GNU bug report logs - #15549
hydra.gnu.org needs to declare its javascript licenses for LibreJS

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 15549 in the body.
You can then email your comments to 15549 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: christophe.jarry <at> ouvaton.org
To: bug-guix <at> gnu.org
Subject: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Mon, 7 Oct 2013 09:43:35 +0200

Hello,

If I go to http://hydra.gnu.org/jobset/gnu/master with Firefox, addon
GNU LibreJS 5.4 [1] reports this:

    List of accepted JavaScript in
    http://hydra.gnu.org/jobset/gnu/master

    this script has been tagged as free software by LibreJS authors:
    http://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js


    List of blocked JavaScript in
    http://hydra.gnu.org/jobset/gnu/master

    NONTRIVIAL: eval has been found in code:
    http://ajax.googleapis.com/ajax/libs/jqueryui/1.10.1/jquery-ui.min.js

    NONTRIVIAL: eval has been found in code:
    http://hydra.gnu.org/static/bootstrap/js/bootstrap.min.js

    This script is detected as nonfree, external, and as defining
    functions or methods:
    http://hydra.gnu.org/static/js/bootbox.min.js

    This script is detected as nonfree, external, and as defining
    functions or methods:
    http://hydra.gnu.org/static/js/common.js

    This script is detected as inline, nonfree, defining functions or
    methods, and the rest of the page as loading external scripts:
        $(function() { makeLazyTab("tabs-jobs",
"http://hydra.gnu.org/jobset/gnu/master/jobs-tab"); });

Is it possible to use only free javascript for this page?

[1] http://www.gnu.org/software/librejs

Christophe

Message #8 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: christophe.jarry <at> ouvaton.org
Cc: 15549 <at> debbugs.gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Mon, 07 Oct 2013 22:02:06 +0200

Hi,

christophe.jarry <at> ouvaton.org skribis:

> If I go to http://hydra.gnu.org/jobset/gnu/master with Firefox, addon
> GNU LibreJS 5.4 [1] reports this:

Thanks for the report!

>     List of accepted JavaScript in
>     http://hydra.gnu.org/jobset/gnu/master
>
>     this script has been tagged as free software by LibreJS authors:
>     http://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
>
>
>     List of blocked JavaScript in
>     http://hydra.gnu.org/jobset/gnu/master
>
>     NONTRIVIAL: eval has been found in code:
>     http://ajax.googleapis.com/ajax/libs/jqueryui/1.10.1/jquery-ui.min.js

So jquery itself is free, but since it’s using ‘eval’ it might be
evaluating third-party non-free code, is that right?

>     NONTRIVIAL: eval has been found in code:
>     http://hydra.gnu.org/static/bootstrap/js/bootstrap.min.js

Same here.

>     This script is detected as nonfree, external, and as defining
>     functions or methods:
>     http://hydra.gnu.org/static/js/bootbox.min.js

That file points to http://bootboxjs.com/license.txt, which is the
MIT/X11 license.

So do I get it right that it’s just a matter of letting LibreJS know
about it?

>     This script is detected as nonfree, external, and as defining
>     functions or methods:
>     http://hydra.gnu.org/static/js/common.js

That file is actually part of Hydra, which is GPLv3+:

  https://github.com/NixOS/hydra/blob/master/src/root/static/js/common.js

>     This script is detected as inline, nonfree, defining functions or
>     methods, and the rest of the page as loading external scripts:
>         $(function() { makeLazyTab("tabs-jobs",
> "http://hydra.gnu.org/jobset/gnu/master/jobs-tab"); });

This comes from Hydra’s source:

  https://github.com/NixOS/hydra/blob/master/src/root/jobset.tt

> Is it possible to use only free javascript for this page?

AFAICS it’s actually the case.  However, all this lacks the right tags
for LibreJS to recognize it.

Could you tell us what’s needed to make it work?

I can then submit a patch for Hydra itself.  It would be neat if someone
else would submit the JQuery/Bootstrap parts, though.

Thanks,
Ludo’.

Message #11 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Christophe Jarry <cjarry <at> cjarry.org>
To: ludo <at> gnu.org
Cc: 15549 <at> debbugs.gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Thu, 28 Aug 2014 21:02:47 +0200

> AFAICS it's actually the case.  However, all this lacks the right
> tags for LibreJS to recognize it.
>
> Could you tell us what's needed to make it work?

You should be able to do it with the instructions on those pages:

http://www.gnu.org/software/librejs/free-your-javascript
https://www.gnu.org/licenses/javascript-labels

Christophe

Message #16 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Joshua Branson <bransoj <at> hotmail.com>
To: "15549 <at> debbugs.gnu.org" <15549 <at> debbugs.gnu.org>
Subject: hydra.gnu.org needs to declare its javascript licenses for
Date: Thu, 16 Mar 2017 20:47:52 +0000

This is still an issue.  There are a couple of eval issues and some inline code that raises flags for LibreJs.

Joshua

Message #19 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 15549 <at> debbugs.gnu.org, christophe.jarry <at> ouvaton.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Mon, 09 Oct 2017 23:17:46 +0200

Ludovic Courtès <ludo <at> gnu.org> writes:

> AFAICS it’s actually the case.  However, all this lacks the right tags
> for LibreJS to recognize it.
>
> Could you tell us what’s needed to make it work?
>
> I can then submit a patch for Hydra itself.  It would be neat if someone
> else would submit the JQuery/Bootstrap parts, though.

Has our version of hydra diverged from upstream, or are we just using an
old version?

We need to add license comments to the JavaScript files and to
non-trivial embedded script blocks.

I would like to do this, but I don’t know where the code is that I
should edit, or if this should just be done on our single
soon-to-be-obsolete hydra.gnu.org instance.

--
Ricardo

GPG: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
https://elephly.net

Message #22 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Ricardo Wurmus <rekado <at> elephly.net>
Cc: Mark H Weaver <mhw <at> netris.org>, 15549 <at> debbugs.gnu.org,
 christophe.jarry <at> ouvaton.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Tue, 10 Oct 2017 08:55:34 +0200

Ricardo Wurmus <rekado <at> elephly.net> skribis:

> Ludovic Courtès <ludo <at> gnu.org> writes:
>
>> AFAICS it’s actually the case.  However, all this lacks the right tags
>> for LibreJS to recognize it.
>>
>> Could you tell us what’s needed to make it work?
>>
>> I can then submit a patch for Hydra itself.  It would be neat if someone
>> else would submit the JQuery/Bootstrap parts, though.
>
> Has our version of hydra diverged from upstream, or are we just using an
> old version?

We run an old and slightly modified version of Hydra.  (Unfortunately,
we followed worst practices here, which means the changes are only on
hydra.gnu.org.)

> We need to add license comments to the JavaScript files and to
> non-trivial embedded script blocks.
>
> I would like to do this, but I don’t know where the code is that I
> should edit, or if this should just be done on our single
> soon-to-be-obsolete hydra.gnu.org instance.

I depends on the breadth of the changes.  Where are the license tags
missing?  Is it mostly in .js files, or in <script> tags?

Thanks,
Ludo’.

Message #25 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: Mark H Weaver <mhw <at> netris.org>, 15549 <at> debbugs.gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Thu, 19 Oct 2017 01:48:13 +0200

Ludovic Courtès <ludo <at> gnu.org> writes:

>> We need to add license comments to the JavaScript files and to
>> non-trivial embedded script blocks.
>>
>> I would like to do this, but I don’t know where the code is that I
>> should edit, or if this should just be done on our single
>> soon-to-be-obsolete hydra.gnu.org instance.
>
> I depends on the breadth of the changes.  Where are the license tags
> missing?  Is it mostly in .js files, or in <script> tags?

We don’t need to add anything to .js files if we can write a table
containing the relative paths to all scripts and their licenses.

Here is an example:

    http://guix.mdc-berlin.de/javascript

A link to this table must be placed on all pages that load the scripts
(it would be enough to modify the page template).  I’d begin by
collecting information for all scripts under /static/js and then
annotate all inline scripts with two-line license comments.

I don’t think I ever got access to hydra.gnu.org; I volunteer to make
the required changes (I’ve done this before for rcas.mdc-berlin.de and
guix.mdc-berlin.de).

--
Ricardo

GPG: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
https://elephly.net

Message #28 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Christophe Jarry <cjarry <at> cjarry.org>
Cc: Ludovic Courtès <ludo <at> gnu.org>, 15549 <at> debbugs.gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Thu, 19 Oct 2017 11:15:46 -0400

On Thu, Aug 28, 2014 at 3:02 PM, Christophe Jarry <cjarry <at> cjarry.org> wrote:
>> AFAICS it's actually the case.  However, all this lacks the right
>> tags for LibreJS to recognize it.
>>
>> Could you tell us what's needed to make it work?
>
> You should be able to do it with the instructions on those pages:
>
> http://www.gnu.org/software/librejs/free-your-javascript
> https://www.gnu.org/licenses/javascript-labels

I'd just like to point out that hydra.gnu.org does *NOT* use non-free
javascript. I can assure you that everything is free software.
LibreJS just needs to be told so using a very specific metadata
format.  I really do not like that LibreJS tells users that they are
running non-free code and encourages them to complain to site admins
about it when really LibreJS doesn't know anything. I wish LibreJS
would change the messaging but that seems unlikely.

Part of my old job at the FSF was making sure LibreJS didn't complain
about things on FSF-run sites.  It took a lot of time to do and I
don't think it was ever worth the effort.  I haven't used LibreJS in
years and probably never will again.

- Dave

Message #31 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
To: Ricardo Wurmus <rekado <at> elephly.net>
Cc: Ludovic Courtès <ludo <at> gnu.org>, 15549 <at> debbugs.gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Sun, 22 Oct 2017 17:54:36 -0400

Ricardo Wurmus <rekado <at> elephly.net> writes:

> Ludovic Courtès <ludo <at> gnu.org> writes:
>
>>> We need to add license comments to the JavaScript files and to
>>> non-trivial embedded script blocks.
>>>
>>> I would like to do this, but I don’t know where the code is that I
>>> should edit, or if this should just be done on our single
>>> soon-to-be-obsolete hydra.gnu.org instance.
>>
>> I depends on the breadth of the changes.  Where are the license tags
>> missing?  Is it mostly in .js files, or in <script> tags?
>
> We don’t need to add anything to .js files if we can write a table
> containing the relative paths to all scripts and their licenses.
>
> Here is an example:
>
>     http://guix.mdc-berlin.de/javascript
>
> A link to this table must be placed on all pages that load the scripts
> (it would be enough to modify the page template).  I’d begin by
> collecting information for all scripts under /static/js and then
> annotate all inline scripts with two-line license comments.
>
> I don’t think I ever got access to hydra.gnu.org; I volunteer to make
> the required changes (I’ve done this before for rcas.mdc-berlin.de and
> guix.mdc-berlin.de).

I believe there are also LibreJS problems with our Guix packages page
at: https://www.gnu.org/software/guix/packages/

Maxim

Message #34 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: "Thompson\, David" <dthompson2 <at> worcester.edu>
Cc: Christophe Jarry <cjarry <at> cjarry.org>, 15549 <at> debbugs.gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Mon, 23 Oct 2017 07:46:52 +0200

Hi Dave,

> I'd just like to point out that hydra.gnu.org does *NOT* use non-free
> javascript. I can assure you that everything is free software.
> LibreJS just needs to be told so using a very specific metadata
> format.

I think that the idea of machine readable license information is good.
Obviously, it is very early to rely on something like this, because it
is hardly used by anyone.  By adding this information to websites we
maintain we can change that a little.

> I really do not like that LibreJS tells users that they are
> running non-free code and encourages them to complain to site admins
> about it when really LibreJS doesn't know anything.

Yes, “complain” is really not a nice default.

> Part of my old job at the FSF was making sure LibreJS didn't complain
> about things on FSF-run sites.  It took a lot of time to do and I
> don't think it was ever worth the effort.  I haven't used LibreJS in
> years and probably never will again.

With current versions of LibreJS I found it pretty easy to make the
changes to websites that are required to keep LibreJS from complaining.

The only gotcha was that the browser has to be restarted after changes
to license information.

--
Ricardo

GPG: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
https://elephly.net

Message #37 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Ricardo Wurmus <rekado <at> elephly.net>
Cc: Mark H Weaver <mhw <at> netris.org>, 15549 <at> debbugs.gnu.org,
 guix-sysadmin <at> gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Mon, 23 Oct 2017 14:06:02 -0700

Hi,

Ricardo Wurmus <rekado <at> elephly.net> skribis:

> I don’t think I ever got access to hydra.gnu.org; I volunteer to make
> the required changes (I’ve done this before for rcas.mdc-berlin.de and
> guix.mdc-berlin.de).

I’ve created the “rekado” account with your public key.  However, you
need to ask sysadmins <at> fsf.org to white list one or more IPs you’ll be
connecting from.  (I’ll email more info off-list.)

Let us know how it goes, and try to keep a patch of the changes you
make!

Thank you,
Ludo’.

Message #40 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Adonay Felipe Nogueira <adfeno <at> hyperbola.info>
To: bug-guix <at> gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Thu, 09 Nov 2017 22:20:24 -0200

Do you by chance know of some way I can contribute directly to the
development of hydra.gnu.org web site?

If there is at least a way to make a copy of the web pages, I can try
making a LibreJS-compliant version of them --- the only thing needed
would be some server to test them if they need a server-side language or
CGI/FastCGI application.

I noticed that the site seens to be based on NixOS's Hydra. If you want,
I can do customization based on NixOS's instead. Just say the word. ;)

"Thompson, David" <dthompson2 <at> worcester.edu> writes:

> I'd just like to point out that hydra.gnu.org does *NOT* use non-free
> javascript. I can assure you that everything is free software.
> LibreJS just needs to be told so using a very specific metadata
> format.  I really do not like that LibreJS tells users that they are
> running non-free code and encourages them to complain to site admins
> about it when really LibreJS doesn't know anything. I wish LibreJS
> would change the messaging but that seems unlikely.
>
> Part of my old job at the FSF was making sure LibreJS didn't complain
> about things on FSF-run sites.  It took a lot of time to do and I
> don't think it was ever worth the effort.  I haven't used LibreJS in
> years and probably never will again.
>
> - Dave

-- 
- https://libreplanet.org/wiki/User:Adfeno
- Palestrante e consultor sobre /software/ livre (não confundir com
  gratis).
- "WhatsApp"? Ele não é livre. Por favor, veja formas de se comunicar
  instantaneamente comigo no endereço abaixo.
- Contato: https://libreplanet.org/wiki/User:Adfeno#vCard
- Arquivos comuns aceitos (apenas sem DRM): Corel Draw, Microsoft
  Office, MP3, MP4, WMA, WMV.
- Arquivos comuns aceitos e enviados: CSV, GNU Dia, GNU Emacs Org, GNU
  GIMP, Inkscape SVG, JPG, LibreOffice (padrão ODF), OGG, OPUS, PDF
  (apenas sem DRM), PNG, TXT, WEBM.

Message #43 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: Mark H Weaver <mhw <at> netris.org>, 15549 <at> debbugs.gnu.org,
 guix-sysadmin <at> gnu.org
Subject: Re: bug#15549: hydra.gnu.org uses nontrivial and nonfree javascript
Date: Fri, 10 Nov 2017 23:35:38 +0100

Hi Ludo,

Ludovic Courtès <ludo <at> gnu.org> writes:

> Ricardo Wurmus <rekado <at> elephly.net> skribis:
>
>> I don’t think I ever got access to hydra.gnu.org; I volunteer to make
>> the required changes (I’ve done this before for rcas.mdc-berlin.de and
>> guix.mdc-berlin.de).
>
> I’ve created the “rekado” account with your public key.  However, you
> need to ask sysadmins <at> fsf.org to white list one or more IPs you’ll be
> connecting from.  (I’ll email more info off-list.)

Thanks.  I can now connect via fencepost.

> Let us know how it goes, and try to keep a patch of the changes you
> make!

I’ll try to make myself familiar with how things are set up and then
carefully make my changes (mostly additions) and record them as a patch.

--
Ricardo

GPG: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
https://elephly.net

Message #46 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: swedebugia <at> riseup.net
To: 15549 <at> debbugs.gnu.org
Subject: hydra.gnu.org needs to declare its javascript licenses for LibreJS
Date: Mon, 17 Dec 2018 02:36:04 -0800

Hi

I vote for closing this as "won't fix" now we are moving away and
concentrate on cuirass at ci.guixsd.info.

-- 
Cheers 
Swedebugia

Message #49 received at 15549 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: swedebugia <at> riseup.net
Cc: 15549 <at> debbugs.gnu.org
Subject: Re: bug#15549: hydra.gnu.org needs to declare its javascript licenses
 for LibreJS
Date: Tue, 18 Dec 2018 12:23:15 +0100

swedebugia <at> riseup.net skribis:

> Hi
>
> I vote for closing this as "won't fix" now we are moving away and
> concentrate on cuirass at ci.guixsd.info.

Indeed, done!

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.