Netdata is partially closed source but in Universe Repo

[Tobias]

Netdata ships a "v2" Dashboard that uses closed source blobs built from a private repo licensed under a new (non FLOSS) NCUL1 License

License https://github.com/netdata/netdata/blob/master/src/web/gui/v2/LICENSE.md
Blobs https://github.com/netdata/netdata/tree/master/src/web/gui/v2

which are required to build.

This it should probably not be in the Ubuntu universe repos.

Relevant Debian Bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1045145

[waffshappen (waffshappen-redhat-bugs)]

Description of problem:

Netdata ships a v2 dashboard (loaded by default via cdn, and shipped as fallback from built files in https://github.com/netdata/netdata/tree/master/src/web/gui/v2 ) that is built in private and with no source available.

It either needs the v2 dashboard stripped for fedora builds, or not be included (since the firmware criteria is not met).

Version-Release number of selected component (if applicable):

all since v2 dashboard ships

How reproducible:

100%

Steps to Reproduce:
1. install netdata
2. open it and observe being able to use `/v2` (local copy of the built blobs) and it shipping the cdn edition on `/`

Actual results:
I get closed source code code from files installed on my disk.

Expected results:
Only `/v1` should work under fedora, or netdata should not be in the repos.

Additional info:
I opened a Pull/Consideration Request at https://github.com/netdata/netdata/pull/18319 for them to label this clearly or provide a FLOSS only build.

[waffshappen (waffshappen-redhat-bugs)]

Note: a similar bug report exists for debian at
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054354

[Tobias (waffshappen)]

Netdata ships a "v2" Dashboard that uses closed source blobs built from a private repo licensed under a new (non FLOSS) NCUL1 License

License https://github.com/netdata/netdata/blob/master/src/web/gui/v2/LICENSE.md
Blobs https://github.com/netdata/netdata/tree/master/src/web/gui/v2

which are required to build.

Thus it should not be included in the openSUSE repos.

[Andreas Stieger (andreasstieger)]

Confirm, the license seems non-free:
https://github.com/netdata/netdata/blob/v1.46.3/src/web/gui/v2/LICENSE.md

head -n1 netdata-v1.46.3/src/web/gui/v2/LICENSE.md
# Netdata Cloud UI License v1.0 (NCUL1)

The license makes the package non-free, and the BLOB violates the "no prebuilt binaries" packaging policy.

Maintainer, please re-package the source tarball to remove the v2 dashboard. See the mumble package for a source service example where this exclusion was done recently. Seems to affect Leap 15.6, but not 15.5.

[Andreas Stieger (andreasstieger)]

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1045145
https://bugzilla.redhat.com/show_bug.cgi?id=2304167

[Tobias (waffshappen)]

(In reply to Andreas Stieger from comment #1)
> head -n1 netdata-v1.46.3/src/web/gui/v2/LICENSE.md
> # Netdata Cloud UI License v1.0 (NCUL1)
>
> The license makes the package non-free, and the BLOB violates the "no
> prebuilt binaries" packaging policy.

Note that even if not pre-packaged it preloads the same files from their cdn by default (i am not aware if that would fit the packaging requirements). Nix for example patches this by always enforcing v1 on the default route too:
https://github.com/NixOS/nixpkgs/blob/a58bc8ad779655e790115244571758e8de055e3d/pkgs/tools/system/netdata/default.nix#L112

[Tobias (waffshappen)]

Correction: Even once this is fixed, as it IS packaged right now.

[Bwiedemann+obsbugzillabot (bwiedemann+obsbugzillabot)]

This is an autogenerated message for OBS integration:
This bug (1229119) was mentioned in
https://build.opensuse.org/request/show/1193785 Factory / netdata

[waffshappen (waffshappen-redhat-bugs)]

Opensuse has patched this now for their distribution (removal of v2, defaulting to v1 on /), a similar patch could be adopted for fedora & co?

https://bugzilla.opensuse.org/show_bug.cgi?id=1229119

[Tobias (waffshappen)]

A patch for this (disables v2, defaults to v1 on /) is now available for openSUSE:
https://bugzilla.opensuse.org/show_bug.cgi?id=1229119

[updates (updates-redhat-bugs)]

FEDORA-2024-e46059b3ef (netdata-1.46.3-4.fc39) has been submitted as an update to Fedora 39.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e46059b3ef

[updates (updates-redhat-bugs)]

FEDORA-2024-a22c307c0d (netdata-1.46.3-4.fc40) has been submitted as an update to Fedora 40.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-a22c307c0d

[updates (updates-redhat-bugs)]

FEDORA-EPEL-2024-0e18547512 (netdata-1.46.3-4.el8) has been submitted as an update to Fedora EPEL 8.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0e18547512

[updates (updates-redhat-bugs)]

FEDORA-EPEL-2024-73c7ba7318 (netdata-1.46.3-4.el9) has been submitted as an update to Fedora EPEL 9.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-73c7ba7318

[updates (updates-redhat-bugs)]

FEDORA-EPEL-2024-73c7ba7318 has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-73c7ba7318

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

[updates (updates-redhat-bugs)]

FEDORA-EPEL-2024-0e18547512 has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0e18547512

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

[updates (updates-redhat-bugs)]

FEDORA-2024-e46059b3ef has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-e46059b3ef`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-e46059b3ef

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

[updates (updates-redhat-bugs)]

FEDORA-2024-a22c307c0d has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-a22c307c0d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-a22c307c0d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

[updates (updates-redhat-bugs)]

FEDORA-EPEL-2024-73c7ba7318 (netdata-1.46.3-4.el9) has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.

[updates (updates-redhat-bugs)]

FEDORA-2024-e46059b3ef (netdata-1.46.3-4.fc39) has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.

[updates (updates-redhat-bugs)]

FEDORA-EPEL-2024-0e18547512 (netdata-1.46.3-4.el8) has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.

[updates (updates-redhat-bugs)]

FEDORA-2024-a22c307c0d (netdata-1.46.3-4.fc40) has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.