reynir/blog.robur.coop
1
0
Fork 0
forked from robur/blog.robur.coop
Code Pull requests Activity

edits

Browse source
This commit is contained in:
Hannes Mehnert 2024-10-19 13:14:24 +02:00
parent 843b7a887f
commit 62c58c5c30
1 changed files with 79 additions and 76 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

155
articles/finances.md
View file

@ -38,26 +38,26 @@ agreeing to all the numbers.
## 2018 ## 2018
We started operations in 2018. In late 2017, we got donations (in the form of We started operations in 2018. In late 2017, we got donations (in the form of
bitcoins) by friends who were convinced of our mission. This was 54194.91 EUR. bitcoins) by friends who were convinced of our mission. This was 54,194.91 EUR.
So, in 2018 we started with that money, and tried to find a mission, and So, in 2018 we started with that money, and tried to find a mission, and
generate income to sustain our salaries. generate income to sustain our salaries.
Also, already in 2017, we applied for funding from Also, already in 2017, we applied for funding from
[Prototypefund](https://prototypefund.de) on a [CalDAV server](https://prototypefund.de/project/robur-io/), [Prototypefund](https://prototypefund.de) on a [CalDAV server](https://prototypefund.de/project/robur-io/),
and we received the grant in early 2018. This was another 48500 EUR, paid to and we received the grant in early 2018. This was another 48,500 EUR, paid to
individuals (due to reasons, Prototype fund can't cash out to the non-profit - individuals (due to reasons, Prototype fund can't cash out to the non-profit -
this put us into some struggle, since we needed some double bookkeeping and this put us into some struggle, since we needed some double bookkeeping and
individuals had to dig into health care etc.). individuals had to dig into health care etc.).
We also did in the second half of 2018 a security audit for We also did in the second half of 2018 a security audit for
[Least Authority](https://leastauthority.com/blog/audits/five-security-audits-for-the-tezos-foundation/) [Least Authority](https://leastauthority.com/blog/audits/five-security-audits-for-the-tezos-foundation/)
(invoicing 19600 EUR). (invoicing 19,600 EUR).
And later in 2018 we started on what is now called NetHSM with an initial And later in 2018 we started on what is now called NetHSM with an initial
design workshop (5000 EUR). design workshop (5,000 EUR).
And lastly, we started to work on [TLS 1.3](https://datatracker.ietf.org/doc/html/rfc8446) And lastly, we started to work on [TLS 1.3](https://datatracker.ietf.org/doc/html/rfc8446)
funded by Jane Street via OCaml Labs Consulting. In 2018, we received 12741.71 EUR funded by Jane Street via OCaml Labs Consulting. In 2018, we received 12,741.71 EUR
We applied at NLNet for improving the QubesOS firewall developed in MirageOS We applied at NLNet for improving the QubesOS firewall developed in MirageOS
(without success), tried to get the IT security prize in Germany (without (without success), tried to get the IT security prize in Germany (without
@ -65,31 +65,30 @@ success), and to DIAL OSC (without success).
| Project | Amount | | Project | Amount |
|-----------------|----------:| |-----------------|----------:|
| Donation | 54194.91 | | Donation | 54,194.91 |
| Prototypefund | 48500.00 | | Prototypefund | 48,500.00 |
| Least Authority | 19600.00 | | Least Authority | 19,600.00 |
| TLS 1.3 | 12741.71 | | TLS 1.3 | 12,741.71 |
| Nitrokey | 5000.00 | | Nitrokey | 5,000.00 |
|-----------------|-----------| | __Total__ | __140,036.62__ |
| Total | 140036.62 |
## 2019 ## 2019
We were keen to finish the CalDAV implementation (and start a CardDAV We were keen to finish the CalDAV implementation (and start a CardDAV
implementation), and received some financial support from Tarides for it implementation), and received some financial support from Tarides for it
(15000 EUR). (15,000 EUR).
The TLS 1.3 work continued, we got in total 68887.53 EUR. The TLS 1.3 work continued, we got in total 68,887.53 EUR.
We also applied to (and got funding from) Prototypefund, once with an [OpenVPN-compatible We also applied to (and got funding from) Prototypefund, once with an [OpenVPN-compatible
MirageOS unikernel](https://prototypefund.de/en/project/robust-openvpn-client-with-low-use-of-resources/), MirageOS unikernel](https://prototypefund.de/en/project/robust-openvpn-client-with-low-use-of-resources/),
and once with [improving the QubesOS firewall developed as MirageOS unikernel](https://prototypefund.de/project/portable-firewall-fuer-qubesos/). and once with [improving the QubesOS firewall developed as MirageOS unikernel](https://prototypefund.de/project/portable-firewall-fuer-qubesos/).
This means again twice 48500 EUR. This means again twice 48,500 EUR.
We also started the implementation work of NetHSM - which still included a lot We also started the implementation work of NetHSM - which still included a lot
of design work - in total the contract was over 82500 EUR. In 2019, we invoiced of design work - in total the contract was over 82,500 EUR. In 2019, we invoiced
Nitrokey in 2019 in total 40500 EUR. Nitrokey in 2019 in total 40,500 EUR.
We also received a total of 516.48 EUR as donations from source unknown to us. We also received a total of 516.48 EUR as donations from source unknown to us.
@ -99,14 +98,13 @@ our non-profit, and we didn't get any money in the end.
| Project | Amount | | Project | Amount |
|----------|----------:| |----------|----------:|
| CardDAV | 15000.00 | | CardDAV | 15,000.00 |
| TLS 1.3 | 68887.53 | | TLS 1.3 | 68,887.53 |
| OpenVPN | 48500.00 | | OpenVPN | 48,500.00 |
| QubesOS | 48500.00 | | QubesOS | 48,500.00 |
| Donation | 516.48 | | Donation | 516.48 |
| Nitrokey | 40500.00 | | Nitrokey | 40,500.00 |
|----------|-----------| | __Total__ | __221,904.01__ |
| Total | 221904.01 |
## 2020 ## 2020
@ -114,28 +112,27 @@ In 2020, we agreed with OCaml Labs Consulting to work on maintenance of OCaml
packages in the MirageOS ecosystem. This was a contract where at the end of the packages in the MirageOS ecosystem. This was a contract where at the end of the
month, we reported on which PRs and issues we spent how much time. For us, this month, we reported on which PRs and issues we spent how much time. For us, this
was great to have the freedom to work on which OCaml packages we were keen to was great to have the freedom to work on which OCaml packages we were keen to
get up to speed. In 2020, we received 45000 EUR for this maintenance. get up to speed. In 2020, we received 45,000 EUR for this maintenance.
We finished the TLS 1.3 work (18659.01 EUR) We finished the TLS 1.3 work (18659.01 EUR)
We continued to work on the NetHSM project, and invoiced 55500 EUR. We continued to work on the NetHSM project, and invoiced 55,500 EUR.
We received a total of 255 EUR in donations from sources unknown to us. We received a total of 255 EUR in donations from sources unknown to us.
We applied at reset.tech again with DNSvizor, unfortunately without success. We applied at reset.tech again with DNSvizor, unfortunately without success.
We also applied at [NGI pointer](https://pointer.ngi.eu) to work on reproducible We also applied at [NGI pointer](https://pointer.ngi.eu) to work on reproducible
builds for MirageOS, and a web frontend. Here we got the grant of 200000 EUR, builds for MirageOS, and a web frontend. Here we got the grant of 200,000 EUR,
which we worked on in 2021 and 2022. which we worked on in 2021 and 2022.
| Project | Amount | | Project | Amount |
|-----------|----------:| |-----------|----------:|
| OCLC | 45000.00 | | OCLC | 45,000.00 |
| TLS 1.3 | 18659.01 | | TLS 1.3 | 18,659.01 |
| Nitrokey | 55500.00 | | Nitrokey | 55,500.00 |
| Donations | 255.00 | | Donations | 255.00 |
|-----------|-----------| | __Total__ | __119,414.01__ |
| Total | 119414.01 |
## 2021 ## 2021
@ -144,16 +141,16 @@ how a unikernel is configured: no more compiled-in secrets, but instead using
boot parameters. We setup the infrastructure for doing daily reproducible boot parameters. We setup the infrastructure for doing daily reproducible
builds, serving system packages via a package repository, and a builds, serving system packages via a package repository, and a
[web frontend](https://builds.robur.coop) hosting the reproducible builds. [web frontend](https://builds.robur.coop) hosting the reproducible builds.
We received in total 120000 EUR from NGI Pointer in 2021. We received in total 120,000 EUR from NGI Pointer in 2021.
Our work on NetHSM continued, including the introduction of elliptic curves Our work on NetHSM continued, including the introduction of elliptic curves
in mirage-crypto (using [fiat](https://github.com/mit-plv/fiat-crypto/)). The in mirage-crypto (using [fiat](https://github.com/mit-plv/fiat-crypto/)). The
invoices to Nitrokey summed up to 26000 EUR in 2021. invoices to Nitrokey summed up to 26,000 EUR in 2021.
We developed in a short timeframe two packages, [u2f](https://github.com/robur-coop/u2f) We developed in a short timeframe two packages, [u2f](https://github.com/robur-coop/u2f)
and later [webauthn](https://git.robur.coop/robur/webauthn) for Skolem Labs based and later [webauthn](https://git.robur.coop/robur/webauthn) for Skolem Labs based
on [gift economy](https://en.wikipedia.org/wiki/Gift_economy). This resulted in on [gift economy](https://en.wikipedia.org/wiki/Gift_economy). This resulted in
donations of 18976 EUR. donations of 18,976 EUR.
We agreed with [OCSF](https://ocaml-sf.org/) to work on We agreed with [OCSF](https://ocaml-sf.org/) to work on
[conex](https://github.com/hannesm/conex), which we have not delivered yet [conex](https://github.com/hannesm/conex), which we have not delivered yet
@ -165,21 +162,20 @@ from the opam-repository.
| Customer | Amount | | Customer | Amount |
|-------------|----------:| |-------------|----------:|
| NGI Pointer | 120000.00 | | NGI Pointer | 120,000.00 |
| Nitrokey | 26000.00 | | Nitrokey | 26,000.00 |
| Skolem | 18976.00 | | Skolem | 18,976.00 |
|-------------|-----------| | __Total__ | __164,976.00__ |
| Total | 164976.00 |
## 2022 ## 2022
We finished our NGI pointer project, and received another 80000 EUR. We finished our NGI pointer project, and received another 80,000 EUR.
We also did some minor maintenance for Nitrokey, and invoiced 4500 EUR. We also did some minor maintenance for Nitrokey, and invoiced 4,500 EUR.
For Tarides, we started another maintaining MirageOS packages (and continuing For Tarides, we started another maintaining MirageOS packages (and continuing
[our TCP/IP stack](https://github.com/robur-coop/utcp)), and invoiced in [our TCP/IP stack](https://github.com/robur-coop/utcp)), and invoiced in
total 22500 EUR. total 22,500 EUR.
A grant application for [bob](https://github.com/dinosaure/bob/) was rejected, A grant application for [bob](https://github.com/dinosaure/bob/) was rejected,
but a grant application for [MirageVPN](https://github.com/robur-coop/miragevpn) but a grant application for [MirageVPN](https://github.com/robur-coop/miragevpn)
@ -187,24 +183,23 @@ got accepted.
| Project | Amount | | Project | Amount |
|-------------|---------:| |-------------|---------:|
| NGI Pointer | 80000.00 | | NGI Pointer | 80,000.00 |
| Nitrokey | 4500.00 | | Nitrokey | 4,500.00 |
| Tarides | 22500.00 | | Tarides | 22,500.00 |
|-------------|----------| | __Total__ | __107,000.00__ |
| Total |107000.00 |
## 2023 ## 2023
We finished the NetHSM project, and had a final invoice over 2500 EUR. We finished the NetHSM project, and had a final invoice over 2,500 EUR.
We started a collaboration for [semgrep](https://semgrep.dev), porting some of We started a collaboration for [semgrep](https://semgrep.dev), porting some of
their Python code to OCaml. We received in total 37500 EUR. their Python code to OCaml. We received in total 37,500 EUR.
We continued the MirageOS opam package maintenance and invoiced in total We continued the MirageOS opam package maintenance and invoiced in total
89250 EUR to Tarides. 89,250 EUR to Tarides.
A grant application on [MirageVPN](https://nlnet.nl/project/MirageVPN/) got A grant application on [MirageVPN](https://nlnet.nl/project/MirageVPN/) got
accepted (NGI Assure), and we received in total 12000 EUR for our work on it. accepted (NGI Assure), and we received in total 12,000 EUR for our work on it.
This is a continuation of our 2019 work funded by Prototypefund. This is a continuation of our 2019 work funded by Prototypefund.
We also wrote various funding applications, including one for We also wrote various funding applications, including one for
@ -213,21 +208,20 @@ We also wrote various funding applications, including one for
| Customer | Amount | | Customer | Amount |
|-----------|---------:| |-----------|---------:|
| Nitrokey | 2500.00 | | Nitrokey | 2,500.00 |
| semgrep | 37500.00 | | semgrep | 37,500.00 |
| Tarides | 89250.00 | | Tarides | 89,250.00 |
| MirageVPN | 12000.00 | | MirageVPN | 12,000.00 |
|-----------|----------| | __Total__ | __141,250.00__ |
| Total |141250.00 |
## 2024 ## 2024
We're still in the middle of it, but so far we continued the Tarides maintenance We're still in the middle of it, but so far we continued the Tarides maintenance
contract (54937.50 EUR). contract (54,937.50 EUR).
We also finished the MirageVPN work, and received another 45000 EUR. We also finished the MirageVPN work, and received another 45,000 EUR.
We had a small contract with Semgrep and received 18559.40 EUR. We had a small contract with Semgrep again on porting Python code to OCaml and received 18,559.40 EUR.
We again worked on several successful funding applications, one on We again worked on several successful funding applications, one on
[PTT](https://nlnet.nl/project/PTT/) (NGI Zero Core), a continuation of the [PTT](https://nlnet.nl/project/PTT/) (NGI Zero Core), a continuation of the
@ -240,11 +234,10 @@ The below table is until end of August 2024.
| Project | Amount | | Project | Amount |
|-----------|----------:| |-----------|----------:|
| Semgrep | 18559.40 | | Semgrep | 18,559.40 |
| Tarides | 54937.50 | | Tarides | 54,937.50 |
| MirageVPN | 45000.00 | | MirageVPN | 45,000.00 |
|-----------|-----------| | __Total__ | __118,496.90__ |
| Total | 118496.90 |
## Total ## Total
@ -252,15 +245,14 @@ In a single table, here's our income over the last 5 years.
| Year | Amount | | Year | Amount |
|-------|-----------:| |-------|-----------:|
| 2018 | 140036.62 | | 2018 | 140,036.62 |
| 2019 | 221904.01 | | 2019 | 221,904.01 |
| 2020 | 119414.01 | | 2020 | 119,414.01 |
| 2021 | 164976.00 | | 2021 | 164,976.00 |
| 2022 | 107000.00 | | 2022 | 107,000.00 |
| 2023 | 141250.00 | | 2023 | 141,250.00 |
| 2024 | 118496.90 | | 2024 | 118,496.90 |
|-------|------------| | __Total__ | __1,013,077.54__ |
| Total | 1013077.50 |
As you can spot, it varies quite a bit. In some years we have fewer money As you can spot, it varies quite a bit. In some years we have fewer money
available than in other years. available than in other years.
@ -270,7 +262,18 @@ available than in other years.
We have provided an overview of our income, we were three to five people working We have provided an overview of our income, we were three to five people working
at robur over the entire time. As written at the beginning, we use needs-based at robur over the entire time. As written at the beginning, we use needs-based
payment. Our experience with this is great! It provides a lot of trust into each payment. Our experience with this is great! It provides a lot of trust into each
other. other. From our income, some money flows to Aenderwerk for their amazing
bookkeeping work - writing invoices, doing the taxes, helping us with contracts.
We also finance our server, including a severe hard disk failure in June 2024.
Our funding is diverse from multiple sources - donations, commercial work,
public funding. This was our initial goal, and we're very happy that it works fine
over the last five years.
Taking the numbers into account, we are not paying ourselves "industry standard"
rates - but we really love what we do - and sometimes we just take some time off.
We do work on various projects that we really really enjoy - but where (at the
moment) no funding is available for.
We are always happy to discuss how our collective operates. If you're We are always happy to discuss how our collective operates. If you're
interested, please drop us a message. interested, please drop us a message.