incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Adrian Cole <adrian.f.c...@gmail.com>
Subject Re: Does Zipkin need to sign a SGA ?
Date Thu, 27 Sep 2018 21:28:57 GMT
Hi, all.

Assuming the primary provenance concern is Twitter, I'm looping in
Ravi who is happy to help where he can, subject to personal
availability. Just keep in mind that the repository mentioned is in
almost 100% Java and no Java code was written by Twitter employees.

This was done after Twitter donated the project to the OpenZipkin
community. I wrote a great deal of it, but there are quite a lot of
contributors who wrote significant parts of the code, and none of them
are my colleagues nor twitter employees. All code written since
OpenZipkin came with the clause mentioned in the earlier
CONTRIBUTING.md that contributions would be licensed for distribution
in ASL. Changing the headers from "The OpenZipkin Authors" to "The
Apache Authors" or whatever we have to do is unlikely to cause a stir.

So, basically I'm sure many of us would like to know where the
concerns are and how to address concretely what is of issue.

Best,
-A
On Wed, Sep 19, 2018 at 11:09 AM Craig Russell <apache.clr@gmail.com> wrote:
>
> Hi Alex,
>
> Without going into history let's discuss the current guidance: http://www.apache.org/licenses/#provenance
>
> If you want to cite historical references that conflict with this, we can have that discussion.
>
> Establishing provenance is one of the primary tasks of a project in incubation. In order
to change the headers on code, the owners of the IP for that code need to agree. SGA or ICLA
is documentation of that agreement.
>
> Regards,
>
> Craig
>
> > On Sep 18, 2018, at 11:38 PM, Alex Harui <aharui@adobe.com.INVALID> wrote:
> >
> > I may be mis-remembering, but I thought that an SGA wasn't required for ALv2 code.
 OpenZipkin appears to be ALv2.  The licenses in the SGA are pretty much the same as in ALv2.
> > I thought that for ALv2 code, we mostly cared that the community documented that
it was willing to make the move from wherever the code is now to the ASF, and it wasn't super
important to get approval from folks with minor contributions as long as we were confident
their contributions were under ALv2.
> >
> > Once the community has approved the move to the ASF, any copyright holder or an
agent can replace the headers with the ASF header.
> >
> > Of course, I could be wrong...
> > -Alex
> >
> > On 9/18/18, 7:00 PM, "Adrian Cole" <adrian.f.cole@gmail.com <mailto:adrian.f.cole@gmail.com>>
wrote:
> >
> >    Hi, John
> >
> >    Thanks for the input. So, I would hazard a guess that Twitter folks
> >    would like to help with this. I'm not sure who would want to hunt
> >    through the management chain to find someone to reverse-own a decision
> >    made 3 years ago, though! Regardless, on my part, I'll see if I can
> >    find a champion inside Twitter to resurrect and SGA.
> >
> >    Best,
> >    -A
> >    On Wed, Sep 19, 2018 at 9:36 AM John D. Ament <johndament@apache.org> wrote:
> >>
> >> Thanks Adrian.  Some comments/banter below.
> >>
> >> Migrating a repository from one org to another does not require an SGA.  If
> >> it did, we would not be able to have code living in our repos that had
> >> headers other than the ASF standard headers (e.g. BSD licenses, or Apache
> >> License w/ different copyright statements).  The SGA is used to replace the
> >> headers with the standard ASF headers.  We should not block migrating the
> >> repositories over while the SGA/ICLA is worked out.
> >>
> >> Resolving the SGA/ICLA situation would block graduation - we should ensure
> >> that the provenance is in place, which is part of the incubation process.
> >> This doesn't need to be solved on day 1, but by the time the podling is
> >> ready to graduate.
> >>
> >> With that said, from a pure foundation standpoint it would be ideal to
> >> receive a SGA from Twitter.  Even if the current code doesn't match the
> >> code at the time of Twitter's conversion, it gives us a better IP history
> >> for the codebase to answer questions and deal with any potential problems
> >> that may come up along the way.  However, to be realistic I believe if we
> >> receive an ICLA from the primary contributors based on [1], that should
> >> satisfy enough providence of the codebase, in addition to the contribution
> >> process that Adrian has pointed out below.
> >>
> >> Thoughts?
> >>
> >> John
> >>
> >> [1]: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin%2Fgraphs%2Fcontributors&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=uM8FYSSrTEoprQjlxBn7CaGMUUKN1q5kFIKZbwJK5OI%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin%2Fgraphs%2Fcontributors&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=uM8FYSSrTEoprQjlxBn7CaGMUUKN1q5kFIKZbwJK5OI%3D&amp;reserved=0>
> >>
> >> On Tue, Sep 18, 2018 at 9:25 PM Adrian Cole <adrian.f.cole@gmail.com <mailto:adrian.f.cole@gmail.com>>
wrote:
> >>
> >>> There was a process involved at Twitter when we first moved it to the
> >>> openzipkin organization. It was 100% clear that this was an act for
> >>> the community to control the code.  Senior management were involved
> >>> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fd%2Fmsg%2Fzipkin-user%2FfbOgEZpuQx4%2FbWH1-__EmCoJ&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=zCuH4RUT5mF8O8%2FuE1Q2LF7ug6XxieKzTY%2FixIPnupo%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fd%2Fmsg%2Fzipkin-user%2FfbOgEZpuQx4%2FbWH1-__EmCoJ&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=zCuH4RUT5mF8O8%2FuE1Q2LF7ug6XxieKzTY%2FixIPnupo%3D&amp;reserved=0>
> >>>
> >>> After that, all the repositories had contributing files like the below
> >>> indicating that all changes we to be redistributable under ASL
> >>>
> >>> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkine%2Fzipkin%2Fblob%2Fmaster%2F.github%2FCONTRIBUTING.md%23license&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=KUQH3PeI%2FQvQ2dzs1CYdGZVtSRCS0wOnJaPIYAvbMYs%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkine%2Fzipkin%2Fblob%2Fmaster%2F.github%2FCONTRIBUTING.md%23license&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=KUQH3PeI%2FQvQ2dzs1CYdGZVtSRCS0wOnJaPIYAvbMYs%3D&amp;reserved=0>
> >>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin%2Fblob%2Fmaster%2F.github%2FCONTRIBUTING.md%23license&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=8%2Fx%2BpmxlUvivCroYblZxO7XmCoSlqH%2BLyYTaEeqD3GM%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin%2Fblob%2Fmaster%2F.github%2FCONTRIBUTING.md%23license&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=8%2Fx%2BpmxlUvivCroYblZxO7XmCoSlqH%2BLyYTaEeqD3GM%3D&amp;reserved=0>>
> >>>
> >>> There was no collection of contributor agreements beyond this. Most of
> >>> the code except save some UI assets have been completely rewritten
> >>> since the migration to OpenZipkin a few years back.
> >>>
> >>> Hope these details help,
> >>> -A
> >>> On Wed, Sep 19, 2018 at 9:09 AM Craig Russell <apache.clr@gmail.com <mailto:apache.clr@gmail.com>>
> >>> wrote:
> >>>>
> >>>> Hi Mick,
> >>>>
> >>>> tldr; with my Incubator PMC hat on, "all that needs to be done" is to
> >>> establish that all of the copyright owners sign either a Software Grant
or
> >>> an ICLA.
> >>>>
> >>>> In order to establish that Apache has the rights to the code base, every
> >>> line of code needs to have its provenance researched.
> >>>>
> >>>> Looking at the proposal https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.apache.org%2Fincubator%2FZipkinProposal&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=V%2FPLstoMZBDO%2B8nIMbB%2BDZudrj4dN4eqEy6gXXSMtZg%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.apache.org%2Fincubator%2FZipkinProposal&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=V%2FPLstoMZBDO%2B8nIMbB%2BDZudrj4dN4eqEy6gXXSMtZg%3D&amp;reserved=0>
> >>> it seems like most of the code is in the github repository
> >>> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=VLdjVgCfIGAIBOidw5unecGC%2FqQoHJx8ZHwPPrZuLVY%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=VLdjVgCfIGAIBOidw5unecGC%2FqQoHJx8ZHwPPrZuLVY%3D&amp;reserved=0>
. Is there any code coming from
> >>> another source? Was the original code from Twitter granted to OpenZipkin?
> >>> Is there any documentation of that copyright transfer? Does Twitter retain
> >>> any rights?
> >>>>
> >>>> The capitalization of the "Initial Source" section is a bit strange.
But
> >>> can we assume that the only committers to the project are listed at
> >>> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin%2Fgraphs%2Fcontributors&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=uM8FYSSrTEoprQjlxBn7CaGMUUKN1q5kFIKZbwJK5OI%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fopenzipkin%2Fzipkin%2Fgraphs%2Fcontributors&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=uM8FYSSrTEoprQjlxBn7CaGMUUKN1q5kFIKZbwJK5OI%3D&amp;reserved=0>
?
> >>>>
> >>>> The proposal also says that "All source code is copyrighted to 'The
> >>> OpenZipkin Authors', to which the existing core community(members list in
> >>> Initial Committers) has the rights to re-assign to the ASF. "
> >>>>
> >>>> It looks like there were many people who contributed a few lines of
> >>> code. Did they sign anything like a Contributor Agreement that grants their
> >>> copyright to The OpenZipkin Authors?
> >>>>
> >>>> Craig
> >>>>
> >>>>> On Sep 18, 2018, at 4:58 PM, Mick Semb Wever <mck@apache.org
<mailto:mck@apache.org>> wrote:
> >>>>>
> >>>>>
> >>>>> It's come up that the migration of the github Zipkin repositories
to
> >>> ASF requires either a signed SGA or a sign-off from the Secretary. Chris
> >>> raised this on `INFRA-16989 – Zipkin incubator project request for the
> >>> GitHub repositories moving service`.
> >>>>>
> >>>>> I was under the impression that if the Copyright was already held
by
> >>> the community, it is held by 'The OpenZipkin Authors', that the ICLA from
> >>> all those authors would suffice and a SGA not be required. And it's news
to
> >>> me that this would also require a sign-off from the ASF Secretary.
> >>>>>
> >>>>> What's the correct process here? who can help? should I forward
the
> >>> question to the Secretary?
> >>>>>
> >>>>> regards,
> >>>>> Mick
> >>>>>
> >>>>> ---------------------------------------------------------------------
> >>>>> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
<mailto:general-unsubscribe@incubator.apache.org>
> >>>>> For additional commands, e-mail: general-help@incubator.apache.org
<mailto:general-help@incubator.apache.org>
> >>>>>
> >>>>
> >>>> Craig L Russell
> >>>> Secretary, Apache Software Foundation
> >>>> clr@apache.org <mailto:clr@apache.org> <mailto:clr@apache.org
<mailto:clr@apache.org>> https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdb.apache.org%2Fjdo&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=z8%2BGhYTmcV1p7Ts%2FixW8BZ6Kyv02YRe4%2FyKMGV25d2k%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdb.apache.org%2Fjdo&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=z8%2BGhYTmcV1p7Ts%2FixW8BZ6Kyv02YRe4%2FyKMGV25d2k%3D&amp;reserved=0>
<
> >>> https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdb.apache.org%2Fjdo&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=z8%2BGhYTmcV1p7Ts%2FixW8BZ6Kyv02YRe4%2FyKMGV25d2k%3D&amp;reserved=0
<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdb.apache.org%2Fjdo&amp;data=02%7C01%7Caharui%40adobe.com%7Cb6688cfbd5c643fd589d08d61dd3a1dd%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636729192122171615&amp;sdata=z8%2BGhYTmcV1p7Ts%2FixW8BZ6Kyv02YRe4%2FyKMGV25d2k%3D&amp;reserved=0>>
> >>>
> >>> ---------------------------------------------------------------------
> >>> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org <mailto:general-unsubscribe@incubator.apache.org>
> >>> For additional commands, e-mail: general-help@incubator.apache.org <mailto:general-help@incubator.apache.org>
> >>>
> >>>
> >
> >    ---------------------------------------------------------------------
> >    To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> >    For additional commands, e-mail: general-help@incubator.apache.org
> >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> > For additional commands, e-mail: general-help@incubator.apache.org
>
> Craig L Russell
> Secretary, Apache Software Foundation
> clr@apache.org <mailto:clr@apache.org> http://db.apache.org/jdo <http://db.apache.org/jdo>

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message