Corresponding sources for GStreamer SDK?

[Sebastian Dröge]

On Fr, 2015-01-09 at 00:11 -0500, Benjamin Gilbert wrote:
> On 01/08/2015 03:27 AM, Sebastian Dröge wrote:
> > On Mi, 2015-01-07 at 21:47 -0500, Benjamin Gilbert wrote:
> >> Is the complete corresponding source code for the GStreamer SDK packaged
> >> for download somewhere?  <http://gstreamer.freedesktop.org/data/pkg/>
> >> only seems to contain binaries, and I can't seem to find any reference
> >> to the corresponding sources.
> >
> > See here: http://gstreamer.freedesktop.org/modules/
> > e.g. http://cgit.freedesktop.org/gstreamer/gstreamer/
> >
> > The binaries are built with the cerbero build system, which is available
> > from here: http://cgit.freedesktop.org/gstreamer/cerbero/
> 
> Thanks for your response, but what I'm looking for is the exact source 
> code used to build the SDK binaries.  In addition to GStreamer itself, 
> the SDK includes LGPL code from various other projects, including glib, 
> pango, and libgcrypt.  Section 4 of the LGPLv2.1 says:
> 
> > You may copy and distribute the Library (or a portion or derivative
> > of  it, under Section 2) in object code or executable form under the terms
> > of Sections 1 and 2 above provided that you accompany it with the
> > complete corresponding machine-readable source code, which must be
> > distributed under the terms of Sections 1 and 2 above on a medium
> > customarily used for software interchange.
> >
> > If distribution of object code is made by offering access to copy
> > from a designated place, then offering equivalent access to copy the
> > source code from the same place satisfies the requirement to
> > distribute the source code [...]
> 
> I was therefore expecting to find source tarballs for those libraries 
> somewhere on g.fd.o.  Absent those, I can't see how the official SDK 
> releases are complying with the LGPL.

You can find the exact download location of the source tarballs or GIT
repositories used inside cerbero. See cerbero/recipes/*.recipe

That's what is used during the build to get the exact sources used for
the binaries.

> My own goal is to comply with my license obligations for an Android app 
> I'm developing using the GStreamer SDK.  My app is GPLv2, so I'm 
> required to distribute sources for every library I ship, even the 
> permissively-licensed ones.  I can probably get the sources and patches 
> from Cerbero if I can identify the Cerbero commit corresponding to an 
> SDK release (non-trivial, since some releases were not tagged).

Please let me know if I forgot to tag any releases and I'll try to fix
that. For all the last releases there should be a tag.

> However, 
> that seems overly indirect, and surely every SDK user isn't going to 
> that much trouble.  How are other SDK users ensuring they fulfill their 
> license obligations?

You have to provide the sources on demand of your users, and IMHO
pointing them to the download locations as above is enough from our
side. If people can download the GStreamer binaries, then they can also
download the sources from the other places.

For your own application, if users are downloading your software I would
go with the same line of thought. If they get the software via some
physical medium, you will probably have to provide them the sources on
demand via that medium too.

> Could Cerbero be modified to produce a giant tarball of all the upstream 
> sources used in the build (and the build scripts, i.e. Cerbero itself), 
> which could then be uploaded alongside the binaries?

Yes, but we don't have infinite storage space available and the binaries
are already super huge. I don't think any of the licenses require that
you must be able to download the sources from exactly the same place, so
having them available to download from elsewhere should be enough.

-- 
Sebastian Dröge, Centricular Ltd · http://www.centricular.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: This is a digitally signed message part
URL: <http://lists.freedesktop.org/archives/gstreamer-devel/attachments/20150109/9194a9aa/attachment.sig>