uk: Комп'ютерні науки

description: At FOSDEM19, Aleksei Akimov spoke about how Adyen migrated their docs to Grav. In 2023, we look back to see where this journey has taken us. In the last 4 years, the company has grown 3x which led to a proportional increase in content and its users. The importance of knowledge sharing cannot be understated. Grav sits at the centre of internal and external knowledge sharing. This talk looks at our documentation deployment setup from a single Grav code base, the automation put in place to ensure content quality, the extensions we built to address user needs, and our future plans.

uk: вхід без авторизації

name: Conquering tribal knowledge with Grav: Four years and a pandemic later, where has our Grav setup taken us?


Michael Korotaev

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: Several years of pandemic spread influenced every branch. Document collaboration is no exception in this case. Lots of teams face certain difficulties: some users want to stay in home office and work remotely despite it’s now possible to get back to real office. Therefore, lots of groups became even more distributed. To ensure effective teamwork in the current conditions, it’s important to choose right tools. In our session: - We’ll present an open-source project ONLYOFFICE and all the novelties over the year since last FOSDEM. - We’ll tell you how to organize efficient and secure document collaboration for any team using open-source software.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Tackling document collaboration challenges in 2023

FOSDEM VZW

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: Tribe is a collection of core libraries currently written in PHP that use MySQL JSON extensively. It provides a content structuring and storage framework. It has two main components - Types.json and Junction. Types.json helps configure a content structure, without having to work directly on MySQL tables. Junction is a CMS (dashboard), that auto-configures based on Types.json. Opinionated content structuring so that collaboration is easier. Self-hosted. Currently well-tested on Ubuntu 20.04 and 22.04 servers. Provides a robust and predictable URL routing system. Integrity of data objects is of primary importance. Data can be moved from one "type" to another. Structure of the content is always stored with every data object, making each data piece meaningful in itself. JSON:API v1.1 is auto-configured for all data stored. Provides a protocol to mount multiple front-end applications on the same data-set. It's been 3 years in the making, around 90 projects are running on this framework. These include web platforms, products, mobile apps and chatbots.

uk: вхід без авторизації

name: Tribe - a content structuring and collaborative framework: JSON compatible and opinionated content-first framework


uk: Комп'ютерні науки

description: Decentralized moderation is difficult. For privacy and federation reasons, no server and no server admin has access to all the data and all authorizations. Bots could have access to authorizations but how can you deploy then, trust them and how can you make sure that they also have access to all data? In this presentation, we'll show some of the ongoing work on Mjölnir for All, an exciting project that aims to transform moderation on the Matrix network, without end-user configuration.

uk: вхід без авторизації

name: Decentralizing moderation: Mjölnir for all


uk: Комп'ютерні науки

description: We all need to help decarbonize our world. It's hard to get hold of a PV system or heat pump for your household these days, but the real challenge to home owners is to implement a comprehensive energy management that makes best possible use of their own solar (excess) power. There's organizational, regulatory and electro-technical challenges and those specific to control, be it with 'autonomously' acting appliances such as EV chargers and heat pumps or 'simple' things like to detect a washing machine's operational state. And what sort and extent of behavioral change will "household operators" accept ? I will have a rapid talk about real world issues we have encountered when developing and deploying a Home Energy Management System based on openHAB. It's covering the most power intensive use cases of a household: EV charging, heat pump and white goods operations.

uk: вхід без авторизації

name: Challenges in Home Energy Management: How to best use your own PV-generated power


uk: Комп'ютерні науки

description: No one seems to like the "German Eichrecht", esp. not manufacturers and operators of charging infrastructure, yet it provides security and transparency of your charging sessions. This talk will give an introduction to the fundamentals and requirements of the calibration law and explain you why Open Source of the "Chargy Transparency Software" is not only eyecandy, but a fundamental part of the security goals and guarantees for EV drivers. From a software developer's point of view the German calibration law is not so much about measuring energy correctly or invoicing the correct prices, but a first step towards a more modern zero trust architecture for the e-mobility charging infrastructure. This security update is sorely needed, as todays architecture is full of well-known, yet unaddressed bugs and design flaws mainly caused by the very the bad communication of people in distributed systems and across gated communities. Besides solving technical goals, the German Eichrecht also tries to make sure, that the security gurantees also reach the end users and give them all required tools, data and information to verify the correctness of their charging sessions. Therefore for us Open Source is not only a non-functional, nice-to-have marketing feature off the calibration law or just more cost effective way of shared software development, but a fundamental (functional) requirement. Unfortunately the applicability of the calibration law for those end users is still very low. With the upcoming version 2.x of our Chary Transparency Software we not only introduce multi-language support to support the adoption of the German Eichrecht all over Europe, but also present new services like a real public key infrastructure for energy meter public keys and incremental charge transparency records for a "Real-Time Eichrecht". Of course we are interested in your feedback and future contributions to this Open Source Project.

uk: вхід без авторизації

name: European Eichrecht: E-Mobility with Love & Security


uk: Комп'ютерні науки

description: Mark van Stiphout will go over the challenge we are currently facing in Europe, the policy that is in place and opportunities for Free and Open Source Software to make a difference.

uk: вхід без авторизації

name: Energy policy by the European Commission: Brief overview of policies and opportunities for collaboration


uk: Комп'ютерні науки

description: We will give a brief introduction to electric vehicle charging technology, including an overview of the standards and protocols involved. This will be followed by a deep dive into how you can build your own AC charging station with open hardware, utilizing the EVerest open source software stack. Concluding the talk, we will present an outlook on how you could assemble a DC charging station with readily available components. The primary goal of EVerest is to develop and maintain an open source software stack for EV charging infrastructure. You can think of it as an operating system for EV chargers with implementations of communication protocols, software modules for representations of hardware devices and tools for simulating the charging process. In this talk you will learn how you can adapt and use EVerest with existing charging station hardware, as well as building your own AC and DC charging stations. We will show you how you can get started by using open hardware designs and schematics in combination with open source software to build a charging station that will reliably charge your electric vehicle.

uk: вхід без авторизації

name: EVerest: AC and DC electric vehicle charging with open source software and hardware


uk: Комп'ютерні науки

description: Desktop and server software at the present moment in time is very rarely developed with its energy consumption as a major consideration. However in a world with limited resources this becomes a growing concern, especially as developers cannot cater to this need since the appropriate tools are currently lacking. The Green Metrics Tool is an open source framework that allows for measuring, comparing and optimizing the energy consumption of arbitrary software. The goal is to empower both software engineers and users to make educated decisions about libraries, code-snippets and software in order to save energy and thus carbon emissions. Any application will be containerized and then analyzed by its logical parts. The open source tool measures classical performance metrics as well as energy related metrics like wattage, temperature and cooling efficiency to understand what part of the software is responsible for which part of the energy consumption. Through the concept of usage scenarios we create an interface for developers to test/develop against. In the end this makes complex software products comparable to each other and thus enables developers to select libraries based on their functionality-energy-profile (for instance messages per Watt or similar). We present the roadmap for this tool over the next year, which will result in a public and open database of energy information for arbitrary hardware setups, code blocks and libraries and a green standard library / green code completion.

uk: вхід без авторизації

name: Green software engineering: Building tools and ecosystems around green software engineering


uk: Комп'ютерні науки

description: This panel discussion will examine best practices for how the energy industry can implement and benefit from open source technology by exploring how traditional or legacy industries including automotive, embedded systems, finance, and networking/telecommunications have been transformed in recent years. Panelists will relay their experience working within these industries to explain how to speed adoption of open source to drive innovation and digital transformation to support the energy transition.

uk: вхід без авторизації

name: What the energy industry can learn from how open source technology has transformed other traditional industries


uk: Комп'ютерні науки

description: Currently, the energy consumption metrics are only available at node levels. There is no way to obtain container-level energy consumption. Autoscalers and schedulers really need pod-level metrics data in order to obtain energy savings from resizing or migrating containers. The presentation introduces Kubernetes-based Efficient Power Level Exporter (Kepler) and its integration with Kubernetes. By leveraging eBPF programs, Kepler probes per container energy consumption related system counters and exports them as metrics. These metrics help end users observe their containers’ energy consumption and allow cluster admins to make intelligent decisions on achieving energy conservation goals. The presentation shows that Kepler can be easily integrated into Prometheus and render time series metrics into Grafana. At last, we will demonstrate sustainable management of clusters by leveraging Cloud-native patterns, Observability and Kubernetes features like node selector, node labels, node name, affinity and anti-affinity to achieve carbon intensity aware placement of workloads in a Kubernetes cluster.

uk: вхід без авторизації

name: Carbon Intensity Aware Scheduling in Kubernetes


uk: Комп'ютерні науки

description: FIM (Fbi IMproved) is a powerful image viewer with a minimalistic interface. FIM follows the spirit of the VIM (Vi IMproved) text editor: it is specialized in its task and powered by an own domain-specific language (DSL) which allows powerful custom features. FIM happens to be mostly appreciated by users of: [neo]mutt, emacs/mu4e, vim, command-line-interface and non-standard Linux Framebuffer-enabled hardware. The talk will introduce FIM's unique features from the perspective of its DSL, with word on the future. Feedback is welcome.

uk: вхід без авторизації

name: Inside the FIM (Fbi IMproved) Scriptable Image Viewer: About a Small Command Language Powering an Image Viewer


uk: Комп'ютерні науки

description: The GNU Guix package manager/distribution provides its own containers as part of a more general tool, 'guix shell' for quick one-off or repeatable environments. The container option is isolated from the host system, with options to expose directories, network interfaces, and so on. This is an excellent tool for isolating software in a completely controlled and reproducible environment in a minimal way. Recently, we added an option to emulate the Filesystem Hierarchy Standard (FHS) within the container, so that this environment looks like a more "typical" distribution with a global '/lib', '/bin', etc., unlike a Guix system. This is helpful for developing or running software which expects or assumes an FHS file layout. For example, many language environments want to manage their own tools and download binaries, or some software isn't yet packagable for Guix, like a fully source and bootstrapable JavaScript application. These would otherwise be very difficult to use in Guix and now we can do so in an (isolated) environment. This talk will introduce 'guix shell' and the container and emulate-FHS options with examples of real-world use.

uk: вхід без авторизації

name: Using GNU Guix Containers with FHS (Filesystem Hierarchy Standard) Support


uk: Комп'ютерні науки

description: Guix Home is an exciting new feature of GNU Guix that enables you to apply the same functional configuration style you enjoy from Guix System to your own home directory! If you've ever wondered how to manage your dotfiles with Guix, this is the tool for you. It even works on all Guix-supported GNU/Linux distributions! In this talk, I'll explain how it works and how you can get started with it without fear of breaking your $HOME directory. In this talk, I'll show you how to use the guix home subcommand of Guix for user-level configuration management. We'll discuss how to create an initial configuration, tweak it to taste, and how to find additional "home services" you can use. If we have time, I will briefly discuss how to write your own home services!

uk: вхід без авторизації

name: An Introduction to Guix Home: Declarative $HOME configuration with Scheme!


uk: Комп'ютерні науки

description: The talk is a review of my work on Guix's bootstrapping process for RISC-V. The presentation describes why we needed to make this, the challenges I encountered, what I focused doing, what is missing and how people can take part. The bootstrapping process starts with Stage0-POSIX, then comes Gnu Mes and from there a bootstrappable fork of TinyCC is built. From that point, GCC is somehow built and then the rest of the distribution is built using it. In this talk, we'll discuss the last part of this process, from the bootstrappable TinyCC to the final GCC that compiles the world. With NlNet's support, I spent some time this last year preparing this process to be ready for RISC-V. During the talk I'll share the work that has been done, I'll introduce some of the particularities that RISC-V has, why this process has been different to the other architectures and I'll describe the current state of the bootstrapping process and how it can be improved.

uk: вхід без авторизації

name: Bringing RISC-V to Guix's bootstrap: What's done and what we need to do


uk: Комп'ютерні науки

description: I teach a university class about the history of computing. To explain how early computers worked, I created the Toy CPU emulator - a reduced instruction set computer in the style of the Altair 8800 or IMSAI 8080. In this presentation, I'll explain how I created the Toy, and how to create and enter programs into the Toy. You enter programs into the Toy using "switches and lights" - the Toy simulates LEDs for each counter and instruction, and the accumulator value. We'll create a few simple programs and enter them into the Toy using 8-bit machine language. The Toy CPU is a great way to learn about machine language programming!

uk: вхід без авторизації

name: Learn 8-bit machine language with the Toy CPU emulator: An emulator in the style of the Altair 8880 or IMSAI 8080


uk: Комп'ютерні науки

description: Examples include: - Explaining the principles of regular expressions for reading semi-structured data - Concepts surrounding hashes, syntaxes and tokens from the perspective of a body of documents - Using collections of Parsing Expression Grammars to solve problems - Justifications for datalisps as a representative form - Ideas regarding RDF from datalisps to create knowledge corridors Operating environment includes: - TXR - Emacs-Hyperbole - Gemtext - Koutliner - Idutils

uk: вхід без авторизації

name: Literate Storytelling: Interpreting Syntaxes for Explorers: Demonstration of the use of syntaxes to facilitate the search of information


uk: Комп'ютерні науки

description: LIPS Scheme project is a powerful lisp based on Scheme R7RS specification. It integrates very well with the host language which is JavaScript. The presentation will show a bit of history (lisp, scheme, and LIPS) and later explain different features of the language and a bit about its internals. It will also show how you can interact with the hosting language (JavaScript) and how you can extend the language in Scheme.

uk: вхід без авторизації

name: LIPS Scheme: Powerful introspection and extensibility


FAIRPoints

uk: Комп'ютерні науки

description: One of the greatest obstacles to implementing FAIR (Findable, Accessible, Interoperable and Reusable) research practices, is the lack of awareness about what solutions are available across disciplines. Furthermore, most of the discussions around FAIR, Open and Good Data practices, as well as the solutions and requirements, occur at a higher level, distanced from the researchers who are the ultimate end-users of the solutions. To bridge this gap, we launched FAIRPoints-an event series highlighting pragmatic measures developed by the wider research community towards the implementation of the FAIR data principles https://www.fairpoints.org/. Our goal is to bring together; the research community- the ultimate user and producer of data, policy and decision makers- shapers of research practices, and the broader research support populace- to aid in the development of solutions for better Findability, Accessibility, Interoperability and Reuse by providing a platform for conversations to take place around realistic and pragmatic FAIR implementations In this presentation, we will present some of the ongoing projects and community efforts driven by FAIRPoints.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: While a lot of open source projects should be praised for their commitment to openness, the topic of infrastructure is usually taboo, as many times it ends up that it’s in the hands of Big Tech companies/GAFAM. While the reasoning why small and medium teams do not move away from big (evil) tech platforms can sometimes be convenience, there can be monsters lurking in the shadows. In this presentation we will explore and celebrate the movement of independent, self-governed open source infrastructure providers, recognize some of the challenges in the path of libre infrastructure, and share how to migrate from tech oligopolies to open source cloud platforms without hassle. Follow this short presentation if you are wondering why many projects that are working on open source software, open data, online privacy and open knowledge and not only, do not use Free Libre Open Source Software for their infrastructure.

uk: вхід без авторизації

name: Breaking away from Big Tech: Using open source infrastructure in a convenient way


uk: Комп'ютерні науки

description: Dagger is a programmable CI/CD engine that runs pipelines in containers allowing developers to build and debug pipelines locally and then run them anywhere avoiding vendor lock-in to a particular CI/CD solution. While the portable pipeline concept may not be new, by combining that with the ability to write pipelines as code (Go, Python, TypeScript, JavaScript, CUE supported at the moment) instead of YAML, Dagger revolutionizes how CI/CD pipelines are built and ran.

uk: вхід без авторизації

name: Build CI/CD pipelines as code, run them anywhere


uk: Комп'ютерні науки

description: Quickwit is an opensource distributed search engine. The most challenging component of a search engine is its indexing pipeline. It takes a stream of JSON documents, processes them in batches, and emits index artefacts we call splits. We needed our implementation to be robust, testable, observable, and efficient... But even more importantly, our code had to be easy to work with. I will explain why we chose to develop our own actor framework and discuss the unique features of our implementation.

uk: вхід без авторизації

name: Building an actor library for Quickwit's indexing pipeline.


uk: Комп'ютерні науки

description: February 2023 marks the 25th Anniversary of Open Source. This is a huge milestone for the whole community to celebrate! In this session, we'll travel back in time to understand our rich journey so far, and look forward towards the future to reimagine a new world where openness and collaboration prevail. Come along and celebrate with us this very special moment! The open source software label was coined at a strategy session held on February 3rd, 1998 in Palo Alto, California. That same month, the Open Source Initiative (OSI) was founded as a general educational and advocacy organization to raise awareness and adoption for the superiority of an open development process. One of the first tasks undertaken by OSI was to draft the Open Source Definition (OSD). To this day, the OSD is considered a gold standard of open-source licensing. In this session, we'll cover the rich and interconnected history of the Free Software and Open Source movements, and demonstrate how, against all odds, open source has come to "win" the world. But have we really won? Open source has always faced an extraordinary uphill battle: from misinformation and FUD (Fear Uncertainty and Doubt) constantly being spread by the most powerful corporations, to issues around sustainability and inclusion. We'll navigate this rich history of open source and dive right into its future, exploring the several challenges and opportunities ahead, including its key role on fostering collaboration and innovation in emerging areas such as ML/AI and cybersecurity. We'll share an interactive timeline during the presentation and throughout the year, inviting the audience and the community at-large to share their open source stories and dreams with each other.

uk: вхід без авторизації

name: Celebrating 25 years of Open Source: Past, Present, and Future


uk: Комп'ютерні науки

description: Giskard is an open source project that implements automatic tests for Machine Learning models. In this conference talk, we'll explain (1) why testing ML models is an open problem, (2) why testing ML models requires different tools compared with traditional software systems. We'll then explain, using concrete examples, how our Giskard project helps ML Engineers deploy their AI systems into production safely by (1) designing fairness & robustness tests and (2) integrating them in a CI/CD pipeline.

uk: вхід без авторизації

name: CI/CD for Machine learning models: How to test ML models?


uk: Комп'ютерні науки

description: CoffeOSM is a tool that helps users improve OpenStreetMap by scanning the text on receipts from shops and checking if the place is already listed in OpenStreetMap. If the place does not exist, CoffeOSM suggests ways to insert it. This talk will discuss how CoffeOSM works and the benefits it brings to the OpenStreetMap community. We will also showcase examples of how CoffeOSM has been used to add new locations to OpenStreetMap and demonstrate its user-friendly interface. Attendees will learn how they can use CoffeOSM to contribute to the OpenStreetMap project and help make it even more comprehensive and accurate. I'll also ask for help to gather receipt example from different countries.

uk: вхід без авторизації

name: CoffeOSM: improve OpenStreetMap a receipt at a time: checking and add shop on the map with a receipt


uk: Комп'ютерні науки

description: What can engineers do for digital humanities? What are the issues that our open source community can solve in this context? This talk will report two years experience in helping researchers in humanities (philosophers, literary scholary, archivists...) in approaching their problems. At the end the audience will get an overview of some tools and methods used by the DH community. This will be the opportunity to observe the differences that the open source software community vs the Humanists are facing and reflect on how we can find a common ground. This talk is presented by the center of Digital Humanities of Uppsala University (CDHU).

uk: вхід без авторизації

name: Consulting for digital humanists: the cultural shock developing tools and pedagogy


uk: Комп'ютерні науки

description: Moving to Kubernetes opens the door to a world of possibilities, but as the number of resources, clusters and namespaces grows, it becomes increasingly difficult to manage. We will show how at Adobe Experience Manager we continuously deliver changes to cluster resources and have implemented a way of doing feature flags and progressive rollouts with Kubernetes yaml definitions, across multiple clusters and regions using Jenkins, ArgoCD, and other open source projects. Running a cloud service in multiple Kubernetes clusters across regions, forced us to have high levels of automation, tied with monitoring and alerting across the globe. The typical release train model (dev-stage-production) had shortcomings that soon became evident. Adopting Progressive Delivery allows us to move faster, safer, and reduce the mean time to recovery in case there are any issues. Both canary deployments and feature flags are typically used to implement Progressive Delivery at both application and operational service levels. Teams collaborate with a DevOps philosophy and a "you build it, you run it" approach, with freedom, but also requiring tooling to help teams deliver value with the least interference as possible. We are continuously improving this tooling to make it as easy as possible to safely deploy changes.

uk: вхід без авторизації

name: Continuous Delivery to many Kubernetes Clusters


uk: Комп'ютерні науки

description: n a continuously changing IT world, not being able to adapt is the difference between yesterday's and tomorrow’s projects. Everybody wants the benefits of changes but nobody wants to endorse its associated risk. I’ll share why we created Updatecli, an open-source declarative dependency manager. How automation helps us to anticipate, and fix early, our day-to-day challenges, and where the traps lie.

uk: вхід без авторизації

name: Continuously Update Everything: A recipe for disaster?


uk: Комп'ютерні науки

description: NLnet Labs and Red Hat are closely following two legislative proposals from the European Commission applicable to almost all hardware and software on the European market; - The Cyber Resilience Act (CRA), intends to cover products including digital elements, like software, with cybersecurity conformity requirements and obligations. - The new Product Liability Directive (PLD) is looking to extend liability for defective products to the world of software. The audience will learn about the CRA and PLD from different angles: from their respective authors at the European Commission, from a small, public benefit organisation producing and supporting upstream open source software, and from organisations promoting, using and distributing open source software. The session will be divided in two parts: - A series of lightning talks from representatives of the European Commission and NLnet Labs to introduce the subject. - A panel, moderated by Red Hat, with participation from Digital Europe, the EC Open Source Program Office, Red Hat and NLnet Labs to share views and opinions about the future of open source software within the current and future legal framework.

uk: вхід без авторизації

name: How regulating software for the European market could impact FOSS


uk: Комп'ютерні науки

description: using a mountain metaphor instead of choropleth or cartogram visualisations has some use in showing similarities and differences between places. data mountains are a bit like bar charts on a map, but their mountainous shape makes the bars resemble topographic features! using #nbdev to publish the package was fun because it makes it much easier for python teams to collaborate on jupyter notebooks in git as it cleans json metadata with a pre-commit hook that prevents merge conflicts, and it also makes it very convenient to document, test, and share code and packages on the web, pypi, and conda.

uk: вхід без авторизації

name: data mountains - turn your data into mountains!: convert geospatial points into triangles scaled by data


uk: Комп'ютерні науки

description: Transplanting device drivers out of the Linux kernel has a long history in microkernel-based operating systems. While being economically attractive, in contrast to developing all drivers from scratch, one still has to deal with complex APIs and semantics. Therefore, the porting process can be demanding and tiring together, which leads to new sources of errors. Over the years the team around the Genode OS framework has collected a lot of experiences by porting device drivers out of the Linux kernel. Different approaches were followed. Recently, the methodology got reviewed again, new tools were developed, and the process got accelerated substantially. At the same time, the environment for device drivers in Genode got unified in between all architectures, and low-level platform support was enhanced. As a result it is now much easier and faster to port Genode to new boards, or SoCs. The talk provides an insight into the new porting methodology and tools. It summarizes the results from this new approach that were achieved within a couple of months, and will show them in a short tech-demo.

uk: вхід без авторизації

name: Device driver gardening: Transplant Linux drivers fast but gently


Delivering a crossplane-based platform

uk: Комп'ютерні науки

description: Platform APIs are usually tough to test. They hide complexity from users and abstract a wide range of backend services, ranging from heavy infrastructure over to simple SaaS APIs. Sometimes these processes can take up to hours to finish. In this talk we will share our experience testing the platform API and introduce you to the tools we have written along the way. The actual platform API is provided through crossplane. Writing crossplane compositions is not always easy and testing them with all possible combinations and outcomes is even harder. It requires a lot of effort to make sure all components are deployed correctly and work as expected – especially if you have a lot of them. Since everything is written in YAML and crossplane is a relatively new technology, there is no standard set of tools to test everything yet. To test our compositions automatically, we have set up a CI pipeline that consists of two test stages: A static code analysis using our self-written linter for Crossplane that runs various checks, like ensuring that all patches are pointing to an existing resource property. The second stage consists of end-to-end tests built with Kuttl and compares the status of real provisioned infrastructure with the expected outcome.

uk: вхід без авторизації


Keep Your Dependencies In Check

uk: Комп'ютерні науки

description: If Log4Shell, Spring4Shell, etc. have taught us anything, it's that we need to keep our dependencies up to date. But updating our applications can take a lot of time. How do we stay on top of that, while also continuing to deliver business value? Luckily, there are plenty of tools that can help us with this, from package managers to bots that can automatically create changes on our repositories. Let's go over some of the different options, so we can make informed choices about what's best for us in a particular situation.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: LF Research was founded on a track record of excellence in research led by the Linux Foundation, on topics such as exploring the Kernel at 30, or the FOSS Contributor Survey in partnership with the Laboratory of Innovation Science at Harvard. Since its launch in April, 2021, Linux Foundation Research has published two dozen reports based on empirical methodologies that describe open source as a paradigm for mass collaboration at scale. LF Research projects fall into four frameworks: industry vertical analysis, technology horizontal analysis, geographic/regional analysis, and ecosystem analysis, for research projects that span all industries, technologies, and regions. It has become a mechanism through which the open source community can share feedback and perspectives in an open and transparent way. Among the early reports published was Diversity, Equity, and Inclusion in Open Source: Exploring the Challenges and Opportunities to Create Agency and Equity Across Open Source Ecosystems. This report and others in financial services, film and entertainment, SBOMs, and cybersecurity, identify developer and contributor experiences, motivations, and priorities among other trends and key findings, specifically when it comes to securing software supply chains. This talk will identify what developers and contributors have said they experience, need, and want most across numerous LF Research studies, identify opportunities for the audience to access open datasets, and how to become further involved in the research process.

uk: вхід без авторизації

name: Perspectives from the Open Source Developer: A Window into the Developer Experience from Linux Foundation Research


Elasticsearch Internals

uk: Комп'ютерні науки

description: Elasticsearch is nowadays one of the most widely used and deployed full text search engines containing a large amount of capabilities. How how are they actually implemented and how does Elasticsearch operate behind the scenes ? This session will reveal the innerworkings behind the core capabilities of Elasticsearch. We will provide a review of Elasticsearch architecture and general structure of the public Apache 2.0 codebase. Further expanding on that knowledge we will develop a relatively simple ingest plugin in Java that filters certain keywords from indexed documents.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The ELISA project aims to make it easier to build and certify Linux-based safety-critical applications. This lecture will give an overview of the goals and technical strategy of the ELISA project. It provides information about the different work groups, their interaction, and contributions. Attendees will leave the talk with an understanding where the ELISA project stands today and what comes next. They get insights which methodologies and tools are used, which challenges exist, and why the different puzzle pieces are all needed for enabling Linux in safety-critical applications. Safety-critical systems as addressed by the ELISA project are those, where failure could result in loss of human life, significant property damage or environmental damage. ELISA members are working together to define and maintain a common set of tools and processes that can help companies demonstrate that a specific Linux-based system meets the necessary safety requirements for certification. These existing working groups focus on Linux Features for Safety-Critical Systems, Software Architecture, Open Source Engineering Process, Tool Investigation and Code Improvement. They are complemented by vertical use case working groups dealing with Automotive, Medical, and Aerospace.

uk: вхід без авторизації

name: The ELISA Project - Enabling Linux in Safety Applications


FireCRaCer: The Best Of Both Worlds

uk: Комп'ютерні науки

description: CRaC (Coordinated Restore at Checkpoint) is an OpenJDK project for the coordination of Java applications at checkpoints which leverages the CRIU (Checkpoint/Restore In Userspace) library for process snapshotting. This talk will briefly introduce Firecracker, an open source virtualization technology based on KVM, explain how CRaC can be used with it and compare it with CRIU. The second part of the talk will introduce some new tools based on Userfaultfd and DAMON which allow fine grained analysis of of the JVM's memory access patterns during restore and end with a discussion on how the JVM could be optimized to improve them.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: How Mozilla uses machine learning to streamline its development process: automating various aspects of bug management (such as accurately assigning components, detecting types, and identifying spam), trying to predict potential regressions and selecting relevant tests for specific patches. In addition, an overview of future directions for privacy-respecting machine learning usage in Firefox, with the support of the community.

uk: вхід без авторизації

name: Teaching machines to handle bugs and test Firefox more efficiently.


FOSDEM infrastructure review

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: FOSSbot is a 3D-printed educational robot that uses open software, open design and electronics, and can be employed in all levels of education. FOSSBot has been developed collaboratively by Harokopio University of Athens and the Greek Free and Open Source Software (GFOSS) community. The use of FOSSBOT in education will be supported by collaborative seminars for all teachers of all specialties and levels based on educational material developed at https://elearn.ellak.gr. The aim of the action is to familiarize teachers with modern education models based on the S.T.E.A.M approach. (Science, Technology, Engineering, Arts, Mathematics) and establish a student-centered approach to knowledge, based on open technologies, in order to lay the foundations for the creation of an open environment of discovery learning that will creatively contribute to the transformation of students into active citizens.

uk: вхід без авторизації

name: FOSSbot: An open source and open design educational robot


uk: Комп'ютерні науки

description: Eurorack is the leading standard for building modular music hardware, arguably cause for some of the wierdest sounds in the electronic music industry. Despite the existence of development platforms for Eurorack focused on using commodity microcontrollers and the availability of (closed source) FPGA-based synthesizer modules, there is currently no easy way to get started in creating your own FPGA-based music synthesizer hardware. In this talk Sebastian will present his 'eurorack-pmod' project, a collection of open-source hardware, gateware and software that makes it easy to get started in the world of FPGA-based audio synthesis using only open-source tools (such as Yosys + KiCAD). This talk begins with an overview of music synthesis in the context of Eurorack and illustrates how the 'eurorack-pmod' hardware and gateware makes it easy for you to get started making your own high performance music hardware.

uk: вхід без авторизації

name: FPGA-based music synthesis with open-source tools


uk: Комп'ютерні науки

description: Since last year's FOSDEM, the Fuzion language has seen two major enhancements: algebraic effects and type features. Algebraic effects provide a means to manage non-functional side-effects of calls, while type features provide means to attach logic to type parameters providing more power to generic types. This talk will explain algebraic effects and type features in Fuzion and show how they can be used. Algebraic effects provide means to manage non-functional aspects like I/O, global and local state, exceptions and much more. This can be used to automatically detect security issues due to side-effects. Many examples will be given that show how typical code patterns in Java can be realized in a purely functional way using effects and type features.

uk: вхід без авторизації

name: Fuzion — Intro for Java Developers: Mapping Java's Features to Simpler Mechanisms


uk: Комп'ютерні науки

description: Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Acting as a generic interface, the logging functionality implements reproducible tests and enables post-processing tasks. This work was partly funded by the German Federal Ministry of Education and Research (BMBF) as part of the SecForCARs project (grant no. 16KIS0790).

uk: вхід без авторизації

name: gallia: An Extendable Pentesting Framework


uk: Комп'ютерні науки

description: France has nearly a million teachers. Among them, there are teachers developing Open Source softwares but there are also more and more teachers using markdown + mkdocs + pages to create and share educational content. Yesterday all these projects were scattered over multiple forges including Microsoft's GitHub which is difficult to trust in the long term. With the support of the French Ministry of Education, the "Forge of Digital Educational Commons" project aims to pool all these projects on a dedicated GitLab instance and invite the school community to participate.

uk: вхід без авторизації

name: A GitLab forge for all teachers and students in France?: A project of the French Ministry of Education


uk: Комп'ютерні науки

description: Biased locking was removed from OpenJDK HotSpot JVM some time ago. This move had its reasons, but it resulted in a number of significant performance degradations in existing code. Thus, when non-contended locking optimization can be added, it still benefits virtual machines. Parallel stop-the-world garbage collection is one of the earliest GC variants in HotSpot, and yet it is the best choice in terms of high throughput. SubstrateVM which powers GraalVM native image supports synchronization monitors and offers serial stop-the-world GC as a basic collector. Due to the increased popularity of pre-compilation and its support in modern frameworks, it is remarkable how playing classical optimization pieces helps to improve the performance of such code. BellSoft recently put locking and garbage collection enhancements for public review. It is interesting that within GraalVM project both were implemented in Java. We'll explore implementation details, benchmark results, and application benefits.

uk: вхід без авторизації

name: Classics Never Get Old: Two Easy Pieces For GraalVM


uk: Комп'ютерні науки

description: Grottocenter is an open source database for cavers. It contains information about caves that can be used to prepare a caving trip but also background information that can be useful to learn more about the geology in a specific region. All information is submitted by contributors just like Wikipedia. Grottocenter is developed by a team of volunteers who are being supported by the Wikicaves Foundation. Funding comes from several caving organisations and donations.

uk: вхід без авторизації

name: Grottocenter: An open source database for cavers


uk: Комп'ютерні науки

description: The emergence of heterogeneous hardware resources has posed a significant obstacle for the Java programming language to keep up with the “Write Once Run Anywhere” paradigm. The reality is that several parts of the Java Virtual Machine must be modified to make Java portable for execution on modern heterogeneous hardware, such as GPUs and FPGAs. To tackle that challenge, TornadoVM is implemented in the University of Manchester as an open-source software technology that enables OpenJDK and other JDK distributions to offload parts of Java applications onto heterogeneous hardware for parallel execution. This talk will present the latest features of TornadoVM, and it will showcase examples of how the TornadoVM API can be utilized to abstract heterogeneous hardware and increase the performance of Java applications. The goal is to explain the basic terms of TornadoVM including all new API extensions, in order for developers to take advantage of heterogeneous hardware with minimal effort. Finally, this presentation will discuss how TornadoVM is used in research and industry for the acceleration of Java applications.

uk: вхід без авторизації

name: Write Once, Run Anywhere... Well, What About Heterogeneous Hardware?


uk: Комп'ютерні науки

description: Haskell is a statically-typed purely-functional programming language with non-strict evaluation. These features make programming in Haskell quite different from programming in other languages. This talk will illustrate how to use Haskell for implementing simple 2D animations, firstly using basic functional programming techniques and data types, and then using lenses, for accessing nested data types, and the state monad, for simulating mutable states.

uk: вхід без авторизації

name: 2D animations in Haskell using gloss, lens and state


uk: Комп'ютерні науки

description: We conclude the Haskell devroom with words of thanks to our speakers and supporters, and a prize draw where we will give away some books to Haskell newcomers! (Kindly donated by Haskell Foundation).

uk: вхід без авторизації

name: Acknowledgements, *prize draw* and farewell


uk: Комп'ютерні науки

description: The Haskell Foundation is an independent, non-profit organization dedicated to amplifying the impact of Haskell on humanity and broadening the adoption of Haskell, by supporting its ecosystem of tools, libraries, education, and research. Haskell is already used in industry for purposes as varied as payment processing, formal verification of cryptography, freight forwarding, and spam fighting, and its influence can be seen far and wide in the world of programming languages, but more remains to be done. In this talk, I'll give an overview of the key Haskell community infrastructure and point to some opportunities for high-value contributions to the Haskell ecosystem, both for experienced Haskellers and those still learning the language. I'll also talk about how the Haskell Foundation thinks about where we can get the most leverage from our work.

uk: вхід без авторизації

name: Open-Source Opportunities with the Haskell Foundation


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Hackathon HaskellKatas style: Install a complete hackable haskell katas environment for a new hackathon concept


uk: Комп'ютерні науки

description: The purpose of this talk is to show and tell about: - cargo-cabal: a CLI tool that helps you to turn in one command a Rust crate into a Haskell Cabal library ; - hs-bindgen: the Rust procedural macro library that generate bindings of function that user wanted to expose. The talk will focus on discussing core design ideas and implementation and end by a quick live-demo of its developer ergonomics.

uk: вхід без авторизації

name: On the path of better interoperability with Rust!


uk: Комп'ютерні науки

description: A brief update about the state of the Haskell Security Advisory Database initiative, why it is important, and our next steps.

uk: вхід без авторизації

name: The Haskell Security Advisory Database: Status and next steps


A quick overview of the Haskell tooling

uk: Комп'ютерні науки

description: Since the beginning of the language, many interesting tools were implemented for developing in Haskell (REPL, central package archive, property-based testing...). Today, the Haskell tooling provides several powerful and intuitive setups. This talk will present some useful features provided in a classic modern setup (cabal + HLS + vscode). Some of these features are also widespread in other programming languages, some are more specific to the Haskell world.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Flora is a package index for the Haskell community that is built on modern web application architecture principles. We will explore the architecture of a Haskell web application in 2022 that aims to be not only open but friendly to new contributors.

uk: вхід без авторизації

name: Web application architecture in Haskell with flora.pm: A case study of a Haskell community platform in 2022


uk: Комп'ютерні науки

description: When kids learn to program they often use either a visual language like Scratch, or a textual language like Python. While visual languages are great for the first steps, children and educators often want to move on to a textual language. However early on, a textual language and its error messages can be scary and frustrating. Hedy aims bridge this gap with a programming language that is gradual, using different language levels. In level 1, there is hardly any syntax at all; printing is done with: print hello! At every level, new syntax and concepts are added, so learners do not have to master everything at once. Hedy builds up to a subset of Python including conditions, loops, variables and lists. To make learning as accessible as possible, Hedy allows for the use of localized keywords, f.e in Spanish: imprimir Hello! This talk will discuss the pedagogy of Hedy as well as its technical aspects, since a set of changing and localized complex grammars poses several interesting challenges for parsing, and a small language offers a lot of potential from improved error messages.

uk: вхід без авторизації

name: Hedy: A gradual and multi-lingual programming language for education


uk: Комп'ютерні науки

description: Helios is a simple microkernel written in part to demonstrate the applicability of the Hare programming language to kernels. This talk briefly explains why Helios is interesting and is a teaser for a more in-depth talk in the microkernel room tomorrow. Hare is a systems programming language designed to be simple, stable, and robust. Hare uses a static type system, manual memory management, and a minimal runtime. It is well-suited to writing operating systems, system tools, compilers, networking software, and other low-level, high performance tasks. Helios uses Hare to implement a microkernel, largely inspired by seL4.

uk: вхід без авторизації

name: Introducing Helios: A small, practical microkernel


uk: Комп'ютерні науки

description: Helios is a simple microkernel written in part to demonstrate the applicability of the Hare programming language to kernels. This talk will introduce the design and rationale for Helios, address some details of its implementation, compare it with seL4, and elaborate on the broader plans for the system. Hare is a systems programming language designed to be simple, stable, and robust. Hare uses a static type system, manual memory management, and a minimal runtime. It is well-suited to writing operating systems, system tools, compilers, networking software, and other low-level, high performance tasks. Helios uses Hare to implement a microkernel, largely inspired by seL4.

uk: вхід без авторизації

name: Introducing Helios Micokernel: A small, practical microkernel


uk: Комп'ютерні науки

description: Many teams want to have quality documentation, but often fail to keep their docs up-to-date. Maintaining docs can be a frustrating and tedious for smaller teams. In this talk, we are going to explore how we can use a CI/CD workflow to encourage teams to write and maintain documentation. I will demonstrate how tools such as Github actions and Vale can improve the quality and readability of documentation in the fraction of the time needed teams usually need to produce docs. In this talk I will discuss: - the importance of quality docs - how to ensure that your docs maintain a consistent writing style - how to maintain you docs using Vale and Github actions

uk: вхід без авторизації

name: How To Automate Documentation Workflow For Developers


uk: Комп'ютерні науки

description: We all know that observability is a must-have for operating systems in production. But we often neglect our own backyard - our software release process. That was our mistake, which led us to wasting time and energy in handling failures in the CI/CD pipeline, and made our Developer-on-Duty (DoD) shifts tedious. On this talk I’d like to share how we built effective observability into our CI/CD pipeline using intelligent data collection, dashboarding and alerting, to boost our response to failures and improve our quality of life on the way. This talk will give practical guidance on how to improve observability into your CI/CD pipeline. Whether you use Jenkins like we do, or other CI/CD tools, you’ll learn how to augment them and reach higher productivity.

uk: вхід без авторизації

name: How We Gained Observability Into Our CI/CD Pipeline: Using best of breed open source to monitor Jenkins


uk: Комп'ютерні науки

description: Unikernels promise fast boot times, small memory footprint and stronger security but lack in terms of manageability. Moreover, unikernels provide a non-generic environment for applications, with limited or no support for widely used libraries and OS features. This issue is even more apparent in the case of hardware acceleration. Acceleration libraries are often dynamically linked and have numerous dependencies, which directly contradict the statically linked notion of unikernels. Hardware acceleration functionality is almost non-existent in unikernel frameworks, mainly due to the absence of suitable virtualization solutions for such devices.  In this talk, we present an update on the vAccel framework we have built that can expose hardware acceleration semantics to workloads running on isolated sandboxes. We go through the components that comprise the framework and elaborate on the challenges in building such a software stack: we first present an overview of vAccel and how it works; then we focus on the porting effort of vAccel in various unikernel frameworks. Finally, we present a hardware acceleration abstraction that expose semantic acceleration functionality to workloads running as unikernels.  We will present a short demo of some popular algorithms running on top of Unikraft and vAccel show-casing the merits and trade-offs of this approach.

uk: вхід без авторизації

name: Hardware acceleration for Unikernels: A status update of vAccel


uk: Комп'ютерні науки

description: I2P ("Invisible Internet Project") is a peer-to-peer overlay network. Overlay networks (inappropriately called "darknet") are able to anonymize peers and to fully encrypt all messages within a network. I2P gained more attention in 2022. Lately some important changes to the protocol layer of I2P have been implemented: the cryptography has been modernized and the software packages were released end of 2022. This short talk shows the major changes, and whether the performance and stability of the I2P network got improved. This is one of the I2P reseed server maintainers and application developers talking (see links). The presentation has the following content: - Short introduction: the I2P network (3') - Overview of the latest changes (3') - Focus on the impact of the changes (5') - Summary and take-outs (2') - One or two questions (2')

uk: вхід без авторизації

name: I2P: Major Changes of the Peer-to-Peer Network: Cryptography of I2P Received a Major Update - an Overview of the Changes and its Impacts


uk: Комп'ютерні науки

description: Imaged based systems are considered safer to update as a new image will only be activated via reboot as a whole. Images are rather static though as the OS image is typically delivered by the OS vendor. Package based systems on the other hand are very flexible wrt installed software. However, since packages are typically updated individually at run time, there are non-atomic, intermediate states states that may lead to undefined behavior. This talk presents a hybrid model that behaves similar to an image based system while retaining flexibility of package based systems, building on ideas from SUSE's MicroOS.

uk: вхід без авторизації

name: Converging image and package based OS updates


uk: Комп'ютерні науки

description: Machine OS, designed for appliances used in lights-out/hands-off environments, is an environment for Secure and Trusted booting of an image-based Linux OS leveraging TPM 2.0 security chips to guard unique platform secrets only made available if the chain of trust from the platform, through the kernel and into user-space is verified. The platform secret is used to attest, at runtime, device and software veracity for creating clusters of systems with a common root of trust extended from the platform. The secured (PCR7) initial environment of Machine OS checks a signed (Machine OS CA) manifest of images present. It then verifies (dm-verity) the images before handing over execution control. Machine OS leverages opensource tools for building (project-stacker), signing (notary/cosign) and hosting (project-zot) such images. The design of Machine OS has some similarities with the UAPI proposal for Trusted/SecureBoot, making for an interesting comparison on design goals. Our design is focused around the goal not of preventing alternative boot images, but denying all images which are not verified access to a set of TPM-protected secrets. Furthermore, to support re-use of a single signed UKI by multiple unrelated projects, image manifests are signed by product certificates which are all signed by one company-wide CA, whose certificate is shipped as part of the (protected) UKI.

uk: вхід без авторизації

name: MachineOS: a Trusted, SecureBoot Image-based Container OS


Building initrds in a new way

uk: Комп'ютерні науки

description: The mkosi-initrd project builds initrds directly from system packages. This means that there is no separate dependency and packaging system. Normal system packages and services are used in the initrd. This means that we don't need to build a duplicate set of scripts. Systemd is used to the maximum extent — it sets up the environment and manages jobs in the initrd. Requirements and dependencies for startup tasks must be expressed as unit properties. Systemd's functionality is used to manage secrets, measure state, and load system extensions to extend the initrd. In this talk I'll cover the current state of the project (what works) and the plans for the future.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Let's have a look at openSUSE's MicroOS architecture and see how it implements the UAPI group's ideas of a modern, secure operating system, especially regarding deployment, update mechanisms, configuration file management and full disk encryption using the TPM Table of contents: * The general design (Btrfs snapshots, RPM packages) * Update and rollback mechanisms (transactional-update, libtukit) * Configuration file management * Full disk encryption implementation

uk: вхід без авторизації

name: openSUSE MicroOS design: A functional read-only OS in an imperfect world


uk: Комп'ютерні науки

description: Let's look at what Trusted Platform Modules (TPM) chips can do for you, and how they can help protecting your systems from online and offline attacks. We'll specifically focus on Linux image-based OSes, and how to secure them properly with a TPM and related technologies. We'll look at possible avenues for generic Linux distributions to make use of the now ubiquitous TPMs and how to catch up with ChromeOS, Windows and other OSes on this front. We'll discuss concepts such as TPMs, UKIs, SecureBoot, DDIs, dm-verity, LUKS and more.

uk: вхід без авторизації

name: Image-Based Linux and TPMs: Measured Boot, Protecting Secrets and you


Ubuntu Core: a technical overview

uk: Комп'ютерні науки

description: Ubuntu Core is a different kind of linux. It offers image-based updates and secure boot with disk encryption. This presentation is a technical explanation on how this is achieved. We will focus on what makes Ubuntu Core different from other distributions. Ubuntu Core is based on “snaps” which are readonly squashfs images with signed metadata. Everything on the system is a snap. This includes applications and the kernel. Snaps run in a lightweight container like environment with apparmor confinement and are isolated from each other and can only communicate via well defined security boundaries (“interfaces”). Then the main system is composed of a kernel snap, a bootloader snap, a base (rootfs) snap, and a snapd daemon snap. This granularity is useful to handle IoT hardware since much of the hardware needs custom kernels or bootloaders. Here a new initrd was developed and is presented in the talk. Some hurdles (like how to deal with /etc in a readonly image world) are also presented.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Confused about all these new acronyms? Look no further: we will introduce and decode common terminology and concepts that are needed to follow the development of image-based Linux, especially covering other topics that will be presented and discussed as part of the devroom. The UAPI Group introduced a set of acronyms, terms and concepts within the scope of image-based Linux. We will introduce topics such as UKI (Unified Kernel Image), DDI (Discoverable Disk Image), sysext (system extension), syscfg (system configuration), portables (portable services), and more. We will discuss where these concepts apply, what they can be used for, how they integrate and form the basis of our vision for image-based Linux, and where they are implemented and how today. Other talks in this devroom will make heavy use of these acronyms.

uk: вхід без авторизації

name: Devroom kick-off talk: UKI? DDI?? Oh my!!!: Introducing and decoding image-based Linux terminology and concepts


uk: Комп'ютерні науки

description: Ultrablue (User-friendly Lightweight TPM Remote Attestation over Bluetooth) is a solution to allow individual users to perform boot state attestation with their phone. It consists in a server, running on a computer, acting as the attester, and a graphical client application, running on a trusted phone, acting as the verifier. A typical use-case is to verify the integrity of your bootchain before unlocking your computer, to prevent offline attacks on an unattended laptop. It can also serve as a debugging tool for secure boot issues after firmware upgrades or as a second factor for disk encryption. During the boot of a PC, it is now common to have each stage store measurements of the next one into a TPM, in order to keep a tamper-proof log of the boot chain. Those measurements are then leveraged to seal secrets, eg. a disk encryption key, or to report the state of the device to a remote server in cryptographically secure way, using a procedure known as remote attestation. Remote attestation has slowly gained traction over the last few years, most notably among cloud providers such as Azure, to guard access to online resources. It is also a key element in validating dynamic root-of-trust measurements (DRTM), which reduce the trusted computing base compared to traditional UEFI-based boot chains, but require a trusted third-party to validate the final state of the system. Unfortunately, little progress has been made recently to enable individual users without access to server resources to reap the benefits of remote attestation. This is particularly frustrating considering that almost everybody carries a small trusted server with them all the time: smartphones. Building upon an idea by Matthew Garrett (Linux Conference Australia, 2020), we introduce Ultrablue (User-friendly Lightweight TPM Remote Attestation over Bluetooth), a solution to securely inspect and validate a TPM event log from a phone. Ultrablue consists of a command-line attester, running on a computer, and an Android graphical application, running on a trusted phone, communicating over encrypted Bluetooth low-energy (BLE). Pairing the phone and computer is made easier and more secure through the use of a QR Code. After a trust-on-first-use provisioning phase to enroll the computer on the phone, the phone can check that the boot chain has not been compromised in later boots. Sample scripts and a self-contained virtual machine are also provided as a reference of how to integrate Ultrablue in the boot process to guard disk encryption by a secret delivered by the phone. Future work includes improving the user interface to inspect and validate unexpected event logs, adding support for more versatile verification policies, and integrating Ultrablue into existing hardened systems such as Safeboot (safeboot.net). The Ultrablue project has been developped at ANSSI (https://ssi.gouv.fr) by Loïc Falkau--Buckwell, under the supervision of Nicolas Bouchinet and Gabriel Kerneis.

uk: вхід без авторизації

name: Ultrablue: User-friendly Lightweight TPM Remote Attestation over Bluetooth


uk: Комп'ютерні науки

description: If you nowadays work with and on the cloud or simply *-as-Code, chances are you came into proximity of ‘Yet Another Markup Language’ (YAML). Deceptively simple in appearance, YAML provides you with a plethora of ways to shoot yourself in the foot. This talk discusses a number of common pitfalls. In a nutshell: Why YAML is not as easy as you may think.

uk: вхід без авторизації

name: Is YAML the Answer?: … and if so, what has ever been the question?


uk: Комп'ютерні науки

description: During Covid a lot of public and private services switched to – in most of the cases -closed source or commercial services online solutions to book appointments and meetings. At, GFOSS, we adapted EASY!Appointments, an online open source platform for appointment management and Jitsi, an online open source meeting with audio/ video and combined them into to a seamless integration for booking an appointment that will take place online rather than physically.

uk: вхід без авторизації

name: Combining EASY!Appointments with Jitsi for online appointment management


uk: Комп'ютерні науки

description: Jubako is a new generic "container" file format. It allows you to store content and metadata is one file. You can read your data from the file in a efficient manner, without uncompress/extract the data from the file. We will also see Arx, a file archive (equivalent to tar/zip) which use Jubako. Jubako is a new generic "container" file format. It is to storage what XML is to serialization. It specify how you store things but it is up to you to define what do you want to store. Jubako support: - Arbitrary content - Arbitrary metadata - Selective compression (some content may be compressed while other may not) - Efficient random access (no need to extract the data to read it)

uk: вхід без авторизації

name: Jubako, a new generic container format: A new file format to store contents all together


uk: Комп'ютерні науки

description: Just as we need the ability to prove real-world identity, so will the need arise in the digital domain as the offline world slowly merges with the online world. But this time, let's improve on the concept and give people full sovereignty over their identity. Keyoxide is a new decentralized tool to verify online identities using modern cryptography through a system of claims and proofs. People use it to establish a verifiable digital passport that links to all their online accounts. These passports can even be anonymous. This talk briefly introduces the concept of online identity and explains how Keyoxide went about solving it in a decentralized way, using established cryptography standards and infrastructure, without needing blockchain-related technologies.

uk: вхід без авторизації

name: Keyoxide: verifying online identity with cryptography: A novel approach to secure decentralized online identity


uk: Комп'ютерні науки

description: Libre-SOC aims to develop a design for a hybrid CPU-GPU-VPU core for a family of System-on-Chip products, from embedded applications, routers, cell phones and laptops, all the way to high performance computing, using proposed scalable vector extensions for the tried and true POWER instruction set. Being a fully documented and transparent design is a core value of the project, ensuring mainline kernel integration with no effort wasted on reversing-engineering proprietary designs covered by NDA (non-disclosure-agreements), while avoiding untrusted binary blobs. The products should “just work”, at its maximum performance and feature set, with full involvement and support for the community. Last year, Libre-SOC labored to produce its first silicon, a test chip, and produced its first Linux-capable networked proof of concept on an FPGA (field programmable gate array) development board. Using a completely FLOSS toolchain, any developer can build and test this design on their own computer, run it in hardware in a supported FPGA development board, or even build a full ASIC chip layout. In this talk I’ll present topics of the ongoing architecture design and formal testing, being written in a modern, developer-friendly, Python-based hardware description language.

uk: вхід без авторизації

name: Libre-SOC: From architecture and simulation to test silicon, and beyond: A design for a fully documented and transparent hybrid CPU-GPU-VPU core, for a family of System-on-Chip products


uk: Комп'ютерні науки

description: Since its inception in early 2020 our podcast named Linux Inlaws has gathered an average audience of just short of 8,000 listeners per episode and continues to grow in this fashion. What started out as a hobby project (and to a certain degree still is) covers - peppered with a dash of humour - a wide variety of topics ranging from political and social to technology subjects; attracting key industry figures and projects including the Electronic Frontier Foundation, the Free Software Foundation Europe, Mozilla's CTO, Nextcloud and BSD core devs to name but a few guests on the show so far. The talk gives an overview of the history of the podcast since its creation followed by a discussion of the general approach, the philosophy behind the format and its organisation. A section on the technology stack that drives the highly automated workflow behind the scenes will be of interest not only for buddying fellow podcasters but anybody concerned with media production and distribution in general. In addition, the hosts will shed some light on the challenges we have faced over the years and how these were overcome. The talk concludes with a discussion of the road ahead for the Inlaws and their next twenty years (if not more :-) of making a difference in the community and beyond.

uk: вхід без авторизації

name: Linux Inlaws: A how-to on world domination by accident


uk: Комп'ютерні науки

description: Come and hear how Collabora Online (COOL) has improved over the COVID19 era, not only in core feature-function, but also in ease of access and deployment for everyone. Hear how (in partnership with PC versions) COOL can deliver on Digital Sovereignty, as well as about the latest developments in feature, functionality and integration with other projects. From making things much more beautiful with UX improvement & polish for users, to expanded Prometheus metrics for admins. Hear about interactivity improvements, CPU utilization wins, and lots of new features such as our new Grammar checking server integration with LanguageTool & DudenCorrector, as well as new easy font management APIs & tooling to improve interoperability. See how we can deliver scalable, secure, on-premise editing of your documents with a simple, easy to deploy office for the free world.

uk: вхід без авторизації

name: Collabora Online over lock-down: How LibreOffice technology in the browser got better


uk: Комп'ютерні науки

description: Come hear about a new approach to enabling browser deployment of rich Office functionality - built on top of allotropia's investment in enabling the core LibreOffice technology to compile to Web Assembly (WASM) - combined with the Collabora Online front-end. Hear about how this can be used to provide a fall-back (non-collaborative) editing mode for when you loose your network connection for a while, and about the plans to re-synchronize documents on the return from such a tunnel.

uk: вхід без авторизації

name: Collabora Online and WASM: Assembling off-line Collabora Online with the Web.


uk: Комп'ютерні науки

description: Make Collabora Online yours Discover all the shining new additions to the user interface and learn how to customize and integrate it everywhere Collabora Online is quite flexible in the means that you can alter to your personal taste without the need to change other core components. Tag along and see how you can customize it without a sweat and hear all the ins and outs of all the options at your disposal. Come get a glimpse of how you can integrate it in your application. There is no requirement to be eligible to attend, as I'll be talking in a casual fashion and with examples and hopefully illustrate each step of the way.

uk: вхід без авторизації

name: Make Collabora Online yours: Customize and integrate it everywhere


uk: Комп'ютерні науки

description: Having your Office suite crashing is rather annoying, but crashing while opening or saving files is unsolvable for end users. The upstream LibreOffice project regularly runs testing against this on master - but is it possible to do it on stable branches maintained for customers? In this talk I'll introduce the set of test files and upstream scripts, and show how we use them to deliver added stability of LibreOffice for our customers.

uk: вхід без авторизації

name: Crashtesting LibreOffice in the backyard


uk: Комп'ютерні науки

description: LibreOffice now supports dark mode on its major ports. Apple and Microsoft effectively omitted to support dark mode in the various APIs LibreOffice was using to render its widgets, making this surprisingly difficult to implement.

uk: вхід без авторизації

name: LibreOffice Dark Modes: multi-platform support was surprisingly difficult


uk: Комп'ютерні науки

description: The really easy stuff is mostly done. This talk is about several improvements to LibreOffice which required lots of prep work and interesting challenges to get improvements in a very large and messy codebase.

uk: вхід без авторизації

name: Turbocharging an elephant. Making Libreoffice faster.


uk: Комп'ютерні науки

description: In the talk, Pranam will explain and demonstrate how feature locking and restrictions work in Online. Using such methods integrators can control which features to deliver to which user or group.

uk: вхід без авторизації

name: Feature Locking and Feature Restriction: Integrator's way to unlock potential


Footnotes in multi-column sections

uk: Комп'ютерні науки

description: A presentation about fixing a seemingly small bug, that becomes more complex, as the bug was planned part of a feature, because of the difference between writer's, and word's multi-column footnote capability.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: What motivates a potential code contributor? And a full-time free-software developer? A fun project. LibreOffice development is fun, but also a real challenge, so we must consciously find the flow in it (not quite an oxymoron). While I present my recent LibreOffice, Numbertext, LibreLogo and Hunspell developments, partially sponsored by FSF.hu Foundation, Hungary, I collect the ten funniest moments of them, that were left out of the release notes (i.e. https://wiki.documentfoundation.org/ReleaseNotes/7.5#Default.E2.80.9Cspellout.E2.80.9Dnumberandcurrencyformats, https://wiki.documentfoundation.org/ReleaseNotes/7.4#Newtypographicsettings, https://wiki.documentfoundation.org/ReleaseNotes/7.4#NewnumberinginShowChanges_mode etc.).

uk: вхід без авторизації

name: Fun project by design – How LibreOffice development can be full of flow?: The ten funniest moments of my recent Numbertext, LibreLogo, Hunspell & LibreOffice developments


uk: Комп'ютерні науки

description: Story of an interoperability bug fixing adventure where the problem turned out to be deeper than it appeared at first glance. Showcasing how there are multiple approaches to a single interoperability problem. And the why, when and how of coming up with alternative solutions to already existing ones.

uk: вхід без авторизації

name: An Interoperability Improvement in LibreOffice Impress Tables


uk: Комп'ютерні науки

description: Short introduction into integrating LibreOffice using LibreOfficeKit with external software. Described most important code pieces and where look for information, how to add new features, which API we provide. What can be done with tiled rendering.

uk: вхід без авторизації

name: LibreOfficeKit – bridge between your application and LibreOffice


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Marrying Collabora Online and LibreOffice WASM: Running Collabora Online in WASM


uk: Комп'ютерні науки

description: A migration to LibreOffice Technology is in a professional deployment a complex technical and non-technical task. Over time both worlds - the proprietary and the open - evolve further, so new or changing technical challenges for a migration appear and motivations for doing it are changing since the beginning of such projects over 20 years ago. May it be e.g. technical new devices like mobile/tablets or online apps or may it be motivations changing from cost arguments to a gain on digital sovereignty for example, all these new developments should be covered by state of the art migrations. A short journey through old but still present and new aspects are presented in this talk and how The Document Foundation proof quality of migration consultants for this with its certification program.

uk: вхід без авторизації

name: Migrating to LibreOffice Technology - old and new motivations and challenges


uk: Комп'ютерні науки

uk: вхід без авторизації

name: News from the ODF Toolkit: Quick overview: Intro, use cases & updates from the past months and likely future!


uk: Комп'ютерні науки

description: Some proprietary graphic formats from the 90s like WMF are device dependent and hard to support. The standard is hard to navigate and implement and a lot of bugs can show up. Creating files for unit testing is not necessarily easy either. Come and find out how WMF bugs are debugged, fixed and tested.

uk: вхід без авторизації

name: Supporting old proprietary graphic formats


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Improvements to LibreOffice PDF accessibility: Come to see what improvements we made to PDF/UA support in LibreOffice


uk: Комп'ютерні науки

description: Processing the wealth of Bugzilla data the LibreOffice generates can be done in R, and presenting it in Shiny is a good fit for it. Making a useful dashboard for the community is not only about pretty graphs and an avalanche of stats, it's also about directing potential QA contributors to relevant information and specific tasks, and prioritising some of the most pressing onces.

uk: вхід без авторизації

name: Putting the R in LibreOffice: a Shiny dashboard for QA: Using R and the Shiny framework to help the LibreOffice QA community


State of the Toolchain

uk: Комп'ютерні науки

uk: вхід без авторизації


Cleaning up the unittest code mess

uk: Комп'ютерні науки

description: The unittest code had grown a lot in the past years, creating a lot of duplicated and unstructured code. It was time to give it some love and clean it up.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk is about WollMux, a form & templating generation extension for LibreOffice, that was recently moved under the LibreOffice project umbrella. We'll give a brief overview, talk about recent changes, and what's in store for the future.

uk: вхід без авторизації

name: A Rocket Engine for LibreOffice Templates: Come to see what's in store for the recently-moved WollMux forms and templating engine extension for LibreOffice


uk: Комп'ютерні науки

description: LibreOffice was capable of handling form filling in Writer for a while already. In the meantime, the competition introduced Structured Document Tags, which is their default since 2007, and our fields and form shapes model them poorly. Writer Content Controls are meant to perform a great handling of this third type of form filling. Some recent developments also happened in this are in the past half year: PDF export, combo boxes, titles and aliases. Come and see how this now starts to work in Writer, what still needs doing and how you can help.

uk: вхід без авторизації

name: Writer Content Controls -- what happened in the past half year


uk: Комп'ютерні науки

description: Providing support for mainstream applications is fundamental for a new/custom OS to have impact in the short and long term. This is generally achieved through the development of a compatibility layer, currently an ad-hoc and unoptimized process that involves a vast amount of unnecessary engineering effort. There is a need for efficient methods to measure precisely what OS features are really required by a given set of target applications, gathering results that can help drive the development of compatibility layers by pinpointing what features should be implemented in priority. In this talk I will present a streamlined methodology to optimize the development of the OS features required to build a compatibility layer in order to support a set of target applications, focusing on the system calls of the Linux ABI. To avoid engineering effort overestimation, we rely on dynamic analysis. The methodology revolves around a tool called Loupe that measures, for every system call invoked by an application processing an input workload (e.g. benchmark, test suite, etc.), which ones really need to be implemented and which ones can be faked/stubbed/partially implemented. Given a set of applications and input workloads, Loupe can compute for a given OS an optimized compatibility layer development plan, aiming to support as many applications as possible, as early as possible. We analyze Loupe's measurements over a wide (100+) set of applications, and demonstrate in particular that the effort needed to provide compatibility is significantly lower than that determined by previous works using static analysis: our study shows that as much as 40-60\% of system calls found in application code are not even needed to successfully run meaningful workloads and even full test suites.

uk: вхід без авторизації

name: Loupe: Designing Application-driven Compatibility Layers in Custom Operating Systems


Lua for the lazy C developer

uk: Комп'ютерні науки

description: Larry Wall (of Perl fame) famously cited Laziness as one of the three great virtues of the software developer (the other 2 being Impatience and Hubris). C is still the lingua franca of systems programming, but if you want to do C programming right one thing you can't afford is to be lazy. You have to do manual memory management, behavior is written in stone at compile time and the joke goes that every non-trivial project has it's own linked list implementation. There exists however a not so well-hidden superpower that allows you to program in C, get the performance where it counts, and still have plenty of time for chatter around the coffee machine. That superpower is the Lua programming language. This lightning talk will approach Lua from a C programmer's perspective: how Lua can help alleviate some pain points of C, illustrate some common patterns for how to integrate Lua with C (and vice versa) and how you can get up and running with Lua in your C project.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: New technologies such as Kubernetes and methodologies such as microservices are changing how software is developed, delivered, and deployed. Additionally, bringing new products to the hands of users is happening much faster than before, making Continuous Delivery a critical aspect of doing business. The way we do business is evolving at a tremendous pace and keeping up with the technology and tooling can often put strains on companies regardless of size or number of employees. Knowing where to start is one issue but then once you’ve started how do you scale. Do you need more tools, which tools do you need, what resources do you have to help you pick the right path to keep your company running efficiently, how do you train your developers while they continue to do their day jobs? The CD Foundation was formed and incubates projects that address these challenges in an open-source, vendor-neutral manner. Using best practices from graduated projects like Jenkins and Tekton as well as incubating projects like CDEvents and Spinnaker, the CD Foundation is working on the CD Reference Architecture to help take the guesswork out of tooling and scaling and creating a blueprint on how to establish, structure or modernise your CI/CD infrastructure. This talk will go over some examples of the CD Reference Architecture and resources available to help make CD accessible for your organisation.

uk: вхід без авторизації

name: Making Continuous Delivery Accessible to All


uk: Комп'ютерні науки

description: MicroBlocks is a graphical programming language for 32 bit microcontrollers. It was built to be small, fast and human-friendly, and throughout its development we've followed our four guiding principles: liveness, parallelism, portability and autonomy.

uk: вхід без авторизації

name: MicroBlocks: small, fast, human friendly


uk: Комп'ютерні науки

description: The idea of the microkernel OS architecture is more that 50 years old and the term itself is just a few years younger. Over the years, it has been implemented in countless variants and modifications, it has served as a basis for intriguing OS experiments, it has gained strong position in the mission-critical and safety-critical areas and while it is still not the dominant architecture in the general-purpose desktop OS domain, it has had major influence on the "mainstream" operating systems as well. This talk, however, is not about the history. Instead, we describe where are the microkernel-based operating systems today, who works on them and why, who uses them in production and why, where they aim for the future. The purpose of this talk is also to present the basic practical experiences with the existing microkernel-based operating systems — not to compare them, but to provide the potential users and contributors with an initial sorted list of operating systems they should look into in more detail depending on their needs.

uk: вхід без авторизації

name: The Microkernel Landscape in 2023: Newcomers, regulars, late bloomers, elders, oddballs and others


uk: Комп'ютерні науки

description: Conferences love to show you the latest and greatest framework versions and language features. But those new technologies can feel a world away back at work. And it can be hard to justify the time spent to upgrade something that’s not broken, such as JUnit 4. What if you could migrate in mere minutes? With OpenRewrite you can! A collection of fine grained recipes combine to achieve large scale migrations of frameworks and tools related to the JVM. And since it uses a lossless semantic tree, refactorings are guaranteed safe. Upgrade Spring, Micronaut and Quarkus. Adopt JUnit 5; switch to AssertJ. Replace Log4j with Logback. Fix Checkstyle violations. A world of quick and easy migrations awaits!

uk: вхід без авторизації

name: Major Migrations Made Easy With OpenRewrite


uk: Комп'ютерні науки

description: Java has been my bread and butter for almost two decades. Several years ago, I started to learn Kotlin; I never regretted it. Though Kotlin compiles to JVM bytecode, I sometimes have to write Java again. Every time I do, I cannot stop pondering why my code doesn’t look as nice as in Kotlin. I miss some features that would improve my code’s readability, expressiveness, and maintainability. This talk is not meant to bash Java but to list some features I’d like to find in Java.

uk: вхід без авторизації

name: What I Miss In Java (The Perspectives Of A Kotlin Developer)


Open Source Software at NASA

uk: Комп'ютерні науки

description: Software has been a common thread across all of NASA's major achievements from the Moon landing to the deepest images of our Universe. Today, NASA relies on, releases, and contributes to Open Source Software to advance its scientific missions. From powering our databases monitoring our planet and Sun to running in our missions on other planets, Open Source Software is critical to addressing NASA's biggest challenges on climate change, exploring the solar system, and discovering life beyond Earth. The Ingenuity helicopter, exploring the surface of Mars, is guided by Open Source Software. The amazing images of the earliest galaxies from the James Webb Space Telescope were made possible by open source software developed openly and contributed back to the community. Now, NASA is taking the next steps to further broaden the impact of open source by applying it to the scientific process with its Open Source Science Initiative. NASA is directly supporting open source scientific software through grants and contributions. To further advance scientific reproducibility and reuse, the scientific software underlying future scientific results will be made openly available and unrestricted mission software will be developed openly to allow for community contributions.

uk: вхід без авторизації


Golden Signals with Cilium and Grafana

uk: Комп'ютерні науки

description: One of the most important things when running applications in an environment like Kubernetes is to have good observability and deep insight of their performance. However, for many applications it can be challenging to update existing applications to provide the observability you need. Cilium leverages eBPF to provide observability data with Prometheus metrics for your applications without having to modify the application itself. In this session we will demonstrate how Cilium powered with Hubble and the Grafana LGTM (Loki for logs, Grafana for visualization, Tempo for traces, Mimir for Metrics) stack is able to show Service to Service communication, monitor Golden Signals, detect transient network layer issues and identifies problematic API request with transparent tracing. One of the most important things when running applications in an environment like Kubernetes is to have good observability and deep insight of their performance. However, for many applications it can be challenging to update existing applications to provide the observability you need. Cilium leverages eBPF to provide observability data with Prometheus metrics for your applications without having to modify the application itself. In this session we will demonstrate how Cilium powered with Hubble and the Grafana LGTM (Loki for logs, Grafana for visualization, Tempo for traces, Mimir for Metrics) stack is able to show Service to Service communication, monitor Golden Signals, detect transient network layer issues and identifies problematic API request with transparent tracing. Using a demo application we will demonstrate performance and metrics for that application and how the metrics change when increasing request volumes. We will show how a new configuration of our application introduces error rates and request duration. Finally we will demonstrate how tracing headers for the application can be exported with the Hubble HTTP metrics as Exemplars to link metrics to traces in Grafana to monitor each HTTP Request and its duration using Tempo. The audience will walk away with knowledge how to monitor service-to-service connectivity, collect tracing data and golden metrics using standard Prometheus, Grafana, and OpenTelemetry with Cilium and eBPF.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Creating a CNI plugin is a simple, but mostly undocumented, task. If you add plugin chaining the complexity is lofted by a layer. We’ll be getting you to where you can create your base plugin and add it to a chain, and inspect the links of that chain, the CNI result passed between each. With CNI chains each plugin depends on information created at the previous step in the chain. We’ll be relying on tools such as cnitool, dummy CNI plugins to chain and custom json configs. We'll show the tools we use every day to create a multi-step CNI plugin in a NetworkAttachmentDefinition. We’ll talk about how to use different capabilities, handle logging and writing a custom plugin in the chain. We’ll revisit concepts from the CNI spec such as prevResult and go from zero to a working multi-chain CNI plugin. We'll talk about how we architect CNI plugins to make debugging easier, and how to deploy them in a testing and production environment.

uk: вхід без авторизації

name: "CNI Unleashed": How to deal with CNI plugin chains.


uk: Комп'ютерні науки

description: In my presentation I'll provide complete overview of tool called FastNetMon Community. I'm original author of tool and current project leader. It has focus on DDoS detection for Telco / ISPs networks and works with majority of well known telemetry protocols such us Netflow, IPFIX and has solid support for BGP.

uk: вхід без авторизації

name: DDoS attack detection with open source FastNetMon Community


uk: Комп'ютерні науки

description: The Interplanetary File System (IPFS) is a decentralized file system for building the next generation of the internet. IPFS is a distributed system for storing and accessing files, websites, applications, and data. In this talk, we’ll dive into how decentralised storage with IPFS works under the hood as it builds on top of many long-known, well established techniques and yet is more than just the sum of its parts. We’ll cover basic working principles like content-addressing and content-routing, followed by the results of an extensive measurement campaign. Answering questions like: How does content-addressing work? Who stores my data if I upload something to IPFS? How do you retrieve content if you only know the hash of it? How fast is that process?

uk: вхід без авторизації

name: Decentralized Storage with IPFS: How does it work under the hood?


uk: Комп'ютерні науки

description: At FOSDEM 2022 I presented libp2p's hole punching mechanism, overcoming NATs and firewalls with no dependencies on central infrastructure. One year has passed since. We rolled it out to live networks. We launched a large measurement campaign with many volunteers deploying vantage points in their home network, punching holes across the globe. In this talk I will give an overview of the largest hack of the internet (aka. hole punching), dive into learnings running it on IPFS (~50_000 nodes) and finally present the data collected through our measurement campaign. If you always wondered how hole punching works, how much more successful UDP is over TCP, whether IPv4 or v6 makes a difference, which ISP is most friendly to p2p and how to overcome symetric NATs, join for the talk!

uk: вхід без авторизації

name: Hole punching in the wild: Learnings from running libp2p hole punching in production, measured from vantage points across the globe.


uk: Комп'ютерні науки

description: What is an IDS and Network Security Monitoring in 2023? Monitoring, Detection, challenges and solutions while chasing APTs, CVEs and Ransomware. Challenges keep raising the bar for the security monitoring systems to deal with. From limiting visibility resulting to more and wider encryption adoption to log volumes, to sophistication and amplification of malware attacks and threat actors. When multiple systems and integrations are involved the defenders are even more overwhelmed with engineering related tasks. APTs and malware actors use any means necessary at their disposal. So should the blue teams around the globe. The need for more visibility and faster response arises dramatically. Being able to have full network forensic evidence - including protocol, flow file transactions and packet capture to support the IDS generated alerts - is essential for defenders. However the sheer volume and infra needs can be prohibitive for many deployments scenarios as it is not always only related to just cost. If Open Standard is a key element in lowering the cost and complexity of integration, information sharing is a key element in getting fast detection and reaction. In this talk we will walk through some of the challenges that Suricata faces and has solved as it keeps evolving. All that while doing an actual hands on review of real life examples of CVEs exploits and APT, Ransomware proliferation.

uk: вхід без авторизації

name: What is an IDS and Network Security Monitoring in 2023?: Monitoring, Detection, challenges and solutions while chasing APTs, CVEs and Ransomware.


uk: Комп'ютерні науки

description: Configuring your network setup can be hard sometimes, especially for sysadmins working with remote systems. Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner. In this talk we will see how Nmstate will help us to exploit the full potential of NetworkManager by making use of checkpoints, rollbacks and verifications. Configuring routes, routing policy, DNS and interfaces have never been easier

uk: вхід без авторизації

name: Networking management made simple with Nmstate: Taming the internals of NetworkManager


MetalLB and FRR: a match made in heaven

uk: Комп'ютерні науки

description: MetalLB is a load-balancer implementation for bare metal Kubernetes clusters, using standard routing protocols, including BGP. In the past year, the native go based BGP implementation has been replaced by an integrated FRRouting instance running in a container. In this talk I am going to briefly introduce how MetalLB leverages BGP to implement Kubernetes services, describe the integration mechanism with FRR and how it made the MetalLB evolution faster and easier. I'll finally explain how the MetalLB CI works, and how we leveraged FRR to mimic various network topologies in order to extend number of scenarios we want to cover.

uk: вхід без авторизації