Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hop3: Empowering Digital Sovereignty

Hop3: Empowering Digital Sovereignty

Developed by Abilian, Hop3 is an open-source Platform-as-a-Service (PaaS) streamlining deployment, integration, and maintenance of F/OSS applications for developers and SMEs. Built on the 12-Factor App methodology for scalability and security, Hop3 offers a resilient alternative to proprietary clouds, promoting digital sovereignty. This presentation covers Hop3's architecture, security focus, and a live demo, plus its future roadmap. Learn how Hop3 empowers users to control their digital infrastructure. Financed, in part, by NGI Zero Commons and NEPHELE projects.
Talk Outline

The talk will be structured as follows:
Introduction and Problem Statement (2 minutes)

Context: We will establish the challenges faced by developers and SMEs when attempting to self-host F/OSS applications. These challenges include the complexity of infrastructure management, the significant time investment required for configuration and maintenance, and the inherent security risks associated with self-managed systems. The increasing importance of digital sovereignty and reducing reliance on proprietary cloud providers will be highlighted.
Hop3 as a Solution: Hop3 will be introduced as an open-source PaaS specifically designed to mitigate these challenges. Its dual objectives of improving internal operational efficiency and enabling client-facing SaaS offerings will be briefly explained. The talk will emphasize Hop3's commitment to providing a streamlined, secure, and accessible platform for deploying and managing a wide range of F/OSS applications.

Core Principles and Architectural Overview (5 minutes)

Technical Merit: This section will present the key technical design choices that underpin Hop3's functionality and differentiate it from existing solutions.
12-Factor App Methodology: How Hop3's adherence to the 12-Factor App principles ensures application scalability, maintainability, portability, and resilience. Specific examples of how these principles are implemented within Hop3 will be provided.
Declarative Configuration Model: The advantages of Hop3's declarative configuration approach over traditional imperative methods will be discussed, highlighting the benefits of reduced complexity and improved maintainability.
Security-Focused Design: Hop3's built-in security features, including the use of Software Bill of Materials (SBOM) and other mechanisms to mitigate vulnerabilities and protect user data.
Extensible Plugin Architecture: How Hop3's plugin-based architecture allows for easy integration of new technologies and ensures the platform's long-term adaptability and relevance.

Demonstration and Use Case (5 minutes)

Practical Application: A concise, practical demonstration of Hop3 in action. The demonstration will focus on the ease and speed with which a typical F/OSS application can be deployed using Hop3.
Deployment Workflow: The demonstration will highlight the key steps involved in deploying an application, emphasizing the user-friendly interface and streamlined workflow.
Key Features: The demonstration will visually illustrate the benefits of Hop3's architectural choices, such as reproducible builds and simplified configuration.

Future Roadmap and Community Engagement (3 minutes)

Vision and Development: This section will provide a brief overview of the future development roadmap for Hop3, outlining planned features and enhancements.
Open Source Contribution: The talk will emphasize the open-source nature of Hop3 and actively encourage community participation and contributions. Specific avenues for engagement, such as contributing code, providing feedback, or joining the Hop3 community, will be presented.
Key Takeaways: The key benefits of Hop3 and its potential impact on the F/OSS ecosystem and the promotion of digital sovereignty. The four key audience segments (Developers/DevOps, IT Managers, Application Developers, Open Source Contributors) and their respective takeaways will be reiterated.

Novelty and Relevance

This talk is relevant because it addresses the timely and critical need for accessible, secure, and sovereign cloud deployment solutions for F/OSS applications. Hop3's unique combination of the 12-Factor App methodology, pluggable build engines and runtimes (Nix, Kubernetes, etc.), and a focus on security offers a novel approach to simplifying F/OSS deployment and promoting digital autonomy. The talk will contribute to the conference by showcasing a practical, open-source solution that empowers developers and SMEs to leverage the benefits of F/OSS without the traditional complexities of self-hosting. The demonstration will provide concrete evidence of Hop3's capabilities and its potential to transform the landscape of F/OSS application deployment.
Links

Source: https://github.com/abilian/hop3 ou https://git.sr.ht/~sfermigier/hop3
NGI0 Commons project: https://nlnet.nl/project/Hop3-Nixified/
A previous version of this presentation: https://speakerdeck.com/sfermigier/hop3-simplifying-cloud-and-self-hosting-for-developers-and-smes (this presentation didn't include a demonstration)

Avatar for Stefane Fermigier

Stefane Fermigier

June 18, 2025
Tweet

More Decks by Stefane Fermigier

Other Decks in Technology

Transcript

  1. Hop3: Empowering Digital Sovereignty An Open-Source Solution for Application Deployment

    OW2Con, Paris, June 2025 Stefane Fermigier (PhD), CEO, Abilian 1
  2. The Challenge: Self-Hosting F/OSS The Sovereignty Imperative: Growing need to

    break free from vendor lock-in and regain true data control. But: Complexity Overload: Infrastructure, configuration, ongoing maintenance. Significant Time Sink: Diverts focus from core missions & innovation. Security Burdens: Self-managed systems are constant targets. The “Linux Distribution” model invented in the 90s works well for infrastructure services and desktop applications, but has not been extended successfully to Web applications Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 2
  3. Introducing Hop3: Your Open-Source PaaS The Hop3 Solution: An Open-Source

    PaaS engineered to conquer self-hosting hurdles. Holistic Lifecycle Management: From build & deploy to maintain, secure, & backup. Empowering You: Uncompromising control over your infrastructure & data. Strategic Objectives: Boost internal operational efficiency & resilience. Enable robust, sovereign client-facing SaaS offerings. Our Mission: To make F/OSS deployment effortless, secure, and universally accessible. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 3
  4. What is Hop3: Today & Tomorrow Today (Q2 2025): Single-server

    PaaS for F/OSS web apps. git push deployment, hop3.toml declarative configuration. OCI image builds (Docker concepts, flexible runtime) and "virtual environment" builds (more lightweight) Growing catalog of easily deployable F/OSS applications. Short-Term Roadmap (Q3-Q4 2025): Comprehensive multi-server, distributed application orchestration. Advanced security, user management (SSO/RBAC), rich Web UI. A vibrant application marketplace & active global community. (Optional) Nix Integration: For Hop3 itself, app builders, reproducible environments, isolation. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 5
  5. Guiding Principles: The Hop3 DNA 12-Factor App Adherence: Foundation for

    scalability, maintainability, resilience. Beyond the 12 Factors: Security-by-Design, Ethical Considerations, Sustainability. Key Values Driving Development: Sovereignty, Security, Sustainability Simplicity, Efficiency, Inclusivity Lean & Agile: Minimal dependencies for a robust, efficient platform. Designed for Efficiency: Runs on low-cost hardware, entry-level VPS; lightweight & energy- conscious. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 8
  6. Architectural Overview: Tech Stack Primary Language: Python 3.10+ (Robust, extensive

    ecosystem) Runtime Agent: Python also Standard Tooling: Leveraging OCI/Docker concepts for image building, Git, SSH. (Runtime is flexible, moving towards Nix) Declarative Configuration: hop3.toml (primary), Procfile compatibility. Web UI (Hypermedia-Driven Approach): Backend: Flask, SQLAlchemy Frontend: Tailwind CSS, Datastar (Modern, efficient) Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 9
  7. Lineage & Synergy: Piku & Nua Inspiration: FreedomBlox, YunoHost, Dokku,

    and especially Piku & Nua. Building on Experience: Reuses code and learnings from Piku & Nua (Abilian's 2021 PaaS). Nua: Was container-based, provided full lifecycle management. Hop3's Distinct Approach: Initially non- containerized for leanness, will integrate concepts and code from Nua to support containers; also, Nix tooling, as an alternative. Synergistic Future: Exploring future integrations, potentially merging strengths for a unified platform. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 10
  8. Extensible Plugin Architecture Core Design Philosophy: Modular and plugin- based

    for ultimate flexibility. Seamless Integration: Easily adapt to new technologies, languages, and backing services. Future-Proofing Hop3: Ensures long-term adaptability and relevance, as well as community contributions. Crucial for Ecosystems: Key for supporting various build tools, runtimes, distributed external systems. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 11
  9. Hop3 in Action: Dogfooding & Vision Internal Use (Dogfooding): ~12

    websites, SaaS, customer apps at Abilian. Future Vision: Effortless deployment for complex apps: SDOs (Software Developing Organisations): Streamline deployment workflows with GitOps and CI/CD, enabling efficient application lifecycle management and simplified infrastructure control. SMEs: Reduce IT costs and maintain sovereignty by hosting essential applications (Digital Workspaces, CRMs, ERPs or e-commerce…), on a user-friendly, self-managed cloud platform. R&D Collaboration: Hop3 provides an open, extensible platform with a modular architecture and plug-in system, making it ideal for collaborative experimentation with and advancing new approaches in cloud computing (orchestration, resource optimization, edge integration….). Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 13
  10. Key Features: Power & Simplicity Simplified Configuration (compared to, e.g.,

    Kubernetes) User Management & Access (SSO, RBAC) Automated Backups & Restore Monitoring & Logs Admin Processes Web Management Interface Multi-Technology Support: Python, PHP, Node.js, Ruby, Go, Java, Rust... Reproducible Builds (Nix integration key) (NB: some of these features are planned for the end of 2025). Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 14
  11. Future Vision: Expanding Hop3 M3 / V1 MVP: Full core

    platform services. Runtime Integration: Nix, SlapOS, Docker Swarm, Kubernetes, Nomad... Scaling & Placement: Vertical scaling, workload placement, multi-server. Enhanced Security: Firewall, WAF, better isolation (incl. VMs) Broader Support: Containers/VMs, Unified Login (LDAP/IAM), More base OSes. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 19
  12. Project Backing & Status Abilian: Industrial R&D lab, F/OSS vendor

    (since 2012) Funded By: Initial internal Abilian funding NGI Zero Commons Fund NEPHELE Project France2030 (via HyperOpen X) Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 20
  13. NGI - Nix & Reproducible Builds Deterministic Deployments: Nix integration

    is KEY. Goal: Package apps in Nix as services. Ambitious but high practical utility. NGI0 Deliverable: Fully functional Nix package for Hop3. Simplifying NixOS: Make it accessible for the "average office." Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 21
  14. NGI - Supply Chain Security Software Supply Chain Security: Top

    priority. Automated SBOM Generation: CycloneDX format Tools like Genealogos Transparency & Verifiability: For dependencies, compliance, audits. REUSE Compliance: For licensing clarity. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 22
  15. NGI - Security By Design Foundation: Secure Software Development Lifecycle

    (SSDLC): Threat modeling integrated into design phases. Platform Hardening & Isolation: Lean Runtimes: Minimizing attack surface (-> Nix-based isolation goal). Principle of Least Privilege: For all components and user access. Secrets Management: Secure handling of sensitive credentials. Network & Application Security: Firewall & WAF: Network-level firewall and Web Application Firewall (WAF) for ingress/egress control and threat prevention. Data Encryption at Rest: For sensitive application data and backups. Operational Security & Resilience: Continuous Monitoring & Alerting: For security events and anomalies. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 23
  16. NEPHELE Integration (H3NI) H3NI Project Focus: Leverage SMO for elasticity,

    workload consolidation. Placement & Scaling provided by NEPHELE SMO. SMO: Synergetic Meta-Orchestrator (placement, scaling, monitoring, "glue" layer). Integration: SMO as a driver for Kubernertest deployments. Contribution: Testing/validation + Open-source mechanisms for SMO (orchestration, decision- making). Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 24
  17. Join Us! Open Source & Community Fundamentally Open Source! Contributions

    Welcome: Code, feedback, ideas. Engage: Documentation, presentations (FOSDEM, PyCon, OSXP, OW2Con, etc.) Website/blog, social media Workshops, user groups Hosted: SourceHut & GitHub Values: REUSE compliance, PSF Code of Conduct. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 25
  18. Find Hop3 Online GitHub: github.com/abilian/hop3 SourceHut: git.sr.ht/~sfermigier/hop3 Eclipse Research Labs:

    gitlab.eclipse.org/eclipse-research- labs/nephele-project/opencall-2/h3ni Abilian: www.abilian.com Hop3: hop3.cloud NGI0 Commons project: nlnet.nl/project/Hop3-Nixified/ Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 26
  19. Why Hop3 Matters Viable Self-Hosting: Open Source PaaS makes it

    accessible. Digital Sovereignty: Empowering users and organisations with infrastructure control. F/OSS Ecosystem: Simplifies deployment, fosters collaboration. Champions: Sustainability & Open Standards. Cf. NGI's vision for an "Internet of Human Values - Resilient. Trustworthy. Sustainable." Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 28
  20. Key Takeaways Developers/DevOps: Quick dev deployments Manage production (backup, upgrades)

    Easy git push / CLI workflows IT Managers: Deploy & manage F/OSS portfolio Full control: infrastructure & data App Developers: Port apps to Hop3 Leverage reproducible builds, simple config Packaging effort (Nix) valuable F/OSS Contributors: Discover roadmap Contribute to NGI0/NEPHELE funded project Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 29
  21. Image credits https://www.freepik.com/free-photo/young-network-engineer-working-server-room_5819252.htm https://www.freepik.com/free-vector/data-network-businessman_5665337.htm https://www.freepik.com/free-photo/architectural-blueprints_1120523.htm https://www.freepik.com/free-vector/cloud-storage-database-isometric-server-room-personal-data-information- processing_3628738.htm https://www.freepik.com/free-vector/staff-management-perspective-definition-target-orientation-teamwork- organization-business-coach-company-executive-personnel-cartoon-characters_12084748.htm https://www.freepik.com/free-ai-image/pot-gold-end-rainbow_413065954.htm

    https://www.freepik.com/free-photo/businessman-looking-wavy-road_961566.htm https://www.freepik.com/free-vector/architecture-background-design_1004441.htm https://www.freepik.com/free-photo/wood-block-tower-game-children-parquet-background_27000780.htm https://www.freepik.com/free-vector/small-plant-design_894808.htm Image of EU OS hackathon used for illustration purpose only. Hop3: Empowering Digital Sovereignty with an Open-Source PaaS 31