Watch out when updating Hashicorp packages!

[Bob Mauchin]

Hello,

Hashicorp just moved all their products to a non-free license:
https://www.hashicorp.com/blog/hashicorp-adopts-business-source-license

We can't update their packages past this point as BUSL is explicitly not
allowed in Fedora.

Cheers,

Robert-André

[Alejandro Saez Morollon]

Thanks for the notification. That's not good news :(

I guess at that point we should deprecate them. Maybe other repositories
like RPMFusion can take them.

On Fri, Aug 11, 2023 at 7:07 AM Bob Mauchin  wrote:
> Hello,
>
> Hashicorp just moved all their products to a non-free license:
> https://www.hashicorp.com/blog/hashicorp-adopts-business-source-license
>
> We can't update their packages past this point as BUSL is explicitly not
> allowed in Fedora.
>
> Cheers,
>
> Robert-André
> _______________________________________________
> golang mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue

[Mikel Olasagasti]

I checked all specs that have hashicorp name on it and only
golang-github-hashicorp-consul.spec would be affected partially by the
change.

As Hashicorp mentions in their blog "HashiCorp APIs, SDKs, and almost
all other libraries will remain MPL 2.0." and it seems the case for
consul' API and SDK:

https://github.com/hashicorp/consul/blob/main/api/LICENSE
https://github.com/hashicorp/consul/blob/main/sdk/LICENSE

Checking the spec it seems we don't build the consul binary and only
api & sdk are packaged:

https://src.fedoraproject.org/rpms/golang-github-hashicorp-consul/blob/rawhi...

But we'll have to be cautious with the updates.

--
Mikel

Hau idatzi du Bob Mauchin ([e-mail]) erabiltzaileak (2023
abu. 11(a), or. (07:07)):
> Hello,
>
> Hashicorp just moved all their products to a non-free license: https://www.hashicorp.com/blog/hashicorp-adopts-business-source-license
>
> We can't update their packages past this point as BUSL is explicitly not allowed in Fedora.
>
> Cheers,
>
> Robert-André
> _______________________________________________
> golang mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]
> Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue

[Maxwell G]

Hi everyone,

On Fri Aug 11, 2023 at 16:16 +0200, Mikel Olasagasti wrote:
> I checked all specs that have hashicorp name on it and only
> golang-github-hashicorp-consul.spec would be affected partially by the
> change.
>
> As Hashicorp mentions in their blog "HashiCorp APIs, SDKs, and almost
> all other libraries will remain MPL 2.0." and it seems the case for
> consul' API and SDK:
>
> https://github.com/hashicorp/consul/blob/main/api/LICENSE
> https://github.com/hashicorp/consul/blob/main/sdk/LICENSE
>
> Checking the spec it seems we don't build the consul binary and only
> api & sdk are packaged:
>
> https://src.fedoraproject.org/rpms/golang-github-hashicorp-consul/blob/rawhi...
>
> But we'll have to be cautious with the updates.

We can't even upload it to the lookaside cache, AFAIK.
I think someone will have to write a script to generate a custom archive
without any BUSL code in it like we do for non-free/patent encumbered
code in ffmpeg.

[Fabio Alessandro Locati]

Btw, looking for hashicorp in pakcage names is not enough.
An example is https://src.fedoraproject.org/rpms/vagrant

Best,
Fale

On Sat, Aug 12, 2023, at 18:45, Maxwell G wrote:
> Hi everyone,
>
> On Fri Aug 11, 2023 at 16:16 +0200, Mikel Olasagasti wrote:
> > I checked all specs that have hashicorp name on it and only
> > golang-github-hashicorp-consul.spec would be affected partially by the
> > change.
> >
> > As Hashicorp mentions in their blog "HashiCorp APIs, SDKs, and almost
> > all other libraries will remain MPL 2.0." and it seems the case for
> > consul' API and SDK:
> >
> > https://github.com/hashicorp/consul/blob/main/api/LICENSE
> > https://github.com/hashicorp/consul/blob/main/sdk/LICENSE
> >
> > Checking the spec it seems we don't build the consul binary and only
> > api & sdk are packaged:
> >
> > https://src.fedoraproject.org/rpms/golang-github-hashicorp-consul/blob/rawhi...
> >
> > But we'll have to be cautious with the updates.
>
> We can't even upload it to the lookaside cache, AFAIK.
> I think someone will have to write a script to generate a custom archive
> without any BUSL code in it like we do for non-free/patent encumbered
> code in ffmpeg.
>
> -- 
> Best,
>
> Maxwell G (@gotmax23)
> Pronouns: He/They
> _______________________________________________
> golang mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/[e-mail]
> Do not reply to spam, report it: 
> https://pagure.io/fedora-infrastructure/new_issue