This week, MinIO has claimed Nutanix Objects may be in violation of source licenses relating to Apache v2 and AGPL v3. MinIO is the creator of MinIO Object Storage, an open-source object storage platform made with community collaboration that gives users the freedom to innovate and improve. Open source licenses provide information on where the software originates and keeps it secure through transparency. It also guarantees basic freedom of use and distribution.
This week, MinIO has claimed Nutanix Objects may be in violation of source licenses relating to Apache v2 and AGPL v3. MinIO is the creator of MinIO Object Storage, an open-source object storage platform made with community collaboration that gives users the freedom to innovate and improve. Open source licenses provide information on where the software originates and keeps it secure through transparency. It also guarantees basic freedom of use and distribution.
MinIO has called out Nutanix for violating open source licenses and failing to provide IP guarantees and source identification to users. MinIO says they are calling out Nutanix to protect MinIO users and ensure they understand the rights owed by Nutanix.
Nutanix responded on their blog:
“Nutanix strives to implement unique features and innovative capabilities to delight our customers. In doing so, we recognize the value of the open source communities and take our participation and stewardship very seriously.
With respect to some recent allegations in a blog that we may have used software in possible violation of an open source license in our Objects product, please note that Nutanix stands behind our products, including any open source that we incorporate into them, and commits to indemnifying our customers against intellectual property claims arising out of the use of our products, should the need ever arise.
We will be reaching out to engage with the blog’s author promptly and will continue to update the community here.”
MinIO has stated on their blogsite, Nutanix Objects is built around MinIO object storage and has been distributing MinIO since 2018 as part of their software stack, but has not disclosed it to its users. MinIO further states Nutanix has been in continued violation of Apache v2 and believes they may also be in violation of the GNU AGPL v3 versions of MinIO.
According to MinIO, after failing to resolve the license compliance issues with Nutanix, they “have informed Nutanix that we are terminating and revoking any license or sublicense under Apache v2 and the AGPL v3 in accordance with the terms of those licenses.” MinIO has requested that Nutanix stop copying and redistribution of any forked software where they have failed to convey MinIO’s original license headers and the text of the license, as well as the included patent and copyright licenses, to its customers.
Nutanix Objects customers, according to MinIO, may encounter legal and security risks as a consequence of license violations. MinIO offers details of how they discovered the violations in the MinIO Blog.
There should be more details coming out from both Nutanix and MinIO. Stay tuned.
Engage with StorageReview
Newsletter | YouTube | Podcast iTunes/Spotify | Instagram | Twitter | Facebook | RSS Feed