opencontainers / opencontainers/runc
glibc LGPL requirements a bit unclear
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13.5k
- Forks
- 2.3k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 30
Description
At the moment, our statically linked binaries use whatever distribution's glibc archive we have -- does that mean we need to provide sources for glibc (even though under the definition of the LGPL glibc is a standard system library)? The reason I ask is that it'd be impractical for us to download and compile glibc for every release build, so maybe we should instead just provide a copy of the source RPM or source deb we used during compilation? Or (in keeping with the LGPLv3) can we just provide a link to the glibc homepage as well as a link to the distribution used (to cover the case where the distribution applied patches not upstream)?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file, test, or entry point is identified in the issue. Start by reviewing the static-linking and release process, then verify the applicable LGPL requirements for the glibc archive and distribution sources. Done means the project has a documented, agreed answer for what source or links each release must provide.
Written by the indexing model from the issue text.
Assessment
- Domain
- release
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100