Demystifying Cyber Resilience and the Tools That Help
In this episode, Michael Lieberman, Co-founder and CTO of Kusari, walks us through the intersection of open source software and security. We discuss Mike's extensive involvement in OpenSSF projects like SLSA and GUAC, which provide essential frameworks for securing the software development life cycle (SDLC) and managing software supply chains. He explains how these tools help verify software provenance and manage vulnerabilities. Additionally, we explore regulatory concerns such as the Cyber Resilience Act (CRA) and the vital role of the recently released Open SSF Security Baseline (OSPS Baseline) in helping organizations comply with such regulations. Mike also shares insights into the evolution of open source security practices, the importance of reducing complexity for developers, and the potential benefits of orchestrating security similarly to Kubernetes. We conclude with a look at upcoming projects and current pilots aiming to simplify and enhance open source security.
00:00 Introduction and Guest Welcome
00:19 Mike's Background and Role in Open Source
01:35 Exploring SLSA and GUAC Projects
04:57 Cyber Resiliency Act Overview
06:54 OpenSSF Security Baseline
11:29 Encouraging Community Involvement
18:39 Final Thoughts
Resources:
OpenSSF's OSPS Baseline
GUAC
SLSA
KubeCon Keynote: Cutting Through the Fog: Clarifying CRA Compliance in C... Eddie Knight & Michael Lieberman
Guest:
Michael Lieberman is co-founder and CTO of Kusari where he helps build transparency and security in the software supply chain. Michael is an active member of the open-source community, co-creating the GUAC and FRSCA projects and co-leading the CNCF’s Secure Software Factory Reference Architecture whitepaper. He is an elected member of the OpenSSF Governing Board and Technical Advisory Council along with CNCF TAG Security Lead and an SLSA steering committee member.
--------
21:16
Project Sylva and the Future of Telecom
Tim Irnich from SUSE shares his work with Edge computing, focusing on the telecommunications industry. He highlights the importance of standardization and interoperability across the industry, specifically focusing on the widespread adoption of Linux and Kubernetes. Tim also elaborates on Project Sylva, an initiative under the Linux Foundation, aimed at creating a standardized stack for the European telco operators. We also discuss challenges and opportunities presented by the vast array of open source projects within the CNCF landscape and the potential for AI to enhance network efficiency and reliability. The episode provides a comprehensive look into the collaborative efforts and technological advancements shaping the telecom sector.
00:00 Welcome
01:14 Open Source Adoption in the Telco Industry
02:14 Challenges and Standardization in Telco Networks
04:35 Curating Reliable Stacks for Telco
06:11 Project Silva: An Open Source Initiative
18:55 AI in the Telecom Industry
22:11 Conclusion and Final Thoughts
Tim Irnich is the product manager for SUSE Edge for Telco, an open source based horizontal telco cloud solution. He is also a member of the Board of Directors at the LF Europe Sylva Project. Tim has been active in telco related open source communities such as LF Networking, OPNFV, OpenDaylight, OpenStack/OpenInfra for over a decade and held positions on several committees including the LFN TAC, TSC and Board of Directors in OPNFV and OpenDaylight. Before joining SUSE in 2018, Tim worked at Ericsson, where he ran the open source and ecosystem program for Ericsson's cloud business unit and helped found Ericsson's open source development arm that is today known as Ericsson Software Technologies.
--------
24:07
Data Privacy and Efficiency with Bacalhau Compute Over Data
In this episode, David Aronchick, CEO and Co-founder of Expanso discusses his experiences and insights from working with Kubernetes since its early days at Google. David shares his journey from working on Kubernetes to co-founding Kubeflow and his latest project, Bacalhau, which focuses on combining compute and data management in distributed systems. Highlighting the challenges of data processing and privacy, particularly in edge computing and regulated environments, David emphasizes cost-saving benefits and the importance of local data processing. Throughout, privacy and regulatory concerns are underscored along with solutions for efficient and secure data handling.
00:00 Introduction and Welcome
00:23 Early Days of Kubernetes
01:05 Kubernetes Community and Evolution
02:23 AI, ML, and KubeFlow
03:40 Current Work and Data Challenges
08:20 Privacy and Security Concerns
14:21 Real-World Applications and Benefits
20:42 Conclusion
Learn more about Intel® Liftoff for Startups: https://www.intel.com/content/www/us/en/developer/tools/oneapi/liftoff.html
Learn more about our collaboration with Expanso in the Open Platform for Enterprise AI (OPEA) project: https://opea.dev
Guest:
David Aronchick, Founder and CEO at Expanso, formerly led open source machine learning strategy at Azure, managed Kubernetes product development at Google, and co-founded Kubeflow. Previous roles at Microsoft, Amazon, and Chef.
--------
23:10
Evolving Software Deployment With GitLab
In this episode, we sit down with Victor Nagy of GitLab to discuss his role and GitLab's initiatives. Victor details the transition from using a custom solution to integrating Flux for smoother application deployment. Victor also talks about GitLab's commitment to the open source community, contributions to Flux, and becoming a potential maintainer. We also touch on what makes developer tools great, developer experience, and developments in AI and security, highlighting the rapid pace of innovation in these fields.
00:00 Introduction and Guest Introduction
00:36 Key Open Source Projects: Flux and GitLab
01:17 Choosing Flux
03:42 Community Contributions and Future Plans
05:35 Deployment and Product Management
12:31 GitLab's Comprehensive Platform and Differentiators
18:38 Security and AI
19:43 Conclusion and Final Thoughts
--------
20:55
The Future of AI Workloads with Slinky
In this episode, Marlow Warnicke, lead for the Slinky project, and Tim Wickberg, CTO of SchedMD, join us to discuss their work integrating HPC scheduler Slurm with Kubernetes. They provide background on Slurm's origins, its open source nature, and its evolution into Slinky to address Kubernetes's limitations in scheduling AI and HPC workloads. The discussion touches on the unique challenges in the MLOps space, the need for fine-grained resource control, and their collaborative efforts with various communities to enhance Kubernetes's efficiency. They also share the roadmap for Slinky and avenues for community collaboration and contribution.
00:00 Introduction and Guest Introductions
00:39 Overview of Slurm and Its Evolution
01:44 The Fusion of Slurm and Kubernetes: Slinky
04:14 Challenges in Kubernetes Scheduling
09:07 Unique Challenges in MLOps
12:58 Community Collaboration and Future Plans
16:41 Getting Involved and Final Thoughts
The Open at Intel podcast is about all things open source, from software to security to artificial intelligence to Linux and beyond. Each episode brings you fresh perspectives with sophisticated, leading-edge, free-ranging conversations from some of the best minds in the open source community.