On Sun, 21 Sep 2025 12:09:03 +0900 Charles Plessy wrote: [...] > For my understanding, can somebody explain me how third parties building > and redistributing Docker containers including GPLv2 software comply > with the license when they do not give a written offer to provide the > sources for 3 years? > > In my understanding, the GPLv3 solves that problem with its clause 6d, > which is why I am asking for the GPLv2 only… Hello Charles! As far as I can tell, clause 6d of the GPLv3 is a more explicit way to describe a possibility that was also present in the GPLv2, although somewhat implicitly. See the last paragraph of clause 3 of the GPLv2: [...] If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. [...] and the corresponding GPLv2 [FAQ], which states: Can I put the binaries on my Internet server and put the source on a different Internet site? The GPL says you must offer access to copy the source code “from the same place”; that is, next to the binaries. However, if you make arrangements with another site to keep the necessary source code available, and put a link or cross-reference to the source code next to the binaries, we think that qualifies as “from the same place”. Note, however, that it is not enough to find some site that happens to have the appropriate source code today, and tell people to look there. Tomorrow that site may have deleted that source code, or simply replaced it with a newer version of the same program. Then you would no longer be complying with the GPL requirements. To make a reasonable effort to comply, you need to make a positive arrangement with the other site, and thus ensure that the source will be available there for as long as you keep the binaries available. [FAQ]: <https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.html#SourceAndBinaryOnDifferentSites> Does this answer your question? -- http://www.inventati.org/frx/ There's not a second to spare! To the laboratory! ..................................................... Francesco Poli . GnuPG key fpr == CA01 1147 9CD2 EFDF FB82 3925 3E1C 27E1 1F69 BFFE
Attachment:
pgp77buJVBgHn.pgp
Description: PGP signature