[Pkg-xen-devel] [Fwd: Re: [Xen-devel] Xen 4.0 in debian packages?]

[Thomas Goirand]

Hi there,

It is my understanding that blktap2 has been removed from the built of
xen-hypervisor-{i386|amd64} because of the OpenSSL licensing and its
incompatibility with the GPL, but apparently it is possible to not use
OpenSSL at all.

What is your thoughts about this? Could blktap2 support be added? Should
it be packaged separately and be sent to non-free?

Thomas

-------- Original Message --------
Subject: Re: [Xen-devel] Xen 4.0 in debian packages?
Date: Fri, 4 Jun 2010 13:13:35 +0100
From: Stefano Stabellini <stefano.stabellini at eu.citrix.com>
To: Thomas Goirand <thomas at goirand.fr>
CC: xen-devel at lists.xensource.com <xen-devel at lists.xensource.com>
References:
<AANLkTimrVW1UQ8t7L3t1iKgEQZi5iXPTA4CZEuFgXZzV at mail.gmail.com>
<4C064EAC.50001 at ieee.org> <20100602155602.GK17817 at reaktio.net>
<4C0688B0.2000007 at goirand.fr>
<AANLkTimvZGsBV9SmqWpOls4cKIHgGXeE41PR8o9eoo2q at mail.gmail.com>
<4C07BB50.6030800 at goirand.fr>
<BAY148-w38C4D7818E69F3913AB98EFD10 at phx.gbl>
<AANLkTikj4GUWt9guZomYyhTSpTZvDC5BNV48h0YwhXzM at mail.gmail.com>
<4C07E0CC.1020907 at goirand.fr>

On Thu, 3 Jun 2010, Thomas Goirand wrote:
> Łukasz Oleś wrote:
> 
> Hi,
> 
> 2010/6/3 Mike Viau <viaum at sheridanc.on.ca>:
>   
> 
> Also does
> your package address "blktap2" as Pasi pointed out may be missing?
>     
> 
> Actually blktap2 module is available in kernel. Blktap tools are
> missing due to openssl license issues.
>   
> 
> 
> That is 100% correct, and there's nothing I can do about
> the incompatibility of the OpenSSL and the GPL. By the
> way, this should also be an issue in the upstream Xen
> sources, not only in Debian. I am surprised to see that it
> doesn't seem to be an issue for xensource...
> 
> If I remember well, the bad clause is about advertising,
> where the author of OpenSSL ask that their product name
> be written when advertising about the functionalities.
> 
> That being said, maybe it would be possible to make a
> package for the blktap2 that would go in non-free. I could
> also do that work if I get some directions on how to do it,
> eg what "upstream" source should I get, and what binary
> should I package. That is, if I get enough time after
> I get approved as a DD before Squeeze is frozen.
> 

AFAIK blktap2 can be compiled against libgcrypt, see
tools/blktap2/drivers/Makefile:30

ifeq ($(CONFIG_Linux),y)
ifeq ($(shell . ./check_gcrypt $(CC)),yes)
CFLAGS += -DUSE_GCRYPT
CRYPT_LIB += -lgcrypt
else
CRYPT_LIB += -lcrypto
$(warning === libgcrypt not installed: falling back to libcrypto ===)
endif
else
CRYPT_LIB += -lcrypto
endif

just make sure ifeq ($(shell . ./check_gcrypt $(CC)),yes) succeed on
your system.

In any case ssl is only used to calculate MD5, I'll post another
implementation that doesn't need any library.