Pastiche

Last week the Cybersecurity & Infrastructure Security Agency (CISA) hosted SBOM-a-Rama 2023 (great event name!) in Los Angeles - a meeting about the current state of Software Bill of Materials (SBOM).

Several articles about the event shared takeaways and quotes from presenters and attendees:

• TechTarget’s article SBOM standards efforts stymied by confusion summarized the topics presented at the event and highlighted the challenges faced in adopting SBOMs including some quotes from those in the field.

• Interlynk shared a summary on their blog, SBOM-a-RAMA ’23: Key Updates.

• ReversingLabs published CISA SBOM-a-rama tackles challenges: 5 key takeaways

Edit (August 1, 2023): Video from the 2023 SBOM-a-Rama event is now online. Slides are also available from the previous SBOM-a-Rama event held in December 2021.

Join the Bay Area Apache Aurora and Apache Mesos communities for our November meetup, scheduled for Tuesday, November 10th, 2015 and hosted by our friends at Medallia in Palo Alto.

Register here: http://www.meetup.com/Bay-Area-Apache-Aurora-Users-Group/events/225412389/

The meetup will feature two talks:

• Apache Aurora Overview and Project Updates / Roadmap, presented by Bill Farner (Apache Aurora VP)
• Aurora+Docker at Medallia: Gradually transitioning to microservices, presented by Aasmund Eldhuset

Additionally, we’ve included time in the middle for lightning talks. If you have something you’d like to briefly present, please leave a comment on the meetup.com page and we’ll do our best to add you to the schedule.

Hope to see members of the Mesos and Aurora communities there!

Flying in before #MesosCon? There are two pre-conference events I want to make sure folks are aware of: a hackathon during the day, and a meetup/social event hosted by Twitter the evening before the conference. Register today!

MesosCon 2015 Pre-Conference Hackathon, hosted by Moz

Wednesday, August 19, 2015 from 8:30 AM to 4:30 PM

Register: http://eventbrite.com/e/mesoscon-2015-pre-conference-hackathon-tickets-17752101012

The hackathon will begin at 8:30am with breakfast, and we’ll begin hacking immediately at that time. For participants looking for projects to work on, we’ll make space available for you to meet and share ideas. Lunch and snacks will be available throughout the day, and lunch will be provided. We’ll also have a strong wifi connection, and up-to-date vagrant images that will help you get up and running with Mesos and many popular frameworks.

Mesos Social, hosted by Twitter Seattle

Wednesday, August 19th, 2015 from 6:00 PM to 9:00 PM

Register: https://www.eventbrite.com/e/mesos-social-tickets-17959933645

The event will include ample opportunities to meet other members of the community, and we’ll organize ourselves into groups for unconference-style discussions for part of the evening. Bring ideas about the future direction for the project and its related ecosystem of tools, uses of Mesos to discuss, or features you’d like to implement. Pizza and refreshments are included.

The second #MesosCon will take place in Seattle August 20th-21st 2015, with a pre-conference hackathon on the 19th. MesosCon is a community-organized conference for the Apache Mesos project, featuring four tracks of talks on a variety of topics including the Mesos core, Mesos frameworks, ops, and a growing ecosystem of tools that work with the project.

I couldn’t be more excited about the conference, community, and its growth since last year. There’s still time to submit a lightning talk proposal and register for the conference!

So here goes, my five reasons to attend MesosCon 2015 in Seattle:

1. Hear Mesos use cases and war stories

The program is packed with stories of real engineers and companies using Mesos in production, and you’ll have a chance to hear their use cases and war stories, to better understand how Mesos can fit into your technology stack and the obstacles you may face in adopting it. A few examples of sessions include:

• Migrating over 1,000 Production Components to a Mesos-Based Platform-as-a-Service (PaaS)
• Mesos at Bloomberg
• Twitter’s Production Scale: Mesos and Aurora Operations
• Mesos at OpenTable
• Scaling at eBay with Mesos

2. Learn about cutting-edge features and frameworks

It’s great to see how many new features are expanding the project’s core to support an ecosystem of frameworks and tools, and you’ll hear great presentations from those that are implementing and adopting those features. Several include:

• The New Mesos HTTP API
• Mesos Gets Pluggable: Introducing Modules
• Rocket and the Need for the App Container Specification
  
• Apache Cotton, MySQL on Mesos
• Preemptive Task Scheduling in Mesos Frameworks

3. Hear stellar keynote speakers

I’m looking forward to the line-up of invited keynote speakers we have, including:

• Benjamin Hindman
• Neha Narula
  
• Peter Bailis
• Adrian Cockcroft

4. Attend fun social events

Conferences can be intense with back-to-back sessions, but there are a number of activities happening before and during the conference that should keep things light, fun, and offer opportunities to get to meet other members of the community. A few include:

• Pre-conference hackathon: details of this will be announced later today via the Mesos blog and @ApacheMesos on Twitter; the hackathon will take place on Wednesday August 19th and be hosted by Moz in downtown Seattle.
• Evening Reception: an attendee offsite reception will take place after the first full day of the conference on Thursday, August 20th at the Experience Music Project (EMP), a leading-edge nonprofit museum, dedicated to the ideas and risk-taking that fuel contemporary popular culture.
• Pre-conference meetup hosted by Twitter: we’ll soon be announcing details of a meetup hosted by Twitter the evening before the event, at Twitter’s downtown Seattle office. Stay tuned!

5. Join the community

MesosCon is the place that brings together everyone in the community to celebrate, discussion, and collaborate on the open source project. You’ll find a group of attendees with varying levels of experience with the project from core contributors to newbies, which I think is great.

Hope to see you at MesosCon! There’s still time to register for the conference.

Last week, two projects in the Apache Aurora / Mesos ecosystem were open sourced that I wanted to make sure folks are aware of.

aurproxy
https://github.com/tellapart/aurproxy
“aurproxy is a load balancer manager with knowledge of Apache Aurora’s service discovery mechanism and integration with Aurora’s task lifecycle. It is a python application that runs inside of a docker container, where it manages a fully featured but not Aurora-aware load balancer (currently only nginx is supported). When Aurora service discovery events occur, aurproxy detects them, rewrites the load balancer’s configuration file and then triggers a graceful restart of the load balancer. Use aurproxy to expose dynamic Aurora service endpoints to services and applications that don’t have knowledge of Aurora’s service discovery mechanism.”

Jobhopper for Aurora
https://github.com/benley/aurora-jobhopper
“Jobhopper is a simple http redirector daemon designed to make it easy and convenient for developers and administrators to navigate directly to any running Aurora job on your Mesos cluster from your browser’s address bar.”

It’s great to a growing number of projects that are powered by Aurora and Mesos. Thanks to the TellApart team (including Thanos Baskous) and Benjamin Staffin for sharing these with the community!

This Thursday, April 30, 2015, our friends at TellApart will be hosting the first meet up for the Bay Area Apache Aurora Users Group. I’m pumped about this for a several reasons:

1) Apache Aurora is the Mesos framework we run at Twitter for long-running services and cron jobs, and it recently became a top-level project at Apache. It’s great to see this new meetup group form, and I’m looking forward to watch its community grow.

2) The folks at TellApart who are working with Mesos and Aurora are seriously smart. For a sneak peak at their stack, there’s a great video online featuring their usage of Docker and Aurora from a previous meetup.

3) The event captures the transition of a monolithic application to microservices, using Mesos, Aurora, and other open source projects – I’m psyched to learn more about how they piece things together, and imagine it will be of interest to a broad audience.

Register today!

Here’s the abstract for the event:

TellApart has spent much of the past six months breaking its monolithic application into smaller services. Our most critical and high-volume services are managed by Apache Aurora, which provides management and configuration layers that simplify application development for developers and cluster management for operators.
We would like to share what we’ve learned about migrating to and running a large scale Aurora+Mesos cluster on EC2.
Subtopics:
• Routing (Thanos Baskous)
• RPCs (Dobromir Montauk)
• Base Server (Tony Dong)
• Monitoring & Event Notification (George Sirois)
• Cluster management (Steve Niemitz)

On behalf of the MesosCon program committee, I’m pleased to announce the program for this year’s community conference. MesosCon will include two full days of sessions on August 20th and 21st, 2015 taking place in Seattle, WA.

The schedule is now available online: https://mesoscon2015.sched.org

Interest in this year’s conference has been growing significantly, and we’ve expanded our format from a single track to now include four simultaneous tracks to offer sessions at a variety of skill levels and topics ranging from Mesos internals, to use cases, and the ecosystem of Mesos frameworks.

Two additional things to note:

1) The program committee is working to finalize details of a hackathon that will take place the day before the full conference; we’ll share details as soon as they’re be confirmed.

2) We plan to open up a CFP for lightning talks, which are an additional opportunity to present to the larger Mesos community. Stay tuned!

You can expect future updates like this to be shared on the user@ and dev@ mailing lists, as well as our official Twitter handle: @MesosCon.

We hope you can join us in Seattle! Registration is now open: http://events.linuxfoundation.org/events/mesoscon/attend/register

Dave

The Apache Software Foundation was accepted as a mentoring organization for Google Summer of Code 2015, and there are a great number of potential projects for students to work on across the ASF (see a list of all ASF GSoC 2015 project ideas). Among them, several relate to Apache Mesos and Apache Aurora; let’s see some summer interns contributing to Mesos!

The deadline for students to apply is 3/27/2015 at 19:00 UTC; if you’re interested in contributing I would suggest chiming-in on the relevant JIRA issues, jumping in on the IRC channel, and potentially making a contribution.

Proposed GSoC Projects:

Implement Libprocess Benchmark Suite
https://issues.apache.org/jira/browse/MESOS-1018
Proposed mentors: Ben Mahler (@bmahler) Jie Yu (@jie_yu)

Updating FrameworkInfo to handle when the framework scheduler restarts
https://issues.apache.org/jira/browse/MESOS-703
Proposed mentor: Vinod Kone (@vinodkone)

Enforce disk quota in Docker Containerizer
https://issues.apache.org/jira/browse/MESOS-2502
Proposed mentor: Timothy Chen (@tnachen)

Consider a C++ implementation of CoreOS AppContainer spec
https://issues.apache.org/jira/browse/MESOS-2162
Proposed mentor: Timothy Chen (@tnachen)

Interactive web-based Aurora CLI tutorial
https://issues.apache.org/jira/browse/AURORA-1164
Proposed Mentor: @davelester

Outreachy Program

Several of these projects may also be worked on as Outreachy intern projects, which Twitter is participating in once again. See the full Twitter list of projects for more information. Outreachy internships are currently open to women (cis&trans), trans men, genderqueer people, @AscendPr0ject grads. We’ve extended the deadline for Outreachy until April 7th