Skip to content

License

Tenantry is licensed under the GNU Affero General Public License v3 or later (AGPL-3.0-or-later), with the additional terms of the NOTICE file (AGPL section 7).

What it means

  • You can use, copy and modify Tenantry freely, including commercially, for your own company or for your clients.
  • If you modify it and offer it to others, including as a service over a network, you must publish your modified source code under the same license (AGPL section 13). Running an unmodified image needs nothing more.
  • Attribution is required (NOTICE): keep the NOTICE file and the copyright notices, and keep this line in the interface and the documentation: "Based on Tenantry by Baptiste Ferrando (https://github.com/Verttigo28/tenantry)". The About panel (user menu, About) shows it.
  • Names are not licensed: the names "Tenantry" and "Steward" and their logos may not be used to present a modified version, except to give the attribution above.
  • Commercial licensing: if the AGPL does not fit your use (for example a proprietary or closed-source product or service), contact the copyright holder for a separate commercial license.

The About panel

The user menu has an About entry: product name, running version, license, a link to the source code, the attribution line, the trademark notice and the third-party notices (licenses of the production npm dependencies and of the bundled tctl, generated at build time into THIRD-PARTY-NOTICES.txt, served read-only).

The version comes from the TENANTRY_VERSION environment variable, set by the published image (the release tag). GET /api/about is public and returns only the name, version, license and source URL.

Offering the source of a modified version

If you run a modified Tenantry for other users, set TENANTRY_SOURCE_URL to where you publish your modified source (an http(s) URL). The About panel then links to it instead of the upstream repository.

environment:
  TENANTRY_SOURCE_URL: https://git.example.com/acme/tenantry

To build your own image with a version: docker build --build-arg TENANTRY_VERSION=1.2.3-acme .

Teleport and other third parties

  • The Tenantry image embeds tctl, compiled from Teleport's source code at the pinned commit of the release tag of the TELEPORT_VERSION build argument (TELEPORT_COMMIT; the build fails if the tag does not point to it). That source is available under the AGPL-3.0 (its api module under Apache-2.0), compatible with Tenantry's own license. No prebuilt Teleport binary is redistributed: the official builds are under the Teleport Community Edition license, which does not allow embedding them in another product. The license texts are in the image at /licenses/teleport/ (with SOURCE, the exact tag and commit) and the third-party notices list it.
  • tctl statically links Go modules under their own licenses (Apache-2.0, MIT, BSD, MPL-2.0, ISC...). The image build lists them with go-licenses (pinned version): every module, its license and its license text are appended to the third-party notices (About panel), and the raw report and license files are in the image at /licenses/tctl-go-dependencies/ (report.csv + one directory per module).
  • The bundles Tenantry generates run official Teleport images and binaries on your infrastructure, under Teleport's license: see Teleport licensing for MSPs.

Trademarks

Teleport is a trademark of Gravitational, Inc.; Active Directory and Windows are trademarks of Microsoft. Tenantry is an independent project, not affiliated with or endorsed by them. The About panel shows the same notice.

Teleport licensing for MSPs

Tenantry and Teleport are licensed separately.

  • What the Tenantry image contains. The only Teleport component inside the Tenantry image is tctl, compiled from Teleport's source code, which is available under the AGPL-3.0 (the api module under Apache-2.0). Its license is shipped in the image (/licenses/teleport/) and listed in the third-party notices (About panel).
  • What the generated bundles run. The bundles and scripts Tenantry generates (master server, client proxies, Steward with Teleport, tbot) download and run official Teleport images and binaries (public.ecr.aws/gravitational/..., cdn.teleport.dev) on your infrastructure. Their use is governed by Teleport's license, not by Tenantry's.
  • Teleport Community Edition. According to Teleport's published terms, the official Community Edition builds are free for organisations with fewer than 100 employees and less than USD 10 million in annual revenue, and may not be resold or embedded in a product or service offered to others. Beyond that, Teleport Enterprise applies.
  • Tenantry does not change that. Using Tenantry does not grant, extend or replace any Teleport license. An MSP that operates Teleport for its clients should check which Teleport license fits its organisation and its offer.

References: Teleport legal, Teleport Community Edition license, Teleport license section (source under AGPL-3.0). This summary is informational; the license texts are authoritative.

Teleport is a trademark of Gravitational, Inc.; Active Directory and Windows are trademarks of Microsoft. Tenantry is an independent project, not affiliated with or endorsed by them.