 Thank you for attending this session on digital serenity and why open infrastructure matters My name is Edward Idrich. I'm working for the serving cloud sec project as community manager The SCS project is an open source project Hosted by the open source business align. It's a German business as the Asian for open source and Funded by the federal ministry for economic affairs and climate action You may have seen dr. Brantner this morning at the keynote sessions today I want to talk with you. We need to talk about digital serenity because if you follow recent news and media coverage on Cloud technology, you may have seen the term of digital serenity Digital serenity everywhere every cloud claims to be digital sovereign, but let us ask what does that mean? Digital serenity. Let's have a look. Let's have a closer look at this term at this notion and What needs to be given that a cloud provider a software stack an offering? Really is digital seren If we follow recent offerings In Europe, we have seen local operated spin-offs of proprietary cloud providers You name it GCP with T systems Azure with SAP Orange with Asia and so on and so on they all claim to be sovereign clouds because and that's the reasoning because they are hosted and operated in the corresponding jurisdiction, but is this digital serenity because an Property cloud stack is provided and operated in the corresponding country well, let's have a deeper look and maybe we should Step back and have a look at the term serenity in a general sense Let's take a huge step backwards to the year in 1912 where the lawmaker Lasa Oppenheim stated that the excess perhaps no conception the meaning of which is more controversial than that of serenity And it's an indisputable fact that this concept conception from the moment when it was introduced into Political science until the present day has never had a meaning which was university agreed upon and 110 years later. I think this is still true but There are some common definitions that we may agree upon in the sense of this talk let's define serenity as the supreme authority within and territory and If we think of that as the seren What does that mean in the sense of digital serenity? But the notion of Territory does not need to be restricted to pure landmass but also to the resources lying on the territory of the supreme authority and In the eye of recent of the recent attack of Russia to Ukraine There have been some examples that you can think of for example food serenity or energy serenity this means that the supreme authority has the control of the means of production of either food of energy, so The supreme authority is able to control how food or energy is produced and is able to impact and influence this whole process But what does that mean in the sense of digital serenity? Does that mean that if my hardware is located my country? I have full control of the offerings that is run and operated on that hardware. I don't think so We at the seren cloud tech project have defined four layers of digital serenity and have claimed them to be like a pile of stack that needs to be claimed and If we think of these local spin-offs of Azure GCP and so on They may fulfill the legal dimension This means that the data is processed in the corresponding US diction That the process can be influenced by the countries and by the supreme authority, but There is much more This will not guarantee that we have a freedom of choice May I as supreme authority can choose between different offerings? Well, this is not given with Azure or GCP offerings or Do we have in the sense of a technical dimension? The ability to influence this technology to embrace open technology to embrace open standards This is not the case and last but not least the whole stack needs to be operated with knowledge and Competence and this means that we need a further dimension of competence so Let's have a look at these stairs. How do we claim the pill the hill of digital serenity? Let's ask for in regard of the legal dimension Even if data is processed and stored solely in Europe, isn't there still a strong dependency on one single software provider? So what will be the solution? Okay? Let us add some alternatives So we can choose between different alternatives So I can choose between provider a and b or between solutions stack a or b and able To migrate my data between these offerings But this needs open standards these needs migration tools these needs the transparency of the code So that I am able to migrate my workload from one provider for one from run solution to the another So if I can choose between different offerings How can I and influence the future evolution of the software? How can I make an impact on how this software will evolve? How can I shape the software on the stack? corresponding to my needs as a software of Infrastructure provider So there's another solution So some people think that just using open source software Is this digital serenity? Well, let's have a look even if we have the possibility to inspect use Modify and share the software. How can I contribute to design decisions or upstream code? So am I Digital seren because of using open source software or does it need more and I think you're pretty aware of what this more means because you're here at the open infrastructure mid and you all heard of the open for opens so let's call them the fantastic for what we need is Open source open design open development and open community So that we have the ability in an open process in an open community to influence this software To have an impact and to contribute to upstream Projects I think in the keynote there was a short remark on single set of vendor Open source software and this is not the case in regard of digital serenity even if I am Able to inspect the code even if I am able to share really speed the code I will not be able to contribute if the single source provider is Not able to migrate that or is not willing to Have my contributions are migrated into the upstream code. So Are we done yet? Is this all we need do we need the legal dimension? Do we need? the freedom of choice and the for opens to embrace open standards and open communities well Mr. Y is yet again here and is asking himself even if I can participate in the community Developing the software how the heck am I supposed to operate this deck and I already showed you the stairs There needs to be more than just for opens there needs to be a transparent process of sharing operational knowledge between providers between stack providers between infrastructure providers and this if you're curious is Something that we will promote tomorrow in the session by court and phoenix So if you're interested feel free to onboard into the session tomorrow on the open operations concept For true self-determination in the ever-growing digital realm We urgently needs to build skills and share knowledge freely and in unlimited ways also in the realm of Operational knowledge exactly the way we started with software code almost 40 years ago and This shift in the paradigm of the for opens will embrace real digital sovereignty because I as supreme authority I as an infrastructure provider am able To choose between alternatives to have an impact on the upstream project and to operate this whole stack If you're curious, I already invited you to the session tomorrow at the same time In the room beside us an open operations concept by court and phoenix Feel free to join it and to discuss further implications of that open operations concept that we urgently need To embrace real digital sovereignty and you have a real impact on what is to be claimed digital sovereignty so To sum it up what we need is a legal dimension the freedom of choice technological dimension and an open operations concept to embrace the dimension of sharing and Contributing to open operational knowledge If you're interested in the whole white paper, we have written for the cloud report feel free to grab one copy at Booth a3 of B1 systems We have condensed it in then German and in an English version, so you can read on What our thoughts are on digital to vanity and that it needs just more than? Eurostiction and local spin-offs or proprietary cloud providers And you can also check our website We have where we have condensed the whole white paper in the blog post and to dig further into our perception of open Operations and real digital to vanity besides and the sides of the claims of the hyperscalers so Let's step back Locally operated GCP Azure spin-offs are not so ring at all what we need are the four layers I mentioned and my last call to action is let's demystify digital to vanity and embrace open technology Hosted by an open community with open operational knowledge at not bullshitting around with terms that are not paying into anything else than marketing and The misuse of the word digital to vanity as we have seen in the previous slides That this does not embrace the supreme authority often software stack of hardware in the digital realm at all So I'm happy to discuss the implications of these fear layers these four layers with you and feel free to contribute to our perception of digital to vanity Feel free to ask feel free to contribute happy to discuss with you. Thank you any remarks questions so far What is your? Notion of digital to vanity in your company in your offerings. How do you use this term? I'm just interested in embracing and evolving this discussion around digital to vanity and how we can Make an impact on the current discussions around cloud technology and sovereign offerings Yeah There's a microphone. I Can pass it on to you Thank you Great presentation. I just wanted to ask You mentioned, you know things like on-prem GCP and Azure. I'm just wondering what you make of the Sovereign controls that Google are introducing next year. That's sorry and didn't get that Just just asking what you make of the the sovereign controls that Google are introducing next year Google sovereign controls. Yes Is anyone Yes, well they're basically to control where data is being stored where it's where it's flowing, but of course it is as The presenter said it's it's a single vendor thing So I'm just really interested in the opinion of what that means You know what Google is trying to attempt with sovereign controls versus what you've mentioned here Well, we need to get in touch with the discussions We need to make an impact on the current discussions around serenity and we need to demystify this whole term because I think there is as Lasser Oppenheim stated 120 years before that there is no common sense of this notion serenity and every company Nowadays claims to be sovereign But what we need to embrace is this concept of four layers that it needs much more than just Local control of the data there the the stack is processed and operated, but it needs more like control of the community like being able to contribute and Being part of community that embraces this open technology building on open standards and we need to always remember the the whole four layers of serenity and not just in the bottom layer that Some providers claim we need to make it clear that does this does not guarantee serenity and there are many many pitfalls if you just claim that this Offering is so rain in the sense of digital serenity like for example, what happens if the software vendor Does not contribute any upstream patches. What happens if security vulnerabilities are not openly Given back to the local operators. There are many many pitfalls and we need to remember the People trying to sell these offerings that it needs more and that is dangerous to believe that this will grant digital serenity I Like your your point here But but you you're touching upon some big problem and I'm just curious that Digital serenity is a lot bigger than what we all You know thought about it. How are we gonna educate even let's say in his in this region I know is European region is easier to Educate more than let's say I'm from Asia and In those in those region. I think it's really more critical in term of trying to do what you said here I'm I'm just wondering what what should be the best way to educate people to understand All these things It's not that easy to understand that I'm just well just make them aware of these four layers and try to hold up the discussions around digital serenity and not just give up on the marketing buzzwords and hypes around digital serenity embrace these four layers and Try to contact the politicians try to contact the industry and try to make them aware that They won't have the full control of a stack if they just operate or sell in in an Local spin-off of a proprietary cloud provider and make them aware of the pitfalls that will be Delivered with these offerings and that we won't be able to have full control of the stack and I think these four layers can be shown very good with with the image of the stairs and That this is just the beginning of a journey and not the end of a journey to have full control of our infrastructure And to have influence on the stack and and operating systems well For example the serenity cloud stack project is hosted by the open source business Alliance it's an association of companies embracing open source technologies and we are trying to make The public administrations the politics aware of digital serenity and that it needs much more than just local spin-offs and we try to Embrace the four opens the open source technology and to make them aware of these concepts and I think this is the state of art how to embrace Serenity in the public so Yeah Thank you for the talk indeed. I agree with you. It's a very hot topic a lot of words about digital serenity and so on but don't you think that Digital serenity the term is a bit Too packed with too much because if you think about it if you think about the entire stack Not just a cloud vendor it includes software. It includes also firmware hardware wouldn't it be easier to Decompose it and address piece by piece because as far as I know there are no major European hardware platform vendors and and without Without a very close collaboration with the hardware platform vendor You're not likely to get software that is very very competitive because you're always going to be the Second or third one to get access to the newest features So wouldn't it be a better strategy to decompose it and start from let's say Software sovereignty and then build up from that because my my concern is that so far I've noticed that This digital serenity Becomes like a swamp. It's like everything in the kitchen sink and then the debate is lost Yeah, some people are trying to To define this digital serenity as data serenity and Yes, maybe this is the bottom layer as we call it that data serenity that I'm able to be in control of where the data is processed and Yes, I agree that we should decompose this whole term in the sense of these four layers and The mission is just to make the people aware that this whole term digital serenity Does not necessarily be limited to the whole legal aspect But that there's much more and I agree that in regards of hardware and The bottom layer of the whole there is much more needs to be done and this is just the beginning of a journey and We need to embrace the four opens and that we need to build Open technology together and this is the whole what we need to do And that's the problem that I have in terms of trying to say, okay Hey, I'm provide. I'm a cloud provider and if you're gonna use GCP and assure Your serenity is gone. And then they look at me like well, you know Well, I mean look like you're going back, you know Everybody's going forward and and this is what I Encounter and the experience that I'm trying to tell them. Okay, if you use local cloud It's it's better because you you get the the serenity, but if you use, you know Hyperscale or two of them you you're gonna involve with it. So I get both negative and positive things So it's good to really narrow down a little bit Or you can use a word decompose it to to make it a little bit narrow that that's my point of view Yeah, I totally agree and we have the same discussions in Germany that this term is to be Dangerous and I think we have to be very clear about what we claim to be digital serenity and What freedoms we guarantee with this serenity, but I think it is very necessary to have a common term We can rely on to embrace the culture of open technology and open communities to embrace operational knowledge and to embrace open Technology and thus this digital serenity But what we need to do is to spin around the whole discussion Upwards from the only legal aspects up to all what is needed to be serenity in the sense of self-determination in the digital realm Okay, so yeah Expo exporting a large-scale Well, I have seen some discussion in the Asian Pacific room and I Was not aware until now of discussions Likely to be compared in the United States So if anybody can contribute to this questions feel free to raise your hand but I think and it was stated earlier today in the key notes that this is primarily an European discussions, but if we break it down, it's a fight for open technology and how we can influence technology and From my point of view, and this is not only in European Debate, but also in worldwide debate on how we want as in society as mankind to have influence on technology and How we embrace open technology So thank you for discussing. I will be repeating the session tomorrow at 11 and If you have any other remarks feel free to either follow us on the usual usual social platform so to follow our blog post on sds.community and to continue this discussion and fighting for open technology and embracing open communities and Sharing operational knowledge. Thank you and visit the session on open operations tomorrow by Kurt and Felix Have a nice summit. Thank you