5

Problem description:

I want to distribute a Debian VM with Debian based docker containers, so far I would just extract the entire source code after the VM is configured and provide the source code on a physical medium e.g. USB-Stick.

The problem is that some of my smaller customers don't want to update the VM themselves.

Questions:

If I run a cron job to update the vm from time to time am I correct that I would have to provide the source code of the updated gpl programs as well ?

In case I provide an admin software so that updates can be made easily by my customers, am I correct that in this case his would not count as distribution ?

Since the docker containers are downloaded from my private repository when running an update I would need to provide the source code on my website for each version ?

Are these assumptions correct ?

Improve this question
2
  • The simplest case is to use a normal Linux distribution and let them handle it all for you. I'm not sure how that would interact with Docker.
    – curiousdannii
    Commented Jan 19, 2019 at 4:07
  • @curiousdannii Agreed apparently the best solution is if they handle updates themselves and use a public repository
    – MADforFUNandHappy
    Commented Jan 20, 2019 at 12:18

1 Answer 1

Reset to default
5

You are re-distributing an entire Debian build with your software (licence unspecified) aggregated inside it.

If I run a cron job to update the vm from time to time am I correct that I would have to provide the source code of the updated gpl programs as well ?

You are. We have a question on re-distributing unmodified GPLv2 binaries (they are unmodified in the sense that you're not modifying what Debian puts out, simply passing it along to others) which confirms that you are responsible for source distribution to your end-users. GPLv3 has similar obligations.

In case I provide an admin software so that updates can be made easily by my customers, am I correct that in this case his would not count as distribution ?

It depends where the software is getting the updates from. If it's getting them from a repository under your control, as it seems it is, then that counts as distribution. You're making GPL software available online for others to access, and you therefore have obligations; whether you or someone else provides the tool that allows end-users to access your repository makes no difference to those obligations.

Since the docker containers are downloaded from my private repository when running an update I would need to provide the source code on my website for each version ?

Generally, yes. If any of the software is GPLv3, then for the binary-only software you distribute on USB key you are performing a s6b conveyance, and that requires you to give a written offer of source, valid for at least three years. Gratis network access to the source satisfies this, but you have a prescribed time for which you must continue to offer it, and you must inform USB stick recipients about it in writing.

And, of course, IANAL/IANYL.

Improve this answer
2
  • 1
    @MADforFUNandHappy around these parts questions like this are known as chameleon questions - they keep altering each time they're answered. Your edit changed the question fundamentally, such that it invalidated the one-line summary I give in the very first line of my answer. Your new question is a good one, but it's no longer this question, so I have rolled back the edit. I recommend you accept an answer to this question, then ask a new question, linking to this one, to show what's been said so far.
    – MadHatter ♦
    Commented Jan 20, 2019 at 14:57
  • Okay I understand, I will do that
    – MADforFUNandHappy
    Commented Jan 20, 2019 at 14:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.