On Wed, Mar 25, 2015 at 02:20PM, Roman Shaposhnik wrote:
> On Mon, Mar 23, 2015 at 8:32 PM, moon soo Lee <m...@apache.org> wrote:
> > Thanks Roman for information about ASF-wide docker index.
> >
> > And, about binary release,
> >> AFAIK by apache release policy nothing, except the source code, is
> >> considered to be an 'official release'.
> >
> > I think Apache's release policy has some guide lines for providing binary
> > package.
> > According to http://www.apache.org/dev/release.html#what, binary package
> > must have the same version number to source release, and unreleased source
> > can not be linked/distributed to the public.

Actually you can linked unreleased source to whoever. What you absolutely CAN
NOT do is to call it a "release" until IPMC has voted on it. If you need to
provide a link to a particular git-tree and call it 'latest stable dev
version' - just do it.

> With binaries the line gets blurry. With things like Docker even more so.
> Keeping those types of guidelines in mind is always useful, but you also
> have to be able to provide software to your users.
> 
> Consider Docker: every Docker image typically has a base OS that
> is licensed under variety of different licenses, but GPL is deffintely
> one of them. All of sudden you have a binary 'release' that is under GPL.
> Not longer ALv2.
> 
> > So isn't it reasonable to think binary that came from unreleased source
> > code can not be distributed ?
> 
> This depends on what distribution means. Like I said in case of Docker
> there's no clear answer and in fact you guys can help shape the outcome.
> Keep an eye on general@incubator and dev@community. A docker discussion
> is coming there very soon.

On top of what Roman said: The main issue with binaries vs source is
that it is hard to guarantee license compliance in case of a binary assembly.
Hence, ASF release is _always_ a release of source code, which ASF legally
stands behind with all rigorous RAT checking, voting, etc. While ASF projects
can and often do provide convenience binary artifacts they CAN NOT have an
official release status because of the above.

Cos


Reply via email to