From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:1008:1e59::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id QHCCMX2JTmb17QAAA41jLg (envelope-from ) for ; Thu, 23 May 2024 02:10:37 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id SJgqLH2JTmapxAAA62LTzQ (envelope-from ) for ; Thu, 23 May 2024 02:10:37 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=cyberdimension.org header.s=dkim header.b=F6SM4ijs; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1716423037; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=fzBJcTfOPx+RitZ8zw/dFMXJR60hRkrhaq1vdga+79g=; b=q10vaE0Nz8XQ1a8351v0B01jHw4XlVN2lykVLz2ju8TSc5M812H1v4c4l+kowv3NDF03dH vKIzzJ9J9czM9tfquDD5XsLCvTUKLJ0u5pnE900w6hTU7lmGHObNBKCSxjJPPyYv+PXo9y U0EopwxBnDqa9+GJCaAUVKacHbRb8UpLp2lhs+zJI0d9tFM9Qc/l/03+0tWvviX2TYJLH0 QByN1CaQR2uJWJnHHRbK4oDPZsi9Gtu9BioLJNn0g1i2FGXQgiV0T9qNYf+4z0hEmgTpbh HMxBtr64dpWVkgx/0YJ6yNGAFBUPpbg47pH6zJqo1RP9WGRH1R8qtt0RkrhD6w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1716423037; a=rsa-sha256; cv=none; b=ZHG5ne0u1lHIMj1oqTDvMBzuJsFrcmiAi9joPm4BYAcxHuwK097X43j5fnArKsBgahr92c KRXyLOcNfKKtxpzm0nEgYwt3EycrJvxOGDh8dtsFK5TRdaYs7x8R0oBPV5PGGmr0QrnjDe 0LYv28kpHbpPJ2QbrJeZkqHBuIYIB0vKXTTaL9z9Wq+3KcvSU8rkCKK/4b+4VzBCkv9+w9 SC/H1BlfYJqZnbIABIE42mHjDzlKdrcQFUnSqCwSkkyzyOcsI7tCyAzr84YPns89JrtMU3 j2JApUVPXwx4FhibmajjLUDIXZPKEjs9TNvmXbdPFtOD12UFbL7iwG13HCR4Uw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=cyberdimension.org header.s=dkim header.b=F6SM4ijs; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8DBC277DD for ; Thu, 23 May 2024 02:10:37 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1s9w24-0002Ac-OF; Wed, 22 May 2024 20:10:08 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s9w1z-0002A2-B1 for help-guix@gnu.org; Wed, 22 May 2024 20:10:03 -0400 Received: from cyberdimension.org ([79.143.250.36] helo=rockpro64.cyberdimension.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1s9w1q-0000Mo-T8; Wed, 22 May 2024 20:10:01 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=dkim; bh=UtI8+VM68yQgiMQ ZHTyrIEJEG+iqZs/Xv9BdfauwxUQ=; h=subject:to:from:date; d=cyberdimension.org; b=F6SM4ijsvoZOfkXS471FclbvhEttvqOpmOUhJ7nYLASaSN 1H7/VibUh/PP6kV0O+ZjI6XAi+agXRUxxyhRTFvfIgrUtRT4aciQeELhOMw2qNXLKbUXjL Aq1D6hXkF4Ve6CRAFRDmg7LJjFeLXHdi26fZkhJXLo1ZCaQzAyB+/XYqt3LNqKKBN4q+ev 8SFQ7ZqLpQrlBUPa8Np5TVWokLA9EfvOEk3hG6tknCkug9OGt9JXNU208213326SW6qsOR NA7E267ZzM/KNq6a6GvFMTzi5n3p/BGyeCecUa9dKyIuURHDnj3OXx9HGht6FCq5lFG59j d0TwDjiurUnhqvew== Received: from primary_laptop (localhost [127.0.0.1]) by rockpro64.cyberdimension.org (OpenSMTPD) with ESMTP id da190fca; Thu, 23 May 2024 00:09:50 +0000 (UTC) Date: Thu, 23 May 2024 02:09:25 +0200 From: Denis 'GNUtoo' Carikli To: Denis 'GNUtoo' Carikli , Adrien 'neox' Bourmault , help-guix@gnu.org Subject: License compliance when redistributing images built with 'guix system'. Message-ID: <20240523020925.1cb0bb2c@primary_laptop> X-Mailer: Claws Mail 4.1.1 (GTK 3.24.41; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/l3_ye_0rp+R_tkO9b8fdOlo"; protocol="application/pgp-signature"; micalg=pgp-sha256 Received-SPF: pass client-ip=79.143.250.36; envelope-from=GNUtoo@cyberdimension.org; helo=rockpro64.cyberdimension.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -3.96 X-Spam-Score: -3.96 X-Migadu-Queue-Id: 8DBC277DD X-Migadu-Scanner: mx11.migadu.com X-TUID: FA7XgvouB0TJ --Sig_/l3_ye_0rp+R_tkO9b8fdOlo Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, The GPLv2 has this part: > If distribution of executable or object code is made by offering > access to copy from a designated place, then offering equivalent=20 > access to copy the source code from the same place counts as > distribution of the source code, even though third parties are not > compelled to copy the source along with the object code. So as I understand when redistributing packages (made with guix pack for instance), 'guix build --sources=3Dtransitive ' can be used to get all the corresponding source code and publish it in 'the same place'. I could also distribute the Guix source code being used and the build scripts along the way, and even generate a package <-> license list with guix package --show just to be sure (though the licenses are also in the source code). But for redistributing complete images built with guix system image, like a VM image for instance, I'm unsure how to do it and I was wondering if there is a standard way to do that. The following command seems to be able to tell me which packages were used in the image: > guix gc -R "$(guix system build system.scm)" but then: (1) I'm unsure if there are all the packages (2) I need to parse the output and I'm unsure how to separate the package name from the version in a reliable way. Another option could be to export my-os and use something like that in a scm file that I'd then use 'guix build -L . --sources=3Dtransitive' on after importing (gnu system) and (guix packages): > (filter package? (operating-system-packages my-os)) but then here too I'm even more afraid of missing packages. The downside is also that it filters out packages like `(,git "gui") so using that in the image would not be possible and would need to be heavily documented. Denis. --Sig_/l3_ye_0rp+R_tkO9b8fdOlo Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEeC+d2+Nrp/PU3kkGX138wUF34mMFAmZOiTUACgkQX138wUF3 4mMwtBAAmNeKYMx5mCA1JxlU24u3VmOQ6tpN4iWEonUWucg4NqEvsJhN42PcIPLl XY+ArJG8T4BzIS1eVPE+vbsjNUJNzmjJjFd5GSSc4aBygcpMJYzlAtEnCC/oMsZ9 msZcosGg+73/AF1lYXlFfelMegq1aVqLH7CBQtDxBb99IdMkpBDWNE72GK5IN+0W 6pMAJ2JHkzbQk8hX1SoSHklJbplc+vzTfXGLaA8WWQzkE8u1OBVA2Y8OlT7ENDAI F54b3PIzGRVq9ry1VchChHw/wxx5NzTpGOycjPrBt9yhNCg5W6n0IblSqKJk3+oF OvXIv+vc4dpnybX+z8C3dc5OvX8F6arGFFBEjo2wKr5TU2JByzejBjiEbxmtv1be 3puaUDbavZR7O2+kYS+5Zfeb1NjiVnvxkiM2yPPIHEF0MY9qCPxDpG/YI0M4WO8L 3HkGbSSj1S8eW8mpQ+qmmiGAQHSaJyDKyVKCwDebo55BvL0aC4U1DbPn9M8TuFnX pFdrusstPyRxlDEng1uLXIU3Y8KS+1FSNr0sDsnoXLfUzERvjbgdrQSMlGAWW3jC TYI+R7Xvo1ny58XGp3DeV/K9E0QFTcMknlu4PdO4WGhxXEv7NYtDgTfeUC+XC4E/ A8kdhg/xhUysAajq6pH45uzaW1GelrccbW9ERQURWZ4m71keT4U= =5ppO -----END PGP SIGNATURE----- --Sig_/l3_ye_0rp+R_tkO9b8fdOlo--