[HBASE-22954] Whitelist net.java.dev.jna which got pulled in through Hadoop 3.3.0

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha-1, 2.3.0, 2.1.7, 2.2.2
• Fix Version/s: 3.0.0-alpha-1, 2.3.0, 2.2.1, 2.1.7
• Component/s: community, hadoop3
• Assignee: Wei-Chiu Chuang
• Reporter: Wei-Chiu Chuang
• Created: 30/Aug/19 19:40
• Updated: 17/Mar/20 00:09
• Resolved: 03/Sep/19 17:56

Description

YARN-9477 added a new dependency net.java.dev.jna, which resulted in license check failure in HBase because the checker thinks it's LGPL 2.1 licensed. But in fact, it is dual licensed.

  <name>Java Native Access</name>
  <description>Java Native Access</description>
  <url>https://github.com/java-native-access/jna</url>

  <licenses>
      <license>
          <name>LGPL, version 2.1</name>
          <url>http://www.gnu.org/licenses/licenses.html</url>
          <distribution>repo</distribution>
      </license>
      <license>
          <name>Apache License v2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
          <distribution>repo</distribution>
      </license>
  </licenses>

We can
(1) white list this dependency
(2) or update the license checker to search for if any of the licenses is permitted

Issue Links

• is related to: HBASE-22953 Supporting Hadoop 3.3.0
• relates to: YARN-9477 Implement VE discovery using libudev