/
License compliance

License compliance

Owned by Krzysztof Opasiak
Last updated: Jun 22, 2020
3 min read

As of 19.06.2020 ONAP contains below docker images:

ONAP containers
alpine:3.6 ansible/awx_rabbitmq:3.7.4 ansible/awx_task:9.0.1 ansible/awx_web:9.0.1 busybox busybox:latest crunchydata/crunchy-postgres:centos7-10.11-4.2.1 crunchydata/crunchy-postgres:centos7-10.3-1.8.2 curlimages/curl:7.68.0 dibi/envsubst docker.elastic.co/beats/filebeat:5.5.0 docker.elastic.co/elasticsearch/elasticsearch:6.1.2 docker.io/aaionap/haproxy:1.4.0 docker.io/bitnami/elasticsearch:6.8.6-debian-9-r23 docker.io/bitnami/nginx:1.16-debian-9 docker.io/busybox:1.30 docker.io/curlimages/curl:7.69.1 docker.io/library/busybox:latest docker.io/library/consul:1.4.3 docker.io/xmartlabs/htpasswd k8s.gcr.io/etcd-amd64:3.2.24 library/mariadb:10 memcached:1.5.20 netboxcommunity/netbox:v2.5.8 nexus3.onap.org:10001/adfinissygroup/k8s-mariadb-galera-centos:v002 nexus3.onap.org:10001/apache/nifi-registry:0.5.0 nexus3.onap.org:10001/busybox nexus3.onap.org:10001/consul:1.0.6 nexus3.onap.org:10001/library/cassandra:3.11.4 nexus3.onap.org:10001/library/consul:1.7.1 nexus3.onap.org:10001/library/vault:1.3.3 nexus3.onap.org:10001/mariadb:10.1.38 nexus3.onap.org:10001/mariadb:10.3.12 nexus3.onap.org:10001/nginx:1.15-alpine nexus3.onap.org:10001/onap/aaf/aaf_agent:2.1.20 nexus3.onap.org:10001/onap/aaf/aaf_cass:2.1.23 nexus3.onap.org:10001/onap/aaf/aaf_config:2.1.23 nexus3.onap.org:10001/onap/aaf/aaf_core:2.1.23 nexus3.onap.org:10001/onap/aaf/distcenter:4.0.0 nexus3.onap.org:10001/onap/aaf/sms:4.0.2 nexus3.onap.org:10001/onap/aaf/smsquorumclient:4.0.2 nexus3.onap.org:10001/onap/aaf/testcaservice:4.0.0 nexus3.onap.org:10001/onap/aai/esr-gui:1.4.0 nexus3.onap.org:10001/onap/aai/esr-server:1.5.2 nexus3.onap.org:10001/onap/aai-graphadmin:1.6.3 nexus3.onap.org:10001/onap/aai-resources:1.6.6 nexus3.onap.org:10001/onap/aai-schema-service:1.6.9 nexus3.onap.org:10001/onap/aai-traversal:1.6.3 nexus3.onap.org:10001/onap/appc-cdt-image:1.7.2 nexus3.onap.org:10001/onap/appc-image:1.7.2 nexus3.onap.org:10001/onap/babel:1.6.2 nexus3.onap.org:10001/onap/ccsdk-ansible-server-image:0.4.4 nexus3.onap.org:10001/onap/ccsdk-apps-ms-neng:0.7.1 nexus3.onap.org:10001/onap/ccsdk-blueprintsprocessor:0.7.3 nexus3.onap.org:10001/onap/ccsdk-cds-ui-server:0.7.3 nexus3.onap.org:10001/onap/ccsdk-commandexecutor:0.7.3 nexus3.onap.org:10001/onap/ccsdk-dgbuilder-image:0.7.4 nexus3.onap.org:10001/onap/ccsdk-py-executor:0.7.3 nexus3.onap.org:10001/onap/ccsdk-sdclistener:0.7.3 nexus3.onap.org:10001/onap/clamp-backend:5.0.6 nexus3.onap.org:10001/onap/clamp-dashboard-elasticsearch:5.0.3 nexus3.onap.org:10001/onap/clamp-dashboard-kibana:5.0.3 nexus3.onap.org:10001/onap/clamp-dashboard-logstash:5.0.3 nexus3.onap.org:10001/onap/clamp-frontend:5.0.6 nexus3.onap.org:10001/onap/cli:5.0.4 nexus3.onap.org:10001/onap/data-router:1.6.2 nexus3.onap.org:10001/onap/dcae-be:1.3.4 nexus3.onap.org:10001/onap/dcae-dt:1.3.4 nexus3.onap.org:10001/onap/dcae-fe:1.3.4 nexus3.onap.org:10001/onap/dcae-tools:1.3.4 nexus3.onap.org:10001/onap/dcae-tosca-app:1.3.3 nexus3.onap.org:10001/onap/dmaap/datarouter-node:2.1.6 nexus3.onap.org:10001/onap/dmaap/datarouter-prov:2.1.6 nexus3.onap.org:10001/onap/dmaap/dbc-client:1.0.9 nexus3.onap.org:10001/onap/dmaap/dmaap-bc:2.0.4 nexus3.onap.org:10001/onap/dmaap/dmaap-mr:1.1.18 nexus3.onap.org:10001/onap/dmaap/kafka111:1.0.4 nexus3.onap.org:10001/onap/dmaap/zookeeper:6.0.3 nexus3.onap.org:10001/onap/externalapi/nbi:6.0.3 nexus3.onap.org:10001/onap/holmes/engine-management:1.2.6 nexus3.onap.org:10001/onap/holmes/rule-management:1.2.7 nexus3.onap.org:10001/onap/modeling/etsicatalog:1.0.6 nexus3.onap.org:10001/onap/model-loader:1.6.2 nexus3.onap.org:10001/onap/msb/msb_apigateway:1.2.7 nexus3.onap.org:10001/onap/msb/msb_discovery:1.2.6 nexus3.onap.org:10001/onap/multicloud/azure:1.2.4 nexus3.onap.org:10001/onap/multicloud/framework:1.5.1 nexus3.onap.org:10001/onap/multicloud/framework-artifactbroker:1.5.1 nexus3.onap.org:10001/onap/multicloud/k8s:0.6.0 nexus3.onap.org:10001/onap/multicloud/openstack-fcaps:1.5.5 nexus3.onap.org:10001/onap/multicloud/openstack-pike:1.5.5 nexus3.onap.org:10001/onap/multicloud/openstack-starlingx:1.5.5 nexus3.onap.org:10001/onap/multicloud/openstack-windriver:1.5.5 nexus3.onap.org:10001/onap/multicloud/vio:1.4.1 nexus3.onap.org:10001/onap/music/cassandra_3_11:3.0.24 nexus3.onap.org:10001/onap/music/cassandra_job:3.0.24 nexus3.onap.org:10001/onap/music/cassandra_music:3.0.0 nexus3.onap.org:10001/onap/music/music_sb:3.2.40 nexus3.onap.org:10001/onap/oom/kube2msb:1.2.6 nexus3.onap.org:10001/onap/optf-cmso-dbinit:2.2.0 nexus3.onap.org:10001/onap/optf-cmso-optimizer:2.2.0 nexus3.onap.org:10001/onap/optf-cmso-robot:2.2.0 nexus3.onap.org:10001/onap/optf-cmso-service:2.2.0 nexus3.onap.org:10001/onap/optf-cmso-ticketmgt:2.2.0 nexus3.onap.org:10001/onap/optf-cmso-topology:2.2.0 nexus3.onap.org:10001/onap/optf-has:2.0.4 nexus3.onap.org:10001/onap/optf-osdf:2.0.4 nexus3.onap.org:10001/onap/org.onap.aaf.certservice.aaf-certservice-api:1.0.0 nexus3.onap.org:10001/onap/org.onap.ccsdk.dashboard.ccsdk-app-os:1.3.2 nexus3.onap.org:10001/onap/org.onap.dcaegen2.analytics.tca-gen2.dcae-analytics-tca-web:1.0.1 nexus3.onap.org:10001/onap/org.onap.dcaegen2.collectors.hv-ves.hv-collector-main:1.4.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.collectors.ves.vescollector:1.5.4 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.cm-container:2.1.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.consul-loader-container:1.0.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.healthcheck-container:1.3.1 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.k8s-bootstrap-container:1.12.6 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.multisite-init-container:1.0.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.redis-cluster-container:1.0.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.tca-cdap-container:1.2.2 nexus3.onap.org:10001/onap/org.onap.dcaegen2.deployments.tls-init-container:2.1.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.configbinding:2.5.2 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.deployment-handler:4.3.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.inventory-api:3.4.1 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.mod.designtool-web:1.0.2 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.mod.distributorapi:1.0.1 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.mod.genprocessor-http:1.0.1 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.mod.genprocessor-job:1.0.1 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.mod.onboardingapi:2.12.1 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.mod.runtime-web:1.0.3 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.policy-handler:5.1.0 nexus3.onap.org:10001/onap/org.onap.dcaegen2.platform.servicechange-handler:1.3.2 nexus3.onap.org:10001/onap/org.onap.dcaegen2.services.prh.prh-app-server:1.5.2 nexus3.onap.org:10001/onap/policy-apex-pdp:2.3.2 nexus3.onap.org:10001/onap/policy-api:2.2.4 nexus3.onap.org:10001/onap/policy-distribution:2.3.2 nexus3.onap.org:10001/onap/policy-pap:2.2.3 nexus3.onap.org:10001/onap/policy-pdpd-cl:1.6.4 nexus3.onap.org:10001/onap/policy-pe:1.6.4 nexus3.onap.org:10001/onap/policy-xacml-pdp:2.2.2 nexus3.onap.org:10001/onap/portal-app:3.2.3 nexus3.onap.org:10001/onap/portal-db:3.2.3 nexus3.onap.org:10001/onap/portal-sdk:3.2.0 nexus3.onap.org:10001/onap/portal-wms:3.2.3 nexus3.onap.org:10001/onap/sdc-backend:1.6.6 nexus3.onap.org:10001/onap/sdc-backend-init:1.6.6 nexus3.onap.org:10001/onap/sdc-cassandra-init:1.6.6 nexus3.onap.org:10001/onap/sdc-frontend:1.6.6 nexus3.onap.org:10001/onap/sdc-onboard-backend:1.6.6 nexus3.onap.org:10001/onap/sdc-onboard-cassandra-init:1.6.6 nexus3.onap.org:10001/onap/sdc-workflow-backend:1.7.0 nexus3.onap.org:10001/onap/sdc-workflow-frontend:1.7.0 nexus3.onap.org:10001/onap/sdc-workflow-init:1.7.0 nexus3.onap.org:10001/onap/sdnc-ansible-server-image:1.8.3 nexus3.onap.org:10001/onap/sdnc-dmaap-listener-image:1.8.3 nexus3.onap.org:10001/onap/sdnc-image:1.8.3 nexus3.onap.org:10001/onap/sdnc-ueb-listener-image:1.8.3 nexus3.onap.org:10001/onap/search-data-service:1.6.2 nexus3.onap.org:10001/onap/so/api-handler-infra:1.6.3 nexus3.onap.org:10001/onap/so/base-image:1.0 nexus3.onap.org:10001/onap/so/bpmn-infra:1.6.3 nexus3.onap.org:10001/onap/so/catalog-db-adapter:1.6.3 nexus3.onap.org:10001/onap/so/nssmf-adapter:1.6.3 nexus3.onap.org:10001/onap/so/openstack-adapter:1.6.3 nexus3.onap.org:10001/onap/so/request-db-adapter:1.6.3 nexus3.onap.org:10001/onap/so/sdc-controller:1.6.3 nexus3.onap.org:10001/onap/so/sdnc-adapter:1.6.3 nexus3.onap.org:10001/onap/so/so-appc-orchestrator:1.6.0 nexus3.onap.org:10001/onap/so/so-monitoring:1.6.3 nexus3.onap.org:10001/onap/so/ve-vnfm-adapter:1.6.3 nexus3.onap.org:10001/onap/so/vfc-adapter:1.6.3 nexus3.onap.org:10001/onap/so/vnfm-adapter:1.6.3 nexus3.onap.org:10001/onap/sparky-be:1.6.2 nexus3.onap.org:10001/onap/testsuite:1.6.3 nexus3.onap.org:10001/onap/usecase-ui:3.0.4 nexus3.onap.org:10001/onap/usecase-ui-server:3.0.4 nexus3.onap.org:10001/onap/vfc/db:1.3.3 nexus3.onap.org:10001/onap/vfc/emsdriver:1.3.1 nexus3.onap.org:10001/onap/vfc/gvnfmdriver:1.3.9 nexus3.onap.org:10001/onap/vfc/jujudriver:1.3.8 nexus3.onap.org:10001/onap/vfc/multivimproxy:1.3.1 nexus3.onap.org:10001/onap/vfc/nfvo/svnfm/huawei:1.3.6 nexus3.onap.org:10001/onap/vfc/nfvo/svnfm/nokiav2:1.3.6 nexus3.onap.org:10001/onap/vfc/nslcm:1.3.9 nexus3.onap.org:10001/onap/vfc/resmanagement:1.3.1 nexus3.onap.org:10001/onap/vfc/vnflcm:1.3.9 nexus3.onap.org:10001/onap/vfc/vnfmgr:1.3.8 nexus3.onap.org:10001/onap/vfc/vnfres:1.3.7 nexus3.onap.org:10001/onap/vfc/wfengine-activiti:1.3.3 nexus3.onap.org:10001/onap/vfc/wfengine-mgrservice:1.3.3 nexus3.onap.org:10001/onap/vfc/ztesdncdriver:1.3.1 nexus3.onap.org:10001/onap/vfc/ztevnfmdriver:1.3.6 nexus3.onap.org:10001/onap/vid:6.0.4 nexus3.onap.org:10001/onap/vnfsdk/refrepo:1.5.2 nexus3.onap.org:10001/oomk8s/consul:1.0.0 nexus3.onap.org:10001/postgres:10.4-alpine nexus3.onap.org:10001/sonatype/nexus:2.14.13-01 nexus3.onap.org:10001/zookeeper:3.4 oomk8s/mariadb-client-init:3.0.0 oomk8s/readiness-check:2.2.1 oomk8s/ubuntu-init:1.0.0 primekey/ejbca-ce:6.15.2.5 rabbitmq:alpine registry.gitlab.com/orange-opensource/lfn/onap/integration/xtesting/healthcheck:latest registry.gitlab.com/orange-opensource/lfn/onap/integration/xtesting/smoke-usecases-robot:latest registry.hub.docker.com/library/mongo:4.0.8 registry.hub.docker.com/oomk8s/ubuntu-init:2.0.0



Upstream dockers in ONAP Nexus server

Below is the list of upstream images that are hosted in nexus and should be removed as soon as possible:

Upstream dockers in Nexus
nexus3.onap.org:10001/adfinissygroup/k8s-mariadb-galera-centos:v002 nexus3.onap.org:10001/apache/nifi-registry:0.5.0 nexus3.onap.org:10001/busybox nexus3.onap.org:10001/consul:1.0.6 nexus3.onap.org:10001/library/cassandra:3.11.4 nexus3.onap.org:10001/library/consul:1.7.1 nexus3.onap.org:10001/library/vault:1.3.3 nexus3.onap.org:10001/mariadb:10.1.38 nexus3.onap.org:10001/mariadb:10.3.12 nexus3.onap.org:10001/nginx:1.15-alpine nexus3.onap.org:10001/onap/babel:1.6.2 # Unsure about this one nexus3.onap.org:10001/onap/ccsdk-ansible-server-image:0.4.4 # Unsure about this one nexus3.onap.org:10001/onap/clamp-dashboard-elasticsearch:5.0.3 # Unsure what are the changes compared to upstream? nexus3.onap.org:10001/onap/clamp-dashboard-kibana:5.0.3 # Unsure what are the changes compared to upstream? nexus3.onap.org:10001/onap/clamp-dashboard-logstash:5.0.3 # Unsure what are the changes compared to upstream? nexus3.onap.org:10001/onap/dmaap/kafka111:1.0.4 # Unsure is it pure upstream upstream? nexus3.onap.org:10001/onap/dmaap/zookeeper:6.0.3 # Unsure is it pure upstream upstream? nexus3.onap.org:10001/onap/music/cassandra_3_11:3.0.24 nexus3.onap.org:10001/onap/music/cassandra_job:3.0.24 nexus3.onap.org:10001/onap/music/cassandra_music:3.0.0 nexus3.onap.org:10001/onap/portal-db:3.2.3 # Unsure what are the changes compared to upstream? nexus3.onap.org:10001/onap/search-data-service:1.6.2 # Unsure what this actually is? nexus3.onap.org:10001/onap/sparky-be:1.6.2 # Unsure what this actually is? nexus3.onap.org:10001/oomk8s/consul:1.0.0 # Unsure is it pure upstream upstream? nexus3.onap.org:10001/postgres:10.4-alpine nexus3.onap.org:10001/sonatype/nexus:2.14.13-01 nexus3.onap.org:10001/zookeeper:3.4

Definition of upstream container: Container that don't contain ONAP specific code apart from containers that are build to incorporate a suitable versions of software in case when proper upstream image is unavailable in dockerhub

Base Image statistics

Those are not exact results but only some overview. Stats took only single container from every pod. Additionally those stats includes also upstream containers.



Distro

N pods

Image size on disk

Number of packages

Licenses within base image

Distro

N pods

Image size on disk

Number of packages

Licenses within base image

Debian

47

123 MB/80 MB if slim/50 MB if minideb

97

Apache-2.0 Artistic BSD CC0-1.0 GFDL GFDL-1.2 GFDL-1.3 GPL GPL-1 GPL-2 GPL-3 LGPL LGPL-2 LGPL-2.1 LGPL-3 MPL-1.1 MPL-2.0

CentOS

50

193 MB

173

GPL v2, GPLv3, zlib, boost,

MPLv2.0, OpenLDAP, OpenSSL, Public Domain, Python, SISSL and BSD, Vim,  MIT, LGPL v2, LGPL v3,  ISC,



Ubuntu

21

118 MB

93

Apache-2.0 Artistic BSD CC0-1.0 GFDL GFDL-1.2 GFDL-1.3 GPL GPL-1 GPL-2 GPL-3 LGPL LGPL-2 LGPL-2.1 LGPL-3 MPL-1.1 MPL-2.0

Alpine

107

4.8 MB

14

MIT, GPL-2.0-only, OpenSSL, MPL-2.0, ISC, Zlib, BSD



Compliance in distros

Based on dockerhub:

debian dockerhub
View license information for the software contained in this image. As with all Docker images, these likely also contain other software which may be under other licenses (such as Bash, etc from the base distribution, along with any direct or indirect dependencies of the primary software being contained). Some additional license information which was able to be auto-detected might be found in the repo-info repository's debian/ directory. As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.

Same story with all other distros.

Proposal to move forward

  1. Organize a TSC vote on the list of licenses that can be used within ONAP containers

  2. Remove all upstream docker container from ONAP Nexus

  3. Prepare license compliance to Alpine base image & helper ONAP images prepared by the integration

  4. Switch all components to use Alpine (or anny derrievative image like onap-base-jave that is based on alpine) as a base image

  5. Make sure that every container updates compliance docummentation when it adds a new system package (tested in the gate)