The road of ospo construction of Weibo: how to promote enterprise open source through ospo construction?

author | Zhong Yanqing

planning | Cai Fangfang

Enterprises have always played a very important role in the open source community , Both as contributors and users have a decisive influence . How to promote the construction of internal open source culture ？ How to make full use of the resources of the open source community to help businesses , And provide valuable feedback to the community ？ Whether the enterprise needs to set up an internal organizational structure to manage open source behavior ？

stay DIVE Global basic software innovation conference 2022 On , Jiangning, a technical expert of Huawei's open source capability center, produced 《DIVE Open source preaching and ecological construction special session 》 project . This article is compiled from zhongyanqing, head of the open source management office of Weizhong bank, in DIVE Global basic software innovation conference 2022 Share your speech , The theme is “ How to use OSPO The construction of push enterprise open source —— Small Banks OSPO The road of construction ”.

Sharing is mainly divided into three parts , The first part discusses the motivation and reasons for enterprises to embrace open source ; The second part focuses on the positioning and responsibilities of the enterprise open source management office ; The third part introduces the practical experience of Weizhong bank in all aspects of participating in open source activities .

The following is a record of sharing ：

Why should enterprises embrace open source

The digital age , Open source is everywhere , This fact has become the consensus of all people . Today, almost all digital achievements are inseparable from open source software , All walks of life are building their own products or businesses based on open source software , Open source software has become an important cornerstone of building an information society .

Up to the national level , Open source is becoming an important strategy to promote scientific and technological innovation in China . The 14th five year plan clearly puts forward “ Support the development of innovative consortia such as the digital economy open source community , Improve the open source intellectual property and legal system , Encourage enterprises to open software source code 、 Hardware design and application services ”. This is the first time that open source has been written into the national master plan . In today's great change situation that has not been seen in a century , We should accelerate development 、 Break through the neck problem 、 Develop core technology , Open source innovation is a very important and effective means .

In the past two or three years , The country has made great breakthroughs in open source infrastructure .2019 The Mulan license issued in is the first open source license described in Chinese in China ;2020 In, the first open source foundation was established in China —— Open atom open source foundation ;Gitee As the largest open source hosting platform in China, it has also made rapid development , Developer activity continues to increase , And GitHub The gap is narrowing . All these signs indicate , Open source has become a science and technology strategy in China .

What benefits can enterprises bring by embracing open source ？ Here we can briefly summarize three points ：

1. Enhance the corporate image . Open source is the trend of technology development , Today, almost all advanced technologies are provided in an open source way , Participating in open source means that the technology level of the enterprise is at the forefront , It represents the technical image of the company . Open source culture itself has everyone for me 、 I have an open mind for everyone , Embracing and giving back to the community also reflects the company's good sense of corporate social responsibility and responsibility .
2. Strengthen technological competitiveness . Low cost innovation can be achieved quickly through open source , Reduce the investment of repeated wheel making , Give priority to the core business innovation . In the open source community , Enterprises can also quickly attract various technical talents , Excellent open source projects can naturally attract more talents to join .
3. Realize business value . It is easier to create a technology ecosystem through open source projects , Accelerate technological innovation and Application . Open source itself is an effective way to realize the construction of technology business ecology , Enterprises can according to the characteristics of the project 、 Choose different business paths based on your own positioning .

Weizhong bank has been sparing no effort to fully embrace open source , There are several reasons . First, Weizhong bank CIO Pay great attention to open source , Because he has a very deep understanding of open source , Have a strong sense of technology to give back to the community . Secondly, Weizhong bank is an internet bank , Open innovation is the core technology strategy of banks , Open source is the most effective means of innovation in the field of technology . Third , The company has a strong technical culture , Some cutting-edge technologies will also be laid out and explored , Open source is an effective way to quickly improve these technology ecosystems .2019 year 7 month , Weizhong bank announced that the financial technology was fully open source , And set up the open source management office , Further accelerated the implementation of the strategy of embracing open source .

The position and responsibilities of the open source management office

It is not a very simple thing for enterprises to do well in open source , Nor is it a problem that can be solved on a purely technical level . Because for enterprises , Open source is a strategic advantage , The process of promoting open source involves a wide range of aspects , Need to coordinate 、 Focused and clear communication . Without effective management , There will be all kinds of confusion and risks .

Enterprises should participate in open source , From the perspective of objects, core employees are required to participate ; From the content point of view, including internal and external , How to use open source projects will be involved within the enterprise 、 Publish open source projects , The external community should also pay attention to how to contribute to open source projects 、 How to develop community public relations in open source projects . Only through the open source management office can these roles and activities be organically and closely linked , Organize the whole system more effectively .

The responsibilities of the open source management office include the following ：

1. Open source strategic planning . The office should help the whole company clarify its attitude towards open source 、 What role do you play in the open source community , Then try to reach an agreement within the company , And form a relatively clear strategy to realize the landing .
2. Governance system design . Open source involves many rules 、 technological process , Rely on some platform tools , All need corresponding governance systems .
3. Project community operation . To release open source projects , Community operation is also a very important work . There is no effect without operation , There will be no community .
4. Open source culture promotion . This is very important , But also the most easily overlooked part . Enterprises want to really embrace open source , All students must understand 、 Identify with open source culture , Follow the open source rules , Have open 、 inclusive 、 A collaborative mindset , To achieve certain results , And there is continuity .

In all aspects of promoting open source in enterprises

Around the responsibilities of the open source management office , Promoting open source within the enterprise will involve all aspects of affairs .

according to Linux The foundation model , The introduction of open source by enterprises can be defined as a step-by-step strategy . At the consumer stage , Enterprises mainly focus on how to make good use of open source software ; Participant stage , Enterprises will participate in community activities , Learn more about the open source software used ; Contributor stage , Enterprises may participate in upstream contribution 、 Self initiated open source projects, etc ; Leadership stage , Enterprises will play an important leadership role in the community , Affect the development of relevant technologies or organizations , And become the developer of some open standards .

The open source strategic vision of Weizhong bank is to become a leader in the open source ecological construction in the financial technology field . The specific implementation path of the strategy also includes four stages and four roles , Different stages 、 Different roles focus on different priorities and strategies .

• As a user of open source software , Weizhong bank pays more attention to how to establish an independent, safe and controllable bank core system based on open source software technology , Make good use of the technical advantages of open source software . In the process of using open source software , Banks also need to establish a complete governance system , Prevent compliance and security risks .
• Weizhong Bank expects to become a participant in the upstream community , Therefore, the upstream priority strategy of participating in open source is put forward . The bank encourages employees to deeply participate in the upstream community construction of various open source technologies used in their work , Positive feedback, suggestions or contribution code . Weizhong has also designed an internal incentive mechanism , Encourage everyone to become a core member of the community's open source projects , Establish a clear value orientation .
• Weibo is trying to become the initiator of open source projects . The bank has contributed a lot of open source projects , It also attaches great importance to the project community construction , So as to maintain the sustainability of the project development as far as possible .
• Weizhong bank hopes to become the builder of open source ecology . The company hopes to actively embrace the open source community , Build broader connections in the open source ecosystem , Promote the prosperity of the whole open source ecosystem of financial technology .

For the internal open source governance system of the enterprise , Wechat advocates organizational structure 、 Process system 、 Tool system Trinity guarantee system . Organizational structure guarantee , The company has designed a reasonable and clear organizational structure , Including all departments involved in open source governance 、 Position , The core goal is to ensure that everyone has the same goal 、 Clear positioning , Be able to collaborate effectively in the process ; Process system guarantee , The company has a very clear management system and process system , Make sure “ There are laws to follow , have a definite object in view ”; In addition, the most important point is the guarantee of the tool system platform , The company has a perfect tool platform to ensure the implementation of governance effect and the improvement of governance efficiency .

The open source governance organization architecture system of Weizhong bank refers to and benchmarkes the community architecture of the open source foundation and various large open source projects . The entire open source management working group is under the direct leadership of the bank's Information Technology Committee . The Open Source Management Office focuses on various functions related to open source governance 、 Position and role are linked together , Plan all the work as a whole .

On the far right of the organizational structure is a TOC Technical Committee , Bring together the company's technical experts , Responsible for matters related to pure technology . In the middle is the organization system of open source projects , The company has built a community for every internal open source project , Use the operation mode of the community to build the organizational system of the project , Let each project involve some core members , Standardize and empower the operation methods , Promote the sound development of the project .

The benefits of this organizational design are , On the one hand, it can reach up quickly , Adoption of the meeting 、 Reporting and other mechanisms are supported by leaders in a timely manner , Effectively communicate the entire open source strategy ; On the other hand, many departments and organizations have been horizontally connected , Achieve efficient collaboration , There is no buck passing .

Today's enterprises want to systematically embrace open source , Building an organizational structure with the open source management office as the core will certainly achieve twice the result with half the effort . This organization can be an entity , It can also be empty , There are relevant personnel to undertake , Its core is to think about the relationship between enterprises and open source from an overall perspective .

TOC The goal of the organization is to promote a technology driven decision-making mechanism within the enterprise ,TOC The technical supervision committee is composed of technical experts selected or recommended by various departments . Micro bank TOC The organization has designed the following job responsibilities ：

• Develop technical standards . The standard originator is inside Git Publish projects on the platform , Experts from other departments and every student who pays attention to this aspect can communicate and participate , Reach a consensus on the premise of internal cooperation . Standards can also be quickly improved according to the actual situation , People will trust the contents of standards and norms more and more .
• Solve technical difficulties . because TOC The members are the top technical experts in each department , We can discuss many technical difficulties together , Jointly overcome technical problems , And share experiences , Avoid stepping on the pit in turn .
• Promote internal open source . Internal open source is part of the overall open source strategy of Weizhong bank ,TOC Be able to represent each department , Connect the promotion and collaboration of internal open source projects within and between departments , At the same time, the culture of open source collaboration can be better communicated and popularized in the organization , Equivalent to an open source evangelist .
• Promote the construction of public platforms . such as DevOps Project management platform 、 Demand management platform 、 There are specific responsible departments for the test platform, etc , But also through internal open source co construction , Let us build these public platforms in a way of joint participation . This improves satisfaction between different departments , It also solves the problems of traditional demand innovation and development resource conflict .

adopt TOC Promote technology driven decision-making within the enterprise , Achieve an open, collaborative and transparent atmosphere , It is a very important exploration of Weizhong bank in the construction of open source .

In the governance process of using open source software , The core goal of Weizhong is to continuously optimize the whole life cycle management process of open source software . At the end of last year , The people's Bank of China, together with five ministries and commissions, jointly issued the guiding opinions on regulating the application and development of open source technologies in the financial industry , Many specific guidelines and specifications have been made for the open source governance of the industry . Weizhong is in the process of applying open source software , Focus on intellectual property compliance 、 Information security and other risk management systems , More detailed management methods and processes have been developed at different stages . For example, a standard introduction process is designed in the introduction phase , The corresponding model is designed for the selection and evaluation of open source software , More objective analysis and comparison . Wechat also has an increasingly rich open source knowledge base for your reference in the process of introduction . In the development, operation and maintenance stage , The team will accurately identify open source software dependencies that manage all development systems , Form the asset account of the company's open source application , So as to carry out statistical analysis on all open source software versions , Develop more targeted management methods . Weizhong also integrates and connects the open source software with the life cycle of management process and development process management , And specify the exit mechanism .

Weizhong has been committed to the construction of throughout DevOps Open source governance solutions for development processes . In the whole stage, there is the evaluation of open source framework and component selection , At the same time, there is the black and white list management of the open source software of the whole company ; During the development phase IDE Plug in tools , It is very convenient to scan the component dependencies of the developed system , And according to the management strategy, we can give various reminders and help to the development students in time , So that the development side can handle the repair problems in a more timely manner . During the build test phase, dependency scanning will be automatically triggered , Automatically execute various policies according to the set rules . Targeted security vulnerability review during production deployment , And the automatic execution of production deployment policies .

The objectives of the package include the following ：

1. Adapt to agile development , It needs to be flexibly inserted into all links for closed-loop management .
2. Move left as safely as possible , The sooner you find the problem 、 Earlier processing , The lower the cost .
3. systematic , automation , With these capabilities, we can achieve rapid response , And establish the capability of continuous monitoring and processing .
4. The company has a very complete and accurate ability to implement and manage open source assets for all internal R & D systems .

The above figure shows the specific logic of the implementation of the control strategy for the authority automation of Weizhong bank .

From the perspective of enterprises, how to realize open source ？ Weizhong bank first formulated a rigorous project external open source process , Ensure the quality of open source projects is reliable . Because enterprise open source projects represent the attitude and image of enterprises participating in open source , Strict prudence must be exercised , What can be open source 、 What can't be open source 、 What impact does it have on the company , All need analysis and consideration .

How to guarantee the quality of open source projects ？ The process of open source of Weibo has been roughly divided into several stages . At the planning stage, it is mainly hoped to clarify the project objectives , At the same time, it objectively compares the existing similar open source projects in the market , At the same time, make a careful inventory of the resources that can be invested in open source , Avoid the situation that insufficient resource investment in the later period will result in the later inability . In the implementation phase, we should pay attention to the development quality , Give the name of the open source project 、 trademark 、 Intellectual property protection needs to be planned in advance . A comprehensive review is required before open source , On the one hand, it should conform to the basic rules of open source projects , Comply with the license constraints selected for use , It is also necessary to ensure that the company's core definitions and related assets can be protected . The last stage is the official open source stage , Select a compliant code hosting platform to do a good job in code management , And enter the formal community operation stage . At the beginning of a project, it also needs to do a good job of publicity and promotion , Promote better development in the later stage .

The above figure is the internal management flow chart of the open source project of Weizhong bank . The flow and steps in the figure are all disassembled in great detail , And each step has clear input and output standards , There are also many templates for your reference . As long as the team wants to launch an open source project , You can systematically understand what to do and what to focus on , Communication becomes more mature , Quality is guaranteed to a certain extent .

A successful project requires a huge amount of operational effort . The open source management office hopes to sum up various experiences , Refer to the best practices of some successful projects , Continue to systematize the routine of community operation , So as to improve the efficiency of community operation . Wechat hopes to spread through various channels , Let Weizhong open source become an excellent and well-known brand in the technology field . So , With various technical communities 、 The media cooperate in all aspects , Increasing publicity and exposure is also a very effective method and means .

As an open source management office , There is also a very important role within the enterprise , That's being an open source evangelist , Continue to promote open source culture within the enterprise , Let everyone understand open source 、 Identify with open source , At the same time, master the necessary knowledge and methods related to open source , A more comprehensive understanding of the current situation and trends of open source .

All in all , Inside the enterprise is also a community , An effective operation mode can make this community gather more and more students , Let's believe that 、 Love open source , Create more excellent projects .

total junction

For enterprises , Embracing open source is a long-term doctrine , Unable to rely on centralized investment at a certain time point , Or the immediate effect can be achieved at the command of the leader . Enterprises should follow an effective method , Step by step, 、 Achieve specific goals one stage at a time . For enterprises , You have to figure out what role you play in the open source business , The whole strategy has risen to a certain height , A lot of specific work can be carried out later , The goal can be achieved step by step .

In the process of participating in open source , Compliance safety is the bottom line , This is also something that all enterprises need to pay attention to . Building a safe and reliable software supply chain management system is a very important technical work for all enterprises . If you want to open source the engineering community , to open up 、 transparent 、 Actively embracing the community is also a necessary basic attitude . All of the above are based on the enterprise's understanding and continuous dissemination of the open source culture to truly drive and close loop development .

I hope you can work together to build an open source community , Thank you. .