Loading…
Attending this event?
September 16-18, 2024
Vienna, Austria
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time (UTC/GMT +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

arrow_back View All Dates
Tuesday, September 17
 

06:45 CEST

5k Fun "Run"
Tuesday September 17, 2024 06:45 - 08:00 CEST
Don’t forget to pack your running gear because the Fun “Run” is on! This activity is great for all fitness levels as there will be (3) pace groups: walking, jogging, and a running group.

Time: 6:45 – 8:00
Location: Melia Vienna, Donau-City-Straße 7, 1220 Wien, Austria

There is no cost to participate and space is available on a first-come, first-served basis.

*Participants must be registered for Open Source Summit Europe 2024, have their event badge, and will be required to provide their own running attire and water.

Tuesday September 17, 2024 06:45 - 08:00 CEST
Melia Vienna Donau-City-Straße 7, 1220 Wien, Austria

07:30 CEST

Zen Zone
Tuesday September 17, 2024 07:30 - 16:45 CEST
Need a quiet place?  Visit the Zen Zone!  Use this space to unwind and relax by meditating or using as a prayer room or just simply sitting in a quiet area.

Please note that talking on cell phones or using laptops in this quiet space is not allowed to ensure a Zen environment.
Tuesday September 17, 2024 07:30 - 16:45 CEST
Room 1.41 (Level 1)

07:30 CEST

Hacker Space
Tuesday September 17, 2024 07:30 - 17:00 CEST
Discover a space, where you can collaborate, create, and explore new ideas with fellow attendees. Whether you're here to learn or build, our space is open for everyone to enjoy throughout the conference!
Tuesday September 17, 2024 07:30 - 17:00 CEST
Business Lounge (Level 0)

08:00 CEST

Continental Breakfast
Tuesday September 17, 2024 08:00 - 09:00 CEST
Tuesday September 17, 2024 08:00 - 09:00 CEST
Foyer A (Level 2)

08:00 CEST

Registration & Badge Pick-Up
Tuesday September 17, 2024 08:00 - 18:00 CEST
Tuesday September 17, 2024 08:00 - 18:00 CEST
Entrance 1 (Level 0)

08:00 CEST

Coat + Bag Check
Tuesday September 17, 2024 08:00 - 18:30 CEST
Tuesday September 17, 2024 08:00 - 18:30 CEST
Room 0.15 (Level 0)

09:00 CEST

Keynote: Welcome Back - Gabriele Columbro, General Manager, Linux Foundation Europe & Executive Director, Fintech Open Source Foundation (FINOS)
Tuesday September 17, 2024 09:00 - 09:05 CEST
Speakers
avatar for Gabriele Columbro

Gabriele Columbro

Executive Director / General Manager, FINOS / Linux Foundation Europe
Gabriele is an open source technologist at heart. He spent over 15 years building developer ecosystems to deliver value through open source across Europe and the US. He thrives on driving innovation both contributing to open source communities and joining commercial open source ventures... Read More →
Tuesday September 17, 2024 09:00 - 09:05 CEST
Hall A (Level 2)

09:00 CEST

Linux Power Management Features, Their Relationships and Interactions - Théo Lebrun, Bootlin
Tuesday September 17, 2024 09:00 - 09:40 CEST
Over time, many features have been introduced into the Linux kernel to tackle various Power Management related needs. Most features rely upon the device model to provide its features, making each feature in isolation have rather understandable behavior and straight forward APIs. Complexity can creep in however when those various features interact with each other. We'll therefore cover features in isolation: system-wide suspend, hibernation, runtime power management, power domains, Quality of Service, etc. On each new step added, we'll stop to reflect on potential interactions or conflicts with previously seen features. Some of those will come from concrete issues encountered during the upstreaming effort of Suspend-to-RAM support on an automative SoC, the TI J7200 platform.
Speakers
avatar for Théo Lebrun

Théo Lebrun

Embedded Linux engineer, Bootlin
Théo joined Bootlin as an intern, studying the potential applications for the PipeWire ecosystem to embedded topics. He then went onto kernel work: suspend-to-RAM support for a TI automotive SoC and upstreaming of base platform support for Mobileye platforms.
Tuesday September 17, 2024 09:00 - 09:40 CEST
Hall B (Level 2)

09:00 CEST

Visions for the Linux Kernel PWM Subsystem - Uwe Kleine-König, BayLibre
Tuesday September 17, 2024 09:00 - 09:40 CEST
PWMs are used in a wide range of applications. Most in-kernel usages have only soft requirements regarding precision and switching behaviour (LEDs, fan control, backlight). However if you control a motor you might have higher demands that currently cannot be mapped generically using the current PWM API given the wide variance of hardware drivers and hardware limitations. In this talk Uwe presents his vision how the PWM framework can be changed to better match the needs for higher precision and better control of PWM devices. This includes: * faster and easier control from userspace * tighter rules for lowlevel drivers * a way to determine the best request for a given use case on a certain hardware * more general abstraction of the PWM waveform
Speakers
avatar for Uwe Kleine-König

Uwe Kleine-König

Senior Software R&D Engineer, BayLibre
Uwe is a long-term kernel contributor during both work and free time and he's maintaining the PWM subsystem in the Linux kernel. Other than that he is involved in Debian and his local LUG. Uwe is based in Germany, and currently works for BayLibre, an embedded software consultancy... Read More →
Tuesday September 17, 2024 09:00 - 09:40 CEST
Hall C (Level 2)

09:00 CEST

How to Contribute a Zephyr Sensor Driver - Maureen Helm, Analog Devices
Tuesday September 17, 2024 09:00 - 09:40 CEST
The Zephyr sensor driver API is a popular area for new contributors to submit code upstream; a sensor driver is well-contained, it doesn't touch more intimidating or complex subsystems, and most importantly, it enables your Zephyr application to interact with the physical world in a new way. Naturally, you want to share it with the open source community, but how do you do it? This talk will share best practices and common pitfalls encountered by new contributors submitting their first sensor driver, and provide insight into why maintainers request certain changes.
Speakers
avatar for Maureen Helm

Maureen Helm

Distinguished Engineer, Analog Devices
Maureen Helm is a Distinguished Engineer in the Software & Security Group at Analog Devices, focusing on embedded microcontroller software. She is an upstream maintainer in the Zephyr Project and former chair of the Technical Steering Committee.
Tuesday September 17, 2024 09:00 - 09:40 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

09:05 CEST

Keynote: Omar Mohsine, Open Source Coordinator, United Nations
Tuesday September 17, 2024 09:05 - 09:15 CEST
Speakers
avatar for Omar Mohsine

Omar Mohsine

Open Source Coordinator, United Nations
Omar Mohsine is a member of the Office of the United Nations Special Envoy on Technology. He additionally leads the open source team within the UN Office of Information and Communication Technologies and serves as the co-chair of the UN Open Source Community of Practice. In this role... Read More →
Tuesday September 17, 2024 09:05 - 09:15 CEST
Hall A (Level 2)

09:20 CEST

Keynote: How openEuler is Powering Tomorrow's AI/Smart Infrastructure - Xinwei Hu, Chairman of openEuler Technical Committee, openEuler of OpenAtom Foundation
Tuesday September 17, 2024 09:20 - 09:30 CEST
The OpenAtom openEuler community is dedicated to driving continuous innovation in AI during the intelligent era. In response to the diversity of hardware and software, openEuler is creating a cloud-native AI infrastructure and openEuler NEXT, an OS for heterogeneous native computing. Our goal is to deliver AI systems that are user-friendly, efficient, reliable, and secure.
 
openEuler Intelligence: This AI infrastructure offers out-of-the-box readiness, hardware affinity, inference acceleration, and full lifecycle management. It is designed to adapt to the rapid changes in AI applications and algorithms in order to optimize the AI workflow and enhance user experience across development, deployment, operations, and maintenance.
 
openEuler NEXT: To address the complexity of hardware management, openEuler NEXT supports unified resource abstraction and pooling. For unpredictable workloads, it provides a unified foundational platform that allows the seamless evolution of both general-purpose and AI computing architectures.
Speakers
avatar for Xinwei Hu

Xinwei Hu

Chairman of openEuler Technical Committee, openEuler of OpenAtom Foundation
Joined Huawei in 2011 and is now a senior expert in ICT operating systems. Since 2020, he has served as the Chairman of the openEuler Technical Committee and is responsible for the overall technical direction management of the openEuler Community.
Tuesday September 17, 2024 09:20 - 09:30 CEST
Hall A (Level 2)

09:35 CEST

Keynote: Carl Meadows, Director of Product for Amazon OpenSearch Service & OpenSearch Project
Tuesday September 17, 2024 09:35 - 09:45 CEST
Speakers
avatar for Carl Meadows

Carl Meadows

OpenSearch Service & OpenSearch Project, Director of Product
Carl Meadows is the Director of Product for Amazon OpenSearch Service and the OpenSearch Project. 
Tuesday September 17, 2024 09:35 - 09:45 CEST
Hall A (Level 2)

09:50 CEST

Keynote: Improving OSS Security Through Collaboration - Ryan Waite, Open Source Strategy and Incubations, Microsoft
Tuesday September 17, 2024 09:50 - 10:05 CEST
Security is an increasingly important topic for all of us, and a top priority for Microsoft. In this talk we’ll share how our approach to security relates to our collaborative work in the Open Source Security Foundation (OpenSSF) as well as future collaborative work in software supply chain management. We’ll particularly focus on our work to implement the IETF’s Supply Chain Integrity, Transparency, and Trust (SCITT) project.
Speakers
avatar for Ryan Waite

Ryan Waite

Open Source Strategy and Incubations, Microsoft
Ryan Waite leads open-source strategy for Microsoft as well as the Azure Open-Source Incubations team. He’s run engineering teams focused on high performance computing, big data analytics, fraud detection, and mobile computing at Microsoft, Amazon Web Services, and Cray, the Supercomputing... Read More →
Tuesday September 17, 2024 09:50 - 10:05 CEST
Hall A (Level 2)

09:50 CEST

Give Me Back My GPIO Persistence! (Introducing the Libgpiod Gpio-Manager) - Bartosz Golaszewski, Linaro
Tuesday September 17, 2024 09:50 - 10:10 CEST
Ever since the GPIO character device was introduced as a proposed uAPI replacement for the deprecated sysfs interface, users have been pointing to the lack of persistence of GPIO state (as in: once the user-space process closes the file descriptor associated with a set of requested lines, their state is no longer defined - in practice: it's driver dependent) as the main issue with the new approach and a significant blocker in porting code from sysfs to libgpiod. Two solutions have been proposed: making the GPIO state persistent in the kernel or providing a centralized authority for controlling GPIOs from user-space. For various reasons the former has been rejected which led to the development of gpio-manager: a user-space daemon built on top of libgpiod that exposes an API to authorized clients and controls GPIOs on their behalf. This talk will present the features of the daemon, the DBus API it implements and the companion command-line client - gpiocli - which aims at allowing straightforward porting of sysfs-based scripts to the new interface.
Speakers
avatar for Bartosz Golaszewski

Bartosz Golaszewski

Linux Kernel Developer, Linaro
Bartosz Golaszewski has over 15 years of engineering experience in the embedded systems domain ranging from low-level, real-time operating systems, through the linux kernel up to user-space plumbing, libraries and build systems. Bartosz has contributed hundreds of patches to a wide... Read More →
Tuesday September 17, 2024 09:50 - 10:10 CEST
Hall C (Level 2)

09:50 CEST

Virtio for PCI Endpoint Subsystem in Linux Kernel - Manivannan Sadhasivam, Linaro Ltd.
Tuesday September 17, 2024 09:50 - 10:30 CEST
Traditionally, Virtio is primarily used in virtualized environments to allow the Hypervisor to Guest communication in an agnostic way. But Virtio as a standard can be leveraged outside virtualization for communication between any two entities.

The PCI Endpoint subsystem in the Linux kernel is used to run Linux on tiny PCI endpoint devices such as modems, NIC, GPU, etc... It requires the developers to write function drivers to communicate with the host. On most occasions, these function
drivers also require counterpart drivers on the host systems. This increases the time required for the project's development, as the development needs to happen on both the host and endpoint systems.

This is where Virtio comes in handy for the PCI Endpoint subsystem. With Virtio, developers can focus on developing the back-end drivers on the endpoint side and leverage the existing front-end drivers on host systems (such as virt-net, virt-gpu, etc...).

In this talk, Manivannan Sadhasivam will present the proposals received from the community for adding Virtio backend support to the PCI Endpoint subsystem and elaborate on the one that got a consensus to move forward, along with the future plans.
Speakers
avatar for Manivannan Sadhasivam

Manivannan Sadhasivam

Senior Kernel Engineer, Linaro Ltd.
Mani is a Senior Linux Kernel Engineer at Linaro's Qualcomm Landing team. He maintains three ARM SoC sub-architectures, the PCI Endpoint Framework, the MHI bus, and some drivers in the Linux Kernel. Mani also authored LED, LoRa/LoRaWAN subsystems in Zephyr.
Tuesday September 17, 2024 09:50 - 10:30 CEST
Hall B (Level 2)

09:50 CEST

Zephyr Build System: Sysbuild and New Hardware Model - Torsten Tejlmand Rasmussen, Nordic Semiconductor
Tuesday September 17, 2024 09:50 - 10:30 CEST
The Zephyr build system had been reaching its limits in its ability to build multiple images for modern SoCs in its previous hardware model.
The original build system began with the concept of a simple board containing a single core SoC for which you would build a single image. In today's world however, developers want to build multiple images for boards which may have multiple SoCs and / or SoCs with multiple CPU cores. This evolution towards complexity led us to the development and introduction of sysbuild and a new hardware model in Zephyr.

The purpose of this talk is to dive into the new hardware model, and what it provides seen from a developer's point of view, and from there continue into sysbuild, where the new hardware model is leveraged in order to build multiple images for a single device. The talk will go over how you as a developer can make the best use of the new hardware model and sysbuild to effectively build a complete project.
Speakers
avatar for Torsten Tejlmand Rasmussen

Torsten Tejlmand Rasmussen

Open Source Software Engineer, Nordic Semiconductor
Maintainer of Zephyr build system and toolchain integration.
Tuesday September 17, 2024 09:50 - 10:30 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

10:05 CEST

Keynote: The Security Symphony - Emily Fox, Security Lead for Emerging Technologies & Security Community Architect, Red Hat OCTO
Tuesday September 17, 2024 10:05 - 10:20 CEST
A symphony is an elaborate musical composition created from movements that when ordered and structured can inspire, inform, and create a unified experience for the audience. What can we observe and reflect upon in technology that enabled the rising tide of security? As we continue to see experimentation and innovation within the open source ecosystem, new projects are emerging that go beyond singular notes and present security constructs arranged in measures together as useful capabilities. This keynote will explore how each of these elements come together and provide us with the notes to develop the next movement in this symphony.
Speakers
avatar for Emily Fox

Emily Fox

Emerging Technologies Security Lead, Red Hat
Emily Fox is a DevOps enthusiast, security unicorn, and advocate for Women in Technology. She promotes the cross-pollination of development and security practices. She has worked in security for over 14 years to drive a cultural change where security is unobstructive, natural, and... Read More →
Tuesday September 17, 2024 10:05 - 10:20 CEST
Hall A (Level 2)

10:10 CEST

Pinctrl and GPIO - Interactions and Footguns - Chen-Yu Tsai, Google LLC
Tuesday September 17, 2024 10:10 - 10:30 CEST
The Linux Kernel has two subsystems that handle external pins: pinctrl that handles function muxing and electrical characteristics, and GPIO that handles generic input/output usage on individual pins. Depending on how the hardware is implemented, the two could be completely separate, or deeply intertwined. This presentation will introduce the hardware integration designs , how they should map to the kernel subsystems. We will dive deeper into the latter case and show how the kernel subsystems can handle it properly with "strict" GPIO pin muxing, and what could happen if the driver isn't implemented correctly, using existing in-tree drivers.
Speakers
avatar for Chen-Yu Tsai

Chen-Yu Tsai

Software Engineer, Google LLC
Chen-Yu is a software engineer that started working on the Linux kernel bringing up Allwinner SoCs in 2013. Chen-Yu currently works for Google on their ChromeOS team.
Tuesday September 17, 2024 10:10 - 10:30 CEST
Hall C (Level 2)

10:30 CEST

The Quantum Shift: How Quantum is Reshaping Finance
Tuesday September 17, 2024 10:30 - 10:40 CEST
Join us for a 10-Minute Tip Talk by Tim Serewicz in the Learning Lounge located in the Solutions Showcase.
Speakers
avatar for Tim Serewicz

Tim Serewicz

VP, Education, Linux Foundation Education
Tuesday September 17, 2024 10:30 - 10:40 CEST
Solutions Showcase (Entrance, E, & F Halls (Level 0)) Austria Center Vienna

10:30 CEST

Coffee Break
Tuesday September 17, 2024 10:30 - 11:00 CEST
Tuesday September 17, 2024 10:30 - 11:00 CEST
Solutions Showcase (Entrance, E, & F Halls (Level 0)) Austria Center Vienna

10:30 CEST

In Person Networking Meetings
Tuesday September 17, 2024 10:30 - 17:35 CEST
Participate in AI-Powered Networking & Matchmaking!
Get matched with like-minded attendees, schedule 1:1 meetings in our dedicated Networking Zone, view the event agenda & more.

Step 1 - Sign in
Download the LF Events App on the App Store or Google Play, or visit eventapp.linuxfoundation.org to join straight from your browser.

Log in using your registration email and confirmation number as your password. Once there, set up your profile to start making connections with other Open Source Summit Europe attendees.

Step 2 - Get Matched
Once logged in, complete your profile by adding your interests to start participating in AI-Powered Networking & Matchmaking!

Step 3 - Book Meetings
Input your meeting availability, view your connections, and start requesting meetings by either choosing an open time slot on their schedule or chatting directly with the person to find a good time.

Step 4 - Connect!
Meet at your assigned table in our dedicated Networking Zone inside the Solutions Showcase throughout the week. Meeting time slots are 15 minutes long.

With the OSS EU Event app, you can also easily access the schedule, speaker list, sponsor directory, and more. Utilize the app onsite to view maps of the Solutions Showcase and venue, receive event updates and notifications, and more!
Tuesday September 17, 2024 10:30 - 17:35 CEST
Entrance, E, & F Halls (Level 0)

10:30 CEST

Solutions Showcase
Tuesday September 17, 2024 10:30 - 17:35 CEST
This is the place to network, meet up, and learn more about companies that sponsor this event.
Tuesday September 17, 2024 10:30 - 17:35 CEST
Entrance, E, & F Halls (Level 0)

10:50 CEST

Track Keynote: TODO Updates & Announcements - Ana Jiménez Santamaria, The Linux Foundation & Zhang Yiyang, CAICT
Tuesday September 17, 2024 10:50 - 11:00 CEST
Speakers
avatar for Ana Jiménez Santamaría

Ana Jiménez Santamaría

Project Manager, Linux Foundation, TODO Group
Ana is a senior Project Manager at the Linux Foundation's TODO Group project, an open group of practitioners who want to collaborate on best practices and tools to effectively manage open source operations through Open Source Program Offices (OSPOs). Formerly she worked at Bitergia... Read More →
Tuesday September 17, 2024 10:50 - 11:00 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon
  • Audience Level Any

11:00 CEST

Secure and Encrypted Boot in Zephyr RTOS - Parthiban N, Linumiz
Tuesday September 17, 2024 11:00 - 11:20 CEST
MCUboot enables secure booting of Zephyr RTOS using asymmetric cryptographic signature verification with a public key. The hash of the public key is embedded or compiled with the MCUboot binary by default, which is used for checking the integrity of the public key. To tamper-proof, as an alternate secure boot option, the hash of the public key can be stored securely and retrieved when hardware keys are enabled. Security of embedded SoC's (e.g., i.MX RT) offers more capabilities, such as High Assurance Boot (HAB), Data Co-Processor (DCP), or Trusted Firmware-M (TF-M) implementing the Trustzone for SoC's (e.g., nRF91) to enable secure storage with hardware crypto acceleration or external security modules (e.g., TPM, EdegeLock) to store keys in hardware vaults.

This talk will detail MCUboot secure booting with hardware keys. NXP i.MX RT as an example using HAB for booting singed and encrypted bootloader MCUboot, enabling hardware root of trust, and booting Zephyr RTOS using keys from OTP for verification. We will also see about using the TF-M backend and OTP for secure booting Trustzone-enabled SoCs.
Speakers
avatar for Parthiban N

Parthiban N

Engineer, Linumiz
With over 14 years of experience in software engineering, Parthiban founded Linumiz, a company that provides domain-neutral software services for U-Boot, Linux, and Zephyr, ranging from board bringup, board supported package, customization, device drivers, to over the air software... Read More →
Tuesday September 17, 2024 11:00 - 11:20 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

11:00 CEST

Green Tech, Lean Budgets: A Journey to Saving Money (and the Planet) with Kubernetes - Timo Derstappen, Giant Swarm
Tuesday September 17, 2024 11:00 - 11:40 CEST
Raise your hand if you didn't get cost pressure in 2023! Cost efficiency and sustainability topics have been hotter than ever last year. In this session, we will delve into the techniques we employed to reduce costs and carbon footprints for our end-users in a painless way, leveraging the capabilities of the Kubernetes ecosystem. From PDBs to Spot Instances, we have a comprehensive exploration in store and many ideas for the future.
Speakers
avatar for Timo Derstappen

Timo Derstappen

CTO, Giant Swarm
Timo Derstappen is CTO and co-founder of Giant Swarm. He has many years of experience in building scalable and automated cloud architectures.
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 0.11-0.12 (Level 0)
  CloudOpen

11:00 CEST

Coping with Zero Days with Cilium Tetragon - Liz Rice, Isovalent
Tuesday September 17, 2024 11:00 - 11:40 CEST
However good the tools and processes you use to catch CVEs and security problems pre-deployment, it's still possible that your code and the platform it's running on could be compromised. When a new CVE and its patches are announced, it's called a "zero day", and it's a race against time for security teams to understand whether their deployments are vulnerable, and to get updated versions of all affected components deployed. 

In this talk (with demos) you'll learn about strategies for using the open source runtime security tool, Cilium Tetragon, to detect components that are affected by a CVE. You'll see how eBPF allows Tetragon to generate rich forensic information to understand whether a vulnerability has been exploited in your system, and understand how the component was compromised.
Speakers
avatar for Liz Rice

Liz Rice

Chief Open Source Officer, Isovalent @ Cisco
Liz Rice is Chief Open Source Officer with eBPF specialists Isovalent, creators of the Cilium project. She was chair of the CNCF's Technical Oversight Committee 2019-2022, and Co-Chair of KubeCon + CloudNativeCon in 2018. She is also the author of Container Security, published by... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 0.14 (Level 0)

11:00 CEST

Sponsored Session: Solving for the Cloud Native Security Paradox - Robert Sirchia, SUSE
Tuesday September 17, 2024 11:00 - 11:40 CEST
When we talk about the risks associated with containers in the context of enterprise workloads, there are various factors that come into play - multiple vendors and individuals, lack of standardization and conformance, tooling fatigue and of course, vulnerabilities! While the SLSA framework and OCI specification are great signals of your risk posture and conformance, how do you as a developer ensure that you're following best practices while staying up-to-date with the latest releases? In this session, learn how SUSE's Base Container Images empower you to build enterprise-ready containers without compromising on developer experience, security, or flexibility.
Speakers
avatar for Robert Sirchia

Robert Sirchia

Director of Technical & Community Marketing, SUSE
I am Robert Sirchia the Director of Technical & Community Marketing at SUSE. I have been working in technology for over 20 years. Most of that time has been spend in the .NET and Microsoft space. Moved towards the cloud when .NET became a first-class citizen on them. And I have never... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 1.31-1.32 (Level 1)

11:00 CEST

Testing Your Yocto Project - from Ptest and Testimage to LAVA - Clara Kowalsky & Florian Bezdeka, Siemens
Tuesday September 17, 2024 11:00 - 11:40 CEST
Before setting up a test automation framework for your Yocto project, it is worth considering which options are available and most suitable. In this talk, we will explore which tools are appropriate depending on project complexity and scalability. For a small Yocto project where a test environment needs to be up and running as quickly as possible and only one piece of hardware is supported, a complete test setup can be created using only the testimage class for image testing and ptest for package testing. The tests can be carried out locally or in a CI/CD system. Using Gitlab CI/CD as an example, we will show how the results of testimage can be neatly displayed as a unit test report. For more complex projects that support a variety of architectures and require tests to be automatically scheduled on devices, it is advisable to use an automated test framework. We will demonstrate how ptest and pytest can be integrated into a LAVA test environment and what alternatives to LAVA exist.
Speakers
avatar for Clara Kowalsky

Clara Kowalsky

Linux Software Engineer, Siemens AG
Clara Kowalsky is working as a consultant software engineer in the Linux Expert Center at Siemens Technology. She is regularly contributing to multiple inner-source and open-source projects, especially in the field of real-time (e.g., Xenomai) and embedded Linux tooling. She gives... Read More →
avatar for Florian Bezdeka

Florian Bezdeka

Linux Software Engineer, SIEMENS AG
Florian is working as a consultant software engineer in the Linux Expert Center at Siemens Technology. He is regularly contributing to multiple inner-source and open-source projects, especially in the field of real-time Linux (e.g., Xenomai) and embedded Linux tooling. He gives internal... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Hall C (Level 2)

11:00 CEST

The Case for an SoC Power Management Driver - Stephen Boyd, Google
Tuesday September 17, 2024 11:00 - 11:40 CEST
DeviceTree (DT) based systems usually lack a platform or firmware based device power management framework. Device drivers are left to figure out if a device is already powered on at probe and duplicate power management logic to manage system resources such as clks or interconnects. This is unlike ACPI based systems where the firmware provides standardized device power states to power on or off a device and mostly hides system resources behind a firmware interface. This session will make the case for implementing an ACPI-like power management framework in the Linux kernel via pmdomains registered by a System-on-Chip (SoC) driver. First we'll discuss the problem and previously attempted or ongoing solutions. Then we'll cover a case study implementing an SoC power management driver. Attendees will leave with a greater understanding of SoC power management techniques and the problems kernel developers face in supporting such hardware upstream along with a possible solution to implement this design elsewhere.
Speakers
avatar for Stephen Boyd

Stephen Boyd

Software Engineer, Google, Google
Stephen Boyd has been a Linux kernel developer since 2009 and a Linux kernel maintainer since 2014. He's currently the maintainer of the kernel's clk and SPMI subsystems working on ChromeOS at Google.
Tuesday September 17, 2024 11:00 - 11:40 CEST
Hall B (Level 2)

11:00 CEST

How to Generate Test-Cases and Data Mocks for Microservices at Kernel Using eBPF - Neha Gupta & Animesh Pathak, Keploy
Tuesday September 17, 2024 11:00 - 11:40 CEST
In this session, we're going to talk about how we can easily record the API calls of any user-level application at Kernel using an EBPF program and convert those to realistic test cases and data mocks/stubs without writing any scripts. How we can set our testing pipelines on auto-pilot? We'll be discussing how to utilise UProbes and KProbes for the same. We'll also talk about how we can integrate this pipeline in popular language native testing libraries like JUnit, Jest, and Go-Test and easily achieve high test coverage on functional test suites. Since testing is very use-case specific, developers often avoid spending effort in writing test cases. Manual effort is being spent by QA to test apps and the industry standard for test automation is 24%. On average 50% of engineering efforts are spent to write and maintain the test scripts. Creating dummy test data is also very time-consuming and still, it is unrealistic test -data, leaving bugs leaking to production. The new-gen AI LLM-based test generation tools like ChatGPT are not fire-and-forget, since it requires effort to understand and correct the scripts generated by those tools and the dummy data is again unrealistic.
Speakers
avatar for Animesh Pathak

Animesh Pathak

Founding Devrel, Keploy
He is an avid tech community enthusiast. Having worked with various technologies such as NodeJS, Microsoft Azure, etc., he has spent the last 4 years empowering tech communities and is currently active as a Gold MLSA, Postman Student Leader and Twilio Field Operator. He has been an... Read More →
avatar for Neha Gupta

Neha Gupta

Co-Founder, Keploy
Co-Founder, Keploy.io. She brings prior experience of working as an engineer as well product manager at Indian startups like Lenskart, and Fareye. She has been an open-source contributor and mentor for projects like XWiki, and JenkinsX via programs like GSoC, and Outreachy. She has... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Hall M2 (Level 1)
  LinuxCon

11:00 CEST

Rusty Swapping: Rewriting a Zswap Backend in Rust - Vitaly Wool, Konsulko AB
Tuesday September 17, 2024 11:00 - 11:40 CEST
Despite all controversies, Rust in recent times has gained popularity as the second Linux kernel high-level language. There’s been discussions about its applicability in various kernel subsystems which yielded tentative conclusions. People have been advised by kernel gurus to use Rust for subsystem implementations rather than for drivers, and the author totally shares that stance. With that said, the author had a zswap backend called zblock ready for but still not accepted into the mainline, so the idea came naturally: to rewrite it in Rust and compare performance and complexity of the two implementations. Whichever wins gets submitted. This talk will cover the main principles of zblock (which stay the same no matter the language used), the obstacles the author met while implementing it in Rust, and finally the comparison of the two. It will be fun.
Speakers
avatar for Vitaly Wool

Vitaly Wool

Principal Engineer, Konsulko AB
Vitaly has more than 20 years of experience in embedded software development. Starting in real-time and critical systems, he moved to Embedded Linux in 2003, making numerous contributions to MTD device drivers and flash file systems. Then he moved to Sweden where he began working... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Hall M1 (Level 1)
  LinuxCon

11:00 CEST

Generative Conversational AI Interoperability - Diego Gosmar, Open Voice Interoperability, LF AI&DATA
Tuesday September 17, 2024 11:00 - 11:40 CEST
We will explore Conversational AI that works like the Web. In this talk, we explore the pivotal role of OVON Specs in the Open Voice Network's Interoperability Initiative. We highlight how OVON Specs are crucial in crafting a universal, open-source AI voice interface for seamless cross-platform assistant integration. We'll delve into OVON Specs' practical applications and collaborative potential, showcasing their versatility and impact in the evolving landscape of conversational AI, and how they're shaping the future of voice technology. When we talk about the combination of Voice and AI, it’s not just about a new way of communicating, instead, we are dealing with a human biometric feature unique to us. It's useful to design standardization protocols and guidelines for Conversational AI interoperability and scalability: we will run through the current architecture proposed by the Open Voice Interoperability group, part of the Linux Foundation, working on the Conversational AI Universal API Message envelope specifications for interoperability: we will share how to play with the available sandbox and some ethical use cases powered with AI Retrieval Augmented Generation as well.
Speakers
avatar for Diego Gosmar

Diego Gosmar

Chief AI Officer XCALLY, Open Voice Interoperability, LF AI&DATA
Successful international innovator, Diego Gosmar is a Chief AI Officer specialized in Artificial Intelligence, with particular focus on Generative Conversational AI, Natural Language Processing (NLP), Sentiment Analysis, Conversation Analysis, AI Agent interoperability, Sustainable... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 2.31 (Level 2)
  Open AI + Data Forum

11:00 CEST

Panel Discussion: Bring Your Product Manager to the Open Source Party - Nithya Ruff, Amazon; Georg Kunz, Ericsson; Mary (Meixia) Wang, Volvo Car Corporation
Tuesday September 17, 2024 11:00 - 11:40 CEST
Open source is not just a tactical choice for consumption made by a developer. Open source should be a key part of your innovation plan and strategy, and product managers and business leaders need to understand it. From managing a key open source dependency to releasing open source for building an ecosystem and standards, to joining an open source foundation as a core part of a business plan, business owners need to know open source. Often, the business side of the house is not involved in open source decisions and don’t see it as business impacting. This session is about how to get the business side of the house involved in opens source. It is understanding the business planning process and how to ensure open source is included in that process. Whether it is ideation for a new product, managing ongoing investments in a product line or in marketing and launches, open source is a key component of business plans. As the head of the OSPO at Amazon, I work to build bridges with the business side of the house and to show them implications to the business of open source decisions we make. They need to be involved, support and invest in how we do open source at a company.
Speakers
avatar for Georg Kunz

Georg Kunz

Open Source Program Manager, Ericsson
Georg is an Open Source advocate and a long-term contributor to a wide range of open source communities and projects in LF Networking and beyond, such as OpenStack, OPNFV/Anuket, and OpenSSF. He served for multiple terms on the Anuket Technical Steering Committee and currently serves... Read More →
avatar for Nithya Ruff

Nithya Ruff

Head, Open Source Program Office, Amazon
Nithya is the Head of Amazon’s Open Source Program Office. Amazon’s customers value open source innovation and the cloud’s role in helping them adopt and run important open source services. She drives open source culture and coordination inside of Amazon and engagement with... Read More →
avatar for Meixia Wang

Meixia Wang

Director of Open Source Ecosystem, Volvo Car Corporation
Mary Wang is the Director of Open Source Ecosystem of Volvo Car Corporation. Her professional accomplishments include initiating open source project, forming and built OSPO for Volvo Cars. Before this, Mary was a subject matter expert configuration manager and was responsible for... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 0.94-0.95 (Level 0)

11:00 CEST

The Challenges of Public Code - Building an Open Source Culture at the BBC - Tom Sadler & David Buckhurst, BBC
Tuesday September 17, 2024 11:00 - 11:40 CEST
This talk looks at how corporate and team culture, and organisational structure, impact open source activities at the BBC. We will share our wins and losses in the open source space, and how the culture and organisation has helped or hindered open source. Much of BBC open source is driven by grassroots individuals and teams, rather than through an Open Source Programme Office, which has had benefits and drawbacks. As a publicly funded corporation, the motivations for engaging with open source can be a little different than other organisations, which we will explore. Finally, we will deep dive into the current state of play of open source and InnerSource projects at the BBC, how they are being managed, and what our next steps and future ambitions are.
Speakers
avatar for Tom Sadler

Tom Sadler

Principal Software Engineer, BBC
Tom Sadler is a Principal Software Engineer at the BBC, working with a number of teams to enable open source and industry engagement, and InnerSource. He has led multiple teams working on the BBC’s Connected TV applications, with a focus on cross team collaboration. Tom has been... Read More →
avatar for David Buckhurst

David Buckhurst

Head of Software Engineering, BBC
David Buckhurst is Head of Software Engineering at the BBC leading the 300 engineers who build the BBC’s public service streaming media applications: iPlayer and Sounds. Flip-flopping between startups and big tech for many years ultimately led David to the BBC where he’s enjoyed... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon

11:00 CEST

Panel Discussion: Improving the Software Supply Chain Security - Arnaud Le Hors, IBM; Isaac Hepworth, Google; Michael Lieberman, Kusari; Aeva Black; CISA
Tuesday September 17, 2024 11:00 - 11:40 CEST
OpenSSF and other organizations such as CNCF have been developing new technologies aiming at improving the security posture of open source and the software supply chain. This panel will give attendees a chance to hear from the very people involved in the development of some of these technologies and learn what's behind names like SLSA, S2C2F, and GUAC, the status of these technologies and how they relate to one another.
Speakers
avatar for Aeva Black

Aeva Black

Section Chief, Open Source Security, CISA
Aeva Black is an open source hacker, advocate, and international public speaker with over 20 years of experience building digital infrastructure and leading open source projects at technology companies. She is the Section Chief for Open Source Security at CISA, and serves as the Secretary... Read More →
avatar for Michael Lieberman

Michael Lieberman

Co-Founder and CTO, Kusari
Michael Lieberman is co-founder and CTO of Kusari where he helps build transparency and security in the software supply chain. Michael is an active member of the open-source community, co-creating the GUAC and FRSCA projects and co-leading the CNCF’s Secure Software Factory Reference... Read More →
avatar for Arnaud Le Hors

Arnaud Le Hors

Senior Technical Staff Member Open Technologies, IBM
Arnaud Le Hors is Senior Technical Staff Member of Open Technologies at IBM, primarily focusing on Open Source security. He has been working on standards and open source for over 25 years. Arnaud was editor of several key web specifications including HTML and DOM and was a pioneer... Read More →
avatar for Isaac Hepworth

Isaac Hepworth

Group Product Manager, Google
Isaac is a Google product manager working on software supply chain integrity within Google’s core infrastructure team, focusing on open source. In this role his work has supported Google’s contributions to OpenSSF's Sigstore, SLSA, and most recently GUAC. Over the last couple... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 2.15 (Level 2)

11:00 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 11:00 - 11:40 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 1.33 (Level 1)

11:00 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 11:00 - 11:40 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 1.34 (Level 1)

11:00 CEST

Tutorial: How to Win Friends & Influence LLMs (with Prompt Engineering) - Rafael Vasquez & James Busche, IBM
Tuesday September 17, 2024 11:00 - 12:35 CEST
Part art, part science, prompt engineering is the process of crafting input text to fine-tune a given large language model for best effect. Foundation models have billions of parameters and are trained on terabytes of data to perform a variety of tasks, including text-, code-, or image generation, classification, conversation, and more. A subset known as large language models are used for text- and code-related tasks. When it comes to prompting these models, there isn't just one right answer. There are multiple ways to prompt them for a successful result. In this workshop, you will learn the basics of prompt engineering, from monitoring your token usage to balancing intelligence and security. You will be guided through a range of exercises where you will be able to utilize the different techniques, dials, and levers illustrated in order to get the output you desire from the model. Participants of this workshop will be equipped with a comprehensive understanding of prompt engineering along with the practical skills required to achieve the best results with open source large language models.
Speakers
avatar for James Busche

James Busche

Senior Software Engineer, IBM
James Busche is a senior software engineer in the IBM Open Technologies Group, currently focused on the Open Source CodeFlare project. Previously, James has been a DevOps Cloud engineer for IBM Watson and the worldwide Watson Kubernetes deployments.
avatar for Rafael Vasquez

Rafael Vasquez

Open Source Software Developer, IBM
Rafael Vasquez is a software developer on the Open Technology team at IBM. He previously completed an MASc. working on self-driving car research and transitioned from a data scientist role in the retail field to his current role where he continues to grow his passion for MLOps and... Read More →
Tuesday September 17, 2024 11:00 - 12:35 CEST
Room 1.61-1.62 (Level 1)
  Open Source 101

11:20 CEST

Zephyr Network Subsystem Status and Overview - Jukka Rissanen, Nordic Semiconductor
Tuesday September 17, 2024 11:20 - 11:40 CEST
Network connectivity is important part of Zephyr. This talk will give information of current status of the network stack.
Speakers
avatar for Jukka Rissanen

Jukka Rissanen

Principal Engineer, Nordic Semiconductor
Jukka is one of the network maintainers in Zephyr RTOS
Tuesday September 17, 2024 11:20 - 11:40 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

11:55 CEST

Lightning Talk: The CFU: Custom Hardware with RISCV and Zephyr - Mohammed Billoo, MAB Labs Embedded Solutions
Tuesday September 17, 2024 11:55 - 12:05 CEST
RISC-V's instruction set architecture (ISA) has enabled seasoned embedded software engineers to experiment with FPGAs since numerous open-source RISC-V cores can be flashed onto an FPGA.

The Zephyr Project is rapidly emerging as a leading real-time operating system (RTOS). Zephyr integrates open-source and security best practices to ensure a vendor-neutral, secure, and reliable platform.

One of the exciting features of the RISCV ISA is the Custom Function Unit (CFU), which enables a framework to support custom operations in hardware, which is accessible from software. In this talk, Mohammed will demonstrate how to add a CFU into a RISCV core on an FPGA, and how to make the appropriate calls from Zephyr.
Speakers
avatar for Mohammed Billoo

Mohammed Billoo

CEO, MAB Labs Embedded Solutions
Mohammed Billoo is an embedded software consultant with over 15 years of experience. He focuses on The Zephyr Project RTOS, Embedded Linux, and The Yocto Project. He has also developed user interfaces using the Qt framework. He has helped clients across numerous verticals, including... Read More →
Tuesday September 17, 2024 11:55 - 12:05 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

11:55 CEST

Dude, Where’s My Error?: How OpenTelemetry Records Errors, and Why It Does It Like That - Adriana Villela, ServiceNow Cloud Observability & Reese Lee, New Relic
Tuesday September 17, 2024 11:55 - 12:35 CEST
When an app crashes or throws an exception, these errors are not just useful, but vital, to record. However: * How an error is visualized in a backend may not be where you think it’ll be, or how you expect it to look. * Only looking at errors could mean you’re missing out on understanding your system holistically, including other failures that may be causing user dissatisfaction. In this session, Adriana & Reese will examine errors using OpenTelemetry (OTel). They will discuss how OTel records errors, how to enhance spans with metadata to streamline troubleshooting, and explore the distinction between errors and exceptions. They'll also look at how the same error is visualized in different backends, and teach about the different span kinds and how they affect error reporting. Attendees will be empowered to navigate the complexities of error handling in their software applications by leveraging OTel’s capabilities to better understand how things are working (or not) in their apps.
Speakers
avatar for Reese Lee

Reese Lee

Senior Developer Relations Engineer, New Relic
Reese Lee is a Senior Developer Relations Engineer at New Relic, where she is focused on enabling customers and colleagues on OSS via workshops, blog posts, and documentation. She enjoys figuring out solutions to technical problems, learning about interesting user stories and use... Read More →
avatar for Adriana Villela

Adriana Villela

Sr. Staff Developer Advocate, ServiceNow Cloud Observability
Adriana Villela is a Sr. Developer Advocate, helping companies achieve reliability greatness through Observability, SRE, & DevOps practices. Before her current role, she managed a Platform Engineering team & an Observability Practices team at Tucows. Adriana has worked at various... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 0.11-0.12 (Level 0)
  CloudOpen

11:55 CEST

Sponsored Session: Confidential Computing - New Capabilities for New Workloads - Mike Bursell, Confidential Computing Consortium
Tuesday September 17, 2024 11:55 - 12:35 CEST
Can you use Confidential Computing to make your compute loads
confidential?  Well, yes, but that's missing much of the point.
Confidential Computing combines hardware-based security features with
cryptographic assurances about applications and data, allowing you to
do new things with new types of workloads.  In this session, we'll
explore how hardware-based Trusted Execution Environments, backed by
remote attestation, allow you to track provenance, combine the security
features offered by CPUs and GPUs and create multi-party collaborative
applications where nobody (fully) needs to trust each other.

Join to find out more about Confidential Computing and:
- Gen AI
- Web3
- multi-party computation
- and much more.

This is very much an open session, with questions welcome throughout,
so come and find out all you want to know about Confidential Computing
now and in the future.

Speakers
avatar for Mike Bursell

Mike Bursell

Executive Director, Confidential Computing Consortium
Mike Bursell is the Executive Director of the Confidential Computing Consortium. He is one of the co-founders of the Enarx project. He has previously served on the Governing Boards of the CCC and the Bytecode Alliance and currently holds advisory board roles with various start-ups... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 1.31-1.32 (Level 1)

11:55 CEST

Multi-tenant Logging with Opentelemetry Collector - Sándor Guba, Axoflow
Tuesday September 17, 2024 11:55 - 12:35 CEST
Kubernetes does not provide a rich multi-tenant experience out-of-the-box outside of Namespaces. Third-party tools try to bridge the gap generically, but there is no targeted solution to deal with telemetry data (logs, metrics, and traces). Sandor - the founder of Logging Operator that helps deal with logging on Kubernetes - gathered the team once again to re-evaluate the solution. The three main objectives were: to introduce tenants as first-class citizens, use OpenTelemetry Collector, and make it as simple as possible. The result is a new open-source project called Telemetry Controller. In this talk, Sandor will guide you through challenges like noisy neighbors, invalid configurations, parsing errors of multi-tenant logging, and how to solve them.
Speakers
avatar for Sándor Guba

Sándor Guba

CTO, Axoflow
Sandor is a software engineer, CTO, and founder at Axoflow. His main field has always been observability and logging. He is a former co-founder at Banzai Cloud. He was responsible for observability and founded open-source projects like the Logging Operator and Thanos Operator. He... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 0.14 (Level 0)
  ContainerCon

11:55 CEST

Building and Maintaining Binary Distributions with Yocto - Michael Opdenacker, Independent
Tuesday September 17, 2024 11:55 - 12:35 CEST
Imagine a world in which you can try the Yocto Project without even using it. This was possible in the past with the Ångström distribution, offering ready-made images which could be extended through binary package feeds. Though Ångström is long gone, the Yocto Project still has the ability to generate such images and package feeds. While system makers are still using this feature, the Yocto Project itself has never published such binaries. The Yocto Project, thanks to funding from the Sovereign Tech Fund, has recently developed its abilities to support binary distributions, by creating tooling to verify the ability to upgrade the images built for its releases through package feeds, and to support managing a "local" distribution that can customize packages offered by an "upstream" distribution. Since Yocto is about recipes, I will first present a cookbook for building your own images so that they can be updated through package feeds. I will then describe the recently developed features related to binary distributions and what possibilities they open for the Yocto Project and its users.
Speakers
avatar for Michael Opdenacker

Michael Opdenacker

Embedded Linux Consultant and Trainer, Independent
Michael Opdenacker is an independent consultant and trainer specialized in embedded Linux. He is the founder of Bootlin, who contributed to Linux World Domination by training thousands of engineers around the world on embedded Linux and its kernel, sharing all its materials under... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall B (Level 2)

11:55 CEST

Eight Years of Farming; Is Everybo(Ar)Dy Happy? - Geert Uytterhoeven, Glider bv
Tuesday September 17, 2024 11:55 - 12:35 CEST
8 years ago, at ELCE 2016, Geert talked about the benefits and modalities of organizing development boards in a board farm, and he introduced his personal board farm. Since then, more boards found their way into his farm, with more to come. Also, other developers asked him for remote access to his boards. In this presentation, Geert will talk about the evolution of his board farm. He will tell you about things that worked well, or didn't work well, and how he improved his farm, using readily available or custom hardware. He will discuss the challenges of growing your farm, in a changing world plagued by supply chain hick-ups. He will present a way to share boards in your farm with other developers and (automated) testers, using the backend-agnostic "FRAM" tool to grant remote control to only one or more boards, and not to your whole local infrastructure.
Speakers
avatar for Geert Uytterhoeven

Geert Uytterhoeven

Embedded Linux Kernel Hacker, Glider bv
Geert Uytterhoeven became involved with Linux 30 years ago, when he started hacking the Linux kernel to make it work better on his Amiga. This paved the way for a long string of contributions to Linux. In 2013, Geert founded Glider bv (http://glider.be/), to build upon the (embedded... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall C (Level 2)

11:55 CEST

Linux Sandboxing with Landlock - Mickaël Salaün, Microsoft
Tuesday September 17, 2024 11:55 - 12:35 CEST
Landlock's goal is to make it possible for Linux applications to sandbox themselves. On Linux, many traditional access control mechanisms are only available to the system administrator, which do not follow the principle of least privilege. As a result, sandboxing policies were created independently of an actual program execution, leading to unnecessarily broad policies. With Landlock, unprivileged processes can safely create sandboxing policies well-tailored to the expected needs of a running application. Landlock also solves the organizational aspect of keeping policy and software in sync with each other, by putting the policy definition and maintenance in the developer's hands. In this talk, we explain how Landlock works and how it can be used to protect Linux users, without being noticed, except by attackers.
Speakers
avatar for Mickaël Salaün

Mickaël Salaün

Senior Software Engineer, Microsoft
Mickaël Salaün is a kernel developer and open source enthusiast. He is mainly interested in Linux-based operating systems, especially from a security point of view. He has built security sandboxes before hacking into the kernel on a new LSM called Landlock, of which he is now the... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall M1 (Level 1)
  LinuxCon

11:55 CEST

Optimized String Processing in RISC-V: How Toolchain Improvements Can Boost Performance - Christoph Müllner, VRULL GmbH
Tuesday September 17, 2024 11:55 - 12:35 CEST
The C runtime offers a range of string processing routines, such as strcmp() and strlen(). The throughput of these routines has a significant impact on many applications and benchmarks, so they are one of the many optimization targets of toolchain developers. Unfortunately, these functions have certain properties and corner cases that limit the optimization opportunities. This talk makes a journey through common optimization techniques ranging from utilization of alignment information in the compiler. It ends with specific instructions that speed up string processing (RISC-V’s orc.b instruction). Further, the talk will show how these optimizations can boost the throughput on real HW by orders of magnitudes in synthetic benchmarks and the impact on the SPEC CPU 2017 benchmark suite. The presentation will include assembly listings, so basic assembly knowledge will help follow the talk.
Speakers
avatar for Christoph Müllner

Christoph Müllner

VRULL GmbH
Christoph Müllner is the chair of RVI’s Toolchains SIG and maintains the riscv-gnu-toolchain repository, a helpful resource for beginners and experienced toolchain experts. Christoph has actively contributed to the ratification process of several RISC-V extensions through PoC implementations... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall M2 (Level 1)
  LinuxCon

11:55 CEST

Simplifying Generative AI App Development: Why Standards Matter - Katherine Druckman & Ezequiel Lanza, Intel
Tuesday September 17, 2024 11:55 - 12:35 CEST
Demand for generative AI development is moving like a bullet train! Rapid innovation can move lightning-fast and produce exciting projects. Now is the time to embrace open development, refine best practices, and collaborate on standards for all to benefit. This session will outline common pain points involved in building LLM-based generative AI applications, especially those using RAG techniques, and connect them to open solutions. We will share reference architectures to help shorten developers’ paths to releasing performant AI applications to meet the needs of stakeholders and users. Finally, we’ll share community efforts, such as the Linux Foundation’s Open Platform for Enterprise AI project, to advance this critical work. Join us to explore ways to discover the untapped potential in generative AI development workflows.
Speakers
avatar for Ezequiel Lanza

Ezequiel Lanza

Open Source AI Evangelist, Intel
Passionate about helping people discover the exciting world of artificial intelligence, Ezequiel is a frequent AI conference presenter and the creator of use cases, tutorials, and guides that help developers adopt open source AI tools.
avatar for Katherine Druckman

Katherine Druckman

Open Source Security Evangelist, Intel Corporation
Katherine Druckman is an Open Source Evangelist at Intel where she enjoys sharing her passion for a variety of open source topics. She is a long-time open source advocate, developer, and podcaster, and is currently the host of Open at Intel and co-host of the FLOSS Weekly and Reality... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 2.31 (Level 2)
  Open AI + Data Forum
  • Audience Level Any

11:55 CEST

Bridging the Gap: Incorporating Open Source Into Product Managers' Toolbox - Philipp Ahmann, Robert Bosch GmbH
Tuesday September 17, 2024 11:55 - 12:35 CEST
In the world of product management, spread sheets and analysis tools dominate the daily business. However, when it comes to open source, many product managers struggle to quantify its benefits and limit it to risk and compliance handling. This session aims to bridge the gap between the open source community and product managers by exploring how open source can be incorporated into their existing tools and considerations. While traditional tools focus on quantifiable metrics, the non-quantifiable benefits of open source communities, such as technology awareness and company insights, are often overlooked. By integrating open source considerations and measuring points into existing tools and perspectives, including monetary quantifiable numbers, product managers can build a comprehensive business case that captures the value of open source. Attendees of this session will gain insights into the tools and considerations that product managers employ in their journey towards product innovation. By understanding product manager perspectives and needs, the open source community can better collaborate and support the integration of open source into product development processes.
Speakers
avatar for Philipp Ahmann

Philipp Ahmann

Sr. OSS Community Manager, Etas GmbH (BOSCH)
Philipp Ahmann is a senior OSS community manager at Etas GmbH (BOSCH) specializing in safety and automotive grade open source software. He holds the position of technical steering committee chair for the Linux Foundation (LF) ELISA project to Enable Linux in Safety Applications and... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 0.94-0.95 (Level 0)

11:55 CEST

Panel Discussion: OSPOs, Sustainability, and You! How Stakeholders Across Government, Enterprise, and Civil Society can Accelerate Open Source for Good! - Hilary Carter, The Linux Foundation; Sachiko Muto, RISE; Omar Mohsine, United Nations
Tuesday September 17, 2024 11:55 - 12:35 CEST
Open source as a tool to accelerate the United Nations Sustainable Development Goals is an opportunity that has yet to be fully realized. Through the establishment of OSPOs around the world, new opportunities abound for open source to supercharge innovations that support the 2030 agenda. This discussion will focus on the outcomes and opportunities originating from the OSPOs for Good Symposium held at the UN in July of this year, where governments, open source leaders, and sustainability-minded developers convened to chart a sustainable future for the world through open source, advocated for the OSPO as a vital center of competency, and identified ways for everyday citizens to join us in our mission.
Speakers
avatar for Hilary Carter

Hilary Carter

SVP Research & Communication, The Linux Foundation
Hilary Carter is a writer, researcher, and team leader, producing engaging, decision-useful insights that broaden the understanding of open source and emerging technologies and their impact on business, government, and society. She has contributed to books and numerous research reports... Read More →
avatar for Sachiko Muto

Sachiko Muto

Ph.D. | Senior Researcher, RISE Research Institutes of Sweden
avatar for Omar Mohsine

Omar Mohsine

Open Source Coordinator, United Nations
Omar Mohsine is a member of the Office of the United Nations Special Envoy on Technology. He additionally leads the open source team within the UN Office of Information and Communication Technologies and serves as the co-chair of the UN Open Source Community of Practice. In this role... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 0.96-0.97 (Level 0)

11:55 CEST

Policing Open-Source Projects at Scale - Thomas Neidhart, Eclipse Foundation
Tuesday September 17, 2024 11:55 - 12:35 CEST
Large open-source foundations like the Eclipse Foundation are faced with the challenge of maintaining thousands of repositories for the numerous projects and monitoring that these repositories adhere to certain policies and security guidelines to provide an open, transparent and secure environment for the development of open-source software. We would like to present our approach to tackle these challenges: a system where our projects as hosted on GitHub have their configuration stored as code in a repository itself, and project members can request changes to this configuration by opening a pull request, and once approved, changes get applied automatically. With this approach it is possible to make the current infrastructure of a project transparent to everyone involved, highlight items that should be addressed to adhere to certain policies and empower teams to improve and secure their repositories more easily. In this talk we would also like to outline what we have learned while rolling out this service to projects at the Eclipse Foundation and how such an approach can help to increase collaboration in your community as members are able to learn from each other.
Speakers
avatar for Thomas Neidhart

Thomas Neidhart

Security Engineer, Eclipse Foundation
Passionate open source developer, focused on helping open-source projects to be more productive and secure.
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 2.15 (Level 2)

11:55 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 11:55 - 12:35 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 1.33 (Level 1)

11:55 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 11:55 - 12:35 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 1.34 (Level 1)

12:05 CEST

Lightning Talk: Zephyr Portability with an AI Application on Very Different MCUs - Ales Ryska, NXP
Tuesday September 17, 2024 12:05 - 12:15 CEST
Code portability is one of the compelling benefits of adopting Zephyr. In this session we will discuss a single AI-based face detection application that scales from a high performance, Arm Cortex-M7 based MCU to a low power Cortex-M33 based MCU with a neural processing accelerator. In addition to different main processor cores, these two platforms have quite different camera and display interfaces, and one has a limited frame buffer capability, leading to required improvements in the display driver which NXP has contributed back to the project. This session will also explore the specifics of how devicetree and Kconfig were leveraged to switch between platforms.
Speakers
avatar for Ales Ryska

Ales Ryska

System engineer, NXP Semiconductors
Ales Ryska is a systems engineer at NXP and a Zephyr enthusiast. He enjoys helping customers get to market faster with out-of-box hardware and software and easy-to-use tools. (Note: NXP may like to update the biography if class is selected)
Tuesday September 17, 2024 12:05 - 12:15 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

12:15 CEST

Lightning Talk: Using Zephyr to Power the Sustainable Cloud - Dan Kalowsky, Ampere Computing
Tuesday September 17, 2024 12:15 - 12:25 CEST
Share how Ampere Computing uses Zephyr to re-imagine the cloud in a more sustainable way. Covering some of the challenges encountered aligning product goals with Zephyr, adding new code coverage beyond the upstream support, and getting a test environments up and running.
Speakers
avatar for Dan Kalowsky

Dan Kalowsky

Firmware Engineer, Ampere Computing
Dan is an engineer passionate about code quality with an almost unhealthy relationship on simplifying processes. He has been active on and off in the Zephyr community since the start. His role at Ampere spans multiple areas of technology on the firmware development side.
Tuesday September 17, 2024 12:15 - 12:25 CEST
Room 0.49-0.50 (Level 0)
  Zephyr
  • Audience Level Any
  • Presentation Slides Attached Yes

12:25 CEST

Lightning Talk: Implementing the Precision Time Protocol (PTP) in the Zephyr Project - Adam Wojasiński, BayLibre
Tuesday September 17, 2024 12:25 - 12:35 CEST
In order for highly distributed communication to function well, there must be a reliable time source and a way to synchronize time between devices. In applications such as automotive and industrial control, the requirements here can be strict and subject to regulatory constraints. Precision Time Protocol (PTP) is a response to these hard time synchronization requirements by achieving clock accuracy in the sub-microsecond range.

As Zephyr becomes more broadly used in these environments, it needs support for precision timekeeping. This talk will cover a brief overview of PTP, discussion of various implementation choices for Zephyr, challenges along the way and upstreaming plans.
Speakers
avatar for Adam Wojasiński

Adam Wojasiński

Software engineer, BayLibre
Adam began his journey with open source joining Zephyr Project over two years ago. He is working in BayLibre on the Zephyr Project. His main areas of expertise are chip bring up, SPI and Zephyr drivers. Before joining BayLibre he worked in Nordic Semiconductor on bare-metal drivers... Read More →
Tuesday September 17, 2024 12:25 - 12:35 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

12:35 CEST

Better Together Diversity Luncheon
Tuesday September 17, 2024 12:35 - 14:00 CEST
The Better Together Diversity Luncheon offers the opportunity for all event participants from marginalized communities (including race, gender, sexual orientation, and disability), and their allies, to join together to build connections to carry through the event and beyond. Our hope is that this event will help continue to increase the diversity both at the event as well as in the open source community as time goes on.

No pre-registration is required to attend. We do our best to accommodate everyone interested in joining, but please note that participation is on a first-come, first-served basis.

Who Can Attend?
Any event participant from a marginalized community (including race, gender, sexual orientation, and disability) and their ally guests.

Is This Event Open to Allies?
Attendees of the Better Together Diversity Luncheon are welcome to invite (1) Ally to this event.

We encourage allies to support diversity in tech while at the event by seeking out and engaging with diverse attendees onsite.

If you are interested in learning about the other ways the Linux Foundation promotes diversity and inclusion, visit our Diversity & Inclusion page.

Attached to this session is the walking map from the Austria Center Vienna to Wolke21. It is a 5-minute walk. It's on the 21st level of the Saturn Tower.

Sponsored By: ARM




Tuesday September 17, 2024 12:35 - 14:00 CEST
Wolke21 in the Saturn Tower Leonard-Bernstein-Straße 10, 1220 Wien

12:35 CEST

13:00 CEST

Automated Testing & Board Farming - Rouven Czerwinski & Jan Lübbe, Pengutronix
Tuesday September 17, 2024 13:00 - 13:40 CEST
In face of the strict requirements of the CRA legislation on the horizon for EU markets, one of the key techniques to rapidly test new software releases is an automated testing setup. This session wants to collect the current state of the automated testing landscape and discuss current development directions, tools and projects. We will provide a quick summary of current projects in the space and than have a quick vote on which topics to discuss. Thereafter we encourage discussion between the audience members.
Speakers
avatar for Jan Lübbe

Jan Lübbe

CTO, Pengutronix
After building Linux smartphones with OpenMoko and deploying open source GSM networks to cruise ships, Jan Lübbe joined Pengutronix in 2012 as a kernel hacker. Since then he started the RAUC and labgrid projects. In his free time, Jan builds open mesh networks at the Stratum 0 hacker... Read More →
avatar for Rouven Czerwinski

Rouven Czerwinski

Embedded Linux Developer, Pengutronix e.K.
At first building the labgrid hardware access layer, rouven nowadays works on security solutions for embedded devices.
Tuesday September 17, 2024 13:00 - 13:40 CEST
Hall C (Level 2)

13:00 CEST

RISC-V and RISE Project BoF - Drew Fustini, Tenstorrent
Tuesday September 17, 2024 13:00 - 13:40 CEST
RISC-V is an open instruction set that is taking the world by storm, enabling new and creative hardware designs across the spectrum of computing devices - many of which are themselves open. This BoF is a meeting place at EOSS to discuss the current state of RISC-V as well as the RISE Project, an open source initiative under LF Europe to support the RISC-V software ecosystem.
Speakers
avatar for Drew Fustini

Drew Fustini

Linux Kernel Engineer, Tenstorrent
Drew Fustini is an open hardware designer and embedded Linux developer. He serves on the board of directors for the Open Source Hardware Association and the BeagleBoard.org Foundation, and is an ambassador for the RISC-V Foundation. Drew designs circuit boards for OSH Park, a PCB... Read More →
Tuesday September 17, 2024 13:00 - 13:40 CEST
Hall B (Level 2)

14:00 CEST

Developing Wildlife Camera Traps with Zephyr RTOS - Alex Bucknall, Arribada Initiative
Tuesday September 17, 2024 14:00 - 14:20 CEST
Monitoring wildlife and environmental changes often requires deploying remote camera traps that can capture imagery and activity over long periods of time. These camera systems need to be low-power, portable, and easily adapted to different hardware configurations based on project requirements.

This talk will cover how we utilised Zephyr to develop flexible time lapse camera solutions for conservation applications. We’ll explore our time lapse camera deployment in Bermuda and how we’re using Zephyr to monitor and understand the impact of seagrass decay on the local marine life. Zephyr allowed us to rapidly target different hardware platforms by abstracting away complex hardware interactions. We'll discuss how Zephyr's hardware and driver APIs simplify peripheral access to cameras, RTCs, and power management features across multiple vendor SoCs.

Additionally, we'll explore challenges associated with this kind of cross-platform support, such as lack of core features for certain vendor SoCs. We'll also share insights into optimising for size, performance, and battery life on constrained embedded devices.
Speakers
avatar for Alex Bucknall

Alex Bucknall

Senior Engineer, Arribada Initiative
An Engineer who fell into the world of conservation. Busy developing tools and projects to support conservation, environmental and humanitarian crises. PhD in high performance reconfigurable computing platforms.
Tuesday September 17, 2024 14:00 - 14:20 CEST
Room 0.49-0.50 (Level 0)
  Zephyr
  • Audience Level Any

14:00 CEST

Evolving GitOps: Harnessing Kubernetes Resource Model for 5G Core - Ashan Senevirathne & Joel Studler, Swisscom
Tuesday September 17, 2024 14:00 - 14:40 CEST
In the forefront of 5G deployment, Swisscom leads by evolving GitOps through the adoption of the Kubernetes Resource Model (KRM), setting a new standard for dynamic configuration management and abstraction in 5G core networks. This strategic enhancement leverages the strengths of GitOps while introducing the flexibility and scalability of Kubernetes, aiming for increased deployment agility and operational efficiency. Our initiative extends Kubernetes API by integrating with custom Kubernetes Operators, alongside CI/CD advancements through Flux, to refine and empower GitOps practices. This talk will delve into our journey of merging GitOps with KRM, showcasing the transformative impact on 5G network operations, from increased reliability to seamless automation. Join us to explore how Kubernetes is reshaping the future of network management and GitOps methodologies.
Speakers
avatar for Ashan Senevirathne

Ashan Senevirathne

Product Owner, Swisscom
Experienced Product Owner and Senior DevOps Engineer with a proven track record in driving innovation and efficiency in telecommunications. Currently with Swisscom, leading the development of a cloud-native orchestration framework for 5G Core using Kubernetes. Adept at optimizing... Read More →
avatar for Joel Studler

Joel Studler

DevOps Engineer & System Architect, Swisscom
Joel is a DevOps Engineer and System Architect currently in a team that builds the cloud native 5G core at Swisscom. He is experienced in infrastructure automation, software defined networking and highly available databases and passionate about automation. He is CK* certified and... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 0.11-0.12 (Level 0)
  CloudOpen

14:00 CEST

Let Them Eat CAKES: A Sweet Dive Into a Modern Cloud Networking Stack - Krisztian Fekete , Solo.io
Tuesday September 17, 2024 14:00 - 14:40 CEST
Previous generations of networking made up of point solutions organized by Conway's law are inconsistent, incompatible, and slow down developers. Open source alternatives have emerged to provide compelling networking solutions for Platform Engineers but may overlap. In this talk, we introduce the concept of "the CAKES stack" for modern cloud networking based on OSS projects: (C)ilium, (A)mbient mesh, (K)ubernetes, (E)nvoy, and (S)PIFFE/SPIRE. A twist on the stack, BAKES, includes (B)ackstage.io for a platform's internal developer portal which ties everything together like frosting. Each layer in the "cake" was specifically chosen as it represents the "best of breed" for the role required. These technologies come together to provide a consistent solution for zero trust, observability, ingress/egress, traffic control and significantly improved developer experience and velocity.
Speakers
avatar for Krisztian Fekete

Krisztian Fekete

Senior Software Engineer, solo.io
Krisztian is enthusiastic about observability and cloud infrastructures. He's working at solo.io as a field engineer. Previously, he was worked at LastPass as senior DevOps/SRE engineer. At solo.io Krisztian is helping to design secure and scalable cloud infrastructures at companies... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 0.14 (Level 0)
  ContainerCon

14:00 CEST

Are You Ready For Scarthgap? Best Practices For The Latest Yocto Project LTS Release - Tim Orling, Konsulko Group
Tuesday September 17, 2024 14:00 - 14:40 CEST
The latest Long Term Support release of the Yocto Project, code named “scarthgap”, has support until April 2028. With proven techniques to upgrade from older releases we hope to encourage you to move forward with confidence. We will start with recommendations for how to set up your own “distribution”, board-support package (BSP) and software layers. We will share some techniques for managing and discovering layers. We will discuss best practices to ensure your public layers are ready for the Layer Index. We will investigate how to use meta-lts-mixin layers to be able to use newer releases of components like Rust, Go and U-Boot. As supply chain becomes increasingly important, we will cover the latest Software Bill of Materials (SBOM) and license compliance (SPDX) tools. We will share some tools for discovering software vulnerabilities (CVEs) in your project. New IDE tools were added in this release and we share ways to leverage them, along with containers to ensure your builds are consistent and reproducible. We will cover some of the over the air update tools which are available. Our examples will leverage some of the newest single-board computers: Raspberry Pi 5 and Beagle Play.
Speakers
avatar for Tim Orling

Tim Orling

Principal Software Engineer, Konsulko Group
Tim Orling is a Principal Software Engineer at Konsulko Group. Tim joined Konsulko Group at the end of 2021. Tim was elected to the OpenEmbedded Board in 2022. He has spent many years as a volunteer developer for OpenEmbedded and the Yocto Project. He has been an open source software... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Hall B (Level 2)

14:00 CEST

Inspecting and Optimizing Memory Usage in Linux - João Marcos Costa, Bootlin
Tuesday September 17, 2024 14:00 - 14:40 CEST
Considering a context where the hardware platform disposes of a restricted amount of RAM, developers need to understand how this resource is managed and consumed by the operating system and the applications running on it. In such situations, it is crucial to use the right metrics and tooling to identify which components are excessively allocating resources, trim them down, and finally get close to the strict necessary memory usage without compromising essential features. This presentation explores RAM management in the Linux kernel, focusing on how much memory is allocated across different areas and for what purposes. From a kernel space perspective, it will dive into the components of memory reserved in early boot. Considering the user space perspective, the presentation will explain how much memory is used by processes, both individually and collectively.
Speakers
avatar for João Marcos Costa

João Marcos Costa

Embedded Linux and Kernel engineer, Bootlin
João graduated in 2020 with a master degree in Physical engineering and embedded systems from ENSICAEN, a French engineering school, as well as an Electrical Engineering degree in 2021 from the Universidade Federal do Rio Grande do Norte in Brazil. Through his various experiences... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Hall C (Level 2)

14:00 CEST

Surviving 19 Jan 2038 on 32 Bit Platforms: Lessons Learned and Common Problems - Alexander Kanavin, Linutronix
Tuesday September 17, 2024 14:00 - 14:40 CEST
The year 2038 problem is a well known integer overflow issue on many 32 bit platforms, some of which will be still in use on the day when it happens: January 19 2038. In this talk I would like to present where the problem comes from, what the Yocto project has done to address the issue, which base work in kernel and libc has been utilized to avoid a total system collapse, how to test a system's readiness for that date, and which further issues this has uncovered in common open source components. I hope this prompts an interesting discussion and further ideas to ensure the world does not go down in 14 years.
Speakers
avatar for Alexander Kanavin

Alexander Kanavin

Linux / Open Source software engineer, Linutronix
Alexander is an open source developer specializing in distribution engineering using vendor-neutral tooling and userspace stacks. He is one of the primary contributors to the Yocto project and has an interest in developing foundations of digital infrastructure in a sustainable ma... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Hall M2 (Level 1)
  LinuxCon

14:00 CEST

Milvus: Scaling Vector Data Solutions with Gen AI - Stephen Batifol, Zilliz
Tuesday September 17, 2024 14:00 - 14:40 CEST
Milvus, an LF AI project, is an open-source vector database built to power Gen AI solutions. 80% of the data in the world is unstructured data, and vector databases are the databases that help you get valuable insights from unstructured data. With this in mind, we built Milvus as a distributed system on top of other open-source solutions, including MinIO and Kafka, to support vector collections that exceed billion-scale. This session will deeply dive into the architecture decisions that make this cloud-native vector database seamlessly scale horizontally, provide users with tunable consistency, orchestrate in-memory and on-disk indexing, and scalable search strategies.
Speakers
avatar for Stephen Batifol

Stephen Batifol

Developer Advocate, Zilliz
Stephen Batifol is a Developer Advocate at Zilliz. He previously worked as a Machine Learning Engineer at Wolt, where he created and worked on the ML Platform, and previously as a Data Scientist at Brevo. Stephen studied Computer Science and Artificial Intelligence. He is a founding... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 2.31 (Level 2)

14:00 CEST

Sponsored Session: InstructLab: Applying Open Source Methods to Building and Training Large Language Models - Leslie Hawthorn, Red Hat & Martin Hickey, IBM
Tuesday September 17, 2024 14:00 - 14:40 CEST
Several open models of varying size, quality, and performance have been released over the past twelve months. We have recently announced InstructLab, a project that allows contribution of skills to an existing model without the need to fully fork and fine-tune. This project establishes an upstream community built on contributing acceptance workflows for models. This exciting technology aims to make open source AI more approachable. In this session we'll explain how communities and individuals can contribute domain knowledge to models incrementally, in a unified and open way, while reducing model variations and resulting in an improved version by augmenting what’s already there.
Speakers
avatar for Leslie Hawthorn

Leslie Hawthorn

Sr. Manager, Industry Community Strategy, Red Hat GmbH
An internationally known open source strategist & community building expert, Leslie Hawthorn has spent her career creating, cultivating, and enabling communities. She has driven open source strategy in Fortune 10 companies, pre-IPO startups, and Foundation Boards including senior... Read More →
avatar for Martin Hickey

Martin Hickey

Senior Technical Staff Member, IBM
Martin is a STSM and an Open Source strategic leader at IBM. He has been contributing to various Open Source projects, most notably, Kubernetes, Helm, OpenTelemetry, and OpenStack. Martin is a core maintainer and a TOC member of the Helm project. He has been a speaker at various conferences... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 1.31-1.32 (Level 1)

14:00 CEST

What Can Open Source Project Health Metrics Reveal About Project Users? - Sophia Vargas, Google & Georg Link, Bitergia
Tuesday September 17, 2024 14:00 - 14:40 CEST
Information about open source project users and usage characteristics can be an invaluable tool for maintainers and project leaders to prioritize support for features and old versions, as well as understand how users engage with their project. However, many open source users see incorporating telemetry into a project as an invasion of privacy. Within the CHAOSS community, we discuss and define metrics to understand and measure project health. Many of these same metrics can be used to infer characteristics about project users as they are part of the extended community. In this talk, we will discuss what we can and can’t learn about our users from existing publicly available metrics while respecting the privacy of our communities.
Speakers
avatar for Sophia Vargas

Sophia Vargas

Research Analyst, Google
Sophia Vargas is a Program Manager in the research and education team within Google’s Open Source Programs Office. In this role she leads efforts that span project health, contributor experience, and open source economics. She is also on the Governing Board and an active contributor... Read More →
avatar for Georg Link

Georg Link

Director of Sales, Bitergia
Georg’s mission is to make open source more professional by using community metrics and analytics. Georg cofounded the CHAOSS Project to advance analytics and metrics for open source project health. Georg is an active contributor to several projects and has often presents on open... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 0.94-0.95 (Level 0)

14:00 CEST

From Vision to Action: PagoPA's Journey Towards Open Source Leadership - Leonardo Favario, PagoPA S.p.A.
Tuesday September 17, 2024 14:00 - 14:40 CEST
PagoPA, a public tech company owned by the Italian Ministry of Economy, is dedicated to crafting and advancing technological infrastructure for over 23,000 Italian Public Administrations, benefiting the entire population. Recognizing the prevalence of open source solutions within its portfolio, the company initiated a strategic endeavor: assembling a specialized multidisciplinary group of experts in FOSS to define a company-wide strategy. This effort culminated in the establishment of the Open Source Program Office, marking a pioneering move for an Italian public entity. During this presentation we will delve into the company's new open source strategy, emphasizing its alignment with the Italian national open source guidelines. Additionally, we will explore the pivotal role of the OSPO, serving as a vital link between the company's internal operations and the dynamic FOSS communities. Guided by the open source maturity model, the company aims to evolve from being a conscientious user of FOSS solutions to assuming a central position as a key contributor, thus benefiting the broader ecosystem.
Speakers
avatar for Leonardo Favario

Leonardo Favario

Head of Open Source Program Office, PagoPA S.p.A.
Leonardo is the Head of the Open Source Program Office (OSPO) at PagoPA S.p.A, an Italian public company. Previously, he served as the Head of Open Source in the Italian Government. Leonardo holds a PhD in computer and control engineering and has been a Fulbright BEST scholar in California... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon

14:00 CEST

Planning for Retirement: How Can We Prepare for Software’s End-of-Life/End-of-Support Date? - Victoria Ontiveros, CISA & Justin Murphy, DHS/CISA
Tuesday September 17, 2024 14:00 - 14:40 CEST
The ambiguity surrounding terminology and general uncertainty amplifies the end-of-life/end-of-support problem: What is end-of-life? How is end-of-life different from end-of-support? How does this affect supply chain and operational security? This presentation will begin with an overview of the EOL/EOS problem and suggest definitions for key terms to the discussion. Creating shared terminology can support the community in facilitating discussions around EOL/EOS and generating solutions. This presentation will map the EOL/EOS problem to other ongoing discussions including software naming and versioning, acknowledging that this is not a new problem and it is unlikely there is one singular solution. The presentation will also include discussion of the potential role of existing software transparency and supply chain security efforts, such as SBOM, VEX, and CSAF, may play in managing EOL/EOS. We will highlight the OpenEoX efforts from the OASIS community seeking to develop an open source, standardized method to ascertain the EOL/EOS status of products, as well as other ongoing policy efforts. The presentation will close with time for feedback on the presentation and discussion.
Speakers
avatar for Justin Murphy

Justin Murphy

Vulnerability Analyst, DHS/CISA
Justin Murphy is a Vulnerability Analyst with the Cybersecurity and Infrastructure Security Agency (CISA). He helps to coordinate the remediation, mitigation, and public disclosure of newly identified cybersecurity vulnerabilities in products and services with affected vendor(s... Read More →
avatar for Victoria Ontiveros

Victoria Ontiveros

Cybersecurity Specialist, CISA
Victoria Ontiveros joined the Cybersecurity and Infrastructure Security Agency (CISA) in June 2023 as a cybersecurity specialist. At CISA, she supports the agency's software bill of materials (SBOM) work, collaborating with partners across the software ecosystem, U.S. government... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 2.15 (Level 2)

14:00 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 14:00 - 14:40 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 1.34 (Level 1)

14:00 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 14:00 - 14:40 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 14:00 - 14:40 CEST
Room 1.33 (Level 1)

14:00 CEST

Tutorial: Securing Access to and from Remote Systems with WireGuard and Linux - Alex Feiszli, Netmaker, Inc.
Tuesday September 17, 2024 14:00 - 15:35 CEST
IT infrastructure is all over the place: Cloud VPC's, edge servers, data centers, office networks, and more. Much of it exists on private networks or behind routers and firewalls. IT administrators are often tasked with making these resources available over the internet to employees or remote servers that are elsewhere on earth. In this tutorial, we'll use just a couple of VM's running Linux and WireGuard to set up a minimal, secure, and easily-maintainable remote access system. We'll demonstrate with a fictional business that has a physical office, uses the cloud, and has remote IT staff, an extremely common scenario. We'll walk attendees through: 1. How to set up secure access to the office network from the remote staffs' workstations. 2. How to establish access to a cloud VPC from servers in the office network. 3. How to account for corporate firewalls and other common networking challenges. By the end of this tutorial, attendees will have a good understanding of how they can use Linux and WireGuard in common IT networking scenarios.
Speakers
avatar for Alex Feiszli

Alex Feiszli

Founder, Netmaker, Inc.
Alex founded Netmaker, an open source, WireGuard-based VPN, 3 years ago, and was the original author of the project. Previously, Alex worked at IBM on Multi-Cloud Kubernetes projects, and with Red Hat on various DevOps projects. In his spare time, Alex likes to travel, play ukulele... Read More →
Tuesday September 17, 2024 14:00 - 15:35 CEST
Hall M1 (Level 1)
  LinuxCon

14:00 CEST

Tutorial: Build AI-Supercharged RAG Apps with a Vector Database - JP Hwang, Weaviate
Tuesday September 17, 2024 14:00 - 15:35 CEST
AI is "the" hot new thing. But what's AI got to do with databases? As it turns out, quite a lot. The right database can help your application, business, or customer get more out of AI, faster. What's more, the right database can even make the AI models themselves work better. This workshop will show you how all of this works through a hands-on experience with an "AI-native" database. AI-native databases are designed to empower builders and developers to build AI-powered tools. You will see how they enable better search, integrate with generative AI models, and improve generative models' capabilities. You will be getting hands-on experience with the key pieces of technology, like vector indexes, vector and hybrid search, retrieval augmented generation, and multi-tenancy. Even better, this will use an open-source stack for everything from embeddings, to a vector database and a language model. So join us to learn how to give your app AI superpowers.
Speakers
avatar for JP Hwang

JP Hwang

Educator, Weaviate
JP is a developer, tech educator, and communicator. He brings a combination of technical expertise, empathy, and commitment to all his endeavors, whether it’s through hands-on coding projects or engaging and informative talks. He believes that learning should be fun and empowering... Read More →
Tuesday September 17, 2024 14:00 - 15:35 CEST
Room 1.61-1.62 (Level 1)
  Open Source 101

14:20 CEST

Exploring the Potential of Zephyr in Automotive and Software Defined Vehicles - Philipp Ahmann, Robert Bosch GmbH
Tuesday September 17, 2024 14:20 - 14:40 CEST
In the automotive industry more than 100 embedded control units (ECUs) are present in a typical car. They are equipped with microcontrollers responsible for various peripherals within the vehicle. Although it may be challenging to adapt automotive-specific interfaces to an IoT-driven RTOS like Zephyr, the use of standard peripherals such as GPIOs, I2C, and UART can lead to significant synergies with other products.

However, as starting point, the talk will delve into the automotive specific requirements and technology stacks necessary for integrating Zephyr into automotive development. Additionally, it will highlight areas where Zephyr may not yet be a perfect fit for automotive applications. Key touchpoints for discussion will include the compatibility of Zephyr with established automotive standards like Autosar, COVESA VSS, and CAN stack. Furthermore, the talk will address the challenges related to process compliance and adherence to safety integrity standards in the automotive industry.

This talk aims to initiate a discussion on the potential wider adoption of Zephyr in automotive products and to foster an engaging discussion among industry professionals.
Speakers
avatar for Philipp Ahmann

Philipp Ahmann

Sr. OSS Community Manager, Etas GmbH (BOSCH)
Philipp Ahmann is a senior OSS community manager at Etas GmbH (BOSCH) specializing in safety and automotive grade open source software. He holds the position of technical steering committee chair for the Linux Foundation (LF) ELISA project to Enable Linux in Safety Applications and... Read More →
Tuesday September 17, 2024 14:20 - 14:40 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

14:55 CEST

Lightning Talk: Open Source Fleet Management in Zephyr - Maciej Sobkowski, Antmicro
Tuesday September 17, 2024 14:55 - 15:05 CEST
Complex, real-life embedded system deployments often consist of multiple SoCs/MCUs running a mix of OSes, ranging from user-facing high-end nodes based on Linux/Android to MCUs dedicated to controlling specific low-level functions of the device, using an RTOS like Zephyr. Over-the-air updates for such systems poses a challenge, as the firmware needs to be updated in a safe & coordinated way.

Remote Device Fleet Manager is a permissively licensed, fully open source and self-hostable framework for modular, configurable OTA updates, fleet management and ML data management that supports Linux, Android, and, since recently, also Zephyr-based platforms.

This talk will delve into how RDFM was extended to support Zephyr-based systems, the motivations and considerations of the development and some interesting use cases it enables. RDFM allows for fully redundant updates, incl. rollback to the previous version, grouped device updates and mixed OS deployments.

To enable tight interoperability with Zephyr's ecosystem, the integration is based on the MCUmgr library, communicating with Zephyr devices via the SMP protocol. The MCUboot bootloader is used for managing the firmware on the device.
Speakers
avatar for Maciej Sobkowski

Maciej Sobkowski

Senior Software Engineer, Antmicro
Maciej Sobkowski is a Senior Software Engineer at Antmicro. His area of expertise includes embedded systems and kernel development, focusing on device drivers, OTA systems and the V4L2 framework. He has 9 years of professional experience in developing low-level software for embedded... Read More →
Tuesday September 17, 2024 14:55 - 15:05 CEST
Room 0.49-0.50 (Level 0)
  Zephyr
  • Audience Level Any

14:55 CEST

Panel Discussion: Do One Thing, and Do It Well: Special Purpose OSes Apply the Unix App Philosophy to the Whole OS - Danielle Tal, Microsoft; Mauro Morales, Spectro Cloud; Felipe Huici, Unikraft GmbH; and Frederic Crozat, SUSE; Erik Nordmark, Zededa
Tuesday September 17, 2024 14:55 - 15:35 CEST
Our BoF panel features representatives of popular, highly specialized Linux distributions like Kairos, Flatcar, Eve, BottleRocket, Unikraft, SUSE MicroOS, and others. After a brief introduction we will open a discussion with the audience about the purpose, and limits, of special-purpose operating systems, on operational challenges, and on differences to general purpose operating systems. Discussions may include a wide variety of topics our audience is interested in discussing, e.g. opportunities to improve operations reliability and security, developing and operating cloud-native workloads, workload isolation, and trusted/measured boot.
Speakers
avatar for Frederic Crozat

Frederic Crozat

Next-Generation Linux OS and Container Architect, SUSE
Frederic Crozat is involved in Linux ecosystem (mostly distributions) for more than 24 years. He acted as developer and project manager in various open source projects.For the last 14 years at SUSE, he integrated various technologies (systemd, Secure Boot) in openSUSE and SUSE distributions... Read More →
avatar for Erik Nordmark

Erik Nordmark

CTO and co-founder, Zededa
Erik is co-founder and CTO at ZEDEDA, and is an expert on architecting and implementing large scale software systems. Prior to ZEDEDA he developed software at Arista Networks, was a Cisco Distinguished Engineer & was a Sun Microsystems Distinguished Engineer. He has been driving Internet... Read More →
avatar for Felipe Huici

Felipe Huici

CEO & Co-Founder, Unikraft GmbH
Dr. Felipe Huici is CEO and Co-Founder of Unikraft, a start-up dedicated to lightweight and open source virtualization tech. Prior he worked as chief researcher at NEC Laboratories Europe, has published in several top tier conferences such as SOSP, ASPLOS, OSDI, Eurosys, SIGCOMM... Read More →
avatar for Danielle Tal

Danielle Tal

PM, Microsoft
Danielle Tal is a Program Manager at Microsoft and an integral part of the team responsible for maintaining Flatcar Container Linux. The team is contributes to Linux OS distributions and Linux Security within Azure and other upstream projects. With a background in supporting diverse... Read More →
avatar for Mauro Morales

Mauro Morales

Open Source Developer Specialist, Spectro Cloud
Mauro is a Guatemalan software developer with more than 17 years of professional experience. His main focus is on backend and CLI applications using the Ruby and Go programming languages. He’s also had a chance to participate in the Open-Source community on projects like Cloud Foundry... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 0.11-0.12 (Level 0)
  CloudOpen
  • Audience Level Any

14:55 CEST

Deep Dive Into Traefik 3.0 - Emile Vauge, Traefik Labs
Tuesday September 17, 2024 14:55 - 15:35 CEST
Traefik is one of the most popular open source projects in the world, with over 3 billion downloads to date, and one of the top 15 most downloaded open source projects on DockerHub. Traefik is an Ingress Controller and API Gateway capable of exposing and securing services and APIs simply, dynamically and at scale. Designed specifically for cloud-native environments, Traefik is the solution of choice from the simplest to the most complex case. If you spend your time managing, exposing and securing your applications and microservices, then this is the session for you! During this session, Emile Vauge (Traefik Creator) will show you how the new features in Traefik version 3 will simplify your daily life: - Support for Open Telemetry to monitor your infrastructure - Support for GatewayAPI resources to expose your resources in Kubernetes - Integration of WASM plugins to create your own middleware And much more...
Speakers
avatar for Emile Vauge

Emile Vauge

CTO, Traefik Labs
Emile is a Developer. He created Traefik in 2015 and is now the CTO of Traefik Labs, the company sponsoring the open source project.
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 0.14 (Level 0)
  ContainerCon

14:55 CEST

Embedded Linux Security: Dr. Jekyll and Mr. Hyde - Richard Weinberger, sigma star gmbh
Tuesday September 17, 2024 14:55 - 15:35 CEST
Linux-based embedded systems are increasingly common, yet they often face security challenges. While Linux already has a good set of security features, it is often not trivial to choose the right ones and use them properly.
In his presentation, Richard will discuss the typical issues he sees when collaborating with clients on embedded systems.

He aims to highlight essential pitfalls to steer clear of in your upcoming projects.
Speakers
avatar for Richard Weinberger

Richard Weinberger

Co-Founder, sigma star gmbh
Richard is co-founder of sigma star gmbh where he offers consulting services around Linux and IT security. Upstream he maintains various subsystems of the Linux kernel such as UserModeLinux and UBIFS. Beside of low level and security aspects of computers he enjoys growing lithops... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Hall C (Level 2)

14:55 CEST

Licensing Support by Build Systems - and What Remains To Be Done - Jan Altenberg, Open Source Automation Development Lab (OSADL) eG
Tuesday September 17, 2024 14:55 - 15:35 CEST
Building embedded Linux systems is getting increasingly complex. The complexity does not only come from the technical aspects. The number of different packages and dependencies also make the fulfilment of license obligations quite challenging. Build systems and distro generators support us with this task. They can help in getting an overview of the licenses being used and packaging the relevant compliance material. But how far does their support really go? And is the information being provided complete?

This presentation will take a look into different licensing obligations (e.g. information obligations and disclosure obligations) and (based on the examples of the Yocto project, ELBE and ISAR) the licensing support of modern build systems will be evaluated.
Speakers
avatar for Jan Altenberg

Jan Altenberg

Director, Open Source Automation Development Lab (OSADL) eG
Jan Altenberg has more than 20 years of experience in developing and maintaining Embedded Linux systems. Jan studied information technologies at the University of Cooperative Education in Stuttgart (Germany). From 2002 - 2006 he was involved in the OCEAN project, a European research... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Hall B (Level 2)

14:55 CEST

Messing up Your NUMA Topology with CXL - Hannes Reinecke, SUSE Linux
Tuesday September 17, 2024 14:55 - 15:35 CEST
his presentation will focus on CXL (Compute Express Link) as an advanced interconnect between machines and peripherals. CXL allows to leverage the PCIe physical interconnect to link together different device types (CPU, memory, I/O, cache, switches etc) into a combined hierarchy. This allows IHVs to create tailored solutions for eg large-scale AI systems or dynamic resource pooling between machines. As it's also possible to connect or pool memory resources it means the we can end up with some really interesting NUMA topologies. Plus we need to look at memory placement, as CXL memory is inherently hotpluggable, and as such not really suitable for some data structures like DMA areas etc. In this talk I will give an overview over CXL and the implications for NUMA topologies, and I'll be giving a short demo with an emulated CXL instance under qemu.
Speakers
avatar for Hannes Reinecke

Hannes Reinecke

Kernel Storage Architect, SUSE Linux
Studied Physics in Heidelberg from 1990 until 1997, followed by a PhD in Edinburgh 's Heriot-Watt University in 2000. Now working at SUSE Labs as Teamlead for storage and networking. Principal contact point for storage related issues on SLES. Linux addict since the earliest days (0.95... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Hall M2 (Level 1)
  LinuxCon

14:55 CEST

Towards Industrial AI Governance Inspired by OSPO: A Primer - Zoran Jovanovic, Volvo Car Corporation
Tuesday September 17, 2024 14:55 - 15:35 CEST
Strategic position of AI development in industrial settings, the surrounding regulations, and organizational challenges, have an interesting analogy in how we deal with Open Source Software on industrial scale. Definition of governance as set of processes and guidelines for decision making within an organization gives us an opportunity to apply similar abstract models to seemingly different areas of endeavor such as AI production and consumer organizations, on one side, and Open Source Software, on the other. The learnings from running technical operations of OSPOs translate remarkably well into this model. Intake, compliance, distribution, so well known in the world of Open Source Program Offices, with its federated democratized governance, are some of the pillars of the processes that drive AI production and consumption organizations. In this talk we will try to shed some light on how in Volvo Cars we approach practical aspects of these growing processes.
Speakers
avatar for Zoran Jovanovic

Zoran Jovanovic

Enterprise Architect / Sr.Staff Engineer, Volvo Car Corporation
After nearly 15 years of work in and around Open Source Program Office and Software Architecture in Sony Mobile moved to Volvo Cars where I spend most of my time helping teams with Enterprise Architecture, technical aspects of work with Open Source compliance and distribution, as... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 2.31 (Level 2)
  Open AI + Data Forum
  • Audience Level Any

14:55 CEST

Sponsored Session: How to Make Your First Contribution to a Cloud Native Computing Foundation (CNCF) Project - Daniel Krook, Cloud Native Computing Foundation
Tuesday September 17, 2024 14:55 - 15:35 CEST
The Cloud Native Computing Foundation (CNCF) hosts nearly 200 open source projects that provide the foundation for critical global technology infrastructure. Originally focused on containers, service meshes, and microservices, the CNCF ecosystem now also includes projects around AI training and inference, serverless functions, Wasm runtimes, and other emerging technologies.

With so many interesting projects at different stages of maturity (on a scale from Sandbox to Incubating to Graduated), it’s a great place to get started with open source. But where should you begin? Fortunately, the CNCF community offers many ways for new contributors to get involved, whether you write code or consider yourself non-technical.

After this session, you’ll understand the CNCF ecosystem of projects and the various programs in place to help you get started. From the Zero to Merge initiative, to local KCD events worldwide, to online webinars and more, you’ll find welcoming support to help you make your first open source contribution.
Speakers
avatar for Daniel Krook

Daniel Krook

Senior Director of Developer Experience, CNCF
Senior Director of Developer Experience at the CNCF focused on better serving the maintainers, contributors, and users in the community of 185+ open source projects hosted by the CNCF. Founding CTO of the Call for Code Global Initiative. Commit to the cause. Push for change.
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 1.31-1.32 (Level 1)

14:55 CEST

Panel Discussion: Measuring the Health of Open Source Projects in Public Health - Cynthia Lo, GitHub and World Health Organization; Samuel Mbuthia, World Health Organization; Liliana Torres Sanchez & Rachel Stanik, GitHub; Cassie Jiun Seo, Independent
Tuesday September 17, 2024 14:55 - 15:35 CEST
This session will showcase how open source metrics can be used for monitoring open source projects developed for global health challenges. GitHub and the World Health Organization (WHO) partnered to build a framework for tracking and analyzing the health of open source projects. The WHO, an international public health agency of the United Nations, utilizes and creates open source digital tools to enhance global health efforts for remote care, disease surveillance, epidemiological modeling, health information systems for data collection and analysis, and digital platforms for emergency response. Within these tools, challenges exist in monitoring open source: the lack of a high level view of best practices adopted by various open source projects; linking open source practices to realized impact in the public health; and building interest in open source work and advocating for more open source development within the global health community. This presentation will highlight these challenges, discuss opportunities to tackle them and close with an open dialogue on how open source projects can be measured, and drive collaboration between the OS community and public health practitioners.
Speakers
avatar for Cassie Jiun Seo

Cassie Jiun Seo

Independent
Cassie Jiun Seo is committed to supporting public-interest organizations leverage technology to deliver better - rather than letting the technology dictate the process. She first saw the power of open source as an aid worker, developing technological interventions in humanitarian... Read More →
avatar for Cynthia Lo

Cynthia Lo

Program Manager, GitHub
Cynthia is program manager with a background in project management and process improvement. Currently she leads the Skills-Based Volunteering program at GitHub.
avatar for Samuel Mbuthia

Samuel Mbuthia

OSPO Lead, World Health Organization
Samuel Mbuthia leads the World Health Organization (WHO) Open Source Programme Office. He is based at the WHO Hub for Pandemic and Epidemic Intelligence in Berlin. Before joining WHO, Samuel spent many years working on technology in public health, leading technical aspects of various... Read More →
avatar for Liliana Torres Sanchez

Liliana Torres Sanchez

Senior Data Analyst, GitHub
Experienced Data Analyst Leader with a track record of delivering strategic value through data-driven solutions and robust data governance. Proficient in transforming business challenges into actionable insights, effectively communicating through data visualization and storytelling... Read More →
RS

Rachel Stanik

Software Engineer, Platform, GitHub
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 0.94-0.95 (Level 0)

14:55 CEST

Panel Discussion: The Automotive OSPO - Masato Endo, Toyota Motor Corporation; Ana Jiménez Santamaría, Linux Foundation, TODO Group; Mary (Meixia) Wang, Volvo Car Corporation; and Wolfgang Gehring, Mercedes-Benz Tech Innovation
Tuesday September 17, 2024 14:55 - 15:35 CEST
The importance of software in the automotive industry is growing every year, and the use of open source is also increasing. Especially recently, software development related to SDV (Software Defined Vehicle) has become active. Therefore, the recent trend in the automotive industry is not only to simply use open source software, but also to contribute to open source development. In Europe, there are many cases where companies in the automotive industry have established OSPO and provide information, and OSPO's contribution to the community is also remarkable. This session will feature a panel discussion among OSPO leaders from the automotive industry, including Mercedes-Benz, Volvo, and Toyota. They will share the background of their OSPOs, the activities they focus on, and we will discuss trends in the industry. You will learn in this session that the form of OSPO varies from company to company, even in the same industry, and we aim to provide you with tips on how you can promote your open source activities.
Speakers
avatar for Wolfgang Gehring

Wolfgang Gehring

FOSS Ambassador & OSPO Lead, Mercedes-Benz Tech Innovation
Dr. Wolfgang Gehring is an Ambassador for Open and Inner Source and has been working on enabling and spreading the idea within Mercedes-Benz. A software engineer by trade, Wolfgang’s goal is to help enable Mercedes-Benz to fully embrace FOSS and become a true Open Source company... Read More →
avatar for Masato Endo

Masato Endo

Manager of OSPO, Toyota Motor Corporation
Masato Endo is a Group Manager of TOYOTA. He focuses also on building the Open Source governance structure within Toyota and developing relationships with the Open Source community, through projects such as AGL and OIN. From 2017, he began to work with the OpenChain Project as a board... Read More →
avatar for Meixia Wang

Meixia Wang

Director of Open Source Ecosystem, Volvo Car Corporation
Mary Wang is the Director of Open Source Ecosystem of Volvo Car Corporation. Her professional accomplishments include initiating open source project, forming and built OSPO for Volvo Cars. Before this, Mary was a subject matter expert configuration manager and was responsible for... Read More →
avatar for Ana Jiménez Santamaría

Ana Jiménez Santamaría

Project Manager, Linux Foundation, TODO Group
Ana is a senior Project Manager at the Linux Foundation's TODO Group project, an open group of practitioners who want to collaborate on best practices and tools to effectively manage open source operations through Open Source Program Offices (OSPOs). Formerly she worked at Bitergia... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon

14:55 CEST

VSCorode: Inside Your IDE, Inside Your Git Repository - Kevin Ward & Fabian Kammel, ControlPlane
Tuesday September 17, 2024 14:55 - 15:35 CEST
For several years now we’ve heard the mantra of shifting left to move security as early as possible in the development process. The aim is to enable developers to understand and produce secure code right away. The primary method to support developers is to enhance their IDE with extensions which can identify security issues, highlight insecure code practices and handle integration with external services. VSCode is one of the most popular IDEs with a flourishing community of extensions for data manipulation, theming, programmatic language features and additional debugging functionality. There is a great deal of trust placed in these extensions so what would happen if an extension turned against you? This talk explores the supply chain risks associated with VSCode extensions, what is required to get an extension included in the marketplace and how simply we hand over control to an unknown third party. We will demonstrate what an adversary can achieve with a malicious extension and how it represents a future red team target from enumeration, persistence and execution.Lastly we’ll offer advice on how to prevent common attack paths.
Speakers
avatar for Kevin Ward

Kevin Ward

Principal Consultant, ControlPlane
Kevin is an Principal Consultant with over 10 years of experience designing, building and testing secure solutions for Government, Defence and Finance sectors. In his own time, Kevin enjoys hacking and hardening systems to discover the balance between security and usability. He co-authored... Read More →
avatar for Fabian Kammel

Fabian Kammel

Senior Security Consultant, ControlPlane
Fabian Kammel is a Senior Security Consultant at ControlPlane, where he helps to make the (cloud-native) world a safer place. His goal is to bring hardware security and cloud-native security closer together, as well as, improving the developer experience in the security space. He... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 2.15 (Level 2)

14:55 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 14:55 - 15:35 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 1.34 (Level 1)

14:55 CEST

Unconference: Sign Up Onsite
Tuesday September 17, 2024 14:55 - 15:35 CEST
Do you have a topic you’d like to discuss with other interested attendees? A project or idea you want to share and get feedback on? Something you’d like to teach other attendees?
Sign up to lead an Unconference Session! All you need to do is sign up onsite at the event and schedule your talk. Once you have selected your time slot, it will be added to the conference schedule so other attendees can join. The sign-up will be located in the Solutions Showcase (Exact location: TBA)
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 1.33 (Level 1)

15:05 CEST

Lightning Talk: Delta Firmware Over The Air (DFOTA) Update: Optimizing Device Updates in Zephyr - Romain Pelletant & Clovis Corde, Kickmaker
Tuesday September 17, 2024 15:05 - 15:15 CEST
Firmware Over The Air (FOTA) updates are a well-established method for updating devices, but this approach shows its limitations in the embedded world. Indeed, in embedded systems we have 2 main constraints (among others) when discussing firmware updates : memory and bandwidth. Regarding memory, developing a low-memory-footprint API was our priority when creating this solution. To explain how we built this API, we will discuss compression algorithms and justify our choice of implementing in Zephyr the open-source library "Heatshrink" which is ideally suited for DFOTA's needs and for embedded systems in general (we can demonstrate the memory footprint differences compared to the already implemented compression algorithm "LZ4"). Next, we will see how deltas (or patches) between two firmware versions are generated (we could present a benchmark to illustrate the data savings achieved by sending patches instead of the full firmware, as it is done during FOTA update). Further, we will explore the implementation of the DFOTA API to explain how it works and how it can be implemented into your project.
Speakers
avatar for Romain Pelletant

Romain Pelletant

Embedded Software Engineer, Kickmaker
Embedded system enthusiast, focused on real-time operating systems in industry.
avatar for Clovis Corde

Clovis Corde

Embedded Software Engineer, Kickmaker
Software Engineer, Zephyr RTOS enthusiast, Loves to build all kinds of solutions from embedded systems to mobile applications.
Tuesday September 17, 2024 15:05 - 15:15 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

15:15 CEST

Lightning Talk: How to Create an Asset Tracker With Zephyr and Thingsboard In No Time - Tobias Marquardt, grandcentrix GmbH
Tuesday September 17, 2024 15:15 - 15:25 CEST
In this lightning talk I'll show you how to create a working PoC of an asset tracker with very little effort by using Zephyr. It's based on an off-the-shelf cellular SoC that sends GPS data over CoAP to the open source Thingsboard IoT cloud platform.
Speakers
avatar for Tobias Marquardt

Tobias Marquardt

Embedded Software Engineer, grandcentrix GmbH
Tobias is an embedded software developer at grandcentrix, where he works on embedded systems built with Linux and Zephyr. Prior to this role he worked several years as C++ application developer. Apart from that he plays the electric guitar, writes a Gameboy emulator for fun and enjoys... Read More →
Tuesday September 17, 2024 15:15 - 15:25 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

15:25 CEST

Lightning Talk: From Ideas to 3 Firmwares Powering Railway-Infrastructure Monitoring in 2 Years - Tobias Meyer, Konux GmbH
Tuesday September 17, 2024 15:25 - 15:35 CEST
Using Zephyr OS, we successfully developed three firmware versions in under two years, establishing a scalable wireless sensor network for enhanced railway infrastructure monitoring.

This talk will detail the rationale behind our technology selections, including Zephyr OS, BLE, LTE-M, and AWS Iot Core.

We will discuss specific features of Zephyr that facilitated rapid development and the aspects that presented a learning curve. Our session will explore critical design decisions, architectural frameworks using Zephyr, and effective strategies for MCU communication and optimizing battery life. It will show how projects are setup, dependency are managed using west, how firmware is tested, and which features of zephyr we use where. We'll also share common pitfalls and practical lessons learned.

Concluding with recent Zephyr updates and our reflective insights, this presentation will end with what we would have done differently this time.
Speakers
avatar for Tobias Meyer

Tobias Meyer

Senior Firmware Developer, Konux GmbH
Over 20 years experience in programming, over 10 years professional.Currently working on sensors enabling transforming railway operation at Konux GmBh
Tuesday September 17, 2024 15:25 - 15:35 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

15:35 CEST

Ask the Expert Session
Tuesday September 17, 2024 15:35 - 16:00 CEST
Come sit down with some open source experts to gain knowledge 1:1 and ask all your pressing questions! No sign-up necessary. More information to come soon!
Tuesday September 17, 2024 15:35 - 16:00 CEST
Foyer F (Level 0)

15:35 CEST

Ask the Expert Session with Philipp Ahmann, Etas GmbH, about Linux (and Open Source Software) in Safety-Critical Systems
Tuesday September 17, 2024 15:35 - 16:00 CEST
Ask the Expert Session: Sit down with open source experts to gain knowledge 1:1 and ask all your pressing questions!

Ask Philipp about Linux (and Open Source Software) in Safety-Critical Systems

No sign-up necessary - just stop by the round tables in Foyer F- Level 0.
Speakers
avatar for Philipp Ahmann

Philipp Ahmann

Sr. OSS Community Manager, Etas GmbH (BOSCH)
Philipp Ahmann is a senior OSS community manager at Etas GmbH (BOSCH) specializing in safety and automotive grade open source software. He holds the position of technical steering committee chair for the Linux Foundation (LF) ELISA project to Enable Linux in Safety Applications and... Read More →
Tuesday September 17, 2024 15:35 - 16:00 CEST
Foyer F (Level 0)

15:35 CEST

Ask the Expert Session with Russ Rutledge, InnerSource Commons Foundation, about InnerSource - Running Internal Projects Using Open Source Methodology
Tuesday September 17, 2024 15:35 - 16:00 CEST
Ask the Expert Session: Sit down with open source experts to gain knowledge 1:1 and ask all your pressing questions!

Ask Russ about InnerSource - running internal projects using open source methodology

No sign-up necessary - just stop by the round tables in Foyer F- Level 0.
Speakers
avatar for Russell Rutledge

Russell Rutledge

Executive Director, InnerSource Commons Foundation
Russ Rutledge is the Executive Director of the InnerSource Commons, a non-profit foundation dedicated to the teaching of InnerSource across the industry. Russ is a founding director of the Foundation and has served in many leadership positions there. Russ has participated at all levels... Read More →
Tuesday September 17, 2024 15:35 - 16:00 CEST
Foyer F (Level 0)

15:35 CEST

Ask the Expert Session with Steve Rostedt, Google Inc., about Linux Kernel, Real Time & FTrace
Tuesday September 17, 2024 15:35 - 16:00 CEST
Ask the Expert Session: Sit down with open source experts to gain knowledge 1:1 and ask all your pressing questions!

Ask Steve about about Linux Kernel, Real Time & FTrace

No sign-up necessary - just stop by the round tables in Foyer F- Level 0.
Speakers
avatar for Steven Rostedt

Steven Rostedt

Software Engineer, Google, Inc.
Steven Rostedt currently works for Google on the ChromeOS baseOS performance team. He is the main developer and maintainer for ftrace, the official tracer of the Linux kernel, as well as the user space tools and libraries that interact with the Linux tracing interface. Steven is also... Read More →
Tuesday September 17, 2024 15:35 - 16:00 CEST
Foyer F (Level 0)

15:35 CEST

Coffee Break
Tuesday September 17, 2024 15:35 - 16:00 CEST
Tuesday September 17, 2024 15:35 - 16:00 CEST
Solutions Showcase (Entrance, E, & F Halls (Level 0)) Austria Center Vienna

15:45 CEST

RISC-V Changing Your World
Tuesday September 17, 2024 15:45 - 15:55 CEST
Join us for a 10-Minute Tip Talk by Andrea Gallo in the Learning Lounge located in the Solutions Showcase.
Speakers
avatar for Andrea Gallo

Andrea Gallo

VP, Technology, RISC-V International
Tuesday September 17, 2024 15:45 - 15:55 CEST
Solutions Showcase (Entrance, E, & F Halls (Level 0)) Austria Center Vienna

16:00 CEST

Cloud Native Threat Intelligence for Everyone - Constanze Roedig, Tobias Grantner & Lukas Mahler, Technische Universität Wien
Tuesday September 17, 2024 16:00 - 16:40 CEST
Accurate and current threat intelligence data plays a vital role in threat modelling, as we can learn about what attackers are doing in the wild, and how likely certain attack paths are to be exploited. Whilst open source threat intelligence does exist, it is often ‘event-based’, focusing on historical incidents of attackers using particular techniques to exploit specific vulnerabilities. However, what if we want to quantify our own threat models, which may involve chaining together many such attack vectors? The Kubernetes Storm Centre is a newly established open source initiative that aims to provide a framework for independent quantification of cloud native attack paths, with contributing organisations running diverse ‘honey-clusters’ and sharing their results with a central hub for the world to freely consume. In this session, we will discuss the progress made by the project so far, share our initial results and insights, and explain how interested parties can contribute.
Speakers
avatar for Lukas Mahler

Lukas Mahler

Student, Technische Universität Wien
avatar for Dr. Constanze Roedig

Dr. Constanze Roedig

Head of the Austrian Open Cloud Community, Technische Universität Wien
Constanze earned her doctorate at the Albert Einstein Institute in relativistic radiation hydrodynamics. After 8 years as a software architect focussed on reimplementing legacy systems with transparent, performant, scalable and defensible designs, she returned to academia for an Austrian-wide... Read More →
avatar for Tobias Grantner

Tobias Grantner

Data Science Student, Technische Universität Wien
Tobias is currently enrolled in the Data Science Master programme at the Technical University of Vienna. As part of his "interdisciplinary project" he actively contributes to the Kubernetes stormcenter and conducts research on how to best capture Threat Intelligence in Cloud Nati... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.11-0.12 (Level 0)
  CloudOpen

16:00 CEST

DevSecOps Transformation at Speed and Scale Using Tekton - Caroline Cameron & Tony Higham, IBM
Tuesday September 17, 2024 16:00 - 16:40 CEST
The distributed development effort across individual teams to build secure software in a constantly evolving security threat landscape results in massive duplication of CI/CD automation work and inconsistent security and compliance postures across teams. The solution is to standardize the CI/CD security & compliance automation for development teams and centralize platform operations and maintenance. Our centralized CI/CD platform prevents software security problems from reaching production systems and streamlines compliance audits using built-in DevSecOps practices. Tekton is used as the open source orchestrator to standardize CI/CD and contribute open source enhancements through our valued ecosystem partnerships to benefit all users. The platform includes open source scanning tools such as Clair for OSS threat intelligence, SonarQube for SAST, and OWASP ZAP for DAST. The platform also extends the traditional CI and CD pipelines with a Continuous Compliance (CC) pipeline which ensures that deployed applications are scanned for new vulnerabilities on a daily basis with unique capabilities to auto remediate identified vulnerabilities and auto close resolved incident issues.
Speakers
avatar for Caroline Cameron

Caroline Cameron

Senior Software Engineer, Secure Software Development, IBM
Caroline is a DevSecOps transformation thought leader and passionate advocate for integrating secure software supply chain tools and practices early and often into the SDLC. Her background in the IBM CISO organization, and keen interest in security and compliance, keep her at the... Read More →
avatar for Tony Higham

Tony Higham

Chief Architect and Strategist - DevSecOps Transformation, IBM
With a track record as a recognized Distinguished Engineer, digital officer, and IT architect, I possess a history of delivering high-impact, innovative, customer facing solutions in the cloud applications industry. Among my talents are the ability to develop and mentor technical... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.14 (Level 0)
  ContainerCon
  • Audience Level Any

16:00 CEST

Advanced System Profiling, Tracing and Trace Analysis with Perfetto in Android and Yocto - Anna-Lena Marx & Stefan Lengfeld, inovex GmbH
Tuesday September 17, 2024 16:00 - 16:40 CEST
Tracing is a capable mechanism for deep system analysis and profiling with a minimal overhead. By recording defined system events, in Linux but also Android, tracing can be used to analyze concurrency or latency issues, for example. Android’s systrace tool made it easy to analyze and correlate traces and events due to a graphical UI, in order to help developers identify performance bottlenecks. The successor to this advanced and convenient tool is called Perfetto. It’s available for pure Linux too, and part of Yocto (meta-oe) since Langdale now. In the talk, we’ll have a look into - using Perfetto with Android and Yocto, - adding trace events to your applications, - recording traces and - analyzing system and application traces with the graphical GUI. This will allow you to take full advantage of the Perfetto trace viewer UI for analyzing memory usage, CPU scheduling, latency and more.
Speakers
avatar for Anna-Lena Marx

Anna-Lena Marx

Senior Embedded Systems Engineer, inovex GmbH
Anna-Lena Marx has been working as an Embedded Systems Developer at inovex since 2015 and holds a Master's degree in Embedded Systems. As a hobby, she also studies Electrical Engineering. Professionally, Anna-Lena focuses on the development of Embedded Systems based on Yocto or the... Read More →
avatar for Stefan Lengfeld

Stefan Lengfeld

Senior Embedded Systems Engineer, inovex GmbH
Stefan Lengfeld has been an Embedded Linux and Embedded Android developer at inovex since 2017. He is a Linux kernel contributor and has been professionally involved in all topics related to embedded software development since 2015. Even before that, he dove into the depths of Linux... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Hall B (Level 2)

16:00 CEST

Mesa3D Unveiled: From glDrawArrays(…) to GPU Magic - Christian Gmeiner, Igalia
Tuesday September 17, 2024 16:00 - 16:40 CEST
Mesa3D, often called Mesa, is a key part of the Linux graphics system, serving as an open-source implementation of the OpenGL API for rendering 3D graphics. It also supports other APIs like Vulkan and OpenGL ES.

This session will demystify Mesa3D, starting with GPU functions and its interaction with computers, laying the groundwork for understanding how Mesa powers 3D graphics. We'll use rendering a triangle as a case study to explore Mesa3D’s architecture—from initiating EGL and compiling shaders to sending work to the GPU, making the complex process more accessible.

The goal is for everyone to walk away with a clearer understanding of Mesa’s role in Linux graphics and its importance to the open-source community, specially on embedded platforms, where open-source drivers are getting much more relevance for long term maintainability, feature support and customization.

Here, I mention embedded platforms because many of our customers use open-source drivers. This allows them to include these drivers in their products without depending on proprietary solutions from manufacturers, which may not even be available (some are only available on Android, not Linux).
Speakers
avatar for Christian Gmeiner

Christian Gmeiner

Developer, Igalia
Christian Gmeiner is a graphic driver developer, to which he hasbeen contributing since 2013. He has started his 10 years long careerby joining the reverse engineering efforts around Vivante GPUs followedby doing contractor work helping companies leverage etnaviv's graphic stack.He... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Hall C (Level 2)

16:00 CEST

Panel Discussion: Outreachy Linux Kernel Internship Report - Julia Lawall, Inria; Hans Verkuil, Cisco Systems Norway; Tahera Fahimi, University of Calgary; Khadija Kamran; and Dorcas Litunya, Jomo Kenyatta University
Tuesday September 17, 2024 16:00 - 16:40 CEST
Come learn about the great accomplishments of our Outreachy Linux Kernel Interns! Outreachy offers open source internships to people subject to systemic bias and impacted by under-representation in the technical industry where they are living. Julia Lawall offers an overview of the Outreachy Linux Kernel Community followed by intern presentations showcasing their projects and experiences: * Dorcas Litunya: Improving support for the Vivid Test Driver * Khadija Kamran: Analyzing Linux Kernel Security Subsystems * Tahera Fahimi: Improving Landlock Access Control Linux Kernel Maintainer Hans Verkuil wraps up the panel by sharing his experience as an Outreachy mentor.
Speakers
avatar for Hans Verkuil

Hans Verkuil

Cisco Systems Norway
Hans Verkuil started contributing patches to the MPEG encoder/decoder ivtv driver in early 2004 and it snowballed from there. He is a media subsystem co-maintainer responsible for V4L2 bridge drivers, video receivers and transmitters, and maintainer of the HDMI CEC framework. Since... Read More →
avatar for Julia Lawall

Julia Lawall

Researcher, Inria
DL

Dorcas Litunya

Jomo Kenyatta University
TF

Tahera Fahimi

Outreachy Intern, University of Calgary
Tahera Fahimi is a graduate student at the University of Calgary.
Tuesday September 17, 2024 16:00 - 16:40 CEST
Hall M2 (Level 1)
  LinuxCon
  • Audience Level Any

16:00 CEST

The Cyber Resilience Act: Navigating Its Impact on Yocto-Based Products - Julien Bernet, Witekio
Tuesday September 17, 2024 16:00 - 16:40 CEST
The Cyber Resilience Act is reshaping the landscape for Yocto-based products. Join us as we navigate the implications of this ever-changing legislation. • Introduction to the Cyber Resilience Act: an overview of the CRA, its objectives, and its relevance to the IoT and embedded systems industry. • Understanding the Key Provisions of the CRA/CSA that are relevant to Yocto-based product developers. • Yocto Project and Security Compliance: how Yocto supports security measures, including secure boot, code signing, and vulnerability management. • Regulatory and Compliance Challenges: the challenges and complexities associated with complying with cybersecurity regulations in the embedded systems space. • Building Secure Yocto-Based Products: best practices for building secure Yocto-based products that align with the CRA's requirements. • Impact on Product Development Lifecycle: how the Act affects different stages of the Yocto-based product development lifecycle.
Speakers
avatar for Julien Bernet

Julien Bernet

Head of Security, Witekio
Julien is the Head of Security for Witekio and has over 15 years of experience in the cybersecurity field. After completing his PhD in computer science, he worked for various software security labs with a focus on embedded devices and smart cards. Thanks to his work as a security... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Hall M1 (Level 1)
  LinuxCon

16:00 CEST

Design Thinking: Generative AI Style - Martin Hickey & Donal Madden, IBM
Tuesday September 17, 2024 16:00 - 16:40 CEST
What if you could harness the power of artificial intelligence to make it easier to employ design thinking principles to benefit the users of your application? Design thinking is a highly effective process in designing successful applications. Design thinking can help application developers identify the problems that the application is solving and can improve user experience at launch. But to be most effective design thinking must be employed straight from concept to release. However, this takes money and time which start-ups, or small companies may not have. In this talk we provide an overview of a design thinking system of open source Large Language Model (LLM) agents to help developers get the most out of the design thinking process. Each agent is primed with a persona of an individual in the process and will work with the development team to produce design thinking artefacts and deliverables. We will show how the system helps to accelerate both the effect and adoption of design thinking in an organisation. This is the talk for you if you want to understand how Generative AI can provide solutions that traditional programming may not.
Speakers
avatar for Martin Hickey

Martin Hickey

Senior Technical Staff Member, IBM
Martin is a STSM and an Open Source strategic leader at IBM. He has been contributing to various Open Source projects, most notably, Kubernetes, Helm, OpenTelemetry, and OpenStack. Martin is a core maintainer and a TOC member of the Helm project. He has been a speaker at various conferences... Read More →
avatar for Donal Madden

Donal Madden

Data Scientist, IBM
Donal is a Data Scientist in IBM Sustainability Software working on the EU Horizons COGNIMAN research project which is tasked with advancing safety, efficiency and sustainability of manufacturing in Europe using AI, Robotics, Digital twins and Machine Learning. Beyond his current... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 2.31 (Level 2)

16:00 CEST

Navigating the Open Source Observability Landscape - Dotan Horovits, CNCF Ambassador
Tuesday September 17, 2024 16:00 - 16:40 CEST
In the cloud native era systems are getting ever more dynamic and complex. With containers and microservices architecture, monitoring and troubleshooting systems is more challenging than ever before. The open source community has risen up to the challenge and has delivered solutions that fit modern environments. Established open source projects such as Prometheus and the ELK Stack have gathered massive adoption, while new projects keep emerging and uncovering yet untapped possibilities such as continuous profiling and eBPF. Alongside tools, open standards, such as OpenMetrics and OpenTelemetry, are emerging to converge the industry and prevent vendor lock-in. Goodness, it’s hard to keep track of all that goodness. In this talk Horovits will talk about the recommended open source tools and standards for observability (looking also beyond logs, metrics and traces), and how to combine them to help you achieve effective observability in your environment.
Speakers
avatar for Dotan Horovits

Dotan Horovits

DevOps Specialist & CNCF Ambassador
Horovits lives at the intersection of technology, product and open source. With over 20 years in the hi-tech industry as a software developer, a solutions architect and a product manager, he brings a wealth of knowledge in cloud and cloud-native solutions, DevOps practices and more... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 1.61-1.62 (Level 1)
  Open Source 101

16:00 CEST

You Never Know When You Need a Fork - Madelyn Olson, AWS & Viktor Söderqvist, Ericsson
Tuesday September 17, 2024 16:00 - 16:40 CEST
What happens when a beloved open-source project used by millions of developers suddenly changes to a non-open source license? In this session learn about what lead to the creation of Valkey, the open-source alternative to the now proprietary Redis project. In this talk, two Valkey maintainers will discuss how Valkey was created and the lessons learned along the way. We'll discuss the concerns that existed in our community before the fork, the challenges we faced during the creation of the new project, and where we want to take Valkey in the future.
Speakers
avatar for Madelyn Olson

Madelyn Olson

Principal Engineer, AWS
Madelyn Olson is a Principal Engineer at AWS and a member of the Valkey Technical Steering Committee. When she is not busy writing databases, she enjoys hiking the serene nature of the pacific northwest.
avatar for Viktor Söderqvist

Viktor Söderqvist

Open source developer, Ericsson
Viktor is an open source developer at Ericsson, contributing to several projects. The last few years, he was contributing to Redis, but recently his focus has been on Valkey, the open source fork of Redis, which he together with a few more active contributors forked and now maint... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.94-0.95 (Level 0)

16:00 CEST

From Data Tsunami to Actionable Insights - Dawn Foster, CHAOSS & Cali Dolfi, Red Hat
Tuesday September 17, 2024 16:00 - 16:40 CEST
The data available about open source projects can feel like a tsunami, but there are ways to make this more manageable by focusing on the metrics that matter the most for your OSPO. This session will highlight how OSPOs can use data to generate meaningful insights about the open source software communities that are important for your business. This talk will start with a discussion about how to approach the tsunami of data by moving from data points toward insight and wisdom about your open source software. We’ll start with data collection and processing before discussing how collections of metrics can be used to understand your community more holistically than looking at individual metrics. The final section will include examples of how to interpret the data to move beyond analysis and find tangible ways to improve your OSS projects. We’ll show examples from Augur and 8Knot to show what is possible with structured data and metrics from the CHAOSS project. The audience will walk away with tips and techniques for making sense of those waves of data using collections of metrics and data science to result in actionable insights about your open source software.
Speakers
avatar for Cali Dolfi

Cali Dolfi

Senior Data Scientist, Red Hat
Cali Dolfi is a Data Scientist in the Open Source Program Office at Red Hat. Her work focuses on changing the way we look at open source communities through the lens of data science and machine learning. Outside of data science, her passion lies in making careers in technology more... Read More →
avatar for Dawn Foster

Dawn Foster

Director of Data Science, CHAOSS
Dr. Dawn Foster works as the Director of Data Science for CHAOSS where she is also a board member / maintainer. She is co-chair of CNCF TAG Contributor Strategy and an OpenUK board member. She has 20+ years of experience at companies like VMware and Intel with expertise in community... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon

16:00 CEST

"Here Is a Clean Section of the Beach" - Proactively Auditing Open Source Dependencies and Letting End Users Know - Munawar Hafiz, OpenRefactory & Michael Winser, Alpha-Omega
Tuesday September 17, 2024 16:00 - 16:40 CEST
Open source dependencies pose the most serious threat for all software. Software Composition Analysis (SCA) tools can help understand the risk profile using data collected about known vulnerabilities. But what about the unknown ones? The Alpha-Omega project, sponsored by Amazon, Google and Microsoft, has been challenged with the tasks of scouring the most popular Open Source libraries in order to “clean the beach” to make it safe for everyone. But the beach is huge and how can this project be performed at scale? In this talk, Michael Winser, Alpha-Omega co-founder, and Dr. Munawar Hafiz, CEO of OpenRefactory, will discuss the progress that Alpha-Omega has made in scanning and repairing thousands of Open Source libraries. They will describe the scaling challenges, the data handling and storage challenges and how the information is made available to the end users.
Speakers
avatar for Munawar Hafiz

Munawar Hafiz

CEO, OpenRefactory
Munawar Hafiz is the founder and head of innovations of OpenRefactory,  Inc., an application security company that intends to improve the way  developers write secure, reliable and compliant code. Munawar had a body  of work on automated bug fixing in academia which lays the foundation... Read More →
avatar for Michael Winser

Michael Winser

Co-founder, Alpha-Omega
Michael is a 40 year veteran in the software industry, with over 25 of those years at Google and Microsoft. He co-founded Alpha-Omega while at Google. Michael is an industry expert in software supply chain security, software development, and developer ecosystems. In addition to Alpha-Omega... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 2.15 (Level 2)

16:00 CEST

Sponsored Session: Application Security is a Community Effort - Fernando Diaz, GitLab
Tuesday September 17, 2024 16:00 - 16:40 CEST
GitLab's mission is to enable everyone to contribute to and co-create the software that powers the world. That software must be secure.
Open source plays a crucial role in addressing security risk through transparency and community efforts. By having source code publicly available, a wider community from various different background can inspect, identify, and fix vulnerabilities in a timely manner.

Other open source practices help increase security, too. Things like:
  • Collaborative Verification
  • Security Auditing
  • Security tool Development
  • Contributions to security initiatives
  • Vulnerability Reporting and Resolution
  • Education and Best Practices

Using examples of these practices from GitLab and other open source projects, let's talk about how we can move open source security forward together.

Speakers
avatar for Fernando Diaz

Fernando Diaz

Senior Developer Advocate, Security, GitLab
Fernando (Fern) Diaz is a Senior Developer Advocate at GitLab. He focuses on showcasing the value of implementing DevSecOps, Governance, and Shifting-Left within the complete Software Development Life Cycle (SDLC).In the past, he worked as a Software Developer at IBM Cloud, where... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 1.31-1.32 (Level 1)

16:00 CEST

Preparing Zephyr for Safety Element out of Context Certification - Nicole Pappler, AlektoMetis.com
Tuesday September 17, 2024 16:00 - 16:40 CEST
Zephyr, as also other open source projects, is heading towards functional safety, to achieve a safety certification as a Safety Element out of Context (SEooC) the question of what this really means comes up quite often.

There are usually three stakeholders in a project like project community, the assessor and the user, who actually wants to use the certified software

As all these parties have different expectations of what this certification will require, there are a lot of different rumours and opinions out there regarding functional safety certification. This talk will give an introduction to what qualification evidence is usually prepared and assessed for a SEooC certification, what this means for the project and how it can actually be integrated into a safety relevant software system.

This talk will also give an update of the current status of the safety working group, how to participate and what to expect there.
Speakers
avatar for Nicole Pappler

Nicole Pappler

Senior Safety Expert, AlektoMetis
Nicole has worked in different projects developing safety relevant embedded software before starting as an independent assessor. With now more than twenty years of experience in the industry, she supported several customers to show their compliance with safety, security and quality... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.49-0.50 (Level 0)
  Zephyr
  • Audience Level Any

16:55 CEST

MicroCeph: Simplifying Storage from Laptop to Data Center - Peter Sabaini, Canonical
Tuesday September 17, 2024 16:55 - 17:35 CEST
Need to get started quickly with storage? Need a robust storage cluster that doesn't require a team of experts to maintain and grow? MicroCeph aims to make software defined storage effortless to install, and scales from your laptop to dozens of racks. MicroCeph is a self-contained packaging of the Ceph cluster software --it integrates well into existing environments, and is great choice wherever you need repeatable installs and ease of operation, such as edge clouds, labs or remote sites. This talk will give an overview of MicroCeph and shows use cases and demos. It will show how to scale from a single-node dev environment to a multi-node cluster, how object storage and distributed filesystem can be provided, and how to integrate MicroCeph into existing environments. Furthermore options for encryption at rest and disaster recovery as well as hardware acceleration will be presented.
Speakers
avatar for Peter Sabaini

Peter Sabaini

Software Engineer, Canonical
Peter is a Software Engineer at Canonical, working on Ceph storage solutions. Before that, he was part of the managed services team there. He has worked in software development and (Linux) ops roles throughout his career.
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.11-0.12 (Level 0)
  CloudOpen

16:55 CEST

SCA for Containers: The Good, the Bad, and the Truth - Arun Azhakesan, Siemens Healthineers & Philippe Ombredanne, AboutCode
Tuesday September 17, 2024 16:55 - 17:35 CEST
Containers revolutionized the software development and deployment process. But there are still practical concerns, especially related to software supply chain integrity and security, that require further improvements. Software Composition Analysis (SCA) identifies components used in software applications and systems, often for software supply chain concerns like SBOMs, which is increasingly important for distributed, containerized systems. Many open source and proprietary SCA tools are marketed specifically for containers. After testing many open source and proprietary tools, we completed a project comparing the accuracy, depth, and breadth of these tools' detection capabilities. The results were not always good. In this talk, Arun from Siemens Healthineers and Philippe from AboutCode will share their experiences so you don't make the same mistakes.
Speakers
avatar for Arun Azhakesan

Arun Azhakesan

Head of Secure Development Lifecycle, Siemens Healthineers
Arun Azhakesan heads the Secure Development Lifecycle team at Siemens Healthineers, steering secure development lifecycle activities within the Corporate Cyber Security organization. He co-leads the Eclipse SW360 project, chairs the OpenChain India Workgroup, and actively participates... Read More →
avatar for Philippe Ombredanne

Philippe Ombredanne

Lead Maintainer, AboutCode
Philippe Ombredanne is a FOSS hacker passionate about enabling easier and safer reuse of open source code. He is the lead maintainer of the AboutCode stack of open source tools for Software Composition Analysis and license and security compliance, including the industry-leading ScanCode... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.14 (Level 0)
  ContainerCon
  • Audience Level Any

16:55 CEST

Taming DMA: Tales Wrestling Memory Corruption - Ahmad Fatoum, Pengutronix
Tuesday September 17, 2024 16:55 - 17:35 CEST
Direct Memory Access frees up the CPU for other important work, while devices read and write data in the background. This is as good as it sounds and most embedded systems make ample use of this; for good sound and otherwise. On the flipside, incorrectly configured DMA and the creeping memory corruption that results can decidedly be more unpleasant than the possible slow-down of using PIO. Ahmad's bootloader and kernel escapades have not been spared from the wrath of DMA masters. In this talk, he will share tales of his debugging campaigns and how tracking down memory corruption led him to learn, one bug at a time, more about the internals of Linux' and barebox' DMA API, ARM cache maintenance and the limitations of DMA controllers.
Speakers
avatar for Ahmad Fatoum

Ahmad Fatoum

Embedded Linux Developer, Pengutronix
Ahmad joined the kernel team at Pengutronix in 2018 to work full-time on furthering Linux world domination. He does so by helping automotive and industrial customers build embedded Linux systems based on the mainline Linux kernel. Having a knack for digging in low-level guts, his... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Hall C (Level 2)

16:55 CEST

Using Yocto to Debug Embedded Device Crashes - Etienne Cordonnier, Snap Inc
Tuesday September 17, 2024 16:55 - 17:35 CEST
It is challenging to debug hard to reproduce crashes on embedded devices. Due to limited space constraints, it is often not feasible to deploy full debug symbols. Core dumps are a great tool to debug such crashes. The Yocto project offers several features to help with working with core dumps, such as minidebuginfo and debuginfod combined with debug symbol servers. Used with crash-monitoring software and systemd core dump tooling, those features make it easier for developers to analyze and solve crashes happening only e.g. in production.
Speakers
avatar for Etienne Cordonnier

Etienne Cordonnier

Software Engineer, Snap Inc
Etienne Cordonnier is an embedded software developer who has worked on various Linux and FreeRTOS embedded products such as consumer audio products, smart-meters, as well as robotic devices. He likes to use and contribute to open-source projects, mostly the Yocto project. In his free... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Hall B (Level 2)

16:55 CEST

Building a Hypervisor Firewall with nftables and Rust - Stefan Hanreich, Proxmox Server Solutions
Tuesday September 17, 2024 16:55 - 17:35 CEST
Firewalls play a pivotal part in securing a hypervisor and its guests from internal and external threats. In this talk I want to show how to utilize nftables for creating complex rulesets in a virtualized Linux network environment.

This talk will start with a short introduction on nftables and Linux network virtualization. I will then dive deeper by showing how to create complex rulesets efficiently by utilizing the built-in nftables datastructures. Furthermore, I will show how zone-based firewalling can be implemented by leveraging the nftables bridge family, with a focus on virtualized network environments common in hypervisors. To finish off, I will talk about how to use Rust for interfacing with nftables via JSON by using the provided nftables-json schema to programmatically create firewall rules.
Speakers
avatar for Stefan Hanreich

Stefan Hanreich

Software Engineer, Proxmox Server Solutions
Stefan has been passionate about Linux since he first started using it in his teenage years. He works as a software engineer for Proxmox since 2022 with a focus on the networking stack.
Tuesday September 17, 2024 16:55 - 17:35 CEST
Hall M2 (Level 1)
  LinuxCon

16:55 CEST

Testing, a Journey from Testing Kernels to Testing Debian and Yocto - Sudip Mukherjee, Codethink Ltd
Tuesday September 17, 2024 16:55 - 17:35 CEST
Testing is an integral part of the software lifecycle. For software which are in continuous development it's even more important to have regular testing so that any bugs or errors can be detected early. In this talk, I will present how I started testing the Linux Kernel in a personal capacity and the status of Kernel testing that is now being done as part of Codethink. I will also present how that testing infrastructure has evolved to test Debian Sid on a RPI4 from a CI pipeline and the problems we had to overcome. That same infrastructure is now being modified to test Yocto from a gitlab CI pipeline.
Speakers
avatar for Sudip Mukherjee

Sudip Mukherjee

Software Engineer, Codethink Ltd
A software engineer at Codethink Ltd for 8 years and involved with opensource for more than 10 years. Also, a Debian Developer and a member of Elisa TSC (Technical Steering Committee).
Tuesday September 17, 2024 16:55 - 17:35 CEST
Hall M1 (Level 1)
  LinuxCon

16:55 CEST

Reducing Bias in AI with Open Source - Abubakar Siddiq Ango, GitLab
Tuesday September 17, 2024 16:55 - 17:35 CEST
Bias in AI has become a hot topic and increasingly, we are seeing how dangerous it is. Dangerous because AI is gain more influence in decisions that impact lives, decisions about who gets employment, healthcare or economic development and who gets profiled for crime, extra search at the airport, and so on. Even tools designed to identify AI-generated content have shown bias against non-native speakers based on their choice of verbiage. To reduce bias, experts often refer to having diverse training data and cognitive diversity, but where else is this achievable than in Open-source communities? This session is designed to open up discussions around reducing bias in AI with Open source. Abubakar will start by sharing examples of biases, sharing strategies to leverage open-source communities, and opening the floor for attendees to share their opinions and views, with the goal of creating a resource that will be valuable to the community.
Speakers
avatar for Abubakar Siddiq Ango

Abubakar Siddiq Ango

Developer Advocate, GitLab
Abubakar Siddiq Ango is a Developer Advocate at GitLab. He also engages with the community through the CNCF, Google Developer Expert & other developer communities. He is a Community Lead for the Inclusive Naming Initiative.
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 2.31 (Level 2)

16:55 CEST

Who Broke the Build? — Using Kuttl to Improve E2E Testing and Release Faster - Ram Mohan Rao Chukka, JFrog
Tuesday September 17, 2024 16:55 - 17:35 CEST
No one wants to be responsible for breaking the build. But what can you do as a developer to avoid being the bad guy? How can project leads enable their teams to reduce the occurrence of broken builds? In talking within our own teams, we discovered that many developers weren’t running sufficient integration and End to End tests in their local environments because it’s too difficult to set up and administer test environments in an efficient way. That’s why we decided to rethink our entire local testing process in hopes of cutting down on the headaches and valuable time wasted. Enter Kuttl. Connecting Kuttl to CI builds has empowered our developers to easily configure a development environment locally that accurately matches the final test environment — without needing to become an expert CI admin themselves. These days, we hear, “Who broke the build?” far less often — and you can too!
Speakers
avatar for Ram Mohan Rao Chukka

Ram Mohan Rao Chukka

Senior Software Engineer, JFrog
Ram is a Senior Software Engineer at JFrog R&D . Previously worked for startup companies like CallidusCloud (SAP Company), Konylabs. Loves Automation, Linux, openSource
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 1.61-1.62 (Level 1)
  Open Source 101

16:55 CEST

Innovating in Open Source in Your Enterprise - Daniel Doubrovkine, Amazon Web Services
Tuesday September 17, 2024 16:55 - 17:35 CEST
When widely adopted open-source projects get relicensed, engineering organizations that rely on that code feel the pain. But when the communities behind these projects create a fork to preserve the availability of an open-source alternative, those engineering teams gain a unique opportunity to step up and help drive the technology forward. In this talk, you’ll learn how developers and engineers can support open-source projects and lead innovation with an enterprise organization, based on experiences from the OpenSearch Project team at Amazon Web Services.
Speakers
avatar for Daniel Doubrovkine

Daniel Doubrovkine

Principal Engineer, Amazon Web Services
Daniel Doubrovkine (aka dB.) is a Principal Engineer at Amazon Web Services in New York, working on OpenSearch. He is a seasoned entrepreneur, technologist and former CTO at Artsy.net. Daniel graduated from University of Geneva in late 90s with a degree in Computer Science. Daniel... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 1.31-1.32 (Level 1)

16:55 CEST

Panel Discussion: The Next Phase in OSS (Ideate, Design and Build) - Samson Goddy, Open Source Community Africa; Oluebube Princess Egbuna, Drogo AI; and Edidiong Asikpo, Zuplo
Tuesday September 17, 2024 16:55 - 17:35 CEST
In the last three decades, we’ve seen an evolution of open source starting from the ’90s when foundations and ideas were birthed with the likes of the Free Software Foundation, the Open Source Initiative, and projects that changed the world like the Linux Kernel and the Apache server. From there, open source has gotten into mainstream adoption and advocacy, where we have platforms like GitLab, GitHub, and SourceForge, enabling people to build software projects openly and increasing collaboration among people in tech. Within the last ten years, groundbreaking innovations like the cloud, AI, and big data have become open source by default - this is where we are now. However, the global south is still stuck in the advocacy and adoption phase, with people who haven’t moved beyond their first contribution or are only aware of open source. We need to address this and move the global south to the next phase of open source—ideation, designing, and building. In this talk, we will share what we’ve been doing in Open Source Community Africa for the last 8 years and how we are currently fixing this problem through our latest flagship program, IDB (Ideate, Design, Build).
Speakers
avatar for Princess Oluebube

Princess Oluebube

Software Engineer, Drogo AI
Oluebube, affectionately known as Bube, is a talented software engineer who has transitioned into the cloud native space. She has over six years of experience as a software engineer and has successfully led engineering teams to deliver high-impact software solutions. Bube is passionate... Read More →
avatar for Samson Goddy

Samson Goddy

Co-founder, Open Source Community Africa
I am the co-founder of Open Source Community Africa, I serve as one of the board members for Open Source Collective, a project that helps sustain open source projects through the open collective platform. A board of directors with Sugar Labs, inc the new organization behind the Sugar... Read More →
avatar for Edidiong Asikpo

Edidiong Asikpo

Developer Advocate, Zuplo
Edidiong Asikpo is a Senior Developer Advocate based in Lagos, Nigeria. She is passionate about sharing her knowledge of DevOps through technical articles, videos, and social media. Edidiong has given over 100+ talks at tech events worldwide and continues to play a significant role... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.94-0.95 (Level 0)

16:55 CEST

Principles of Authentic Participation for Corporate Contributors - Cornelius Schumacher, DB Systel GmbH
Tuesday September 17, 2024 16:55 - 17:35 CEST
As the open source ecosystem grows, an increasing number of professionals are engaging with open source projects through their employment. This presents challenges, practical, legal, and above all cultural. To navigate these, a group of experienced community members has written a guide outlining guardrails of how to bridge corporate and community worlds. We call this the "Principles of Authentic Participation." This presentation will explore these principles, drawing on real-world experiences to highlight effective strategies for bridging corporate and community interests in open source development. Attendees will gain insights into practical and ethical engagement, tailored for those who contribute to open source projects as part of their corporate roles or manage such initiatives. We aim to foster a meaningful dialogue that promotes genuine collaboration between the corporate world and the open source community.
Speakers
avatar for Cornelius Schumacher

Cornelius Schumacher

Open Source Steward, DB Systel GmbH
Cornelius helps teams at Deutsche Bahn, the German railway company, to use and contribute to open source software. He has a background from more than two decades in the open source community and industry. Originally a software developer he now focus on management of open source.
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon
  • Audience Level Any

16:55 CEST

Capslock: Escaping Bad Dependencies - Jess McClintock & Nicky Ringland, Google
Tuesday September 17, 2024 16:55 - 17:35 CEST
A package’s permissions and capabilities constrain its blast radius if compromised. Analysing and restricting these permissions can thwart potential attack vectors, such as we have recently seen with inserting malicious code into programs via third-party libraries, sometimes by gaining commit access to an existing trusted package.
Security vulnerabilities can also be caused by excessive but well-intended privileges in packages that have unintended scope. Visibility into package permissions can help motivate the principle of least privilege within the ecosystem and increase scrutiny on dangerous capabilities.

Capslock is a CLI tool for analysing Go package imports that works on a callpath-level to look at only the capabilities accessible by the caller (instead of just looking at package imports). This ensures that the signals provided aren’t overly broad or noisy, in order to decrease false positive rates and prevent alert fatigue for users. This model is influenced by mobile phone permissions systems, where users can make decisions on the behaviours that apps require.

Capslock capability results are now available for Go on deps.dev, with support for more languages in development.
Speakers
avatar for Nicky Ringland

Nicky Ringland

Product Manager, Google
Nicky describes herself as a recovering academic with a background in Computational Linguistics. She co-founded Tech Inclusion and Grok Learning: a startup teaching hundreds of thousands of students to solve problems with code, before joining Big Tech.Named one of Australia's inaugural... Read More →
avatar for Jess McClintock

Jess McClintock

Senior Software Engineer, Google
Jess is a senior software engineer on the Open Source Security team at Google. In this role, she develops software solutions to security problems. Previously, Jess completed a PhD in theoretical computer science at the University of Melbourne, and has written papers on approximation... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 2.15 (Level 2)

16:55 CEST

Level Up Your Embedded Testing Game: FRETish, Robot, and Twister: A Dream Team - Christian Schlotter, Carl Zeiss Meditec AG & Tobias Kästner, TiaC Systems
Tuesday September 17, 2024 16:55 - 17:35 CEST
Additional author: Stefan Kraus, Senior Software Engineer, UL SIS

Developing embedded software for regulated environments like medical devices presents unique challenges. Crucially, we need to document how the software design fulfills stated product requirements. While functional testing remains dominant for verifying functional suitability, deriving and maintaining effective test suites can quickly become cumbersome.

This talk explores a novel approach to this longstanding problem. We leverage NASA's FRETish method for formally capturing requirements. We will talk about how the formal nature of FRETish requirements allows for automatic test case generation leveraging the Robot Framework. The latter was specifically chosen as it is partially supported by Zephyr's test harness today and allows to utilize twister for automated test execution of these test suites on real hardware. This method has the potential to streamline testing, offering benefits such as reduced time and maintenance efforts as well as accurate coverage metrics from very early on in the project's lifecycle.

We'll discuss our progress in implementing this approach, the challenges we encountered, and potential solutions for deeper integration with the Zephyr project.
Speakers
avatar for Tobias Kästner

Tobias Kästner

Bridle Maintainer, TiaC Systems
A physicist by training, Tobias Kaestner has always been fascinated by the intersection of the physical with the digital world. His professional career started as a SW team lead in a medical device start-up and since then he has served a couple of roles for 15+ years in this industry... Read More →
avatar for Christian Schlotter

Christian Schlotter

Software Architect, Carl Zeiss Meditec AG
Software Architect at Carl Zeiss Meditec AG, active member of queer ERG Proud@ZEISS, love nature, hiking and people 😀
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

17:45 CEST

BoF: The Yocto Project and OpenEmbedded - Josef Holzmayr, Northern.tech as Mender.io & Philip Balister, OpenSDR
Tuesday September 17, 2024 17:45 - 18:15 CEST
This BoF provides an open forum for the Embedded Linux community to ask questions and discuss issues with the Yocto Project and OpenEmbedded community. We open with a Yocto Project summary and OpenEmbedded State of the Union. All users, contributors and maintainers as well as curious minds are invited to bring their thoughts and topics.
Speakers
avatar for Philip Balister

Philip Balister

Minister of Progress, OpenSDR
avatar for Josef Holzmayr

Josef Holzmayr

Head of Developer Relations, Northern.tech as Mender.io
Josef has been active for more than 15 years as a "Complete"-Stack developer for industrial controls by now. A passion for showing, telling, and teaching people in both entertaining and engaging ways led Josef to Mender.io. Here, he tries to make the world better and more secure by... Read More →
Tuesday September 17, 2024 17:45 - 18:15 CEST
Hall B (Level 2)

17:45 CEST

BoF: Collaboration with Universities and Enterprises OSPO: What's Next? - Sayeed Choudhury, CMU; Clare Dillon, Lero/CURIOSS; Jonas van den Bogaard, Alliander; Natali Vlatko, CISCO; Ana Jiménez, LF; John Whelan, Trinity College Dublin
Tuesday September 17, 2024 17:45 - 18:15 CEST
Join the TODO Group and CURIOSS community for an interactive session where attendees can share use cases on how their organizations are investing in academic research.
Explore practices for transferring knowledge from academia and the research community.

We welcome open source managers, OSPO leaders, and other stakeholders from organizations and universities engaged in research or interested to learn more.


Speakers
avatar for Jonas van den Bogaard

Jonas van den Bogaard

Digital Strategy Lead & Open Source Office Lead, Alliander N.V.
Jonas van den Bogaard is a Digital Strategy Lead at Alliander, a distribution system operator (DSO) in the Netherlands. Alliander provides reliable, affordable, and accessible energy transport and distribution to a large part of the Netherlands. Open source has proved to be an enabler... Read More →
avatar for Clare Dillon

Clare Dillon

InnerSource Researcher, CURIOSS Lead, Lero, CURIOSS
Clare Dillon is an InnerSource researcher with Lero (Science Foundation Ireland's Research Centre for Software) and a member of Lero's OSPO. Clare also works with CURIOSS, a global community of Open Source Program Offices in university and research institutions. From 2021-2023, Clare... Read More →
avatar for Sayeed Choudhury

Sayeed Choudhury

Director of Open Source Programs Office, Carnegie Mellon University
Associate Dean for Digital Infrastructure and Director of Open Source Programs Office
avatar for Ana Jiménez Santamaría

Ana Jiménez Santamaría

Project Manager, Linux Foundation, TODO Group
Ana is a senior Project Manager at the Linux Foundation's TODO Group project, an open group of practitioners who want to collaborate on best practices and tools to effectively manage open source operations through Open Source Program Offices (OSPOs). Formerly she worked at Bitergia... Read More →
avatar for John Whelan

John Whelan

Technology Transfer Case & OSPO Manager, Trinity College Dublin
Since 2008, John has been the Technology Transfer Case Manager at Trinity College, Dublin responsible for commercialisation of ICT research. As part of his role in Trinity, John set up and manages Trinity’s Open Source Programme Office, the first of its kind in Europe. The mission... Read More →
Tuesday September 17, 2024 17:45 - 18:15 CEST
Room 0.96-0.97 (Level 0)

17:45 CEST

Zephyr LPWAN: Connectivity Options and When to Choose Them - Jordan Yates, Embeint
Tuesday September 17, 2024 17:45 - 18:15 CEST
Developers are spoiled for choice when it comes to Low-Power Wide-Area-Network technologies, which can make it difficult to choose where to focus your time when starting a project.

In this session we will run through the advantages and tradeoffs of the various LPWAN solutions that Zephyr supports out of the box, with respect to power consumption, range, reachability and more.
Technologies to discuss include Bluetooth, WiFi, LTE CAT-M1, LTE NB-IoT, LoRa/LoRaWAN and Thread.
Speakers
avatar for Jordan Yates

Jordan Yates

Co-Founder & Head of Engineering, Embeint
Leads embedded systems engineering at Embeint focussing on ultra-low-power IoT solutions leveraging his 6 years of prior experience as an embedded firmware engineer in CSIRO.Zephyr developer, contributor and maintainer.
Tuesday September 17, 2024 17:45 - 18:15 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

18:00 CEST

Attendee Reception
Tuesday September 17, 2024 18:00 - 21:00 CEST
Join us for a memorable evening at Prater Alm in Vienna, where tradition meets modern charm. Nestled in the heart of the Prater park, this rustic alpine lodge offers a warm and inviting atmosphere. Enjoy authentic Austrian cuisine, lively music, and the opportunity to network with fellow conference attendees. This event promises a delightful blend of culture, cuisine, and camaraderie, making it a highlight of your Vienna experience.

Prater Alm is about a 20-minute subway from the Austria Center Vienna. Limited transportation will be provided.

Guest Passes are available for purchase by updating your registration.



Tuesday September 17, 2024 18:00 - 21:00 CEST
Prater Alm- Prater 71B, 1020 Wien, Austria
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience Level
  • Presentation Slides Attached
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date -