-
Notifications
You must be signed in to change notification settings - Fork 69
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Inconsistent licensing #216
Comments
I've also noticed lines like this: // Portions Copyright 2017 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE-BSD-Google file. But the LICENSE-BSD-Google file was removed in 85ab9e3 with a note saying "The vhost crate is written from scratch, so it should be licensed to Alibaba Cloud instead of Google." So is there code in this crate covered by that license or not? If there is, shouldn't that license file still be present? |
@jiangliu: Can you clarify this? Those are all files claimed by Alibaba Cloud Computing:
vhost-user-backend already is Apache-2.0 only. Should vhost be the same? |
Related: rust-vmm/vm-virtio#283 |
Historically there are some code derived from crosvm project, so it should be "Apache-2.0 AND BSD-3-Clause". |
Thanks for the clarification! Is there some documentation around this agreement available? |
The community has discussed about it in community meetings, but not sure whether it's documented. |
@andreeaflorescu: Do you happen to recall details? 🤔 Would be great if we could reference some archival of the agreement. |
Our initial intention was to go for Apache 2.0 OR BSD-3-Clause, but since the code in Crosvm is licensed under BSD-3-Clause, that is not really possible. See the discussion here: rust-vmm/vmm-sys-util#161. We ended up with using BSD-3-Clause for the crates that have code coming from Crosvm as well. |
Ah, I thought there was some agreement to change a license. But it just seems to be the dropping of BSD. Then we can just advertise Apache-2.0 for the whole crate. |
It's the opposite. Since you have code from Crosvm, you can't have it as Apache-2.0. So it has to be BSD-3-Clause. |
Ah. I understood @jiangliu's comment as the code being under 'Apache-2.0'. I guess we need to double check our SPDX tags then... |
Cargo.toml says "Apache-2.0 OR BSD-3-Clause", but many files contain lines like the following, which suggests that only the Apache-2.0 license applies:
// SPDX-License-Identifier: Apache-2.0
It's therefore unclear whether using this code under the terms of only the BSD-3-Clause license is permitted. If the intention is to use the BSD-3-Clause for code originally taken from crosvm, but the Apache-2.0 license for new code (like Cloud Hypervisor does), then Cargo.toml should say "Apache-2.0 AND BSD-3-Clause".
The text was updated successfully, but these errors were encountered: