FreeBSD has removed GCC from its base system
github.com
github.com
This is effectively an administrative change. (Not to downplay the work!)
Suggested alternative title: FreeBSD has Removed GCC from Build Infrastructure.
[0] https://github.com/freebsd/freebsd-ports/blob/master/Mk/bsd....
Not only that, but even proprietary software can be built with a GPL compiler, the binaries produced by the compiler are not considered derived work that must be covered by the same GPL license, so if Microsoft wanst to build Windows with GCC for example they can do that, provided that they don't link in the executable produced GPL code (e.g. glibc).
But there are technical reasons to avoid using GCC nowadays as well.
The GNU people have built in shitty anti-features into GCC suite, ostensibly to limit the ability of proprietary software to incorporate GCC into their products.
LLVM, which is what CLang uses, was partially a response to the artificial technical limitations intentionally imposed on users by the GNU GCC authors.
The main issue with GPLv3 is the so-called Tivoization clause. It basically states that if you have a product that ships with any GPLv3 software, you need to give your users the ability to install a modified version of anything you included that's GPLv3. Which basically means you can't lock down your device. That's a big security risk on an embedded system - both from an IP protection point of view, and also from a botnet/pwning point of view.
FreeBSD (and others presumably) don't want their users to need to worry about accidentally installing something from the core system and finding themselves in violation of the GPL.
If a company is interested in "protecting their IP" by closing the source then it's questionable why they would have even wanted to use GPLv2 software at all. The OEM's IP situation is also not related to the security of the customer. Maybe it matters to the security of the OEM, but that's different.
>and also from a botnet/pwning point of view
Complying with the GPLv3 doesn't mean the device becomes vulnerable to botnets. All it means is that the customer who purchased the device has to get access to the hardware keys. For their own device. That they purchased.
I can't speak for other engineers. But at companies I've worked in, a common product model is "embedded Linux with GPLv2 software, and some proprietary secret-sauce binaries". At those companies, they usually do send patches to upstream open-source projects and they try to contribute. Also they usually provide full source-code on request, for everything except the proprietary stuff.
The net effect of GPLv3 has been that GNU packages basically don't exist on embedded devices any more. Which means that engineers like me don't have the professional opportunity to contribute features and patches. It sort of isolates GPLv3 projects into a walled garden, which I feel like is the opposite of what GPL was intended to foster. Instead, I can only have the professional opportunity to contribute on GPLv2 or permissive-license projects.
> Complying with the GPLv3 doesn't mean the device becomes vulnerable to botnets. All it means is that the customer who purchased the device has to get access to the hardware keys. For their own device. That they purchased.
I sympathize with the intent behind this. There are also just some practical realities that are tough. At my current company, the team working on our next embedded Linux product is pretty small. We don't have infinite time or resources to make sure that our own code is 100% intrusion-resistant - all we can do is try our best.
It's a big ask for us to support _two_ methods of firmware-update (local and over-the-network) with different keys/security requirements for each. We just plain don't have the manpower to support that, not when we can be developing features to improve our product instead.
And if you have access to the filesystem, it's that much easier to comb through it and look for vulnerabilities in our network updater (for example). And it's easier to pick apart the proprietary bits with Ghidra or something. Could you do it anyways, even without our help? Maybe. But it's much harder.
Can we design a system that's robust enough to allow you to install whatever you want on your unit? Maybe. Probably. Hopefully we're already there. But I'm not going to risk my company's livelihood on it just to ship GPLv3 software, especially considering that there are almost-as-good alternatives for a lot of it. We just don't have the resources to make sure we cover every security angle on an open-box system.
The developers who relicensed to GPLv3 don't care that some companies won't contribute. From their perspective, any of those contributions would be unusable to them. I feel a similar way with my open source projects -- why would I as an outsider maintain code that nobody outside of your company will ever have any possible way to test in a real production scenario? It's a waste of my time. Yes I might be missing out on minor bug-fixes but I don't really care about that. Like you said, feature development is more important.
As far as firmware-updating goes, to be in compliance the user just needs to have some way to get access to the keys. You don't need to make separate keys, it can be the same method that you use.
I should clarify - what I meant is that if we're shipping GPLv2 software like Busybox, then I'm able to spend billable time improving Busybox and upstreaming my patches. That's labor that could be going to GNU coreutils instead, if it was the userspace on my product. But since I'm not shipping it, that means I don't find bugs or need features very often. Which means I have way less of an opportunity to pitch in.
I'm not making this up either. Even in my personal life I own lots of random devices that I know for a fact are running Linux and Busybox. But I have to go out of my way to find a device that I actually have a chance to get a toolchain running on and can actually start working on patches. It's usually limited to old devices that had no security or had their security broken. So any contributions I make are limited to things that only work on insecure old legacy hardware, stuff that is not going to be of interest to your company working on the next new hotness. There is a real problem here that's in-part solved by the GPLv3, but you have to actually acknowledge that it's a problem.
Ease of contribution is a problem for sure, and it's one that GPLv3 was intended to address. My main point is that the changes from GPLv2 actually had the opposite effect for a whole group of developers.
Instead of encouraging -more- development, I feel like maybe it's just driven developers away and onto GPLv2, MIT, or BSD equivalents. Maybe this is intended behavior, and not an accidental side-effect. I don't know. But it's hard to dispute that it reduces the pool of potential contributors to GPLv3 packages.
GPLv3 components just aren't an option for a lot of products, regardless of whether GPLv3 is better for users (I agree that it is). I think it's really harmed the FSF a lot. With fewer installations of FSF packages, the FSF sees less participation and loses some of its clout. And that makes me sad :(
But you don't have to do two different systems. You can use the exact same update mechanism, just with the cryptographic validation controlled by the owner of the hardware.
Look at how Secure Boot is implemented on most x86 platforms. Default installed keys from the OEM, can not be changed from the OS, but can be disabled or replaced by the end user.
Chromebooks offer another example of how to do it well with their "Developer Mode" switches. With the switch (which is not accessible on an operating system) in the default position it will only boot Google signed images. With the switch in developer mode it notifies the user of this on every boot, but no longer verifies signatures. The device is factory reset when switching modes to ensure that the unsigned mode can not be used to compromise a stolen device.
Android phones with unlockable bootloaders work similarly, they just have a software toggle in the first-stage bootloader rather than a physical switch.
---
There are plenty of low-effort ways to provide cryptographic verifiability to end users while still following not just the letter but the spirit of the GPL.
Obviously most of us would prefer something like the first example where a user could replace the stock keys with their own and sign their own code to maintain full security when going off on their own, the second and third options are nearly trivial to implement. One switch or jumper, a single input pin, and however much code it takes to check the state of that pin when performing any boot validation.
People can create any number of embedded system which are locked down so no one can change the software. The key here is nobody. Not the user, not the manufacturer, not some backdooring third party.
People are free to argue that allowing manufacturers access to devices after sale but not the actually owners is a security feature to prevent botnets and pwning, but that is a harder sell.
And what about Dell EMC Isilon OneFS, which uses FreeBSD as the base of their product? Or Panasas or NetApp? Juniper? Sony and their PlayStation 4? Netflix?
* https://en.wikipedia.org/wiki/List_of_products_based_on_Free...
FreeBSD is not just looking at themselves, but also at their users, which my have issues with GPLv3.
That said: it's good to remember how much of a breath of fresh air clang was way back when. Error messages in that era of GCC were _terrible_. Clang showed up with colorized error messages and ASCII art arrows and it felt like magic. So, sure, licensing alone would have been a fine reason for base to do what it did, but I don't think it's fair to characterize it as _just_ licensing. GCC has made huge improvements since then, but those are only visible in ports (which has always had and continues to have modern GCC). Which I guess you could argue makes it a licensing issue? :-)
I disagree; I think clang set a trend and now GCC's error message are worse than they used to be. In the recent days I've seriously considered patching them out because I'm getting really tired of the wall of text of useless suggestions, macro expansion, etc. that hides the actual error. 99% of the time I just need to see which line my error originates from (before any macro expansion) and I can follow the chain manually in the remaining 1% of cases.
What's happening now is that I have a line with an error, and I get 50 lines of trash output among which the actual error is buried. And trying to jump to the error in my editor has me jump through headers, #include rows, and other garbage, sometimes missing the original error line entirely!
It's ridiculous. The suggestions are also largely either wrong or so obvious that they have only negative value. It's just clutter. Same goes for the ascii art arrows. Just clutter, making it harder to see relevant things.
I can see these messages being helpful for a total newbie who's still acquainting themselves with the standard library and figuring out the basics of the language, but for me (writing C daily for a living, and as a hobby for the past 15+ years) it's just getting in the way.
But the clang switch was not motivated by its C++ error messages, to my knowledge.
The default colour is restored after the newline, rather than before it.
* https://github.com/llvm-mirror/clang/blob/6803cc1958b56e0bd5...
I have recently set DECSCNM on in my terminal(s), which inverts everything, effectively swapping the foreground and background colours. The clang error messages now come out with unsightly large streaks of extraneous colour, as freshly erased lines caused by scrolling fill with the colour that clang has not yet turned off. clang was always doing this. But when it's the background colour it's more visible.
It would be such a simple fix, that's actually in line with code elsewhere in the same class. I wonder how many years it will take to get it changed.
I have heard that the LLD (LLVM linker) is much faster than either ld.bfd or ld.gold.
Indeed- "external toolchain" includes gcc6[0] and gcc9[1] ports that can be used specifically for building the FreeBSD base system. These are mostly easy to use, install the flavor for whatever architecture you're building and specify CROSS_TOOLCHAIN=<arch>-gcc6 when you build. More/better/complete information (and examples!) at [2].
[0] https://www.freshports.org/devel/freebsd-gcc6
lapack, for example, has USES=fortran[1]. That invokes Uses/fortran.mk[2] and accepts the ports-default fortran compiler, FORTRAN_DEFAULT, which is definedin bsd.default-versions.mk[3] as gfortran (GCC).
[1]: https://svnweb.freebsd.org/ports/head/math/lapack/Makefile?r...
[2]: https://svnweb.freebsd.org/ports/head/Mk/Uses/fortran.mk?rev...
[3]: https://svnweb.freebsd.org/ports/head/Mk/bsd.default-version...
It's as if MacOS decided to stop shipping bash by default. Of course you'll still be able to install it yourself, but it's not part of the OS anymore and you can't rely on it being available and supported.
FreeBSD is not Linux, it's a full OS, not just a kernel. There's a very clear line between what's part of the base system and what's not.
More precisely, it’s as if macOS stopped shipping GCC in the CLT.
Oh wait, they did exactly that already, the last one being gcc 4.2 on Darwin 11, after that a GCC command is still present but it’s just a front to llvm.
https://github.com/archmac/packages/blob/master/core/apple-g...
They switched from tcsh to bash, so it's not out of the question.
edit: looks like tcsh is still available, but not the default.
That excludes the bulk of this site's readers.
Edit: This comment was not meant to be snarky.
Maybe we could compromise with "FreeBSD has removed GCC from its base system" or something similar.
I think this would make the best headline.
Which would make the headline that is most in accordance with the guidelines here:
"remove GCC 4.2.1 build infrastructure"
I think it's significant news, and I have no connection to FreeBSD. It's a significant milestone for Clang, which makes it significant news to C programmers.
> It's not some sort of war.
Well, these compilers are competing with each other. It's a bit like the browser war, such as it is. If there were a respectable BSD-licensed browser, I'm sure the various FreeBSD-on-desktop distros would favour it.
> It's not even much of a change, considering that the actual concrete change, switching compilers, happened a while ago.
As a nail in the coffin moment I'd say it's still significant.
Imagine this:
"Microsoft has removed Notepad from Windows!"
"You dummy, no it hasn't; you can still get a Notepad for Windows from the Microsoft Store! Microsoft only removed it from the base installation of Windows, not from Windows as such."
Doh? If that happened, you would no longer be able to rely on any installation of Windows to have Notepad.
Yes, they are -- your understanding was correct. The FreeBSD OS now exclusively builds with clang, and clang is also the compiler shipped with the system.
You can, of course, still install GCC, and many other packages, from the ports tree, but it is no longer part of the OS.
Title was clear to me - yes, perhaps more clear as you say it though.
Is there a reason that you’d be relying on what’s included in the FreeBSD base system? If I were building a piece of software and developing a FreeBSD target for it, I’d probably just write a port manifest for it and contribute it; and in so doing, I can have my port manifest declare a dependency on the GCC port.
Just like if I create an Ubuntu PPA, I can depend on Ubuntu system packages, or even other people’s PPAs. (And it’s even less arduous than the Ubuntu PPA case, because PPAs are all their own third-party package repos that you have to add, while Ports is one flat namespace. As long as it’s “in ports”, you can depend on it without asking the user to do the equivalent of `sudo apt-repository add ...`)
If you don't have execute permissions, then, well, you're not going to be "installing" any software in any practical sense—you might be able to compile sources or copy files around, but you can't make the resulting binaries executable. Nor are you going to be doing much software development, for the same reason.
So why, at that point, would you need a compiler to exist on the box? It'd be like having GCC in a busybox installation.
Savy UNIX IT can take care of it, apparently the experience of what meant working in UNIX shops with thin terminals is now lost.
% bash -version
=> GNU bash, version 3.2.57(1)-release (x86_64-apple-darwin19)
P.S. You can disagree with me and state your point, but you do not have to downvote me.
As others have pointed out "FreeBSD has removed GCC from the. base system" would be a better title.
Is there some tipping point where gcc has too few significant end users to stay relevant? I'd hate to lose the diversity.
It is primarily non-GPL platforms/systems/companies that are switching to clang for it's much friendlier license.
Edit: "~now" rather than "now"
"With support for asm goto, the mainline Linux kernel for x86_64 is now buildable (and bootable) with Clang 9. Other architectures that don’t require CONFIG_JUMP_LABEL=y such as arm, aarch64, ppc32, ppc64le, (and possibly mips) have been supported with older releases of Clang (Clang 4 was first used with aarch64).
The Android and ChromeOS Linux distributions have moved to building their Linux kernels with Clang, and Google is currently testing Clang built kernels for their production Linux kernels."
That was in September 2019
As clang implements more and more of GCC's extensions, though, I could see things reaching that tipping point.
Sony, Apple, IBM, and plenty of other embedded vendors don't contribute 100% their improvements back to LLVM.
Personally I don't care, as I am mostly a commercial software user nowadays.
Just making the point that LLVM victory over GCC, might not turn out as FOSS supporters expect.
IIRC powerpc32 is currently using clang with old bfd ld, but lld in llvm 10 may be quickly reaching the point where it's suitable for powerpc32 as well.
Care to elaborate?
We're maintaining sparc64 in Debian Ports and we have smashed quite a number of bugs in the SPARC backend in LLVM.
Are there any issues you are seeing?
What's missing for sparc64 in Clang? We have Clang on sparc64 in Debian Ports.
My memory here is fuzzy because I'm very much not interested in Sparc, but, as far as technical shortcomings: there are integrated-assembler (ias) pieces missing; ld.lld support is extremely incomplete; it's missing a working stack unwinder. If you look for Sparc work in Clang upstream, it becomes obvious that it's not active.
The biggest thing missing was interest (and associated time and resources). People have had 6-12 months to step up if they wanted to work on moving platforms off of GCC4.2.1, and unlike for every other tier 2-3 arch formerly on GCC, no one showed up to work on Sparc.
> We have Clang on sparc64 in Debian Ports.
As in you can compile Clang on sparc (using GCC / binutils as the system compiler), or as in you can actually build Debian for sparc64 using Clang?
Here's some more context around missing pieces:
https://svnweb.freebsd.org/base?view=revision&revision=35446...
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233405
Initially, we were building Clang only. But we're also now building Clang using itself, i.e. a stage2 compiler.
There are issues though when building Clang with Clang with Gold as the linker. It works fine with BFD though.
We are not building the whole archive with Clang though. But all Rust packages are built on sparc64 as well which uses the LLVM backend.
Thanks for the links. I'll look into them. Maybe we find some more bugs than can be fixed on SPARC in LLVM/Clang.
Edit: From your first link:
> "Contemporary GCC does not build and there is currently no indication that anyone is going to address these issues."
That's odd. We're building all GCC versions on Debian/sparc64. It's still a maintained backend in GCC, after all.
This is mostly just an observation, I'm not sure how I feel about it. Compiler diversity doesn't seem more important than OS diversity to me, and none of these feel particularly important. As a user I was happy to switch to clang for the better error messages.
- just like chrome becoming the only browser, one compiler isn't good either. The implementation starts to define the language instead of the standard
- separate projects can use different methodologies and tradeoffs.
- if there is a bug or exploit that only applies to that complier and not all programs
I don't think we should have 20 major C++ compilers but we shouldn't have one.
Apparently not in practice, because LLVM's copyleft license hasn't stopped large amounts of free software from being created (for example, rustc).
Companies like Apple prefer BSD specifically because they want the option of taking someone to court if they want to.
GPL tries to make the world better, by increasing the free software commons. BSD tries to be neutral, but one should not be neutral in a war of good vs. evil: (cf. Ireland, Spain, Sweden & Switzerland in the Second World War or Sweden during the Cold War).
Like gcc has built on mac for longer than Apple (then next step) was using gcc.
I think under those conditions, the FSF's boycott was fair.
The earliest snapshot[1] of opensource.apple.com on the Internet Archive suggests that the compiler sources were available (under "cc") as of October 12, 2000.
Although that snapshot suggests the first release was version cc-792, I can't find older than cc-798 on the site today. But the NOTES file[2] is interesting, detailing NeXT's/Apple's earlier changes including release codenames. (3/19/97: "This is the first fully functional compiler for the PowerPC.")
I would guess that the earliest Apple shipped gcc was with ProjectBuilder in the Mac OS X Developer Preview which was in 1999. Maybe things start to get blurry with NeXT, WebObjects, etc. but it doesn't _seem_ like Apple was shirking it's responsibilities under the GPL.
0: https://apple.slashdot.org/story/00/03/17/1656240/apple-plan...
1: https://web.archive.org/web/20001012121451/http://www.openso...
2: https://opensource.apple.com/source/cc/cc-798/NOTES.auto.htm...
Its was NextStep. They tried for a long time to ship a proprietary GCC, then a proprietary frontend with the rest of gcc, then finally backed down and released the frontend. This was all in the early nineties.
NextStep was trying to link a new frontend at the same level as C, C++, or Fortran, and just give the middle finger to the terms of the GPL.
The truth is that free licences gave us the iPhone, the PlayStation, etc.
Also, a monoculture isn't great for security/exploits.
On a per-kernel basis, absolutely not, even before we consider Androids.
https://en.wikipedia.org/wiki/List_of_products_based_on_Free...
You have no idea how many places FreeBSD actually runs in.
To quote:
> > Gcc is still the default on GNU/Linux systems which are orders of magnitude more mainstream than FreeBSD.
> So what? Clang under OSX compiling both OSX and iOS projects is far more widespread.
I'm asserting that there are more Linux kernels compiled under GCC than there are OSX kernels running Clang (so macOS) compiling OSX and iOS projects.
I think that's on pretty solid ground.
All I'm saying is that, because of servers, there are more GCC'ed Linux kernels than there are Clang'ed macOS kernels, and this will probably remain true indefinitely.
If AWS starts Clangin' on their Linux kernels, then maybe not. The trend toward Clang is pretty clear at this point; could happen.
Yes. There will be a tipping point, as with any economic theory of sustainability. No, we wont reach that tipping point in the foreseeable future. It is still extremely widely used, and continue to be actively developed.
LLVM and GCC will likely enjoy duopoly in the Open Source Space for a very long time.
I think GCC will remain relevant for as long as there are people who care about free software.
https://android-review.googlesource.com/q/topic:%22rm_gcc%22...
Apparently the reason for this is GCC's move to GPL v3. So FreeBSD was forced to remain using GCC 4.2.1, GPL v2.
As far as Clang goes, is FreeBSD tracking/upgrading to newer Clang versions? I assume the answer is yes but I don't know.
Clang/LLVM was imported into FreeBSD base in FreeBSD 9, released in 2012[1]. I don't believe it was the system compiler for any arch at that time, but could be wrong. In FreeBSD 10 (2014) it became the default compiler for amd64/i386[2].
Gcc still produces better=faster machine code. So why the hate? Are there political reasons involved?
GCC is more spaghetti than Clang, less modular. But yeah, it's mostly political/business/legal related. A lot of people hate copyleft with a passion like Apple and Google, who hire lots of people to work on LLVM.
The idea seems to be that LLVM will eventually catch up to GCC on quality of generated code.
That's totally fine if you're talking about a workstation, laptop, or server. But it's a big security risk on an embedded system like a smart TV, mobile phone, or game console - both from an IP protection point of view, and also from a botnet/pwning point of view.
FreeBSD (and others presumably) don't want their users to need to worry about accidentally installing something from the core system and finding themselves in violation of the GPL.
- ld.bfd on 32-bit powerpc (should go when lld 10.0 is in FreeBSD)
- GNU as on i386 and amd64 (expected by some ports, and needed to assemble one file in the base system on amd64)
- objdump (expected by some ports, but not used in the base system)
These should be removed in FreeBSD 13.0. More details are on our Wiki, https://wiki.freebsd.org/GPLinBase