OSSF 2018 - Dawn Foster of Pivotal - Open Source Collaboration: Finding the Right Balance

•

0 gefällt mir•80 views

Collaboration within open source projects is becoming increasingly important for most companies, but it can be difficult to strike the right balance between the needs of the company and the open source project. Dawn Foster works on open source software strategy at Pivotal and has 20+ years of experience leading open source software initiatives at companies like Puppet Labs, Intel, and Jive Software. Her talk will focus on how companies can develop a successful strategy for participation and collaboration in open source projects, including how to be a good corporate citizen.

Technologie

Open Source Collaboration:
Finding the Right Balance
Dawn M. Foster
Open Source Software Strategy Lead at Pivotal
dafoster@pivotal.io @geekygirldawn fastwonderblog.com

About Me
! Geek, traveler, reader
! OSS Strategy Lead at Pivotal
! 20+ year tech career focused on
community & open source  
(Intel, Jive, Puppet Labs, etc.)
! PhD at the University of Greenwich
researching the Linux kernel
!2
Photos by Josh Bancroft, Don Park

How Does Collaboration Work
in Open Source Projects?
!3

Structure
!4
Leadership
Maintainers Maintainers Maintainers
Committers
Committers
Committers
Committers
Committers
Committers
Contributors Contributors Contributors
Committers
Contributors Contributors
Contributors Contributors Contributors Contributors Contributors
Contributors
Contributors
Contributors
Contributors
Users Users Users Users Users Users

Individuals
Employees Contribute
Individuals as Leaders
Small World
!5

Contribution Strategy and Plans
Align with business goals
Execs understand importance
Employees understand impact
of their work
!7
Image by Nick Youngston, Alpha Stock Images CC BY-SA

Which Open Source Projects?
Already Use
Existing Contributions
!8
Image by Colleen Simon for Opensource.com CC BY-SA

Resources Required
Grow vs. Hire
Funding for Membership
!9

Resources Required
Guidelines / Processes
OSS Program Office
!10
Image by Nick Youngston, Alpha Stock Images CC BY-SA

Measure Success
Criteria for Success
Data Required (CHAOSS)
!11

Getting Started
Join
Read the Docs
Lurk & Understand
Start Small
!13
Image by Filip Maljković CC BY-SA

Learn from Feedback
Avoid Getting Defensive
May Need to Iterate
!14

Work with the Community
Discuss Changes
Early and Often
Lack of Control
!15
Image by The Linux Foundation CC BY

Relationships
Attend Events
Get to Know People
!16
Image by The Linux Foundation CC BY

Upstream your Patches
Reduces Your Overhead
Benefits the Community
Right Thing to Do
!17

Maintenance Expectations
Small Contributions vs.
Large Contributions
!18

Open Sourcing Your Software
No Dumping
Maintenance
Community
!19
Image by C. Watts CC BY

Resources /
References
Learn more about
open source
collaboration and
related topics.
Linux Foundation TODO Group
! https://www.linuxfoundation.org/
resources/open-source-guides/
GitHub
! https://opensource.guide/
Red Hat’s Opensource.com
! https://opensource.com/
resources
!20

!21
Dawn M. Foster
dafoster@pivotal.io @geekygirldawn fastwonderblog.com
Thank You and Questions

!22
Transforming How The World Builds Software

Weitere ähnliche Inhalte

Ähnlich wie OSSF 2018 - Dawn Foster of Pivotal - Open Source Collaboration: Finding the Right Balance

How to sustain a tool building community-driven effort

Jordi Cabot

Talk It Out, Or Write It Down?

mikescopino

20121112 ma veterans portal design process class

Yasmin Fodil

Driving the Technology Bus with Social Software

Meredith Farkas

Know Thy User: The Role of Research in Great Interactive Design

frog

Personal dashboards for individual learning and project awareness in social s...

Wolfgang Reinhardt

Big Data and ethics meetup : slides presentation michael ekstrand

IntoTheMinds

Hoozin deck 11.0 - send 1.5

Udi Zohar

What Do Future Technology and Trends Mean for You?

Anne Adrian

The operationalisation of collaboration: in search of a definition and its consequences on analysis Collaboration has been defined in numerous ways. Researchers interested in collaboration at the individual or organizational level need to pay special attention to the adoption of a specific definition, as this is likely to have major implications for the research design and outcomes. With respect to collaboration within open source software projects, this presentation has two objectives. Firstly, this presentation will investigate a wide variety of definitions of collaboration from the existing literature. Secondly, the presentation will look at theoretically informed selection of a definition. Throughout the presentation, specific emphasis will be put on the implications of adoption of several definitions of collaboration for the application of Social Network Analysis to the study of open source software, particularly considering data collection and analysis. Open source software is developed in the open where anyone can view the source code and anyone with the knowledge to do so can contribute to the project. Because people from around the world work on these projects together using online tools, it is a relevant setting for studying collaboration. An interesting aspect of open source collaboration is that private resources from individuals and organizations are used to develop software that is released as a public good. Social Network Analysis can be used to understand the network relationships between the individuals who develop this software. Given the interest in collaboration from researchers from different backgrounds and disciplines, similar research is likely to produce considerations to stimulate further thoughts about definitions of collaboration in several domains and research settings.

Operationalisation of Collaboration Sunbelt 2015

Dawn Foster

Your company has just started an open source project, but where is the community? This talk provides practical tips and suggestions along with what not to do when building a community around your company’s open source project. Building a community around your company’s open source project is no easy task, and there is no magic bullet or one size fits all solution. However, there are some things that you can do (or not do) to increase the chances of successfully building a community for your project. A few of the dos and don’ts covered in this talk include: Planning and product management: Do use a transparent process in the open with tools that allow anyone to participate. Don’t use your internal tools and private meetings to make all of the decisions. Encourage participation: Do be proactive about helping community members contribute in meaningful ways. Don’t inadvertently set the expectation that employees will be the ones always answering questions and making decisions. Be honest: Do be honest with yourselves about where and how you prefer to have community members contribute. Don’t encourage people to contribute in areas where you are less likely to accept outside contributions. Managing contributions: Do have enough people trained in how to provide constructive feedback to manage the flow of incoming community contributions. Don’t assume that your existing developers have the time and skills to magically perform this difficult function. The audience will walk away with practical advice about building communities for corporate open source projects.

Building Community for your Company’s OSS Project

Dawn Foster

Forum meeting minutes

frontiertw

Open Source Software Governance Guide: Developing a Matrix of Leading Questio...

Javier Canovas

How does open source software happen? What can we learn from it for cross-organizational collaboration? In this presentation, ifPeople cofounders Tirza Hollenhorst and Christopher Johnson talk about what open source is, the process by which it is created through a voluntary community, and a concrete process that can be used in any project (even non-software projects) to "social source" the project.

An Open Source Approach to Collaboration

ifPeople

The recent and fast expansion of OSS (Open-source software) communities has fostered research on how open source projects evolve and how their communities interact. Several research studies show that the inflow of new developers plays an important role in the longevity and the success of OSS projects. Beside that they also discovered that an high percentage of newcomers tend to leave the project because of the socio-technical barriers they meet when they join the project. However, such research effort did not generate yet concrete results in support retention and training of project newcomers. In this thesis dissertation we investigated problems arising when newcomers join software projects, and possible solutions to support them. Specifically, we studied (i) how newcomers behave during development activities and how they interact with others developers with the aim at (ii) developing tools and/or techniques for supporting them during the integration in the development team. Thus, among the various recommenders, we defined (i) a tool able to suggest appropriate mentors to newcomers during the training stage; then, with the aim at supporting newcomers during program comprehension we defined other two recommenders: a tool that (ii) generates high quality source code summaries and another tool able to (iii) provide descriptions of specific source code elements. For future work, we plan to improve the proposed recommenders and to integrate other kind of recommenders to better support newcomers in OSS projects.

Supporting Newcomers in Software Development Projects

Sebastiano Panichella

Contributing to FOSS (archived)

Bud Siddhisena

User stories suresh_02.24.11

Suresh Fernando

There's An App for That: Exploratory Research with Mobile Users

Diane Loviglio

Developing a Communication Plan for the Year Ahead

Federal Communicators Network

Slides for keynote "Social Media and AI: Don’t forget the users" at WWW 2017 workshop "International Workshop on Modeling Social Media: Machine Learning and AI for Modeling and Analyzing Social Media". I am arguing that we need consider two things: the source of what we use to make good algorithms and whether users are impacted the way we want to impact them. The talk is based on two uses cases around providing diversity (something many of us believe is good) to users: 1. Engaging through diversity: serendipity (same algorithm, different sources) 2. Engaging through diversity: awareness (effective algorithm, perception) My goal is to say, we may have the best AI, but we may get it wrong if we forget the users. I don't have answers, but it is important that we ask the right questions in today's world.

Social Media and AI: Don’t forget the users

Mounia Lalmas-Roelleke

Ähnlich wie OSSF 2018 - Dawn Foster of Pivotal - Open Source Collaboration: Finding the Right Balance (20)

How to sustain a tool building community-driven effort

Talk It Out, Or Write It Down?

20121112 ma veterans portal design process class

Driving the Technology Bus with Social Software

Know Thy User: The Role of Research in Great Interactive Design

Personal dashboards for individual learning and project awareness in social s...

Big Data and ethics meetup : slides presentation michael ekstrand

Hoozin deck 11.0 - send 1.5

What Do Future Technology and Trends Mean for You?

Operationalisation of Collaboration Sunbelt 2015

Building Community for your Company’s OSS Project

Forum meeting minutes

Open Source Software Governance Guide: Developing a Matrix of Leading Questio...

An Open Source Approach to Collaboration

Supporting Newcomers in Software Development Projects

Contributing to FOSS (archived)

User stories suresh_02.24.11

There's An App for That: Exploratory Research with Mobile Users

Developing a Communication Plan for the Year Ahead

Social Media and AI: Don’t forget the users

Mehr von FINOS

2019-03 - An introduction to FINOS

FINOS

Technology leaders (CTO, VP Infrastructure, etc.) at most organisations are always looking for better and more efficient ways to address business needs. Performance is one of the critical attributes leaders consider while making data center infrastructure decisions, but with limited budgets, cost efficiency becomes an important criteria as well. This talk will discuss both CapEx and OpEx advantages of open networking, combined with technical benefits that lead to easier automation, scaling and troubleshooting.

OSSF 2018 - Peter Crocker of Cumulus Networks - TCO and technical advantages ...

FINOS

This talk focuses on how Financial Services companies prepare for the next big technology step change while running a heterogeneous infrastructure environment (edge, fog, colo, primary data centre, etc). Financial Services companies are looking for best practices gleamed from hyper-scale companies like Facebook, Microsoft and Google who run highly efficient private and public clouds. The sharing of open hardware and data centre designs is a core strategy for these companies and the basis for the Open Compute Project (OCP). The Open Compute Project (OCP) was started by Facebook in 2011 with the idea of delivering the most efficient designs for scalable computing through an open source hardware community. We believe that openly sharing ideas, specifications, and other intellectual property is the key to maximizing innovation and reducing complexity in technology components. Goldman Sachs (a current board member of OCP) is one example of a company who is leveraging these designs. OCP designs are more efficient at the ingredient level (server, storage, networking) compared to traditional gear yielding energy savings of 15% + and reduced service costs of ≈ 50%. Also, OCP data centres achieve PUE's better than 1.1 (definition). In fact, IDC forecast that by 2020 OCP Servers are expected to represent 50% of the global market. In this session we would discuss the key strategies Financial Services companies need to consider now to simplify the migration and data centre transformation from conventional gear to OCP and open source. We would provide specific examples of how other Financial Services companies and large enterprises have made this transition. Additional goals would include: • Research findings – share results comparing OCP with legacy infrastructure from large enterprises who have tested OCP gear in their local facilities. • Facebook and Microsoft – help the audience understand which OCP designs from hyper-scale companies can be used for each environment (colo, edge, etc.)

OSSF 2018 - Steve Helvie of the Open Compute Network - Rethinking Infrastruct...

FINOS

The scale of modern software systems is growing beyond the capability of individuals and teams to keep track of them. This is caused by new software development and deployment technologies, DevOps automation, increasingly powerful hardware and massive use of open source. Traditional proprietary Software Composition Analysis (SCA) products, which were developed to help mitigate Open Source licensing and vulnerability risks, and ensure software is within company policy and industry compliant, have struggled to keep up with this new scale and its modern methods like continuous integration, continuous package updates and agile releases. Because proprietary solutions are unable to keep up, companies are working to build their own internal systems to plug the gaps, which takes away from their core business needs. The Eclipse Foundation recently announced a new project, OSCAR, to solve the problem of scaling SCA to modern needs with an Open Source approach. OSCAR, which stands for Open Software Composition Analysis Reinvented, aims to integrate the new building blocks into a complete installable SCA solution and act as an industry forum to coordinate coherent further development. Different from other “community driven” OSS projects, OSCAR is built around an industry consortium of supporters, which fund and contribute to the project, in an Eclipse Working Group (OpenSCA). Foundation of a Steering Committee, decision meetings on first milestone goals to build as well as first contributions are underway. The talk will explain why SCA is vital for any organization who works with Open Source, the OSCAR’s “hybrid” approach, and give an outlook on what to expect from OSCAR

OSSF 2018 - Stefan Just of Codescoop - OSCAR - a new approach to Software Com...

FINOS

OSSF 2018 - Nick Kolba of OpenFin - FDC3 and the Legacy of Web Intents

FINOS

Banks have been users of open source software for a long time, but now they are thinking seriously about giving back. A lot of internal resistance needs to be overcome, and lots of individuals within a large investment bank truly believe their piece of custom built software provides a competitive advantage. At Adaptive, we have seen a lot of very similar internal projects at various institutions, and have formed a view about what truly constitutes competitive advantage. What is good for the organisation may not be good for a given development manager. Further to the issues around over jealously guarding specific development efforts is the problem that what is open sourced is often far too coupled to a bank's non-open sourced tech stack. Causing more subtle difficulties in working with another bank's open sourced technology stack is that it is often implicitly coupled to their culture, processes or business model. Picking what to open source is a huge part of the challenge. In this talk, I will give Adaptive's view on what is competitive advantage, what to open source so that it is picked up by the wider community, and actual benefits are seen.

OSSF 2018 - Matt Barrett of Adaptive - Open sourcing a bank's software: exact...

FINOS

In this talk Jamie Jones, GitHub’s Principal Architect, Diane Mueller is Director, Community Development at Red Hat, and Maurizio Pillitu, FINOS DevOps Director, present what are the most common barriers and technical frictions that prevent financial institutions to fully embrace open source. The FinsServ Developer Experience is a new FINOS Program that aims to consolidate a safe, accessible and shared workflow for developers in the financial world, who are welcome to join the talk and share their experiences. The program leads will be on stage to present charters, updates and to call for the participation of developers and software vendors wanting to plug their build automation tools and data APIs inside the FINOS Developer Experience.

OSSF 2018 - Overcoming Compliance Barriers to Open Source Collaboration Infra...

FINOS

This training session will cover some of the topics from the OpenChain curriculum, including: introduction to intellectual property law as related to open source introduction to open source licenses overview of using open source software in products and open source license compliance considerations for open source contributions and projects The goal of this session is to provide basic foundation knowledge of open source software upon which to start building policy, process and practices within your organization.

OSSF 2018 - Jilayne Lovejoy - Training: Intro to Open Source

FINOS

The draw for financial services' use of open source in today's competitive environment is certainly built on the need to manage costs, but equally as important, to innovate and help solve business challenges. Implementing open source policies, processes and tools the right way could mean the difference between being a leader in the industry and costly mistakes that impact your reputation and bottom-line. In this session, Jeff Luszcz, Vice President of Product Management at Flexera, takes a deep dive into some of the common--and not so common--concerns and best practices surrounding using open source. Jeff will discuss the needs of the different open source culture types including compliance and security, how to manage commercial suppliers and compliance artifacts (third party notices, 'About' boxes, source bundles, etc.), and industry standards such as OpenChain and SPDX. Jeff will address lessons learned from deploying software composition analysis (SCA) scanning tools across the enterprise, the importance of developing processes that enhance the value of engineers and developers versus making their jobs harder, and how legal, engineering, and security work together to develop remediation policies that make sense. Jeff will also discuss how to work best with Open Source projects in order to give back to the community. Join Jeff for this talk if you are involved in open source use, compliance and security and want an in-depth look at both the expected and unexpected issues you could face in your open source efforts.

OSSF 2018 - Jeff Luszcz of Flexera - Day 2 - Open Source Culture, Standards, ...

FINOS

In this talk Jeff Luszcz, Vice President of Product Management at Flexera, explores the lessons learned over years of experience with Open Source consumption, the most common compliance and security issues, reasons for software component rejection, and tips and tricks for improving your compliance efforts. It is becoming common for open source compliance reviews to be performed both when a component is being first selected, or later on after the component has already been integrated into a system. This presentation will detail the most common reasons why an open source software component would be rejected for use or would be removed from an existing system due to compliance or security reasons. This talk will include a checklist of the most common compliance review failures as well as the differences in expectations between the creators of open source packages and their users. Common remediation tasks, go-no tests and documentation expectations will be discussed. The talk is for anyone involved with ensuring open source license compliance.

OSSF 2018 - Jeff Luszcz of Flexera - Common Open Source Intake Issues and How...

FINOS

Many firms first look to open source to lower the costs of their non-competitive technology, like back-office systems. This talk will show how open-sourcing software that is critical to an organization's competitive edge can create value by exploiting the network effects of collaborative development. Jared Broad, CEO of QuantConnect, will explore why his company open-sourced LEAN, its radically open source algorithmic trading platform, and how QuantConnect has attracted over 60,000 engineers with its professional-grade backtesting and live-trading system used by banks and funds globally.

OSSF 2018 - Jared Broad of QuantConnect - Motivations and Business Goals for ...

FINOS

Pull Requests? Upstream Remotes? Compact Discs? Understanding how to publish code developed inside your organization into the Open Source world can leave you with more questions than answers. In this talk, we will cover key strategies, as well as the workflows and tools that make it possible, for moving past merely consuming open source on GitHub to becoming contributors. Whether you are an IT Manager or Head of Open Source, you will walk away with tips to on how to contribute while staying compliant with legal, technical and security approvals within your organization.

OSSF 2018 - Jamie Jones of GitHub - Pull what where? Contributing to Open Sou...

FINOS

Today, open source dominates IT and communications infrastructure from the cloud to corporate data centers and the emerging edge. But open source with its rapid pace of development, frequent releases, and prolific patch set defies traditional practices and conditions for building mission- and business-critical software: stability, auditability and standards-compliance. This talk will examine how companies address this "impedance mismatch" in consuming, integrating and deploying open source in applications that demand predictability and sustainability. In particular, the presentation will cover (re)defining mission- and business-critical in the context of open source technology-centric and process-based approaches to OSS-derived product life-cycles forking and minimizing technical debt building community visibility to support derived product roadmaps

OSSF 2018 - Greg Olson of Open Source Sense - Building Mission- and Business-...

FINOS

Innovation in the past decade has been been propelled by collaborative yet market-driven approaches to intellectual property rights. The standard setting process is a prime example of such a collaborative effort by incorporating the best intellectual property of a given field into a standard and insuring such standard essential patents (SEPs) are then licensed to adapters on fair, reasonable and non-discriminatory (FRAND) terms. This construct has resulted in groundbreaking technology in sectors ranging from telecommunications to autonomous vehicles. However, some have argued that SEPs are incompatible with open source licenses. Examining the historical record of open source development, the open source definition and relevant case law shows that open source and SEPs can and do work together to protect intellectual property rights and spur innovation.

OSSF 2018 - David Kappos of Cravath, Swaine & Moore - Accounting for Patents ...

FINOS

Open source components have become a key building block for application development in today’s market where companies are under constant pressure to deploy products as fast as possible. The recent increase in open source usage, however, has introduced many new security challenges. Over the past few years, we have seen a variety of open source vulnerabilities wreak havoc across the web (Heartbleed, Shellshock, and POODLE) which woke organizations up to the risks that come along with the convenience of using open source components. Join our session to: Learn how open source security vulnerabilities are found Learn how to address any open source security concerns within your organization Understand the difference between securing your open source components and your proprietary code Learn how to automatically detect vulnerable open source components and prioritize security alerts

OSSF 2018 - David habusha of Whitesource - Open Source Vulnerabilities 101

FINOS

Inner source applies the lessons learned from open source way of developing software within organizations. This helps to scale organizations development strategy, break silos of developers, encourage internal collaboration, and be faster to market. If we think about why open source has been so successful, we have to consider attributes such as transparency, communication, collaboration, innovation or meritocracy. And this can be applied internally within the walls of each organization creating an 'internal open source' or the so called inner source. As more and more developers are becoming used to platforms such GitLab, GitHub, or Bitbucket, those are willing to use similar infrastructure and modern tools internally at their organizations. Thus, inner source is another way to modernize development teams, but at the same time, a way to be close to how open source is developed from a cultural point of view, process, and tooling. Inner source can be considered then as a pre-step to publicly release a project. Ideally, only a press-button-action is the difference between having that project as inner source within the organization, or as open source, available to everyone. Daniel will discuss best practices for innersourcing based on his participation in InnerSource Commons, a community of practitioners built for developing and sharing knowledge and patterns for successful innersourcing.

OSSF 2018 - Daniel Izquierdo of Bitergia / InnerSource Commons - Starting wit...

FINOS

Leading Fintech companies are bullish on Open Source, but most of them still don't know how to get involved in ways that harmonize with the Regulatory climate of the Financial Services industry. In this talk you'll learn how to maintain Security within transparently developed software assets and how to teach your internal developers to collaborate safely and sanely? You'll hear about the best pathways to building an Open Source program at your Fintech company without costly mistakes that can reflect badly on your brand. Lastly you'll learn about a community of practice that is perfectly suited to the needs of Fintech companies looking to get started in Open Source.

OSSF 2018 - Danese Cooper of NearForm - Getting the most out of Open Source i...

FINOS

The Developer (GrokOpen - Colin Charles) Your popular OSS project gets corporate-backing & widespread community adoption. You create an enterprise supported version as it's easier to sell an "enterprise spin-off with support" that is better than the currently "stable" community edition. It flourishes as the money starts rolling in. Is one version better than the other? The community gets annoyed but you need resources to keep the releases coming and the code maintained. Just because it’s open source doesn’t mean it’s free. Forking happens. Rewind. What works? What doesn’t work? How do you manage the split personality nature well to keep management as well as the community happy. Learn from other successful models as well as the many failed experiments.

OSSF 2018 - Colin Charles of GrokOpen - Community vs. enterprise how not to ...

FINOS

OpenChain is a scalable, flexible compliance programme, developed by the Linux Foundation. Based on well-understood compliance programmes such as ISO 27001, it maps existing supply-chain procurement and production practices from other sectors into software development. It provides a great foundation for businesses of all sizes to adopt appropriate practices and procedures in place to control development and supply chain risks, with particular emphasis on open source licence compliance. Already adopted by companies like Qualcomm, Siemens, Toyota and ARM, it’s rapidly becoming a procurement standard for open source and open-source-derived software. The speaker, Andrew Katz, has helped companies of all sizes to adopt open chain procurement practices, and presents case studies on the process and benefits.

OSSF 2018 - Andrew Katz of Moorcrofts - OpenChain: a Tested Framework for Ope...

FINOS

Open Source Audits: Good open source software and license management is an essential part of any fintech compliance programme. Where do open source audits fit into this programme? This session will delve into why, when and how audits should be undertaken and consider the consequences, remediation and go forward from an audit. With a practical approach, the session should enable you to understand who should be involved in an audit, and what their roles and activities will be and the outputs that may be achieved.

OSSF 2018 - Amanda Brock of The Open Invention Network - Open Source Audits

FINOS

Mehr von FINOS (20)