From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id oFYOFPNHUmAYewAA0tVLHw (envelope-from ) for ; Wed, 17 Mar 2021 18:18:27 +0000 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id uM3TD/NHUmCLRQAAbx9fmQ (envelope-from ) for ; Wed, 17 Mar 2021 18:18:27 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id CB1E227B18 for ; Wed, 17 Mar 2021 19:18:26 +0100 (CET) Received: from localhost ([::1]:35564 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lMakT-0004SZ-Va for larch@yhetil.org; Wed, 17 Mar 2021 14:18:26 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:34312) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lMaiU-00043B-PP for guix-devel@gnu.org; Wed, 17 Mar 2021 14:16:25 -0400 Received: from mail.zaclys.net ([178.33.93.72]:59375) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lMaiQ-000227-12 for guix-devel@gnu.org; Wed, 17 Mar 2021 14:16:22 -0400 Received: from guix-xps.local (82-64-145-38.subs.proxad.net [82.64.145.38]) (authenticated bits=0) by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 12HIGEFI032284 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 17 Mar 2021 19:16:15 +0100 DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 12HIGEFI032284 Authentication-Results: mail.zaclys.net; spf=fail smtp.mailfrom=lle-bout@zaclys.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net; s=default; t=1616004975; bh=TfrKz5oY1tHfxds8he2w7cQAn0019/lWwl9tOVSHm5E=; h=Subject:From:To:Cc:Date:In-Reply-To:References:From; b=oFWQonCSDhfwc6FdRiuqKSC2JlktXM0H0Aj5QfIYhfsbvDhSaH6uLF8gSAPf4j3Ws tbK5LTzJJJ0ghBl3Sqy6E7X1x4xPneSAosLSpB+sQ5E0hXech5Lsitl8JVA2QOqgHO ZM5WWnahXWhFxLlyn3GQcph0l6XLVkzkKqq4bC/s= Message-ID: <61252a58340e1491b950bd619e73103e93515877.camel@zaclys.net> Subject: Re: Why [bug#47081] Remove mongodb? From: =?ISO-8859-1?Q?L=E9o?= Le Bouter To: zimoun Cc: guix-devel@gnu.org Date: Wed, 17 Mar 2021 19:16:10 +0100 In-Reply-To: <86a6r1wtnz.fsf@gmail.com> References: <20210312005632.13690-1-lle-bout@zaclys.net> <86ft0twwg8.fsf@gmail.com> <86a6r1wtnz.fsf@gmail.com> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-iMVVdK90J0+Tv9mwUs8Q" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 Received-SPF: pass client-ip=178.33.93.72; envelope-from=lle-bout@zaclys.net; helo=mail.zaclys.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616005107; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=TfrKz5oY1tHfxds8he2w7cQAn0019/lWwl9tOVSHm5E=; b=d/2bBUif+3eBRtqF+buFQ4GpW4TGpMc+xFg8s3oH3XypYWPU1CPKX69NUO8a3AK6LpiiiR VSZTCYhJ6S7MinFmIcMaH4Ah6aSj7hvgVvngB5/xI+a2sq2qaxGAIkZ/PgsiJf5BnivqAY Z8JD+Atqm7ngG3Wx1le1tlCjfMRslztvWgrP+dtcK+HL/J4/Ls9ozGWMrAXJySxrINoc0F 81WiqzV/r1ol9oqb2qVIfQwbdbWKIulbW1R9QARKbdhJLbMf+5qgLutBqVedZ6AKPftufw MBl5m2LCDQtsHPlNm1B6YHF+N/SXS4ZIuw/Cnb2NwjWukmi/Rw95H65c9VNMGg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616005107; a=rsa-sha256; cv=none; b=P6ZmvZLqw9Fgkd/gmGxnzaaxOZaEkq2Q7m3aq7QIhYE7cPi0YyeoQ2gYWnITH6eob5QKRv ArwPe4B3aL2ekTSPOvu+3IR3p4YQhA3a6wIZ/0dl0sWH1Vg6RNv1Jo9Sbd6Z9dXY4ZoGOn JOpeVIjuRNnIUoWG46JKQKvdyK8tWHIMC9v/0CoxvO9thdXk6hpn+/nJQHQhyvNKfNmIb2 D2VfFNIZNPPv1P/0shziDEiVMPgeTDfP5IqA+3otpqai1K13ejUNfXvw6nX0ZYcKbGCFL6 EWjmqOYQZEDz2FuvzUE00kZJlU9NCqEXcNby6ZuagZ6G5W72H+ftri9PcAi/ew== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=oFWQonCS; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -4.20 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=oFWQonCS; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: CB1E227B18 X-Spam-Score: -4.20 X-Migadu-Scanner: scn0.migadu.com X-TUID: PfZ/ffy3jIFL --=-iMVVdK90J0+Tv9mwUs8Q Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 2021-03-17 at 18:56 +0100, zimoun wrote: > AFAIT, 3.4.10 is released under GNU AGPL 3.0 and Apache 2.0. This > version had been released before the October 16th, 2018. Could you > point which code is non-free? >=20 > IMHO, this claim about non-free code is wrong. The last versions > with > an acceptable license seem 4.0.3 or 4.1.4, I guess. It's not wrong, look at 2f9132e2e0b1e01398a01a32972e87f45ec2f7a6, we were shipping 3.4.24 before the removal, not 3.4.10. > I am not against removing MongoBD. I am just saying that the removal > deserves at least a message on guix-devel and maybe a --news entry. >=20 > Other said, it deserves more than 6 days between the =E2=80=9Coh there is > security vulnerabilities=E2=80=9D and the full removal. When one uses a > version > from 2017 as 3.4.10 is, one knows that it can have security > vulnerabilities. >=20 > I am not complaining about the commit itself, but I am complaining by > the way of doing the thing. I agree, will do differently in the future, no one mentionned it during all discussions, but if it was I would've, 3-4 days did not give you time to comment so I'll wait longer maybe re-re-revert the revert to restore 3.4.10 instead so we get rid of the non-free code issue. Does anyone actually use MongoDB on GNU Guix? Some people don't look at versions or when they were released and just trust GNU Guix. >=20 > All the best, > simon L=C3=A9o --=-iMVVdK90J0+Tv9mwUs8Q Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEFIvLi9gL+xax3g6RRaix6GvNEKYFAmBSR2oACgkQRaix6GvN EKYM1Q//WFw4PVIA/Q08FuDchI6h/ZYULyIzpC3xI5G3dRzgcX8MHm/QA21rLV45 StP4M+ARnZ+5L1dD0mGg+3mswCfIbqYsc1jmo7eUQZ0QkhXdJM9Cw/RqNaDhHlu9 ulE4Pr41kUGViwE+3pqUoHLMEnW5jUqT6ERphUt7EjmSr34hRqDlnzVq7t9Riq63 6r9QOsZ9RbfPUox7xjREBHlX2+1IZSXpsgy73cJSRGyEV+DQ7YMHEXH1KUe19bIj Wldtnjru+FjIb+2MwDDUFBc+MG7ALRDqXRiNpQN4LXUUypz2FfnczHVV/FrsKQR8 1XTpm+0FFMudVH5vLluL0XfS6kp0GviC9oxC4kQJFg/31ce59cQ/XXwD3Y37+TgB uOGsC/9e0pK2Xi2D3YUBh46IMMnkOfEwKsvJDd1BPKKA3tPfr3rip1rPIQzAfbzD p4O7oL6jLNI9xFbo//NhG1w8HVTb6ThF8UFxUab8FYCxkhKX0CtkYi3YYDxPQpxa G+0kgMwjkdwulp61r7/Nj/V0gsRNJD4+Zj3vz30XvxnbpU4ucACcFlpg7aP3Y37C 5v98IjvOnraioo/z9QsxILzZUn2sLatasQ7Dg0WeCpGur1dGSkja3QbYmMR1jqgX HPepk12eeGzunHKjF1+auoAkG8SIG1CBn1Dig4LYvsiisuc332o= =QLD9 -----END PGP SIGNATURE----- --=-iMVVdK90J0+Tv9mwUs8Q--