It seems I need to spend a bit more time with Ranger artifact -- let me tinker some more and I'll let you guys know.
In the meantime, I propose we go ahead with declaring C/C++ binary dependencies in our LICENSE/NOTICE. Thanks, Roman. On Fri, May 26, 2017 at 10:06 PM, Ruilong Huo <[email protected]> wrote: > Hi Roman, > > The stax-api and jabx-impl are bundled in Ranger, NOT PXF. To be specific, > they are in hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm which is in > apache-hawq-rpm-2.2.0.0-incubating.tar.gz > <https://dist.apache.org/repos/dist/dev/incubator/hawq/2.2.0.0-incubating.RC2/apache-hawq-rpm-2.2.0.0-incubating.tar.gz> > . > You can get them with "rpm2cpio > hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm | cpio -div". > > The details of the dependency shows that: stax-api and jabx-impl is > dependency of hadoop-common, while hadoop-common is dependency ranger > plugin in hawq. > > *$ mvn project-info-reports:dependencies* > *[INFO] Scanning for projects...* > *[INFO] > ------------------------------------------------------------------------* > *[INFO] Reactor Build Order:* > *[INFO]* > *[INFO] HAWQ Ranger Plugin* > *[INFO] HAWQ Ranger Admin Plugin* > *[INFO] HAWQ Ranger Service* > *[INFO]* > *[INFO] > ------------------------------------------------------------------------* > *[INFO] Building HAWQ Ranger Admin Plugin 2.2.0.0* > *[INFO] > ------------------------------------------------------------------------* > *[INFO]* > *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ > ranger-plugin-admin ---* > *[INFO] org.apache.hawq:ranger-plugin-admin:jar:2.2.0.0* > *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile* > *[INFO] | +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile* > *[INFO] | | +- com.sun.jersey:jersey-json:jar:1.9:compile* > *[INFO] | | | +- org.codehaus.jettison:jettison:jar:1.1:compile* > *[INFO] | | | +- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile* > *[INFO] | | | | \- javax.xml.bind:jaxb-api:jar:2.2.2:compile* > *[INFO] | | | | +- javax.xml.stream:stax-api:jar:1.0-2:compile* > *[INFO] | | | | \- javax.activation:activation:jar:1.1:compile* > *[INFO] ......* > *[INFO] > ------------------------------------------------------------------------* > *[INFO] Building HAWQ Ranger Service 2.2.0.0* > *[INFO] > ------------------------------------------------------------------------* > *[INFO]* > *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ > ranger-plugin-service ---* > *[INFO] org.apache.hawq:ranger-plugin-service:war:2.2.0.0* > *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile* > *[INFO] | +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile* > *[INFO] | | +- com.sun.jersey:jersey-json:jar:1.9:compile* > *[INFO] | | | +- org.codehaus.jettison:jettison:jar:1.1:compile* > *[INFO] | | | \- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile* > *[INFO] | | | \- javax.xml.bind:jaxb-api:jar:2.2.2:compile* > *[INFO] | | | +- javax.xml.stream:stax-api:jar:1.0-2:compile* > *[INFO] | | | \- javax.activation:activation:jar:1.1:compile* > *[INFO] ......* > *[INFO] > ------------------------------------------------------------------------* > *[INFO] Reactor Summary:* > *[INFO]* > *[INFO] HAWQ Ranger Plugin ................................. SUCCESS [ > 0.425 s]* > *[INFO] HAWQ Ranger Admin Plugin ........................... SUCCESS [ > 0.252 s]* > *[INFO] HAWQ Ranger Service ................................ SUCCESS [ > 0.099 s]* > *[INFO] > ------------------------------------------------------------------------* > *[INFO] BUILD SUCCESS* > *[INFO] > ------------------------------------------------------------------------* > *[INFO] Total time: 0.992 s* > *[INFO] Finished at: 2017-05-22T17:24:15+08:00* > *[INFO] Final Memory: 19M/437M* > *[INFO] > ------------------------------------------------------------------------* > > Best regards, > Ruilong Huo > > On Sat, May 27, 2017 at 7:32 AM, Roman Shaposhnik <[email protected]> > wrote: > >> On Fri, May 26, 2017 at 8:11 AM, Ruilong Huo <[email protected]> wrote: >> > Hi Roman, >> > >> > Thanks for your feedback! >> > >> > We will merge the license information for the C/C++ components and >> prepare >> > LICENSE and NOTICE files accordingly. >> >> Great! Let me know when can I review the actual files. >> >> > As for JSON in PXF which is incompatible with ASL v2, the fix is to >> replace >> > it with some library which is compatible or remove it? >> >> Correct. Here's a list of alternative libraries you should start migrating >> to: >> https://wiki.debian.org/qa.debian.org/jsonevil >> >> There's also http://johnzon.apache.org/ >> >> And finally: >> >> <dependency> >> <groupId>com.tdunning</groupId> >> <artifactId>json</artifactId> >> <version>1.0</version> >> </dependency> >> >> > Furthermore, Hongxu helped to get the license information for Ranger as >> > well and it turns out that there two dependencies with GPL license which >> is >> > also not compatible with ASL v2: >> > >> > 1. stax-api-1.0-2.jar (GPL): StAX is a standard XML processing API that >> > allows you to stream XML data from and to your application. >> > >> > 2. jaxb-impl-2.2.3-1.jar (CDDL 1.1 GPL 2.0): Old JAXB Runtime module. >> > Contains sources required for runtime processing. >> > >> > They are actually directly required by hadoop common and thus is >> indirectly >> > required by HAWQ Ranger. >> >> I still need to double check it -- but I think those just bring in the >> APIs which >> get replaced during the runtime. Will take a deeper look, though. >> >> > They are bundled hawq binary during packaging with >> > maven. >> >> Wait. Where are they bundled? I don't see them as part of PXF? > > > > >> Thanks, >> Roman. >>
