On 2026-02-26 11:43:29 +0200 (+0200), Wouter Verhelst wrote: [...]
However, if you do want to refuse non-free firmware blobs on Debian, here is what you can do:(instructions on how to disable non-free firmware go here)
[...]I would clarify it's "refuse *loading* non-free firmware" since, as discussed ad nauseam, it doesn't magically stop the system from relying on firmware that came pre-loaded on hardware or got manually installed by the user through other means.
The instructions, when written, should also make it clear that not updating existing firmware may (probably does) mean simply running with outdated copies containing known vulnerabilities, so the user is still encouraged take some additional steps to patch those on their own for safety reasons.
-- Jeremy Stanley
signature.asc
Description: PGP signature

