Re: [GNU-linux-libre] review PureOS ISO

[Julie Marchant]

>> *  Your distro should not have users select official Debian GNU/Linux
>> repos. These repos have contrib and nonfree areas and many Debian
>> packages make it trivial easy to select the contrib and nonfree areas.
>> Users don't need to be prevented from manually adding repos, but your
>> distro shouldn't steer users toward Debian GNU/Linux repos, since Debian
>> GNU/Linux itself does not meet the GFDG.
> 
> We don't, our repos are:
> 
> deb http://repo.pureos.net/pureos_meta stretch main
> deb http://repo.pureos.net/pureosrepo pureos main
> deb http://repo.pureos.net/puresecurity stretch/updates main
> 
> And we only have main in sync so adding contrib and non-free is not
> possible.

This is what /etc/apt/sources.list contains in the PureOS I installed
from the ISO listed on Purism's page on PureOS:

deb http://security.debian.org/ stretch/updates main
deb-src http://security.debian.org/ stretch/updates main

There are no additional sources found in sources.list or sources.list.d.
The only other sources to be found are commented out, and they refer to
the Debian Stretch live CD.

> Yes, people can go to https://github.com/purism/ and fill bugs.

I don't see any mention of this on the website. It is also unclear which
repository is appropriate for such bug reports.

Other problems I have found:

The website does not include any policy I can find on what software can
be included in PureOS's repository.

If you type "man sources.list", you will find an example of a deb line
which includes Debian's contrib and non-free repositories.

Tor Browser is included. Tor Browser is libre, but it features an update
facility which is not controlled by the developers of PureOS (they are
delivered by the developers of Tor).

-- 
Julie Marchant
https://onpon4.github.io

Protect your emails with GnuPG:
https://emailselfdefense.fsf.org

signature.asc
Description: OpenPGP digital signature