Ping. Hi Mentors,
What's the policy on distributing third party _sources_ provided we've included the appropriate licenses in NOTICE? Knowing whether or not we can do this is blocking us from pushing out a RC5. Thanks much! Ben. On Tue, Apr 10, 2012 at 8:34 AM, Matei Zaharia <ma...@eecs.berkeley.edu>wrote: > Hi Sebb, > > The third party libraries we included were actually all source code, just > compressed in tar.gz files to save space. There were no JARs or binaries. > Is distributing their source code okay, or is it still better to get people > to download them elsewhere? > > Matei > > > On Apr 10, 2012, at 6:03 AM, sebb wrote: > > > On 8 April 2012 23:48, Benjamin Hindman <b...@berkeley.edu> wrote: > >> Hi Sebb, > >> > >> Thanks so much for taking a look! Responses inline. > >> > >> On Sun, Apr 8, 2012 at 2:22 PM, sebb <seb...@gmail.com> wrote: > >> > >>> On 7 April 2012 02:59, Benjamin Hindman <b...@berkeley.edu> wrote: > >>>> Please vote on releasing the following candidate as Apache Mesos > >>>> (incubating) version 0.9.0. This will be the first incubator release > for > >>>> Mesos in Apache, but the fifth release candidate. > >>>> > >>>> Vote thread on mesos-...@incubator.apache.org: > >>>> > >>>> > >>> > http://mail-archives.apache.org/mod_mbox/incubator-mesos-dev/201203.mbox/%3CCAFeOQnW7jk-VcTFpUP-_VonL99JCnggKeNPW%2BGx-Ozdy1U8sjg%40mail.gmail.com%3E > >>>> > >>>> The candidate for Mesos 0.9.0-incubating release is available at: > >>>> > >>>> > >>> > http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz > >>>> > >>>> The tag to be voted on: > >>>> > >>>> > >>> > https://svn.apache.org/repos/asf/incubator/mesos/tags/release-0.9.0-incubating-RC4 > >>> > >>> The NOTICE file is incomplete; the product name and copyright year(s) > >>> are missing. > >>> > >> > >> Thanks, I'll add that. > >> > >> > >>> The LICENSE file includes references to several 3rd party items. > >>> It looks like glog and utilities.cc and others may require mention in > >>> NOTICE. > >>> > >> > >> Is there a document somewhere which describes when something needs to go > >> into NOTICE in addition to LICENSE? I had read previously read the > section > >> titled "What Are Required Third-Party Notices?" from > >> http://apache.org/legal/resolved.html#required-third-party-notices but > I > >> still was unclear whether or not anything needed to be done. > > > > AFAIK, it depends on what the license says. > > > >> > >>> There's no DISCLAIMER file in SVN root. > >>> > >> > >> Right, I'll add that. > >> > >> > >>> There are several 3rd party libraries in SVN under > >>> > >>> > >>> > https://svn.apache.org/repos/asf/incubator/mesos/tags/release-0.9.0-incubating-RC4/third_party/ > >> > >> > >> This was deliberate, so as to make it easier to use for both developers > >> (who check out the repository) and users (who download a distribution). > Is > >> there a policy against this? I saw this as analogous to distributing > JARs. > >> > > > > AIUI, there must be a source-only release. > > This should have N&L files that relate to the source only. > > > > A binary release may also be provided, in which case its N&L files > > need to correspond with what is in the binary release. > > > > For building from source, the dependencies need to be provided somehow. > > Various options are possible: > > - written instructions how to get the dependencies and where to put them > > - separate script to download the dependencies > > - build process automatically downloads the dependencies. > > > > Depending on the licenses of 3rd party jars you may need to provide a > > combination of methods. > > There are some types of dependencies that can only be included if the > > user makes a deliberate choice of downloading them, see the cited doc. > > > > If all the dependencies are binary-distributable, it's probably also > > OK to provide an archive containing just the dependencies. > > This must have the relevant N&L files. > > > >> > >> Is the correct next step to cancel this vote, > > > > IMO, yes. > > > >> create a RC5, and start a new vote thread for that? > > > > Once the issues have been resolved, yes. > > > >> Or modify RC4? > > > > No, RCs should be immutable. Otherwise how can one tell what one is > voting on? > > > >> Thank you very much! > >> > >> Ben. > >> > >> > >> > >>>> The MD5 checksum of the tarball can be found at: > >>>> > >>>> > >>> > http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz.md5 > >>>> > >>>> The signature of the tarball can be found at: > >>>> > >>>> > >>> > http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz.asc > >>>> > >>>> Mesos' KEYS file, containing the PGP keys used to sign the release: > >>>> http://svn.apache.org/repos/asf/incubator/mesos/dist/KEYS > >>>> > >>>> Please vote on releasing this package as Apache Mesos > 0.9.0-incubating! > >>>> > >>>> The vote is open until Tuesday, April 10th at 8 pm (a bit more than 72 > >>>> hours since it's over the weekend) and passes if a majority of at > least 3 > >>>> +1 IPMC votes are cast. > >>>> > >>>> [ ] +1 Release this package as Apache Mesos 0.9.0-incubating > >>>> [ ] -1 Do not release this package because ... > >>>> > >>>> To learn more about Apache Mesos, please see > >>>> http://incubator.apache.org/mesos. > >>> > >>> --------------------------------------------------------------------- > >>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > >>> For additional commands, e-mail: general-h...@incubator.apache.org > >>> > >>> > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > >
