Re: Git branch layout for packages requiring DFSG-cleaning
Soren Stoutner <[email protected]>
| Newsgroups | gmane.linux.debian.devel.general |
|---|---|
| Organization | Debian |
| Message-ID | <[email protected]> |
On Monday, August 24, 2026 8:39:19 AM Mountain Standard Time Russ Allbery wrote: > Otto Kekäläinen <[email protected]> writes: > > Somewhat of a tangent, but I think it is already pretty well established > > that hosting a copy of upstream git on salsa.debian.org is acceptable, > > regardless of what files upstream has in their git HEAD or history. Only > > the stuff we upload to Debian archives is what we consider > > "redistribution". > > I agree that this is what people tend to do, but legally this feels like > utter nonsense, so I'm worried that eventually we will be bitten by that. > I cannot imagine any reasonable legal interpretation of the term under > which Debian making the code available via Git from Salsa does not > constitute redistribution. > > If the problem is only DFSG issues, then the law presumably doesn't care > if we're breaking our own rules. We can just say that the DFSG is ignored > for things hosted on Salsa, I guess, and that stance does have a lot of > practical benefits and probably not a lot of meaningful downsides. > > But if the files really aren't legally redistributable by Debian at all, > or if Salsa violates some terms of the license, making them available on > Salsa is just as much redistribution as mirroring upstream's tarball > distribution point would be. I agree with Russ’s interpretation. -- Soren Stoutner [email protected]
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmqMjqcACgkQwufLJ66w tgMsoA/+ODrtlnEI1WL4XcgRDKkIoFZ7VfAYE4lsbAJyVVmRDdtnEl5xJceasVDO 1I1O31zIC531YxGXskI3Xdz5Ka8+kuGCKqCzpxaWQX3rA5KHw/yXrlH99NUK3buX GjHonDZiDKkKFUNBSWjxsu94ZTot9UNnH0lAv9hHPgkDjcxqvadFCoemvpfvZjro 2bHDv6ybokbaOZqp2N5cOB7WXmDc64e9xwip4gMpYxHALTGDe6d1865/75yeCF9+ 0NwoDTKYOxfnDo1OpSNR8lzWz+D6qONBr35fpe2HAjQQzvtwkogV8/l2ljyoD9tB oom8T9UL6WZbqZ5qvzygAu/Wx9hu/Oneoz5so+I5i/wHiLnCgNIFktzgelAm79nr qy51Nx/2mZm42xCMGgUQAcAVXwKjwLg3G0O9zyTXdvnDDUE3mivVS+AhFuFiB+cO HZFi4d3vAf7uRgfe5pDP5oNGgZcGw6ZWO5Y1lur4VdwW1YNTlgiEmO8dGQVgahTf 4Aa5MftZCI+tQZA11yRAC0leclh562i8PhFl1XXRlItsAh0uQ82cs2x8D1OticND dL6ocneAHKK6/UdauengbwO3SQ0FJLYX5RMmklvzzgalN7SScrciUVI3ten39K3r KEm3f8TrV7OhpSdq3fIZSyeFjy6A7g05RH/QSpkOdaIKjNmu3aA= =sQLa -----END PGP SIGNATURE-----