Re: GPLv2 compliance for third-party Docker images.

On Sun, 21 Sep 2025 12:09:03 +0900 Charles Plessy wrote:

[...]
> For my understanding, can somebody explain me how third parties building
> and redistributing Docker containers including GPLv2 software comply
> with the license when they do not give a written offer to provide the
> sources for 3 years?
> 
> In my understanding, the GPLv3 solves that problem with its clause 6d,
> which is why I am asking for the GPLv2 only…

Hello Charles!

As far as I can tell, clause 6d of the GPLv3 is a more explicit way to
describe a possibility that was also present in the GPLv2, although
somewhat implicitly.

See the last paragraph of clause 3 of the GPLv2:

[...]
  If distribution of executable or object code is made by offering
  access to copy from a designated place, then offering equivalent
  access to copy the source code from the same place counts as
  distribution of the source code, even though third parties are not
  compelled to copy the source along with the object code.
[...]

and the corresponding GPLv2 [FAQ], which states:

  Can I put the binaries on my Internet server and put the source on a
  different Internet site?

    The GPL says you must offer access to copy the source code “from
    the same place”; that is, next to the binaries. However, if you make
    arrangements with another site to keep the necessary source code
    available, and put a link or cross-reference to the source code
    next to the binaries, we think that qualifies as “from the same
    place”.

    Note, however, that it is not enough to find some site that happens
    to have the appropriate source code today, and tell people to look
    there. Tomorrow that site may have deleted that source code, or
    simply replaced it with a newer version of the same program. Then
    you would no longer be complying with the GPL requirements. To make
    a reasonable effort to comply, you need to make a positive
    arrangement with the other site, and thus ensure that the source
    will be available there for as long as you keep the binaries
    available. 

[FAQ]: <https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.html#SourceAndBinaryOnDifferentSites>


Does this answer your question?


-- 
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEygERR5zS79/7gjklPhwn4R9pv/4FAmjPur4ACgkQPhwn4R9p
v/4Q/Q/+JpP+w9wytlyukNbq1YYxR9XnJiMIx8jjQcAXSzPeZBTHN8pUX72ybxfU
OFj0RSxNl5RWjDnO51i46TGf6agqLyQjZudiMOn5WvxvmIlkHfIn70upxVYcb2jy
U0cyBy7YYlLxsVKnlGtvc7PsW08Pfg2CjfC7FGMFxPsOXkEpDyBtCDw14/JKgJGQ
vTV9bcV036SONPv1g0FCiIWt1R4mfSZPA9+PsjHORBAFVnzzhie6ClundMYvrhZ2
dibCk/r5D32FynncCOZQNaROEWLzKLX5kwngvnnsw6VvUVvrrpZf0CQxLOaSPqtq
5dMDIaT3FWfc1XYEANGztOi0psS1JXlydpfM43INhy0AaYl+kBu8pj6ZRTi9zyku
YpxloB8fUXJgEnnN0jm/mrUk0uC+4ZDmavtpTcDXs9FyjXabbqEAPsgRWJ6GkifU
VlMld7YwUFWwkv9n6ZW1MQ+5ils8uooxIR4f5w8KecewlZTaHez5k/CQTKGrLW2P
+SdNM8gsi7bxHRJAC4MJjmyKD0WlbbzTf1ogV8S1QbfeJnTF/uR3tDAxffgl6euV
BU81SyFGRiso8+BGBIy6l5vv0TGHfE1B9werijdovqRMqJqYTFGv2nmxJn1tAZ/m
7s+yZ2wG5mIgo/9Boukj3AID1PXQ0AoFqKaJIj4Q3TL1SmrVehU=
=tW4v
-----END PGP SIGNATURE-----