[Fwd: Re: [openstack-dev] [Marconi] Why is marconi a queue implementation vs a provisioning API?]
-------- Forwarded Message --------
From: Gil Yehuda <gyehuda@yahoo-inc.com> Reply-to: "OpenStack Development Mailing List \(not for usage questions\)" <openstack-dev@lists.openstack.org> To: OpenStack Development Mailing List (not for usage questions) <openstack-dev@lists.openstack.org> Subject: Re: [openstack-dev] [legal-discuss] [Marconi] Why is marconi a queue implementation vs a provisioning API? Date: Thu, 20 Mar 2014 17:09:32 +0000
To be clear, Marconi does not incorporate any AGPL code itself; pymongo is Apache2 licensed.
Understood, but here's the rub. Someone else is going to want to build on this (which it the point of this open source project). Whereas 'pymongo' is Apache licensed, since the copyright holder, MongoDB Inc. declared it as such, the authors of the other community drivers (for other language bindings and features of MongoDB, etc.) are also of releasing drivers under the Apache or BSD licenses too (thinking that's OK to do since no one is telling them otherwise). That community is unaware of their legal obligations when creating drivers to an AGPL database. Thus if one of those community drivers gets intertwined in a court case clarifying their license to be infringing on the AGPL terms, we've inadvertently impacted our community. This is a credible risk that is difficult for OpenStack to abate, since the problem lies with the way a different community chose to operate.
There are three interconnected issues here: 1. The confusion that MongoDB has created in Open Source licensing due to the asymmetric control they have on licensing terms. 2. The diligence of Open Stack to remain careful with OpenStack's CLA compliance and Apache-friendly terms. 3. The pragmatics of the effect MondgoDB would have onto OpenStack's economic viability and legal risks at large.
The first problem is out of scope for this list. But I think people who rely upon Open Source for their business ought to understand what MongoDB is doing to open source software. The second is, to your point, the issue in this conversation. As long as Openstack only use Apache licensed code >>from MondgoDB Inc.<< and diligently avoids using any open source contributions from any community contributor to the MongoDB ecosystem, then you remain compliant the your CLA. But you will have to exclude the rest of the MongoDB community (which goes against the spirit of Open Source -- back to the problem #1, which is out of scope). As for #3, I think the foundation needs to weigh in on the pragmatics here, since this has an economic and legal impact to the entire endeavor, not just to persisting data in one component of the project.
Gil Yehuda Sr. Director Of Open Source, Open Standards
-----Original Message----- From: Kurt Griffiths [mailto:kurt.griffiths@rackspace.com] Sent: Thursday, March 20, 2014 9:29 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [legal-discuss] [Marconi] Why is marconi a queue implementation vs a provisioning API?
The incorporation of AGPLv3 code Into OpenStack Project is a significant decision
_______________________________________________ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
I still don't follow. "That community is unaware of their legal obligations when creating drivers to an AGPL database." To what legal obligations are you referring? As far as I understand it, the license only affects the system on the server side of the network. Simply talking to the server in no way is bound by the license I believe. The server is required to give up sorce code if requested, but I don't think there is a requirement on the client driver to add functionality to allow for downloading of the source. Please correct me if I'm wrong in any of this. Thanks, Kevin ________________________________________ From: Mark McLoughlin [markmc@redhat.com] Sent: Thursday, March 20, 2014 10:23 AM To: legal-discuss@lists.openstack.org Subject: [legal-discuss] [Fwd: Re: [openstack-dev] [Marconi] Why is marconi a queue implementation vs a provisioning API?] -------- Forwarded Message --------
From: Gil Yehuda <gyehuda@yahoo-inc.com> Reply-to: "OpenStack Development Mailing List \(not for usage questions\)" <openstack-dev@lists.openstack.org> To: OpenStack Development Mailing List (not for usage questions) <openstack-dev@lists.openstack.org> Subject: Re: [openstack-dev] [legal-discuss] [Marconi] Why is marconi a queue implementation vs a provisioning API? Date: Thu, 20 Mar 2014 17:09:32 +0000
To be clear, Marconi does not incorporate any AGPL code itself; pymongo is Apache2 licensed.
Understood, but here's the rub. Someone else is going to want to build on this (which it the point of this open source project). Whereas 'pymongo' is Apache licensed, since the copyright holder, MongoDB Inc. declared it as such, the authors of the other community drivers (for other language bindings and features of MongoDB, etc.) are also of releasing drivers under the Apache or BSD licenses too (thinking that's OK to do since no one is telling them otherwise). That community is unaware of their legal obligations when creating drivers to an AGPL database. Thus if one of those community drivers gets intertwined in a court case clarifying their license to be infringing on the AGPL terms, we've inadvertently impacted our community. This is a credible risk that is difficult for OpenStack to abate, since the problem lies with the way a different community chose to operate.
There are three interconnected issues here: 1. The confusion that MongoDB has created in Open Source licensing due to the asymmetric control they have on licensing terms. 2. The diligence of Open Stack to remain careful with OpenStack's CLA compliance and Apache-friendly terms. 3. The pragmatics of the effect MondgoDB would have onto OpenStack's economic viability and legal risks at large.
The first problem is out of scope for this list. But I think people who rely upon Open Source for their business ought to understand what MongoDB is doing to open source software. The second is, to your point, the issue in this conversation. As long as Openstack only use Apache licensed code >>from MondgoDB Inc.<< and diligently avoids using any open source contributions from any community contributor to the MongoDB ecosystem, then you remain compliant the your CLA. But you will have to exclude the rest of the MongoDB community (which goes against the spirit of Open Source -- back to the problem #1, which is out of scope). As for #3, I think the foundation needs to weigh in on the pragmatics here, since this has an economic and legal impact to the entire endeavor, not just to persisting data in one component of the project.
Gil Yehuda Sr. Director Of Open Source, Open Standards
-----Original Message----- From: Kurt Griffiths [mailto:kurt.griffiths@rackspace.com] Sent: Thursday, March 20, 2014 9:29 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [legal-discuss] [Marconi] Why is marconi a queue implementation vs a provisioning API?
The incorporation of AGPLv3 code Into OpenStack Project is a significant decision
_______________________________________________ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
_______________________________________________ legal-discuss mailing list legal-discuss@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/legal-discuss
On 20/03/14 13:23, Mark McLoughlin wrote:
-------- Forwarded Message --------
From: Gil Yehuda <gyehuda@yahoo-inc.com> Reply-to: "OpenStack Development Mailing List \(not for usage questions\)" <openstack-dev@lists.openstack.org> To: OpenStack Development Mailing List (not for usage questions) <openstack-dev@lists.openstack.org> Subject: Re: [openstack-dev] [legal-discuss] [Marconi] Why is marconi a queue implementation vs a provisioning API? Date: Thu, 20 Mar 2014 17:09:32 +0000
To be clear, Marconi does not incorporate any AGPL code itself; pymongo is Apache2 licensed.
Understood, but here's the rub. Someone else is going to want to build on this (which it the point of this open source project). Whereas 'pymongo' is Apache licensed, since the copyright holder, MongoDB Inc. declared it as such, the authors of the other community drivers (for other language bindings and features of MongoDB, etc.) are also of releasing drivers under the Apache or BSD licenses too (thinking that's OK to do since no one is telling them otherwise). That community is unaware of their legal obligations when creating drivers to an AGPL database. Thus if one of those community drivers gets intertwined in a court case clarifying their license to be infringing on the AGPL terms, we've inadvertently impacted our community. This is a credible risk that is difficult for OpenStack to abate, since the problem lies with the way a different community chose to operate.
I'm not a lawyer, but I can't reconcile this with: http://www.mongodb.org/about/licensing/#licensing-policy (specifically: "we promise that your client application which uses the database is a separate work") and: http://en.wikipedia.org/wiki/Estoppel even if I could accept that a program could become a derivative work of another program simply by interacting with its public API over a network, which I by no means do.
There are three interconnected issues here: 1. The confusion that MongoDB has created in Open Source licensing due to the asymmetric control they have on licensing terms. 2. The diligence of Open Stack to remain careful with OpenStack's CLA compliance and Apache-friendly terms. 3. The pragmatics of the effect MondgoDB would have onto OpenStack's economic viability and legal risks at large.
3 (excluding the 'legal risks' part) is the issue here. With the GPL, compliance obligations are effectively limited to distributors. With the AGPL, every user of the code has potential license obligations. It's clear even from this thread that there are plenty of people who want to avoid such obligations, for reasons ranging from pure FUD through excessively-conservative legal advice to just legitimately not being set up to handle distribution of open source code in the way that open source software distributors routinely are. Avoiding this potential barrier to adoption strikes me as a legitimate reason to ensure that alternative implementations are available. cheers, Zane.
The first problem is out of scope for this list. But I think people who rely upon Open Source for their business ought to understand what MongoDB is doing to open source software. The second is, to your point, the issue in this conversation. As long as Openstack only use Apache licensed code >>from MondgoDB Inc.<< and diligently avoids using any open source contributions from any community contributor to the MongoDB ecosystem, then you remain compliant the your CLA. But you will have to exclude the rest of the MongoDB community (which goes against the spirit of Open Source -- back to the problem #1, which is out of scope). As for #3, I think the foundation needs to weigh in on the pragmatics here, since this has an economic and legal impact to the entire endeavor, not just to persisting data in one component of the project.
Gil Yehuda Sr. Director Of Open Source, Open Standards
-----Original Message----- From: Kurt Griffiths [mailto:kurt.griffiths@rackspace.com] Sent: Thursday, March 20, 2014 9:29 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [legal-discuss] [Marconi] Why is marconi a queue implementation vs a provisioning API?
The incorporation of AGPLv3 code Into OpenStack Project is a significant decision
_______________________________________________ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
_______________________________________________ legal-discuss mailing list legal-discuss@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/legal-discuss
participants (3)
-
Fox, Kevin M
-
Mark McLoughlin
-
Zane Bitter