 Good morning everyone. Welcome to San Diego. The weather is beautiful down here and I'm from the Bay Area. You know just a couple hour flight and it's like 40 degrees warmer in particular in the summer down here but it's amazing. We have a great three days for all of you this week. Open Source Summit and the Embedded Linux Conference is a great event. There's so many different people here from different projects and communities. One of the things I encourage all of you to do is really try and talk to somebody who may be working on a technology or a project that you're not necessarily familiar with and I'm going to show you in a minute why that's important but I think that's one of the best parts about an event like this is you have such a broad representation of people who are working in technologies that may be adjacent to each other but might not actually know each other that well. But before I get started I of course want to thank our sponsors. First I want to thank our Diamond sponsor Intel. Let's give them a round of applause. Our Platinum sponsors, the Cloud Native Computing Foundation, Google, IBM and Red Hat. Let's give them a round of applause but most importantly I want to thank the chairs and program committees for doing all the work trying to sort through all the different talks and choosing the ones that they thought would be best for this particular event. It's a lot of work and these folks do it so well. I won't go through and read every single name here but I think I went through this this morning. I think I know all of you and again I just want to thank every single one of the folks who do all this work. Let's give them a huge round of applause. Please visit our sponsor showcase as well without the showcase. We can't do events like this and there is a lot of cool things down there. I was checking it out yesterday when they were setting it up. It's on the fourth floor in the sapphire ballroom so go down and check it out. Food and beverage is also located. The meeting and lounge spaces and developer lounge are all down there, the sandbox so go check it out. Also please check out the schedule on the go so you can visit the schedule by using a QR code on the back of your badges or just go to the website URL located there. A few other things that I wanted to mention is some of the diversity and inclusion initiatives that we have this week. Today we're hosting a women in open source lunch at 1255 at the Vella restaurant. If you haven't signed up already for that please do and we also have on Thursday a speed mentoring program at 2.20 p.m. that is on the elevation on floor 30. Also if you haven't done that, haven't registered, please do that now. I also want to do a quick reminder about our code of conduct. It's prominently displayed. Any of our staffs can refer you to it but essentially all attendees should feel welcomed and included at this event. If you have any questions at all please contact any of the people wearing a staff badge or shirt and they will be able to help you out as well. So with those housekeeping notes I thought I would kick off this year's event with a cool video about an open source project here at the Linux Foundation. So let's just roll this quick video before we get started. Every single part of the filmmaking process is touched by software and a lot about software is open source software. The Academy Software Foundation exists to provide a great home for open source projects that we as an industry use every day. You are a user of open source software or an engineer or a company that relies on open source software we want to create the right ecosystem for you to get the most out of the open source software that you need to use. Find us at aswf.io and join the mailing list and see how you can get involved. How cool is that? I'll tell you. 16 years ago if you had asked me if an open source project would have Spider-Man, Iron Man, Rob Brito who's the president of Industrial Light and Magic and is the chairman of the Academy Software Foundation was nominated for a visual effects Oscar this year. It's just amazing and the Academy Software Foundation if you haven't heard of it or are interested at all in the visual effects industry or the film industry it's one to check out. I will say without necessarily I mean maybe I will pick on a few other projects none of our projects have a real that cool like not even well I mean so Linux has got the penguin so cute right people recognize it that's cool the cloud native computing foundation has Fippy how many here know the Fippy and friends so this is a very cute set of mascots so okay they're kind of trying to keep up with the Academy Software Foundation and then our networking group has this really cool mascot very complex architectural diagram they get it it's their thing okay but you know the the cool thing is no matter whether it's networking the Linux kernel project cloud native computing foundation with projects like Kubernetes and many many more or the film industry with Academy Software Foundation you know open source is really pushing innovation just beyond software into all sorts of different areas in tech and I was talking the other day with John Corbett who's the editor of Linux Weekly News if you like Linux and you want a good source of news Linux Weekly News is definitely a good one and John was saying to me like you know there's so many different projects at the Linux Foundation he seems to be announcing new ones all the time but you never actually talk about the method to that madness and you know folks want to know like what's going on at the Linux Foundation kind of why are you doing what you're doing and I told them like well one of the reasons for that is the first rule at the Linux Foundation is don't talk about the Linux Foundation meaning like we'd like to talk about the developers who work on our projects we like to talk about the projects themselves I think they speak for what we do with all the amazing outcomes whether it's in the automotive sector or in embedded Linux or so forth but I thought I would spend a few minutes today forcibly kind of almost painfully talking about sort of where the Linux Foundation has been and where we're going so that it can give all of you a little bit of context and then finish by announcing a few more projects that a couple more projects that are joining the Linux Foundation family this week so as you all know by our name the Linux Foundation started out as a home for Linus Torvalds and as an organization that I often characterize just does the the janitorial work for what is just the one of the greatest projects and collaborative innovation efforts in the world and by janitorial work I mean you know we're there to keep the infrastructure running that enables that great investment we're there to host events like this you know the original open source summit was actually a Linux event where the whole idea was hey let's get these developers and this community together in person because we bet in a couple of hours we can reduce the email traffic on LKML by an order of magnitude just by letting people resolve differences face to face we also work on providing a legal framework of managing trademarks of helping to make sure that the intellectual property that the world is investing in and depending on is reliable and something that people can count on so that's kind of how we got started and that's not everything we do but that's a decent summary of kind of how we began well what happened next is we started then seeing communities sort of jump up right around Linux whether it's projects like Yachto which is an embedded build tool how many people here work on the Yachto project so quite a few of you right we're at the embedded Linux event you know Yachto started off Yachto came out of Intel and some other technologies that were in that area I see Dave Stewart right there it was one of the very early people working on that and it's now grown to be really a de facto way that people build custom Linux systems KeraGrade Linux was another one that came out of the telecommunications industry so this kind of started going so these were things that were kind of adjacent to Linux and we started using kind of the tools and methodologies what we were doing in those areas and then along came new projects this time in the networking sector so Open Daylight came along back when software defined networking was in somewhat early days and the telecommunications industry was taking all of the hardware that they were using to run their global networks abstracting that into software and then managing that virtually and at the time an SDN controller like Open Daylight was a critical part of that transformation of these global networks and so we worked with a huge set of stakeholders to build an open source project that would create a free open source controller that the industry could leverage and they do to this day that's when things started getting a little bit crazy and more and more organizations and wholesale industries started coming to the foundation saying we like what you're doing in terms of helping these communities grow enabling these brilliant developers to create amazing innovation outcomes building wholesale new markets around new categories of computing and we started doing that in a huge way you know you just saw the Academy Software Foundation we spent two years with the film industry and the Academy of Motion Picture Arts and Science convincing them and showing them how to participate how to share their intellectual property how to collaborate as a community so that they could open source all of the projects you saw on that reel and enable essentially more visually appealing and compelling film experiences for all of us in the automotive sector we've worked with now i think a dozen of the top automotive manufacturers in the world who are now using automotive grade linux in production in millions of vehicles to create that in vehicle software experience that you know back when we started it wasn't the top reason someone bought a car people bought cars because of the color or gas mileage or the body of the car today software is one of the top reasons why people pick one vehicle over the other and when the auto industry knew that they needed to create a ton of software to enable their vehicles to have a rich experience they chose open source and they worked with us to go tackle that particular effort many people here this week are working on next generation vehicles and lots of cool technology and the best part about it is it's all open source in that particular project the cloud native computing foundation is one of the hottest projects going right now and what i would remind all of you of is that the cloud native computing foundation isn't even that old how old is cncf now four years i'm getting a four years right there it was started based on an initial contribution from google with kubernetes project has obviously grown to many more projects but the thing there is the work in open source was just part of the effort i see there's a lot of folks here from cncf in the audience and i remember having conversations with many of you back then saying you know the real goal this is not only to build technology and to enable kubernetes to succeed but to move the entire industry to a new way of deploying and developing deploying and managing software this sort of container microservices approach using devops rapid methodology back then was a new thing and has become wildly successful i think there are over 450 members of the cloud native computing foundation today thousands and thousands of developers we're going to be back here in november in san diego and we're spec expecting i think over 10 000 people here for the cloud native computing foundation event in november so if you need a hotel room you better sign up right now to get to that event we even kind of started going beyond open source projects into things like let's encrypt which is both an open source project and an actual service how many people here know let's encrypt oh that's awesome when we first started talking about let's encrypt it was not that many people but essentially let's encrypt is the world's largest certificate authority the idea here was if we could make https if we could provide free tls certificates to everyone all of our security and privacy on the internet would be better that if you build everyone up collectively to have secure ways of communicating that would be better for society and that has knocked it out of the park is there anyone here who works on the lexan encrypt project in the audience there's a couple people back there this is just amazing work it has done so so well tars is another example of an rpc framework out of china where we have projects coming in from other regions of the world using really innovative technology at high scale and we're not just stopping at these initiatives we're now pushing even further and this year what you've seen is a move from not just open source but also into open standards and open specifications what we've realized over time is that in order to enable some of the open source implementations that are important to our projects and to all the people in our ecosystem we also need to have specifications and standardization to enable that interoperability or consistency in many cases graphql is a great recent example of a project that has come to the Linux foundation and is really if you if you haven't checked out graphql this is an incredibly important project go check it out on the graphql website we also have open specifications with implementation oci the open container initiative is not only a container specification but it also provides a legal framework so that people know that when they implement that specification that they have intellectual property that they're confident and can trust and then we recently announced the joint development foundation the joint development foundation is an organization under the linux foundation focused on very quick and straightforward open standards initiatives this is essentially taking the rapid innovation you see in open source and bringing it to the world of standards now i know this is a very open source friendly room and what i hear often from open source people is criticisms that oh you know the problem with standards that we hate standards they take too long and you know we don't need standards we're just going to implement it in the code and then of course the standards people i won't repeat what they say because this is really much more of open source crowd but what what is very clear is that you do actually need both and what the linux foundation is hoping to bring to the table through jdf is a more rapid way to do standards development that enhances and is interlocked with open source development so that we can have the best of both worlds but we're not just stopping there recently we've also delved into open hardware how many people here know risk five so of course we're at the embedded linux events most of the events i go to don't know that maybe as well but it's an instruction set an open instruction set this is an amazingly fast growing project under the linux foundation we also announced this year the chips alliance it's an open hardware design project if you haven't checked out the chips alliance i think this is something worth checking out as well and we have a few more open hardware projects that we're going to talk about in a little bit but we're not even stopping there so what you're seeing here is you've got open source projects at every layer of the stack from the open js foundation which has things like no jfs and a lot of javascript projects all the way down to infrastructure linux kernel down to firmware hardware you know just at every gamut of the stack that combined with open standards creates better faster open innovation and the next generation of projects that we're starting to see emerge evolve around now open data so open data is now something that we're really seeing is another new generation of open source-like projects that are important to all of us in particular as we see the need for data in use cases around machine learning and other things that make the world better for us we need better ways just like open source licensing for code to license and share data so one of the things the linux foundation did was was we created an open data license agreement it's just two agreements that enable people to share and organizations to share data one is an Apache-like sort of permissive license the one is more of a gpl-like restrictive share back license you can choose based on whatever requirements you have but what this does is provides a consistent way for people to license data sets to enable better interoperability or better sharing more importantly amongst those data sets we've also created something called data practices.org which is a set of best practices around how to actually share data and we've even partnered with a wholesale industries in this case with our LF energy initiative to be able to share data inside of specific industry groups in this case the utilities so that we can enable that data to be used to lower your power bill to fight climate change and to produce a smarter distribution of energy that all of us can use and so that's sort of been the evolution of the linux foundation in terms of how we've participated in open innovation and how what started with and continues to be the most important open source project in the world with linux has expanded beyond linux to other layers of the stack in terms of open source to standards to open data to open hardware and we will see even more and with that I have a couple of new projects at the linux foundation that we are announcing this week the first project I want to talk about comes back to the concept of privacy and security and that project is the confidential computing consortium the confidential computing consortium is has been created to accelerate the adoption of essentially confidential computing which is a form of encrypting not data at rest not data in transit but actually data in use and we have an amazing set of organizations that are backing this from Intel to IBM to Red Hat to Microsoft to Alibaba and many many more and today I want to bring out two people who are participating in this effort from two organizations that are actually contributing projects this week to the confidential computing foundation let's first bring out Laurie Weigel the VP of architecture graphics software and general manager platform security at Intel welcome please give her a hand and John Gossman distinguished engineer architect from Microsoft to learn more about this welcome John all right why don't we come over here and have a seat so how many people here are aware of the concept of confidential computing or securing data in mostly the front row mostly the front row okay we've got some reporters here we've got some deep technologies about Microsoft employees and Intel employees so there you go but you know confidential computing is an important concept and I'd like to start off if you one of you two maybe I'll start with John could explain give us the primer what is confidential computing so I think the easiest way to explain this term and I think it's interesting that so few people are familiar with even in this crowd is an indication of how new it is is to think about our own data as users of the web or commerce or social network what do we care about that data obviously we care about it being secure we don't want you know hackers to get on and use it against us and we also care about privacy so and this is something when I think we're all much more aware of than we may be in the past this is constant for privacy so that first word confidential is covering the fact that we care both about security and privacy and then if you think about then with that data you expect that the connection to the server is going to be securely the network is connected you just don't you take that for granted mostly now that and that that data also you hope that whoever gets your data is going to encrypt it at rest on the disk so that it's again both secure and private but I think we also know that at some point some sort of algorithm is going to have to do something with that data and if it's just completely an opaque encrypted blob you're kind of in problem so the context of confidential computing is you alluded to in the introduction is that we can actually keep the data encrypted while programs are working on it and this turns out to have you know just an enormous wealth of scenarios that could support yeah I mean it's amazing Laurie your group has done probably the some of the most research in the world on this concept of confidential computing and give us a little bit more depth on this concept of a secure enclave and how it works because I think that helps people understand what it actually is sure so for a few years now we have had a capability built into Intel processors or some Intel processors called software guard extensions and that provides a hardware based capability for protecting an area of memory that you could think of as a trusted execution environment so as John mentioned in that trusted execution environment the hardware protections are there for both the data as well as the code and if you think about it as we're moving more and more into artificial intelligence people care about the privacy of the data but they're also increasingly concerned about protecting their algorithms because a lot of times that's where the intellectual property is so this whole concept of confidential computing and trusted execution environments can be used for both of those things yeah yeah so John Microsoft is contributing an SDK this week to the confidential computing consortium and I assume that's to let more developers be able to access this technology but what what was the decision making and what's behind this effort to open source that? Sure so I don't think I probably have to sell the merits of open source to too many people in this you're at the right event this room but the open enclave SDK is designed to make it easier this is you know as Laurie learned to start it out as hardware instructions are very on the silicon and kind of builds up from there well that's a pretty low level API that most developers would prefer to get on quickly and so with the open enclave SDK and along some of the other contributions other people are bringing to the to the consortium it's to make it easier just like anything this is middleware this is the next level provides application portability makes it easier to write applications that run across both devices cloud and and raise up that level of abstraction and also bake in some you know some patterns because one of the things again with security software is you want to get the tricky bits right and you want to have as many eyes and people looking at that and figuring out making sure that that's correct as possible yeah what tell me about what why that's why the time is right now sort of the city i see a lot of big names up there but what is kind of the state of the art of you know academic research and industry adoption of this like what why this particular project now so we felt in particular that this was a the perfect time to do this because the technology the concepts have been out there long enough that we're seeing a lot of traction in the research community for Intel SGX specifically we have more than 200 academic papers that have been published but we're also seeing a lot of our ecosystem partners beginning to invest in this space and so it's a really great time to bring those efforts together so that we don't end up with fragmentation and in fact we have the best minds collaborating on moving this forward and making it easy for developers to access it you know we we live in a world where a lot of times convenience and privacy are intention with each other and this is a capability that has the promise of letting us have it all but we do need to cooperate and collaborate to make that happen yeah i mean i think so one question i'd like to ask both of you is i think some people are here are familiar with sort of secure enclaves to be used for like authentication or something like that but you've both been thinking about a lot of different use cases beyond things like that tell the folks about some of the examples of how this particular technology might be utilized so some of the early work that we're seeing happen right now that is probably the most interesting is collaboration between institutions on very sensitive information like healthcare data so think about the innovation and the new discoveries can happen that can happen if the data can be shared but yes this is the very very most sensitive data so this notion of multi-party compute and being able to use confidential computing and data protections to enable that sharing is going to unleash a lot of innovation yeah and you know as i was talking earlier you can see all these things all linked together in terms of there's how you license the data there's safe ways to then share that data without disclosing it to others all this stuff starts to come together which it would be great for all of us john how about you what are you seeing out there no what says the fascinating thing is you think of it first of all like like a network you can think of as security and privacy but then you start thinking about well if you've got this place where you can compute on data now you can have transactions that are joint transactions between parties that don't entirely necessarily trust each other they certainly don't want to link that data from one place to another and work together you know obviously there's a lot of getting that chain of trust in the code and that's just the code in order to make sure that that is all working but this is an incredible enabling technology and i just think we haven't even really scratched the surface on what the scenarios for this are yeah yeah well i would encourage all of you if you work for an organization that cares about this to go and check out the confidential computing consortium if you want to go get the sdk and check it out uh if you want to read some of the 200 papers that lori's organization has painstakingly published uh go check those out as well but we're really excited about this particular effort we do think it's something that can improve the privacy and security of all of us so thank you both for being here and we look forward to great things thank you but we are not stopping there we've got another open hardware uh initiative uh so this week we also announced that the open power foundation is becoming uh a part of the linux foundation uh this is a community that is enabling innovation on the power architecture uh and here to discuss it with us is ken king the gm of power from ibm ken come on up thank you i see uh i see lori tried to trip you as you were walking out on stage there now now that we're now that we're good friends and we're talking about that i think that will let us fix that we got plenty of room for innovation for everyone tell us about what's going on in open power yeah we're real excited uh we we let the news out yesterday even though we're officially putting the uh press release on the wire today and we've already got a lot of great press and analysts stories written about it the the community is excited we've got endorsements from a number of different players but basically what we're doing is um we're taking the we've seen what's been happening in the industry right with all the the move towards big data data explosion AI etc and the need for greater levels of performance in the system not just the processor but in the system yep and you look at some of the challenges going on at the processor with more's law and other things we've seen through the open power foundation work over the last five years the need to drive much greater levels of integration with the accelerators with the storage with the memory etc and we've been doing that and we've been driving that innovation but we realized as we see things going off the open compute project things going on with you know other new open source ices that are coming out and even others like hyperscalers and other players that are actually hiring chip designers and creating their own accelerators their own capabilities to address that performance that there was a need in the industry to take the openness of power to the next level and that's what we've announced yep we're taking the instruction set we are now licensing it to the open power foundation such that anybody can implement on top of it royalty free with patent rights great so now anybody can implement any kind of open capability hardware capability on top of it without any concerns about what that means we've got a lot of great feedback on that we're also taking that to a level of open governance which is where our relationship is growing which is now the instruction set architecture can be enhanced extended added to based on an open model so the there will be an open governance workshop in the open power work group not workshop work group and the open power foundation that will be the voting body for determining whether anybody's extension can be approved and it just needs a majority vote for that item gets one vote so it is now an open governance model for adding an extending to the ices which is exciting as well and it just reinforces the point of this is really an open model yeah secondly we are contributing to the community our rtl and and open source for our open cappy and open memory interface which are coherent accelerator and memory interface standards they were now putting in the community yep and we're looking to work with other communities like cxl and others to drive convergence to create truly a common open standard for those acceleration and io and memory interface capability so we're excited about that as well and then last but not least is we're taking the open power foundation and we're putting it staying with its own membership and and board and everything and its normal policies but it'll be a part of the linux foundation yeah and we see that as a message to the marketplace linux foundation is one of the leading if not the leading open source community and body in the industry and having the open power foundation as part of that is a statement to the industry that this is truly an open model yeah we had you know we have had great response just in the 24 hours or so i'm getting linked in requests like crazy for people to want to collaborate i don't know the naming names and companies and so forth but you know we really see this as a is a great way to really open up the hardware side of the industry yeah and what's interesting is you know at events like this we get a lot of requests for matchmaking essentially with chip designers and hardware folks and software people because you know we're seeing more and more from different organizations or different users of tech you know the need for more hardware acceleration more custom hardware acceleration for again you know machine learning and the kind of compute intensive applications that are emerging in the market now so we are psyched to have you on board and very happy to be working with the open power foundation and hope for many great things to come from it we look forward to it all right good partnership all right thank you all right we just have a couple more announcements to share first the cloud native computing foundation again back here in november book your hotel rooms now that's going to be sold out but they have added 49 new end user members including godaddy linkedin vodafone so now there are over 100 end user organizations that are members of this particular effort this is an important thing to look at because it really shows that the technology is becoming mainstream and widely adopted our open mainframe project is announcing new members and a zowie conformance program so if you are a part of that particular effort go check out the open mainframe project as well i have one final thing that i want to do today and that is to recognize someone in our community that has made a significant contribution to this sort of story about open source and standards and sharing that i've been talking about how many people here know the spdx project the software package data exchange so this is essentially a standardized way to share a software bill of materials across a supply chain as open source becomes fundamental to all technology products and services and as the dependencies and complexities of that grows with hundreds and thousands of packages in any product or service the need for the industry to track what is actually in every technology product and service down to the package version number licensed and so forth was recognized years ago as a problem that would come to forth and in order to meet that challenge the linux foundation and lots of passionate folks from the legal industry who wanted to track license compliance and intellectual property across that supply chain got together to figure out a good way to do it and as you can imagine when lawyers and engineers get into a room together great things happen every single time why what's so funny all right but um one of the people who really led this uh was an attorney uh who's now an attorney at canonical but her name is gelane lovejoy uh gelane has spent countless hours since 2009 working on the sdpdx project working to make sure that the requirements of a very complex uh specification of a very complex software supply chain could happen and really you know one of the gifts that gelane really has is building a bridge between legal minds and software minds which is a true true gift so as part of that we want to recognize gelane lovejoy by giving her an award today to honor her first service in the league community is gelane where is gelane can gelane please come up on stage somebody's pointing is she oh there she is oh my yeah gelane here's your award thank you i've known you for a long time yeah uh thankless hours so much work uh i have seen you so patiently explain legal concepts it almost repeating yourself over and over okay one more time let's talk about rule of law uh but you've done an amazing job and we really want to thank you let's give gelane a huge round of applause thank you can we get a picture right here there we go thank you thank you thank you thank you all right uh with that i would like to uh now introduce our first speaker