Why do not all (free / open source / LGPL) addons have install/download buttons on the marketplace?
I noticed that some addons don't have install/download buttons on their marketplace page, and some do. For example, the multi-tenant does not have a download button, the JSF UI addon has a button. The download button seems to be not available for addons that “require registration”.
However, I don't understand the logic, benefit or added value here. If you can download the i.e. multi-tenant addons from a registered Nuxeo instance and get the zip from there and deploy it to an unregistered instance, or build it from the github repo and deploy it to an unregistered Nuxeo instance, what's the point of not offering a download button on the marketplace in the first place, or what is the idea behind the registration here for such addons?
It make sense that commercial addons would not have a download button (obviously), but why do some free (=LGPL, not paid) addons not have it either? And why would a registration (not subscription) be necessary for the multi-tenant module for example, if it's free (=LGPL, not paid) anyway?
Another question that I have is in this regard: does the requirement for an addon for a “registered account” mean the same as “suscription required”, or is the account registration and using it after the trial still free?
This post is of 2014, and I am not sure if it's still valid or not: https://answers.nuxeo.com/general/q/9d511372fddb481aa1fb7d54e14b8e48/Is-it-not-possible-to-run-all-updates-without-a-nuxeo-connect-account
Florent Guillaume: “Nuxeo LTS (Long Term Support) hotfixes via Nuxeo Connect is a service we provide that gives registered users very simple updates to the latest hotfix version of Nuxeo. That takes time and resources on our part. We don't think that registering through Nuxeo Connect to get this service is that much of a hurdle (it's free).”
Note that in the quoted message from me, I specifically talk about hotfixes. Pre-packaged hotfixed that are easily applied are provided exclusively through the Nuxeo Online Services subscription for Nuxeo customers.
People are of course always free to download and compile the code themselves.
Having just browsed the forum a bit more, I think what was a bit unclear to some users (incl. me) is that "registration is free" statement… yes, sure, registration is free, but only for the trial. A trial period is not relevant for production use, therefore I think it was a bit misleading. I found that others had the same questions: https://answers.nuxeo.com/general/q/f975b4965c75452084077d644766eb32/Do-i-have-to-register-for-get-the-hotfix, https://answers.nuxeo.com/general/q/765d766a986e4a2b8a2a06bb9f6c77e2/Are-Hotfix-free Anyway, understand it now.
The download button should be available on all "public" packages. The same list of package as what you get from an unregistered server with the command
./bin/nuxeoctl mp-listall |grep -v "Registration required"
mp-install, since marketplace functionality should not be available if unregistered. I meant, just taking the package (the one under /opt/nuxeo/server/tmp/ after a download, or when building it from the git repo - if that actually builds a package and not just a 'plain' jar, not tested that) and uploading it via the regular Nuxeos Admin section manually. That works fine, i.e. for the multi-tenant package. Doesn't necessarily have to be another instance: same is the case when a client tests the Studio and registration addons during trial, then decides not to subscribe. He would still be able to use the previously downloaded addons. I think from a legal perspective, even without problems. Just want to be very clear about the licensing details to the clients upfront, before running in circles and argumentation dead-ends myself (assuming the clients are tech-savvy).
wgetand get them directly, otherwise it's a bit inconvenient. Ok, basic auth seems to work as well, so that should do it, even for automation processes, just need to put some credentials somewhere (still, there is no benefit for a registration if a user is not a subscriber anyway).
mp-installwouldn't even work), even though the addon is free itself. So the main purposes of the required registration even for LGPL addons is to get the email addresses in order to follow-up with sales processes? Understandable, but on the other hand, who doesn't want leads? It has nothing to do with free riders (there is not even an option to purchase a single addon - except for going for a $88k subscription). So anybody with a commercial interested would get a bunch of LGPL addons (I mean, the license says it already, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html), put it behind a doorway page with registration form, in order to get some leads. Who wouldn't want it? I mean, that in the commercial interest of any player in the ecosystem, not only the vendor. This argument does not convince me. The argument about quality, legitimacy IMHO does not matter to end-users too much, the same goes for any mirror servers of any Apache project. Clients care that the project/system works, they don't care about technical details, just as they don't care where any installed MySql5.x or Tomcat7.x binaries or any other widely used tech components is coming from as long as it gets the job done as contracted. If it's a trusted source with enough references, it doesn't matter on what servers the packages are hosted. Dont' get me wrong, I've nothing against commercial licensing and addons and have done commercial projects as a previous Alfresco platinum partner, and surely, vendors need to have a financial backing in order to be able to put more effort in R&D, but not making LGPL addons available or not providing the information how to install them without a subscription is just obfuscating information, it has nothing to do with commercial strategy - the latter would apply to non-LGPL/AL addons or services.
mvn packageis not obfuscation.
There are three levels of package availability: public, restricted, private. The private level is for packages with very limited ownership and visibility (specific customer, Nuxeo internal, etc.) The restricted level is for packages requiring a “registered account”, which means the same as a “paid subscription” or a “trial”.
You are confusing free and open: an addon can be open source (ie freely installable by hand) while its package not being freely downloadable (ie the additional service provided by Nuxeo). The quoted sentence from Florent Guillaume is still valid. Wether a package is public or restricted depends on the commercial strategy, the addon importance (JSF UI is public because required in many cases), the related technology (is it itself free or not), etc.
Using a registered instance to download a package, then installing that package on an unregistered instance (ie bypass the system rules) is not fair and I highly discourage such a practice: at one time, you will get in troubles. Being it with updates, hotfixes and legal issues.
Building by hand is fair and perfectly acceptable. When doing so, you know that you are in the rails, only not getting benefits from a paying service.
"I highly discourage such a practice: at one time, you will get in troubles. Being it with updates, hotfixes" -> if it's not recommended, why offer the download button for JSF UI but not for multi-tenant. It's not very clear. Users should install the JSF UI via marketplace package, not manually either.
Since I am new to Nuxeo (coming from the Alfresco-side and having moved to Nuxeo as the platform of choice), I am trying to understand the ecosystem a bit better. But I think the reasoning is a bit unclear for some of the addons. What would be the legal issue for a LGPL software? (As mentioned by Florent, it's ok to compile, and I would assume then also deploy, the code themselves). Thanks for clarification!
Update: I found an older reply in the forum of https://answers.nuxeo.com/general/q/765d766a986e4a2b8a2a06bb9f6c77e2/Are-Hotfix-free, that explains the benefits. Still I am not sure if the benefits justify the subscriptions fees for all customers (47k just to get hotfixes for one single addon. In another post I found something about 3k, but I have not idea how he got that number. Probably not relevant anymore as it is 5 years old: https://answers.nuxeo.com/general/q/765d766a986e4a2b8a2a06bb9f6c77e2/Are-Hotfix-free).