Hi Folks! I've been involved with the Apache NiFi (incubating) community and they recently noticed[1] that y'all have nightly builds set up on the Docker central registry[2]. They've been wanting to do something similar for some time, but thus far have been held back by policy.
Reading through the ASF policy on releases[3], this looks to me like a violation of the policy of only making releases available outside of the development community. 1) The short version of the ASF policy is that a project must not encourage end users to use anything other than releases that have been voted on by a PMC (and for incubating projects the IPMC). 2) The Docker Hub is external to the foundation, generally accessible to those outside of the development community, and expressly geared towards pushing to downstream users. Docker Hub can also be limited to distributing images just within a development team, however you appear to be pointing those outside of the dev@geode list at the image. 3) You have a wiki page that details making use of the image on Docker Hub[4]. That page is a subpage of a wiki section entitled "Develop", so it might be intended for dev@geode use, but it is not obvious from the page. Additionally, your public facing twitter account posted a link to said page[5]. 4) You have a public facing blog post that points folks to both the Docker Hub image and a direct download of a nightly build tarball[6]. ---- Please clean all of this up. I can empathize with the desire for a faster feedback cycle with end users. As many at the ASF, I'm a proponent of tight feedback cycles; but the apparent conflict between foundation policy and this kind of publishing means I have to push eager communities (like yourselves and the NiFi community) to constrain themselves to properly PMC blessed releases. As an aside, your main page includes a "Download" link that points people to the source repository and build instructions (rather than keeping that information under something like "contribute" or "get the source" or similar caveats other projects use). That's not against the letter of the ASF policy, since it is not packaged, but it seems against the spirit. [1]: http://s.apache.org/c4z [2]: https://registry.hub.docker.com/u/apachegeode/geode/ [3]: http://www.apache.org/dev/release.html#what [4]: https://cwiki.apache.org/confluence/display/GEODE/How+to+use+Geode+on+Docker [5]: https://twitter.com/ApacheGeode/status/612049863971180544 [6]: https://blogs.apache.org/geode/entry/welcome -- Sean
