From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id 6A/qLPmq51+rNAAA0tVLHw (envelope-from ) for ; Sat, 26 Dec 2020 21:28:25 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id oBLFKPmq51+qTwAA1q6Kng (envelope-from ) for ; Sat, 26 Dec 2020 21:28:25 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D60EB9401C0 for ; Sat, 26 Dec 2020 21:28:24 +0000 (UTC) Received: from localhost ([::1]:33084 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ktH6t-0001zI-PR for larch@yhetil.org; Sat, 26 Dec 2020 16:28:23 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:39854) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ktF1z-0004ZG-CE for bug-guix@gnu.org; Sat, 26 Dec 2020 14:15:15 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:48371) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ktF1q-0004rN-Pb for bug-guix@gnu.org; Sat, 26 Dec 2020 14:15:08 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ktF1q-0002FZ-Km; Sat, 26 Dec 2020 14:15:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#45450: Guix, third-party repositories and GNU FSDG Resent-From: Adonay Felipe Nogueira Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 26 Dec 2020 19:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 45450 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 45450@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16090100538421 (code B ref -1); Sat, 26 Dec 2020 19:15:02 +0000 Received: (at submit) by debbugs.gnu.org; 26 Dec 2020 19:14:13 +0000 Received: from localhost ([127.0.0.1]:59917 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ktF13-0002Bl-5v for submit@debbugs.gnu.org; Sat, 26 Dec 2020 14:14:13 -0500 Received: from lists.gnu.org ([209.51.188.17]:52604) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ktF11-0002BP-V8 for submit@debbugs.gnu.org; Sat, 26 Dec 2020 14:14:12 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:39772) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ktF11-0004W4-Pl for bug-guix@gnu.org; Sat, 26 Dec 2020 14:14:11 -0500 Received: from a.siauliai.hyperbola.info ([2a02:e00:ffe7:6::1]:47218 helo=smtp.hyperbola.info) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ktF0y-0004Rh-JT for bug-guix@gnu.org; Sat, 26 Dec 2020 14:14:11 -0500 Received: by smtp.hyperbola.info (OpenSMTPD) with ESMTPSA id 0a2dc21a (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO) auth=yes user=adfeno for ; Sat, 26 Dec 2020 19:14:03 +0000 (UTC) Message-ID: <84d5c1f2-dbc3-b0ed-cd8a-ad451b591d4c@hyperbola.info> Date: Sat, 26 Dec 2020 16:13:51 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Icedove/68.10.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="XnVwt4afQUTlzLyb2TDE9fVZqHY6Xpqre" Received-SPF: pass client-ip=2a02:e00:ffe7:6::1; envelope-from=adfeno@hyperbola.info; helo=smtp.hyperbola.info X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_FAIL=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Mailman-Approved-At: Sat, 26 Dec 2020 16:28:12 -0500 X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" Reply-to: Adonay Felipe Nogueira From: Adonay Felipe Nogueira via Bug reports for GNU Guix X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -4.93 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: D60EB9401C0 X-Spam-Score: -4.93 X-Migadu-Scanner: scn0.migadu.com X-TUID: X4nfV4JpquO+ This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --XnVwt4afQUTlzLyb2TDE9fVZqHY6Xpqre Content-Type: multipart/mixed; boundary="6ZfHANgj9xctMCA1EZY9Id6Qp8Odxl6I6" --6ZfHANgj9xctMCA1EZY9Id6Qp8Odxl6I6 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Severity: critical According to the GNU FSDG ([1], emphasis are mine): > A free system distribution must not steer users towards obtaining any n= onfree information for practical use, or encourage them to do so. The sys= tem should have no repositories for nonfree software and no specific reci= pes for installation of particular nonfree programs. *Nor should the dist= ribution refer to third-party repositories that are not committed to only= including free software; even if they only have free software today, tha= t may not be true tomorrow.* Programs in the system should not suggest in= stalling nonfree plugins, documentation, and so on. However, at least on the case of the rust package, in the following examp= le one can see that cargo is also included: $ guix package --show=3Drust > name: rust > version: 1.46.0 > outputs: out doc cargo > systems: x86_64-linux i686-linux > dependencies: bison@3.5.3 cmake-minimal@3.16.5 curl@7.69.1 flex@2.6.4 > + gdb@8.2.1 jemalloc@5.2.1 libssh2@1.9.0 llvm@10.0.0 make@4.2.1 openssl= @1.1.1f > + pkg-config@0.29.2 procps@3.3.16 python2@2.7.17 rust@1.45.2 which@2.21= > location: gnu/packages/rust.scm:105:2 > homepage: https://www.rust-lang.org > license: ASL 2.0, Expat > synopsis: Compiler for the Rust programming language =20 > description: Rust is a systems programming language that provides memor= y > + safety and thread safety guarantees. In continuation, as can be seen on [2], the installed cargo has it's defa= ult repository enabled. Furthermore, neither [3] nor [4] have expressed commitment to the GNU FSD= G. Here are some suggestions, probably not tested nor researched for viabili= ty: a) make the importer activate a flag of its own in order to use that pack= age. This would render a plain install of the package a version with carg= o absent while still having the possibility to do the imports; b) coordinate with the head of the cargo community (and possibily other f= ree/libre system distributions or free/libre software activism groups) an= agreement so that they express commitment to the GNU FSDG on [3] and [4]= , and of course make them setup a bug/issue/task tag/section for GNU FSDG= issues. This must be done together with either (a), (d) or (e); c) coordinate with other free/libre system distributions or free/libre so= ftware activism groups a project to provide a common repository that such= groups could refer to by default by patching their copy of cargo. This m= ust be done together with either (a), (d) or (e); d) find a way to provide cargo but without any repository. This would req= uire a way for the importer to specify the repositories at run-time; e) despite not being desirable by some people, there is also the possibil= ity of removing cargo. As a side-note, as the original subject stated, I think we should address= this issue in other packages too, if any, and also document the decision= on the manual or on guideline. # References [1]: https://www.gnu.org/distros/free-system-distribution-guidelines.en.h= tml#license-rules . [2]: https://lists.gnu.org/archive/html/help-guix/2020-12/msg00231.html .= [3]: https://crates.io/policies . [4]: https://www.rust-lang.org/policies/code-of-conduct . --=20 * Ativista do software livre * https://libreplanet.org/wiki/User:Adfeno * Membro dos grupos avaliadores de * Software (Free Software Directory) * Distribui=C3=A7=C3=B5es de sistemas (FreedSoftware) * Sites (Free JavaScript Action Team) * N=C3=A3o sou advogado e n=C3=A3o fomento os n=C3=A3o livres * Sempre veja o spam/lixo eletr=C3=B4nico do teu e-mail * Ou coloque todos os recebidos na caixa de entrada * Sempre assino e-mails com OpenPGP * Chave p=C3=BAblica: vide endere=C3=A7o anterior * Qualquer outro pode ser fraude * Se n=C3=A3o tens OpenPGP, ignore o anexo "signature.asc" * Ao enviar anexos * Docs., planilhas e apresenta=C3=A7=C3=B5es: use OpenDocument * Outros tipos: vide endere=C3=A7o anterior * Use protocolos de comunica=C3=A7=C3=A3o federadas * Vide endere=C3=A7o anterior * Mensagens secretas somente via * XMPP com OMEMO * E-mail criptografado e assinado com OpenPGP --6ZfHANgj9xctMCA1EZY9Id6Qp8Odxl6I6-- --XnVwt4afQUTlzLyb2TDE9fVZqHY6Xpqre Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEAREIAB0WIQRlfzovINS9uQH7pZ3I1uFSAe6doQUCX+eLbwAKCRDI1uFSAe6d of12AP9sSAz1V9+JCOoCYHq7Uq5lg+FH32UCq9s2pwJAMZ29tAEAhNwiwKmaQ7Zn 9r2HALUKfskMZqMVcWrLt+piAlAqQ6k= =cyk5 -----END PGP SIGNATURE----- --XnVwt4afQUTlzLyb2TDE9fVZqHY6Xpqre--