Open-source News

Generating a Software Bill of Materials (SBOM) with Open Source Standards and Tooling

The Linux Foundation - Tue, 03/16/2021 - 21:00

Every month there seems to be a new software vulnerability showing up on social media, which causes open source program offices and security teams to start querying their inventories to see how FOSS components they use may impact their organizations. 

Frequently this information is not available in a consistent format within an organization for automatic querying and may result in a significant amount of email and manual effort. By exchanging software metadata in a standardized software bill of materials (SBOM) format between organizations, automation within an organization becomes simpler, accelerating the discovery process and uncovering risk so that mitigations can be considered quickly. 

In the last year, we’ve also seen standards like OpenChain (ISO/IEC 5320:2020) gain adoption in the supply chain. Customers have started asking for a bill of materials from their suppliers as part of negotiation and contract discussions to conform to the standard. OpenChain has a focus on ensuring that there is sufficient information for license compliance, and as a result, expects metadata for the distributed components as well. A software bill of materials can be used to support the systematic review and approval of each component’s license terms to clarify the obligations and restrictions as it applies to the distribution of the supplied software and reduces risk. 

Kate Stewart, VP, Dependable Embedded Systems, The Linux Foundation, will host a complimentary mentorship webinar entitled Generating Software Bill Of Materials on Thursday, March 25 at 7:30 am PST. This session will work through the minimum elements included in a software bill of materials and detail the reasoning behind why those elements are included. To register, please click here

Register for webinar

There are many ways this software metadata can be shared. The common SBOM document format options (SPDX, SWID, and CycloneDX) will be reviewed so that the participants can better understand what is available for those just starting. 

This mentorship session will work through some simple examples and then guide where to find the next level of details and further references. 

At the end of this session, participants will be on a secure footing and a path towards the automated generation of SBOMs as part of their build and release processes in the future. 

The post Generating a Software Bill of Materials (SBOM) with Open Source Standards and Tooling appeared first on Linux Foundation.

Arch Linux Developers Discuss Idea Of Providing An x86-64-v3 Port

Phoronix - Tue, 03/16/2021 - 20:30
While recently Arch Linux developers and stakeholders were discussing the possibility of raising the x86-64 base requirements for this Linux distribution to the "x86-64-v2" micro-architecture feature level that roughly correlates to Intel Nehalem and newer, now the discussion has shifted to keeping the same x86-64 base level while potentially offering a "x86-64-v3" port for those with newer Intel/AMD CPUs...

Siemens Working To Upstream More Linux Drivers For Their Industrial PCs

Phoronix - Tue, 03/16/2021 - 18:18
Siemens has recently been engaging directly with the upstream Linux kernel developers in aiming to mainline various drivers for benefiting their industrial PC platforms...

The Last Minute GNOME Shell + Mutter 40 Release Candidate Changes

Phoronix - Tue, 03/16/2021 - 18:01
GNOME developers remain very busy as they approach the finish line for GNOME 40...

How to write 'Hello World' in WebAssembly

opensource.com - Tue, 03/16/2021 - 15:01

WebAssembly is a bytecode format that virtually every browser can compile to its host system's machine code. Alongside JavaScript and WebGL, WebAssembly fulfills the demand for porting applications for platform-independent use in the web browser. As a compilation target for C++ and Rust, WebAssembly enables web browsers to execute code at near-native speed.

When you talk about a WebAssembly, application, you must distinguish between three states:


read more

Get started with edge computing by programming embedded systems

opensource.com - Tue, 03/16/2021 - 15:00

RTOS is an open source operating system for embedded devices developed by RT-Thread. It provides a standardized, friendly foundation for developers to program a variety of devices and includes a large number of useful libraries and toolkits to make the process easier.


read more

LFCA: Learn Basic File Management Commands in Linux – Part 2

Tecmint - Tue, 03/16/2021 - 14:28
The post LFCA: Learn Basic File Management Commands in Linux – Part 2 first appeared on Tecmint: Linux Howtos, Tutorials & Guides .

This article is Part 2 of the LFCA series, here in this part, we will explain about Linux file system and cover the basic file management commands, that are required for the LFCA certification

The post LFCA: Learn Basic File Management Commands in Linux – Part 2 first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

Ubuntu Touch OTA-16 Released As The Second Largest Release Ever

Phoronix - Tue, 03/16/2021 - 14:00
UBports released Ubuntu Touch OTA-16 as their largest update since the days of OTA-4 when the transition happened from an Ubuntu 15.04 base to 16.04 LTS...

Fedora Workstation 34 Should Be Very Exciting With GNOME 40, PipeWire Default

Phoronix - Tue, 03/16/2021 - 12:00
Fedora 34 due out in April is shaping up to be a very exciting feature release as usual with this Red Hat sponsored Linux distribution continuing to live on the bleeding-edge of the open-source software ecosystem. Fedora Workstation 34 in particular is heavy on updates and new features, led by the GNOME 40 desktop...

Additional AMD EPYC 75F3 / 7713 / 7763 Linux Performance Benchmarks

Phoronix - Tue, 03/16/2021 - 06:40
Complementing today's AMD EPYC 7003 series review with the initial testing on the EPYC 7F53, 7713, and 7763 processors, here are some additional raw data points in full for those interested in an even more diverse look at the performance...

Git 2.31 Released With Moving More Of The Bisecting Code To C

Phoronix - Tue, 03/16/2021 - 03:52
Git 2.31 is out today as the newest version of this distributed revision control system...

Pages