ONE Summit 2024 - April 29 - May 1, San Jose, CA  LEARN MORE

Search

    Join
    50 MIN READ

    Linux Foundation Newsletter: September 2023

    The Linux Foundation | 14 September 2023

    Welcome to the September edition of the Linux Foundation newsletter! This month we have an announcement about a new vulnerability disclosure policy, new research published about sustainability in open source projects, news from WASMCon, and what you can expect at the upcoming Open Source Summit Europe. Don't miss our exclusive training and certification discounts, and stay updated with the latest news from our Linux Foundation projects.

    Contents

    The LF's new vulnerability disclosure policy

    lf_logo

    In today's digital age, security is paramount for trust. The Linux Foundation, dedicated to collaborative software development, places security as a core priority. We continuously improve our security practices to advance open source communities and collaborative projects.

    Today, we’re introducing our new Vulnerability Disclosure Policy, bridging the gap between reporting and resolution and ensuring faster responses.

    Training & certification deals

    unnamed (2)-3

    Keep current with IT skills that can help you advance your technology career by saving 35% on training and certification with BACKTOSCHOOL35 at checkout.

    Interested in reading our Training newsletter? Click here to subscribe.

    New report on open source for sustainability

    unnamed (3)-3

    Linux Foundation Research recently conducted a comprehensive study to understand how the LF's portfolio of open source projects and initiatives align with the 17 United Nations Sustainable Development Goals (SDGs). These goals aim to address global challenges like poverty, inequality, and climate change by 2030.

    The study explored various use cases, community contributions, and working group activities. It identified hundreds of digital public goods, including open content, standards, software, and hardware, that advance at least one of the SDGs. This research is a valuable resource to broaden the understanding of how Linux Foundation's projects and communities are making a difference and where additional resources could further amplify their impact.

    Participate in Linux Foundation Research surveys

    CNCF_Annual_Survey_Launch_1200x628_v6

    Do you work in the cloud native ecosystem? We want your input on our latest research project! 

    In 2022, LF Research and Cloud Native Computing Foundation ran a survey that revealed a rising trend among WebAssembly (Wasm) and the cloud native ecosystem. This year, we have partnered again to measure cloud native adoption and trends, understand motivations for using and contributing to cloud native projects, and forecast new opportunities in this space. We invite you to join this conversation by taking the 2023 CNCF survey today!

    As a thank you for participating, we’ll provide you with a 25% coupon off any Cloud Native Computing Foundation training or certification product amongst CKA, CKAD, CKS, PCA, or KCNA through November 10.

    Upcoming events

    unnamed (1)-Sep-12-2023-11-58-10-2797-PM

    Open Source Summit Europe is next week! Join us in Bilbao, Spain, September 19-21. Register today!  

    The schedule is bursting with content from 175+ sessions across 12 micro-conferences covering the most cutting-edge topics and technologies in open source today, including Linux, AI, Security, OSPOs, Leadership, Cloud, Containers, Diversity, Sustainability, and MUCH more. We can’t wait to see you there!

    Spotlight: LF Europe Member Summit

    Register today; seating is limited. We look forward to seeing you at the summit.

    All Upcoming events

    To register (for in-person attendance or virtual), please view our full calendar of events here, and be sure to subscribe to our events newsletter. Check out our Flickr stream for photos of past events!

    WASMCon: A glimpse into the future of WebAssembly

    unnamed-Sep-12-2023-11-58-10-2067-PM

    Image: Microsoft's Brendan Burns takes the stage at WASMCon

    WASMCon, held on September 6 and 7, 2023, in Bellevue, Washington, provided a comprehensive look into the fast-paced world of WebAssembly (Wasm). The technology is set to redefine various sectors, including AI, IoT, and cloud-based development. Below are the key takeaways from the event keynotes hosted by WasmCon Co-Chair Michelle Dhanani.

    Check out the YouTube playlist for video replays of all the WASMCon sessions

    Diversity, equity, and inclusion

    unnamed (8)

    Image: Kate Stewart, LF VP of Dependable Systems (right), attending the Women and Non-Binary Lunch at Embedded Open Source Summit 2023.

    LFX Mentorship

    unnamed (7)-1

    Image: Attendees collaborate at Embedded Open Source Summit 2023

    • Summer 2023 LFX Mentorships are wrapping up. Projects include CNCF, GraphQL, Hyperledger, LF Networking, Linux Kernel, OpenHPC, Open Mainframe Project, and RISC-V.
    • Fall 2023 LFX Mentorships are now underway. Browse the LFX Mentorship Program site to check eligibility, browse, and apply.
    • Watch the replay! Linux Kernel Debugging Tricks of the Trade Mentor: Joel Fernandes, Staff Software Engineer, Google.
    • Watch the replay! Kernel Tracing Using eBPF Mentor: Vandana Salve, Independent Linux Kernel Consultant.

    Linux Foundation project news and updates

    52907285801_59259b47ca_k

    Image: OpenSSF GM Omkhar Arasaratnam at OpenSSF Day 2023

    Open Source Software Security Around The World

    • 🔒 EU's Cyber Resilience Act: What It Means for Open Source Devs: The EU is shaking up cybersecurity with its new Cyber Resilience Act (CRA). Wondering how it affects the open source community? Find out in our latest blog: Understanding the Cyber Resilience Act. 
    • 🇪🇺LF Europe’s Sr. Director of Community Development, Mirko Boehm, chimes in on whether the CRA will help the European information and communications technology sector compete. Read his blog.
    • 🇺🇸 US Federal Government's RFI on Open Source Security: The Essentials: The US White House recently issued an RFI on Open Source Software Security, a move that could reshape OSS security. Learn what you need to know here: US Federal Government's RFI on Open Source Software Security.

    LF AI & Data

    • LF AI & Data is excited to announce our support for the upcoming TED AI Open Source Hackathon in San Francisco on October 14-15, 2023. As a strong advocate for open source development and collaborative innovation, LF AI & Data is pleased to align with TED AI’s mission of fostering meaningful dialogue and technological progress. See details here.
    • Host ML models on Amazon SageMaker using Triton: ONNX Models - ONNX is an open source standard for representing deep learning models widely supported by many providers. This post showcases how to deploy ONNX-based models for multi-model endpoints (MMEs) that use GPUs. Read more here
    • LF AI & Data Foundation Welcomes New Members in Q3 2023. As the AI and data landscape evolves, so does the LF AI & Data Foundation’s community. In Q3, our community grew stronger, with six new members poised to contribute significantly to open source AI and data. These additions bring fresh perspectives, expertise, and collaborative energy, driving growth and advancement in this dynamic field. Read more here. 
    • After making waves in San Francisco, LLM Avalanche is set for Bilbao. This unique meetup on September 18 provides a deep dive into all facets of OSS Generative AI. To be part of this enriching event, register here.
    • Explore the latest trends in AI and Data at the Open AI + Data Forum! From Machine Learning to DataOps, our diverse topics cover it all. Let's dive into the future of technology together. See details here. 
    • Just announced: We're hosting a must-attend webinar on Public Dataset License Compliance in AI Software Development. This webinar will arm you with strategies to understand the complexities of dataset licenses. Perfect for AI developers, legal teams, and data scientists! Register now!

    CNCF

    • CNCF has opened the 2023 Annual Survey to reflect the diverse experiences of the cloud native community and to provide a snapshot of project usage, areas of growth, and future trends. The survey will be open until November 10, and results will be published in the new year. 
    • At WASMCon in Washington, CNCF released the State of WebAssembly report, exploring what attracts developers to WASM, the challenges they face, and how optimistic they are about the future of this technology.
    • CNCF also unveiled the WASM Landscape, which includes 11 categories and 120 projects or products, representing $59.4B in total economic value.
    • Kubernetes Autoscaler KEDA has graduated. The project began as a collaboration between Microsoft and Red Hat in 2019, was accepted into the CNCF Sandbox in March 2020, and moved into the Incubator in August 2021, demonstrating impressive growth. Today, KEDA is used in production by more than 45 organizations, including FedEx, Grafana Labs, KPMG, Reddit, and Xbox.
    • Several Cloud Native projects have pushed significant updates and releases, including Notary and the Kubernetes 1.28 release. 

    Delta Lake

    • The preview release of Delta Lake 3.0.0 includes several exciting new features and artifacts like Delta Universal Format (UniForm) and Delta Kernel. Check out the preview release today!

    ELISA (Enabling Linux in Safety Applications)

    • Elana Copperman, ELISA Ambassador, Linux Features for Safety-Critical Systems WG Chair and Systems Safety Architect at Mobileye, and Shuah Khan, ELISA Ambassador, member of the ELISA TSC and Linux Fellow at The Linux Foundation, present “Real Time Linux in Safety-Critical Systems: The Potential and the Challenges.
    • Philipp Ahmann, Chair of the ELISA Project TSC and Technical Business Development Manager at Robert Bosch GmbH, shares a recap of the Berlin Workshop and next steps in this blog.
    • Kate Stewart, Vice President of Dependable Systems at The Linux Foundation, and Nicole Pappler, CTO and Founder of AlektoMetis, presented a webinar for Automating Adherence to Safety Profiles After Fixing Vulnerabilities. Watch here

    LF Energy

    • The LF Energy EVerest project will host a free summit to advance trusted software for EV charging on 5 October in Bad Schönborn, Germany.
    • Representatives of the LF Energy Power Grid Model project attended CIRED 2023, which focused on the future of distribution grids. This blog post from Alliander’s Tony Xiang summarizes the event.
    • In a new episode of State of Energy recorded at the 2023 LF Energy Summit in Paris, Frederik Stoel, OpenSTEF Technical Steering Committee Member as well as Data Science Engineer at Alliander, talks about the status of the LF Energy OpenSTEF project and what lies ahead.
    • EnergyCentral published a summary of LF Energy’s recent research report revealing the state of open source innovation for sustainability.
    • In this article, FOSSLife’s Amber Ankerholz discusses visualizing the open source sustainability ecosystem.
    • Electronic Design summarized key topics covered at the recent Embedded Open Source Summit, including the LF Energy Embedded Summit.
    • Video recordings of all sessions at the LF Energy Embedded Summit are now available to watch for free.
    • LF Energy projects will participate in multiple conference sessions at the upcoming Open Source Summit Europe, 19-21 September in Bilbao, Spain.

    FinOps Foundation

    FINOS

    Green Software Foundation

    Hyperledger Foundation

    • The Brazilian Central Bank announced that Drex will be the name of the digital real being developed on Hyperledger Besu for launch in 2024.
    • The National Payments Corporation of India (NPCI) announced the launch of an open source project named “Falcon” to simplify the management and use of blockchain.  Falcon is designed to simplify the deployment and management of Hyperledger Fabric-based blockchain networks on Kubernetes clusters.
    • Hyperledger Foundation’s Karen Ottoni joined the Thinking Crypto podcast for a wide-ranging discussion covering the different Hyperledger Foundation technologies and use cases, permissioned vs. permissionless blockchains, and interoperability with public blockchains.
    • The two newest posts in the Spotlighting #HyperledgerWomen series spotlighted Elli Androulaki from IBM Research and Nancy Norris of the Government of British Columbia.
    • The Hong Kong Monetary Authority announced a report on “Bond Tokenisation in Hong Kong'' that details lessons learned from its inaugural tokenized green bond. The downloadable report provides an overview of the work leading up to “Project Evergreen” and the financial and technical implementation details, including the role of Hyperledger Besu in this first-of-its-kind project. 
    • For more updates from Hyperledger Foundation, check out the current and past issues of Hyperledger Horizons here.

    Joint Development Foundation (JDF)

    • Joint Development Foundation + Semiconductor industry leaders jointly announce the CHIPS R&D Standards Summit to be held on September 26-27, 2023. 

    MLflow

    • Organizations can now track the many versions of their ML models within the GitLab user interface using MLFlow! The documentation can be found here.
    • In this blog by Daniel Liden, learn everything you need to start working with retrieval-augmented generation in MLflow. Read here.
    • DagsHub decided to take MLflow 2.4 for a test drive and use it to build DPT, their LLM-based support chatbot, using various prompt templates and compare their results on a set of queries. Check out the results.
    • In this video, Simon Whiteley and Gavita Regunath, Ph.D. with Advancing Analytics, take a look at using MLflow to measure the accuracy of a set of prompts sent to the gpt3.5 turbo and gpt4.0 models, respectively, giving them the control they desperately need! Watch here.

    Networking Projects

    LF Networking

    LF Edge

    • The Akraino community issued a new white paper, “Akraino Edge Cloud Gaming based on Arm architecture’s high-performance CPU” - download now for free
    • LF Edge will be onsite at KubeCon + CloudNativeCon & Open Source Summit China, September 26-28:
      • Via a booth on the show floor featuring project demos and information
      • Sessions presentations during the ONE Summit Regional Day co-located event on September 26. (Registration is USD 20 and can be added to any main summit registration.) 
    • Joint hackathon: LF Edge, ETSI, and Open Compute Project (OCP) are hosting a joint “Edge Native 2023” hackathon. Finalists will present their work onsite at OCP Global Summit 2023, October 17-19, in San Jose, CA. 
    • Free Express Learning Course: Creating Edge IoT Solutions with EdgeX Foundry (LFEL1003) is now available. Learn more and enroll. 

    Nephio

    • The Nephio community is currently planning for the Nephio 3rd Developer Summit in October. Subscribe to the Nephio LinkedIn page to stay tuned for the official announcement! 

    SONiC

    • The agenda for the SONiC Workshop at OCP Global Summit is live. Register for the 2023 OCP Global Summit here. OCP Global Summit registration is required to attend the SONiC Workshop, and all Summit passes include entry into the Workshop.

    Open3D Engine

    • Did you know that O3DE supports PhysX? In this interview, NVIDIA’s Senior Director of Simulation Technology, Adam Moravanszky, explains how Pixar’s Universal Scene Description (OpenUSD) justified open-sourcing PhysX, talks about the impact of open source on the world of game development, and shares his excitement for the future of PhysX.
    • How has open source impacted the world of robotics? A panel of industry experts from AWS, Heroic Robots, Huawei, Open Robotics, and Robotec.ai share their insights in this blog, the final installment of a 3-part series. 
    • Open 3D Foundation is proud to be a Gold sponsor of ROSCon 2023 in New Orleans on October 18-20. Come meet the O3DE community and see O3DE in action in the O3DF, Robotec.ai, and AWS booths, and join Adam Dąbrowski of Robotec.ai on Oct 19 at 2:10 pm for his session, “Simulate Robots Like Never Before with the Open 3D Engine.” 

    OpenAPI Initiative

    • The OpenAPI Initiative has partnered with apidays to provide an OpenAPI track at their events. To learn more about our upcoming events, click here. 

    OpenJS Foundation

    • Join us for Node.js Collaborator Summit and OpenJS World in Bilbao, Spain! Hear talks from notable speakers from Netflix, VMware, Nearform, and Red Hat. 
    • The Open Visualization Collaborator Summit is open for registration and takes place September 6-7 in New York City at the Foursquare headquarters.
    • We released the latest Node.js Security Progress Report, featuring increased security releases and continued work on the Permission Model.
    • New security releases are now available for versions 16, 18, and 20 of Node.js.
    • Electron 26.0.0 has shipped. New in this release: Upgraded to Chrome 116 and added new APIs for safeStorage.
    • jQuery 3.7.1 has been released. This release fixes a regression from jQuery 3.6.0 that resulted in rounded dimensions for <tr /> elements in Chrome and Safari.

    Open Mainframe Project

    • Open Mainframe Project announced a major milestone with the 5-year anniversary of Zowe, the first open source framework for z/OS.  
    • To celebrate the anniversary, Open Mainframe Project collaborated with Interstill to create an updated “Basics for Zowe” course and a new “Fundamentals for Zowe“ course. Developers who go through these courses will receive Open Mainframe Project digital badges. Learn more. 
    • In this new podcast of I am a Mainframer, meet Guilherme Cartier de Palma⁠, Associate Director of Infrastructure/Cloud Architecture at Kyndryl.

    Open Programmable Project (OPI)

    • Paul Pindell, Principal Architect at F5, shares the mission and goals of the OPI Outreach Working Group and how to get engaged. Read it here. 

    OpenSSF

    Alliance for OpenUSD

    • Discover how AOUSD is set to reshape 3D technology and digital worlds. Read the blog post here.
    • Hear from OpenUSD pioneers at Pixar, Academy Software Foundation, Cesium, Epic Games, The Khronos Group, Industrial Light & Magic, and more to learn about the importance of standardizing the 3D ecosystem for developers and content creators across industries. Watch the video here. 
    • Did you know Pixar began working on OpenUSD in 2012 as a 3D foundation for feature films? The company made this tech open source in 2016, so now anyone can use it and contribute to its development. Learn more here.
    • OpenUSD is powering a new era of 3D. Learn how from Pixar, Adobe, Autodesk, and NVIDIA industry experts as they discuss how AOUSD is paving the way for widespread interoperability across 3D ecosystems. Watch the Keynote Panel Session here.
    • Hear what NVIDIA Director of Open Source and Standards Guy Martin, says about forming AOUSD to standardize and develop the OpenUSD technology. Learn more.

    OS-Climate

    Overture Maps Foundation

    • Overture Maps recently hosted an informative webinar titled “Working With Overture Data: A Step-by-Step Guide.” The webinar covered Overture’s initial data release, which came out in late July, the decision to adopt the cloud-native Parquet format for data storage, and demonstrations on harnessing its capabilities for various applications, particularly in map visualizations. Read the recap blog and watch the full webinar recording here. 

    PyTorch Foundation

    • We released a new instructor-led PyTorch training course. This course provides hands-on experience to train and fine-tune deep learning models.
    • The PyTorch Conference schedule is now live! We’re featuring key speakers from companies like Meta, OpenAI, Hugging Face, IBM, Intel, and more. View the full lineup here.
    • PyTorch/XLA FSDP has landed in Hugging Face Transformers. Hugging Face users can train PyTorch models with up to 20 times more parameters using the same computing power as before.

    RISC-V

    • RISC-V announced its elected RISC-V Board of Directors’ officers:
      • Chair: Lu Dai, Sr. Director, Technical Standards, Qualcomm
      • Vice Chair: Dave Patterson, Distinguished Engineer, RIOS Laboratory
      • Treasurer: Gary Martz, Sr. Director, Intel
      • Secretary: Ted Speers, Technical Fellow, Microchip Technology
      • Learn more at the RISC-V blog.
    • RISC-V Summit, Santa Clara: Don't miss the upcoming 7-8 November summit. Register now and take advantage of sponsorship opportunities.
    • RISC-V Landscape: Discover our continuously updated living document that provides invaluable insights into the diverse RISC-V ecosystem.
    • RISC-V Summit Europe: Did you miss the summit? View all the presentations on our YouTube playlist featuring keynotes, tech talks, panels, and more from the three-day event.
    • The RISC-V Advocate program brings RISC-V enthusiasts together with RISC-V International to work together to ensure global momentum and adoption. Applications for the 2024 program are open now.
    • RISC-V Learn Online provides beginner, intermediate, and advanced online learning to increase engineering expertise and career opportunities on RISC-V across the industry.

    Sustainable and Scalable Infrastructure Alliance (formerly Open19)

    • Open19, a community and open standard for enterprise and edge data center innovation, unveiled its new brand identity that builds on 6+ years of innovation and reflects a broader vision to advance infrastructure technologies and standards that power our digital world in a sustainable, scalable way. The Open19 project will now exist as one of many future community initiatives under the Sustainable and Scalable Infrastructure Alliance (SSIA).  Read the press release for more details.

    Yocto
    • The Yocto Project Virtual Summit on November 30 is a virtual technical conference for engineers, open source technologists, students, and academia in the OSS space. This 3-day event is where individuals will learn about Yocto Projects’ direction — including, but not limited to, new releases, development tools, and features — and get training on the next wave of embedded Linux technologies (segment previously known as Yocto Project Developer Day), and network with their industry peers, Yocto Project maintainers, OpenEmbedded maintainers, and experts.

    Zephyr

    • Zephyr started a Meet the Community Series - get to know Florian Grandel, a freelance software developer and architect who created a low-power sensor for carbon dioxide using Zephyr RTOS. 
    • Infineon recently launched a “Connect with Code” contest with Hacker.io. Zephyr currently supports six Infineon boards; learn how to participate and create a Zephyr RTOS-related project here. 
    • In this tutorial, Mohammed Billoo, Embedded Linux Consultant at MAB Labs Embedded Solutions and Zephyr contributor, shares step-by-step directions for managing multiple versions of Zephyr RTOS. 
    • New product feature -  GARDENA smart Irrigation Control runs on Zephyr. The smart Irrigation Control from GARDENA controls a garden irrigation system with up to six irrigation valves. This allows customized, fully automatic irrigation schedules to be planned for up to six separate garden areas. 

    LF in the media

    Artificial Intelligence and Machine Learning

    • Dave Morin from ASWF offers a visionary quote about the role of AI in shaping the future of VFX. Read More
    • Coverage of Microsoft's new ONNX Python libraries, a significant stride in machine learning frameworks. Read More
    • A cutting-edge development in automatic snoring detection, powered by PyTorch models, showcases the technical prowess of AI. Read More

    Cloud Computing and Kubernetes

    • CNCF's Backstage project received a glowing mention from Pia Nilsson of Spotify, highlighting its impact on cloud-native technologies. Read More
    • KEDA achieved a significant milestone by graduating at CNCF, marking its growing influence in cloud computing. Read More
    • The second major Kubernetes release garners attention for its astonishing development velocity and robust community governance. (1)(2)(3)
    • Coverage of the OpenTF fork and its pending donation to the Linux Foundation underscores the evolving landscape of open source governance. (1)(2)

    Cybersecurity

    • OpenSSF's Open Source Consumption Manifesto gains media spotlight, setting a new standard for secure software practices. Read More
    • OpenSSF provides product guidance for the DARPA Cyber Challenge, a critical initiative in advancing cybersecurity measures. (1)(2)

    Distributed Ledger Technology

    • Hyperledger is featured in a G2 learning article, serving as a trusted resource for late adopters exploring distributed ledgers. Read More

    Networking

    • The Ultra Ethernet Consortium is hailed as a key initiative backed by major networking companies committed to this groundbreaking effort. Read More
    • The debut of the first RISC-V 10-gig switch signals a new era in networking hardware. Read More

    Processor Architecture and Hardware

    • A comprehensive article delves into RISC-V's rich history and future prospects, offering deep insights into this revolutionary architecture. Read More
    • Milestones in RISC-V compliance are subtly shaping the future of processor architecture. Read More
    • Sipeed introduces three new hardware platforms running Linux on RISC-V chips, marking a significant leap in hardware innovation. Read More
    • China launched the first RISC-V laptop, setting a precedent in the global hardware market. Read More

    Follow us

    Follow the Linux Foundation on social media to get all the latest info, updates on upcoming events, and breaking news and announcements from the global open source ecosystem. Follow us here: Mastodon, Bluesky, Facebook, LinkedIn, and X.

     
    Similar Articles
    Open Source Security (OpenSSF) and OpenJS Foundations Issue Alert for Social Engineering Takeovers of Open Source Projects
    LF Research Launches 2024 Series of Studies and Opens Call for Sponsors
    Linux Foundation Newsletter: November 2023
    Browse Categories

    2023 Compliance and Security Cloud Computing Projects Linux How-To Diversity & Inclusion Open Source Open Source Best Practices 2022 Cross Technology Training and Certification 2024 Newsletter LF Research LFX AI Legal Linux Foundation Research Topic: Data Blog Linux Networking and Edge Data Governance LF Energy Open Mainframe Open Models OpenChain System Administration Topic: Security Topic: Sustainability cybersecurity eBPF generative AI kernel license compliance maintainer openssf techtalentsurvey

    Stay Connected with the Linux Foundation