It’s only a proof of concept at the moment and I don’t know if it will see mass adoption but it’s a step in the right direction to ending reliance on US-based Big Tech.

  • I wonder how much work is entailed in transforming Fedora in to a distro that meets some definition of the word “Sovereign” 🤔

    Personally I wouldn’t want to make a project like this be dependent on the whims of a US defense contractor like RedHat/IBM, especially after what happened with CentOS.

  • The idea of a “distro for EU public sector” is neat, but even the PoC has some flaws when considering technical sovereignty.

    First of all, using Gitlab & Gitlab CI. Gitlab is an American company with most of its developers based in the US. Sure, you could host it by yourself but why would you do it considering Forgejo is lighter and mostly developed by developers based in the EU area?

    The idea of basing it on Fedora is also somewhat confusing. Sure, it’s a good distro for derivatives, but it’s mostly developed by IBM developers. The tech sovereignty argument doesn’t hold well against Murphy’s law.

    • As far as I’m concerned, open-source has no nationality, even for a public-sector project. Yes, Red Hat is American. They also don’t own Fedora.

      From the very start, we’ve been built on the contributions of people from every corner of the globe, why should we care about petty geographical squabbles like this?

      • Yes, Red Hat is American, and whether you like it or not, this comes with legal and political dependencies. Fedora is subject to U.S. laws (e.g., Cloud Act, export controls), which poses a risk to EU digital sovereignty.

        Yes, Red Hat does not own Fedora. And IBM, which owns Red Hat, also does not own Fedora. But it has significant influence and could prioritize business or political interests over EU needs.

        And another question is: Why shouldn’t we use a European OS when we already have viable alternatives?

  •  arsCynic   ( @arsCynic@beehaw.org ) 
    link
    fedilink
    English
    17
    edit-2
    7 days ago

    “Made with ❤️ in Brussels by Robert Riemann”

    Clicked his URL…

    “physicist and computer scientist…passionate about open source and free software, cryptography…”

    Whew, almost read crypto"currency"…

    "…and peer-to-peer technology such as BitTorrent or Blockchain/Bitcoin.

    Goddammit.


    ✍︎ arscyni.cc: modernity ∝ nature.

  •  JOMusic   ( @JOMusic@lemmy.ml ) 
    link
    fedilink
    English
    178 days ago

    As much as I love what they’re doing, tieing an OS to a specific region via name seems like the opposite of Open Source values… Then again, I suppose it could just be forked into a more generalized version

    • alternative POV: it’s entirely FOSS so there’s little control that can be exerted from its use. it’s also entirely free, so use is extracting value without providing anything in return. by its use, you’re taking resources to maintain, host, etc and providing nothing in return

      similar reason to why i don’t use ecosia with an ad blocker: by blocking ads you’re using their resources without giving back and thus you’re taking resources away from the charity

      •  Ferk   ( @Ferk@lemmy.ml ) 
        link
        fedilink
        3
        edit-2
        8 days ago

        This is true, but then why not base it off Guix (the GNU distro)? …I’m sure Fedora is full of binary blobs and not-so-free software.

        If they needed it, they could still add extra software and blobs to Guix, sourced by the EU… and I think doing that would allow it to carve itself a niche (a version of Guix with more compatibility would be interesting for many) rather than sticking a white label on Fedora and call it something else. I don’t see a lot of value on this over just using Fedora directly, I’m not sure if it’s true that Fedora & Red Hat do not benefit from this… wouldn’t their support agents be able to just start providing support also to EU OS customers if they (both customers and support agents) want? Wouldn’t it make it more interesting for private companies working closely with the government to choose Red Hat as a partner when it comes to enterprise Linux?

        I guess we’ll have to see how much they customize it, but in my experience with previous attempts, I’m expecting just a re-skin, just Fedora with different theme. At most, with some extra software preinstalled. I don’t think that’s a threat to Fedora or Red Hat, but rather an opportunity for expansion.

        • I’m sure Fedora is full of binary blobs and not-so-free software

          fedora is staunchly opposed to non-free software in their default distro … that spat a few weeks ago with OBS was related to that AFAIK

          unsure about like signed blobs for “security” services but i imagine they’d be very limited, and optional

          rather than sticking a white label on Fedora and call it something else

          but for what benefit? no matter what’s trying to be achieved, starting with a very full-featured, robust OS that’s widely used is going to serve you very well… not just technically (less work for the same outcome), but for human reasons

          there are loads of guides out there for how to fix fedora issues, few for guix… loads of RPMs that are compatible with fedora, and i can only imagine fewer packages for guix

          and then if you’re talking about server OSes - and actually workstations too - managing them with tools like ansible etc… fedora is going to have off the shelf solutions

          just Fedora with different theme

          well, the actual software and configuration i’d argue aren’t the important part - owning the infrastructure is the important part… package mirrors, distribution methods (eg a website), being able to veto or replace certain packages, and the branding (or regulation) that draws people to it… being able to roll out a security patch to every installation without a 3rd party okaying it, for example

          • The spat with the OBS devs was due to a fedora package maintainer refusing to package OBS with an older library for their own Fedora Flatpak repo, despite the newer library causing severe breakage with OBS (which is why the OBS devs held it back in the flathub release).

          •  Ferk   ( @Ferk@lemmy.ml ) 
            link
            fedilink
            1
            edit-2
            7 days ago

            I don’t think there are many distributions that are truly free, at least not in the eyes of the FSF. Fedora is not one of them.

            but for what benefit? […] fedora is going to have off the shelf solutions

            Yes, but that’s my point: fedora is already fully featured… the work needed is trivial, to the point that directly using an installation of fedora by itself (along with tools like ansible) wouldn’t be very different from doing he same with EU OS… at that point you don’t need a whole new distro, just Fedora and maybe some trivial scripts (which you are gonna need anyway in any large scale installation, even if you went with EU OS).

            Imho, there would be more value if something actually novel was used, and new guides and howtos were created to simplify/clarify things that used to be hard. What would be a pity is to spend a lot of euros for something that is trivial to do, and that only helps filling the pockets of some corrupt politician’s friend. I mean, I’m not against a simple thing, but then I’d hope they at least showed how they will be spending the budget on some other way (marketing? …will there be actual custom software? …are they gonna maintain the entire repo themselves?).

            well, the actual software and configuration i’d argue aren’t the important part - owning the infrastructure is the important part…

            But I was not arguing against that. And if they did promise to do that, then that would be different. The problem is precisely that I’m expecting them to NOT own most of the infrastructure and instead rely on Fedora repositories, because from experience that’s how these things usually go.

            I repeat the full context of the section you quoted: “I guess we’ll have to see how much they customize it, but in my experience with previous attempts, I’m expecting just a re-skin, just Fedora with different theme”

            Maybe you have a different experience with government-managed distros, but there have been some attempts at that in my (european) country that were definitely not much more than a reskinned Ubuntu (and before that, Debian) from back in the day. They used Ubuntu repositories (ie. Ubuntu infrastructure), and the only extra repo they added was not a mirror, but just hosted a few packages that were actually produced by them and were responsible for the theming, reskining and defaults. They used metapackages that depend on upstream packages to control what was part of the default desktop environment, there might have been a few more extra packages (mainly backports), but very few and always lagging behind alternative backport repos. Uninstall the metapackage (which you might do if you wanna remove some of the preinstalled things) and it literally was Ubuntu straight from Ubuntu official repos. There was no filtering, no veto, no replacing, no mirroring.

            Also, just to keep things grounded in the initial point: do you really think that Fedora / Red Hat would not benefit at all from it?

      • I think the point is, you just don’t support products from countries led by dictators. I wouldn’t use an OS from North Korea, no matter how free it was. LOL

        In my case, the US is worse than North Korea, because they threaten the existence of my country (Canada) on a daily basis.

        And for the EU, they have as much reason to distance themselves from Americans than I do.

        There are far too many alternatives from other countries to even entertain an American distro. My opinion, anyway.

  • Based on a US distro whose versions are supported for 1 year, and “built to the requirements for the EU public sector” (because the EU public sector has one coherent set of requirements and the dev knows them, even if he doesn’t list them out).

    This is most probably good-intentioned and it is admirable how the dev sprung into action, but it’s naive at best.

    • I thought it was naive as well, but because they based it on a mayfly distro that has really great validation and reliability but it’s gone in a fortnight.

      Wither Almalinix or Cloudlinux or PCLinuxOS or Mandriva? Three of them have really solid support structures and at least one of them has amazing compatibility options with libraries for services.

      There are options. A few of them could be better than fedora while fedora is still owned by redhat as redhat dies from suffocation – hell, its all just fucking ancillary bull (Ansible) they sell now, as its metastatic cancer (Systemd) eats it alive.

    • From the subheading on the ReadMe.

      Community-led Proof-of-Concept for a free Operating System for the EU public sector 🇪🇺

      So it’s made by the EU in the sense that the maintainers are likely citizens of the EU, I guess.

      • Depending on who the group is … it is good to first do a thorough check on who the group is … it can just as likely be a group of scam artists that are riding on some nationalism band wagon happening around the world these days.

        • They could, and if I was an EU government entity, I would do my homework on what they were offering, even if they were acting 100% in good faith.

          However, helping governments get away from the clutches of the likes of Apple and Microsoft seems like a noble goal, and if this idea spurs that change regardless of the adoption of this distro, I think it will have been a net positive.

          • Government is only in the clutches of MS because MS bribes officials to maintain their cancerous software as a staple everywhere in Europe… Hungary is one of a few quite famous cases of bribery.

            There’s no depth to my loathing of MS and its illegal and anti-competitive practices.

          • If they are honest about what they are suggesting … the first step would be to be explicitly clear about who THEY are and WHO they represent.

            I really don’t care that much about the technical side of things because I’m not that technically knowledgeable. However, I am more apt to trust the judgment or recommendations of prominent people in the industry (that are not corporately attached or controlled) … I would also trust public institutions or journalists or academics with a track record of social advocacy and wanting to represent people instead of corporations or businesses. I would also trust politicians or political advocates that mostly represent people and public institutions.

            I really don’t put my faith in any one person no matter who they claim to be to just say they want to build something meaningful and give me no information on their background, who they worked for, who they represent or what kind of people or organizations they associate with. There have been far too many ‘good natured’ technocrats and technology people from the past decade or two who claim to say that they want to change the world for the better and then end up wanting to burn it all down for a profit.

      • So it’s made by the EU in the sense that the maintainers are likely citizens of the EU, I guess

        Even after that, be reminded that this current mania in the EU has nothing to with being anti-american or wanting to dump American products or services themselves. The people who are most into this are anti-Trump, not anti-american or fundamentally against Europe being subordinate to the US. Most of them are probably secretly wanting the world to return to 2024 and EU being US junior partner of “the west” and happily eating MacDonalds and using microsoft services. It’s not an European sovereigist movement at it’s core and therefore it has not staying power after Trump or Maga.

        It might be that these people are just Foss enthusiasts with pure intentions wanting to promote the cause by riding the wave. However if the wave is just a meme conjured because of Trump then this project or things like it have no staying power or future even if it really being an EU project or being adopted tomorrow.

        •  Ferk   ( @Ferk@lemmy.ml ) 
          link
          fedilink
          2
          edit-2
          8 days ago

          There has been a will towards more independence for a long time. Trump was just an extra push (and I’m still not convinced even that will be enough… all these initiatives sound good, but past experience has made me skeptical they will really amount to anything substantial).

          But I don’t see it necessarily as anti-american. It’s more like we do need to cultivate local products and services more. Europe has for a while been falling behind in a lot of areas, combined with an aging population and an energy crisis, we really need to try and develop internally if we want to keep ourselves afloat, otherwise I’m not sure we can maintain a stable situation.

          • Nah, just going along with Ukraine war and letting it get to and pushing to the point of war is a testament that Washington and Brussels are a foreign policy monolith. That finally sold it for me. EU is ready to sacrifice it’s interests to drive their perceived transatlantic interests that the two political classes mostly share. EU political elite and media mainly hate Trump because he showed that EU capitals and Brussels are bunch of losers with no real political agency, who got conned into supporting and prolonging this unwinnable war to the hilt and are now being left to hold the bag.

            First concrete move towards EU independence would be to stop this war and normalize with Russia, but in this fucked up world Trump wants both and EU wants neither. That is the fucked up world we live in. EU wants further conflict on it’s continent and US doesn’t want a war in Europe.

            I do personally want European independence, but I see that EU in it’s current state is not a force for it, nor is it good for Europeans.

            •  Ferk   ( @Ferk@lemmy.ml ) 
              link
              fedilink
              2
              edit-2
              7 days ago

              I largely agree, that’s why I was saying that I’m skeptical that all this will amount to anything substantial.

              The will for independence exists in the EU, the problem is that the politicians don’t have the balls for it and they would rather push to maintain the status Quo in all the things that matter. Instead they focus on small things that appear good on paper but don’t really amount to anything. See for example the DMA and all it’s promises of forcing big corporations to bend the knee and stopping monopolies… even when a policy like that is written, it is hardly ever properly enforced. Has any company gotten any serious trouble for not implementing GDPR properly since it was introduced?

    • Most distros, not all, are based in, or run by, American legal entities.

      Redhat, Rocky, Alma, Debian, etc - all legally American. This is a problem if the US requires sanctions against another country. All of those cannot legally supply products to Russia now, but in the future who’s to say what other countries the US will sanction? People are only now starting to realise that sanctions can be applied to software too, and many countries are entirely reliant upon US Software. (Seriously, do a quick audit - 90% of our tech company’s stack is US originated)

      Alternatives: Suse (German) Ubuntu (UK, but based on Debian, so likely subject to supply chain restrictions).