From mboxrd@z Thu Jan 1 00:00:00 1970 From: Vagrant Cascadian Subject: bug#34717: GPL and Openssl incompatibilities in u-boot and possibly others Date: Thu, 07 Mar 2019 15:02:30 -0800 Message-ID: <87o96m8f09.fsf@ponder> References: <87tvgkiurn.fsf@ponder> <87zhq8f2zz.fsf@gnu.org> <87ftrzuxmh.fsf@ponder> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="==-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([209.51.188.92]:53317) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h222j-0007fr-1c for bug-guix@gnu.org; Thu, 07 Mar 2019 18:03:15 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h222g-0002zY-B4 for bug-guix@gnu.org; Thu, 07 Mar 2019 18:03:12 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:50370) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1h222Y-0002tV-MY for bug-guix@gnu.org; Thu, 07 Mar 2019 18:03:04 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1h222Y-0006MY-FG for bug-guix@gnu.org; Thu, 07 Mar 2019 18:03:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <87ftrzuxmh.fsf@ponder> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 34717@debbugs.gnu.org --==-=-= Content-Type: multipart/mixed; boundary="=-=-=" --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2019-03-06, Vagrant Cascadian wrote: > On 2019-03-06, Ludovic Court=C3=A8s wrote: >> Vagrant Cascadian skribis: >>> The u-boot package definition includes openssl amoung it's inputs, but >>> is also a GPL2+ software project... but the GPL and OpenSSL licenses are >>> incompatible: >>> >>> https://www.gnu.org/licenses/license-list.html#OpenSSL ... >>> In the Debian u-boot packaging, some of the features using openssl are >>> disabled, and some of the u-boot targets that require openssl are not >>> part of the packages. I'd be happy to help with making such adjustments >>> if this is deemed the better approach for u-boot specifically. >> >> That=E2=80=99d be great. We could definitely remove the OpenSSL depende= ncy when >> it=E2=80=99s not needed. > > For what it's worth, I did do local builds of all the current u-boot-* > targets in guix with openssl removed from inputs, and the only one that > failed to build without openssl was u-boot-tools. I've tested that the attached patch builds all u-boot-* targets on x86_64 (cross-building most of them), with openssl removed from native-inputs. Unfortunately, u-boot-tools fails it's tests on aarch64 and armhf, but that appears to be the case with or without this patch, so it's no worse off than it was... I'm not sure where it would be appropriate to add more comments regarding the GPL/Openssl incompatibilities; e.g. if someone were to propose adding one of the u-boot targets that requires it, they might just go ahead and re-add the openssl input... live well, vagrant --=-=-= Content-Type: text/x-diff Content-Disposition: inline; filename=0001-gnu-u-boot-Remove-openssl-input.patch Content-Transfer-Encoding: quoted-printable From=20ee613387c49ca60905e0a40af8af017828c8aec8 Mon Sep 17 00:00:00 2001 From: Vagrant Cascadian Date: Thu, 7 Mar 2019 21:50:58 +0000 Subject: [PATCH] gnu: u-boot: Remove openssl input. Fixes: https://bugs.gnu.org/34717 * gnu/packages/bootloaders (u-boot): Remove openssl from native-inputs. (u-boot-tools): Disable FIT_SIGNATURES in tests. =2D-- gnu/packages/bootloaders.scm | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/gnu/packages/bootloaders.scm b/gnu/packages/bootloaders.scm index b0617f452a..15953ab75e 100644 =2D-- a/gnu/packages/bootloaders.scm +++ b/gnu/packages/bootloaders.scm @@ -391,7 +391,6 @@ tree binary files. These are board description files u= sed by Linux and BSD.") ("dtc" ,dtc) ("flex" ,flex) ("lz4" ,lz4) =2D ("openssl" ,openssl) ("python-2" ,python-2) ("python2-coverage" ,python2-coverage) ("python2-pytest" ,python2-pytest) @@ -440,9 +439,14 @@ also initializes the boards (RAM etc).") (("def test_ctrl_c") "@pytest.mark.skip(reason=3D'Guix has problems with SIGINT') def test_ctrl_c")) =2D ;; This test requires a sound system, which is un-used in u= -boot-tools. (for-each (lambda (file) (substitute* file + ;; Disable signatures, due to GPL/Openssl + ;; license incompatibilities. See + ;; https://bugs.gnu.org/34717 for detail= s. + (("CONFIG_FIT_SIGNATURE=3Dy") "CONFIG_FI= T_SIGNATURE=3Dn") + ;; This test requires a sound system, wh= ich is un-used + ;; in u-boot-tools. (("CONFIG_SOUND=3Dy") "CONFIG_SOUND=3Dn"= ))) (find-files "configs" "sandbox_.*defconfig$"= )) #t)) =2D-=20 2.20.1 --=-=-=-- --==-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCXIGjCAAKCRDcUY/If5cW qtC9AQCxXgZ4A+ZUWsro4IGGBHoxoNvhGIxLvlKKKhjU3IFtJwEAyLgcEDnw6zlK 3gBaT/P4/RQGQJh9nPCsyM31s/KkcA4= =fg6f -----END PGP SIGNATURE----- --==-=-=--