On Wed, Dec 14, 2016 at 11:17:01PM +0100, Kevin Kofler wrote:
Indeed, almost all the containers, app bundles etc. out there are outright illegal, because they just repackage a random distro's packages without including the corresponding SRPMs or equivalent. The full corresponding sources would usually be many times larger than the container, because a lot of libraries from different source packages are bundled.
Note that a significant feature of the Layered Image Build Service we just deployed in Fedora (which creates Docker-style OCI bundles) is the ability to trace back from binary to source we provide.
We'll do something similar when building Flatpaks.