From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 4356A138330 for ; Wed, 30 May 2018 17:42:47 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B9407E0920; Wed, 30 May 2018 17:42:44 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id C9943E092A; Wed, 30 May 2018 14:36:17 +0000 (UTC) Received: from a1i15.kph.uni-mainz.de (host2092.kph.uni-mainz.de [134.93.134.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: ulm) by smtp.gentoo.org (Postfix) with ESMTPSA id 159EC335CA2; Wed, 30 May 2018 14:36:15 +0000 (UTC) Message-ID: <23310.46809.293787.611345@a1i15.kph.uni-mainz.de> Date: Wed, 30 May 2018 16:36:09 +0200 To: gentoo-dev-announce@lists.gentoo.org Cc: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org Subject: [gentoo-dev-announce] Poll: Would you sign a Contributer License Agreement? From: Ulrich Mueller Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo development announcement list X-BeenThere: gentoo-dev-announce@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="pgp+signed+r85KwLAijOFI5d8"; micalg=pgp-sha256; protocol="application/pgp-signature" X-Archives-Salt: 88c12409-8bd8-44b7-9e99-2bbab6418f8e X-Archives-Hash: f6d4361ac27beee2e3a499fa5692c481 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --pgp+signed+r85KwLAijOFI5d8 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit A while back I requested information on past copyright assignments [1]. Since then, we have located some 30 of the assignment forms, signed by developers (most of them retired by now) in 2004. Here is the second part of the exercise. The current draft of the new Gentoo copyright policy [2] arranges for two procedures: 1. Certifying agreement to a "Gentoo Developer's Certificate of Origin" by including a "Signed-off-by" line with every commit. This would be virtually identical to the procedure used for the Linux kernel, and would be mandatory. A draft of the Gentoo DCO can be seen at [3]. 2. In addition, according to the current policy draft, developers would be encouraged to sign a "Gentoo Contributor License Agreement (CLA)". Its current draft version is at [4]. However, this would be completely voluntary and *not* be required. The exact workflow hasn't been drafted yet, but PGP signing of the form would be one possibility. (Also note that the form includes fields for real name and postal address.) The goals of the second item is to "make compliance with this policy easier (fewer copyright holders to list), and allow the Foundation to enforce copyrights and re-license content if appropriate" [2]. Apparently, we will only be able to achieve these goals if a significant fraction of contributors will sign the CLA. So, before I pursue more work on the CLA I would like to ask all developers and contributors: - Would you sign a "Gentoo Contributor License Agreement", similar to the current draft in [4]? Please reply to me personally; I shall post a summary to the gentoo-project mailing list in one week from now. Thank you in advance, Ulrich [1] https://archives.gentoo.org/gentoo-project/message/4958621b17b00eac7aaca1c8737b8b57 [2] https://dev.gentoo.org/~ulm/glep-copyrightpolicy.html [3] https://dev.gentoo.org/~ulm/glep-copyrightpolicy.html#certificate-of-origin [4] https://dev.gentoo.org/~ulm/cla/cla.pdf --pgp+signed+r85KwLAijOFI5d8 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJbDra3AAoJEMMJBoUcYcJzTdAH/1zjUbHcVnIwpaWixogH9l/0 do+UV8BGe8HAXN/EFvYiyh9epleC30o58JxG/2jY60wO1pavZmbIZdGIovLUxAhf hFhhikrf4QmGmdfuXcVXvSa4Sr1sEoPk+7eQIykmZWULFQ/CE23XBBKP8A8JSXH/ 4jRC+WRH2ZTexLgKQEuiWa3h2Fa7/zdz5SUpMQscqCmwx+hMufiyi8CDaDnwo40R BBI+S0yq6tnMdbVlFqLDr6YoUVAJ5E9IKgHoxacZXVA5r3rk2sj26yQIv0T4bxPF tcPHpP2GZRV9Y3bX3ydpqMU/nYppkkJNjK+gdfE54yUTykwnoRsb4r3vQFlsRys= =M+9R -----END PGP SIGNATURE----- --pgp+signed+r85KwLAijOFI5d8--