GPL Causing Problems for Derivative Linux Distros

NewsForge (Also owned by VA) is reporting on a recent discovery by Warren Woodford about how the GPL could affect derivative Linux distributions. This could make life difficult for those small distros that are being maintained by one or two people in their spare time due to the high amount of work it creates. From the article: "Woodford does supply the source code for MEPIS' reconfigured kernel in a Debian source-package. His mistake seems to have been the assumption that, so long as the source code was available somewhere, he did not have to provide it himself if he hadn't modified it. While he has not contacted any other distributions, he suspects that he is far from the only one to make this assumption. 'We, like 10,000 other people, probably, believed we were covered by the safe harbor of having an upstream distribution available online,' Woodford says. 'I think, of the 500 distributions tracked by DistroWatch, probably 450 of them are in trouble right now per this position.'"

Comments

Applies to other GPL software as well

[LiquidCoooled]

Remember, this applies equally to kernel hackers as well as people creating derivatives from other GPL software.

From: mrAngry@snootygits.com
Subject: I want the source code to your system!

Polite Reply:
If you would like the source code you are welcome to have it.
Please note however that I have only made changes to a few of the thousands of x system source files.

There are 2 ways that you can have it, the simplest being go to my upstream system writer and download the base code which I used and see the src folder on my FTP/CVS/web server for my own modifications.

Otherwise I am willing to post you a CD/DVD containing the entire source code (original and my modifications). I cannot unfortunately upload the entire x GB folder since I do not have the bandwidth to spare.
Please note however, there will be an administration and postage charge of £10 if you require a DVD image.

have a nice day.

Anyone making source modifications to a system must have at least one source copy of the original so be respectful but don't waste your time worrying about it.

Re:Applies to other GPL software as well

[munpfazy]

No, just the ones they distribute. Honestly, I don't
  understand why this is such a big deal.

Yup. Seems like total nonsense to me.

Even if he chose to distribute the sources online, the resources required are trivial. A bzip'd source file is rarely much larger than binaries produced from it. We're talking about at most a factor of 2 difference in storage on the server even if he decided to independently place the source to every version of every binary online. And, there are many ways to cut that number down until it's a marginal increase in storage requirements.

There's no requirement that he distribute the source in an elaborate or easy to use way. Just write something that fetches the source to every used package and tosses them on the server somewhere every time a version is released. Remove the old ones from the server and offer to ship a dvd in exchange for handling costs.

Better yet, keep an up-to-date local copy and just check it into a cvs server with every release. (That way you only pay to store the diffs and have the source for every release available should anyone want it.)

If he's right and nobody actually wants or needs to get the source from him, then the additional bandwidth requirements will be tiny. On the other hand, if the added bandwidth *is* important, then it demonstrates that there's a very good reason to require source distribution.

Personally, I've never used a distro for which source packages aren't available. It seems like such an obvious step that I'd think twice before trusting someone who didn't do so automatically *before* getting a letter from the fsf.

Re:Applies to other GPL software as well

[Chops]

Remember, this applies equally to kernel hackers as well as people creating derivatives from other GPL software.

From: mrAngry@snootygits.com
Subject: I want the source code to your system!

I've been the Mr. Angry in this situation -- I'm not sure if it was a language issue, or why, but instead of telling me "the code is in anonymous cvs from XXX under tag YYY," or sending me a copy, the kernel hacker in question basically told me that he wasn't interested in helping me. It meant that I was stuck unable to make necessary reconfigurations to the only working kernel I could find for my handheld; I was basically stuck with a binary blob that I couldn't modify. I knew that the guy was one of the good guys, but it still really sucked being stuck in a situation that (a) left me unable to use Linux on my handheld, even though someone somewhere had got it working, (b) the GPL was designed to prevent, and (c) was, technically, illegal.

Anyone making source modifications to a system must have at least one source copy of the original so be respectful but don't waste your time worrying about it.

For me it was a much greater waste of time not getting the source code; it was such a waste of time that I gave up and shelved my handheld. You may not care about me personally, but you should bear in mind that fulfilling the GPL's conditions is very important, for reasons besides "it's the law."

Take what it gives.

[twitter]

There is no upgrade path from one version of MEPIS to the next.

Well, that's what happens when you mix in non free stuff like Macromedia flash, Real Player, Nvidia drivers, NDis wrappers, Vonage clients, etc. Non free is brittle. It might be less brittle than the Windoze world, but it will never be as easy as the free world.

Free packages in Mepis upgrade with about as much grace as you can expect. Just last week, I upgraded Kontact from a 2003 edition to Etch. This worked out OK through apt-get outside of X. It got all the KDE goodies, xorg and other dependencies and just worked when it was done. There was one hang up, but the system itself told me what magic phrase to type.

There appears to be a very weak mechanism for collecting community know-how as to how to configure the system to "just work" on a particular platform.

Nuts. Mepis is one of the easiest distributions to install. If it works off the CD, it will work off your hard drive and Mepis works with more hardware than anything else I've ever tried.

Mepis is still a great distribution to install for someone when you don't want to spend a lot of time. It demonstrates what free software can do. The problems it has are the problems of non free software in general and those rear their head far less often on a Mepis system than they do on less free platforms. In short, don't give up a useful tool just because one person says some stupid things.

Warren can and will fix this little source code problem and this little non issue will fade away without trace. The chances are that some co operative solution will be easiest. Distributions which use the same package unmodified can get together to share the cost and expense of keeping the source code available.