summaryrefslogtreecommitdiff
path: root/README.txt
blob: f2745d6a7dc429a135a28aa1dda4e13daa09c866 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
+--------------+
| Introduction |
+--------------+
This repository is an attempt to produce various FSDG compliant docker
images and see if it could integrate well into existing use
cases/workflows:

- Since PureOS and Trisquel are respectively based on Debian stable
  and LTS versions of Ubuntu, and that Debian and Ubuntu are commonly
  used in Dockerfiles, it might be possible to use existing
  Dockerfiles with PureOS and Trisquel images instead.

- Docker is available in most GNU/Linux distributions, and also works
  on most FSDG compliant distributions[1].

[1]https://libreplanet.org/wiki/Group:Software/research/DistroExecutionEnvironments

The docker images are produced as Parabola packages to give somewhat
equivalent guarantees than with Parabola packages.

This means that once we have packages, they will be signed, mirrored,
and that you will be able use them offline with your own mirror,
etc. Though there will be some differences mentioned in the "Policies"
section below.

+--------+
| Status |
+--------+
Right now Parabola doesn't ship any of these packages, but if you have
configured sudo to run without password, you can run makepkg and get
packages of a docker images that are usable with docker import.

One of the big limitation is that this image is not yet
redistributalbe as-is as we still need to find a way to get the source
code corresponding to the images.

+----------+
| Policies |
+----------+
To make these packages, we had to bend some rules that are in place in
Parabola. So this repository should be considered unofficial because
of that.

Parabola also hosts other unofficial repositories like contributor
repositories and also hosts repositories with extra requirements (like
the nonprism repository).

Here are some of the rules that had to be bent or broken:
- The packages are not built from source in a PKGBUILD. Instead it's
  up to the upstream distributions to choose to build packages from
  source or not. In any case FSDG compliant distributions are expected
  to be able to provide the source code corresponding to the package
  binary, else the packages wound't be free software. Though most FSDG
  compliant distributions either build software from source or reuse
  packages built from source because it makes license compliance
  easier.

- Parabola is more strict than other FSDG distriubtion as it has free
  culture requirements and generally always require free software
  licenses. So license like CC-BY-ND are generally not allowed in
  Parabola for non-functional game data for instance. Though there
  seems to be an exception for the license of the licenses.

  So in practice users installing packages from other FSDG compliant
  distributions might end up with games that have artwork under
  CC-BY-ND licenses.

- The PKGBUILDs require network access as they use utilities like
  debootstrap to download a given distribution. Though the image are
  reproducible and we do check the checksums of the resulting image to
  make sure they cannot be arbitrary modified by the network or the
  mirrors being used.

- In debian based distributions like Trisquel and Pureos,
  debuerreotype is being used to produce reproducible images. The
  issue is that debuerreotype requires root, and no one managed yet to
  make it work with fakeroot or similar utilities or to fix
  debuerreotype. So we used sudo in the PKGBUILDs. As sudo without
  password is usually used with libremakepkg, this shound't be a big
  issue.

- The licensing information is not precise, as an image like that is
  constituted by a lot of different licenses, but the images are FSDG
  compliant.