vitaminx
Posts: 1
Joined: Wed Feb 03, 2021 10:28 am

Microsoft VSCode repositories installed without user consent + packages use wrong component

Wed Feb 03, 2021 10:44 am

Hi, just updated to the package "raspberrypi-sys-mods_20210125_armhf.deb" today and it installs "/etc/apt/sources.list.d/vscode.list":

Code: Select all

### THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
deb [arch=amd64,arm64,armhf] http://packages.microsoft.com/repos/code stable main
including the Microsoft GPG key for that repo: /etc/apt/trusted.gpg.d/microsoft.gpg

These files are not added in the usual way (as a file included in the deb package), but rather using the "postinst" script, which makes it more difficult to find out where these files come from, e.g. "dpkg -S" won't work.

This is the current content of the Microsoft repository: http://packages.microsoft.com/repos/code/pool/main/c/

Code: Select all

code/
code-exploration/
code-insiders/
Which is this VisualStudio editor: https://code.visualstudio.com/.

This editor is clearly not using the GPL license and is not free software, but the Debian packages are in the "main" component, which is against the Debian guidelines, they should rather be in "non-free" due to the license.

Due to the license conflict I would like to ask you kindly to either remove that repository again from the "postinst" script of "raspberrypi-sys-mods", and if you really want it in, then please add it in a way the user can clearly see it's license and that it is non-free software *before* installing it, and actually has a choice about it.

Thank you.

jamesh
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 28432
Joined: Sat Jul 30, 2011 7:41 pm

Re: Microsoft VSCode repositories installed without user consent + packages use wrong component

Wed Feb 03, 2021 10:46 am

Already discussed in another thread. We won't be making any changes to this, it is to help users install VSCode which is our recommended IDE for Pico development.

viewtopic.php?f=63&t=301068
Principal Software Engineer at Raspberry Pi (Trading) Ltd.
Working in the Application's Team.

Return to “General discussion”