On Thu, Nov 30, 2023 at 11:26:00PM +1100, Dmitry Smirnov wrote: > On Monday, 30 October 2023 10:16:07 PM AEDT Moritz Muehlenhoff wrote: > > Please remove consul. Hashicorp changed the license for Consul > > to the BSL and they will only provide security fixes for the > > MPLed version until end of the year, so consul should just > > be removed. > > I wonder if we should re-introduce Consul to non-free? > > Consul is indispensable due to its unique features... > > Upstream license change is the most unfortunate.
Non-free isn't covered by security support, so that would be an option. They'll cease to release security fixes for the MPLed version in a month, so we'll also need to EOL it for bullseye. Unfortunately Hashi has never been very transparent even before the licence change, so it was always very tricky to really identify which commits were security-relevant. Maybe it's better to actually give in and only reintroduce it via https://fasttrack.debian.net/ (and have it always follow the last released stable release). Gitlab does the same via fasttrack (except that it's free software still) Cheers, Moritz
