[gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

[gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

[Michał Górny]

[-- Attachment #1: Type: text/plain, Size: 639 bytes --]

Hi, everyone.

Just FYI: the Trustees have approved GLEP 76 aka our new copyright
policy [1].  While the exact implementation details are to be determined
yet, please note that *Signed-off-by* line will mean you are certifying
our GCO [2].

Since some developers were giving the sign-off 'in blanco' so far,
I would like to emphasize that now it will actually mean agreeing to
the document.  Unless you have read the new policy and agreed with it,
please don't do that.

[1]:https://www.gentoo.org/glep/glep-0076.html
[2]:https://www.gentoo.org/glep/glep-0076.html#certificate-of-origin

-- 
Best regards,
Michał Górny

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 963 bytes --]

Re: [gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

[Ulrich Mueller]

[-- Attachment #1: Type: text/plain, Size: 1271 bytes --]

>>>>> On Sun, 16 Sep 2018, Michał Górny wrote:

> Just FYI: the Trustees have approved GLEP 76 aka our new copyright
> policy [1].  While the exact implementation details are to be determined
> yet, please note that *Signed-off-by* line will mean you are certifying
> our GCO [2].

> Since some developers were giving the sign-off 'in blanco' so far,
> I would like to emphasize that now it will actually mean agreeing to
> the document.  Unless you have read the new policy and agreed with it,
> please don't do that.

I wonder how we should treat those existing Signed-off-by lines in the
tree.

We could either say that we ignore any such lines on commits before
2018-09-16 00:00:00 UTC, because there was no policy in place.

Or we could say that they certify the commit under the Linux DCO 1.1
(https://developercertificate.org/), because in absence of an explicit
policy that's the only meaningful interpretation of a Signed-off-by
line.

Presumably, the first alternative is cleaner. Especially, since there
are commits with a Signed-off-by line that don't comply with the
conditions of the Linux DCO.

Ulrich

> [1]:https://www.gentoo.org/glep/glep-0076.html
> [2]:https://www.gentoo.org/glep/glep-0076.html#certificate-of-origin

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

Re: [gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

[Thomas Deutschmann]

[-- Attachment #1.1: Type: text/plain, Size: 1156 bytes --]

On 2018-09-16 10:59, Ulrich Mueller wrote:
>>> On Sun, 16 Sep 2018, Michał Górny wrote:
>> Since some developers were giving the sign-off 'in blanco' so far,
>> I would like to emphasize that now it will actually mean agreeing to
>> the document.  Unless you have read the new policy and agreed with it,
>> please don't do that.
> 
> I wonder how we should treat those existing Signed-off-by lines in the
> tree.
> 
> We could either say that we ignore any such lines on commits before
> 2018-09-16 00:00:00 UTC, because there was no policy in place.
> 
> Or we could say that they certify the commit under the Linux DCO 1.1
> (https://developercertificate.org/), because in absence of an explicit
> policy that's the only meaningful interpretation of a Signed-off-by
> line.
> 
> Presumably, the first alternative is cleaner. Especially, since there
> are commits with a Signed-off-by line that don't comply with the
> conditions of the Linux DCO.

+1 for ignoring "Signed-Off-By" line until 2018-09-16 00:00:00.


-- 
Regards,
Thomas Deutschmann / Gentoo Linux Developer
C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 636 bytes --]

Re: [gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

[Michał Górny]

Dnia September 16, 2018 8:59:50 AM UTC, Ulrich Mueller <ulm@gentoo.org> napisał(a):
>>>>>> On Sun, 16 Sep 2018, Michał Górny wrote:
>
>> Just FYI: the Trustees have approved GLEP 76 aka our new copyright
>> policy [1].  While the exact implementation details are to be
>determined
>> yet, please note that *Signed-off-by* line will mean you are
>certifying
>> our GCO [2].
>
>> Since some developers were giving the sign-off 'in blanco' so far,
>> I would like to emphasize that now it will actually mean agreeing to
>> the document.  Unless you have read the new policy and agreed with
>it,
>> please don't do that.
>
>I wonder how we should treat those existing Signed-off-by lines in the
>tree.
>
>We could either say that we ignore any such lines on commits before
>2018-09-16 00:00:00 UTC, because there was no policy in place.
>
>Or we could say that they certify the commit under the Linux DCO 1.1
>(https://developercertificate.org/), because in absence of an explicit
>policy that's the only meaningful interpretation of a Signed-off-by
>line.
>
>Presumably, the first alternative is cleaner. Especially, since there
>are commits with a Signed-off-by line that don't comply with the
>conditions of the Linux DCO.

I don't think we really need to be concerned about them right now.

AFAIU the whole signoff business boils down to two things: verifying that contributors understand the terms of contributing, and protecting Gentoo from liability for commits violating those terms.

I think that in this context only the latter point really matters, and I don't think making statement either way right now would change anything if we ever had to exercise it.

>
>Ulrich
>
>> [1]:https://www.gentoo.org/glep/glep-0076.html
>> [2]:https://www.gentoo.org/glep/glep-0076.html#certificate-of-origin


--
Best regards, 
Michał Górny

Re: [gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

[Michael Orlitzky]

On 09/16/2018 02:59 AM, Michał Górny wrote:
> Hi, everyone.
> 
> Just FYI: the Trustees have approved GLEP 76 aka our new copyright
> policy [1].  While the exact implementation details are to be determined
> yet, please note that *Signed-off-by* line will mean you are certifying
> our GCO [2].
> 

For the TODO list: GLEP 66 says,

  The only tag defined by git itself is the Signed-off-by line, that is
  created by git commit -s. However, Gentoo does not currently enforce a
  DCO consistently, and therefore it is meaningless.

Re: [gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

[Michał Górny]

[-- Attachment #1: Type: text/plain, Size: 744 bytes --]

On Mon, 2018-09-17 at 22:52 -0400, Michael Orlitzky wrote:
> On 09/16/2018 02:59 AM, Michał Górny wrote:
> > Hi, everyone.
> > 
> > Just FYI: the Trustees have approved GLEP 76 aka our new copyright
> > policy [1].  While the exact implementation details are to be determined
> > yet, please note that *Signed-off-by* line will mean you are certifying
> > our GCO [2].
> > 
> 
> For the TODO list: GLEP 66 says,
> 
>   The only tag defined by git itself is the Signed-off-by line, that is
>   created by git commit -s. However, Gentoo does not currently enforce a
>   DCO consistently, and therefore it is meaningless.
> 

Thanks for noticing.  I'll prepare an update in a few minutes.

-- 
Best regards,
Michał Górny

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 963 bytes --]