Loading…
September 16-18, 2024
Vienna, Austria
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time (UTC/GMT +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

strong>Intermediate [clear filter]
arrow_back View All Dates
Tuesday, September 17
 

09:00 CEST

Linux Power Management Features, Their Relationships and Interactions - Théo Lebrun, Bootlin
Tuesday September 17, 2024 09:00 - 09:40 CEST
Over time, many features have been introduced into the Linux kernel to tackle various Power Management related needs. Most features rely upon the device model to provide its features, making each feature in isolation have rather understandable behavior and straight forward APIs. Complexity can creep in however when those various features interact with each other. We'll therefore cover features in isolation: system-wide suspend, hibernation, runtime power management, power domains, Quality of Service, etc. On each new step added, we'll stop to reflect on potential interactions or conflicts with previously seen features. Some of those will come from concrete issues encountered during the upstreaming effort of Suspend-to-RAM support on an automative SoC, the TI J7200 platform.
Speakers
avatar for Théo Lebrun

Théo Lebrun

Embedded Linux engineer, Bootlin
Théo joined Bootlin as an intern, studying the potential applications for the PipeWire ecosystem to embedded topics. He then went onto kernel work: suspend-to-RAM support for a TI automotive SoC and upstreaming of base platform support for Mobileye platforms.
Tuesday September 17, 2024 09:00 - 09:40 CEST
Hall B (Level 2)

09:00 CEST

Visions for the Linux Kernel PWM Subsystem - Uwe Kleine-König, BayLibre
Tuesday September 17, 2024 09:00 - 09:40 CEST
PWMs are used in a wide range of applications. Most in-kernel usages have only soft requirements regarding precision and switching behaviour (LEDs, fan control, backlight). However if you control a motor you might have higher demands that currently cannot be mapped generically using the current PWM API given the wide variance of hardware drivers and hardware limitations. In this talk Uwe presents his vision how the PWM framework can be changed to better match the needs for higher precision and better control of PWM devices. This includes: * faster and easier control from userspace * tighter rules for lowlevel drivers * a way to determine the best request for a given use case on a certain hardware * more general abstraction of the PWM waveform
Tuesday September 17, 2024 09:00 - 09:40 CEST
Hall C (Level 2)
  Embedded Linux Conference

09:50 CEST

Give Me Back My GPIO Persistence! (Introducing the libgpiod GPIO-Manager) - Bartosz Golaszewski, Linaro
Tuesday September 17, 2024 09:50 - 10:20 CEST
Ever since the GPIO character device was introduced as a proposed uAPI replacement for the deprecated sysfs interface, users have been pointing to the lack of persistence of GPIO state (as in: once the user-space process closes the file descriptor associated with a set of requested lines, their state is no longer defined - in practice: it's driver dependent) as the main issue with the new approach and a significant blocker in porting code from sysfs to libgpiod. Two solutions have been proposed: making the GPIO state persistent in the kernel or providing a centralized authority for controlling GPIOs from user-space. For various reasons the former has been rejected which led to the development of gpio-manager: a user-space daemon built on top of libgpiod that exposes an API to authorized clients and controls GPIOs on their behalf. This talk will present the features of the daemon, the DBus API it implements and the companion command-line client - gpiocli - which aims at allowing straightforward porting of sysfs-based scripts to the new interface.
Speakers
avatar for Bartosz Golaszewski

Bartosz Golaszewski

Linux Kernel Developer, Linaro
Bartosz Golaszewski has over 15 years of engineering experience in the embedded systems domain ranging from low-level, real-time operating systems, through the linux kernel up to user-space plumbing, libraries and build systems. Bartosz has contributed hundreds of patches to a wide... Read More →
Tuesday September 17, 2024 09:50 - 10:20 CEST
Hall C (Level 2)
  Embedded Linux Conference

09:50 CEST

Zephyr Build System: Sysbuild and New Hardware Model - Torsten Tejlmand Rasmussen, Nordic Semiconductor
Tuesday September 17, 2024 09:50 - 10:30 CEST
The Zephyr build system had been reaching its limits in its ability to build multiple images for modern SoCs in its previous hardware model.
The original build system began with the concept of a simple board containing a single core SoC for which you would build a single image. In today's world however, developers want to build multiple images for boards which may have multiple SoCs and / or SoCs with multiple CPU cores. This evolution towards complexity led us to the development and introduction of sysbuild and a new hardware model in Zephyr.

The purpose of this talk is to dive into the new hardware model, and what it provides seen from a developer's point of view, and from there continue into sysbuild, where the new hardware model is leveraged in order to build multiple images for a single device. The talk will go over how you as a developer can make the best use of the new hardware model and sysbuild to effectively build a complete project.
Speakers
avatar for Torsten Tejlmand Rasmussen

Torsten Tejlmand Rasmussen

Open Source Software Engineer, Nordic Semiconductor
Maintainer of Zephyr build system and toolchain integration.
Tuesday September 17, 2024 09:50 - 10:30 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

10:10 CEST

Pinctrl and GPIO - Interactions and Footguns - Chen-Yu Tsai, Google LLC
Tuesday September 17, 2024 10:10 - 10:30 CEST
The Linux Kernel has two subsystems that handle external pins: pinctrl that handles function muxing and electrical characteristics, and GPIO that handles generic input/output usage on individual pins. Depending on how the hardware is implemented, the two could be completely separate, or deeply intertwined. This presentation will introduce the hardware integration designs , how they should map to the kernel subsystems. We will dive deeper into the latter case and show how the kernel subsystems can handle it properly with "strict" GPIO pin muxing, and what could happen if the driver isn't implemented correctly, using existing in-tree drivers.
Speakers
avatar for Chen-Yu Tsai

Chen-Yu Tsai

Software Engineer, Google LLC
Chen-Yu is a software engineer that started working on the Linux kernel bringing up Allwinner SoCs in 2013. Chen-Yu currently works for Google on their ChromeOS team.
Tuesday September 17, 2024 10:10 - 10:30 CEST
Hall B (Level 2)
  Embedded Linux Conference

11:00 CEST

The Case for an SoC Power Management Driver - Stephen Boyd, Google
Tuesday September 17, 2024 11:00 - 11:40 CEST
DeviceTree (DT) based systems usually lack a platform or firmware based device power management framework. Device drivers are left to figure out if a device is already powered on at probe and duplicate power management logic to manage system resources such as clks or interconnects. This is unlike ACPI based systems where the firmware provides standardized device power states to power on or off a device and mostly hides system resources behind a firmware interface. This session will make the case for implementing an ACPI-like power management framework in the Linux kernel via pmdomains registered by a System-on-Chip (SoC) driver. First we'll discuss the problem and previously attempted or ongoing solutions. Then we'll cover a case study implementing an SoC power management driver. Attendees will leave with a greater understanding of SoC power management techniques and the problems kernel developers face in supporting such hardware upstream along with a possible solution to implement this design elsewhere.
Speakers
avatar for Stephen Boyd

Stephen Boyd

Software Engineer, Google, Google
Stephen Boyd has been a Linux kernel developer since 2009 and a Linux kernel maintainer since 2014. He's currently the maintainer of the kernel's clk and SPMI subsystems working on ChromeOS at Google.
Tuesday September 17, 2024 11:00 - 11:40 CEST
Hall B (Level 2)
  Embedded Linux Conference

11:00 CEST

How to Generate Test-Cases and Data Mocks for Microservices at Kernel Using eBPF - Neha Gupta & Animesh Pathak, Keploy
Tuesday September 17, 2024 11:00 - 11:40 CEST
In this session, we're going to talk about how we can easily record the API calls of any user-level application at Kernel using an EBPF program and convert those to realistic test cases and data mocks/stubs without writing any scripts. How we can set our testing pipelines on auto-pilot? We'll be discussing how to utilise UProbes and KProbes for the same. We'll also talk about how we can integrate this pipeline in popular language native testing libraries like JUnit, Jest, and Go-Test and easily achieve high test coverage on functional test suites. Since testing is very use-case specific, developers often avoid spending effort in writing test cases. Manual effort is being spent by QA to test apps and the industry standard for test automation is 24%. On average 50% of engineering efforts are spent to write and maintain the test scripts. Creating dummy test data is also very time-consuming and still, it is unrealistic test -data, leaving bugs leaking to production. The new-gen AI LLM-based test generation tools like ChatGPT are not fire-and-forget, since it requires effort to understand and correct the scripts generated by those tools and the dummy data is again unrealistic.
Speakers
avatar for Animesh Pathak

Animesh Pathak

Founding DevRel Engineer, Keploy
Animesh Pathak, is an avid tech community enthusiast, having worked with various technologies such as NodeJS, Microsoft Azure, etc., he has spent the last 4 years empowering tech communities and is currently active as a Gold MLSA, Postman Student Leader and Twilio Field Operator... Read More →
avatar for Neha Gupta

Neha Gupta

Co-Founder, Keploy
Co-Founder, Keploy.io. She brings prior experience of working as an engineer as well product manager at Indian startups like Lenskart, and Fareye. She has been an open-source contributor and mentor for projects like XWiki, and JenkinsX via programs like GSoC, and Outreachy. She has... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Hall M2 (Level 1)
  LinuxCon

11:00 CEST

Rusty Swapping: Rewriting a Zswap Backend in Rust - Vitaly Wool, Konsulko AB
Tuesday September 17, 2024 11:00 - 11:40 CEST
Despite all controversies, Rust in recent times has gained popularity as the second Linux kernel high-level language. There’s been discussions about its applicability in various kernel subsystems which yielded tentative conclusions. People have been advised by kernel gurus to use Rust for subsystem implementations rather than for drivers, and the author totally shares that stance. With that said, the author had a zswap backend called zblock ready for but still not accepted into the mainline, so the idea came naturally: to rewrite it in Rust and compare performance and complexity of the two implementations. Whichever wins gets submitted. This talk will cover the main principles of zblock (which stay the same no matter the language used), the obstacles the author met while implementing it in Rust, and finally the comparison of the two. It will be fun.
Speakers
avatar for Vitaly Wool

Vitaly Wool

Principal Engineer, Konsulko AB
Vitaly has more than 20 years of experience in embedded software development. Starting in real-time and critical systems, he moved to Embedded Linux in 2003, making numerous contributions to MTD device drivers and flash file systems. Then he moved to Sweden where he began working... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Hall M1 (Level 1)
  LinuxCon

11:00 CEST

Generative Conversational AI Interoperability - Diego Gosmar, Open Voice Interoperability, LF AI&DATA
Tuesday September 17, 2024 11:00 - 11:40 CEST
We will explore Conversational AI that works like the Web. In this talk, we explore the pivotal role of OVON Specs in the Open Voice Network's Interoperability Initiative. We highlight how OVON Specs are crucial in crafting a universal, open-source AI voice interface for seamless cross-platform assistant integration. We'll delve into OVON Specs' practical applications and collaborative potential, showcasing their versatility and impact in the evolving landscape of conversational AI, and how they're shaping the future of voice technology. When we talk about the combination of Voice and AI, it’s not just about a new way of communicating, instead, we are dealing with a human biometric feature unique to us. It's useful to design standardization protocols and guidelines for Conversational AI interoperability and scalability: we will run through the current architecture proposed by the Open Voice Interoperability group, part of the Linux Foundation, working on the Conversational AI Universal API Message envelope specifications for interoperability: we will share how to play with the available sandbox and some ethical use cases powered with AI Retrieval Augmented Generation as well.
Speakers
avatar for Diego Gosmar

Diego Gosmar

Chief AI Officer XCALLY, Open Voice Interoperability, LF AI&DATA
Successful international innovator, Diego Gosmar is a Chief AI Officer specialized in Artificial Intelligence, with particular focus on Generative Conversational AI, Natural Language Processing (NLP), Sentiment Analysis, Conversation Analysis, AI Agent interoperability, Sustainable... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 2.31 (Level 2)
  Open AI + Data Forum

11:00 CEST

Panel Discussion: Bring Your Product Manager to the Open Source Party - Nithya Ruff, Amazon; Georg Kunz, Ericsson; Mary (Meixia) Wang, Volvo Car Corporation; Alex Scammon, G-Research
Tuesday September 17, 2024 11:00 - 11:40 CEST
Open source is not just a tactical choice for consumption made by a developer. Open source should be a key part of your innovation plan and strategy, and product managers and business leaders need to understand it. From managing a key open source dependency to releasing open source for building an ecosystem and standards, to joining an open source foundation as a core part of a business plan, business owners need to know open source. Often, the business side of the house is not involved in open source decisions and don’t see it as business impacting. This session is about how to get the business side of the house involved in opens source. It is understanding the business planning process and how to ensure open source is included in that process. Whether it is ideation for a new product, managing ongoing investments in a product line or in marketing and launches, open source is a key component of business plans. As the head of the OSPO at Amazon, I work to build bridges with the business side of the house and to show them implications to the business of open source decisions we make. They need to be involved, support and invest in how we do open source at a company.
Speakers
avatar for Alex Scammon

Alex Scammon

Head of Open Source Engineering, G-Research
As the Head of the G-Research Open Source Software program, Alex Scammon leads a team of developers who contribute to a variety of projects in the open-source ecosystem. The team’s work focuses on three fundamental, overlapping areas of research: data science and machine-learning... Read More →
avatar for Nithya Ruff

Nithya Ruff

Head, Open Source Program Office, Amazon
Nithya is the Head of Amazon’s Open Source Program Office. Amazon’s customers value open source innovation and the cloud’s role in helping them adopt and run important open source services. She drives open source culture and coordination inside of Amazon and engagement with... Read More →
avatar for Georg Kunz

Georg Kunz

Open Source Program Manager, Ericsson
Georg is an Open Source advocate and a long-term contributor to a wide range of open source communities and projects in LF Networking and beyond, such as OpenStack, OPNFV/Anuket, and OpenSSF. He served for multiple terms on the Anuket Technical Steering Committee and currently serves... Read More →
avatar for Meixia Wang

Meixia Wang

Director of Open Source Ecosystem, Volvo Car Corporation
Mary Wang is the Director of Open Source Ecosystem of Volvo Car Corporation. Her professional accomplishments include initiating open source project, forming and built OSPO for Volvo Cars. Before this, Mary was a subject matter expert configuration manager and was responsible for... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 0.94-0.95 (Level 0)

11:00 CEST

The Challenges of Public Code - Building an Open Source Culture at the BBC - Tom Sadler & David Buckhurst, BBC
Tuesday September 17, 2024 11:00 - 11:40 CEST
This talk looks at how corporate and team culture, and organisational structure, impact open source activities at the BBC. We will share our wins and losses in the open source space, and how the culture and organisation has helped or hindered open source. Much of BBC open source is driven by grassroots individuals and teams, rather than through an Open Source Programme Office, which has had benefits and drawbacks. As a publicly funded corporation, the motivations for engaging with open source can be a little different than other organisations, which we will explore. Finally, we will deep dive into the current state of play of open source and InnerSource projects at the BBC, how they are being managed, and what our next steps and future ambitions are.
Speakers
avatar for Tom Sadler

Tom Sadler

Principal Software Engineer, BBC
Tom Sadler is a Principal Software Engineer at the BBC, working with a number of teams to enable open source and industry engagement, and InnerSource. He has led multiple teams working on the BBC’s Connected TV applications, with a focus on cross team collaboration. Tom has been... Read More →
avatar for David Buckhurst

David Buckhurst

Head of Software Engineering, BBC
David Buckhurst is Head of Software Engineering at the BBC leading the 300 engineers who build the BBC’s public service streaming media applications: iPlayer and Sounds. Flip-flopping between startups and big tech for many years ultimately led David to the BBC where he’s enjoyed... Read More →
Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon

11:55 CEST

Lightning Talk: The CFU: Custom Hardware with RISCV and Zephyr - Mohammed Billoo, MAB Labs Embedded Solutions
Tuesday September 17, 2024 11:55 - 12:05 CEST
RISC-V's instruction set architecture (ISA) has enabled seasoned embedded software engineers to experiment with FPGAs since numerous open-source RISC-V cores can be flashed onto an FPGA.

The Zephyr Project is rapidly emerging as a leading real-time operating system (RTOS). Zephyr integrates open-source and security best practices to ensure a vendor-neutral, secure, and reliable platform.

One of the exciting features of the RISCV ISA is the Custom Function Unit (CFU), which enables a framework to support custom operations in hardware, which is accessible from software. In this talk, Mohammed will demonstrate how to add a CFU into a RISCV core on an FPGA, and how to make the appropriate calls from Zephyr.
Speakers
avatar for Mohammed Billoo

Mohammed Billoo

CEO, MAB Labs Embedded Solutions
Mohammed Billoo is an embedded software consultant with over 15 years of experience. He focuses on The Zephyr Project RTOS, Embedded Linux, and The Yocto Project. He has also developed user interfaces using the Qt framework. He has helped clients across numerous verticals, including... Read More →
Tuesday September 17, 2024 11:55 - 12:05 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

11:55 CEST

Multi-tenant Logging with Opentelemetry Collector - Sándor Guba, Axoflow
Tuesday September 17, 2024 11:55 - 12:35 CEST
Kubernetes does not provide a rich multi-tenant experience out-of-the-box outside of Namespaces. Third-party tools try to bridge the gap generically, but there is no targeted solution to deal with telemetry data (logs, metrics, and traces). Sandor - the founder of Logging Operator that helps deal with logging on Kubernetes - gathered the team once again to re-evaluate the solution. The three main objectives were: to introduce tenants as first-class citizens, use OpenTelemetry Collector, and make it as simple as possible. The result is a new open-source project called Telemetry Controller. In this talk, Sandor will guide you through challenges like noisy neighbors, invalid configurations, parsing errors of multi-tenant logging, and how to solve them.
Speakers
avatar for Sándor Guba

Sándor Guba

CTO, Axoflow
Sandor is a software engineer, CTO, and founder at Axoflow. His main field has always been observability and logging. He is a former co-founder at Banzai Cloud. He was responsible for observability and founded open-source projects like the Logging Operator and Thanos Operator. He... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 0.14 (Level 0)
  ContainerCon

11:55 CEST

Building and Maintaining Binary Distributions with Yocto - Michael Opdenacker, Root Commit
Tuesday September 17, 2024 11:55 - 12:35 CEST
Imagine a world in which you can try the Yocto Project without even using it. This was possible in the past with the Ångström distribution, offering ready-made images which could be extended through binary package feeds. Though Ångström is long gone, the Yocto Project still has the ability to generate such images and package feeds. While system makers are still using this feature, the Yocto Project itself has never published such binaries. The Yocto Project, thanks to funding from the Sovereign Tech Fund, has recently developed its abilities to support binary distributions, by creating tooling to verify the ability to upgrade the images built for its releases through package feeds, and to support managing a "local" distribution that can customize packages offered by an "upstream" distribution. Since Yocto is about recipes, I will first present a cookbook for building your own images so that they can be updated through package feeds. I will then describe the recently developed features related to binary distributions and what possibilities they open for the Yocto Project and its users.
Speakers
avatar for Michael Opdenacker

Michael Opdenacker

Embedded Linux Consultant and Trainer, Root Commit
Michael Opdenacker is an independent consultant and trainer specialized in embedded Linux. He is the founder of Bootlin, who contributed to Linux World Domination by training thousands of engineers around the world on embedded Linux and its kernel, sharing all its materials under... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall B (Level 2)
  Embedded Linux Conference

11:55 CEST

Eight Years of Farming; Is Everybo(Ar)Dy Happy? - Geert Uytterhoeven, Glider bv
Tuesday September 17, 2024 11:55 - 12:35 CEST
8 years ago, at ELCE 2016, Geert talked about the benefits and modalities of organizing development boards in a board farm, and he introduced his personal board farm. Since then, more boards found their way into his farm, with more to come. Also, other developers asked him for remote access to his boards. In this presentation, Geert will talk about the evolution of his board farm. He will tell you about things that worked well, or didn't work well, and how he improved his farm, using readily available or custom hardware. He will discuss the challenges of growing your farm, in a changing world plagued by supply chain hick-ups. He will present a way to share boards in your farm with other developers and (automated) testers, using the backend-agnostic "FRAM" tool to grant remote control to only one or more boards, and not to your whole local infrastructure.
Speakers
avatar for Geert Uytterhoeven

Geert Uytterhoeven

Embedded Linux Kernel Hacker, Glider bv
Geert Uytterhoeven became involved with Linux 30 years ago, when he started hacking the Linux kernel to make it work better on his Amiga. This paved the way for a long string of contributions to Linux. In 2013, Geert founded Glider bv (http://glider.be/), to build upon the (embedded... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall C (Level 2)
  Embedded Linux Conference

11:55 CEST

Linux Sandboxing with Landlock - Mickaël Salaün, Microsoft
Tuesday September 17, 2024 11:55 - 12:35 CEST
Landlock's goal is to make it possible for Linux applications to sandbox themselves. On Linux, many traditional access control mechanisms are only available to the system administrator, which do not follow the principle of least privilege. As a result, sandboxing policies were created independently of an actual program execution, leading to unnecessarily broad policies. With Landlock, unprivileged processes can safely create sandboxing policies well-tailored to the expected needs of a running application. Landlock also solves the organizational aspect of keeping policy and software in sync with each other, by putting the policy definition and maintenance in the developer's hands. In this talk, we explain how Landlock works and how it can be used to protect Linux users, without being noticed, except by attackers.
Speakers
avatar for Mickaël Salaün

Mickaël Salaün

Senior Software Engineer, Microsoft
Mickaël Salaün is a kernel developer and open source enthusiast. He is mainly interested in Linux-based operating systems, especially from a security point of view. He has built security sandboxes before hacking into the kernel on a new LSM called Landlock, of which he is now the... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall M1 (Level 1)
  LinuxCon

11:55 CEST

Optimized String Processing in RISC-V: How Toolchain Improvements Can Boost Performance - Christoph Müllner, VRULL GmbH
Tuesday September 17, 2024 11:55 - 12:35 CEST
The C runtime offers a range of string processing routines, such as strcmp() and strlen(). The throughput of these routines has a significant impact on many applications and benchmarks, so they are one of the many optimization targets of toolchain developers. Unfortunately, these functions have certain properties and corner cases that limit the optimization opportunities. This talk makes a journey through common optimization techniques ranging from utilization of alignment information in the compiler. It ends with specific instructions that speed up string processing (RISC-V’s orc.b instruction). Further, the talk will show how these optimizations can boost the throughput on real HW by orders of magnitudes in synthetic benchmarks and the impact on the SPEC CPU 2017 benchmark suite. The presentation will include assembly listings, so basic assembly knowledge will help follow the talk.
Speakers
avatar for Christoph Müllner

Christoph Müllner

VRULL GmbH
Christoph Müllner is the chair of RVI’s Toolchains SIG and maintains the riscv-gnu-toolchain repository, a helpful resource for beginners and experienced toolchain experts. Christoph has actively contributed to the ratification process of several RISC-V extensions through PoC implementations... Read More →
Tuesday September 17, 2024 11:55 - 12:35 CEST
Hall M2 (Level 1)
  LinuxCon

12:25 CEST

Lightning Talk: Implementing the Precision Time Protocol (PTP) in the Zephyr Project - Adam Wojasiński, BayLibre
Tuesday September 17, 2024 12:25 - 12:35 CEST
In order for highly distributed communication to function well, there must be a reliable time source and a way to synchronize time between devices. In applications such as automotive and industrial control, the requirements here can be strict and subject to regulatory constraints. Precision Time Protocol (PTP) is a response to these hard time synchronization requirements by achieving clock accuracy in the sub-microsecond range.

As Zephyr becomes more broadly used in these environments, it needs support for precision timekeeping. This talk will cover a brief overview of PTP, discussion of various implementation choices for Zephyr, challenges along the way and upstreaming plans.
Speakers
avatar for Adam Wojasiński

Adam Wojasiński

Software engineer, BayLibre
Adam began his journey with open source joining Zephyr Project over two years ago. He is working in BayLibre on the Zephyr Project. His main areas of expertise are chip bring up, SPI and Zephyr drivers. Before joining BayLibre he worked in Nordic Semiconductor on bare-metal drivers... Read More →
Tuesday September 17, 2024 12:25 - 12:35 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

14:00 CEST

Inspecting and Optimizing Memory Usage in Linux - João Marcos Costa, Bootlin
Tuesday September 17, 2024 14:00 - 14:40 CEST
Considering a context where the hardware platform disposes of a restricted amount of RAM, developers need to understand how this resource is managed and consumed by the operating system and the applications running on it. In such situations, it is crucial to use the right metrics and tooling to identify which components are excessively allocating resources, trim them down, and finally get close to the strict necessary memory usage without compromising essential features. This presentation explores RAM management in the Linux kernel, focusing on how much memory is allocated across different areas and for what purposes. From a kernel space perspective, it will dive into the components of memory reserved in early boot. Considering the user space perspective, the presentation will explain how much memory is used by processes, both individually and collectively.
Speakers
avatar for João Marcos Costa

João Marcos Costa

Embedded Linux and Kernel engineer, Bootlin
João graduated in 2020 with a master degree in Physical engineering and embedded systems from ENSICAEN, a French engineering school, as well as an Electrical Engineering degree in 2021 from the Universidade Federal do Rio Grande do Norte in Brazil. Through his various experiences... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Hall C (Level 2)

14:00 CEST

Surviving 19 Jan 2038 on 32 Bit Platforms: Lessons Learned and Common Problems - Alexander Kanavin, Linutronix
Tuesday September 17, 2024 14:00 - 14:40 CEST
The year 2038 problem is a well known integer overflow issue on many 32 bit platforms, some of which will be still in use on the day when it happens: January 19 2038. In this talk I would like to present where the problem comes from, what the Yocto project has done to address the issue, which base work in kernel and libc has been utilized to avoid a total system collapse, how to test a system's readiness for that date, and which further issues this has uncovered in common open source components. I hope this prompts an interesting discussion and further ideas to ensure the world does not go down in 14 years.
Speakers
avatar for Alexander Kanavin

Alexander Kanavin

Linux / Open Source software engineer, Linutronix
Alexander is an open source developer specializing in distribution engineering using vendor-neutral tooling and userspace stacks. He is one of the primary contributors to the Yocto project and has an interest in developing foundations of digital infrastructure in a sustainable ma... Read More →
Tuesday September 17, 2024 14:00 - 14:40 CEST
Hall M2 (Level 1)
  LinuxCon

14:00 CEST

Tutorial: Securing Access to and from Remote Systems with WireGuard and Linux - Alex Feiszli, Netmaker, Inc.
Tuesday September 17, 2024 14:00 - 15:35 CEST
IT infrastructure is all over the place: Cloud VPC's, edge servers, data centers, office networks, and more. Much of it exists on private networks or behind routers and firewalls. IT administrators are often tasked with making these resources available over the internet to employees or remote servers that are elsewhere on earth. In this tutorial, we'll use just a couple of VM's running Linux and WireGuard to set up a minimal, secure, and easily-maintainable remote access system. We'll demonstrate with a fictional business that has a physical office, uses the cloud, and has remote IT staff, an extremely common scenario. We'll walk attendees through: 1. How to set up secure access to the office network from the remote staffs' workstations. 2. How to establish access to a cloud VPC from servers in the office network. 3. How to account for corporate firewalls and other common networking challenges. By the end of this tutorial, attendees will have a good understanding of how they can use Linux and WireGuard in common IT networking scenarios.
Speakers
avatar for Alex Feiszli

Alex Feiszli

Founder, Netmaker, Inc.
Alex founded Netmaker, an open source, WireGuard-based VPN, 3 years ago, and was the original author of the project. Previously, Alex worked at IBM on Multi-Cloud Kubernetes projects, and with Red Hat on various DevOps projects. In his spare time, Alex likes to travel, play ukulele... Read More →
Tuesday September 17, 2024 14:00 - 15:35 CEST
Hall M1 (Level 1)
  LinuxCon

14:20 CEST

Exploring the Potential of Zephyr in Automotive and Software Defined Vehicles - Philipp Ahmann, Robert Bosch GmbH
Tuesday September 17, 2024 14:20 - 14:40 CEST
In the automotive industry more than 100 embedded control units (ECUs) are present in a typical car. They are equipped with microcontrollers responsible for various peripherals within the vehicle. Although it may be challenging to adapt automotive-specific interfaces to an IoT-driven RTOS like Zephyr, the use of standard peripherals such as GPIOs, I2C, and UART can lead to significant synergies with other products.

However, as starting point, the talk will delve into the automotive specific requirements and technology stacks necessary for integrating Zephyr into automotive development. Additionally, it will highlight areas where Zephyr may not yet be a perfect fit for automotive applications. Key touchpoints for discussion will include the compatibility of Zephyr with established automotive standards like Autosar, COVESA VSS, and CAN stack. Furthermore, the talk will address the challenges related to process compliance and adherence to safety integrity standards in the automotive industry.

This talk aims to initiate a discussion on the potential wider adoption of Zephyr in automotive products and to foster an engaging discussion among industry professionals.
Speakers
avatar for Philipp Ahmann

Philipp Ahmann

Sr. OSS Community Manager, Etas GmbH (BOSCH)
Philipp Ahmann is a senior OSS community manager at Etas GmbH (BOSCH) specializing in safety and automotive grade open source software. He holds the position of technical steering committee chair for the Linux Foundation (LF) ELISA project to Enable Linux in Safety Applications and... Read More →
Tuesday September 17, 2024 14:20 - 14:40 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

14:55 CEST

Deep Dive Into Traefik 3.0 - Emile Vauge, Traefik Labs
Tuesday September 17, 2024 14:55 - 15:35 CEST
Traefik is one of the most popular open source projects in the world, with over 3 billion downloads to date, and one of the top 15 most downloaded open source projects on DockerHub. Traefik is an Ingress Controller and API Gateway capable of exposing and securing services and APIs simply, dynamically and at scale. Designed specifically for cloud-native environments, Traefik is the solution of choice from the simplest to the most complex case. If you spend your time managing, exposing and securing your applications and microservices, then this is the session for you! During this session, Emile Vauge (Traefik Creator) will show you how the new features in Traefik version 3 will simplify your daily life: - Support for Open Telemetry to monitor your infrastructure - Support for GatewayAPI resources to expose your resources in Kubernetes - Integration of WASM plugins to create your own middleware And much more...
Speakers
avatar for Emile Vauge

Emile Vauge

CTO, Traefik Labs
Emile is a Developer. He created Traefik in 2015 and is now the CTO of Traefik Labs, the company sponsoring the open source project.
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 0.14 (Level 0)
  ContainerCon

14:55 CEST

Embedded Linux Security: Dr. Jekyll and Mr. Hyde - Richard Weinberger, sigma star gmbh
Tuesday September 17, 2024 14:55 - 15:35 CEST
Linux-based embedded systems are increasingly common, yet they often face security challenges. While Linux already has a good set of security features, it is often not trivial to choose the right ones and use them properly.
In his presentation, Richard will discuss the typical issues he sees when collaborating with clients on embedded systems.

He aims to highlight essential pitfalls to steer clear of in your upcoming projects.
Speakers
avatar for Richard Weinberger

Richard Weinberger

Co-Founder, sigma star gmbh
Richard is co-founder of sigma star gmbh where he offers consulting services around Linux and IT security. Upstream he maintains various subsystems of the Linux kernel such as UserModeLinux and UBIFS. Beside of low level and security aspects of computers he enjoys growing lithops... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Hall C (Level 2)

14:55 CEST

Licensing Support by Build Systems - and What Remains To Be Done - Jan Altenberg, Open Source Automation Development Lab (OSADL) eG
Tuesday September 17, 2024 14:55 - 15:35 CEST
Building embedded Linux systems is getting increasingly complex. The complexity does not only come from the technical aspects. The number of different packages and dependencies also make the fulfilment of license obligations quite challenging. Build systems and distro generators support us with this task. They can help in getting an overview of the licenses being used and packaging the relevant compliance material. But how far does their support really go? And is the information being provided complete?

This presentation will take a look into different licensing obligations (e.g. information obligations and disclosure obligations) and (based on the examples of the Yocto project, ELBE and ISAR) the licensing support of modern build systems will be evaluated.
Speakers
avatar for Jan Altenberg

Jan Altenberg

Director, Open Source Automation Development Lab (OSADL) eG
Jan Altenberg has more than 20 years of experience in developing and maintaining Embedded Linux systems. Jan studied information technologies at the University of Cooperative Education in Stuttgart (Germany). From 2002 - 2006 he was involved in the OCEAN project, a European research... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Hall B (Level 2)
  Embedded Linux Conference

14:55 CEST

Messing up Your NUMA Topology with CXL - Hannes Reinecke, SUSE Linux
Tuesday September 17, 2024 14:55 - 15:35 CEST
his presentation will focus on CXL (Compute Express Link) as an advanced interconnect between machines and peripherals. CXL allows to leverage the PCIe physical interconnect to link together different device types (CPU, memory, I/O, cache, switches etc) into a combined hierarchy. This allows IHVs to create tailored solutions for eg large-scale AI systems or dynamic resource pooling between machines. As it's also possible to connect or pool memory resources it means the we can end up with some really interesting NUMA topologies. Plus we need to look at memory placement, as CXL memory is inherently hotpluggable, and as such not really suitable for some data structures like DMA areas etc. In this talk I will give an overview over CXL and the implications for NUMA topologies, and I'll be giving a short demo with an emulated CXL instance under qemu.
Speakers
avatar for Hannes Reinecke

Hannes Reinecke

Kernel Storage Architect, SUSE Linux
Studied Physics in Heidelberg from 1990 until 1997, followed by a PhD in Edinburgh 's Heriot-Watt University in 2000. Now working at SUSE Labs as Teamlead for storage and networking. Principal contact point for storage related issues on SLES. Linux addict since the earliest days (0.95... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Hall M2 (Level 1)
  LinuxCon

14:55 CEST

VSCorode: Inside Your IDE, Inside Your Git Repository - Kevin Ward & Fabian Kammel, ControlPlane
Tuesday September 17, 2024 14:55 - 15:35 CEST
For several years now we’ve heard the mantra of shifting left to move security as early as possible in the development process. The aim is to enable developers to understand and produce secure code right away. The primary method to support developers is to enhance their IDE with extensions which can identify security issues, highlight insecure code practices and handle integration with external services. VSCode is one of the most popular IDEs with a flourishing community of extensions for data manipulation, theming, programmatic language features and additional debugging functionality. There is a great deal of trust placed in these extensions so what would happen if an extension turned against you? This talk explores the supply chain risks associated with VSCode extensions, what is required to get an extension included in the marketplace and how simply we hand over control to an unknown third party. We will demonstrate what an adversary can achieve with a malicious extension and how it represents a future red team target from enumeration, persistence and execution.Lastly we’ll offer advice on how to prevent common attack paths.
Speakers
avatar for Kevin Ward

Kevin Ward

Principal Consultant, ControlPlane
Kevin is an Principal Consultant with over 10 years of experience designing, building and testing secure solutions for Government, Defence and Finance sectors. In his own time, Kevin enjoys hacking and hardening systems to discover the balance between security and usability. He co-authored... Read More →
avatar for Fabian Kammel

Fabian Kammel

Senior Security Consultant, ControlPlane
Fabian Kammel is a Senior Security Consultant at ControlPlane, where he helps to make the (cloud-native) world a safer place. His goal is to bring hardware security and cloud-native security closer together, as well as, improving the developer experience in the security space. He... Read More →
Tuesday September 17, 2024 14:55 - 15:35 CEST
Room 2.15 (Level 2)
  SupplyChainSecurityCon

15:05 CEST

Lightning Talk: Delta Firmware Over The Air (DFOTA) Update: Optimizing Device Updates in Zephyr - Romain Pelletant & Clovis Corde, Kickmaker
Tuesday September 17, 2024 15:05 - 15:15 CEST
Firmware Over The Air (FOTA) updates are a well-established method for updating devices, but this approach shows its limitations in the embedded world. Indeed, in embedded systems we have 2 main constraints (among others) when discussing firmware updates : memory and bandwidth. Regarding memory, developing a low-memory-footprint API was our priority when creating this solution. To explain how we built this API, we will discuss compression algorithms and justify our choice of implementing in Zephyr the open-source library "Heatshrink" which is ideally suited for DFOTA's needs and for embedded systems in general (we can demonstrate the memory footprint differences compared to the already implemented compression algorithm "LZ4"). Next, we will see how deltas (or patches) between two firmware versions are generated (we could present a benchmark to illustrate the data savings achieved by sending patches instead of the full firmware, as it is done during FOTA update). Further, we will explore the implementation of the DFOTA API to explain how it works and how it can be implemented into your project.
Speakers
avatar for Romain Pelletant

Romain Pelletant

Embedded Software Engineer, Kickmaker
Embedded system enthusiast, focused on real-time operating systems in industry.
avatar for Clovis Corde

Clovis Corde

Embedded Software Engineer, Kickmaker
Software Engineer, Zephyr RTOS enthusiast, Loves to build all kinds of solutions from embedded systems to mobile applications.
Tuesday September 17, 2024 15:05 - 15:15 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

15:15 CEST

Lightning Talk: How to Create an Asset Tracker With Zephyr and Thingsboard In No Time - Tobias Marquardt, grandcentrix GmbH
Tuesday September 17, 2024 15:15 - 15:25 CEST
In this lightning talk I'll show you how to create a working PoC of an asset tracker with very little effort by using Zephyr. It's based on an off-the-shelf cellular SoC that sends GPS data over CoAP to the open source Thingsboard IoT cloud platform.
Speakers
avatar for Tobias Marquardt

Tobias Marquardt

Embedded Software Engineer, grandcentrix GmbH
Tobias is an embedded software developer at grandcentrix, where he works on embedded systems built with Linux and Zephyr. Prior to this role he worked several years as C++ application developer. Apart from that he plays the electric guitar, writes a Gameboy emulator for fun and enjoys... Read More →
Tuesday September 17, 2024 15:15 - 15:25 CEST
Room 0.49-0.50 (Level 0)
  Zephyr

16:00 CEST

Cloud Native Threat Intelligence for Everyone - Constanze Roedig, Tobias Grantner, Lukas Mahler & Josef Taha, Technische Universität Wien
Tuesday September 17, 2024 16:00 - 16:40 CEST
Accurate and current threat intelligence data plays a vital role in threat modelling, as we can learn about what attackers are doing in the wild, and how likely certain attack paths are to be exploited. Whilst open source threat intelligence does exist, it is often ‘event-based’, focusing on historical incidents of attackers using particular techniques to exploit specific vulnerabilities. However, what if we want to quantify our own threat models, which may involve chaining together many such attack vectors? The Kubernetes Storm Centre is a newly established open source initiative that aims to provide a framework for independent quantification of cloud native attack paths, with contributing organisations running diverse ‘honey-clusters’ and sharing their results with a central hub for the world to freely consume. In this session, we will discuss the progress made by the project so far, share our initial results and insights, and explain how interested parties can contribute.
Speakers
avatar for Josef Taha

Josef Taha

Cloud Software Engineer, Technische Universität Wien
avatar for Dr. Constanze Roedig

Dr. Constanze Roedig

Head of the Austrian Open Cloud Community, Technische Universität Wien
Constanze earned her doctorate at the Albert Einstein Institute in relativistic radiation hydrodynamics. After 8 years as a software architect focussed on reimplementing legacy systems with transparent, performant, scalable and defensible designs, she returned to academia for an Austrian-wide... Read More →
avatar for Tobias Grantner

Tobias Grantner

Data Science Student, Technische Universität Wien
Tobias is currently enrolled in the Data Science Master programme at the Technical University of Vienna. As part of his "interdisciplinary project" he actively contributes to the Kubernetes stormcenter and conducts research on how to best capture Threat Intelligence in Cloud Nati... Read More →
avatar for Lukas Mahler

Lukas Mahler

Student, Technische Universität Wien
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.11-0.12 (Level 0)
  CloudOpen

16:00 CEST

Advanced System Profiling, Tracing and Trace Analysis with Perfetto in Android and Yocto - Anna-Lena Marx & Stefan Lengfeld, inovex GmbH
Tuesday September 17, 2024 16:00 - 16:40 CEST
Tracing is a capable mechanism for deep system analysis and profiling with a minimal overhead. By recording defined system events, in Linux but also Android, tracing can be used to analyze concurrency or latency issues, for example. Android’s systrace tool made it easy to analyze and correlate traces and events due to a graphical UI, in order to help developers identify performance bottlenecks. The successor to this advanced and convenient tool is called Perfetto. It’s available for pure Linux too, and part of Yocto (meta-oe) since Langdale now. In the talk, we’ll have a look into - using Perfetto with Android and Yocto, - adding trace events to your applications, - recording traces and - analyzing system and application traces with the graphical GUI. This will allow you to take full advantage of the Perfetto trace viewer UI for analyzing memory usage, CPU scheduling, latency and more.
Speakers
avatar for Anna-Lena Marx

Anna-Lena Marx

Senior Embedded Systems Engineer, inovex GmbH
Anna-Lena Marx has been working as an Embedded Systems Developer at inovex since 2015 and holds a Master's degree in Embedded Systems. As a hobby, she also studies Electrical Engineering. Professionally, Anna-Lena focuses on the development of Embedded Systems based on Yocto or the... Read More →
avatar for Stefan Lengfeld

Stefan Lengfeld

Senior Embedded Systems Engineer, inovex GmbH
Stefan Lengfeld has been an Embedded Linux and Embedded Android developer at inovex since 2017. He is a Linux kernel contributor and has been professionally involved in all topics related to embedded software development since 2015. Even before that, he dove into the depths of Linux... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Hall B (Level 2)
  Embedded Linux Conference

16:00 CEST

The Cyber Resilience Act: Navigating Its Impact on Yocto-Based Products - Julien Bernet, Witekio
Tuesday September 17, 2024 16:00 - 16:40 CEST
The Cyber Resilience Act is reshaping the landscape for Yocto-based products. Join us as we navigate the implications of this ever-changing legislation. • Introduction to the Cyber Resilience Act: an overview of the CRA, its objectives, and its relevance to the IoT and embedded systems industry. • Understanding the Key Provisions of the CRA/CSA that are relevant to Yocto-based product developers. • Yocto Project and Security Compliance: how Yocto supports security measures, including secure boot, code signing, and vulnerability management. • Regulatory and Compliance Challenges: the challenges and complexities associated with complying with cybersecurity regulations in the embedded systems space. • Building Secure Yocto-Based Products: best practices for building secure Yocto-based products that align with the CRA's requirements. • Impact on Product Development Lifecycle: how the Act affects different stages of the Yocto-based product development lifecycle.
Speakers
avatar for Julien Bernet

Julien Bernet

Head of Security, Witekio
Julien is the Head of Security for Witekio and has over 15 years of experience in the cybersecurity field. After completing his PhD in computer science, he worked for various software security labs with a focus on embedded devices and smart cards. Thanks to his work as a security... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Hall M1 (Level 1)
  LinuxCon

16:00 CEST

Design Thinking: Generative AI Style - Martin Hickey & Donal Madden, IBM
Tuesday September 17, 2024 16:00 - 16:40 CEST
What if you could harness the power of artificial intelligence to make it easier to employ design thinking principles to benefit the users of your application? Design thinking is a highly effective process in designing successful applications. Design thinking can help application developers identify the problems that the application is solving and can improve user experience at launch. But to be most effective design thinking must be employed straight from concept to release. However, this takes money and time which start-ups, or small companies may not have. In this talk we provide an overview of a design thinking system of open source Large Language Model (LLM) agents to help developers get the most out of the design thinking process. Each agent is primed with a persona of an individual in the process and will work with the development team to produce design thinking artefacts and deliverables. We will show how the system helps to accelerate both the effect and adoption of design thinking in an organisation. This is the talk for you if you want to understand how Generative AI can provide solutions that traditional programming may not.
Speakers
avatar for Martin Hickey

Martin Hickey

Senior Technical Staff Member, IBM
Martin is a STSM and an Open Source strategic leader at IBM. He has been contributing to various Open Source projects, most notably, Kubernetes, Helm, OpenTelemetry, and OpenStack. Martin is a core maintainer and a TOC member of the Helm project. He has been a speaker at various conferences... Read More →
avatar for Donal Madden

Donal Madden

Data Scientist, IBM
Donal is a Data Scientist in IBM Sustainability Software working on the EU Horizons COGNIMAN research project which is tasked with advancing safety, efficiency and sustainability of manufacturing in Europe using AI, Robotics, Digital twins and Machine Learning. Beyond his current... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 2.31 (Level 2)

16:00 CEST

From Data Tsunami to Actionable Insights - Dawn Foster, CHAOSS & Cali Dolfi, Red Hat
Tuesday September 17, 2024 16:00 - 16:40 CEST
The data available about open source projects can feel like a tsunami, but there are ways to make this more manageable by focusing on the metrics that matter the most for your OSPO. This session will highlight how OSPOs can use data to generate meaningful insights about the open source software communities that are important for your business. This talk will start with a discussion about how to approach the tsunami of data by moving from data points toward insight and wisdom about your open source software. We’ll start with data collection and processing before discussing how collections of metrics can be used to understand your community more holistically than looking at individual metrics. The final section will include examples of how to interpret the data to move beyond analysis and find tangible ways to improve your OSS projects. We’ll show examples from Augur and 8Knot to show what is possible with structured data and metrics from the CHAOSS project. The audience will walk away with tips and techniques for making sense of those waves of data using collections of metrics and data science to result in actionable insights about your open source software.
Speakers
avatar for Cali Dolfi

Cali Dolfi

Senior Data Scientist, Red Hat
Cali Dolfi is a Data Scientist in the Open Source Program Office at Red Hat. Her work focuses on changing the way we look at open source communities through the lens of data science and machine learning. Outside of data science, her passion lies in making careers in technology more... Read More →
avatar for Dawn Foster

Dawn Foster

Director of Data Science, CHAOSS
Dr. Dawn Foster works as the Director of Data Science for CHAOSS where she is also a board member / maintainer. She is co-chair of CNCF TAG Contributor Strategy and an OpenUK board member. She has 20+ years of experience at companies like VMware and Intel with expertise in community... Read More →
Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.96-0.97 (Level 0)
  OSPOCon

16:55 CEST

Taming DMA: Tales Wrestling Memory Corruption - Ahmad Fatoum, Pengutronix
Tuesday September 17, 2024 16:55 - 17:35 CEST
Direct Memory Access frees up the CPU for other important work, while devices read and write data in the background. This is as good as it sounds and most embedded systems make ample use of this; for good sound and otherwise. On the flipside, incorrectly configured DMA and the creeping memory corruption that results can decidedly be more unpleasant than the possible slow-down of using PIO. Ahmad's bootloader and kernel escapades have not been spared from the wrath of DMA masters. In this talk, he will share tales of his debugging campaigns and how tracking down memory corruption led him to learn, one bug at a time, more about the internals of Linux' and barebox' DMA API, ARM cache maintenance and the limitations of DMA controllers.
Speakers
avatar for Ahmad Fatoum

Ahmad Fatoum

Embedded Linux Developer, Pengutronix
Ahmad joined the kernel team at Pengutronix in 2018 to work full-time on furthering Linux world domination. He does so by helping automotive and industrial customers build embedded Linux systems based on the mainline Linux kernel. Having a knack for digging in low-level guts, his... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Hall C (Level 2)
  Embedded Linux Conference

16:55 CEST

Using Yocto to Debug Embedded Device Crashes - Etienne Cordonnier, Snap Inc
Tuesday September 17, 2024 16:55 - 17:35 CEST
It is challenging to debug hard to reproduce crashes on embedded devices. Due to limited space constraints, it is often not feasible to deploy full debug symbols. Core dumps are a great tool to debug such crashes. The Yocto project offers several features to help with working with core dumps, such as minidebuginfo and debuginfod combined with debug symbol servers. Used with crash-monitoring software and systemd core dump tooling, those features make it easier for developers to analyze and solve crashes happening only e.g. in production.
Speakers
avatar for Etienne Cordonnier

Etienne Cordonnier

Software Engineer, Snap Inc
Etienne Cordonnier is an embedded software developer who has worked on various Linux and FreeRTOS embedded products such as consumer audio products, smart-meters, as well as robotic devices. He likes to use and contribute to open-source projects, mostly the Yocto project. In his free... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Hall B (Level 2)

16:55 CEST

Building a Hypervisor Firewall with nftables and Rust - Stefan Hanreich, Proxmox Server Solutions
Tuesday September 17, 2024 16:55 - 17:35 CEST
Firewalls play a pivotal part in securing a hypervisor and its guests from internal and external threats. In this talk I want to show how to utilize nftables for creating complex rulesets in a virtualized Linux network environment.

This talk will start with a short introduction on nftables and Linux network virtualization. I will then dive deeper by showing how to create complex rulesets efficiently by utilizing the built-in nftables datastructures. Furthermore, I will show how zone-based firewalling can be implemented by leveraging the nftables bridge family, with a focus on virtualized network environments common in hypervisors. To finish off, I will talk about how to use Rust for interfacing with nftables via JSON by using the provided nftables-json schema to programmatically create firewall rules.
Speakers
avatar for Stefan Hanreich

Stefan Hanreich

Software Engineer, Proxmox Server Solutions
Stefan has been passionate about Linux since he first started using it in his teenage years. He works as a software engineer for Proxmox since 2022 with a focus on the networking stack.
Tuesday September 17, 2024 16:55 - 17:35 CEST
Hall M2 (Level 1)
  LinuxCon

16:55 CEST

Capslock: Escaping Bad Dependencies - Jess McClintock, Google
Tuesday September 17, 2024 16:55 - 17:35 CEST
A package’s permissions and capabilities constrain its blast radius if compromised. Analysing and restricting these permissions can thwart potential attack vectors, such as we have recently seen with inserting malicious code into programs via third-party libraries, sometimes by gaining commit access to an existing trusted package.
Security vulnerabilities can also be caused by excessive but well-intended privileges in packages that have unintended scope. Visibility into package permissions can help motivate the principle of least privilege within the ecosystem and increase scrutiny on dangerous capabilities.

Capslock is a CLI tool for analysing Go package imports that works on a callpath-level to look at only the capabilities accessible by the caller (instead of just looking at package imports). This ensures that the signals provided aren’t overly broad or noisy, in order to decrease false positive rates and prevent alert fatigue for users. This model is influenced by mobile phone permissions systems, where users can make decisions on the behaviours that apps require.

Capslock capability results are now available for Go on deps.dev, with support for more languages in development.
Speakers
avatar for Jess McClintock

Jess McClintock

Senior Software Engineer, Google
Jess is a senior software engineer on the Open Source Security team at Google. In this role, she develops software solutions to security problems. Previously, Jess completed a PhD in theoretical computer science at the University of Melbourne, and has written papers on approximation... Read More →
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 2.15 (Level 2)
  SupplyChainSecurityCon

16:55 CEST

Level Up Your Embedded Testing Game: FRETish, Robot, and Twister: A Dream Team - Christian Schlotter, Carl Zeiss Meditec AG & Tobias Kästner, TiaC Systems
Tuesday September 17, 2024 16:55 - 17:35 CEST
Additional author: Stefan Kraus, Senior Software Engineer, UL SIS

Developing embedded software for regulated environments like medical devices presents unique challenges. Crucially, we need to document how the software design fulfills stated product requirements. While functional testing remains dominant for verifying functional suitability, deriving and maintaining effective test suites can quickly become cumbersome.

This talk explores a novel approach to this longstanding problem. We leverage NASA's FRETish method for formally capturing requirements. We will talk about how the formal nature of FRETish requirements allows for automatic test case generation leveraging the Robot Framework. The latter was specifically chosen as it is partially supported by Zephyr's test harness today and allows to utilize twister for automated test execution of these test suites on real hardware. This method has the potential to streamline testing, offering benefits such as reduced time and maintenance efforts as well as accurate coverage metrics from very early on in the project's lifecycle.

We'll discuss our progress in implementing this approach, the challenges we encountered, and potential solutions for deeper integration with the Zephyr project.
Speakers
avatar for Tobias Kästner

Tobias Kästner

Bridle Maintainer, TiaC Systems
A physicist by training, Tobias Kaestner has always been fascinated by the intersection of the physical with the digital world. His professional career started as a SW team lead in a medical device start-up and since then he has served a couple of roles for 15+ years in this industry... Read More →
avatar for Christian Schlotter

Christian Schlotter

Software Architect, Carl Zeiss Meditec AG
Software Architect at Carl Zeiss Meditec AG, active member of queer ERG Proud@ZEISS, love nature, hiking and people 😀
Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.49-0.50 (Level 0)
  Zephyr
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience Level
  • Presentation Slides Attached
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date -