Mailing-List: contact dev-help@hawq.incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@hawq.incubator.apache.org
MIME-Version: 1.0
In-Reply-To: <CAMTyputAaviiGtnJM6u-pfTgz0fwd7BYqTekDztBceVWC+yYVw@mail.gmail.com>
References: <CAMTypuub8S+J5WYPqt8B9ke4TEJwduWVbaX-Ndcoa1aMeoasbQ@mail.gmail.com>
 <CAMTypuvhdht04=rU+NMBdtfF=dhGsR82+xxEG7nvP4caZabYuA@mail.gmail.com>
 <CA+ULb+v2pdwphOi4XKaLH4Mq5pCFL8qRP_CygSnjjWZDLNPsEQ@mail.gmail.com>
 <CAMTypus+O2wm_kNCzAXtt9DcGWPbUJzkAjKnEMG7-xaN9FXm6A@mail.gmail.com>
 <CA+ULb+tCVL_VO-Xw9va-xK0_Zr11FwWsTSb943AKCGL_v=Zucg@mail.gmail.com>
 <CAMTyputX1awfhw2BkgA3eRaD4amS_vG4SOgeiqVYj1Jxg7inHg@mail.gmail.com>
 <CA+ULb+swFXban8iBOAEoD1CLEuMLATaEkm6qintJMU+SNW0zwA@mail.gmail.com>
 <CAMTypus1_V1tS2Fx54P+JwO0mkBMxvANdac1CPair66Q7SnBEA@mail.gmail.com>
 <CA+ULb+u5DLBdQDB55+7GUfDQncp5xsdh4ydsm6OZdpUGzHRfQw@mail.gmail.com> <CAMTyputAaviiGtnJM6u-pfTgz0fwd7BYqTekDztBceVWC+yYVw@mail.gmail.com>
From: Ruilong Huo <rhuo@pivotal.io>
Date: Mon, 5 Jun 2017 22:48:24 +0800
Message-ID: <CAMTypuuO7WUdLGLE3ASDhgca73z28b-H9F5Mj6jUvTzv8wPdSg@mail.gmail.com>
Subject: Re: Layout of LICENSE, NOTICE, and DISCLAIMER files for Apache HAWQ
 2.2.0.0-incubating rpm binary release
To: dev@hawq.incubator.apache.org
Cc: Roman Shaposhnik <rshaposhnik@pivotal.io>, Hongxu Ma <hma@pivotal.io>
Content-Type: multipart/alternative; boundary="f403045f897c5af78d0551379826"
archived-at: Mon, 05 Jun 2017 14:48:37 -0000

--f403045f897c5af78d0551379826
Content-Type: text/plain; charset="UTF-8"

Hi Roman,

Please let us know if you have a chance to review the java components for
pxf and ranger and share with your feedback. Thanks.

Best regards,
Ruilong Huo

On Thu, Jun 1, 2017 at 7:36 AM, Ruilong Huo <rhuo@pivotal.io> wrote:

> The LICENSE, NOTICE, and DISCLAIMER files for hawq c/c++ components are
> available for review at PR #1246
> <https://github.com/apache/incubator-hawq/pull/1246>. Please find my
> clarification for your comments there.
>
> Please let us know if you have any feedback for java components (i.e.,
> pxf, ranger) so that we can prepare LICENSE, NOTICE, and DISCLAIMER files
> for them in separate PR.
>
> Best regards,
> Ruilong Huo
>
> On Wed, May 31, 2017 at 10:40 AM, Roman Shaposhnik <roman@shaposhnik.org>
> wrote:
>
>> It seems I need to spend a bit more time with Ranger artifact -- let
>> me tinker some
>> more and I'll let you guys know.
>>
>> In the meantime, I propose we go ahead with declaring C/C++ binary
>> dependencies
>> in our LICENSE/NOTICE.
>>
>> Thanks,
>> Roman.
>>
>> On Fri, May 26, 2017 at 10:06 PM, Ruilong Huo <rhuo@pivotal.io> wrote:
>> > Hi Roman,
>> >
>> > The stax-api and jabx-impl are bundled in Ranger, NOT PXF. To be
>> specific,
>> > they are in hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm which
>> is in
>> > apache-hawq-rpm-2.2.0.0-incubating.tar.gz
>> > <https://dist.apache.org/repos/dist/dev/incubator/hawq/2.2.
>> 0.0-incubating.RC2/apache-hawq-rpm-2.2.0.0-incubating.tar.gz>
>> > .
>> > You can get them with "rpm2cpio
>> > hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm | cpio -div".
>> >
>> > The details of the dependency shows that: stax-api and jabx-impl is
>> > dependency of hadoop-common, while hadoop-common is dependency ranger
>> > plugin in hawq.
>> >
>> > *$ mvn project-info-reports:dependencies*
>> > *[INFO] Scanning for projects...*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO] Reactor Build Order:*
>> > *[INFO]*
>> > *[INFO] HAWQ Ranger Plugin*
>> > *[INFO] HAWQ Ranger Admin Plugin*
>> > *[INFO] HAWQ Ranger Service*
>> > *[INFO]*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO] Building HAWQ Ranger Admin Plugin 2.2.0.0*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO]*
>> > *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @
>> > ranger-plugin-admin ---*
>> > *[INFO] org.apache.hawq:ranger-plugin-admin:jar:2.2.0.0*
>> > *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile*
>> > *[INFO] |  +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile*
>> > *[INFO] |  |  +- com.sun.jersey:jersey-json:jar:1.9:compile*
>> > *[INFO] |  |  |  +- org.codehaus.jettison:jettison:jar:1.1:compile*
>> > *[INFO] |  |  |  +- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile*
>> > *[INFO] |  |  |  |  \- javax.xml.bind:jaxb-api:jar:2.2.2:compile*
>> > *[INFO] |  |  |  |     +- javax.xml.stream:stax-api:jar:1.0-2:compile*
>> > *[INFO] |  |  |  |     \- javax.activation:activation:jar:1.1:compile*
>> > *[INFO] ......*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO] Building HAWQ Ranger Service 2.2.0.0*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO]*
>> > *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @
>> > ranger-plugin-service ---*
>> > *[INFO] org.apache.hawq:ranger-plugin-service:war:2.2.0.0*
>> > *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile*
>> > *[INFO] |  +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile*
>> > *[INFO] |  |  +- com.sun.jersey:jersey-json:jar:1.9:compile*
>> > *[INFO] |  |  |  +- org.codehaus.jettison:jettison:jar:1.1:compile*
>> > *[INFO] |  |  |  \- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile*
>> > *[INFO] |  |  |     \- javax.xml.bind:jaxb-api:jar:2.2.2:compile*
>> > *[INFO] |  |  |        +- javax.xml.stream:stax-api:jar:1.0-2:compile*
>> > *[INFO] |  |  |        \- javax.activation:activation:jar:1.1:compile*
>> > *[INFO] ......*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO] Reactor Summary:*
>> > *[INFO]*
>> > *[INFO] HAWQ Ranger Plugin ................................. SUCCESS [
>> >  0.425 s]*
>> > *[INFO] HAWQ Ranger Admin Plugin ........................... SUCCESS [
>> >  0.252 s]*
>> > *[INFO] HAWQ Ranger Service ................................ SUCCESS [
>> >  0.099 s]*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO] BUILD SUCCESS*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> > *[INFO] Total time: 0.992 s*
>> > *[INFO] Finished at: 2017-05-22T17:24:15+08:00*
>> > *[INFO] Final Memory: 19M/437M*
>> > *[INFO]
>> > ------------------------------------------------------------
>> ------------*
>> >
>> > Best regards,
>> > Ruilong Huo
>> >
>> > On Sat, May 27, 2017 at 7:32 AM, Roman Shaposhnik <roman@shaposhnik.org
>> >
>> > wrote:
>> >
>> >> On Fri, May 26, 2017 at 8:11 AM, Ruilong Huo <rhuo@pivotal.io> wrote:
>> >> > Hi Roman,
>> >> >
>> >> > Thanks for your feedback!
>> >> >
>> >> > We will merge the license information for the C/C++ components and
>> >> prepare
>> >> > LICENSE and NOTICE files accordingly.
>> >>
>> >> Great! Let me know when can I review the actual files.
>> >>
>> >> > As for JSON in PXF which is incompatible with ASL v2, the fix is to
>> >> replace
>> >> > it with some library which is compatible or remove it?
>> >>
>> >> Correct. Here's a list of alternative libraries you should start
>> migrating
>> >> to:
>> >>    https://wiki.debian.org/qa.debian.org/jsonevil
>> >>
>> >> There's also http://johnzon.apache.org/
>> >>
>> >> And finally:
>> >>
>> >> <dependency>
>> >>   <groupId>com.tdunning</groupId>
>> >>   <artifactId>json</artifactId>
>> >>   <version>1.0</version>
>> >> </dependency>
>> >>
>> >> > Furthermore, Hongxu helped to get the license information for Ranger
>> as
>> >> > well and it turns out that there two dependencies with GPL license
>> which
>> >> is
>> >> > also not compatible with ASL v2:
>> >> >
>> >> > 1. stax-api-1.0-2.jar (GPL): StAX is a standard XML processing API
>> that
>> >> > allows you to stream XML data from and to your application.
>> >> >
>> >> > 2. jaxb-impl-2.2.3-1.jar (CDDL 1.1 GPL 2.0): Old JAXB Runtime module.
>> >> > Contains sources required for runtime processing.
>> >> >
>> >> > They are actually directly required by hadoop common and thus is
>> >> indirectly
>> >> > required by HAWQ Ranger.
>> >>
>> >> I still need to double check it -- but I think those just bring in the
>> >> APIs which
>> >> get replaced during the runtime. Will take a deeper look, though.
>> >>
>> >> > They are bundled hawq binary during packaging with
>> >> > maven.
>> >>
>> >> Wait. Where are they bundled? I don't see them as part of PXF?
>> >
>> >
>> >
>> >
>> >> Thanks,
>> >> Roman.
>> >>
>>
>
>

--f403045f897c5af78d0551379826--