# Should commercial actors ship telemetry in nixpkgs?

**URL:** https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279
**Category:** Development
**Created:** [February 14, 2025, 9:26am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279 "2025-02-14T09:26:44Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![anon67371346](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/a/db5fbb/32.png) [@anon67371346](https://discourse.nixos.org/u/anon67371346)
#### Post date: [February 14, 2025, 9:26am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/1 "2025-02-14T09:26:44Z")

</div>

I’m not sure where to put this, so I’ll put it here.

The events around [devenv 1.4 sending telemetry by default](https://discourse.nixos.org/t/devenv-1-4-generating-nix-developer-environments-using-ai/60235) to train their AI model has demonstrated (at least for me) that we need some clarification on the leeway that commercial actors should have on `nixpkgs` and it’s ecosystem.

My personal opinion is that `nixpkgs` is a community project.  
Commercial actors are of course welcome to contribute and maintain their own packages, but the wishes and needs of the community should always have precedence over their commercial interest when doing so. For me, the current situation shows a clear conflict of interest that we, as a community, should address.

There have already been some suggestions that we might want to pick up on, eg. @quasigod has suggested that we add a general telemetry related option to `nixpkgs` that packages / modules must abide by. I could also see a more formal stance on the matter in terms of an RFC (which may of course go either way).

Generally, I’d love some form of consensus on where we as a community want to land on this topic.

> <https://github.com/NixOS/nixpkgs/pull/381817>
>
> Packages and modules in nixpkgs have a proven history of disabling / opting out …of telemetry on behalf of their users.
> I believe it's reasonable to assume the same would be expected from the \`devenv\` package.
> 
> 
> 
> \- Built on platform(s)
> - \[x\] x86\_64-linux
> - \[\] aarch64-linux
> - \[\] x86\_64-darwin
> - \[\] aarch64-darwin
> \- For non-Linux: Is sandboxing enabled in \`nix.conf\`? (See \[Nix manual\](https://nixos.org/manual/nix/stable/command-ref/conf-file.html))
> - \[\] \`sandbox = relaxed\`
> - \[x\] \`sandbox = true\`
> \- \[x\] Tested, as applicable:
> - \[NixOS test(s)\](https://nixos.org/manual/nixos/unstable/index.html#sec-nixos-tests) (look inside \[nixos/tests\](https://github.com/NixOS/nixpkgs/blob/master/nixos/tests))
> - and/or \[package tests\](https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#package-tests)
> - or, for functions and "core" functionality, tests in \[lib/tests\](https://github.com/NixOS/nixpkgs/blob/master/lib/tests) or \[pkgs/test\](https://github.com/NixOS/nixpkgs/blob/master/pkgs/test)
> - made sure NixOS tests are \[linked\](https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#linking-nixos-module-tests-to-a-package) to the relevant packages
> \- \[\] Tested compilation of all packages that depend on this change using \`nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD"\`. Note: all changes have to be committed, also see \[nixpkgs-review usage\](https://github.com/Mic92/nixpkgs-review#usage)
> \- \[x\] Tested basic functionality of all binary files (usually in \`./result/bin/\`)
> \- \[25.05 Release Notes\](https://github.com/NixOS/nixpkgs/blob/master/nixos/doc/manual/release-notes/rl-2505.section.md) (or backporting \[24.11\](https://github.com/NixOS/nixpkgs/blob/master/nixos/doc/manual/release-notes/rl-2411.section.md) and \[25.05\](https://github.com/NixOS/nixpkgs/blob/master/nixos/doc/manual/release-notes/rl-2505.section.md) Release notes)
> - \[\] (Package updates) Added a release notes entry if the change is major or breaking
> - \[\] (Module updates) Added a release notes entry if the change is significant
> - \[\] (Module addition) Added a release notes entry if adding a new NixOS module
> \- \[\] Fits \[CONTRIBUTING.md\](https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md).
> 
> \<!--
> To help with the large amounts of pull requests, we would appreciate your
> reviews of other pull requests, especially simple package updates. Just leave a
> comment describing what you have tested in the relevant package/service.
> Reviewing helps to reduce the average time-to-merge for everyone.
> Thanks a lot if you do!
> 
> List of open PRs: https://github.com/NixOS/nixpkgs/pulls
> Reviewing guidelines: https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#reviewing-contributions
> \--\>
> 
> \---
> 
> Add a :+1: \[reaction\] to \[pull requests you find important\].
> 
> \[reaction\]: https://github.blog/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/
> \[pull requests you find important\]: https://github.com/NixOS/nixpkgs/pulls?q=is%3Aopen+sort%3Areactions-%2B1-desc

> <https://github.com/NixOS/nixpkgs/pull/381981>
>
> This reverts commit 1aca3c42132e5231776c7199a78d6aec184be729.
> 
> Since I'm the m…aintainer and author of this package, I was never asked if I agree with this change and I don't.
> 
> It's going to make it really hard to improve the generation without telemetry, otherwise we wouldn't have done it.
> 
> 
> \<!--
> ^ Please summarise the changes you have done and explain why they are necessary here ^
> 
> For package updates please link to a changelog or describe changes, this helps your fellow maintainers discover breaking updates.
> For new packages please briefly describe the package or provide a link to its homepage.
> \--\>
> 
> \## Things done
> 
> 
> 
> \- Built on platform(s)
> - \[\] x86\_64-linux
> - \[\] aarch64-linux
> - \[\] x86\_64-darwin
> - \[\] aarch64-darwin
> \- For non-Linux: Is sandboxing enabled in \`nix.conf\`? (See \[Nix manual\](https://nixos.org/manual/nix/stable/command-ref/conf-file.html))
> - \[\] \`sandbox = relaxed\`
> - \[\] \`sandbox = true\`
> \- \[\] Tested, as applicable:
> - \[NixOS test(s)\](https://nixos.org/manual/nixos/unstable/index.html#sec-nixos-tests) (look inside \[nixos/tests\](https://github.com/NixOS/nixpkgs/blob/master/nixos/tests))
> - and/or \[package tests\](https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#package-tests)
> - or, for functions and "core" functionality, tests in \[lib/tests\](https://github.com/NixOS/nixpkgs/blob/master/lib/tests) or \[pkgs/test\](https://github.com/NixOS/nixpkgs/blob/master/pkgs/test)
> - made sure NixOS tests are \[linked\](https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#linking-nixos-module-tests-to-a-package) to the relevant packages
> \- \[\] Tested compilation of all packages that depend on this change using \`nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD"\`. Note: all changes have to be committed, also see \[nixpkgs-review usage\](https://github.com/Mic92/nixpkgs-review#usage)
> \- \[\] Tested basic functionality of all binary files (usually in \`./result/bin/\`)
> \- \[25.05 Release Notes\](https://github.com/NixOS/nixpkgs/blob/master/nixos/doc/manual/release-notes/rl-2505.section.md) (or backporting \[24.11\](https://github.com/NixOS/nixpkgs/blob/master/nixos/doc/manual/release-notes/rl-2411.section.md) and \[25.05\](https://github.com/NixOS/nixpkgs/blob/master/nixos/doc/manual/release-notes/rl-2505.section.md) Release notes)
> - \[\] (Package updates) Added a release notes entry if the change is major or breaking
> - \[\] (Module updates) Added a release notes entry if the change is significant
> - \[\] (Module addition) Added a release notes entry if adding a new NixOS module
> \- \[\] Fits \[CONTRIBUTING.md\](https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md).
> 
> \<!--
> To help with the large amounts of pull requests, we would appreciate your
> reviews of other pull requests, especially simple package updates. Just leave a
> comment describing what you have tested in the relevant package/service.
> Reviewing helps to reduce the average time-to-merge for everyone.
> Thanks a lot if you do!
> 
> List of open PRs: https://github.com/NixOS/nixpkgs/pulls
> Reviewing guidelines: https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#reviewing-contributions
> \--\>
> 
> \---
> 
> Add a :+1: \[reaction\] to \[pull requests you find important\].
> 
> \[reaction\]: https://github.blog/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/
> \[pull requests you find important\]: https://github.com/NixOS/nixpkgs/pulls?q=is%3Aopen+sort%3Areactions-%2B1-desc

---

<div class="post-metadata">

### Author: ![purepani](https://discourse.nixos.org/user_avatar/discourse.nixos.org/purepani/32/10105_2.png) [@purepani](https://discourse.nixos.org/u/purepani)
#### Post date: [February 14, 2025, 9:44am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/2 "2025-02-14T09:44:47Z")

</div>

I don’t feel that managing telemetry is within the scope of nixpkgs. Whatever the package does by default should probably just be done.  
That being said, this is my assumption of the scope of nixpkgs, and certainly, if we want that to be in scope, then we should enforce it.

I agree having a globally named argument in nixpkgs is a good idea though. Maybe not “must” have, but certainly optionally have.

---

<div class="post-metadata">

### Author: ![j-k](https://discourse.nixos.org/user_avatar/discourse.nixos.org/j-k/32/6105_2.png) [@j-k](https://discourse.nixos.org/u/j-k)
#### Post date: [February 14, 2025, 10:17am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/3 "2025-02-14T10:17:18Z")

</div>

The particular software in question is following the [https://consoledonottrack.com/](https://consoledonottrack.com/) model. At the very least we can have a nixpkgs level configuration for this like `nixpkgs.config.allowUnfree`.  
We could quite uncontrovercially add `nixpkgs.config.doNotTrack` or `nixpkgs.config.consoleDoNotTrack`. Default being `null`/unset

In this case devenv could check if `nixpkgs.config.doNotTrack` is true and otherwise not add the env var to have the “opt out” model where false is treated as false and unset is also treated as false.  
For other packages they could have just false be tracking allowed and true + unset have tracking disabled.

There may be concerns for packages with many dependencies where it’d require excessive rebuilds but for leaf packages it shouldn’t be a problem.

---

<div class="post-metadata">

### Author: ![fgaz](https://discourse.nixos.org/user_avatar/discourse.nixos.org/fgaz/32/103_2.png) [@fgaz](https://discourse.nixos.org/u/fgaz)
#### Post date: [February 14, 2025, 10:39am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/4 "2025-02-14T10:39:12Z")

</div>

I very much agree with you @anon67371346, thanks for bringing this up. `nixpkgs` should first and foremost serve its users, and this includes removing [anti-features](https://f-droid.org/docs/Anti-Features/).

Regarding tracking in specific, I absolutely think it’s an anti-feature and should be disabled by default. In my opinion non-consensual\[1\] approaches like `DO_NOT_TRACK` are backwards. The right (meaning in the interest of users) thing to do would be to subject tracking to explicit consent\[2\]. When this is not easily doable (for example if the package does not provide a way to disable the tracking by default) the tracking code should just be stripped.

* * *

1. “They didn’t say no!” ≠ consent 

2. I like the definition from GDPR article 4: ‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

---

<div class="post-metadata">

### Author: ![polygon](https://discourse.nixos.org/user_avatar/discourse.nixos.org/polygon/32/4139_2.png) [@polygon](https://discourse.nixos.org/u/polygon)
#### Post date: [February 14, 2025, 11:02am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/5 "2025-02-14T11:02:05Z")

</div>

For this software in particular, disabling telemetry is very much a “trust me” thing anyways.

Since the AI does run on a server, whether or not you have telemetry enabled, your request needs to go there to be processed. All that `DO_NOT_TRACK` is doing is to append a URL parameter `disable_telemetry` with the selected value.

> <https://github.com/cachix/devenv/blob/1235cd13f47df6ad19c8a183c6eabc1facb7c399/devenv/src/devenv.rs#L214>

Can have one opinion or another on the defaults being set. But actually having this option to disable telemetry is probably better than 99.9% of the other AI tools out there. So please consider this before this gets blown out of proportion. If this was just being done and the option to disable telemetry was never offered, I am 99% certain no one would have batted an eye.

---

<div class="post-metadata">

### Author: ![j-k](https://discourse.nixos.org/user_avatar/discourse.nixos.org/j-k/32/6105_2.png) [@j-k](https://discourse.nixos.org/u/j-k)
#### Post date: [February 14, 2025, 11:04am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/6 "2025-02-14T11:04:09Z")

</div>

To track some of our history of adjusting telemetry/tracking:

- package level
  - switch opt out default
    - [python-module: safety](https://github.com/NixOS/nixpkgs/blob/a6015afd2a2215d7ddd5a635629c903246e0d56d/pkgs/development/python-modules/safety/default.nix#L43-L51)
      - default value in flags switched

  - force disabled
    - [bruno](https://github.com/NixOS/nixpkgs/blob/e2e9af3b89eef380bc5a776867f9bf662355daa9/pkgs/by-name/br/bruno/package.nix#L67-L69)
      - [not configurable - github.com/usebruno/bruno issue #337](https://github.com/usebruno/bruno/issues/337)
      - [seems “anonymous” - posthog - github.com/usebruno/bruno](https://github.com/usebruno/bruno/blob/81930f6fe63e146167d971198001ca03f92f83c4/packages/bruno-app/src/providers/App/useTelemetry.js)

    - [driftctl](https://github.com/NixOS/nixpkgs/blob/a6015afd2a2215d7ddd5a635629c903246e0d56d/pkgs/by-name/dr/driftctl/package.nix#L28)
      - [configurable, but only at build time](https://github.com/snyk/driftctl/blob/7f017992cc3bf404587a3047317a749f1927092e/build/build.go#L5-L9)
      - also stops the version check which we quite often turn off too

    - [avalonia](https://github.com/NixOS/nixpkgs/blob/bf4cdb20643867328e453067faf1a65b796c05ba/pkgs/by-name/av/avalonia/package.nix#L145-L146)
      - [configurable with an env var](https://github.com/AvaloniaUI/Avalonia/wiki/Telemetry)
      - [implementation of telemetry is in a closed source dependency “Avalonia.BuildServices”](https://github.com/AvaloniaUI/Avalonia/discussions/16878)

    - [maptool](https://github.com/NixOS/nixpkgs/blob/bf4cdb20643867328e453067faf1a65b796c05ba/pkgs/games/maptool/default.nix#L75-L78)
      - not configurable beyond overriding build configuration
      - [seems just for error reporting](https://github.com/RPTools/maptool/blob/7594133ad17f86fd3390bb7d399f84d3e0c49347/src/main/java/net/rptools/maptool/client/swing/MapToolEventQueue.java#L66)

- service/module level
  - setting available in config and default disabled
    - [ferretdb](https://github.com/NixOS/nixpkgs/blob/ed3b17fde5b700c018945e3d6c3e1db2d16bf206/nixos/modules/services/databases/ferretdb.nix#L45)
      - [details on the telemetry - https://docs.ferretdb.io/telemetry/](https://docs.ferretdb.io/telemetry/)

    - [qdrant](https://github.com/NixOS/nixpkgs/blob/ed3b17fde5b700c018945e3d6c3e1db2d16bf206/nixos/modules/services/search/qdrant.nix#L58)
      - general `settings` attrset but default and example both have `telemetry_disabled = true;`
      - [details on the telemetry - https://qdrant.tech/documentation/guides/usage-statistics/](https://qdrant.tech/documentation/guides/usage-statistics/)

    - [code-server](https://github.com/NixOS/nixpkgs/blob/ed3b17fde5b700c018945e3d6c3e1db2d16bf206/nixos/modules/services/web-apps/code-server.nix#L166)
      - [details on the telemetry - https://code.visualstudio.com/docs/getstarted/telemetry](https://code.visualstudio.com/docs/getstarted/telemetry)

    - [mattermost](https://github.com/NixOS/nixpkgs/blob/ed3b17fde5b700c018945e3d6c3e1db2d16bf206/nixos/modules/services/web-apps/mattermost.nix#L499)
      - [details on the telemetry - https://docs.mattermost.com/manage/telemetry.html#error-and-diagnostics-reporting-feature](https://docs.mattermost.com/manage/telemetry.html#error-and-diagnostics-reporting-feature)

This is a non-comprehensive list just what I put together over 40 mins. From what I can gather when we make an option available in a service as far as I can tell we always default to disabling it.  
(Just to mention, in home-manager there are some general settings which give examples of disabling telemetry but don’t set anything by default)

It’s not going to be possible to track the packages & services which have telemetry and the maintainer is unaware, or which have telemetry and the maintainer purposefully left it’s default settings, or packages which have telemetry but are disabled default opt-in or at least ask the user upstream.  
Some packages could be purposely left with telemetry enabled by default because it logs out “To disable telemetry do XYZ” during initial (or every) use.

---

<div class="post-metadata">

### Author: ![Nebucatnetzer](https://discourse.nixos.org/user_avatar/discourse.nixos.org/nebucatnetzer/32/5770_2.png) [@Nebucatnetzer](https://discourse.nixos.org/u/Nebucatnetzer)
#### Post date: [February 14, 2025, 11:15am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/7 "2025-02-14T11:15:29Z")

</div>

I like this approach but the default should be do not track.

---

<div class="post-metadata">

### Author: ![cafkafk](https://discourse.nixos.org/user_avatar/discourse.nixos.org/cafkafk/32/32427_2.png) [@cafkafk](https://discourse.nixos.org/u/cafkafk)
#### Post date: [February 14, 2025, 11:18am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/8 "2025-02-14T11:18:17Z")

</div>

Domen should not be allowed to revert disabling telemetry in nixpkgs, there is a clear conflict of interest here (again, _sigh_), and majority of nixpkgs users don’t want telemetry, and they come before Domen.

If telemetry is not removed, it will quite frankly be a massive failure of putting corporate and established voices interests over users.

---

<div class="post-metadata">

### Author: ![vcunat](https://discourse.nixos.org/user_avatar/discourse.nixos.org/vcunat/32/11_2.png) [@vcunat](https://discourse.nixos.org/u/vcunat)
#### Post date: [February 14, 2025, 11:30am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/9 "2025-02-14T11:30:23Z")

</div>

> [@cafkafk](#):
>
> majority of nixpkgs users don’t want telemetry

Do you have some good data for the statement? Or in this case that majority of users of Domen’s package don’t want the telemetry. I don’t mean to dispute it, but it’s simple to just say things. I wouldn’t dare to claim what users want without first at least running a poll or something.

Note that the one who merged the disablement then encouraged Domen to revert, so…

---

<div class="post-metadata">

### Author: ![marshmallow](https://discourse.nixos.org/user_avatar/discourse.nixos.org/marshmallow/32/35237_2.png) [@marshmallow](https://discourse.nixos.org/u/marshmallow)
#### Post date: [February 14, 2025, 11:30am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/10 "2025-02-14T11:30:38Z")

</div>

> [@cafkafk](#):
>
> If telemetry is not removed, it will quite frankly be a massive failure of putting corporate and established voices interests over users.

The instant self merge is concerning. I recommend devenv use its own method for distributing their product if it wants to maintain this level of control over how it is used by people.

---

<div class="post-metadata">

### Author: ![drakon](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/d/ac91a4/32.png) [@drakon](https://discourse.nixos.org/u/drakon)
#### Post date: [February 14, 2025, 11:32am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/11 "2025-02-14T11:32:55Z")

</div>

I think it’s worth mentioning that the user who committed the original change told Domen that they could revert it if they wished

> <https://github.com/NixOS/nixpkgs/pull/381817#issuecomment-2658749089>
>
> \> Hey @GaetanLepage why was this merged without my consent? I'm the maintainer o…f the package and this doesn't allow the users to allow telemetry data to be processed, which is the only way we can improve the generation.
> 
> Sorry @domenkozar. This was indeed a mistake on my part. I thought that the change made sense for the nixpkgs repo. The correct thing would have been to wait for your approval.
> Feel free to revert this commit.

---

<div class="post-metadata">

### Author: ![j-k](https://discourse.nixos.org/user_avatar/discourse.nixos.org/j-k/32/6105_2.png) [@j-k](https://discourse.nixos.org/u/j-k)
#### Post date: [February 14, 2025, 11:37am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/12 "2025-02-14T11:37:29Z")

</div>

Then it would also be worth mentioning the revert PR was created 8:37 UTC and self merged 8:37 UTC  
the apology and offer to revert was 1h later at 9:38 UTC after it had already been reverted

No opinions on the timeline. IMO it’s fair to revert something which lacked sufficient prior discussion. I’m against self merging but also not a biggie IMO for a small revert.

---

<div class="post-metadata">

### Author: ![drakon](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/d/ac91a4/32.png) [@drakon](https://discourse.nixos.org/u/drakon)
#### Post date: [February 14, 2025, 11:38am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/13 "2025-02-14T11:38:14Z")

</div>

Guess it’s my fault for not looking at timestamps, sorry about that

---

<div class="post-metadata">

### Author: ![domenkozar](https://discourse.nixos.org/user_avatar/discourse.nixos.org/domenkozar/32/38357_2.png) [@domenkozar](https://discourse.nixos.org/u/domenkozar)
#### Post date: [February 14, 2025, 11:40am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/14 "2025-02-14T11:40:09Z")

</div>

> [@cafkafk](#):
>
> If telemetry is not removed, it will quite frankly be a massive failure of putting corporate and established voices interests over users.

The interest here is to improve the generation to give more accurate results over time.

Here’s the table of what we collect into an sqlite database:

```auto
CREATE TABLE `runs`(
	`id` INTEGER NOT NULL PRIMARY KEY,
	`source` TEXT NOT NULL,
	`duration_sec` INTEGER NOT NULL,
	`finished_at` TIMESTAMP NOT NULL,
	`devenv_nix` TEXT NOT NULL,
	`devenv_yaml` TEXT NOT NULL
);

```

The issue with AI models is that they are extremely unpredictable, so when you update to a newer model you need to understand if the results you’re getting are at least equally good.

That’s not an easy task to do, given that the output from AI is non-deterministic.

The interest here is that the results get more accurate over time and AI generation is something I pay out of my pocket and is offered for free.

Do you think that maybe users of devenv might benefit from the work we’re doing?

Or do you believe we have some ill intentions, and which?

Domen

---

<div class="post-metadata">

### Author: ![marshmallow](https://discourse.nixos.org/user_avatar/discourse.nixos.org/marshmallow/32/35237_2.png) [@marshmallow](https://discourse.nixos.org/u/marshmallow)
#### Post date: [February 14, 2025, 11:52am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/15 "2025-02-14T11:52:55Z")

</div>

> [@domenkozar](#):
>
> Or do you believe we have some ill intentions, and which?

From what I can see most are concerned about the precedent it sets for companies controlling a community project

---

<div class="post-metadata">

### Author: ![drakon](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/d/ac91a4/32.png) [@drakon](https://discourse.nixos.org/u/drakon)
#### Post date: [February 14, 2025, 11:53am UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/16 "2025-02-14T11:53:01Z")

</div>

> [@domenkozar](#):
>
> Do you think that maybe users of devenv might benefit from the work we’re doing?
> 
> Or do you believe we have some ill intentions, and which?

I think this is missing the point. I’m sure the telemetry is going to benefit users of devenv (or at least it’s supposed to), but the issue is that users may not even be aware that telemetry is being gathered and not opting-out isn’t exactly consent.

Regardless, I think there needs to be a clear policy within Nixpkgs with regards to how telemetry is handled (if at all possible for a package).

---

<div class="post-metadata">

### Author: ![fpletz](https://discourse.nixos.org/user_avatar/discourse.nixos.org/fpletz/32/344_2.png) [@fpletz](https://discourse.nixos.org/u/fpletz)
#### Post date: [February 14, 2025, 12:17pm UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/17 "2025-02-14T12:17:56Z")

</div>

I can’t find a privacy policy on data handling on the devenv website. According to GDPR principles, if user data is being collected, a privacy policy needs to be in place and users need to explicitly opt-in to data collection and retention. Only judging by the blog post about the AI feature there seems only opt-out without any indication that data is being collected which might be a breach of GDPR.

We shouldn’t redistribute software that doesn’t adhere to GDPR laws and general data protection principles. Everybody please keep in mind that devenv is likely not the only potential offender in nixpkgs, so a policy is IMHO needed.

---

<div class="post-metadata">

### Author: ![anon67371346](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/a/db5fbb/32.png) [@anon67371346](https://discourse.nixos.org/u/anon67371346)
#### Post date: [February 14, 2025, 12:25pm UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/18 "2025-02-14T12:25:52Z")

</div>

I just wand to point out that @domenkozar was technically within his rights to revert the change as he did, as per the [maintainer guidelines](https://github.com/NixOS/nixpkgs/blob/c7f06bb90f7e359e8c3fa3222396a6b8993e1305/maintainers/README.md).

> In case of conflict, the maintainer takes priority and is allowed to revert the changes.

Hence why, the issue before us is an issue of policy and not an issue of what an individual maintainer did or did not do at which point.

---

<div class="post-metadata">

### Author: ![anon67371346](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/a/db5fbb/32.png) [@anon67371346](https://discourse.nixos.org/u/anon67371346)
#### Post date: [February 14, 2025, 12:35pm UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/19 "2025-02-14T12:35:17Z")

</div>

> [@domenkozar](#):
>
> Or do you believe we have some ill intentions, and which?

This is going of topic a bit, but the said truth is: People do not care about your intentions.  
That’s not your fault though.  
Day in and day out, we (as a society) are barraged by corporate actors with the same corporate spiel of “All we want is to give you better product, all we want is your data. We won’t to anything bad, pinky promise!”. Most of those actors are shady and act out of a motivation that is mostly reflected in their shareholder profits.  
People are simply tired of having to be on the lookout, being on the defensive against a never ending onslaught. So when you bring that attitude into the FOSS space, which many perceive as a safe space, you are bound to get push back.  
If you want to win over the trust of such a community, a five line blog post is just not going to cut it. You’ll simply have to do better.

---

<div class="post-metadata">

### Author: ![glepage](https://discourse.nixos.org/user_avatar/discourse.nixos.org/glepage/32/35129_2.png) [@glepage](https://discourse.nixos.org/u/glepage)
#### Post date: [February 14, 2025, 12:45pm UTC](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279/20 "2025-02-14T12:45:06Z")

</div>

Yes, I invited Domen to revert the change (which he had already done when I sent the answer).  
I said that because it was illegitimate for me to merge the original PR. It had nothing to do with the actual patch, but the way it has been merged.

[Next page](https://discourse.nixos.org/t/should-commercial-actors-ship-telemetry-in-nixpkgs/60279.md?page=2)