Live data from Hacker News

VMWare Taken to Court Over GPL Violation

sfconservancy.org

101–110 of 299 posts

Re: VMWare Taken to Court Over GPL Violation

#101
post #70

I very much doubt the accuracy of their claims that vmkernel is largely a copy of linux ( http://sfconservancy.org/linux-compliance/linux-vs-vmkernel_... ) Mostly since in many of those drivers, it performs better than linux, but also because vmware did not hire idiots, (and non-idiots know not to ever use GPL code). Source: worked there a while ago.

The wayback machine* has Zachary Amsden's opinion in 2007 why the vmkernel (and other components) are not in violation of GPL. It's an interesting read. He concludes: > 1) There is no argument that depending on a Linux console OS makes any part of ESX subject to GPL that is not already opene sourced. We have open sourced those GPL components of the system which we have modified and given the changes back to the commu…

Points (1) and (2) aren't relevant - nobody in this case is making those arguments. Point (3) is more interesting. He makes three arguments there.

1) The GPL doesn't cover execution, only distribution

True, and as such an end user loading a proprietary kernel driver into a GPLed kernel (or vice versa) isn't infringing. But things get more complicated when you're distributing a product that consists of GPLed and proprietary code and requires both of them to be useful. If vmkernel is basically useless without vmklinux, there's a reasonable argument that the distributed product is a derived work of both vmkernel and vmklinux.

(The same argument doesn't apply to a product using proprietary applications on top of the Linux kernel - there's an explicit statement in the Linux copyright file that using the standard userspace interfaces doesn't create a derived work)

2) There's a copyright boundary between Linux and kernel modules

Quoting from his comment:

"Linux has established a well defined, binary interface through which driver modules and the kernel may interact, with well defined copyright separation."

This is, well, nonsense. Calling the Linux kernel ABI well-defined is entirely untrue - it changes rapidly between releases, it changes within releases (there's no guarantee that an LTS kernel will keep the same ABI between minor point releases) and even Red Hat, who expend a huge amount of effort on maintaining a stable kernel ABI, only make their kABI guarantees for a small subset of the actual kernel ABI.

3) Nobody complaining about this has any standing

"those vocal advocates such as Christoph, who are so offended by this, do not even own any copyright on the code we are distributing"

I'll be charitable and chalk this up to being misinformed rather than an outright lie.

There is certainly an argument that distributing GPL drivers and a shim layer to load them into a proprietary kernel may (depending on a whole host of things) create a derived work, and thus subject to the GPL.

Zach pointed out that he's not a lawyer and that he wasn't making an official response, but VMware's only real defences are likely to be along those lines. I personally think they'll have a hard time convincing a judge of that, but we'll see how it goes.

Re: VMWare Taken to Court Over GPL Violation

#102
post #96
post #92

Earlier quoted context omitted.

Interesting. My reading is that there are two components. The first is the Linux bootstrap, which they are entirely in compliance for. The second is vmkernel, which includes some GPL code whose source they're releasing, but vmkernel as a whole is not GPL; this is almost certainly out of compliance (but also easily fixable), unless they're doing something to isolate "vmkdrivers" from the rest of vmkernel. (Can I legal…

vmnix aka Service Console aka Console OS aka the Fuzzy part, was part of ESX, which was discontinued with the 5.0 series of ESX products.

They still use it for bootstrapping, right? I know they've gotten rid of the Red Hat-ish userspace, but according to the LWN article, there's still a Linux kernel involved and a kernel module used to pass control to vmkernel.

(Is the word "vmnix" wrong? Does it apply only to the entire Red Hat-ish distribution in the COS, and not to the Linux stepping stone alone?)

Re: VMWare Taken to Court Over GPL Violation

#103

Busybox strikes again. I worked for a company that was on a receiving end of a similar GPL legal action (though not busybox-based and not from SF Conservancy). I'll tell you what will happen next. VMWare will (a) write a drop-in in-house replacement for busybox (b) they will show that busybox is not an principal part for ESXi and that it can be easily swapped for the in-house replacement. At this point they will rele…

> It's just that this GPL thing doesn't even register on their legal radar, so it never percolates down to engineering.

VMware engineer here. This should not be construed as commenting on an ongoing court case (and I've never worked on the vmkernel), but I would like to respond to:

At least in my organization: Legal is definitely aware of the GPL. Engineers are definitely aware of the GPL. Adding a dependency on a GPL'd library requires an almost unbelievable amount of paperwork.

Again, at least in my organization: We also take open source obligations very seriously. For each release, we publish a detailed list of all open source software we consumed and a bundle containing all of the source code for those components, even if the project's license is one of the more permissive ones which doesn't require it.

Re: VMWare Taken to Court Over GPL Violation

#104
post #4

I'm surprised it took this long. I can't really blame them, after 15 years of ignoring the GPL, they probably figured nobody would ever come up with the financial resources to actually go after them. This is going to take years to come to a resolution and millions and millions of dollars in lawyers fees.

I doubt that it'll come to that. There are some really nasty consequences of being found to violate the GPL: 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License... From what I understand, there is no obvious…

That would be an interesting result. To my knowledge the GPL (any version) hasn't actually been litigated to the point of a published decision (would love to hear that it had).

That said, (and continuing with my possibly incorrect assumption that the GPL hasn't been litigated) if it does get decided that this remedy can be enforced by the license holders through the court, I expect it will create the largest software effort since Y2K to get rid of GPL'd software in any enterprise larger than about 10 people. The business risk would become too great that they might be litigated by a rival into inoperation. (I know the author's aren't out to kill companies, they are out to enforce their rights, but there are lawyers that like nothing more than extorting companies for large sums of money and those lawyers would write "As you know VMWARE was damaged to the tune of several billion dollars because they didn't use the GPL correctly, and we know that you aren't using GPL correctly either, why take the risk and get a writ of compliance for a mere $." Or like the guys who are coming out of the wood work to "test your house for formaldahyde" by basically clipping some PH strips to a stick, waiting for them to turn blue, and them selling the poor home owner a multi-thousand dollar "remediation" service.

I really respect what the GPL tries to do, but especially early in its life it was way too ambiguous in its interpretation (consider the difference of opinion between FSF and Linus on loadable kernel modules for example)

Re: VMWare Taken to Court Over GPL Violation

#105

Any litigation of the GPL is more than likely more dangerous for the GPL than it is for the companies. A relaxing of the understood requirements of using and distributing GPL code could cause an avalanche of fall out from formerly protected code becoming less protected. If I was this organization I would only risk a lawsuit of something that would have profound positive consequences for open source. VMware's risk is…

You don't litigate the GPL in court as such. You litigate a copyright violation. Christoph is going to go to the judge and say the German equivalent of "your honor, VMWare is distributing my copyrighted work without permission. Make it stop please." VMWare then has two choices: either it says "but we have permission, a license to do so" whereupon it needs to obey the terms said license, or it needs to immediately cease distributing Christoph's copyrighted work.

Re: VMWare Taken to Court Over GPL Violation

#106

Busybox strikes again. I worked for a company that was on a receiving end of a similar GPL legal action (though not busybox-based and not from SF Conservancy). I'll tell you what will happen next. VMWare will (a) write a drop-in in-house replacement for busybox (b) they will show that busybox is not an principal part for ESXi and that it can be easily swapped for the in-house replacement. At this point they will rele…

> It's just that this GPL thing doesn't even register on their legal radar...

Any engineer competent enough to incorporate Busybox into another product would know what GPL is, and what are the most basic implications that it leads to. I find it much easier to believe that VMWare as a whole was explicitly aware of the licensing situation. It remains to be seen what was their plan B, if there ever was one.

Re: VMWare Taken to Court Over GPL Violation

#107

Earlier quoted context omitted.

I've seen it argued on HN that the GPL's definition of a derivative work differs from the legal definition, and if you never distribute the GPL'd code, you aren't bound by it. Thus, one could write kernel drivers, which (it was argued) are not derivative works under copyright, and be safe as long as the kernel is not redistributed by the same entity.

The first time the GPL mentions "derivative work" is in paragraph 0, in the phrase "derivative work under copyright law", which would suggest that they are not redefining it. However, it immidietly goes on to say: "that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language" I'm not entirely sure what to do with this.

It means the definition under copyright in addition to translations and modified versions. Different countries have different copyright definitions, and the translation of a work is not always the same CC.

Re: VMWare Taken to Court Over GPL Violation

#108
The GNU license doesn't sound very "free" to me. It's strange that the owners of GNU code think that all additions to their code should rightly be released to the public (even if they never wrote the additions).

The original code is still "free" for the world to use, so there really isn't anything being taken.

Re: VMWare Taken to Court Over GPL Violation

#109

As a VMWare customer, this makes me consider their ethics. If they're unethical, shouldn't we look into switching away from their product? I'm not aware of many competitors in their market space - Hyper-V certainly, but that's less of an option for some. Short of rearchitecting our service as a series of containers, what action can conscientious corporate leaders take?

If you're a customer, you could raise the issue with VMware through your support channel. You could potentially be at risk of a GPL violation yourself if your license agreement with VMware does not indemnify you.

Re: VMWare Taken to Court Over GPL Violation

#110

The GNU license doesn't sound very "free" to me. It's strange that the owners of GNU code think that all additions to their code should rightly be released to the public (even if they never wrote the additions). The original code is still "free" for the world to use, so there really isn't anything being taken.

If you don't like their conditions for using it, then don't fucking use it. Why do you feel entitled to use other people's work without adhering to their conditions?
Post reply on HN