Topics

Funding for Hosting On-Line SPDX Tools

Phil Odence
 

The SPDX Work Group needs your help to host on-line tools.

 

As you may know, SPDX runs on shoestring with support from the Linux Foundation but no corporate contributions. There are benefits to the independence this arrangement, but it means we rely on individual contributions to cover modest expenses we do take on. One of those regular expenses is for cloud services to host our wonderful set of on-line tools.

 

We spend $1200/year on hosting. We’d like to line up enough funding to backfill for this year and to build a balance of “money in the bank” to ensure continuity next year. So the goal is $2400 total. As of this writing we are approaching half way there.

 

Please make a contribution of any size through the Linux Foundation CommunityBridge at:

https://funding.communitybridge.org/projects/f0e320d6-9c86-4656-ad4d-97842f25b124

 

BIG THANKS in advance!

 

Phil

 

L. Philip Odence

General Manager, Black Duck Audit Business

Synopsys Software Integrity Group, Burlington, MA

M (781) 258-9502 | phil.odence@...

https://www.synopsys.com/audits  

 

 

SIG-emailsig-2020

 

 

signature_475269920   signature_224475140   signature_97575969   signature_128435618

 

Mark Atwood
 

Is SPDX using AWS for any hosting?  I can probably get gratis AWS credits provided to SPDX.

 

And since SPDX is using Github, then Github pages can be used to host HTML/CSS/JS

 

..m

 

 

Mark Atwood <atwoodm@...>

Principal, Open Source

+1-206-604-2198

 

 

 

From: spdx@... <spdx@...> On Behalf Of Phil Odence
Sent: Tuesday, July 28, 2020 11:18 AM
To: spdx@...
Subject: [EXTERNAL] [spdx] Funding for Hosting On-Line SPDX Tools

 

The SPDX Work Group needs your help to host on-line tools.

 

As you may know, SPDX runs on shoestring with support from the Linux Foundation but no corporate contributions. There are benefits to the independence this arrangement, but it means we rely on individual contributions to cover modest expenses we do take on. One of those regular expenses is for cloud services to host our wonderful set of on-line tools.

 

We spend $1200/year on hosting. We’d like to line up enough funding to backfill for this year and to build a balance of “money in the bank” to ensure continuity next year. So the goal is $2400 total. As of this writing we are approaching half way there.

 

Please make a contribution of any size through the Linux Foundation CommunityBridge at:

https://funding.communitybridge.org/projects/f0e320d6-9c86-4656-ad4d-97842f25b124

 

BIG THANKS in advance!

 

Phil

 

L. Philip Odence

General Manager, Black Duck Audit Business

Synopsys Software Integrity Group, Burlington, MA

M (781) 258-9502 | phil.odence@...

https://www.synopsys.com/audits  

 

 

SIG-emailsig-2020

 

 

signature_475269920   signature_224475140   signature_97575969   signature_128435618

 

Gary O'Neall
 

Hi Mark,

 

Yes – SPDX is using AWS for the hosting (see https://github.com/spdx/spdx-online-tools/issues/194 for a discussion on the hosting options).

 

The deployment is a bit complex (Java/Python/Django/PostgreSQL).

 

Any credits/help is appreciated.

 

I registered the account that is hosting the site – so feel free to contact me for additional details.

 

Gary

 

 

From: spdx@... <spdx@...> On Behalf Of Mark Atwood via lists.spdx.org
Sent: Monday, August 3, 2020 7:15 PM
To: spdx@...; phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools

 

Is SPDX using AWS for any hosting?  I can probably get gratis AWS credits provided to SPDX.

 

And since SPDX is using Github, then Github pages can be used to host HTML/CSS/JS

 

..m

 

 

Mark Atwood <atwoodm@...>

Principal, Open Source

+1-206-604-2198

 

 

 

From: spdx@... <spdx@...> On Behalf Of Phil Odence
Sent: Tuesday, July 28, 2020 11:18 AM
To: spdx@...
Subject: [EXTERNAL] [spdx] Funding for Hosting On-Line SPDX Tools

 

The SPDX Work Group needs your help to host on-line tools.

 

As you may know, SPDX runs on shoestring with support from the Linux Foundation but no corporate contributions. There are benefits to the independence this arrangement, but it means we rely on individual contributions to cover modest expenses we do take on. One of those regular expenses is for cloud services to host our wonderful set of on-line tools.

 

We spend $1200/year on hosting. We’d like to line up enough funding to backfill for this year and to build a balance of “money in the bank” to ensure continuity next year. So the goal is $2400 total. As of this writing we are approaching half way there.

 

Please make a contribution of any size through the Linux Foundation CommunityBridge at:

https://funding.communitybridge.org/projects/f0e320d6-9c86-4656-ad4d-97842f25b124

 

BIG THANKS in advance!

 

Phil

 

L. Philip Odence

General Manager, Black Duck Audit Business

Synopsys Software Integrity Group, Burlington, MA

M (781) 258-9502 | phil.odence@...

https://www.synopsys.com/audits  

 

 

SIG-emailsig-2020

 

 

signature_475269920   signature_224475140   signature_97575969   signature_128435618

 

Vladimir Sitnikov
 

>The deployment is a bit complex (Java/Python/Django/PostgreSQL).

Is the complexity really needed?
Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?

Vladimir

Alexios Zavras
 

Rewriting this to a simpler setup is definitely a valid idea for a future Community Bridge / GSoC project. 😉

 

-- zvr

 

From: spdx@... <spdx@...> On Behalf Of Vladimir Sitnikov
Sent: Wednesday, 5 August, 2020 10:37
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools

 

>The deployment is a bit complex (Java/Python/Django/PostgreSQL).

 

Is the complexity really needed?

Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?

 

Vladimir

 

Intel Deutschland GmbH
Registered Address: Am Campeon 10-12, 85579 Neubiberg, Germany
Tel: +49 89 99 8853-0, www.intel.de
Managing Directors: Christin Eisenschmid, Gary Kershaw
Chairperson of the Supervisory Board: Nicole Lau
Registered Office: Munich
Commercial Register: Amtsgericht Muenchen HRB 186928

 

Speaking of which, would someone be willing to do 10~15 minutes on ComminityBridge for a forthcoming OpenChain webinar?

Shane 

On Aug 5, 2020, at 20:26, Alexios Zavras <alexios.zavras@...> wrote:



Rewriting this to a simpler setup is definitely a valid idea for a future Community Bridge / GSoC project. 😉

 

-- zvr

 

From: spdx@... <spdx@...> On Behalf Of Vladimir Sitnikov
Sent: Wednesday, 5 August, 2020 10:37
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools

 

>The deployment is a bit complex (Java/Python/Django/PostgreSQL).

 

Is the complexity really needed?

Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?

 

Vladimir

 

Intel Deutschland GmbH
Registered Address: Am Campeon 10-12, 85579 Neubiberg, Germany
Tel: +49 89 99 8853-0, www.intel.de
Managing Directors: Christin Eisenschmid, Gary Kershaw
Chairperson of the Supervisory Board: Nicole Lau
Registered Office: Munich
Commercial Register: Amtsgericht Muenchen HRB 186928

Gary O'Neall
 

I actually tried to implement this in a serverless environment (it was my first choice), but there is persistent state required for some of the components.  As Alexios points out – a good future project.

 

The PostgreSQL is necessary as a DB backend.  It also uses Redis – but this doesn’t seem to add too much complexity.  We have some projects underway to reduce the dependency on Java – it would be great to make this all python sometime in the future.

 

BTW – Anyone interested in reviewing and contributing can review the issues listed here: https://github.com/spdx/spdx-online-tools/issues/199

 

Gary

 

From: spdx@... <spdx@...> On Behalf Of Alexios Zavras
Sent: Wednesday, August 5, 2020 4:27 AM
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools

 

Rewriting this to a simpler setup is definitely a valid idea for a future Community Bridge / GSoC project. 😉

 

-- zvr

 

From: spdx@... <spdx@...> On Behalf Of Vladimir Sitnikov
Sent: Wednesday, 5 August, 2020 10:37
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools

 

>The deployment is a bit complex (Java/Python/Django/PostgreSQL).

 

Is the complexity really needed?

Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?

 

Vladimir

 

Intel Deutschland GmbH
Registered Address: Am Campeon 10-12, 85579 Neubiberg, Germany
Tel: +49 89 99 8853-0, www.intel.de
Managing Directors: Christin Eisenschmid, Gary Kershaw
Chairperson of the Supervisory Board: Nicole Lau
Registered Office: Munich
Commercial Register: Amtsgericht Muenchen HRB 186928

Gary O'Neall
 

Hi Shane,

 

There are a couple of community bridge related topics we could cover.

 

For the SPDX online tools, I’m planning on presenting to the OpenChain tools workgroup in Sept.

 

We could also present as part of a webinar.

 

Another interesting topic would be the work the interns and GSoC students are doing for the tools more generally.

 

We have a number of mentors and students involved – perhaps some of the mentors would be interested in jointly presenting?

 

Gary

 

 

From: spdx@... <spdx@...> On Behalf Of Shane Coughlan
Sent: Wednesday, August 5, 2020 4:57 AM
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools

 

Speaking of which, would someone be willing to do 10~15 minutes on ComminityBridge for a forthcoming OpenChain webinar?

 

Shane 



On Aug 5, 2020, at 20:26, Alexios Zavras <alexios.zavras@...> wrote:



Rewriting this to a simpler setup is definitely a valid idea for a future Community Bridge / GSoC project. 😉

 

-- zvr

 

From: spdx@... <spdx@...> On Behalf Of Vladimir Sitnikov
Sent: Wednesday, 5 August, 2020 10:37
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools

 

>The deployment is a bit complex (Java/Python/Django/PostgreSQL).

 

Is the complexity really needed?

Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?

 

Vladimir

 

Intel Deutschland GmbH
Registered Address: Am Campeon 10-12, 85579 Neubiberg, Germany
Tel: +49 89 99 8853-0, www.intel.de
Managing Directors: Christin Eisenschmid, Gary Kershaw
Chairperson of the Supervisory Board: Nicole Lau
Registered Office: Munich
Commercial Register: Amtsgericht Muenchen HRB 186928

 

It would be great. How about Third Monday August at 5pm Pacific? We can do one to two slots on CommunityBridge stuff, each up to 15 minutes + questions.

Can you help pull it together? I would love to showcase the practical stuff happening.

Shane

On Aug 6, 2020, at 2:18, Gary O'Neall <gary@...> wrote:

Hi Shane,



There are a couple of community bridge related topics we could cover.



For the SPDX online tools, I’m planning on presenting to the OpenChain tools workgroup in Sept.



We could also present as part of a webinar.



Another interesting topic would be the work the interns and GSoC students are doing for the tools more generally.



We have a number of mentors and students involved – perhaps some of the mentors would be interested in jointly presenting?



Gary





From: spdx@... <spdx@...> On Behalf Of Shane Coughlan
Sent: Wednesday, August 5, 2020 4:57 AM
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools



Speaking of which, would someone be willing to do 10~15 minutes on ComminityBridge for a forthcoming OpenChain webinar?



Shane



On Aug 5, 2020, at 20:26, Alexios Zavras <alexios.zavras@...> wrote:



Rewriting this to a simpler setup is definitely a valid idea for a future Community Bridge / GSoC project. 😉



-- zvr



From: spdx@... <spdx@...> On Behalf Of Vladimir Sitnikov
Sent: Wednesday, 5 August, 2020 10:37
To: spdx@...
Cc: phil.odence@...; Kate Stewart <kstewart@...>
Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools



The deployment is a bit complex (Java/Python/Django/PostgreSQL).


Is the complexity really needed?

Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?



Vladimir



Intel Deutschland GmbH
Registered Address: Am Campeon 10-12, 85579 Neubiberg, Germany
Tel: +49 89 99 8853-0, www.intel.de
Managing Directors: Christin Eisenschmid, Gary Kershaw
Chairperson of the Supervisory Board: Nicole Lau
Registered Office: Munich
Commercial Register: Amtsgericht Muenchen HRB 186928