Hi Sebb, The third party libraries we included were actually all source code, just compressed in tar.gz files to save space. There were no JARs or binaries. Is distributing their source code okay, or is it still better to get people to download them elsewhere?
Matei On Apr 10, 2012, at 6:03 AM, sebb wrote: > On 8 April 2012 23:48, Benjamin Hindman <b...@berkeley.edu> wrote: >> Hi Sebb, >> >> Thanks so much for taking a look! Responses inline. >> >> On Sun, Apr 8, 2012 at 2:22 PM, sebb <seb...@gmail.com> wrote: >> >>> On 7 April 2012 02:59, Benjamin Hindman <b...@berkeley.edu> wrote: >>>> Please vote on releasing the following candidate as Apache Mesos >>>> (incubating) version 0.9.0. This will be the first incubator release for >>>> Mesos in Apache, but the fifth release candidate. >>>> >>>> Vote thread on mesos-...@incubator.apache.org: >>>> >>>> >>> http://mail-archives.apache.org/mod_mbox/incubator-mesos-dev/201203.mbox/%3CCAFeOQnW7jk-VcTFpUP-_VonL99JCnggKeNPW%2BGx-Ozdy1U8sjg%40mail.gmail.com%3E >>>> >>>> The candidate for Mesos 0.9.0-incubating release is available at: >>>> >>>> >>> http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz >>>> >>>> The tag to be voted on: >>>> >>>> >>> https://svn.apache.org/repos/asf/incubator/mesos/tags/release-0.9.0-incubating-RC4 >>> >>> The NOTICE file is incomplete; the product name and copyright year(s) >>> are missing. >>> >> >> Thanks, I'll add that. >> >> >>> The LICENSE file includes references to several 3rd party items. >>> It looks like glog and utilities.cc and others may require mention in >>> NOTICE. >>> >> >> Is there a document somewhere which describes when something needs to go >> into NOTICE in addition to LICENSE? I had read previously read the section >> titled "What Are Required Third-Party Notices?" from >> http://apache.org/legal/resolved.html#required-third-party-notices but I >> still was unclear whether or not anything needed to be done. > > AFAIK, it depends on what the license says. > >> >>> There's no DISCLAIMER file in SVN root. >>> >> >> Right, I'll add that. >> >> >>> There are several 3rd party libraries in SVN under >>> >>> >>> https://svn.apache.org/repos/asf/incubator/mesos/tags/release-0.9.0-incubating-RC4/third_party/ >> >> >> This was deliberate, so as to make it easier to use for both developers >> (who check out the repository) and users (who download a distribution). Is >> there a policy against this? I saw this as analogous to distributing JARs. >> > > AIUI, there must be a source-only release. > This should have N&L files that relate to the source only. > > A binary release may also be provided, in which case its N&L files > need to correspond with what is in the binary release. > > For building from source, the dependencies need to be provided somehow. > Various options are possible: > - written instructions how to get the dependencies and where to put them > - separate script to download the dependencies > - build process automatically downloads the dependencies. > > Depending on the licenses of 3rd party jars you may need to provide a > combination of methods. > There are some types of dependencies that can only be included if the > user makes a deliberate choice of downloading them, see the cited doc. > > If all the dependencies are binary-distributable, it's probably also > OK to provide an archive containing just the dependencies. > This must have the relevant N&L files. > >> >> Is the correct next step to cancel this vote, > > IMO, yes. > >> create a RC5, and start a new vote thread for that? > > Once the issues have been resolved, yes. > >> Or modify RC4? > > No, RCs should be immutable. Otherwise how can one tell what one is voting on? > >> Thank you very much! >> >> Ben. >> >> >> >>>> The MD5 checksum of the tarball can be found at: >>>> >>>> >>> http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz.md5 >>>> >>>> The signature of the tarball can be found at: >>>> >>>> >>> http://people.apache.org/~benh/mesos-0.9.0-incubating-RC4/mesos-0.9.0-incubating.tar.gz.asc >>>> >>>> Mesos' KEYS file, containing the PGP keys used to sign the release: >>>> http://svn.apache.org/repos/asf/incubator/mesos/dist/KEYS >>>> >>>> Please vote on releasing this package as Apache Mesos 0.9.0-incubating! >>>> >>>> The vote is open until Tuesday, April 10th at 8 pm (a bit more than 72 >>>> hours since it's over the weekend) and passes if a majority of at least 3 >>>> +1 IPMC votes are cast. >>>> >>>> [ ] +1 Release this package as Apache Mesos 0.9.0-incubating >>>> [ ] -1 Do not release this package because ... >>>> >>>> To learn more about Apache Mesos, please see >>>> http://incubator.apache.org/mesos. >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >>> For additional commands, e-mail: general-h...@incubator.apache.org >>> >>> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
