Debian votes for non-free firmware in the installer

https://lists.debian.org/debian-vote/2022/10/msg00000.html

by simjue • 4 years ago

128 72 4 years ago

lists.debian.org

jacooper• 4 years ago

Yay, finally some common sense in the Debian UX.

_joel• 4 years ago

Seems sensible, there's still purist debian distros for the purists

BirAdam• 4 years ago

Mixed and competing thoughts and emotions. On the one hand, I love that Debian was the community GNU/Linux that shipped with the ability to be 100% unencumbered super easily. On the other hand, I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful. Then there’s part of me screaming “tradition not trend” and another part of me is screaming back with “finally!” It would be nice if they made it optional within the installer I suppose. Maybe I’m just a crazy person.

zozbot2342• 4 years ago

On the one hand, I love that Debian was the community GNU/Linux that shipped with the ability to be 100% unencumbered super easily.

There will probably be an "unofficial 100% free installer" for those who care about that. The SC change does not forbid that, it just says that what Debian publishes by default should not introduce obvious breakage on systems where providing non-free firmware is required for proper operation.

nerdponx• 4 years ago

Isn't that kind of what Ubuntu is for? Without major players in the community taking a hard line on free software, incentives to support freedom will become even lower than they currently are today.

jorvi5• 4 years ago

I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful.

More open source should think like this.

I’ve been aggressively trying to get OpenWRT to ship the images with WiFi on by default. At this point 99.99% of people are not leaving their network unsecured, and if for some reason you have to reset the router it becomes a plastic brick unless you have an Ethernet cable and an USB-to-ethernet adapter nearby.

Even suggestions of either creating a landing page that forces the user to set up security before allowing internet connectivity, or basing the WiFi password on the serial number (that is also on the back of any router) falls on deaf ears.

tiffanyh• 4 years ago

At this point 99.99% of people are not leaving their network unsecured…

99.99% of people are doing what? Sorry, the double negative above is confusing me.

naasking6• 4 years ago

I’ve been aggressively trying to get OpenWRT to ship the images with WiFi on by default

With what password? Plenty of people won't configure things they don't have to and that's a huge security hole. I don't see the utility in this change frankly.

Karellen2• 4 years ago

On the other hand, I feel like a system should be usable immediately with little effort if it is to be enjoyed and properly useful.

Not all distros have to be everything for everyone. It's OK to have a niche. If you want a distro that you can "just install" on any old bit of hardware that you have lying around, there are plenty of other distros out there that will do that already.

I liked that Debian made you think about Freedom. If you wanted to use the "standard" installer and live up to Debian's Free Software ideals, as enshrined in Social Contract, you had to think about which companies made hardware that had Free drivers available, and make an effort to give your money to those that enabled that use-case. Or, burden of burdens!, you could spend a couple of extra minutes and a handful of clicks to track down the "unofficial" non-Free installer image.

Seriously, it wasn't that hard.

Yes, I know that the SC says that Debian's priorities are "our users, and Free Software" (but below "will remain 100% free"), but "our users" doesn't necessarily mean "all possible users". For those users that came to Debian primarily for the Freedom, I think this is a misstep.

But, I don't determine which priorities and users are the most important to Debian, the membership does. And Debian is still one of the most committed to freedom distros out there, especially for its size. So, while this is not the choice that I would have made, now that it has been, I hope it makes Debian stronger going forwards.

Nextgrid2• 4 years ago

However, Debian doesn't really warn prospective users about the real-world ramifications of its commitment to free software. It's one thing if the homepage had a big warning "this is for free software purists and you'll need to do a complex procedure if you want to run non-free firmware - if you're not ready for this, consider an easier distro like Ubuntu", but they don't.

Technical people will understand or at least suspect these problems, but a novice user who wants to try Linux (they are non-technical and already don't fully understand the concept of distros - maybe someone once told them "try Debian" and so for them "Linux" is Debian), see a nice "Download" button on the homepage, try it out and then are left disgruntled not just by Debian but Linux in general when the thing doesn't work because their network card requires proprietary firmware, so they go back to Windows, running way more proprietary software than a firmware blob, and as a bonus they now have a negative opinion of "Linux".

Having more users use some free software is better than those users giving up just so that some purists' ideological concerns be satisfied.

eptcyka2• 4 years ago

Or, burden of burdens!, you could spend a couple of extra minutes and a handful of clicks to track down the "unofficial" non-Free installer image.

I only got to know about the unofficial installer on here, years after it could've been useful. At the time, I didn't have an extra machine to fetch the necessary binaries I needed to get networking working on my laptop. This was when I dropped Debian.

I'd be perfectly fine with an installer that lets me have the choice, as long as it doesn't require me to reboot into a different OS to actually fetch the stuff I need. Just think of the man-hours wasted globally.

nequo2• 4 years ago

It would be nice if they made it optional within the installer I suppose.

Apparently this option lost by 6 votes:

    Option 5 "Change SC for non-free firmware in installer, one installer"
    Option 6 "Change SC for non-free firmware in installer, keep both installers"
    .
    .
    .
    Option 5 defeats Option 6 by ( 169 -  163) =    6 votes.

pessimizer• 4 years ago

That's too close. I hope they can have another debate and vote about just these two options.

Denvercoder92• 4 years ago

Option 6 was to make a separate image that doesn't contain any non-free firmware available. Option 5, the winning option, also intents to allow the user to choose whether non-free firmware should be used from inside the installer:

The included firmware binaries will normally be enabled by default where the system determines that they are required, but where possible we will include ways for users to disable this at boot (boot menu option, kernel command line etc.).

ShinTakuya2• 4 years ago

Not sure how the vote was conducted, but if it was first past the post then it's a shame. Because I'm sure some of the folks who voted for other options would have preferred option 6.

MiguelX413• 4 years ago

There already was an ISO with non-free firmware. I think that's the only reasonable way to make such a thing optional.

spit2wind• 4 years ago

What's "SC"?

yakubin5• 4 years ago

Debian Social Contract: <https://www.debian.org/social_contract>

hexodine• 4 years ago

Debian Social Contract. More details about the vote are at https://lists.debian.org/debian-vote/2022/09/msg00196.html

mrweasel• 4 years ago

I suppose this is meant for Debian developers, who are use to a certain style of communication, but that was a really hard read.

Denvercoder92• 4 years ago

This is only an unofficial, automated message from the vote bot with the raw results. Once the Project Secretary certifies the results, they'll be published in a more readable way on the website, possibly accompanied by a press release.

yakubin5• 4 years ago

Debian uses a Condorcet method[1] for voting, which may be a bit more complicated than traditional simple majority voting, but makes sure that the winner would also win in every pair-wise election, as opposed to a less desirable candidate winning thanks to a greater number of more desirable candidates splitting the votes between themselves.

[1]: <https://en.wikipedia.org/wiki/Condorcet_method>

tialaramex2• 4 years ago

I would argue that voting is neither necessary nor appropriate for this problem, but if you're going to have voting with people who are pretty technical then the usual objection to sophisticated voting systems for the general electorate doesn't apply.

[Confidence in a voting system is vital to the operation of democracy, once upon a time this needed a lot of explaining but I'd guess 2020 was recent enough that most readers know why it's a problem if loads of voters are somehow persuaded the results are bogus. Complicated systems make it harder to build confidence because some voters don't understand how it works and thus why should they have any confidence that it behaves correctly?]

Debian specifically uses the Schulze method (a particular Condorcet method which avoids need for a "tie-break" mechanism by always picking a winner). And yes, this involves a lot more maths than First-past-the-post which may be familiar to a lot of readers.

Note that "proportional" methods don't make any sense in this type of vote because there is nothing to share out. One of the options wins, all the others lose. Whether proportional systems are appropriate for electing members to a legislature for example, is a separate question.

mindslight• 4 years ago

Unfortunately "non-free firmware" doesn't really capture the entire issue, akin to how the FSF misses the mark with their baked-into-flash exception. Proprietary binary blob on a device effectively separated by an IOMMU? That's a peripheral, most of them run non-free firmware. Proprietary binary blob on a device that has DMA access? That's a tainted main computer with a security issue.

I hope the installer settles out into making these distinctions and informing users of the compromises being made. When I stick a Debian installer into a machine that requires non-free firmware to work, my intent is pretty clear. But that doesn't apply to someone just starting out.

no_time• 4 years ago

Proprietary binary blob on a device effectively separated by an IOMMU? That's a peripheral, most of them run non-free firmware. Proprietary binary blob on a device that has DMA access? That's a tainted main computer with a security issue.

I feel like that's a completely reasonable viewpoint to have. For example, MS Pluton bothers me 100x more than my car keys having nonfree, locked firmware. In an ideal world, both of them are open. But in the meantime I'd be content with not having desktop CPU's be controlled and monitored remotely by their manufacturers instead of their owner.

daptaq• 4 years ago

So this is only for the installer, right? The software that is not needed for basic functionality will not be installed permanently, right?

Also, if there are two driver implementations, as is often the case for GPUs, which will be preferred?

dsr_• 4 years ago

It's for firmware for network devices, especially wifi.

An annoying number of Debian installs fail on laptops because the wifi needs firmware and people expect it to work. You can choose to enable non-free after install, but the installer doesn't have that as a direct option.

Prior to this, an alternative installer was available that had the firmware in it... but it was not well-publicized, and was not the default or even available from the same page as the default.

If you install with non-free firmware, it will continue to be installed afterwards.

zozbot2342• 4 years ago

Some graphics and sound hardware also requires firmware these days, and working sound is important for accessibility.

yakubin5• 4 years ago

So this is only for the installer, right?

According to the Debian wiki description of this option[1]: "Where non-free firmware is found to be necessary, the target system will also be configured to use the non-free-firmware component by default in the apt sources.list file."

The software that is not needed for basic functionality will not be installed permanently, right?

I'm not sure I understand you right. Unless the software is needed, the installer won't load it. And I'm not sure what you mean by "basic functionality" here, but the way I read the Debian pages it's about loading everything needed for the hardware to be fully-operational (or as close to it as is possible).

[1]: <https://www.debian.org/vote/2022/vote_003#texte>

alfiedotwtf• 4 years ago

Why don't they just make `contrib` and `non-free` selectable but default unselected within the installer?

boomboomsubban• 4 years ago

I believe the issue is what the installer itself runs, and Debian already gives the option to install non-free from the installer.

SettembreNero• 4 years ago

Including ≠ selecting by default. Whatever default selection you want to choose, you still need to ship them.

guilhas2• 4 years ago

Open source Developers should be support more open hardware not worried about supporting the latest closed dodgy firmware

Isn't this what made Debian popular? Maybe this is good news for new distributions like Nix and Guix

And a firmware free wifi usb costs 10$ on ebay or ali express

Or maybe this is just a clarification for Debian identity , why support non-free except on the installation? Let's just hope in their SC it is clarified to always ask the user, and only enabled it by manually

ac29• 4 years ago

And a firmware free wifi usb costs 10$ on ebay or ali express

Is there anything newer than 802.11n that can run without firmware?

Also, I'm not sure ordering a random USB device off eBay is a good solution for the security paranoid.

guilhas2• 4 years ago

Not sure, but if we just cede at every point there will never be one

That is why an open source popular Linux distro like Debian was important, to put pressure on manufacturers

Big company need not worry, Debian will now test, maintain and support your closed firmware, making it easy for everyone to use, but working for them for free

And especially because recycling is hard for all hardware should be as open and interoperable as possible for us to avoid keep throwing working computer parts in the trash

Nextgrid2• 4 years ago

Finally. The user experience of manually providing non-free firmware on a separate USB stick was horrible, even for a technical user.

What Debian really expects are DEB packages placed on the drive, not raw firmware files. Finding which package you need (the installer only tells you the raw firmware files, not the package containing them) and obtaining them is not straightforward - there is a web UI to browse packages and download files but navigating those requires existing domain knowledge of Debian and Linux in general. It is not a straightforward web form "want a package? enter package name and architecture and we'll give you the download link".

I now know from memory which firmware packages my systems need and the requirements for the USB stick and how to navigate the web UIs to download packages, but the first time probably wasted an hour of my time searching around before piecing all the various (and sometimes contradictory) resources out there into a coherent solution that worked.

rascul2• 4 years ago

The officially unofficial installer with non-free firmware has always been suitable for me when I needed it.

Koshkin• 4 years ago

Shouldn’t firmware in general be considered part of the “hardware tier”? Free software, including Debian, had no choice but to run on non-free hardware since inception anyway, right?

9wzYQbTYsAIc• 4 years ago

”non-free” firmware refers to kernel modules that wrap proprietary device libraries - NVIDIA is/was one major culprit but some common wireless devices also require proprietary libraries to function.

admax88qqq• 4 years ago

I don't think non-free _firmeare_ has ever referred to kernel modules.

All _firmware_ in the Debian repos refers to stuff that does not run in the main CPU but on the CPU embedded in various peripherals.

Binary kernel modules such as the Nvidia driver are not generally considered firmware and are not covered by this vote as I understand it.

toast0• 4 years ago

Many people make a distinction when the firmware is stored on the hardware and loaded by the hardware itself vs stored in the filesystem and loaded in cooperation between system software and the hardware.

Personally, this distinction doesn't make that much sense, if the firmware is opaque in both instances, eliminating (or vastly reducing) onboard storage seems like a cost reduction step that benefits the manufacturer and the user. [1] A more important distinction to me is if the interface documentation and drivers are open or closed.

[1] unless the device class is one that could be a boot time device, except that firmware loading would be required --- it's hard to pxe boot from a network card if it doesn't function without a firmware upload, and that's not good for users who may want to pxe boot at some point

throwaway815232• 4 years ago

This is almost lolsville. First they wall off the GNU Emacs documention for not conforming with the DFSG, but then they make the installer non-free? Sigh.

jraph3• 4 years ago

Emacs runs fine without its documentation, which you can find on the internet. Honestly, if GNU decided on a non-free license for Emacs, joke's on them.

Some hardware doesn't run at all without the non-free blobs, making the computer useless or not up to today's expectations. You can argue that these non-free blobs are unfortunately essential. Emacs' documentation is not.

I'm not saying anything about the decision at hand, but those things are not comparable.

I wish we had a leverage against non-free firmware but Debian not including it in its installers has not worked towards this so far. I hope we can opt out (better still, have to opt in) and see the exact list of non-free crap being installed though.

throwaway815232• 4 years ago

Debian has long had non-free drivers in its non-free repo, along with the Emacs manual. If the main installer now includes something non-free, that is new and upsetting.

ninefathom• 4 years ago

Like most folks here, I have mixed feelings about this. The dichotomy of "it's about time" versus "how tragic that it came to this" seems to be common, and I can get on board with that.

Having said that, I don't think that having firmware blobs in the installer should be Debian's hill to die on, and I'm glad they decided to acquiesce to practical necessity. Between wireless NICs and graphics devices, it's just too blasted difficult these days to install a FOSS operating system without binary blobs - good, bad, or ugly, it is what it is, and I respect their ability to recognize when something simply cannot be changed [at this time].

Keep picking your battles, Debian crew - keep fighting the good fight.

teddyh• 4 years ago

Reaction: https://github.com/fiendish/The-Debian-Gotham-Needs

nortonham• 4 years ago

One of the things about debian that made it unique was the debian social contract, and the dedication to free software. The way this is celebrated in some quarters is troubling.

Getting the non-free firmware iso in case your hardware needed it was never difficult.

Debian votes for non-free firmware in the installer

Related Stories