From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id yAABHe8XEWOtWAEAbAwnHQ (envelope-from ) for ; Thu, 01 Sep 2022 22:37:03 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id qDMwHO8XEWNCMAEAG6o9tA (envelope-from ) for ; Thu, 01 Sep 2022 22:37:03 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 212F31D23B for ; Thu, 1 Sep 2022 22:37:03 +0200 (CEST) Received: from localhost ([::1]:39278 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oTqvt-00009S-Q0 for larch@yhetil.org; Thu, 01 Sep 2022 16:37:01 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:55076) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oTquz-00007S-AC for guix-devel@gnu.org; Thu, 01 Sep 2022 16:36:05 -0400 Received: from mail-qt1-x830.google.com ([2607:f8b0:4864:20::830]:39592) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oTqur-00036V-Fu; Thu, 01 Sep 2022 16:36:05 -0400 Received: by mail-qt1-x830.google.com with SMTP id r6so44265qtx.6; Thu, 01 Sep 2022 13:35:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:user-agent:message-id :in-reply-to:date:references:subject:cc:to:from:from:to:cc:subject :date; bh=DxddUeE7/MdAFOQNevKbguAEathowpf/76mn5V17q7I=; b=EkNH9XSEOVnz9WDJBbLoq+Ex/AwzIRLNCANbM+Tv0og1mCsP0MtNi6wQGuP/2oPEpe XIKcYtfwtWtBo8t6EFqUuqpi4ASJgIhnU9l5P+ufpbgXc+/kOb8YVKwv9s/R8GR1dSpH K8LQhLKCU5Lrh5k6QKqJgLsPRZekZ+7iU7v8sd2SONubU7fSt9TyeNoZAsePFcy+DYNi Vb6L0Gf+OgQyyBljTfulWuPCCduRayvrzLqNh5VEDsJPzZWsWvy4rdMDVC7MD1zKc07e xXP+4dhR2CL7WgDCaSQJKkA26B+UpsoYRWAP5BwQnltv5bGRNXNeQMIfB2uPt6OH+226 L8Zw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:user-agent:message-id :in-reply-to:date:references:subject:cc:to:from:x-gm-message-state :from:to:cc:subject:date; bh=DxddUeE7/MdAFOQNevKbguAEathowpf/76mn5V17q7I=; b=CX6cMXQAfF6t92Vk6bHXsNBzih6JWQPzlW5z486/xWO74Kzwv6LD5Hc2f25HiwR3FV wEmZbxpde4OYAP3LMlkxeRkkmI4nB/Xv8kWH2rT3kfJ4ddjajUMwqAwdUNxA1l1YauLo SeTQKoaZ4nFAIqFYBJSj7ApjzM91AZlk7Ppn8TBWYS4EUrYW1byS9GsT+F3VD8YFM0ie Y6tuYgrLs86daKkN7N8R7k9xTwnGJNmgXtVCOIVEXfWQ789EgsD1NiLNHmdZfthiWNSM uifLr6HVTyIdsnVXgxlt61WT8umrJY2wHfo+xLzh9jx1KUH2ShKJwUq48hJubTudBf3/ AtOw== X-Gm-Message-State: ACgBeo22/hIqxo4EwEeASYtrLzBJCZWmjltqvZ8zANegr809j8PE6DRD eVbStRdPgN8Xno5itTTqLQKbsEcupOI= X-Google-Smtp-Source: AA6agR5LqOEeSZS6Fc4bGGPXwcptWoxd31FIYydijwBvdqjOlz6IR3HKCG6zNq9AJd8VAZddJ4CxLg== X-Received: by 2002:a05:622a:1194:b0:343:7547:9e12 with SMTP id m20-20020a05622a119400b0034375479e12mr25437059qtk.654.1662064554567; Thu, 01 Sep 2022 13:35:54 -0700 (PDT) Received: from hurd (dsl-10-128-104.b2b2c.ca. [72.10.128.104]) by smtp.gmail.com with ESMTPSA id ay27-20020a05622a229b00b00304fe5247bfsm10449428qtb.36.2022.09.01.13.35.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 01 Sep 2022 13:35:53 -0700 (PDT) From: Maxim Cournoyer To: Denis 'GNUtoo' Carikli Cc: guix-devel@gnu.org, phodina@protonmail.com, ludo@gnu.org Subject: Re: 04/04: gnu: Add fwupd. References: <166194391661.31756.9547474130907902222@vcs2.savannah.gnu.org> <20220831110517.76C23C04F0B@vcs2.savannah.gnu.org> <87h71sa6iq.fsf@gmail.com> <20220901154232.1a568486@primary_laptop> Date: Thu, 01 Sep 2022 16:35:52 -0400 In-Reply-To: <20220901154232.1a568486@primary_laptop> (Denis Carikli's message of "Thu, 1 Sep 2022 15:42:32 +0200") Message-ID: <87edwu96jb.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2607:f8b0:4864:20::830; envelope-from=maxim.cournoyer@gmail.com; helo=mail-qt1-x830.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1662064623; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=DxddUeE7/MdAFOQNevKbguAEathowpf/76mn5V17q7I=; b=f5SQWKqst5QyrEHHzJw0Uk3QbKahCjN0BQF5kwawXvgEmAiJ76W1jrCSrArsCTdCsUFz8t t8Zhc2rb2/Y7DuF9PvdIjQBu0caj0EZZxJcSVchj6P1D8Cmajb0QiW52M13nj3qGVhPdBG dgGEMXT4vianuHi9OX//T9dzu0j6T4LWpXh1df5ehI+AHMDIXUn0/VrdvRmV3nNoH7twdP 3Vq0mqoQdwb2jlRMXQ1e7EK6dL8vnzr7g+F54ufBHlKl0TBvJulAEgLWLJmbr97owVJBS8 qNv0w/xD6qFdp6nZn7SqTv4mwZTrk0qAZZS1I0UdBLD0yHOcxQiZKDvELDToBw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1662064623; a=rsa-sha256; cv=none; b=e3xy8NUyXYm3ynVc0Rac4jjnt/tofNgzCyOEt+RutqreUtf4uzIUib6M7c0PEwkjlNHLr6 bou7T5qzXv7CnLVIuhxT6q2/VUy71ZmzQ7IE+UHfW23tTZsWmHspwoHrWlhxLHaPGvFvfD Rj5dtbbi5OlJ4c7JWRHUL7DSOL/MXbx2W8EMm6YalfmGEX+B7GgFxqe9dN/vtg9L7y03IK tCne/uiCu8MdyCLzwWuoa0aAYoYsWCkdvpGcZz40pma9NKvPqmwzoJWBpes5fYldewf/Q6 IcSv3DA1gz6Pj2RaKj7EGHsJ1jAD18cQgPxTWwSfgddWJkye9G4Wrs4lHTx1qg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=EkNH9XSE; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.78 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=EkNH9XSE; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 212F31D23B X-Spam-Score: -3.78 X-Migadu-Scanner: scn1.migadu.com X-TUID: vts753r0NQJF Hello Denis, Denis 'GNUtoo' Carikli writes: > Hi, > > On Wed, 31 Aug 2022 09:26:21 -0400 > Maxim Cournoyer wrote: >> > commit 23152ff70f0ed4966d8207846f54c793d7cb4f86 >> > Author: Petr Hodina >> > AuthorDate: Tue Jan 4 06:58:51 2022 +0100 >> > >> > gnu: Add fwupd. >> >=20=20=20=20=20 >> > * gnu/packages/firmware.scm (fwupd): New variable. >> >=20=20=20=20=20 >> > Signed-off-by: Ludovic Court=C3=A8s >>=20 >> Just a quick question: does this tool talks to a remote server that >> serves non-free software as well as free one? If so, it'd need to be >> patched to comply with the FSDG. > It does. > > By default it at least uses the LVFS repository which has nonfree > software. I don't remember if it also has other repositories or if > there was a way to easily download updates from the repository > without fwupd or LVFS. > > It is at least possible to search for specific software in LVFS at this > address: https://fwupd.org/lvfs/search?value=3Dmicrocode > > You also have UEFI updates and so on there, so it's pretty clear that > there is some nonfree software. > > And we actually have the opposite issue here: It is way harder to find > firmware updates that are fully free and that they can at least in > theory be built with 100% free software on top of FSDG compliant > distributions. > > Maybe small free software firmwares like the colorhug firmware could be > OK. Somebody would need to check the dependencies for build the > firmware update. > > Bigger firmwares like with firmwares using Coreboot are probably not > OK because while coreboot is under the GPL, to work on recent > hardware nonfree software is likely to be used (like microcode updates, > Intel FSP, nonfree AGESA, etc). Thanks. With this in mind, I've disabled the default "remotes", which seem to be the metadata for specifying which remote server to interrogate for firmware. Users knowing what they want can enable them manually. See commit 4d361a6b5147e3f91573e9d3c8c540a233e7e142. Testers welcome! Thanks, Maxim