[FSDG] gnome-boxes proposes installing non-FSDG distributions

  • Open
  • quality assurance status badge
Details
3 participants
  • Denis 'GNUtoo' Carikli
  • Denis 'GNUtoo' Carikli
  • Maxim Cournoyer
Owner
unassigned
Submitted by
Denis 'GNUtoo' Carikli
Severity
normal
D
D
Denis 'GNUtoo' Carikli wrote on 16 Dec 2022 01:22
gnome-boxes and distributions
(address . bug-guix@gnu.org)
20221216012231.4dde4638@primary_laptop
Hi,

I've installed gnome-boxes and I found out that it proposes to download
and run many distribution installers.

As it contains many non-FSDG compliant distributions, many of these
distributions probably contain nonfree firmwares at least.

Not all distributions are problematic though, as it contain some FSDG
compliant distributions.

Denis.
-----BEGIN PGP SIGNATURE-----
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=p1Qh
-----END PGP SIGNATURE-----


D
D
Denis 'GNUtoo' Carikli wrote on 16 Dec 2022 15:39
(address . 60109@debbugs.gnu.org)
20221216153958.345c4ded@primary_laptop
Hi,

Here are some more information:

The Parabola's patch fox fixing that is probably this one:
This is because libosinfo is in the dependencies of gnome-boxes. I
didn't check beyound that.

To reproduce the bug one need to lauch gnome-box (probably with
virtualization services enabled).

Once installed and launched (and the first information wizard skipped)
we can click on the top-left "+" button.

We then have the choice between "Create virtual machine from file" and
"Download an operating system".

It also shows "Featured Downloads" with distributions under it like Red
Hat entreprise Linux 9 Unknown x86_64, Fedora Workstation 36 x86_64
(live), etc and all these are known to contain nonfree firmwares. I'm
not sure if it shows this "Featured Downloads" all the time though.

If we click on Download an operating system, then we have a list of
distributions like Ubuntu, openSUSE etc which again are known to
include nonfree firmwares in their installers.

If we go down and click on the 3 vertical dot buttons, we then have a
more complete list which also includes FSDG compliant distributions
such as (complete list):
- PureOS x86_64 (Live) from Purism, SPC
- Guix latest x86_64 from Guix contributors
- PureOS 10 KDE x86_64 (Live) from Purism, SPC
- PureOS 10 GNOME x86_64 (Live) from Purism, SPC
- Trisquel 9 Sugar Toast x86_64 (live) from The Trisquel project
- Trisquel 9 x86_64 (live) from The Trisquel project
- Triskel 9 x86_64 (live) from The Trisquel project
- Trisquel 9 Mini x86_64 (live) from The Trisquel project
- Guix 1.3 x86_64 from Guix contributors
- Guix 1.3 i686 from Guix contributors
- Hypertalking 03 x86_64 (Live) from the Hyperbola project
- Hyperbola 03 x86_64 (Live) from the Hyperbola project

Then there are some distributions where I'm not completely sure of the
status:
- freenix x86_64 (DVD)(Live) from the Freenix project
Here this is a distribution that applied for FSDG compliance but it
was stuck in review for some reasons (probably either people waiting
on each other, or the lack of time to review it properly from at
least one of the sides)
- Debian: As far as I understand they include the nonfree firmwares by
default nowadays in some situations, so it's probably easier to filter
them out than check each installer / image for nonfree firmwares.
- Freedos: if I recall well that came with nonfree software but there
is an ongoing effort to remove it, I just don't know the status. It
probably still depend on nonfree compilers (under the openwatcom
license) though so it probably has nonfree dependencies.

And as far as I know all the other either have at least nonfree
firmwares inside.

Denis.
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEeC+d2+Nrp/PU3kkGX138wUF34mMFAmOcgz4ACgkQX138wUF3
4mN1Kg/9GCI5+uLfrxOygwJRTn2e21d4EaYw/EOi90KbLdzZa/Bd3VtA5+2zCiOG
/ZbEw+eIl36WskmxOGdpjoUCQquRrWVAgRu/9x7KNWJMaJOJfPmN8QP/ANg72AjD
4HiwvZwQnKFDOKzUCLkTFJRnrQdNrWWphm0o9bQ6JF+EZIzYW/NsEpKJc6Fd58/v
/Igr2wAw9iL1KGxTZlHcPipODzdIPUYEF6EyFV7gT1yqnzQ7Y+NCQm6HHJyKm29U
bfQcg4Jc+vC3XAyPvPxZiY1f4d9zsvFr8lN4XIJgcvPzoK+5ZrA6zPamBjyU6e0s
FvgqmLKGxyyiGyrOfssKwZPcDDcwePrOwgxr/z041UptFrnNNL9SJI+hxS78adJ8
dCeb6RbUjNfwDIy9Id95p3I6hu/w+hxJkb2TqkEwnIW30VaxmaaJf8686PzWBRsO
qLDKKIL+Fi37Ny2vv7jQA04JX7yFnCAWrxuUjTP9Vsr9zeoDQQKRb5qUezrQlhQC
n/YNuits5hpzMyaScfDOzgw1g25kfwOS7VF7Pe3EDJ+oPfdNjFcM+31JWsyDvbVN
ilIhQFODiU2ZOs4xj6yAbAzSNk+302X2oK/dTTx4rvOPrpCbcZ6MeNm7WnDarC+d
d0IKGsIox7mfCKKQTg8vyzcsOZq7E4+YnlwkT7O3a9d2vdhGRtg=
=XCQb
-----END PGP SIGNATURE-----


D
D
Denis 'GNUtoo' Carikli wrote on 26 Dec 2022 02:50
(address . 60109@debbugs.gnu.org)
20221226025018.6bdd5fc5@primary_laptop
On Fri, 16 Dec 2022 15:39:58 +0100
Denis 'GNUtoo' Carikli <kernel@cyberdimension.org> wrote:

Toggle quote (8 lines)
> Hi,
>
> Here are some more information:
>
> The Parabola's patch fox fixing that is probably this one:
> https://git.parabola.nu/abslibre.git/tree/libre/libosinfo/libre.patch
> This is because libosinfo is in the dependencies of gnome-boxes. I
> didn't check beyound that.
I've looked in more details and it seems that the information is not in
libosinfo but in osinfo-db.

Apparently Parabola also patches virt-manager[1] probably to remove the
mention of non-FSDG distributions, so I'm not sure why Parabola didn't
patch osinfo-db directly instead.

Maybe it's to minimize the amount of rebuilds or something like that
(Parabola reuses packages from Arch Linux and removes/replace the ones
that are not FSDG compliant).

References:
-----------

Denis.
-----BEGIN PGP SIGNATURE-----
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=cIhJ
-----END PGP SIGNATURE-----


M
M
Maxim Cournoyer wrote on 3 Apr 2023 21:11
control message for bug #60109
(address . control@debbugs.gnu.org)
878rf8eq7p.fsf@gmail.com
retitle 60109 [FSDG] gnome-boxes proposes installing non-FSDG distributions
quit
?