Source: netdata
Version: 1.41.0-1
Severity: serious
Starting from version 1.41.0, Netdata has started to include their new
agent dashboard - the so-called Cloud UI (or sometimes v2) [1]. This,
however, is distributed under a different license than the rest of
Netdata - the Netdata Cloud UI License v1.0 (NCUL1) [2].
This license restricts the use of the software, allowing it "only to
interface with the licensor's other software components". This makes it
violates the section 6 of the DFSG. Moreover, the UI itself is
distributed in the minified form, violating the section 2 of DFSG.
Luckily, the license does not restrict the redistribution, so Debian is
probably not in a legal trouble just yet (disclaimer: IANAL).
The old versions of dashboard is still distributed with Netdata. To the
best of my knowledge, the old version of the dashboard is still
distributed under GPL-3+. Users can choose to go to the old (so-called
v1) dashboard by going to e.g. http://localhost:19999/v1/.
As a related issue, also since version 1.41.0 Netdata will, by default,
download the latest version of the Cloud UI from their server to the
browser, falling back to the local copy of the UI distributed with
itself if it fails to do so.
So, in this case, I believe it's possible for Debian to remove the new
UI from the Debian version of Netdata. The source tarball will have to
be re-packaged, and the relevant code will have to be patched so that it
redirects the the v1 version of dashboard.
Side note: in fact, the v1 version of the dashboard is also distributed
with the agent in the minified form, and it seems like the source
package isn't actually included in Debian's source package. There's the
bug #982220 which intends to package the dashboard separately. It seems
to be filed by one of Netdata's maintainer but doesn't seem to have any
activity. In the meantime, including the source of the dashboard at [3]
as a no-op secondary orig tarball (or part of debian/missing-source)
might be a good stop gap. Whether it's worth an additional bug entry is
up to you.
Regards,
Ratchanan Srirattanamet
[1]
https://github.com/netdata/netdata/releases/tag/v1.41.0#v1410-one-dashboard
[2] https://github.com/netdata/netdata/blob/master/web/gui/v2/LICENSE.md
[3] https://github.com/netdata/dashboard
