Project

General

Profile

Freedom Issue #3519

[terraform] new license is non-free

kabo - 9 months ago - . Updated 9 months ago.

Status:
fixed
Priority:
bug
Assignee:
% Done:

0%


Description

Terraform has switched to BSL
https://github.com/hashicorp/terraform/blob/main/LICENSE

"You may make production use of the Licensed Work,
provided such use does not include offering the Licensed Work
to third parties on a hosted or embedded basis which is
competitive with HashiCorp's products."

This is incompatible with freedom 0, "The freedom to run the program as you wish, for any purpose"

History

#1

Updated by bill-auger 9 months ago

  • Assignee set to bill-auger
  • Status changed from unconfirmed to in progress

just to note, that license also declares that all releases of the software become MPL-licensed after 4 years - that means version 0.12.7 (August 22, 2019) and earlier versions are acceptable

i will blacklist it now - i dont know how popular this software is; but maybe it could be restored to version 0.12.7 if ppl still want it

#2

Updated by kabo 9 months ago

Sorry, I could probably phrased it clearer. Up to and including v1.5.5 is MPL
https://github.com/hashicorp/terraform/blob/v1.5.5/LICENSE

This only applies to releases after that (v1.6.0 and onwards by the looks of things).

#3

Updated by bill-auger 9 months ago

ok, i did not notice that - the current version in parabola is 1.5.5; so if that version is already MPL, i suppose we could just freeze it

#4

Updated by bill-auger 9 months ago

  • Status changed from in progress to fixed

after looking into this, it would be too much trouble to package - like most golang programs, the build wants to pull in an absurd number of dependencies from the internet (~200 in this case) - in order to package this properly, would require to package all of those dependencies, or at least to audit them and collect them into a libre source-ball

IMHO, this sort of junk should never be allowed to escape the AUR - regardless of the license, we would have wanted to blacklist this anyways, if only for the reasons: "improperly licensed" and "not built from source" - though technically, the recipe may or may not build entirely from source, and all of those dependencies may or may not be libre and compatibly licensed, there is no way to know that without auditing all of the dependencies

require (
    cloud.google.com/go/kms v1.6.0
    cloud.google.com/go/storage v1.28.0
    github.com/Azure/azure-sdk-for-go v59.2.0+incompatible
    github.com/Azure/go-autorest/autorest v0.11.24
    github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2
    github.com/agext/levenshtein v1.2.3
    github.com/aliyun/alibaba-cloud-sdk-go v1.61.1501
    github.com/aliyun/aliyun-oss-go-sdk v0.0.0-20190103054945-8205d1f41e70
    github.com/aliyun/aliyun-tablestore-go-sdk v4.1.2+incompatible
    github.com/apparentlymart/go-cidr v1.1.0
    github.com/apparentlymart/go-dump v0.0.0-20190214190832-042adf3cf4a0
    github.com/apparentlymart/go-shquot v0.0.1
    github.com/apparentlymart/go-userdirs v0.0.0-20200915174352-b0c018a67c13
    github.com/apparentlymart/go-versions v1.0.1
    github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2
    github.com/aws/aws-sdk-go v1.44.122
    github.com/bgentry/speakeasy v0.1.0
    github.com/bmatcuk/doublestar v1.1.5
    github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e
    github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f
    github.com/davecgh/go-spew v1.1.1
    github.com/dylanmei/winrmtest v0.0.0-20210303004826-fbc9ae56efb6
    github.com/go-test/deep v1.0.3
    github.com/golang/mock v1.6.0
    github.com/google/go-cmp v0.5.9
    github.com/google/uuid v1.3.0
    github.com/hashicorp/aws-sdk-go-base v0.7.1
    github.com/hashicorp/consul/api v1.9.1
    github.com/hashicorp/consul/sdk v0.8.0
    github.com/hashicorp/errwrap v1.1.0
    github.com/hashicorp/go-azure-helpers v0.43.0
    github.com/hashicorp/go-checkpoint v0.5.0
    github.com/hashicorp/go-cleanhttp v0.5.2
    github.com/hashicorp/go-getter v1.7.0
    github.com/hashicorp/go-hclog v0.15.0
    github.com/hashicorp/go-multierror v1.1.1
    github.com/hashicorp/go-plugin v1.4.3
    github.com/hashicorp/go-retryablehttp v0.7.2
    github.com/hashicorp/go-tfe v1.26.0
    github.com/hashicorp/go-uuid v1.0.3
    github.com/hashicorp/go-version v1.6.0
    github.com/hashicorp/hcl v0.0.0-20170504190234-a4b07c25de5f
    github.com/hashicorp/hcl/v2 v2.16.2
    github.com/hashicorp/jsonapi v0.0.0-20210826224640-ee7dae0fb22d
    github.com/hashicorp/terraform-registry-address v0.0.0-20220623143253-7d51757b572c
    github.com/hashicorp/terraform-svchost v0.1.0
    github.com/jmespath/go-jmespath v0.4.0
    github.com/kardianos/osext v0.0.0-20190222173326-2bc1f35cddc0
    github.com/lib/pq v1.10.3
    github.com/manicminer/hamilton v0.44.0
    github.com/masterzen/winrm v0.0.0-20200615185753-c42b5136ff88
    github.com/mattn/go-isatty v0.0.16
    github.com/mattn/go-shellwords v1.0.4
    github.com/mitchellh/cli v1.1.5
    github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db
    github.com/mitchellh/copystructure v1.2.0
    github.com/mitchellh/go-homedir v1.1.0
    github.com/mitchellh/go-linereader v0.0.0-20190213213312-1b945b3263eb
    github.com/mitchellh/go-wordwrap v1.0.1
    github.com/mitchellh/gox v1.0.1
    github.com/mitchellh/mapstructure v1.1.2
    github.com/mitchellh/reflectwalk v1.0.2
    github.com/nishanths/exhaustive v0.7.11
    github.com/packer-community/winrmcp v0.0.0-20180921211025-c76d91c1e7db
    github.com/pkg/browser v0.0.0-20201207095918-0426ae3fba23
    github.com/pkg/errors v0.9.1
    github.com/posener/complete v1.2.3
    github.com/spf13/afero v1.2.2
    github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.588
    github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/sts v1.0.588
    github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tag v1.0.233
    github.com/tencentyun/cos-go-sdk-v5 v0.7.29
    github.com/tombuildsstuff/giovanni v0.15.1
    github.com/xanzy/ssh-agent v0.3.1
    github.com/xlab/treeprint v0.0.0-20161029104018-1d6e34225557
    github.com/zclconf/go-cty v1.12.2
    github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b
    github.com/zclconf/go-cty-yaml v1.0.3
    golang.org/x/crypto v0.1.0
    golang.org/x/mod v0.8.0
    golang.org/x/net v0.7.0
    golang.org/x/oauth2 v0.4.0
    golang.org/x/sys v0.5.0
    golang.org/x/term v0.5.0
    golang.org/x/text v0.8.0
    golang.org/x/tools v0.6.0
    golang.org/x/tools/cmd/cover v0.1.0-deprecated
    google.golang.org/api v0.103.0
    google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f
    google.golang.org/grpc v1.53.0
    google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0
    google.golang.org/protobuf v1.28.1
    honnef.co/go/tools v0.4.2
    k8s.io/api v0.23.4
    k8s.io/apimachinery v0.23.4
    k8s.io/client-go v0.23.4
    k8s.io/utils v0.0.0-20211116205334-6203023598ed
)

require (
    cloud.google.com/go v0.107.0 // indirect
    cloud.google.com/go/compute v1.15.1 // indirect
    cloud.google.com/go/compute/metadata v0.2.3 // indirect
    cloud.google.com/go/iam v0.8.0 // indirect
    github.com/Azure/go-autorest v14.2.0+incompatible // indirect
    github.com/Azure/go-autorest/autorest/adal v0.9.18 // indirect
    github.com/Azure/go-autorest/autorest/azure/cli v0.4.4 // indirect
    github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
    github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect
    github.com/Azure/go-autorest/autorest/validation v0.3.1 // indirect
    github.com/Azure/go-autorest/logger v0.2.1 // indirect
    github.com/Azure/go-autorest/tracing v0.6.0 // indirect
    github.com/Azure/go-ntlmssp v0.0.0-20200615164410-66371956d46c // indirect
    github.com/BurntSushi/toml v1.2.1 // indirect
    github.com/ChrisTrenkamp/goxpath v0.0.0-20190607011252-c5096ec8773d // indirect
    github.com/Masterminds/goutils v1.1.1 // indirect
    github.com/Masterminds/semver/v3 v3.1.1 // indirect
    github.com/Masterminds/sprig/v3 v3.2.2 // indirect
    github.com/Microsoft/go-winio v0.5.0 // indirect
    github.com/antchfx/xmlquery v1.3.5 // indirect
    github.com/antchfx/xpath v1.1.10 // indirect
    github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect
    github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da // indirect
    github.com/armon/go-radix v1.0.0 // indirect
    github.com/baiyubin/aliyun-sts-go-sdk v0.0.0-20180326062324-cfa1a18b161f // indirect
    github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
    github.com/coreos/go-systemd v0.0.0-20181012123002-c6f51f82210d // indirect
    github.com/creack/pty v1.1.18 // indirect
    github.com/dimchansky/utfbom v1.1.1 // indirect
    github.com/dylanmei/iso8601 v0.1.0 // indirect
    github.com/fatih/color v1.13.0 // indirect
    github.com/go-logr/logr v1.2.0 // indirect
    github.com/gofrs/uuid v4.0.0+incompatible // indirect
    github.com/gogo/protobuf v1.3.2 // indirect
    github.com/golang-jwt/jwt/v4 v4.2.0 // indirect
    github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
    github.com/golang/protobuf v1.5.2 // indirect
    github.com/google/go-querystring v1.1.0 // indirect
    github.com/google/gofuzz v1.1.0 // indirect
    github.com/googleapis/enterprise-certificate-proxy v0.2.0 // indirect
    github.com/googleapis/gax-go/v2 v2.7.0 // indirect
    github.com/googleapis/gnostic v0.5.5 // indirect
    github.com/hashicorp/go-immutable-radix v1.0.0 // indirect
    github.com/hashicorp/go-msgpack v0.5.4 // indirect
    github.com/hashicorp/go-rootcerts v1.0.2 // indirect
    github.com/hashicorp/go-safetemp v1.0.0 // indirect
    github.com/hashicorp/go-slug v0.11.1 // indirect
    github.com/hashicorp/golang-lru v0.5.1 // indirect
    github.com/hashicorp/serf v0.9.5 // indirect
    github.com/hashicorp/yamux v0.0.0-20181012175058-2f1d1f20f75d // indirect
    github.com/huandu/xstrings v1.3.3 // indirect
    github.com/imdario/mergo v0.3.13 // indirect
    github.com/json-iterator/go v1.1.12 // indirect
    github.com/klauspost/compress v1.15.11 // indirect
    github.com/manicminer/hamilton-autorest v0.2.0 // indirect
    github.com/masterzen/simplexml v0.0.0-20190410153822-31eea3082786 // indirect
    github.com/mattn/go-colorable v0.1.13 // indirect
    github.com/mitchellh/go-testing-interface v1.14.1 // indirect
    github.com/mitchellh/iochan v1.0.0 // indirect
    github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
    github.com/modern-go/reflect2 v1.0.2 // indirect
    github.com/mozillazg/go-httpheader v0.3.0 // indirect
    github.com/nu7hatch/gouuid v0.0.0-20131221200532-179d4d0c4d8d // indirect
    github.com/oklog/run v1.0.0 // indirect
    github.com/satori/go.uuid v1.2.0 // indirect
    github.com/sergi/go-diff v1.2.0 // indirect
    github.com/shopspring/decimal v1.3.1 // indirect
    github.com/spf13/cast v1.5.0 // indirect
    github.com/spf13/pflag v1.0.5 // indirect
    github.com/ulikunitz/xz v0.5.10 // indirect
    github.com/vmihailenco/msgpack/v4 v4.3.12 // indirect
    github.com/vmihailenco/tagparser v0.1.1 // indirect
    go.opencensus.io v0.24.0 // indirect
    golang.org/x/exp/typeparams v0.0.0-20221208152030-732eee02a75a // indirect
    golang.org/x/time v0.3.0 // indirect
    golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
    google.golang.org/appengine v1.6.7 // indirect
    gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
    gopkg.in/inf.v0 v0.9.1 // indirect
    gopkg.in/ini.v1 v1.66.2 // indirect
    gopkg.in/yaml.v2 v2.4.0 // indirect
    gopkg.in/yaml.v3 v3.0.1 // indirect
    k8s.io/klog/v2 v2.30.0 // indirect
    k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65 // indirect
    sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6 // indirect
    sigs.k8s.io/structured-merge-diff/v4 v4.2.1 // indirect
    sigs.k8s.io/yaml v1.2.0 // indirect
)

 |  ==> Starting build()...
 |  go: downloading github.com/apparentlymart/go-userdirs v0.0.0-20200915174352-b0c018a67c13
 |  go: downloading github.com/hashicorp/go-checkpoint v0.5.0
 |  go: downloading github.com/hashicorp/go-plugin v1.4.3
 |  go: downloading github.com/hashicorp/terraform-svchost v0.1.0
 |  go: downloading github.com/mattn/go-shellwords v1.0.4
 |  go: downloading github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db
 |  go: downloading github.com/mitchellh/cli v1.1.5
 |  go: downloading github.com/hashicorp/hcl/v2 v2.16.2
 |  go: downloading github.com/hashicorp/terraform-registry-address v0.0.0-20220623143253-7d51757b572c
 |  go: downloading github.com/zclconf/go-cty v1.12.2
 |  go: downloading golang.org/x/text v0.8.0
 |  go: downloading github.com/hashicorp/hcl v0.0.0-20170504190234-a4b07c25de5f
 |  go: downloading github.com/mitchellh/go-wordwrap v1.0.1
 |  go: downloading github.com/pkg/browser v0.0.0-20201207095918-0426ae3fba23
 |  go: downloading github.com/agext/levenshtein v1.2.3
 |  go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
 |  go: downloading github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f
 |  go: downloading github.com/hashicorp/go-hclog v0.15.0
 |  go: downloading github.com/apparentlymart/go-versions v1.0.1
 |  go: downloading github.com/hashicorp/go-retryablehttp v0.7.2
 |  go: downloading golang.org/x/crypto v0.1.0
 |  go: downloading golang.org/x/mod v0.8.0
 |  go: downloading golang.org/x/net v0.7.0
 |  go: downloading golang.org/x/term v0.5.0
 |  go: downloading github.com/hashicorp/go-version v1.6.0
 |  go: downloading github.com/hashicorp/errwrap v1.1.0
 |  go: downloading github.com/hashicorp/go-multierror v1.1.1
 |  go: downloading github.com/bgentry/speakeasy v0.1.0
 |  go: downloading github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e
 |  go: downloading github.com/hashicorp/go-getter v1.7.0
 |  go: downloading github.com/hashicorp/go-tfe v1.26.0
 |  go: downloading github.com/hashicorp/go-uuid v1.0.3
 |  go: downloading github.com/kardianos/osext v0.0.0-20190222173326-2bc1f35cddc0
 |  go: downloading github.com/mattn/go-isatty v0.0.16
 |  go: downloading github.com/posener/complete v1.2.3
 |  go: downloading github.com/xlab/treeprint v0.0.0-20161029104018-1d6e34225557
 |  go: downloading golang.org/x/oauth2 v0.4.0
 |  go: downloading github.com/mitchellh/go-homedir v1.1.0
 |  go: downloading github.com/Azure/azure-sdk-for-go v59.2.0+incompatible
 |  go: downloading github.com/Azure/go-autorest/autorest v0.11.24
 |  go: downloading github.com/hashicorp/go-azure-helpers v0.43.0
 |  go: downloading github.com/manicminer/hamilton v0.44.0
 |  go: downloading github.com/tombuildsstuff/giovanni v0.15.1
 |  go: downloading github.com/hashicorp/consul/api v1.9.1
 |  go: downloading github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.588
 |  go: downloading github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/sts v1.0.588
 |  go: downloading github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tag v1.0.233
 |  go: downloading github.com/tencentyun/cos-go-sdk-v5 v0.7.29
 |  go: downloading cloud.google.com/go/storage v1.28.0
 |  go: downloading google.golang.org/api v0.103.0
 |  go: downloading k8s.io/api v0.23.4
 |  go: downloading k8s.io/apimachinery v0.23.4
 |  go: downloading k8s.io/client-go v0.23.4
 |  go: downloading k8s.io/utils v0.0.0-20211116205334-6203023598ed
 |  go: downloading github.com/aliyun/alibaba-cloud-sdk-go v1.61.1501
 |  go: downloading github.com/aliyun/aliyun-oss-go-sdk v0.0.0-20190103054945-8205d1f41e70
 |  go: downloading github.com/aliyun/aliyun-tablestore-go-sdk v4.1.2+incompatible
 |  go: downloading github.com/jmespath/go-jmespath v0.4.0
 |  go: downloading github.com/pkg/errors v0.9.1
 |  go: downloading github.com/lib/pq v1.10.3
 |  go: downloading github.com/aws/aws-sdk-go v1.44.122
 |  go: downloading github.com/hashicorp/aws-sdk-go-base v0.7.1
 |  go: downloading github.com/hashicorp/jsonapi v0.0.0-20210826224640-ee7dae0fb22d
 |  go: downloading github.com/mitchellh/copystructure v1.2.0
 |  go: downloading github.com/spf13/afero v1.2.2
 |  go: downloading github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2
 |  go: downloading github.com/mitchellh/go-linereader v0.0.0-20190213213312-1b945b3263eb
 |  go: downloading github.com/google/go-cmp v0.5.9
 |  go: downloading github.com/zclconf/go-cty-yaml v1.0.3
 |  go: downloading google.golang.org/protobuf v1.28.1
 |  go: downloading google.golang.org/grpc v1.53.0
 |  go: downloading github.com/mitchellh/reflectwalk v1.0.2
 |  go: downloading github.com/davecgh/go-spew v1.1.1
 |  go: downloading github.com/mitchellh/mapstructure v1.1.2
 |  go: downloading github.com/apparentlymart/go-cidr v1.1.0
 |  go: downloading github.com/bmatcuk/doublestar v1.1.5
 |  go: downloading github.com/google/uuid v1.3.0
 |  go: downloading github.com/masterzen/winrm v0.0.0-20200615185753-c42b5136ff88
 |  go: downloading github.com/packer-community/winrmcp v0.0.0-20180921211025-c76d91c1e7db
 |  go: downloading github.com/apparentlymart/go-shquot v0.0.1
 |  go: downloading github.com/xanzy/ssh-agent v0.3.1

Also available in: Atom PDF