“Common Development and Distribution License”的意思、由来-开放百科全书

Common Development and Distribution License (CDDL) is a free and open-source software license,^[1] produced by Sun Microsystems, based on the Mozilla Public License (MPL). Files licensed under the CDDL can be combined with files licensed under other licenses, whether open source or proprietary.^[2] In 2005 the Open Source Initiative approved the license. The Free Software Foundation (FSF) considers it a free software license, but one which is incompatible with the GNU General Public License (GPL).^[3] In 2018, according to Black Duck Software the CDDL is the 16th most popular FOSS license, after the AGPLv3 (both, and more, with less than 1% use).

Terms

Derived from the Mozilla Public License 1.1,^[4] the CDDL tries to address some of the problems of the MPL.^[5] Like the MPL, the CDDL is a weak copyleft license in-between GPL license and BSD/MIT permissive licenses, requiring only source code files under CDDL to remain under CDDL. Unlike strong copyleft licenses like the GPL, mixing of CDDL licensed source code files with source code files under other licenses is permitted without relicensing. The resulting compiled software product ("binary") can be licensed and sold under a different license, as long as the source code is still available under CDDL, which should enable more commercial business cases, according to Sun.^[5]^[6]^[7] Like the MPL the CDDL includes a patent grant to the licensee from all contributors ("patent peace").

History

The previous software license used by Sun for its open source projects was the Sun Public License (SPL), also derived from the Mozilla Public License. The CDDL license is considered by Sun (now Oracle) to be SPL version 2.^[8]

The CDDL was developed by a Sun Microsystems team (among them Solaris kernel engineer Andrew Tucker^[9]^[10] and Claire Giordano^[11]), based on the MPL version 1.1. On December 1, 2004 the CDDL was submitted for approval to the Open Source Initiative^[11] and was approved as an open source license in mid January 2005.

The second CDDL proposal, submitted in early January 2005, includes some corrections that prevent the CDDL from being in conflict with European Copyright law and to allow single developers to use the CDDL for their work.

In 2006, in the first draft of the OSI's license proliferation committee report, the CDDL is one of nine preferred licenses listed as popular, widely used, or with strong communities.^[12]

While the Free Software Foundation (FSF) also considered the CDDL a free software license, they saw some incompatibilities with their GNU General Public License (GPL).^[3]

{{Anchor|GPL-INCOMPATIBILITY}}GPL compatibility

The question of whether and when both licenses are incompatible sparked debates in the free software domain in 2004 to 2006.^[13]^[14] For instance the FSF considered the CDDL incompatible to their GPL license, without going into detail until 2016.^[15] Some describe the incompatibility as inherited from the MPL 1.1 (fixed with the MPL 2.0 according to the FSF^[3]) and as a complex interaction of several clauses.^[13]^[16] Some of the CDDL proponents describe the GPL/CDDL compatibility situation from another point of view, they see the problem more on the GPL side than the CDDL side.^[17] Some people argue that Sun (or the Sun engineer) as creator of the license made the CDDL intentionally GPL incompatible.^[13] According to Danese Cooper one of the reasons for basing the CDDL on the Mozilla license was that the Mozilla license is GPL-incompatible. Cooper stated, at the 6th annual Debian conference, that the engineers who had written the Solaris kernel requested that the license of OpenSolaris be GPL-incompatible.^[18]

cdrtools controversy

The GPL compatibility question was also the source of a controversy behind a partial relicensing of cdrtools to the CDDL which had been previously all GPL. In 2006 the Debian project declared the cdrtools legally undistributable because the build system was licensed under the CDDL.^[23] The author Jörg Schilling claims smake to be an independent project and therefore not violating the GPLv3.^[24] And that even though the GPL requires all scripts required to build the work to be licensed freely but not necessarily under the GPL,^[25]^[26]{{page needed|date=February 2016}} thus not causing an incompatibility that violates the license. He argues, in "combined works" (in contrast to "derived works") GPL and CDDL licensed code is compatible.^[27]^[28]

CDDL'd ZFS into GPL'd Linux kernel

In 2015, the CDDL to GPL compatibility question reemerged when the Linux distribution Ubuntu announced inclusion of OpenZFS by default.^[29] In 2016 Ubuntu announced that a legal review resulted in the conclusion that it is legally acceptable to use ZFS as binary kernel module in Linux.^[30] Others followed Ubuntu's conclusion, for instance James E. J. Bottomley argued there can't be "a convincing theory of harm" developed, making it impossible to bring the case to court.^[31] Eben Moglen, co-author of the GPLv3 and founder of the SFLC, argued that while the letters of the GPL might be violated, the spirit of both licenses is unharmed, which would be the relevant aspect in court.^[32] The SFLC mentioned also that a precedent exists with the Andrew File System's kernel module, which isn't considered a derivative work of the GPL'd kernel by the kernel developers.^[33]^[34] On the other hand, Bradley M. Kuhn and lawyer^[35] Karen M. Sandler from the Software Freedom Conservancy argued that Ubuntu would violate both licenses as a binary ZFS module would be a derivative work of the Linux kernel and announced their intent to achieve clarity in this question, even by court.^[36]^[37] In April 2016, the Ubuntu 16.04 LTS release included the CDDL-licensed ZFS on Linux, as announced before.^[38]

Adoption

See also

References

1. ^{{Citation | title = Common Development and Distribution License (CDDL) Information | url = http://www.sun.com/cddl/ | archiveurl = https://web.archive.org/web/20090304142159/http://www.sun.com/cddl/ | archivedate = 2009-03-04 | quote="We have drafted a new open source license [...]"}}
2. ^¹{{cite web |url=http://www.opensolaris.org/os/about/faq/licensing_faq/#CDDL-combo|archiveurl=https://web.archive.org/web/20091006181308/http://opensolaris.org/os/about/faq/licensing_faq/#CDDL-combo|archivedate=2009-10-06 |title=Can code licensed under the CDDL be combined with code licensed under other open source licenses? |work=OpenSolaris FAQ: Common Development and Distribution License (CDDL) |publisher=OpenSolaris}}
3. ^¹²³⁴⁵⁶{{cite web|url=https://www.gnu.org/licenses/license-list.html#CDDL |title=Various Licenses and Comments About Them - Common Development and Distribution License |publisher=Free Software Foundation |accessdate=2006-12-31}}
4. ^[https://web.archive.org/web/20060816050912/http://www.sun.com/cddl/CDDL_MPL_redline.pdf CDDL_MPL_redline.pdf] on sun.com (archived)
5. ^¹[https://web.archive.org/web/20050214114513/http://www.sun.com/cddl/CDDL_why_summary.html CDDL Why Summary] on sun.com (archived, 2005)
6. ^McNealy: CDDL is 'best of both worlds' on zdnet.com by Aaron Tan (September 14, 2005)
7. ^[https://tldrlegal.com/license/common-development-and-distribution-license-%28cddl-1.0%29-explained CDDL] on tldrlegal.com
8. ^{{cite web |url=http://www.netbeans.org/about/legal/license-change.html#Why_change_licenses? |title=SPL to CDDL as of NetBeans 5.0 - Why change licenses? |publisher=NetBeans |archiveurl=https://web.archive.org/web/20070224082827/http://www.netbeans.org/about/legal/license-change.html |archivedate=2007-02-24 |quote=The SPL was based on the Mozilla license - as CDDL is as well. [..] One way to think of the CDDL is as a cleaned-up version of the Mozilla license - anyone can reuse it as-is. It's the SPL version 2.0. |accessdate=2006-12-31}}
9. ^{{cite web|url=https://alanhargreaves.wordpress.com/2005/04/12/andy-tucker-on-the-cddl/|title=Andy Tucker on the CDDL|work=Alan Hargreaves' Blog}}
10. ^[https://web.archive.org/web/20061111055302/http://blogs.sun.com/tucker/ Open source licenses, IP, and CDDL ] on Andrew Tuckers blog "as one of the drafters of the CDDL I can at least comment on what the license says, and on our intentions in creating it." (Tuesday April 12, 2005)
11. ^¹{{cite web|url=https://lwn.net/Articles/114840/|title=For Approval: Common Development and Distribution License (CDDL)|date=1 December 2004}}
12. ^[https://web.archive.org/web/20120205011112/http://www.crynwr.com/cgi-bin/ezmlm-cgi?3%3Amss%3A11636%3A200607%3Anknhhdligldemhkfbhpd First draft of OSI's license proliferation report]. Archived from the original on 2012-02-05. Retrieved 2013-01-03.
13. ^¹²{{cite web|url=http://www.eweek.com/c/a/Linux-and-Open-Source/Sun-Proposes-New-OpenSource-License|title=Sun Proposes New Open-Source License|publisher=}}
14. ^{{cite web|url=http://cuddletech.com/blog/pivot/entry.php?id=31|title=The Blog of Ben Rockwood|publisher=}}
15. ^{{cite web|url=https://www.fsf.org/licensing/zfs-and-linux |title=Interpreting, enforcing and changing the GNU GPL, as applied to combining Linux and ZFS |publisher=Free Software Foundation |accessdate=2017-07-27|date=April 11, 2016}}
16. ^{{cite web|url=http://www.tomhull.com/ocston/docs/mozgpl.html|title=MPL / GPL Incompatibility|accessdate=2007-12-03}}
17. ^{{cite web |url=https://blogs.oracle.com/chandan/entry/copyrights_licenses_and_cddl_illustrated |title=Copyrights, Licenses and CDDL Illustrated |publisher=blogs.oracle.com |author=chandan |date=2006-09-18 |quote=A common misconception is about CDDL and GPL incompatibility. (Incompatibility in the sense: to combine two source files, one under GPL and another under CDDL, to create a common executable.) GPL is incompatible with most licenses like Mozilla Public License, Apache, and CDDL. GPL wants you erase those licenses and use GPL in that place, where as these licenses do not permit erasing them. Hence the incompatibility deadlock. |accessdate=2015-05-29 |deadurl=yes |archiveurl=https://web.archive.org/web/20150529114715/https://blogs.oracle.com/chandan/entry/copyrights_licenses_and_cddl_illustrated |archivedate=2015-05-29 |df= }}
18. ^{{cite video |people=Danese Cooper |date=2006 |title=OpenSolaris and CDDL discussion at Debconf 2006 |url=http://meetings-archive.debian.net/pub/debian-meetings/2006/debconf6/theora-small/2006-05-14/tower/OpenSolaris_Java_and_Debian-Simon_Phipps__Alvaro_Lopez_Ortega.ogg |format=Ogg Theora |time=27:26 |quote=Mozilla was selected partially because it is GPL incompatible. That was part of the design when they released OpenSolaris. ... the engineers who wrote Solaris ... had some biases about how it should be released, and you have to respect that}} ([https://web.archive.org/web/20110722120048/http://caesar.acc.umu.se/pub/debian-meetings/2006/debconf6/theora-small/2006-05-14/tower/OpenSolaris_Java_and_Debian-Simon_Phipps__Alvaro_Lopez_Ortega.ogg alternate URL], see 27:27 through 28:24)
19. ^{{cite video|people=Simon Phipps|date=2006|work=Debconf 2006|title = OpenSolaris and CDDL discussion at Debconf 2006|url=http://meetings-archive.debian.net/pub/debian-meetings/2006/debconf6/theora-small/2006-05-14/tower/OpenSolaris_Java_and_Debian-Simon_Phipps__Alvaro_Lopez_Ortega.ogg|format=Ogg Theora|time=13:00|quote=...we have got Danese Cooper in the room, and she is the one who actually wrote the CDDL...}}
20. ^{{cite video|people=Simon Phipps|date=2006| title = OpenSolaris and CDDL discussion at Debconf 2006|url=http://meetings-archive.debian.net/pub/debian-meetings/2006/debconf6/theora-small/2006-05-14/tower/OpenSolaris_Java_and_Debian-Simon_Phipps__Alvaro_Lopez_Ortega.ogg|format=Ogg Theora|time=36:00|quote=I actually disagree with Danese to some degree...}}
21. ^{{cite web |url=https://marc.info/?l=opensolaris-discuss&m=115740406507420 |title=Re: Danese Cooper claims CDDL made incompatible with GPL on purpose |last=Phipps |first=Simon |accessdate=2019-03-07| date =2006-09-04 | work=OpenSolaris-Discuss List| quote="Nonetheless she is wrong to characterise the opinion of the Solaris engineering team in the way she does. She is speaking this way because she lost an argument inside Sun, not because her view is representative of the views of Sun or its staff in the way she claims. She, along with many actual engineers, was an advocate of using GPL for OpenSolaris but the need to release rather than wait for one of {GPL v3, Mozilla license revision, encumbrance removal} meant that this was not possible. I am still furious with her for the statement she made at DebConf, which was spiteful and an obstacle to a united FOSS movement. " }}
22. ^{{cite web|url=https://www.reddit.com/r/IAmA/comments/31ny87/i_am_the_cto_of_joyent_the_father_of_dtrace_and/cq3bs9z?context=3 |title=I am the CTO of Joyent, the father of DTrace and an OS kernel developer for 20 years. AMA!|publisher=reddit.com |author=Bryan Cantrill|quote="Question: Was the CDDL designed to prevent Sun technologies from entering Linux? - BC: Great question, and the answer was that we didn't know -- but the expectation was that it would be ported to Linux relatively quickly. I remember vividly standing over a terminal with a bunch of people as we actually launched OpenSolaris (like, clicked carriage return on making the DTrace code live -- which was the first in the chute), and the Sun Legal guy and I were chatting. We were both wondering if DTrace was going to show up in Linux in a month or if it would take two years. But that was the range of guesses: neither of us believed that the Linux community themselves would hold up CDDL as an obstacle, and certainly if you told me that a decade later, DTrace wouldn't be in Linux because of licensing FUD, I wouldn't have believed you. Of course, in hindsight, it all seems so clear: NIH is enormously powerful, and we were fools for discounting it." |date=2015-04-06 |accessdate=2016-03-11}}
23. ^{{cite web|url=https://lwn.net/Articles/195167/|author=Jonathan Corbet|title=cdrtools - a tale of two licenses|accessdate=2007-08-04}}
24. ^{{cite web|url=http://cdrecord.org/private/linux-dist.html|author=Jörg Schilling|title=Linux controversy|accessdate=2009-10-26}}
25. ^{{cite web|url=https://www.gnu.org/licenses/gpl.html|title=The GNU General Public License |accessdate=2009-10-24}}
26. ^{{cite web|url=http://www.oreilly.de/german/freebooks/gplger|title=Die GPL kommentiert und erklärt Online-Version |publisher=O'Reilly| language=German}}
27. ^{{cite web|url=http://www.pro-linux.de/news/1/10155/neuer-streit-um-cdrtools.html |title=Neuer Streit um cdrtools |language = German|work=Pro-Linux |quote=Laut Aussagen von Jörg Schilling sind die Lizenzen durchaus miteinander kompatibel. Die Regeln werden oftmals falsch ausgelegt. Die Aussagen der FSF-Verantwortlichen seien oft widersprüchlich und in sich nicht schlüssig.}}
28. ^{{cite web|url=http://www.osscc.net/en/gpl.html|title=OSSCC GPL |publisher=}}
29. ^{{cite web|url=https://www.phoronix.com/scan.php?page=news_item&px=Ubuntu-ZFS-Standard-Plans|title=Ubuntu Is Planning To Make The ZFS File-System A "Standard" Offering |publisher=Phoronix|date=6 October 2015 |authors=Michael Larabel}}
30. ^{{cite web|url=https://insights.ubuntu.com/2016/02/18/zfs-licensing-and-linux/|title=ZFS Licensing and Linux|authors=Dustin Kirkland|publisher= Canonical|work=Ubuntu Insights|date=18 February 2016}}
31. ^Are GPLv2 and CDDL incompatible? on hansenpartnership.com by James E. J. Bottomley "What the above analysis shows is that even though we presumed combination of GPLv2 and CDDL works to be a technical violation, there’s no way actually to prosecute such a violation because we can’t develop a convincing theory of harm resulting. Because this makes it impossible to take the case to court, effectively it must be concluded that the combination of GPLv2 and CDDL, provided you’re following a GPLv2 compliance regime for all the code, is allowable." (23 February 2016)
32. ^{{cite web|url=https://softwarefreedom.org/resources/2016/linux-kernel-cddl.html |title=The Linux Kernel, CDDL and Related Issues |date=26 February 2016 |first1=Eben |last1=Moglen | first2=Mishi | last2=Choudhary |authorlink=Eben Moglen}}
33. ^{{cite web|url=https://softwarefreedom.org/resources/2016/linux-kernel-cddl.html |title=The Linux Kernel, CDDL and Related Issues|date=26 February 2016 |first1=Eben |last1=Moglen | first2=Mishi | last2=Choudhary |authorlink=Eben Moglen |quote=Historically, there's been things like the original Andrew filesystem module: a standard filesystem that really wasn't written for Linux in the first place, and just implements a UNIX filesystem. Is that derived just because it got ported to Linux that had a reasonably similar VFS interface to what other UNIXes did? ... Personally, I think that case wasn't a derived work, and I was willing to tell the AFS guys so.}}
34. ^[https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/COPYING Copying] on git.kernel.org "NOTE! This copyright does *not* cover user programs that use kernel services by normal system calls – this is merely considered normal use of the kernel, and does *not* fall under the heading of "derived work"."
35. ^Software Freedom Law Center Appoints Two New Attorneys to Defend and Support Free and Open Source Software (October 31, 2005)
36. ^[https://sfconservancy.org/blog/2016/feb/25/zfs-and-linux/ GPL Violations Related to Combining ZFS and Linux] on sfconservancy.org by Bradley M. Kuhn and Karen M. Sandler "Ultimately, various Courts in the world will have to rule on the more general question of Linux combinations. Conservancy is committed to working towards achieving clarity on these questions in the long term. That work began in earnest last year with the VMware lawsuit, and our work in this area will continue indefinitely, as resources permit. We must do so, because, too often, companies are complacent about compliance. While we and other community-driven organizations have historically avoided lawsuits at any cost in the past, the absence of litigation on these questions caused many companies to treat the GPL as a weaker copyleft than it actually is." (February 25, 2016)
37. ^[https://sfconservancy.org/blog/2016/feb/25/zfs-and-linux/ GPL Violations Related to Combining ZFS and Linux] on sfconservancy.org by Bradley M. Kuhn and Karen M. Sandler " Conservancy (as a Linux copyright holder ourselves), along with the members of our coalition in the GPL Compliance Project for Linux Developers, all agree that Canonical and others infringe Linux copyrights when they distribute zfs.ko."
38. ^{{cite web | url = https://github.com/zfsonlinux/zfs/wiki/FAQ#licensing | title = ZFS on Linux: Frequently asked questions: Licensing | date = {{date|2016-05-26|mdy}} | accessdate = {{date|2016-07-03|mdy}} | website = github.com}}
39. ^{{cite web|url=https://wiki.illumos.org/display/illumos/Distributions|title=illumos Distributions|authors=illumos wiki contributors|publisher= illumos|work=The illumos Family|date=20 March 2017}}