Free and Open Source Software (FOSS) has become the foundation of many modern products. The open development model, the ability to easily adapt software to one’s own needs and the ease with which components can be reused are certainly the main arguments for using FOSS. In addition, the FOSS licensing model grants permission to anyone to freely analyze, use, modify, and distribute the software. In return, only very liberal licensing requirements must be met. These vary depending on the license, but at a minimum include the distribution of the license text and copyright notices. More restrictive licenses also require the distribution of the corresponding source code and, in some cases, the ability to install modified open-source components. The latter may conflict with product requirements, such as cybersecurity. However, there are common and proven approaches to address this, such as the so called "send-in solution". Some licenses also require the modification of contractual documents, for example, to grant certain permissions. It is therefore very important to establish the appropriate processes within the company and to rely on proven standards throughout the supply chain as well. Experience shows that complying with licensing requirements is straightforward if they are taken into account from the very beginning of a project. So, rather than being viewed as a barrier, license compliance can serve as an enabler for transparent software supply chains, sustainable product development and trusted customer relationships. This presentation provides an overview of how to handle FOSS licensing in industrial products. Using the GPL and LGPL licenses as examples, practical case studies will demonstrate which obligations must be fulfilled and how these can be reconciled with product requirements.

Short Bio:

Jan Altenberg has more than 20 years of experience in developing and maintaining Embedded Linux systems. Since October 2021 Jan works as Senior Open Source Consultant and Embedded Systems Integrator at the Open Source Automation Development Lab (OSADL) eG and since 2024, he also serves on the OSADL board of directors. He is a frequent speaker on several conferences. He has been awarded with the "best speaker award" at the ESE Congress in Sindelfingen (Germany) several times.