VOTE: Accepting project Pyrsia as a CDF incubating project


Oleg Nenashev
 

Dear all,

As decided by the TOC meeting yesterday, we would like to start public voting for adding Project Pyrsia to the Continuous Delivery Foundation (Project proposal). If accepted, the project would join the CDF as an incubating project. All votes and comments will be welcome! Please cast your vote by July 29th, 10PM UTC.

Persia is a Decentralized Package Network. Pyrsia aims to secure the software supply chain of open-source dependencies by creating a system that secures open-source builds and distribution. As concluded by the TOC, the project fits the scope of the CDF which targets providing solutions and best practices for all aspects of software delivery.

References:
For more information about the CDF project lifecycle and membership requirements, see this page. Thanks a lot to Steve and Melissa for driving this proposal in the TOC!

Best regards,
Oleg Nenashev
CDF TOC Chair


Tracy Ragan
 

+1 on Pyrsia

On Wed, Jul 20, 2022 at 9:32 AM Oleg Nenashev <o.v.nenashev@...> wrote:
Dear all,

As decided by the TOC meeting yesterday, we would like to start public voting for adding Project Pyrsia to the Continuous Delivery Foundation (Project proposal). If accepted, the project would join the CDF as an incubating project. All votes and comments will be welcome! Please cast your vote by July 29th, 10PM UTC.

Persia is a Decentralized Package Network. Pyrsia aims to secure the software supply chain of open-source dependencies by creating a system that secures open-source builds and distribution. As concluded by the TOC, the project fits the scope of the CDF which targets providing solutions and best practices for all aspects of software delivery.

References:
For more information about the CDF project lifecycle and membership requirements, see this page. Thanks a lot to Steve and Melissa for driving this proposal in the TOC!

Best regards,
Oleg Nenashev
CDF TOC Chair



--
Kind Regards,

Tracy Ragan
CEO and Co-Founder / DeployHub / tel: + 1.505.424.6440/ mob: +1.505.780.0558
Follow me on: Blog / Twitter Facebook / LinkedIn / YouTube / GitHub
We make microservices easy. 





Oleg Nenashev
 

+1 binding from me by the way


On Wed, 20 Jul 2022, 17:56 Tracy Ragan, <tracy@...> wrote:
+1 on Pyrsia

On Wed, Jul 20, 2022 at 9:32 AM Oleg Nenashev <o.v.nenashev@...> wrote:
Dear all,

As decided by the TOC meeting yesterday, we would like to start public voting for adding Project Pyrsia to the Continuous Delivery Foundation (Project proposal). If accepted, the project would join the CDF as an incubating project. All votes and comments will be welcome! Please cast your vote by July 29th, 10PM UTC.

Persia is a Decentralized Package Network. Pyrsia aims to secure the software supply chain of open-source dependencies by creating a system that secures open-source builds and distribution. As concluded by the TOC, the project fits the scope of the CDF which targets providing solutions and best practices for all aspects of software delivery.

References:
For more information about the CDF project lifecycle and membership requirements, see this page. Thanks a lot to Steve and Melissa for driving this proposal in the TOC!

Best regards,
Oleg Nenashev
CDF TOC Chair



--
Kind Regards,

Tracy Ragan
CEO and Co-Founder / DeployHub / tel: + 1.505.424.6440/ mob: +1.505.780.0558
Follow me on: Blog / Twitter Facebook / LinkedIn / YouTube / GitHub
We make microservices easy. 





Robert Reeves
 

From: cdf-toc@... <cdf-toc@...> On Behalf Of Oleg Nenashev via lists.cd.foundation
Sent: Wednesday, July 20, 2022 11:02 AM
To: Tracy Ragan <tracy@...>
Cc: cdf-toc <cdf-toc@...>
Subject: Re: [cdf-toc] VOTE: Accepting project Pyrsia as a CDF incubating project

 

+1 binding from me by the way

 

On Wed, 20 Jul 2022, 17:56 Tracy Ragan, <tracy@...> wrote:

+1 on Pyrsia

 

On Wed, Jul 20, 2022 at 9:32 AM Oleg Nenashev <o.v.nenashev@...> wrote:

Dear all,

 

As decided by the TOC meeting yesterday, we would like to start public voting for adding Project Pyrsia to the Continuous Delivery Foundation (Project proposal). If accepted, the project would join the CDF as an incubating project. All votes and comments will be welcome! Please cast your vote by July 29th, 10PM UTC.

 

Persia is a Decentralized Package Network. Pyrsia aims to secure the software supply chain of open-source dependencies by creating a system that secures open-source builds and distribution. As concluded by the TOC, the project fits the scope of the CDF which targets providing solutions and best practices for all aspects of software delivery.

 

References:

For more information about the CDF project lifecycle and membership requirements, see this page. Thanks a lot to Steve and Melissa for driving this proposal in the TOC!

 

Best regards,

Oleg Nenashev

CDF TOC Chair


 

--

Kind Regards,

 

Tracy Ragan

CEO and Co-Founder / DeployHub / tel: + 1.505.424.6440/ mob: +1.505.780.0558

Follow me on: Blog / Twitter Facebook / LinkedIn / YouTube / GitHub

We make microservices easy. 

 

Image removed by sender.

 


Andrea Frittoli
 

+1 binding

On Wed, 20 Jul 2022 at 16:32, Oleg Nenashev <o.v.nenashev@...> wrote:
Dear all,

As decided by the TOC meeting yesterday, we would like to start public voting for adding Project Pyrsia to the Continuous Delivery Foundation (Project proposal). If accepted, the project would join the CDF as an incubating project. All votes and comments will be welcome! Please cast your vote by July 29th, 10PM UTC.

Persia is a Decentralized Package Network. Pyrsia aims to secure the software supply chain of open-source dependencies by creating a system that secures open-source builds and distribution. As concluded by the TOC, the project fits the scope of the CDF which targets providing solutions and best practices for all aspects of software delivery.

References:
For more information about the CDF project lifecycle and membership requirements, see this page. Thanks a lot to Steve and Melissa for driving this proposal in the TOC!

Best regards,
Oleg Nenashev
CDF TOC Chair


Justin Abrahms <justin@...>
 

I didn't see it in the document, but is there financial incentive around being one of the trusted or untrusted nodes that are reproducing builds? e.g. are they minting some sort of crypto coin?


David Lai
 

+1 on Pyrsia

 

Thanks,

David

 

From: cdf-toc@... <cdf-toc@...> On Behalf Of TracyRagan via lists.cd.foundation
Sent: Wednesday, July 20, 2022 8:56 AM
To: Oleg Nenashev <o.v.nenashev@...>
Cc: cdf-toc <cdf-toc@...>
Subject: Re: [cdf-toc] VOTE: Accepting project Pyrsia as a CDF incubating project

 

+1 on Pyrsia

 

On Wed, Jul 20, 2022 at 9:32 AM Oleg Nenashev <o.v.nenashev@...> wrote:

Dear all,

 

As decided by the TOC meeting yesterday, we would like to start public voting for adding Project Pyrsia to the Continuous Delivery Foundation (Project proposal). If accepted, the project would join the CDF as an incubating project. All votes and comments will be welcome! Please cast your vote by July 29th, 10PM UTC.

 

Persia is a Decentralized Package Network. Pyrsia aims to secure the software supply chain of open-source dependencies by creating a system that secures open-source builds and distribution. As concluded by the TOC, the project fits the scope of the CDF which targets providing solutions and best practices for all aspects of software delivery.

 

References:

For more information about the CDF project lifecycle and membership requirements, see this page. Thanks a lot to Steve and Melissa for driving this proposal in the TOC!

 

Best regards,

Oleg Nenashev

CDF TOC Chair


 

--

Kind Regards,

 

Tracy Ragan

CEO and Co-Founder / DeployHub / tel: + 1.505.424.6440/ mob: +1.505.780.0558

Follow me on: Blog / Twitter Facebook / LinkedIn / YouTube / GitHub

We make microservices easy. 

 

 


Sudhindra Rao <sudhindra.r.rao@...>
 

+1 non-binding on Pyrsia


Mark Waite
 

+1 from me

On Wed, Jul 20, 2022 at 12:33 PM Sudhindra Rao <sudhindra.r.rao@...> wrote:
+1 non-binding on Pyrsia


Justin Abrahms <justin@...>
 

+1 from me.

Thanks to Sudhindra Rao who said in slack:

As related to Pyrsia .. No there are no cryptocoins involved. Pyrsia does not intend to incentivitize participation using any cryptocurrency. We are only working with organizations that would become part of the governing board of Pyrsia to bring up trusted nodes. The trust mechanisms will be deliberately available only to these orgs. Additionally the membership also gives the org the ability to crosscheck other orgs and their security etiquette for Pyrsia. Thus the Pyrsia governing board maintains a high bar of how the trusted nodes work together. For regular nodes - they are pretty much open to anyone who would like to download and install pyrsia node on their machine. Since these nodes do not have the ability to commit to the network(meaning add new binaries/packages to it) and thus do not have the ability to commit to the transparency log, it is deemed safe. These nodes will still enhance the experience using decentralized P2P exchange of info/binaries and also leverage the network for better throughput by streaming from multiple nodes.


steve@...
 

+1 binding


Melissa McKay
 

+1 binding on Pyrsia


On Wed, Jul 20, 2022, 12:49 PM steve via lists.cd.foundation <steve=deployhub.com@...> wrote:
+1 binding


Sudhindra Rao <sudhindra.r.rao@...>
 

Hi Justin, 
I think there was a similar question on the slack channel. I will respond in the same way 

As related to Pyrsia .. No there are no crypto-coins involved. Pyrsia does not intend to incentivize participation using any cryptocurrency.
We are only working with organizations that would become part of the governing board of Pyrsia to bring up trusted nodes. The trust mechanisms will be deliberately available only to these orgs. Additionally the membership also gives the org the ability to crosscheck other orgs and their security etiquette for Pyrsia.
Thus the Pyrsia governing board maintains a high bar of how the trusted nodes work together.
For regular nodes - they are pretty much open to anyone who would like to download and install pyrsia node on their machine. Since these nodes do not have the ability to commit to the network(meaning add new binaries/packages to it) and thus do not have the ability to commit to the transparency log, it is deemed safe. These nodes will still enhance the experience using decentralized P2P exchange of info/binaries and also leverage the network for better throughput by streaming from multiple nodes.

Please let me know if that was good explanation and I can elaborate more.

Thanks,
Sudhindra.


Kara de la Marck
 

+1 non-binding Pyrsia
Kind regards,

Kara de la Marck 
Continuous Delivery Foundation
LinkedIn @karadelamarck   
Twitter @KaraMarck



On Wed, Jul 20, 2022 at 11:32 AM Oleg Nenashev <o.v.nenashev@...> wrote:
Dear all,

As decided by the TOC meeting yesterday, we would like to start public voting for adding Project Pyrsia to the Continuous Delivery Foundation (Project proposal). If accepted, the project would join the CDF as an incubating project. All votes and comments will be welcome! Please cast your vote by July 29th, 10PM UTC.

Persia is a Decentralized Package Network. Pyrsia aims to secure the software supply chain of open-source dependencies by creating a system that secures open-source builds and distribution. As concluded by the TOC, the project fits the scope of the CDF which targets providing solutions and best practices for all aspects of software delivery.

References:
For more information about the CDF project lifecycle and membership requirements, see this page. Thanks a lot to Steve and Melissa for driving this proposal in the TOC!

Best regards,
Oleg Nenashev
CDF TOC Chair