From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id QD5uE0K4EGOGQAEAbAwnHQ (envelope-from ) for ; Thu, 01 Sep 2022 15:48:50 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id cHF5E0K4EGP7NwEA9RJhRA (envelope-from ) for ; Thu, 01 Sep 2022 15:48:50 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id EE1EAB41 for ; Thu, 1 Sep 2022 15:47:13 +0200 (CEST) Received: from localhost ([::1]:55470 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oTkXJ-0001dA-5q for larch@yhetil.org; Thu, 01 Sep 2022 09:47:13 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45562) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oTkT5-00032W-Cj for guix-devel@gnu.org; Thu, 01 Sep 2022 09:42:51 -0400 Received: from cyberdimension.org ([80.67.179.20]:59504 helo=gnutoo.cyberdimension.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1oTkT3-0006LQ-1Z; Thu, 01 Sep 2022 09:42:50 -0400 Received: from gnutoo.cyberdimension.org (localhost [127.0.0.1]) by cyberdimension.org (OpenSMTPD) with ESMTP id ce25aae2; Thu, 1 Sep 2022 13:41:56 +0000 (UTC) Received: from primary_laptop (localhost [::1]) by gnutoo.cyberdimension.org (OpenSMTPD) with ESMTP id 259f7b88; Thu, 1 Sep 2022 13:41:56 +0000 (UTC) Date: Thu, 1 Sep 2022 15:42:32 +0200 From: Denis 'GNUtoo' Carikli To: Maxim Cournoyer Cc: guix-devel@gnu.org, phodina@protonmail.com, ludo@gnu.org Subject: Re: 04/04: gnu: Add fwupd. Message-ID: <20220901154232.1a568486@primary_laptop> In-Reply-To: <87h71sa6iq.fsf@gmail.com> References: <166194391661.31756.9547474130907902222@vcs2.savannah.gnu.org> <20220831110517.76C23C04F0B@vcs2.savannah.gnu.org> <87h71sa6iq.fsf@gmail.com> X-Mailer: Claws Mail 4.1.0 (GTK 3.24.30; i686-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/2yFxp1lLdfJwRiTzkWlTZB+"; protocol="application/pgp-signature"; micalg=pgp-sha256 Received-SPF: pass client-ip=80.67.179.20; envelope-from=GNUtoo@cyberdimension.org; helo=gnutoo.cyberdimension.org X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1662040034; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=qPBkpmUKpeR08KnXN6kHjsp9wNo9dKsP9oCgEk43rog=; b=qobliw8A62VauniA8lYd5M4Ezca4tH5KDPhUpBS5ZqehhQANmCi5J9g070RqccxpUrvibB SiG+qR/Q/33nEvS62IP1co6scn8+6DRB2u2Hhrw3e9zXjfT4g9MImDT0jK8loOs2SkyICR kanFjOo8cch+QYUT4BLZ44yBhyFejncx3SHw/MZnYTVCA8VZc7qk2txDLURguCESJOQMAR DcVe29NJjLx4rOBYQU2YfQXsth2aWJkN2JgPjtuAUmJJKx/WJoVNsT8lh+cWscc6kjQfS4 JAZ6GZc+Bd21yP4u4yRWDTBRb4C3eykaqMRdbu7woxx/FYwhZGbAQPuesQiviQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1662040034; a=rsa-sha256; cv=none; b=kVl47WmjpFD56WsXOhOKB3qpmVLdATYb/ad7Vpxa94HJqgeum/ZaZf0iTKH9Zbv56du+yI HXjl8Hr96C0/t09qzOmvZgCyIOaBj0txnPmH55YrwyIAIrB7HNCr9tRabCsfG6s03mE77P g6MQmwvT//IjeIRMFdzpv6t/9rX9j2g2rkkOOKPVESvI4Ym5vmig9Rf/HAUeOLI+5Oq9VC JHZjXDt50ynA7OhWL78E5FEK94nDq7799aYRGcyMiOHp7DgEaxtak75xRMDZwBU/aNnqww eZG9URZSIeVJ7f2n6atgNO1IfdvndO3Gz2TzktWTXRpugQmWbgRb88eabYXj8w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.17 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: EE1EAB41 X-Spam-Score: -3.17 X-Migadu-Scanner: scn0.migadu.com X-TUID: w4ENPnmmwFW4 --Sig_/2yFxp1lLdfJwRiTzkWlTZB+ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, On Wed, 31 Aug 2022 09:26:21 -0400 Maxim Cournoyer wrote: > > commit 23152ff70f0ed4966d8207846f54c793d7cb4f86 > > Author: Petr Hodina > > AuthorDate: Tue Jan 4 06:58:51 2022 +0100 > > > > gnu: Add fwupd. > > =20 > > * gnu/packages/firmware.scm (fwupd): New variable. > > =20 > > Signed-off-by: Ludovic Court=C3=A8s >=20 > Just a quick question: does this tool talks to a remote server that > serves non-free software as well as free one? If so, it'd need to be > patched to comply with the FSDG. It does. By default it at least uses the LVFS repository which has nonfree software. I don't remember if it also has other repositories or if there was a way to easily download updates from the repository without fwupd or LVFS. It is at least possible to search for specific software in LVFS at this address: https://fwupd.org/lvfs/search?value=3Dmicrocode You also have UEFI updates and so on there, so it's pretty clear that there is some nonfree software. And we actually have the opposite issue here: It is way harder to find firmware updates that are fully free and that they can at least in theory be built with 100% free software on top of FSDG compliant distributions. Maybe small free software firmwares like the colorhug firmware could be OK. Somebody would need to check the dependencies for build the firmware update. Bigger firmwares like with firmwares using Coreboot are probably not OK because while coreboot is under the GPL, to work on recent hardware nonfree software is likely to be used (like microcode updates, Intel FSP, nonfree AGESA, etc). Denis. --Sig_/2yFxp1lLdfJwRiTzkWlTZB+ Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEeC+d2+Nrp/PU3kkGX138wUF34mMFAmMQtsgACgkQX138wUF3 4mPCSBAAlPnm7crOEvlCXF+aDevXwmGmFBENpULtO0b0QOAl+HJgnuWpLg9meTur jrc31MSGBgZdcem8zZwPx9t+j+jDbA5IPI7Bso7JwVVhmnAQmjowz4FGxpMmTiaG aatBPonDyOcEAfGXVmsbb5xmEicsSkUmPLFiLaEDjninWTDqMAJIJMuXghciP04K 9NoqlOKXDyhnK2LRGkwy3Alcyf55mMpjNw2nGBtb1uDOKXmEv0Im+LKBZDhPmv8p FZWt5J51TreGCFIYZ2amVA2/my97TFmPnAgEA2kWvugIk0rh5ZPPUBUz4ByMDmyq vJkslQBroT6oRuuYkg1VaaE3zWOfpz/r6mOVRzdhXZDHsxDXx+0nTihuI8Ssnor5 5u0Nt5QlhAAM/cpjTHpmhA2j4jNB6kWoznUQ2dPVdf3O3/PyzHkLlmP8UuNIFN2R +hwe9/+ifQ+QFKvj9QhjlTZnYOcFVz5xRcbkZqwPYB9DbYxWoraVOLGl5PjJAx/x WB+vInhO2cEbqqGFHWsPsRfJNX3t1XO0lLXzcqIT2K5/sZqshsliwSSSaFq3wfpp ZIn7j3Cymjb1SR5lSAsGpdm4hibRSkj4XS2Mw7JagQPWIsalqyOpiBWDTDNocJkl pWq+EaXMlhhxEPLZscZagEY4nq4FmpJa4amKyQY2mgVgzS8aonQ= =utlk -----END PGP SIGNATURE----- --Sig_/2yFxp1lLdfJwRiTzkWlTZB+--