![]() |
|
![]() |
| Apache isn't a silver bullet... there are plenty of Apache projects where the individuals are compromised mostly from one company and hide behind the veneer of the ASF... where they are working on the projects per their employment. Gerrymandering is definitely possible and has happened in the past, that's why you have to look at governance and ownership of the marks/build systems etc: https://www.aniszczyk.org/2019/10/08/open-source-gerrymander...
I actually prefer the approach of LF, EF or CNCF where it's transparent where folks work for and your affiliation is disclosed upfront. In the CNCF for example, we separate out technical project decisions (maintainers) from funding decisions (members). That is healthier than blending it all in one at the ASF imho and having no idea where person is working for imho. |
![]() |
| This is an Eclipse foundation project, not an Apache Software Foundation (ASF) project?
it's all volunteers/open source, but this isn't an ASF project. |
![]() |
| > AGPL requires you only to provide the source code of your fork to its users
The AGPLv3 is exactly the same as the GPLv3, except with the added clause that connecting to a server counts as distribution for the purposes of triggering the right to obtain source code. That means all the usual GPL copyleft rules apply: if you include an AGPL library in your server binary, the entire binary becomes subject to the AGPL. And being subject to the AGPL, you are obligated to provide access to the source code for your entire server binary to anyone who connects to and interacts with your service across a network. Quoting from https://www.fsf.org/bulletin/2021/fall/the-fundamentals-of-t... : > Simply put, the AGPLv3 is effectively the GPLv3, but with an additional licensing term that ensures that users who interact over a network with modified versions of the program can receive the source code for that program... > These terms cover the distribution of verbatim or modified source code as well as compiled executable binaries. However, they only apply when a program is distributed, or more specifically, conveyed to a recipient... > The AGPLv3 does not adjust or expand the definition of conveying. Instead, it includes an additional right that if the program is expressly designed to accept user requests and send responses over a network, the user is entitled to receive the source code of the version being used. |
![]() |
| Ah but what if you bundle both your application binary and some (unmodified) AGPL software into a single Docker container? Do you then need to provide source code for your entire application? |
![]() |
| I am saying that old school projects aren't paying the developers' bills because they aren't profitable. The developers realize this too, there is only so much altruism to go around but you got mouths to feed and rents to pay.
As an alternative to working on a second job to fund their passion, we are seeing developers trying various things to make their one passion job pay, such as licensing tweaks or VC funding. These don't seem to work out very well, I think it's best explained here: https://apenwarr.ca/log/20211229
|
![]() |
| > Old school open source projects don't seem particularly profitable.
And is also subject to survivorship bias. For every OSS project that makes it, tens of thousands do not. |
![]() |
| Sure, and I think the CLA is a good signal to those that care about how their contribution is used to stay away. But for everyone else that's not concerned with that, the CLA is not inherently evil. |
![]() |
| Kind of... Certain extensions such as basic backups are closed source and have never been in the OSS version.
Many things would have to be re-added from scratch in a fork. |
![]() |
| Core only has the "full backup". Incremental and other types are available to enterprise. I run the Core edition (with full backups) for my personal projects. |
![]() |
| CockroachDB Core has not been offered under an OSI (i.e. Open Source) license since 2019 - everything subsequently has either been under Business Source License or the Cockroach Community License. |
![]() |
| I searched github and thought this[0] was it.
> Source code in this repository is variously licensed under the Business Source License 1.1 (BSL), the CockroachDB Community License (CCL), the MIT license, BSD-style licenses, and other licenses specified in the source code. Source code in a given file is licensed under the BSL and the copyright belongs to The Cockroach Authors unless otherwise noted at the beginning of the file. Is the caveat in this part (that I didn't catch before)? "Source code in a given file is licensed under the BSL and ..." That is sucky. [0] https://github.com/cockroachdb/cockroach?tab=License-1-ov-fi... |
![]() |
| Agreed. I talked with them in the past and the pricing was far too expensive to make it worth it.
As always: “If you have to ask, you can’t afford it.” |
![]() |
| The BSL is not an OSI-approved license, so it’s certainly not “open source” by the commonly used definition.
I agree it’s a reasonable license. But it’s not an open source license. |
![]() |
| Most GNU projects require a copyright assignment. For example, GNU coreutils: "note that non trivial changes require copyright assignment to the FSF as detailed in the “Copyright Assignment” section of the Coreutils HACKING notes." (from: https://www.gnu.org/software/coreutils/coreutils).
As far as I know, this is case for most GNU projects. Linux only requires a confirmation that you wrote the patch; previous poster was mistaken about that, but they were correct about GNU. |
![]() |
| This is a trust point, though: assigning copyright to the free software foundation allows code to be relicensed under new versions of the gpl. |
![]() |
| https://www.gnu.org/licenses/gpl-3.0.en.html - section 14
Note the "or any later version" verbiage in there. If the software is licensed under "GPLv3 or any later version" - no permission is required or assignment of copyright.And so when you see things like https://directory.fsf.org/wiki/Coreutils Note also the "if you used the GPL without a version number, you can relicense it under any version" --- The "why they require a CLA" is for enforcement. https://www.gnu.org/licenses/why-assign.en.html
|
![]() |
| > No, the FSF specifically requires ownership transfer for GNU projects
No they do not. Individual GNU software projects might require it, but this choice is up to the project, not the FSF. |
![]() |
| Absolutely! They want to have standing in court so they can defend infringers, and that's materially easier to establish with copyright assignment agreements.
https://www.gnu.org/licenses/why-assign.en.html So while I agree with other commenters that a CLA is a clear indication that the entity seeking to have copyright assigned wants to reserve the right to take some kind of legal action at some point (like changing the license), it also applies in cases where the legal action is benevolent rather than malevolent (like defending the copyright). |
![]() |
| According to Wikipedia, Yugabyte (the company) has taken 290 million dollars of VC money. It's probably a safe assumption that they will follow the same path soon enough. |
![]() |
| That is very interesting. As CRDB user, I priced Spanner (had to do some estimates during load testing), and Spanner came 3 times more expensive includign our eng salary to run CRDB |
![]() |
| For a US startup I would divide annual revenue by aprox 200k for reasonable bootstrapped employee max size. So maybe 50 max? This is assuming standard software startup with most cost being employees. |
![]() |
| It was a data domiciling project so just went with sharding in good old postgres. Cockroach would have been perfect but it was going to cost something like $5k/m just to turn it on.. |
![]() |
| If what you mean by "horizontal scale of writes" is a distributed database, then there is FoundationDB, which is one of the very few databases that offers strict serializability (see https://jepsen.io/consistency). But it isn't quite comparable, because it isn't an easy-to-use shiny tool, rather a database-building toolkit (hence the name).
|
![]() |
| Not a distributed systems guy, but Spanner also offers that right? Or at least I'd assume they do considering they coordinate with actual clocks so you're naturally tied with real-time. |
![]() |
| > put it back in the open-source world
Just to clarify - FoundationDB was never open source before 2018. Binaries were available under certain conditions, but no source. |
![]() |
| Apple acquired the company in 2015 and 3 years later open-sourced the database.
(so much misinformation in this thread, this isn't hard to check) |
![]() |
| Most of those solutions are not on part with Cockroach, Cockroach is basically Spanner usable outside of Google. So global transaction with cluster world wide. |
![]() |
| Spanner is cheap in comparison depending on your storage requirements. I've seen CockroachDB quoted as 10x more, and for a product that is harder to sell to stake holders. |
![]() |
| > if you required any enterprise features
For me it was the multiple regions. It's like.. with that disabled why are we even here? Data residency is the whole point... |
![]() |
| VictoriaMetrics CTO here.
I don't understand why pure open-source license such as Apache2, MIT or BSD should be replaced with some source available license in order to increase profits from enterprise support contracts: - The license change won't force cloud companies signing the enterprise agreement with you in most cases. If they didn't want paying you before the license change, why they will change their mind after the licence change? It is better from costs and freedom perspective forking open-source version of your product and using it for free like Amazon did with Elasticsearch. - The license change leads to user base fragmentation - some of your users switch to forks run by cloud companies. Others start searching for alternative open-source products. So, you start losing users and market share after the license change. - The license change doesn't bring you new beefy enterprise contracts, since it doesn't include any incentives for your users to sign such contracts. That's why we at VictoriaMetrics aren't going to change the Apache2 license for our products. Our main goal is to provide good products to users, and to help users use these products in the most efficient way. https://docs.victoriametrics.com/goals/ |
![]() |
| > On November 18, 2024, we will eliminate our Core offering and consolidate on a single, robust CockroachDB Enterprise license
That is incredibly short notice. |
![]() |
| $10M ARR doesn't mean anything. You could still be a tiny company with terrible financials by selling your product at a loss (a startup)
It's just an arbitrary number |
![]() |
| In this case, they cancelled a product (core) and replaced it with a different product that has an additional new license (enterprise edition with a free tier)
So not just a license change |
The Core offering made this palatable, one could fallback to Core features if the relationship with Cockroach Labs degraded, which made it possible to entertain the Enterprise license since there's was a way to walk back from it. But now there's no such mitigation available. By using non-PG native features, users of the Enterprise edition are accepting to get in bed with Cockroach Labs for effectively forever (databases), a single provider that has no competition.
I think this may backfire, as it now seems imprudent to go all in on Cockroach Labs. They may be nice folks today, but who knows who will run the place in 5y when the next round of squeeze comes?
I wish them the best, they're a great team and I always liked the project and toyed with it for years, and currently am involved with a paid Enterprise license. But this change in the dynamics is really giving me pause.
Getting in bed with a single vendor for an incredibly sticky tool comes with a _lot_ of risk. It took at least 17y for Amazon to get rid of its last Oracle database: https://aws.amazon.com/blogs/aws/migration-complete-amazons-...