Gentoo Archives: gentoo-project

From: Ulrich Mueller <ulm@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Taking the signoff bait
Date: Sun, 19 Jun 2022 10:33:43
Message-Id: ulettq6x0@gentoo.org
In Reply to: Re: [gentoo-project] Taking the signoff bait (was: Gentoo Council 2022-23: Questions for Candidates: how to increase contributions) by Anna Vyalkova
1 >>>>> On Sun, 19 Jun 2022, Anna Vyalkova wrote:
2
3 > On 2022-06-18 19:35, Michael Jones wrote:
4 >> Re-evaluating your "signed off by" requirements on github, when
5 >> that's legally meaningless, and already covered by the existing
6 >> github terms of use, would also go a long way.
7 >>
8 >> I explicitly will not contribute to a project that has that
9 >> requirement.
10 >>
11 >> https://docs.github.com/en/site-policy/github-terms/github-terms-of-service#d-user-generated-content
12
13 Maybe I am missing something, but where do the GitHub ToS say that we
14 can take a contribution from a GitHub PR and distribute it outside?
15
16 > 1) We can't see if a commit comes from GitHub or somewhere else in the
17 > git history. This not only makes verification but also breaks
18 > verification tools (commit without signoff are rejected by gitolite's
19 > pre-push hook, github is just a mirror).
20
21 > 2) Gentoo has plans to move to their own GitLab instance. So binding
22 > themselves to GitHub ToS (that can be changes at any time and controlled
23 > by Miscro$oft) is stupid.
24
25 > 3) Commit author != GitHub user.
26
27 I think it's even three entities: author, committer, and GitHub user,
28 which can all be different.
29
30 > 4) **Most important point!** These ToS apply only to content hosted on
31 > GitHub! And you retain ownership only on github PRs, not the canonical
32 > repo.
33
34 > * the only thing I dislike and sabotage in Gentoo's signoff policy is
35 > that uses "legal name" instead of "real name" - change that already...
36
37 That wording went through several iterations, the last of which changed
38 it from "real name" to "legal name" [1].
39
40 IIRC, the rationale behind this change was that "real name" was deemed
41 to vague, and to account for officially registered pseudonyms.
42 For example, the German passport has an optional field "religious name
43 or pseudonym" [2].
44
45 Ulrich
46
47 [1] https://gitweb.gentoo.org/data/glep.git/commit/glep-0076.rst?id=dcc841a715dfa077258fa3f8bef5f15ee22148cb
48 [2] https://en.wikipedia.org/wiki/German_passport#Following_page

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-project] Taking the signoff bait Anna Vyalkova <cyber+gentoo@×××××.in>
Re: [gentoo-project] Taking the signoff bait Michael Jones <gentoo@×××××××.com>