Opensource

1590 readers

60 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

Credits

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

founded 1 year ago

MODERATORS

pylapp

146

FSF Urges Moving Off Microsoft's GitHub to Protest Windows 11's Requiring TPM 2.0 (news.slashdot.org)

submitted 3 days ago by [email protected] to c/opensource

45 comments fedilink hide all child comments

TPM is a dedicated chip or firmware enabling hardware-level security, housing encryption keys, certificates, passwords, and sensitive data, "and shielding them from unauthorized access," Microsoft senior product manager Steven Hosking wrote last month, declaring TPM 2.0 to be "a non-negotiable standard for the future of Windows."

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 7 points 3 days ago (5 children)

What's a good alternative (assuming this is one of the few things I don't want to self-host)?

I self-host Gogs for my internal projects, but my public stuff is on Github. The only "fancy" GH feature I use is the actions since it will do ARM builds which I can't do locally.

[–] [email protected] 18 points 3 days ago (1 children)

https://codeberg.org/ is a nice alternative.

They do provide access to a runner for actions, but you need to request access to it.

[–] cbazero 3 points 3 days ago (2 children)

Does Codeberg allow private repos?

[–] [email protected] 5 points 3 days ago (1 children)

The use of a private repo is limited due to the scope of what Codeberg's open source mission is, which is not the same as Github/Gitlab for-profit entities. The details on both branches (public repo FOSS licenses and private repo use) are in the FAQ: https://docs.codeberg.org/getting-started/faq/#before-i-start-using-codeberg...

[–] cbazero 3 points 3 days ago

Thanks, I just read on their site that private repos are very limited some time ago, so i was not sure if this changed

[–] [email protected] 6 points 3 days ago (1 children)

You can self host Forgejo (a Gitea fork) which is powering codeberg.org

It will be getting federation support someday with the ForgeFed ActivityPub extension, so you pretty much can stay connected with others' repos while owning your data.

[–] [email protected] 3 points 2 days ago

I self-host Gogs, currently, but I am looking at Forgejo after several recommendations. Not sure how useful AP integration will be at first, but it'd be a "nice to have" once it's there for sure.

The reason I'm looking at a hosted one rather than on-prem is the hosted one is basically my "hot" backup.

[–] [email protected] 6 points 3 days ago

I self-host Gogs for my internal projects, but my public stuff is on Github.

If you were willing to make a fundamental change, one possible outcome: migrate your internal from Gogs to Forgejo and use Codeberg for your public FOSS as it runs on (a slightly patched) Forgejo. The gain is working with the same tooling on both sides and possibly gaining a runner (Action) locally if you spend the time to learn and set it up on your internal instance. Bonus idea: you could even make your public Codeberg FOSS repo a push-mirror from your internal server and let the Forgejos keep things in sync between the two.

[–] [email protected] 5 points 3 days ago (1 children)

Myself, I moved my projects to self-hosted gogs (maybe forgejo soon) but kept placeholders with a README.md and link on github so people can still find them.

[–] [email protected] 2 points 3 days ago (1 children)

That was going to be my follow-up question lol: How should I handle the original repo? Leave it at the last commit and add a "We moved" note, strip it down to a stub that points to the new repo, or something else.

[–] [email protected] 2 points 3 days ago

I was feeling particularly grumpy and did a final commit that 'git rm'ed everything but the new README.md, yeah.

One could even risk deleting the github repo and re-creating it w/same name to remove all old content...

[–] onlinepersona 1 points 3 days ago* (last edited 3 days ago) (1 children)

https://code.onedev.io/ - built upon Java, feature-rich but suffers from HTTPS-only clones (yep, the main instance can't use SSH)
radicle - federated sourceforge. Doesn't have a CI but they are actively working on it, but your repo is replicated across multiple instances, "pull requests" (they call them patches - example) can be done across instances, and the devs dog-food it (one of their repositories), and it also works on TOR

I'd love to support gitlab, but they refuse to invest in federation and there have been rumors about inter to be bought by Google, which will definitely kill any federation suggestions.

Anti Commercial-AI license

[–] robinshen 1 points 2 days ago

OneDev does support to clone via SSH if self hosted. Only that SSH access to code.onedev.io is turned off.