From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adonay Felipe Nogueira Subject: bug#34565: ungoogled-chromium contains Widevine DRM Date: Wed, 20 Feb 2019 17:15:15 -0300 Message-ID: References: <1550547897.31222.1.camel@jxself.org> <20190219070601.GA8273@jasmine.lan> <1550582906.5431.7.camel@jxself.org> <20190219144342.GA2688@jasmine.lan> <1550623152.12316.5.camel@jxself.org> <1550625137.14138.3.camel@jxself.org> <1550625587.14780.2.camel@jxself.org> <1550667811.25277.1.camel@jxself.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK" Return-path: Received: from eggs.gnu.org ([209.51.188.92]:37373) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gwYIk-0002wU-PT for bug-guix@gnu.org; Wed, 20 Feb 2019 15:17:08 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gwYIh-00069S-MO for bug-guix@gnu.org; Wed, 20 Feb 2019 15:17:05 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:57812) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gwYIg-00065p-V5 for bug-guix@gnu.org; Wed, 20 Feb 2019 15:17:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gwYIf-0003Dk-IZ for bug-guix@gnu.org; Wed, 20 Feb 2019 15:17:01 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 34565@debbugs.gnu.org Cc: Jason Self This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK Content-Type: multipart/mixed; boundary="WhmOiffMcXX1dadplzfTZATpPXP5566sS"; protected-headers="v1" From: Adonay Felipe Nogueira To: 34565@debbugs.gnu.org Cc: Jason Self Message-ID: Subject: Re: bug#34565: ungoogled-chromium contains Widevine DRM References: <1550547897.31222.1.camel@jxself.org> <20190219070601.GA8273@jasmine.lan> <1550582906.5431.7.camel@jxself.org> <20190219144342.GA2688@jasmine.lan> <1550623152.12316.5.camel@jxself.org> <1550625137.14138.3.camel@jxself.org> <1550625587.14780.2.camel@jxself.org> <1550667811.25277.1.camel@jxself.org> In-Reply-To: --WhmOiffMcXX1dadplzfTZATpPXP5566sS Content-Type: text/plain; charset=utf-8 Content-Language: pt-BR Content-Transfer-Encoding: quoted-printable Em 20/02/2019 13:18, Julien Lepiller escreveu: > I think the situation is different though. You can see the build script= > inside the "origin" record as the liberation procedure that anyone can > see and verify. It's also a procedure targeted at our build farms, so > that they can produce the liberated source code. Users never manipulate= > non-free source code, unless something is wrong on the build farm side.= I'm not taking any sides here, but to give some more information, if for example you do `guix edit ungoogled-chromium' you will be presented to the package definition of Ungoogled-Chromium, taking that as an example you can see that it has a "source (origin ...) ...)" definition, inside the inner part (the "origin") you have: * the upstream download location and method, see (method ...), (uri ...) and (sha256 ...); * patches that should be applied immediatelly after downloading and extracting the source files, per (patches ...); * snippets and modules to be used with these, also to be applied immediatelly after downloading and extracting the source files, as seen in (snippet ...) and (modules ...). When `guix build -S ungoogled-chromium' is done, first it checks the build farms for the "prepared" source that matches the given package definition, version, hash and so on; and lastly it tries to "prepare" the source according to (patches ...) and (snippet ...) declarations before even telling the user that the download is ready/done. Having the (origin ...) visible in this way brings the advantages that the people of Guix told about here, but as far as I can tell, the user also sees the original location of the non-free source from upstream if they do `guix edit ungoogled-chromium'. --=20 - P=C3=A1gina com formas de contato: https://libreplanet.org/wiki/User:Adfeno#vCard - Ativista do software livre (n=C3=A3o confundir com o gratuito). Avaliad= or da liberdade de software e de sites. - P=C3=A1gina com lista de contribui=C3=A7=C3=B5es: https://libreplanet.org/wiki/User:Adfeno#Contribs - Para uso em escrit=C3=B3rios e trabalhos, favor enviar arquivos do padr= =C3=A3o internacional OpenDocument/ODF 1.2 (ISO/IEC 26300-1:2015 e correlatos). S=C3=A3o os .odt/.ods/.odp/odg. O LibreOffice =C3=A9 a su=C3= =ADte de escrit=C3=B3rio recomendada para editar tais arquivos. - Para outros formatos de arquivos, veja: https://libreplanet.org/wiki/User:Adfeno#Arquivos - Gosta do meu trabalho? Contrate-me ou doe algo para mim! https://libreplanet.org/wiki/User:Adfeno#Suporte - Use comunica=C3=A7=C3=B5es sociais federadas padronizadas, onde o "soci= al" permanece independente do fornecedor. #DeleteWhatsApp. Use #XMPP (https://libreplanet.org/wiki/XMPP.pt), #DeleteFacebook #DeleteInstagram #DeleteTwitter #DeleteYouTube. Use #ActivityPub via #Mastodon (https://joinmastodon.org/). - #DeleteNetflix #CancelNetflix. Evite #DRM: https://www.defectivebydesign.org/ --WhmOiffMcXX1dadplzfTZATpPXP5566sS-- --fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlxttV4ACgkQyNbhUgHunaHNVwEA41S4hXRwXV64gR+YMLqtJdwt L3X1++Sj49YqiYJBGIwBAJH3LRRFBKPIszF460JesVZxb8zomm/yGCUjZ3GXCSTB =TSBl -----END PGP SIGNATURE----- --fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK--