Open at Intel

Demystifying Cyber Resilience and the Tools That Help

In this episode, Michael Lieberman, Co-founder and CTO of Kusari, walks us through the intersection of open source software and security. We discuss Mike's extensive involvement in OpenSSF projects like SLSA and GUAC, which provide essential frameworks for securing the software development life cycle (SDLC) and managing software supply chains. He explains how these tools help verify software provenance and manage vulnerabilities. Additionally, we explore regulatory concerns such as the Cyber Resilience Act (CRA) and the vital role of the recently released Open SSF Security Baseline (OSPS Baseline) in helping organizations comply with such regulations. Mike also shares insights into the evolution of open source security practices, the importance of reducing complexity for developers, and the potential benefits of orchestrating security similarly to Kubernetes. We conclude with a look at upcoming projects and current pilots aiming to simplify and enhance open source security.

 

00:00 Introduction and Guest Welcome

00:19 Mike's Background and Role in Open Source

01:35 Exploring SLSA and GUAC Projects

04:57 Cyber Resiliency Act Overview

06:54 OpenSSF Security Baseline

11:29 Encouraging Community Involvement

18:39 Final Thoughts

 

Resources:

OpenSSF's OSPS Baseline

GUAC

SLSA

KubeCon Keynote: Cutting Through the Fog: Clarifying CRA Compliance in C... Eddie Knight & Michael Lieberman

 

Guest:

Michael Lieberman is co-founder and CTO of Kusari where he helps build transparency and security in the software supply chain. Michael is an active member of the open-source community, co-creating the GUAC and FRSCA projects and co-leading the CNCF’s Secure Software Factory Reference Architecture whitepaper. He is an elected member of the OpenSSF Governing Board and Technical Advisory Council along with CNCF TAG Security Lead and an SLSA steering committee member.

Project Sylva and the Future of Telecom

Tim Irnich from SUSE shares his work with Edge computing, focusing on the telecommunications industry. He highlights the importance of standardization and interoperability across the industry, specifically focusing on the widespread adoption of Linux and Kubernetes. Tim also elaborates on Project Sylva, an initiative under the Linux Foundation, aimed at creating a standardized stack for the European telco operators. We also discuss challenges and opportunities presented by the vast array of open source projects within the CNCF landscape and the potential for AI to enhance network efficiency and reliability. The episode provides a comprehensive look into the collaborative efforts and technological advancements shaping the telecom sector.

00:00 Welcome

01:14 Open Source Adoption in the Telco Industry

02:14 Challenges and Standardization in Telco Networks

04:35 Curating Reliable Stacks for Telco

06:11 Project Silva: An Open Source Initiative

18:55 AI in the Telecom Industry

22:11 Conclusion and Final Thoughts

 

Tim Irnich is the product manager for SUSE Edge for Telco, an open source based horizontal telco cloud solution. He is also a member of the Board of Directors at the LF Europe Sylva Project. Tim has been active in telco related open source communities such as LF Networking, OPNFV, OpenDaylight, OpenStack/OpenInfra for over a decade and held positions on several committees including the LFN TAC, TSC and Board of Directors in OPNFV and OpenDaylight. Before joining SUSE in 2018, Tim worked at Ericsson, where he ran the open source and ecosystem program for Ericsson's cloud business unit and helped found Ericsson's open source development arm that is today known as Ericsson Software Technologies.

Data Privacy and Efficiency with Bacalhau Compute Over Data

In this episode, David Aronchick, CEO and Co-founder of Expanso discusses his experiences and insights from working with Kubernetes since its early days at Google. David shares his journey from working on Kubernetes to co-founding Kubeflow and his latest project, Bacalhau, which focuses on combining compute and data management in distributed systems. Highlighting the challenges of data processing and privacy, particularly in edge computing and regulated environments, David emphasizes cost-saving benefits and the importance of local data processing. Throughout, privacy and regulatory concerns are underscored along with solutions for efficient and secure data handling.

00:00 Introduction and Welcome

00:23 Early Days of Kubernetes

01:05 Kubernetes Community and Evolution

02:23 AI, ML, and KubeFlow

03:40 Current Work and Data Challenges

08:20 Privacy and Security Concerns

14:21 Real-World Applications and Benefits

20:42 Conclusion

Learn more about Intel® Liftoff for Startups: https://www.intel.com/content/www/us/en/developer/tools/oneapi/liftoff.html

Learn more about our collaboration with Expanso in the Open Platform for Enterprise AI (OPEA) project: https://opea.dev

Guest:

David Aronchick, Founder and CEO at Expanso, formerly led open source machine learning strategy at Azure, managed Kubernetes product development at Google, and co-founded Kubeflow. Previous roles at Microsoft, Amazon, and Chef.

 

Evolving Software Deployment With GitLab

In this episode, we sit down with Victor Nagy of GitLab to discuss his role and GitLab's initiatives. Victor details the transition from using a custom solution to integrating Flux for smoother application deployment. Victor also talks about GitLab's commitment to the open source community, contributions to Flux, and becoming a potential maintainer. We also touch on what makes developer tools great, developer experience, and developments in AI and security, highlighting the rapid pace of innovation in these fields.

00:00 Introduction and Guest Introduction

00:36 Key Open Source Projects: Flux and GitLab

01:17 Choosing Flux

03:42 Community Contributions and Future Plans

05:35 Deployment and Product Management

12:31 GitLab's Comprehensive Platform and Differentiators

18:38 Security and AI

19:43 Conclusion and Final Thoughts

The Future of AI Workloads with Slinky

In this episode, Marlow Warnicke, lead for the Slinky project, and Tim Wickberg, CTO of SchedMD, join us to discuss their work integrating HPC scheduler Slurm with Kubernetes. They provide background on Slurm's origins, its open source nature, and its evolution into Slinky to address Kubernetes's limitations in scheduling AI and HPC workloads. The discussion touches on the unique challenges in the MLOps space, the need for fine-grained resource control, and their collaborative efforts with various communities to enhance Kubernetes's efficiency. They also share the roadmap for Slinky and avenues for community collaboration and contribution.

00:00 Introduction and Guest Introductions

00:39 Overview of Slurm and Its Evolution

01:44 The Fusion of Slurm and Kubernetes: Slinky

04:14 Challenges in Kubernetes Scheduling

09:07 Unique Challenges in MLOps

12:58 Community Collaboration and Future Plans

16:41 Getting Involved and Final Thoughts

Open Source Maintainership: The Highs, Lows, and Everything In Between

Katherine Druckman sat down with Sarah Christoph, lead maintainer of Porter, and Karen Chu, community manager for Helm, to discuss the realities of maintaining open source projects. We discussed the challenges maintainers face, including burnout, community building, and the importance of human interactions in sustaining projects. The conversation highlights strategies for creating sustainable workflows, such as documentation and contributor ladders, and the essential role of positive feedback and community support in maintaining morale. The episode also underscores the protective and inclusive nature of the open source community, shining a light on mentorship and the personal growth it fosters.

00:00 Introduction 

02:30 Challenges in Open Source Maintenance

03:43 Maintainer Burnout and Coping Strategies

08:10 Building Sustainable Open Source Projects

10:37 The Importance of Community and Mentorship

12:41 Recognizing and Crediting Contributors

14:14 The Human Connection in Open Source

21:22 Final Thoughts 

 

Guests:

	Karen Chu
	Sarah Christoff

The Human Side of Code

In this episode, we hear from Megan Knight, Director of Software Communities at Arm. Megan shares her experiences with open source projects, particularly focusing on the Yocto project which helps build custom Linux distributions. She discusses the challenges of community management, maintaining contributor motivation, and the impact of policy changes on open source projects. The discussion also touches on the importance of corporate support in sustaining open source contributions.

 

00:00 Introduction and Welcome

00:52 The Yocto Project: Building Custom Linux Distributions

01:33 Managing Open Source Communities

04:20 Motivations and Challenges in Open Source Contributions

05:18 Conflict Resolution in Open Source Projects

06:59 Unexpected Use Cases in Open Source

10:03 Sustainability and Training in Open Source

18:07 The Future of Open Source in Automotive

19:18 Conclusion

 

Guest:

Megan Knight is the Director of Software Communities at Arm where she delightfully works with the upstream. She holds various positions on project boards including Yocto Project, UXL Foundation, Zephyr Project, and  OpenSSF. Prior to Arm, she led the IoT and Automotive open source engagement portfolio at Amazon Web Services and served as the Amazon representative on critical dependency open source project boards. She got her start in open source working at The Linux Foundation with the Linux Kernel and Linux Plumbers communities.

Understanding Observability with OpenTelemetry

Join us as we sit down with Austin Parker, Director of Open Source at Honeycomb.io to discuss observability with OpenTelemetry, explaining its importance in cloud native software and discussing the OpenTelemetry project's growth and community contributions. He shares insights on the evolution and adoption of Open Telemetry, its impact on the software industry, and the collaborative nature of its development. 

00:00 Introduction

00:45 Understanding OpenTelemetry

02:48 The Importance of Observability

05:01 Challenges and Innovations in Observability

09:36 The OpenTelemetry Community

12:12 Challenges with Vendor Lock-In

14:29 Encouraging New Contributions

18:07 Recognizing Community Contributions

20:24 Final Thoughts

 

Guest:

Austin Parker is Director of Open Source at honeycomb.io, an OpenTelemetry maintainer and governance member, author of several books, and all around great person.