Microsoft VSCode repositories installed without user consent + packages use wrong component

[vitaminx]

Hi, just updated to the package "raspberrypi-sys-mods_20210125_armhf.deb" today and it installs "/etc/apt/sources.list.d/vscode.list":

Code: Select all

### THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
deb [arch=amd64,arm64,armhf] http://packages.microsoft.com/repos/code stable main

including the Microsoft GPG key for that repo: /etc/apt/trusted.gpg.d/microsoft.gpg

These files are not added in the usual way (as a file included in the deb package), but rather using the "postinst" script, which makes it more difficult to find out where these files come from, e.g. "dpkg -S" won't work.

This is the current content of the Microsoft repository: http://packages.microsoft.com/repos/code/pool/main/c/

Code: Select all

code/
code-exploration/
code-insiders/

Which is this VisualStudio editor: https://code.visualstudio.com/.

This editor is clearly not using the GPL license and is not free software, but the Debian packages are in the "main" component, which is against the Debian guidelines, they should rather be in "non-free" due to the license.

Due to the license conflict I would like to ask you kindly to either remove that repository again from the "postinst" script of "raspberrypi-sys-mods", and if you really want it in, then please add it in a way the user can clearly see it's license and that it is non-free software *before* installing it, and actually has a choice about it.

Thank you.

[jamesh]

Already discussed in another thread. We won't be making any changes to this, it is to help users install VSCode which is our recommended IDE for Pico development.

viewtopic.php?f=63&t=301068