Comments (7)
Perhaps we can have an extras
repository for things like Mongo where we explicitly don't provide indemnification.
My main concern with carrying SSPL software in Wolfi is that some startup (like, say, ours) comes to depend on it, and then MongoDB (the company) tries to shake them down and we get blamed for it.
At least in Alpine the license review community concluded that Alpine should not carry SSPL software because of this potential. Pretty much every lawyer I've ever talked to about SSPL has said it is basically cancer and should be left alone.
from os.
Should we package this? MongoDB is under SSPL license which is not an OSI-approved/FSF-approved license, and carries very high risk for our users.
from os.
If the licensing will cause an issue we can definitely reconsider. It's available on DockerHub as both a library image and one maintained by upstream mongo:
from os.
I think separate repos probably makes sense. I'd like to understand exactly what would go in that repo and what the difference in support is though.
from os.
@amouat any thoughts on whether we target this for this quarter or the next? I'll file an issue for tracking an 'extras' repo.
from os.
Let me open an internal issue for tracking a MongoDB image.
Agree on putting this in an "extras" repo.
from os.
In the meantime, for anyone coming across this issue, my suggestion is to look into creating your own melange build for MongoDB that can be used locally.
from os.
Related Issues (20)
- wolfi-bot/runit
- wolfi-bot/openldap
- wolfi-bot/perl-namespace-autoclean
- wolfi-bot/perl-extutils-installpaths
- wolfi-bot/perl-encode-locale
- wolfi-bot/nss
- wolfi-bot/libpfm
- wolfi-bot/perl-sub-info
- wolfi-bot/openssh
- wolfi-bot/flex
- wolfi-bot/libcap
- wolfi-bot/perl-yapp
- wolfi-bot/py3-certipy
- wolfi-bot/perl-time-hires
- wolfi-bot/freetype
- wolfi-bot/mozjs91
- [Wolfi Package Request]: scudo-malloc
- libmilter/8.18.1 new package update
- wolfi-bot/nano
- wolfi-bot/py3-jinja2 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from os.