Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-dev@incubator.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: 
 <CAKprHVZZvJdxzJVJauegRC1M83J=Y_0wB3wuJ9x0AYW=JcFrMg@mail.gmail.com>
References: 
 <CA+96GG69GciCFBqLehBRFxpwc0yAFbHUZ9ayy0_yfn7-Ntdxyg@mail.gmail.com>
	<CAKprHVZZvJdxzJVJauegRC1M83J=Y_0wB3wuJ9x0AYW=JcFrMg@mail.gmail.com>
Date: Wed, 8 Aug 2012 14:46:15 -0400
Message-ID: 
 <CA+96GG44CChPD=joPcBZP2Xp39epJDWnSpNp_TCiCL8S8C4MaQ@mail.gmail.com>
Subject: Re: Binary dependencies
From: Chip Childers <chip.childers@sungard.com>
To: David Nalley <david@gnsa.us>
Cc: cloudstack-dev@incubator.apache.org
Content-Type: text/plain; charset=ISO-8859-1

On Wed, Aug 8, 2012 at 2:21 PM, David Nalley <david@gnsa.us> wrote:
> On Wed, Aug 8, 2012 at 2:13 PM, Chip Childers <chip.childers@sungard.com> wrote:

(snip)

>> 2 - Assuming that *some* solution for dependency downloads is
>> achieved, do we assume that the license contained within the download
>> is authoritative?  I'm pretty sure the answer is yes, but that leads
>> to a followup question: Do do we note the source download location in
>> the NOTICE file and the more easily found project homepage?
>
> So interesting problem
> So my reading of this:
> http://incubator.apache.org/guides/releasemanagement.html#best-practice-license
>
> suggests to me that we don't need to add anything to the notice file
> that we aren't shipping. (this likely means a separate notice file for
> the convenience build) If we actually get rid of all of the jars in a
> timely manner, that should make the source notice easy. But if we are
> actually shipping code then the license contained by the code is
> authoritative.
>
> --David

Agreed... there are really 2 LICENSE and HEADER files that we need to
deal with.  Source distro and binary distro.  Assuming we're talking
about the binary distro, then I think we should, in fact, assume that
the actual license from the downloaded binary is authoritative.

Unless anyone objects, I'll start heading down that path.

-chip