# linux foundation The Linux Foundation is a nonprofit organization that provides a neutral hub for developers to code, manage, and scale open technology projects. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Zephyr Project Welcomes Seven New Silver Members as Global Embedded Ecosystem Continues to Grow DevFeed: [Zephyr Project Welcomes Seven New Silver Members as Global Embedded Ecosystem Continues to Grow]() Original publisher: [Read original article]() Author: Maemalynn Meanor Published: 2026-09-03T09:00:07Z Content type: release Language: en Sources: [Zephyr Project]() Topics: [Embedded Systems](), [Embedded Software Dev](), [Open Source](), [linux foundation](), [real-time](), [Maintainers]() Tags: [announcements](), [collaboration](), [community](), [connectivity](), [deployment](), [ecosystem](), [embedded](), [firmware](), [linux-foundation](), [maintenance](), [news](), [open-source](), [security](), [summit](), [support](), [testing](), [zephyr]() ### AI overview The Zephyr Project announced seven new Silver members--Canonical, Dojo Five, GigaDevice, Morse Micro, Northern.tech, Siemens and Space Cubics--during its 10th anniversary. The project also introduced its first Community Awards, with winners to be announced at the Zephyr Developer Summit in Prague in October. ### Source excerpt The project celebrates its 10th anniversary with new member growth and the recipients of the first-ever Community Awards at Zephyr Developer Summit in Prague Summary The Zephyr Project marks its... ## Zephyr Project Welcomes Seven New Silver Members as Global Embedded Ecosystem Continues to Grow DevFeed: [Zephyr Project Welcomes Seven New Silver Members as Global Embedded Ecosystem Continues to Grow]() Original publisher: [Read original article]() Author: Maemalynn Meanor Published: 2026-09-03T09:00:07Z Content type: release Language: en Sources: [Zephyr Project]() Topics: [Embedded Systems](), [Embedded Software Dev](), [Open Source](), [linux foundation](), [Maintainers]() Tags: [2026](), [announcements](), [awards](), [community](), [ecosystem](), [embedded](), [linux-foundation](), [news](), [open-source](), [zephyr]() ### AI overview The Zephyr Project announced seven new Silver members--Canonical, Dojo Five, GigaDevice, Morse Micro, Northern.tech, Siemens, and Space Cubics--as it marks its 10th anniversary. The announcement also covers the first Zephyr Community Awards and the upcoming Zephyr Developer Summit in Prague. ### Source excerpt The project celebrates its 10th anniversary with new member growth and the recipients of the first-ever Community Awards at Zephyr Developer Summit in Prague Summary The Zephyr Project marks its... ## Linux Foundation Newsletter: August 2026 DevFeed: [Linux Foundation Newsletter: August 2026]() Original publisher: [Read original article]() Author: andrewb@proximabiz.com (The Linux Foundation) Published: 2026-08-12T21:05:19Z Content type: article Language: en Sources: [Linux Foundation - Blog]() Topics: [Linux](), [linux foundation](), [Artificial Intelligence](), [Model Context Protocol](), [Cloud](), [AWS Transform]() Tags: [2026](), [ai](), [blog](), [careers](), [cloud](), [education](), [events](), [lf-europe](), [lf-events](), [lf-research](), [linux](), [linux-blog](), [linux-foundation](), [mcp](), [newsletter](), [open-source](), [open-source-summit](), [project-news](), [projects](), [report](), [tech-talent]() ### AI overview The Linux Foundation's August 2026 newsletter highlights its 35th anniversary and a training discount, then summarizes developments across open source, AI, cloud native, edge computing, cybersecurity, research, events, and technical projects. It covers the Tokenomics Foundation, MCP integrations and MCP 728, a military-drone interoperability hackathon, research about Japan's developer and tech talent markets, and upcoming Open Source Summit Europe. ### Source excerpt Welcome to the August 2026 edition of the Linux Foundation Newsletter The Linux Foundation is celebrating 35 years of Linux, and training is discounted through August 18. Use code TUX35 for 35% off certifications, courses, and bundles across cloud, AI, cybersecurity, and more. Beyond the discount, five things stand out this month. The Linux Foundation launched the Tokenomics Foundation, backed by more than 30 organizations, to build vendor-neutral standards for tracking the cost and ROI of AI. FINOS released Fluxnova 3.0 and FDC3 3.0, both adding MCP integration so AI agents can execute financial workflows directly. AAIF shipped MCP 728, a stateless version of the protocol that no longer needs a session handshake, and celebrated the launch with 475 people across 7 events in 6 cities. The Dronecode Foundation ran a hackathon in Manassas, Virginia, where 14 companies, including direct competitors, completed 7 working integrations of MAVLink-Military, a new open interoperability standard for military drones and payloads. And a wave of AI-and-infrastructure research landed at once: a CNCF and SlashData report puts Japan's cloud native developer community at nearly a million, LF Edge published its State of the Edge 2026 report on edge computing in the AI era, and a new tech talent report shows AI is a net job creator in Japan even as companies struggle to find full-stack-ready hires. You'll also find open calls for two LF Research surveys, a new LF Research report, registration open for Open Source Summit Europe in Prague (October 7-9), and project news spanning agentic AI, telecom, mainframe, geospatial, and safety-critical software. >> Read on for even more news, research, and opportunities from across the Linux Foundation. ## Adapting open source practices to an AI-first world: A retrospective on 2025 DevFeed: [Adapting open source practices to an AI-first world: A retrospective on 2025]() Original publisher: [Read original article]() Author: Google Open Source (noreply@blogger.com) Published: 2026-08-03T18:30:00Z Content type: article Language: en Sources: [Google Open Source Blog]() Topics: [Open Source](), [Google](), [A2A protocol](), [interoperability](), [GitHub](), [linux foundation](), [Protocol (disambiguation)](), [LLVM](), [Rust](), [vllm](), [gRPC](), [Kubernetes]() Tags: [2025](), [a2a](), [a2a-protocol](), [agents](), [ai](), [ai-agents](), [github](), [google-open-source](), [interoperability](), [kubernetes](), [linux](), [linux-foundation](), [open-source](), [report-card](), [retrospective](), [rust](), [security](), [vllm]() ### AI overview Google reviews Alphabet's 2025 open source activity, including employee and external contributions, collaboration on the Agent2Agent protocol, and the maintenance and launch of public repositories and tools. ### Source excerpt by Sophia Vargas, Google Open Source Even as AI adoption accelerates and transforms the global technology landscape, open source remains foundational to how Alphabet builds, uses, and collaborates on products for billions of users. Our commitment to open source remains broad and consistent, including sharing our work year-over-year, and reflecting on what we've learned. In 2025: Roughly 10% of Alphabet's full-time workforce actively contributed to open source projects. This contribution ratio has remained steady over the past five years, scaling to match our growth. These open source contributions are not just solely focused on Google. Our top projects by unique contributors at Alphabet include community-led projects such as LLVM, vLLM, Envoy, and Rust, as well as Google-initiated projects like Kubernetes, Apache Beam, and gRPC. In addition, Alphabet projects received commits from more than 20,000 non-Alphabet affiliated user accounts. Working together on emerging standards Open source communities continue to provide vital collaborative spaces to define emerging standards, ensuring the interoperability and extensibility for the next generation of technologies. In 2025, we worked with more than 50 partners on the Agent2Agent (A2A) protocol to enable AI agents to communicate with each other, securely exchange information, and coordinate actions on top of various enterprise platforms and applications. Within weeks of our initial announcement, Google donated the A2A project to the Linux Foundation as part of our long-standing commitment to develop "open, collaborative ecosystem - offering greater autonomy and multiplying productivity." Launching tools with transparency Open source licenses provide a framework for anyone to explore, test, fork and expand on our technologies. Over the last 15 years, Google has created more than 15,000 public repositories on GitHub. Today, Google continues to maintain more than 5,000 public repositories on GitHub, and more than 1,500 publi ## From Campus to Community Part 4: How Academia Plugs In DevFeed: [From Campus to Community Part 4: How Academia Plugs In]() Original publisher: [Read original article]() Author: Nithya Ruff Published: 2026-07-28T13:37:36Z Content type: article Language: en Sources: [Linux Foundation - Blog]() Topics: [Open Source](), [linux foundation](), [Linux](), [Kernel](), [Maintainers]() Tags: [linux](), [linux-foundation](), [maintainers](), [mentoring](), [open-source]() ### AI overview This fourth and final article in a Linux Foundation series explains how students can enter the open-source ecosystem through programs including LFX Mentorship, Linux Kernel Mentorship, and Google Summer of Code. It highlights practical contributions, mentorship, and preparation before applications open. ### Source excerpt This is a series from Linux Foundation Board Chair, Nithya Ruff. Read Part One, Part Two and Part Three. ## Blinkit at OpenSearchCon India 2026 DevFeed: [Blinkit at OpenSearchCon India 2026]() Original publisher: [Read original article]() Author: Harshit Prasad Published: 2026-07-24T10:16:24Z Content type: article Language: en Sources: [Grofers]() Topics: [opensearch](), [migration](), [linux foundation]() Tags: [2026](), [architecture](), [blinkit](), [community](), [conference](), [data](), [distributed-systems](), [engineering](), [india](), [keynote](), [linux-foundation](), [migration](), [opensearch](), [scale](), [search](), [software-engineering]() ### AI overview Blinkit describes its OpenSearchCon India 2026 keynote, including its migration from a single OpenSearch cluster to a multi-cluster architecture, the production challenges encountered, and the trade-offs and lessons shared with the community. ### Source excerpt A few weeks ago, we spoke at OpenSearchCon India about how we make search fast and reliable at scale at Blinkit. I'm Harshit, from the Search Engineering team at Blinkit, and this year we got to speak at OpenSearchCon India at the Jio World Convention Centre in Mumbai. In this post, I'll walk you through our talk, the conversations that followed, and what our team took away from being part of the OpenSearch community in a more active way this year. First Day : Keynote by Blinkit The highlight of this year's conference for our team was the opportunity to deliver a keynote session at OpenSearchCon, organised by the Linux Foundation. Along with my fellow engineer Bharti Sawaria we walked the audience through our journey of migrating from a single OpenSearch cluster to a multi-cluster architecture. We shared the challenges we faced, the solutions that failed in production, and our key learnings for the community. We also discussed Blinkit's growing scale & the trade-offs we made during our migration. To provide context for our global audience, we framed the talk around the sheer scale at which we operate, highlighting the "breaking point" where we realised a single cluster could no longer handle our needs. Bharti explaining about OpenSearch Multi-Cluster ArchitectureHarshit explaining about the OpenSearch Single-Cluster Architecture The official keynote talk video can be found on Youtube : https://medium.com/media/774b8379733c6442d3ecaa3976c2191e/hrefThe Experience at OpenSearchCon Beyond the breakout sessions, the real value of OpenSearchCon was connecting with engineers from across the industry. Many of whom are dealing with similar scale and freshness challenges, openly sharing what's worked and what hasn't. That kind of unfiltered peer exchange is hard to replicate online. Our team attended multiple breakout sessions and had several great discussions with engineers from Uber, Freshworks, Oracle, and others. A few sessions stood out enough to flag once recordings are ## Linux Foundation Newsletter: July 2026 DevFeed: [Linux Foundation Newsletter: July 2026]() Original publisher: [Read original article]() Author: andrewb@proximabiz.com (The Linux Foundation) Published: 2026-07-15T21:09:02Z Content type: news Language: en Sources: [Linux Foundation - Blog]() Topics: [linux foundation](), [Open Source](), [Cloud Native Ecosystem](), [Kubernetes](), [Artificial Intelligence](), [Cybersecurity](), [Mainframe]() Tags: [2026](), [ai](), [blog](), [careers](), [cloud-native](), [cybersecurity](), [education](), [events](), [kubernetes](), [lf-europe](), [lf-events](), [lf-research](), [linux](), [linux-blog](), [linux-foundation](), [news](), [newsletter](), [open-source](), [open-source-summit](), [project-news](), [projects](), [reports](), [tech-talent]() ### AI overview The Linux Foundation's July 2026 newsletter covers a training and certification promotion, upcoming open source events including KubeCon + CloudNativeCon Japan, research surveys and reports, and project news across agentic AI, telecom APIs, mainframe, geospatial, and safety-critical software. It also reports FINOS and seven financial institutions' intent to form OSERA for shared security remediation of software packages. ### Source excerpt Welcome to the July 2026 edition of the Linux Foundation Newsletter July is one of the best months for LF Training deals. For 2026, the "Finish the Year Strong" promotion brings savings of up to 40% on vendor-neutral training, certifications, and bundles across Linux, cloud native, cybersecurity, AI, and more. The offer ends July 21. Don't miss it. Beyond education, this month's newsletter highlights open source communities converging in person and in production. KubeCon + CloudNativeCon Japan lands in Yokohama July 28-30, the Academy Software Foundation brings Open Source Days back to SIGGRAPH, and following the launch of Akrites, FINOS and seven major financial institutions announced their intent to form OSERA, mutualizing security remediation for the packages regulated industries depend on. You'll find three active LF Research surveys and two new reports, fresh perspectives from Linux Foundation Europe, featured project news spanning agentic AI, telecom APIs, mainframe, geospatial, and safety-critical software, and a busy global events calendar. Feedback is welcome. >> Read on for even more news, research, and opportunities from across the Linux Foundation. ## From Campus to Community Part Two: The Researcher Exodus DevFeed: [From Campus to Community Part Two: The Researcher Exodus]() Original publisher: [Read original article]() Author: Nithya Ruff Published: 2026-07-13T14:07:27Z Content type: opinion Language: en Sources: [Linux Foundation - Blog]() Topics: [Artificial Intelligence](), [linux foundation](), [Open Source](), [Deep learning](), [Computer science](), [Hardware](), [Robotics]() Tags: [ai](), [computer-science](), [deep-learning](), [hardware](), [linux-foundation](), [open-source](), [robotics]() ### AI overview The second part of a Linux Foundation series argues that AI researchers leaving universities for industry jobs, combined with limited academic access to computing resources, is weakening open-source development and academic research. It cites faculty departure data and examples from Carnegie Mellon and other research communities. ### Source excerpt This is a series from Linux Foundation Board Chair, Nithya Ruff. Part One can be found here. ## Google introduces the A2Family of open source protocols and tools for AI agents DevFeed: [Google introduces the A2Family of open source protocols and tools for AI agents]() Original publisher: [Read original article]() Author: Google Open Source (noreply@blogger.com) Published: 2026-04-23T18:30:00Z Content type: article Language: en Sources: [Google Open Source Blog]() Topics: [A2A protocol](), [Artificial Intelligence](), [interoperability](), [Model Context Protocol](), [Open Source](), [linux foundation]() Tags: [a2a](), [a2a-protocol](), [a2ui](), [adk](), [agent2agent](), [agents](), [ai](), [ai-agents](), [ap2](), [interoperability](), [linux-foundation](), [open-source]() ### AI overview Google presents the A2Family, a suite of open source protocols and tools for building, connecting, and scaling AI agents. The article describes A2A for agent interoperability, its relationship with MCP and skills, and A2UI for rendering interactive interfaces without executing arbitrary code. ### Source excerpt by Daryl Ducharme, Google Open Source & Alan Blount, Cloud AI At Google, we know that building on open source gives teams the freedom and flexibility to use meaningful technologies faster. Openness drives innovation and security, and it is core to our mission. As we look toward the future of computing, we want to ensure that developers across all open source communities have the foundational tools they need to build secure and collaborative AI systems. That is why we are excited for you to get to know the "A2Family"--a suite of open source protocols and tools designed to help you build, connect, and scale your AI agents. A2A: The cornerstone of agent interoperability The Agent2Agent (A2A) Protocol is an open standard designed to enable seamless communication and collaboration between AI agents. It provides the definitive common language for agent interoperability in a world where agents are built using diverse frameworks and by different vendors. Originally developed by Google, A2A has now been donated to the Linux Foundation. As a famous open source aphorism reminds us: "If you want to go fast, go alone. If you want to go far, go together." A2A brings this collaborative philosophy to AI, allowing agents to delegate sub-tasks, exchange information, and coordinate actions to solve complex problems that a single agent cannot. MCP & Skills: Agents need tools and skills Since day one A2A has loved MCP, and we love skills too ♥. Agents discover, negotiate, converse, make plans, adapt when those plans don't work out - that's a different interaction pattern than a tool and that's what A2A was built for. But for your agents to function, they need access to tools, and instructions on how to use those tools safely and securely. While MCP and A2A might not be from the same origin story, they are a family that works better together. When you're not sure - if it's a quick deterministic resource or action, it's a tool, but if you may end up with a conversation, it's an agent. Ano ## A year of open collaboration: Celebrating the anniversary of A2A DevFeed: [A year of open collaboration: Celebrating the anniversary of A2A]() Original publisher: [Read original article]() Author: Google Open Source (noreply@blogger.com) Published: 2026-04-16T20:55:00Z Content type: opinion Language: en Sources: [Google Open Source Blog]() Topics: [A2A protocol](), [Artificial Intelligence](), [Google](), [interoperability](), [Open Source](), [linux foundation](), [Security](), [Load Balancing]() Tags: [a2a](), [a2a-protocol](), [a2april](), [agent2agent](), [agents](), [ai](), [ai-agents](), [amazon](), [amazon-web-services](), [cisco](), [cryptographic](), [interoperability](), [linux-foundation](), [load-balancing](), [microsoft](), [open-source](), [sap](), [security](), [specifications](), [standard]() ### AI overview Google reflects on the first year of the Agent2Agent (A2A) protocol, including its donation to the Linux Foundation, the growth of its supporting ecosystem, and the release of A2A Protocol v1.0. The article highlights security, enterprise architecture, and interoperability improvements for multi-agent workflows. ### Source excerpt by Patricia Cruz, Google Open Source One year ago, on April 9th, 2025 Google announced the Agent2Agent(A2A) protocol. We saw the need for a "common language" that allows AI agents built on different frameworks to collaborate well across diverse systems. Then, on June 23, 2025 at the Open Source Summit North America in Denver, Mike Smith stood on stage to share a pivotal moment for the future of AI interoperability when Google officially donated the A2A protocol to the Linux Foundation, establishing it as a vendor-neutral, community-governed standard. This move was driven by a core belief: for AI agents to truly transform how we work and live, they must be able to communicate across framework boundaries and organizational silos without being locked into a single provider's ecosystem. By placing A2A under the neutral stewardship of the Linux Foundation, we opened the doors for the entire industry to build, contribute, and innovate together. A Foundation of Partners The formation of the A2A Project was made possible through the support of our founding members, including Amazon Web Services, Cisco, Microsoft, Salesforce, SAP, and ServiceNow. Over the past twelve months, this coalition has grown, with over 100 technology companies now supporting the project. From Prototype to Production The momentum since the donation has been remarkable. What began as a Google-led initiative has evolved into critical infrastructure for horizontal, peer-to-peer collaboration. Just one month ago, in March, the project reached a major milestone with the release of A2A Protocol v1.0, the first stable, fully production-ready version of the standard. Key achievements from the community this year include: Enhanced Security: The implementation of Signed Agent Cards for cryptographic identity verification, ensuring trust in multi-agent workflows. Web-Aligned Architecture: Refined specifications that support familiar load-balancing and security patterns for enterprise-scale deployments. Ecosystem ## The Linux Foundation tracks 700M+ open source events in real-time with Tinybird DevFeed: [The Linux Foundation tracks 700M+ open source events in real-time with Tinybird]() Original publisher: [Read original article]() Author: Tinybird Published: 2026-02-16T10:00:00Z Content type: article Language: en Sources: [Tinybird]() Topics: [linux foundation](), [data](), [real-time](), [Open Source]() Tags: [customer-stories](), [data](), [linux-foundation](), [open-source](), [real-time]() ### AI overview The Linux Foundation uses Tinybird to power real-time open source project analytics for LFX Insights. The article says this replaces a 12-hour Snowflake feedback loop with sub-second data freshness. ### Source excerpt Learn how the Linux Foundation powers real-time open source project analytics for LFX Insights, replacing a 12-hour Snowflake feedback loop with sub-second data freshness. ## LFS148: Getting Started with OpenTelemetry DevFeed: [LFS148: Getting Started with OpenTelemetry]() Original publisher: [Read original article]() Published: 2025-11-28T23:00:00Z Content type: opinion Language: en Sources: [Domenico Luciani]() Topics: [OpenTelemetry](), [observability](), [linux foundation](), [Java](), [Python]() Tags: [course](), [foundation](), [getting-started](), [java](), [observability](), [opentelemetry](), [opinion](), [python]() ### AI overview The author reviews the Linux Foundation's LFS148 course, describing it as an introductory OpenTelemetry course with an overview of OpenTelemetry internals and hands-on examples integrating it with Java and Python applications. ### Source excerpt Want to dive-in into OpenTelemetry? This course is for you ## Announcing Supporters of Chromium-based Browsers DevFeed: [Announcing Supporters of Chromium-based Browsers]() Original publisher: [Read original article]() Author: Chromium Blog (noreply@blogger.com) Published: 2025-01-09T17:01:00Z Content type: release Language: en Sources: [Chromium Blog]() Topics: [Chromium](), [linux foundation](), [Open Source](), [Google]() Tags: [announce](), [chromium](), [linux-foundation](), [none](), [open-source]() ### AI overview Google announced a partnership with the Linux Foundation and the launch of Supporters of Chromium-based Browsers, a fund intended to support open-source contributions and developers working on the Chromium ecosystem. ### Source excerpt Since Google announced the Chromium project in 2008, we have been excited to build on the great foundations of open-source web browsers and contribute to the continued development of a rich web platform. Today, Chromium is used by hundreds of different projects globally, including big browsers like Chrome, home electronics from LG, application frameworks like Electron and even custom applications like Bloomberg terminals and SpaceX capsule control software. In 2024, Google made over 100,000 commits to Chromium, accounting for ~94 percent of contributions. While we have no intention of reducing this investment, we continue to welcome others stepping up to invest more. Google also continues to invest heavily in the shared infrastructure of the Open Source project to "keep the lights on", including having thousands of servers endlessly running millions of tests, responding to hundreds of incoming bugs per day, ensuring the important ones get fixed, and constantly investing in code health to keep the whole project maintainable. This work represents hundreds of millions of US dollars in annual investment just for maintenance costs before any new feature, innovation or other business priorities can be addressed. Sustainable funding of critical open source infrastructure remains a hot industry-wide topic of discussion and over the years we've heard from many companies and developers about how critical the Chromium project is to their work. They've also shared how they would like to support the continued health of the project, beyond direct engineering support. Today Google is pleased to announce our partnership with The Linux Foundation and the launch of the Supporters of Chromium-based Browsers. The goal of this initiative is to foster a sustainable environment of open-source contributions towards the health of the Chromium ecosystem and financially support a community of developers who want to contribute to the project, encouraging widespread support and continued techno ## Blog: Introducing the new Falco training course, by CNCF, Linux Foundation, and Sysdig DevFeed: [Blog: Introducing the new Falco training course, by CNCF, Linux Foundation, and Sysdig]() Original publisher: [Read original article]() Published: 2023-11-06T00:00:00Z Content type: release Language: en Sources: [Falco - Falco](), [Falco - The Falco blog]() Topics: [Falco](), [Security & compliance, Cloud security](), [linux foundation](), [container-security]() Tags: [blog](), [cloud-security](), [cncf](), [course](), [falco](), [linux-foundation](), [runtime-security](), [training]() ### AI overview The article introduces Detecting Cloud Runtime Threats with Falco (LFS254), a 20-hour, self-paced training course created by CNCF, the Linux Foundation, and Sysdig. It covers runtime security, Falco's history, design, architecture, setup, operation, system call data, and other data sources. ### Source excerpt Detecting Cloud Runtime Threats with Falco (LFS254) is the new Falco training course created by CNCF, Linux Foundation, and Sysdig. We're very excited about this new immersive course designed to enhance your expertise in securing cloud-native applications through hands-on learning. Detecting Cloud Runtime Threats with Falco (LFS254) is a 20-hour course focused on runtime security. It covers what is runtime security and how Falco is a powerful tool designed to detect anomalous activity in applications. From Falco's history and design principles to its architecture, to how it addresses cloud security challenges. This course is designed for IT professionals, security analysts, DevOps engineers, and anyone interested in cloud security. Why? In a rapidly evolving digital landscape with a surge in cloud adoption, the importance of comprehending and deploying robust security solutions, such as Falco, cannot be overstated. Regrettably, cloud-native technologies, particularly cloud-native security, are relatively novel, and there exists a gap in knowledge and expertise for addressing these emerging challenges. Our mission is to bridge this knowledge gap and empower individuals to tackle cloud and container security complexities effectively. Through accessible training, we aspire to contribute to narrowing the talent deficit in these pivotal domains. How? In this course, you'll embark on a journey of securing cloud-native environments. The course breaks down complex concepts, making them accessible and actionable. Its self-paced nature provides the flexibility to learn at your own rhythm, accommodating your personal and professional commitments. This structure allows you to digest intricate concepts and apply them bit by bit, ensuring a deeper and more lasting comprehension. Course Structure The course begins with an introduction to Falco, encompassing its history, design principles, and its broader role in cloud security. It then delves into the core components of Falco, exp ## Supporter spotlight: David A. Wheeler on supply chain security DevFeed: [Supporter spotlight: David A. Wheeler on supply chain security]() Original publisher: [Read original article]() Published: 2022-12-15T12:00:00Z Content type: news Language: en Sources: [reproducible-builds.org]() Topics: [supply-chain-security](), [Security](), [reproducible builds](), [linux foundation](), [open-source-security](), [Open Source](), [compilers]() Tags: [compilers](), [linux](), [linux-foundation](), [open-source-security](), [org](), [reproducible-builds](), [security](), [software](), [supply-chain-security]() ### AI overview An interview with David A. Wheeler, the Linux Foundation's Director of Open Source Supply Chain Security, about improving security across open source software development, builds, distribution, and use. It also discusses reproducible builds and Diverse Double-Compiling as a way to detect trusting trust attacks. ### Source excerpt The Reproducible Builds project relies on several projects, supporters and sponsors for financial support, but they are also valued as ambassadors who spread the word about our project and the work that we do. This is the sixth instalment in a series featuring the projects, companies and individuals who support the Reproducible Builds project. We started this series by featuring the Civil Infrastructure Platform project and followed this up with a post about the Ford Foundation as well as a recent ones about ARDC, the Google Open Source Security Team (GOSST), Jan Nieuwenhuizen on Bootstrappable Builds, GNU Mes and GNU Guix and Hans-Christoph Steiner of the F-Droid project. Today, however, we will be talking with David A. Wheeler, the Director of Open Source Supply Chain Security at the Linux Foundation. Holger Levsen: Welcome, David, thanks for taking the time to talk with us today. First, could you briefly tell me about yourself? David: Sure! I'm David A. Wheeler and I work for the Linux Foundation as the Director of Open Source Supply Chain Security. That just means that my job is to help open source software projects improve their security, including its development, build, distribution, and incorporation in larger works, all the way out to its eventual use by end-users. In my copious free time I also teach at George Mason University (GMU); in particular, I teach a graduate course on how to design and implement secure software. My background is technical. I have a Bachelor's in Electronics Engineering, a Master's in Computer Science and a PhD in Information Technology. My PhD dissertation is connected to reproducible builds. My PhD dissertation was on countering the 'Trusting Trust' attack, an attack that subverts fundamental build system tools such as compilers. The attack was discovered by Karger & Schell in the 1970s, and later demonstrated & popularized by Ken Thompson. In my dissertation on 'trusting trust' I showed that a process called 'Diverse Double-Comp ## trivago joins the Cloud Native Computing Foundation DevFeed: [trivago joins the Cloud Native Computing Foundation]() Original publisher: [Read original article]() Author: Daniel Kleuser Daniel is a Site Reliability Engineer working Published: 2020-04-07T00:00:00Z Content type: opinion Language: en Sources: [Trivago]() Topics: [Cloud Native Ecosystem](), [Open Source](), [Cloud](), [Kubernetes](), [linux foundation](), [gRPC](), [Prometheus]() Tags: [cloud](), [cloud-native](), [cncf](), [devops](), [kubernetes](), [linux-foundation](), [open-source](), [prometheus]() ### AI overview The article explains why trivago pursued End User Supporter membership in the Cloud Native Computing Foundation. It describes motivations including supporting open-source projects, gaining insight into project development, and connecting with companies using similar software stacks. ### Source excerpt Last year, when visiting CloudNativeCon/KubeCon Europe in Barcelona (one of the biggest cloud-focused conferences in Europe), I noticed that there were some companies present in the exhibition s... ## KubeCon Europe 2017 Impressions DevFeed: [KubeCon Europe 2017 Impressions]() Original publisher: [Read original article]() Author: Chris Hager Published: 2017-04-07T22:00:00Z Content type: opinion Language: en Sources: [Chris Hager]() Topics: [Cloud Native Ecosystem](), [Kubernetes](), [Deployment & Scaling](), [Open Source](), [linux foundation]() Tags: [berlin](), [cloud-native](), [cncf](), [kubecon](), [kubernetes](), [linux](), [open-source]() ### AI overview A recap of CloudNativeCon and KubeCon Europe 2017 in Berlin, covering the conference experience, the Cloud Native Computing Foundation, and notes on Kubernetes, its community, governance, release cycle, and security management. ### Source excerpt Last week I was visiting CloudNativeCon and KubeCon Europe 2017 in Berlin for two days of conference packed with talks. The conference took place in the good ol' Berlin Congress Center, which brought up good memory on the earlier Chaos Computer Congresses, which used to take place there. This post is a quick recap of my notes and impressions. KubeCon 2017 Keynote Cloud Native Computing Foundation The conference was organized by the [Cloud Native Computing Foundation (CNCF)](https://www.