uk: Комп'ютерні науки

description: Managed Kubernetes offerings deliver a great set of features [autoscaling, loadbalancing, introspection, backups, automatic updates]. Applying the Confidential Computing concept to entire Kubernetes clusters ensures always-encrypted data and eliminates the service provider's access but also contradicts the managed approach. Fully isolated and self-managed clusters provide maximum control and privacy but do not offer smart features out of the box. This results in a tradeoff between ease of use and security. We present a Kubernetes-native approach, allowing a cluster to manage itself while offering many features known from fully managed alternatives. The solution comes in the form of open-source microservices that provide secure and autonomous joining of new nodes, autoscaling, failsafe node OS updates, and even Kubernetes upgrades. The talk covers microservice design patterns that give control back to the Kubernetes administrator. Additionally, we explain how remote attestation can help our system to verify each software component of a Kubernetes node during the bootstrapping process, adding that extra level of security to an autonomous architecture. Finally, we explain how you can securely automate the Kubernetes node lifecycle: How nodes can prove their integrity and can join Kubernetes clusters autonomously without relying on a trusted third party to mediate the process.

uk: вхід без авторизації

name: Autonomous Confidential Kubernetes: How to securely manage K8s from within K8s


Andrew Jeffery

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: Distributed datastores such as etcd are widespread, particularly in the world of orchestration. They support the core of services like Kubernetes, providing storage for and access to critical data. These orchestration platforms are being increasingly run in the cloud but the core datastores don’t support natively running in confidential environments, despite the critical data they store. The ‘lift-and-shift’ approach leaves changes to be made to fully leverage the confidential computing context, making it unsuitable. On the other hand, native confidential applications can be difficult to build from scratch, hence the development of frameworks such as CCF which provide small-TCB building blocks for distributed services. LSKV, the Ledger-backed Secure Key-Value store, is built on top of CCF and provides a familiar etcd API, being able to seamlessly slot into existing systems. It keeps cloud operators out of the trust boundary and makes governance operations publicly available to audit on a ledger. LSKV aims to democratise confidential computing, lowering the barrier to entry and making it available to the masses.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: LSKV: Democratising Confidential Computing from the Core

FOSDEM VZW

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: Most CISOs and a great majority of developers are not aware of the importance of encrypting data in use (the core idea behind Confidential Computing). Confidential Computing is evolving rapidly and is starting to gain adoption by CSPs, but user adoption is still slow. But what if encrypting data in use became the default way to deploy applications, both in the Cloud and even on premises? In this session, we’ll discuss what are the main roadblocks towards this vision, what we can do about it, and what are the main implications if encrypting data in use becomes the norm. There are three states in which data can be protected: at rest, in transit, and in use. Encrypting data at rest (e.g. files, objects, storage) and in transit (e.g. TLS, HTTPS) have become a common practice, while encrypting data in use (the core idea behind Confidential Computing) is still an emerging concern. But while a common practice today, encrypting data in transit only gained wide adoption with the Let’s Encrypt movement, which was fundamental in changing the general mindset from “encryption is only important for e-commerce and banking applications” to “let’s encrypt everything by default, no matter what’s the application”. Confidential Computing is just starting to emerge, and most use cases are restricted to sectors like healthcare and banking, which require greater assurances that their sensitive code and data are protected. We will look back at the Let's Encrypt project, which started 10 years, to understand why this movement was so successful and how we can replicate this success for encrypting data in use. Our hope is to make encrypting data in use the default way for deploying applications, which will fundamentally change the security approach that exists today.

uk: вхід без авторизації

name: We need a Let’s Encrypt movement for Confidential Computing: The importance of protecting data in use


uk: Комп'ютерні науки

description: Increasingly, industry is using Linux on embedded systems to take advantage of its flexibility and existing (open source) functionality. This allows them to connect Cyber-Physical Systems, which have stringent safety requirements, to the Internet so that they can do remote management and monitoring. However, the flip side of the flexibility coin is decreased availability. Not only can a lot more go wrong in such a complex operating system, if an attacker would be able to get root access on such systems, all bets are off. Our research project makes use of hardware Trusted Execution Environments (TEE), now readily available on even low-end commodity devices, to provide a secure and always available execution context for safety-critical programs. By integrating a real-time scheduler inside of OP-TEE OS running in an Arm TrustZone TEE, it is possible to safeguard the real-time execution requirements of these programs, even under the influence of Linux kernel panics and remote attackers with root privileges. This presentation will explain the system architecture that resulted from our research, its implementation on a common Arm processor and a quick demo showcasing the core functionality.

uk: вхід без авторизації

name: Keeping safety-critical programs alive when Linux isn’t able to: Using OP-TEE to deliver availability to applications in a Trusted Execution Environment.


uk: Комп'ютерні науки

description: Standing on the shoulders of the TDX and SEV giants, the RISC-V AP-TEE Technical Group is currently defining the threat-model, the reference architecture and the interfaces to support confidential computing use cases on RISC-V. All the TG discussions happen in the open and all the related reference implementations are open source, representing a unique opportunity for interested contributors to participate in the elaboration of such a fundamental piece of technology. During this presentation we will describe the currently proposed architecture, highlighting how it is focusing on multi-tenant, hardware-virtualized workloads. We will also explain how both the guest and host APIs will support this architecture by stepping through a few concrete confidential computing use cases. Next we will present Salus, the reference Trusted Security Manager (TSM) implementation. The last part of this talk will go into the short and longer term tasks the TG is going to tackle, like e.g. trusted IO and attestation. During this last section, we will try to highlight where and how new contributors could help the RISC-V community design and implement this confidential computing architecture.

uk: вхід без авторизації

name: Open Source Confidential Computing with RISC-V


uk: Комп'ютерні науки

description: Billing system is a key component of every business and having your own, brings numerous advantages in front of competition. In this talk Dan will present a complete set of APIs exposed by CGRateS for building a real-time billing system with both prepaid and postpaid capabilities. CGRateS is a battle-tested Enterprise Billing Suite and Routing System with support for various prepaid and postpaid billing modes.

uk: вхід без авторизації

name: Build your own Real Time Billing using CGRateS


uk: Комп'ютерні науки

description: Free and Open Source Software “won”–it successfully democratized access to code and technology—but the industry changed. Cloud computing has created an always online, software-defined world orchestrated around running software-as-a-service. This reintroduced practical limits to software freedom as hyperscalers create proprietary differentiation through secretive operation and management software. In practice, we have become dependent on proprietary services built on a FOSS foundation. This proprietary capture threatens to undermine the very ability to create Free and Open Source Software. This presentation explores suggestions (such as the Operate First initiative) for how FOSS can, and must, evolve to face these challenges and democratize the cloud. Free and Open Source Software has successfully democratized access to code and technology. FOSS has become the common, universal base for software development. However, despite “winning” the industry, FOSS largely stops with 'software at rest' (the runtimes, toolchains, and code components used when running your environment and building your applications). Upstream projects can take these software components and run them, but putting them into production at scale is mostly protected as proprietary knowledge by the companies offering cloud services on top of FOSS. FOSS enabled the evolution of computing through cloud and microservices, as well as the increasing ubiquity of software control in the physical world. With this widespread adoption the challenges to FOSS have changed: the software industry has remade development into the aggregation of black-box services running on infrastructure controlled by a third party. It has, in essence, re-created the problem of the mainframe. To survive, FOSS must evolve through open sourcing operations. Operate First is one way to do that.

uk: вхід без авторизації

name: The End of Free Software: How the Cloud threatens FOSS and what we can do about it


uk: Комп'ютерні науки

description: Collabora Online (COOL) brings LibreOffice technology to the browser and integrates with a large number of different Open Source products. Come and hear how you can plug into new APIs we have for Grammar checking (with LanguageTool), Bibliography Management (with Zotero), and translation integration (with DeepL). Hear how an integration can work, and the new SDK samples to build on that we provide to make things easy for developers. Also catch a glimpse of the many improvements to the product that we've made to improve collaboration performance, interactivity, as well as core LibreOffice technology pieces around intereoperability and performance. Hear about our plans around off-line in the browser, and ask any questions you have.

uk: вхід без авторизації

name: Collaborating with Collabora Online: How to re-use Collabora in your work or project


uk: Комп'ютерні науки

description: This talk will illustrate how organizations can configure and deploy OSS enterprise search server Fess, based on our own experiences. Fess is, by and large, a well-documented, user-friendly tool. Yet, no matter how good the tool is, deploying a search server on your own brings a number of challenges. I will talk about the challenges we had and how we overcame them. Our hope is that 1. You will have a good grasp of what it is like to configure and deploy an enterprise search server, whether or not you are considering deploying one at the moment. 2. Should you decide to deploy one, you can (hopefully) do so with a significantly lower cost. Today's technology companies often use multiple content management systems, resulting in information (e.g. source code, document files, and wiki pages) fragmented and stored in many places. Consequently, engineers sometimes end up searching multiple locations one by one, repeating the same query at each place, to look for the information they need. A solution would be to build and deploy a search server which, given a query, fetches the relevant code and documents from all the content management systems, much like a web search, such as Google, does on the Internet. This would be a daunting task, as it would essentially mean setting up and maintaining the whole end-to-end system of search as a service, from web crawlers to search box UI. Fortunately, there is an OSS search server built for this exact purpose. We are here to share the knowledge, experiences, and insights we have gained so far, so that you can build your own enterprise search server, using OSS. In this talk, I will first explain what search-related problems we had to solve, as well as briefly touching on what enterprise search is in general. Next, I'll go over what Fess is and explain its core features, which will serve as an introductory, informational session for this lesser-known OSS enterprise search server. Moving on to the core part of the talk, I will dive deep into how we configured, customized, and deployed Fess for our specific purpose. Our objectives were 1. to index contents on issue tracking/project management tools we use (GitLab & Redmine) and in repositories (Git & Subversion) 2. to enable users to search the indexed contents from a single search box. We achieved both of these objectives but we had to overcome several hurdles. I will share things such as what pitfalls/shortcomings Fess has and how to overcome them. I will also talk about what we have made and contributed; our dev team wrote several patches for fixing and customizing Fess. 3 of the patches are bug fixes and 2 of them have been merged into the mainline. 2 other patches are customizations designed to meet our specific requirements. One of them allows the crawler to pass the custom authentication page of our GitLab implemented with SAML and Keycloak. The other patch re-maps the crawled filesystem paths to the webpage URLs; this was crucial to cut the time to index contents in repositories by reading files on the local filesystem instead of following links on the webpages. The goal of this segment is to provide the information which will allow future Fess users to deploy it with a dramatically smaller time and effort investment. Then, I will share our experiences with our preliminary deployments inside TOSHIBA. We will explain resource requirements and performance, such as how long it takes to crawl and index a given size of resources (basically web pages and files) using how much computing resource. This will help future Fess users make estimates on how much computing resource they need to secure in order to deploy it. Along with that, we will reveal details such as how Fess's ability to index contents inside Microsoft Office documents and PDF files helped engineers.

uk: вхід без авторизації

name: Deploy an enterprise search server with Fess: Search GitLab, Redmine, and repositories with a single query


uk: Комп'ютерні науки

description: As has become a bit of a tradition, let's look at what's new in Nextcloud in 2023! 3 releases again, with tons of improvements all over. A quick overview: bulk upload, profile page, appointment booking, Nextcloud Office and Nextcloud Backup in Nextcloud 24, which we named Hub II. 3 months later, Hub II/25 introduced User migration, smart file locking, 4x lower db load, Reactions & media tab in Talk, Reply to calls & messages in Desktop client, Undo send & schedule emails. Then, Hub 3 brought a complete design overhaul with much accessibility work, Photos 2.0 with image editor & face recognition, message expiration, polls and direct document creation in Talk, an org chart in Contacts, a lot of performance work and more. Don't think you can now skip the talk - there's a ton more!

uk: вхід без авторизації

name: Nextcloud Numbers and Hubs: Our traditional yearly overview of what's new in Nextcloud


uk: Комп'ютерні науки

description: Enabling third parties to integrate with your core application requires far more than allowing the use of the same API that your front-end already consumes. Access control and cross-domain requests are usually the first spots where problems appear. Based on the experience of integrating OpenProject with Nextcloud we cover the most typical road blocks that product developers should remove. 2023 is different: Like never before publicly funded initiatives strive for replacing big tech’s data hungry cloud services with open-source products. Development teams are busy improving the cross product user experience by developing integrations and hit the same obstacles again and again. This talk tries to create awareness for typical integration developer needs.

uk: вхід без авторизації

name: Optimizing your core application for integration: Learnings from integrating OpenProject with Nextcloud


uk: Комп'ютерні науки

description: Following GitHub’s adoption and ”flavouring” of Markdown in 2009, many other major projects such as Reddit, Stack Exchange have followed suit, even WhatsApp now uses it to add formatting to your instant messages. That’s mainstream! Tiki has long wished for a common wiki markup language, starting with involvement in Wiki Creole and inclusion of PEAR Text_Wiki adaptors since 2010? we started integrating markdown and now, in Tiki 25, offer it as an alternative syntax in all text areas, such as wiki pages, blog posts, comments and so on. In future versions Markdown will become the only active syntax.

uk: вхід без авторизації

name: The Relentless March of Markdown: And its arrival in Tiki 25


uk: Комп'ютерні науки

description: We can observe in the latest years that individuals, companies and institutions are more driven towards Open Source Software due to privacy concerns, vendor lock in, data lock in and ethical reasons. When choosing a tool for Knowledge Management, many great Open Source tools are available and can meet any needs from documentation networks to digital intranets and even public websites. However, migrating from a tool to another can be difficult and discouraging due to missing modules, incompatibility, unclear documentation or a steep learning curve. At XWiki we understood these concerns and made efforts to continuously improve our migration tools and welcome any user wishing to migrate from other software to XWiki. During this presentation we will demonstrate how to seamlessly migrate from Confluence and Sharepoint to XWiki while maintaining the content structure, history, and metadata.

uk: вхід без авторизації

name: Migrating from proprietary to Open-Source knowledge management tools


uk: Комп'ютерні науки

description: Building an open-source community with hundreds of people from all over the world who come together to develop highly complex software systems or collaborate on cutting-edge research is no easy task. It requires communication tools that support transparency in decision making, asynchronous collaboration, and efficient use of community members’ time. We know there are key (and overlapping) groups of people who make up a vibrant community: project leaders, core and casual contributors, new and experienced folks, and end users. Looking at these categories, we can define shared and specific communication needs for working and collaborating together. Zulip has made key design choices and invested in developing many features to address these particular needs. Let's dive in and explore together the unique characteristics of Zulip and how they can (and have) impacted collaboration and communication in FOSS and research communities.

uk: вхід без авторизації

name: Transparent, asynchronous, efficient communication: How the Zulip open-source team chat application addresses the needs of open-source and research communities


Data-in-use Encryption with MariaDB

uk: Комп'ютерні науки

description: First 3:52 minutes of video does not have audio. Data-in-use encryption has been a long standing open problem for decades. In contrast to data-in-rest encryption, data-in-use encryption guarantees that data remains fully encrypted throughout the runtime, that is while querying, reading or writing into the database. In this talk, we show how data-in-use encryption can be easily realized leveraging confidential compute. The nice thing is, no changes to the code base and devops process are required.

uk: вхід без авторизації


Deep Dive Into Query Performance

uk: Комп'ютерні науки

description: If you look at data store as just another service, the things Application cares about is successfully establishing connection and getting results to the queries promptly and with correct results. In this presentation, we will explore this seemingly simple aspect of working with PostgreSQL in details. We will talk about why you want to go beyond the averages, and how to group queries together in the meaningful way so you’re not overwhelmed with amount of details but find the right queries to focus on. We will answer the question on when you should focus on tuning specific queries or when it is better to focus on tuning the database (or just getting a bigger box). We will also look at other ways to minimize user facing response time, such as parallel queries, asynchronous queries, queueing complex work, as well as often misunderstood response time killers such as overloaded network, stolen CPU, and even limits imposed by this pesky speed of light.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Package managers are essential tools in any Linux system, designed to install, upgrade, remove, and manage software. For several years, Fedora had YUM, which became DNF eleven years ago. Now, DNF5 will replace DNF and be the new Fedora standard. In this talk, we will give an introduction to DNF5. We aim to address our new design principles and how our choices fix some of DNF's design flaws. We will present a live demo of the new product to showcase some features of DNF5 and make comparisons with DNF. Lastly, we will cover our plan to improve communication, inclusion, and openness with the open-source community. It is public knowledge that the DNF codebase became cluttered and, at times, substandard, cutting off a large slice of the open-source community from participating in the development process and decision-making process. Likewise, historical design decisions held DNF back from evolving into a modern and sustainable package manager. We want to answer how certain design issues were addressed, and why the structure of DNF5 impacts environments such as the desktop, containers, and CI. Moreover, we will go over the user experience of our command-line interface in the live demonstration, with some examples of common use cases and a speed comparison of processing commands between DNF and DNF5. Lastly, we will discuss how DNF5 enables us to work closer with the community. A thoroughly documented codebase, transparent upstream issue tracking, and open feature planning and delivery are all requirements that we intend to fulfill. Our target audience is people with some degree of expertise in package management or who are proficient using DNF.

uk: вхід без авторизації

name: DNF5: the new era in RPM software management: How we rewrote the codebase and started loving the community


uk: Комп'ютерні науки

description: This is the 4th edition of the "Status of AMD platforms in coreboot". As usual the talk will cover the most recent news around the AMD support in open-source firmware ecosystem and updates of the topics covered in previous years. The current situation of coreboot project will be disclosed along with new deprecations and shifting more platforms out of the main tree. The history of AMD cooperation in coreboot projects reaches 2007 where the first contribution appeared for the Geode LX processors. AMD's open-source support continued for many years until now (with some break). Recent coreboot release enforced new requirements on the features supported by the silicon code base. More aging AMD platforms kept losing interest and many of them (including fully open ones) starting to cause unjustifiable overhead, because of accumulated technical debt. And yet again we experience similar situation as with the famous 4.11 branch becoming de facto stable branch for some more AMD platforms (open-source AGESA family14, family15tn, family16kb). Despite the efforts to keep the platforms in the tree by implementing the necessary changes, they landed onto the stable 4.18 branch. Nowadays AMD is releasing the newest AGESA/FSP with the cooperation of hired coreboot developers. The support covers modern mobile Ryzen chips on Chromebook devices. We (3mdeb) trying to support the AMD platforms by reimplementing the ASUS KGPE-D16 (FSF RYF platform) support in coreboot. However, the situation is growing direr as the maintainership of PC Engines platforms by 3mdeb has ended. We would like to present Dasharo plan for long term stable and sustainable support for older platforms. If you are interested in open-source firmware for most open x86 platforms on the market feel free to tune in and discuss the ideas with us.

uk: вхід без авторизації

name: Open Source Firmware status on AMD platforms 2023 - 4th edition: OSF on AMD 4th edition


Passwordless Linux - where are we?

uk: Комп'ютерні науки

description: Passwordless authentication is making a lot noise. Use of FIDO2/WebAuthn tokens and other passwordless means to login to web services is all the rage but there isn't that much available to make the technology usable without troubles for 'traditional' Linux systems, locally and remotely. For past several years FreeIPA and SSSD teams have been working on enabling end to end passwordless access in centralized and local environment, be it corporate or home deployment. This talk will go into details of our progress in passwordless access implementation for Linux systems. In 2022 FreeIPA project introduced ability to authenticate users against OAuth2 identity providers (IdPs). This functionality allows to obtain Kerberos credentials after authentication and authorization has been done by the external IdP. As many OAuth2 IdPs allow passwordless authentication with WebAuthn tokens, a true passwordless transition across Linux systems is now available, from login to console, raising privileges within PAM services (e.g. sudo access), to accessing remote systems over SSH. We hope to expand this support with native FIDO2/WebAuthn integration as well. The work is not complete yet and needs a lot of collaboration across multiple open source projects. Come to this talk to see a demo and discuss how we can improve our passwordless experience together.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The Internet of Things (IoT) is increasingly driven by sensor data, with devices taking measured actions based on everything from wind speed and direction, vital body functions, illumination intensity, and temperature. In this session we will showcase how to build a fully functional sample IoT monitoring application built on the Flask framework and utilizing InfluxDB as its backend. With integrations to visualization libraries such as Plotly, creating automated alerts with InfluxDB as well as data downsampling.

uk: вхід без авторизації

name: Building an Plant Monitoring App with InfluxDB, Python, and Flask with Edge to cloud replication: Plant monitoring with open source tools


uk: Комп'ютерні науки

description: Who doesn't know about ls, chmod or cp? Who isn't using it daily? Coreutils are critical components of any Unix. According to its Wikipedia page, the first versions of cp or chown have been released in November 1971. Almost all Linux distros are based on the GNU implementation. Fast forward today, a community spawned to reimplement the coreutils in Rust. We are able to boot a Debian with it, build Firefox or LLVM, etc. This presentation will explain why we are re-implementing the wheel. But also how we are doing it, share some of the corner cases we have been facing, why we are (sometime) faster, etc We will also quickly mention the usage of Rust in the Linux kernel. With these two projects, we think that we will see more and more core piece of the Linux ecosystem in Rust.

uk: вхід без авторизації

name: Reimplementing the Coreutils in a modern language (Rust): Doing old things with modern tools


uk: Комп'ютерні науки

description: Many low level features of architectures are implemented in GCC as builtin functions. Builtin functions look superficially like any C function, but are in fact intrinsic to the compiler and represented as patterns to be matched in the machine description. Builtin functions are often used to access unique functionality of individual machine instructions. Being integrated within the compiler, they are more efficient than using simple inline assembly code. For RISC-V, they offer an excellent way to expose the functionality of instruction set extensions to the C/C++ programmer. Adding a builtin function to GCC is not that difficult, but neither is it completely trivial. In this talk we will show you how to add builtin functions using examples from the OpenHW Group's CV32E40Pv2 processor core.

uk: вхід без авторизації

name: How to add an GCC builtin to the RISC-V compiler


uk: Комп'ютерні науки

description: GNU Guix is a from-source distribution with binary substitutes available. It is also a functional package manager, meaning that all the inputs are hashed and the build results are placed in their own destination folder. Guix also does its best to minimize bootstrap seeds, instead relying on a few cross-compiled bootstrap binaries used to build all other packages on the system. This provides some interesting bootstrap issues, especially for newer architectures, as we need to recreate the bootstrap path as it may have existed years ago in order to support programming languages. Some languages, like nodejs or ocaml, need to have support backported only a few versions. Others like java need more than a decade. Rust needed to use an alternate implementation of rustc to be bootstrapped and Haskell currently isn't on the roadmap.

uk: вхід без авторизації

name: Porting RISC-V to GNU Guix: A year in review


uk: Комп'ютерні науки

description: The Open Hardware Group is a large industry/academic consortium developing a family of fully open source, commercial grade RISC-V cores, branded as CORE-V. These are supported by a full software ecosystem. In this talk we will look at the challenges of developing a vendor specific software ecosystem, how this ecosystem relates to the official upstream projects, and particularly the technical challenges in developing, maintaining and upstreaming vendor specific software. Although CORE-V is a completely standard RISC-V architecture, it supports a large number of custom ISA extensions, and it is the support of these extensions that creates most of the challenge. Many of these extensions come from the PULP research group at ETH Zürich, but some are pre-freeze versions of what will become standard RISC-V extensions. The upstream projects generally provide mechanisms to support vendor specific variants, for example by use of the vendor field in the target triplet. Thus rather than the generic riscv32-unknown-elf-gcc compiler, we can have the riscv32-corev-elf-gcc compiler. However this requires modifications to the code to use this information to control when CORE-V specific functionality is to be enabled, and this talk will explore these. In one specific case (vendor specific relocations), we are waiting on standardization from the RISC-V psabi committee, but otherwise this is all using well proven existing technology. The work has also served to expose gaps in the upstream projects. For example, while versioning of ISA extensions is standardized, the code base for the GNU assembler lacks the infrastructure to handle this. Similarly many ISA extensions require builtin (intrinsic) function support, but the upstream tools have only a handful of builtin functions, and the infrastructure for RISC-V builtins is very small. The talk cannot cover detail of every tool and operating system being developed, so will concentrate particularly on the CORE-V GCC tool chain. However we will draw parallels with the work going on in CORE-V specific simulators and in CORE-V specific operating systems.

uk: вхід без авторизації

name: Bringing up the OpenHW Group RISC-V tool chains


uk: Комп'ютерні науки

description: QtRvSim is a graphical RISC-V microprocessor simulator developed to aid computer architecture understanding. It is designed to cover the track of an undergraduate course based on the book "Computer Organization and Design" by Patterson and Hennessy. The class can begin with a single-cycle microarchitecture and gradually add more complex features like pipeline, hazard unit (with or without forward paths), configurable data and instruction cache, emulation of basic system calls, and finally, memory-mapped peripherals. The simulator provides an editor with an integrated assembler. The online version and course materials are available at comparch.edu.cvut. The simulator is cycle-accurate (memory operations finish within one cycle), compliant with official RISC-V tests, and supports RV32IM, RV64IM (CLI-only), and Zicsr. Featured peripherals are LEDs, knobs with buttons, a terminal, and an LCD display. It is available for Linux, Windows, macOS, and WebAssembly and is developed on GitHub. Many course materials, recordings, and edited lecture videos are also freely available at comparch.edu.cvut.cz. Czech Technical University in Prague, Technical University in Graz, and the University of Colorado at Colorado Springs are currently employing QtRVSim in their classes. Our previous MIPS edition (QtMips) is used by the National and Kapodistrian University of Athens and Charles University in Prague.

uk: вхід без авторизації

name: QtRVSim—Education from Assembly to Pipeline, Cache Performance, and C Level Programming


uk: Комп'ютерні науки

description: I will demonstrate FPGA-based 64-bit RISC-V computer, capable of booting and running the riscv64 port of Fedora. Using Free/Libre packages available as part of the Fedora repositories, this machine is capable of recompiling not only its own software (e.g., kernel, glibc, gcc), but also its own gateware (i.e., FPGA bitstream), completely from source code, all the way down to (but not including) the physical (FPGA) silicon. Modern hardware development shares many similarities with software: design and specification in a programmatic hardware description source language (HDL), and compilation of said sources into either photolitographic masks etched into silicon for Application Specific Integrated Circuits (ASICs), or into configuration data (bitstream) for a Field Programmable Gate Array (FPGA). Hardware vulnerabilities (accidental or intentional) can be inserted during any such lifecycle stages: as part of the design in HDL sources, during compilation where buggy or malicious toolchains generate malfunctioning designs from clean HDL sources, or during ASIC fabrication, where masks are altered to etch backdoors or Trojans directly into the silicon. Once fabricated, ASICs are difficult, expensive, and impractical to check for vulnerabilities, which can be as bad as a privilege escalation backdoor allowing for a total system compromise, even in the absence of any software exploits available to the attacker. Let's begin by mitigating against ASIC fabrication-time backdoor insertion by using soft-IP-core hardware blocks on FPGAs, which are fabricated in the absence of any knowledge of the final design details, and also consist of a regular grid of identical, generic configurable blocks -- making it easier to inspect for defects. Having settled on FPGAs for hardware designs requiring enhanced assurance, we can mitigate against HDL source and toolchain vulnerability insertion by insisting on openly available sources to both, and on the ability of the system to be self-hosting, i.e., to rebuild everything, from source, without relying on assistance from any external "black box" or proprietary components. I will demonstrate a Fedora capable RISC-V computer based on the Rocket CPU, using LiteX for the rest of its chipset, deployed on a Lattice ECP5 FPGA board, with the bitstream generated from sources by a fully Free/Libre toolchain consisting of Yosys, Trellis, and NextPnR. Most importantly, the computer will be capable of (slowly) rebuilding its own bitstream, by being capable of directly executing the Yosys/Trellis/NextPnR toolchain.

uk: вхід без авторизації

name: Self-Hosting (Almost) All The Way Down: A FPGA-based Fedora-capable computer that can rebuild its own bitstream


uk: Комп'ютерні науки

description: Real-time open source messaging systems are easy to design and code when small, servicing a few hundred users, and with limited media handling features. When an open source project becomes successful, however, the community of users often demand a level of scalability that the original design did not anticipate - and the entire project with its ever increasing codebase (in both size and complexity) can fail miserably during this transition. Rocket.Chat as an open source project has to cross the chasm not only once but twice in its history. The first time we took the wisdom of the time and bolt-on a multi containerized instances approach to the monolith project. The result is both surprising and somewhat functional - easily servicing 10s of thousands of users. Satisfying the demand at that time. Continued success of the project led us to the second transition into a world-scale (approaching hundreds of thousands of users) rich messaging system. This transition required a complete re-architecture of the monolith server - an engineering debt that we knew we had to pay before long. The result, after two long years with a lead R&D team, is what can be described loosely as a “micro services” based scalable-by-function backend. In this talk, we will go into some technical details of these two transitions; and fill the community in on a few interesting back stories along the way.

uk: вхід без авторизації

name: Scaling Open Source Realtime Messaging System for Millions


uk: Комп'ютерні науки

description: Schema changes at scale must keep the data accessible and cannot block any clients from using a table. TiDB, a distributed MySQL compatible database, solves this by transitioning through compatible states, so clients can transition to the new state asynchronously and continue to use the data. PingCAP, the developers of TiDB, has evolved the schema changes implementation to be both faster and more tuneable, which will be shown in the presentation. The presentation will explain things like why a delete only state is needed, also how something like REORGANIZE PARTITION can be executed online without blocking. New development like generating and ingesting SST files for speeding up data reorganization for ADD INDEX and distributing the data reorganization load.

uk: вхід без авторизації

name: Online schema change at scale in TiDB: How does schema changes work in a distributed SQL database


uk: Комп'ютерні науки

description: Just using OSS, namely kamailio and rtpengine and using a public cloud provider for hosting (it can be anything), we want to share how we have put an oncall live credit card payment system PCI/DSS certified together. We will also go through the infrastructure parts and networking requirements that show how we also did this to be stateless as possible and horizontal scalable towards anyone's need. This will be a company sponsored talk by people that advocate for OSS technology adoption. On the call center industry it is often needed to process payments while on call with customers, Talkdesk is a cloud native contact center solution provider where customers demand such feature for their daily usage. The talk goal is to show how we at Talkdesk have replaced proprietary resources previously in use, just by OSS namely kamailio & rtpengine and how we have architected a new solution for oncall live credit card payments PCI/DSS certified. We will go through some of the issues we were having before with a proprietary dependent implementation and on how we replaced it by a totally new solution totally owned by Talkdesk that just replaced the old buggy proprietary based implementation. We will also share how we made the implementation secure, stateless, scalable PCI/DSS certified also being cloud native.

uk: вхід без авторизації

name: Secure payments over VoIP calls in the cloud: How to architect an oncall live payment system in the cloud using Kamailio & RTP Engine.


uk: Комп'ютерні науки

description: Semihosting provides console, filesystem access, and other functions over a debug interface, such as JTAG. This is especially useful when traditional bootstrap interfaces such as serial, USB, or Ethernet are not available in hardware. This talk will discuss implementing improved semihosting support in U-Boot; semihosting's strengths, weaknesses, and how to work around them; and how to semihost U-Boot with OpenOCD on your next board bringup. Semihosting has long been used to provide host services for embedded ARM systems, especially microcontrollers. However, its use on Linux-capable systems has been much patchier. Vendor-supported recovery modes often use JTAG, but seldom make use of the features provided by semihosting. U-Boot has supported loading files using semihosting on ARM Virtual Express platforms since 2014, but lacked serial support and integration with standard commands. In release 2022.07, such support has been added, motivated by use on QorIQ platforms. NXP QorIQ platforms require a valid configuration programmed into the boot source in order to boot. Although there is a fallback configuration, it does not support traditional firmware loading interfaces such as USB or Ethernet. By using U-Boot semihosted over JTAG with OpenOCD, a recovery image can be loaded which is sufficient to complete device programming. The same binaries can be used to boot from eMMC as well as JTAG, simplifying configuration. Because semihosting is standard across ARM platforms which support JTAG debugging, similar strategies can be reused whenever JTAG is the most convenient communication method. The target audience of this talk includes users of ARM or RISC-V platforms with JTAG Boot; users of U-Boot, OpenOCD, and QEMU; and developers of other bootloaders who are interested in adding semihosting support.

uk: вхід без авторизації

name: Semihosting U-Boot: Look, ma, no serial!


uk: Комп'ютерні науки

description: The general consensus is that is too hard or too expensive to run a small business on entirely free software. After running my company for 5 years on entirely free software I think this is not the case. We have instant communication, shared calendars, groupware, single sign on, and a single administration interface! Things have worked out really well and in many ways are better integrated than trying to combine multiple different cloud based services. In this talk I will walk through how our infrastructure works, what the pitfalls were, and what the benefits are. At the end I'll give a short demo on a couple of virtual machines to show off the user and admin experience.

uk: вхід без авторизації

name: Clear skies, no clouds in sight. Running a 14 person company on only free software.: They say it can't be done, they say it's too much work. But is it really? After 5 years of running Prehensile Tales on entirely free software I think I can answer this.


uk: Комп'ютерні науки

description: Why use many SDKs when you can have one? Trixnity is not only cross platform capable, but also suitable for clients, bots, servers, appservices or anything in between (e.g. proxy). This talk shows how this is even possible and what challenges there were to make it possible. This talk gives a brief introduction why Trixnity has emerged as yet another Matrix SDK. It shows what Trixnity does differently and why. For example, a cache on top of the database was implemented by accident, database transactions are saved asynchronously and timeline events are handled in a special way.

uk: вхід без авторизації

name: Trixnity: One Matrix SDK for (almost) everything written in Kotlin


uk: Комп'ютерні науки

description: TwPM project aims to increase the trustworthiness of the TPM module (hence the TwPM), by providing the open-source firmware implementation for the TPM device, compliant to the TCG PC Client Specification. Trusted Platform Modules (TPM) enable measured boot and support verified boot, Dynamic Root of Trust for Measurement, and other security features. Currently, the market is dominated by the TPMs based on chips from large silicon vendors. The common characteristic of these modules is the proprietary firmware implementation. This presentation will outline the project's goals, design, current challenges, and status. The goal is also to gather a community around this project and exchange ideas on the subject.

uk: вхід без авторизації

name: Trustworthy Platform Module: An attempt to create open-source firmware for TPM


blkhash - fast disk image checksums

uk: Комп'ютерні науки

description: Using checksums for verifying disk image download is very common, but how do you verify uploading a disk image to a virtual disk or verify that a backup is correct? The standard tools such as sha256sum cannot help since the disk image and the virtual disk may use different image formats. Even if the image formats match, standard tools are too slow to handle huge virtual disks which typically contain a small amount of data and a large amount of unallocated space. In this talk we will learn about the blkhash algorithm for computing a fast checksum of sparse disk images, up to 3 orders of magnitude faster compared with standard algorithms, the libblkhash C library that you can use in your program, and the blksum command line tool for computing checksum of common disk image formats. The blkhash project grew from the ovirt-imageio project, providing fast disk checksums since oVirt 4.4. The blkhash project adds support for multiple threads, uses the high performance libnbd library, and is implemented in C. The project is released under LGPL license so you can use it in your project or package it for your distribution.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: As of October 2022, we run a 15 minutes fuzzing session for all Pull Requests submitted to the Virtio Device implementation in rust-vmm. But implementing the fuzz targets was not smooth sailing. In this talk, we go over the challenges of implementing fuzzing for Virtio Devices and how to overcome them. Being one of the most critical components in a virtualization stack, the Virtio Device Model is a great target for fuzzing. Fuzzing is a security focused testing technique through which you can discover vulnerabilities in code that deals with untrusted input. When fuzzing Virtio Devices one of the biggest challenges is mocking the device-driver communication. This talk will show how we approached this in rust-vmm, and why fuzzing should be taken into consideration from the early development stages.

uk: вхід без авторизації

name: Fuzzing Device Models in Rust: Common Pitfalls


uk: Комп'ютерні науки

description: In the Kubernetes resource allocation model, abstract concepts like resource request and limits, container QoS (quality of service), etc are being used. These concepts are eventually being converted under the hood to cgroup configurations, which have their own resource management model and concepts like CPU shares, CFS quotas, etc. In the context of Kubevirt, an add-on to Kubernetes to allow running cloud-native VMs alongside containers, this information is crucial. In fact, our own “Cgroup Manager” was implemented to mutate and configure the container cgroups that are being defined to us by Kubernetes. One especially interesting challenge was to support a true CPU Pinning for VMs running on top of Kubernetes. This presentation will take you through our journey to support true dedicated CPUs for VMs. I hope that after taking part in this presentation, the audience will better understand Kubernetes and Cgroup resource allocation models and how they can be further utilized in the future. In addition, I wish that the info presented here will improve the collaboration between different technologies in the ecosystem like Cgroups, KVM, libvirt, Kubevirt and Kubernetes by raising awareness to how they all interact together in different and interesting use-cases.

uk: вхід без авторизації

name: A journey through supporting VMs with dedicated CPUs on Kubernetes


uk: Комп'ютерні науки

description: OKD Virtualization is the community project bringing traditional virtualization technology into OKD. OKD is an Open Source Community Distribution of Kubernetes optimized for continuous application development and multi-tenant deployments. OKD is a sibling community distribution to Red Hat OpenShift Container Platform. Meet the OKD Virtualization community, learn new features, discover deployment patterns and get involved! OKD Virtualization is the community project bringing traditional virtualization technology into OKD. OKD is an Open Source Community Distribution of Kubernetes optimized for continuous application development and multi-tenant deployments. OKD is a sibling community distribution to Red Hat OpenShift Container Platform. OKD Virtualization is built on top of the KubeVirt project and its sibling operators. The Hyperconverged Cluster Operator project ensures an opinionated and robust deployment automating common Day-1 (installation, configuration, etc.) and Day-2 (re-configuration, failover, etc.) operations. The Hyperconverged Cluster Operator is available in the Openshift Community Operators catalog and so also on your OKD cluster. In this session you will learn about fresh OKD Virtualization features like: - Deploying a single node development/testing environment on CodeReady Containers (with nested virtualization) on your laptop - Using KubeVirt Tekton tasks to automate VM common tasks (creating/copying VMs, generating ssh keys, executing commands into a VM or manipulating disks with libguestfs tools) in a CI/CD fashion - Automatic importing and updating of pre-defined or custom boot sources After this session newcomers will know what OKD Virtualization is while experienced users will get a sneak peek of new and upcoming features.

uk: вхід без авторизації

name: OKD Virtualization: what’s new, what’s next: New features on OKD Virtualization 4.11 and 4.12 and next challenges


Using SPDK with the Xen hypervisor

uk: Комп'ютерні науки

description: This talk will present our usage of SPDK, Storage Performance Development Kit, with the Xen hypervisor and discuss memory sharing mechanisms in hypervisors from a security and performance perspective. This talk will present our usage of SPDK, Storage Performance Development Kit, with the Xen hypervisor and discuss memory sharing mechanisms in hypervisors from a security and performance perspective. SPDK is a userspace NVMe driver allowing access to these types of storage devices with minimal overhead from the operating system. It allows you to maximize the performance usage of new storage technologies, as well as having faster development times of applications serving IO because of the easier development cycle of running in userspace. In our case, we use it as a storage backend for virtual machines where an SPDK application establishes a connection with virtual machines through shared memory. This sharing of memory, in a virtualized environment, gives access to the outside world to a virtual machine. In the case of Xen, the sharing mechanism, called Grant Table, uses the hypervisor as a trusted intermediary to allow sharing memory with another virtual machine. The backend doing device multiplexing only get access to areas explicitely permitted by the frontend. This permits the guest to not completely trust the storage provider software with complete access to private memory, but the extra security of this model doesn't come for free. We would like to discuss improvements that could be added that would still keep the security aims of the Grant Table mechanism while providing a high performance interface.

uk: вхід без авторизації


W3C WebRTC Meetup Update

uk: Комп'ютерні науки

description: W3C RTC Working group gathers the RTC community members to define the standards of cross-browsers RTC communication. What is the purpose of this group? Who can join? What does it involve? What are the key challenges the group faced last year? What is the upcoming news in 2023? In this session, you will learn how the community gets organized to emerge new RTC standards.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Forth is an extremely minimalistic yet powerful language. Its minimalism has historically made it the language of choice to explore and directly interact with the lowest levels of systems, traditionally the hardware. However, you can also use Forth to explore the low levels of the web platform: WebAssembly. In this talk, I’ll dive into the details of WAForth, a tiny but complete Forth interpreter and dynamic compiler for and written in WebAssembly. You’ll see some Forth in action, read hand-written WebAssembly code, get introduced to tools used for working with WebAssembly, hear about JIT compilation for WebAssembly, and learn how you can move all this outside the web platform into native code.

uk: вхід без авторизації

name: Exploring WebAssembly with Forth (and vice versa): Artisanal, minimal, just-in-time compilation for the web and beyond


uk: Комп'ютерні науки

description: WebRTC was obviously popular with developers during the peaks of the pandemic, but how is it doing now? Did all those new projects die, putting the community back at pre-pandemic “normal” levels or is WebRTC still going strong? Are there many new WebRTC-related repos? Is WebRTC still attracting new users and what are they doing? How are newer API’s like Insertable Streams, WHIP, and WebCodecs doing? In this talk, Chad Hart of webrtcHacks and Kranky Geek will answer these questions with a fresh analysis based on a review of over a million GitHub events since 2019.

uk: вхід без авторизації

name: Quantitative Analysis of Open Source WebRTC Developer Trends


uk: Комп'ютерні науки

description: Guile has a new garbage collector coming! The Whippet collector improve throughput and scalability of Guile programs, and is built in such a way that it can be swapped into most any language runtime that uses that BDW-GC. With minimal adaptations in user code, you get a collector that's competitive with the industry-standard Boehm-Demers-Weiser conservative collector, but which scales better for multiple allocation threads. As incremental changes are made in Guile to integrate Whippet, we will also gain the ability to compact the heap, even while keeping conservative scanning of the C stack. This talk presents the structure of whippet and some performance numbers for how it improves Guile program behavior. The Whippet garbage collector provides an abstract interface that user programs (like Guile) can use to allocate memory, and also provides a number of collectors that implement that API. One of them is the BDW-GC collector: this will be the first step in Guile's switch to Whippet, to change to use the Whippet API but keep the same GC implementation. Compile-time flags choose the collector implementation, and in the next step, Guile will switch over to Whippet's main collector, an Immix-derived mark-region collector. This collector has a few modes, including a heap-conservative mode that mimics BDW-GC, as well as a stack-conservative mode that allows evacuation and compaction of objects that aren't referenced by conservative roots. The talk will include a quick overview of Immix-style collectors, for context. Whippet scales: it has been carefully designed to avoid contention during allocation, and avoid locking except during collection. Collection is optionally parallel and optionally generational. We'll examine the performance and practical impacts of these choices, in synthetic test harnesses and in real Guile programs. Whippet is designed to be included into a user's C source code, as it needs compile-time configuration. The talk will show examples of the size of the collector and its memory efficiency when compared to BDW-GC and to a semispace collector.

uk: вхід без авторизації

name: Whippet: A new production embeddable garbage collector: Replacing Guile's engine while the car is running


uk: Комп'ютерні науки

description: Element is one OSS module in the Sovereign Workplace (dOZ) together with Univention, Open-Xchange, Nextcloud and Collabora. To serve individual Business Cases with Element, we are developing widgets and continuously extending the widget API. This talk is going to start 5 minutes earlier than originally scheduled, following the cancellation of the talk "Load Testing Matrix Homeservers" We will explain shortly the idea and status of the Sovereign Workplace and then show widget examples (BarCamp, Meetings, Polls, Whiteboard). With the current and future widget API Element can become an application platform. We will then deep-dive into the API for a bit and show how we use it and what challenges it presents.

uk: вхід без авторизації

name: Matrix Widgets in the "Sovereign Workplace" for the German public sector


uk: Комп'ютерні науки

description: Wikidata and OpenStreetMap are collaborative open data projects that contain structured data for real world places and things. Adding links between the projects makes the data more useful, but doing this by hand is laborious. I've written a software tool that automates much of the process. Editors of OpenStreetMap can use my software to search for a place or region, generating a list of candidate matches from Wikidata, which can then be checked and saved to OpenStreetMap. Linking the two projects isn't without controversy. They use different licenses which raises questions about what information from one project can be copied to the other. In the presentation I will give details of a new version of the editing tool. I will talk about the benefits of linking, the process of finding matches, the community response - including the controversy - and how people can get involved.

uk: вхід без авторизації

name: Tools for linking Wikidata and OpenStreetMap: Software for adding links between open data projects


uk: Комп'ютерні науки

description: Cryptography is undergoing a renaissance and explosion in algorithms that open up entirely new design spaces. Techniques such as zero-knowledge snarks, multi-party computation and homomorphic encryption allow us to create software that just 5 years ago was unimaginable. This unlocks a new field that we term anonymous engineering. This talk will briefly explain how they work from a high level mathematical overview, present the abstraction they provide and show how they can be composed into applications. We will also show demos of writing ZK proofs and deploying them in our software. The original designers of UNIX in the 80s had a vision of computing which would allow groups of people to collaborate. From that vision was born the modern conceptualisations of networking, multi-user accounts, filesystems and multi-process OS. But they were limited at the time by the computer resources available, the network bandwidth and the algorithms. Since then the paradigm of computing has remained largely stagnant. Also the Linux world after many setbacks is doing soulsearching and trying to understand what made us truly unique, getting back to first principles and our original values. We believe the time is ripe for the grand mission of reinventing the paradigm of computing. Recent developments in p2p & consensus algorithms, and crypto algorithms in particular ZK lay the groundwork for us to extend the original vision of the UNIX creators much further. Our wish is to draw the attention of the free software community to these magical and important developments. As an example, we want to also present the software stack that we are creating. Our team at DarkFi has created: - Anonymous transfers - Anonymous exchange - Anonymous DAO (treasury management where participants have voting rights) - Encrypted task manager - Anonymous chat software with spam protection (no registration, uses ZK proofs) All of this software is p2p and censorship resistant. We will explain other potential software designs such as authentication of information, anonymous auctions, proof of reserves, private statistical processing of info, and more.

uk: вхід без авторизації

name: Zero Knowledge Cryptography and Anonymous Engineering: The development of zk-snarks in recent years and explosion in algos has opened up an entire new design space of anonymous engineering.


Zig and Guile for fast code and a REPL

uk: Комп'ютерні науки

description: Zig is a minimalistic new language that is unapologetically focused on performance, tellingly with a blazingly fast compiler. It is advertised as a replacement for Thompson, Ritchie, and Kernighan's C, but it may even replace C++ in places. Zig uses the C-ABI and does not do garbage collection, so it is ideal for binding against other languages, such as C, Python, Ruby etc. In this talk I will present combining GNU Guile with zig. I'll argue that everyone needs two languages: one for performance and one for quick coding. With Zig and Guile you can use both at the same time and you won't have to fight the Rust borrow checker either. Zig is a minimalistic new language that is unapologetically focused on performance. In this talk I'll present binding Zig and Guile.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Choosing the right components of a digital architecture is essential but not enough. As needs and technology evolve, organisations need to design systems in a way that allows to add end extend capabilities to it, without incurring in a complex refactoring. In this talk we will start with a simple website and progressively add capabilities and "layers" to it, from visual components to service orchestration, leveraging a MACH (Microservices based, API-first, Cloud-native SaaS and Headless) approach.

uk: вхід без авторизації

name: A practical approach to build an open and evolvable Digital Experience Platform (DXP)


uk: Комп'ютерні науки

description: In 2022, we saw growing concerns around app stores as run by Apple, Google, and Microsoft -- and meaningful legislative and regulatory interest. The concerns came from many different directions, including privacy, antitrust, gatekeeping decisions, and platform exclusivity. I'll discuss this recent activity with a focus on how it all has impacted or may impact user freedom. I'll survey the responses we've seen from free software projects and organizations, and share insights about current app store terms in relation to free software licenses (especially copyleft), and alternative models of distribution like F-Droid. This will lead to an assessment of what this all means for the future -- are there opportunities for the free software movement to get more involved in influencing ongoing policy conversations that could dramatically impact our future, and our ability to get free software into the hands of users?

uk: вхід без авторизації

name: Reckoning with new app store changes: Is now our chance?: Recent legal and policy developments around app stores and what they mean for free software


uk: Комп'ютерні науки

description: Embedded doesn't mean we can't have nice things. As Linux kernel developers we have grown accustomed to the comfort afforded to us by Kconfig, device trees, the device-driver model, multi-platform kernel images, the kernel having sane defaults and virtual filesystems giving us shell-level access to debug and introspect the system. Why can't we have this in the boot environment? We can and you'll see how, welcome to barebox. What began as a rejected patchset for adding Kconfig to U-Boot has now been a full-fledged bootloader in its own right for 13 years. barebox is powering millions of devices around the world. In his talk, Marco will give a brief overview of barebox from a kernel developer's point of view and show how easy it is to add support for a new i.MX8M board. The attendees will see barebox in action and learn how to leverage the VFS for hardware bringup, kernel debugging and booting the system in production.

uk: вхід без авторизації

name: barebox, the bootloader for Linux kernel developers


uk: Комп'ютерні науки

description: Come to see some of the actions the community has done to push Kotlin further, and get inspiration on how to join or lead that movement for higher software quality and compatibility. Wish SDK X supported Kotlin Multiplatform? Wish it had coroutines and Flows instead of callbacks? With some bug you encounter in the IDE was fixed? Wish that idea you just had makes it to Kotlin? Wish function as a service from cloud provider Y had first-class Kotlin support? Wish scripting in app Z supported Kotlin? Well, YOU, can join the push to have more and better Kotlin APIs, and better Kotlin tooling, beyond IntelliJ IDEA and Android Studio. How? There's no definite answer, but you'll learn stories about how people are leading that push, all for higher software quality, and wider compatibility. Do you know the story of how Kotlin got installed on all GitHub Actions runners? You'll learn about that, too. Hopefully, that will inspire you enough to become an effective ally in the push for more Kotlin worldwide!

uk: вхід без авторизації

name: Be pushy! Let's join for wider and better Kotlin support worldwide


Optimizing BPF hashmap and friends

uk: Комп'ютерні науки

description: The BPF Hashmap and other hash-based BPF maps including Stackmap and Bloom Filters use an old hash function, jhash. Therefore, this should not be difficult to improve the maps performance by using a better hash function. However, this is true only in the ideal world, i.e., when we load the Linux kernel with mitigations=off. This is not as straightforward in the real world. In this talk I will describe obstacles which appear in the real world and how to approach them. Also, I will talk about how to benchmark BPF maps and kernel code in general and look into how fast BPF maps are actually performing.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: We will learn about the process of monitoring databases with a single open-source monitoring tool. We will analyze the data produced in customizable dashboards and identify the metrics that show us vulnerabilities in our databases wherever they are deployed. We'll look at ways to set up real-time alerts and get the most out of monitoring dashboards. After this talk, attendees will gain fundamental knowledge about database monitoring; they will be able to install Percona Monitoring and Management, an open-source tool to obtain metrics from their databases. In addition, they will be able to quickly identify the essential components of the Grafana-based PMM user interface and will be able to generate their dashboards.

uk: вхід без авторизації

name: Monitor your databases with Open Source tools like PMM


eBPF loader deep dive

uk: Комп'ютерні науки

description: Everyone who ever used eBPF has interacted with a loader(libbpf, cilium/ebpf, aya) but not many users know what actually happens behind the senses. I hope to give some insight into what it takes to load eBPF programs into the kernel and how features like BTF, Global data and CO:RE actually work.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Bluetooth mesh networks enable creation of large scale device networks and can be very useful for a variety of IoT use cases. As the state of open source tools around it needed some love, it was an ideal candidate for developing Rust stack to help developers use it in their solutions. In this session you'll learn about Rust tools available to develop embedded firmware, linux gateways and cloud applications for Bluetooth mesh solutions. We'll cover asynchronous embedded Rust with "Embassy" and "Drogue device" projects for writing firmwares and how to use them for mesh applications. Next, we'll explore the state of the mesh on Linux with "Bluez" and "Bluer" projects. We'll see how to use Rust and containers to develop mesh gateways. Finally, we'll describe the final piece needed to build end-to-end solutions, "Drogue IoT cloud". With this we laid down the architecture and tools needed to build usable mesh applications. The session participants will get a good overview of the whole stack needed to build mesh IoT applications. They learn the benefits of Rust for building this kind of software and find good starting points to get going with their projects.

uk: вхід без авторизації

name: Developing Bluetooth Mesh networks with Rust


uk: Комп'ютерні науки

description: Over the last two years, Bluetooth® support has seen significant improvements in PipeWire and WirePlumber. In this talk, we'll take a closer look at these changes, including the recently added initial support for next generation Bluetooth LE Audio, and discuss future plans. This talk targets everyone who cares about Bluetooth Audio support in Linux, not only for the Linux desktop but also for embedded Linux projects.

uk: вхід без авторизації

name: Bluetooth state in PipeWire and WirePlumber


uk: Комп'ютерні науки

description: In this presentation you will learn more about how Mogashni is building a UX Research toolkit to be used by Open Source projects. As well as the lessons learnt from working on Bitcoin core and other open source projects as a UX Researcher.

uk: вхід без авторизації

name: Building a UX Research toolkit: How a UX Research Toolkit is being built for the Open Source Ecosystem


uk: Комп'ютерні науки

description: Congrats, you have a community team! Maybe if you are lucky, you have some DevRel folks too! In many companies, the community or DevRel teams are small, impossibly small for the work that needs to be done. If you are like most companies I have talked to, your job in one of these roles is to gain lots and lots of adoption, “Grow the user base,” your boss will tell you. The issue is how does a team of 1 or a handful of people build and support tens of thousands or even potentially millions of users… the answer is you don’t. Rather the goal of most teams should be to support and grow external advocates and evangelists who can do the work for you. Hiring 2 people to tell the world how awesome your software is can only reach so far… but if those 2 people get 1000 people to tell their story that has a massive reach. So how do you build such a system? How do you measure it? I will walk through what I have learned when talking to hundreds of community teams over the last 5 years and share with you what I have seen works and what does not.

uk: вхід без авторизації

name: Building External Evangelists: What should be the primary goal of every community team


Building Open Source Teams

uk: Комп'ютерні науки

description: This presentation highlights the challenges of motivating and managing an open source team of volunteers. Topics include motivation, communication, and project management. This talk is useful for anyone active in open source.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The CHAOSS project represents a potential force for power and good in open source. This session includes speakers who took part in a two-year long reflection on DEI practices within the CHAOSS project. The session will help other open source projects in their work towards improving diversity, equity, and inclusion by exploring practices within the CHAOSS project first, then using those examples as points of reference for other projects. Our efforts have focused us on newcomer experiences, community surveys, and sustaining the people within the project. In particular, the session will discuss these efforts, aimed at answering the question of: How do we help open source communities to be more diverse, equitable, and inclusive? Intro: Our CHAOSS DEI reflection team is amazing. We have been able to work together over the last few years, building and establishing direction for the CHAOSS project and others. Our work has resulted in many improvements within the CHAOSS project as well as external engagements aimed at better centering DEI within open source. Main idea 1: Supporting new contributors and making your onboarding process smooth helps with contributor retention. - Supporting detail 1: Challenges include language barriers, time zones, access to tools from bandwidth limitations or other access limitations, merging in and accepting contributions in a timely manner - Supporting detail 2: Helpful strategies include improving documentation, open office hours, welcome slackbot, accepting contributions of all kinds, having a newcomer space in slack/communication channels, onboarding calls Main idea 2: Our two-year reflection process did not always go as planned. - Supporting detail 1: Building newcomer experiences has been challenging. The CHAOSS global community has grown tremendously, for example, the African chapter has grown to over 180 members in the last few months– and as such, newcomer onboarding and paths to contribution became a priority for us. Our expectation was to make a difference and directly assist newcomers in CHAOSS since many of us can relate to their pain of getting overwhelmed by the many parts in CHAOSS. It is true that we made a significant impact; however, we had to reevaluate our first plan and improve on it. For example, office hours didn't get as much attention as we would have liked, so we adjusted the time and cadence, then went one step further with documentation diversity for newcomers (specifically the teams' sheet and quickstart for newcomers). More recently, we started a strategy document for newcomers' onboarding and have kickstarted newcomer onboarding calls. Main idea 3: Strategic use of community surveys helps you to better understand the feelings, emotion, and qualitative feedback of the community. - Supporting detail 1: Make sure the community survey is completely anonymous and no personal information will be collected, and is GDPR compliant. Access to data should be limited and only report aggregated data on a high level. Have clear goals for what you want to learn more about, but be open to organic community response. Also consider troll-ish responses, and follow set standards when asking about demographic data. Conclusion: We have learned to be patient with our work. Advancing DEI in open source is challenging as we attend to corporate interests, community needs, and, most importantly, the safety of people for whom our efforts have an impact.

uk: вхід без авторизації

name: Centering DEI Within Your Open Source Project


uk: Комп'ютерні науки

description: From the minute 12:34 of video does not have audio. CentOS Stream is where RHEL development happens in public. You can preview content coming to RHEL, test your things on top of it, and even participate! We'll show you how it works, highlight the key differences between Fedora ELN, CentOS Stream and RHEL, and see where it's all happening. While showing some level of technical detail, this talk will be high-level, intended for anyone curious about Linux distributions. You'll learn about possible use cases of CentOS Stream, about how code flows into RHEL starting with Fedora, and how you can potentially influence goes into RHEL.

uk: вхід без авторизації

name: CentOS Stream: RHEL development in public


Just A Community Minute

uk: Комп'ютерні науки

description: A fun interactive sessions for the attendees to learn about each other and the community.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Recently we posted patches on the lkml for a new filesystem called composefs. This is an image-based read-only filesystem with opportunistic file sharing and fs-verity based verification. This presentation will give a short demonstration of how to use it and present the usecases we wish to solve. Hoping to get feedback from interested users and linux filesystem developers.

uk: вхід без авторизації

name: composefs: An opportunistically sharing verified image filesystem


uk: Комп'ютерні науки

description: Bottlerocket is a free and open source Linux distribution purpose-built for hosting containers. Since its launch in 2020, Bottlerocket has been adopted by companies large and small as a platform for running their containerized workloads in production. It has only what you need to run containers reliably, and is built with standard open source components. Bottlerocket-specific additions focus on reliable updates and on its management and configuration API. Some notable features include: - API access for configuring your system - Fast and reliable image-based system updates - Defense-in-depth protections such as a read only root filesystem, minimized attack surface, and more - Built in integration with container orchestration platforms This talk will provide an overview of Bottlerocket, covering some of the benefits of using a container-optimized OS. We will cover how Bottlerocket is similar to general purpose Linux distributions and point out the ways it is different. During the talk we'll get hands on and show what it is like to use and administer Bottlerocket nodes. We will provide all the details on how to get involved and participate in the community. We'd love for you to join the Bottlerocket open source project

uk: вхід без авторизації

name: Bottlerocket OS - a container-optimized Linux


uk: Комп'ютерні науки

description: Control groups (or cgroups for short) are one of the most fundamental technologies underpinning our modern love of containerisation and resource control. Back in 2016, we released a complete overhaul of how cgroups work internally: cgroup v2, released with Linux 4.5. This brought many new and exciting possibilities to increase system stability and throughput, but with those possibilities have also come challenges of a type which we have largely not faced in Linux before. This talk will go into some of the challenges faced in overhauling Linux's resource isolation and control capabilities, and how we've gone about fixing them. This will include some of the most complex and counter-intuitive practical effects we've seen in production, with details of how our expectations and knowledge have developed over the last 5 years using this on over a million machines in production, with insights that are immediately applicable to anyone who runs Linux at scale. We will also go over the state-of-the-art of resource control in the "real world" outside of companies like Meta and Google, looking at how cgroup v2 is changing the technical landscape for distributions and containerisation technologies for the better.

uk: вхід без авторизації

name: 7 years of cgroup v2: the future of Linux resource control


Exploring Database Containers

uk: Комп'ютерні науки

description: Containers are essential for microservices applications; In this talk, we'll talk about database containers, the construction process, and best practices when creating a database container. For example, we will use open-source databases and create a Dockerfile from scratch focusing on each layer of the databases. Participants in this talk will learn the fundamentals behind containers, specifically database containers. Those who want to implement it will have enough information to build their database containers efficiently.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Overlay networks (also sometimes called, inappropriately, "darknet") are able to anonymize peers and to fully encrypt all messages within a network. Creating a javascript application which is implementing true "privacy-by-design" is not that hard by using the I2P SAM library. This is the core developer of the library showing its usage and use cases. The presentation has the following content: - Motivation: why I2P-SAM got developed (3') - Setting up the distributed overlay I2P network for testing (4') - Creating an application using the I2P-SAM library (10') - Use cases: wide range of peer-to-peer applications (3') - Q & A (5')

uk: вхід без авторизації

name: Javascript for Privacy-Protecting Peer-to-Peer Applications: Usage of the I2P-SAM Javascript Library: Anonymized and End-to-End Encrypted Communication


uk: Комп'ютерні науки

description: Koin is the Kotlin dependency injection framework well known for its ease of use and efficiency. It has been greatly appreciated by the Android community since 2017. In 2022, a new major version of the framework is released: Koin 3.2. Let’s explore the great new DSL that still continues to simplify our writings, also the new module hierarchy organization capacity, and much more. The Koin Annotations project is also getting to its first stable version: 1.0. It’s a great time to see all you can do with these annotations, powered by Google KSP under the hood.

uk: вхід без авторизації

name: Improving the Kotlin Developer Experience in Koin 3.2


uk: Комп'ютерні науки

description: Directly manipulate text and even execute the text as code by pinching these short snippets.

uk: вхід без авторизації

name: jxr in /engine/ - coding in WebXR on a plane: Custom JavaScript subtset open scaffolding to spacially and textualy explore interfaces


uk: Комп'ютерні науки

description: Kairos is an immutable Linux meta-distribution for edge Kubernetes. In this presentation, you will learn about its main components and how we use container technology to put them together and how new images get released.

uk: вхід без авторизації

name: How we build and maintain Kairos: A day in the life of a meta distribution


uk: Комп'ютерні науки

description: KDLP is a novel program run by Red Hat engineers to address the industry-wide shortage of qualified entry-level candidates for low-level software engineering jobs in general, and the Linux kernel in particular. We created, developed, and teach an "Introduction to Linux Kernel" development course to University of Massachusetts Lowell students and anyone who is interested. We recruit qualified students from our class to internship programs within Red Hat, and we promote the best interns to hiring managers with the aim of bringing them into the industry as full time software engineers. We have pulled together this program from scratch over the past few years, iterating our program and curriculum design in order to stand the program on its feet. As an established program, we plan to continue to scale our program and strengthen our partnerships, including a recent one with the Linux Foundation, in order to bring Linux kernel and low-level software engineering education to a larger audience and global talent pool. A spectre is haunting the Linux kernel... the spectre of time! Throughout the industry, we have observed a shortage of qualified entry-level software engineers focused on the low-level niche, and especially within the sub-niche of the Linux kernel. As young, novice software engineers, we noticed this problem, and we quickly became aware that we were far from the only ones to do so. Engineers and managers of all levels within our industry niche have observed -- both privately and publicly -- that we must bring new talent into these spaces, and we must do so urgently. We have seen firsthand among the many talented and experienced engineers firsthand and we have benefited greatly from their guidance and mentorship, but we know that this opportunity will not last forever. Time spares no one, not even the engineers from the days of Digital Equipment Corporation. We have come to understand the invaluable and non-quantifiable nature of the tribal knowledge that exists distributed among the great engineers of our industry, and we believe that we must act quickly to enable them to pass on the torch, to strengthen the next link of the great chain of our relatively young but quickly maturing industry. With this understanding, we have created the Kernel Development Learning Pipeline, a program to bridge the gaps between academia and industry, between the novice and the legend, between the past and the future.

uk: вхід без авторизації

name: KDLP: Kernel Development Learning Pipeline: A comprehensive pipeline for bringing new talent into the the Linux kernel and its orbit


uk: Комп'ютерні науки

description: In the past 10 years, Linux gaming came from a painful experience to a reality, with competitive performance, smooth experience and even an ArchLinux based handheld device, the Steam Deck. This progress was made possible by the effort of a strong community working in different parts of the stack, from Wine, userspace graphic drivers and finally the kernel. Gaming workloads have been pushing Linux development to tackle bottlenecks and enhancements never seem before. In this talk, we are going to cover the progress made to enhance game performance from the kernel side, current work and next challenges.

uk: вхід без авторизації

name: Hacking the Linux Kernel to get moar FPS


uk: Комп'ютерні науки

description: Kotlin Multiplatform Mobile is now in Beta, enabling a whole new series of possibilities to share code between platforms. But sometimes things don't go as planned, especially when using an out-of-the-box multiplatform library on a native iOS project. In this session, we'll talk about what we learned from our experience while porting some Android libraries to Multiplatform ones, with a focus on how it's possible to improve the user experience on Swift when consuming Kotlin Multiplatform artifacts.

uk: вхід без авторизації

name: Kotlin Multiplatform for Android & iOS library developers: Tips for writing Kotlin Multiplatform Android/iOS libraries


uk: Комп'ютерні науки

description: By now you’ve surely heard of Kotlin Multiplatform, and maybe tried it out in a demo. Maybe you’ve even integrated some shared code into a production app. If you have, you know that there are many subtle complications that come up when you want to ship shared Kotlin code. This includes things like modularization, translating between Kotlin and Swift, managing multiple repositories that depend on each other, and optimizing build times and binary sizes. It’s not as easy as it looks when you write your first “Hello World”! At Touchlab, we’ve been involved with Kotlin Multiplatform since the very beginning, and we’ve learned a thing or two along the way about what does and doesn’t work well. Come hear about how we’ve solved some of these difficulties to ship Multiplatform code across all sorts of organizations and environments, so you’re ready to use KMP in the real world.

uk: вхід без авторизації

name: Kotlin Multiplatform: From “Hello World” to the Real World


Why we ditched JavaScript for Kotlin/JS

uk: Комп'ютерні науки

description: You might think that Kotlin is the programming language of Android… Well, it's only partially true, and that's not even Kotlin's raison d'être. Kotlin 1.0 (2016) had experimental support for JavaScript, and 6 years later, we're sticking to it on the WEB, in the backend, on Android of course, and now on (native) iOS as well! Come to learn why you might, or might not want to follow suit. This talk will be both an up to date introduction to Kotlin, and sharing our experience with it on the WEB.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Rust is a fast rising star in the pantheon of programming languages and comes with some interesting properties in regard to Multiplatform. On the other side, Kotlin promises with KMP as well Multiplatform capabilities. Are both set up to be rivals, or could both complement each other? What could Kotlin learn from Rust, and where might Rust borrow from Kotlin? The talk will give you an opinionated introduction into KMP with Rust in terms of tooling, developer experience and all the things I discovered so far. It will not sell you a ready to go product, but rather an idea. This talk will bring you the good word of Multiplatform in terms of Kotlin and Rust. It will on board you to the idea of Multiplatform and what it means in terms of Kotlin and Rust each. This also means it will explain some keyconcepts which are characterizing for the work with it in regard to your Multiplatform project. It will show you, how you can use Rust and KMP on iOS, Web and of course Android. Also, it shares some pitfalls, workarounds and other lessons learned from failures with you. Let’s figure out if this is the beginning of a love story!

uk: вхід без авторизації

name: KRuMP - Kotlin-Rust-Multiplatform?!: How to write bugs once and ship them to many platforms.


KubeOS: Container OS based on OpenEuler

uk: Комп'ютерні науки

description: KubeOS is a lightweight operating system developed in the openEuler community for running containers and Kubernetes. This takl will introduce the KubeOS's OS image and Kubernetes cluster node upgrade solution and how to use KubeOS. With widespread use of containers and Kubernetes, there are fewer requirements for operating systems. In addition, traditional operating systems maybe bring various problems like security, O&M overhead, and OS version splitting problems. This talk will discuss the current problems faced by OS management and upgrade and the concept of Container operating system. Then, share the design ideas and solutions of the container operating system KubeOS. Finally, introduce the architecture, functions, and use of KubeOS in detail. This talk is likely to be interesting to the O&M personnel, the system administrator, or anyone interested in how the OS of a cluster node becomes a cluster component. This talk was amended on 3 February 2023 to swap the speakers, as the original speaker was unable to attend FOSDEM due to visa issues.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Deploying an end-to-end observability system comes with many challenges. The organization has to decide how data will be collected, what data formats will be used, sampling strategies, filter sensitive data (a.k.a. PII), and ultimately send data to the observability platform of their choice. In this session, we will teach you how to roll out end-to-end observability data collection on Kubernetes using the OpenTelemetry project. You will learn how to effectively instrument applications using auto-instrumentation, deploy the OpenTelemetry collector, and collect traces, metrics, and logs. You will gain the knowledge needed to tackle the mentioned challenges. After this session, you will be able to understand and use OpenTelemetry instrumentation libraries, collector and Kubernetes operator.

uk: вхід без авторизації

name: Exploring the power of OpenTelemetry on Kubernetes


uk: Комп'ютерні науки

description: After thirty years of FOSS advocacy, issue and problems in approach have begun to emerge. Strategic mistakes in approach to new technologies has often led to large areas of software endeavor to remain proprietary. While for-profit companies have been rewarded with great efficiency benefits and other perks from their adoption of FOSS, rarely do these benefits trickle down to consumers and end-users in their daily computing lives. This talk examines our past mistakes in advocacy and activism, and considers what to do next. Since its advent in the late 1980s, the Free and Open Source Software (FOSS) community now has more than thirty years of experience in strategies for advocacy and encouraging adoption of FOSS. Results have, unfortunately, been mixed. While corporate adoption by for-profit companies has led to a boon and integration of FOSS into most corporate practices, the true promise of software rights and freedoms — the ability of individual hobbyist and consumers to participate on equal footing with the largest software producers in the world — mostly eludes our community. This talk examines the wins, losses and challenges that FOSS advocacy has faced in the last thirty years. We'll explore how failures to foresee both web application deployment and the advent of advertising-based app-oriented software deployment led to serious strategic errors in advocacy and focus of attention. Many of these problems remain difficult to address, and only frank discussion among activists will reveal new approaches to continue a vibrant FOSS community into the next generation.

uk: вхід без авторизації

name: Learning From the Big Failures To Improve FOSS Advocacy and Adoption: How Are Big Companies Benefiting So Much from FOSS, and Individuals So Little?


uk: Комп'ютерні науки

description: The organizers of the Legal and Policy DevRoom discuss together the issues they've seen over the last year in FOSS, and consider what we can learn from the presentations on the track this year, and look forward together about the future of FOSS policy.

uk: вхід без авторизації

name: Panel: Hot Topics - Organizers of the Legal & Policy DevRoom discuss the issues of the day


uk: Комп'ютерні науки

description: The Open Source Initiative is working on making improvements to its license review process and has a set of recommendations for changes it is considering making, available [link to be provided]. This session will review the proposed changes and also take feedback from the participants on what it got right, what it got wrong, and what it might have missed. The License Review Working Group of the Open Source Initiative was created to improve the license review process. In the past, the process has been criticized as unpredictable, difficult to navigate, and applying undisclosed requirements. The Working Group developed a set of recommendations for revising the process for reviewing and approving or rejecting licenses submitted to the OSI. The recommendations include separate review standards for new and legacy licenses, a revised group of license categories, and some specific requirements for license submissions. The recommendations are available [link to be provided] and the OSI is in the feedback stage of its process, seeking input on the recommendations. The session will review the proposed changes and also take feedback from the participants on what it got right, what it got wrong, and what it might have missed.

uk: вхід без авторизації

name: Open Source Initiative: Proposed Changes to License Review Process


uk: Комп'ютерні науки

description: The originally planned presentation on KubeInvaders got cancelled. So we had three ad-hoc lightning talks instead: - NetXMS - Parca - Opensearch

uk: вхід без авторизації

name: Lightning Talks: NetXMS | Parca | OpenSearch


uk: Комп'ютерні науки

description: Due to the constant development of GNU/Linux distributions, setting up video game environments on GNU/Linux has become easier than ever, albeit with some performance and usability drawbacks. This has been further catalyzed by the involvement of popular companies like Valve preferring to use GNU/Linux distributions as their platform of choice for their consoles. We want to delve deep into the state of gaming on these GNU/Linux distributions, using the case study of Fedora Workstation 37, and compare them with other popular operating systems using impartial benchmarking studies. Based on the comprehensive observations, we would further explore how communities can come together to build better GNU/Linux distributions (and software applications surrounding it) to cater to both, video gaming enthusiasts and developers, alike. Target audience 1. GNU/Linux distribution maintainers interested in catering to video gaming uses 2. Software application developers who maintain videogaming supporting applications 3. Package maintainers who help maintain distribution-specific application packages 4. Budding community members wanting to start contributing to the projects 5. GNU/Linux distribution users who are on the fence, about gaming on their OS Benefits to the target audience GNU/Linux distribution maintainers would be informed about the possible inclusions that can help cater to the users who play and/or develop videogames. Software application developers would garner visibility/attention, understand the current advantages and possible improvements, and possibly get contributors. Package maintainers would get to know about support applications requiring packaging and understand how they can create distribution-agnostic solutions. Budding community members would be informed about the upstream projects that help bring GNU/Linux videogaming forward and can use their valued contributions. GNU/Linux distribution users would get more information that would help them decide if they should use their operating system for videogaming or not. NOTE: This talk replaces "Modularity, ALP and the dream of the modular-distribution" that was due to have been given by Dan Čermák, who has sent his apologies but is now unable to attend as he has fallen ill. We wish him a speedy recovery.

uk: вхід без авторизації

name: Linux Distributions’ State of Gaming: A Case Study of Fedora Workstation


uk: Комп'ютерні науки

description: The Linux Kernel Functional Testing (LKFT) project is aiming at improving the quality of the Linux kernel by performing functional testing on Arm hardware. LKFT has built over 1 millions kernel per years other the last two years and ran 140 millions tests on both emulation (qemu) and hardware devices. In this talk I will present the current architecture that is able to build and test millions of kernels with a really small team of engineers and at a reasonable cost.

uk: вхід без авторизації

name: Linux Kernel Functional Testing: A look at the infrastructure


uk: Комп'ютерні науки

description: Affectionately called a "time series database for strings", Loki is an open source log aggregation project. In this talk we'll learn how Loki works, the inspirations it takes from the Prometheus project, and what makes it a scalable, performant, and cost-effective tool for managing application logs.

uk: вхід без авторизації

name: Loki: Cloud Native Logging: Get started with Loki, self dubbed "Prometheus, but for logs"