The Linux Foundation Member Summit

To simplify open source security for the long term, we will need some help from curation and automation. How can we – as an OSS community and industry – help drive this transition, without placing too much of the burden on maintainers? We’ll share our vision for the future, and explore a variety of solutions and examples.

OSPOs have gone through a lot of changes lately with some shrinking, some becoming distributed and the rise of new industries and government building OSPOs. The challenges that OSPOs were created to solve have also changed. With new areas to address such as regulations, AI, Security and open source software issues becoming more well understood, OSPOs need to change their organization shape and focus. As someone who has led multiple OSPOs through the maturity cycles, I want to cover the new challenges and how OSPOs are evolving to address them. And how OSPOs can remain relevant and influential during these years of change. I will cover writing the new strategy document, the organization structure and working across the organization and outside the organization to accomplish the mission,

As the JDF nears its 10 year anniversary, we have built a strong track record advancing specification efforts alongside open source projects. This session will provide examples and case studies for how LF Open Source projects and JDF Specifications projects are collaborating on internationally relevant Standards. We will also highlight findings from our State of Open Standards Report, and share some of the programs and resources the JDF have been developing to support open source projects interested in Standards.

This session will provide an overview of the project's accomplishments to date, and provide a roadmap of what is being planned for 2025. Zephyr project is now the 5th most active project hosted by the Linux Foundation. Each release sees about 30% new contributors, and these contributors are resulting in around 3 changes per hour in the code base. Products as diverse as Chromebooks, to Wind Turbines, to Hearings Aids, and Pet Trackers are being built with Zephyr. Learn about the open source and security best practices that have been applied to Zephyr over the years, and why it is now one of the most active open source projects at the Linux Foundation.

This session will provide an overview of the Alliance for OpenUSD, an LF Joint Development Foundation project aimed at building a set of specifications to formalize the Pixar Open Universal Scene Description technology. Specific topics covered will include the alliance's purpose, work to date, as well as special focus on collaboration and interaction with the open source community and other Linux Foundation consortia such as the Academy Software Foundation.

Understanding organizations funding behaviors is not well understood. Join us for a live read out of the inaugural 2024 Open Source Funding Funding report that found organizations invest over $7.7B annually in open source. We’ll explore potential misalignments and opportunities to improve funding at a top-level, and provide defined strategies, frameworks, and tools to help your organization measure the value created and the impact received from those investments. The primary audience for the session are OSPOs, Heads of Engineering and Product, C-Level Executives, and other individuals with a varying levels of understanding of their organization's open source engagement.

Your company's Organization Dashboard has been completely redesigned and rebuilt to make it easy to understand how your company is involved with LF open source foundations and projects. Learn how to use time, project, and affiliation filters to see overviews, summaries, or detailed views of the data for your entire company or for individuals for: code contributions, event attendance, event speakers, training, certification, and more. After the demo, we will show the roadmap for 2025 and 2026 and gladly hear your feedback and feature suggestions.

Open source software makes modern AI, ML, and data science possible. AWS is proud to support and contribute to a number of open source projects in this space, including Jupyter, LangChain, and PyTorch. In this talk, we celebrate the newly created Jupyter Foundation and discuss some of the work that AWS is doing in open source projects and their communities.

Last year, the Linux Foundational's Technical Advisory Board published the Linux Kernel Contribution Maturity Model (CMM). The goal of the CMM is to encourage companies to allow and encourage their engineersto contribute to upstream development in ways that allow them to grow into leadership roles, improving the overall health of the Linux Kernel ecosystem.  This talk explores how companies can improve their overall upstream community maturity, and how this benefits the company; their engineers, and the upstream development community.

Enterprises are eager to adopt Generative AI to increase their productivity. OPEA, the Open Platform for Enterprise AI, is a new project with the Linux Foundation. It provides a framework of composable microservices for state-of-the-art GenAI systems including LLMs, data stores, and prompt engines. It provides blueprints of end-to-end workflows for popular usage such as ChatQnA, CodeGen, and RAG systems. OPEA applications leverage cloud-native architecture to simplify deployment. It even includes a friendly high-level pipeline definition language for deployment on Kubernetes. This session will introduce OPEA, key component microservices, and how GenAI applications can be composed using those microservices. The attendees will learn to start with OPEA by deploying their GenAI application on a k8s cluster. Explicit contribution opportunities will be shared with the attendees. You'll also see an open source OPEA playground running on k8s, and how to contribute your components to it.

Trust Over IP Foundation, a JDF project under the Linux Foundation Decentralize Trust umbrella, has long been known for its “dual stack” that combines technical protocols with the governance models and artifacts required to create interoperable decentralized digital trust ecosystems. Starting with our ToIP Governance Architecture Specifications (2021) and ToIP Technology Architecture Specification (2022), this year we have published Implementers Drafts of our Trust Spanning Protocol (TSP) and Trust Registry Query Protocol (TQRP). This session will explain how this decentralized digital trust architecture is being implemented in an ecosystem of ecosystems model to produce Internet-scale solutions to urgent security, privacy, and data governance problems around the world such as content authenticity to protect against AI deep fakes.

The software delivery lifecycle landscape (SDLC) is rich with tools and services that help engineers automate every step and aspect of the software production process: configuration management, testing, build tools, artefact storage, deployment and monitoring. How do we connect all these tools, and adopt supply chain security best practices while maintaining a good developer experience from beginning to end? The CDEvents project aims to help solve this problem through standardisation and interoperability. In this talk, the speaker will introduce CDEvents, its vision, the latest news and roadmap; he will present how the project’s shared event format is being adopted by various tools across the SDLC and how interoperability enables a consistent developer experience and helps to achieve a secure software factory.

This Ask Me Anything session connects attendees to the TODO Steering Committee. The TODO Group is an open community of practitioners who aim to create, share knowledge and collaborate on best practices on open source management in organizations to run successful Open Source Program Offices Members of the committee will assist the audience through the best practices, guides, and tools made by and for open source managers to help them in their day-to-day responsibilities, as well as share their first-hand experiences and lessons learned in building and operating OSPOs. Additionally, attendees will learn ways to connect with the TODO Group – the largest OSPO community dedicated to building best practices in open source management – as well as with the SIGs and working groups from the foundations and projects across the LF ecosystem. The session will also provide information on accessing OSPO mentorship in their local regions.

“What do you mean I can’t bring my car keys into this building?” “No internet?? But how do I download things from GitHub?” Join a recovering government attorney and an open-source hacker for a fiery debate that dives into the world of DoD cybersecurity inefficiencies. Rebecca, a former DoD lawyer, pairs her intricate understanding of perplexing government policies with Eddie’s fresh, critical (and dare we say naive?) insights from the private sector. This session will explore the frustrating “how” behind the government’s “why,” from slow booting government laptops to the realities of “military-grade technology.” Together, they will challenge the status quo, proposing innovative, open-source inspired solutions to streamline and secure DoD operations. Expect a dynamic exchange filled with real-world frustrations, enlightening explanations, and a hacker’s touch on how to fix what’s broken.

In the transformative era of Web3, which encompasses decentralized trust systems, blockchain, and distributed ledger technologies, the foundational principles of open source governance have never been more critical. This session aims to explore the intersection of open source governance with Web3, providing insights from leading experts. We will delve into the evolution of governance models, their applicability in decentralized contexts, and the resultant challenges and opportunities within blockchain ecosystems. As Web3 technologies continue to evolve, they challenge traditional governance models with their decentralized nature. This session will introduce the significance of adapting open source governance principles—transparency, accountability, and inclusivity—to blockchain and distributed ledger technologies. We will set the stage for a deep dive into how these principles can foster collaboration and innovation in decentralized environments. Attendees will gain a nuanced understanding of how to leverage open source governance to navigate the complexities of Web 3's decentralized systems, ensuring robust, equitable, and forward-looking frameworks for the future.

Join our exclusive LFX Product Q&A to gain direct insights into our product offerings and engage with our product leaders to ask questions or provide feedback to the team. This session is your chance to shape the future of LFX to align with your priorities.