Package copyright file omits Apache 2 license

Bug #1718681 reported by Arvan David Pritchard on 2017-09-21
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
cloud-init
High
Joshua Powers
cloud-init (Ubuntu)
Status tracked in Artful
Xenial
Low
Unassigned
Zesty
Low
Unassigned
Artful
Low
Unassigned

Bug Description

In the Ubuntu package source, packages/debian/copyright says the License is either GPL-3 or Apache 2.0 and includes summaries of both licenses with links to the full license texts.

debian/copyright says that the license is either GPL-3 or Apache 2.0, but only includes the GPL-3 summary and link (together with the MIT licence terms for cloudinit/boto_utils.py)

I believe the terms of the Apache licence and the terms the LICENSE file require the inclusion of the Apache 2 summary and link in the debian/copyright file.

cloud-init.tar is not relevant to this issue.

Seen on Azure
$ dpkg-query -W -f='${Version}' cloud-init
0.7.9-233-ge586fe35-0ubuntu1~16.04.1
$ cat /usr/share/doc/cloud-init/copyright
Format-Specification: http://svn.debian.org/wsvn/dep/web/deps/dep5.mdwn?op=file&rev=135
Name: cloud-init
Maintainer: Scott Moser <email address hidden>
Source: https://launchpad.net/cloud-init

This package was debianized by Soren Hansen <email address hidden> on
Thu, 04 Sep 2008 12:49:15 +0200 as ec2-init. It was later renamed to
cloud-utils by Scott Moser <email address hidden>

Upstream Author: Scott Moser <email address hidden>
    Soren Hansen <email address hidden>
    Chuck Short <email address hidden>

Copyright: 2010, Canonical Ltd.
License: GPL-3 or Apache-2.0
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License version 3, as
 published by the Free Software Foundation.

 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 GNU General Public License for more details.

 You should have received a copy of the GNU General Public License
 along with this program. If not, see <http://www.gnu.org/licenses/>.

 The complete text of the GPL version 3 can be seen in
 /usr/share/common-licenses/GPL-3.

Files: cloudinit/boto_utils.py
Copyright: 2006,2007, Mitch Garnaat http://garnaat.org/
License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of this software and associated documentation files (the
 "Software"), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish, dis-
 tribute, sublicense, and/or sell copies of the Software, and to permit
 persons to whom the Software is furnished to do so, subject to the fol-
 lowing conditions:

 The above copyright notice and this permission notice shall be included
 in all copies or substantial portions of the Software.

 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABIL-
 ITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
 SHALL THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
 WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
 IN THE SOFTWARE.

Related branches

Joshua Powers (powersj) on 2017-09-21
Changed in cloud-init:
status: New → Confirmed
importance: Undecided → High
assignee: nobody → Joshua Powers (powersj)
status: Confirmed → Invalid
Changed in cloud-init (Ubuntu Xenial):
status: New → Confirmed
Changed in cloud-init (Ubuntu Zesty):
status: New → Confirmed
Changed in cloud-init (Ubuntu Artful):
status: New → Confirmed
Changed in cloud-init:
assignee: Joshua Powers (powersj) → nobody
Joshua Powers (powersj) wrote :

This is not an issue found in the cloud-init project itself. The packages/debian/copyright file correctly shows the license text of both licenses. See:
https://github.com/cloud-init/cloud-init/blob/master/packages/debian/copyright

This is an issue with the Ubuntu packaging for the devel, zesty, and xenial branches/releases see the following:

artful (devel):
https://github.com/cloud-init/cloud-init/blob/ubuntu/devel/debian/copyright
zesty:
https://github.com/cloud-init/cloud-init/blob/ubuntu/zesty/debian/copyright
xenial:
https://github.com/cloud-init/cloud-init/blob/ubuntu/xenial/debian/copyright

Creating merge proposals for the packaging branches now.

Joshua Powers (powersj) on 2017-09-21
Changed in cloud-init (Ubuntu Xenial):
status: Confirmed → In Progress
Changed in cloud-init (Ubuntu Zesty):
status: Confirmed → In Progress
Changed in cloud-init (Ubuntu Artful):
status: Confirmed → In Progress
Joshua Powers (powersj) wrote :

Fix committed to all repos, will be available at next release.

Changed in cloud-init (Ubuntu Xenial):
status: In Progress → Fix Committed
Changed in cloud-init (Ubuntu Zesty):
status: In Progress → Fix Committed
Changed in cloud-init (Ubuntu Artful):
status: In Progress → Fix Committed
Scott Moser (smoser) on 2017-10-03
Changed in cloud-init:
status: Invalid → Fix Committed
assignee: nobody → Joshua Powers (powersj)
Changed in cloud-init (Ubuntu Xenial):
importance: Undecided → Low
Changed in cloud-init (Ubuntu Zesty):
importance: Undecided → Low
Changed in cloud-init (Ubuntu Artful):
importance: Undecided → Low
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package cloud-init - 17.1-13-g7fd04255-0ubuntu1

---------------
cloud-init (17.1-13-g7fd04255-0ubuntu1) artful; urgency=medium

  * debian/copyright: dep5 updates, reorganize, add Apache 2.0 license.
    (LP: #1718681)
  * debian/control: drop dependency on python3-prettytable
  * New upstream snapshot.
    - systemd: remove limit on tasks created by cloud-init-final.service.
      [Robert Schweikert] (LP: #1717969)
    - suse: Support addition of zypper repos via cloud-config.
      [Robert Schweikert] (LP: #1718675)
    - tests: Combine integration configs and testcases [Joshua Powers]
    - Azure, CloudStack: Support reading dhcp options from systemd-networkd.
      [Dimitri John Ledkov] (LP: #1718029)
    - packages/debian/copyright: remove mention of boto and MIT license
    - systemd: only mention Before=apt-daily.service on debian based distros.
      [Robert Schweikert]
    - Add missing simpletable and simpletable tests for failed merge
      [Chad Smith]
    - Remove prettytable dependency, introduce simpletable [Andrew Jorgensen]
    - debian/copyright: dep5 updates, reorganize, add Apache 2.0 license.
      [Joshua Powers] (LP: #1718681)
    - tests: remove dependency on shlex [Joshua Powers]
    - AltCloud: Trust PATH for udevadm and modprobe.
    - DataSourceOVF: use util.find_devs_with(TYPE=iso9660)
      [Ryan Harper] (LP: #1718287)
    - tests: remove a temp file used in bootcmd tests.

 -- Ryan Harper <email address hidden> Tue, 03 Oct 2017 10:59:52 -0500

Changed in cloud-init (Ubuntu Artful):
status: Fix Committed → Fix Released

Hello Arvan, or anyone else affected,

Accepted cloud-init into zesty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/cloud-init/17.1-18-gd4f70470-0ubuntu1~17.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-zesty to verification-done-zesty. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-zesty. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags: added: verification-needed verification-needed-zesty
Brian Murray (brian-murray) wrote :

Hello Arvan, or anyone else affected,

Accepted cloud-init into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/cloud-init/17.1-18-gd4f70470-0ubuntu1~16.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags: added: verification-needed-xenial
tags: added: verification-failed-xenial
removed: verification-needed-xenial

Tested 17.1-18-gd4f70470-0ubuntu1~16.04.1 on Xenial

Looks correct (I transitioned through failed as I was not expecting the removal of the boto-utils acknowledgement.

tags: added: verification-passed-xenial
removed: verification-failed-xenial
tags: added: verification-done-xenial
removed: verification-passed-xenial
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers