Home Blog Page 53

OS-Climate unleashes power of open source to develop data and tools required to meet the Paris climate goals

From today, financial institutions, corporations, NGOs, regulators and academics can access the code behind OS-Climate’s tools to support climate-aligned financial decisionsDeveloped in collaboration with BNP Paribas, Allianz, Airbus, Amazon, Red Hat, Ortec Finance and The Linux FoundationSupports OS-Climate’s mission to provide the data and tools to enable the +$5 trillion annual climate-aligned investment required to meet the goals of the Paris AgreementLaunches collaboration in building a transparently governed, non-profit public utility of climate data and analytics

New York 20 July 2022 – Linux Foundation’s OS-Climate, the non-profit organization providing open source data and software tools to enable the global shift to climate-aligned finance and investing, has today released for public collaboration three analytic tools critical to tackling the climate crisis.

The three tools, Physical Risk & Resilience, Portfolio Alignment and Transition Analysis, were developed cooperatively by OS-Climate members, led by BNP Paribas, Allianz and Airbus respectively.

With today’s public release, OS-Climate’s tool development moves into an exciting new phase. Enabled by cloud services contributed by Amazon and Microsoft, the door opens to the global community of academic institutions, government agencies, modellers, and software developers for further powerful collaboration in building out the tools and Data Commons, a library of data and metadata suitable for use with OS-Climate’s toolset.

In addition to Airbus, Allianz, and BNP Paribas, OS-Climate’s financial services sector, technology sector, financial data and ‘real economy’ corporate members include, Amazon, BNY Mellon, EY, Federated Hermes, Goldman Sachs, London Stock Exchange Group, Microsoft, the UN-convened Net-Zero Asset Owner Alliance ($10.6 trillion asset under management), Ortec Finance, Red Hat, and S&P Global.

Truman Semans, CEO of OS-Climate, said: “These tools will generate the refined data and actionable insights needed for pension funds, asset managers, and banks to rapidly align their investments and loans to net zero and resilience goals. They can be used not only by the leading members within the Glasgow Financial Alliance for Net Zero (GFANZ) but the rest of the global financial community.”

The Linux Foundation’s community-led open source development approach, combined with strong, independent governance processes and methodological governance oversight, provides the transparency, trust, access and inclusion needed by all whose investment decisions impact climate change.

BNP Paribas leads the development of the Physical Risk & Resilience Tool that enables financial and non-financial stakeholders to identify and quantify risk related to climate resilience, through asset vulnerability models that use probability and severity forecasting of extreme climate events.

Allianz, with support from Ortec Finance, leads the development of the Climate Portfolio Alignment Tool, which helps financial stakeholders to align portfolios at individual holdings and loan levels with the Paris Accord target temperature increase of 1.5 degrees Celsius.

The Transitional Analysis Tool developed by Airbus will enable corporations to model, test and conduct scenario analysis for strategic climate-aligned decisions. This is the key to enabling the large-scale transition of real economy corporations toward Net Zero and resilience through climate-aligned investments in R&D, capital projects, other infrastructure and supply chains.

Commenting on its leading development role, Laurent David, Deputy Chief Operating Officer at BNP Paribas, said: “Robust and accessible data are essential to implement material climate policies and make sustainable finance credible. They are essential to allow financial institutions to set priorities, define objectives, and control their achievement. As a global financial institution, we can play a significant role in driving collaboration across the industry to help manage climate risk and increase investment in climate-aligned companies and projects. Through our collaboration with OS-Climate we can develop open source tools based on proper data far more rapidly than we could on our own. This will ultimately foster transparency and trust.

Günther Thallinger, Member of the Board of Management of Allianz SE said: “Allianz’s collaboration with OS-Climate reflects our commitment to support and embed climate-aligned investments and the critical transition to net-zero greenhouse gas emissions. We will continue to collaborate with a growing finance sector movement to harness the value of data that we as an industry will use to turn our commitments into real economy change.”

Robert Litterman, former chair of the Commodity Futures Trading Commission’s (CFTC) climate-related market risk subcommittee, said: “This platform could be a real game-changer. The Linux Foundation’s approach is uniquely able to build public goods that serve a wide range of public interests. This platform will accelerate innovation by commercial providers that can build on the ‘pre-competitive’ layers of data and technology OS-Climate is building. It also can help advance multiple goals of financial regulators for managing risk in the financial system, especially in terms of generating meaningful and comparable climate-related risk disclosures from corporations.”

Margaret Kuhlow, Finance Practice Leader, WWF International, said: “Dealing with the profound and compound crises of climate breakdown and nature loss means aligning global financial flows for a net-zero, nature-positive economy. This relies on securing good, decision-grade data, which is a challenge too large for any single institution or company to tackle alone. By supporting a systematic approach to the provision of high quality, open data on climate and nature risk, and integrating that with standard financial data, OS-Climate could help accelerate the development of robust data solutions that enable financial institutions, tech companies, and commercial data leaders to contribute to a fairer, greener, more resilient future.”

The tools will utilise the OS-Climate Data Commons, led by Red Hat, which will act as a public utility of corporate and other climate data and has enabled OS-Climate to significantly progress its technical roadmap announced at COP26. Development of the Data Commons, in collaboration with organizations including ClimateArc, will address the urgent need of the finance community for data that is transparent, consistent, and interoperable.

About OS-Climate

Linux Foundation’s OS-Climate is a breakthrough initiative creating a transparently governed public utility of open data and open source tools for climate-aligned finance investing, business, and regulation. OS-C uses the open collaboration approach that delivered rapid COVID vaccines, applying that to solve data gaps now blocking rapidly scalable transition of capital toward a resilient Net Zero economy.

Members contribute their data scientists, modellers, and software developers to cooperative projects building the OS-Climate Data Commons, a federated library of libraries of corporate and factor data, plus analytics tools to derive the actionable metrics crucial for asset allocation, portfolio construction, security analysis, credit analysis, corporate engagement, strategic planning and transition investment by corporates, and financial sector supervision. For more information visit OS-Climate.

Members and Community

OS-Climate’s asset owner, asset manager, bank, technology, financial data, and ‘real economy’ corporate members are Airbus, Allianz, Amazon, BNP Paribas, BNY Mellon, EY, Federated Hermes, Goldman Sachs, KPMG, London Stock Exchange Group, Microsoft, the UN-convened Net Zero Asset Owner Alliance ($10.6 trillion AUM), Ortec Finance, Red Hat, and S&P Global. NGO and academic Members include CPI, Open Climate Foundation, Polytechnique, and the World Benchmarking Alliance. Research NGOs sharing human capital and world-leading insights with OS-Climate include the World Resources Institute, RMI, and the London School of Economics through the Transition Pathways Initiative. Other data partners include Jupiter Intelligence, riskthinking.ai, and Urgentem.

About the Linux Foundation

Founded in 2000, the Linux Foundation and its projects are supported by more than 2,950 members. The Linux Foundation is the world’s leading home for collaboration on open source software, hardware, standards, and data. Linux Foundation projects are critical to the world’s infrastructure including Linux, Kubernetes, Node.js, ONAP, Hyperledger, RISC-V, and more. The Linux Foundation’s methodology focuses on leveraging best practices and addressing the needs of contributors, users, and solution providers to create sustainable models for open collaboration. For more information, please visit linuxfoundation.org.

Media Contacts

North America
Ali Saville
ali@deepgreenmedia.co.uk

Europe & Asia
Leela Lamont
leela@deepgreenmedia.co.uk
+44 (0) 7874 383829

The post OS-Climate unleashes power of open source to develop data and tools required to meet the Paris climate goals appeared first on Linux Foundation.

How to create a custom Red Hat Enterprise Linux 9 machine image for AWS

No RHEL 9 AMI available for your needs? No worries! Learn how to generate a custom Amazon Machine Image for RHEL.

Read More at Enable Sysadmin

Takeaways from the White House Cyber Workforce and Education Summit

Today the White House convened the White House Cyber Workforce and Education Summit to gather government and private-sector leaders to discuss how to address the labor shortage and other challenges for U.S. cybersecurity. The meeting included the nation’s top cybersecurity and workforce policy decision makers, including the National Cyber Director and the Cabinet secretaries from the Departments of Commerce, Homeland Security, and Labor and the Under Secretary of Education. 

Jim Zemlin, Executive Director of the Linux Foundation, was invited to participate.

During the meeting, Jim emphasized the need to “shift left” security training and best practices as much as possible. Addressing security at the beginning of the technology supply chain is more efficient and effective – it is being proactive rather than reactive. This begins with providing open source practitioners with the knowledge and skills to build security into the development of the software we all depend on.  

Addressing security at the beginning of the technology supply chain is more efficient and effective – it is being proactive rather than reactive.

He emphasized the commitment of the Linux Foundation to partner with industry leaders to provide no cost or low cost training and certification in cybersecurity beginning with our Developing Secure Software course, which is 15 hours of training across 3 modules (security principles, implementation considerations & software verification). The goal is to teach software developers how to develop more secure software from the beginning because that is much more efficient than finding and remediating vulnerabilities.

Since launching it this spring, over 10,000 students have started the course and over 1,000 completed it and received their verifiable certification. But this is just the beginning. Over the next few months, the Linux Foundation will launch new courses and certification exams on topics such as: 

Sigstore
Software Bills of Materials (SBOMs) 
Air Gap Software Delivery 
DevSecOps

Addressing cybersecurity challenges through investments in the workforce is about more than hiring and training more cybersecurity professionals. Providing effective training for individuals involved at all points in the software development lifecycle is key to success – kind of like building security into a building at the beginning rather than just hiring security guards to protect it. 

Providing effective training for individuals involved at all points in the software development lifecycle is key to success – kind of like building security into a building at the beginning rather than just hiring security guards to protect it. 

The goal of building a more robust cyber workforce is part of the recommendations developed earlier this year after the White House-convened Open Source Software Security Summit in February and a follow-up Summit in May. You can read about the recommended 10 streams of investment and the entire Open Source Software Security Mobilization Plan here. And consider joining the OpenSSF to help make our software supply chain more secure by building an expert community, targeted initiatives, and best practices.

We encourage you to  enroll in the Developing Secure Software training from the OpenSSF. It is free for everyone through Linux Foundation Training & Certification. You can also enroll through edX for free in audit mode or with a verified certificate of completion for an additional fee.

The post Takeaways from the White House Cyber Workforce and Education Summit appeared first on Linux Foundation.

Linux essentials: How to create and delete files and directories

Learn how to use the mkdir, touch, and rm commands to create files and directories, then clean them up when you’re ready.

Read More at Enable Sysadmin

How to encrypt sensitive data in playbooks with Ansible Vault

Ansible Vault lets you keep sensitive data, such as passwords and keys, in encrypted files. Here’s how to use it in playbooks to improve automation workflow safety.

Read More at Enable Sysadmin

The Lifecycles of Open Source Projects

There are hundreds of thousands of open source projects out there – many are innovative ideas, poised to make a positive impact on the world. There is a much smaller number that move from an idea with one or two maintainers to broad adoption with an active community and investments from other organizations. How does this happen? What moves the needle? Helping projects grow and mature is exactly the mission of the Linux Foundation. We are a place where open source innovators thrive. 

In this article, I want to help you look at each of the project life cycle stages, determine where your project is, and, at a high-level, show how you can move your project successfully through each stage. 

What does success look like?

Open Source projects succeed when the right parties are involved throughout every stage of a project’s life cycle. Project teams work together from the early proposal and planning stages to the projects’ peak maturity stages and eventual wind-down.

This article is targeted to help Open Source Communities and Program Managers identify the life cycle stages of a project and promote the participation of the right committees at the right time to drive the project smoothly and transition it as it develops.

It also analyzes an example of what a project’s participation and challenges look like for an early-stage project compared to a mature project to bring insight into what to expect at those stages.

Open Source project life cycle

Depending on your Open Source project, these stages might vary in name, but most projects center on the same principles and focus on the following stages:

The Proposal Stage Where a specific need is identified and planning preparations for resources and work is analyzed and presented to the technical steering committee (TSC) and Chair committees.

The Incubation Stage It starts when a proposal is approved, and the resources are assigned. This is one of the most critical stages in the project. Early development is underway, and it is essential to set the foundation of how the project will operate to avoid difficulties in the future.

The Mature Stage It happens when a project has made several successful releases and is on track with its vision. Challenges may still exist; however, given the planning during the early stages, they are manageable.

The Core Stage It is defined when a project has reached a broad audience due to its value. This is where teams need to focus on maintaining and keeping the pace steady.

Project Archived This stage can sometimes be challenging to identify, given the speed gained in the previous stages. It could be a good thing that a project has reached its goal and hence needs to be archived, or it can, unfortunately, happen due to unforeseen circumstances like a lack of resources to collaborate. For projects that have difficulty identifying this stage, I recommend the following article: Winding Down an Open Source Project.

Committee Participation

Let’s discuss how a project in its early Incubation stage compares to a project in a Mature set and how having the appropriate committee’s attention can facilitate the work.

Project during Incubation

Still in a fragile state, requirement changes can still occur.

Board and TSC to approve
Committers and Maintainers

High activity of contributions since this project can still be considered under the bring-up phase

Committers and Maintainers collaborate on content

Can still be at risk of achieving if resource availability and contributions decline

Board and TSC can take a decision

Project during Maturity

At this point, the project should be heading towards the next releases. If requirements change, it might be a sign of poor planning.

Committers and Maintainers collaborate on content

Core review happens after evaluating the state of the releases and the demand that they have created.

TSC to approve

Can still be at risk of achieving if resource availability and contributions decline!

Board and TSC can take a decision

It is essential to have a clear definition of where your project stands and a clear roadmap to where it is heading so the key teams can perform their best during the project’s life cycle.

How does LFX play a part in the project’s life cycle?

LFX was developed by the Linux Foundation to streamline and support Open Source projects at any stage of a project’s life cycle. For example:

Individual Dashboard: This is where it all begins. Create your open source profile and affiliations to manage your project contributions to be credited for your contributions as the project progresses—a necessity for all developers at the Proposal and Incubation stages. 
Insights: Offers critical metrics on collaboration, issue tracking, and CI/CD status, which are vital tools to keep the pace of contributions and make more informed decisions early on. Great tool for the Incubation, Mature, and Core phases.
Security: Projects need license and vulnerability protection, and the Security tool helps projects scan their code and report any issues with options to get these fixed—a must-have during Incubation, Mature, and Core phases.
Organization Dashboard:  Provides complete visibility and activity for open source projects and all Linux Foundation services. A valuable tool for our Members/Organizations in the Proposal, Incubation, Mature, and Core phases.
Easy CLA: A tool to consider early on to have company and individual contributions protected and unblocked so collaborators and committers can participate as soon as possible. Great to have at the Proposal stage.   
Mentorship: At any stage, the Mentorship tool brings mentors experts based on the project and mentees interested to learn more about it to participate and start contributing. This tool is excellent to have available at any life cycle stage.

With the right participation from individuals and committees, the project will have the right resources to grow and develop through each life cycle stage.   I hope this article comes in handy for your open source community, and you find it easier to accurately identify your project’s life cycle stage – and have the right LFX tools to boost your project performance. All LFX tools play an essential part in the open source project’s development; this article hopefully helps your team choose where to start your LFX journey.

Check out the LFX tools and for additional information about project life cycles, please feel free to contact me, Jessica Gonzalez, at jwagantall@linuxfoundation.org and join your colleagues in the open source community at the LFX Community Forum. 

The author, Jessica Gonzalez, is Release Engineer & LFX Community Architect at the Linux Foundation.

The post The Lifecycles of Open Source Projects appeared first on Linux Foundation.

Top 5 Reasons to be Excited about Zowe

This article was written by David McNierney, member of the Zowe Technical Community and Product Marketing & Developer Marketing Leader at Broadcom Inc. It appeared on the Open Mainframe Project blog. The 3rd annual Open Mainframe Summit is September 21-22 in Philadelphia, PA.  It will be in-person and virtual. The schedule is now available and early-bird pricing ends on July 15. Learn more, see the agenda, and register here

The Open Mainframe Project’s Zowe initiative was born from an ambitious goal: make the mainframe a seamless, integrated part of the modern IT landscape — employing the same practices, tools and skillsets — without compromising its core attributes of stability, security and resiliency. Achieving this vision would address the growing talent crunch while helping enterprises modernize their mission-critical applications for today’s hybrid cloud world. It was exciting from the outset.

What better way to integrate the mainframe in this way than with open source, the technology that has fueled other paradigm-changing trends? Broadcom, IBM and Rocket Software discovered complementary initiatives across their organizations and, with the guidance and support of the Open Mainframe Project, Zowe was born. The framework, the first open source project for z/OS, opens the mainframe to popular practices like DevOps, languages like JavaScript and Python, and tools like CI/CD orchestrators.

Since then, Zowe’s trajectory has been extraordinary. Here are the top 5 reasons to be excited about the framework:

1) Extraordinary Growth

The user survey from the Arcati Mainframe Yearbook 2022 offers some eye-opening statistics: 19% of sites are already using Zowe (up from 10% last year) with a further 50% of sites planning to use it in the coming year (a big increase from 10% last year).

“Zowe, the open-source way of accessing mainframes, was introduced in 2018. 19 percent of sites said that they are already using this open-source technology, with a massive 50 percent of sites having plans to make use of it in the coming year. Open-source technology is now becoming commonplace on mainframes.”

“Perhaps Zowe will continue to help the mainframe to appear like any other server to a younger generation of programmers and managers.”

Key takeaway: don’t miss the bus!

2) Industry Recognition

Zowe won the Best DevOps for Mainframe award in this year’s DevOps Dozen competition, only 3 years after its introduction! Based on a combination of judging and popular voting, this recognition is particularly noteworthy because Zowe was selected over a number of well-established commercial offerings with large numbers of users. Chalk one up for the next-generation!

3) Robust Ecosystem

With over 70 conformant products, the Zowe ecosystem is fast growing with tools now spanning the application development, security and operations domains. In addition to leaders like Broadcom and IBM, vendors receiving badges for Zowe Conformance now include Micro Focus and BMC reflecting broader recognition of the framework’s value and customer demand. And another sign of a fast-maturing open source technology, conformant support providers are available to help users realize the full power of the ecosystem.

4) Existing User Base

Downloads of the Zowe CLI have exceeded 100,000 and Zowe Explorer for VS Code has exceeded 50,000. And Zowe z/OS Build downloads (server-side) have exceeded 5,000. These numbers appear to confirm the Arcati findings of increasing Zowe adoption and reflect an increasingly real-world-hardened solution.

5) Energized Community

The most important number of all is 501 — the number of contributors to this vibrant open source project. These contributors offer their time, expertise and energy to advance the Zowe cause to the benefit of everyone in the enterprise IT community. They contribute everything from documentation to architecture reviews to code and they come from many backgrounds and geographies. It takes a village, and this one is more energized than ever!

The onboarding of the mainframe as a seamless, integrated part of the hybrid cloud is well underway. The road is clear and recent evidence suggests a fast-approaching tipping point — a point at which Zowe transitions from an expanded toolkit for a few to the foundation of the hybrid cloud for all.

If you enjoyed this blog, checkout more Zowe blogs here or the Zowe website at Zowe.org. You can also ask a question and join the conversation on the Open Mainframe Project Slack Channel #Zowe-dev, #Zowe-user or #Zowe-onboarding. If this is your first time using the Open Mainframe Project Slack, register here.

The post Top 5 Reasons to be Excited about Zowe appeared first on Linux Foundation.

Oracle is the #1 contributor to the core of Linux in 5.18*

By the metric of “code that everybody us

Click to Read More at Oracle Linux Kernel Development

How to configure disk compression in Red Hat Enterprise Linux 8

Learn how to use the Virtual Data Optimizer (VDO) in RHEL 8 to compress files and maximize the space available on physical storage.

Read More at Enable Sysadmin

Jamie Thomas: What is the OpenSSF

Jamie Thomas is the General Manager, Systems Strategy and Development at IBM and is also the OpenSSF Board chair. She sat down with Alan Shimel of TechStrong TV during OpenSSF Day in Austin to share about OpenSSF and how the open source community is rallying together to increase the resilience of open source software. 

You can watch the full interview or read the transcript below. But, since we are all busy, I have pulled together some of the key points Jamie made from the interview:

OpenSSF is focused on a proactive posture. How do we prevent these kinds of events? And so to do that, we think there’s a number of things we have to do: 

First and foremost is education, of course, in terms of basic security education for developers.
Another key tenant is how do you put automation on steroids? So the automation and best practices that are reflected in that automation that open source projects can consume? How do you get that out to the most critical projects, and then provide some support for the long tail projects
It’s also about working, frankly, with other industry consortia as well as the government. In Particular, we’ve been working with the US government in the OpenSSF to define what are some actions that are really going to make a difference. 
And I think critical to all of this is getting collaboration across the different insights from the governing body, which includes a lot of technology firms, as well as commercial firms. Like there’s a lot of financial firms actually involved in the governing body. What are the key elements that we really need to address first. So getting those priorities set, and then having an execution agenda and really getting something done in the short term, I think is really going to be important for this group.

In the world of cybersecurity, you often learn that no one pays attention to a lot of things unless there’s a huge compelling event. And that’s what log4j was. So while it was not desired, it was helpful in that vein. . . So coming out of all of the meetings that we’ve had, the collaboration that we’ve had across the industry, it is going to be imperative that we execute, and that the things that we have identified as top priorities that we make measurable progress on those projects this year. That’s the importance of this OpenSSF day here today in Austin, which is allowing us, with a key set of stakeholders, to start to share perspectives of the projects that are underway, and how others can engage in those projects. And how, once again, working together, we can actually make a difference. 

 Working together, we can actually make a difference. 

We are turning the corner on a new level of commitment around security, there’s always been a commitment in open source around innovation, around feature function. I mean, that’s what’s driven open source and allowed it to be so successful. And for others, other corporations like IBM, we take an enormous advantage out of that, right, we’ve all gotten a huge advantage in productivity out of that. But now, it’s really about turning the focus a little bit more, getting that focus on security, so that we can use open source and continue to have that productivity, but with confidence as we go forward.

How do we make it easy for the maintainers of these open source projects? How do we make it easy for the contributors, because without doing that, it will not have the consumption by developers at large.