Debian weighs eight options in vote on LLM usage
The Debian Project is voting on the usage of large language models (LLMs) to make contributions to the project. The first proposal, sent in late July by Matthias Geiger, would expressly forbid any contributions to Debian that are created by or with the assistance of LLMs. That kicked off a firestorm of discussion and a flood of alternate proposals. Debian developers are now voting on eight proposals in total that range from banning LLM-assisted contributions to explicitly approving them, as well as the standard "none of the above" option that would leave Debian with no agreed policy.
Debian and AI
While other distributions, such as Fedora and Gentoo, have settled their policies regarding AI-assisted contributions, Debian has held off on making a decision—though not for a lack of discussion. The topic has come up several times over the years without any resolution.
In 2024, Tiago Bortoletto Vaz worried
that Debian was "already facing negative consequences
" due to the use of
AI-generated content and wanted to gather input from Debian developers ahead of
a possible general resolution (GR) on the topic. The discussion led him to conclude
that the project was "far from consensus on an official Debian position
"
regarding the use of generative AI, and he did not pursue a GR.
In February 2026, Lucas Nussbaum opened
another discussion on the topic by proposing that Debian allow AI-assisted
contributions. He said that
people who admit to using AI were being attacked by "a group of people that
vehemently rejects AI
", and he wanted to find a middle ground for Debian to
move forward. The resulting
discussion was, in his
words, "generally civilized and interesting
", and he thought that a
GR might not be needed after all.
It's time
Last month, Geiger decided that one is needed after all. He said that it is
"time for Debian to make a statement regarding generative AI and LLM
usage
". He opted to skip ahead to officially submitting his GR proposal,
rather than testing the waters as others had done, because the topic had already
been discussed in detail. Once the dam broke, a flood of proposals followed. In
total, there are eight proposals for Debian's developers to consider, summarized
below, plus "none of the above".
- No LLM contributions to Debian via Social Contract. Geiger's option: it would amend Debian's Social Contract to expressly forbid any contributions to Debian created with the use of LLMs or other generative-AI tools. It does not apply to upstream projects that use LLMs or AI-related software (thus, packaging an application for AI-related development would be unaffected).
- Allow
AI-assisted contributions with conditions. Nussbaum's option: it expressly
allows AI-assisted contributions as long as the contributor follows a set of
conditions, including assuming full responsibility for technical merit,
security, license compliance, etc. It also requests, but does not require,
disclosure if "
a significant portion of a contribution is generated or substantially assisted by a tool
". The form of disclosure is left to the contributor. - Reject LLMs as
far as practical, update code of conduct. Proposed by Ian Jackson, this
option would amend Debian's
code of conduct to forbid the use of LLMs to create "
messages to humans
" such as bug reports, emails, discussions on Salsa, and even blog posts aggregated on Planet Debian. It requests that contributors "avoid the use of LLMs in their Debian work
", but concedes that a complete ban on LLM output is impractical. - Accept AI contributions for Debian-specific work. This option, proposed by Pierre-Elliott Bécue, expressly allows contributions created with or by generative-AI tools, with a set of conditions placing responsibility on the submitter.
- Responsible
use of generative AI. Under Marc Haber's option, Debian would issue a statement
describing its position as neither endorsing or prohibiting the use of
generative-AI tools in Debian, and says that use of such tools "
is neither exempt from nor subject to special rules beyond the standards already expected of Debian contributors
". - A cautious
approach to generative AI. Proposed by Tobias Frost: if adopted, the
project would issue a statement describing its position on generative AI as
encouraging contributors to "
avoid the use of generative AI where practical and to prefer human authorship, collaboration, and technical understanding over AI-generated output
". However, it does not forbid the use of generative AI, and affirms that the project trusts its developers to uphold Debian's "high quality values
". - Debian is
created by humans. This proposal, put forward by Gard Spreemann, was
inspired by the GCC project's
AI policy and the rust-lang/rust
policy from the Rust language team. It disallows output of generative-AI
tools as direct contributions, but allows contributors to use such tools
"
as an [assistive] tool to explore, research, analyze, critique, etc.
" - Avoid the use
of LLM: climate destruction is a deal breaker. Holger Levsen's option
would have Debian issue a position statement against LLMs on environmental grounds as
well as "
significant ethical, legal, technical, and social concerns
". However, it acknowledges LLM usage can be "hard if not impossible to detect
". Therefore, it is a position statement only: there would be no prohibition of LLM usage for Debian contributions.
Debian uses the Condorcet method for voting to find the majority-preferred option, so voters will rank their choices in order of preference rather than needing to choose only one. Because Geiger's option would modify the Social Contract it requires a three-to-one majority to pass.
Discussion
It is difficult these days, if not impossible, to participate in open-source
projects without being immersed in the debates about LLM usage. The positions
and arguments deployed in Debian's discussion will likely be familiar to most
readers. For example, regarding code copyright, Geiger argued that there is
"huge uncertainty
" about the copyright status of LLM outputs. He failed
to see how LLM-generated code could comply with the Debian Free Software
Guidelines (DFSG): "If you let a function be generated where you can't be
100% if you don't have any license obligations due to the training
data
".
Others were not persuaded that LLMs posed a risk to Debian or violated the
DFSG. Russ Allbery pointed out
that many of Debian's upstream projects, including the kernel, "have decided
that none of these concerns matter and they're going to ignore all licensing
issues around LLM output
". The ship had sailed, he said. Ted Ts'o said that he was
"perfectly happy to certify that I believe there is no copyright
issue
". He argued there was no more copyright uncertainty around LLM output
than humans who might write code after searching for examples on Stack Overflow.
Simon Richter said
that he expected the US legal system would decide that LLM outputs were
"unrelated to training data and not copyrightable
". However, he reached
that conclusion not based on its legal merits, but because "the expensive
lawyers
" would be working against a finding that LLM output was not
distributable due to copyright problems.
The topic of quality, or lack thereof, was also explored at length. Bécue's first draft of a ballot option, which became "Accept AI contributions for Debian-specific work", originally included specific prohibitions against using an AI assistant to push commits or upload packages. Nussbaum complained that this added arbitrary restrictions against personal workflows. He asked what the problem was with asking a local agent to commit and push to a branch.
In the ensuing back-and-forth, Bécue said that he used
LLMs daily, but believed that "the more automated and fast-paced a
tool is, the more safety nets are required
". He was not arguing that
humans don't do low-quality work, but he wanted to prevent automated systems
pushing a higher volume of it. Haber responded
that people should be able to use LLMs to do low-quality work if they were going
to do so anyway:
But why should we not let us be assisted in doing crap if we're going to do crap anyway? Bad people are going to do AI assisted crap, good people are going to produce less crap if they are allowed to use assistance of their choice.
Bécue said that would
lead to producing "10 times the crap 10 times faster, which has a significant
impact and produces more strain
" on the project. In another message, he said that most of
the people he knew using generative AI "read less than half the code it
writes
" and warned that they were already having difficulty in trying to
write code on their own.
Matthias Urlichs, however, did not share Bécue's concerns about quality. He said that his own packaging had improved a lot since he started letting an LLM do it, and he doubted that Debian would see 100 times more crap:
Conversely, I can immediately think of a couple of use cases where LLMs would add some tangible value. Like, chasing down reproducible-build failures. Or filter [Intent to Package bugs] for existing software that already does what the new package wants to add. Or help scan packages in the NEW queue. Or help keep our clones of Rust, Go, Python and/or Node packages up to date – which frankly is one of the more tedious and un-rewarding jobs in Debian.
Compilers and calculators
Ts'o commented
on the concerns about people who depend on LLMs forgetting how to code. He
acknowledged that calculators led to a decline in the number of people who could
do math in their heads, and that compilers had definitely led to fewer people
who were good at writing assembly language. "But I think it's more about
people being less proficient at certain skills that are no longer as important,
and less about some more general claim about 'cognitive decline'.
"
Adrian Bunk brought up the
debhelper
tool for building Debian packages as an example closer to home for Debian. He
said that there was now a clear lack of knowledge among Debian developers about the
internals of building Debian packages, which meant that they were "often lost
how to debug and fix issues in their packages
". Bunk and Ts'o submitted
these examples of skill loss as arguments for, not against, the use of LLMs.
However, Bécue remained unconvinced. He replied to Ts'o that
his calculator comparison "has some merit, but is not a good one
anyway
". He worried that people would turn to LLMs without having first
developed their ability to think critically about the problems, which left them
"both vulnerable to a rug pull, but also to be fed garbage without ever
realizing it
".
Environmental impact
The environmental impact of LLMs was a dominant theme in the discussion. Bas
Wijnen said
he could not understand how others could agree that LLMs "destroy our
ecosystem
" but conclude that it is not a deal-breaker when considering their
use. The only response he had seen on that point was that "other activities
are also bad (some even worse) for the climate
", which he did not see as a
reasonable argument.
All of our users live on this planet, so protecting that planet is a matter of life and death for them. In other words, caring about something as big as climate change during our Debian work is not (as was suggested elsewhere in the discussion) a violation of the social contract. On the contrary, I would argue that the social contract requires us to care about climate change and prevent it as much as we can.
Nussbaum replied
that he was not dismissing the topic of climate change, but claimed that
singling out LLMs "sounds like AI-bashing, not like a well-reasoned
discussion about the impact on climate change
". He said that Debian could
reduce its environmental impact in other ways, such as building fewer packages,
stopping large-scale QA efforts that require many rebuilds, and suggested ways
Debian could reduce its "travel-induced CO2
" by changing how DebConf is
organized. "Why would Debian encourage me to travel to India, South Korea,
Argentina or Japan for Debconf, but at the same time, decide that it is
unacceptable to use AI assistance
"?
In a postscript to a message about
free-as-in beer LLMs, Ts'o suggested that the concerns about environmental
impact were merely "an excuse to justify a position that someone has already
has made for other reasons
". Didier 'OdyX' Raboud responded that
Ts'o's type of argument was "either ill-advised, or in bad faith
". His
concern was not with ecological impact on a per-query basis, but with the effect
of the LLM industry overall:
AI companies are not a mandatory feature of our societies. We don't have to allow AI companies to destroy books to train LLMs [0]. We don't have to allow building datacenters to put strain on local electricity or water networks, or increase the local temperature. In a summer with massive drought and fires burning through Europe and North America, with (public) funding desperately missing in firefighting, climate action, etc, deciding to invest 30 B€ in AI Gigafactories [1] _is_ a choice that we "as a species" are making, and one that I don't think is right at all.
It is unclear whether the dozens of messages exchanged between Debian developers have used more, or less, energy than asking an LLM for help building a package; it is, however, clear that few, if any, minds were changed during the discussion.
Vote
Debian has dealt with divisive decisions before, of course. For instance, the project struggled with the question of choosing a default init system for some time before it was decided by the Debian Technical Committee in February 2014; The topic reared its head again as a GR in October 2014, the outcome of which was that a GR was not required.
The init debate—in the form of "init-system diversity" was rekindled in 2018, and voted on as a GR at the end of 2019. Ultimately, Debian chose systemd with support for exploring other alternatives. While the init debates brought out strong feelings, and words, it does not seem to have dealt great harm to Debian in the long run.
Considering the number of options, and the fact that several are similar in nature, it is difficult to guess which of the proposals is likely to win. If history is any guide, though, the likely outcome is that the project will dust itself off and get back to work after the vote—though the topic may well bubble up again before all is said and done.
The voting period began on August 15, and will run through August 28. While there were quite a few people participating in the discussion, there were far fewer developers who weighed in than likely voters; according to the tally sheet for the vote, more than 130 developers have cast their ballot already out of more than 1,000 eligible voters.
Whatever option wins, one hopes that the project is better for it in the long run.
