Bug 2184184 - SPDX License Phase 2
Summary: SPDX License Phase 2
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: Changes Tracking
Version: 39
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Suchý
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: F39Changes
TreeView+ depends on / blocked
 
Reported: 2023-04-03 20:29 UTC by Ben Cotton
Modified: 2023-11-14 18:57 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2023-11-14 18:57:27 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Ben Cotton 2023-04-03 20:29:48 UTC
This is a tracking bug for Change: SPDX License Phase 2
For more details, see: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2

Second phase of transition from using Fedora's short names for licenses to SPDX identifiers in the License: field of Fedora package spec files. This phase addresses how to update the License: field for existing packages, including documenting more specific guidance on how to find licenses in a package.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Adam Williamson 2023-08-22 20:55:23 UTC
Can we get a status update here? This feels like a squishy change so it's a bit hard for me to say oh, it's definitely MODIFIED or oh, it's definitely ON_QA. But then, there's nothing much to worry about so far as 'contingency planning' or anything goes, either.

Comment 2 Miroslav Suchý 2023-08-22 21:20:41 UTC
This is done:

* Hold a hackfest focusing on a limited set of Fedora packages. Feedback from the hackfest can then be used to improve documentation related to updating existing packages.
* Review of licenses for which there seems to be a one-to-one mapping from Fedora legacy abbreviations to SPDX identifiers to ensure reliable mapping. license-fedora2spdx will then be updated to use that curated set of mappings.

Current state: 

43 % packages converted

We found that lots of licenses are not on the SPDX list. We currently have 33 licenses submitted to SPDX.org and we are waiting until they get approved.

https://gitlab.com/fedora/legal/fedora-license-data/-/issues/?sort=created_date&state=opened&label_name%5B%5D=SPDX%3A%3Ablocked&first_page_size=100

And we are adding about 3-4 licenses to fedora-license-data every week.

Not yet done:

Packages using legacy license expressions will be automatically converted if the package maintainer has not already taken care of it. Packages with compound legacy license expressions will only be converted if all included identifiers can map to fedora-license-data. That is, there is no mixing of SPDX and legacy Fedora identifiers. 

So far we identified licenses that are suitable for automatic conversion https://docs.google.com/spreadsheets/d/1thDTCawJTewqMCgC1dDuKu4Hq9DCA57q0VDstFXTHvg/edit?usp=sharing (this link will work for RHatters only, sorry) I will provide update in 3 weeks how we handle this remaining part.

Comment 3 Aoife Moloney 2023-11-14 18:57:27 UTC
F39 was released on November 7th, so I am closing this tracker. If this Change was not completed, please notify me ASAP.


Note You need to log in before you can comment on or make changes to this bug.