Bug 2184184

Summary:	SPDX License Phase 2
Product:	[Fedora] Fedora	Reporter:	Ben Cotton <bcotton>
Component:	Changes Tracking	Assignee:	Miroslav Suchý <msuchy>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	39	CC:	amoloney, awilliam, dcantrell, msuchy, ngompa13, rfontana, thrcka
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-11-14 18:57:27 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2158243

Description Ben Cotton 2023-04-03 20:29:48 UTC

This is a tracking bug for Change: SPDX License Phase 2
For more details, see: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2

Second phase of transition from using Fedora's short names for licenses to SPDX identifiers in the License: field of Fedora package spec files. This phase addresses how to update the License: field for existing packages, including documenting more specific guidance on how to find licenses in a package.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Adam Williamson 2023-08-22 20:55:23 UTC

Can we get a status update here? This feels like a squishy change so it's a bit hard for me to say oh, it's definitely MODIFIED or oh, it's definitely ON_QA. But then, there's nothing much to worry about so far as 'contingency planning' or anything goes, either.

Comment 2 Miroslav Suchý 2023-08-22 21:20:41 UTC

This is done:

* Hold a hackfest focusing on a limited set of Fedora packages. Feedback from the hackfest can then be used to improve documentation related to updating existing packages.
* Review of licenses for which there seems to be a one-to-one mapping from Fedora legacy abbreviations to SPDX identifiers to ensure reliable mapping. license-fedora2spdx will then be updated to use that curated set of mappings.

Current state: 

43 % packages converted

We found that lots of licenses are not on the SPDX list. We currently have 33 licenses submitted to SPDX.org and we are waiting until they get approved.

https://gitlab.com/fedora/legal/fedora-license-data/-/issues/?sort=created_date&state=opened&label_name%5B%5D=SPDX%3A%3Ablocked&first_page_size=100

And we are adding about 3-4 licenses to fedora-license-data every week.

Not yet done:

Packages using legacy license expressions will be automatically converted if the package maintainer has not already taken care of it. Packages with compound legacy license expressions will only be converted if all included identifiers can map to fedora-license-data. That is, there is no mixing of SPDX and legacy Fedora identifiers. 

So far we identified licenses that are suitable for automatic conversion https://docs.google.com/spreadsheets/d/1thDTCawJTewqMCgC1dDuKu4Hq9DCA57q0VDstFXTHvg/edit?usp=sharing (this link will work for RHatters only, sorry) I will provide update in 3 weeks how we handle this remaining part.

Comment 3 Aoife Moloney 2023-11-14 18:57:27 UTC

F39 was released on November 7th, so I am closing this tracker. If this Change was not completed, please notify me ASAP.