The Linux kernel started to include binary blobs in 1996.[9] The work to clear out the binary blobs began in 2006 with gNewSense's find-firmware and gen-kernel. This work was taken further by the BLAG Linux distribution in 2007 when deblob and Linux-libre was born.[10][11]
Linux-libre was first released by the Free Software Foundation Latin America (FSFLA), then endorsed by the Free Software Foundation (FSF)[12] as a valuable component for the totally free Linux distributions. It became a GNU package in March 2012.[13] Alexandre Oliva is the project maintainer.
Proprietary firmware removal
The GNU logo with Freedo, Linux-libre's mascot
Methods
The removal process is achieved by using a script called deblob-main.[14] This script is inspired by the one used for gNewSense. Jeff Moe made subsequent modifications to meet certain requirements for its use with the BLAG Linux and GNU distribution. There is another script called deblob-check,[15] which is used to check if a kernel source file, a patch or a compressed sources file still contains software which is suspected of being proprietary.
Benefits
Aside from the primary intended effect of running a system with only free software, the practical consequences of removing device firmware that a user is not allowed to study or modify has both positive and negative effects.
Removal of device firmware can be considered an advantage for security and stability.
When the firmware cannot be audited for bugs, security problems, and malicious functions such as backdoors, or when the firmware cannot be fixed by the Linux kernel maintainers themselves, even if they know of problems, it is possible for the entire system to be compromised by a malicious firmware. Without the ability to perform a security audit on manufacturer-provided firmware, even an innocent bug could undermine the safety of the running system.[16]
Hardware support
Removing proprietary firmware from the kernel will cause loss of functionality of certain hardware that does not have a free software replacement available.[8] This affects certain sound, video, TV tuner, and network cards, especially in the case of recent Intel Wi-Fi cards and recent Nvidia graphics cards, as well as some other devices. When possible, free software replacement firmware is provided as a substitute,[8][17] such as the openfwwf[18] for b43, carl9170[19] and ath9k_htc[20]wireless card drivers. Reviewer Ramces Red summarized the issue with Linux-Libre, writing, "it does not always have the best hardware support."[8]
Microcode
Linux-libre does not suggest the user install CPU microcode update bundles, since the code is proprietary.[21] Microcode update bundles have been used in the mainline Linux kernel version, among other things, to mitigate hardware vulnerabilities.[22]
Availability
The source code and precompiled packages of the deblobbed Linux kernel are available directly from the distributions which use the Linux-libre scripts. Freed-ora is a subproject which prepares and maintains RPM packages based on Fedora.[23] There are also precompiled packages for Debian[24] and derived distributions such as Ubuntu.[25]
These distros do not use the packaged Linux-libre but instead completely remove binary blobs from the mainline Linux kernel. The source is then compiled and the resulting free Linux kernel is used by default in these systems:
Debian (May install binary blobs with the installer or kernel by default.[29][30])
^Free Software Foundation. "Linux (BLOB free version)". Free Software Directory. Archived from the original on November 4, 2023. Retrieved December 6, 2011. [...] in the interest of freedom, we are providing a link to a version of the kernel in which this proprietary code has been removed so that it is entirely free software
^Free Software Foundation Latin America. "How it is done". Linux-libre, Free as in Freedo. Archived from the original on November 4, 2023. Retrieved December 6, 2011.
^Millan, Robert (April 23, 2009). "Linux-libre for Debian Lenny". [Debian Mailing Lists] Announcements for developers (Mailing list). Retrieved May 12, 2009. This is to announce that Debian packages of Linux-libre [...] are now available for Lenny users who want to use them [...]
^Fossi, Damián (August 24, 2009). "Linux-libre: Resumen del proyecto" [Linux-libre: Project summary]. Forja (in Spanish). Archived from the original on February 24, 2010. Retrieved December 6, 2001.