You are here: Home / Projects / 
2021-04-13 - 02:59

OSADL Docker Base Image: The basis for license compliant containers

Background and goal of the project

Containers simplify deploying an application with all its dependencies while avoiding compatibility issues with other components of the target system. On the downside, fulfilling FOSS license obligations is more difficult for containers due to their layered structure and the lack of compliance material in public repositories.

Although every container is customized for its particular use and therefore comprises different software components, many are built on a so-called “base image” that provides essential system components. While license obligations for customized layers must be fulfilled individually by the distributor of the container, it seems obvious to apply the Open Source principle of sharing development of non-differentiating technologies and services to license obligations of container base images. Therefore, OSADL offers a container base image that is provided together with all required legal information and material needed to distribute it compliantly. In addition, instructions on how the image was created and how it can be updated are included. A company may build their individual container images on top of the OSADL base image and use the provided instructions to fulfill license obligations for the additional software to achieve license compliant container distribution.

This project was inspired by the discussion surrounding the presentation "Fulfilling license obligations of a Docker image may be less obvious than it appears" for the COOL edition of October 2020 by Armijn Hemel which can be found here and the ensuing legal opinion on "Do license obligations have to be complied with when distributing Dockerfiles?" by Dr. Till Jaeger that can be found here (member login required).

Versions and variants of the OSADL Docker Base Image

For now, the OSADL Docker Base Image is available as a Debian-based amd64 Docker image that can be imported into any Docker installation. Instructions on how to do so are given along with the image. In the future, further variants may be available. Please let us know which additional variants are most useful by writing to infoªosadl.org

In addition, the image is available in two versions:

  1. For immediate source code delivery (550 MB): All sources are included in the image. In addition, a note with legal information and rebuild instructions accompanies the image.

  2. Binary-only image (270 MB) for delayed source code delivery with a written offer: Extracted compliance material and a note with legal information accompany the image and must be delivered along with it (10 MB). In addition, the source packages including rebuild instructions for later delivery are provided (250 MB).

In both cases, the legal information notice must be customized to reflect the distributor’s circumstances and must then accompany the base image when it is distributed.

Access to the OSADL Docker Base Image

The OSADL Docker Base Image is provided as a tarball together with the required compliance material and some additional documentation with instructions of use, content of the image and a build manual on how the image was created.

Employees of OSADL member companies may login to the OSADL website and subsequently download the archive with the material described above from the following link.

Non-members may contact us at infoªosadl.org to obtain the image.

Please login using your member access data to display the download link for the OSADL Docker Base Image.

Version history

Release no.

Release date

Content

Comments

1.0

11.03.2021

Debian (10) buster amd64 minbase

First public version