* Aggregators - Redhat and AWS (and cloud providers). They sell and deliver collections of open source software, driving value from configuration and easier deployment.
* Differentiated licensing - Toss all the variations on pay for something other than the GPL version or additional features into this bucket. It's a model that is rapidly becoming obsolete.
* PaaS / Saas - host it for the client. Value is delivered by better operations. Competitors often are aggregators in the form of cloud vendors.
* Support & Services - Free software, paid support, paid consulting. This limits the market to larger companies or at least people who need a much higher level of support. Competitors can be other contributors to the code base.
* App Store Delivery - I'm seeing lots of GPL software where the authors are putting the "official version" in app stores (lots of this going on in Windows) and charging for it. Competitors can be anyone who can build and deliver the app, but since many apps need a back end, the hosting of app data can be a moat.
In a free software product, the code itself is available under an open source license, often one that doesn't prevent use by companies. The product is some particular version of the code built, QA'd, vetted and supported by the vendor. The typical example being RHEL. But in addition to RedHat, this model can be used also by single-product companies.
For more detail see e.g. https://sfosc.org/docs/book/business-models/