On Sun, 21 Sep 2025 12:09:03 +0900 Charles Plessy wrote: [...] > For my understanding, can somebody explain me how third parties building > and redistributing Docker containers including GPLv2 software comply > with the license when they do not give a written offer to provide the > sources for 3 years? > > In my understanding, the GPLv3 solves that problem with its clause 6d, > which is why I am asking for the GPLv2 only…
Hello Charles!
As far as I can tell, clause 6d of the GPLv3 is a more explicit way to
describe a possibility that was also present in the GPLv2, although
somewhat implicitly.
See the last paragraph of clause 3 of the GPLv2:
[...]
If distribution of executable or object code is made by offering
access to copy from a designated place, then offering equivalent
access to copy the source code from the same place counts as
distribution of the source code, even though third parties are not
compelled to copy the source along with the object code.
[...]
and the corresponding GPLv2 [FAQ], which states:
Can I put the binaries on my Internet server and put the source on a
different Internet site?
The GPL says you must offer access to copy the source code “from
the same place”; that is, next to the binaries. However, if you make
arrangements with another site to keep the necessary source code
available, and put a link or cross-reference to the source code
next to the binaries, we think that qualifies as “from the same
place”.
Note, however, that it is not enough to find some site that happens
to have the appropriate source code today, and tell people to look
there. Tomorrow that site may have deleted that source code, or
simply replaced it with a newer version of the same program. Then
you would no longer be complying with the GPL requirements. To make
a reasonable effort to comply, you need to make a positive
arrangement with the other site, and thus ensure that the source
will be available there for as long as you keep the binaries
available.
[FAQ]:
<https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.html#SourceAndBinaryOnDifferentSites>
Does this answer your question?
--
http://www.inventati.org/frx/
There's not a second to spare! To the laboratory!
..................................................... Francesco Poli .
GnuPG key fpr == CA01 1147 9CD2 EFDF FB82 3925 3E1C 27E1 1F69 BFFE
pgp_fIB3HxSKv.pgp
Description: PGP signature
