On Wed, Dec 14, 2016 at 11:17:01PM +0100, Kevin Kofler wrote:
Indeed, almost all the containers, app bundles etc. out there are
outright illegal, because they just repackage a random distro's
packages without including the corresponding SRPMs or equivalent. The
full corresponding sources would usually be many times larger than
the container, because a lot of libraries from different source
packages are bundled.
Note that a significant feature of the Layered Image Build Service we
just deployed in Fedora (which creates Docker-style OCI bundles) is the
ability to trace back from binary to source we provide.
We'll do something similar when building Flatpaks.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader