Live data from Hacker News

VMWare Taken to Court Over GPL Violation

sfconservancy.org

161–170 of 299 posts

Re: VMWare Taken to Court Over GPL Violation

#161

LWN has a very clear explanation of just how clear-cut this is: https://lwn.net/SubscriberLink/635290/e501ce0264c182f4/ In particular, this isn't just a question of whether a kernel module is a derived work of the kernel. Apparently VMWare has copied code from the Linux kernel, with GPLed headers on top, and compiled that code directly into some of their code.

I don't think it is as clear cut at all, but that makes it much more interesting. I left a comment there, but it bears some repeating I think ESXi's kernel does not bootstrap itself from Linux at all. There is no linux kernel as such [1] ESXi does reuse linux kernel drivers ... a lot of them. But the way this happens is through a well-defined API provided by (proprietary) vmkernel called vmkapi. What you are seeing i…

Thank you, that makes a lot of sense. I can see now how VMware can believe in good faith that they're in compliance (and in fact did a fairly major move towards compliance with ESXi) and Conservancy can believe in good faith that they're not.

Re: VMWare Taken to Court Over GPL Violation

#162
post #116

Earlier quoted context omitted.

That would be an interesting result. To my knowledge the GPL (any version) hasn't actually been litigated to the point of a published decision (would love to hear that it had). That said, (and continuing with my possibly incorrect assumption that the GPL hasn't been litigated) if it does get decided that this remedy can be enforced by the license holders through the court, I expect it will create the largest software…

" The business risk would become too great that they might be litigated by a rival into inoperation. " Only the owners of a copyright have standing to sue, so I think the complete version of your concept fails unless, like in this case, the copyrights are held by many people instead of being assigned to one person or organization. I also can't imagine that a lot of companies haven't considered this risk, it hardly ma…

Only the owners of a copyright have standing to sue

What about people who receive the compiled software (customers) and would like the source code as well? Don't they have standing?

Re: VMWare Taken to Court Over GPL Violation

#163

LWN has a very clear explanation of just how clear-cut this is: https://lwn.net/SubscriberLink/635290/e501ce0264c182f4/ In particular, this isn't just a question of whether a kernel module is a derived work of the kernel. Apparently VMWare has copied code from the Linux kernel, with GPLed headers on top, and compiled that code directly into some of their code.

Aside, shouldn't you be parsimonious with subscriber links for LWN and not post them publicly? I haven't had a LWN subscription in a while, but I really like their business model. I would not have posted this link myself.

No, the subscriber links are for exactly this kind of situation. They are to allow you to link to articles when it's relevant to a discussion, as long as you don't abuse them by doing something like posting a regular feed of all LWN articles or submitting every single one to Reddit/HN.

Jonathan Corbet, editor of LWN, frequently posts his own subscriber links to LWN articles:

https://news.ycombinator.com/submitted?id=corbet

And has explicitly endorsed posting occasional links to HN:

https://news.ycombinator.com/item?id=5688938

Re: VMWare Taken to Court Over GPL Violation

#164
post #140
post #102

Earlier quoted context omitted.

They still use it for bootstrapping, right? I know they've gotten rid of the Red Hat-ish userspace, but according to the LWN article, there's still a Linux kernel involved and a kernel module used to pass control to vmkernel. (Is the word "vmnix" wrong? Does it apply only to the entire Red Hat-ish distribution in the COS, and not to the Linux stepping stone alone?)

Nope, that stuff is all gone with the ESXi product. The vmkernel can bootstrap itself now. Basically the old 1.0 - 4.0 process for _ESX_ was like this: * Bootloader * Linux Kernel boot * Load VMnix module. * Load VMkernel * hardware control passed to VMkernel * Linux continues running as a sort of 'super' VM with some limited hardware access. For _ESXi_ from 4.0 - now : * Bootloader * VMkernel

What's curious is that VMkernel's "personality" for ESXi userworlds (which are analogous to sessions IIRC) is it implements the x64 Linux ABI, with some signal/syscalls masked.

I don't know if this was to make the transition for stuff like vpxa from ESX 4 on easier internally, or to make it easier for 3rd parties to develop against, or both.

Is it lazily wrapping some functionality that should be open sourced that fills in where the service console would normally be? Probably not, but I can see why people would be a little suspicious.

Re: VMWare Taken to Court Over GPL Violation

#165

I support Hellwig and the Conservancy in their claim, but I see an unfortunate consequence: This further hinders corporate adoption of open source software. This lawsuit reinforce the corporate legal mindset that "use of open source invites litigation...".

If licenses don't get enforced, "free" game engines like Unreal can't operate. You get the world where the only available code which do not require long meetings, massive upfront cash, lawyers and NDA's are those tiny exceptions which are given under public domain. That is not a future anyone should wish onto the software industry.

Re: VMWare Taken to Court Over GPL Violation

#166

The GNU license doesn't sound very "free" to me. It's strange that the owners of GNU code think that all additions to their code should rightly be released to the public (even if they never wrote the additions). The original code is still "free" for the world to use, so there really isn't anything being taken.

They way I view it, GPL is free provided it's the status quo for everything to be "free software", and it is the goal of GNU to make such a world. BSD / ASL is is free in the mixed environment that is our current reality. I admire the idealism of the GPL and believe it has achieved much. But for getting work done right now, I find the BSD / ASL is more appropriate.

edit: side note - I know many customers are very happy to adopt BSD / ASL software, but more hesitant to adopt GPL because not everything they do can or will be open-source. If, one day, everyone is using like BSD or ASL or GPL, switching to an all GPL world becomes more feasible.

Re: VMWare Taken to Court Over GPL Violation

#167
post #152

Earlier quoted context omitted.

That would be an interesting result. To my knowledge the GPL (any version) hasn't actually been litigated to the point of a published decision (would love to hear that it had). That said, (and continuing with my possibly incorrect assumption that the GPL hasn't been litigated) if it does get decided that this remedy can be enforced by the license holders through the court, I expect it will create the largest software…

Taking games as an example, in todays AAA games most have a long list of licensed work, with everything from personal permission slips to standard licenses like proprietary licensed third-party, lgpl, apache, bsd, mit and project specific ones. If they mess up on any single of those license requirement, they risk inoperation for the whole product. If a company want to remove this risk, they can't license someone else…

> Taking games as an example, in todays AAA games most have a long list of licensed work, with everything from personal permission slips to standard licenses like proprietary licensed third-party, lgpl, apache, bsd, mit and project specific ones. If they mess up on any single of those license requirement, they risk inoperation for the whole product.

Commercial engines generally have a clause in there that you are not allowed to bring any GPL code in contact with the engine, no exceptions.

Re: VMWare Taken to Court Over GPL Violation

#168

LWN has a very clear explanation of just how clear-cut this is: https://lwn.net/SubscriberLink/635290/e501ce0264c182f4/ In particular, this isn't just a question of whether a kernel module is a derived work of the kernel. Apparently VMWare has copied code from the Linux kernel, with GPLed headers on top, and compiled that code directly into some of their code.

I don't think it is as clear cut at all, but that makes it much more interesting. I left a comment there, but it bears some repeating I think ESXi's kernel does not bootstrap itself from Linux at all. There is no linux kernel as such [1] ESXi does reuse linux kernel drivers ... a lot of them. But the way this happens is through a well-defined API provided by (proprietary) vmkernel called vmkapi. What you are seeing i…

From reading the linked article, it read to me like the complaint asserts that VMKernel itself is a violation of the GPL. If I'm wrong, please feel free to correct me, but these statements seems to point in this direction

    Conservancy discovered that VMware had failed 
    to provide nor offer any source code for the 
    version of BusyBox included in VMware's ESXi products

    But ESXi is not a purely open-source product;
    it also contains a proprietary component called
    "vmkernel."

    VMware's developers appear to have taken a 
    substantial amount of kernel code, adapted 
    it heavily, and built it directly into 
    vmkernel itself

    
If so, that would be like me finding some code on Github, changing it a little, and then including it in my own closed source application, clearly a violation of the GPL.

Obviously though, I'm not sure how to prove that without the source of VMKernel

Again, this is honestly just how I'm reading it, if I'm wrong feel free to correct it.

Re: VMWare Taken to Court Over GPL Violation

#169
post #7
post #2

Is there any information about why VMware thinks they are not bound by the GPL? Curious whether they have a technical justification, rather than simply being a blatant licensing violation.

I'm not fully up-to-date on this case, but there is a bit of wiggle room on what counts as a derivative work, even in kernelspace. My favorite example is OpenAFS. Development of the AFS kernel module started in 1983, so the code is a decade older than Linux itself. So it's hard to argue that openafs.ko is a derivative work of Linux, and since it continues to run on several kernels other than Linux (Darwin, Solaris, N…

> VMware is providing the core kernel routines like scheduling and memory management

According to the LWN article someone linked[1], they're actually using modified versions of the Linux scheduling code in their hypervisor, along with the Linux implementations of fundamental data structures like radix trees. They're probably in deep trouble.

[1] https://lwn.net/SubscriberLink/635290/e501ce0264c182f4/

Re: VMWare Taken to Court Over GPL Violation

#170
post #163

Earlier quoted context omitted.

Aside, shouldn't you be parsimonious with subscriber links for LWN and not post them publicly? I haven't had a LWN subscription in a while, but I really like their business model. I would not have posted this link myself.

No, the subscriber links are for exactly this kind of situation. They are to allow you to link to articles when it's relevant to a discussion, as long as you don't abuse them by doing something like posting a regular feed of all LWN articles or submitting every single one to Reddit/HN. Jonathan Corbet, editor of LWN, frequently posts his own subscriber links to LWN articles: https://news.ycombinator.com/submitted?id=…

Ah, I thought that might be the case. I wasn't sure. Thanks!
Post reply on HN