience the frustration of such hardware themselves. I disagree they always get the non-free installer eventually: some end up learning about the problem and chose better hardware. Some end up reverse engineering their hardware, and contributing to a free solution. Some dislike other distributions taking a less rigid stance on non-free works, and will
    come up with work-arounds to get Debian to work on the hardware. If
    Debian takes on itself to solve the problems with non-free hardware, I think we are in more difficult position to ask for a change.

    Seconded.
    We fought against lack of Linux drivers, then against the lack of free drivers. Now, since in a lot of situation it is not tenable not to
    provide Linux drivers (because Linux is the dominant server OS),
    since it is not tenable to provide only non-free drivers (because
    entreprise distros do not ship them), the move is toward smaller and
    smaller drivers loading larger and larger non-free firmware.

    Debian should not trick users into downloading non-free files.
    Do you too agree with the position that having non-free firmware stored in
    your hardware is better than having it loaded from your OS?

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmMgKYctFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh APAQAI2YcB81z+NyOdi4p/CM8gGigVn0ziUk4+wg0I2vI8SBs3atXC7w6pvy/Qxa E41MZNTfx0rFSH+pQ2U90HxeMFiUC/GLwEN/xYaEUVAZpGjqTeazfqeJMGHhDpZW c3u1PhhOBsOKqZoD7g8nOaohehpgXpytG9KeuQCg9MKWI3KlTiZ3s/AF4nUogOi0 3gF6PqwTVGBXe1YWdpmFWTtHmofHslQKJ9pnUVRg/rwKSm5WKiG9TeEzMWFpxVdS W/4SYOq3CIhmFmd33GRtThuJ2bNWgqnEBJzKSPd8S/8OK++nFgSxPDb4fB93Wc4w kyD9gcadrMCjE3eukqzc4sNI8vxYJRSOaeGQeh4QI5TixVYuMpvn/y0LzADZy6rj 74hvcnG53ruLRuxc8JI5kytlUweYl3MN3FnPpm+HASdBfLE04xN6oCgOvY7PfkSH Hlwz9LtGHYCt1kkX6yxfDLysKTSPIdeYL9L+yOKozjf4GHlPhJhm1JZFRqWgxYNn LYxyfQmpuDcvez3g3qnDJk986IpG0pnsfLB4YEppgQfpL4v3fYs8z91/c2bLBEzk lbtjZjjsyp4NQw3VNnUAee1XRWh9TSfZ11VBQ76/30358sbyxDIGiI/shbwhtMj/ 8daSA05sENf40Awz6IZe2w+tuH4O6WKFxpd6tayHQ3YGVNUL
    =M8Se
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tobias Frost@21:1/5 to Simon Josefsson on Tue Sep 13 09:10:01 2022
    On Tue, Sep 13, 2022 at 07:29:05AM +0200, Simon Josefsson wrote:

    My reason for using Debian is that I can rely on getting a 100% free
    system, and then add non-free works on top of it when I chose to do so.

    For example, I install the firmware-iwlwifi package on my laptop because
    I haven't been bothered to replace the wifi module with an Atheros wifi module yet, even though I bought it five years ago. This flexibility
    suits me well, and it does not seem to be in conflict with the
    flexibility you appear to desire: using a non-free installer to install
    these things automatically for you. My flexibility will no longer be permitted by Proposal A and E.

    As you keep repeating that:
    Proposal A and E explictly states:

    The included firmware binaries will normally be enabled by default where the
    system determines that they are required, **but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel command line
    etc.).**

    You still have the flexibilty. You still can make the non-free firmware inert bits.
    The installer will still not *require* these bits to function.


    /Simon



    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmMgKoMACgkQkWT6HRe9 XTaxUA//bhhdqaGF42mL7E9q00Jj2usgxhzw/owcolfSGdhYhngtwPLrLwSAI1mm DmC2SMOYuyU7Qt52zOd1q21//9zB3dudP642DzJZyczc8bmFsLy3qtBbJala7bIG JKG8i0yMp8YIWoB3nJzLUY0gINjT1TsQWZI3IvMYhhZYzIqpb25ckPY5VEwuJ2pQ VI4J6RqC7qF+ZFIopxBt3YvResyVx1bcjv1vF+wSm3yQGrth4ZLKXmwq2wwVsyYE 9UVVLlGW9irYQ6AVHUQGcrkuhCclX/w67I9hTdsLpVY3LhnRamKFGItc33JbZtqn 8V+ld9CACOqnpMKt5YZd97UBBwEaBwX+wbmw5/iIWvCkkNFIAkOD4H6Fby2hZ/iw 8qTV/2XSI/mtiFk8xefPj02bXtgeK0wpph3f1kU1x6Q8PuK1lYWEj2Tr/HdDjU8t Dh6Lbxt73kBB59hNzHCT0yP7DkHi4C7Ivqz+UEOYeuMQrOsLChk1Yr74HrBg9NRB dSvNvCW1IrgsRQkci19hZetk16b0mrNkvdNogz1QIlYD39F4tWSv/hazhKMcRh07 dQ9SWubhf1dlAuu4wmxoe+QaqhQt3cfHsaDa689oH/+xZKuXhATIeZnonz6WkCEZ rYpOo1mK+eNfImNkciYBvLx5T662S1PvmwsmMWgKxp3dmsM4rp0=
    =w6Sm
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Russ Allbery on Tue Sep 13 10:30:01 2022
    On 12/09/22 at 12:08 -0700, Russ Allbery wrote:
    Simon Josefsson <simon@josefsson.org> writes:
    To me, the FSF's attempts to produce an operating system lead to the
    range of GNU/Linux distributions that came about during that time, which
    we all still use.

    Right, I think both things are true.

    I think the FSF achieved amazing things in the early days of the organization, to which we all owe them a debt of gratitude. And then, as
    is the tendency of many successful organizations, they were unable to distinguish between the tactics that were critical to their success from
    the tactics that they succeeded *in spite of*, and instead took this
    success as confirmation that every single jot and tittle of their ideology was correct. As a result, they became ideologically hide-bound and inflexible, unable to learn from experience and unable to push their long-standing effort to create a free software operating system over the finish line.

    The FSF bogged down in infighting over ideological purity, massively mismanaged several of their centerpiece projects to the point of nearly destroying them, and started becoming irrelevant, a trend that has sadly continued to this day. Meanwhile, other organizations, including Debian, learned from the tactics and ideology of the FSF that were successful and adopted them, learned from the FSF tactics that failed and discarded them, and picked up where the FSF left off and were able to succeed in that project.

    Right. I think that it's important to realize that the FSF and Debian
    use different tactics to promote Free Software. The FSF focuses on
    promoting a clean ideology to the point of ignoring practical problems.
    The risk is becoming irrelevant, because very few people are able to live
    with the compromises that are required by ignoring the practical issues.

    It's like the lighthouse joke: "the FSF is like a lighthouse. As a boat,
    it's extremely useful to know where it stands, but you probably don't
    want to be at the exact same position as the lighthouse."

    Debian, on the other hand, promotes a similar ideology, but allows
    compromises, while being explicit about them. This is extremely powerful because we demonstrate that we are able to produce something that is of
    high quality and useful to our numerous users, and at the same time we
    are in a great position to inform our users about the compromises that
    were required to do so, and weight in to improve the long term
    situation.

    I think that this GR can be read as answering the following question:
    what would be the optimal way for Debian to make it slightly easier for
    our prospective users to install Debian while continuing to inform about
    the required compromises; which would (in the long term) increase our
    user base; which would increase our impact; which would (in the long
    term) increase our ability to promote free software.

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Lucas Nussbaum on Tue Sep 13 14:50:01 2022
    Lucas Nussbaum <lucas@debian.org> writes:

    Right. I think that it's important to realize that the FSF and Debian
    use different tactics to promote Free Software. The FSF focuses on
    promoting a clean ideology to the point of ignoring practical problems.
    The risk is becoming irrelevant, because very few people are able to live with the compromises that are required by ignoring the practical issues.

    It's like the lighthouse joke: "the FSF is like a lighthouse. As a boat,
    it's extremely useful to know where it stands, but you probably don't
    want to be at the exact same position as the lighthouse."

    Debian, on the other hand, promotes a similar ideology, but allows compromises, while being explicit about them. This is extremely powerful because we demonstrate that we are able to produce something that is of
    high quality and useful to our numerous users, and at the same time we
    are in a great position to inform our users about the compromises that
    were required to do so, and weight in to improve the long term
    situation.

    I don't think that is a unbalanced comparison of the positions. Debian
    and FSF makes _different_ compromises, and have _different_ red lines
    for what they consider unacceptable.

    To illustrate, Debian does not consider a work under the GFDL with an
    invariant section to be free, and (as far as I understand) would not
    permit them in main or in the Debian installer. Disallowing
    modifications is quite similar to the terms for some non-free firmware.

    It is easy to criticize the FSF but may be harder to realize that most
    of the arguments can be applied to Debian as well.

    Both approaches are reasonable and valid positions to take. I like that
    Debian takes a stand against invariant sections. I like that the FSF
    takes a stand against the non-free section in Debian. I think both are problematic, but I also accept that there are situations where they are
    an acceptable compromise given different guiding principles. The
    positions share a lot of mutual ground but there are conflicting areas.

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYyB8TRQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFopjtAQDOz+ghGQIUiQ40y7k9NcPRLX39PyJb aK3l9BOa9zB3hQEA5S3Wshah1QPINEq0jMZpiSnwcEPhQaYe9YC40lLMhwg=
    =kG3Z
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Tobias Frost on Tue Sep 13 14:40:01 2022
    Tobias Frost <tobi@debian.org> writes:

    On Tue, Sep 13, 2022 at 07:29:05AM +0200, Simon Josefsson wrote:

    My reason for using Debian is that I can rely on getting a 100% free
    system, and then add non-free works on top of it when I chose to do so.

    For example, I install the firmware-iwlwifi package on my laptop because
    I haven't been bothered to replace the wifi module with an Atheros wifi
    module yet, even though I bought it five years ago. This flexibility
    suits me well, and it does not seem to be in conflict with the
    flexibility you appear to desire: using a non-free installer to install
    these things automatically for you. My flexibility will no longer be
    permitted by Proposal A and E.

    As you keep repeating that:
    Proposal A and E explictly states:

    The included firmware binaries will normally be enabled by default where the
    system determines that they are required, **but where possible we will include
    ways for users to disable this at boot (boot menu option, kernel command line
    etc.).**

    And also:

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    You still have the flexibilty. You still can make the non-free firmware inert bits.
    The installer will still not *require* these bits to function.

    I disagree. The installer will contain the non-free bits, and thus will
    not work as intended without them under the A/E proposals. I cannot
    download the non-free installer and use/redistribute it under a
    DFSG-compatible license. That has been my main problem with A all
    along, and I believe it violates DSC1: Debian will be 100% free.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYyB4whQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFovGHAQClprLjF/2ps3IX+1Iy7CD1mgqWlNsL wd9ZWjqbnWfPvwD9He8U9zspR9mwQ4wHVNBXRmns+7inMru3I++UUqT5/Qc=BMLo
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Tue Sep 13 16:40:01 2022
    Le Tue, Sep 13, 2022 at 11:56:07AM +0500, Andrey Rahmatullin a écrit :
    Do you too agree with the position that having non-free firmware stored in your hardware is better than having it loaded from your OS?

    My position is that the laws governing embedded firmware are much
    more favorable to the users than the laws governing freestanding
    firmware.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Tue Sep 13 17:00:01 2022
    Le Thu, Sep 08, 2022 at 11:29:07AM +0200, Simon Josefsson a écrit :
    Russ Allbery <rra@debian.org> writes:

    I believe the Debian project is permitted to publish non-free installers under the current DSC/DFSG (which it actually is doing today; just
    hidden), but according to the DSC it is not part of the Debian system.

    Exactly.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Tue Sep 13 16:30:01 2022
    Le Mon, Sep 12, 2022 at 09:19:59PM +0000, Scott Kitterman a écrit :
    On September 12, 2022 8:23:22 PM UTC, Bill Allombert <ballombe@debian.org> wrote:
    Le Sun, Sep 11, 2022 at 08:19:26AM +0200, Simon Josefsson a écrit :
    The problem is caused by hardware manufacturer chosing to require
    non-free works for their use. The blame for that choice lies on the
    hardware manufacturer, not on Debian. Accepting the blame for someone
    else's choices and taking on the responsibility solve the consequences
    of that choice seems misguided to me. It makes it harder for users to
    experience the frustration of such hardware themselves. I disagree they >> always get the non-free installer eventually: some end up learning about >> the problem and chose better hardware. Some end up reverse engineering
    their hardware, and contributing to a free solution. Some dislike other >> distributions taking a less rigid stance on non-free works, and will
    come up with work-arounds to get Debian to work on the hardware. If
    Debian takes on itself to solve the problems with non-free hardware, I
    think we are in more difficult position to ask for a change.

    Seconded.
    We fought against lack of Linux drivers, then against the lack of free >drivers. Now, since in a lot of situation it is not tenable not to
    provide Linux drivers (because Linux is the dominant server OS),
    since it is not tenable to provide only non-free drivers (because >entreprise distros do not ship them), the move is toward smaller and >smaller drivers loading larger and larger non-free firmware.

    Debian should not trick users into downloading non-free files.

    All this is, is a preference for permanent non-free firmware that can't be updated or fixed. I don't think it serves our users at all.

    We should at minima ask that the license of the firmware provides at
    least the right afforded by an hardwired firmware with respect to resale, replacement, statutory warranty and general copyright law.

    I have been installing Debian for more than 20 years and I have never needed
    to use the non-free installer.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Tue Sep 13 21:20:01 2022
    Le Tue, Sep 13, 2022 at 02:37:49PM +0000, Bill Allombert a écrit :
    Le Tue, Sep 13, 2022 at 11:56:07AM +0500, Andrey Rahmatullin a écrit :
    Do you too agree with the position that having non-free firmware stored in your hardware is better than having it loaded from your OS?

    My position is that the laws governing embedded firmware are much
    more favorable to the users than the laws governing freestanding
    firmware.

    To gives a random example: firmware-iwlwifi
    (by the way the link in packages.d.o to the copyright file does not work https://metadata.ftp-master.debian.org/changelogs//non-free/f/firmware-nonfree/firmware-nonfree_20210315-3_copyright
    return 404
    )

    * No reverse engineering, decompilation, or disassembly of this software
    is permitted.

    This would not be legal for embedded firmware

    THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
    FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED

    You cannot disclaim warranty on hardware. You have to provide statutory warranty.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tobias Frost@21:1/5 to Bill Allombert on Tue Sep 13 22:20:01 2022
    On Tue, Sep 13, 2022 at 07:10:24PM +0000, Bill Allombert wrote:
    Le Tue, Sep 13, 2022 at 02:37:49PM +0000, Bill Allombert a écrit :
    Le Tue, Sep 13, 2022 at 11:56:07AM +0500, Andrey Rahmatullin a écrit :
    Do you too agree with the position that having non-free firmware stored in
    your hardware is better than having it loaded from your OS?

    My position is that the laws governing embedded firmware are much
    more favorable to the users than the laws governing freestanding
    firmware.

    To gives a random example: firmware-iwlwifi
    (by the way the link in packages.d.o to the copyright file does not work https://metadata.ftp-master.debian.org/changelogs//non-free/f/firmware-nonfree/firmware-nonfree_20210315-3_copyright
    return 404
    )

    * No reverse engineering, decompilation, or disassembly of this software
    is permitted.

    This would not be legal for embedded firmware

    Reverse engineering is legal in some legislation and certain circumstances. This conditions could be void in those legislations.
    For example, I've read articles about the German GeschGehG, implementing
    EU Regulation 2016/943, which indicates that it might not be possible to restrict
    the right for reverse engineering contractually, especially if the product is available to the public.

    Often, embedded firmware is protected to be read from its flash memory. Circumventing technical protecions is often illegal.

    THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
    FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED

    You cannot disclaim warranty on hardware. You have to provide statutory warranty.

    You can't disclaim statutory warranty, regardless if its hardware or software.

    However, you can write a lot of sentences in your licenses, even some sentences which are legally ineffective…

    Disclaimer: IANAL. This is not legal advice, but my oppinion.

    --
    tobi

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Simon Josefsson on Wed Sep 14 10:00:01 2022
    On 13/09/22 at 14:49 +0200, Simon Josefsson wrote:
    Lucas Nussbaum <lucas@debian.org> writes:

    Right. I think that it's important to realize that the FSF and Debian
    use different tactics to promote Free Software. The FSF focuses on promoting a clean ideology to the point of ignoring practical problems.
    The risk is becoming irrelevant, because very few people are able to live with the compromises that are required by ignoring the practical issues.

    It's like the lighthouse joke: "the FSF is like a lighthouse. As a boat, it's extremely useful to know where it stands, but you probably don't
    want to be at the exact same position as the lighthouse."

    Debian, on the other hand, promotes a similar ideology, but allows compromises, while being explicit about them. This is extremely powerful because we demonstrate that we are able to produce something that is of high quality and useful to our numerous users, and at the same time we
    are in a great position to inform our users about the compromises that
    were required to do so, and weight in to improve the long term
    situation.

    I don't think that is a unbalanced comparison of the positions. Debian
    and FSF makes _different_ compromises, and have _different_ red lines
    for what they consider unacceptable.

    To illustrate, Debian does not consider a work under the GFDL with an invariant section to be free, and (as far as I understand) would not
    permit them in main or in the Debian installer. Disallowing
    modifications is quite similar to the terms for some non-free firmware.

    It is easy to criticize the FSF but may be harder to realize that most
    of the arguments can be applied to Debian as well.

    Both approaches are reasonable and valid positions to take. I like that Debian takes a stand against invariant sections. I like that the FSF
    takes a stand against the non-free section in Debian. I think both are problematic, but I also accept that there are situations where they are
    an acceptable compromise given different guiding principles. The
    positions share a lot of mutual ground but there are conflicting areas.

    I'm not criticizing the FSF. I think it is extremely useful (like a lighthouse). I truly appreciate their approach. I like
    the intellectual challenge of confronting my own willingness to
    compromise with the pure ideology they express.

    However, I'm pointing out that Debian generally follows a different
    tactic. And I don't think that it would be a good idea for Debian to
    switch tactics.

    Lucas

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE/t7ByzN7z1CfQ8IkORS1MvTfvpkFAmMhiCEACgkQORS1MvTf vpkkaw//YZ6YIfSzDOqJpeUzgx38fdrav0qXqWd6b2zw42WHnJbyHdBO5zvmIVfm WlBBy5X8pUDJAq44j/a4PSaeH2wPM74h8w5ID6snQbE7fbQRAJjO6DWLqHkSZH2L zZlHTxdqfAH8IKdmVNIdkgEcJtKiLq0uUGOzoQ79k9ZANzATcg1yzlVqeJ4y8kOa 1wdLdWJAO99yOZeSdlT7PlP2264Pj2V8FYHiCZYnXsiry7362wK1uZQ+d61MhKNO C+MftgtdQBt9+X++qw6tI0AEkuOcKEJ8LczpyHWGlkEEFx2fkpdhiMN7lOmWvhx2 Ku+iET63/yjJVnLKt52KvqRvQjLRYXONcEsBw4Qh/5HHoFZQIuH0RtI/gSi+aKhB KjOkEl9L/fs7K5Dkywzfbz2UI9c5sJmb/fhYcVMvbYoQqMJL3whaTeCNfzrubX64 ol0c6r6O6gacDqDkWI80r7SJoAE9hv71nN3FrON3YuwdMLMtCqgbDrn2s4EOsV6O X/V9ZHzS8uvagoUJ3KnhocboRXfbdIXa7WHieRsgKu0pkX8q6JU5+8UzZqNiY8Df XASHN6jA8Hj4eqF0u11xB+fXEyc/jytcGWYaZ4r+4OAOTJdO4Y/6THpBMmru9FDq RrIKohR6qHSsjMhthPyaphvNoPffLc+YYOfEcSFRIwtRK/qYNhM=
    =cWis
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to Lucas Nussbaum on Wed Sep 14 10:30:01 2022
    Lucas Nussbaum <lucas@debian.org> writes:

    On 13/09/22 at 14:49 +0200, Simon Josefsson wrote:
    Lucas Nussbaum <lucas@debian.org> writes:

    Right. I think that it's important to realize that the FSF and Debian
    use different tactics to promote Free Software. The FSF focuses on
    promoting a clean ideology to the point of ignoring practical problems.
    The risk is becoming irrelevant, because very few people are able to live >> > with the compromises that are required by ignoring the practical issues. >> >
    It's like the lighthouse joke: "the FSF is like a lighthouse. As a boat, >> > it's extremely useful to know where it stands, but you probably don't
    want to be at the exact same position as the lighthouse."

    Debian, on the other hand, promotes a similar ideology, but allows
    compromises, while being explicit about them. This is extremely powerful >> > because we demonstrate that we are able to produce something that is of
    high quality and useful to our numerous users, and at the same time we
    are in a great position to inform our users about the compromises that
    were required to do so, and weight in to improve the long term
    situation.

    I don't think that is a unbalanced comparison of the positions. Debian
    and FSF makes _different_ compromises, and have _different_ red lines
    for what they consider unacceptable.

    To illustrate, Debian does not consider a work under the GFDL with an
    invariant section to be free, and (as far as I understand) would not
    permit them in main or in the Debian installer. Disallowing
    modifications is quite similar to the terms for some non-free firmware.

    It is easy to criticize the FSF but may be harder to realize that most
    of the arguments can be applied to Debian as well.

    Both approaches are reasonable and valid positions to take. I like that
    Debian takes a stand against invariant sections. I like that the FSF
    takes a stand against the non-free section in Debian. I think both are
    problematic, but I also accept that there are situations where they are
    an acceptable compromise given different guiding principles. The
    positions share a lot of mutual ground but there are conflicting areas.

    I'm not criticizing the FSF. I think it is extremely useful (like a lighthouse). I truly appreciate their approach. I like
    the intellectual challenge of confronting my own willingness to
    compromise with the pure ideology they express.

    However, I'm pointing out that Debian generally follows a different
    tactic. And I don't think that it would be a good idea for Debian to
    switch tactics.

    Right, I agree, although my perception is that Debian is another
    lighthouse here, and that this is fine. Debians' DFSG and the rejection
    of GFDL Invariant sections are ridiculed elsewhere much the same way the
    FSF's positions on non-free firmware is ridiculed here. I happen to
    like these lighthouse properties of both Debian and the FSF, as it helps
    me navigate the free software sea. I don't think FSF or Debian would
    have been as successful as they have been without these lighthouse
    properties.

    I agree it doesn't make sense for either organization to change
    approach. I do believe that what we are seeing in this vote, however,
    is that Debian _is_ changing tactics: rather than providing a 100% free
    Debian (guided by the DSC/DFSG) and using that as a tactic to change the
    world, Debian will (under A/E) provide a 99% free Debian.

    /Simon

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYyGPahQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFooTpAP9Ha0jihYO0zDuSsxxVH9tF0d/wQA0y C6ih9p9aNu1fogEA6um9khKI2ie8+HJQHmQOtAI++dAX/yN63zRH5OLSRAk=p4jp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Wed Sep 14 11:20:01 2022
    Le Tue, Sep 13, 2022 at 10:17:16PM +0200, Tobias Frost a écrit :
    On Tue, Sep 13, 2022 at 07:10:24PM +0000, Bill Allombert wrote:
    Le Tue, Sep 13, 2022 at 02:37:49PM +0000, Bill Allombert a écrit :
    Le Tue, Sep 13, 2022 at 11:56:07AM +0500, Andrey Rahmatullin a écrit :
    Do you too agree with the position that having non-free firmware stored in
    your hardware is better than having it loaded from your OS?

    My position is that the laws governing embedded firmware are much
    more favorable to the users than the laws governing freestanding firmware.

    To gives a random example: firmware-iwlwifi
    (by the way the link in packages.d.o to the copyright file does not work https://metadata.ftp-master.debian.org/changelogs//non-free/f/firmware-nonfree/firmware-nonfree_20210315-3_copyright
    return 404
    )

    * No reverse engineering, decompilation, or disassembly of this software
    is permitted.
    FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED

    You cannot disclaim warranty on hardware. You have to provide statutory warranty.

    You can't disclaim statutory warranty, regardless if its hardware or software.

    However, you can write a lot of sentences in your licenses, even some sentences
    which are legally ineffective…

    Disclaimer: IANAL. This is not legal advice, but my oppinion.

    I am not a lawyer either, but Intel _does_ have lawyers that drafted
    this that way, and they know exactly what advantage they can get from
    it.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Simon Josefsson on Wed Sep 14 13:00:01 2022
    Simon Josefsson <simon@josefsson.org> writes:

    ...
    I agree it doesn't make sense for either organization to change
    approach. I do believe that what we are seeing in this vote, however,
    is that Debian _is_ changing tactics: rather than providing a 100% free Debian (guided by the DSC/DFSG) and using that as a tactic to change the world, Debian will (under A/E) provide a 99% free Debian.

    Back in the days when I was involved in producing CD images, people used
    to use them to make CDs (shocking, I know ;-) ).

    As such, I have always thought of the installer images as being outside
    Debian, since in order for them to be useful they needed to be
    instantiated in a physical form that was encrusted with layer upon layer
    of patent, trademark, licensing and other legal constraints regarding the
    form of both the media and the devices used for reading the media.

    Of course, in the mean time the physical representation has changed, but
    still, SD cards are inherently non-free in many ways, even if the data
    on them is purely free.

    I'd suggest that there's always been a fuzzy tide-mark showing where you
    should stop worrying too much about the freeness we can achieve.

    Stretching that metaphor a little: making non-free firmware available
    in the installer strikes me as equivalent to offering Wellington boots
    to new arrivals at the beach, so that they can wade across the muddy
    patch to get to the nice dry, sandy bit of beach where we play barefoot.

    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmMhrtQACgkQ0EujoAEl 1cBnWRAAsrw9zXtNFRJmeRy2yl0f/gSBB+4exRO6UCY8zPP7g0J/JvS+dz+T9/Pu tCrRGV2UpzgAGKZbyo3aCqgVxdawaUoVKnHsyypbm7VbXXc9WdGaD7VSfTJLm8cH Oz/bRrdto1xs22FlibZ1QBP+gXiBVqsOPsn2cBkE3+D5nvPQ8UYb+3H1PYUhNjU6 puQWEHIzxchKmT88xNzkKjbSPdnLf/isdZ4ryy179WYgmT/aD1RFeypKrfSHk+PC 528fhWksnP/diiHkM7xDO3yRwoXr+Pr2VyjZgc/PYHIYyf9dqOuM0EwdUR5euZ0L 7xgavjNH2BzgG8fO6hdhjBjPrEV5X1Y5phKXechohecD9Wco1iZvUfe+0N9Aq6xH i8CtYusR6qUQ/ahsISnU9G8Mn9qOffw6G1C2WXW9dMyPYSFB4Pt6waOBrYhkJS0c tJPDeyvGGOczccOlZEn11ITd8p190QkvlZeTpv7eRBp3O3SFohJxALZHDu2q8g5M FiCl8O6lIdZhgBzeyeN7noYWlooxck1DkGlDSqEqqOOZgZoA0tZngOs5gP5lDZll vwYiUsygkm9lFeF7ys+1xA5OYmMZ0kpDYnDiMdMYs4HLbgECPiz328vw+cREPphR qTny6uIYrdIPBKT
  • From Bill Allombert@21:1/5 to All on Wed Sep 14 21:00:01 2022
    Le Wed, Sep 14, 2022 at 12:37:08PM +0200, Philip Hands a écrit :
    Simon Josefsson <simon@josefsson.org> writes:

    ...
    I agree it doesn't make sense for either organization to change
    approach. I do believe that what we are seeing in this vote, however,
    is that Debian _is_ changing tactics: rather than providing a 100% free Debian (guided by the DSC/DFSG) and using that as a tactic to change the world, Debian will (under A/E) provide a 99% free Debian.

    Stretching that metaphor a little: making non-free firmware available
    in the installer strikes me as equivalent to offering Wellington boots
    to new arrivals at the beach, so that they can wade across the muddy
    patch to get to the nice dry, sandy bit of beach where we play barefoot.

    Yes, but this is not the question at hand. Nobody is suggesting that the non-free installer should not exist, but whether it should be considered
    part of Debian or part of non-free.

    Debian tradition of clearly seperating free and non-free should be
    upholded.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wouter Verhelst@21:1/5 to Bill Allombert on Thu Sep 15 15:20:01 2022
    On Wed, Sep 14, 2022 at 09:13:50AM +0000, Bill Allombert wrote:
    Le Tue, Sep 13, 2022 at 10:17:16PM +0200, Tobias Frost a écrit :
    On Tue, Sep 13, 2022 at 07:10:24PM +0000, Bill Allombert wrote:
    Le Tue, Sep 13, 2022 at 02:37:49PM +0000, Bill Allombert a écrit :
    Le Tue, Sep 13, 2022 at 11:56:07AM +0500, Andrey Rahmatullin a écrit :
    Do you too agree with the position that having non-free firmware stored in
    your hardware is better than having it loaded from your OS?

    My position is that the laws governing embedded firmware are much
    more favorable to the users than the laws governing freestanding firmware.

    To gives a random example: firmware-iwlwifi
    (by the way the link in packages.d.o to the copyright file does not work https://metadata.ftp-master.debian.org/changelogs//non-free/f/firmware-nonfree/firmware-nonfree_20210315-3_copyright
    return 404
    )

    * No reverse engineering, decompilation, or disassembly of this software
    is permitted.
    FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED

    You cannot disclaim warranty on hardware. You have to provide statutory warranty.

    You can't disclaim statutory warranty, regardless if its hardware or software.

    However, you can write a lot of sentences in your licenses, even some sentences
    which are legally ineffective…

    Disclaimer: IANAL. This is not legal advice, but my oppinion.

    I am not a lawyer either, but Intel _does_ have lawyers that drafted
    this that way, and they know exactly what advantage they can get from
    it.

    IME, often, lawyers go "this probably won't do anything, but it can't
    harm us, so meh, let's try and see what we can get from a judge if it
    ever comes to it".

    Or even "I've seen this in other licenses, can't hurt, let's copy".

    If a requirement like that gets thrown out in court, they haven't lost anything, but if it *doesn't* get thrown out, they have gained an
    advantage.

    Lawyers are "cover all your bases" kind of people.

    --
    w@uter.{be,co.za}
    wouter@{grep.be,fosdem.org,debian.org}

    I will have a Tin-Actinium-Potassium mixture, thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to Wouter Verhelst on Thu Sep 15 22:50:01 2022
    On Thu, Sep 15, 2022 at 03:14:05PM +0200, Wouter Verhelst wrote:
    IME, often, lawyers go "this probably won't do anything, but it can't
    harm us, so meh, let's try and see what we can get from a judge if it
    ever comes to it".

    Or even "I've seen this in other licenses, can't hurt, let's copy".

    If a requirement like that gets thrown out in court, they haven't lost anything, but if it *doesn't* get thrown out, they have gained an
    advantage.

    Indeed, but Debian should not promote this.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wouter Verhelst@21:1/5 to Bill Allombert on Fri Sep 16 11:50:01 2022
    On Thu, Sep 15, 2022 at 09:54:01PM +0200, Bill Allombert wrote:
    On Thu, Sep 15, 2022 at 03:14:05PM +0200, Wouter Verhelst wrote:
    IME, often, lawyers go "this probably won't do anything, but it can't
    harm us, so meh, let's try and see what we can get from a judge if it
    ever comes to it".

    Or even "I've seen this in other licenses, can't hurt, let's copy".

    If a requirement like that gets thrown out in court, they haven't lost anything, but if it *doesn't* get thrown out, they have gained an advantage.

    Indeed, but Debian should not promote this.

    I never said anything of the sorts, but you suggested that Intel lawyers
    "know exactly what advantage they can get" from doing something like
    this. I don't think that's actually true, which is why I sent the above.

    --
    w@uter.{be,co.za}
    wouter@{grep.be,fosdem.org,debian.org}

    I will have a Tin-Actinium-Potassium mixture, thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Bill Allombert on Fri Sep 16 12:20:02 2022
    Bill Allombert <ballombe@debian.org> writes:

    Le Wed, Sep 14, 2022 at 12:37:08PM +0200, Philip Hands a écrit :
    Simon Josefsson <simon@josefsson.org> writes:

    ...
    I agree it doesn't make sense for either organization to change
    approach. I do believe that what we are seeing in this vote, however,
    is that Debian _is_ changing tactics: rather than providing a 100% free
    Debian (guided by the DSC/DFSG) and using that as a tactic to change the >> > world, Debian will (under A/E) provide a 99% free Debian.

    Stretching that metaphor a little: making non-free firmware available
    in the installer strikes me as equivalent to offering Wellington boots
    to new arrivals at the beach, so that they can wade across the muddy
    patch to get to the nice dry, sandy bit of beach where we play barefoot.

    Yes, but this is not the question at hand. Nobody is suggesting that the non-free installer should not exist, but whether it should be considered
    part of Debian or part of non-free.

    Exactly "Nobody is suggesting that the non-free installer should not
    exist" ... including me just then.

    I'm afraid you seem to have so completely misunderstood the point that I
    was attempting to make that I don't know where to begin to explain it better.

    Cheers, Phil.
    --
    |)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
    |-| http://www.hands.com/ http://ftp.uk.debian.org/
    |(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmMkS5EACgkQ0EujoAEl 1cDxvw//deIDrE1HGItnh7VZitmTalhCvXbZJdOo8pskFQHz2c0v0YxyGpSpoxWd vCAkde3toK3GVeQ/szgSI9xsaOLbfB+G4gmmANGvMGW0bSlKrGUUIuwJENZ2steu gpoeqvfYCy3P7/kGeCgThcrFrlPv1yr7gq73tQK9XXHo5IAOx0FD7YbBMCeqcEpN ZsBy0ZVr1fdw1PFPRat5zeDxErmsiLiEoRB72NdjFpirkzm9H84KOEySS5DNhUdM /vYYplyHxCLMZslXzkOMbZp/2CnLykPuSPjvfyHUns/qrf2JnBIITv2Drbvvi0xL 1luh0UfUCrEFatsB1OBatjUaDQ0F3MZMEoD75FEa64eKiuNN79t7eXfjNx5b4loC W8UPa+79fxhThSRTKKdumoJgSoBs9tSOFcPAiaN2dh6V/piSSeVg67a3v5GcCJUP 8J4ZhzkQREm0O0f77tsWxVh4o3QKXJOfhTdFDjTugfnlnsAxFMFd1TYTm41m4Oh8 NyNk8/Zu+KgVUNYBZlHDj9L/M3/jRs0Cpd763ETVjKHjI+5GcZqDEqRKFikqFXSt tU0t7V595N8vteMZW5maMZvrOiMIzMKq0FThfg15Uf55gtOdFUyxKgMr/odS85HK ye8WPvFjHXRvgnx
  • From Philipp Kern@21:1/5 to Russ Allbery on Fri Sep 16 19:00:02 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    On Wed, Sep 07, 2022 at 10:48:36AM -0700, Russ Allbery wrote:
    This ballot option supersedes the Debian Social Contract (a foundation document) under point 4.1.5 of the constitution and thus requires a 3:1 majority.

    The Debian Social Contract is replaced with a new version that is
    identical to the current version in all respects except that it adds the following sentence to the end of point 5:

    The Debian official media may include firmware that is otherwise not
    part of the Debian system to enable use of Debian with hardware that
    requires such firmware.

    The Debian Project also makes the following statement on an issue of the
    day:

    We will include non-free firmware packages from the "non-free-firmware" section of the Debian archive on our official media (installer images and live images). The included firmware binaries will normally be enabled by default where the system determines that they are required, but where possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).

    When the installer/live system is running we will provide information to
    the user about what firmware has been loaded (both free and non-free), and
    we will also store that information on the target system such that users
    will be able to find it later. Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file. Our users should receive security updates and important fixes to firmware binaries just like any other installed software.

    We will publish these images as official Debian media, replacing the
    current media sets that do not include non-free firmware packages.

    Seconded. Thanks, Russ!

    Kind regards
    Philipp Kern
    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEPzuChCNsw7gPxr3/RG4lRTXQVuwFAmMkqTIACgkQRG4lRTXQ VuzuQQf/VgECA+QmIgRNtQQiuSA2tpz/aSiQsGMBwxwQvVnt3unHSruEbaPME1Mz zTJiSsQbMgvnrny5mMBozqlN5L9oqSMkbNgdwItp8wLj2MMfVz2buP6SqV+BmNVu TvG1i5BQFPmB4wRpOhDMDj/GCNNm77uP7t3/UfdiYYO0wqwbmaqQfRVa6pmZfFLT 6fRhs8wakXwwTd23V6+uTqVKgl1xGfUEGFe8A010hJFPv28pl2M7vaYjVWuoPFE5 4XnjEP4/ghMGs6t69hr/dLgBUNA3wrwruXcDzxLCYkqM3YQMpZtcQEf3J/JasZrk 85QYtu55Jry3rdF5z7FHwKpx0lpMJA==
    =HoU8
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Philipp Kern on Sat Sep 17 01:20:02 2022
    On Fri, Sep 16, 2022 at 04:50:41PM +0000, Philipp Kern wrote:

    Seconded. Thanks, Russ!

    The signature check failed, and the discussion period is over.


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)