Skip to Main Content
Talk Intermediate

Licensing Compliance Considerations in Containerization

Proposal status is Rejected
Session Description

Containers have revolutionized modern application development and deployment. However, they significantly alter the scale of compliance obligations.

In the traditional method of software distribution, a developer or distributor can more easily track which upstream projects form a part of the software package distributed by them to third-parties. These could be libraries, executables or other dependencies, as well as source code created by others such as contributors and upstream projects.

Containers make application distribution and deployment easier, but they also increase compliance burden as every component included in every layer of the container image is distributed to end-users as a part of the containerized application. Therefore, licensing requirements of every component in every layer must be complied with.

In this talk, I'll discuss about common compliance obligations; complexities created by layers in container images such as when a layer removes a software component that was present in a previous layer; and use of open-source tooling for license compliance.

Session Categories

FOSS

Speakers

Sukarn Maini
Sukarn Maini Partner | LegaliTech

Sukarn has been practising technology law since 2013. In that time, he has advised clients on compliance with data protection laws; designed and conducted trainings on open source compliance, data protection compliance and digital security issues; conducted compliance audits; drafted a wide range of technology-related legal documents including policies, agreements, terms of service, privacy policies, legal notices, internal compliance documents, and more. He has researched and written reports on issues related to free and open source software, software patents, intermediary liability, data protection, over-the-top services, digital security, encryption, right to privacy, freedom of speech, online harassment, and network neutrality. He was a part of the case in which the Supreme Court of India passed a Right to Privacy judgment in 2017.

In his spare time, Sukarn likes to tinker with technology products, explore self-hosting projects, and manage a custom atomic OS for personal use.