Blog

News, announcements, community stories, and insights on open-source digital infrastructure in higher education.

Scientific Workflows with EWOKS: Research Pipelines Join the Suite

October 4, 2026

EWOKS, the open-source scientific workflow framework developed at the ESRF, is now part of openEduSuite — with unified single sign-on and a portal entry.

technicalintegrationewoksscientific-workflowsssokeycloakresearch-dataintegration

Typst Goes First-Class: Document Rendering as a Suite Service

October 4, 2026

Typst is now a first-class openEduSuite service: an upstream-tracked fork, a hardened HTTP render API, multi-arch container images, and dual-stack deployment.

announcementtechnicaltypstrender-servicepdfdocumentscontainersci-cdintegration

World-Office: Conformance-Driven Progress on an Independent Office Suite

October 4, 2026

World-Office rebuilds the office stack in Rust: a production document server, document, spreadsheet and slide editors — progress measured by conformance.

technicalarchitectureworld-officerustdocxooxmlconformancewopisovereignty

The Eight SOV Criteria: A Reflection on Cloud Sovereignty

October 1, 2026

Walking through the eight SOV criteria of the EU Cloud Sovereignty Framework — what each demands, and what it means for a self-hosted campus platform.

securitycompliancesovc3absicloud-sovereigntyeu-csfc5digital-sovereigntyhigher-education

Anatomy of a Self-Hosted Campus: openEduSuite on a Three-Node k3s Cluster

September 25, 2026

A complete higher-education digital workplace — documents, chat, video teaching, LMS, on-prem AI — behind one SSO portal, running on three bare-metal nodes with k3s, Argo CD and zero cloud bills.

devopsdigital-sovereigntyk3skubernetesgitopsargocdself-hostingoauth2-proxykeycloakollamacert-manager

Stateful Services Are Pets: why your app deploy must never touch the database

September 13, 2026

A one-line config change in the app repo's compose file let a routine deploy recreate the production Dgraph, SIGKILLing it and contributing to a data-loss incident. Why stateful services are pets, not cattle, and why --no-deps is a deploy-line that saves weekends.

EngineeringDevOpsdeploystatefuldatabasesdocker-composedgraphpostgresdisaster-recoveryoperability

A Federal Architecture for Sovereign Student Email in German Higher Education

August 26, 2026

A conservative analysis of a federated, open-source email and collaboration platform for 2.8 million students, modelled on Germany's federal education structure with one instance per Bundesland.

architecturedigital-sovereigntyeducationfederationemaildigital-sovereigntyhigher-educationstalwart-mailkubernetesgerman-higher-educationcost-analysis

Backup & Restore for openEduSuite – the 3-Tier Approach to University Data Sovereignty

August 22, 2026

Data sovereignty is decided at the backup layer: openEduSuite protects critical services with k8up and a 3-tier model (RPO/RTO/retention) on S3, verifies restores in production, and honestly shows what is still missing – 29 RWO PVCs await CSI snapshots.

OperationsData Sovereigntybackuprestorek8uprestics3cephcsi-snapshotsrportouniversitydata-sovereignty

ZKI IT-Grundschutz Compliance: openEduSuite's Journey Toward the Higher Education Security Baseline

August 11, 2026

openEduSuite is systematically aligning with the ZKI IT-Grundschutz-Profil — the higher education adaptation of the BSI baseline — through enforceable Kyverno policies, hardened GitOps pipelines, and a transparent gap analysis. Here's where we stand and what's next.

SecurityCompliancezkiit-grundschutzbsicompliancekyvernosecurityhigher-educationisms

SCS vs. Proxmox + K3s: Choosing a Base for openEduSuite

August 6, 2026

openEduSuite is Kubernetes-native, so the platform decision comes first. A neutral comparison of SCS and Proxmox VE with K3s for universities — governance, certification, portability, and operations.

Architecturescssovereign-cloud-stackproxmoxk3skubernetesarchitectureprocurementsovereignty

Page 1 of 4