Bug 2121198

Summary: Verify SPDX license identifiers
Product: [Fedora] Fedora Reporter: Vít Ondruch <vondruch>
Component: rpmlintAssignee: Tom "spot" Callaway <spotrh>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: dcantrell, j, msuchy, ngompa13, spotrh, tmz, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: rpmlint-2.2.0-7.fc38 rpmlint-2.4.0-2.fc38 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-10-08 01:00:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Vít Ondruch 2022-08-24 19:15:05 UTC
Description of problem:
Fedora moved to SPDX identifiers [1], therefore it would be nice if rpmlint verified them.


Version-Release number of selected component (if applicable):
$ rpm -q rpmlint
rpmlint-2.2.0-6.fc38.noarch



How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:
~~~
$ rpmlint /var/lib/mock/fedora-rawhide-x86_64/result/rubygem-apipie-rails-0.8.1-1.fc38.noarch.rpm 
============================ rpmlint session starts ============================
rpmlint: 2.2.0
configuration:
    /usr/lib/python3.11/site-packages/rpmlint/configdefaults.toml
    /etc/xdg/rpmlint/fedora.toml
    /etc/xdg/rpmlint/licenses.toml
    /etc/xdg/rpmlint/scoring.toml
    /etc/xdg/rpmlint/users-groups.toml
    /etc/xdg/rpmlint/warn-on-functions.toml
checks: 32, packages: 1

rubygem-apipie-rails.noarch: W: no-documentation
rubygem-apipie-rails.noarch: W: invalid-license Apache-2.0
 1 packages and 0 specfiles checked; 0 errors, 2 warnings, 0 badness; has taken 0.1 s 
~~~


Expected results:
Apache-2.0 is not reported as invalid


Additional info:


[1] https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org/thread/6GKXXE7AMBB76IBRMCTU3L57GLCCZL55/

Comment 2 Todd Zullinger 2022-10-08 01:00:52 UTC
This was recently fixed (twice, no less):

2beb193 (update licenses.toml to reflect change in Fedora licensing identifiers, 2022-09-24) - rpmlint-2.2.0-7.fc38
9c506b5 (remove the license list, depend on rpmlint-fedora-license-data instead, 2022-10-05) - rpmlint-2.4.0-2.fc38

Both the old and the new license formats should work now.  Eventually, the legacy identifiers will be phased out and rpmlint will pick up the change via the canonical fedora-license-data source.