From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id UFWNMYlgdGbZ/wAAqHPOHw:P1 (envelope-from ) for ; Thu, 20 Jun 2024 17:02:01 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id UFWNMYlgdGbZ/wAAqHPOHw (envelope-from ) for ; Thu, 20 Jun 2024 19:02:01 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1718902921; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=rlJ4E9AxZHhWzEnIGbidFfuISp++zLYTFp9lQdkn4lY=; b=ZTorilJFb0WfmFGHVeH1xQFIwbtzk/fIKiJTLT3uUP+I/Drm2hgSy8GcgP0Z2vDyF04Nnm wxyMN20xoIR1b5K6UCHdjJ0wKjUryG28FsDXfflZS5y452y4ezrC1BLPHeYezv/7yf6+OD 5slyioMQqjCXyuGId7i2jXSchhDmbzizmsjY891HZ0img4av9T+I5Hu4y4NC+Vv3L1y9eN QqzPOfZfG2SXFLJD9G37BLXPpFKuXivOp/AqY2K01fuI7r2C3HmnCgQn98m5nkrPyl2ySo TQnqj5OqwR697Kv9z93h0itWO/XRbCR0m8rN+7/37a9lYWBIPlEvQJwMQaW3vQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1718902921; a=rsa-sha256; cv=none; b=f405/yk+EObmtVdjoHJZCQtFm8dl3sxY7A2cPeIr5H7uM7kYwS4t70MOyWZaSkL6Bw+jfu OQX8ewgawIyISWTWA33AzCht9tEfxkAmWdr7xsb9RXTbeFP1Fq6BQeIYDYrp8f07vnlbag Nvt2kM6VEo1IgkDlkX1G2F5mB/XvmzdpuTeegFImsR5NNjSRhNfhDoS0VjBMvYPg/lEJjG lkxsJLTBOm3Z9WfWmOAggEe0D37txORVr0hwRiDSxpg2vwK8fTkDtgdTeUdBuzwnqrT5/4 z2L5MLGK7/AdddLj2if4h8K/hVFcjVZnd7e6EASnOvJs6Y0FzAZ3gs5MK2x5gw== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6F71178C03 for ; Thu, 20 Jun 2024 19:02:01 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sKL9g-0002NJ-QP; Thu, 20 Jun 2024 13:01:02 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sKL9K-0001zB-R8 for guix-devel@gnu.org; Thu, 20 Jun 2024 13:00:39 -0400 Received: from hera.aquilenet.fr ([185.233.100.1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sKL9I-0001VT-Ox for guix-devel@gnu.org; Thu, 20 Jun 2024 13:00:38 -0400 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id A0C871519; Thu, 20 Jun 2024 19:00:31 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at hera.aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6KOljebwy35I; Thu, 20 Jun 2024 19:00:30 +0200 (CEST) Received: from jurong (sauterelle.math.u-bordeaux1.fr [147.210.16.128]) by hera.aquilenet.fr (Postfix) with ESMTPSA id 233EEB4; Thu, 20 Jun 2024 19:00:30 +0200 (CEST) Date: Thu, 20 Jun 2024 19:00:26 +0200 From: Andreas Enge To: Dale Mellor Cc: guix-devel@gnu.org Subject: Re: Next Steps For the Software Heritage Problem Message-ID: References: <20240618113717.4a6bad2b@fannys.me> <8734pa5mlx.fsf@meson> <077b1a0fdec4d0f30209c28d75dc40811c77a4a9.camel@rdmp.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <077b1a0fdec4d0f30209c28d75dc40811c77a4a9.camel@rdmp.org> Received-SPF: pass client-ip=185.233.100.1; envelope-from=andreas@enge.fr; helo=hera.aquilenet.fr X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -5.86 X-Migadu-Queue-Id: 6F71178C03 X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -5.86 X-TUID: H0D+iufcIJl4 Am Wed, Jun 19, 2024 at 09:36:29AM +0100 schrieb Dale Mellor: > No, it's not. I use Guix as a tool to develop my own projects, private and > personal for reasons I'm keeping to myself. As part of that I write package > definitions for them, and use the Guix machinery to build and test. I *cannot* > have Guix just giving my code away to anybody, that is just fundamentally wrong. > > I think at least there should be a /restricted/ license type available to > package definitions, and the system absolutely should not give source code away > from packages which use this (of course, they won't get into the official > distribution, but that's fine). Is there a misunderstanding here? The Guix software framework does not communicate software that you work on to outsiders. As I understand it, SWH looks at the Guix packages that are publicly available in the Guix git repo, and then archives the corresponding source code of these packages. By definition, this is free software (otherwise we would not package it), and available from elsewhere on the Internet (the "uri" part of the "source" field). So I think Guix does not actually do anything in this context, and all this discussion is moot. (Well, I suppose we may encourage SWH to archive these sources, and am personally very much in favour of it; but they do not need us for archiving the sources.) The goal of SWH is to archive all free software in the world, and if you want to prevent your software from appearing in their collection, the only reliable solution is to not publish it as free software (which apparently is your approach, Dale, for the software you are talking about). Andreas