uk: Комп'ютерні науки

description: Online performance wins making collaborative editing in your browser quicker. Collabora Online has a novel model that allows re-using the core LibreOffice Technology to provide rich collaborative editing. Recently we have been been focusing our development on improving the 'feel' and slickness of document editing as a key part of user experience. We have also been working on improving editing performance with larger numbers of concurrent active editors. Come and hear about the things that we've found and fixed, both in COOL and also in the LibreOffice core to improve interactivity and to make collaborative editing fly.

uk: вхід без авторизації

name: Online performance: making collaborative editing quicker


Towards an Operational Code Aesthetics

Stephan Bergmann

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

FOSDEM VZW

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: Compilers play a crucial role in hardening software against security attacks. As compiler engineers we experience an increase in demand for security-related features: we simply work on security-related features more often. We find it tough to analyze whether the hardenings we implement are easy or hard to circumvent by attackers. After chatting about this with many compiler developers, our experience is that most feel their work would benefit from a deeper understanding of attacks and hardening techniques. After having looked around, we didn't find much educational material that gives a broad overview, covering all aspects compiler developers ought to know about. Therefore, we recently started an open source book titled "Low Level Software Security for Compiler developers" at https://github.com/llsoftsec/llsoftsecbook/. It aims to improve the industry-wide knowledge about security hardening in compilers and related tools; ultimately leading to more innovation and better implementations of security features. In this presentation, we'll explain the rationale for this new open source project in more detail. We will discuss what content we have so far and what content we plan to add. The project very much welcomes new contributors: we need more new content, more review of content, discussion of ideas for how to make the book better, improvement in the design and layout of the produced HTML and PDF output, etc. We hope this presentation will reach both anyone interested in learning more about low-level software security and anyone interested in helping to grow this project further.

uk: вхід без авторизації

name: LLSOFTSECBOOK: LOW-LEVEL SOFTWARE SECURITY FOR COMPILER DEVELOPERS


uk: Комп'ютерні науки

description: Clang and LLVM have a great history of supporting a great variety of CPUs, from 8- to 64-bits assuming they all have a smallest size of an addressable unit of 8-bits words. Despite the fact that a lot of types and there alignment can be defined with the “target datalayout” string, the “character” and “short” type have been hard-coded into clang and llvm.

uk: вхід без авторизації

name: 8-bit Character support on architectures were the smallest addressable unit size is 64-bit in Clang and LLVM: 8-bit characters in VIAMPP


uk: Комп'ютерні науки

description: In August 2021, the Ansible community voted to accept Matrix as an official chat platform (alongside and equal to IRC). This marked a major evolution in the communication of the project, and opened the door to more ways for us to connect with each other. It also followed a substantial amount of planning from the community team, in terms of architecture we had in mind. In this talk, we'll take a look back over our original architecture & proposal, how the rollout has gone, and where we think we're going next. There's much we could cover in this talk, but we'll definitely have content on the 2-homesever architecture we used (and why), on how adoption is going with our community (bridges will feature here, at least) and community building & promotion (expect armchair-sociology while I talk about rich interaction mediums, but also things like newsrooms, interaction fragmentation, etc). I'll also be attempting to gather some feedback from our community to present as well. Who is this talk for: We hope it'll be of interest to anyone thinking of recommending Matrix for their community - whether a FOSS community, or more generally, there's things to think about first and arguments that can be re-used. There will also be interest for existing Matrix users too, in terms of lessons learned and wishlist features for the future.

uk: вхід без авторизації

name: Through The Looking Glass: Ansible + Matrix: A 6 month on


uk: Комп'ютерні науки

description: Remarkably, the Matrix community still does not seem to have a equivalent to things like the venerable mIRCstats or PISG packages (which generate data based on a local IRC log). In this lightning talk, I'll present a new package I'm working on to present similar data for Matrix rooms. We'll have a quick demo and lots of pretty graphs to look at. ChatStat aims initially to replicate the same kind of HTML report that these older packages created, and we'll show how to use it on your own host to generate stats for your rooms using the Matrix API. Since Matrix has bridges, we can also directly gather data on these from connected rooms (e.g. the screenshot shows the split between Matrix and IRC users over a 2 week period) and we will show how to accomplish this too. Lastly we'll talk about the underlying data structure and how to use it to build new graphs that ChatStat does not yet do itself. Who is this talk for: Anyone who runs one or more Matrix rooms and wishes to generate visualisations of them.

uk: вхід без авторизації

name: ChatStat - An R package for Matrix stats: Shiny stats for your community goodness


uk: Комп'ютерні науки

description: This talk showcases Matrix Highlight, a tool built on top of the Matrix protocol to collaboratively annotate and comment on pages on the internet. By building on top of Matrix, we get decentralized, federated, and open web (or more) annotation. This talk will cover a demonstration, using Matrix events for non-messaging purposes, and the benefits of building on Matrix.

uk: вхід без авторизації

name: Decentralized Collaborative Annotations using Matrix


uk: Комп'ютерні науки

description: Events are at the heart of the Matrix Protocol, but what are they? And how does the Protocol build on them to create rooms, room graphs, and other data structures? This talk aims to demystify some of these concepts, giving an overview of events, room event graphs, and associated structures. In the spirit of accessiblity, there will be an attempt to make the talk as approachable as possible for those without a ton of programming experience (although some basic knowledge will be helpful!). We will look at the Matrix specification and if time permits, may even dig into some code in Synapse. If you're interested in hacking on Matrix/Synapse but are newish to programming or intimidated by the core spec, or are just curious, this talk is for you!

uk: вхід без авторизації

name: Events for the Uninitiated: A Junior's Guide to Events in Matrix


uk: Комп'ютерні науки

description: Synapse is the main Matrix homeserver implementation, and is maintained by the Matrix.org Foundation. One of the lesser-known features of Synapse is its module system, which allows any developer to write custom functionalities for it, and to extend its capabilities beyond the scope of the Matrix specification. In this talk, I will cover the current state of Synapse's module system, which has recently been subject to a big overhaul, as well as how to write and use a simple module.

uk: вхід без авторизації

name: Beyond the Matrix: Extend the capabilities of your Synapse homeserver: How to add custom features to Synapse with modules


MLS meets Matrix

uk: Комп'ютерні науки

description: MLS (Messaging Layer Security) is an upcoming IETF standard for messaging systems. In this talk, I will discuss some of the work in integrating MLS with Matrix. This will include: - why we would want to use MLS - making MLS work in a decentralised messaging system - how MLS concepts can fit into Matrix - what will be needed to migrate to MLS

uk: вхід без авторизації


uk: Комп'ютерні науки

description: So you want to moderate your Matrix room, or perhaps your homeserver? You're in the right place. In this presentation, we'll talk about both the core concepts of federated moderation in Matrix and the main moderation tools. Expect to hear about power levels, redactions, quarantine, abuse reports, Mjölnir and plans for the near future!

uk: вхід без авторизації

name: All things with moderation: All about moderation in Matrix


uk: Комп'ютерні науки

description: Matrix has already got the solid framework of many bridge and bot implementations, but has always been missing that polish to make the bridges more accessible. In this talk, Will will explain how we're going to build our bridges with an all-new interactive interface and replacing old bot command interfaces with widget based interfaces.

uk: вхід без авторизації

name: The next generation of Matrix interfaces: How we're changing the face of bridge and bot integrations in Matrix


Opsdroid: Building a bot using Python3

uk: Комп'ютерні науки

description: Opsdroid makes building bots easy with it's modular concept of Connectors, Matchers & Skills. In this talk I want to showcase how easy it's to build bots using Opsdroid. We start with a simple "hello bot" and end with a Bot, which uses Rasa NLU (Natural Language Understanding), an AI based platform, to recognize the intent of a message.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The success of P2P Matrix depends on an overlay network which can provide good connectivity between users, and scale appropriately. For that we built Pinecone, an implementation of a new routing scheme called "SNEK", along with tools to simulate and to measure various properties such as routing table size and convergence times. This talk will explore some of the core design elements and the challenges of building a decentralised routing protocol.

uk: вхід без авторизації

name: Growing Pinecones for P2P Matrix: The journey so far of building an overlay network


uk: Комп'ютерні науки

description: Matrix is an open protocol for secure, decentralised communication - defining an end-to-end-encrypted real-time communication layer for the open Web. Historically the network has been made up of newly written native Matrix clients, or bridges to 3rd party existing chat systems (e.g. Slack, Discord, Telegram). The matrix-rust-sdk is a modular Matrix client library, meant to be a robust implementation of the protocol, and to make even the most advanced features such as E2EE easy to use. This talk will walk you through the design decisions and the tradeoffs that come with it, give you an overview of where we're at and where we're going with Web-Assembly, and finally what the future holds for the matrix-rust-sdk. Finally it will be connected to a real-life example of software using the matrix-rust-sdk: Fractal-Next.

uk: вхід без авторизації

name: The matrix-rust-sdk: One SDK to rule them all


uk: Комп'ютерні науки

description: The Matrix core team is busier than ever, juggling hundreds of Matrix Spec Core Proposals and undergoing some major techtonic shifts as Matrix evolves into the ultimate secure decentralised communication network. In this talk, we'll give a high-level survey of the state of the core project, including: * How we're ensuring that flagship clients are as attractive as possible to a mainstream audience - and why we will fail if we don't. * How we're making Matrix go fast via v3 sync and fast room joins * How matrix-rust-sdk is becoming a flagship client SDK * How we're getting a full end-to-end security of the reference Matrix stack * How we're tackling abuse on the public Matrix network * How Matrix is evolving to use cases beyond chat.

uk: вхід без авторизації

name: The Matrix State of the Union: What's the Matrix Core Team up to?


Adventures in Dataflow

uk: Комп'ютерні науки

description: "How can we democratize computing?" — that is a sentiment echoed by many people, especially those of us in tech who realize what the general audience is missing out from computing devices, when they use them as passive consumers. If we think of computing devices as programmable tools for active exploration, how should they look like? What programming model should they be based on? It's fair to assume that it shouldn't look like what passes for regular programming nowadays, since that is clearly out of touch with users. Perhaps something more... declarative? ...minimalistic? So, how can we bring declarative and minimalistic computing to the masses? And... maybe we have already?

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Scientific workflows are readily and most easily expressed as shell scripts. However, shell scripts are notorious for being "duct tape", and are hard to adapt to different hardware and software environments. Workflow languages such as the Common Workflow Language (CWL) were developed to address this pain point. However, CWL does come at the cost of increased verbosity and reduced readability. Even seasoned scientists shy away from writing CWL, and fall back to the familiarity of shell scripts. This need not be. There is no reason to inflict the behind-the-scenes complexity of workflow languages on the user. It should be possible to automatically translate (in other words, compile) a simple shell-like script into a workflow language specification. In effect, we create a new domain specific language that is almost as easy to write as a shell script, but compiles to CWL. No other language is better suited to this task of creating domain specific languages than lisp. The lisps with their homoiconicity and unique macro system empower the programmer to use ordinary code to hack the compiler itself. In this talk, I will present the Concise Common Workflow Language (ccwl). The Concise Common Workflow Language (ccwl) is a concise syntax to express CWL workflows. It is a compiler that compiles a simple lispy shell-like workflow specification into a CWL workflow. It is implemented in the Scheme programming language, a minimalist dialect of lisp. I will discuss the considerations that went into the design of ccwl, and demonstrate its expressive power with illustrative examples.

uk: вхід без авторизації

name: The Concise Common Workflow Language: Concision and elegance in a workflow language using lisp


uk: Комп'ютерні науки

description: Welcome to the Declarative and Minimalistic Computing Devroom. In this year's virtual conference we will honour the late Professor John McCarthy as the founder of AI and the inventor of LISP. McCarthy with his work pioneered artificial intelligence, developed the Lisp programming language family and kickstarted our modern computing world. Lisp is one of the two oldest computer languages in use today.

uk: вхід без авторизації

name: Declarative and Minimalistic Computing: Entry talk


uk: Комп'ютерні науки

description: How can we use DSLs in our applications as a replacement for databases? CSVs? configuration files? In this talk I will explain how we designed and developed several DSLs for usage in the Nyxt browser. I will also explain how we designed our DSLs and what our constraints were. What were we trying to achieve with our DSLs? How can you too leverage DSLs in your applications to empower your users?

uk: вхід без авторизації

name: How to design powerful DSLs for users: Decisions, decisions, decisions...


uk: Комп'ютерні науки

description: Fuzion is a modern general purpose programming language that unifies concepts found in structured, functional and object-oriented programming languages into the concept of a Fuzion feature. It combines a powerful syntax and safety features based on the design-by-contract principle with a simple intermediate representation that enables powerful optimizing compilers and static analysis tools to verify correctness aspects. This talk will present the advances in the Fuzion languages since its first public announcement at FOSDEM 2021. This includes a simplified and cleaned-up syntax, improved type inference, its safety features, foreign language interface to Java and an overview of the existing and planned toolchain. Fuzion is not only about the language itself, but just as well about the intermediate representation that is the basis for static analysis, optimization and back-ends. The talk will give an overview of the format of intermediate code.

uk: вхід без авторизації

name: Fuzion Language Update: The marathon run


uk: Комп'ютерні науки

description: You need a lot of hubris to design your own programming language. As a result, new languages are often engineered (or "over-engineered") for that glorious future where millions of programmers spend their lives working with the language, and a small army is maintaining the compiler and related tools. But how would you design a language that assumes this bountiful future will never arrive? A language that, even in the best of circumstances, will always be obscure and secondary? Futhark is a programming language designed for a very specific domain: high-level, deterministic, data-parallel number crunching. It explicitly disavows general-purpose use, and it is absolutely not possible to write full applications in it. Thus, even if Futhark somehow managed to become the largest conceivable success and completely dominate its domain, that would not translate into very many programmers. And even then, it would at best be a secondary or third language for most of its users. In this talk I will talk about how such a perspective has affected the design of the Futhark language and its tools. To a first approximation, this is just the "principle of least surprise" applied to every part of the language and ecosystem. As a niche language, Futhark's novelty budget is quite limited, and its users will not have the inclination to learn about syntactical subtleties, elaborate package managers or build systems. At the same time, it's trying to innovate in a challenging domain, so some things definitely will have to be novel. Balancing these concerns has been interesting, and my experiences are perhaps even useful for designers of languages, tools, or systems in similar situations.

uk: вхід без авторизації

name: Designing a programming language for the desert


uk: Комп'ютерні науки

description: We'd all like to use computers to their fullest capability. However, we'd also like to restrict the capability of computers to do things we don't intend. These constraints present a problem: how our computers should determine our intention, when the software we use is written by others. Most programming languages ignore this problem, by running untrusted programs with completely open doors. Browsers run programs with a single policy that is mostly hard-coded (no file system access) but also complex, so that it's often unclear what is protected. In this talk I'll describe my attempts to come up with a model that is both flexible and easy to understand. This talk will: elaborate on what makes sandboxing difficult (code is data), outline past approaches to sandboxing (web browsers), and summarize the problems of past approaches (who watches the watchers?) It will describe a new approach that replaces the hard-coded coarse-grained protections of browsers with declarative fine-grained protections organized by the real-world effects of computers (syscalls). In outline, the approach separates untrusted software in apps from a tiny set of programmable policies. Each policy is advice that applies to a single syscall and decides whether to permit the syscall or not. This approach is implemented in a fork of Lua for purely text-mode apps. The browser provides default policies, but tries to gradually empower each person over time to take ownership of the policies on their browser without any mediation from others. In the process, it hopes to educate people on some basic aspects of programming. The talk will describe the new challenges posed by this approach, including: educating people to never paste in code into policies without understanding it educating people on the value of minimalism in policy code (and indeed all code) educating people on the need for policy code to itself be side-effect-free coaching people on good and poor changes to policy code when intended uses are disallowed by policies

uk: вхід без авторизації

name: Why everyone needs to know some coding: last-mile sandboxing


uk: Комп'ютерні науки

description: In this presentation I share my 1-year journey with RISC-V and how I started from nearly zero and I ended up porting Guile's JIT library to RISC-V and starting the RISC-V port of Stage0. This journey is full of uncertainties and chaos but that's what finally made this happen. During this talk we'll discuss how embracing chaos can lead to great change and how we can become the source of positive chaos in people around us. This talk is not fully technical but many technical aspects are discussed as they are fundamental in the journey: instruction sets, assembly, debuggers, hexadecimal... and all sorts of low level wizardry will be mentioned and explained. I'll try to make my best to make all of it accessible to anyone with no previous knowledge about them, though.

uk: вхід без авторизації

name: A year of RISC-V adventures: embracing chaos in your software journey: How I started from zero and ended up porting a JIT compilation library and assembling files by hand


uk: Комп'ютерні науки

description: In this talk, we explore the design of Managarm's microkernel. Managarm is a pragmatic microkernel-based OS with a focus on asynchronous operations. The talk covers various aspects of the microkernel, such as its IPC model, resource management, and user space API. Managarm's microkernel employs a capability-based design to manage hardware resources. In contrast to current mainstream OSes, Managarm's system calls never block but report completion asynchronously whenever possible. This includes system calls for common tasks such as memory management or inter-process communication (IPC). A lock-free ring buffer is used to quickly deliver asynchronous completion notifications to user space. Managarm implements a POSIX subsystem to be able to run various well-known UNIX applications (e.g., a Wayland desktop) on top of the microkernel. This subsystem is implemented entirely in user space. The kernel uses various acceleration strategies to to efficiently support this use case.

uk: вхід без авторизації

name: Managarm: Design of a pragmatic fully-asynchronous microkernel


uk: Комп'ютерні науки

description: Serverless computing facilitates the use of resources without the burden of administering and maintaining infrastructure. The simplification of IaaS appears ideal (in theory) but providers and users are presented with several challenges: providers aim to reduce infrastructure maintenance overheads; users require isolation, flexibility and programming freedom. Serverless deployments are mostly backed by sandboxed containers. To enable programming freedom for users, providers allow the use of containers for function deployment, however, to ensure strict isolation, these containers are sandboxed in VMs. As a result, this bloated stack brings complicated maintenance costs: (a) several layers of abstraction between the user function to be executed and the actual execution environment; (b) increased attack surface; (c) increased request-to-exec time; (d) reduced set of feature availability for functions (hardware acceleration). Unikernels promise fast boot times, small memory footprint and stronger security but lack in terms of manageability. Additionally, Serverless frameworks only support containers. Moreover, unikernels provide a different environment for applications, with limited or no support for widely used libraries and OS features. This issue is even more apparent in the case of ML/AI workloads. ML/AI libraries are often dynamically linked and have numerous dependencies, which directly contradict the statically linked notion of unikernels. Finally, hardware acceleration is almost non-existent in unikernel frameworks, mainly due to the absence of suitable virtualization solutions for such devices. In this talk, we present the design of a flexible serverless framework designed for the cloud and the edge, backed by unikernels that can access hardware accelerators. We go through the components that comprise the framework and elaborate on the challenges in building such a software stack: we first present an overview of the necessary components of a serverless framework; then we focus on the function execution framework based on two popular unikernel frameworks; finally, we present a hardware acceleration abstraction to expose semantic acceleration functionality to workloads running on top of this framework. A short demo of the working components will be presented, discussing the challenges and trade-offs of this approach.

uk: вхід без авторизації

name: Hardware accelerated applications on Unikernels for Serverless Computing


UX/RT - a QNX-like OS based on seL4

uk: Комп'ютерні науки

description: UX/RT is a new QNX-like OS based on the seL4 microkernel, with improvements in security and reliability over mainstream systems as well as several features they lack, while still maintaining a high degree of compatibility with and comparable performance to existing operating systems. Similar to QNX, UX/RT will be a single-personality Unix-like OS with fast synchronous kernel IPC, a lightweight IPC transport layer, services looked up through the filesystem, and an avoidance of vertical modularity for most subsystems. I will introduce the general architecture of UX/RT and how it differs from existing operating systems, describe a few notable features, and explain why I consider it to be the best balance of practicality, performance, compatibility, and features.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: As tech lead on commercial UNIX at Bell Labs, an opportunity arose in 1988 to write a nano-kernel to end all nano-kernels, complete with an unhackable boot requirement. It was clear that a cryptographically secure chip level boot assistance was required, which guided subsequent patented ECC work at NeXT and Apple. Post Apple, in a “Social Purpose” company of his own, work has continued to fully realize this dream. The 1988 nanokernel had no threads and delivered messages across upcall channels to a thread simulation, yet that was unsatisfactory. The social element of phishing etc. is now the most feared secuirity breach, and in new work, discussed, the complete solution space is described, in the first half. New hardware is underway, solving such issues as weak memory models. In the second half of the talk, key lockless queuing primitives are discussed that form the basis fo a multi-core actor runtime (MART) to subsume most if not all duties of the executive. Far richer than a hypervisor, the executive manages memory in new manners, in a memory safe programmer nature. In practice, a single core actor runtime (START), running across 32, 64 arm, x86, and extensa cpu architectures is available. The language and runtime are destined to the Open Source world, unless the larger project, TheDew, makes file systems and databases obsolete in its first rollout, which will include unhackable identity. Ask: Join us!

uk: вхід без авторизації

name: Unhackable across 30 Years, End in Sight


uk: Комп'ютерні науки

description: GNU/Hurd is the original Free Software operating system started in the 1980s. Its microkernel design has been evolving over the years and the project has not quite hit mainstream use. I believe this is due to one main reason: the lack of drivers for peripherals and hardware. In this talk, I explain how NetBSD kernel drivers have been reused in a microkernel setting and demonstrate their use to boot up a GNU/Hurd system via a userspace rump disk driver, with a driverless Hurd kernel, gnumach. The ACPI management, PCI management, and actual driver are in separate processes with RPC interfaces between them, which separates out their debugging, licencing concerns and execution. I believe this aligns with the original vision for the operating system, (as a Hurd of servers).

uk: вхід без авторизації

name: A practical solution for GNU/Hurd's lack of drivers: NetBSD's rumpkernel framework


The Composite Component-Based OS

uk: Комп'ютерні науки

description: The Composite CBOS is in many ways a traditional micro-kernel. Services and policies are implemented at user-level, the kernel focuses on fast IPC, and it uses a strong capability-based access control mechanism. It has historically focused on being a research laboratory for strange features including a thread-migration-based IPC, user-level scheduling of system-level threads, user-level definition of capability policies, a wait-free kernel that scales linearly with increasing cores, and temporal capabilities to coordinate between untrusting schedulers. It also scales down and supports paravirtualized RTOSes on microcontrollers (with on the order of 64KiB SRAM, between 16 and 200 Mhz, and MPUs). Composite represents a design that deviates from the L4 lineage in some interesting ways. In this talk, we'll discuss the design with a focus on how the system provides the challenging combination of predictability, performance, and scalable parallelism.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Concurrent code is hard to get right, but at the same time also hard to test. It gets worse when hardware interaction is required. This leads to a comparatively poor culture of unit testing in kernel code, where both come together. In this talk, I’m going to highlight one particular method of unit testing the page table manipulation code in Hedron, a microkernel written in C++ specially geared towards virtualization workloads. This code safely modifies page tables that are concurrently used by the CPU. Usually, unit tests only check whether the state after an operation meets the expectation of the programmer. In contrast, Hedron employs completely deterministic unit tests that show that the CPU will always see a valid virtual memory mappings while a page table manipulation is in progress (for the tested cases). The goal of this task is to show that unit tests can be a powerful tool even for properties of code that are usually not deemed unit testable.

uk: вхід без авторизації

name: Advanced Unit Testing in the Hedron Microkernel


Genode meets the Pinephone

uk: Комп'ютерні науки

description: Driven by the vision of a truly trustworthy smartphone, I dedicated the past year to bringing the component-based Genode OS to the Pinephone. The talk presents my experience story, touching on the hardware, booting, the porting of the kernel, component-architecture concerns, and device drivers. Smartphones have become a commodity almost everyone relies on. With the convenience, however, comes complexity that is impossible to comprehend and constantly changing. The opaqueness of hardware and software puts the user in a subordinate position, making their devices - and by extension many aspects of their life - dependent on the decisions of a few dominant corporations. Our personal devices are constantly changing under our fingertips. Steady updates are presumably needed to stay secure, similar to how medicine is needed to stay healthy. But are the incentives of the platform providers aligned with my interests? I want my digital life healthy without a constant supply of medicine! To reinforce trust, both hardware and software must become transparent, traceable, and tractable. The Pinephone satisfies the urge for transparency of the hardware, thanks to publicly available schematics and documentation. However, the predominant software stacks - even though based on the open-source Linux kernel - are practically inscrutable because of their immense complexity. Genode's rigid component architecture promises to bring order and clarity - and thereby trustworthiness - to the software. Over the course of the past year, I pursued the combination of Genode with the Pinephone, diving deep into the Pinephone schematics, the SoC, booting, Genode's kernel, and device drivers. In my talk, I present the experiences made, touch on the use of Linux drivers directly on Genode, and draft a plan forward. The talk will be garnished by a demonstration.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: In this talk, I will present a new Spectre/Meltdown mitigation that I have prototyped for the Hedron microhypervisor. This prototype has also been used to quantify the runtime overhead of the proposed mitigation. Processor-level vulnerabilities, such as Meltdown and Spectre v1/v2, allow attackers in userspace to leak information from the kernel address space. This is particularly devastating for kernel designs where the kernel address space is identical for all processes and thus allows the attacker to break the system's confidentiality boundaries. Previous mitigation attempts, such as kernel page-table isolation (formerly KAISER) for Meltdown and various branch predictor/speculation barriers for Spectre v1/v2, introduce costly instructions into performance critical parts of the operating system kernel. Especially mitigations related to the branch predictor are only possible if the CPU vendor has exposed special functionality. During the last six months I investigated an alternative mitigation strategy on the kernel design level that shows good mitigation properties, but adds negligible runtime overhead. This alternative mitigation involves moving process-related information in the kernel into a process-local part of the kernel address space. A userspace attacker that can infer the content of its associated kernel page table can thus only read information about its own process. Switching between these kernel address spaces is done as part of the normal address space switch when a thread in a different process is scheduled and thus comes with no additional cost.

uk: вхід без авторизації

name: Mitigating Processor Vulnerabilities by Restructuring the Kernel Address Space


uk: Комп'ютерні науки

description: Unikernels are hard to debug? Unikernels cannot be easily administrated or monitored? While unikernels have the potential to revolutionize our infrastructures and take cloud computing into the next era, many worry that unikernels cannot be seamlessly integrated into today’s development and production workflows. At the Unikraft team, we are heavily working on addressing these concerns and changing the status quo. Although unikernels are monolithic bundles of only necessary kernel functions and an application, we follow the concept that everything is a (micro-)library. Users can pick and choose kernel functionality at build time. The same applies for monitoring and debugging: In this talk, we will give an overview of our current debugging and monitoring capabilities, and we will present our vision for how these pieces will enable a cloud-native experience. We will also give a deep dive into our GDB backend implementation with a live demo. Unikraft is an open source Xen Project incubator under the auspices of the Linux Foundation. We are currently launching a start-up with the mission to provide Unikraft unikernels for production and enterprise use.

uk: вхід без авторизації

name: Unikraft: Debugging and Monitoring: Everything beyond printf()


uk: Комп'ютерні науки

description: At least since the final Multics report in 1977, researchers identified the ability to isolate kernel subsystems as a critical mechanism for increasing the reliability and security of the kernel. Unfortunately, despite many attempts to introduce isolation to the kernel, modern systems remain monolithic. Historically, software and hardware mechanisms introduce a prohibitively high overhead for the isolation of subsystems with the tightest performance budgets. Today, however, the balance of isolation and performance is starting to change with the development of Rust, arguably, the first practical programming language that achieves safety without garbage collection. RedLeaf is a new operating system developed from scratch in Rust with the goal to explore the impact of language safety on operating system organization, and specifically on the ability to utilize fine-grained isolation and its benefits in the kernel. In contrast to commodity systems, RedLeaf does not rely on hardware address spaces for isolation and instead uses only type and memory safety of the Rust language. Departure from costly hardware isolation mechanisms allows us to explore the design space of systems that embrace lightweight fine-grained isolation of kernel subsystems. We develop a new abstraction of a language-based isolation domain that implements a unit of information hiding and isolation of faults. Domains can be dynamically loaded and cleanly terminated. Building on RedLeaf isolation mechanisms, we demonstrate the possibility to implement end-to-end zero-copy, fault isolation, and transparent recovery of device drivers. To evaluate the practicality of RedLeaf abstractions, we implemented a subset of the POSIX interface as a collection of RedLeaf domains. RedLeaf's isolation mechanisms allow us to support the transparent recovery of device drivers. To demonstrate that Rust and fine-grained isolation introduce a practically-acceptable overhead, we develop efficient versions of 10Gbps network and PCIe-attached solid state-disk NVMe device drivers that match the performance of carefully-optimized kernel-bypass device drivers used in modern network and storage processing frameworks.

uk: вхід без авторизації

name: RedLeaf: Isolation and Communication in a Safe Operating System


uk: Комп'ютерні науки

description: Both software-defined radio and FPGA are interesting. Especially, the combination of AD936X RF transceiver and ZYNQ 7020 level FPGA SoC is capable of running openwifi. Price has been keeping average DIYers away from this kind of platform as evaluation boards from ADI and Xilinx are both extremely expensive. Cheaper ones like ANTSDR exist, but seems all of them have tied the RF and ZYNQ chip together, so these are not suitable for generic ZYNQ development anymore. In this talk, I want to introduce an openwifi capable low-cost AD936X extension board design and realization for the wildly available PYNQ-Z1 board by Digilent. This provides openwifi and PlutoSDR functionalities meanwhile keeping the major if not all functions of PYNQ-Z1 intact, with summed price potentially lower than all currently available openwifi capable platforms. Similar designs may also be applicable to other ZYNQ boards like ZYBO Z7-20 or Arty Z7-20, thus these could make openwifi available to much more people, especially those who already have a ZYNQ board. Besides this extension board, I'll also touch on tools and workflows for "modern" circuit board DIY, which enabled me to build this 4-layer board with BGA chip comfortably at home. For more about openwifi, please visit the Free Software Radio devroom for "Opensource WiFi chip (openwifi) progress and future plan" on Sunday afternoon.

uk: вхід без авторизації

name: Bring openwifi to PYNQ-Z1 with ultra low cost


FOSDEM 2022 - Welcome to Libadwaita

uk: Комп'ютерні науки

description: GTK4 is finally ready for production, and with it comes Libadwaita, the next generation of the GNOME app development platform. This new library builds on what Libhandy did for GTK3 but takes it even further, streamlining many of the most common things app developers need to build great apps for GNOME, across both desktop and mobile. This includes standardized patterns and widgets for basic layout elements like lists and cards, adaptive navigation, touch/touchpad gestures, easier ways of using color in apps, and much more. This talk will give a quick overview of the current capabilities of the platform, and show how app developers are making use of it to build apps that work well on computers of all shapes and sizes.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: In this talk we will take a look at the anatomy of GNOME Calls. We will cover libraries used and how Calls interacts with them to provide call functionality and other things you'd expect from a dialer application.

uk: вхід без авторизації

name: Anatomy of GNOME Calls: What goes into making a call in GNOME Calls


uk: Комп'ютерні науки

description: Camera support has traditionally been a pain point when it comes to Linux phones. Years and years of competition on the photography capabilities of consumer devices have pushed vendors to adopt more and more custom, closed source implementations, leaving users of free software powered mobile devices with nothing but poor solutions limited to work on the single devices they have been developed for. With the increasing maturation of libcamera, a complete user space camera stack for Linux devices is now finally available, and Linux phones developers can now cooperate on more mature camera solutions for their devices. The BoF will serve for phone developers and camera developers as a cooperation space, to better understand their mutual needs and move forward camera support for the whole Linux ecosystem. Cameras have traditionally been a distinguishing factor in the traditional mobile/smartphone market. Year after year the number of pixels available in a phone's camera have become a stable part of the phone producers marketing material and as a direct consequence of such fierce competition everything around cameras has usually been quite secretive, with vendors implementing rather cumbersome software architectures to work around the software licensing requirements which would have otherwise required them to open at least part of what they consider their secret sauces. Vendor's reluctance to discuss and innovate in a common shared space and the undeniable deficiencies (or better, the complete lack of existence) of anything resembling a camera stack in the Linux ecosystem has pushed camera support to a quite uncomfortable position when it comes to FOSS-powered mobile devices. Until very recently nothing comparable to what could be achieved by a rather cheap Android phone, running binary blobs both in user and kernel space, can be easily realized by using a fully open infrastructure. Three years after starting of the libcamera project, its adoption as the default camera stack for the Raspberry Pi ecosystem and its increasing permeation in the x86 device space thanks to the support of vendors like ChromeOS and a more robust integration in Pipewire, it's now time to finally address the camera issue in the FOSS phone space. With the recent interest from Librem5 and Pinephone communities in the project, this BoF intends to provide a space where phone developers, libcamera developers and hopefully vendors can discuss their mutual headaches and try to sketch a way forward in order to provide to free-software equipped mobile device a camera support that can do more than what an Android phone was capable of 10+ years ago.

uk: вхід без авторизації

name: Status of camera support on mobile FOSS devices: An open discussion about the state of cameras on Linux-powered mobile devices


FOSDEM 2022 - Closing Session

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Most Kobo/Tolino readers offer a well marked console port and often a second UART. If they are not water resistant, they offer an internal µSD card slot containing the whole operating system and bootloader so that sounds like an invitation to do something interesting with them besides just reading books. Especially in prolonged outdoor activities, the display and their low power consumption have their merits. Hardware is quite similar, so you also have chances to get a replacement next corner. Several devicetrees and also some drivers made their way into mainline linux now, on others upstreaming work is in progress. Support is starting to find its way into mobile linux distributions like postmarketOS and graphics start to work with standard APIs. In this talk I talk about my experiences, especially the current state of support in mainline linux, what is missing and what are the challenges. I will also talk about requirements for the graphics userspace and shortly present my favorite use case: displaying maps.

uk: вхід без авторизації

name: The road towards using regular linux on ebook readers: Experiences and progress with Kobo/Tolino readers


Librem 5 phone kernel report

uk: Комп'ютерні науки

description: In this little talk I want to summarize what we've done, describe how we do it and put it into perspective a bit. I'll outline rough future plans and of course encourage to participate in case you own that phone.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The Qualcomm Snapdragon 410 (msm8916) is a SoC that was used in many smartphones and tablets around 2015. It is the most mature "aftermarket" platform postmarketOS can offer at the time of writing. Many of the supported devices are quite usable and have most of the expected features like phone calls and mobile data working. The talk goes over some of the most important challenges that we have faced while supporting those devices and describes the ways in which we have solved them. Apart from the Linux kernel, we focus on various other tools and projects like lk2nd - a shim bootloader that prepares the environment for booting Linux and hides some device-specific quirks from the kernel. It also unifies the boot and installation process on all devices. We also have other tools and resources to make porting easier. Those include various documentation or even a fully automated display driver generator that helps with the fact that each display requires unique initialization.

uk: вхід без авторизації

name: Running Mainline Linux on Snapdragon 410: How we support over 25 devices in postmarketOS


uk: Комп'ютерні науки

description: Explaining a brief history of Linux on Qualcomm devices, how we got to where we are today and what will come in the future. With a specific focus on the OnePlus 6 and other SDM845 devices with mainline Linux support. As well as what exciting things the future holds!

uk: вхід без авторизації

name: From Android to mainline on the Snapdragon 845: Extending the life of Android devices with upstream kernels and postmarketOS


Mainlining the reMarkable 2 eInk tablet

uk: Комп'ютерні науки

description: The reMarkable 2 is an eInk tablet, based on the i.MX7 SoC. The tablet ships with a fork of the 4.14 kernel and a custom rootFS built with OpenEmbedded. The vendor kernel is based on the NXP vendor kernel with a large collection of rM2 specific patches on top. This talk discusses the process of adding support for the rM2 to the mainline Linux kernel. The talk first discusses the process of understanding the original boot process and then getting access to a download mechanism and serial console. Finally the talk covers the process to start upstreaming the patches from a vendor kernel to the mainline kernel.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The Mobian project was initiated a few days prior to FOSDEM'20, back when the first PinePhones (BraveHeart edition) were arriving in the hands of developers and enthusiasts. From a single-person weekend project aimed at running Debian on one specific device, to one of the major mobile Linux distributions, let's board into a journey through the past, present and future of Mobian! Mobian started as a collection of hacks and scripts for running Debian on the PinePhone. Initially published as "Debian+Phosh" on the PINE64 forum, all packages were manually (cross) compiled and uploaded to the developer's personal web server. Over time, it gathered a strong community of users and developers and ultimately gained recognition from the wider mobile Linux community, to the point where it partnered with PINE64 to release a "Mobian Community Edition" PinePhone. Over the course of its 2 years of existence, the project implemented tools to ease development and automate deployment, and added support for more mobile devices, such as Purism's Librem 5, but also Surface Pro tablets and a few Android phones such as the OnePlus 6 and Pocophone F1. This talk will walk you through those 2 years of development, highlighting the project's contributions to the (mobile) FLOSS ecosystem. We will also emphasize how its members work, as part of the DebianOnMobile team, towards its ultimate goal of becoming irrelevant by making Debian a reference distribution on mobile devices. Finally, we will give you an update on the project's current status and plans.

uk: вхід без авторизації

name: 2 Years of Mobian: Birth and growth of a mobile Linux distribution


ModemManager in your phone

uk: Комп'ютерні науки

description: ModemManager provides a general purpose WWAN management stack, which has served as default WWAN management system for standard GNU/Linux distributions for the last 10 years, primarily focused on providing data connectivity to laptops and desktops. In addition to that, different teams building phones with FOSS operating systems have also considered ModemManager as a good tool to take responsibility for the full data and voice call management in phones, primarily because it supports a broad range of devices and systems: not only standalone WWAN modules, but also WWAN stacks integrated in Qualcomm SoCs. This talk will provide an overview of the current state of integration of ModemManager in phones, and what's expected in future releases.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: You're contributing to Phosh or its wider ecosystems as designer, translator, distribution packager, tester or developer (or intend to do so)? Then join us at this get together. There's no formal schedule, it's just about meeting other people since we can't have a RL meeting.

uk: вхід без авторизації

name: Phosh Contributors Get Together: Get to meet the other Phosh contributors


Linux Mobile vs. The Social Dilemma

uk: Комп'ютерні науки

description: As FOSS on mobile community, let's do our part to fix the many negative effects of social media and its hostile design patterns. We could become the prime example of how to treat users with respect. To not only give them control over their phone, but also over their attention. From design choices in the operating systems and apps to the platforms we choose to communicate about development.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Short overview of how Searchfox works, how to use it on other projects, planned improvements, and how to contribute to it.

uk: вхід без авторизації

name: Searchfox: Fast code search and indexing


uk: Комп'ютерні науки

description: Foxfooding is Mozilla's internal dogfooding process that includes both employees and community members. The goal is to encourage all Mozillians to give early feedback about the products that we are shipping, in an open and collaborative way.

uk: вхід без авторизації

name: Introduction to Foxfooding: A story about how Mozillians test and give feedback for products before release


uk: Комп'ютерні науки

description: Common Voice is a project to help make voice recognition open and accessible to everyone. To create this data set Common Voice allows volunteers to record defined sentences to contribute their voice. A good data set needs a lot of recordings, and therefore we need to have a lot of sentences to be read out aloud. In this talk Michael will introduce the audience to several ways we are collecting these sentences and goes into more technical detail for these mechanisms. This talk will also feature an intro to Common Voice at the beginning.

uk: вхід без авторизації

name: Collecting Sentences for Common Voice: Collecting Sentences through different means to allow others to record voices for them


uk: Комп'ютерні науки

description: As one of the earliest large FLOSS projects, Mozilla had a strong and growing community of volunteer contributors for a long time. Then, a lot of factors leading up to today led to the environment changing very significantly, and today's community has some good groups in some areas, but not the kind of connected movement that existed in those earlier times. The speaker has been part of all of that development, starting off as a volunteer very early in the project, working on Mozilla staff for a few years in between, and still being part of the volunteer community in recent years. From that point of view, he'll bring up some ideas and suggestions on how this community can become stronger and grow again, so that a significant voice for the Open Web and the Mozilla Manifesto will hopefully be out there also in the future.

uk: вхід без авторизації

name: Suggestions for a Stronger Mozilla Community: Personal Thoughts and Ideas for Possible Improvements


uk: Комп'ютерні науки

description: This talk will go through recent highlights of Thunderbird development. What are we working on for the mid 2022 release.

uk: вхід без авторизації

name: Thunderbird in 2022: Highlights of Thunderbird plans for this year.


uk: Комп'ютерні науки

description: In this session, we’ll see why we adopted OpenTelemetry & its collector for an internal platform at Ubisoft - to collect/process/export all our logs, metrics, and traces. We’ll explain how we handled the required mindset change: why people should instrument more their code, and how to onboard them. And of course, we’ll talk about the benefits of fully adopting OpenTelemetry. The intended audience is people who want to adopt OpenTelemetry, or who are already using part of it - for example the SDK for tracing - and are considering a full switch.

uk: вхід без авторизації

name: Adopting OpenTelemetry and its collector


Profiling in the cloud-native era

uk: Комп'ютерні науки

description: Continuous profiling is a widely used practice at Google but has only recently started gaining popularity in the Observability space, however, resources on this topic are still rare compared to other observability signals especially on open source projects. This talk intends to educate the wider community about the possibilities of continuous profiling, and give a glimpse into open-source tooling allowing everyone to join in on the practice and enabling everyone to build better software. For years Google has consistently been able to cut down multiple percentage points in their fleet-wide resource usage every quarter, using techniques described in their “Google-Wide Profiling” paper. Ad-hoc profiling has long been part of the developer’s toolbox to analyze CPU and memory usage of a running process, however, through continuous profiling, the systematic collection of profiles, entirely new workflows suddenly become possible. Matthias will start this talk with an introduction to profiling with Go and demonstrate via Parca - an open-source continuous profiling project - how continuous profiling allows for an unprecedented fleet-wide understanding of code at production runtime. Attendees will learn how to continuously profile code to help guide building robust, reliable, and performant software and reduce cloud spend systematically in various languages.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Monitoring and Observability devroom: Opening


uk: Комп'ютерні науки

description: A gentle introduction to Observability and how to setup a highly available monitoring platform across multiple datacenters. During this talk we will investigate how we can setup and monitor an monitoring setup across 2 DCs using Prometheus, Loki, Tempo, Alertmanager and Grafana. monitoring some services with some lessons learned along the way.

uk: вхід без авторизації

name: Bootstrapping a multi dc cloud native observability stack


uk: Комп'ютерні науки

description: Backup and restore methods are concepts that everyone knows the importance of. Over the years, open-source tools emerged like MyDumper, Xtrabackup, and Mariabackup. Also, with MySQL 8 new shell, new utils for dump and restore were introduced as well. In this presentation, we are going to compare the newest backup/restore methods with the most used ones. We will see how parallelization can influence the speed of backup and restore process and also how the compression algorithms can influence the performance. In this talk, we will compare mysqldump, mydumper/myloader, mysqlpump, MySQL Shell utils, and Xtrabackup.

uk: вхід без авторизації

name: Backup/Restore tools performance comparison


uk: Комп'ютерні науки

description: This presentation introduces the major topics and most important points of the new book Efficient MySQL Performance published by O’Reilly (Dec. 2021). And like the book, this presentation is intended for software engineers using MySQL, not managing it (but DBAs are gladly welcomed). In 40 minutes, we’ll quickly cover topics including query metrics, indexes and indexing, data access patterns, server metrics, and more. At the end, you’ll have a “lay of the land” for understanding the aspects of MySQL that affect performance, and you’ll understand where to go and what to learn next to increase performance.

uk: вхід без авторизації

name: Efficient MySQL Performance: A Book in 40 Minutes


uk: Комп'ютерні науки

description: Keeping your data secure is an important task of the DBA. We protect our servers, encrypt filesystems and/or datafiles. But what about log files? And especially log files that contain actual data such as the MySQL binary or relay logs. These are technically called log files but they contain the actual data going through your MySQL systems for replication purposes. I will describe how you can enable and use them and also, in case of disaster, how you can recover your encrypted binary logs so you can use them for point in time recovery.

uk: вхід без авторизації

name: Encrypting binary (and relay) logs in MySQL


uk: Комп'ютерні науки

description: MySQL InnoDB ClusterSet brings multi-datacenter capabilities to our High Availability solutions and makes it very easy to set up a disaster recovery architecture. Think multiple MySQL InnoDB Clusters into one single database architecture, fully managed from MySQL Shell, and with full MySQL Router integration to make it easy to access the entire architecture. In this session, we will cover the various use-cases and features of InnoDB ClusterSet while guiding you on how to set it up from an existing InnoDB Cluster, extend it, manage it, and deal with the various possible failures, all using Shell's AdminAPI. We will also cover each individual feature of MySQL Router integration which makes connections to the database architecture easy.

uk: вхід без авторизації

name: MySQL InnoDB ClusterSet: The integrated solution for disaster recovery of InnoDB Clusters


uk: Комп'ютерні науки

description: We will explore the latest component services offered by the server. And then we will check how one can use the table access service to make a HTTP server component that allows access to table data via HTTP without a middle-man. The MySQL development team is constantly adding new and very useful component services. These can be leveraged by creative component authors to produce useful MySQL server add-ons. Check the latest additions to the service list and see some of them in action through a HTTP server component that serves table data.

uk: вхід без авторизації

name: Newest MySQL component services features: or how to make an HTTP server accessing table data in a component


uk: Комп'ютерні науки

description: For years CPU choice for MySQL was pretty boring - just chose what Intel Made CPU you want. In recent years the situation changed with AMD producing very competitive Server grade CPUs and ARM going from being the leading CPU manufacturers for low-power gadgets to being inside some of the highest performance server chips. In this presentation, we will look into current CPU choices through MySQL Lense - which CPUs provide the best performance for single threaded and high concurrency workloads and which help to achieve the best price/performance.

uk: вхід без авторизації

name: MySQL Performance on Modern CPUS - Intel, ARM, AMD


uk: Комп'ютерні науки

description: Flame graph is way to visualize profiling data that allows the most frequent code paths to be identified quickly and accurately. They can be generated using Brendan Gregg's open source programs on github.com/brendangregg/FlameGraph, which create interactive SVG files to be checked in browser. The source of profiling data does not really matter - it can be perf profiler, bpftrace, Performance Schema, EXPLAIN output or any other source that allows to convert the data into the expected format of comma-separated "path" plus metric per line. Different types of Flame Graphs (CPU, Off-CPU, Memory, Differential etc) are presented. Various tools and approaches to collect profile information of different aspects of MySQL server internal working are presented Several real-life use cases where Flame Graphs helped to understand and solve the problem are discussed.

uk: вхід без авторизації

name: Flame Graphs for MySQL DBAs: Yet another way to visualize performance data


Hash join in MySQL 8.0

uk: Комп'ютерні науки

description: Hash join was introduced in MySQL 8.0.18 and was presented for the first time at FOSDEM 2020. Since then, the performance of hash join has been improved, and I will present results that show this. We will also discuss what kind of queries benefit from hash join, what you need to do for hash join to be used, and how to tune your system for optimal hash join performance.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The constant pressure to move DATA in containers and Kubernetes is creating a lot of confusion and misunderstanding. This is particularly dangerous when talking about Relational Database Management System. MySQL, as well as Oracle, Postgres or SQL Server, is a RDBM, as such subject to the erroneous interpretation caused by this new crazy shining things that will solve all. In this short talk we will clarify, that first of all, we are not looking to something new and second why we need to be very careful when talking about using Kubernetes and containers for RDBMS.

uk: вхід без авторизації

name: MySQL on Kubernetes demystified: How foolishness can lead you to fell in a very dangerous trap


MySQL Operator for Kubernetes

uk: Комп'ютерні науки

description: On both, public and private clouds, Kubernetes is the most commonly used Orchastration framework for managing cloud services. Aside from management of microscervices it can be extended with operators for managing more complex services. The new MySQL Operator for Kubernetes is such an operator, automating MySQL InnoDB Cluster Management inside Kubernetes and integrated product of the MySQL product family. In this session lead developer Johannes Schlüter will discuss how the MySQL Operator works and how it can automate deployment and management of InnoDB Cluster inside Kubernetes.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Logical dumps are becoming popular again. MySQL Shell parallel dump & load utility changed to way to deal with logical dumps, certainly when using instances in the cloud. MySQL 8.0 released also an awesome physical snapshot feature with CLONE. In this session, I will show how to use these two ways of saving your data and how to use the generated backup to perform point-in-time recovery like a rockstar with MySQL 8.0 in 2022!

uk: вхід без авторизації

name: MySQL 8.0: Logical Backups, Snapshots and PITR like a rockstar


uk: Комп'ютерні науки

description: The new releases of MySQL Server in 2021 had some very interesting changes. This session covers the highlights, the contributions, and changes made during the last year. After 25 years of MySQL, there are still plenty of new features in the code. This is a quick catchup for those who have not perused the release notes.

uk: вхід без авторизації

name: Release Note Highlights from 2021: Recap '23 to '27


ProxySQL 2021 Dev Submit

uk: Комп'ютерні науки

description: ProxySQL has proven itself as the de-facto standard reverse proxy for MySQL, yet, we are always looking for new features and improvements. During this past year starting with v2.1.0, four new major ProxySQL versions were released, and with them new features of all sorts were introduced, ranging from protocol changes, authentication improvements, clustering improvements, new monitoring features (for Galera, Group Replication, Aurora AWS) to DDOS protection. Join us for a deeper dive on the details of these (and more) new features, what they have to offer and how you can get the most out of them.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: As a reverse proxy for MySQL databases, ProxySQL is being used in various infrastructure sizes and it is not surprising to see deployments with thousands of nodes running. Such large deployments introduce some interesting challenges because nodes can be initialized or destroyed at any time. This session will describe the challenges in configuring such large deployments of nodes, the most common external tools to configure ProxySQL, and then focus on improved ProxySQL native clustering solutions that allows auto-discovery, bootstrap, and a distributed decentralized reconfiguration.

uk: вхід без авторизації

name: ProxySQL Cluster: challenges and solutions to synchronizeconfigurationacross multiple decentralized cluster nodes


uk: Комп'ютерні науки

description: Performing simple DDL operations as ADD/DROP INDEX in a tightly connected cluster as PXC, can become a nightmare. Metalock will prevent Data modifications for long period of time and to bypass this, we need to become creative, like using Rolling schema upgrade or Percona online-schema-change. With NBO, we will be able to avoid such craziness at least for a simple operation like adding an index. In this brief talk I will illustrate what you should do to see the negative effect of NON using NBO, as well what you should do to use it correctly and what to expect out of it.

uk: вхід без авторизації

name: Percona XtraDB Cluster(PXC) Non blocking operations, what you need to know to avoid pitfalls


uk: Комп'ютерні науки

description: Relational databases have invested in the performance of the relational model, but not as much in developer flows, creating an operational barrier driving developers away. We present an improved paradigm that brings back ownership into developers hands, illustrated by recent developments in Vitess. The relational model is one of the oldest surviving models in computer science. But while relational databases have evolved to meet modern load, throughput and scalability needs, they have not evolved as much to meet developers' needs. The schema, at the heart of the relational model, remain a major operational blocker in modern development flows. Developing and deploying schema changes is unlike any other development and deployment flow in practice today. Operational complexity and constraints, lack of conflict resolution, difficulty or inability to undeploy, and the need to understand database internals, all make relational schema development deter developers, who look for other solutions elsewhere. In this session we will review these impediments and how they came to be, and offer a modern take, that gives developers back their ownership of their data and flows. Recent developments in Vitess, an open source CNCF project, introduce new capabilities that change the relational development paradigm. We will discuss: - Development flow: hiding the operational complexity - Deployments and scheduled schema migrations - Undeploy: revertible changes - Align schema and code: declarative schemas, idempotent deployments, and version control

uk: вхід без авторизації

name: The relational model in the modern development age: Towards an improved operational paradigm, illustrated by Vitess


uk: Комп'ютерні науки

description: As Edge deployments move closer towards the end devices, low latency communication among Edge aware applications is one of the key tenants of Edge service offerings. In order to simplify application development, service mesh architectures have emerged as the evolutionary architectural paradigms for taking care of bulk of application communication logic such as health checks, circuit breaking, secure communication, resiliency (among others), thereby decoupling application logic with communication infrastructure. The latency to throughput ratio needs to be measurable for high performant deployments at the Edge. Providing benchmark data for various edge deployments with Bare Metal and virtual machine-based scenarios, this paper digs into architectural complexities of deploying service mesh at edge environment, performance impact across north-south and east-west communications in and out of a service mesh leveraging popular open-source service mesh Istio/Envoy using a simple on-prem Kubernetes cluster. The performance results shared indicate performance impact of Kubernetes network stack with Envoy data plane. Microarchitecture analyses indicate bottlenecks in Linux based stacks from a CPU micro-architecture perspective and quantify the high impact of Linux’s Iptables rule matching at scale. We conclude with the challenges in multiple areas of profiling and benchmarking requirement and a call to action for deploying a service mesh, in latency sensitive environments at Edge. The pervasiveness of Edge computing and Service Mesh constructs within a cloud native environment have almost been at the same time during last few years. Requirements of Edge compute to be able to unify both Information & Communication Technology (ICT) and Operational Technology (OT) have brought together cloud native deployments and microservice based service offerings to the Edge infrastructure]. While Kubernetes been the most popular model of deploying cloud native infrastructure to offer software services, service mesh is the emergent application deployment paradigm that decouples application from developing most of the software defined networking aspects of microservice interactions. This paper introduces features of service mesh that are architecturally suitable for Edge compute service offerings and application development principles. To understand applicability of service mesh, architectural principles need to be understood to figure out suitability of various benefits mesh benefits to customized Edge deployments. This talk introduces and correlates various Edge requirements to the service mesh’s architectural guidelines. Then further dig into deployment considerations of service mesh with Edge deployment types to provide practical communication challenges between the two. This talk: - Provides benchmark tests and their results that provides the impact of service mesh on simple Kubernetes based deployments using Istio & Envoy as service mesh and its sidecar proxy, that can be leveraged for Edge environments. - Provides detailed analysis of the software used to identify bottlenecks using Top-Down Microarchitectural Analysis and CPU Hot Spot analysis. - Summarizes the gaps identified during the detailed testing of these open-source components - Showcases the impact of utilizing service mesh for edge computing.

uk: вхід без авторизації

name: Challenges and Opportunities in Performance Benchmarking of Service Mesh for the Edge


uk: Комп'ютерні науки

description: Wouldn’t it be great to be able to dabble with Kubernetes, Calico, BGP, and WireGuard in a totally safe, totally zero-cost, and easily (!!) reproducible local laptop or workstation environment? If you agree, I’m here for you. In this engaging, hands-on and fun session I’ll share with you how I built two four-node Kubernetes clusters, peering with BGP, forwarding with WireGuard, all inside my laptop, and how you can do the same, for fun, learning, and profit. Or, well, just fun and learning, actually. When working with these technologies (especially BGP), cost, risk and complexity are the usual barriers to learning. Let's remove them and get back to enjoying our learning.

uk: вхід без авторизації

name: 2-cluster Kubernetes, with Calico, BGP Interconnect and WireGuard... All Without Leaving Your Laptop!


uk: Комп'ютерні науки

description: DPDK added a RCU library with a novel method to reclaim resources. We have been running tests to understand the performance differences between the DPDK RCU and the user space RCU library. In our tests, we find that DPDK RCU can perform reclamation faster and perform significantly better when pre-emptive readers are involved. Other than the performance, DPDK RCU has several advantages such as not requiring a background thread for reclaiming resources and the ability to integrate with existing libraries without having to modify the application. This talk will present various testing done on DPDK RCU and the user space RCU library and their results. It will go into the details of pre-emptive reader problem, which affects use cases beyond DPDK, and show that DPDK RCU library can reduce the reclamation time

uk: вхід без авторизації

name: Faster memory reclamation with DPDK RCU: Comparing the DPDK and Userspace RCU libraries


uk: Комп'ютерні науки

description: VPP (aka Vector Packet Processing) is a fast network stack running in Linux userspace. It is designed to handle packets with high performance, which makes gathering statistics efficiently a must have. The model that has been chosen in VPP to provide up to date statistics is built upon shared memory and optimistic locking. The counters are updated in this shared memory at a rather low cost by the data plane and can be read out at almost any time by all the consumers. We will first describe this model in more details. The consumption of these stats may take various forms depending on the use case and the application needs. That's why we have developed different high-level components to access them: 1) A filesystem in userspace: thanks to go-fuse, we can mount a filesystem ordering statistics in folders and files, in a similar fashion to '/proc' in Linux 2) A Prometheus agent: applied to Calico/VPP, a new dataplane for Calico - the popular cloud native Kubernetes network plugin - based on VPP. Prometheus is integrated as a monitoring tool in order to export our statistics in the form of real-time metrics collected from targets. Metrics come from our pod interfaces statistics, and targets are Calico/VPP agents running on our Kubernetes cluster nodes. During the presentation, you will have a quick demo of these components.

uk: вхід без авторизації

name: Keep appetite for the stats, it costs nothing: Presentation of the statistics consumption model in VPP from the costless low-level design to their exploitation in userspace


uk: Комп'ютерні науки

description: Kubernetes is great, containers are lightweight & disposable, networking is simple yet powerful. But when it comes to network oriented applications, oh that can be slow! That's how the Calico/VPP integration first came up, as a way to address performance bottlenecks, making VPP's performance the motor of Calico's functionalities in Kubernetes. It speeds up container networking, but also allows us to expose even faster functionalities directly to the applications. So with this in place, how can we go even faster, while still preserving the Kubernetes abstractions ? We'll present how applications can leverage userspace interfaces, what this allows regarding network performance & additional functionalities and how the Calico/VPP integration makes this happen under the hood.

uk: вхід без авторизації

name: Kubernetes networking : is there a cheetah within your Calico?: Even faster kubernetes clusters with Calico, VPP and memif


uk: Комп'ютерні науки

description: libp2p is a universal, cross-platform, multi-language, modular peer-to-peer networking library powering multiple large-scale networks, for example IPFS. In the first part of the talk we’ll present the basic building blocks of the library and explain how they fit together. In the second part, we’ll take a closer look at the recently added decentralized hole punching feature, allowing NAT and firewall traversal without the need for any central coordination servers (STUN and TURN).

uk: вхід без авторизації

name: Peer-to-peer hole punching without centralized infrastructure: How libp2p can traverse NATs and firewalls without coordination through central STUN and TURN servers.


uk: Комп'ютерні науки

description: Security and monitoring applications need to classify traffic in order to identify applications protocols, misuses, similarities, communications patterns not easily identifiable by hand. nDPI is a library that implements various algorithms for traffic analysis able to detect outliers, anomalies, traffic clusters, behavioural changes efficiently in streaming (i.e. while traffic is flowing). Goal of this presentation is to show how nDPI can be used in real life to inspect network traffic and spot patterns worth to be analysed in detail. Modern network security and monitoring applications need to analyse traffic efficiently in streaming fashion (i.e. while traffic is flowing). This is in order to detect interesting traffic patterns in realtime without dumping data on a database and performing computationally expensive queries in batches. Many network developers do not have skills for efficiently analyse traffic, and data scientists often do not have skills to understand the complex nature of network traffic. For this reason nDPI, a popular open-source deep packet inspection library, has been enhanced with various algorithms and techniques that dramatically simplify traffic analysis and that should ease the creation of applications able to efficiently spot traffic patterns and anomalies. This talk will introduce some of these algorithms present in nDPI and show how they can be used in real-life at high-speed, contrary to many applications that are inefficient and often based on languages (e.g. Python and R) that are not designed to analyse traffic in streaming at 10 Gbit+ on commodity hardware.

uk: вхід без авторизації

name: Network Traffic Classification for Cybersecurity and Monitoring


uk: Комп'ютерні науки

description: A rules-based approach has been the standard in network monitoring for many years, for a good reason. In this talk, we'll recap the advantages of a rule-based approach and how it's still relevant to this day. The speaker will also show how you can implement rules using Checkmk, an open source IT monitoring software and discuss the entry of AI technology into infrastructure monitoring.

uk: вхід без авторизації

name: Why rule-based monitoring is (still) great


uk: Комп'ютерні науки

description: This is a talk about Nim's concurrency mechanisms, how the old things worked, how the current things work and what the future holds.

uk: вхід без авторизації

name: Nim concurrency & Parallelism: Past, Present and Future


Nim Metaprogramming in the real world

uk: Комп'ютерні науки

description: Metaprogramming in Nim is very powerful. But why would you use it? How is it used in the real world? We will explore the "power levels": starting from generics, continuing to templates and finally arriving at macros. We will first look at generics usage in VMath (Vector Math Library) and Jsony (JSON Parsing Library). Then we will continue on to templates and how they are used in VMath and Windy. Finally we will look macros, the top of the "power levels", and how they are used in Shady (a Nim to GLSL compiler) and Genny (Generates bindings for Nim libraries).

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk builds on my previous talks about micro-controller programming in Nim, and my talk on writing a keyboard firmware from scratch in Nim. It outlines how a Nim ecosystem for microcontrollers can be built with zero-cost abstractions which means that the resulting code is almost exactly the same size as pure C code (no Arduino). All this while keeping an interface which is much nicer than anything you'd find in C, maybe even better than that of high-level microprocessor coding frameworks like MicroPython and TinyGo.

uk: вхід без авторизації

name: Next generation micro-controller programming: Zero-cost abstractions for better embedded programming


uk: Комп'ютерні науки

description: Enu is a 3D live coding environment that can be used for education, exploration, and light game development. It uses a simple, logo-style Nim DSL, and aims to be accessible to as many people as possible, even those who may not yet be able to read or type. It's still fairly immature, but will eventually be suitable for implementing simple multiplayer 3D games. In this presentation, Enu's creator will walk through creating a simple 3D game with his 6 year old son using Enu 0.2.

uk: вхід без авторизації

name: Potato Zombies: Helping a 6 year old build a 3D game using Enu and Nim


uk: Комп'ютерні науки

description: Sorbonne Université, in collaboration with Chips4Makers and LibreSOC are working to provide a complete FOSS toolchain to make ASICs in mature technological nodes, that is, no smaller than 130nm. We take a circuit description in HDL, synthetize with Yosys but instead of targetting a FPGA, use an ASIC standard cell library to get the RTL description. From there, with Coriolis2, we perform the classical steps of a RTL to GDSII flow, that is, placement, routage along with very basic timing closure. We will particularly focus on last year progresses and present the planned improvements and new features for 2022.

uk: вхід без авторизації

name: Coriolis RTL-to-GDSII Toolchain: State of advancement and planned improvements


Efabless Open ASICs

uk: Комп'ютерні науки

description: This presentation by Mohammed Kaseem, the CTO of e-Fabless, will outline how e-Fabless is empowering Libre/Open VLSI Hardware development. There are two initiatives: ChipIgnite which provides significantly-reduced cost Shuttle runs, and the Google-sponsored Skywater 130nm Programme.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: - An overview of the minimal process flow - Talking about ways to implement it in a garage/shipping container environment.

uk: вхід без авторизації

name: Using LibreSilicon: How to actually use the process and scaling it


uk: Комп'ютерні науки

description: It's 2022 and we still use logs to debug production issues? All the unit tests in the world, the largest QA team still can’t stop bugs from slithering into production. With a distributed microservice architecture debugging becomes much harder. Especially across language & machine boundaries. APMs/Logs have limits. There’s a new generation of tools in town… Production bugs are the WORST bugs. They got through unit tests, integration tests, QA and staging… They are the spores of software engineering. Yet the only tools most of us use to attack that vermin is quaint little log files and APMs. We cross our fingers and put on the Sherlock Holmes hat hoping that maybe that bug has somehow made it into the log… When it isn’t there our only remedy is guesswork of more logging (which bogs performance for everyone and makes the logs damn near unreadable). But we have no choice other than crossing our fingers and going through CI/CD again. This is 2021. There are better ways. With modern debugging tools we can follow a specific process as it goes through several different microservices and “step into” as if we were using a local debugger without interrupting the server flow. Magic is possible.

uk: вхід без авторизації

name: Polyglot Cloud Native Debugger: Going Beyond APM


uk: Комп'ютерні науки

description: Enhancing diversity and inclusion in every aspect of technology is an essential conversation everyone should be a part of. In an increasingly interconnected world, we have a shared responsibility to ensure technology is a force that works to benefit everyone, countering structural sources of inequity where needed. This session aims to jump start your personal diversity and inclusion journey by explaining the basics in simple terms with relevant examples for technologists. Concepts covered will include unconscious bias, privilege, equity, allyship, covering and microaggressions.

uk: вхід без авторизації

name: Fundamentals Of Diversity & Inclusion For Technologists


Jakarta EE: Present & Future

uk: Комп'ютерні науки

description: Java EE has been re-branded to Jakarta EE and moved to truly open source governance under the Eclipse Foundation. This session overviews what this means, offers a brief tour of the initial releases - Jakarta EE 8/Jakarta EE 9, explores current state and looks to what the future might bring including some key challenges. We will also discuss how these challenges can be overcome through active community engagement. The technical contents of Jakarta EE 8 is mostly the same as Java EE 8. Jakarta EE 9 further brings the platform into the open by decoupling from the javax namespace to the jakarta namespace. Jakarta EE 10 opens the possibilities for many long pending innovations in key technologies like Jakarta Security, Concurrency, Messaging, REST, Persistence, Batch, NoSQL, MVC and Configuration. You should come to this session with your thinking caps on and your sleeves rolled up. There is much to help move forward together that really matters.

uk: вхід без авторизації


azul: How Your Java is Still Served Hot

uk: Комп'ютерні науки

description: Despite being nearly 27 years old, Java is still consistently rated in the top three most popular programming languages in use. The reason for this popularity extends beyond the syntax of the language to the power of the Java Virtual Machine (JVM). With its ability to handle internet-scale workloads, the JVM delivers the performance required for mission-critical enterprise applications. In this session, we’ll explore Java as it is in 2022. JDK 17 is the ninth (yes, ninth) release in four years. As a long-term support (LTS) release, this is one that many users will choose to use in production. We’ll review the significant new features developers will now be able to exploit as they develop their next applications. With JDK 18 just around the corner and longer term projects like Loom likely to be included soon, what does this year hold for Java?

uk: вхід без авторизації


Update On Java On The Raspberry Pi

uk: Комп'ютерні науки

description: In 2021 the Pi4J project released a completely new second version of its object-oriented GPIO API and implementation library for the Raspberry Pi. Let's take a look at the new documentation site and example projects to get you started with Java development on the Raspberry Pi. Getting started with Java in a new area - like controlling electronic components - can be challenging, but the Pi4J project aims to make this an easy and fun experience. Thanks to a lot of getting-started tutorials and example projects, different use-cases are handled. The experience of your first "blinking LED" is a really amazing experience for a lot of software developers who never interfaced with electronics before. In this presentation, we will take a look at a few of these examples.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Hardware acceleration has become prevalent in most application domains as a means to increase performance, while also achieving high energy efficiency. However, the programming models for heterogeneous hardware accelerators inherently support C/C++, thereby hindering the exploitation of heterogeneous resources from managed languages, such as Java. In the University of Manchester, we have been developing TornadoVM; an open-source software technology that can be used as a plugin to OpenJDK and other JVM distributions to enable hardware acceleration in a programmer friendly manner. In this talk, we will present a practical view of TornadoVM and focus on two parts: (i) analyze what can impact the performance of applications on heterogeneous co-processors, and (ii) how Java developers can utilize TornadoVM to increase the performance of their applications.

uk: вхід без авторизації

name: TornadoVM: Hardware Acceleration For Java In Practice


keywords:
Bildungsmanagement
Wissenschaftsmanagement
Dezentralisierung
Leistungsorientierte Finanzierung
Personalkostenbudgetierung
Budgetierung
Budgetierungsmodell
Kosten- und Finanzmanagement
Kostenmanagement
Finanzmanagement

de: Rechts-, Wirtschafts- und Sozialwissenschaften

uk: Право, економіка та суспільні науки

en: Law, Economics and Social Sciences

description: In diesem Video erklärt Professor Ziegele, wie man Budget-Verantwortung an Hochschulen dezentralisieren kann. Zunächst zeigt er das klassische Modell zentraler Mittelverteilung auf. Anschließend wird erläutert, wie einzelne Aspekte des Modells dezentralisiert werden können. Dabei spielt die leistungsorientierte Zuweisung eine entscheidende Rolle. Auch das Thema der Personalkostenbudgetierung wird kurz angeschnitten. Abschließend wird darauf hingewiesen, dass auch die Dezentralisierung der Finanzquellen Risiken mitbringen kann.

@language: de

uk: вхід без авторизації

name: Wie kann man Budget-Verantwortung an Hochschulen dezentralisieren?

Hochschule Osnabrück

addressCountry: DE

addressLocality: Osnabrück

addressRegion: Lower Saxony


keywords:
fachfremd Unterrichten
Chemie
Experiment
Schüler:innenversuch
chemische Reaktion
Redoxreaktion
digitale Medien
digitale Messsensoren

de: Chemie

fi: kemia

uk: Хімія

en: Chemistry

fr: Chimie

da: Kemi

es: Química

nl: Scheikunde

de: Mathematik, Naturwissenschaften

uk: Математика, природничі науки

en: Mathematics, Natural Sciences

uk: вхід без авторизації

name: Womit reagiert Eisenwolle beim Rosten? Ein Experiment mit einem digitalen Sauerstoff-Sensor

Europa-Universität Flensburg (EUF)

addressLocality: Flensburg

addressRegion: Schleswig-Holstein

name: Institut für mathematische, naturwissenschaftliche und technische Bildung


uk: Комп'ютерні науки

description: BIM (Building Information Modeling) is a paradigm for 3D CAD models made for Architecture, Engineering and Construction (AEC). Long a closed, proprietary garden, it becomes more and more an open, hackable world thanks to several Free and Open-Source tools and formats. This talk will try to illustrate how rich that world has become when your tinkering, hacking, coding itch starts to scratch... In this talk, Dion (developer of BlenderBIM) and Yorik (developer of FreeCAD, specifically its BIM tools) will use these two applications and try to show some clever tricks that you can do with BIM models, that no proprietary software would dream to achieve.

uk: вхід без авторизації

name: Hacking through BIM models: A BIM-oriented hacking session featuring FreeCAD, BlenderBIM and more...


KiCad Project Status

uk: Комп'ютерні науки

description: Update on the KiCad project including recent events, version 6 stable release, and what to expect during version 7 development.

uk: вхід без авторизації


LibrePCB Status Update

uk: Комп'ютерні науки

description: A short overview about the progress and the current state of the LibrePCB project. LibrePCB is an Open-Source EDA software to design PCBs, providing the following advantages: - Cross-platform: Windows/Linux/MacOS/Others | x86/ARM - Intuitive & easy-to-use UI - Powerful library concept - Human readable file format

uk: вхід без авторизації


uk: Комп'ютерні науки

description: After a short introduction to the ngspice circuit simulator the first part of the talk will present some new features available in ngspice-36. Among them are SVG plotting capability, acknowledging RKM notation (e.g. 4k7 for 4.7 KOhm resistance), new and improved convergence methods when calculation the operating point, and many others. The second part of the talk discusses some new features under development or still under discussion, like XSPICE memory management improvements, adding BSIMCMG model for FinFETs, adding IBIS capability (together with KiCad and sparselizard), and S parameter intgration. A lot of discussions is going on among FOSS simulator developers and users about better Verilog-A support.

uk: вхід без авторизації

name: ngspice - current status and future developments


Open CASCADE Technology: status update

uk: Комп'ютерні науки

description: Open Cascade Technology (OCCT) is a framework for B-Rep modeling. The lecture presents a technical update from the previous talk (at FOSDEM 2021). This year we also introduce our OCCT's Community Manager who will highlight community-related activities that happened during 2021.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The talk will cover the design of very complex and powerful OSHW Linux boards based on the new NXP iMX8 and ST STMP1 SOC with FLOSS KiCAD tools and then running FLOSS software for cloud, IoT and Health to offer full transparency to the people who value their privacy not only on software but also on hardware level.

uk: вхід без авторизації

name: Pushing the Open Source Hardware Limits with KiCAD: OSHW industrial grade computers and servers running cloud, medical and IoT services without hiding secrets in the hardware


uk: Комп'ютерні науки

description: Things like Infrastructure as Code, Service Discovery and Config Management can and have helped us to quickly build and rebuild infrastructure but we haven't nearly spend enough time to train our self to review, monitor and respond to outages. Does our platform degrade in a graceful way or what does a high cpu load really mean? What can we learn from level 1 outages to be able to run our platforms more reliably. This talk will focus on on setting up a CICD pipeline using Jenkins. We start by configuring Jenkins to use our Nomad platform to autoscale job runners. After which we ll look at using the newly released nomad-pack tool to convert, deploy and test and existing nomad job.

uk: вхід без авторизації

name: Continuous Integration Pipelines with Nomad, Vault and Jenkins


uk: Комп'ютерні науки

description: Logilab has been using heptapod, a GitLab fork with mercurial support, for 2 years now. We are maintaining the open source software CubicWeb and its components called cubes. Thus, the code is split in dozens of repositories, depending on one another. Over the years, it has become hard to maintain code quality and good practices in the whole codebase. In this talk, we will present the tools that helped us. Some of them are mercurial specific, but most could be used in GitLab. - Create Merge Request automatically across repositories based on some rules, such as deprecation warnings. - Pick a reviewer for Merge requests based on the developers' preferences - Making sure to commit, tag, update the changelog, publish to PyPi when releasing a new version - Mutualize GitLab CI configurations with templates - Host docker images of your project on the forge - Have up-to-date static websites, documentation or web applications Each use case can be solved easily, but combining them is what truly makes developer life easier.

uk: вхід без авторизації

name: How to improve the developer experience in Heptapod/GitLab: Automate the dull works to focus on development


uk: Комп'ютерні науки

description: Unikernels are bespoke, single-address space, lightweight Virtual Machines which do one thing and one thing only: fully facilitate the runtime of one application. Unikernels represent a compile-time specialization strategy and leverage the joining of user and kernel space via a library Operating System in order to achieve this, offering as a result incredible runtime performance whilst increasing application security via isolated hardware virtualization. As Unikraft, an open-source unikernel SDK and library Opeating System toolkit, has grown over the last few years, the number of available off-the-shelf applications, interpreted languages, libraries, target hypervisors and architectures has grown significantly. In order to ensure consistency between builds, prevent bugs and performance regression, and to allow for new features, a massive effort has been undertaken to facilitate massive build permutations of specialized unikernels which target and include variations of this growing ecosystem based on new commits and Github Pull Requests. In this talk, we discuss the journey of this undertaking, highlight and demo several CI/CD solutions in this space with Concourse, and how we are continuing to expand the ecosystem to automatically and intelligently build unique additional performance-oriented permutations from configurations available in the underlying libOS.

uk: вхід без авторизації

name: Massive Unikernel Matrices with Unikraft, Concourse and More: How Unikraft builds many peremutations of unique unikernels


Porion a new Build Manager

uk: Комп'ютерні науки

description: Yes, another build manager to address security, safety and performance issues after having used Jenkins with more than 30 projects during 8 years. The talk presents the Porion build manager with its command line interface but also with its responsive web UI. I will also explain some security and safety aspects provided by this new build manager.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Did you ever promote your application from a staging to production and forgot some important infrastructure changes? Do you wonder how to automate chaos tests into your delivery pipeline to validate your services can deal with failing nodes? When we at Dynatrace started our microservice journey, we had to deal with precisely those and many more questions. Using Keptn as a control plane for application delivery, we can orchestrate all those tasks to avoid any bad deployments while providing a unified deployment experience for our developers. In this talk, I will bring some light into combined infrastructure and application deployment using Keptn to show you how those seemingly separated activities can be unified.

uk: вхід без авторизації

name: Unifying Infrastructure and Application Delivery Using Keptn