Terms of Service
What ReadyStack is
ReadyStack builds, tests and documents open source software. We publish two things for each release:
- A free image on Docker Hub, built from the project's upstream Community Edition source. Each release's page shows its current grade, the date it was graded and why, whether it is signed with our published key, and whether we have rebuilt it bit-for-bit with the network off. Those facts are measured, re-checked daily, and change over time.
- A ReadyStack Hermetic Build Kit for that release, free to download for any registered account, delivered as an archive file (in these terms, "the archive"). The archive does not contain the image. It is the kit to rebuild the image yourself, fully offline (vendored source and dependencies, pinned base images, the build toolchain and the build and verification scripts), together with handbooks, seed data, use-case tests, the defects we found, the release's security report and its build records.
We do not develop the underlying software. Open source software is never finished: its communities keep developing and patching it. Each release reflects one version at one point in time.
What you get
When you download an archive, you get one copy of the archive for one product release (one product and one release tag), as it is described on that release's page. Support, corrections and updates are described in the ReadyStack Agreement.
You do not get a software license. The underlying software is open source and licensed under its own terms (Apache, MIT, GPL, AGPL and others). ReadyStack does not hold or transfer any license to it; a copy of each applicable license is included in the archive.
No warranty
What we tested is documented in each release's notes, test results and defects record. We make no guarantee of functionality beyond what is documented there.
Open source software contains bugs, security vulnerabilities and untested edge cases. We record the defects we find and publish them, but we do not fix every upstream issue. You are responsible for deciding whether a release is suitable for your environment.
ReadyStack images and archives are provided "as is", without warranty of any kind, express or implied, including fitness for a particular purpose and merchantability.
No charge
ReadyStack does not charge for recipes or archives; it only asks you to sign up. Every release's pinned build recipe and its archive are free to any registered, signed-in account. Nothing is sold, and no payment is asked for any download. The corrections described in the ReadyStack Agreement apply to every archive.
Downloads and access
Sign in and press Download on a product's page; the download starts from that release's own download page. Downloads made while you are signed in appear on your account page. Each link downloads its archive once, for the time stated on it; a new link is a click away on the product's page. Download access is not transferable.
Intellectual property
- Upstream software is governed by its own licenses, included in every archive.
- Build and verification tooling: the build and verification scripts, Dockerfiles and build recipes in each archive are licensed to you under the Apache License 2.0. You may use, modify and redistribute them under that license.
- ReadyStack content: the handbooks, seed data, use-case tests, release notes and other documentation we write for an archive are licensed to you to use, copy and modify within your organization. You may not resell or republish them as a competing product.
- Published facts: the grades, signing status, rebuild results and defects we publish on readystack.dev are public; you may cite them.
Governing law
These terms are governed by the laws of the State of Utah, United States, without regard to conflict of law principles.
Contact
Questions? [email protected]