Mais conteúdo relacionado Mais de Paris Open Source Summit (20) Foss governance succeeding / Philippe Richard1. FREE AND/OR OPEN SOURCE SOFTWARE (FOSS)
IMPLEMENTING AN EFFICIENT AND SAFE
FOSS STRATEGY IN A GLOBAL COMPANY
Michel Ruffin & Philippe Richard, Alcatel-Lucent - Bell Labs - Corporate CTO
September 2011
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
2. ALCATEL-LUCENT
BACKGROUND
% of 2010 revenues
N. America: ~36% Europe: ~32% Asia Pacific: ~18% Rest of world: ~14%
• Sells anything in the network • 79 000+ employees
for communication • 27 900 active patents
Russia
Romania
- Network access Ireland • Present in more than
Poland
- Core network UK Slovakia
Canada Belgium 130 countries
- Transmission technologies France
• 600+ new development
Germany Turkey
- Applications
USA Netherlands projects per year South Korea
Italy Israel China
- Professional services Spain • Numerous suppliers and
Taiwan
India
• Customers outsourced developments
- Network operators • Several acquisitions of
Singapore
(around 1500 in the world) companies per year
- Strategic industries Brazil • Product life can be from
- Enterprises 1 to 20 years Australia
Executive Business Centers
- Indirectly: end users: Research Centers
Product & Solution
anybody in the world Development Centers
2
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
3. SOFTWARE R&D AND FOSS TOMORROW
INDUSTRY TRENDS
TODAY
YESTERDAY
A proprietary
SW product A FOSS
Trend line distributor/integrator
Proprietary R&D
FOSS We stand here
res
to f featu
ize and se cost
le xity: s integ ration Development cost
Comp onent
Comp
Development cost FOSS
Development cost Trends: R&D becomes a shared effort
3
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
4. FOSS USE IN
ALCATEL-LUCENT
• Strategy: use FOSS whenever possible It is also about
• Use FOSS distributors / supporting • Innovation
companies whenever possible
- Using FOSS accelerate innovation
- E.g. Linux - Android is our strategy
- Re-use avoid to re-invent the wheel
• 20% to 80% of an Alcatel-Lucent
product code is FOSS (42% in • Provide freedom to our customers
average today) - Provide them standard solutions to
develop additional services
• Basic rationale
- Remove supplier lock-in - Reduce their need to adapt their solutions
for each supplier
- Reduce R&D costs
- Create an internal and external community • New Business model: Moving from a
on common software HW/SW supplier to a service supplier
- Provide our contribution to - Compete on quality, customer care,
the communities innovation
4
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
5. ALCATEL-LUCENT
A CONTRIBUTOR TO FOSS
• Contributions to tools • FOSS Forums and standardization
- Expat suite of tools, GForge/ Fusionforge • Linux foundation: Alcatel-Lucent is one of
• Contribution to FOSS bug Fix the 9 founders of carrier grade Linux group
(Part of OSDL in 2001)
• Contribution to new developments
• FOSSBazaar: Alcatel-Lucent participate to
- Corba component model on top of Mico
SPDX standard and promote it.
(GPL/LGPL licenses)
- Plan9 (operating system under Lucent public • FOSSBazaar: we will continue the
license) standardization of FOSS governance process.
• Indirect contributions to non core telecom • OWF: we are a sponsor
business through FOSS distributors • Systematic: head of FOSS project committee
- We pay ten’s of million$ per year to FOSS
• OVA: Open Virtualization Alliance we are in
distributors for enhancements to OS,
database, middleware, ….
the process of being a member
FOSS GOVERNANCE IS NOT ONLY A MATTER OF LAW,
AS A GOOD CITIZEN COMPANY, WE RESPECT THE PHILOSOPHY
BEHIND FOSS LICENSES AND WE CONTRIBUTE
5
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
6. YOU NEED A STRONG
FOSS GOVERNANCE PROCESS!
• Governance process started in 2002 • Numbers and facts
- Process scope: - 160+ people trained to
- FOSS selection, select/authorize/forbid FOSS
and implement the process
- use of detection tools,
- 1000s of people trained to
- outsourcing developments, basic tutorial
- professional services, - 3500 FOSS in Alcatel-Lucent FOSS database
- Information technology, (describing risk issues)
- merge and acquisitions, - Alcatel-Lucent is committed to align on
- packaging Alcatel-Lucent products, SPDX/FOSSBazaar standard
- suppliers contracts, - All new contracts with suppliers contains
FOSS clauses
- contributing to FOSS.
- Alcatel-Lucent is willing to share a common
- Implementation nearly completed governance process with other companies
- Process still under evolution
6
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
7. ALCATEL-LUCENT
BASIC FOSS PROCESS
• Being able to identify FOSS in
each Alcatel-Lucent product INITIATOR, E.G.
160 FOSS
evaluators
PRODUCT MANAGEMENT
- R&D identify all FOSS used OR PROCUREMENT
1. Check 5. Can you confirm
- Use tools (Blackduck/protex, A, B, C that B is a library?
fossology) to detect FOSS in 6. Set B risks Support Core team
Alcatel-Lucent products for difficult
evaluation
evaluators
3. Add B
FOSS expert
- Third party software 4. Evaluate B
2. A is OK, C is
companies’ FOSS identified forbidden, B is
Lawyers
not described
(suppliers, outsourcing in the database
companies, acquisitions)
FOSS database Purchasing
- All FOSS used must
be authorized FOSS EXECUTIVE
MEET EVERY WEEK COMMITTEE
SINCE 2007!
• Correct packaging of FOSS
in Alcatel-Lucent products
7
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
8. EVERYTHING AVAILABLE
FROM INTRANET
• Several tutorials on line:
from 10’ to one day
TRANSLATED IN
11 LANGUAGES
• Mailing lists 600 people
• Linux dedicated page
• Tools
80+ PAGES OF
DOCUMENTATION • Major Licenses description
• How to contribute
to FOSS
•…
8
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
9. THAT’S NOT
ENOUGH!
Having an internal process does
not mean that it is implemented
• First
- Start at high level with legal and high executives
- Explain to R&D the issues
- Strong communication is needed
• Second
- Come from a light FOSS process to a strong one
- Start with a basic process
- Adapt the process to complex situations
- Have a committee with lawyers that can
address issues
- Create documents – web sites, mailing lists, fora
- Be Flexible
9
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
10. THE MOST
IMPORTANT
Do not impose a process if you cannot implement it
• Resources must be available and must increase with
implementation level
• Provide exceptions for transient situations
• Be flexible
• Do not discourage people for implementing the process
• Tools need to be tailored with load
10
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
11. FACTORS OF SUCCESS
IN ALCATEL-LUCENT
• An effective and open-minded legal infrastructure
• A strict quality process which easily incorporate FOSS specificities
• Several corporate communications networks (Procurement, R&D,
legal, …)
• The use of tools (e.g. Protex/Blackduck and FOSSology) to detect
issues and inform executives of their product potential exposure
• A continuous decentralization of the process
11
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
12. PITFALLS
• Having only a top-down (from executives) or bottom-up
(from engineers) approach
- Middle management enrolment is key to success
• Having a rigid and/or static process
- Each group in a global organization has its own way of working
- Build your process bit by bit as you discover new internal issues
- The process needs to evolve continually according to new technologies
and situations and the maturity of the company on FOSS
• Centralizing the process
- Not sustainable in a global company
- The process must be implementable
12
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
13. NEW CHALLENGES FOR ALCATEL-LUCENT
• Standardizing the process with other companies
- Move to the SPDX standard
- Go further in standardizing FOSS governance process
• Keeping up with new business models
- Cloud computing, SaaS, PaaS, IaaS, …
• Keeping up with recent technologies
- Maven – dynamic internet download of Java software at runtime
- Bit torrent propagation – automatic propagation of software between servers
- DRM or CAS software – limit to multimedia content access
• Improving our process
- Automate the measurement of the process implementation
13
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
14. CONCLUSIONS
• A long and persistent effort: started in 2002 in Alcatel-Lucent
- All company must embrace the effort
• Process must grow at the same speed as awareness
• A symmetric inter-companies effort – companies must be partners
- Customer requirements are similar to what we request from suppliers
• Emerging standards must be followed (e.g. FOSSBaazar group)
• Be ready to third party requests
FOSS GOVERNANCE IS NOT ONLY A MATTER OF LAW,
AS A GOOD CITIZEN COMPANY, WE RESPECT THE PHILOSOPHY
BEHIND FOSS LICENSES AND WE CONTRIBUTE
14
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
15. COPYRIGHT INFORMATION
ABOUT THIRD-PARTY PICTURES
USED IN THIS PRESENTATION
• Firefox Nebula (slide 1): • La liberté guidant le peuple (13):
MPL (Mozila Public License) Public Domain
http://www.aidoweb.com/tutoriaux/themes-personas- (painting in Louvre from Eugène Delacroix)
tout-personnaliser-firefox-675 http://fr.wikipedia.org/wiki/Fichier:Eug%C3%A8ne_Delacroi
x_-_La_libert%C3%A9_guidant_le_peuple.jpg
• GNU Meditate levitate (8):
GFDL1.2+
http://commons.wikimedia.org/wiki/File:Gnu_meditate_le
vitate.png?uselang=fr
• Radeau de la méduse (11):
Public domain
(painting in Louvre from Théodore Géricault,
photo from University la Sorbone – Paris I)
http://fr.wikipedia.org/wiki/Fichier:Th%C3%A9odore_G
%C3%A9ricault_-
_Le_Radeau_de_la_M%C3%A9duse.jpg#file
15
COPYRIGHT © 2011 ALCATEL-LUCENT. ALL RIGHTS RESERVED.