From: =?utf-8?B?0J/Rg9C70YzRgiBPUyDQn9C+0LTQtNC10YDQttC60LA=?= <support@pult-os.ru>
To: ~alpine/devel@lists.alpinelinux.org
Subject: Notice/source pointers for five Alpine configuration packages
MIME-Version: 1.0
Date: Sat, 17 Oct 2026 14:26:15 +0600
Message-Id: <6201792203686@18c776f1-af5a-41be-9b16-d6831a118c06>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain

Hello Alpine maintainers,

We are preparing a Linux container for a PostgreSQL backup/restore
toolchain. Before registry publication, we are documenting the
applicable notices and source materials for these installed versions:

alpine-baselayout 3.7.2-r1: GPL-2.0-only
alpine-baselayout-data 3.7.2-r1: GPL-2.0-only
alpine-keys 2.6-r0: MIT
alpine-release 3.24.1-r0: MIT
krb5-conf 1.0-r2: MIT

These identifiers are APK metadata, not our own licensing conclusions.
We preserved the recipes and directory files at aports commit
4116995d8bb55441a5a0c5799a7c50aba98429b2; alpine-release is generated by
alpine-base at commit 0934530484bbcde7498e2c694c710a49616a450e. We found
no dedicated LICENSE/COPYING file in the three pinned package
directories. We do not assume that the maintainer field identifies the
copyright holder or supplies a permission notice.

Could you point us to:

1. The applicable copyright/permission notices for these versions and
any authoritative notice file intended for redistribution?
2. For alpine-baselayout/data, the source location covering generated
configuration, install/upgrade scripts and imported netbase
protocols/services files? We preserved directory inputs and verified the
netbase 6.4 files against APKBUILD SHA-512 values. Are additional
package-specific source files identified outside those
recipes/directories?
3. For alpine-keys, a project notice governing the public-key files
separately from APKBUILD, if one exists?
4. For the generated alpine-release file and krb5.conf, where is the
applicable permission/copyright notice documented? We prefer the
original project wording rather than inventing an attribution.

Exact source links:
https://github.com/alpinelinux/aports/blob/4116995d8bb55441a5a0c5799a7c50aba98429b2/main/alpine-baselayout/APKBUILD
https://github.com/alpinelinux/aports/blob/4116995d8bb55441a5a0c5799a7c50aba98429b2/main/alpine-keys/APKBUILD
https://github.com/alpinelinux/aports/blob/4116995d8bb55441a5a0c5799a7c50aba98429b2/main/krb5-conf/APKBUILD
https://github.com/alpinelinux/aports/blob/0934530484bbcde7498e2c694c710a49616a450e/main/alpine-base/APKBUILD

We are asking for factual source and licensing pointers, not a legal
opinion about our complete container. Thank you for your time.

Pult support