From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id YNs0F37MdmZILwAAqHPOHw:P1 (envelope-from ) for ; Sat, 22 Jun 2024 13:07:10 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id YNs0F37MdmZILwAAqHPOHw (envelope-from ) for ; Sat, 22 Jun 2024 15:07:10 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=freakingpenguin.com header.s=x header.b=ebHuKTGF; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1719061630; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=B3nqTyF+QgfdIgwGnk8wA55bc7vVvNnW+NUyR6v/XBM=; b=JCo6KHuUsIqdBLcgUfBdBvLaIhg7huA+d5gNAtOlrn0eSSbVMStx+aGGctPrkW3dTuYRH0 nSTbZxt4BKL9JwHrTRQA2JROc++/FBlDmbQAihPY6yg7V6RhunM7CgJsKqr20Y94MmuTye KjECgWKy8XX+HHTUGsNQfZ2DpNt8jH6/02oKamsfqW+eF07jGB8xRTdPEZKAq1gL2Sna13 o++oD5tr3tuaEnvZK24F5Rbu/8Gi6ti+nP+jF/1MdsKHVblPkaclFqBZxCMXQQXbeMivzV xS/nfSonrRMXzxzSsnjkCMQTJLFsgJL7AhOqK8fTkwJYun7ClgtRNkXvE2nkWg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1719061630; a=rsa-sha256; cv=none; b=MMDqyWg+DuX7/eVymG/H1dKTnrAD1Skf+LGfnRHosjK7XoZ/O+i/n/urCwVM0UwyHNt5Jb ZCmUaDT0ko7q+/vbqi8QgmMNqsXJ1+2Gz81OyS6wpx7+hTKdhMvGYWoVdr1cJqTXyvZ2c3 gYcghaw5TJM3WlHSiUTdJd8IGBUQDwl2qr/2B6A6PZnf2JMTvUMUs1Z7K3Mv6hcxd933m9 uBbvPPdycPT2AxjxqYlodoeQnPyu1BWHHZtF1kFa2sMrRcdS18O/SjTGCssIJJS9usUs2T jd0P29zZ8mNlAClz+r8L9UfRrAi44QMj2adaJ03ZjEaohKRPHQ3OL3H1Twkeig== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=freakingpenguin.com header.s=x header.b=ebHuKTGF; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D9DD013E9A for ; Sat, 22 Jun 2024 15:07:09 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sL0S1-0000cM-N2; Sat, 22 Jun 2024 09:06:41 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sL0Rz-0000bt-G8 for guix-devel@gnu.org; Sat, 22 Jun 2024 09:06:39 -0400 Received: from mail-108-mta22.mxroute.com ([136.175.108.22]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sL0Rx-000194-JO for guix-devel@gnu.org; Sat, 22 Jun 2024 09:06:39 -0400 Received: from filter006.mxroute.com ([136.175.111.3] filter006.mxroute.com) (Authenticated sender: mN4UYu2MZsgR) by mail-108-mta22.mxroute.com (ZoneMTA) with ESMTPSA id 190400e3b3100017a3.002 for (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384); Sat, 22 Jun 2024 13:06:32 +0000 X-Zone-Loop: 1d4fc4e8fae99da89b9bf5080c9336f61c8f1cf0245c X-Originating-IP: [136.175.111.3] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=freakingpenguin.com; s=x; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=B3nqTyF+QgfdIgwGnk8wA55bc7vVvNnW+NUyR6v/XBM=; b=ebHuKTGF+W7EedSRIvZiI5WveE F+bY4EZB9fEC7R+yV6cnDTi6y9wM8Y+NorY8OlD+AfF6IbYdywWQuukLWO1TkgInUP44/Y8Iqkbh/ fD1rXRRgD/zYTPBz8XTWmqLOpnHQgiGzYNgznCUsXl5Ok5SkgPNHSDyORVLSBSMpIjaKAPTRlgrnc tBlkNDsbgivyda4grU88QI9u0AnAS8M6KQSoPjy1HVSW7duH8OdAsBNVq9xCkucaYhXoVQCGwCFGL pZ7ShHWsbhXAi9BW947BRDI2fvHJwncSM4MY4qNEjZ0oIf9S3iX3JeSAxJCmGeHEkZd3WstGnmdzu SF4x/fWQ==; From: Richard Sent To: MSavoritias Cc: Andreas Enge , guix-devel@gnu.org Subject: Re: About SWH, let avoid the wrong discussion In-Reply-To: <20240621134439.5bc324b4@fannys.me> (MSavoritias's message of "Fri, 21 Jun 2024 13:44:39 +0300") References: <20240618113717.4a6bad2b@fannys.me> <87msnebsfd.fsf@gmail.com> <20240621121213.419da774@fannys.me> <20240621134439.5bc324b4@fannys.me> Date: Sat, 22 Jun 2024 09:06:20 -0400 Message-ID: <87zfrdazzn.fsf@freakingpenguin.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Authenticated-Id: richard@freakingpenguin.com Received-SPF: pass client-ip=136.175.108.22; envelope-from=richard@freakingpenguin.com; helo=mail-108-mta22.mxroute.com X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: D9DD013E9A X-Migadu-Scanner: mx12.migadu.com X-Migadu-Spam-Score: -6.36 X-Spam-Score: -6.36 X-TUID: 1KeOljKPftqP Hi MSavoritias, MSavoritias writes: >> Well, the opt-in model is in place: As soon as I put my code under a free >> license on the Internet, I opt in for it to be harvested by SWH (and anybody >> else, including non-friendly companies and state actors). > That may be how you have understood it but that is not how most people > understand it. See for example mirroring videos that creators have > made online, or more recently some activitypub software harvesting > posts for a search engine. > > As I have been saying a lot in this thread (because there seem to be a > lot of people in the Guix community not familiar that legal are not > the same as social rules): I feel the need to jump in here because that first paragraph, to me, implies that the silent members of the community agree with you. I do not. Mirroring/archiving code released under a free license is different then copying videos or posts that were not licensed. The two are so different that opposition to the latter can't be compared to opposition to the former. And yes, I do mean from a ethical perspective. These are wildly different issues. > Saying that I can do whatever I want is a very reductionist point of > view that I doubt would be acceptable inside Guix and FSF even. Given > that GPL itself doesn't allow you to do whatever you want. Restrictions for the purpose of maximizing freedom are different then restrictions for the purpose of limiting freedom. > Again as I wrote above legal has nothing to do with it really. Its > about our social rules and what we have as common understanding in > Guix. To some people (myself included), ensuring software is and remains free IS an ethical rule (along with the contents of Guix's Contributor Covenant of course). I do not believe any rules in said code of conduct are being violated here. >> `-x archival` does it, but it is too easy to forget and once the cat is out >> of the bag privacy is lost. I really think this should be default behaviour, >> or >> at least there should be a flag in the package definition. I would still be >> uncomfortable with the last option, as everyone would be relying on the >> collective of Guix maintainers to not screw up and accidentally leak private >> data. >> >> Dale > Yeah very much agree this should be the default behavior. Archiving > should be opt-in to avoid any surprises for the person running it. I > am surprised it became default actually. It is not my responsibility to ensure publicly available code released under a FOSS license is not archived. It is the developers responsibility to not release it under a FOSS license. (Perhaps nonfree private channels would benefit from a change in the default behavior but Guix should not tailor its defaults around such a use case.) I am opposed to any theoretical change in Guix's packaging policy that restricts software freedom. This would include a system that allows for marking individual packages as "do not upload to software heritage". To clarify. I am specifically opposed to a change in official Guix packages that allows for this statement: "Do not upload automatically to software heritage, and no one else can either." I have no objection to disabling archival for technical reasons. And of course, 3rd party channels are free to do whatever they want. As Felix said: > The new field looks to me like an amendment of the license terms, > especially if the field was added by the author pursuant to the > objections raised in this thread. I would rather not pollute my > systems with potentially unfree software. Nonfree software does not belong in Guix proper. I believe [1] is a relevant piece on this topic. It discusses some of the issues with adding additional restrictions to a GPL license. Here's a choice quote from the GPL: > All other non-permissive additional terms are considered "further > restrictions" within the meaning of section 10. If the Program as you > received it, or any part of it, contains a notice stating that it is > governed by this License along with a term that is a further > restriction, you may remove that term. And the rationale: > Here we were particularly concerned to address the problem of program > authors who purport to license their works in a misleading and > possibly self-contradictory fashion, using the GPL together with > unacceptable added restrictions that would make those works non-free > software. [1]: https://www.fsf.org/blogs/licensing/protecting-free-software-against-confusing-additional-restrictions -- Take it easy, Richard Sent Making my computer weirder one commit at a time.