I found this discussion of Docker images for Apache projects: https://issues.apache.org/jira/browse/LEGAL-270. It looks like Apache Infra has been maintaining https://hub.docker.com/u/apache and Apache Legal is aware of it and didn't see any obvious problems. But I don't see anyone discussing the question of GPLed components that come from the base image.
On Fri, Jan 25, 2019 at 10:17 AM Gian Merlino <[email protected]> wrote: > For Q1 the legal guidance as I understand it is that we can provide users > with instructions for how to get optional (L)GPL dependencies, but we can't > distribute them ourselves. Putting the mysql-connector in an Docker image > does feel like distribution… > > Q2 is an interesting question. I wonder if Apache has a policy on official > or semiofficial Docker containers that touches on the possibly thorny > licensing questions. It seems that they do exist for other projects, > though: https://hub.docker.com/u/apache. The Zeppelin one, for example, > is based on ubuntu so it must have plenty of GPL stuff in it: > https://hub.docker.com/r/apache/zeppelin/dockerfile. And it is presented > on the Zeppelin page as an official thing: > https://zeppelin.apache.org/docs/0.7.0/install/docker.html. > > I dunno, it feels weird to me, and I am searching for evidence of these > issues having been explicitly discussed by other projects but have not > found it yet. > > On Wed, Jan 23, 2019 at 3:13 PM Don Bowman <[email protected]> wrote: > >> Re: PR https://github.com/apache/incubator-druid/pull/6896 >> >> I am trying to make a container that works for folks so that we can get >> the >> Kubernetes helm chart off the ground. >> >> A question has arisen in the PR around the 'mysql-connector-java' which is >> GPL. >> >> Q1. A script checked into the druid container build repo that is Apache >> license, does anyone have a concern if it has a line 'wget ... >> mysql-connector.java' [link >> < >> https://github.com/apache/incubator-druid/pull/6896#pullrequestreview-195673343 >> > >> to question] >> Q2. Given that the container ultimately has GPL things in it (e.g. bash) >> is >> there a problem releasing it? [link >> < >> https://github.com/apache/incubator-druid/pull/6896#discussion_r250316937 >> > >> to Q] >> >> I'll work on the other comments in the PR. >> >> --don >> >
