On Sun, 2019-04-07 at 13:49 -0400, Jimmy Kaplowitz wrote: > Hi, > > Unfortunately I am not able to get a timely reply from SPI's legal > counsel advising us about the AWS and Azure marketplace agreements, > due > to factors outside of SPI's control. (We discussed it in a March > phone > call and I promptly sent over the agreement texts that evening.) But > I > think we should proceed anyway. > > The risks to SPI and Debian of proceeding despite concerns over the > indemification language, nonzero as they are, are comparatively small > in > practice when we consider the realpolitik / public-relations > implications of possible litigation scenarios. > > For those who haven't been following, the TL;DR is that any lawsuits > against Amazon for the Debian images which Debian publishes in the > AWS > Marketplace might give Amazon the contractual right to involve SPI, > including covering their legal fees and any damages owed. Likewise > for > Azure. Small risk in practice for cases which wouldn't appropriately > involve Debian/SPI anyway. > > By contrast, the disruption to Debian's cloud image publication plans > from waiting long enough to resolve these questions would be > definite, > significant, and near-term in light of the imminent release of Debian > 10 > "buster". > > Therefore, given the long delays so far, in my mind the tradeoffs > weigh > in favor of taking a risk and signing the agreements as they are. If > this worries any SPI directors, the DPL, or members of the Debian > cloud > team, please reply to this message sharing those concerns - drop > debian-cloud@lists.debian.org from the recipient list if you do not > want > your concerns to be publicly archived, but please keep > board@spi-inc.org > and preferably leader@debian.org. > > [ cut the rest, while leaving situation and rationale ] I agree with above. I assume that we had similar situation previously (with unofficial accounts or accounts managed by Credativ) so it won't be big change. If this was different, please correct me. Two questions: 1. Will it be possible in the future (after lawyers give feedback) to move to more prefered agreement? 2. What do other distributions (like Ubuntu or Red Had) which provide their own images, do? Did they accept default agreeements or do they have special arrangements? Best regards. -- Tomasz Rybak, Debian Developer <serpent@debian.org> GPG: A565 CE64 F866 A258 4DDC F9C7 ECB7 3E37 E887 AA8C
Attachment:
signature.asc
Description: This is a digitally signed message part