Automatically produce legal compliance info
v3 cover Automatically produce legal compliance info
Hi,
here is the third version of the legal-info feature implementation.
For the records, previous versions are here:
v1: http://lists.busybox.net/pipermail/buildroot/2012-January/049590.html
v2: http://lists.busybox.net/pipermail/buildroot/2012-March/051132.html
The approach is based on two per-package constants in eack .mk file, such as:
FOO_LICENSE = GPLv2+
FOO_LICENSE_FILES = COPYING
BAR_LICENSE = LGPLv2.1 + GPLv3
BAR_LICENSE_FILES = COPYING.LGPL demo-app/COPYING.GPL3 MYAPP_LICENSE = PROPRIETARY
This is the only effort required to the package creator. If <PKG>_LICENSE is not specified it defaults to "unknown".
After running 'make legal-info', the following things will be produced in $(O)/legal-info/:
$ find legal-info/ -type f legal-info/README # Lists saved stuff, warns about unsaved stuff legal-info/licenses.txt # Text of all licenses legal-info/buildroot.config # The buildroot config legal-info/licenses/buildroot/COPYING # License files, one dir per pkg legal-info/licenses/busybox/LICENSE legal-info/licenses/...other packages... legal-info/manifest.csv # CSV table summarizing all info legal-info/sources/busybox-1.19.4.tar.bz2 # tarballs legal-info/sources/kmod-5.tar.xz legal-info/sources/libtool-2.2.10.tar.gz legal-info/sources/...other packages...
Given the technical difficulties, the toolchain and the BR sources are not saved. Warnings are generated to make sure the user is aware of this.
One of the issues raised about the previous patchset was about packages without a license file, such as jpeg or fbset. These usually declare their license in a comment at the top of one or more source files.
Yann E. Morin suggested to solve this problem in a general way implementing a _LICENSE_HOOK that does whatever is needed to copy the license.
I found the idea good and started implementing it, but I did not reach anything decently structured yet. As I don't want to further delay the basic work, I chose to postpone this feature to a later step.
License compliance advice to users
==================================
During the latest Buildroot Developer Day in February, a request was made to give an advice from Buildroot developers' to Buildroot users about how to comply with both Buildroot's and the packages' licenses.
This is added to the manual in patch 9. Of course this must match as much as possible what the developers think, so please read it and give comments!
Possible future improvements
============================
These are left as future enhancemenst, after the merge of the first core functionality, in order to keep it as simple as possible for a first step.
- The toolchain is not currently saved (internal, external, ct-NG, no discrimination). Actually, only GENTARGETS-based packages are handled, so the best approach might be to "simply" migrate the toolchains to GENTARGETS.
- Save the Buildroot sources too. If the sources are not a git clone this might be as simple as tar of the current directory and exclude dl and output, but this has never been tested. Also, make sure this works for out-of-tree BR builds.
- Add a hook for a post-legal-info script.
- Add a <PKG>_LICENSE_HOOK for packages without a license file.
Changelog
=========
Changed in v3:
- moved the $(1)-legal-info target near the end of GENTARGETS_INNER, out of the may of target sequencing where it used to be in the previous patch sets;
- improved readability by creating a set of functions to produce a warning, to add a line to the csv, etc as suggested by ThomasDS (this made the core code shorter and cleaner);
- clarified the BSD-like licenses, differentiating 2/3/4 clauses and others;
- clarified *GPL licenses, and dropped definitions for packages that do not have a clear and simple use of those licenses (tslib, busybox, qt);
- dropped warning patches for tinyhttpd, xfsprogs, microperl, fis, doom-wads, uemacs and cups which have now been converted to GEN/AUTOTARGETS;
- updated after the split of Makefile.package.in in pkg-*.mk and related cleanups;
- added a few lines of explanation in the message of the first big commit that implements all the logic;
- documented the legal-info stuff in the manual;
- added (tentative) advice about Buildroot license compliance;
- various improvements here and there.
Changed in v2:
- squashed together patches 1-4 from RFC v1; now all the legal-info mechanism is implmented in a unique patch.
- rebase on top of current master
- don't clean $(REDIST_SOURCES_DIR): it is a subdir of $(LEGAL_INFO_DIR), so doesn't need to be cleaned twice
- added legal-info-clean target
- made legal-info target .PHONY
- remove the output/legal-info dir before populating it
- when saving source tarballs, create hardlinks instead of copies if possible
- add infrastructure to warn the user about info that has not been saved: a .warnings file is filled with such info and displayed to the user at the end of the legal-info processing
- ensure manual (non-GENTARGETS-based) packages return error, at least; this required to explicitly create a -legal-info target for each of them, or they would have been silently skipped.
- list also Buildroot in the manifest file! :)
- save the Buildroot .config
- save license files listed in <PKG>_LICENSE_FILES, both in a separate directory for each package and all together in a unique file
- various cleanups.
Patches
=======
- The implementation is all in the first commit, which is commented on its own.
- A few patches follow to make non-GENTARGETS packages warn about their dumbness.
- A couple of patches add documentation about the legal-info stuff.
- Other commits define licenses for some packages.
The following changes since commit 057c729c2438107b426576121bcf83f792734a6f:
external-toolchain: add support for Linaro 2012.04 (2012-05-07 17:08:37 +0200)
are available in the git repository at:
git://github.com/lucaceresoli/buildroot.git legal-info
Luca Ceresoli (22):
legal-info: infrastructure to collect legally-relevant material
gettext: warn that legal-info is not implemented
netkitbase: warn that legal-info is not implemented
netkittelnet: warn that legal-info is not implemented
newt: warn that legal-info is not implemented
ttcp: warn that legal-info is not implemented
vpnc: warn that legal-info is not implemented
manual: document usage of the legal-info feature
manual: add advice about GPL compliance for Buildroot
linux: define license
m4: define license
mpc: define license
fakeroot: define license
bzip2: define license
directfb: define license
iostat: define license
lzo: define license
lzop: define license
libusb: define license
pcre: define license
netsnmp: define license
berkeleydb: define license
Makefile | 42 +++++++++- docs/manual/adding-packages-gentargets.txt | 18 ++++ docs/manual/using.txt | 127 ++++++++++++++++++++++++++++ linux/linux.mk | 2 + package/berkeleydb/berkeleydb.mk | 2 + package/bzip2/bzip2.mk | 2 + package/directfb/directfb.mk | 2 + package/fakeroot/fakeroot.mk | 2 + package/gettext/gettext.mk | 3 + package/iostat/iostat.mk | 2 + package/libusb/libusb.mk | 2 + package/lzo/lzo.mk | 2 + package/lzop/lzop.mk | 2 + package/m4/m4.mk | 2 + package/mpc/mpc.mk | 2 + package/netkitbase/netkitbase.mk | 3 + package/netkittelnet/netkittelnet.mk | 3 + package/netsnmp/netsnmp.mk | 2 + package/newt/newt.mk | 3 + package/pcre/pcre.mk | 2 + package/pkg-gentargets.mk | 65 ++++++++++++++ package/pkg-utils.mk | 25 ++++++ package/ttcp/ttcp.mk | 3 + package/vpnc/vpnc.mk | 3 + support/legal-info/README.header | 24 +++++ support/legal-info/README.warnings-header | 4 + 26 files changed, 346 insertions(+), 3 deletions(-) create mode 100644 support/legal-info/README.header create mode 100644 support/legal-info/README.warnings-header
Luca
Signature · 1 line
1.7.5.4
PATCH v3 1/22 legal-info: infrastructure to collect legally-relevant material
This allows to automatically collect material that may be needed to comply with the license of packages that Buildroot prepares for the target device.
The core of the implementation is made by the following parts:
- in package/pkg-utils.mk some helper functions are defined for common actions such as generating a warning, producing info about a package etc;
- in package/pkg-gentargets.mk, within the GENTARGETS framework, a new <PKG>-legal-info target produces all the info for a given package;
- Makefile implements the top-level targets:
- legal-info-prepare creates the output directory and produces legal info about Buildroot itself and the toolchain, which mostly means just warning the user that this is not implemented;
- legal-info, the only target that is supposed to be used directly, depends on all of the above and finishes things by producing the README files from the various pieces.
--- Makefile | 42 +++++++++++++++++- package/pkg-gentargets.mk | 65 +++++++++++++++++++++++++++++ package/pkg-utils.mk | 25 +++++++++++ support/legal-info/README.header | 24 +++++++++++ support/legal-info/README.warnings-header | 4 ++ 5 files changed, 157 insertions(+), 3 deletions(-) create mode 100644 support/legal-info/README.header create mode 100644 support/legal-info/README.warnings-header
Makefile +39 -3
@@ -247,6 +247,14 @@ TARGET_DIR:=$(BASE_DIR)/target TOOLCHAIN_DIR=$(BASE_DIR)/toolchain TARGET_SKELETON=$(TOPDIR)/fs/skeleton +LEGAL_INFO_DIR=$(BASE_DIR)/legal-info +REDIST_SOURCES_DIR=$(LEGAL_INFO_DIR)/sources +LICENSE_FILES_DIR=$(LEGAL_INFO_DIR)/licenses +LEGAL_MANIFEST_CSV=$(LEGAL_INFO_DIR)/manifest.csv +LEGAL_LICENSES_TXT=$(LEGAL_INFO_DIR)/licenses.txt +LEGAL_WARNINGS=$(LEGAL_INFO_DIR)/.warnings +LEGAL_REPORT=$(LEGAL_INFO_DIR)/README + ifeq ($(BR2_CCACHE),y) CCACHE:=$(HOST_DIR)/usr/bin/ccache CCACHE_CACHE_DIR=$(HOME)/.buildroot-ccache
@@ -321,6 +329,10 @@ HOST_DEPS = $(sort $(foreach dep,\ $($(dep)))) HOST_SOURCE += $(addsuffix -source,$(sort $(TARGETS_HOST_DEPS) $(HOST_DEPS))) +TARGETS_LEGAL_INFO:=$(patsubst %,%-legal-info,\ + $(filter-out host-makedevs,\ + $(TARGETS) $(BASE_TARGETS) $(TARGETS_HOST_DEPS) $(HOST_DEPS)))) + # all targets depend on the crosscompiler and it's prerequisites $(TARGETS_ALL): __real_tgt_%: $(BASE_TARGETS) %
@@ -337,8 +349,9 @@ prepare: $(BUILD_DIR)/buildroot-config/auto.conf world: prepare dirs dependencies $(BASE_TARGETS) $(TARGETS_ALL) .PHONY: all world dirs clean distclean source outputmakefile \ + legal-info legal-info-prepare legal-info-clean \ $(BASE_TARGETS) $(TARGETS) $(TARGETS_ALL) \ - $(TARGETS_CLEAN) $(TARGETS_DIRCLEAN) $(TARGETS_SOURCE) \ + $(TARGETS_CLEAN) $(TARGETS_DIRCLEAN) $(TARGETS_SOURCE) $(TARGETS_LEGAL_INFO) \ $(DL_DIR) $(TOOLCHAIN_DIR) $(BUILD_DIR) $(STAGING_DIR) $(TARGET_DIR) \ $(HOST_DIR) $(BINARIES_DIR) $(STAMP_DIR)
@@ -348,7 +361,7 @@ world: prepare dirs dependencies $(BASE_TARGETS) $(TARGETS_ALL) # dependencies anywhere else # ############################################################# -$(DL_DIR) $(TOOLCHAIN_DIR) $(BUILD_DIR) $(HOST_DIR) $(BINARIES_DIR) $(STAMP_DIR): +$(DL_DIR) $(TOOLCHAIN_DIR) $(BUILD_DIR) $(HOST_DIR) $(BINARIES_DIR) $(STAMP_DIR) $(LEGAL_INFO_DIR) $(REDIST_SOURCES_DIR): @mkdir -p $@ $(STAGING_DIR):
@@ -451,6 +464,27 @@ source: dirs $(TARGETS_SOURCE) $(HOST_SOURCE) external-deps: @$(MAKE) -Bs DL_MODE=SHOW_EXTERNAL_DEPS $(EXTRAMAKEARGS) source | sort -u +legal-info-clean: + @rm -fr $(LEGAL_INFO_DIR) + +legal-info-prepare: $(LEGAL_INFO_DIR) + @$(call legal-license-file,buildroot,COPYING,COPYING) + @$(call legal-manifest,package,version,license,license files,source archive) + @$(call legal-manifest,buildroot,$(BR2_VERSION_FULL),GPLv2+,COPYING,not saved) + @$(call legal-warning,the Buildroot source code has not been saved) + @$(call legal-warning,the toolchain has not been saved) + @cp $(CONFIG_DIR)/.config $(LEGAL_INFO_DIR)/buildroot.config + +legal-info: legal-info-clean legal-info-prepare $(REDIST_SOURCES_DIR) \ + $(TARGETS_LEGAL_INFO) + @cat support/legal-info/README.header >>$(LEGAL_REPORT) + @if [ -r $(LEGAL_WARNINGS) ]; then \ + cat support/legal-info/README.warnings-header \ + $(LEGAL_WARNINGS) >>$(LEGAL_REPORT); \ + cat $(LEGAL_WARNINGS); fi + @echo "Legal info produced in $(LEGAL_INFO_DIR)" + @rm -f $(LEGAL_WARNINGS) + show-targets: @echo $(TARGETS)
@@ -572,7 +606,8 @@ endif clean: rm -rf $(STAGING_DIR) $(TARGET_DIR) $(BINARIES_DIR) $(HOST_DIR) \ - $(STAMP_DIR) $(BUILD_DIR) $(TOOLCHAIN_DIR) $(BASE_DIR)/staging + $(STAMP_DIR) $(BUILD_DIR) $(TOOLCHAIN_DIR) $(BASE_DIR)/staging \ + $(LEGAL_INFO_DIR) distclean: clean ifeq ($(DL_DIR),$(TOPDIR)/dl)
@@ -640,6 +675,7 @@ endif @echo ' source - download all sources needed for offline-build' @echo ' source-check - check all packages for valid download URLs' @echo ' external-deps - list external packages used' + @echo ' legal-info - generate info about license compliance' @echo @echo ' make V=0|1 - 0 => quiet build (default), 1 => verbose build' @echo ' make O=dir - Locate all output files in "dir", including .config'
package/pkg-gentargets.mk +65 -0
89 lines not on this page · raw message
package/pkg-utils.mk +25 -0
@@ -83,3 +83,28 @@ define sep endef + +# +# legal-info helper functions +# +LEGAL_INFO_SEPARATOR="::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::" +legal-warning=echo "WARNING: $(1)" >>$(LEGAL_WARNINGS) +legal-warning-pkg=echo "WARNING: $(1): $(2)" >>$(LEGAL_WARNINGS) +define legal-warning-pkg-savednothing # pkg, {local|override} + $(call legal-warning-pkg,$(1),sources and license files not saved ($(2) packages not handled)) +endef +legal-manifest=echo "$(1),$(2),$(3),$(4),$(5)" >>$(LEGAL_MANIFEST_CSV) +define legal-license-header + echo -e "$(LEGAL_INFO_SEPARATOR)\n\t$(1):" \ + "$(2)\n$(LEGAL_INFO_SEPARATOR)\n\n" >>$(LEGAL_LICENSES_TXT) +endef +define legal-license-nofiles + $(call legal-license-header,$(1),unknown license file(s)) +endef +define legal-license-file # pkg, filename, file-fullpath + $(call legal-license-header,$(1),$(2) file) && \ + cat $(3) >>$(LEGAL_LICENSES_TXT) && \ + echo >>$(LEGAL_LICENSES_TXT) && \ + mkdir -p $(LICENSE_FILES_DIR)/$(1)/ && \ + cp $(3) $(LICENSE_FILES_DIR)/$(1)/ +endef
support/legal-info/README.header new file +24 -0
@@ -0,0 +1,24 @@ +Most of the packages that were used by Buildroot to produce the image files, +including Buildroot itself, have open-source licenses. It is your +responsibility to comply to the requirements of these licenses. +To make this easier for you, Buildroot collected in this directory some +material you may need to get it done. + +This material is composed of the following items. + * The scripts used to control compilation of the packages and the generation + of image files, i.e. the Buildroot sources. + Note: this has not been saved due to technical limitations, you must + collect it manually. + * The Buildroot configuration file; this has been saved in buildroot.config. + * The toolchain (cross-compiler and related tools) used to generate all the + compiled programs. + Note: this has not been saved due to technical limitations, you must + collect it manually. + * The source code for all packages; this has been saved in the sources/ + subdirectory (except for the proprietary packages, which have not been + saved); patches applied to some packages by Buildroot are included in the + Buildroot sources and were not duplicated in the sources/ subdirectory. + * A manifest file listing the configured packages and related information. + * The license text of the packages; they have been saved in the licenses/ + subdirectory. +
support/legal-info/README.warnings-header new file +4 -0
@@ -0,0 +1,4 @@ +Due to technical limitations or lack of license definition in the package +makefile, some of the material listed above could not been saved, as the +following list details. +
Signature · 1 line
1.7.5.4
PATCH v3 2/22 gettext: warn that legal-info is not implemented
--- package/gettext/gettext.mk | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)
package/gettext/gettext.mk +3 -0
@@ -113,6 +113,9 @@ $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY): $(GETTEXT_DIR)/$(GETTEXT_BINARY) autopoint envsubst gettext.sh gettextize msg* ?gettext) touch -c $@ +gettext-legal-info: + @$(call legal-warning-pkg,gettext,cannot produce any legal info) + gettext: host-pkg-config $(if $(BR2_PACKAGE_LIBICONV),libiconv) $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY) gettext-unpacked: $(GETTEXT_DIR)/.unpacked
Signature · 1 line
1.7.5.4
PATCH v3 2/22 gettext: warn that legal-info is not implemented
Quoted 13 lines · Luca Ceresoli
Signed-off-by Luca Ceresoli <[email protected]>---
?package/gettext/gettext.mk | ? ?3 +++
?1 files changed, 3 insertions(+), 0 deletions(-)package/gettext/gettext.mk +0
-0@@ -113,6 +113,9 @@ $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY): $(GETTEXT_DIR)/$(GETTEXT_BINARY) ? ? ? ? ? ? ? ?autopoint envsubst gettext.sh gettextize msg* ?gettext)? ? ? ?touch -c $@
package/gettext/gettext.mk $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY): $(GETTEXT_DIR)/$(GETTEXT_BINARY) · line 118
Quoted 3 lines
package/gettext/gettext.mk +3
-0+gettext-legal-info: + ? ? ? @$(call legal-warning-pkg,gettext,cannot produce any legal info) +
I don't think this statement is not entirely correct. It's not that we 'cannot' produce the info. It's just that currently, we did not add the necessary license definitions, right?
What about something like 'legal-info not yet implemented' or 'no legal info saved yet' or ...?
Moreover, will this be added to each package for which no legal info is provided? What about making this message the default by putting it in pkg-gentargets.mk, if no suitable variables were defined?
Quoted 10 lines
?gettext: host-pkg-config $(if $(BR2_PACKAGE_LIBICONV),libiconv) $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY)
?gettext-unpacked: $(GETTEXT_DIR)/.unpacked
--
1.7.5.4_______________________________________________
buildroot mailing list
buildroot at busybox.net
http://lists.busybox.net/mailman/listinfo/buildroot
PATCH v3 2/22 gettext: warn that legal-info is not implemented
Hello,
Le Wed, 9 May 2012 08:21:25 +0200,
Thomas De Schampheleire <[email protected]> a ?crit :
Quoted 3 lines
Moreover, will this be added to each package for which no legal info is provided? What about making this message the default by putting it in pkg-gentargets.mk, if no suitable variables were defined?
It is already the case, but the point is that gettext has not yet been converted to gentargets (but Maxime Ripard and Samuel Martin have been sending patches about this recently).
Thomas
Signature · 4 lines
Thomas Petazzoni, Free Electrons Kernel, drivers, real-time and embedded Linux development, consulting, training and support. http://free-electrons.com
PATCH v3 2/22 gettext: warn that legal-info is not implemented
In reply to Thomas De SchampheleireQuoted 14 lines · Thomas De Schampheleire
Quoted 13 lines · Luca Ceresoli
Signed-off-by Luca Ceresoli<[email protected]>--- package/gettext/gettext.mk | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)package/gettext/gettext.mk +0
-0@@ -113,6 +113,9 @@ $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY): $(GETTEXT_DIR)/$(GETTEXT_BINARY) autopoint envsubst gettext.sh gettextize msg* ?gettext) touch -c $@
Quoted 8 lines
package/gettext/gettext.mk $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY): $(GETTEXT_DIR)/$(GETTEXT_BINARY) · line 118
Quoted 3 lines
package/gettext/gettext.mk +3
-0+gettext-legal-info: + @$(call legal-warning-pkg,gettext,cannot produce any legal info) +I don't think this statement is not entirely correct. It's not that we 'cannot' produce the info. It's just that currently, we did not add the necessary license definitions, right?
What about something like 'legal-info not yet implemented' or 'no legal info saved yet' or ...?
Yes, 'legal-info not yet implemented' is more understandable. I'll change that.
Quoted 3 lines
Moreover, will this be added to each package for which no legal info is provided? What about making this message the default by putting it in pkg-gentargets.mk, if no suitable variables were defined?
Gentargets packages without _LICENSE / _LICENSE_FILES defined are handled automatically by gentargets. They get listed in the manifest this way:
$ cat legal-info/manifest.csv package,version,license,license files,source archive ... freetype,2.4.8,unknown,not saved,freetype-2.4.8.tar.bz2
The problem with non-gentargets packages is that they do not get listed automatically in the manifest, because the manifest is produced by the gentargets infrastrucure.
Hence we should:
- convert these packages to gentargets, or
- manually implement a<PKG>-legal-info for these packages, or
- make the user aware that these packages are not handled by the legal-info
stuff: no manifest entry, no tarball, no license files.
The first option is the best thing to do, but it's out of the scope of this patchset. The number of manual packages is consistently approaching zero anyway.
I don't like the second option: this is work that would mostly be wasted when converting to gentargets. I would rather spend my time converting to gentargets.
The third option is the warning you see.
Luca
PATCH v3 2/22 gettext: warn that legal-info is not implemented
Quoted 61 lines · Luca Ceresoli
Quoted 18 lines · Thomas De Schampheleire
Quoted 15 lines · On Mon, May 7, 2012 at 10:12 PM, Luca Ceresoli<[email protected]> ?wrote:
Signed-off-by Luca Ceresoli<[email protected]>---
?package/gettext/gettext.mk | ? ?3 +++
?1 files changed, 3 insertions(+), 0 deletions(-)package/gettext/gettext.mk +0
-0@@ -113,6 +113,9 @@ $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY): $(GETTEXT_DIR)/$(GETTEXT_BINARY) ? ? ? ? ? ? ? ?autopoint envsubst gettext.sh gettextize msg* ?gettext)? ? ? ?touch -c $@
Quoted 9 lines
package/gettext/gettext.mk $(STAGING_DIR)/$(GETTEXT_TARGET_BINARY): $(GETTEXT_DIR)/$(GETTEXT_BINARY) · line 118
Quoted 3 lines
package/gettext/gettext.mk +3
-0+gettext-legal-info: + ? ? ? @$(call legal-warning-pkg,gettext,cannot produce any legal info) +I don't think this statement is not entirely correct. It's not that we 'cannot' produce the info. It's just that currently, we did not add the necessary license definitions, right?
What about something like 'legal-info not yet implemented' or 'no legal info saved yet' or ...?Yes, 'legal-info not yet implemented' is more understandable. I'll change that.
Quoted 3 lines
Moreover, will this be added to each package for which no legal info is provided? What about making this message the default by putting it in pkg-gentargets.mk, if no suitable variables were defined?
Gentargets packages without
_LICENSE/_LICENSE_FILESdefined are handled automatically by gentargets. They get listed in the manifest this way:$ cat legal-info/manifest.csv package,version,license,license files,source archive ... freetype,2.4.8,unknown,not saved,freetype-2.4.8.tar.bz2The problem with non-gentargets packages is that they do not get listed automatically in the manifest, because the manifest is produced by the gentargets infrastrucure.
Hence we should:
?- convert these packages to gentargets, or
?- manually implement a<PKG>-legal-info for these packages, or ?- make the user aware that these packages are not handled by the legal-info ? stuff: no manifest entry, no tarball, no license files.The first option is the best thing to do, but it's out of the scope of this patchset. The number of manual packages is consistently approaching zero anyway.
Quoted 6 lines
I don't like the second option: this is work that would mostly be wasted when
converting to gentargets. I would rather spend my time converting to gentargets.
?The third option is the warning you see.
Ok, thanks Thomas and Luca for the clarification.
PATCH v3 3/22 netkitbase: warn that legal-info is not implemented
In reply to Luca Ceresoli--- package/netkitbase/netkitbase.mk | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)
package/netkitbase/netkitbase.mk +3 -0
@@ -47,6 +47,9 @@ $(TARGET_DIR)/$(NETKITBASE_TARGET_BINARY): $(NETKITBASE_DIR)/$(NETKITBASE_BINARY fi touch -c $(TARGET_DIR)/$(NETKITBASE_TARGET_BINARY) +netkitbase-legal-info: + @$(call legal-warning-pkg,netkitbase,cannot produce any legal info) + netkitbase: $(TARGET_DIR)/$(NETKITBASE_TARGET_BINARY) netkitbase-clean:
Signature · 1 line
1.7.5.4
PATCH v3 4/22 netkittelnet: warn that legal-info is not implemented
In reply to Luca Ceresoli--- package/netkittelnet/netkittelnet.mk | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)
package/netkittelnet/netkittelnet.mk +3 -0
@@ -48,6 +48,9 @@ $(TARGET_DIR)/$(NETKITTELNET_TARGET_BINARY): $(NETKITTELNET_DIR)/$(NETKITTELNET_ #rm -rf $(TARGET_DIR)/share/locale $(TARGET_DIR)/usr/info \ # $(TARGET_DIR)/usr/man $(TARGET_DIR)/usr/share/doc +netkittelnet-legal-info: + @$(call legal-warning-pkg,netkittelnet,cannot produce any legal info) + netkittelnet: netkitbase $(TARGET_DIR)/$(NETKITTELNET_TARGET_BINARY) netkittelnet-clean:
Signature · 1 line
1.7.5.4
PATCH v3 5/22 newt: warn that legal-info is not implemented
In reply to Luca Ceresoli--- package/newt/newt.mk | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)
package/newt/newt.mk +3 -0
@@ -58,6 +58,9 @@ $(TARGET_DIR)/usr/lib/libnewt.so.$(NEWT_VERSION): $(STAGING_DIR)/usr/lib/libnewt -$(STRIPCMD) $(STRIP_STRIP_UNNEEDED) $(TARGET_DIR)/usr/lib/libnewt.so* touch -c $@ +newt-legal-info: + @$(call legal-warning-pkg,newt,cannot produce any legal info) + newt: slang $(TARGET_DIR)/usr/lib/libnewt.so.$(NEWT_VERSION) newt-source: $(DL_DIR)/$(NEWT_SOURCE)
Signature · 1 line
1.7.5.4
PATCH v3 6/22 ttcp: warn that legal-info is not implemented
In reply to Luca Ceresoli--- package/ttcp/ttcp.mk | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)
package/ttcp/ttcp.mk +3 -0
@@ -27,6 +27,9 @@ $(TTCP_DIR)/ttcp: $(TTCP_DIR)/.configured $(TARGET_DIR)/usr/bin/ttcp: $(TTCP_DIR)/ttcp cp -af $(TTCP_DIR)/ttcp $(TARGET_DIR)/usr/bin/ +ttcp-legal-info: + @$(call legal-warning-pkg,ttcp,cannot produce any legal info) + ttcp: $(TARGET_DIR)/usr/bin/ttcp ttcp-source: $(DL_DIR)/$(TTCP_SOURCE)
Signature · 1 line
1.7.5.4
PATCH v3 7/22 vpnc: warn that legal-info is not implemented
In reply to Luca Ceresoli--- package/vpnc/vpnc.mk | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)
package/vpnc/vpnc.mk +3 -0
@@ -42,6 +42,9 @@ $(VPNC_TARGET_BINARY): $(VPNC_BINARY) -C $(VPNC_DIR) install $(STRIPCMD) $(STRIP_STRIP_UNNEEDED) $(VPNC_TARGET_BINARY) +vpnc-legal-info: + @$(call legal-warning-pkg,vpnc,cannot produce any legal info) + vpnc: libgcrypt $(VPNC_TARGET_BINARY) vpnc-source: $(DL_DIR)/$(VPNC_SOURCE)
Signature · 1 line
1.7.5.4
PATCH v3 8/22 manual: document usage of the legal-info feature
In reply to Luca Ceresoli--- docs/manual/adding-packages-gentargets.txt | 18 +++++ docs/manual/using.txt | 100 ++++++++++++++++++++++++++++ 2 files changed, 118 insertions(+), 0 deletions(-)
docs/manual/adding-packages-gentargets.txt +18 -0
@@ -218,6 +218,24 @@ information is (assuming the package name is +libfoo+) : You can find some documentation for this syntax in the xref:makedev-syntax[]. This variable is optional. +* +LIBFOO_LICENSE+ defines the license (or licenses) under which the package + is released. + This name will appear in the manifest file produced by +make legal-info+. + If the license is one of those listed in xref:legal-info[], + use the same string to make the manifest file uniform. + Otherwise, describe the license in a precise and concise way, avoiding + ambiguous names such as +BSD+ which actually name a family of licenses. + This variable is optional. If it is not defined, +unknown+ will appear in + the +license+ field of the manifest file for this package. + +* +LIBFOO_LICENSE_FILES+ is a space-separated list of files in the package + tarball that contain the license(s) under which the package is released. + +make legal-info+ copies all of these files in the +legal-info+ directory. + See xref:legal-info[] for more information. + This variable is optional. If it is not defined, a warning will be produced + to let you know, and +not saved+ will appear in the +license files+ field + of the manifest file for this package. + The recommended way to define these variables is to use the following syntax:
docs/manual/using.txt +100 -0
103 lines not on this page · raw message
Signature · 1 line
1.7.5.4
PATCH v3 9/22 manual: add advice about GPL compliance for Buildroot
In reply to Luca Ceresoli--- docs/manual/using.txt | 27 +++++++++++++++++++++++++++ 1 files changed, 27 insertions(+), 0 deletions(-)
docs/manual/using.txt +27 -0
@@ -281,3 +281,30 @@ Buildroot, with the name used in the manifest file: * +BSD-4c+: Original BSD 4-clause license; * +BSD-3c+: BSD 3-clause license; * +BSD-2c+: BSD 2-clause license. + +Complying with the Buildroot license +------------------------------------ + +Buildroot itself is an opensource software, released under the +http://www.gnu.org/licenses/old-licenses/gpl-2.0.html[GNU General Public +License, version 2] or (at your option) any later version. +However, being a build system, it is not normally part of the end product: +if you develop the root filesystem, kernel, bootloader or toolchain for a +device, the code of Buildroot is only present on the development machine, not +in the device storage. + +Nevertheless, the general view of the Buildroot developers is that you should +release the Buildroot source code along with the source code of other packages +when releasing a product that contains GPL-licensed software. +This is because the +http://www.gnu.org/licenses/old-licenses/gpl-2.0.html[GNU GPL] +defines the "'complete source code'" for an executable work as "'all the +source code for all modules it contains, plus any associated interface +definition files, plus the scripts used to control compilation and installation +of the executable'". +Buildroot is part of the 'scripts used to control compilation and +installation of the executable', and as such it is considered part of the +material that must be redistributed. + +Keep in mind this is only the Buildroot developers' opinion, and you should +consult your legal department or lawyer for any doubt.
Signature · 1 line
1.7.5.4
PATCH v3 9/22 manual: add advice about GPL compliance for Buildroot
Quoted 30 lines · Luca Ceresoli
Signed-off-by Luca Ceresoli <[email protected]>---
?docs/manual/using.txt | ? 27 +++++++++++++++++++++++++++ ?1 files changed, 27 insertions(+), 0 deletions(-)docs/manual/using.txt +0
-0@@ -281,3 +281,30 @@ Buildroot, with the name used in the manifest file: ?* +BSD-4c+: Original BSD 4-clause license; ?* +BSD-3c+: BSD 3-clause license;?* +BSD-2c+: BSD 2-clause license.
docs/manual/using.txt +17
-0+ +Complying with the Buildroot license +------------------------------------ + +Buildroot itself is an opensource software, released under the +http://www.gnu.org/licenses/old-licenses/gpl-2.0.html[GNU General Public +License, version 2] or (at your option) any later version. +However, being a build system, it is not normally part of the end product: +if you develop the root filesystem, kernel, bootloader or toolchain for a +device, the code of Buildroot is only present on the development machine, not +in the device storage. + +Nevertheless, the general view of the Buildroot developers is that you should +release the Buildroot source code along with the source code of other packages +when releasing a product that contains GPL-licensed software. +This is because the +http://www.gnu.org/licenses/old-licenses/gpl-2.0.html[GNU GPL]
docs/manual/using.txt Buildroot, with the name used in the manifest file: · line 310
Quoted 10 lines
docs/manual/using.txt +10
-0+defines the "'complete source code'" for an executable work as "'all the +source code for all modules it contains, plus any associated interface +definition files, plus the scripts used to control compilation and installation +of the executable'". +Buildroot is part of the 'scripts used to control compilation and +installation of the executable', and as such it is considered part of the +material that must be redistributed. + +Keep in mind this is only the Buildroot developers' opinion, and you should +consult your legal department or lawyer for any doubt.
I'm not a native English speaker myself, but I would have written 'in case of any doubt' instead of 'for any doubt'.
PATCH v3 9/22 manual: add advice about GPL compliance for Buildroot
Quoted 7 lines · Thomas De Schampheleire
Quoted 6 lines · Luca Ceresoli
Signed-off-by Luca Ceresoli<[email protected]>--- docs/manual/using.txt | 27 +++++++++++++++++++++++++++ 1 files changed, 27 insertions(+), 0 deletions(-)docs/manual/using.txt +0
-0
...
Quoted 5 lines
docs/manual/using.txt Buildroot, with the name used in the manifest file: · line 310
Quoted 2 lines
docs/manual/using.txt +2
-0+Keep in mind this is only the Buildroot developers' opinion, and you should +consult your legal department or lawyer for any doubt.I'm not a native English speaker myself, but I would have written 'in case of any doubt' instead of 'for any doubt'.
Ok, done in v4.
Does your absence of other comments implies you agree on the rest of this simple but important patch?
Luca
PATCH v3 10/22 linux: define license
In reply to Luca Ceresoli--- linux/linux.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
linux/linux.mk +2 -0
@@ -4,6 +4,8 @@ # ############################################################################### LINUX_VERSION=$(call qstrip,$(BR2_LINUX_KERNEL_VERSION)) +LINUX_LICENSE = GPLv2 +LINUX_LICENSE_FILES = COPYING # Compute LINUX_SOURCE and LINUX_SITE from the configuration ifeq ($(LINUX_VERSION),custom)
Signature · 1 line
1.7.5.4
PATCH v3 11/22 m4: define license
In reply to Luca Ceresoli--- package/m4/m4.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/m4/m4.mk +2 -0
@@ -7,6 +7,8 @@ M4_VERSION = 1.4.16 M4_SOURCE = m4-$(M4_VERSION).tar.bz2 M4_SITE = $(BR2_GNU_MIRROR)/m4 +M4_LICENSE = GPLv3+ +M4_LICENSE_FILES = COPYING M4_CONF_ENV = gl_cv_func_gettimeofday_clobber=no ifneq ($(BR2_USE_WCHAR),y)
Signature · 1 line
1.7.5.4
PATCH v3 12/22 mpc: define license
In reply to Luca Ceresoli--- package/mpc/mpc.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/mpc/mpc.mk +2 -0
@@ -6,6 +6,8 @@ MPC_VERSION = 0.9 MPC_SITE = http://www.multiprecision.org/mpc/download +MPC_LICENSE = LGPLv2.1+ +MPC_LICENSE_FILES = COPYING.LIB MPC_INSTALL_STAGING = YES MPC_DEPENDENCIES = gmp mpfr MPC_AUTORECONF = YES
Signature · 1 line
1.7.5.4
PATCH v3 13/22 fakeroot: define license
In reply to Luca Ceresoli--- package/fakeroot/fakeroot.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/fakeroot/fakeroot.mk +2 -0
@@ -6,5 +6,7 @@ FAKEROOT_VERSION = 1.18.2 FAKEROOT_SOURCE = fakeroot_$(FAKEROOT_VERSION).orig.tar.bz2 FAKEROOT_SITE = http://snapshot.debian.org/archive/debian/20111201T093630Z/pool/main/f/fakeroot/ +FAKEROOT_LICENSE = GPLv3+ +FAKEROOT_LICENSE_FILES = COPYING $(eval $(call AUTOTARGETS,host))
Signature · 1 line
1.7.5.4
PATCH v3 14/22 bzip2: define license
In reply to Luca Ceresoli--- package/bzip2/bzip2.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/bzip2/bzip2.mk +2 -0
@@ -7,6 +7,8 @@ BZIP2_VERSION:=1.0.5 BZIP2_SONAME=1.0.4 BZIP2_SOURCE:=bzip2-$(BZIP2_VERSION).tar.gz BZIP2_SITE:=http://www.bzip.org/$(BZIP2_VERSION) +BZIP2_LICENSE = bzip2 license +BZIP2_LICENSE_FILES = LICENSE BZIP2_INSTALL_STAGING=YES define BZIP2_FIX_MAKEFILE
Signature · 1 line
1.7.5.4
PATCH v3 15/22 directfb: define license
In reply to Luca Ceresoli--- package/directfb/directfb.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/directfb/directfb.mk +2 -0
@@ -7,6 +7,8 @@ DIRECTFB_VERSION_MAJOR = 1.4 DIRECTFB_VERSION = $(DIRECTFB_VERSION_MAJOR).16 DIRECTFB_SITE = http://www.directfb.org/downloads/Core/DirectFB-$(DIRECTFB_VERSION_MAJOR) DIRECTFB_SOURCE = DirectFB-$(DIRECTFB_VERSION).tar.gz +DIRECTFB_LICENSE = LGPLv2.1+ +DIRECTFB_LICENSE_FILES = COPYING DIRECTFB_AUTORECONF = YES DIRECTFB_INSTALL_STAGING = YES DIRECTFB_CONF_OPT = \
Signature · 1 line
1.7.5.4
PATCH v3 16/22 iostat: define license
In reply to Luca Ceresoli--- package/iostat/iostat.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/iostat/iostat.mk +2 -0
@@ -6,6 +6,8 @@ IOSTAT_VERSION = 2.2 IOSTAT_SITE = http://www.linuxinsight.com/files +IOSTAT_LICENSE = GPL +IOSTAT_LICENSE_FILES = LICENSE iostat-source: $(DL_DIR)/$(IOSTAT_SOURCE)
Signature · 1 line
1.7.5.4
PATCH v3 17/22 lzo: define license
In reply to Luca Ceresoli--- package/lzo/lzo.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/lzo/lzo.mk +2 -0
@@ -5,6 +5,8 @@ ############################################################# LZO_VERSION = 2.06 LZO_SITE = http://www.oberhumer.com/opensource/lzo/download +LZO_LICENSE = GPLv2+ +LZO_LICENSE_FILES = COPYING LZO_INSTALL_STAGING = YES $(eval $(call AUTOTARGETS))
Signature · 1 line
1.7.5.4
PATCH v3 18/22 lzop: define license
In reply to Luca Ceresoli--- package/lzop/lzop.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/lzop/lzop.mk +2 -0
@@ -6,6 +6,8 @@ LZOP_VERSION = 1.03 LZOP_SOURCE = lzop-$(LZOP_VERSION).tar.gz LZOP_SITE = http://www.lzop.org/download/ +LZOP_LICENSE = GPLv2+ +LZOP_LICENSE_FILES = COPYING LZOP_DEPENDENCIES = lzo $(eval $(call AUTOTARGETS))
Signature · 1 line
1.7.5.4
PATCH v3 19/22 libusb: define license
In reply to Luca Ceresoli--- package/libusb/libusb.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/libusb/libusb.mk +2 -0
@@ -6,6 +6,8 @@ LIBUSB_VERSION = 1.0.9 LIBUSB_SOURCE = libusb-$(LIBUSB_VERSION).tar.bz2 LIBUSB_SITE = http://$(BR2_SOURCEFORGE_MIRROR).dl.sourceforge.net/project/libusb/libusb-1.0/libusb-$(LIBUSB_VERSION) +LIBUSB_LICENSE = LGPLv2.1+ +LIBUSB_LICENSE_FILES = COPYING LIBUSB_DEPENDENCIES = host-pkg-config LIBUSB_INSTALL_STAGING = YES
Signature · 1 line
1.7.5.4
PATCH v3 20/22 pcre: define license
In reply to Luca Ceresoli--- package/pcre/pcre.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/pcre/pcre.mk +2 -0
@@ -6,6 +6,8 @@ PCRE_VERSION = 8.30 PCRE_SITE = ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre +PCRE_LICENSE = BSD-3c +PCRE_LICENSE_FILES = LICENCE PCRE_INSTALL_STAGING = YES ifneq ($(BR2_INSTALL_LIBSTDCPP),y)
Signature · 1 line
1.7.5.4
PATCH v3 21/22 netsnmp: define license
In reply to Luca Ceresoli--- package/netsnmp/netsnmp.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/netsnmp/netsnmp.mk +2 -0
@@ -7,6 +7,8 @@ NETSNMP_VERSION = 5.7.1 NETSNMP_SITE = http://$(BR2_SOURCEFORGE_MIRROR).dl.sourceforge.net/sourceforge/net-snmp NETSNMP_SOURCE = net-snmp-$(NETSNMP_VERSION).tar.gz +NETSNMP_LICENSE = Various BSD-like +NETSNMP_LICENSE_FILES = COPYING NETSNMP_INSTALL_STAGING = YES NETSNMP_CONF_ENV = ac_cv_NETSNMP_CAN_USE_SYSCTL=yes NETSNMP_CONF_OPT = --with-persistent-directory=/var/lib/snmp --disable-static \
Signature · 1 line
1.7.5.4
PATCH v3 22/22 berkeleydb: define license
In reply to Luca Ceresoli--- package/berkeleydb/berkeleydb.mk | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
package/berkeleydb/berkeleydb.mk +2 -0
@@ -7,6 +7,8 @@ BERKELEYDB_VERSION = 5.3.15 BERKELEYDB_SITE = http://download.oracle.com/berkeley-db BERKELEYDB_SOURCE = db-$(BERKELEYDB_VERSION).NC.tar.gz BERKELEYDB_SUBDIR = build_unix +BERKELEYDB_LICENSE = BerkeleyDB License +BERKELEYDB_LICENSE_FILES = LICENSE BERKELEYDB_INSTALL_STAGING = YES BERKELEYDB_BINARIES = db_archive db_checkpoint db_deadlock db_dump \ db_hotbackup db_load db_log_verify db_printlog db_recover db_replicate \
Signature · 1 line
1.7.5.4
PATCH v3 1/22 legal-info: infrastructure to collect legally-relevant material
In reply to Luca CeresoliQuoted 16 lines · Luca Ceresoli
This allows to automatically collect material that may be needed to comply with the license of packages that Buildroot prepares for the target device.
The core of the implementation is made by the following parts:
- inpackage/pkg-utils.mksome helper functions are defined for common actionssuch as generating a warning, producing info about a package etc; - in package/pkg-gentargets.mk, within the GENTARGETS framework, a new <PKG>-legal-info target produces all the info for a given package;-
Makefileimplements the top-level targets:
- legal-info-prepare creates the output directory and produces legal info about Buildroot itself and the toolchain, which mostly means just warning the user that this is not implemented;
- legal-info, the only target that is supposed to be used directly, depends on all of the above and finishes things by producing the README files from the various pieces.
Quoted 1 line
Signed-off-by Luca Ceresoli<[email protected]>
Looks great!
Any chance that this can still go into the 2012.05 release? I have one customer
who would be really pleased with that...
Except for the dirs dependency, I think it can go in as it is. But of course I
do have some optional remarks :-)
Makefile HOST_DEPS = $(sort $(foreach dep,\ · line 334
Quoted 3 lines
Makefile +3
-0+TARGETS_LEGAL_INFO:=$(patsubst %,%-legal-info,\ + $(filter-out host-makedevs,\ + $(TARGETS) $(BASE_TARGETS) $(TARGETS_HOST_DEPS) $(HOST_DEPS))))
I guess host-makedevs is filtered out here because it has no tar file?
In that case, the same should be done for makedevs and mcookie. But maybe it's better to define the SITE_METHOD of these packages as local. Then they will be registered as "not saved" in the manifest.
[snip]
Makefile source: dirs $(TARGETS_SOURCE) $(HOST_SOURCE) · line 468
Quoted 2 lines
Makefile +2
-0+legal-info-clean: + @rm -fr $(LEGAL_INFO_DIR)
We usually use '$(RM) -r', I think.
Makefile source: dirs $(TARGETS_SOURCE) $(HOST_SOURCE) · line 470
Quoted 2 lines
Makefile +2
-0+ +legal-info-prepare: $(LEGAL_INFO_DIR)
I would add an announcement here:
@$(call MESSAGE,"Collecting legal info")
Makefile source: dirs $(TARGETS_SOURCE) $(HOST_SOURCE) · line 472
Quoted 2 lines
Makefile +2
-0+ @$(call legal-license-file,buildroot,COPYING,COPYING) + @$(call legal-manifest,package,version,license,license files,source archive)
I would Capitalize the titles.
Quoted 4 lines
Makefile +4
-0+ @$(call legal-manifest,buildroot,$(BR2_VERSION_FULL),GPLv2+,COPYING,not saved) + @$(call legal-warning,the Buildroot source code has not been saved) + @$(call legal-warning,the toolchain has not been saved) + @cp $(CONFIG_DIR)/.config $(LEGAL_INFO_DIR)/buildroot.config
[snip]
Quoted 1 line
+$(2)_RAWNAME = $(patsubst host-%,%,$(1))
Not for this patch, but it would be better to add an argument to
GENTARGETS for the lowercase non-host name.
Also, the %/.stamp_patched target could reuse this variable.
package/pkg-gentargets.mk $(1)-rsync: $$($(2)_TARGET_RSYNC) · line 379
Quoted 10 lines
package/pkg-gentargets.mk +8
-0+ifneq ($$($(3)_LICENSE),PROPRIETARY) +ifneq ($$($(3)_SITE_METHOD),local) +ifneq ($$($(3)_SITE_METHOD),override) +# Packages that have a tarball need it downloaded and extracted beforehand +$(1)-legal-info: $(1)-extract $(REDIST_SOURCES_DIR) +endif +endif +endif
I would combine these conditions with the ones below for setting_MANIFEST_TARBALL. Or you could put it as
ifneq ($$($(2)_MANIFEST_TARBALL),not saved)
$(1)-legal-info: $(1)-extract $(REDIST_SOURCES_DIR)
endif
BTW, why is it $(3)_LICENSE here and $(2)_LICENSE below?
Quoted 5 lines
package/pkg-gentargets.mk +1
-0+ $(1)-show-depends: @echo $$($(2)_DEPENDENCIES)
package/pkg-gentargets.mk else · line 444
Quoted 9 lines
package/pkg-gentargets.mk +6
-0@@ -412,6 +436,47 @@ else $(2)_KCONFIG_VAR = BR2_PACKAGE_$(2) endif +# Set values used later for legal-info manifest +ifneq ($$($(2)_LICENSE),PROPRIETARY) +ifneq ($$($(2)_SITE_METHOD),local) +ifneq ($$($(2)_SITE_METHOD),override) +$(2)_MANIFEST_TARBALL = $$($(2)_SOURCE) +ifneq ($(call qstrip,$$($(2)_LICENSE_FILES)),)
Why is there a qstrip here? The variable is defined in a .mk
file so doesn't contain quotes, right?
Quoted 22 lines
package/pkg-gentargets.mk +22
-0+$(2)_MANIFEST_LICENSE_FILES = $$($(2)_LICENSE_FILES) +endif +endif +endif +endif +# defaults for packages without tarball or license files +$(2)_MANIFEST_TARBALL ?= not saved +$(2)_MANIFEST_LICENSE_FILES ?= not saved + +# legal-info: produce legally relevant info. +$(1)-legal-info: +ifeq ($$($(2)_LICENSE),PROPRIETARY) +# Proprietary packages: nothing to save +else ifeq ($$($(2)_SITE_METHOD),local) +# Packages without a tarball: don't save and warn + @$(call legal-warning-pkg-savednothing,$$($(2)_RAWNAME),local) +else ifeq ($$($(2)_SITE_METHOD),override) + @$(call legal-warning-pkg-savednothing,$$($(2)_RAWNAME),override) +else +# Other packages +# Save license files if defined +ifeq ($(call qstrip,$$($(2)_LICENSE_FILES)),)
package/pkg-gentargets.mk else · line 476
Quoted 10 lines
package/pkg-gentargets.mk +10
-0+ @$(call legal-license-nofiles,$$($(2)_RAWNAME)) + @$(call legal-warning-pkg,$$($(2)_RAWNAME),cannot save license ($(2)_LICENSE_FILES not defined)) +else + @for F in $$($(2)_LICENSE_FILES); do \ + $(call legal-license-file,$$($(2)_RAWNAME),$$$${F},$$($(2)_DIR)/$$$${F}); \ + done +endif +# Copy the source tarball (just hardlink if possible) + @cp -l $(DL_DIR)/$$($(2)_SOURCE) $(REDIST_SOURCES_DIR) 2>/dev/null || \ + cp $(DL_DIR)/$$($(2)_SOURCE) $(REDIST_SOURCES_DIR)
Genius!
package/pkg-gentargets.mk else · line 479
Quoted 3 lines
package/pkg-gentargets.mk +3
-0+endif + @$(call legal-manifest,$$($(2)_RAWNAME),$$($(2)_VERSION),$$($(2)_LICENSE),$$($(2)_MANIFEST_LICENSE_FILES),$$($(2)_MANIFEST_TARBALL)) +
I'm not sure if it would work, but maybe this could be moved out
of the GENTARGETS and defined as a pattern rule, like all the other stuff. That saves a lot of double $$.
[snip]
Regards,
Arnout
Signature · 6 lines
Arnout Vandecappelle arnout at mind be Senior Embedded Software Architect +32-16-286540 Essensium/Mind http://www.mind.be G.Geenslaan 9, 3001 Leuven, Belgium BE 872 984 063 RPR Leuven LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle GPG fingerprint: 7CB5 E4CC 6C2E EFD4 6E3D A754 F963 ECAB 2450 2F1F
PATCH v3 1/22 legal-info: infrastructure to collect legally-relevant material
Hi Arnout,
thanks for your review.
Quoted 39 lines · Arnout Vandecappelle
Quoted 22 lines · Luca Ceresoli
This allows to automatically collect material that may be needed to comply with
the license of packages that Buildroot prepares for the target device.The core of the implementation is made by the following parts:
- inpackage/pkg-utils.mksome helper functions are defined for
common actionssuch as generating a warning, producing info about a package etc;- in
package/pkg-gentargets.mk, within the GENTARGETS framework, a new
<PKG>-legal-info target produces all the info for a given package;
-Makefileimplements the top-level targets:
- legal-info-prepare creates the output directory and produces
legal info
about Buildroot itself and the toolchain, which mostly means
just warning
the user that this is not implemented;
- legal-info, the only target that is supposed to be used
directly, depends
on all of the above and finishes things by producing the README
files from
the various pieces.Quoted 1 line
Signed-off-by Luca Ceresoli<[email protected]>Looks great!
Any chance that this can still go into the 2012.05 release? I have
one customer
who would be really pleased with that...Except for the dirs dependency, I think it can go in as it is. But
of course I
do have some optional remarks :-)Makefile HOST_DEPS = $(sort $(foreach dep,\ · line 334
Quoted 3 lines
Makefile +3
-0+TARGETS_LEGAL_INFO:=$(patsubst %,%-legal-info,\ + $(filter-out host-makedevs,\ + $(TARGETS) $(BASE_TARGETS) $(TARGETS_HOST_DEPS) $(HOST_DEPS))))
Quoted 6 lines
I guess host-makedevs is filtered out here because it has no tar file?
In that case, the same should be done for makedevs and mcookie. But maybe
it's better to define theSITE_METHODof these packages as local. Then they
will be registered as "not saved" in the manifest.
My ignorance, I didn't know about the existence of mcookie in Buildroot. I would like to omit entirely these packages from the legal-info list, as they are
actually a part of Buildroot.
But since using filter-out is pretty dirty, I think a clean implementation would be
to exclude from legal-info processing all packages with an empyt _SOURCE variable.
The assumption here is that if they don't have an external source, they are part of
Buildroot.
Do you think this is a good idea?
$ git grep -E '_SOURCE[^A-Z_]*=[^A-Za-z]*$' package/ package/makedevs/makedevs.mk:MAKEDEVS_SOURCE = package/makedevs/makedevs.mk:HOST_MAKEDEVS_SOURCE = package/x11r7/mcookie/mcookie.mk:MCOOKIE_SOURCE =
Look, they turned out to be makedevs and mcookie! :)
Quoted 6 lines
[snip]
Makefile source: dirs $(TARGETS_SOURCE) $(HOST_SOURCE) · line 468
Quoted 2 lines
Makefile +2
-0+legal-info-clean: + @rm -fr $(LEGAL_INFO_DIR)We usually use '$(RM) -r', I think.
Apparently not (although that might be nice).
Quoted 7 lines
Makefile source: dirs $(TARGETS_SOURCE) $(HOST_SOURCE) · line 470
Quoted 4 lines
Makefile +2
-0+ +legal-info-prepare: $(LEGAL_INFO_DIR)I would add an announcement here:
@$(call MESSAGE,"Collecting legal info")
Fine, will do.
Quoted 6 lines
Quoted 4 lines
(quoted diff) +2
-0+ @$(call legal-license-file,buildroot,COPYING,COPYING) + @$(call legal-manifest,package,version,license,licensefiles,source archive)
I would Capitalize the titles.
That's sound, will do.
Quoted 15 lines
Quoted 6 lines
+ @$(call
legal-manifest,buildroot,$(BR2_VERSION_FULL),GPLv2+,COPYING,not saved)Makefile +3
-0+ @$(call legal-warning,the Buildroot source code has not been saved) + @$(call legal-warning,the toolchain has not been saved) + @cp $(CONFIG_DIR)/.config $(LEGAL_INFO_DIR)/buildroot.config[snip]
Quoted 1 line
+$(2)_RAWNAME = $(patsubst host-%,%,$(1))
Not for this patch, but it would be better to add an argument to
GENTARGETS for the lowercase non-host name.Also, the %/.stamp_patched target could reuse this variable.
Quoted 1 line
Quoted 12 lines
package/pkg-gentargets.mk $(2)_OVERRIDE_SRCDIR = $($(2)_SITE) · line 258
Quoted 9 lines
package/pkg-gentargets.mk +4
-0+ifneq ($$($(3)_LICENSE),PROPRIETARY) +ifneq ($$($(3)_SITE_METHOD),local) +ifneq ($$($(3)_SITE_METHOD),override) +# Packages that have a tarball need it downloaded and extractedbeforehand
+$(1)-legal-info: $(1)-extract $(REDIST_SOURCES_DIR)package/pkg-gentargets.mk +3
-0+endif +endif +endifI would combine these conditions with the ones below for setting
_MANIFEST_TARBALL. Or you could put it as
This was to keep dependencies where all other dependencies live, and the "implementation" in its own place. But the number of extra lines is actually ugly. I will move the one dependency line below unless there are voices against.
Quoted 5 lines
ifneq ($$($(2)_MANIFEST_TARBALL),not saved)
$(1)-legal-info: $(1)-extract $(REDIST_SOURCES_DIR)
endifBTW, why is it $(3)_LICENSE here and $(2)_LICENSE below?
Good catch, these should both be $(2) indeed. Will be fixed in the next patchset.
Quoted 9 lines
Quoted 9 lines
package/pkg-gentargets.mk +1
-0+ $(1)-show-depends: @echo $$($(2)_DEPENDENCIES)@@ -412,6 +436,47 @@ else $(2)_KCONFIG_VAR = BR2_PACKAGE_$(2) endif
Quoted 9 lines
package/pkg-gentargets.mk else · line 444
Quoted 6 lines
package/pkg-gentargets.mk +6
-0+# Set values used later for legal-info manifest +ifneq ($$($(2)_LICENSE),PROPRIETARY) +ifneq ($$($(2)_SITE_METHOD),local) +ifneq ($$($(2)_SITE_METHOD),override) +$(2)_MANIFEST_TARBALL = $$($(2)_SOURCE) +ifneq ($(call qstrip,$$($(2)_LICENSE_FILES)),)Why is there a qstrip here? The variable is defined in a .mk
file so doesn't contain quotes, right?
Right. Will fix.
Quoted 39 lines
Quoted 26 lines
package/pkg-gentargets.mk +24
-0+$(2)_MANIFEST_LICENSE_FILES = $$($(2)_LICENSE_FILES) +endif +endif +endif +endif +# defaults for packages without tarball or license files +$(2)_MANIFEST_TARBALL ?= not saved +$(2)_MANIFEST_LICENSE_FILES ?= not saved + +# legal-info: produce legally relevant info. +$(1)-legal-info: +ifeq ($$($(2)_LICENSE),PROPRIETARY) +# Proprietary packages: nothing to save +else ifeq ($$($(2)_SITE_METHOD),local) +# Packages without a tarball: don't save and warn + @$(call legal-warning-pkg-savednothing,$$($(2)_RAWNAME),local) +else ifeq ($$($(2)_SITE_METHOD),override) + @$(call legal-warning-pkg-savednothing,$$($(2)_RAWNAME),override) +else +# Other packages +# Save license files if defined +ifeq ($(call qstrip,$$($(2)_LICENSE_FILES)),) + @$(call legal-license-nofiles,$$($(2)_RAWNAME)) + @$(call legal-warning-pkg,$$($(2)_RAWNAME),cannot save license ($(2)_LICENSE_FILES not defined))package/pkg-gentargets.mk else · line 476
Quoted 10 lines
package/pkg-gentargets.mk +8
-0+else + @for F in $$($(2)_LICENSE_FILES); do \ + $(call legal-license-file,$$($(2)_RAWNAME),$$$${F},$$($(2)_DIR)/$$$${F}); \ + done +endif +# Copy the source tarball (just hardlink if possible) + @cp -l $(DL_DIR)/$$($(2)_SOURCE) $(REDIST_SOURCES_DIR) 2>/dev/null || \ + cp $(DL_DIR)/$$($(2)_SOURCE) $(REDIST_SOURCES_DIR)Genius!
Quoted 8 lines
Quoted 4 lines
(quoted diff) +2
-0+endif + @$(calllegal-manifest,$$($(2)_RAWNAME),$$($(2)_VERSION),$$($(2)_LICENSE),$$($(2)_MANIFEST_LICENSE_FILES),$$($(2)_MANIFEST_TARBALL)) +
I'm not sure if it would work, but maybe this could be moved out
of the GENTARGETS and defined as a pattern rule, like all the other stuff. That saves a lot of double $$.
When I tried to do this change, it turned out that it would add more lines than the dollars it removes, so I reverted everything.
I can't exclude it might be done in a better way that I was able to do, anyway.
Luca
PATCH v3 1/22 legal-info: infrastructure to collect legally-relevant material
Quoted 2 lines · Luca Ceresoli
Quoted 1 line · Arnout Vandecappelle
On 05/07/12 22:12, Luca Ceresoli wrote:
[snip]
Quoted 17 lines
Quoted 8 lines
Quoted 3 lines
+TARGETS_LEGAL_INFO:=$(patsubst %,%-legal-info,\
+ $(filter-out host-makedevs,\
+ $(TARGETS) $(BASE_TARGETS) $(TARGETS_HOST_DEPS) $(HOST_DEPS))))I guess host-makedevs is filtered out here because it has no tar file? In that case, the same should be done for makedevs and mcookie. But maybe it's better to define the
SITE_METHODof these packages as local. Then they will be registered as "not saved" in the manifest.My ignorance, I didn't know about the existence of mcookie in Buildroot. I would like to omit entirely these packages from the legal-info list, as they are actually a part of Buildroot.
But since using filter-out is pretty dirty, I think a clean implementation would be to exclude from legal-info processing all packages with an empyt_SOURCEvariable. The assumption here is that if they don't have an external source, they are part of Buildroot.
Quoted 1 line
Do you think this is a good idea?
Good plan!
[snip]
Quoted 8 lines
Quoted 3 lines
I'm not sure if it would work, but maybe this could be moved out of the GENTARGETS and defined as a pattern rule, like all the other stuff. That saves a lot of double $$.
When I tried to do this change, it turned out that it would add more lines than the dollars it removes, so I reverted everything.
I can't exclude it might be done in a better way that I was able to do, anyway.
I can take a shot at it once this stuff gets committed.
Regards,
Arnout
Signature · 6 lines
Arnout Vandecappelle arnout at mind be Senior Embedded Software Architect +32-16-286540 Essensium/Mind http://www.mind.be G.Geenslaan 9, 3001 Leuven, Belgium BE 872 984 063 RPR Leuven LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle GPG fingerprint: 7CB5 E4CC 6C2E EFD4 6E3D A754 F963 ECAB 2450 2F1F
PATCH v3 1/22 legal-info: infrastructure to collect legally-relevant material
In reply to Arnout VandecappelleQuoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Arnout" == Arnout Vandecappelle <[email protected]> writes:
Hi,
Arnout> Looks great!
Arnout> Any chance that this can still go into the 2012.05 release? I Arnout> have one customer who would be really pleased with that...
Sorry, but I think it's getting too late for that. We can merge it to -next pretty soon once the remining issues are worked out though.
Signature · 1 line
Bye, Peter Korsgaard
v3 cover Automatically produce legal compliance info
In reply to Luca CeresoliHi Luca,
Quoted 187 lines · Luca Ceresoli
Hi,
here is the third version of the legal-info feature implementation.
For the records, previous versions are here:
v1: http://lists.busybox.net/pipermail/buildroot/2012-January/049590.html
v2: http://lists.busybox.net/pipermail/buildroot/2012-March/051132.htmlThe approach is based on two per-package constants in eack .mk file, such as:
?FOO_LICENSE = GPLv2+
?FOO_LICENSE_FILES = COPYING
?BAR_LICENSE = LGPLv2.1 + GPLv3
?BAR_LICENSE_FILES = COPYING.LGPL demo-app/COPYING.GPL3 ?MYAPP_LICENSE = PROPRIETARY
This is the only effort required to the package creator. If <PKG>_LICENSE is not specified it defaults to "unknown".After running 'make legal-info', the following things will be produced in $(O)/legal-info/:
?$ find legal-info/ -type f
?legal-info/README ? ? ? ? ? ?# Lists saved stuff, warns about unsaved stuff ?legal-info/licenses.txt ? ? ?# Text of all licenses ?legal-info/buildroot.config ?# The buildroot config ?legal-info/licenses/buildroot/COPYING ? ? ? # License files, one dir per pkg ?legal-info/licenses/busybox/LICENSE ?legal-info/licenses/...other packages... ?legal-info/manifest.csv ? ? ? ? ? ? ? ? ? ? # CSV table summarizing all info ?legal-info/sources/busybox-1.19.4.tar.bz2 ? # tarballs ?legal-info/sources/kmod-5.tar.xz ?legal-info/sources/libtool-2.2.10.tar.gz ?legal-info/sources/...other packages...Given the technical difficulties, the toolchain and the BR sources are not saved. Warnings are generated to make sure the user is aware of this.
One of the issues raised about the previous patchset was about packages without a license file, such as jpeg or fbset. These usually declare their license in a comment at the top of one or more source files.
Yann E. Morin suggested to solve this problem in a general way implementing a
_LICENSE_HOOKthat does whatever is needed to copy the license.
I found the idea good and started implementing it, but I did not reach anything decently structured yet. As I don't want to further delay the basic work, I chose to postpone this feature to a later step.License compliance advice to users
==================================During the latest Buildroot Developer Day in February, a request was made to give an advice from Buildroot developers' to Buildroot users about how to comply with both Buildroot's and the packages' licenses.
This is added to the manual in patch 9. Of course this must match as much as possible what the developers think, so please read it and give comments!Possible future improvements
============================These are left as future enhancemenst, after the merge of the first core functionality, in order to keep it as simple as possible for a first step.
- The toolchain is not currently saved (internal, external, ct-NG, no ?discrimination). Actually, only GENTARGETS-based packages are handled, so the ?best approach might be to "simply" migrate the toolchains to GENTARGETS.
- Save the Buildroot sources too. If the sources are not a git clone this might ?be as simple as tar of the current directory and exclude dl and output, but ?this has never been tested. Also, make sure this works for out-of-tree BR ?builds.
- Add a hook for a post-legal-info script.
- Add a <PKG>_LICENSE_HOOK for packages without a license file.
Changelog
=========Changed in v3:
- moved the $(1)-legal-info target near the end ofGENTARGETS_INNER, out of the ?may of target sequencing where it used to be in the previous patch sets;
- improved readability by creating a set of functions to produce a warning, ?to add a line to the csv, etc as suggested by ThomasDS (this made the core ?code shorter and cleaner);
- clarified the BSD-like licenses, differentiating 2/3/4 clauses and others;
- clarified *GPL licenses, and dropped definitions for packages that do not ?have a clear and simple use of those licenses (tslib, busybox, qt);
- dropped warning patches for tinyhttpd, xfsprogs, microperl, fis, doom-wads, ?uemacs and cups which have now been converted to GEN/AUTOTARGETS;
- updated after the split of Makefile.package.in in pkg-*.mk and related ?cleanups;
- added a few lines of explanation in the message of the first big commit that ?implements all the logic;
- documented the legal-info stuff in the manual;
- added (tentative) advice about Buildroot license compliance;
- various improvements here and there.Changed in v2:
- squashed together patches 1-4 from RFC v1; now all the legal-info mechanism ?is implmented in a unique patch.
- rebase on top of current master
- don't clean $(REDIST_SOURCES_DIR): it is a subdir of $(LEGAL_INFO_DIR), so ?doesn't need to be cleaned twice
- added legal-info-clean target
- made legal-info target .PHONY
- remove the output/legal-info dir before populating it
- when saving source tarballs, create hardlinks instead of copies if possible
- add infrastructure to warn the user about info that has not been saved: a ?.warnings file is filled with such info and displayed to the user at the ?end of the legal-info processing
- ensure manual (non-GENTARGETS-based) packages return error, at least; this ?required to explicitly create a -legal-info target for each of them, or ?they would have been silently skipped.
- list also Buildroot in the manifest file! :)
- save the Buildroot .config
- save license files listed in <PKG>_LICENSE_FILES, both in a separate ?directory for each package and all together in a unique file
- various cleanups.Patches
=======- The implementation is all in the first commit, which is commented on its ?own.
- A few patches follow to make non-GENTARGETS packages warn about their ?dumbness.
- A couple of patches add documentation about the legal-info stuff.
- Other commits define licenses for some packages.The following changes since commit
057c729c2438107b426576121bcf83f792734a6f:?external-toolchain: add support for Linaro 2012.04 (2012-05-07 17:08:37 +0200)
are available in the git repository at:
?git://github.com/lucaceresoli/buildroot.git legal-infoLuca Ceresoli (22):
?legal-info: infrastructure to collect legally-relevant material ?gettext: warn that legal-info is not implemented ?netkitbase: warn that legal-info is not implemented ?netkittelnet: warn that legal-info is not implemented ?newt: warn that legal-info is not implemented
?ttcp: warn that legal-info is not implemented
?vpnc: warn that legal-info is not implemented ?manual: document usage of the legal-info feature ?manual: add advice about GPL compliance for Buildroot ?linux: define license
?m4: define license
?mpc: define license
?fakeroot: define license
?bzip2: define license
?directfb: define license
?iostat: define license
?lzo: define license
?lzop: define license
?libusb: define license
?pcre: define license
?netsnmp: define license
?berkeleydb: define license?Makefile ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? | ? 42 +++++++++- ?docs/manual/adding-packages-gentargets.txt | ? 18 ++++ ?docs/manual/using.txt ? ? ? ? ? ? ? ? ? ? ?| ?127 ++++++++++++++++++++++++++++ ?linux/linux.mk ? ? ? ? ? ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/berkeleydb/berkeleydb.mk ? ? ? ? ? | ? ?2 + ?package/bzip2/bzip2.mk ? ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/directfb/directfb.mk ? ? ? ? ? ? ? | ? ?2 + ?package/fakeroot/fakeroot.mk ? ? ? ? ? ? ? | ? ?2 + ?package/gettext/gettext.mk ? ? ? ? ? ? ? ? | ? ?3 + ?package/iostat/iostat.mk ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/libusb/libusb.mk ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/lzo/lzo.mk ? ? ? ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/lzop/lzop.mk ? ? ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/m4/m4.mk ? ? ? ? ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/mpc/mpc.mk ? ? ? ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/netkitbase/netkitbase.mk ? ? ? ? ? | ? ?3 + ?package/netkittelnet/netkittelnet.mk ? ? ? | ? ?3 + ?package/netsnmp/netsnmp.mk ? ? ? ? ? ? ? ? | ? ?2 + ?package/newt/newt.mk ? ? ? ? ? ? ? ? ? ? ? | ? ?3 + ?package/pcre/pcre.mk ? ? ? ? ? ? ? ? ? ? ? | ? ?2 + ?package/pkg-gentargets.mk ? ? ? ? ? ? ? ? ?| ? 65 ++++++++++++++ ?package/pkg-utils.mk ? ? ? ? ? ? ? ? ? ? ? | ? 25 ++++++ ?package/ttcp/ttcp.mk ? ? ? ? ? ? ? ? ? ? ? | ? ?3 + ?package/vpnc/vpnc.mk ? ? ? ? ? ? ? ? ? ? ? | ? ?3 + ?support/legal-info/README.header ? ? ? ? ? | ? 24 +++++ ?support/legal-info/README.warnings-header ?| ? ?4 +
Quoted 4 lines
?26 files changed, 346 insertions(+), 3 deletions(-) ?create mode 100644 support/legal-info/README.header ?create mode 100644 support/legal-info/README.warnings-header
I pulled from your branch and did some tests with it. Some observations:
- If you start from a clean env without .config, the 'legal-info' target does not exist. This is because it's in the 'have-config' block. This may make sense, but it would be nice if this were noted somewhere (the fact that you have to have a config first).
- I then created a config, (either with a defconfig (I took pandaboard as example) or by just starting 'make menuconfig' and immediately saving) and executed 'make legal-info'. Now I got:
Quoted 1 line
Quoted 1 line
Quoted 1 line
busybox 1.20.0 Downloading
/home/tdescham/repo/contrib/buildroot-import/dl/busybox-1.20.0.tar.bz2:
No such file or directory /home/tdescham/repo/contrib/buildroot-import/dl/busybox-1.20.0.tar.bz2:
No such file or directory
make: *** [/home/tdescham/repo/contrib/buildroot-import/output/build/busybox-1.20.0/.stamp_downloaded] Error 1
This was fixed by explicitly running 'make dirs'. I think then that 'dirs' should be a prerequisite for the legal-info target.
- After that I played a bit by adding legal info to busybox and see how legal-info behaved. All was as expected, no comments here.
- Then I tried specifying a proprietary package, and noticed that this is case-sensitive PROPRIETARY. Although I understand that this is easier, and I am not against keeping this, this fact was not mentioned in the docs. In fact, the common license list in usage.txt does not specify the PROPRIETARY license at all. I feel that we should mention this possibility at least somewhere, either in that using.txt place, or in the adding-packages-gentargets.txt file.
For the rest, I have no comments on this proposal. Again, nice job and thanks for taking this up!
Best regards,
Thomas
v3 cover Automatically produce legal compliance info
Hi Thomas,
thanks for reviewing these patches.
Quoted 1 line · Thomas De Schampheleire
Hi Luca,
...
Quoted 6 lines
I pulled from your branch and did some tests with it. Some observations:
- If you start from a clean env without .config, the 'legal-info' target does not exist. This is because it's in the 'have-config' block. This may make sense, but it would be nice if this were noted somewhere (the fact that you have to have a config first).
I reworded the manual this way:
Quoted 17 lines
To make this easier for you, Buildroot can collect for you some material you will probably need. To produce this material, after you configured Buildroot with +make menuconfig+, +make xconfig+ or +make gconfig+, run:
- I then created a config, (either with a defconfig (I took pandaboard as example) or by just starting 'make menuconfig' and immediately saving) and executed 'make legal-info'. Now I got:
Quoted 1 line
Quoted 1 line
Quoted 1 line
busybox 1.20.0 Downloading
/home/tdescham/repo/contrib/buildroot-import/dl/busybox-1.20.0.tar.bz2:
No such file or directory/home/tdescham/repo/contrib/buildroot-import/dl/busybox-1.20.0.tar.bz2:
No such file or directory
make: *** [/home/tdescham/repo/contrib/buildroot-import/output/build/busybox-1.20.0/.stamp_downloaded] Error 1
Quoted 2 lines
This was fixed by explicitly running 'make dirs'. I think then that 'dirs' should be a prerequisite for the legal-info target.
Fixed in v4.
Quoted 11 lines
- After that I played a bit by adding legal info to busybox and see how legal-info behaved. All was as expected, no comments here.
- Then I tried specifying a proprietary package, and noticed that this is case-sensitive PROPRIETARY. Although I understand that this is easier, and I am not against keeping this, this fact was not mentioned in the docs. In fact, the common license list in usage.txt does not specify the PROPRIETARY license at all. I feel that we should mention this possibility at least somewhere, either in that using.txt place, or in the adding-packages-gentargets.txt file.
I added this to the list of licenses in using.txt:
-* +BSD-2c+: BSD 2-clause license.
+* +BSD-2c+: BSD 2-clause license;
+* +PROPRIETARY+: marks a non-opensource package;
+ Buildroot does not save any licensing info or source code for these packages.
and this to adding-packages-gentargets.txt:
* +LIBFOO_LICENSE+ defines the license (or licenses) under which the package is released.
This name will appear in the manifest file produced by +make legal-info+. If the license is one of those listed in xref:legal-info[], use the same string to make the manifest file uniform. Otherwise, describe the license in a precise and concise way, avoiding ambiguous names such as +BSD+ which actually name a family of licenses.
+ If the root filesystem you generate contains non-opensource packages, you + can define their license as +PROPRIETARY+: Buildroot will not save any + licensing info or source code for this package.
This variable is optional. If it is not defined, +unknown+ will appear in the +license+ field of the manifest file for this package.
Luca