Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CNCF Special Purpose Operating System Working Group Participation #1500

Open
rajaskakodkar opened this issue Jul 28, 2023 · 4 comments
Open

Comments

@rajaskakodkar
Copy link

rajaskakodkar commented Jul 28, 2023

Hello Photon maintainers,

As part of CNCF TAG Runtime, I am reaching out to let you know that there has been an interest in the community, which includes folks from Flatcar and Bottlerocket, to collaborate by creating a special purpose operating system working group under the CNCF umbrella. It would be great for you to participate in this working group for defining common standards and best practices across this space.

If you are interested, please join #wg-sp-os on CNCF slack. Let me know if you have any questions.

Thank you!

@rajaskakodkar
Copy link
Author

cc @raravena80 @helayoty @nikhita

@dcasota
Copy link
Contributor

dcasota commented Jul 28, 2023

Accordingly to https://github.com/cncf/tag-runtime, CNCF tag runtime already has two members from VMware (?).

@stmcginnis
Copy link

There are some VMware folks that are members of tag-runtime, but I think Rajas wanted to point out specifically the Special Purpose Operating System working group. We don't have any representation from Photon or VMware there, beyond the TAG liaison involvement.

https://github.com/cncf/tag-runtime/blob/main/wg/sp-os.md

Not sure if it is of interest or not, but any participation is welcome.

@dcasota
Copy link
Contributor

dcasota commented Dec 20, 2023

Here some thoughts.

From a regulations perspective, the management of operational risks and assurance operational resilience includes ensuring PII principals for PII sharing, transfer and disclosure. Contributing along tag-runtimes does not represent an information barrier, but might become legally questionable with respect to AI risk framework implementations.

For a vendor's Linux-centric OS working group, entrusting AI with responsibility for tag runtime operations appears highly beneficial. However, there are different starting points:

  • computer on modules kit specific: e.g. torizon os
  • hyperscalers: azure - cbl mariner, vmware by broadcom - photon os, gce - container linux, aws - amazon linux, oci - oracle linux
  • language-centric distros: python - flatcar, go - kairos, rust - bottlerocket
  • classic distros : ubuntu, debian, rhel, centos, sles, alpine, rockylinux

There is a projected eol in 2026 for linux kernels 5.10-6.6, and recently there were some interesting CERN statements as well.

That said, the more companies are willing to participate in the same working groups, the more regulations could shift the ratio of open source os to closed source os further in favor of closed source.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants