Exploring Open-Source and Cloud-Native with Tracy Miranda

Exploring Open-Source and Cloud-Native with Tracy Miranda

The conversation covers:


  • Tracy’s thoughts on how the relationship between open-source and cloud-native should be described.
  • The advantages and disadvantages to an organization using open-source.
  • Some of the major risks associated with using open-source, and why companies should approach with caution.
  • Why CI/CD is a rising security concern for open-source organizations.Tracy also provides her thoughts on how businesses are handling the CI/CD pipeline today, and where the trend is heading.
  • Some of the unresolved challenges related to continuous delivery that currently exist.
  • Tracy’s advice for companies that are just starting to develop an open-source contribution strategy.
  • How companies should approach topics like open-source strategizing and building open-source communities.
  • The common mistakes that individuals and companies make when nurturing open-source communities. Tracy also comments on mistakes that people are making with continuous delivery.

Links

Emily: Hi everyone. I’m Emily Omier, your host, and my day job is helping companies position themselves in the cloud-native ecosystem so that their product’s value is obvious to end-users. I started this podcast because organizations embark on the cloud naive journey for business reasons, but in general, the industry doesn’t talk about them. Instead, we talk a lot about technical reasons. I’m hoping that with this podcast, we focus more on the business goals and business motivations that lead organizations to adopt cloud-native and Kubernetes. I hope you’ll join me.



Emily: Welcome to The Business of Cloud Native. Today, I'm chatting with Tracy Miranda. Tracy, thank you so much for joining me.



Tracy: Hi, Emily. Thanks for having me. It's my pleasure.



Emily: So, as usual, I just want to start off with having you introduce yourself, both what you do, where you work, but also, like, some details, what does this actually mean? How do you actually spend your day?



Tracy: Yeah, so I'm the director of open-source CloudBees, and I'm also the board chair at the Continuous Delivery Foundation, which is an open-source foundation, which is home to projects like Jenkins, and Spinnaker, and Tecton, and Jenkins X. So, basically, I'm a big fan of all things open-source, which in day-to-day means I'm doing anything which is related to building communities. So, either involved with code, or building communities and through conferences, or sometimes just the boring governance stuff around open-source.



Emily: What is the boring governance stuff around open-source?



Tracy: So, I guess it is just trying to get folks moving in the same direction, and reminding people that it's sometimes more than just code. And whether it's updating a code of conduct, and one of the things we've seen and—okay, I wouldn't call this boring; it's actually taken over a bit in open-source communities, but it's sort of different from the code, but it's the whole terminology updates. We've seen a lot of open-source communities have become more aware about wanting to be better about using terms like ‘master’ and ‘slave’ and move away from that. That being said, it's not that easy, so there's a lot to do in getting people on the same page and ready to move forward even before you can start changing a line of code.



Emily: Since the topic of the podcast is cloud-native, obviously, open-source and cloud-native are related. In fact, some people think that cloud-native must be open-source. Where do you fall on that spectrum? How do you think the relationship between open-source and cloud-native should be described?



Tracy: Yeah, I think that they're pretty distinct things. So, cloud-native is all about using the Cloud effectively and having technology which takes advantage of modern architectures to give you things like rapid elasticity, or on-demand self-service. And that's distinct from open-source, which is around the licensing, and it's become more about communities, as well. But I think because Kubernetes has been the most successful cloud-native project that is open-source, I guess there's become this very, very strong association which, in my mind, is a very, very good thing because I think open-source communities are really the way to drive innovation very, very quickly across the industry.



Emily: And this may seem sort of obvious, but what are some of the advantages and disadvantages to an organization in using open-source?



Tracy: Yes. So, I think—well, lots—virtually every company uses open-source, and the first thing people can see as the benefits are just the engineering efficiencies. So, using technologies which, say aren’t core to the business, but then building on top of those and taking advantage of the features rather than dedicating their own engineering resources to developing them. I used to work as a consultant, and I would go from company to company, and usually, they would be adopting open-source when they wanted to get away from an in-house project where the people or person who had written it had left the company. So, I think there's a lot to be said, as well, for sustainability of technology: that communities and open-source communities are really good at sustaining projects over the long term, and therefore kind of the best bet for technology that's going to live on beyond individuals or even companies, acquisitions, or whatever.



Emily: Do you think there are any risks to using open-source? I'm even interested in hearing if there are risks that are not real, but that are perceived risks. And then even maybe some risks that people don't think about, but that are in fact, quite real.



Tracy: Yes, yeah, no, absolutely there are risks. So, it's wise for companies to approach with caution. I think the risks sort of depend on which side—like, are you looking to just use open-source that someone else has written, or are you contributing something, which might be key to your company, but then you’re saying, “Okay, I'm going to do this in an open way,” which brings us to one of those common perceived myths, that someone, like a cloud provider, is then going to take your open-source software and do a better job of making money around it, so thereby just ruining your entire business model.



And I think the other area where we tend to see a lot of dialogue around, is always around open-source security. For a long time, people used to, sort of, make out that this was different from closed source security, somehow. Security through obscurity meant that closed-source was better than open-source, which is clearly not the case. You can have secure open-source software, not secure open-source software. It just really depends on the project and the practices.



Emily: And then also, I thought we'd talk a little bit specifically about this CI/CD work that you do. How important is CI/CD, do you think, in the pursuit of being cloud-native?



Tracy: Yes, no, I think CI/CD h...

Episoder(267)

ATO special episode with Peter Farkas

ATO special episode with Peter Farkas

In this special episode recorded at All Things Open, I talk with Peter Farkas, CEO and co-founder of FerretDB. We talked about about MongoDB and the license change fiasco and why Peter wanted to build an open source company and never considered building a non-open source company. The biggest 🤯 in this episode was about enforcing what it means to be open source; in particular, FerretDB positions itself as a truly open source alternative to MongoDB, and has received threatening letters from MongoDB as a result. How do you enforce it when a company claims to be open source but does not use an OSI-approved license? How well do the average users actually understand the license implications, and if a big company says they have an open source license even though it’s source-available, not open source, how much will people understand the difference? If you want another perspective on the enforcement of advertising around open source licenses, listen to the episode I recorded with Stefano Maffulli, also at All Things Open.

12 Nov 202416min

Selling Peace of Mind with Bhaskar from YottaDB

Selling Peace of Mind with Bhaskar from YottaDB

This week’s full-length episode is with Bhaskar, founder of YottaDB. This episode was recorded on-site at All Things Open last week, and we covered a wide range of topics. Including:How the open source ecosystem, and the open source business ecosystem, has changed over the past 30+ years.Who can responsibly self-support an open source database, and who really needs to have someone to call if things go wrong. The spectrum of professionalism among open source developers How YottaDB started out as a project developed inside a larger company that was in financial services; and Bhaskar decided to spin it out as it’s own company.The challenge articulating the value of support contracts, especially for software that is reliable. Bhaskar says he is selling peace of mind more than anything else; and he works with customers to avoid incidents — because ultimately avoiding an incident is a better outcome for everyone than a quick recovery from an incident. How to convince people that they are actually not as good at managing open source databases as they think they are. We also talked about conference strategies: according to Bhaskar, the way he’s decided which conferences to exhibit at is a series of trial and error — and by the way, this is something I’ve heard from many people. Yes, you have to think about where your customers are, not where your friends are, but sometimes you don’t know ahead of time which conferences are going to have the best ROI. I’m working with YottaDB right now on how to differentiate themselves in the crowded database market — and we talk about that process a bit right now. If you’re having trouble standing out in a crowded market, you might want to work with me.

6 Nov 202429min

ATO Special Episode with Tatiana Krupenya of DBeaver

ATO Special Episode with Tatiana Krupenya of DBeaver

This special episode of The Business of Open Source with Tatiana Krupenya, CEO of DBeaver, was recorded on site at All Things Open 2024. It’s a short conversation, so we addressed one main question: What is the difference between running an open source company versus as proprietary software company? Tatiana says the difference is big — and it’s complicated. The bottom line: Your OSS can be your main competitor, and your customers have to really see the value in your commercial offering if you want to make sales. ## If you aren't sure how to talk to your potential customers are about why they should use your commercial offering, you might want to work with me.

5 Nov 202413min

Behind the Scenes of the Open Source AI Definition with Stefano Maffulli

Behind the Scenes of the Open Source AI Definition with Stefano Maffulli

This week on The Business of Open Source, I spoke with Stefano Maffulli, Executive Director of the Open Source Initiative, about the definition of open source and… the definition of open source AI. We recorded this episode on-site at All Things Open, so there’s a little bit of background noise. We talked about why OSI felt like it needed to develop a definition of open source AI, how “open source” is enforced, and the thought process behind the definition that the OSI ultimately published. We talked about open data quite a bit — different kinds of data, what kind of information and data is important to researchers and professionals in the AI space, and if there’s a way to include AI models that are trained on proprietary data in the definition of open source AI. If you are interested in open source AI, definitely check out this behind-the-scenes discussion of how, and why, this definition was published — and what the future likely holds for defining open source AI.

30 Okt 202432min

Price Anchors of Zero Dollars with Anais Concepcion and Paul Fitzpatrick

Price Anchors of Zero Dollars with Anais Concepcion and Paul Fitzpatrick

This week on The Business of Open Source, I spoke with Anais Concepcion and Paul Fitzpatrick , the co-CEO of Grist Labs and CTO of Grist Labs. We talked about managing growth of users versus growth of revenue, moving to an open source approach for technical, not technical, reasons, and open-source related product management questions for open source companies. Some really interesting themes we talked about:Moving from a SaaS first approach to also focusing on enterprise sales. Why they did that, what other sales channels that opened and what questions it also forced the company to addressUser personas versus buyer personasThe situations in which Grist is the best option — which incidentally I could not understand from the website or the project documentationThe relationship between the open source project and both enterprise sales and SaaS sign-ups. How open source has been critical for a strategic relationship Grist has with the French government, which has been important for increasing product development velocityGiving up ‘darlings’ or features that they really want to develop but that they don’t think would drive revenueThe difference Anais sees between running Grist and running non-open-source companies — one of the most interesting differences is that users often have a sense of ownership over the project that you just wouldn’t see in a fully proprietary How open source true believers often work in large companies and control budgets, and should not be underestimated. Why trying to sell based on features — including telling yourself that if you just had one more feature, you’d unlock all the sales — was a big mistake. Are you struggling with price anchors fixed around zero dollars, or can’t figure out how to manage the push and pull of developing open source and building a business? You might want to work with me.

23 Okt 202442min

Getting people to use the features you already have with Eric Holscher

Getting people to use the features you already have with Eric Holscher

This week on The Business of Open Source, I spoke with Eric Holscher, co-founder of Read the Docs. We had a really far-ranging conversation that included talking about why documentation is often so bad, why documentation should be a priority, but also Eric’s experience building Read the Docs and Write the Docs. This episode was interesting because it’s both about building an open source company and also about the importance documentation for software projects in general and open source projects. Some things we covered included: What is documentation? Is it a marketing effort, is it a part of the project itself? Eric talks about how good documentation for an open source project is a clear signal of a level of seriousness for the project. How Read the Docs was really started to support open source projects, and that is part of why there’s no enterprise installs — either you use the open source code on your own, or you use the hosted product.How Eric sees building in the open as a way to help other people become better software engineers, but that ‘helping companies use Read the Docs for free’ is not the reason he wanted to build an open source company, and he’s still not sure how to feel about the fact that this happens. You don’t get bonus points for being open source or bonus points for being bootstrapped — it won’t prevent a potential customer from using a competitive product because it has a feature that Read the Docs doesn’t have. How open source in general — and even documentation in general — can help build brand value, but it is super hard to quantify and put in a slide in a board meeting to justify an investment in open source. The decision to build Read the Docs as a business stemmed from the pressure that Eric got from having a successful open source project. How they tried very hard to avoid accepting advertisements, but they should have started doing so much sooner because it turned out advertisements is well-aligned with the things they want to be working on. The difference in risk between being open source for a database company versus an app-level open source project like Read the Docs; for Read the Docs one of the risks is the brand damage associated with people running the OSS on-prem and doing a bad job. Are you the founder of an open source company and struggling with figuring out how to manage the relationship between the project and product? You might want to work with me. Enjoy the show? Help it reach more people by leaving a review and sharing with your friends.

16 Okt 202445min

Open source companies' reputation problem with Chris Holmes

Open source companies' reputation problem with Chris Holmes

Today on The Business of Open Source, I spoke with Chris Holmes, co-founder and CEO of Greymatter. Greymatter is deeply involved in the open source ecosystem and maintains the Go Envoy Control Plane, but Chris is adamant that it is not an open source company. We had a great discussion about why that is, what it means for the company and the conversations he ends up having around open source with his customers and partner companies. Some particularly interesting points that came up:Customers worry that buying Greymatter could force them to buy enterprise versions of open source software — and Chris thinks that this could be a symptom of the fact that many users expect that they’ll end up being forced to pay for something they don’t want to pay forHow open source companies, and open source projects in general, can be viewed as risky if they are only backed by one companyWho is gonna pay for open source? How if you are going to get away from open source projects being aggressively monetized, big companies have to put their money where their mouth is and pay for open source development directlyWhy and how to get started selling to governments. Yes, the sales cycles are longer but the deals tend to be very sticky once you get in — and why Chris actually finds it easier to sell to the military than to large enterprises. What benefits Greymatter gets from being a maintainer of the Go Envoy Control Plane. Struggling with how to get your product strategy right, and find the right balance between your open source project and your commercial offering? Not sure how your user audience and customer market relate to each other? You might want to work with me.

9 Okt 202444min

Building your product with your customers with David Höck

Building your product with your customers with David Höck

This week on the Business of Open Source, I spoke with David Höck, co-founder of Vendure. We talked about switching licenses from MIT to GPL, the ways that Vendure is different from it’s competitors and how architectural decisions can be a powerful differentiator for an open source company. Favorite quote: “You need to build your product together with your clients.” Some specifics we talked about that you should pay attention to: Why they switched to GPL in order to encourage more people to reach out to them and get more visibility into who was using their open source projectOn the other hand, they wanted to make sure that big companies building commercial platforms on top of Vendure’s platform are forced to pay for a commercial license. They also wanted to choose a less-permissive license, but something that was still well-known and wouldn’t cause a lot of confusion among users or potential customersThe difference between being happy with people using your software for free, and being happy with competitors using your software to build a competitive product, without offering any support to the underlying software. Do your customers care about whether you are VC-backed or bootstrapped? We had an interesting conversation about this, because Vendure is bootstrapped. I think we settled on a real important nugget — if your technology is really critical to the company, they will care about your long-term sustainability. Being bootstrapped can help convince potential customers that you are independent and will be sustainable for the long term. The top advantage of open source, David says, is the ability to get fast product feedback from a community. —> I just was talking with someone yesterday about this advantage of an open source strategy, I think it is under-discussed but extremely important. If you’re the founder of an open source company struggling with your product strategy — uncertain how to differentiate between project or product or how to differentiate the entire company in the ecosystem; don’t know what your project is supposed to do for your business; aren’t clear on the target market for your project or product — you might want to work with me. Find out more here.

2 Okt 202440min

Populært innen Business og økonomi

stopp-verden
dine-penger-pengeradet
e24-podden
rss-penger-polser-og-politikk
rss-borsmorgen-okonominyhetene
finansredaksjonen
pengepodden-2
tid-er-penger-en-podcast-med-peter-warren
utbytte
livet-pa-veien-med-jan-erik-larssen
pengesnakk
morgenkaffen-med-finansavisen
rss-sunn-okonomi
okonomiamatorene
aksjepodden
rss-rettssikkerhet-bak-fasaden-pa-rettsstaten-norge
lederpodden
rss-fa-makro
rss-andelige-tanker-med-camillo
rss-markedspuls-2