Mailing-List: contact dev-help@hawq.incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@hawq.incubator.apache.org
MIME-Version: 1.0
Sender: shaposhnik@gmail.com
In-Reply-To: <CAMTypus1_V1tS2Fx54P+JwO0mkBMxvANdac1CPair66Q7SnBEA@mail.gmail.com>
References: <CAMTypuub8S+J5WYPqt8B9ke4TEJwduWVbaX-Ndcoa1aMeoasbQ@mail.gmail.com>
 <CAMTypuvhdht04=rU+NMBdtfF=dhGsR82+xxEG7nvP4caZabYuA@mail.gmail.com>
 <CA+ULb+v2pdwphOi4XKaLH4Mq5pCFL8qRP_CygSnjjWZDLNPsEQ@mail.gmail.com>
 <CAMTypus+O2wm_kNCzAXtt9DcGWPbUJzkAjKnEMG7-xaN9FXm6A@mail.gmail.com>
 <CA+ULb+tCVL_VO-Xw9va-xK0_Zr11FwWsTSb943AKCGL_v=Zucg@mail.gmail.com>
 <CAMTyputX1awfhw2BkgA3eRaD4amS_vG4SOgeiqVYj1Jxg7inHg@mail.gmail.com>
 <CA+ULb+swFXban8iBOAEoD1CLEuMLATaEkm6qintJMU+SNW0zwA@mail.gmail.com> <CAMTypus1_V1tS2Fx54P+JwO0mkBMxvANdac1CPair66Q7SnBEA@mail.gmail.com>
From: Roman Shaposhnik <roman@shaposhnik.org>
Date: Tue, 30 May 2017 19:40:18 -0700
Message-ID: <CA+ULb+u5DLBdQDB55+7GUfDQncp5xsdh4ydsm6OZdpUGzHRfQw@mail.gmail.com>
Subject: Re: Layout of LICENSE, NOTICE, and DISCLAIMER files for Apache HAWQ
 2.2.0.0-incubating rpm binary release
To: dev@hawq.incubator.apache.org
Cc: Roman Shaposhnik <rshaposhnik@pivotal.io>, Hongxu Ma <hma@pivotal.io>
Content-Type: text/plain; charset="UTF-8"
archived-at: Wed, 31 May 2017 02:40:26 -0000

It seems I need to spend a bit more time with Ranger artifact -- let
me tinker some
more and I'll let you guys know.

In the meantime, I propose we go ahead with declaring C/C++ binary dependencies
in our LICENSE/NOTICE.

Thanks,
Roman.

On Fri, May 26, 2017 at 10:06 PM, Ruilong Huo <rhuo@pivotal.io> wrote:
> Hi Roman,
>
> The stax-api and jabx-impl are bundled in Ranger, NOT PXF. To be specific,
> they are in hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm which is in
> apache-hawq-rpm-2.2.0.0-incubating.tar.gz
> <https://dist.apache.org/repos/dist/dev/incubator/hawq/2.2.0.0-incubating.RC2/apache-hawq-rpm-2.2.0.0-incubating.tar.gz>
> .
> You can get them with "rpm2cpio
> hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm | cpio -div".
>
> The details of the dependency shows that: stax-api and jabx-impl is
> dependency of hadoop-common, while hadoop-common is dependency ranger
> plugin in hawq.
>
> *$ mvn project-info-reports:dependencies*
> *[INFO] Scanning for projects...*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO] Reactor Build Order:*
> *[INFO]*
> *[INFO] HAWQ Ranger Plugin*
> *[INFO] HAWQ Ranger Admin Plugin*
> *[INFO] HAWQ Ranger Service*
> *[INFO]*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO] Building HAWQ Ranger Admin Plugin 2.2.0.0*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO]*
> *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @
> ranger-plugin-admin ---*
> *[INFO] org.apache.hawq:ranger-plugin-admin:jar:2.2.0.0*
> *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile*
> *[INFO] |  +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile*
> *[INFO] |  |  +- com.sun.jersey:jersey-json:jar:1.9:compile*
> *[INFO] |  |  |  +- org.codehaus.jettison:jettison:jar:1.1:compile*
> *[INFO] |  |  |  +- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile*
> *[INFO] |  |  |  |  \- javax.xml.bind:jaxb-api:jar:2.2.2:compile*
> *[INFO] |  |  |  |     +- javax.xml.stream:stax-api:jar:1.0-2:compile*
> *[INFO] |  |  |  |     \- javax.activation:activation:jar:1.1:compile*
> *[INFO] ......*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO] Building HAWQ Ranger Service 2.2.0.0*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO]*
> *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @
> ranger-plugin-service ---*
> *[INFO] org.apache.hawq:ranger-plugin-service:war:2.2.0.0*
> *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile*
> *[INFO] |  +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile*
> *[INFO] |  |  +- com.sun.jersey:jersey-json:jar:1.9:compile*
> *[INFO] |  |  |  +- org.codehaus.jettison:jettison:jar:1.1:compile*
> *[INFO] |  |  |  \- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile*
> *[INFO] |  |  |     \- javax.xml.bind:jaxb-api:jar:2.2.2:compile*
> *[INFO] |  |  |        +- javax.xml.stream:stax-api:jar:1.0-2:compile*
> *[INFO] |  |  |        \- javax.activation:activation:jar:1.1:compile*
> *[INFO] ......*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO] Reactor Summary:*
> *[INFO]*
> *[INFO] HAWQ Ranger Plugin ................................. SUCCESS [
>  0.425 s]*
> *[INFO] HAWQ Ranger Admin Plugin ........................... SUCCESS [
>  0.252 s]*
> *[INFO] HAWQ Ranger Service ................................ SUCCESS [
>  0.099 s]*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO] BUILD SUCCESS*
> *[INFO]
> ------------------------------------------------------------------------*
> *[INFO] Total time: 0.992 s*
> *[INFO] Finished at: 2017-05-22T17:24:15+08:00*
> *[INFO] Final Memory: 19M/437M*
> *[INFO]
> ------------------------------------------------------------------------*
>
> Best regards,
> Ruilong Huo
>
> On Sat, May 27, 2017 at 7:32 AM, Roman Shaposhnik <roman@shaposhnik.org>
> wrote:
>
>> On Fri, May 26, 2017 at 8:11 AM, Ruilong Huo <rhuo@pivotal.io> wrote:
>> > Hi Roman,
>> >
>> > Thanks for your feedback!
>> >
>> > We will merge the license information for the C/C++ components and
>> prepare
>> > LICENSE and NOTICE files accordingly.
>>
>> Great! Let me know when can I review the actual files.
>>
>> > As for JSON in PXF which is incompatible with ASL v2, the fix is to
>> replace
>> > it with some library which is compatible or remove it?
>>
>> Correct. Here's a list of alternative libraries you should start migrating
>> to:
>>    https://wiki.debian.org/qa.debian.org/jsonevil
>>
>> There's also http://johnzon.apache.org/
>>
>> And finally:
>>
>> <dependency>
>>   <groupId>com.tdunning</groupId>
>>   <artifactId>json</artifactId>
>>   <version>1.0</version>
>> </dependency>
>>
>> > Furthermore, Hongxu helped to get the license information for Ranger as
>> > well and it turns out that there two dependencies with GPL license which
>> is
>> > also not compatible with ASL v2:
>> >
>> > 1. stax-api-1.0-2.jar (GPL): StAX is a standard XML processing API that
>> > allows you to stream XML data from and to your application.
>> >
>> > 2. jaxb-impl-2.2.3-1.jar (CDDL 1.1 GPL 2.0): Old JAXB Runtime module.
>> > Contains sources required for runtime processing.
>> >
>> > They are actually directly required by hadoop common and thus is
>> indirectly
>> > required by HAWQ Ranger.
>>
>> I still need to double check it -- but I think those just bring in the
>> APIs which
>> get replaced during the runtime. Will take a deeper look, though.
>>
>> > They are bundled hawq binary during packaging with
>> > maven.
>>
>> Wait. Where are they bundled? I don't see them as part of PXF?
>
>
>
>
>> Thanks,
>> Roman.
>>