August 2023 - Foundation-board - lists.openinfra.dev

Call for Agenda items for September 5th Meeting of the OpenInfra Board of Directors
by Julia Kreger 29 Aug '23

29 Aug '23

Greetings, Our next meeting of the board is rapidly approaching on September 5th at 0500 UTC. This is an early morning meeting for Europe and a late at night meeting for the Americas. I have posted the draft agenda to the Wiki[0]. If you have any specific agenda items we need to cover during the meeting, please let me know and I'll get them added to the agenda. Thanks! -Julia [0]: https://board.openinfra.dev/en/meetings/2023-09-05

1 1

Upcoming OpenInfra Days
by Allison Price 08 Aug '23

08 Aug '23

Hi everyone, As I discussed in last week’s Board of Directors meeting and the recent Gold Members meeting, we are continuing to see a lot of activity around local OpenInfra Days. These events continue to be a great tool to build community momentum and excitement around OpenInfra projects. Below is a preview of the planned events scheduled for the rest of the year, including anticipated attendance. We encourage your teams and customers in these cities and countries to attend, network, and collaborate with their fellow OpenInfra community members. Cloud Operator Days Tokyo Location: Hybrid - Tokyo, JP Date: The event will begin on August 21 with on-demand sessions that can be accessed online. On September 14, there will be an in-person closing ceremony which will include keynotes. Link: https://cloudopsdays.com/ Registration: https://event.cloudopsdays.com/register Expected attendance: 100+ onsite attendees for the closing ceremony OpenInfra Days Triangle Date: August 22-24, 2023 Location: Raleigh, NC, USA Link: https://www.meetup.com/triangle-openstack-meetup/ Schedule: https://www.meetup.com/triangle-openstack-meetup/events/ Registration: Please RSVP via meetup https://www.meetup.com/triangle-openstack-meetup/ . This is a limited capacity event, so please be sure to RSVP as soon as possible. This event also has an option to participate virtually. You can find video call details in the schedule link. Expected attendance: 100 onsite attendees Vietnam OpenInfra Days Date: September 30, 2023 Location: Hanoi, VN Link: https://2023.vietopeninfra.org/ The CFP is open until August 15: https://forms.gle/yc5bk4mmBfDXWKo87 Sponsorship information: https://2023.vietopeninfra.org/ Registration is opening soon Expected attendance: 700+ onsite attendees India OpenInfra Days Date: December 1, 2023 More information regarding this event will be shared soon. Expected attendance: 100 onsite attendees In addition, there are several local OpenInfra meetups coming up around the globe: https://www.meetup.com/pro/openinfradev/ If you have any questions about these upcoming events or would like to connect with the community organizers, please feel free to reach out to me. Cheers, Allison Allison Price VP of Marketing & Community OpenInfra Foundation <https://openinfra.dev/> p: +1-214-686-6821

1 0

Invitation: OpenInfra Board sync with OpenStack @ Wed Aug 9, 2023 11am - 12pm (PDT) (foundation-board@lists.openinfra.dev)
by juliaashleykreger＠gmail.com 01 Aug '23

01 Aug '23

OpenInfra Board sync with OpenStack Wednesday Aug 9, 2023 ⋅ 11am – 12pm Pacific Time - Los Angeles Location https://us06web.zoom.us/j/81927985814?pwd=R0tybkhJK0orOTJDdVF5QXNCVjV0UT09 https://www.google.com/url?q=https%3A%2F%2Fus06web.zoom.us%2Fj%2F8192798581… The Open Infrastructure Foundation Board of Directors isendeavoring to engage in regular check-ins with official OpenInfraprojects. The goal is for a loosely structured discussion one hourin length, involving members of the board and the OpenStack TC,along with other interested community members. Agenda: https://etherpad.opendev.org/p/2023-08-board-openstack-sync Call: https://us06web.zoom.us/j/81927985814?pwd=R0tybkhJK0orOTJDdVF5QXNCVjV0UT09 Organizer juliaashleykreger(a)gmail.com juliaashleykreger(a)gmail.com Guests juliaashleykreger(a)gmail.com - organizer foundation-board(a)lists.openinfra.dev View all guest info https://calendar.google.com/calendar/event?action=VIEW&eid=NnBvbGhvZnY4Zm1r… Reply for foundation-board(a)lists.openinfra.dev and view more details https://calendar.google.com/calendar/event?action=VIEW&eid=NnBvbGhvZnY4Zm1r… Your attendance is optional. ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

News on the Cyber-Resiliency Act
by Thierry Carrez 01 Aug '23

01 Aug '23

Greetings Directors, At our in-person board meeting in Vancouver last month, our lawyers at DLA Piper presented a landscape of regulatory threats and challenges that could affect open source in the near future. One of those challenges was the Cyber-Resiliency Act, a proposed legislation in the EU that aims at introducing safety best practices in digital products. Unfortunately, the initial text proposed by the EU Commission was drafted without much input from the open source community, and failed to take into account the specificity of our development model, potentially resulting in a chilling effect for developers and organizations involved, or the fragmentation of our global communities. We participated in the community response by posting our position[1], aligned with our partner organizations in the open source world. The next steps were to wait for the new versions of the proposed legislation as the EU Parliament committees worked on their own version, to see if they included any further provisions to protect open source or not. [1] https://openinfra.dev/blog/openinfra-foundation-cyber-resilience-act The Parliament version of the text was recently presented, ahead of the ITRE (Industry, Research and Energy) committee vote on the draft. I personally reached out to ITRE committee members asking to delay the vote, but the committee nevertheless approved it on a vote[2] *yesterday morning*. [2] https://www.europarl.europa.eu/news/en/press-room/20230717IPR03029/cyber-re… The new version of the text now contains further precision to exclude from its scope open source software developed using a “fully decentralised development model”, which matches the principles under which OpenInfra software is being developed (the Four Opens). However, this provision is superseded by other provisions squarely placing any project with developers employed by commercial entities within the scope of the act, which basically covers nearly all of open source software produced today. The text also contains no improvement on the process itself, for example still requiring that vulnerabilities be disclosed to ENISA within hours of discovery, even if no patch has been developed to fix them. This is orthogonal to vulnerability management best practices (like limiting access to unpatched vulnerabilities to the key people able to fix them, or responsible disclosure), while making the ENISA database a single high-value target for hackers in search of unpatched vulnerabilities. Adoption by the ITRE committee does not mean the fight is over, or the text final and approved. Now that it’s gone through the three committees involved (LIBE, IMCO, and ITRE), the text becomes a proposal to be voted on by the full Parliament. It is unclear at this stage if there will be a specific discussion and a free vote on it, it will depend how consensual or controversial it appears to be. In parallel, the EU Council (representing national governments) will prepare its own version of the text, and in the end all proposed acts will be reconciled into a single version that will become law. At the OpenInfra Foundation level we will follow next steps with attention, and participate in any industry initiative to improve this text to take into account the specificities of our global, collaborative value creation model. More specifically, we collaborate with the Open Source Initiative, Open Forum Europe, Linux Foundation and others to coordinate and support industry response. We will keep you updated on future developments. Regards, -- Thierry Carrez General Manager, OpenInfra Foundation Director, OpenInfra Europe

3 3