Include license information in release tarballs

.changelog/unreleased/miscellaneous/945-release-include-license.md

@@ -0,0 +1,2 @@
+- Include license information in release binary tarballs.
+  ([#945](https://github.com/anoma/namada/pull/945))

.github/workflows/release.yml

@@ -72,6 +72,9 @@ jobs:
             ~/.cargo/git
           key: ${{ runner.os }}-namada-release-${{ matrix.namada_cache_version }}-${{ hashFiles('**/Cargo.lock') }}
           restore-keys: ${{ runner.os }}-namada-release-${{ matrix.namada_cache_version }}
+      - name: Install cargo-about
+        run: |
+          cargo install --version 0.5.2 cargo-about
       - name: Start sccache server
         run: sccache --start-server
       - name: ${{ matrix.make.name }}

about.hbs

@@ -0,0 +1,22 @@
+Third Party Licenses
+
+Overview of licenses:
+
+{{#each overview}}
+{{{name}}} ({{count}})
+{{/each}}
+
+All license text:
+
+{{#each licenses}}
+{{{name}}}
+
+Used by:
+
+{{#each used_by}}
+{{crate.name}} {{crate.version}}
+<{{#if crate.repository}}{{crate.repository}}{{else}}https://crates.io/crates/{{crate.name}}{{/if}}>
+{{/each}}
+
+{{{text}}}
+{{/each}}

about.toml

@@ -0,0 +1,17 @@
+accepted = [
+    "MIT",
+    "0BSD",
+    "ISC",
+    "Unlicense",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "CC0-1.0",
+    "MPL-2.0",
+    "GPL-3.0",
+    "OSL-3.0",
+    "OpenSSL",
+    "Unicode-DFS-2016",
+    "Apache-2.0 WITH LLVM-exception",
+    "Apache-2.0",
+    "NOASSERTION",
+]

scripts/make-package.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 
 # Make a release archive from built Namada binaries and dylib(s)
+# depends on cargo-about 0.5.2
 
 set -e
 
@@ -14,5 +15,7 @@ cd target/release && \
 MM_TOKEN_EXCH=$(find . -maxdepth 1 -name 'libmm_token_exch.so' -or -name 'libmm_token_exch.dll' -or -name 'libmm_token_exch.dylib') && \
 ln ${BIN} ${MM_TOKEN_EXCH} ../../${PACKAGE_NAME} && \
 cd ../.. && \
+ln LICENSE ${PACKAGE_NAME} && \
+cargo about generate about.hbs > ${PACKAGE_NAME}/LICENSE.thirdparty && \
 tar -c -z -f ${PACKAGE_NAME}.tar.gz ${PACKAGE_NAME} && \
 rm -rf ${PACKAGE_NAME}