Uploaded image for project: 'Legal Discuss'
  1. Legal Discuss
  2. LEGAL-450

Using GPL binary software (hadolint) in Apache Airflow's CI and local development tool

    XMLWordPrintableJSON

Details

    • Question
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • None

    Description

      We have a question whether it is OK from legal point of view to use GPL binary software in ASF Apache Airflow project. Can you confirm the below is good for ASF ?

       

      For Apache Airflow (we are planning to use https://github.com/hadolint/hadolint to verify our Dockerfile correctness. Hadolint Licence is GPL, but we are not using it from the sources, nor modifying them. We are using it from binary image distributed via DockerHub: https://hub.docker.com/r/hadolint/hadolint/dockerfile/ 

      We plan to run it only as part of our Travis-CI build & test process (so we are not including the library nor image in our repository). We only want to use scripts that download and execute the binary (Link to PR here):

      docker run -v $(pwd)/Dockerfile:/root/Dockerfile -v $(pwd)/.hadolint.yaml:/root/.hadolint.yaml \
       -w /root hadolint/hadolint /bin/hadolint Dockerfile
      

      We do the same in a script that we provide as a simple development tool to developers of Airflow (again this is just a script that executes the same command as above (which will Download the binary Docker image locally on the user's workstation and execute /bin/hadolint inside the container). Link to PR here.

      Another relevant piece of code is .hadolint.yaml file which is purely configuration file that specifies which errors should be ignored (we've added the ASF licence in configuration file as we add for all code in our repo). Link to PR here:

      #
      # Licensed to the Apache Software Foundation (ASF) under one
      # or more contributor license agreements. See the NOTICE file
      # distributed with this work for additional information
      # regarding copyright ownership. The ASF licenses this file
      # to you under the Apache License, Version 2.0 (the
      # "License"); you may not use this file except in compliance
      # with the License. You may obtain a copy of the License at
      #
      # http://www.apache.org/licenses/LICENSE-2.0
      #
      # Unless required by applicable law or agreed to in writing,
      # software distributed under the License is distributed on an
      # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
      # KIND, either express or implied. See the License for the
      # specific language governing permissions and limitations
      # under the License.
      #
      ignored:
       - DL3006
       - DL3008
       - DL3005
       - DL3013

       

       

       

      Attachments

        Activity

          People

            rvs Roman Shaposhnik
            potiuk Jarek Potiuk
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: