License Compliance for Embedded Linux Systems

Product Summary

Product Description

Option 1: Understanding FOSS and Qt Licenses

I deliver Option 1 in 2-3 workshops of 6 hours total. Of course, you get my slides and you can record the sessions.

Understanding Qt Licenses: Qt for Device Creation vs. LGPL

Why this is important
Is Qt Commercial worth €20 per device and €25,000 per year for a small project (4 developers, 1,200 devices p.a.)?

You contacted me about using Qt under LGPL-3.0 because of one or more of the following reasons:

Some companies don’t countercheck these statements and pay 5-digit or even 6-digit Qt license fees per year. They might find out later that Qt LGPL would have been perfectly fine and they could have spent their money on more important topics. If you pay good money for Qt, it should be for the right reasons - and not for the wrong ones.

What you get from me

I’ll give you a clear assessment of the legal, financial and technical ramifications of using Qt Commercial and Qt LGPL. This includes

Together we work out an adequate way how to use Qt LGPL on your products. We assess whether your products are B2B or B2C. With B2C products, you must enable users to install modified Qt versions on the product. With B2B products, you don’t. If you have a B2C product, I’ll give you several options how to install the Qt libraries on your product.

In the end, you can make an informed decision whether to use Qt Commercial or Qt LGPL.

Understanding FOSS Licenses: Permissive and Copyleft Licenses

Why this is important
Do you want to make the source code of your main application publicly available, because it links against a library under GPL?

Did you know?

What you get from me

I’ll cover the following topics in the workshop(s):

The goal is to clarify your questions about the compliance with and between FOSS licenses used in your system.

Option 2: License Compliance Check

I deliver Option 2 in 1-2 workshops of 4 hours total. Of course, you get my slides and you can record the sessions. Completion of Option 1 is a precondition for Option 2.

Why this is important

Do you want to wade through megabytes of license scans and still miss the build option pulling in a GPL library?

The multimedia library ffmpeg is used, for example, to play videos from rear-view cameras. It has an option to enable additional libraries under GPL. Some BSPs come with this option enabled, some with it disabled.

One of the world’s biggest terminal manufacturers for agricultural and construction machines provides the hardware abstraction layer (HAL) as a library. This library is under GPL. The manufacturer recommends its customers to use this library in their applications.

Customers, who use these libraries, would have to open-source their applications. They are waiting for a disaster to happen. You can minimise the risk of such disasters by using my bespoke process to check the license compliance of an embedded Linux system.

What you get from me

The compliance tool - a command-line utility - guides you through the compliance check of embedded Linux systems. When you run the tool for the first time on your embedded Linux build, it can decide for almost all packages, whether their combination with other packages (including the packages containing your proprietary applications) is legal, illegal, undesirable or yet unchecked. If illegal, you remove the problematic package or replace it with a differently licensed package with the same functionality. If undesirable, you ensure that the package is only used in the right context. If yet unchecked, you review the license and classify the package as legal, illegal or undesirable.

The compliance result typically contains less than five packages that need extra checking. Once checked, you add the classification of the new packages and licenses to the compliance database. Their classification is known for all future runs of the compliance tool. I'll teach you how to classify licenses and packages correctly and how to spot and solve problematic cases.

In a hands-on session, we’ll perform a license compliance check for one embedded Linux system. I will first introduce the compliance process to the participants. Then, the participants will apply the process to the selected Linux image – with my help. At the end of the session, you will have the following deliverables.

What I need from you

I can only review the license results and resolve license violations, if you satisfy the following premises:

Pricing

Questions & Answers

Do you guarantee the correctness and completeness of the compliance results?

No, I simply can't give you any such guarantees.

However, following my compliance process makes your risk of license violations very unlikely. More than 25 happy customers (as of October 2025) are proof to this claim. None of them was sued. None of them saw any legal action against them. None of them was found in violation of any licenses. Moreover, I have spent a lower 5-digit amount of my own money on an expert lawyer to ensure that I understand copyleft licenses and especially LGPL correctly.

Linux systems are too complex to guarantee the correctness or completeness of the compliance results. Here are three scenarios that are beyond my control.

Or, I can overlook a problematic package or license. It's just too easy.

Do you help us perform a license compliance check for further releases of our products?

Yes, I do for a fee of €1,000 per release. I help you review the compliance results for new releases of your products.

Can we use your bespoke compliance process for other products in our company?

Only with my written approval. I may charge an extra fee for this approval.

If "our company" means the same legal entity, you will most likely get my approval without paying an extra fee. If "our company" means several different legal entities, brands or business units, you might have to pay an extra fee for my approval.

Our contract will explicitly state which legal entities are allowed to use the compliance process under which terms. If you want to add more legal entities in the future, I will extend the contract accordingly.

Who are your target customers and who are not?

My target customers are manufacturers (OEMs) who sell their goods to end users. These companies are at the end of the supply chain. Typical examples are the manufacturers of harvesters, tractors, excavators, cars, packaging machines, vending machines, measurement devices, medical devices, home appliances and TVs.

The conditions stated on this page do not apply to companies that are not at the end of the supply chain. Typical examples are SoC, SoM, terminal and ECU makers as well as service companies. My terms and conditions explicitly forbid that companies use my bespoke process to do license compliance checks for their customers. The simplest way is that they send their customers to me. Of course, I am open to negotiate special terms and conditions with such companies.

Which embedded Linux build systems does the compliance tool support?

The compliance tool supports embedded Linux systems built with Yocto. It does not yet support Linux systems built with BuildRoot or based on Debian, Redhat or similar Linux distros. Let's talk about a solution if you have such a system.

Do you check license compliance for Qt desktop applications?

Yes, if they control or monitor an embedded device. No, if there is no embedded device involved.

The typical scenario looks like this. Your Qt application runs on a Windows desktop computer. It is connected with an embedded device over a network (e.g., LAN, WLAN, CAN, ModBus). The embedded device does not use Qt. It runs on a microprocessor or microcontroller with or without an operating system.

You would produce a list of third-party software (e.g., libraries) used by your Qt application. I would review this list for license issues and recommend fixes for these issues.

Who is the primary audience for the workshops?

The primary audience are the managers who are accountable for license compliance, the people doing the license compliance check and the senior technical people responsible for selecting the software used on your devices. The secondary audience are developers, who should check the license before they use third-party software from the Internet.

I recommend that at most 12 people participate in the workshops. I have found that the workshops become less interactive the bigger the audience gets. Let's talk if you want to send more than 12 people.

Who is not allowed to attend the workshops?

People from third-party companies like service companies, contractors and freelancers are not allowed in the workshops. License compliance should not be outsourced, because your company will be responsible for violations.

What are useful resources for Qt licensing?

I have written and talked quite a bit about Qt licensing: