Open AccessDistribution of Dockerfiles: Who is responsible for FOSS Licence Compliance?
Author(s) -
Till Jaeger
Publication year - 2021
Publication title -
the journal of open law, technology and society/the journal of open law, technology and society (print)
Language(s) - English
Resource type - Journals
eISSN - 2666-8106
pISSN - 2666-8092
DOI - 10.5033/jolts.v12i1.147
Subject(s) - license , software deployment , container (type theory) , software , distribution (mathematics) , compliance (psychology) , computer security , computer science , mit license , meaning (existential) , interpretation (philosophy) , automation , point (geometry) , software engineering , world wide web , law , law and economics , engineering , political science , sociology , operating system , mathematics , mechanical engineering , programming language , psychology , mathematical analysis , social psychology , geometry , psychotherapist
The deployment of Docker is becoming increasingly popular as container technology allows for a unified software distribution that is largely independent of the target system. This raises new questions of FOSS license compliance. The reason is that in addition to the complete software distribution as a “Docker image”, so-called Dockerfiles can be used, which - similar to a script - contain a kind of construction manual for the software which may include downloads from third party repositories. Such form of decentralized distribution raises the question of responsibility for compliance with the license conditions. This article sheds light on the concept of “distribution” under European copyright law as a starting point for the interpretation of free licenses. In the course of the study, it is shown that physical distribution and distribution in the meaning of copyright law do not always have to be congruent. This article was created in collaboration with and funded by the Open Source Automation Development Lab (OSADL) eG (www.osadl.org).