License Compliance in Embedded Linux with the Yocto Project

on YouTube ↗36m

" summary

Yocto Project shows how to meet GPL obligations by capturing license text in deploy/licenses or as per-package -LIC packages, archiving sources with the archiver (original or patched modes) or shipping the downloads directory, and generating shallow mirror tarballs to shrink mirrors (example: 7.5 GB → 1 GB). Best practices include one-command reproducible builds, automated tests, capturing all patches and patch order, avoiding post-build injection, handling Docker FROM lines and prebuilt toolchains, and using copyleft filtering and integration with Fossology.

AI-written summary · about

" chapters (40)

1. 0:00Intro
2. 0:17About Me
3. 0:41Disclaimer
4. 1:54Why Care?
5. 2:22Another Reason Why
6. 3:02The Fundamentals
7. 3:53The Distributed Image
8. 4:41Single Command Build
9. 5:22Test Your Releases!
10. 6:06Use Your Build System
11. 7:00Factory Test
12. 7:46Proprietary Components
13. 8:43Source Patches
14. 9:42Recipes and Build Scripts
15. 10:26Using Desktop/Server Distros
16. 10:59Docker
17. 11:43Pre-compiled Toolchains
18. 12:37Language-Specific Package Managers
19. 13:56Other Insanities
20. 15:18Metadata Bugs
21. 16:33Metadata in Yocto Project Recipes
22. 17:24Metadata Advice
23. 19:15Common Licenses
24. 20:03Unique Licenses
25. 21:10Capturing License Text
26. 22:10Including License Text in an Image
27. 22:43License Packages
28. 23:50Capturing Source Code
29. 25:29Shallow Mirror Tarballs
30. 26:14Using the Archiver
31. 27:22Copyleft Filtering
32. 28:45Providing Layers
33. 29:31Local Configuration
34. 30:40INCOMPATIBLE LICENSE
35. 32:08WIP: Mirror Archiver (2)
36. 33:02WIP: License Information Bundle
37. 33:33Comparison with Buildroot
38. 34:09Comparison with OpenWRT
39. 34:33Other Projects: Fossology
40. 35:33Other Projects: Software Heritage

" related talks

• 48mIntroduction to Linux's LicenseBradley M. Kuhn · linux.conf.au 2020
• 33mUsing Open Source Software to Build an Industrial-grade Embedded Linux Platform...SZ Lin · KubeCon + CloudNativeCon + Open Source Summit China 2019
• 53mWorking with the Linux Kernel in the Yocto ProjectSean Hudson · Embedded Linux Conference + OpenIoT Summit North America 2018
• 40mWhy the Yocto Project for My IoT ProjectDrew Moseley · Open Source Summit Europe & ELC + OpenIoT Summit Europe 2018
• 38mkernel: build system outputs and workflows (and how to balance them)Bruce Ashfield · Linux Plumbers Conference 2023
• 57mA Development Environment for DO-178C Level D Certified LinuxChuck Wolber · Critical Software Summit @ Open Source Summit North America 2023
• 53mExploring Linux Kernel Source Code with Eclipse and QTCreatorMarcin Bis · Embedded Linux Conference + OpenIoT Summit Europe 2016
• 58mHow to write a really good board support package for Yocto ProjectChris Simmonds · NDC TechTown 2021