uk: Комп'ютерні науки

description: Dieser Werkstattbericht gibt einen aktuellen Überblick zum bereits erreichten Stand bei der Einführung von persistenten Identifikatoren (PID) und dem resultierenden praktischen Nutzen für Anwender:innen und Entwickler:innen durch die OSGeo-Projekte, sowie eine Vorschau auf die nächsten Herausforderungen und Nutzen durch neue Einsatzszenarios für die Projektcommunities und speziell Code Committer die in der wissenschaftlichen Forschung und Lehre aktiv sind, sowie Studierende. Der FOSS GIS e.V. ist Teil der Gemeinschaft von Open Source Softwareprojekten, die in der Open Source Geospatial Foundation (OSGeo) global organisiert ist ( und eine wachsende Zahl von qualitätsgesicherten Open-Source-Softwaretools für die Geoinformation pflegt und entwickelt). Der FOSSGIS und die OSGeo unterstützen das wissenschaftliche Paradigma von Open Science (Open Source Software, Open Data, Open Access, Open Educational Resources) und die FAIR-Prinzipien (Findable, Accessible, Interoperable, Reusable). Die Open Source GIS Projekte der OSGeo sind dabei selbst Innovationstreiber, profitieren aber auch von Fortschritten auf technischer Infrastrukuren in verwandten Gebieten, etwa Open Access und Forschungsdatenrepositorien zur Umsetzung von Open Science und FAIR. Dieser Werkstattbericht gibt einen aktuellen Überblick zum bereits erreichten Stand bei der Einführung von persistenten Identifikatoren (PID) und dem resultierenden praktischen Nutzen für Anwender:innen und Entwickler:innen durch die OSGeo-Projekte, sowie eine Vorschau auf die nächsten Herausforderungen und Nutzen durch neue Einsatzszenarios für die Projektcommunities und speziell Code Committer die in der wissenschaftlichen Forschung und Lehre aktiv sind, sowie Studierende. Die persistente Referenzierung durch PID wurde 2014 von FOSSGIS und OSGeo für wissenschaftliche Videos aufgegriffen. Seit 2017 wurde dieser Ansatz von einer wachsenden Zahl von OSGeo-Softwareprojekten auch für die wissenschaftliche Zitierung von Software-Repositories, einzelnen Software-Versionen und beteiligten Personen eingesetzt. Dies ermöglicht eine greifbare wissenschaftliche Anerkennung der ehrenamtlichen Mitarbeit in Open Source GIS Projekten und wird sich voraussichtlich auf die Arbeitsabläufe des OSGeo und der Wissenschaft auswirken.

uk: вхід без авторизації

name: Persistente Identifikatoren für Open Source GIS: Best Practices und Bleeding Edge


Mathias Gröbe

type: Person

keywords: Kartographie Visualisierung

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: PostgreSQL bildet mit seiner räumlichen Erweiterung PostGIS die Grundlage für viele Webkarten und eignet sich hervorragend für die Verarbeitung von großen Datensätzen und damit für die Generalisierung. Anhand von OpenStreetMap-Daten sollen Ansätze für das Zusammenfassen und Vereinfachen von Flächengeometrien, zum Ausdünnen von Straßennetzwerken sowie die Verdrängung von Objekten vorgestellt werden. PostgreSQL bildet mit seiner räumlichen Erweiterung PostGIS die Grundlage für viele Webkarten und eignet sich hervorragend für die Verarbeitung von großen Datensätzen und damit für die Generalisierung. Anhand von OpenStreetMap-Daten sollen Ansätze für das Zusammenfassen und Vereinfachen von gleichartigen Flächengeometrien demonstriert werden. Ein Schwerpunkt liegt dabei auf einer performanten Implementierung. Des Weiteren wird in einem Beispiel gezeigt, wie sich Straßennetzwerke ausdünnen lassen, in dem nach diese als Graphen betrachtet. Ein letztes Beispiel soll die Möglichkeiten zur Verdrängung von Objekten zeigen.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: de

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Kartographische Generalisierung mit PostgreSQL und PostGIS

FOSSGIS e.V.

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


keywords: Routing Mobilität

uk: Комп'ютерні науки

description: Drei Bundesbehörden und agile Softwareentwicklung mit open source Komponenten; geht das? Ein kurzer Erfahrungsbericht, dass es geht; man muss es aber wirklich wollen. „Was ist wo?“ war gestern, heute interessiert vielmehr „Wer kann was, wo, wie erreichen?“ Neben Antworten auf Fragen, wie: "Wie viele Schulen kann man von wo in Deutschland innerhalb von zehn Minuten zu Fuß oder mit dem Auto erreichen?", muss das Das Ganze natürlich total agil und open source sein. Mit der "Gitterzellendatenbank" hat das Bundesamt für Kartographie und Geodäsie in Kooperation mit dem Statistischen Bundesamt und dem Johann Heinrich von Thünen-Institut ein open source Tool entwickelt um deutschlandweit und hochaufgelöst Erreichbarkeiten zu beliebigen Points of Interrest zu berechnen. Die Daten geben Auskunft für jede 100x100m Gitterzelle, wie viele der POI-Objekte eines bestimmten Themas von dieser Zelle aus zu Fuß oder mit PKW in einer bestimmten Zeit bzw. Entfernung erreicht werden können. Der Software Stack besteht u.a. aus PostgreSQL/PostGIS, Django, OpenRouteService, Docker, nginx, RabbitMQ und Celery. Im Kurzvortrag wird neben dem Tool selbst auch gezeigt, wo die Stolperfallen lauerten und warum es dennoch geklappt hat.

uk: вхід без авторизації

name: Agil erreichbar - Erreichbarkeitsanalysen für Deutschland


uk: Комп'ютерні науки

description: Im Vortrag wird gezeigt, wie unter Verwendung des IoT der Verkehrsfluss mittels Bilderkennung und frei verfügbaren Webcams bestimmt und über offene, standardisierte Schnittstellen bereitgestellt und visualisiert werden kann. Bei dem entwickelten Workflow kommen dabei ausschließlich Open-Source-Bibliotheken und Dienste sowie Open Data zum Einsatz. Da inzwischen in einigen Städten Sensoren und Webcams zur Erfassung von Informationen eingesetzt werden, bieten sich neue Möglichkeiten, um Informationen über das Verkehrsaufkommen zu ermitteln. Durch Kameras kann das Wetter an einem öffentlichen Platz geprüft oder das Verkehrsgeschehen an kritischen Verkehrspunkten beobachtet werden. Die angebrachten Sensoren erfassen so kontinuierlich oder zu bestimmten Zeiten Daten. Durch die internetbasierte Bereitstellung dieser Daten entsteht so ein Netzwerk mit einer großen Anzahl von möglichen Sensoren. Ein so aufkommendes Internet of Things (IoT) bietet damit eine Architektur und Infrastruktur, die eine große Anzahl von Anwendungen in unterschiedlichen Bereich wie Smart Environment, Smart Home, Smart Hospitals, Smart Agriculture aber auch Smart Traffic Sytems ermöglicht.

uk: вхід без авторизації

name: Ein Offener Ansatz zur Ermittlung von Verkehrsaufkommen anhand des Internet of Things


keywords:
Biodiversity
Data
Citizen Science
Invasive Species

uk: Комп'ютерні науки

description: Quentin Groom is the lead of the Biodiversity Informatics team at Meise Botanic Garden in Belgium. In this presentation, Quentin wanted to give attendees a sense of biodiversity data, where it comes from, what they want to learn from it, and what the challenges are. He did this in the context of the B-Cubed project (https://doi.org/10.3030/101059592) that aims to contribute to solving some of these challenges and made particular reference to citizen science for the collection of data and the advantages and challenges this presents.

@language: en

uk: вхід без авторизації

name: Biodiversity data are really complicated, how do we make sense of them?


Remote Sensing of River Discharge

keywords:
Hydrology
Monitoring
Remote sensing
River Discharge
Data

uk: Комп'ютерні науки

description: Paolo Filippucci (PhD) is a research fellow at the Hydrology group of the Research Institute for Geo-Hydrological Protection (IRPI) of Italian National Research Council (CNR). He presented a methodology to derive river discharge information from near-infrared (NIR) satellite sensors. The approach has been applied to different river basins worldwide in the framework of the ESA projects RIDESAT, STREAMRIDE, HYDROCOASTAL and 4DMED-hydrology, by using NIR data sensed by MODIS and Sentinel-2 sensors.

uk: вхід без авторизації


keywords: Paläontologie Dinosaurier Urzeit Jurazeit

de: Geowissenschaften (ohne Geographie)

uk: Науки про Землю(крім географії)

en: Geosciences (excl. Geography)

de: Mathematik, Naturwissenschaften

uk: Математика, природничі науки

en: Mathematics, Natural Sciences

description: Dieses Video enthält alle vier kombinierten Episoden die wir (Joschua Knüppe, Henning Ahlers & Dr. Oliver Wings) erschaffen haben, um die Flora und Fauna der späten Jurazeit in Mitteleuropa vorzustellen. Die Videos basieren auf unserer Graphic Novel "EUROPASAURUS – Urzeitinseln voller Leben".

uk: вхід без авторизації

name: EUROPASAURUS - The Animated Graphic Novel / Episodes 1-4: Life on Jurassic Islands


03 - Einführung in das Datenschutzrecht

keywords: Datenschutzrecht Einführung

de: Rechtswissenschaften

uk: Правознавство

en: Law

de: Rechts-, Wirtschafts- und Sozialwissenschaften

uk: Право, економіка та суспільні науки

en: Law, Economics and Social Sciences

uk: вхід без авторизації

Leibniz Universität Hannover (LUH)

addressCountry: DE

addressLocality: Hanover

addressRegion: Lower Saxony


02 - Einführung in das Datenschutzrecht

uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації


01 - Einführung in das Datenschutzrecht

uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації


01 - Introduction to European IT-Law

keywords:
European IT-Law
Introduction

uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації


02 - Introduction to European IT-Law

uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації


keywords: Datenschutzrecht eGovernment

uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 10 - Grenzüberschreitender Datentransverkehr: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 09 - Organisatorische Anforderungen und Rolle der Aufsichtsbehörden: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 08 - Rechtsfolgen von Datenschutzverstößen: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 07 - Rechte des Betroffenen und Pflichten des Verantwortlichen: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 06 - Nachrichtendienste und e-Government i.e.S.: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 05 - Bereich der öffentlichen Sicherheit und Strafverfolgung: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 04 - Vertiefung zum Verfassungs- und Primärrecht: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 03 - Zulässigkeit von Datenverarbeitungen: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 02 - Rechtsquellen, Anwendungsbereich und Systematik des Datenschutzrechts: Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 01 - Grundlagen - Datenschutzrecht und Normen des e-Government


uk: Правознавство

uk: Право, економіка та суспільні науки

uk: вхід без авторизації

name: 00 - Einführung - Datenschutzrecht und Normen des e-Government


How to Build your own MLIR Dialect

uk: Комп'ютерні науки

description: MLIR allows you to define your own intermediate representation (IR) while benefiting from the infrastructure it provides. However, getting started with creating your own IR, called dialect in the MLIR universe, is sometimes tricky. This tutorial addresses some of the challenges arising with the CMake configuration and explores projects like the standalone MLIR dialect example in more detail. Furthermore, we take a look at how TableGen files that define a single dialect can be split. Even with tutorials on MLIR like the MLIR tutorial presented at the LLVM Developers' Meeting in 2020 [1] and the "Creating a Dialect" [2] as well as the Toy tutorial [3] in the MLIR docs, building an MLIR dialect can feel difficult. This can be especially the case when it comes to the CMake configuration. Good starting points are the standalone MLIR dialect example [4] and especially the tutorial [5] given by S. Neuendorffer at last years LLVM Developers' Meeting. In addition to the existing tutorials, we will look into the details of the CMake configuration of an out-of-tree dialect like [4]. Furthermore, we dive into more complex CMake configurations for projects like MLIR-EmitC [6], showing how to build a project standalone or embedded into another project. In addition to the CMake configuration, it is briefly covered how to architecture TableGen files. In particular, it is shown how to use multiple TableGen files to define a single dialect, e.g. to define the base dialect, operations, attributes and types. [1] M. Amini & R. Riddle "MLIR Tutorial", 2020 LLVM Developers' Meeting, https://youtu.be/Y4SvqTtOIDk [2] https://mlir.llvm.org/docs/Tutorials/CreatingADialect/ [3] https://mlir.llvm.org/docs/Tutorials/Toy/ [4] https://github.com/llvm/llvm-project/tree/main/mlir/examples/standalone [5] S. Neuendorffer, "Architecting out-of-tree LLVM projects using cmake", 2021 LLVM Developers' Meeting, https://youtu.be/7wOU7csj1ME [6] https://github.com/iml130/mlir-emitc

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The European Commission’s Open Source Observatory (OSOR) Team will present the Interoperable Europe Act (IEA) and its implications for the free and open source software ecosystem. The text, which the European Commission adopted as a proposal in November 2022, aims to reinforce the cross-border interoperability of the public sector in the EU. Practically, it aims to facilitate “the co-creation of an ecosystem of interoperability solutions across the EU”. To achieve this, the regulation sets up a two-layer governance structure (the Interoperable Europe Board and the Interoperable Europe Community), with both entities expected to work closely with open source experts, institutions and companies. This session will in particular dig into the mechanisms meant to enable the sharing and reuse of interoperability solutions between public administrations. The OSOR Team will present the measures of the proposed Act that support the sharing and reuse of software and cross-border interoperable solutions, such as The two-layer governance structure—the Interoperable Europe Board and the Interoperable Europe Community—with both entities expected to work closely with open source experts, institutions and companies. Interoperable Europe Agenda: the strategy for the coordination of public investments in interoperability solutions. Interoperable Europe Portal: Single point of entry for information related to cross-border interoperability, Interoperable Europe solutions and interoperability solutions provided for by other EU policies. Interoperability Assessment: Obligatory when creating or modifying IT systems for public services with cross-border aspects. The content of the assessment will be adopted by the IE Board. Regulatory Sandboxes: Controlled environment for the development of interoperable solutions. After the presentation, the audience is invited to discuss the new EU proposal with the OSOR Team, as well as how the European open source ecosystem can support this policy effort as members of the Interoperable Europe Community Please note that this talk was originally scheduled to be given at 11.50 but starts earlier to cover for cancellations of other talks just before the schedule freeze.

uk: вхід без авторизації

name: AMENDMENT The New EU Interoperable Europe Act and the Reuse of Software in Public Administration: Implications for OSS in Public Administrations


uk: Комп'ютерні науки

description: The major BSD Operating Systems, FreeBSD, NetBSD and OpenBSD, tend to evolve independently from each other. However, they still share large parts of their respective vision and idioms - in other words, they have way more similarities than differences to each other. An important common requirement is to support a wide range of computer devices and equipment. Unfortunately, device drivers from a BSD system are usually not directly suitable for the others. The differences vary in different amounts depending on each subsystem, bus, kernel API, etc. This presentation will illustrate the situation with a few examples, and work as a call for volunteers from every BSD project. The goal is to explore areas where more code can be shared among the different BSDs, with a focus on device drivers. Generally, good ideas deserve a chance to be visible across the different systems! The aim of this presentation is to attempt to create a common effort, in any shape or form, in order to foster cooperation between the major BSD systems in terms of driver development in particular. The ideal outcome of this presentation could be the creation of a committee and/or of a mailing-list - formal or informal - which could convene regularly and share the state of the development for each BSD, and identify areas where designs could converge towards easier code sharing of device drivers for instance. I am myself involved with the NetBSD project (khorben@), member of the Board of the NetBSD Foundation, and would happily coordinate on that side.

uk: вхід без авторизації

name: BSD Driver Harmony: Improving collaboration between the major BSDs on driver development


uk: Комп'ютерні науки

description: PARCOACH is a static and dynamic analysis tool for High Performance Computing applications (using MPI and OpenMP for instance), based on LLVM. Its main purpose is to check that the APIs usage are correct (for instance that all processus or threads call a barrier to avoid a deadlock). It's not always possible to detect all errors statically, therefore the static analysis can be complemented by a dynamic instrumentation of the code to perform some correctness checks during the code execution. This (out-of-tree) tool has been initially written based on LLVM 3.7, and is now based on LLVM 15. As a research project, it has seen a lot of contributions: from PhD students, from interns, and from researchers; with actually a low number of LLVM-specific engineers working on it until recently. The objective of the talk would be to focus on how the project has been using LLVM over the years (and how it's been maintained): - how the lack of maintainance had lead to a relatively high technical dept. - how LLVM tools and structure had been used: from a manual compilation of the code to "properly" using LLVM's CMake integration, from analysis code tangled in the transformation code to properly using the "new" analysis and passes manager. - how the CI/CD evolved to improve the user experience (eg: docker-based jobs, automated images and packages generation, docker-compose entry point). - the weaknesses remaining in the project (as far as LLVM is concerned), where they come from, and the plan to fix them. - and obviously take a look at some mistakes that have been done (trying to maintain compatibility with several LLVM versions at once just to name one). While the content of the talk would not be "new" from a scientific point of view, we believe it would provide some interesting take-aways for people looking into developing or maintaining out-of-tree LLVM-based software.

uk: вхід без авторизації

name: Case study of creating and maintaining an analysis and instrumentation tool based on LLVM: PARCOACH


uk: Комп'ютерні науки

description: Open-source tools based on LLVM that target rich software platforms such as Linux are in widespread use. A large proportion of the investment in upstream LLVM development is targeted at this use case. There is much less use of open-source C/C++ toolchains for embedded software development, with GCC toolchains being dominant. This can be explained by a number of factors: * Assembling an embedded toolchain is complicated, due to cross-compilation and missing components such as the C-library. * Differences in the toolchain interface and missing functionality compared to GCC. * Code-size and performance gaps on embedded targets. There are efforts in the LLVM community to improve the suitability for embedded software development. This presentation will cover some of the gaps and what we are trying to do to fill them. Specifically: * Hosted versus embedded toolchains. * Why do we want to use LLVM for an embedded toolchain? * What components make up an embedded toolchain, and which of these can be supplied by the LLVM project. * The LLVM bare metal driver. * A comparison of a LLVM based toolchain against an equivalent GNU toolchain. * Work that is being done in the community to improve embedded development. * How to get involved! The presentation does not require any in depth knowledge of LLVM or compilers. An awareness of the components of a toolchain such as compiler, linker and libraries will be helpful. The toolchains used for comparison are the LLVM Embedded Toolchain for Arm and the GNU Arm Embedded Toolchain.

uk: вхід без авторизації

name: Open source C/C++ embedded toolchains using LLVM


Happy 5th anniversary pkg-provides

uk: Комп'ютерні науки

description: In 2018 here at Fosdem, I publicly introduce a new port called pkg-provide, a pkg plugin to perform reverse searches and found the package you must install to have a certain file. Started as a proof of concept about how to build pkg plugin, pkg-plugin is now five years old and gain hundred of users around the world. It's probably the perfect time to tell you how it all started, reveal the real numbers of the audience, and talk a little bit about the future

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Game of Trees (Got) is a version control system which prioritizes ease of use and simplicity over flexibility. Got uses Git repositories to store versioned data. Got is being developed on OpenBSD and its main target audience are OpenBSD developers. The -portable version of Got provides support for FreeBSD, NetBSD, DragonflyBSD, Linux, and MacOS. A recent addition to Got's tool suite is a daemon called gotd(8), which serves Git repositories over SSH connections. This talks provides a short general introduction to Got and then presents the design of gotd(8), its usage, and details about its implementation.

uk: вхід без авторизації

name: Game of Trees Daemon: A Git repository server for OpenBSD and other systems


uk: Комп'ютерні науки

description: Compiler-rt is a set of runtime routines present in LLVM infrastructure to support and provide an implementation of various builtin functions for multiple architectures. It consists of – builtin libraries, sanitizer runtimes, profile runtimes, and block runtimes. This talk focuses on one of the compiler rt components- sanitizers. Compiler-rt sanitizers are used to perform runtime checks on compiled code. These checks can include detecting and preventing common programming errors, such as buffer overflows and memory leaks, as well as more sophisticated checks, such as undefined behavior sanitization, which can help detect and prevent subtle bugs that can be difficult to find using other methods. This talk will provide an introduction to compiler rt sanitizers in LLVM, and how to use them on various architectures starting with an example of memory sanitizer for x86 architecture. Second part of the talk will cover – how compiler-rt sanitizers can be used for 32-bit and 64-bit ARM architecture and integrate in development and testing using Software development kit (SDK) built with Yocto. Also useful for the development of applications for memory-constrained embedded devices using clang and LLVM.

uk: вхід без авторизації

name: Demystifying compiler-rt-sanitizers for multiple architectures


uk: Комп'ютерні науки

description: Natural language translation is an automated process in which text from one language (e.g. English) is translated to another (e.g. French). In this talk we introduce LibreTranslate, a FOSS package that combines state-of-the-art natural language processing algorithms, pre-trained language models and a simple RESTful API. LibreTranslate enables the addition of automated translation logic to third party applications and offers a FOSS alternative to proprietary translation services such as Google Translate or Yandex Translate. You can run it from your laptop, too! No data-center scale servers required.

uk: вхід без авторизації

name: Translate All The Things!: An Introduction to LibreTranslate


uk: Комп'ютерні науки

description: PostgreSQL has supported national language support (NLS) (that is, message translations) with Gettext for over twenty years. This has been a valuable feature, but naturally not without challenges. I have been involved in this effort as a toolsmith, organizer, and translator. We have had interesting challenges making Gettext work reliably in a client/server system and to make it cooperate with the other internationalization facilities in the system. We also had to write a lot of our own tooling to manage the translation work, merges with the code, and so on. We also have translations of the documentation, which use separate workflows. PostgreSQL is a relatively small community and the software is mostly not facing end users, so the possibilities for recruiting translators and other volunteers for this are limited. In this presentation, I want to give an account of the work we have done in the PostgreSQL project to make translation and internationalization in general an integral part of the project and start a conversation with other practitioners about best practices and the future of the tooling.

uk: вхід без авторизації

name: 20 years with Gettext: Experiences from the PostgreSQL project


Ferns (Monilophytes)

de: Biologie

uk: Біологія

en: Biology

uk: Математика, природничі науки

@language: uk

uk: вхід без авторизації

name: Taras Shevchenko National University of Kyiv

name: Projekt 'Open Education Resources with Ukraine'


uk: Комп'ютерні науки

description: We have been working to bring multi-architecture support using SYCL to the LLVM Clang project. Our original approach was to implement a "Plugin Interface" to add support for a PTX back-end and subsequently we have also added support for GCN enabling NVIDIA and AMD GPUs. This short presentation will outline our approach to designing this multi-architecture back-end and recent work to formalise the interface in the SYCL specification. This work is enabling researchers using the pre-exascale Perlmutter and Polaris supercomputers and exascale Summit supercomputer to write code using open standard SYCL and deploy on these machines.

uk: вхід без авторизації

name: Defining a multi-architecture interface for SYCL in LLVM Clang


uk: Комп'ютерні науки

description: It is more or less clear which tools to use when translating the text in the software itself, but not so much for documentation, especially when this documentation evolves and needs to be updated. This talk presents a pipeline to create an initial version converting markdown files and html into po files. Using a script to automatic translate them using the cloud and what to do when the document gets updated.

uk: вхід без авторизації

name: Translating documentation with cloud tools and scripts: Using cloud tools and scripts to translate, review and update documents


uk: Комп'ютерні науки

description: How the Frenche translation team of Debian provides ays for anyone to contribute The Debian French localization team has an old-fashion translation system, in general. Many things use mail, the doc is not quite easy to learn, our tools are old, and the distro does not use modern tools such as Pottle or whatever. It is difficult to plan a such evolution, as Debian is large, the staff of administrators is small and busy, and covering all the translation subprojects is a very challenge. On the debian-facile wiki page, I suggest a way in order to ensure the new translator walks at his/her owh rhythm, meets the team, understands the process, and so on. Of course, we need support, help and persons, but at least it lets persons not using modern tools to contribute and, if they want, become a Debian Developer not uploading. Let us introduce this way and how a beginner can take stuff to get involved, and see the challenges at each of such steps.

uk: вхід без авторизації

name: Building an atractive way in an old infra for new translators


uk: Комп'ютерні науки

description: Weblate is proudly a libre SW and helps many FOSS projects of various sizes to engage and enlarge their communities, and bring their creations closer to their users. It became an essential tool over the ten years since the first version. Knowing this, we will talk about the responsibility, project news, recently added and also notably useful features, and some plans. You will also see what works for openSUSE, Fedora, Libre Office, KODI, and other happy FOSS users. All your Weblate questions will be gladly answered, of course.

uk: вхід без авторизації

name: Bringing your project closer to users – translating libre with Weblate


uk: Комп'ютерні науки

description: Reggae is built upon CBSD and uses it as a layer to create and configure jails and virtual machines, configure network and to some degree interact with firewall. Reggae also makes creating of development environment fast and easy. It enables developers to use jails or virtual machines for development so that the host system is not polluted with project dependencies. It supports different provisioners: shell, ansible, puppet, chef and salt stack. When not in development mode, Reggae makes maintaining of production easy with helper commands like provisioning already deployed jail. This talk will cover all features of Reggae and some features of CBSD and FreeBSD that make Reggae possible.

uk: вхід без авторизації

name: Reggae: cool way of managing jails/VMs on FreeBSD: No docker, no cry


uk: Комп'ютерні науки

description: In the framework of the “Public Money? Public Code!” campaign, the FSFE is demanding legislation that requires that publicly financed software developed for the public sector should be made publicly available under a Free Software licence. This talk will provide a brief overview of the state of play of previous and ongoing EU legislative procedures focused on digital transformation, in which the FSFE has been actively advocating for public code. We will take a look at the impact of such involvement and the challenges that still lie ahead for software freedom in Europe. Political decisions have a large impact on Free Software, its ecosystem, and its communities. The FSFE has been taking part in consultations, public discussions and in sharing our demands with decision-makers in order to recognise the importance of Free Software in the ongoing digital transformation of Europe. With the help of the framework of our “Public Money? Public Code!” campaign, we are demanding legislation that requires that publicly financed software developed for the public sector should be made publicly available under a Free Software licence. In this talk, we will delve into the EU Declaration of Digital Rights and Principles, the ongoing AI Act, as well as recently proposed Cyber Resilience Act, and the Product Liability Directive. We will further discuss the European Commission communication: "Open Source Strategy: Think Open”. This will help us analysing the shift of wording that has taken place on the part of the EU institutions until now but also to highlight some of the loopholes that still exist in such legal frameworks. We will finally list some of the challenges that we have to overcome to assure more public code in the public sector in Europe. Please note that this talk was originally scheduled to be given at 10.00 but have been postponed to give room for the talk Covid Exposure Notification Out in the Open to be longer to cover for cancellations of other talks just before the schedule freeze.

uk: вхід без авторизації

name: AMENDMENT Public Money? Public Code! in Europe: A policy brief of the state of play of Free Software in the European Union


uk: Комп'ютерні науки

description: Covid 19 pushed national and international cooperation to its limits, highlighting the strengths and weaknesses of our ambition to solve complex social problems using technology. One such area was Exposure Notification: using mobile phones to detect exposure to Covid. In this talk I'll chart my experiences developing an open source implementation of the GAEN protocol, which turned into the Sailfish OS Contrac App, with equivalent functionality to Germany's Covid Warn App developed by SAP.

uk: вхід без авторизації

name: AMENDMENT Covid Exposure Notification Out in the Open: Developing an Open Implementation of the Google/Apple Exposure Notification Protocol


uk: Комп'ютерні науки

description: COVID-19 birthed a movement to use open source to address crises through rapid distributed manufacture of medical supplies and emergency equipment. However, even in drastic crises, labeling, tracking, quality assurance and authenticity is required. The Global Open Source Quality Assurance System (GOSQAS) proposes to solve this with an open provenance tracking system that will track the maker’s mark, self-asserted and 3rd-party quality tests, and changes in custody accessible with a QR code. About a dozen nonprofits have formed an alliance to promote quality assurance for open source (free-design) devices and supplies. Open source emergency devices and medical supplies can be rapidly manufactured with distributed systems, such as hobbyists with 3D printers. This can quickly repair supply chains broken by war or natural disaster. However, the normal reputational and legal mechanisms for ensuring quality and authenticity don’t function well in such crises. The open source solution to this is to be as transparent as possible. In the case of physical devices, this means that a would-be buyer of the device should be able to easily look up: when, where, how, and by whom it was made, what quality assurance tests have been performed on it, maintenance performed, etc. By maintaining the complete chain-of-custody, counterfeiting can be effectively mitigated. Eventually, encryption will allow provenances to be kept appropriately private. This proposed system does not compete with other tracking systems, but can be used to complement them on a purely voluntary basis. Eventually, people will demand full and transparent provenances for many devices. In this talk we discuss the movement, the problems, and the proposed approach. Please note that this talk was originally scheduled to be given at 09.40 but have been postponed to give room for the talk Covid Exposure Notification Out in the Open to be longer to cover for cancellations of other talks just before the schedule freeze.

uk: вхід без авторизації

name: AMENDMENT Global Open Source Quality Assurance of Emergency Supplies


uk: Комп'ютерні науки

description: Chimera Linux is a new Linux distribution started in mid-2021. It's a general-purpose operating system based on binary packages that aims to be practical and clean, while addressing various shortcomings of an average Linux distro. One of the things making it unique is that it's a non-GNU distribution, utilizing a combination of userland utilities originating from FreeBSD, the LLVM/Clang toolchain and musl libc, besides other things. On top of that, it is not based on any existing distribution and comes with its own packaging infrastructure and various custom software that was needed to fill in the gaps. It's also highly portable, already supporting x86_64, POWER, AArch64 and RISC-V, with more possibly coming. In the presentation I will cover the progress made in the last year, as well as give a general overview of the system and what it takes to create a distro from scratch. The distribution follows a rolling release model and by default uses the GNOME desktop with Wayland. The custom package building infrastructure was created after having learned from the shortcomings of equivalent systems in other distros, aiming to be flexible and fast, while emphasizing correctness and allowing for fully sandboxed, unprivileged builds. The result is binary packages/repositories for apk-tools, which Chimera uses as a frontend package manager. The build tooling can also bring the system up from source using a foreign musl-based distribution as a base, making it easily bootstrappable. The resulting repositories utilize LLVM's ThinLTO for nearly all packages, and special emphasis is also placed on security hardening (including CFI and others). Service management is based on the Dinit suite with a custom set of core services and is fully supervising, dependency-based and aims to provide practical parity with systemd, while remaining lean and grokkable (and most importantly, portable). A major aspect of the project is to also improve software portability across the stack, improving the state of matters for both Linux and the BSDs. We also aim to contribute code improvements back to FreeBSD. Most importantly, this is not any kind of dogmatic, niche effort. It's a system that tries to be pragmatic, providing a complete package that is polished and has well-defined defaults, while establishing its own identity and not being like something else. We also want to establish a community that is open and welcoming, without pointless elitism, and most importantly have fun doing all of this. This is a follow-up presentation to last year's FOSDEM, but I will try my best to make it standalone and as easy to understand as possible for the general audience. Some basic Linux administration knowledge may be necessary for some of the information.

uk: вхід без авторизації

name: Chimera Linux: A BSD/LLVM distro from scratch


uk: Комп'ютерні науки

description: First generation computers emerged during WW2 and developed in the 1950s and were based on quite different from the present technology: vaccum tubes/germanium diodes for processing and delay lines for memory. Running those ancestors is extremely difficult given the few examplaries left, their delicate technology and the lost expertise. However at a logical level, their architecture is not so different of our current computers as theses ancestors quickly adhered to the then emerging Von Neumann architecture. This allow us to understand their behaviour on programs through emulating their instruction set and memory structure. This talk presents this process applied by the NAM-IP computer museum to revive the memory of the GAMMA 3, the first french computer build and sold by Bull between 1952 and 1962. After describing the machine structure and some existing emulators (assembly/javascript from ACONIT), we show how to progressively build a JAVA implementation by following the actual machine evolution from a core machine centered on an ALU operating on 7 decimal words and a 64 instruction panel to an enriched instruction set supporting a binary computation mode and external memories, including a magnetic drum of about 100KB. We then demonstrate the result on a few business programs recovered from that era. The talk also reminds about key concepts, the electromecanical context and how the transition proceeded to computers.

uk: вхід без авторизації

name: Understanding the Bull GAMMA 3 first generation computer through emulation


Emulator development in Java

uk: Комп'ютерні науки

description: This talk explores my recent experience of developing an emulator in Java for two of our favourite Z80-based retro machines, the Sinclair ZX Spectrum and Sega Master System. At first glance, Java may not seem the obvious choice for emulator development: it lacks features such as unions, macros and definable primitive types (at least until recently!) that are leveraged for efficiency by emulators written in C/C++; integrating with native libraries beyond those in the standard platform can add development complexity and performance considerations; meanwhile, our program runs in a virtual machine whose JIT compiler and garbage collector have the potential to introduce latency into time-critical code. On the other hand, Java is cross-platform and includes sound, graphics, UI and concurrency APIs out of the box and its native platform integration and under-the-hood optimisations have been steadily maturing. We will explore what Java has to offer the emulator developer using “traditional” Java language and standard OpenJDK features alone, and see when and how to address some of our concerns when it comes to low-level data operations and performance.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: A presentation on Dreamcast and Nintendo DS emulation on PSP. This talk discusses the challenges and obstacles of porting emulators nullDC, nooDS and DeSmuME to PSP, as well as tailoring and optimising them according to the PSP's unique hardware layout. Utilising tools and tricks far beyond what was officially possible on PSP, this will push the hardware to its limit - not for the faint of heart! Emulating a rival console released in the same year as your platform is no mean feat, nor is emulating a home console released just a few years prior as a handheld. Yet this is exactly what the PSP scene has set out to accomplish, and a few talented developers have spent hours researching these platforms in-depth and re-inventing the emulators to push them as far as possible. They have also delved into techniques never possible under official limitations - executing code directly on the second CPU, previously barred for official software, and using the latest development tools that can far exceed older results. How far can we really push the PSP? And can new, experimental techniques claw enough performance to emulate the impossible?

uk: вхід без авторизації

name: Pushing the PSP: Emulating Dreamcast and DS on PSP


uk: Комп'ютерні науки

description: We developed a polarizable force field to investigate mixtures of choline chloride. Dynamic properties are in good agreement with experimental values. However, the model lack of transferability between different systems since a system specific damping function for interactions of the anion must be introduced. Furthermore, this parameter must be fitted to expensive first principle molecular dynamics simulations. Therefore, we have investigated the capabilities of machine learning inter-atomic potentials. This enables molecular dynamics simulations of systems consisting of several thousand of atoms on the ns-time scales with quantum chemistry accuracy but at a fraction of the computational cost of ab initio molecular dynamics simulations.

uk: вхід без авторизації

name: Ab initio modelling of liquids with ionic compounds

name: Weierstraß-Institut für Angewandte Analysis und Stochastik (WIAS)

addressLocality: Berlin

addressRegion: Berlin

name: Leibniz-Institut für Agrartechnik und Bioökonomie (ATB)


uk: Комп'ютерні науки

description: Digitransit is an open-source public transportation project which consists of microservices created within the Digitransit project and use of existing open-source projects. Digitransit was originally created in Finland to replace existing nation-wide and regional journey planning solutions in 2014. Digitransit has since been used around the world in smaller and larger projects, for example in Germany. In this presentation, I will discuss and demonstrate what Digitransit is and what are the future plans for the project.

uk: вхід без авторизації

name: Digitransit: An open-source journey planning project


uk: Комп'ютерні науки

description: KDE's digital travel assistance app Itinerary consumes public transport data in various ways, from journey queries over realtime disruption information and coach layouts to tickets. In this talk we'll look at what has been implemented for this and what is still missing. KDE Itinerary supports you on the road by presenting all relevant travel dates and documents in a timeline, with all its content being automatically extracted from flight, train and bus tickets, hotel reservations or event tickets. Unlike with proprietary alternatives, all of this happens on the user's device and under the user's control. Itinerary can then augment this with realtime information about disruptions and suggest public transport options to get from the station to the hotel for example. For connections in complex train stations Itinerary also provides OSM-based indoor maps including the realtime operational status of elevators where available. In order to support the travel data extraction from tickets, decoding several standard and proprietary ticket barcode formats has been implemented. Besides UIC 918.3 and ERA SSB/TLB this as of recently also includes the rather complex new European international ticket standard "Flexible Content Barcode" (FCB). For a few proprietary barcodes we are still struggling with reverse engineering and/or finding the corresponding documentation though. For querying public transport journeys and disruption information several open and proprietary backends are supported, such as Navitia, OpenTripPlanner, OpenJourneyPlanner/TRIAS, Hafas and EFA. The focus here is on unified access to common information rather than to support every possible detail and journey customization option. One still missing but particularly difficult to model piece of information however are prices and tariffs. With over 80 currently supported online services, automating discovering and managing information about those also becomes relevant. We will look at the Transport API Repository project as well as Itinerary's approach of adding line and product metadata from OSM and Wikidata for this. Realtime data of the operational status of elevators and escalators or the train coach layout at a given platform are also supported, but unfortunately not as widely available. This tends to be particularly relevant information for users with mobility restrictions though.

uk: вхід без авторизації

name: Public Transport Data in KDE Itinerary: Querying realtime journey data and dissecting ticket barcodes


uk: Комп'ютерні науки

description: MOTIS is a modular mobility platform that was released as Open Source in May 2020. It's main functionality is its high performance door to door routing. However, MOTIS comes with "batteries included" and provides additional modules for input (e.g. auto-complete for station names and addresses) and output (embedded map tile server, departure and arrival tables, vehicle locations, etc.) as well as an Android app and web user interface (all open source). MOTIS offers a JSON-API via HTTP(S). It reads timetables in GTFS and can update its data model with GTFS-RT. Our current focus is the profile-based computation of fully accessible routes for people with disabilities as well as the implementation of a data model and algorithms that can efficiently work with timetables of arbitrary length.

uk: вхід без авторизації

name: Introducing MOTIS Project: An Open Source Door-to-Door Routing Platform


uk: Комп'ютерні науки

description: OpenTripPlanner is an open source journey planning framework with over 10 years of history. It is constantly evolving, with the version 2.0, including an entirely revamped transit routing algorithm, Multi-Criteria Range-RAPTOR with Destination Pruning, released in the end of 2020. The new algorithm makes it possible to support large national and international deployments. Currently, it powers the national journey planners in multiple countries, including Norway and Finland. At Entur it is used as a basis for systems ranging from ticket sales to physical departure boards at railway stations. In this presentation, we will take a quick look into the history of OpenTripPlanner, where does it come from, and how has it evolved over the years. We will take a closer look at the recently released OpenTripPlanner version 2.3 and its new features, as well as a look on the roadmap of which functionality will be coming in the next releases.

uk: вхід без авторизації

name: OpenTripPlanner: past, present and the future


uk: Комп'ютерні науки

description: Accurate description of the railway network as always been a key resource to manage train circulations. To solve common problems of operation simulation requires a great amount of data of high quality. Unfortunately, open data published by infrastructure managers in Europe is not meeting expectations: poor documentation, no information on data quality, low frequency updates, missing data, heterogeneous coverage… In this talk, we will compare current railway network data availability and quality on OpenStreetMap and on company-owned open data platforms of several European countries. Based on this analysis, we will issue usage recommendations for open-source projects needing to use railway network description data. Then, we will share perspectives on the evolution of these data sources on the years to come.

uk: вхід без авторизації

name: OpenStreetMap, one geographic database to rule them all?: Mapping the railway network for the public, with the public


uk: Комп'ютерні науки

description: You're a railway infrastructure manager. A train operator calls up, and would like to fit a new train in the existing schedule. It should leave at 10am, and it's 8am. How do you make sure this new train won't cause any traffic jams? We discuss what is short-term train planning, what are the challenges involved, and how it's done in OSRD.

uk: вхід без авторизації

name: Automated short-term train planning in OSRD


uk: Комп'ютерні науки

description: In the last years, SBB has developed a binary data format, based on the open standard HDF5. We call this format Rail Condition Monitoring Data Exchange, or short RCM-DX. We already decided to set this format Open Source. In parallel, SBB has developed a Viewing software for this data format, called RCM-DX Viewer. We are in the process to also set Open Source this viewing software as well as a Java and C# Library that can read and write RCM-DX directly. The SBB is hoping to attract a community for those tools in order to have a free and open standard format for measuring data in the rail infrastructure domain. In an ideal world, in future a railway company can mention this format in an open tender and thus ensure, that data produced is open and readable. Also a new company, creating a new measurement system can rely on this viewing software and data format and thus lower its initial amount of work to enter the market. We would like to show our current state and let the world see where those components can be obtained

uk: вхід без авторизації

name: Using open source software to boost measurement data in railways


uk: Комп'ютерні науки

description: Transition is a web based transit network edition and analysis platform. Leveraging OpenStreetMap data as it's base data source, it lets you create a network from scratch easily or import and modify an existing one via GTFS files. You can create multiple scenarios and compare them via various visualisation Using travel survey data, we have a genetic algorithm that can optimise your network, reducing overall transit time for users, while keeping your constraints fixed. The talk will present the various features of the platform, with examples from actual cities, describe our routing infrastructure, show where we are hoping to go and touch the topic of OSM data quality and the data require for best analysis. This is a great example of a project who started in the depth of a research lab and graduated to be used outside of it. The development was done in collaboration with planners from various transit agencies, which insure that the features are useful to users. We could tell many stories about the challenges of bringing code from the research labs out to the real world, we'll touch on some, time permitting. We developped our routing engine for transit purpose, trRouting. We also build on top of OSRM (Open Source Routing Machine).

uk: вхід без авторизації

name: Transit network planning for everyone: optimise your network, reduce transit time for users!


uk: Комп'ютерні науки

description: For most people, an emulator is a way of running old software (usually games) on new hardware. But using an emulator to step through the original ROM code of an old computer can provide insights on how the machine worked, teaching us tricks that were usually the preserve of hardware hackers. In this talk, we cover seven different machines (including perennial home computers like the ZX Spectrum and Commodore 64, along with the Dragon 32, and consoles like the Gameboy) to deep dive on a single element of their implementation. We explain how data can be transfered without a data bus, why it's quicker to check for multiple results instead of one, or what is the legally optimal series of bytes for copy protection. Beginning with a brief overview of the era in question, 1980-1985, we begin by looking at each of the 7 machines, showing an open source emulator, and how it works in a normal scenario. We then highlight a portion of the code to examine, and break down the reasons for it being written in the way it was. For each machine, we focus on the way the code makes the machine work showing a practical use to emulators that is often overlooked. We end with a number of "honorary mentions" of ROM code that exists for non-essential purposes, such as Easter eggs. p.s. no knowledge of antiquated assembly languages is required or expected!

uk: вхід без авторизації

name: 7 things I learned about old computers, via emulation: (p.s. it's not about games)


uk: Комп'ютерні науки

description: This presentation will give an introduction into co-simulation, the AMD/Xilinx QEMU fork supporting co-simulation, the libsystemctlm-soc library containing the infrastructure for co-simulating SystemC and RTL with AMD/Xilinx QEMU and the systemctlm-cosim-demo project containing co-simulation examples. In the final part of the presentation a co-simulation demo will be shown.

uk: вхід без авторизації

name: An introduction into AMD/Xilinx libsystemctlm-soc


fq - jq for binary formats

uk: Комп'ютерні науки

description: fq is inspired by the well known jq tool and language and allows you to work with binary formats the same way you would using jq. In addition it can present data like a hex viewer, transform, slice and concatenate binary data. It also supports nested formats and has an interactive REPL with auto-completion. It was originally designed to query, inspect and debug media codecs and containers like mp4, flac, mp3, jpeg. But has since then been extended to support a variety of formats like executables, packet captures (with TCP reassembly) and serialization formats like JSON, YAML, XML, ASN1 BER, Avro, CBOR, protobuf. In addition it also has functions to work with URL:s, convert to/from hex, number bases, search for things etc. In summary it aims to be jq, hexdump, dd and gdb for files combined into one.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The Libabigail project is a framework and a set of tools aimed at analysing the ABI of ELF binaries by using their associated debug information as well as various ELF artifacts. The tools are currently geared at analysing and comparing ABI representations of binaries and binary packages. This talk aims at presenting the recent developments at the level of the framework, the tools and their use cases, as well as the perspectives we are currently envisoning for the near future.

uk: вхід без авторизації

name: Libabigail, State Of The Onion: Current status and perspectives of the Libabigail project


uk: Комп'ютерні науки

description: GNU poke is an interactive, extensible editor for binary data. Not limited to editing basic entities such as bits and bytes, it provides a full-fledged procedural, interactive programming language designed to describe data structures and to operate on them. In this activity we will show the program and discuss about the current status of the project.

uk: вхід без авторизації

name: GNU poke: The extensible editor for structured binary data


uk: Комп'ютерні науки

description: GNU poke is about manipulating structured binary data. For a long time, the only available user interface (UI) for poke was the CLI interface. But that's not the case anymore! Now we have ‘poked’ and a lot of pokelets. ‘poked’ is the daemon responsible for enabling pokelets provide their UIs. This talk explains why this approach is a good and powerful idea and how it enables users to make their own task-specific UIs very fast, or extend GNU poke with more capabilities (like making GNU poke a more powerful Wireshark-like tool, or adding disassembly capabilities). pacme project (a suite of pokelets) and poke-el (an Emacs interface) will be presented as examples.

uk: вхід без авторизації

name: GNU poke beyond the CLI (Command Line Interface): poked + pokelets = Better UI


uk: Комп'ютерні науки

description: radare2 is a well known tool in the field of reverse engineering. It's constantly evolving and improving, many things has happened in its 17 years of development. So it's always good to take some time to take a look at the current status of the project, the new features and the development plans for this year.

uk: вхід без авторизації

name: The state of r2land: Presenting radare2, last updates and development plans


uk: Комп'ютерні науки

description: Sampling CPU profilers periodically fetch the stacks of the profiled processes that are running on the CPU at a given time. Walking the stacks of native processes with a little work is easily possible when frame pointers(FPs) are present. But most binaries in the real world are not compiled with FPs. So it can get quite complicated if profilers have to walk the stacks when frame pointers are omitted. In this talk, we will talk about how we can walk the stacks using the DWARF CFI (mainly .eh_frame). We will also discuss how eBPF is helping us with that and how extending the current stack walking facilities can be useful especially in interpreted languages, such as Ruby, as well as runtimes with JITs, like the JVM.

uk: вхід без авторизації

name: Stack walking/unwinding without frame pointers


uk: Комп'ютерні науки

description: Computational storage devices (or CSDs) are the new emerging technology that allows offloading computation to storage devices. In this technology, computation is pushed to the storage device (close to the data), and only the final result is returned to main system memory. The efficiency and performance gains come from the reduction in data movement over the I/O interconnects, thus relieving pressure on the memory bandwidth in the traditional Von Nuemann architecture where all data is first moved to the main memory before processing. Despite lots of enthusiasm, proposals, and research publications, there are no immediately available open-source ready to use CSDs available. Due to the lack of such prototypes, it is very hard and challenging to explore hardware, physical interfaces, application APIs (block-level, file system, key-value stores) for CSD devices. In this talk, I will present OpenCSD, a completely open-source CSD exploration platform designed with QEMU. OpenCSD uses eBPF as the means to offload computation to the CSD, and includes an accompanying file system. FluffleFS, the file system, uses POSIX extended attributes to interact with the CSD device. The full, open-source implementation including a block-device, programming toolchain and a file system interface; allow anyone to explore the paradigm of computational storage.

uk: вхід без авторизації

name: OpenCSD, simple and intuitive computational storage emulation with QEMU and eBPF: After all, why not turn your computer into a distributed system?


uk: Комп'ютерні науки

description: Digital technology is a major contributor to environmental harm, whether it is the 'tsunami' of e-waste filling landfills or the CO2 emissions on a par with the aviation industry. Oft overlooked is that software plays a crucial role. For instance, software bloat means less powerful hardware may stop working and end up as toxic waste in landfills, while new devices are manufactured unnecessarily -- the production of which often costs more energy than usage over their operating life. Moreover, software bloat also entails that the software will have higher energy demands and pump more greenhouse gases into the atmosphere -- in order to achieve the same result. Digital sustainability is, in many ways, a question of software. The Blue Angel ecolabel, the official environmental label of the German government, began certifying software in 2020. In the award criteria, sustainability is closely linked with transparency and user autonomy. This connection has been one of the motivations behind the KDE Eco initiative since its beginning in 2021. In this talk I will present the environmental harm driven by software, with a focus on energy consumption. I will link the values of Free and Open Source software to sustainable software design. Finally, I will provide an overview of the work of the KDE Eco project and the new sustainability goals of KDE.

uk: вхід без авторизації

name: Combatting Software-Driven Environmental Harm With Free Software


uk: Комп'ютерні науки

description: Over the last few years, the idea of a carbon aware, fossil free internet by 2030, has become more than just interesting idea, and instead something that is socially and economically plausible, as well as desirable and inline with the latest climate science. In this talk we’ll cover some of the key drivers to make this possible, and what key policy changes can accelerate our transition from fossil fuels in the technology sector. We’ll cover some of the most promising ideas from the Internet Architecture Board’s recent workshops to explore how to reduce global ICT emissions inline with the science around staying within 1.5 degrees of warming. We'll give an overview of how new open source software like Ecovisors can do for on-site power what hypervisors have done for virtualisation of computing, how carbon-aware Computing schedulers and carbon aware networking routers can lead to an internet that can complement a shift to a grid powered by more variable renewable sources of energy, and we will also cover how a shift to hourly carbon accounting for electricity with new standards like Energy Tag’s Granular Certificates can cut through existing greenwash. Finally we'll talk about some of the the regulatory drivers on the horizon can help technologists argue for more ambitious climate action, from the European Corporate Social Responsibility Directive to recent changes in international accounting standards from the IFRS (international financial reporting standards) Foundation. Participants will leave with a good grounding of the progress made in the Greening of IT, the challenges facing us for the rest of the decade, and better idea of their role in the coming energy transition, particularly in the tech sector.

uk: вхід без авторизації

name: Getting to a fossil free internet by 2030: A tour of the tech and policy changes to get us there


uk: Комп'ютерні науки

description: This talk is about my personal story and experiences around energy use cases at home, which I have mainly realized with the smart home software openHAB. It starts with energy monitoring of the smart home from electricity to heating and room temperatures and goes on to tracking a photovoltaic system and managing its surplus production, e.g. for charging an electric vehicle. Besides the technical use-cases, we will also have a look at environmental impact and the potential cost savings.

uk: вхід без авторизації

name: 4 Years of Energy Management with openHAB: A personal story about smart homes, PV systems and EVs.


uk: Комп'ютерні науки

description: A number of open‑source energy system models are now active in the global south and this presentation provides an update. Energy system models are simulations of future energy systems that can be used to test scenarios. More specifically, such models can explore a range of net‑zero options in an integrated fashion, determine which scenarios are feasible, and then report on system development trajectories, detailed and aggregate costs, and related attributes for further consideration. Many of the underlying modeling frameworks are now fully‑fledged open‑source projects. In addition, there are several nascent initiatives to develop coherent databanks and also the overarching data standards they require, with both endeavors suitably open licensed. These various efforts are now starting to spill into the global south generally and sub‑Saharan Africa in particular. A number of potential benefits then arise from this kind of open analysis. The first is the zero monetary cost of course. The next is organic knowledge transfer both northward and southward within the various project communities. A third is doubtless that a greater range of scenarios will be placed on the table — indeed I sense that the multilateral agencies working in Africa have settled on a selected set of solutions and that suggestions that fall outside the prevailing orthodoxy are unwarranted and unwanted. A fourth potential advantage is local engagement, and further, the prospects of improved local autonomy — and while there are no examples of model‑mediated public processes in the global south as yet, that concept is being trialed in the global north. The use of open analysis in the global south will offer distinctive challenges nonetheless. The most obvious difficulty is data availability and a number of proxy solutions have been developed. The next is how best to channel these efforts into public policy formation and then on to live projects. Also critical will be the necessity of finding new ways of interacting between official agencies and these clearly informal modeling communities. Two of the leading open‑source framework projects, OSeMOSYS and PyPSA, have begun significant efforts to broaden into the global south. These two initiative will be reviewed (I am not directly involved in either). Clearly early days still but sufficient progress has been made to warrant an update at FOSDEM'23.

uk: вхід без авторизації

name: Update on open-source energy system modeling in the global south and including Africa


uk: Комп'ютерні науки

description: The energy transition poses new challenges to all parties in the energy sector. For grid operators, the rise in renewable energy and electrification of energy consumption leads to the capacity of the grid to near its physical constraints. Forecasting the load on the grid in the next hours to days is essential for anticipating on local congestion and making the most of existing assets. The open source package OpenSTEF provides a complete software stack which forecasts the load on the electricity grid for the next hours to days. Given a timeseries of measured (net) load or generation, a fully automated machine learning pipeline is executed which delivers a probabilistic forecast of future load. This works for energy consumption, (renewable) generation or a combination of both. During this presentation, we will show how we have implemented this opensource tooling at the Dutch Distribution System Operator Alliander to fully automate forecasting the load on the grid.

uk: вхід без авторизації

name: OpenSTEF: Open Source energy predictions


uk: Комп'ютерні науки

description: Support for power profiling was recently added to the Firefox Profiler, enabling both Firefox engineers and web developers to get very precise measurements of the power consummed by running their code. After a brief introduction to the Firefox Profiler, the presentation will explain how this power profiling feature works, where the data comes from, what the limitations are on the various platforms. Interesting things that could be measured on Firefox will be shown, and some surprising profiling results will be shared.

uk: вхід без авторизації

name: Power profiling with the Firefox Profiler


uk: Комп'ютерні науки

description: It's the fall of 2021. Bidirectional charging (V2G) is a tech buzzword, but even all those EV owners whose cars support V2G have to wait for the industry to offer them optimal and automated operation. All of them? No. A small but growing group of Nissan Leaf owners are not waiting, but install a stack of open technologies in their home and live the new energy future. This talk will explain how HomeAssistant, FlexMeasures and NextCloud were put together to take a step into the future. In open source, we should build combined solutions from strong existing tools more often! We'll look at one year of data and discuss what could happen next. Vehicle-to-grid charging (V2G), also referred to as bidirectional charging, means your car battery is not only drawing power from the grid, but might also discharge (back) into the grid. The consequences for the power system are highly consequential, but also from the user perspective: You can save a lot of money if you use your own solar power or use dynamic tariffs. Yet, commercial vendors are slow to offer optimized charging to households, let alone V2G. There are reasons for this, but we set out to show that they are not fundamentally technical. While the industry world is dragging their feet, the power and maturity of open source allowed us to put together an open stack to allow cost-optimized and automated bidirectional charging at home, with a user-friendly UX design built on top, as well. We used strong, existing tools, and added a thin application layer (a HomeAssistant plugin). This design approach should be on the table more often in the open-source community. We will explain the design of this stack, as well as the data we collected and potential monetary benefits for the user. At the moment, the stack is rolled out at the homes of other enthusiastic front-runners. This will make sure the solution becomes more mature and makes steps to scalability. As industry is also dragging their feet on supporting the OCPP protocol, we can only support one charger right now, the Wallbox Qasar, but there is no technical limit to supporting other bidirectional chargers. We are curious if others are interested to support more chargers, and make the stack even easier to install and monitor. Soon, the commercial world will roll out more bidirectional chargers and cars (we use the Nissan Leaf), as well as home energy management solutions which lock users into specific vendor relationships (where the car is just one of the managed services). It's crucial to provide an open-source alternative, to provide independence for users, and to inspire startups.

uk: вхід без авторизації

name: V2GLiberty: The open stack that could: How we enable EV owners to be ahead of the industry, with open source software


uk: Комп'ютерні науки

description: Managing efficiently references for research papers or general works is of paramount importance for scholars and students across the spectrum. The common tasks of such a user range from information retrieval of a publication to easy tagging and searching the user's own library. Several libre and proprietary software packages exist. The package Papis consists of an extendable Python library, a flexible command-line interface and a simple (but powerful) data model. This in turn, empowers the user to curate her library metadata in a future-proof and privacy-respecting manner. Papis users are encouraged and empowered by a clear API to write scripts and libraries to extend the core functionality. All major text editors have an interface to Papis and a web-application for remote access to the user's libraries is also in place. Additionally, during the last 7 years we have built a vibrant community of academic and industry researchers that have become happy users and avid contributors.

uk: вхід без авторизації

name: Papis: a simple, powerful and extendable command-line bibliography manager


Frictionless Application (IDE for CSV)

uk: Комп'ютерні науки

description: This talk will present a new data management IDE for CSV that provides functionality to describe, extract, validate, and transform tabular data. It's a logical continuation of the Frictionless Data project's standards and software with a focus on the non-technical audience: data publishers, librarians, and, in general, people who prefer visual interfaces over command-line interfaces and programming languages.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The Research Software Engineering (RSE) Asia Association started as a project in Cohort 4 of the Open Life Science Programme in the year 2021. Since its launch, the RSE Asia Association has been deeply influenced by the Open Science principles. In this talk, we highlight how the Open Life Science programme helped us shape the RSE Asia Association and the benefits we derived by building a community based on Open Science principles. We will also highlight the journey and future plans of the RSE Asia Association.

uk: вхід без авторизації

name: Establishing the Research Software Engineering (RSE) Asia Association with the Open Life Science programm


uk: Комп'ютерні науки

description: Since 2010, the Software Sustainability Institute (SSI) has facilitated the advancement of software in research by cultivating better, more sustainable, research software to enable world-class research (“Better software, better research”). To achieve this, the SSI has engaged a community of researchers; Research Software Engineers and developers; instructors and trainers that deliver research software training; research policymakers; and groups that provide services that support research software development. We will present an overview of the Institute’s main activities to engage the research software community, such as the Fellowship Programme, annual Collaborations Workshop, and Research Software Camps, and how you can get involved. We will also talk about resources that we have made available (e.g. the SSI Event Organisation Guide and other templates) that people are free to adapt and use to ease their own organisation of activities. Expected prior knowledge / intended audience: No prior knowledge is required for this talk. The intended audience includes all developers and users of open tools and technologies used in a research/investigation context who are interested in joining and collaborating within an inspiring and supportive research software community.

uk: вхід без авторизації

name: The Software Sustainability Institute Community and Events: How the SSI supports research software through community-building and events


uk: Комп'ютерні науки

description: With roughly 20 billion monthly pageviews, 15 million monthly edits, and almost 55 million articles across 300+ languages, Wikipedia and its sister projects are an essential part of the free Knowledge ecosystem. These projects are created and maintained by a vast network of volunteers. The Wikimedia Foundation, the non-profit organization operating Wikipedia, has a Research team of scientists, engineers, and community developers. They use data and scientific methods to support the needs and advance the understanding of the Wikimedia projects, their readers and their contributors. To expand the team's capacity and breadth of expertise, a focus area of the team is to improve the social and technical infrastructure that helps the broader Wikimedia Movement and research community to tackle complex research challenges. In this talk, members of the Wikimedia Foundation’s Research team will give an overview of their recent efforts to support the community of researchers working on Wikimedia projects. Specifically, they will discuss i) the generation of open data resources; ii) tools for working with open Wikimedia data; and iii) building and releasing machine-learning models to support Wikimedia projects. The goal of this talk is to demonstrate to open tool developers and researchers how to leverage these resources and contribute to the Wikimedia Research community.

uk: вхід без авторизації

name: Research at the service of free knowledge: Building open tools to support research on Wikimedia projects


Introduction to Pre-Scheme

uk: Комп'ютерні науки

description: Pre-Scheme is a statically typed dialect of Scheme which offers the efficiency and low-level machine access of C while retaining many of the desirable features of Scheme. Developed by Richard Kelsey in the late '80s based on the powerful "Transformational Compiler" from his dissertation, it didn't see much use beyond the Scheme 48 virtual machine. With a renewed community interest in systems-level Scheme programming thanks to the growth of the Guix project, it's high time we revisit this corner of history. In this talk we will: - review the history of Pre-Scheme - review its compiler implementation and related work - discuss the features & limitations of Pre-Scheme - discuss porting efforts & future work

uk: вхід без авторизації


Self-conscious Reflexive Interpreters

uk: Комп'ютерні науки

description: Jon Doyle's 1978 PhD thesis proposal, 'Reflexive Interpreters,' describes the idea of a reflective problem-solving meta-interpreter with a sophisticated model of its own behavior, semantics, capabilities, and limitations, that would display "self-conscious" behavior. We investigate this idea of a reflexive interpreter, and connect it to ideas from McCarthy, Minsky, and Lenat.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The DB48X project aims at recreating an open-source implementation of Reverse Polish Lisp on modern calculator platforms In 1986, Hewlett-Packard introduced the HP28C, and with it, a new programming language, "Reverse Polish Lisp" (RPL). This was arguably one of the most powerful programming languages ever introduced on a pocket calculator, and it continued well into the 2000's, with the HP50 series. RPL was initially designed for a machine with a 4-bit CPU and 2K of memory, soon upgraded to 32K. Some of the more recent calculators from Hewlett-Packard used ARM CPUs, but then only to emulate the original 4-bit CPU and run the older 4-bit ROM code. Today, several ARM-based calculator platforms support open-source firmware. This opens the possibility to revive RPL in a more modern environment. DB48X is an attempt at recreating RPL from scratch to run on such platforms. Even today, these machines remain minimalistic, with as little as 60K of free memory and less than 1MB of usable Flash storage, for example. This talk will present a design and implementation of a basic RPL runtime written in C++, but replacing the standard C++ object model with a compact, garbage-collected, byte-addressable representation of RPL objects. We will also dive into what RPL is, why it truly deserves the name "Lisp", and why it remains remarkably different from the Lisp most of us are familiar with. We will discuss some of the implemented and planned features for that new iteration of RPL, including built-in on-line help, taking advantage of high-resolution graphics, or making it as efficient as possible in "direct" (non-programmed) mode.

uk: вхід без авторизації

name: Reviving Reverse Polish Lisp: Building an open-source HP48-like calculator


uk: Комп'ютерні науки

description: The talk will give you an overview of managing Ceph with the Ceph Dashboard and how we tried to simplify the management of the Ceph cluster. We will talk about the current architecture of the Ceph Dashboard and how you can easily deploy and manage and monitor the Ceph cluster. This talk will also cover the current and newly added features of the Ceph Dashboard and also talk about its future. This will also cover how as a developer and user you can contribute to the Ceph Dashboard. We will also have a demo at the end where we'll show how easily we can deploy the Ceph Cluster starting from zero and then how you can manage different components of Ceph and monitor the insightful information of the cluster. Agenda: Introduction to Dashboard, Why we need management, Architecture of Dashboard, Key features, what's coming Next?, Demo Target audience: Ceph, Ceph Management and Monitoring

uk: вхід без авторизації

name: Operating Ceph from Ceph Dashboard: Past, Present and Furture


uk: Комп'ютерні науки

description: vhost-user-blk is a userspace block I/O interface that has traditionally been used to connect software-defined storage to hypervisors. This talk covers how any application that needs fast userspace block I/O can use vhost-user-blk and its advantages over network protocols. A client library called libblkio is available for C and Rust applications will be introduced. The protocol is also summarized for those wishing to understand how it works or implement it from scratch. This talk is intended for developers interested in connecting applications to SPDK or qemu-storage-daemon and those who want to know more about software-defined storage interfaces. - Local block storage interfaces - Kernel vs userspace - Notifications vs polling - Message-passing vs zero-copy - What is vhost-user-blk? - Implemented by qemu-storage-daemon and SPDK - virtio-blk and VIRTIO - How to connect using libblkio (C/Rust) - How to implement a server using libvhost-user (C) or vhost-user-backend (Rust) - How to integrate with the Linux kernel block layer using VDUSE

uk: вхід без авторизації

name: vhost-user-blk: a fast userspace block I/O interface


uk: Комп'ютерні науки

description: In this presentation, attendees will get an introduction to Kubernetes Operators. We will briefly touch on concepts like CustomResourceDefinition and the Controller Pattern in Kubernetes. No prior knowledge of Kubernetes is necessary for following this talk. We will next focus on the Synapse Operator. We will demonstrate its main features in an interactive demo. Finally, we'll talk about the next steps and the future of the project. Containers are everywhere. Resistance is futile ! And Kubernetes has won the battle of container orchestration engine. Kubernetes Operators are a way to deploy and manage applications and their components on top of Kubernetes. As Operators are gaining popularity (browse https://operatorhub.io/ to discover some of them), why not building one for Matrix ? The Synapse Operator contains the business logic for managing Synapse instances, as well as some bridges, on top of Kubernetes. Come join us in discovering what Kubernetes Operators are and how they are built ! Then assist to a demo of the Synapse Operator.

uk: вхід без авторизації

name: Introduction to the Synapse Kubernetes Operator: A new way to deploy Synapse and its Bridges on Kubernetes


uk: Комп'ютерні науки

description: GitHub is an extremely popular but proprietary git hosting service used by many free software projects. As a free software developer, do you wish to move to your own fully self-hosted git hosting service? Are you unable to do so because you find the GitHub issue tracker and website building features too convenient and useful? Are you frustrated with free software issue trackers and git hosting tools that require too much setup? Then, tissue is the minimalist issue tracker and project management system you've been waiting for! With tissue, you write issues as free-form text in gemtext files and commit them into the git repo of your project. tissue comes with an excellent Xapian based search interface that lets you search through these issues using very natural and powerful queries. tissue comes with an easily self-hosted web interface, and even helps you with building a static site to show off your project. State is evil. So, apart from the project git repo, tissue is stateless. The web interface does not require a database. This makes it easy to deploy, backup, and is at the right level of complexity for small free software projects. tissue is written in the delightful GNU Guile, if that's important to you!

uk: вхід без авторизації

name: tissue—the minimalist git+plain text issue tracker


uk: Комп'ютерні науки

description: I wanted a secure and convenient way to share baby photos with friends and family, so I used Matrix to create an app with a social network interface and end-to-end encryption underneath. In this talk, I describe how we use Matrix rooms to represent human social structures, from loose disorganized circles of friends, to well-defined organized groups. I will talk about what worked well, where we found some pain points, and what we did to work around them. I wanted the security of Signal Private Messenger together with the convenience of Facebook. So I created an app called Circles that uses Matrix as its server. All posts are end-to-end encrypted, so even the server admins can't read what users post or look at their pictures. In Matrix, everything happens in a room. So Circles uses Matrix rooms to store all of its posts. We use Matrix rooms in two different ways to let users connect and share in an organic way. First, we can use a Matrix room to store one individual user's own posts, similar to their "wall" in Facebook. The user can invite other users to follow them by joining the room. Followers can also post emoji reactions and replies to the room owner's posts. In the app, a social "circle" consists of one such "wall" room belonging to the current user, plus similar "wall" rooms belonging to the user's friends. For example, Alice's "Friends" circle might consist of her own "Friends" room, her buddy Bob's "Friends" room, and their friend Carol's "Friends" room. The app hides most of the complexity of the multiple rooms and instead presents the user with a single unified timeline of posts collated from all the rooms in the circle. Second, we can use a single Matrix room to represent a social group (like a Facebook group) where everyone in the group knows each other. All that is required here is to render Matrix messages as a timeline of "social" posts rather than as chat messages. We estimate that building on Matrix saved us 18-24 months of development time for our first minimum viable prototype. Overall the experience has been very good. However, we did run into a few pain points. These include: 1. Decryption errors with the iOS SDK 2. Needing two passphrases to enable secure server-side storage, or hoping that the user never loses their first device 3. Problems with the 3rd party identity server that we initially used for email verification 4. No ability to post both text and media in the same message 5. No ability to give a new user access to the earliest encrypted posts in the room 6. Questions about server performance and scalability To address #2 and #3, we built a new authentication service using the Matrix user-interactive authentication API. We are looking forward to upcoming improvements in the Matrix spec, including extensible events, rooms as profiles, and sliding sync.

uk: вхід без авторизації

name: Building a social app on top of Matrix: Fighting surveillance capitalism for fun and profit


uk: Комп'ютерні науки

description: matrixRTC allows real time voice, video and data channels to be established between groups of people over Matrix, but what happens when those groups get large? In this talk, we’ll explore how matrixRTC uses cascading foci (Selective Forwarding Units, Multipoint Control Units,…) to ease bandwidth requirements for clients by relaying through servers in a federated and decentralised way.

uk: вхід без авторизації

name: Cascaded Foci (SFUs): Selective Forwarding Units


uk: Комп'ютерні науки

description: Confidential Containers uses a generic guest image to simplify the orchestration and validation of Pod VMs. While this has many benefits, it also introduces some subtle security considerations. This talk will describe a class of so-called Evidence Factory attacks where privilege escalation can lead to dangerous misuse of generic attestation evidence. Can these attacks be mitigated while still preserving the benefits of a generic guest image? This talk will dive into the details of how attestation works for Confidential Containers and expose crucial considerations for anyone working with Confidential Computing more generally.

uk: вхід без авторизації

name: Confidential Containers and the Pitfalls of Runtime Attestation


uk: Комп'ютерні науки

description: Confidential compute is a powerful new paradigm. However yet it is not easy to use and many developers are hampered from enclaiving their applications. We have developed and open-sourced THE BASE, a set of 18 containerized applications by default leveraging Intel SGX technology. THE BASE covers popular open source applications, such as mariadb, mongodb, redis or runtime environments like python, java, go, rust, ruby. With THE BASE project we aim to help developers to enclave their workload without investing to much time. THE BASE is docker, docker swarm and kubernetes compatible, and requires no change to devops or code. In this talk I'll present the project.

uk: вхід без авторизації

name: THE BASE - FOSS Confidential Container SDK to ease the development


uk: Комп'ютерні науки

description: Deploying to "the cloud" is incredibly convenient, but that convenience normally comes at a cost. The host necessarily becomes a major part of the applications trust domain, and a compromised host means a compromised application or a network of thereof. This prevents several highly-regulated sectors, such as medical or financial, from directly deploying to "the cloud" as opposed to building their own infrastructure. Solutions to this problem exist, but most require a custom and correct implementation tied to a particular hardware vendor and SDK. I will present a hardware-agnostic and cloud provider-agnostic solution to this issue, which, with minimal changes to the implementation, can be used to secure a network of applications and demonstrate strong trust assertions produced by doing so.

uk: вхід без авторизації

name: Building a secure network of trusted applications on untrusted hosts


uk: Комп'ютерні науки

description: Gramine (formerly called "Graphene") is a lightweight library OS, designed to run a single Linux application in an isolated environment. Currently, Gramine runs on Linux and Intel SGX enclaves on Linux platforms. With Intel SGX support, Gramine can secure a critical application in a hardware-encrypted memory region and protect the application from a malicious system stack with minimal porting effort ("lift and shift" approach). Since the last FOSDEM 2022 talk Gramine project has done two releases where we continue to enhance Gramine by adding new features, fixing bugs, and improving performance. Few of the features being, enabling CPU and NUMA topology, support more syscalls and adding Vtune profiling support. In addition, we have also enhanced our GSC (Gramine shielded Containers) tool to deploy Docker containers protected by Intel SGX enclaves. This talk will highlight the major enhancements, as well as the current status of the project and its future plans on enclave dynamic memory management support in Gramine.

uk: вхід без авторизації

name: Gramine Library OS: Running unmodified Linux applications in Intel SGX enclaves


uk: Комп'ютерні науки

description: Do you wanna add an extra layer of data protection to your Kubernetes workloads? In this talk, we introduce the open-source project Marblerun and discuss the challenges that arise when you deploy confidential computing-enabled workloads on K8s.

uk: вхід без авторизації

name: Scalable Confidential Computing on Kubernetes with Marblerun


uk: Комп'ютерні науки

description: In order to ensure the confidentiality and integrity of container images, we need to download all container images from the registry within trusted domains when creating pods. Current solutions have many disadvantages. The pod/container startup time is extremely slow, the pressure on the network and container registry is high, and additional CPU, memory, and disk IO are consumed. The Nydus Image Service project aims to reduce container startup time and resource consumption through techniques such as lazy loading and data deduplication, which may help to solve the problems of container image management for confidential containers.

uk: вхід без авторизації

name: Nydus Image Service for Confidential Containers


uk: Комп'ютерні науки

description: In this talk, we will introduce td-shim (https://github.com/confidential-containers/td-shim). Td-shim is a lightweight Intel Trust Domain Extensions (TDX) virtual firmware (TDVF) for the simplified kernel for TD based confidential container (e.g. Kubernetes). In order to match the short start-up time and resource consumption overhead of bare-metal containers, runtime architectures for TD-based containers put a strong focus on minimizing boot time. They must also launch the container payload as quickly as possible. Hardware virtualization-based containers typically run on top of simplified and customized Linux kernels to minimize the overall guest boot time. As such, we introduced the td-shim to replace the traditional Open Virtual Machine Firmware (OVMF) based TDVF for container use case. Currently the rust-based td-shim supports multiple hypervisors such as KVM and cloud hypervisor with smaller size and better boot performance. It provides a secure and efficient way of building the cloud native infrastructure.

uk: вхід без авторизації

name: Rust based Shim-Firmware for confidential container


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Project Veraison (VERificAtIon of atteStatiON): (Trying to) making sense of chaos


uk: Комп'ютерні науки

description: Software compartmentalization decomposes applications into lesser-privileged components that only have access to what they need to do their job. Properly applied, compartmentalization can limit the impact of many memory safety issues by containing corruption within the vulnerable component. Use-cases are plentiful: library sandboxing, protection of SSL keys, sandboxing of network-facing code, and more. In the last decade we have seen the appearance of many new mechanisms that enable compartmentalization at a relatively low performance cost (Intel PKU, the upcoming Intel PKS, CHERI hardware capabilities, vmfunc). This generated a lot of research with a strong focus on compartmentalizing existing software, at a fine grain (isolating libraries or components), and as automatically as possible. The promises are great: the compartmentalization of legacy software, with a low engineering effort, and at a low performance cost. Alas, in this process, the interfaces between compartments are often neglected: they are hard to reason about and difficult to secure automatically, and compartmentalizing at finer and finer-grain exacerbates the issue. This is a major problem, as weak interfaces enable for many attacks well-known in the confidential computing world. In this talk I will present the result of a study on the impact of neglecting compartment interfaces. I will define and classify compartment interface vulnerabilities, and present a fuzzer specialized to catch them. Having applied it to 25 popular applications and 36 possible compartment APIs, revealing 629 interface vulnerabilities, I will present insights into what makes interfaces vulnerable, and how to make them more resilient when compartmentalizing.

uk: вхід без авторизації

name: A Study of Fine-Grain Compartment Interface Vulnerabilities: What, Why, and What We Should Do About Them


uk: Комп'ютерні науки

description: Online collaboration tools for document edition are the perfect fit to enhance the features of a Content Service Platform like Alfresco. This session explores the integration of Open Source alternatives like LibreOffice, OnlyOffice and Collabora with the Alfresco Platform. Ready-to-test deployments will be provided and demonstrated! Alfresco is an Open Source Content Service Platform (CSP) that provides document and content management features in a Cloud Native deployment. Online collaboration tools are the perfect addition to the platform when addressing document editing requirements. This session will explore different topics in relation to this integration: - Description of the Alfresco features that helps Online Collaboration tools to work on a CSP deployment (Repository, Metadata & Content indexation, Rules and Automation) - Technical description of the Alfresco APIs used for the integration (CMIS, REST API, Events API) - Review of different deployment scenarios including ready-to-test templates: - LibreOffice - OnlyOffice - Collabora - Final recap on additional integration patterns to enhance collaboration experience

uk: вхід без авторизації

name: Open Source Collaboration Tools for Alfresco: Enhancing Collaboration Experience with CSP


uk: Комп'ютерні науки

description: For a project of a reasonable size, there's usually more than one source for the website that needs to be published. For several years, Antora is known as a site generator which pulls AsciiDoc content from multiple Git repositories at once. It publishes a static website where users find a navigation, online search and linked pages, with the option to group everything by component versions. In 2022, Antora made the leap to open its publishing process to plugins: They allow pulling information dynamically during the build process and forward the content not only to a static HTML site, but other targets like PDF as well. This talk outlines what is possible today with these extensions, and how it can be extended for custom needs. Several open-source software projects like Fedora, Eclipse Che, Camel, Debezium and Couchbase use Antora. For developers it is normal to develop software in collaboration using their IDE and a version control system like Git. The same type of collaboration is possible when all documentation is versioned in a markup-format like AsciiDoc. Several examples will be from the Eclipse Che project which leveraged the Antora extensions in 2022. Additional examples show how to enrich the content with metadata and to use the information when building the site, and how to get feedback from the users of the site.

uk: вхід без авторизації

name: Creating a content pipeline with Antora: Using AsciiDoc content for the website and other downstream processes