• IBM/Hashicorp Vagrant - non-free and no maintainer?

    From Andrew M.A. Cater@21:1/5 to All on Mon Jun 9 08:40:01 2025
    Hi Release Team,

    Hashicorp changed the licence on Vagrant a while ago to the Business
    Software Licence (non-free). Hashicorp was then bought by IBM, which
    deal was finally approved recently (April 2025).

    Debian bug 1049999 refers: it looks as if there is now no active
    maintainer and so we probably can't keep this in for the lifecycle of
    Trixie. Thanks go to Antonio Terceiro and Lucas Nussbaum for all
    their good work in the past on this.

    Should this be a candidate for removal from Trixie at this stage?
    Not a user of Vagrant but following licence changes on software in
    general - this situation seems problematic to me.

    All the very best, as ever,

    Andy Cater
    ([email protected])

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Gevers@21:1/5 to All on Mon Jun 9 09:30:01 2025
    To: [email protected] (Andrew M.A. Cater)

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------W2to0w4KrumGuNJ0D6ySqfZe
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGkgQW5kcmV3LA0KDQpPbiAwOS0wNi0yMDI1IDA4OjEyLCBBbmRyZXcgTS5BLiBDYXRlciB3 cm90ZToNCj4gRGViaWFuIGJ1ZyAxMDQ5OTk5IHJlZmVyczogaXQgbG9va3MgYXMgaWYgdGhl cmUgaXMgbm93IG5vIGFjdGl2ZQ0KPiBtYWludGFpbmVyIGFuZCBzbyB3ZSBwcm9iYWJseSBj YW4ndCBrZWVwIHRoaXMgaW4gZm9yIHRoZSBsaWZlY3ljbGUgb2YNCj4gVHJpeGllLg0KDQoN ClRoYXQgYnVnIGlzIHJhdGhlciBsb25nLCBkbyB5b3UgaGF2ZSBhIHN1bW1hcnk/IFdoeSB3 b3VsZG4ndCB3ZSBhYmxlIHRvIA0Ka2VlcCBpdD8gSWYgdGhhdCdzIHRydWUgaXQgc2hvdWxk IGdvIG5vdywgaW5zdGVhZCBvZiB0aGVuLiBCdXQgb24gdGhlIA0Kb3RoZXIgaGFuZCB3ZSBo YXZlIGEgd2hvbGUgbG90IG9mIHBhY2thZ2VzIHRoYXQgaGF2ZSBubyBhY3RpdmUgDQptYWlu dGFpbmVyIGFuZCB0aGF0IGFyZSBiZWhpbmQgdXBzdHJlYW0sIHNvIHlvdSBuZWVkIGEgc3Ry b25nZXIgYXJndW1lbnQgDQp0aGFuIHRoYXQuDQoNClBhdWwNCg0K

    --------------W2to0w4KrumGuNJ0D6ySqfZe--

    -----BEGIN PGP SIGNATURE-----

    wsC7BAABCABvBYJoRoz1CRCcXJnrBb11CkcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcNCotAUU8ycLYDAvaVEqwkEH6vAM85qd2XJaEJYj2x xBYhBFi2bUhza+k7BS3mcpxcmesFvXUKAACTAAf7ByBYor75lF9gT2+HI3ra6Ma1 YI1fK/cjCJQJ9RaW+60N2zxjbWQoBLv5P1RwZRbUId6J3fjkW9TjsdsgwWnAWGRB 6HoYuSTA4W1M1D44VI8u5KHF8vWPhmbyFnVIXA0cplV+EWpHBwxsAjzPjEdqY8oK 8q3NaUQdt3eyhqjIoTbe6J9mB2tcvILbe9NRHNIvwteZXpC4Y9IkmqudNC6knsoJ PIu936M6rSO04zt52eholbIBd+4S3dkB4u4qoL2Sn56WnaKCB5bPhaOSkSNum9Kn p8DifhWczztuGLyxSelbeTsd0CIPI4XUg2vcwk7TD2c2AOCfY2C9OdisJSOQZw==
    =/3A4
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew M.A. Cater@21:1/5 to Paul Gevers on Mon Jun 9 20:40:01 2025
    [Replying personally as well as on list to match your message sent to me]

    On Mon, Jun 09, 2025 at 09:27:49AM +0200, Paul Gevers wrote:
    Hi Andrew,

    On 09-06-2025 08:12, Andrew M.A. Cater wrote:
    Debian bug 1049999 refers: it looks as if there is now no active
    maintainer and so we probably can't keep this in for the lifecycle of Trixie.


    That bug is rather long, do you have a summary? Why wouldn't we able to keep it? If that's true it should go now, instead of then. But on the other hand we have a whole lot of packages that have no active maintainer and that are behind upstream, so you need a stronger argument than that.

    Paul


    Hashicorp chose a non-free licence in late 2023. At that point, one of the
    two Debian maintainers had already more or less given up maintaining Vagrant having been burned previously by maintaining Chef which also changed licence.

    There then followed a period of waiting to see what happened. Lucas is unwilling to maintain this in non-free and has dropped the maintainership.

    In the interim, Hashicorp has lost one of its founders and been bought for $6.4bn by IBM. We can maintain a *very old* free licensed copy maybe
    but Lucas has already moved on, as has most of the rest of the world.

    if anyone *really* want Vagrant to remain in Trixie - where we already do slightly differently from upstream in that they seem to prefer Virtualbox virtualisation - someone has to commit to another five years of support
    of an old codebase with a near zero possibility of cooperation from upstream.

    There are a few scripting packages that depend on Vagrant but if there's
    no Ruby expert that wants to maintain this for the foreseeable future,
    best it goes now, maybe.

    Appreciating that this is late in the cycle, it's a lot easier to remove potentially problematic packages than to find someone to commit to maintain them.

    All the very best, as ever,

    Andy
    ([email protected])
    Lucae

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Gevers@21:1/5 to All on Mon Jun 9 20:40:01 2025
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------B0qBlYsiMiTYA0lzu1WKCSx6
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGkgQW5kcmV3LA0KDQpPbiAwOS0wNi0yMDI1IDIwOjE3LCBBbmRyZXcgTS5BLiBDYXRlciB3 cm90ZToNCj4gaWYgYW55b25lICpyZWFsbHkqIHdhbnQgVmFncmFudCB0byByZW1haW4gaW4g VHJpeGllIC0gd2hlcmUgd2UgYWxyZWFkeSBkbw0KPiBzbGlnaHRseSBkaWZmZXJlbnRseSBm cm9tIHVwc3RyZWFtIGluIHRoYXQgdGhleSBzZWVtIHRvIHByZWZlciBWaXJ0dWFsYm94DQo+ IHZpcnR1YWxpc2F0aW9uIC0gc29tZW9uZSBoYXMgdG8gY29tbWl0IHRvIGFub3RoZXIgZml2 ZSB5ZWFycyBvZiBzdXBwb3J0DQo+IG9mIGFuIG9sZCBjb2RlYmFzZSB3aXRoIGEgbmVhciB6 ZXJvIHBvc3NpYmlsaXR5IG9mIGNvb3BlcmF0aW9uIGZyb20gdXBzdHJlYW0uDQoNCg0KV2hp bGUgSSBhcHByZWNpYXRlIGV2ZXJ5IHBhY2thZ2UgdGhhdCBoYXMgYSBtYWludGFpbmVyLCB3 ZSBzaGlwIGEgbG90IG9mIA0KcGFja2FnZXMgd2l0aG91dCByZWFsIGNvbW1pdG1lbnQgZnJv bSAkc29tZW9uZS4gU28gd2h5IGlzIHZhZ3JhbnQgDQpzcGVjaWFsIHRoYXQgeW91J3JlIGFz a2luZyB0aGlzIG5vdz8gV2h5IGNhbid0IHdlIHNoaXAgdmFncmFudCBhcyBhbGwgDQp0aG9z ZSBvdGhlciBwYWNrYWdlcz8NCg0KUGF1bA0K

    --------------B0qBlYsiMiTYA0lzu1WKCSx6--

    -----BEGIN PGP SIGNATURE-----

    wsC7BAABCABvBYJoRymYCRCcXJnrBb11CkcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmf27EsvmzCl9yfgGBr4F68VO1cjKUxhDrF0UbbLtW97 ThYhBFi2bUhza+k7BS3mcpxcmesFvXUKAAAjeQf/RS8vD8y/XrTxHm3xwDMLjWxx qHENfAnpLMrZ7GLsvzuDRnu6qI/mSiXvahKTgSFDh1FwP4mxqIMqksVrBk/FIfG2 Mc85Ed8AG2eGuHRtKPYNSkc3nlU7aGdoIB9+ULm3IWJnVQaYrHGs0ErY3SBGqZS3 2pnXMEI9983NMGp1MFEUo5rLJMSat0IHujIOfBfoTNSLZs+4o+MxjKIa67zzqa/8 djil7BZyWlGIuYt6Agcnk8ifEUmaevWsfZWOU3G9dyV6UPTHrjh14Y3rEjGs8+t3 IpmrJkUlzn1v/AuMXNTO0wsziVqXN6cIN7MyfQn3jyVYNOkXh8Hl1GakajbP4w==
    =mIBo
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Andrew M.A. Cater on Mon Jun 9 22:40:01 2025
    On 09/06/25 at 18:17 +0000, Andrew M.A. Cater wrote:
    [Replying personally as well as on list to match your message sent to me]

    On Mon, Jun 09, 2025 at 09:27:49AM +0200, Paul Gevers wrote:
    Hi Andrew,

    On 09-06-2025 08:12, Andrew M.A. Cater wrote:
    Debian bug 1049999 refers: it looks as if there is now no active maintainer and so we probably can't keep this in for the lifecycle of Trixie.


    That bug is rather long, do you have a summary? Why wouldn't we able to keep
    it? If that's true it should go now, instead of then. But on the other hand we have a whole lot of packages that have no active maintainer and that are behind upstream, so you need a stronger argument than that.

    Paul


    Hashicorp chose a non-free licence in late 2023. At that point, one of the two Debian maintainers had already more or less given up maintaining Vagrant having been burned previously by maintaining Chef which also changed licence.

    There then followed a period of waiting to see what happened. Lucas is unwilling to maintain this in non-free and has dropped the maintainership.

    In the interim, Hashicorp has lost one of its founders and been bought for $6.4bn by IBM. We can maintain a *very old* free licensed copy maybe
    but Lucas has already moved on, as has most of the rest of the world.

    if anyone *really* want Vagrant to remain in Trixie - where we already do slightly differently from upstream in that they seem to prefer Virtualbox virtualisation - someone has to commit to another five years of support
    of an old codebase with a near zero possibility of cooperation from upstream.

    There are a few scripting packages that depend on Vagrant but if there's
    no Ruby expert that wants to maintain this for the foreseeable future,
    best it goes now, maybe.

    Appreciating that this is late in the cycle, it's a lot easier to remove potentially problematic packages than to find someone to commit to maintain them.

    Hi Andrew,

    In #1049999, Hans-Christoph Steiner <[email protected]> said he would take
    over maintenance of the vagrant package in Debian.

    Hans-Christoph, can you comment on whether that's still the case?

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hans-Christoph Steiner@21:1/5 to All on Thu Jun 26 08:50:01 2025
    Lucas Nussbaum:
    On 09/06/25 at 18:17 +0000, Andrew M.A. Cater wrote:
    [Replying personally as well as on list to match your message sent to me]

    On Mon, Jun 09, 2025 at 09:27:49AM +0200, Paul Gevers wrote:
    Hi Andrew,

    On 09-06-2025 08:12, Andrew M.A. Cater wrote:
    Debian bug 1049999 refers: it looks as if there is now no active
    maintainer and so we probably can't keep this in for the lifecycle of
    Trixie.


    That bug is rather long, do you have a summary? Why wouldn't we able to keep
    it? If that's true it should go now, instead of then. But on the other hand >>> we have a whole lot of packages that have no active maintainer and that are >>> behind upstream, so you need a stronger argument than that.

    Paul


    Hashicorp chose a non-free licence in late 2023. At that point, one of the >> two Debian maintainers had already more or less given up maintaining Vagrant >> having been burned previously by maintaining Chef which also changed licence.

    There then followed a period of waiting to see what happened. Lucas is
    unwilling to maintain this in non-free and has dropped the maintainership. >>
    In the interim, Hashicorp has lost one of its founders and been bought for >> $6.4bn by IBM. We can maintain a *very old* free licensed copy maybe
    but Lucas has already moved on, as has most of the rest of the world.

    if anyone *really* want Vagrant to remain in Trixie - where we already do
    slightly differently from upstream in that they seem to prefer Virtualbox
    virtualisation - someone has to commit to another five years of support
    of an old codebase with a near zero possibility of cooperation from upstream.

    There are a few scripting packages that depend on Vagrant but if there's
    no Ruby expert that wants to maintain this for the foreseeable future,
    best it goes now, maybe.

    Appreciating that this is late in the cycle, it's a lot easier to remove
    potentially problematic packages than to find someone to commit to maintain >> them.

    Hi Andrew,

    In #1049999, Hans-Christoph Steiner <[email protected]> said he would take
    over maintenance of the vagrant package in Debian.

    Hans-Christoph, can you comment on whether that's still the case?

    Lucas

    Hey all,

    I'm already committed to maintaining Vagrant in Debian because the F-Droid release build infrastructure is based on it for the foreseeable future. So doing this maintenance work in Debian will be less work for me than outside. That said, I do welcome help and support.

    .hc

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Hans-Christoph Steiner on Fri Jun 27 11:30:01 2025
    Hi,

    On 26/06/25 at 08:33 +0200, Hans-Christoph Steiner wrote:
    I'm already committed to maintaining Vagrant in Debian because the F-Droid release build infrastructure is based on it for the foreseeable future. So doing this maintenance work in Debian will be less work for me than outside. That said, I do welcome help and support.

    I would appreciate it if you found the time to update the package to
    reflect the fact that you are taking over as maintainer, before the
    trixie release.

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hans-Christoph Steiner@21:1/5 to All on Fri Jul 11 13:50:01 2025
    Lucas Nussbaum:
    Hi,

    On 26/06/25 at 08:33 +0200, Hans-Christoph Steiner wrote:
    I'm already committed to maintaining Vagrant in Debian because the F-Droid >> release build infrastructure is based on it for the foreseeable future. So >> doing this maintenance work in Debian will be less work for me than outside. >> That said, I do welcome help and support.

    I would appreciate it if you found the time to update the package to
    reflect the fact that you are taking over as maintainer, before the
    trixie release.

    Lucas

    Ok done! Let's see if it just simply gets migrated. Or someone could file an unblock request to accelerate things.

    .hc

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)