From f8800f9d5e1e4d0408db5937062bb5d2b49084e7 Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Mon, 19 Dec 2016 17:52:26 +1100 Subject: [PATCH] descriptor: add a license for each descriptor Currently the media type method of saying that one layer is distributable or not doesn't have enough detail for practical usage. In particular, it is still not clear what the license of a layer is (there is a wide variety of licenses that allow distribution but have other restrictions). This will cause many issues with distributions attempting to package images without being able to verify that the image author did actually intend for layer XYZ to be under license ABC. Signed-off-by: Aleksa Sarai --- descriptor.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/descriptor.md b/descriptor.md index 659d5a54a..b80e76451 100644 --- a/descriptor.md +++ b/descriptor.md @@ -40,6 +40,14 @@ The following fields contain the primary properties that constitute a Descriptor Each entry MUST conform to [RFC 3986][rfc3986]. Entries SHOULD use the `http` and `https` schemes, as defined in [RFC 7230][rfc7230-s2.7]. +- **`license`** *string* + + This OPTIONAL property specifies the license that convers the referenced content. + This property MUST conform to [RFC 3986][rfc3986]. + Values SHOULD be one of the following: + 1. The `http` and `https` schemes, as defined in [RFC 7230][rfc7230-s2.7]; or + 2. Magnet links to licenses, as defined in [the LibreJS manual § 3.2.2.1][librejs-s3]. + ### Reserved The following field keys are reserved and MUST NOT be used by other specifications. @@ -133,3 +141,4 @@ In the following example, the descriptor indicates that the referenced manifest [rfc3986]: https://tools.ietf.org/html/rfc3986 [rfc7230-s2.7]: https://tools.ietf.org/html/rfc7230#section-2.7 +[librejs-s3]: https://www.gnu.org/software/librejs/free-your-javascript.html#step3