[MacPorts] #68116: openjdk11-temurin: fetch failure

[MacPorts]

#68116: openjdk11-temurin: fetch failure
--------------------------------+----------------------
  Reporter:  ryandesign         |      Owner:  breun
      Type:  defect             |     Status:  assigned
  Priority:  Normal             |  Milestone:
 Component:  ports              |    Version:  2.8.1
Resolution:                     |   Keywords:  lion
      Port:  openjdk11-temurin  |
--------------------------------+----------------------

Comment (by breun):

 > `NoMirror` prevents us from mirroring the distfile. It does not prevent
 us from distributing archives; if you want to prevent that too, you would
 need to add `Restrictive`.

 As far as I know MacPorts doesn't distribute anything for
 `openjdk11-temurin` at this time. `NoMirror` seems to imply that it's not
 distributable. Do you see any tarballs on MacPorts infra for this port
 somewhere?

 > I have no information about whether redistribution of this software is
 allowed but I would assume that it is because according to the other item
 on the license line, it is released under the GPL version 2.

 The `LICENSE`, `ASSEMBLY_EXCEPTION` and `ADDITIONAL_LICENSE_INFO` files in
 the tarball mention the "GPL 2 with classpath exception". I am not a
 lawyer, but this seems to mean that products that incorporate this source
 code don't need to be covered by the GPL. So maybe the `license` line in
 the `Portfile` shouldn't say `GPL-2`, because "GPL-2 with classpath
 exception" is almost, but not exactly GPL-2? Maybe it's fine to
 redistribute Eclipse Temurin binary tarballs, but I don't know. I'd have
 to ask the Eclipse Temurin project (and other distributions that I
 maintain OpenJDK-based ports for).

 > In fact, since we distribute the archives, we are probably obligated by
 the GPL to also distribute the source by mirroring the distfiles.

 The distfile in this case is a pre-built binary, and the
 `openjdk11-temurin` port currently fetches the tarball directly from the
 Eclipse Temurin GitHub. As far as I know MacPorts currently doesn't
 distribute anything for `openjdk11-temurin`, except a `Portfile` which
 tells MacPorts what to fetch and how to install it. It doesn't use or
 compile any source code.

 The Eclipse Temurin project does provide OpenJDK source code tarballs for
 their binary tarballs (e.g.
 [https://github.com/adoptium/temurin11-binaries/releases/download/jdk-11.0.20.1%2B1
 /OpenJDK11U-jdk-sources_11.0.20.1_1.tar.gz this] for the current version),
 but I believe the binary result can only be called an Eclipse Temurin
 build if the OpenJDK source code is built by the
 [https://github.com/adoptium/temurin-build temurin-build] scripts on the
 Adoptium CI infrastructure.

 To avoid getting this stuff wrong, I decided to avoid redistributing
 anything via MacPorts infrastructure and letting MacPorts fetch the
 tarballs directly from the upstream download location.

-- 
Ticket URL: <https://trac.macports.org/ticket/68116#comment:5>
MacPorts <https://www.macports.org/>
Ports system for macOS