Skip to content

Ship third-party notices in the browser images - #512

Merged
rgarcia merged 1 commit into
mainfrom
hypeship/third-party-notices
Nov 9, 2026
Merged

rgarcia merged 1 commit into
mainfrom
hypeship/third-party-notices

Conversation

@rgarcia

@rgarcia rgarcia commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Adds /usr/share/doc/kernel/THIRD-PARTY-NOTICES.txt to both browser images, copied in from shared/legal/.

Customers can read it without a shell, via read_file on that path or cat through exec.

What it covers:

  • Chromium: BSD-3-Clause, full component list at chrome://credits, and the two LGPL-2.0-or-later Blink files that our build modifies
  • Chromium's bundled FFmpeg: LGPL-2.1-or-later, config files modified for HEVC, source published
  • Standalone FFmpeg: GPL-3.0-or-later, unmodified, separate program, with a link to the source release
  • Ubuntu packages: pointer to /usr/share/doc/<pkg>/copyright and the archive
  • fonts-urw-base35: AGPL-3.0 with font exception, noted explicitly
  • Node.js, Envoy, Docker/containerd/runc, supervisor

Depends on: kernel/oss-source going public. The notices file points at https://github.com/kernel/oss-source and its FFmpeg release; while that repo is private the links resolve only for org members, so this should not ship until it is public.

Not in scope here: the same file needs adding to kernel-images-private, which has its own Dockerfiles. Happy to follow up with that PR once this lands so the wording settles.

@rgarcia

rgarcia commented Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Picked tnsardesai to review these related PRs (kernel/oss-source#1, #512): touched the changed code in hevc; 2 pending


1. CHROMIUM
-----------
This image runs a Chromium build: Chrome for Testing 155.0.8059.84 in the

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need to keep this version in sync

ffprobe alongside it, used by the session recorder. It is a separate program:
nothing in Kernel's software links against it.

version: n7.1.5-12-g1fdbca85aa

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same q

@rgarcia
rgarcia merged commit b5a3314 into main Nov 9, 2026
12 checks passed
@rgarcia
rgarcia deleted the hypeship/third-party-notices branch November 9, 2026 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants