Fwd: kiax_0.8.4-3_i386.changes REJECTED

[Mark Purcell]

On Sunday 02 October 2005 20:26, George Danchev wrote:
> Sorry for replying to myself, but I would like to get some advices of how
> to proceed from now on. The kiax 0.8.4 [1] issues read:

George. Thanks for your continued work on this. Please keep it up!

> 1) lib/iLBC - lisenced under Global IP Sound iLBC Public License, v2.0 -
> IETF Version which is non-free [2] - will be tricky, but doable I think. 

I think it needs to be removed from any dfsg archive.  We are allowed to 
remove non-free components from the .orig.tar.gz in order to achieve this.

The iaxclient README seems to have it right. iaxclient can be built and 
peforms well with either/ both libspeex and iLBC. iLBC is potentially 
non-free, thus iaxclient is only distributed with libspeex. (Note there is a 
patch required from the upstream libspeex for iaxclient support)

We can do the same with kiax, only distribute with libspeex.  Although ideally 
kiax should be setup to just use the shared libraries provided by 
libiaxclient-dev.

> 2)  populate debian/copyright with all copyright holders and licenses
> including  the Speex Licences. But if we go for educating kiax of using
> system libraries provided by already existing packages then we do not need
> that -  that's also kind of tricky part since iaxclient also provides
> libspeex  library itself. 

Correct. We actually also need to update debian/copyright for iaxclient as 
well, as it doesn't detail the copyright for libspeex either and it also 
distributes it.  I have just filed a severity serious bug report.

I have also filed a bug against iaxclient to remind ourselves to use the 
shared libspeex when we can. (Encorporation of iaxclient patch)

> 3) README.Debian - easy. 

Great!

> Now my question is does something like above will save 1) in a reasonable
> way ? I think that the program will be still useable when built against
> such 'sanitisized' lib. So the kiax's lib/ (as found in dfsg.orig.tar.gz)
> should be sanitisized to the lib/ found in iaxclient-0.0+cvs20050725 source
> package.

Yes stripping out the lib/ to only include dfsg and renaming the tarball 
to .dfsg is is a perfectly reasonable approach, and would appear to be 
workable.

> > > Does this affect Asterisk?

Having a look yes it does!

asterisk does distribute codecs/ilbc, but debian/copyright doesn't list the 
copyright holder :-(

So at least debian/copyright needs to be updated, but potentially codecs/ilbc 
needs to be removed from the asterisk-xxx.dfsg.tar.gz. I have just filed 
another severity serious bug against asterisk.

> > Well I think it is DFSG-compliant since at least the tarball name
> > suggests that like dfsg.X.orig.tar.gz, although there should be a note
> > about removed non-free files in copyright file or README.Debian I'm
> > missing here ? 

Hmm, the dfsg. name doesn't mean we removed all non-free software, just some 
of it. In particular the non-free music-on-hold. Perhaps we need to do an 
audit against all the asterisk code base, although upstream are claiming 
the .tar is GPL compliant!

> > That is what I think to do for  kiax-0.8.4 - to remove the 
> > bits not found in iaxclient-0.0+cvs20050725/lib.

Sounds great.  Can you work in svn.debian.org now?

> > I'll review the diff soon and to get a clue what will be stripped in fact
> > and produce kiax_0.8.4.dfsg.1.orig.tar.gz.
> >
> > Any objections for doing so ?
>
> I reviewed the diff the whole iLBC thing should possibly be handle by
> libspeex library.

Great!

> I sent two mails to two of the upstream developers explaning the above
> issues in length three days ago, but no feedback yet (they possibly live in
> my home city - shame ;-)
>
> Comments and alternative approaches greatly appreciated.

I think you have the situation pretty well documented and we just need to take 
this approach forward.

Mark