License is a Nuisance!
summary
Claims that container license compliance is hard and gives a reproducible workflow: detect containers via manifest/json and docker save, unpack images and trace every layer with docker history to get exact package lists (including base OS packages), then map packages to licenses using license_finder and fossology and inspect images with VMware turn and dive. Simple scripts automate these steps, feed legal review, and cut turnaround from a month to two weeks while surfacing missing or incorrectly tagged licenses.
AI-written summary · about
chapters (8)
- 0:00Introduction to licensing
- 1:00Basics of open source licenses
- 5:45Why license compliance is hard
- 8:13Container complexity explained
- 12:04Detecting containers in products
- 14:57Finding licenses in containers
- 16:19Reviewing licenses with legal
- 18:23Q&A on licensing challenges
related talks
20mEmerging Automated License Compliance for Containers
19mDocker and Legal Compliance: Navigating the Containerized World
31mLicense Compliance 101
13mBuild license management into your pipelines
45mOpen Source distributions in a cloud-native world: from a technical to a legal point of view
49mLicensing Support by Build Systems and What Remains To Be Done
32mOpen Source Contributions in Today’s World- 49mLicensing Support by Build Systems and What Remains To Be Done