opencontainers / opencontainers/runc

glibc LGPL requirements a bit unclear

Open
#3,220 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
13.5k
Forks
2.3k
Avg merge
2d 8h
Merged PRs (30d)
30

Description

At the moment, our statically linked binaries use whatever distribution's glibc archive we have -- does that mean we need to provide sources for glibc (even though under the definition of the LGPL glibc is a standard system library)? The reason I ask is that it'd be impractical for us to download and compile glibc for every release build, so maybe we should instead just provide a copy of the source RPM or source deb we used during compilation? Or (in keeping with the LGPLv3) can we just provide a link to the glibc homepage as well as a link to the distribution used (to cover the case where the distribution applied patches not upstream)?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file, test, or entry point is identified in the issue. Start by reviewing the static-linking and release process, then verify the applicable LGPL requirements for the glibc archive and distribution sources. Done means the project has a documented, agreed answer for what source or links each release must provide.

Written by the indexing model from the issue text.

Assessment

Domain
release
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.