Fwd: kiax_0.8.4-3_i386.changes REJECTED
msp at debian.org
Sun Oct 2 22:21:13 UTC 2005
On Sunday 02 October 2005 20:26, George Danchev wrote:
> Sorry for replying to myself, but I would like to get some advices of how
> to proceed from now on. The kiax 0.8.4  issues read:
George. Thanks for your continued work on this. Please keep it up!
> 1) lib/iLBC - lisenced under Global IP Sound iLBC Public License, v2.0 -
> IETF Version which is non-free  - will be tricky, but doable I think.
I think it needs to be removed from any dfsg archive. We are allowed to
remove non-free components from the .orig.tar.gz in order to achieve this.
The iaxclient README seems to have it right. iaxclient can be built and
peforms well with either/ both libspeex and iLBC. iLBC is potentially
non-free, thus iaxclient is only distributed with libspeex. (Note there is a
patch required from the upstream libspeex for iaxclient support)
We can do the same with kiax, only distribute with libspeex. Although ideally
kiax should be setup to just use the shared libraries provided by
> 2) populate debian/copyright with all copyright holders and licenses
> including the Speex Licences. But if we go for educating kiax of using
> system libraries provided by already existing packages then we do not need
> that - that's also kind of tricky part since iaxclient also provides
> libspeex library itself.
Correct. We actually also need to update debian/copyright for iaxclient as
well, as it doesn't detail the copyright for libspeex either and it also
distributes it. I have just filed a severity serious bug report.
I have also filed a bug against iaxclient to remind ourselves to use the
shared libspeex when we can. (Encorporation of iaxclient patch)
> 3) README.Debian - easy.
> Now my question is does something like above will save 1) in a reasonable
> way ? I think that the program will be still useable when built against
> such 'sanitisized' lib. So the kiax's lib/ (as found in dfsg.orig.tar.gz)
> should be sanitisized to the lib/ found in iaxclient-0.0+cvs20050725 source
Yes stripping out the lib/ to only include dfsg and renaming the tarball
to .dfsg is is a perfectly reasonable approach, and would appear to be
> > > Does this affect Asterisk?
Having a look yes it does!
asterisk does distribute codecs/ilbc, but debian/copyright doesn't list the
copyright holder :-(
So at least debian/copyright needs to be updated, but potentially codecs/ilbc
needs to be removed from the asterisk-xxx.dfsg.tar.gz. I have just filed
another severity serious bug against asterisk.
> > Well I think it is DFSG-compliant since at least the tarball name
> > suggests that like dfsg.X.orig.tar.gz, although there should be a note
> > about removed non-free files in copyright file or README.Debian I'm
> > missing here ?
Hmm, the dfsg. name doesn't mean we removed all non-free software, just some
of it. In particular the non-free music-on-hold. Perhaps we need to do an
audit against all the asterisk code base, although upstream are claiming
the .tar is GPL compliant!
> > That is what I think to do for kiax-0.8.4 - to remove the
> > bits not found in iaxclient-0.0+cvs20050725/lib.
Sounds great. Can you work in svn.debian.org now?
> > I'll review the diff soon and to get a clue what will be stripped in fact
> > and produce kiax_0.8.4.dfsg.1.orig.tar.gz.
> > Any objections for doing so ?
> I reviewed the diff the whole iLBC thing should possibly be handle by
> libspeex library.
> I sent two mails to two of the upstream developers explaning the above
> issues in length three days ago, but no feedback yet (they possibly live in
> my home city - shame ;-)
> Comments and alternative approaches greatly appreciated.
I think you have the situation pretty well documented and we just need to take
this approach forward.
More information about the Pkg-voip-maintainers