Re: GPLv2 compliance for third-party Docker images.
Le Sun, Sep 21, 2025 at 10:43:42AM +0200, Francesco Poli a écrit :
Note, however, that it is not enough to find some site that happens
to have the appropriate source code today, and tell people to look
there. Tomorrow that site may have deleted that source code, or
simply replaced it with a newer version of the same program. Then
you would no longer be complying with the GPL requirements. To make
a reasonable effort to comply, you need to make a positive
arrangement with the other site, and thus ensure that the source
will be available there for as long as you keep the binaries
available.
[FAQ]: <https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.html#SourceAndBinaryOnDifferentSites>
Does this answer your question?
Thanks Francesco for your answer,
this leads me to another question: does we have at least a statement
that can be recognised as a "positive arrangement" with third parties
distributing Debian-based containers, or why is it not necessary?
Have a nice day,
Charles
Reply to: