Why not make Cloudron fully open source again?
-
Reference the above and thinking out loud; I'm thinking to turn our efforts on the whole Brandlight WP/Woo stack, and probably wider peripheral development & maintenance business, into a Foundation.
Mostly for simplicity and arguments' sake, team, users & contributors become beneficiaries. Better trust for what happens with income & expenses.
I'm sure there's other advantages I need to research too but mostly a deceleration to the world that the work is for the quality of the products and no-one's looking for a quick-flip or windfall, just sustainable satisfaction and protection to keep on evolving.
Web Design https://www.evergreen.je
Development https://brandlight.org
Life https://marcusquinn.com -
Reference the above and thinking out loud; I'm thinking to turn our efforts on the whole Brandlight WP/Woo stack, and probably wider peripheral development & maintenance business, into a Foundation.
Mostly for simplicity and arguments' sake, team, users & contributors become beneficiaries. Better trust for what happens with income & expenses.
I'm sure there's other advantages I need to research too but mostly a deceleration to the world that the work is for the quality of the products and no-one's looking for a quick-flip or windfall, just sustainable satisfaction and protection to keep on evolving.
-
@marcusquinn Like a .coop too.
@robi Maybe, I don't know much about either - but living in Jersey, I know Trusts and Foundations are in many ways big business as much as Companies.
-
Thanks for your elaborate post, we will answer in more detail, but till that, maybe the reversed question could also be asked to add more context your question: What are the hoped for benefits for users to have Cloudron under some open source license?
Please note that the code as such is source available, so there is no benefit from an introspection and code verification point of view at least.The meeting with Cloudron enthusisats we had on Workadventure and reading the following article by ERP Next developers made me remember about this thread.
When this discussion started back in July 2020, nebulon said "we will answer in more details", but since then, we haven't heard from him and girish directly on whether Cloudron could become fully open source again.
@nebulon @girish With the time passed and the discussions, is it a question you feel ready to answer?
-
I can't answer for Cloudron but if it were me, to go FOSS I'd want to split the functionality to a core FOSS package and commercial license for add-ons and support to protect the business IP.
Similar to Freescout & EspoCRM, plus the standard CLA that's now common with FOSS.
With that in mind, I don't know that gains would be quite what people would be hoping for since it's already source-available and any would-be contributor can already get involved with a free install.
I can understand the ideology, but in practice, for me, the experience, enthusiasm and renumeration of the creators is more important to me for security of continuity.
I'm sure the feature requests will eventually plateau, and the community supplement many more apps, at which time I guess that would afford more headspace for this.
In the meantime, it's the coming features and apps that have most value to me, so I guess anything distracting from that is going to be an intermittent long range conversation.
Sorry, I know you addressed the comment directly but I guess there's also other interests here that don't have this at the top of the wishlist still.
Web Design https://www.evergreen.je
Development https://brandlight.org
Life https://marcusquinn.com -
I can't answer for Cloudron but if it were me, to go FOSS I'd want to split the functionality to a core FOSS package and commercial license for add-ons and support to protect the business IP.
Similar to Freescout & EspoCRM, plus the standard CLA that's now common with FOSS.
With that in mind, I don't know that gains would be quite what people would be hoping for since it's already source-available and any would-be contributor can already get involved with a free install.
I can understand the ideology, but in practice, for me, the experience, enthusiasm and renumeration of the creators is more important to me for security of continuity.
I'm sure the feature requests will eventually plateau, and the community supplement many more apps, at which time I guess that would afford more headspace for this.
In the meantime, it's the coming features and apps that have most value to me, so I guess anything distracting from that is going to be an intermittent long range conversation.
Sorry, I know you addressed the comment directly but I guess there's also other interests here that don't have this at the top of the wishlist still.
@marcusquinn said in Why not make Cloudron fully open source again?:
I can understand the ideology, but in practice, for me, the experience, enthusiasm and renumeration of the creators is more important to me for security of continuity.
I live and breathe open-source, but this right here is the most important for me in all projects I contribute to (longevity).
-
@nebulon @girish
Just thinking out loud here but have you considered the consequences of MongoDB‘s license (SSPL = Server Side Public License) for apps on a Cloudron yet? I came across it at my work recently and it’s a quite drastic „viral“ copyleft license:- Offering the Program as a Service.
If you make the functionality of the Program or a modified version available to third parties as a service, you must make the Service Source Code available via network download to everyone at no charge, under the terms of this License. Making the functionality of the Program or modified version available to third parties as a service includes, without limitation, enabling third parties to interact with the functionality of the Program or modified version remotely through a computer network, offering a service the value of which entirely or primarily derives from the value of the Program or modified version, or offering a service that accomplishes for users the primary purpose of the Program or modified version.
“Service Source Code” means the Corresponding Source for the Program or the modified version, and the Corresponding Source for all programs that you use to make the Program or modified version available as a service, including, without limitation, management software, user interfaces, application program interfaces, automation software, monitoring software, backup software, storage software and hosting software, all such that a user could run an instance of the service using the Service Source Code you make available.
So I think it does not affect the Cloudron source code but potentially the source code on all apps using MongoDB.
Overview: https://www.percona.com/blog/2020/06/16/why-is-mongodbs-sspl-bad-for-you/
-
@nebulon @girish
Just thinking out loud here but have you considered the consequences of MongoDB‘s license (SSPL = Server Side Public License) for apps on a Cloudron yet? I came across it at my work recently and it’s a quite drastic „viral“ copyleft license:- Offering the Program as a Service.
If you make the functionality of the Program or a modified version available to third parties as a service, you must make the Service Source Code available via network download to everyone at no charge, under the terms of this License. Making the functionality of the Program or modified version available to third parties as a service includes, without limitation, enabling third parties to interact with the functionality of the Program or modified version remotely through a computer network, offering a service the value of which entirely or primarily derives from the value of the Program or modified version, or offering a service that accomplishes for users the primary purpose of the Program or modified version.
“Service Source Code” means the Corresponding Source for the Program or the modified version, and the Corresponding Source for all programs that you use to make the Program or modified version available as a service, including, without limitation, management software, user interfaces, application program interfaces, automation software, monitoring software, backup software, storage software and hosting software, all such that a user could run an instance of the service using the Service Source Code you make available.
So I think it does not affect the Cloudron source code but potentially the source code on all apps using MongoDB.
Overview: https://www.percona.com/blog/2020/06/16/why-is-mongodbs-sspl-bad-for-you/
@necrevistonnezr said in Why not make Cloudron fully open source again?:
So I think it does not affect the Cloudron source code but potentially the source code on all apps using MongoDB.
That is not the case. The SSPL provision in question only applies when you sell Mongo itself as a service. Key phrase in you citation :
offering a service the value of which entirely or primarily derives from the value of the Program or modified version
The point is to prevent Cloud service providers like AWS & such to sell managed versions of Mongo, with their own modifications & optimizations, without contributing back to the upstream Mongo.
-
@nebulon @girish
Just thinking out loud here but have you considered the consequences of MongoDB‘s license (SSPL = Server Side Public License) for apps on a Cloudron yet? I came across it at my work recently and it’s a quite drastic „viral“ copyleft license:- Offering the Program as a Service.
If you make the functionality of the Program or a modified version available to third parties as a service, you must make the Service Source Code available via network download to everyone at no charge, under the terms of this License. Making the functionality of the Program or modified version available to third parties as a service includes, without limitation, enabling third parties to interact with the functionality of the Program or modified version remotely through a computer network, offering a service the value of which entirely or primarily derives from the value of the Program or modified version, or offering a service that accomplishes for users the primary purpose of the Program or modified version.
“Service Source Code” means the Corresponding Source for the Program or the modified version, and the Corresponding Source for all programs that you use to make the Program or modified version available as a service, including, without limitation, management software, user interfaces, application program interfaces, automation software, monitoring software, backup software, storage software and hosting software, all such that a user could run an instance of the service using the Service Source Code you make available.
So I think it does not affect the Cloudron source code but potentially the source code on all apps using MongoDB.
Overview: https://www.percona.com/blog/2020/06/16/why-is-mongodbs-sspl-bad-for-you/
@necrevistonnezr Very interesting, thanks for sharing! I like to think I understand things given enough reading, but it does seem to be one minefield of cost and IP claims risk.
-
@necrevistonnezr said in Why not make Cloudron fully open source again?:
So I think it does not affect the Cloudron source code but potentially the source code on all apps using MongoDB.
That is not the case. The SSPL provision in question only applies when you sell Mongo itself as a service. Key phrase in you citation :
offering a service the value of which entirely or primarily derives from the value of the Program or modified version
The point is to prevent Cloud service providers like AWS & such to sell managed versions of Mongo, with their own modifications & optimizations, without contributing back to the upstream Mongo.
@mehdi Also interesting, I'm not sure I'd trust Amazon's commentary on anything but I kinda feel Percona's seems well intended.
Given most SaaS are just hosted CRUD apps, it would seem to me legit Mongo could slide into your Inbox with some demands if they chose to?
-
@necrevistonnezr said in Why not make Cloudron fully open source again?:
So I think it does not affect the Cloudron source code but potentially the source code on all apps using MongoDB.
That is not the case. The SSPL provision in question only applies when you sell Mongo itself as a service. Key phrase in you citation :
offering a service the value of which entirely or primarily derives from the value of the Program or modified version
The point is to prevent Cloud service providers like AWS & such to sell managed versions of Mongo, with their own modifications & optimizations, without contributing back to the upstream Mongo.
@mehdi
Nope, Sec. 13 of the license does contain „selling“ a service, it speaks of „make the functionality of the Program (…) available to third parties“.
If you provide access to a MongoDB instance - e.g. you host an app that others can interact with - and that uses MongoDB, you’re in.And the definition of „Service Source Code“ - the one you have to publish - is extremely broad.
The same applies to Elastic / Kabana by the way, they switched to SSPL as well (they also use Elastic V2 license but that’s worse).
-
@mehdi
Nope, Sec. 13 of the license does contain „selling“ a service, it speaks of „make the functionality of the Program (…) available to third parties“.
If you provide access to a MongoDB instance - e.g. you host an app that others can interact with - and that uses MongoDB, you’re in.And the definition of „Service Source Code“ - the one you have to publish - is extremely broad.
The same applies to Elastic / Kabana by the way, they switched to SSPL as well (they also use Elastic V2 license but that’s worse).
@necrevistonnezr Correct me if I'm misunderstanding this but is this what they are saying?
- If you use MongoDB in your XaaS, you have to make all your code available AGPL or buy a MongoDB licence to keep your code private.
- If you use a MongoDB SaaS you can legit ask that company to give you a copy of all code necessary to run your own instance.
Is that what it says?
To me that sounds good for consumers, and bad for close-source SaaS businesses or open-source ones that are less obligatory than AGPL?
I'm in the "who gives a monkeys about the code, the business is the people who know how to use it" camp - but then I doubt that's compatible with venture capital aspirations to own stuff - but then I've not seen anything VC backed that couldn't have been made cheaper and as successful other ways.
-
@mehdi
Nope, Sec. 13 of the license does contain „selling“ a service, it speaks of „make the functionality of the Program (…) available to third parties“.
If you provide access to a MongoDB instance - e.g. you host an app that others can interact with - and that uses MongoDB, you’re in.And the definition of „Service Source Code“ - the one you have to publish - is extremely broad.
The same applies to Elastic / Kabana by the way, they switched to SSPL as well (they also use Elastic V2 license but that’s worse).
@necrevistonnezr said in Why not make Cloudron fully open source again?:
make the functionality of the Program (…) available to third parties
This means directly. When you host an app that uses MongoDB in the back-end, you are making the app itself available, not mongodb, so no, it does not apply.
CF this citation from Mongo's own FAQ about SSPL:
Does section 13 of the SSPL apply if I’m offering MongoDB as a service for internal-only use?
No. We do not consider providing MongoDB as a service internally or to subsidiary companies to be making it available to a third party.
Or also :
What will happen if someone in the community is currently building something on MongoDB Community Server?
There will be no impact to anyone in the community building an application using MongoDB Community Server unless it is a publicly available MongoDB as a service. The copyleft condition of Section 13 of the SSPL does not apply to companies building other applications or a MongoDB as a service offering for internal-only use.
Source https://www.mongodb.com/licensing/server-side-public-license/faq
-
@necrevistonnezr said in Why not make Cloudron fully open source again?:
make the functionality of the Program (…) available to third parties
This means directly. When you host an app that uses MongoDB in the back-end, you are making the app itself available, not mongodb, so no, it does not apply.
CF this citation from Mongo's own FAQ about SSPL:
Does section 13 of the SSPL apply if I’m offering MongoDB as a service for internal-only use?
No. We do not consider providing MongoDB as a service internally or to subsidiary companies to be making it available to a third party.
Or also :
What will happen if someone in the community is currently building something on MongoDB Community Server?
There will be no impact to anyone in the community building an application using MongoDB Community Server unless it is a publicly available MongoDB as a service. The copyleft condition of Section 13 of the SSPL does not apply to companies building other applications or a MongoDB as a service offering for internal-only use.
Source https://www.mongodb.com/licensing/server-side-public-license/faq
@mehdi
The FAQ is not binding in any way. Only the license text is binding and (purposefully) vague (in order to create uncertainty and thus motivate companies to license).
As a lawyer, I would not recommend to built a business on the mere hope that implementing MongoDB code is conforming to the License Agreement. -
This is very interesting and relevant to this discussion:
https://autonomic.zone/blog/co-op-cloud/
Basically, a UK based worker co-op digital agency who used to use Cloudron no longer do so and have now started yet another project to fulfil very similar goals called Co-op Cloud.
This is primarily because Cloudron is no longer open source.
I really love their project and wish them well and will do all I can to support them, but I can't help also feeling a bit sad that it needs to exist at all.
I reckon if Cloudron had remained open source their energy could been usefully put into helping to improving Cloudron rather than starting another project.
-
This is very interesting and relevant to this discussion:
https://autonomic.zone/blog/co-op-cloud/
Basically, a UK based worker co-op digital agency who used to use Cloudron no longer do so and have now started yet another project to fulfil very similar goals called Co-op Cloud.
This is primarily because Cloudron is no longer open source.
I really love their project and wish them well and will do all I can to support them, but I can't help also feeling a bit sad that it needs to exist at all.
I reckon if Cloudron had remained open source their energy could been usefully put into helping to improving Cloudron rather than starting another project.
@jdaviescoates said in Why not make Cloudron fully open source again?:
Co-op Cloud
It's an interesting, but also really quite different approach. I like cloudron because it's so "hands off". Their system really just seems to be a deployment utility for docker swarm along with a standardised way of deployment.
-
This is very interesting and relevant to this discussion:
https://autonomic.zone/blog/co-op-cloud/
Basically, a UK based worker co-op digital agency who used to use Cloudron no longer do so and have now started yet another project to fulfil very similar goals called Co-op Cloud.
This is primarily because Cloudron is no longer open source.
I really love their project and wish them well and will do all I can to support them, but I can't help also feeling a bit sad that it needs to exist at all.
I reckon if Cloudron had remained open source their energy could been usefully put into helping to improving Cloudron rather than starting another project.
@jdaviescoates I like that they are still using Cloudron. It's interesting to me that their user-initiated installation all takes place on and from the local machine, not the server. That actually worries me because if my laptop dies, and I haven't made that most recent backup, what happens to my server setup? I like that Cloudron can do its work on the server. Of course, this point has not alot to do with their reason (morr libre) for trying to move away from Cloudron. I just thought I'd check out the blog and the service since you mentioned it. Seems easier to use than caprover, albeit with far fewer ready-to-go apps.
-
Thanks for your elaborate post, we will answer in more detail, but till that, maybe the reversed question could also be asked to add more context your question: What are the hoped for benefits for users to have Cloudron under some open source license?
Please note that the code as such is source available, so there is no benefit from an introspection and code verification point of view at least.@nebulon I have been following this conversation and testing Cloudron for over a year. I would like to see it fully open source for the same reason that Wordpress and Joomla CMS tools are fully open source: more people will use it and create a larger ecosystem that floats all boats. I for one would like to use Cloudron white-labeled on my own servers for hosting CMS websites and email for small businesses. Cloudron, as easy as it is, is still way too complex for the average small business owner or even their web guys. I host several hundred sites for small businesses and they generally "have a web guy" or an agency that they pay to "handle the website and email". Usually there is one person in a small company or organization who might want to login to Wordpress to post updates but beyond that it's too technical. Even maintaining plugin updates and backups are "handled by our web guy" from their perspective but they usually fall behind and eventually get hacked. So my goal is to build a better tool for web guys that have lots of small business hosting clients like myself. But at the moment I don't see a path forward for fully running Cloudron on my own servers for "web guys" and small agencies, so I'm hesitant to pursue it and I'm exploring alternatives, but it is very close to what I would like to provide if I can find a way to make it work.
-
@nebulon I have been following this conversation and testing Cloudron for over a year. I would like to see it fully open source for the same reason that Wordpress and Joomla CMS tools are fully open source: more people will use it and create a larger ecosystem that floats all boats. I for one would like to use Cloudron white-labeled on my own servers for hosting CMS websites and email for small businesses. Cloudron, as easy as it is, is still way too complex for the average small business owner or even their web guys. I host several hundred sites for small businesses and they generally "have a web guy" or an agency that they pay to "handle the website and email". Usually there is one person in a small company or organization who might want to login to Wordpress to post updates but beyond that it's too technical. Even maintaining plugin updates and backups are "handled by our web guy" from their perspective but they usually fall behind and eventually get hacked. So my goal is to build a better tool for web guys that have lots of small business hosting clients like myself. But at the moment I don't see a path forward for fully running Cloudron on my own servers for "web guys" and small agencies, so I'm hesitant to pursue it and I'm exploring alternatives, but it is very close to what I would like to provide if I can find a way to make it work.
@danboarder FWIW I've been in the web business 20 years, and probably used every server control panel and managed/wordpress hosting, and none compare to the ease and value of Cloudron - for this web guy at least.
I don't know why the source code licence would stop you doing anything you want.
It sounds to me like you have the same options we all went through to end up here and happier.
I'm happy to recommend, and think you'll find Cloudron very time-liberating - but I can't see why the licence model would stop you using it?
Every action has a reaction, and every choice has an opportunity cost.
I guess your options are things like host server control panels like Plesk, managed services like Cloudways. Best I can say is I've been through those and time and gotchyas with those brought me here.
Personally, life experience tells me there's more than enough to do in business, if you have something that solves 90%+ of one area, you've probably got other areas that the freed up time would help you to get to 90%+ solutions in those other areas sooner than holding out for 100% solutions every time.
Don't know if that helps but then I didn't quite get the relationship between a common use-case and what that has to do with the licence model.
Maybe worth considering that being mass-market isn't always a good thing? Wordpress & Joomla for me are 90% wading through poor plugins, themes and bullshit marketing to find the small percent of things that are actually good. Focus trumps spray & pray every time in my world.
-
@jdaviescoates, thanks for the shout-out. I'd been meaning to hop over here and let people know about Co-op Cloud, but you beat me to it!
(Writing here in my personal capacity as a Co-op Cloud hacker, not speaking for Autonomic or for the project)
I'm personally really grateful that Cloudron exists, and the Cloudron team has been super-supportive to Autonomic over the years. Again, not speaking for the coöp, but I don't think we're fixin' to stop using Cloudron completely
You're absolutely right that the licence change was a huge factor in motivating me to help make Co-op Cloud, though – I'm proud that Autonomic had otherwise strictly avoided using proprietary software for our own infrastructure, and I share your sadness that we're maybe reinventing a wheel when there's such a great option available already
That said, it's totally Cloudron's prerogative to re-license, and I wish them every continued success with the closed model 
@fbartels, I think you're absolutely right that Cloudron is intended for a different group of people than Co-op Cloud is: I think Cloudron will continue to be a better "hands off" option, especially for people who don't know or don't like the command-line
To me, the main exciting things about Co-op Cloud are being able to keep your configuration in version control, using
docker-compose(i.e. multi-service) format instead ofDockerfileformat to package apps, and the licence. I guess, as @marcusquinn is saying, that there'll be many people who'll be more interested in the ease-of-use and automation of Cloudron, than that stuff.@fbartels I'd also agree with you about what Co-op Cloud is:
a deployment utility for docker swarm along with a standardised way of deployment.
I'd just add that, as well as those two things, it's a collection of 30+ applications packaged using that format
https://docs.cloud.autonomic.zone/apps/Lastly, @scooke, that's a really good point about where the data is stored:
It's interesting to me that their user-initiated installation all takes place on and from the local machine, not the server. That actually worries me because if my laptop dies, and I haven't made that most recent backup, what happens to my server setup?
Co-op Cloud has a (so-far-undocumented) feature to mitigate this: you can store the
~/.abra/servers/directory which contains app definitions in version control, or even symlink to folders in different repositories, if you have maintain different sets of apps with different servers with different teams. I use this myself and it works great, with minimal risk of losing work if my computer blows up.A next step would be to auto-deploy the apps based on changes to repositories, which is something I'd like to add in time for the beta.
One other alternative (also not yet documented), which I'm also using on one project, is that you can install and run Co-op Cloud on the VPS you're managing – in which case the app definitions live on the server just as you're saying.
Caprover is definitely pretty similar: I'd started a comparison between it and Co-op Cloud but it doesn't look like it's made it into the docs yet. Watch this space!
