20
Has anyone heard of cpak? (piefed.world)
submitted 3 months ago by to c/linux@lemmy.ml
8 comments fedilink hide all child comments
 

From their GitHub:

cpak installs applications from OCI images while keeping package metadata in a Git repository. It provides native desktop integration, shared content-addressed layers, atomic updates and a rootless Linux sandbox from one Go binary.

It seems interesting. I've never heard of it before, but apparently Bottles packages with cpak along with flatpak. The main reason I use flatpaks are its sandboxing capabilities, so it would be cool if cpak brings new stuff to the table while matching or overpassing the sandboxing capabilities.

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 9 points 3 months ago (6 children)

I just read the license of cpak and I can't say I'm a fan.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 4 points 3 months ago* (last edited 3 months ago)

    This license provides full access to the source code, encourages public auditing and community collaboration, and imposes copyleft rules. However, because it includes a restriction on replicating the core purpose of the Product, it does not meet the Open Source Definition (OSD) by the Open Source Initiative (OSI), anyway, the point 6b ensures the license will eventually convert to an OSI-approved license.

    FPAL is best described as a source-available, copyleft, and business-protective license.

    Honestly, if any distro included this, it would be an instant red flag.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 3 months ago (1 child)

    The restriction pretty much aims at companies like Amazon that rehost an open source project. That sounds pretty fair to me

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 2 months ago

    I don't think so, this still would let them host it so long as don't have a "competing fork". I've heard of licenses like Server Side Public License (SSPL) that do you what you say. Basically, that license requires all the infrastructure around the software to be open source to. So something like AWS couldn't host the software without first open sourcing all their infrastructure.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 0 points 3 months ago

    Yup, that's simply a deal breaker. [For me].

    If it's for you, too, you could maybe even mark the post with [SOLVED] or "Update:...". If you wish. No obligation.

  • permalink
  • fedilink
  • source
  • parent