From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Payas Relekar Newsgroups: gmane.emacs.devel Subject: Re: [ELPA] new package: tramp-docker Date: Tue, 18 Oct 2022 14:41:52 +0530 Message-ID: <87a65tsd2q.fsf@gmail.com> References: <874jw4l678.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="3527"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.8.10; emacs 29.0.50 Cc: emacs-devel@gnu.org To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Tue Oct 18 16:08:49 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oknGy-0000mE-Ue for ged-emacs-devel@m.gmane-mx.org; Tue, 18 Oct 2022 16:08:48 +0200 Original-Received: from localhost ([::1]:54160 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oknGx-0006DE-Ec for ged-emacs-devel@m.gmane-mx.org; Tue, 18 Oct 2022 10:08:47 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:39318) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oklyF-0007Vs-82 for emacs-devel@gnu.org; Tue, 18 Oct 2022 08:45:23 -0400 Original-Received: from mail-pf1-x42a.google.com ([2607:f8b0:4864:20::42a]:45650) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oklyD-0004zC-Df; Tue, 18 Oct 2022 08:45:22 -0400 Original-Received: by mail-pf1-x42a.google.com with SMTP id 67so13936370pfz.12; Tue, 18 Oct 2022 05:45:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:from:to:cc:subject:date:message-id:reply-to; bh=aoFcNmcWKsoNw4k1UpTcAXunN2sChF+F8BJQJfB0SSE=; b=LQxwBinc5xjPtTIuLQHUdJ4CmxXG/zaI8a8F3yZvNKKOBAwAcX0ioYAmrTZzMTwuW/ hOCToCAsFDFFsSiUO5mqLhe+LorJc7Jr2AAnnYPvzwII88BC/drn31gaDFB3e3wArUqH m7/JtF1BLvRrruvTfUtgcO//POpQ1wPgu/Rwu+HYAEfRQWYVarMylFm5Ic9UVomhrPTr eUY0uf+RzF7NzfZMC9DtZYib+L1zFqFn/m5FaowsvGVfGgwtzlowrDv2RG1m+BQWo3Pl 65+4NsmoZu9X6VldMLT6EYqsQs37E8S51TaEqa6RzA1Kp9cQysItTqeTFrHWaR8dvtGX Ji6w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=aoFcNmcWKsoNw4k1UpTcAXunN2sChF+F8BJQJfB0SSE=; b=l1FAe1N8X1H2MN+mU+8hSJWfcFb+oGcqLHUgp7Re6zV8D/Ofz4mDxsjjNuHGyGUda5 45BlzvE2B0tLgf354l3H30fifpcEeAVsJyMwG7YSOT5/kL3KvR6CuMHr5GYolD2f4ETj P4FRWsuagCV+8UF6Y4RHcnfiGawYZE/+JW2kFPFKvDVDpcClyOzBq8VUejkIeUDlhMkQ m2uBEq9mEt1aybd6ZRAIs1vSZwxSsENMd82GhWeMvK+L32n1PBpS7MYNSJqHsidGC3S1 VDkBe/Q7VpGFtGuxiqujx9DeJ4hZiCwbnoNHyP04imH0Hufu46ExX1fjHFX/7R3t91Eu BExQ== X-Gm-Message-State: ACrzQf2pLonYdOh3nxGPo8HUBW8oh1yvqiZ89gv80lWRAGpQx65qepz8 ZyUvXdngPZlFT3Kf4rxdMCsTL8/DnSA= X-Google-Smtp-Source: AMsMyM5aeTcS3La1yXFoNFE7PodAC0qTufobMAQHcbDK7/HVoAmkhFOjQN2Ybex/zY2z7YGUe9Xalg== X-Received: by 2002:a05:6a00:21c8:b0:52b:ffc0:15e7 with SMTP id t8-20020a056a0021c800b0052bffc015e7mr3023316pfj.29.1666097118248; Tue, 18 Oct 2022 05:45:18 -0700 (PDT) Original-Received: from localhost ([115.96.77.137]) by smtp.gmail.com with ESMTPSA id ix6-20020a170902f80600b00176cdd80148sm8572631plb.305.2022.10.18.05.45.16 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 18 Oct 2022 05:45:17 -0700 (PDT) In-reply-to: Received-SPF: pass client-ip=2607:f8b0:4864:20::42a; envelope-from=relekarpayas@gmail.com; helo=mail-pf1-x42a.google.com X-Spam_score_int: -4 X-Spam_score: -0.5 X-Spam_bar: / X-Spam_report: (-0.5 / 5.0 requ) BAYES_00=-1.9, DATE_IN_PAST_03_06=1.592, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Mailman-Approved-At: Tue, 18 Oct 2022 09:39:28 -0400 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:298044 Archived-At: Richard Stallman writes: > > Docker is a platform that provides few services: > > 1. A uniform container format (Now separated into OCI standard) > > 2. A way to build and run these containers (docker daemon) > ... > > > Out of these, #1 is already standardised and fully open. > > #2 is not exclusive to docker, and there are multiple ways to acheive > > this thanks to #1 being open. > > Sad to say, that doesn't mean that #2 is no problem for software > freedom. Rather, it means that some methods are a problem and others > are not. Correct. Please see below for more thoughts. > I can't be certain with my current partial knowledge, but I think that > the methods which are a problem are a very grave problem, and we need > to speak to the community about avoiding them. I think we need to > identify any frequently used methods for building Docker containers > that makes it easy to fail to think about whether the contents are free. While I am still in doubt whether it is possible to ensure a container can only be built using free software, similar to .deb packages, short of not using anything beyond official repos, the discussion is valuable IMO. > > 3. A global (and optionally local) container registry (akin to apt-get) > > > #3 is where things start getting fuzzy as docker the platform does not > > provide any way to ensure containers only include free software. That > > being said, as mentioned earlier, docker itself is not necessary to > > build these containers. > > I think this is a crucial part of the reason why some ways of > building docker containers are a grave problem. Would you disagree? Partially agree. What we need to separate out is a mechanism to build/package/deploy (e.g. dpkg, containers) from mechanism to distribution (debian repos, docker repository). To continue the debian analogy, it is already possible to package up proprietory software via .deb file, in face, Google Chrome is distributed exactly like this. That does not make apt or dpkg inherently a problem does it? It doesn't classify GNU Make as harmful, and IMO same rule should be applied to containers. Calling containers harmful means we are communicating false information to potential users and this may implore them to question the whole thing rather than just the questionable parts. > > As such, the name docker only signifies what has become de-facto calling > > convention for OCI containers, but otherwise as long as we avoid linking > > to docker the service, we are in the clear. > > That seems plausible to me. > > emacs-devel is not the right place to have the discssion about building > containers. I should launch it in some other place or way. > > Do you know enough about containers to help in that discussion? I wouldn't call myself an expert, but will be happy provide any links/study on matter as needed. --