Permission request to redistribute FAH in Arch Linux

Moderators: Site Moderators, FAHC Science Team

Permission request to redistribute FAH in Arch Linux

Postby alucryd » Thu Mar 19, 2020 10:54 pm

Hi guys,

I would like to request permission to redistribute your linux binaries (from the debian package) as a native Arch Linux package in our official repositories to make the client accessible to a broader audience in these trying times. Such permission was granted to Gentoo about 8 years ago (the forum won't let me link the post, apologies), I hope we can come to a similar agreement. You may already know that the Arch Linux team (45032) is very active, and I believe this would make it grow even more.

Our security team would also like to contact you about the use of rpath, is there someone we can reach about this via email?

Thank you very much in advance.
Last edited by alucryd on Thu Mar 19, 2020 11:18 pm, edited 1 time in total.
alucryd
 
Posts: 5
Joined: Thu Mar 19, 2020 10:17 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby Asgaroth » Thu Mar 19, 2020 11:17 pm

I think it is already in AUR here
There are two major products that came out of Berkeley: LSD and UNIX. We don't believe this to be a coincidence.
-- Jeremy S. Anderson
User avatar
Asgaroth
 
Posts: 29
Joined: Sun Dec 09, 2018 1:06 am

Re: Permission request to redistribute FAH in Arch Linux

Postby alucryd » Thu Mar 19, 2020 11:20 pm

There are several packages in AUR indeed, but the AUR is for user packages, not official ones, hence doesn't have the same exposure. Note that these AUR packages are not binary redistributions of FAH binaries, merely script that do the heavy lifting of downloading and installing the official FAH debian package on Arch Linux.
alucryd
 
Posts: 5
Joined: Thu Mar 19, 2020 10:17 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby alucryd » Fri Mar 27, 2020 6:59 pm

Since this isn't getting much attention, could someone point me to an email address I could write to about this matter?
alucryd
 
Posts: 5
Joined: Thu Mar 19, 2020 10:17 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby rafwiewiora » Fri Mar 27, 2020 7:42 pm

Hey! Seen it now, I'm going to raise it on the F@h call in 20 minutes.
rafwiewiora
Scientist
 
Posts: 164
Joined: Mon Aug 03, 2015 9:23 pm
Location: New York

Re: Permission request to redistribute FAH in Arch Linux

Postby alucryd » Tue Mar 31, 2020 8:59 am

Great, thank you! Looking forward to hearing from you.
alucryd
 
Posts: 5
Joined: Thu Mar 19, 2020 10:17 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby alucryd » Wed Apr 15, 2020 11:46 am

@rafwiewiora Do you have any news regarding this?
alucryd
 
Posts: 5
Joined: Thu Mar 19, 2020 10:17 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby bruce » Sun Jul 05, 2020 5:17 am

alucryd wrote:Note that these AUR packages are not binary redistributions of FAH binaries, merely script that do the heavy lifting of downloading and installing the official FAH debian package on Arch Linux.


A script that installs from the official source satisfies the licensing requirement. A redistribution from another source potentially introduces new sources of malware that would need to be certified. Why do you believe it is important to redistribute binaries from a new server?

I'll PM you an email if you still need to talk to somebody official about it.
bruce
 
Posts: 19656
Joined: Thu Nov 29, 2007 11:13 pm
Location: So. Cal.

Re: Permission request to redistribute FAH in Arch Linux

Postby JohnChodera » Sun Jul 05, 2020 6:43 am

Goodness, I hadn't realized we didn't already attach an explicit license granting permission to distribute broadly. We'll get this fixed ASAP.

Thanks for bringing this to our attention!

~ John Chodera // MSKCC
User avatar
JohnChodera
Pande Group Member
 
Posts: 309
Joined: Fri Feb 22, 2013 10:59 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby JohnChodera » Sun Jul 05, 2020 10:14 pm

Still working on this---thanks for your patience!

~ John Chodera // MSKCC
User avatar
JohnChodera
Pande Group Member
 
Posts: 309
Joined: Fri Feb 22, 2013 10:59 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby foldy » Sun Jul 05, 2020 11:26 pm

If distribution of FAH from mirror servers gets enabled then FAH server also needs to provide binary checksums sha265/sha1/md5 to verify file integrity from mirror servers.
foldy
 
Posts: 1936
Joined: Sat Dec 01, 2012 4:43 pm

Re: Permission request to redistribute FAH in Arch Linux

Postby bikeaddict » Mon Jul 06, 2020 1:23 am

foldy wrote:If distribution of FAH from mirror servers gets enabled then FAH server also needs to provide binary checksums sha265/sha1/md5 to verify file integrity from mirror servers.

They should provide PGP signatures of the binaries like the Linux kernel or PGP signatures of the checksum files like Firefox. Anyone could post fake checksum files of modified binaries. Signatures can be verified with GPG after importing their key from a keyserver.

https://www.kernel.org/signature.html
bikeaddict
 
Posts: 28
Joined: Sun May 03, 2020 2:20 am

Re: Permission request to redistribute FAH in Arch Linux

Postby HaloJones » Mon Jul 06, 2020 1:49 pm

I don't really see what problem this solves. The binaries are easily available from the official provider and are small. Why do they need to be included in an OS download?
1x Titan X, 5x 1070, 1x 970, 1 x Ryzen 3600

Image
HaloJones
 
Posts: 813
Joined: Thu Jul 24, 2008 11:16 am

Re: Permission request to redistribute FAH in Arch Linux

Postby bruce » Mon Jul 06, 2020 7:33 pm

They most definitely should NOT be included in an OS download. In the past, unofficial versions have been used to borg clients with a per-configured version sending credits to a pre-defined team or a pre-defined individual. We don't need folks trying to steal credits that belong elsewhere.

Having mirror servers might solve a congestion problem at the official site if we had one, but I've never seen a report of anybody having trouble getting the official copies from the official site.
bruce
 
Posts: 19656
Joined: Thu Nov 29, 2007 11:13 pm
Location: So. Cal.


Return to Discussions of General-FAH topics

Who is online

Users browsing this forum: No registered users and 3 guests

cron