Slashdot Mirror


Software Freedom Conservancy: Distributing Linux With ZFS Is Illegal (phoronix.com)

LichtSpektren writes: Phoronix reports that Bradley M. Kuhn and Karen M. Sandler at the Software Freedom Conservancy (SFS) have posted a blog post today arguing that Canonical's plan to distribute Ubuntu 16.04 LTS "Xenial Xerus" with support for the ZFS file system violates the Linux kernel's GPLv2 license.

On February 18, Dustin Kirkland at Canonical wrote on his blog: "We at Canonical have conducted a legal review, including discussion with the industry's leading software freedom legal counsel, of the licenses that apply to the Linux kernel and to ZFS. And in doing so, we have concluded that we are acting within the rights granted and in compliance with their terms of both of those licenses...The CDDL cannot apply to the Linux kernel because zfs.ko is a self-contained file system module — the kernel itself is quite obviously not a derivative work of this new file system. And zfs.ko, as a self-contained file system module, is clearly not a derivative work of the Linux kernel but rather quite obviously a derivative work of OpenZFS and OpenSolaris. Equivalent exceptions have existed for many years, for various other stand alone, self-contained, non-GPL kernel modules. Our conclusion is good for Ubuntu users, good for Linux, and good for all of free and open source software."

The SFS's blog post of today states: "We are sympathetic to Canonical's frustration in this desire to easily support more features for their users. However, as set out below, we have concluded that their distribution of zfs.ko violates the GPL."

32 of 379 comments (clear)

  1. No winners here. by Anonymous Coward · · Score: 4, Insightful

    I'm not sure what anyone would stand to gain by arguing that Ubuntu is violating the GPLv2 license. It seems kind of ridiculous.

    1. Re:No winners here. by Austerity+Empowers · · Score: 4, Interesting

      As usual, it has less to do with the specific example as it has to do with precedents that may not be desirable. It seems like if you release these two things "separately", then nothing is wrong. However by including this other binary with this problematic license as part of a single distribution you are "apparently" breaking the terms of the GPLv2 which requires the distribution be under GPLv2.

      Hairs can be split about what a "distrubution" is. I can add ZFS to my own system and not be wrong. Why cannot a script add ZFS to my system for me during install? When does it become a "distribution", given that most of us don't install from optical media anymore, and frequently download bits and pieces as we need them for our system anyway. I'm trying to see the evil here that this narrowly avoids, but I don't yet...provided the terms of the various pieces of software are still met on their own.

    2. Re:No winners here. by nycsubway · · Score: 3, Insightful

      That's the distinction of a distribution vs a software project. The distribution is heterogeneous: loaded with tons of open-source projects of different licenses. Maybe acknowledge this during the install process by having the user agree to the multiple licenses that are included in the distro.

    3. Re:No winners here. by EndlessNameless · · Score: 3, Informative

      The article explains why it is not ridiculous.

      Everybody in the free software community benefits from strong GPL enforcement. E.g., when Microsoft reused GPL code in one of their tools, they were forced to release their source when it was discovered.

      The ZFS license forbids releasing it under GPL. The Ubuntu binary distribution must be all GPL in order to satisfy the GPL's requirements.

      If Ubuntu starts picking which parts of the license it follows, you can bet everyone from minor devs to major corporations will start doing the same thing. Proprietary shops will absorb open source contributions in whatever predatory manner they can.

      The way to prevent it is simple. Enforce 100% of the requirements in the open source license 100% of the time, and set legal precedent whenever possible to establish those obligations as legally binding.

      --

      ---
      According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
    4. Re:No winners here. by Znork · · Score: 3, Insightful

      Making ZFS incompatible with linux was the whole point of putting it under the CDDL from the start.

      That said, having run ZFS since pretty much the start on Solaris servers here, it has to be the most overhyped piece of software ever released. Initially it was pretty much unusable for things like database loads, it was unstable as hell and had serious memory usage issues. These days, the glaring problems are largely fixed, but in an enterprise environment most of its features are of limited use as most of the storage will be on centralized SAN/NAS arrays anyway.

      The whole discussion is one of those that gives me flashbacks to the 90's, same as when some database guy specifies that they want their volumes on this many striped spindles...

    5. Re:No winners here. by epine · · Score: 4, Insightful

      Having the user compile them is just another means of distributing a binary.

      You're the reason the rest of us have to constantly write IANAL as if that's the only thing that makes it permissible to so much as clear your throat, when all that really needs to be clear is that we're capable of distinguishing A from B to any necessary degree.

      "Having people cook their own pseudoephedrine is just another means of distributing methamphetamine."

      Actually, no. What you actually distribute, and the end result of what people are perhaps likely to do with it are two entirely different things. This is not Hair Splitting 101 with a laser scalpel. This is retiring your flexible plastic picnic knife. There exist, of course, various ways to spin language to link these things together, if that is indeed desired. But then we should be analyzing that extra language, not wishing it into existence by waving our hands and muttering "kids there days".

      Digression: Lawyers might make better guesses about the "necessary degree", but in practice lawyers are about as useful as political pundits empanelled on ISIS Today in speculating about the future will of the court. Maybe we should just all write CTLNKS instead (concerning the law, nobody knows shit). The main difference between critical thought at large and your lawyer is mainly that your lawyer can get into heaps of trouble by giving you a failing grade of shit. Pretty much the only thing I really want from intelligent agents of xmas future is to see the profession of law refactored, with all of their muddles and uncertainties hopelessly exposed to eternal ridicule, until we actually find in necessary to draft legislation to a sane standard (including an automated regression test suite, an unintended consequence verification gauntlet, and some Valgrind fuzz testing).

      Back to the matter at hand, I completely disagree that this analysis should start with the semantics of static/dynamic linkage.

      The real question should be this: if zfs.ko is erased from your system, does what remains function 99.99% the same way, minus only those features that zfs.ko provides?

      With static linkage you can't do this, and thus you can't ask this question, either.

      The key issue here is separability. What natural line exists between dynamic linkage and a ZeroMQ socket layer? And what about Joyent's "double hull" virtualization where ZFS is native to the underlying OS which provides a Linux API to the client OS? "Linking" is just indirection with more established history. And we all know you can solve every problem in computer science with another layer of indirection, except for too many layers of indirection.

      I think my "separability" question above is far more likely to be legally productive, but then IANAL YMMV & CTLNKS.

    6. Re:No winners here. by Grishnakh · · Score: 3, Interesting

      Nope, not at all.

      The Nvidia driver (nvidia.ko) lives in kernel space, and links to the kernel. It also links to a small GPL-licensed "shim" driver, because the Nvidia driver is a proprietary blob (and likely very close to their Windows driver architecturally), and the kernel changes frequently. So that they don't have to maintain a different proprietary blob version for every single kernel version out there (which would be a daunting task, given all the kernel versions and all the different subversions and variants made by all the distros), they have a single blob, and then the shim gets compiled for the kernel on the target system, and links the two.

      Inter-process communication would be a disaster for something very high-performance like a 3D video driver.

  2. SFS? More like FFS... by Bearhouse · · Score: 5, Insightful

    Why oh why do we have to keep shooting ourselves in the foot?
    OK I'm a BSD user so, well, stones and glass houses, but even so the open source community's continuing ability to why things should not be allowed is depressing...most people in our crowd want our stuff to be USED by as many people as possible...

    1. Re:SFS? More like FFS... by edtice1559 · · Score: 4, Informative

      The goal of the GPL is not to get the most widely used software (although that's a noble goal). The goal is to ensure that the users of the software are able to maintain and secure it so they don't get left hanging out to dry if something happens to their upstream vendor. When you receive software under the GPL you expect to have these freedoms. When software with multiple licenses is combined, users have to become lawyers to know what rights they actually have and whether these freedoms are protected. I'm not sure it's a concern in this particular case since both GPL and CDDLv1 protect the user's rights. (It's only distributors who are affected by this). But knowing that you can secure and maintain software is valuable. It would be undesirable to get into a situation where you think you have that right, but it turns out that you don't.

  3. It isn't features, it is stability + features by poet · · Score: 4, Insightful

    Linux does not have a stable file-system and volume manager that can come anywhere near the performance and stability of ZFS.

    --
    Get your PostgreSQL here: http://www.commandprompt.com/
    1. Re:It isn't features, it is stability + features by bheading · · Score: 3, Insightful

      Sure. BTRFS is, arguably, a disappointment. It has a lot of the features of ZFS, but it doesn't seem to be anything like as user friendly or logical. When I played with it for the first time about a year ago, I found no out-of-the-box automated snapshot features, and had to install a package to handle this, which didn't seem to work reliably. It's also an enormous missed opportunity that BTRFS doesn't have the ability to natively do RAID-6, or the ability to use an SSD as a fast block cache in front of standard HDDs. ZFS has done all of this for many years now.

      I'm sure someone will reply with details of how to do these things. But with ZFS it was obvious and I didn't need to spend a lot of time googling.

      That said, there's nothing that says that ZFS on Linux is automatically stable either. It's been necessary to extensively modify it in order to make it work. Running either of these two filesystems in production on Linux would be a risky proposition. It's no wonder the major enterprise vendors haven't switched to use them yet.

      Unfortunately at the moment it looks like the short term future of filesystems on Linux is based around XFS. Longer term, bcachefs looks interesting.

  4. SFS/FSF does not get to rule on GPL by Anonymous Coward · · Score: 4, Insightful

    The Linux Foundation, as the copyright holder of the Linux kernel, gets to determine what is and is not allowed.

    This is matter does not involve Software Freedom Conservancy (SFS) or Free Software Foundation (FSF), they are are not even parties to the copyright license used for the Linux kernel.

    In my professional opinion, Canonical can feel free to tell SFS to go pound sand.

    1. Re:SFS/FSF does not get to rule on GPL by jedidiah · · Score: 4, Insightful

      Agreed. The SFC is not the owner of either of the works in question and is not the author of the license in question. They have no stake or standing in the matter.

      As authors of the GPL itself, I would say that Stallman or the FSF do have some say in the matter.

      The SFC can go pound sand...

      --
      A Pirate and a Puritan look the same on a balance sheet.
    2. Re:SFS/FSF does not get to rule on GPL by slashping · · Score: 4, Insightful

      SFC only advises and warns, just like the FSF could do. Ultimately it's the copyright holders that can sue in court, and then it will be a judge or jury that decide the matter.

    3. Re:SFS/FSF does not get to rule on GPL by edtice1559 · · Score: 4, Insightful

      IANAL but it's not required to assign the copyright to the Linux foundation. Many people contribute to the Kernel. It's GPL so you could fork it. And the Linux Foundation would definitely *not* automatically get copyright to your version. It's ultimately the Linux Foundation who could prove copyright to large swaths and take action bu the foundation could not take the kernel as is and relicense it under GPLv3 for example. They'd have to rewrite all the parts for which they don't hold the copyright.

    4. Re:SFS/FSF does not get to rule on GPL by Olipro · · Score: 4, Informative

      Copyright of the Linux Kernel is actually spread across all its contributors, The Linux Foundation doesn't have any overriding ownership. Though of course any particular author(s) code could be excised from it in order to make their copyright irrelevant.

      In any case though, the copyright holders get to determine what licenses or permissions to grant over the work, they don't get to then decide how the license should be interpreted - that's up to an arbitrator or a court. If Canonical's lawyers are incorrect in their interpretation then someone will need to bring a court case to have it resolved.

    5. Re:SFS/FSF does not get to rule on GPL by Lord+Crc · · Score: 5, Informative

      The SFC is not the owner of either of the works in question and is not the author of the license in question. They have no stake or standing in the matter.

      It seems they do have a stake:

      The GPL Compliance Project for Linux Developers is comprised of copyright holders in the kernel, Linux, who have contributed to Linux under its license, the GPLv2. These copyright holders have formally asked Conservancy to engage in compliance efforts for their copyrights in the Linux kernel. In addition, some developers have directly assigned their copyrights on Linux to Conservancy, so Conservancy also enforces the GPL on Linux via its own copyrights in Linux.

      From https://sfconservancy.org/copy...

    6. Re:SFS/FSF does not get to rule on GPL by pr0fessor · · Score: 3, Informative

      Canonical only announced their intention and encouraged SFC to speak out because if law suites because now is the time to find out if any interested parties are going to sue... prior to actually starting and getting sued

  5. Re:Software Freedom? by slashping · · Score: 5, Insightful

    There's no such thing as unlimited freedom. You have to pick the freedoms you care about, and then forbid those that would violate it.

  6. Linus doesn't object to binary kernel modules by edtice1559 · · Score: 4, Insightful

    Regardless of the legal situation, the holder of the copyright to the vast majority of the kernel doesn't object to binary modules. There are those who would argue that even certain user-space binaries are a GPL violation. Fortunately those voices haven't prevailed. I guess, at some point, to squelch any doubts, ZFS will have to get turned into something akin to a hybrid driver where code to load interchangeable binary blobs with a certain interface is contributed to the kernel under GPL and the blobs come with their own license. In this case it will be CDDLv1. This is somewhat of a PITA but it's actually good in the medium-term because it means that users face less ambiguity in terms of knowing under which license they are receiving code.

  7. Hilarious by Anonymous Coward · · Score: 4, Insightful

    >The FSF, stewards of the GPL, have stated many times over the past decades that they believe there is no legal distinction between dynamic and static linking of a C program and we agree.

    The FSF is almost certainly wrong in this. Linking isn't going to even be considered in a court room. What they *will* consider is whether or not zfs.ko contains derivative work from Linux. Headers are now subject to copyright (as is my understanding) so it's very possible that it does. However, if they use "api-only" headers, such as posix stuff and it does not rely on being compiled against the GPL-ed version of the headers, then they are most likely going to be free and clear of any issues.

    Personally, the SFC can go eat a bag of dicks and die in a fire.

  8. What's the Conservancy's role in this? by bradley13 · · Score: 4, Informative

    Reading their piece, they sound like they are lawyers looking for a client, like they want to take Canonical to court over this. One likes to think that anyone who defends OSS must be on the side of the light, but I note that the Conservancy sued companies using Busybox over the objections of at least some of the copyright holders. This quote is kind of interesting:

    "But that didn't stop them from creating a self-funding legal machine where they never found any actual useful code that should have gone upstream, but they still demanded $15k or so in legal fees each time so they could go sue the next company."

    For those who didn't RTFA, the core of the question is this: Is a Linux distro that contains a ZFS module a combined product, derived from Linux and/or ZFS? Or are they two independent items that happen to be delivered in the same package. The Conservancy states "we have yet to encounter a Linux module that — when distributed in binary form — did not, in our view, yield combined work with Linux", and then they go on to say that the intend to "exhaust every diplomatic option...before seeking resolution from the courts".

    Only: nobody is asking them to take anyone to court. If Oracle doesn't like this (they are the primary holder of ZFS copyrights), I'm sure they have their own lawyers. So WTF is going on here? Instead of a patent troll, maybe we have a GPL troll?

    --
    Enjoy life! This is not a dress rehearsal.
  9. A grey area Oracle might exploit by evolutionary · · Score: 3, Interesting

    Oracle has been looking to profit form the free labor from open source software advocates ever since it was losing clients to MySQL which they later purchased. The original developers were so concerned they created MariaDB. And from this LibreOffice sprung to protect "OpenOffice" and after realizing Oracle was never going to make money on OO They give it to the Apache Foundation. Oracle has not had a history of playing nice with the open source community and their development on MySQL and related products has not exactly been dedicated. Suspect they are only doing it because it was a condition for the EU to allow the European portion of the take over of Sun Microsystems. Why hasn't Oracle just put put ZFS as a fully open GPL2 compliant code for all to use and improve? Probably, like OpenOffice, to see if they can exploit it to their benefit in some way, which could even sabotage Linux (or at least Ubuntu). Debian has the right idea in distributing the source only of ZFS. We'll see where this goes but I think The Software Freedom Conservancy is in the right, and in cases like this far better to err on the side of caution. If everyone lobbied Oracle, we could get a proper and compatible ZFS license that oracle couldn't do a poison pill or "about face" on later. Why not give that a try.

    --
    "Imagination is more important than knowledge" - Einstein
  10. Re:Software Freedom? by drew_kime · · Score: 4, Insightful

    So, Software Freedom means that you can't do what you want with your software? Is this one of those Richard Stalin - I mean, Stallman - groups or something?

    If you didn't write it, it's not your software. You can acquire the right to use it in exchange for your agreement to the terms of the license. The freedom part comes in where the terms of the license say that you get to modify and distribute it without anyone's permission. Again, in exchange for your agreement to the terms of the license.

    --
    Nope, no sig
  11. Software Freedom Conspiracy by wjcofkc · · Score: 4, Insightful

    I've read both arguments, and since I know everyone posting here has also (right?), I won't bother with too much of a critique.

    I have to side with Canonical on this one. Their short and sweet post pretty much puts to bed the legal ramblings of the Software Freedom Conservancy. The SFS article reads like they started out trying to make a point, then has to fallback on an academic lesson on GPL Incompatibility and Combined/Derivative works. I would go so far as to say their verbosity defeats their own argument, while managing to inset the letters "ZFS" wherever they can find room.

    Past that, as someone who uses ZFS on FreeBSD, ZFS is pretty fucking useful. Canonical's legal inclusion of ZFS as self-contained file system module is a big step forward for Linux.

    --
    Brought to you by Carl's Junior.
  12. Re:Software Freedom? by TsuruchiBrian · · Score: 4, Interesting

    It's not like Stallman makes no sense. Imagine 2 societies. Society A in which you are free to enter into any contract want, and society B which is exactly like Society A except that contracts that involve slavery are not legal. Which society has more freedom?

    Society A provides the additional freedom to to sell oneself into slavery, so society A is more free.

    Society B lacks the freedom to to sell oneself into slavery, so society B is more free.

    Which of these statements is true? It's just a pointless semantic debate that depends on your personal definition of a "free society". Is agreeing to use commercial software similar selling yourself into slavery? Not really, but I think it's still an appropriate analogy even if the magnitude of the consequences are not comparable.

  13. Re:Software Freedom? by squiggleslash · · Score: 3, Insightful

    Basically, Richard Stallman's line is that the MIT license restricts your freedom as a software developer and a software user, and the GPL protects it. It's backwards double-think.

    It would be if he'd ever said anything of the sort, which he hasn't. His only objections to licenses like the MIT license is they open the potential for someone to produce a closed fork of your work, he has absolutely no moral objection to it, and the statement he thinks it restricts your freedom is 100% false.

    Is he Stallman, or Strawman? Because half the stuff posted here about what he supposedly believes seems to fit the latter.

    --
    You are not alone. This is not normal. None of this is normal.
  14. Lawyer: Linux is not *quite* GPL by hawk · · Score: 5, Informative

    I am a lawyer, but this is not legal advice. If you want legal advice, pay my retainer.

    There is a *really* big hole in the analysis.

    Linux is *not* quite GPL; it, like many others, is better understood as "quasi-GPL", or QGPL.

    Since pretty much the beginning, the Linux developers approved, condoned, and encouraged binary, non-GPL modules. Standard legal analysis means that this trumps the boilerplate of the license/contract.

    The second serious error is arguing about the FSF position on linking. Under the rules of legal analysis, the author of a document's opinion is weighted at pretty much nothing: the author had his chance, and later comments are irrelevant. That is, there are about 7 billion people whose opinions on interpreting it come first.

    Now whether distributing Linux with that module violates Sun's CDL could be an entirely different issue; I've never looked at it.

    hawk, esq.

  15. Re:Lawyer: Linux is not *quite* GPL by hawk · · Score: 3, Interesting

    It's definitely a mess, but so is just about anything where the GPL has been around.

    As for authority and jurisdiction: the Common Law of England goes back to the twelfth century, and has been passed on to substantially all English speaking countries (I forget the exceptions). The principles of construction predate this country, and are pretty much the same through the english speaking world.

    Frankly, if someone wanted to litigate this, it would be an utter mess. The unwritten changes that *did* become part of the license would be binding upon all later contributions, and attach to them. It is quite possible that different parts have different licenses--and that the whole body of the kernel couldn't be distributed together. *noone* wants to open *that* can of worms . . .(except maybe redmond :)

    hawk

  16. Re:Lawyer: Linux is not *quite* GPL by hawk · · Score: 3, Interesting

    Also, while I'm at it, to the extent that some invited, while others tolerated, aside from introducing different licenses with the problem that that creates, leads to the issue of "estoppel"--a situation in which one cannot assert a position, even if legally entitled to do so, do to his prior actions and/or the reliance of another upon those actions. (and for those who care, estoppel is an equitable principle, not a legal principle, having come from the Chancery Courts of England).

    All in all, anyone who thinks that they would like the results of the litigation is deluding himself . . .

    hawk

  17. Re:Lawyer: Linux is not *quite* GPL by shutdown+-p+now · · Score: 3, Insightful

    "Legal advice" is a formal term, defined by law, and it's actually illegal to offer it if you're not a lawyer in many places. Furthermore, for a lawyer, giving such advice can be constituted as establishing an attorney-client relationship, which results in legal obligations for the lawyer. So, even ignoring the time and effort, it's never free for them. I would assume there is some kind of insurance that exist specifically to indemnify lawyers in cases where they become subject to such obligations; and, naturally, that insurance is not free.

    Software developers, on the other hand, don't establish this kind of relationship with the user merely by virtue of writing software for them. At least, not any more so than anyone else providing any other service does.

    (I am not a lawyer, and this is not legal advice.)

  18. Re:Lawyer: Linux is not *quite* GPL by Tough+Love · · Score: 3, Informative

    You seem to be unaware that in every case where the GPL has been litigated, it has been upheld. You talk about common law, surely you understand how this rich body of legal precedent has buttressed the strength of the GPL. As for estoppel, it's not enough for some of the copyright holders to make a habit of looking the other way. All of them would need to, and that simply hasn't happened.

    --
    When all you have is a hammer, every problem starts to look like a thumb.