Live data from Hacker News

LXD now re-licensed and under a CLA

stgraber.org

61–70 of 102 posts

Re: LXD now re-licensed and under a CLA

#61
post #40

Earlier quoted context omitted.

When you don't want Amazon, Google etc to earn big money on your work. Actually not even that, they could if they played fair and contributed back all changes they make. But they don't want to play fair.

You're completely ignoring the harm to small business and individuals and putting unreasonable demands for money by collective punishment. If you don't want to release open source, then never release it. Pretending to be open source and simultaneously demanding money is resentment, sour grapes, and trying to have it both ways. Maybe you've seen what happens most often when FOSS projects relicense or go closed source:…

Who demanded money? Using AGPL is demanding code. (The modifications users of your code made.)

This does typically not affect small companies. They don't have the resources to make significant changes to the code, so there is nothing they would need to contribute back. And they don't employ lawyers forbidding them to use AGPL.

Re: LXD now re-licensed and under a CLA

#62
post #55
post #39

LXD is container technology, right? I've used Docker for years now (in my home lab.) I took a stab at using Podman a couple times but the friction was too high (and my motivation to switch too low.) How does LXD compare to Docker? Should I be interested in it or just continue with Docker for the handful of containers I'm using (Gitea, Checkmk, MariaDB, Mosquitto.) The license is not interesting to me unless there's a…

LXD is more of a stateful flavor of containers. Or at least that is how it started. Nowadays it is literally a VM management system, like Ovirt (but without a GUI). They added QEMU/KVM support quite a while ago now.

LXD has a web gui now. It is fairly basic right now but it is there.

Re: LXD now re-licensed and under a CLA

#63
post #60

Earlier quoted context omitted.

It is correct; the binary is AGPL, and Snap is a binary distribution method.

Nope, the binary is under both licenses. Just because they are compatible doesn't mean you can ignore the terms of one of them.

I sometimes “editorialize” license names for Lunni Marketplace, too. [1]

I think it’s fine: the binary is under both licenses, but one requires you to publish a notice and the other requires you to publish a notice and all source code for both parts. Since you want to know what “license burden” you’ll have to bear when you’re looking for an app in a distribution platform like this, I think it’s fair to just specify the more restrictive license.

(IANAL)

[1]: https://lunni.dev/docs/marketplace/

Re: LXD now re-licensed and under a CLA

#64
post #62
post #55

Earlier quoted context omitted.

LXD is more of a stateful flavor of containers. Or at least that is how it started. Nowadays it is literally a VM management system, like Ovirt (but without a GUI). They added QEMU/KVM support quite a while ago now.

LXD has a web gui now. It is fairly basic right now but it is there.

Oh cool! I know there were unofficial ones floating around.

Re: LXD now re-licensed and under a CLA

#65

"As a result, Canonical cannot release LXD under the AGPLv3 license and likely never will be able to. LXD is now under a weird mix of Apache2 and AGPLv3 with no clear metadata indicating what file or what part of each file is under one license or the other." IANAL but that's not true? You can take Apache2 and relicense it under AGPL? You can take "less copyleft" license and make it "more copyleft". https://www.gnu.or…

Licenses don't typically allow licensees to re-license code. You can use Apache v2 code in a proprietary or AGPL product and redistribute binaries or other source code derived from it under any other license, but you can't change the license of the original code: anyone can still use it under the Apache license. Conversely, a copyright holder may re-license code. Depending on the exact terms of the old license, this…

Does it not?

>

2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form.

Is sublicensing something different from relicensing?

Re: LXD now re-licensed and under a CLA

#66

"As a result, Canonical cannot release LXD under the AGPLv3 license and likely never will be able to. LXD is now under a weird mix of Apache2 and AGPLv3 with no clear metadata indicating what file or what part of each file is under one license or the other." IANAL but that's not true? You can take Apache2 and relicense it under AGPL? You can take "less copyleft" license and make it "more copyleft". https://www.gnu.or…

Lawyer here

"IANAL but that's not true? You can take Apache2 and relicense it under AGPL? You can take "less copyleft" license and make it "more copyleft"."

No you can't. That's also not really what is happening here in the link you list.

This gets complicated very quick (and 90% of HN comments in this thread are already sort of wrong), but the short version is:

When you aggregate existing works into a larger work, you can license the larger work in any way that is compatible with the existing works.

Apache2 is compatible in that sense - i can include an apache work in a larger aggregate work licensed a different way.

However, that does not relicense the original works that you are aggegating. For the Apache2 portion of that work - even when part of a larger work, I can still exercise whatever rights Apache2 gives me for the Apache2 version of that work.

The aggregate work itself would also have very little copyright protection, even if you AGPLv3 it.

The only copyright you newly get in the aggregate work is selection, arrangement, etc.

Which means the degree to which you are licensing anything at all is ... quite small.

The easy way to think about it is: even if you release a larger AGPLv3 work containining Apache2 pieces, you could not sue people for taking the Apache2 piece of it, and using it under Apache2. Even if they explicitly use your copy of it, etc.

More than that, people could take all of your aggregate work pieces and use them under their licenses, and you could not stop them.

This already happens - RHEL et al.

Re: LXD now re-licensed and under a CLA

#67
post #40

Earlier quoted context omitted.

When you don't want Amazon, Google etc to earn big money on your work. Actually not even that, they could if they played fair and contributed back all changes they make. But they don't want to play fair.

You're completely ignoring the harm to small business and individuals and putting unreasonable demands for money by collective punishment. If you don't want to release open source, then never release it. Pretending to be open source and simultaneously demanding money is resentment, sour grapes, and trying to have it both ways. Maybe you've seen what happens most often when FOSS projects relicense or go closed source:…

It's funny you mention the "harm" a license like AGPL causes. How did that work out for, e.g., MinIO? Would it be unreasonable for them to demand you need to actually attribute them and also keep your attributions open if they open up their work for you? Ig it is but only if you demand to get their work from free without acknowledging that may also be entitled to some demands of their own.

Re: LXD now re-licensed and under a CLA

#68

So you have a file function foo is Apache, bar calls foo. Isn't bar a derivative work of foo? Someone from canonical rewrites foo changing 4 of 7 lines. In this version is foo now canonical's contribution or still the original contributor? A: Is it accurate to say that there is no metadata regarding who owes what because it would take millions and a trial to decide? B: Is it accurate to say that this uncertainty is b…

Short answer: No in most cases.

You can't create confusion and then sue people over the confusion. This is the purpose of copyright notice - you have to make it clear enough who owns rights to avoid various defenses.

As for your function question: Copyright was created mostly for books, remember.

As such, it gets weird quickly when applied to code.

For example - i write a book, and on page 236, it says at the top "the text of this page is copied from the folowing book " and then copies it inline.

This is probably infringement.

If i instead write a book, and on page 236, it says at the top "for the text of this page, please see page 194 of the following book " and does not copy it inline.

This is not infringement.

Now, could you currently convince a judge how shared library vs static library linking works, and that it matters? Maybe. Moreso than you could a decade ago.

Re: LXD now re-licensed and under a CLA

#69
post #64
post #62

Earlier quoted context omitted.

LXD has a web gui now. It is fairly basic right now but it is there.

Oh cool! I know there were unofficial ones floating around.

Incus has a demo of that UI (rebranded) accessible through their online demo: https://linuxcontainers.org/incus/try-it/ (there's a "Web UI" link once started)

Re: LXD now re-licensed and under a CLA

#70
post #54
post #50

Earlier quoted context omitted.

I'm not sure what your argument is. "compatibly licensed code" is doing a lot of heavy lifting, and because you don't define that term, your post reads as little more than FUD. Yes, you cannot distribute GPL'ed software if you don't have a license to distribute the source to the whole work. That's not unique to the Affero GPL, that's equally true for GPLv2 and GPLv3. But that's not a problem with respect to "compatib…

To reiterate the argument, one of the constraints on conveying modified versions of AGPLv3 is the text I quoted at the end - that the entire conveyed version be licensed under the AGPLv3. Supposing OPs arguments are correct that third parties don't have the right to relicence apache licensed code... you can't do that? By "compatibly licensed" I meant nothing more or less than "licensed under a license such as Apache…

Non-copyleft code already explicitly allows itself to be included and distributed under different licenses. Even closed-source programs are allowed to contain OSS-licensed code as long as the proper attribution and legal notices are preserved. The first TCP/IP stack for Windows was ported from one of the BSDs, and shipped as part of the proprietary OS; does that count as a "relicensing" of the original code?

Taking a look at the official license text, the AGPL makes an explicit distinction between the license on the work as a whole, and specific licenses covering parts of the source: https://www.gnu.org/licenses/agpl-3.0.en.html

> 5.c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged

Emphasis mine. This does indeed refer to the work as a whole, but it also allows for specific exceptions. Section 7 makes two interesting claims:

> If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions.

So if parts of the source code are under the Apache license (which grants additional permissions beyond the AGPL), those permissions remain valid when used outside the AGPL-licensed work.

> When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it.

So yes, it appears you are not required to preserve these additional license freedoms when distributing the source code. But this claim is immediately followed by an enumeration of the standard OSS clauses - right of attribution, preservation of legal notice, and disclaimer of liability - so all the legal requirements posed by the original license are covered.

So if Ubuntu were to choose to do so, it is free to remove the Apache 2 license (but not its legal notice, for that it needs permission from the original copyright holders) from any copies they distribute, and still be compliant with the original license.

because it is obviously contrary to the purpose of the AGPLv3

It isn't contrary to that license: the purpose of the GPL (and by extension, the AGPL) is to ensure that the source code remains free. It does so by imposing additional restrictions on distribution on top of what is required by MIT/BSD/Apache licensed code. Removing clauses that allow to take (parts of) the code and make it proprietary isn't contrary to the purpose of the AGPL -- it is however contrary to the (supposed) intentions of the original copyright holders who presumably chose their license for a good reason.

Note again that this isn't really different from what the GPLv2 allowed to do (from https://www.gnu.org/licenses/old-licenses/gpl-2.0.html):

> 2.b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.

I remember this same discussion happening 20 years ago with the players being the Linux kernel and *BSD driver code; strictly speaking, Linux developers could take BSD driver code, preserve the legal notice, and distribute the complete code under GPLv2 and still be compliant with the BSD license. In practice, people honoured the original license and I'm sure you can still find dual-licensed BSD/GPL parts in some places in the kernel tree.

Post reply on HN