The officially official Devuan Forum!

You are not logged in.

#1 2018-11-07 16:32:38

Duke Nukem
Member
Registered: 2018-11-07
Posts: 6  

Sources List all Non-Free ?

Hi, I've been using Devuan since the first beta, but only just joined the forum on occasion of installing ASCII.

Looking at the repositories in my sources.list as installed by default, they are all suffixed with "non-free contrib", which is not like in the list on the Download Page here: https://devuan.org/get-devuan.  I don't care much if it is free or non-free, but am I missing something? Should I add the repository addresses without the suffixes (or just remove the suffixes)? What does "contrib" mean? I cannot remember what was in the sources.list in my previous installations. Thanks for any help.

PS : I have just found a previous thread from which I gather that it was a choice I made during installation to allow non-free stuff.  But my question is, does the non-free depository contain the free stuff as a subset, or should I nominate both the free and the non-free repositories in my sources.list?

Here is my sources.list :-

deb cdrom:[devuan_ascii_2.0.0_amd64_dvd-1]/ ascii main non-free

deb http://gb.deb.devuan.org/merged ascii main non-free contrib
deb-src http://gb.deb.devuan.org/merged ascii main non-free contrib

deb http://gb.deb.devuan.org/merged ascii-security main non-free contrib
deb-src http://gb.deb.devuan.org/merged ascii-security main non-free contrib

deb http://gb.deb.devuan.org/merged ascii-updates main non-free contrib
deb-src http://gb.deb.devuan.org/merged ascii-updates main non-free contrib

Last edited by Duke Nukem (2018-11-07 19:22:32)

Offline

#2 2018-11-07 19:48:56

arnaiz
Member
From: Leon
Registered: 2018-10-28
Posts: 13  
Website

Re: Sources List all Non-Free ?

- not free: these are redistributable packages but not free according to the Debian Free Software Guidelines (DFSG).
- contrib: is free software compatible with the DFSG, but depends on some packages that are not free.
- main: it is the standard repository of devuan and all the software included here includes free software according with the DFSG.

Try to remove contrib and non-free repositories and if you need a package from there, enable it.

DFSG
https://wiki.debian.org/DFSGLicenses

Offline

#3 2018-11-07 21:13:57

eric_openssl
Member
Registered: 2018-10-31
Posts: 4  

Re: Sources List all Non-Free ?

hi, does it mean that is a fallout-licence ?

Last edited by eric_openssl (2018-11-07 21:15:03)

Offline

#4 2018-11-07 21:30:22

fsmithred
Administrator
Registered: 2016-11-25
Posts: 912  

Re: Sources List all Non-Free ?

If you select one of the expert installs (graphical or not) AND select a mirror, then you will be asked if you want contrib and non-free in sources.list.

Without doing those two things, if your hardware requires non-free firmware, then sources.list will include contrib and non-free and the necessary packages will be installed.

The live isos have some non-free wireless firmware installed and a script to remove those packages. Only the main repo is enabled in sources.list.

Offline

#5 2018-11-07 23:36:15

kuleszdl
Member
Registered: 2018-11-03
Posts: 10  

Re: Sources List all Non-Free ?

Not sure how this is implemented, but personally, I find it unacceptable to enable these sources without asking the user for confirmation first (is this really the case?). I was also rather  disappointed to find these repos enabled by default in the embedded builds.

Offline

#6 2018-11-08 00:09:53

golinux
Administrator
Registered: 2016-11-25
Posts: 1,307  

Re: Sources List all Non-Free ?

kuleszdl wrote:

Not sure how this is implemented, but personally, I find it unacceptable to enable these sources without asking the user for confirmation first (is this really the case?). I was also rather  disappointed to find these repos enabled by default in the embedded builds.

fsmith red explained it very clearly.

Offline

#7 2018-11-08 00:22:22

arnaiz
Member
From: Leon
Registered: 2018-10-28
Posts: 13  
Website

Re: Sources List all Non-Free ?

eric_openssl wrote:

hi, does it mean that is a fallout-licence ?

That resource explains what licenses are approved and which not. As said before, If a package and dependencies has a compatible license goes to main and in other cases goes to contrib or non-free.

Offline

#8 2018-11-08 00:36:58

kuleszdl
Member
Registered: 2018-11-03
Posts: 10  

Re: Sources List all Non-Free ?

Well, the question that remains open to me is why such an important question is asked only in expert installs? I see a heavy conflict with this behavior of the installer and the statement posted on the website about non free-firmware (at https://devuan.org/os/source-code):

Devuan packages are 100% free software, and belong to the main section.

Devuan also provides contrib and non-free from Debian. We don’t recommend using these though:

    the contrib section contains free code that depends on non-free software.
    the non-free section contains packages distributed under the terms of proprietary licenses that deny you one or more computing freedoms.

But sometimes you don’t have a choice: if your machine requires non-free firmware to run, some computing is better than none. You should be aware that non-free firmware may contain undisclosed functionality that may be used against you (backdoors or spyware), and there’s little chance to discover it, as the source code is not available for review. Using non-free software means to trust the vendor not only to be cooperative, but also to not be coerced into shipping insecure or malevolvent code.

Proprietary software licenses (non-free) may grant the vendor explicit or implicit rights beyond what the law requires from you as a user, such as copyright waivers for content created using the program, or the ability for the vendor to use your image or sell your private information. Please consult a lawyer before choosing to relinquish your freedom.

=> The website warns about enabling these repositories and even recommends consulting a lawyer before using non-free firmware, but the installer loads it by default without asking? I thought this must have been some misunderstanding, but I just actually tested this on a system with Intel 5300 Wifi and indeed the installer does not ask at all and silently loads the non-free firmware. mad

Imho, even if the installer finds hardware that needs non-free firmware, who says the user wants to use this hardware at all? If the Devuan policy is that non-free firmware might be harmful and only enabled with care, the installer imho should not decide this for users only in expert mode.

Offline

#9 2018-11-08 00:59:15

golinux
Administrator
Registered: 2016-11-25
Posts: 1,307  

Re: Sources List all Non-Free ?

kuleszdl wrote:

Well, the question that remains open to me is why such an important question is asked only in expert installs? I see a heavy conflict with this behavior of the installer and the statement posted on the website about non free-firmware (at https://devuan.org/os/source-code)

The website warns about enabling these repositories and even recommends consulting a lawyer before using non-free firmware, but the installer loads it by default without asking? I thought this must have been some misunderstanding, but I just actually tested this on a system with Intel 5300 Wifi and indeed the installer does not ask at all and silently loads the non-free firmware. mad

That statement was written a long time ago and I agree that section should be updated to explain the current policy.

Imho, even if the installer finds hardware that needs non-free firmware, who says the user wants to use this hardware at all? If the Devuan policy is that non-free firmware might be harmful and only enabled with care, the installer imho should not decide this for users only in expert mode.

I remember the debate but not the details for the decision to install non-free make non-free available to install if needed so have requested clarification of how that came about.  As soon as I know, you will too.

Offline

#10 2018-11-08 01:13:55

kuleszdl
Member
Registered: 2018-11-03
Posts: 10  

Re: Sources List all Non-Free ?

Many thanks, highly appreciate your effort!

Even if the article might be dated, the major selling message "software freedom, your way" is in conflict with the installer's behaviour (or its debconf priority). I realized that the current policy is different from Debian (they only have these explicitly unofficial non-free isos but do not ship non-free firmware in their base distribution), and this makes me sad. However, I know that some users don't care about non-free firmware and, thus, I partially understand that the Devuan devs might argue for shipping non-free firmware by default. Still, I can't understand why the user is asked about enabling/loading it only in expert install mode. This is definitely not software freedom "my way".

Offline

#11 2018-11-08 17:10:38

fsmithred
Administrator
Registered: 2016-11-25
Posts: 912  

Re: Sources List all Non-Free ?

Still, I can't understand why the user is asked about enabling/loading it only in expert install mode. This is definitely not software freedom "my way".

It's a limitation of the installer. We would love to have it ask about non-free in all situations, but we couldn't get it to do that. We do have other ideas about how to solve this problem, so don't count on it being this way permanently.

For now, you have to choose expert install and a mirror to get it your way. The alternative would be to leave the non-free firmware packages off the isos, and then those who need it would not be able to get it their way.

Offline

#12 2018-11-08 18:29:50

kuleszdl
Member
Registered: 2018-11-03
Posts: 10  

Re: Sources List all Non-Free ?

Would it be an option to provide two ISO flavors (free and non-free) in the meantime (i.e. the current way Debian handles this atm) until the issue can be resolved in the installer?

Offline

#13 2018-11-08 19:11:28

fsmithred
Administrator
Registered: 2016-11-25
Posts: 912  

Re: Sources List all Non-Free ?

Separate isos for free and non-free is a possibility. I'm planning to push for a better solution than what we now have when we get to making beowulf isos. There's also been talk of a libre repo (with libre kernel). But at this point, it's just talk. No actual plans yet.

Offline

#14 2018-11-09 00:52:28

kuleszdl
Member
Registered: 2018-11-03
Posts: 10  

Re: Sources List all Non-Free ?

Glad to see that this is actually perceived as an issue that requires action.

Offline

#15 2018-11-09 10:22:46

Duke Nukem
Member
Registered: 2018-11-07
Posts: 6  

Re: Sources List all Non-Free ?

arnaiz wrote:

- not free: these are redistributable packages but not free according to the Debian Free Software Guidelines (DFSG).
- contrib: is free software compatible with the DFSG, but depends on some packages that are not free.
- main: it is the standard repository of devuan and all the software included here includes free software according with the DFSG.

Thanks for that, I now understand the definitions.  But with that, and with searching other threads, I still have a simple practical question : is the stuff in the "main" repositories included as a subset in the "non-free" repositories, or does the "non-free" repository contain only "non-free" stuff?

Or putting it another way, if I want free and non-free stuff, should I have both "main" and "non-free" repositories in my sources.list or is just "non-free" enough?

Or putting it third way, does the line :-

deb http://gb.deb.devuan.org/merged ascii main non-free contrib

....  refer to three different repositories ("main" "non-free" and "contrib") that are all included by that statement? Or is it refering to a single block of stuff that contains it all, and there is a separate block, invoked by :-

deb http://deb.devuan.org/merged ascii          main

.... that contains free stuff and only free stuff?

Sorry, I was not intending to start an ideological discussion here :-S

Offline

#16 2018-11-09 17:05:19

fsmithred
Administrator
Registered: 2016-11-25
Posts: 912  

Re: Sources List all Non-Free ?

You must have at least 'main' on the deb line, or you'll get nothing. If you add contrib and non-free, it makes those packages available, too. You could put main, contrib and non-free on separate deb lines if you wanted, or all three on one line. Either way does the same thing.

Offline

#17 2018-11-09 17:16:00

Duke Nukem
Member
Registered: 2018-11-07
Posts: 6  

Re: Sources List all Non-Free ?

@ fsmithred : Thanks for that, I get it now.

Offline

Board footer