8 ms·

Debian votes for non-free firmware in the installer

128 points by simjue 4y ago

_joel 4y ago
Seems sensible, there's still purist debian distros for the purists
jacooper 4y ago
Yay, finally some common sense in the Debian UX.
BirAdam 4y ago
Mixed and competing thoughts and emotions. On the one hand, I love that Debian was the community GNU/Linux that shipped with the ability to be 100% unencumbered super easily. On the other hand, I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful. Then there’s part of me screaming “tradition not trend” and another part of me is screaming back with “finally!” It would be nice if they made it optional within the installer I suppose. Maybe I’m just a crazy person.
- zozbot234 4y ago
  > On the one hand, I love that Debian was the community GNU/Linux that shipped with the ability to be 100% unencumbered super easily. There will probably be an "unofficial 100% free installer" for those who care about that. The SC change does not forbid that, it just says that what Debian publishes by default should not introduce obvious breakage on systems where providing non-free firmware is required for proper operation.
  - nerdponx 4y ago
    Isn't that kind of what Ubuntu is for? Without major players in the community taking a hard line on free software, incentives to support freedom will become even lower than they currently are today.
    - eptcyka 4y ago
      Ubuntu is far more than a Debian fork nowadays - I think of the packages that are installed on most user systems, very little of them share the same source between Ubuntu and Debian.
- jorvi 4y ago
  > I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful. More open source should think like this. I’ve been aggressively trying to get OpenWRT to ship the images with WiFi on by default. At this point 99.99% of people are not leaving their network unsecured, and if for some reason you have to reset the router it becomes a plastic brick unless you have an Ethernet cable and an USB-to-ethernet adapter nearby. Even suggestions of either creating a landing page that forces the user to set up security before allowing internet connectivity, or basing the WiFi password on the serial number (that is also on the back of any router) falls on deaf ears.
  - tiffanyh 4y ago
    > At this point 99.99% of people are not leaving their network unsecured… 99.99% of people are doing what? Sorry, the double negative above is confusing me.
    - CompuHacker 4y ago
      I think they are suggesting that years of abuse hurled at the average user, coupled with legislation, have caused all new home networks to be secure, one way or the other.
      - rascul 4y ago
        There is regulation for that? I would be interested in finding out more.
  - naasking 4y ago
    > I’ve been aggressively trying to get OpenWRT to ship the images with WiFi on by default With what password? Plenty of people won't configure things they don't have to and that's a huge security hole. I don't see the utility in this change frankly.
    - detaro 4y ago
      The comment you reply to both explains the utility and proposes ways of mitigating the "huge security hole".
- nequo 4y ago
  > It would be nice if they made it optional within the installer I suppose. Apparently this option lost by 6 votes: Option 5 "Change SC for non-free firmware in installer, one installer" Option 6 "Change SC for non-free firmware in installer, keep both installers" . . . Option 5 defeats Option 6 by ( 169 - 163) = 6 votes.
  - pessimizer 4y ago
    That's too close. I hope they can have another debate and vote about just these two options.
  - Denvercoder9 4y ago
    Option 6 was to make a separate image that doesn't contain any non-free firmware available. Option 5, the winning option, also intents to allow the user to choose whether non-free firmware should be used from inside the installer: > The included firmware binaries will normally be enabled by default where the system determines that they are required, but where possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).
  - ShinTakuya 4y ago
    Not sure how the vote was conducted, but if it was first past the post then it's a shame. Because I'm sure some of the folks who voted for other options would have preferred option 6.
    - nequo 4y ago
      Debian uses a Condorcet method (specifically the Schulze method?[1]). Here is the source code of their vote engine: https://salsa.debian.org/debian/devotee https://salsa.debian.org/debian/devotee [1] https://en.wikipedia.org/wiki/Schulze_method https://en.wikipedia.org/wiki/Schulze_method
      - ShinTakuya 4y ago
        Oh nice, thanks for sharing! Seems like a very fair method of decision making. Go figure and organisation such as theirs would do so
- Karellen 4y ago
  > On the other hand, I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful. Not all distros have to be everything for everyone. It's OK to have a niche. If you want a distro that you can "just install" on any old bit of hardware that you have lying around, there are plenty of other distros out there that will do that already. I liked that Debian made you think about Freedom. If you wanted to use the "standard" installer and live up to Debian's Free Software ideals, as enshrined in Social Contract, you had to think about which companies made hardware that had Free drivers available, and make an effort to give your money to those that enabled that use-case. Or, burden of burdens!, you could spend a couple of extra minutes and a handful of clicks to track down the "unofficial" non-Free installer image. Seriously, it wasn't that hard. Yes, I know that the SC says that Debian's priorities are "our users, and Free Software" (but below "will remain 100% free"), but "our users" doesn't necessarily mean "all possible users". For those users that came to Debian primarily for the Freedom, I think this is a misstep. But, I don't determine which priorities and users are the most important to Debian, the membership does. And Debian is still one of the most committed to freedom distros out there, especially for its size. So, while this is not the choice that I would have made, now that it has been, I hope it makes Debian stronger going forwards.
  - Nextgrid 4y ago
    However, Debian doesn't really warn prospective users about the real-world ramifications of its commitment to free software. It's one thing if the homepage had a big warning "this is for free software purists and you'll need to do a complex procedure if you want to run non-free firmware - if you're not ready for this, consider an easier distro like Ubuntu", but they don't. Technical people will understand or at least suspect these problems, but a novice user who wants to try Linux (they are non-technical and already don't fully understand the concept of distros - maybe someone once told them "try Debian" and so for them "Linux" is Debian), see a nice "Download" button on the homepage, try it out and then are left disgruntled not just by Debian but Linux in general when the thing doesn't work because their network card requires proprietary firmware, so they go back to Windows, running way more proprietary software than a firmware blob, and as a bonus they now have a negative opinion of "Linux". Having more users use some free software is better than those users giving up just so that some purists' ideological concerns be satisfied.
- MiguelX413 4y ago
  There already was an ISO with non-free firmware. I think that's the only reasonable way to make such a thing optional.
spit2wind 4y ago
What's "SC"?
- yakubin 4y ago
  Debian Social Contract: <https://www.debian.org/social_contract https://www.debian.org/social_contract>
- hexodine 4y ago
  Debian Social Contract. More details about the vote are at https://lists.debian.org/debian-vote/2022/09/msg00196.html https://lists.debian.org/debian-vote/2022/09/msg00196.html
mrweasel 4y ago
I suppose this is meant for Debian developers, who are use to a certain style of communication, but that was a really hard read.
- Denvercoder9 4y ago
  This is only an unofficial, automated message from the vote bot with the raw results. Once the Project Secretary certifies the results, they'll be published in a more readable way on the website, possibly accompanied by a press release.
- yakubin 4y ago
  Debian uses a Condorcet method[1] for voting, which may be a bit more complicated than traditional simple majority voting, but makes sure that the winner would also win in every pair-wise election, as opposed to a less desirable candidate winning thanks to a greater number of more desirable candidates splitting the votes between themselves. [1]: <https://en.wikipedia.org/wiki/Condorcet_method https://en.wikipedia.org/wiki/Condorcet_method>
  - tialaramex 4y ago
    I would argue that voting is neither necessary nor appropriate for this problem, but if you're going to have voting with people who are pretty technical then the usual objection to sophisticated voting systems for the general electorate doesn't apply. [Confidence in a voting system is vital to the operation of democracy, once upon a time this needed a lot of explaining but I'd guess 2020 was recent enough that most readers know why it's a problem if loads of voters are somehow persuaded the results are bogus. Complicated systems make it harder to build confidence because some voters don't understand how it works and thus why should they have any confidence that it behaves correctly?] Debian specifically uses the Schulze method (a particular Condorcet method which avoids need for a "tie-break" mechanism by always picking a winner). And yes, this involves a lot more maths than First-past-the-post which may be familiar to a lot of readers. Note that "proportional" methods don't make any sense in this type of vote because there is nothing to share out. One of the options wins, all the others lose. Whether proportional systems are appropriate for electing members to a legislature for example, is a separate question.
kilij 4y ago
[flagged]
mindslight 4y ago
Unfortunately "non-free firmware" doesn't really capture the entire issue, akin to how the FSF misses the mark with their baked-into-flash exception. Proprietary binary blob on a device effectively separated by an IOMMU? That's a peripheral, most of them run non-free firmware. Proprietary binary blob on a device that has DMA access? That's a tainted main computer with a security issue. I hope the installer settles out into making these distinctions and informing users of the compromises being made. When I stick a Debian installer into a machine that requires non-free firmware to work, my intent is pretty clear. But that doesn't apply to someone just starting out.
- no_time 4y ago
  >Proprietary binary blob on a device effectively separated by an IOMMU? That's a peripheral, most of them run non-free firmware. Proprietary binary blob on a device that has DMA access? That's a tainted main computer with a security issue. I feel like that's a completely reasonable viewpoint to have. For example, MS Pluton bothers me 100x more than my car keys having nonfree, locked firmware. In an ideal world, both of them are open. But in the meantime I'd be content with not having desktop CPU's be controlled and monitored remotely by their manufacturers instead of their owner.
- deleted 4y ago
  [deleted]
daptaq 4y ago
So this is only for the installer, right? The software that is not needed for basic functionality will not be installed permanently, right? Also, if there are two driver implementations, as is often the case for GPUs, which will be preferred?
- dsr_ 4y ago
  It's for firmware for network devices, especially wifi. An annoying number of Debian installs fail on laptops because the wifi needs firmware and people expect it to work. You can choose to enable non-free after install, but the installer doesn't have that as a direct option. Prior to this, an alternative installer was available that had the firmware in it... but it was not well-publicized, and was not the default or even available from the same page as the default. If you install with non-free firmware, it will continue to be installed afterwards.
  - zozbot234 4y ago
    Some graphics and sound hardware also requires firmware these days, and working sound is important for accessibility.
  - deleted 4y ago
    [deleted]
- yakubin 4y ago
  > So this is only for the installer, right? According to the Debian wiki description of this option[1]: "Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file." > The software that is not needed for basic functionality will not be installed permanently, right? I'm not sure I understand you right. Unless the software is needed, the installer won't load it. And I'm not sure what you mean by "basic functionality" here, but the way I read the Debian pages it's about loading everything needed for the hardware to be fully-operational (or as close to it as is possible). [1]: <https://www.debian.org/vote/2022/vote_003#texte https://www.debian.org/vote/2022/vote_003#texte>
alfiedotwtf 4y ago
Why don't they just make `contrib` and `non-free` selectable but default unselected within the installer?
- boomboomsubban 4y ago
  I believe the issue is what the installer itself runs, and Debian already gives the option to install non-free from the installer.
- SettembreNero 4y ago
  Including ≠ selecting by default. Whatever default selection you want to choose, you still need to ship them.
guilhas 4y ago
Open source Developers should be support more open hardware not worried about supporting the latest closed dodgy firmware Isn't this what made Debian popular? Maybe this is good news for new distributions like Nix and Guix And a firmware free wifi usb costs 10$ on ebay or ali express Or maybe this is just a clarification for Debian identity , why support non-free except on the installation? Let's just hope in their SC it is clarified to always ask the user, and only enabled it by manually
- ac29 4y ago
  >And a firmware free wifi usb costs 10$ on ebay or ali express Is there anything newer than 802.11n that can run without firmware? Also, I'm not sure ordering a random USB device off eBay is a good solution for the security paranoid.
  - guilhas 4y ago
    Not sure, but if we just cede at every point there will never be one That is why an open source popular Linux distro like Debian was important, to put pressure on manufacturers Big company need not worry, Debian will now test, maintain and support your closed firmware, making it easy for everyone to use, but working for them for free And especially because recycling is hard for all hardware should be as open and interoperable as possible for us to avoid keep throwing working computer parts in the trash
Nextgrid 4y ago
Finally. The user experience of manually providing non-free firmware on a separate USB stick was horrible, even for a technical user. What Debian really expects are DEB packages placed on the drive, not raw firmware files. Finding which package you need (the installer only tells you the raw firmware files, not the package containing them) and obtaining them is not straightforward - there is a web UI to browse packages and download files but navigating those requires existing domain knowledge of Debian and Linux in general. It is not a straightforward web form "want a package? enter package name and architecture and we'll give you the download link". I now know from memory which firmware packages my systems need and the requirements for the USB stick and how to navigate the web UIs to download packages, but the first time probably wasted an hour of my time searching around before piecing all the various (and sometimes contradictory) resources out there into a coherent solution that worked.
- rascul 4y ago
  The officially unofficial installer with non-free firmware has always been suitable for me when I needed it.
Koshkin 4y ago
Shouldn’t firmware in general be considered part of the “hardware tier”? Free software, including Debian, had no choice but to run on non-free hardware since inception anyway, right?
- 9wzYQbTYsAIc 4y ago
  ”non-free” firmware refers to kernel modules that wrap proprietary device libraries - NVIDIA is/was one major culprit but some common wireless devices also require proprietary libraries to function.
  - admax88qqq 4y ago
    I don't think non-free _firmeare_ has ever referred to kernel modules. All _firmware_ in the Debian repos refers to stuff that does not run in the main CPU but on the CPU embedded in various peripherals. Binary kernel modules such as the Nvidia driver are not generally considered firmware and are not covered by this vote as I understand it.
- toast0 4y ago
  Many people make a distinction when the firmware is stored on the hardware and loaded by the hardware itself vs stored in the filesystem and loaded in cooperation between system software and the hardware. Personally, this distinction doesn't make that much sense, if the firmware is opaque in both instances, eliminating (or vastly reducing) onboard storage seems like a cost reduction step that benefits the manufacturer and the user. [1] A more important distinction to me is if the interface documentation and drivers are open or closed. [1] unless the device class is one that could be a boot time device, except that firmware loading would be required --- it's hard to pxe boot from a network card if it doesn't function without a firmware upload, and that's not good for users who may want to pxe boot at some point
throwaway81523 4y ago
This is almost lolsville. First they wall off the GNU Emacs documention for not conforming with the DFSG, but then they make the installer non-free? Sigh.
- jraph 4y ago
  Emacs runs fine without its documentation, which you can find on the internet. Honestly, if GNU decided on a non-free license for Emacs, joke's on them. Some hardware doesn't run at all without the non-free blobs, making the computer useless or not up to today's expectations. You can argue that these non-free blobs are unfortunately essential. Emacs' documentation is not. I'm not saying anything about the decision at hand, but those things are not comparable. I wish we had a leverage against non-free firmware but Debian not including it in its installers has not worked towards this so far. I hope we can opt out (better still, have to opt in) and see the exact list of non-free crap being installed though.
  - throwaway81523 4y ago
    Debian has long had non-free drivers in its non-free repo, along with the Emacs manual. If the main installer now includes something non-free, that is new and upsetting.
    - jraph 4y ago
      I guess the Emacs manual and the non-free drivers will still remain in the non-free section of the repository. This is not changing. If this these packages were put in main, this would be upsetting indeed. I would consider switching to another distro, actually. I need to know if something I'm installing is free and a package being in main or contrib is a pretty strong guarantee that I rely on. I don't want anything non-free on my computer, and reluctantly tolerate the presence of the "necessary" non-free firmware blobs. It's just that the installer, which also probably remains unchanged, will come with these additional deb packages available on the installation media. But those will still belong to non-free. To be honest, this is the installation media I already download, so I'm not stuck if whatever computer I'm installing requires a non-free blob to function. That this installation media becomes the default? I don't know what to think. I'm torn. I guess most people were downloading this "unofficial" installer, or the official installer and were downloading non-free firmware packages separately. These packages won't be touched by the installer if you don't want to, and I'm pretty sure the installer will warn/ask you. I can see why people could be upset anyway, I'm not. It's a hard decision to make. I think it's fine as long as the user is warned and can choose not to install and run non-free blobs.
ninefathom 4y ago
Like most folks here, I have mixed feelings about this. The dichotomy of "it's about time" versus "how tragic that it came to this" seems to be common, and I can get on board with that. Having said that, I don't think that having firmware blobs in the installer should be Debian's hill to die on, and I'm glad they decided to acquiesce to practical necessity. Between wireless NICs and graphics devices, it's just too blasted difficult these days to install a FOSS operating system without binary blobs - good, bad, or ugly, it is what it is, and I respect their ability to recognize when something simply cannot be changed [at this time]. Keep picking your battles, Debian crew - keep fighting the good fight.
teddyh 4y ago
Reaction: https://github.com/fiendish/The-Debian-Gotham-Needs https://github.com/fiendish/The-Debian-Gotham-Needs
nortonham 4y ago
One of the things about debian that made it unique was the debian social contract, and the dedication to free software. The way this is celebrated in some quarters is troubling. Getting the non-free firmware iso in case your hardware needed it was never difficult.

128 points by simjue 4y ago

_joel 4y ago

Seems sensible, there's still purist debian distros for the purists

jacooper 4y ago

Yay, finally some common sense in the Debian UX.

BirAdam 4y ago

Mixed and competing thoughts and emotions. On the one hand, I love that Debian was the community GNU/Linux that shipped with the ability to be 100% unencumbered super easily. On the other hand, I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful. Then there’s part of me screaming “tradition not trend” and another part of me is screaming back with “finally!” It would be nice if they made it optional within the installer I suppose. Maybe I’m just a crazy person.

zozbot234 4y ago
> On the one hand, I love that Debian was the community GNU/Linux that shipped with the ability to be 100% unencumbered super easily. There will probably be an "unofficial 100% free installer" for those who care about that. The SC change does not forbid that, it just says that what Debian publishes by default should not introduce obvious breakage on systems where providing non-free firmware is required for proper operation.
- nerdponx 4y ago
  Isn't that kind of what Ubuntu is for? Without major players in the community taking a hard line on free software, incentives to support freedom will become even lower than they currently are today.
  - eptcyka 4y ago
    Ubuntu is far more than a Debian fork nowadays - I think of the packages that are installed on most user systems, very little of them share the same source between Ubuntu and Debian.
jorvi 4y ago
> I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful. More open source should think like this. I’ve been aggressively trying to get OpenWRT to ship the images with WiFi on by default. At this point 99.99% of people are not leaving their network unsecured, and if for some reason you have to reset the router it becomes a plastic brick unless you have an Ethernet cable and an USB-to-ethernet adapter nearby. Even suggestions of either creating a landing page that forces the user to set up security before allowing internet connectivity, or basing the WiFi password on the serial number (that is also on the back of any router) falls on deaf ears.
- tiffanyh 4y ago
  > At this point 99.99% of people are not leaving their network unsecured… 99.99% of people are doing what? Sorry, the double negative above is confusing me.
  - CompuHacker 4y ago
    I think they are suggesting that years of abuse hurled at the average user, coupled with legislation, have caused all new home networks to be secure, one way or the other.
    - rascul 4y ago
      There is regulation for that? I would be interested in finding out more.
- naasking 4y ago
  > I’ve been aggressively trying to get OpenWRT to ship the images with WiFi on by default With what password? Plenty of people won't configure things they don't have to and that's a huge security hole. I don't see the utility in this change frankly.
  - detaro 4y ago
    The comment you reply to both explains the utility and proposes ways of mitigating the "huge security hole".
nequo 4y ago
> It would be nice if they made it optional within the installer I suppose. Apparently this option lost by 6 votes: Option 5 "Change SC for non-free firmware in installer, one installer" Option 6 "Change SC for non-free firmware in installer, keep both installers" . . . Option 5 defeats Option 6 by ( 169 - 163) = 6 votes.
- pessimizer 4y ago
  That's too close. I hope they can have another debate and vote about just these two options.
- Denvercoder9 4y ago
  Option 6 was to make a separate image that doesn't contain any non-free firmware available. Option 5, the winning option, also intents to allow the user to choose whether non-free firmware should be used from inside the installer: > The included firmware binaries will normally be enabled by default where the system determines that they are required, but where possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).
- ShinTakuya 4y ago
  Not sure how the vote was conducted, but if it was first past the post then it's a shame. Because I'm sure some of the folks who voted for other options would have preferred option 6.
  - nequo 4y ago
    Debian uses a Condorcet method (specifically the Schulze method?[1]). Here is the source code of their vote engine: https://salsa.debian.org/debian/devotee https://salsa.debian.org/debian/devotee [1] https://en.wikipedia.org/wiki/Schulze_method https://en.wikipedia.org/wiki/Schulze_method
    - ShinTakuya 4y ago
      Oh nice, thanks for sharing! Seems like a very fair method of decision making. Go figure and organisation such as theirs would do so
Karellen 4y ago
> On the other hand, I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful. Not all distros have to be everything for everyone. It's OK to have a niche. If you want a distro that you can "just install" on any old bit of hardware that you have lying around, there are plenty of other distros out there that will do that already. I liked that Debian made you think about Freedom. If you wanted to use the "standard" installer and live up to Debian's Free Software ideals, as enshrined in Social Contract, you had to think about which companies made hardware that had Free drivers available, and make an effort to give your money to those that enabled that use-case. Or, burden of burdens!, you could spend a couple of extra minutes and a handful of clicks to track down the "unofficial" non-Free installer image. Seriously, it wasn't that hard. Yes, I know that the SC says that Debian's priorities are "our users, and Free Software" (but below "will remain 100% free"), but "our users" doesn't necessarily mean "all possible users". For those users that came to Debian primarily for the Freedom, I think this is a misstep. But, I don't determine which priorities and users are the most important to Debian, the membership does. And Debian is still one of the most committed to freedom distros out there, especially for its size. So, while this is not the choice that I would have made, now that it has been, I hope it makes Debian stronger going forwards.
- Nextgrid 4y ago
  However, Debian doesn't really warn prospective users about the real-world ramifications of its commitment to free software. It's one thing if the homepage had a big warning "this is for free software purists and you'll need to do a complex procedure if you want to run non-free firmware - if you're not ready for this, consider an easier distro like Ubuntu", but they don't. Technical people will understand or at least suspect these problems, but a novice user who wants to try Linux (they are non-technical and already don't fully understand the concept of distros - maybe someone once told them "try Debian" and so for them "Linux" is Debian), see a nice "Download" button on the homepage, try it out and then are left disgruntled not just by Debian but Linux in general when the thing doesn't work because their network card requires proprietary firmware, so they go back to Windows, running way more proprietary software than a firmware blob, and as a bonus they now have a negative opinion of "Linux". Having more users use some free software is better than those users giving up just so that some purists' ideological concerns be satisfied.
MiguelX413 4y ago
There already was an ISO with non-free firmware. I think that's the only reasonable way to make such a thing optional.

spit2wind 4y ago

What's "SC"?

yakubin 4y ago
Debian Social Contract: <https://www.debian.org/social_contract https://www.debian.org/social_contract>
hexodine 4y ago
Debian Social Contract. More details about the vote are at https://lists.debian.org/debian-vote/2022/09/msg00196.html https://lists.debian.org/debian-vote/2022/09/msg00196.html

mrweasel 4y ago

I suppose this is meant for Debian developers, who are use to a certain style of communication, but that was a really hard read.

Denvercoder9 4y ago
This is only an unofficial, automated message from the vote bot with the raw results. Once the Project Secretary certifies the results, they'll be published in a more readable way on the website, possibly accompanied by a press release.
yakubin 4y ago
Debian uses a Condorcet method[1] for voting, which may be a bit more complicated than traditional simple majority voting, but makes sure that the winner would also win in every pair-wise election, as opposed to a less desirable candidate winning thanks to a greater number of more desirable candidates splitting the votes between themselves. [1]: <https://en.wikipedia.org/wiki/Condorcet_method https://en.wikipedia.org/wiki/Condorcet_method>
- tialaramex 4y ago
  I would argue that voting is neither necessary nor appropriate for this problem, but if you're going to have voting with people who are pretty technical then the usual objection to sophisticated voting systems for the general electorate doesn't apply. [Confidence in a voting system is vital to the operation of democracy, once upon a time this needed a lot of explaining but I'd guess 2020 was recent enough that most readers know why it's a problem if loads of voters are somehow persuaded the results are bogus. Complicated systems make it harder to build confidence because some voters don't understand how it works and thus why should they have any confidence that it behaves correctly?] Debian specifically uses the Schulze method (a particular Condorcet method which avoids need for a "tie-break" mechanism by always picking a winner). And yes, this involves a lot more maths than First-past-the-post which may be familiar to a lot of readers. Note that "proportional" methods don't make any sense in this type of vote because there is nothing to share out. One of the options wins, all the others lose. Whether proportional systems are appropriate for electing members to a legislature for example, is a separate question.

kilij 4y ago

[flagged]

mindslight 4y ago

Unfortunately "non-free firmware" doesn't really capture the entire issue, akin to how the FSF misses the mark with their baked-into-flash exception. Proprietary binary blob on a device effectively separated by an IOMMU? That's a peripheral, most of them run non-free firmware. Proprietary binary blob on a device that has DMA access? That's a tainted main computer with a security issue. I hope the installer settles out into making these distinctions and informing users of the compromises being made. When I stick a Debian installer into a machine that requires non-free firmware to work, my intent is pretty clear. But that doesn't apply to someone just starting out.

no_time 4y ago
>Proprietary binary blob on a device effectively separated by an IOMMU? That's a peripheral, most of them run non-free firmware. Proprietary binary blob on a device that has DMA access? That's a tainted main computer with a security issue. I feel like that's a completely reasonable viewpoint to have. For example, MS Pluton bothers me 100x more than my car keys having nonfree, locked firmware. In an ideal world, both of them are open. But in the meantime I'd be content with not having desktop CPU's be controlled and monitored remotely by their manufacturers instead of their owner.
deleted 4y ago
[deleted]

daptaq 4y ago

So this is only for the installer, right? The software that is not needed for basic functionality will not be installed permanently, right? Also, if there are two driver implementations, as is often the case for GPUs, which will be preferred?

dsr_ 4y ago
It's for firmware for network devices, especially wifi. An annoying number of Debian installs fail on laptops because the wifi needs firmware and people expect it to work. You can choose to enable non-free after install, but the installer doesn't have that as a direct option. Prior to this, an alternative installer was available that had the firmware in it... but it was not well-publicized, and was not the default or even available from the same page as the default. If you install with non-free firmware, it will continue to be installed afterwards.
- zozbot234 4y ago
  Some graphics and sound hardware also requires firmware these days, and working sound is important for accessibility.
- deleted 4y ago
  [deleted]
yakubin 4y ago
> So this is only for the installer, right? According to the Debian wiki description of this option[1]: "Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file." > The software that is not needed for basic functionality will not be installed permanently, right? I'm not sure I understand you right. Unless the software is needed, the installer won't load it. And I'm not sure what you mean by "basic functionality" here, but the way I read the Debian pages it's about loading everything needed for the hardware to be fully-operational (or as close to it as is possible). [1]: <https://www.debian.org/vote/2022/vote_003#texte https://www.debian.org/vote/2022/vote_003#texte>

alfiedotwtf 4y ago

Why don't they just make `contrib` and `non-free` selectable but default unselected within the installer?

boomboomsubban 4y ago
I believe the issue is what the installer itself runs, and Debian already gives the option to install non-free from the installer.
SettembreNero 4y ago
Including ≠ selecting by default. Whatever default selection you want to choose, you still need to ship them.

guilhas 4y ago

Open source Developers should be support more open hardware not worried about supporting the latest closed dodgy firmware Isn't this what made Debian popular? Maybe this is good news for new distributions like Nix and Guix And a firmware free wifi usb costs 10$ on ebay or ali express Or maybe this is just a clarification for Debian identity , why support non-free except on the installation? Let's just hope in their SC it is clarified to always ask the user, and only enabled it by manually

ac29 4y ago
>And a firmware free wifi usb costs 10$ on ebay or ali express Is there anything newer than 802.11n that can run without firmware? Also, I'm not sure ordering a random USB device off eBay is a good solution for the security paranoid.
- guilhas 4y ago
  Not sure, but if we just cede at every point there will never be one That is why an open source popular Linux distro like Debian was important, to put pressure on manufacturers Big company need not worry, Debian will now test, maintain and support your closed firmware, making it easy for everyone to use, but working for them for free And especially because recycling is hard for all hardware should be as open and interoperable as possible for us to avoid keep throwing working computer parts in the trash

Nextgrid 4y ago

Finally. The user experience of manually providing non-free firmware on a separate USB stick was horrible, even for a technical user. What Debian really expects are DEB packages placed on the drive, not raw firmware files. Finding which package you need (the installer only tells you the raw firmware files, not the package containing them) and obtaining them is not straightforward - there is a web UI to browse packages and download files but navigating those requires existing domain knowledge of Debian and Linux in general. It is not a straightforward web form "want a package? enter package name and architecture and we'll give you the download link". I now know from memory which firmware packages my systems need and the requirements for the USB stick and how to navigate the web UIs to download packages, but the first time probably wasted an hour of my time searching around before piecing all the various (and sometimes contradictory) resources out there into a coherent solution that worked.

rascul 4y ago
The officially unofficial installer with non-free firmware has always been suitable for me when I needed it.

Koshkin 4y ago

Shouldn’t firmware in general be considered part of the “hardware tier”? Free software, including Debian, had no choice but to run on non-free hardware since inception anyway, right?

9wzYQbTYsAIc 4y ago
”non-free” firmware refers to kernel modules that wrap proprietary device libraries - NVIDIA is/was one major culprit but some common wireless devices also require proprietary libraries to function.
- admax88qqq 4y ago
  I don't think non-free _firmeare_ has ever referred to kernel modules. All _firmware_ in the Debian repos refers to stuff that does not run in the main CPU but on the CPU embedded in various peripherals. Binary kernel modules such as the Nvidia driver are not generally considered firmware and are not covered by this vote as I understand it.
toast0 4y ago
Many people make a distinction when the firmware is stored on the hardware and loaded by the hardware itself vs stored in the filesystem and loaded in cooperation between system software and the hardware. Personally, this distinction doesn't make that much sense, if the firmware is opaque in both instances, eliminating (or vastly reducing) onboard storage seems like a cost reduction step that benefits the manufacturer and the user. [1] A more important distinction to me is if the interface documentation and drivers are open or closed. [1] unless the device class is one that could be a boot time device, except that firmware loading would be required --- it's hard to pxe boot from a network card if it doesn't function without a firmware upload, and that's not good for users who may want to pxe boot at some point

throwaway81523 4y ago

This is almost lolsville. First they wall off the GNU Emacs documention for not conforming with the DFSG, but then they make the installer non-free? Sigh.

jraph 4y ago
Emacs runs fine without its documentation, which you can find on the internet. Honestly, if GNU decided on a non-free license for Emacs, joke's on them. Some hardware doesn't run at all without the non-free blobs, making the computer useless or not up to today's expectations. You can argue that these non-free blobs are unfortunately essential. Emacs' documentation is not. I'm not saying anything about the decision at hand, but those things are not comparable. I wish we had a leverage against non-free firmware but Debian not including it in its installers has not worked towards this so far. I hope we can opt out (better still, have to opt in) and see the exact list of non-free crap being installed though.
- throwaway81523 4y ago
  Debian has long had non-free drivers in its non-free repo, along with the Emacs manual. If the main installer now includes something non-free, that is new and upsetting.
  - jraph 4y ago
    I guess the Emacs manual and the non-free drivers will still remain in the non-free section of the repository. This is not changing. If this these packages were put in main, this would be upsetting indeed. I would consider switching to another distro, actually. I need to know if something I'm installing is free and a package being in main or contrib is a pretty strong guarantee that I rely on. I don't want anything non-free on my computer, and reluctantly tolerate the presence of the "necessary" non-free firmware blobs. It's just that the installer, which also probably remains unchanged, will come with these additional deb packages available on the installation media. But those will still belong to non-free. To be honest, this is the installation media I already download, so I'm not stuck if whatever computer I'm installing requires a non-free blob to function. That this installation media becomes the default? I don't know what to think. I'm torn. I guess most people were downloading this "unofficial" installer, or the official installer and were downloading non-free firmware packages separately. These packages won't be touched by the installer if you don't want to, and I'm pretty sure the installer will warn/ask you. I can see why people could be upset anyway, I'm not. It's a hard decision to make. I think it's fine as long as the user is warned and can choose not to install and run non-free blobs.

ninefathom 4y ago

Like most folks here, I have mixed feelings about this. The dichotomy of "it's about time" versus "how tragic that it came to this" seems to be common, and I can get on board with that. Having said that, I don't think that having firmware blobs in the installer should be Debian's hill to die on, and I'm glad they decided to acquiesce to practical necessity. Between wireless NICs and graphics devices, it's just too blasted difficult these days to install a FOSS operating system without binary blobs - good, bad, or ugly, it is what it is, and I respect their ability to recognize when something simply cannot be changed [at this time]. Keep picking your battles, Debian crew - keep fighting the good fight.

teddyh 4y ago

Reaction: https://github.com/fiendish/The-Debian-Gotham-Needs https://github.com/fiendish/The-Debian-Gotham-Needs

nortonham 4y ago

One of the things about debian that made it unique was the debian social contract, and the dedication to free software. The way this is celebrated in some quarters is troubling. Getting the non-free firmware iso in case your hardware needed it was never difficult.