Re: [new] net/zerotier-one

On Fri, Apr 7, 2023, at 07:51, A Tammy wrote:
>> https://github.com/troyjfarrell/zerotier-one-openbsd-ports
> Please attach it as a tarball here. CVS isn't necessary on the mailing
> list.

Attached.

>> Notes:
>> - The current version of ZeroTier-One is not (yet) FOSS, but uses the
>> Business Source License, so it will become FOSS in a few years.
> Is it allowed to distribute it to users as a binary/source package?

IANAL, but I believe so. From LICENSE.txt[^1], "the Licensor hereby
grants you the right to copy, modify, create derivative works,
redistribute, and make non-production use of the Licensed Work," subject
to the following restrictions until the "Change Date":
- Recipients may not "sell hosted ZeroTier services as a 'SaaS'
Product"
- Recipients may not "create Non-Open-Source Commercial Derviative
Works"
- "Certain Government Uses" are restricted

I believe that redistribution of binary packages, provided it happens
under an Open Source(tm) license ¯\(°_o)/¯, is an acceptable use.

[1]:
https://raw.githubusercontent.com/zerotier/ZeroTierOne/dev/LICENSE.txt

> If it is a daemon, it is generally a good idea for it to have its own
> user. The way I understand zerotier is that it would probably need to
> be started as root and then it would drop permissions later to its
> own user(?), someone can correct me if I am wrong. You can look at the
> headscale port for details on how to do that -
> https://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net/headscale/

You are probably right. I believe that it needs access to /dev/tapN,
which would require being started as root.

Thanks!
Troy