License Check issue on 6.6.0 about inspec HOT 12 OPEN

from inspec.

I was running Inspec since version 3 and never require a license and now starting version 6 a license server will be needed even though is still open source version? Also, even if you have a license provided, why would i need to go to the internet or set up an external component like a local license server. This can be an overkill configuration for users who just have some profiles locally and want to execute locally inspec.

from inspec.

Looks like a license key is required even for using this great open source tool in other open-source projects? wow!

from inspec.

This is sad news for the community.

from inspec.

@lmayorga1980
Could you provide us the stack-trace?
Additionally, are you running in an air gapped environment?

from inspec.

Chef InSpec 6 does require communication with a license server to perform any scan, whether local or remote. If you are running offline - without network communication - you will need to run a local license server and connect to that. For further details, please see the troubleshooting entry, https://docs.chef.io/inspec/troubleshooting/#unable-to-connect-to-the-licensing-server-inspec-requires-server-communication-to-operate

from inspec.

Since InSpec 4 (2019), InSpec has been under a dual license: the Apache v2 license applies to distribution of the source code, but the Chef EULA applies to the usage of the software - including commercial usage, and limiting most personal usage. When you execute InSpec since version 4 you must agree to these dual license terms using the license acceptance mechanisms. However, in InSpec 4 and 5, there was no enforcement of the usage aspect of the licensing system.

Beginning in InSpec 6, we at Progress Chef are starting to enforce tracking of the usage of the license, so that we can better guide our resources in future development of InSpec. This provides better service to our customers and allows us to continue to bring new features to the wider community.

from inspec.

License tiers
We’ve updated the Chef End User License Agreement (EULA). The terms of the EULA are the same as they were before, but we’ve created three license tiers: Free, Trial, and Commercial.

The Free tier allows personal/non-commercial users to scan 10 targets for an unlimited period of time. The Trial tier allows trial users to scan unlimited targets for 30 days. The Commercial tier gives users the features and benefits that come with the subscription they’ve purchased.

Users who would like to try Chef InSpec 6 can request a free or trial license, which comes with product limitations.

See our licensing documentation or contact Chef Support for more information.

Could you explain how you define a "target"? Do you mean inspec exe -t? Does this mean I can only execute inspec exe -t 10 times in parallel with a free licence?

from inspec.

Please find the definition of target here :

Q: What is a target?
A target is an instance of infrastructure, software, configuration, cloud accounts, container hosts or any other technical resource acting as the compliance target of one or more Chef InSpec profiles you use. Each target can access a resource with its credentials and locations.

https://www.chef.io/licensing-tiers-faq

You are limited to 10 different targets (inspec exec -t ) with the free-tier license

from inspec.

@lmayorga1980 Could you provide us the stack-trace? Additionally, are you running in an air gapped environment?

Is this possible without internet connection?

from inspec.

@lmayorga1980 Could you provide us the stack-trace? Additionally, are you running in an air gapped environment?

Is this possible without internet connection?

Generally, people will require an internet connection to use InSpec 6.

InSpec 6 requires a network connection to a license server. For most people, that is an internet connection to the Progress Chef global license service. For customers behind an air gap (disconnected from the Internet), Progress Chef offers a standalone private license server.

from inspec.

Looks like a license key is required even for using this great open source tool in other open-source projects? wow!

Yeah, very strange. Goss & Ansible FTW.

from inspec.