[139862] trunk/base/portmgr/jobs/port_binary_distributable.tcl

[David Evans]

On 8/31/15 2:32 AM, Clemens Lang wrote:
> Hi,
> 
>> But now I get
>>
>> $ port_binary_distributable.tcl -v empathy
>> "empathy" is not distributable because its license "cc-by-sa" conflicts with
>> license "GPL-2+" of dependency "yelp-tools"
>>
>> yelp-tools is a build dependency of empathy.  Shouldn't
>> port_binary_distributable.tcl only look at lib deps not build or
>> run deps when determining binary distributability?
> 
> No. The problem with ignoring build dependencies is that static libraries would
> be listed as build dependencies, but static linking against a library may affect
> the license.
> 
> Of course, most build dependencies don't even provide libraries, so they should
> be excluded from this check. To do that, set "installs_libs no" in the
> yelp-tools Portfile.

Ok, this fixes the yelp-tools problem. Thanks.

> 
> If yelp-tools installs libraries but you manually determined that empathy does
> not link against them, use "license_noconflict yelp-tools" (possibly with set,
> not sure about that atm) in the empathy Portfile.
> 

After fixing the yelp-tools issue I get

$ port_binary_distributable -v empathy
"empathy" is not distributable because its license "cc-by-sa" conflicts with license "GPL-2+" of dependency "dbus-glib"

This is not really correct because the cc-by-sa license only applies to the empathy help documents which don't incorpate
anything from dbus-glib.  All the rest is licensed as GPL-2+ with the exception of code included from
telepathy-account-widgets which is licensed LGPL-2.1+.  Would have helped if they used this as an external library
rather than just including the source (by reference in git).

I can suppress this by using license_noconflict (set not required in 2.3.3). Same for gnutls.

Then I'm left with

"empathy" is not distributable because its license "gpl" conflicts with license "OpenSSL" of dependency "openssl"

which is brought in by the build dependency on python27 and many other rdeps although I can verify manually that
nothing in empathy links with libopenssl.

And so on.  It's a wonder any binaries actually get archived.