Overview
Explore the journey of automating containers license compliance in ONAP through this 19-minute conference talk presented by Alexander Mazuruk and Krzysztof Opasiak from Samsung R&D Institute Poland. Learn about ONAP's existing infrastructure, the initial steps towards automation, and the challenges faced in implementing container license compliance. Discover the tools considered, including Tern and ScanCode.io, and understand the specific issues related to Alpine Linux. Gain insights into handling inter-docker dependencies, establishing license policies and waivers, and integrating with Gerrit. Examine the process of generating compliance reports and absorb valuable lessons learned throughout the automation journey.
Syllabus
Intro
Disclaimer
What is ONAP?
What was already in place?
How it started?
Containers License Compliance TLDR
We need automated License Compliance now!
What was missing?
Tern
Why it didn't work out?
ScanCode.io
Alpine-related challenges
Alpine-related improvements
Inter-docker dependencies
License policies & waivers
Gerrit integration
Compliance report generation
Lesson learned
Thank you!
Taught by
Linux Foundation