Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 694890 - app-emulation/{buildah,containers-storage,cri-o,...}: incomplete LICENSE
Summary: app-emulation/{buildah,containers-storage,cri-o,...}: incomplete LICENSE
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Zac Medico
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 694792
  Show dependency tree
 
Reported: 2019-09-18 19:29 UTC by Michał Górny
Modified: 2019-09-19 17:49 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-09-18 19:29:56 UTC
app-emulation/buildah
app-emulation/containers-storage
app-emulation/cri-o
app-emulation/docker-machine-kvm
app-emulation/docker-machine
app-emulation/docker-registry
app-emulation/docker-swarm
app-emulation/libpod


The listed packages seem to be bundling (vendoring) multiple dependencies, however the LICENSE variable does not seem to reflect that.  Please verify the licenses for all vendored dependencies, and include them in the LICENSE variable.  While at it, please be watchful for license conflicts.

See tracker bug for tips on how to do that.
Comment 1 Larry the Git Cow gentoo-dev 2019-09-19 01:31:57 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=94ed176ed2259b338d6bf86c24b12b94461b3653

commit 94ed176ed2259b338d6bf86c24b12b94461b3653
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 01:30:36 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 01:31:08 +0000

    app-emulation/docker-machine-kvm: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/docker-machine-kvm/docker-machine-kvm-0.10.0.ebuild | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
Comment 2 Larry the Git Cow gentoo-dev 2019-09-19 01:48:05 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ee1d33b9a56864782f4d0184c0cc0c8a034da4e8

commit ee1d33b9a56864782f4d0184c0cc0c8a034da4e8
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 01:40:40 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 01:47:42 +0000

    app-emulation/docker-machine: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/docker-machine/docker-machine-0.13.0.ebuild | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
Comment 3 Larry the Git Cow gentoo-dev 2019-09-19 02:03:53 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d925e93db8e6fe2c22c39ab28225863f2b6a8b61

commit d925e93db8e6fe2c22c39ab28225863f2b6a8b61
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 02:02:57 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 02:03:13 +0000

    app-emulation/docker-swarm: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/docker-swarm/docker-swarm-1.2.5.ebuild | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
Comment 4 Larry the Git Cow gentoo-dev 2019-09-19 02:33:41 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b1d74fd5116887fec2a0d8206d56e9a870c4fcc8

commit b1d74fd5116887fec2a0d8206d56e9a870c4fcc8
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 02:32:37 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 02:33:25 +0000

    app-emulation/docker-registry: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/docker-registry/docker-registry-2.7.1.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 5 Larry the Git Cow gentoo-dev 2019-09-19 03:02:26 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e4cad475949dffc1fb5e4d6dea6d0fad433df06f

commit e4cad475949dffc1fb5e4d6dea6d0fad433df06f
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 02:49:44 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 02:50:00 +0000

    app-emulation/containers-storage: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/containers-storage/containers-storage-1.13.1.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 6 Larry the Git Cow gentoo-dev 2019-09-19 03:17:13 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b760350e909a265ec6d78e87a3960a8024ca4cfd

commit b760350e909a265ec6d78e87a3960a8024ca4cfd
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 03:16:25 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 03:16:41 +0000

    app-emulation/buildah: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/buildah/buildah-1.11.2.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 7 Larry the Git Cow gentoo-dev 2019-09-19 03:37:16 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b2cf1d1ff5f97d5ea9adcce8de3e4a8916476771

commit b2cf1d1ff5f97d5ea9adcce8de3e4a8916476771
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 03:35:45 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 03:36:09 +0000

    app-emulation/libpod: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/libpod/libpod-1.5.1-r1.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 8 Larry the Git Cow gentoo-dev 2019-09-19 03:58:17 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=45470fbba409d453715b2ace41e40cea0f9b16de

commit 45470fbba409d453715b2ace41e40cea0f9b16de
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-09-19 03:56:33 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-09-19 03:57:29 +0000

    app-emulation/cri-o: LICENSE: account for vendored software
    
    Reported-by: Michał Górny <mgorny@gentoo.org>
    Bug: https://bugs.gentoo.org/694890
    Package-Manager: Portage-2.3.76, Repoman-2.3.17
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-emulation/cri-o/cri-o-1.10.6.ebuild | 2 +-
 app-emulation/cri-o/cri-o-1.13.9.ebuild | 2 +-
 app-emulation/cri-o/cri-o-1.15.1.ebuild | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)
Comment 9 Zac Medico gentoo-dev 2019-09-19 04:27:35 UTC
I've updated all of the LICENSE variables for all of these packages to reflect the run-time code.

However, a few of them use the GPL-3 licensed golangci-lint (and its GPL-3 licensed dependencies) for build-time purposes:

    https://github.com/golangci/golangci-lint
    https://github.com/golangci/check
    https://github.com/OpenPeeDeeP/depguard

If we add GPL-3 to the LICENSE variable then it will look like a license conflict even though the requirements of the GPL-3 are apparently met.

These are the packages that use golangci-lint at build-time:

app-emulation/buildah
app-emulation/containers-storage
app-emulation/cri-o
app-emulation/libpod
Comment 10 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-09-19 06:27:30 UTC
Build-time is fine.  You list only stuff that's actually installed.
Comment 11 Zac Medico gentoo-dev 2019-09-19 17:49:56 UTC
(In reply to Michał Górny from comment #10)
> Build-time is fine.  You list only stuff that's actually installed.

Great! Then we can consider this bug fixed.