Open Source Summit Europe 2024: Full Schedule

September 16-18, 2024
Vienna, Austria
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time (UTC/GMT +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

11:20 CEST

Introduction to Linux Kernel Debugging and Code Coverage Using KCOV - Priya Dixit, Samsung Semiconductor Research India

Monday September 16, 2024 11:20 - 12:00 CEST

Room 0.49 - 0.50 (Level 0)

When we write kernel code, testing it thoroughly by giving different input combinations to check all the vulnerabilities and code coverage is important. Also, running buggy code directly on the hardware board has the potential to break the device. The presentation covers building and running a KCOV-enabled kernel in a virtualized environment for runtime detection of error conditions and checking code coverage using the same. To develop a deeper understanding, we will inject faults from user space via debugfs and catch the same by fuzzing the Linux kernel. Further debugging will be shown by using the GCC utilities like addr2line, objdump, etc.

Speakers

Priya Dixit

Staff Engineer, Samsung Semiconductor Research India

I am a Linux-embedded engineer with around nine years of experience in the domain. I have worked on various projects involving interrupt subsystem, coresight, kernel tracing, and testing infrastructure. I am passionate about learning new technologies and sharing my knowledge with... Read More →

Monday September 16, 2024 11:20 - 12:00 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Any

12:15 CEST

Getting Linux Distros to New Architectures - Bernhard Rosenkränzer, Baylibre

Monday September 16, 2024 12:15 - 12:55 CEST

Room 0.49 - 0.50 (Level 0)

Once in a while, new processor architectures show up -- aarch64, RISC-V, Loongarch, Elbrus -- and more to come. Getting Linux distributions - especially those using binary packages - up on them has traditionally been difficult, but it doesn't have to be. For the new OpenMandriva RISC-V port, we have automated the process in a way that will also work for other new architectures (or even other core changes like spins using a different libc). This talk introduces the pitfalls and the Open Source tools we've used to overcome them.

Speakers

Bernhard

Linux/Open Source consultant, Baylibre

Bernhard "bero" Rosenkränzer has been a Linux developer ever since he became curious about a stack of 84 floppy disks in the first half of the 1990s. Some of his code can be found in anything from the Linux kernel to the KDE Plasma user interface. Before joining BayLibre, he has... Read More →

Monday September 16, 2024 12:15 - 12:55 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Any

15:25 CEST

DAMON Recipes: Ways to Save Memory Using a Linux Kernel Subsystem in the Real World - SeongJae Park, Amazon

Monday September 16, 2024 15:25 - 16:05 CEST

Room 0.49 - 0.50 (Level 0)

DAMON is a Linux kernel subsystem for efficient data access monitoring that has been integrated into the mainline since v5.15. The subsystem has been further developed into an access-aware system operating engine. In addition, userspace tools for DAMON have been developed to provide a human-friendly interface and additional userspace capabilities. Several major Linux distributions now offer DAMON-enabled kernels and user-space tool packages. Of course, not all use cases for DAMON are known, but the DAMON maintainer has been privileged to hear about some interesting and creative uses of DAMON from several people who primarily use DAMON for memory efficiency in their prototypes, researches, and products. In this talk, we'll give a brief introduction to the practical benefits and unique internal mechanisms that DAMON provides, with live demos of key features. We'll then detail real-world examples of DAMON use in prototypes, researches, and products. Finally, we'll show you how you can join the project community for participating to the development or get help. The rest of the talk will be followed by a Q&A.

Speakers

SeongJae Park

Kernel Development Engineer, Amazon

SeongJae Park is a Linux kernel programmer who maintains the data access monitoring framework of the Linux kernel called DAMON (https://damonitor.github.io/). His interests include operating system kernels, parallel computing, and memory management.

Monday September 16, 2024 15:25 - 16:05 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Any

16:20 CEST

New Challenges Towards Spatial Safety in the Linux Kernel - Gustavo A. R. Silva, The Linux Foundation

Monday September 16, 2024 16:20 - 17:00 CEST

Room 0.49 - 0.50 (Level 0)

The first flexible-array transformation we implemented in the kernel, as part of the Kernel Self-Protection Project, took place back in March 2019. At the time, our work on preventing integer overflows during memory allocations led us to discover an 8-year-old bug. Addressing this bug not only resolved a longstanding issue but also initiated the work of flexible-array transformations across the whole kernel tree. This marked the beginning of a challenging yet rewarding journey to add bounds-checking on trailing arrays in the Linux kernel. Five years have passed since then, and we've come a long way. We have now new Clang and GCC hardening compiler options and attributes, that significantly improve the security of the Linux kernel, particularly in the spatial-safety area. We have new hardening helpers that make traditional methods less prone to error. In general, we have new and safer ways of doing things, which usually require a learning curve, even for seasoned kernel developers. In this talk, we will walk through the most recent challenges and history of our quest to improve spatial safety in the Linux kernel, and with that, get rid of out-of-bounds bugs once and for all.

Speakers

Gustavo A. R. Silva

Upstream Linux Kernel Engineer, The Linux Foundation

Gustavo A. R. Silva works full-time as an Upstream Linux Kernel Engineer, focused on security. Over the past several years, he’s been hunting and fixing all sorts of bugs and issues in the Linux kernel. He actively collaborates with the Kernel Self-Protection Project, and his work... Read More →

Monday September 16, 2024 16:20 - 17:00 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Advanced

11:00 CEST

Rusty Swapping: Rewriting a Zswap Backend in Rust - Vitaly Wool, Konsulko AB

Tuesday September 17, 2024 11:00 - 11:40 CEST

Room 0.49 - 0.50 (Level 0)

Despite all controversies, Rust in recent times has gained popularity as the second Linux kernel high-level language. There’s been discussions about its applicability in various kernel subsystems which yielded tentative conclusions. People have been advised by kernel gurus to use Rust for subsystem implementations rather than for drivers, and the author totally shares that stance. With that said, the author had a zswap backend called zblock ready for but still not accepted into the mainline, so the idea came naturally: to rewrite it in Rust and compare performance and complexity of the two implementations. Whichever wins gets submitted. This talk will cover the main principles of zblock (which stay the same no matter the language used), the obstacles the author met while implementing it in Rust, and finally the comparison of the two. It will be fun.

Speakers

Vitaly Wool

Principal Engineer, Konsulko AB

Vitaly has more than 20 years of experience in embedded software development. Starting in real-time and critical systems, he moved to Embedded Linux in 2003, making numerous contributions to MTD device drivers and flash file systems. Then he moved to Sweden where he began working... Read More →

Tuesday September 17, 2024 11:00 - 11:40 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Intermediate

11:55 CEST

Linux Sandboxing with Landlock - Mickaël Salaün, Microsoft

Tuesday September 17, 2024 11:55 - 12:35 CEST

Room 0.49 - 0.50 (Level 0)

Landlock's goal is to make it possible for Linux applications to sandbox themselves. On Linux, many traditional access control mechanisms are only available to the system administrator, which do not follow the principle of least privilege. As a result, sandboxing policies were created independently of an actual program execution, leading to unnecessarily broad policies. With Landlock, unprivileged processes can safely create sandboxing policies well-tailored to the expected needs of a running application. Landlock also solves the organizational aspect of keeping policy and software in sync with each other, by putting the policy definition and maintenance in the developer's hands. In this talk, we explain how Landlock works and how it can be used to protect Linux users, without being noticed, except by attackers.

Speakers

Mickaël Salaün

Senior Software Engineer, Microsoft

Mickaël Salaün is a kernel developer and open source enthusiast. He is mainly interested in Linux-based operating systems, especially from a security point of view. He has built security sandboxes before hacking into the kernel on a new LSM called Landlock, of which he is now the... Read More →

Tuesday September 17, 2024 11:55 - 12:35 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Intermediate

14:00 CEST

Tutorial: Securing Access to and from Remote Systems with WireGuard and Linux - Alex Feiszli, Netmaker, Inc.

Tuesday September 17, 2024 14:00 - 15:35 CEST

Room 0.49 - 0.50 (Level 0)

IT infrastructure is all over the place: Cloud VPC's, edge servers, data centers, office networks, and more. Much of it exists on private networks or behind routers and firewalls. IT administrators are often tasked with making these resources available over the internet to employees or remote servers that are elsewhere on earth. In this tutorial, we'll use just a couple of VM's running Linux and WireGuard to set up a minimal, secure, and easily-maintainable remote access system. We'll demonstrate with a fictional business that has a physical office, uses the cloud, and has remote IT staff, an extremely common scenario. We'll walk attendees through: 1. How to set up secure access to the office network from the remote staffs' workstations. 2. How to establish access to a cloud VPC from servers in the office network. 3. How to account for corporate firewalls and other common networking challenges. By the end of this tutorial, attendees will have a good understanding of how they can use Linux and WireGuard in common IT networking scenarios.

Speakers

Alex Feiszli

Founder, Netmaker, Inc.

Alex founded Netmaker, an open source, WireGuard-based VPN, 3 years ago, and was the original author of the project. Previously, Alex worked at IBM on Multi-Cloud Kubernetes projects, and with Red Hat on various DevOps projects. In his spare time, Alex likes to travel, play ukulele... Read More →

Tuesday September 17, 2024 14:00 - 15:35 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Intermediate

16:00 CEST

The Cyber Resilience Act: Navigating Its Impact on Yocto-Based Products - Julien Bernet, Witekio

Tuesday September 17, 2024 16:00 - 16:40 CEST

Room 0.49 - 0.50 (Level 0)

The Cyber Resilience Act is reshaping the landscape for Yocto-based products. Join us as we navigate the implications of this ever-changing legislation. • Introduction to the Cyber Resilience Act: an overview of the CRA, its objectives, and its relevance to the IoT and embedded systems industry. • Understanding the Key Provisions of the CRA/CSA that are relevant to Yocto-based product developers. • Yocto Project and Security Compliance: how Yocto supports security measures, including secure boot, code signing, and vulnerability management. • Regulatory and Compliance Challenges: the challenges and complexities associated with complying with cybersecurity regulations in the embedded systems space. • Building Secure Yocto-Based Products: best practices for building secure Yocto-based products that align with the CRA's requirements. • Impact on Product Development Lifecycle: how the Act affects different stages of the Yocto-based product development lifecycle.

Speakers

Julien Bernet

Head of Security, Witekio

Julien is the Head of Security for Witekio and has over 15 years of experience in the cybersecurity field. After completing his PhD in computer science, he worked for various software security labs with a focus on embedded devices and smart cards. Thanks to his work as a security... Read More →

Tuesday September 17, 2024 16:00 - 16:40 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Intermediate

16:55 CEST

Testing, a Journey from Testing Kernels to Testing Debian and Yocto - Sudip Mukherjee, Codethink Ltd

Tuesday September 17, 2024 16:55 - 17:35 CEST

Room 0.49 - 0.50 (Level 0)

Testing is an integral part of the software lifecycle. For software which are in continuous development it's even more important to have regular testing so that any bugs or errors can be detected early. In this talk, I will present how I started testing the Linux Kernel in a personal capacity and the status of Kernel testing that is now being done as part of Codethink. I will also present how that testing infrastructure has evolved to test Debian Sid on a RPI4 from a CI pipeline and the problems we had to overcome. That same infrastructure is now being modified to test Yocto from a gitlab CI pipeline.

Speakers

Sudip Mukherjee

Software Engineer, Codethink Ltd

A software engineer at Codethink Ltd for 8 years and involved with opensource for more than 10 years. Also, a Debian Developer and a member of Elisa TSC (Technical Steering Committee).

Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.49 - 0.50 (Level 0)

LinuxCon

Audience Level Beginner

11:00 CEST

A-Typical but Fruitful Public Sector Collaborations Through OSPO's - Nico Rikken, Alliander & Karel Rietveld, Dutch Tax and Customs Administration

Wednesday September 18, 2024 11:00 - 11:40 CEST

Room 0.49 - 0.50 (Level 0)

Collaboration in the public sector typically happens between similar organizations and through an overarching coordinating body. How a-typical is then the collaboration between the Dutch Tax Office and the semi-public Grid Operator Alliander. Yet the goals for their open source activities are similar and thus the OSPO's are collaborating to establish sound Open Source practices. Meanwhile there is a larger community of public and semi-public OSPO's that are taking on multiple shared goals. In this presentation Karel Rietveld and Nico Rikken will go over their learnings: - Unique benefits of an OSPO-collaboration that is national and consists of (semi-)public organizations - Practical examples of collaboration - How a small collaboration has grown to a larger collaboration - The road to the current working structure with working groups

Speakers

Nico Rikken

Open Source Advocate, Alliander

Nico Rikken has a track record in maximizing the potential of Free and Open Source Software in the energy sector and in the Netherlands. As Open Source Ambassador at grid operator Alliander he helps make open source project participation successful and ensure control over the company... Read More →

Karel Rietveld

Specialist Open Source at Open Source Program Office, Dutch Tax and Customs Administration

Working within the Chief Technology Office in building an Open Source Program Office for the Dutch Tax and Customs administration.

Wednesday September 18, 2024 11:00 - 11:40 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Intermediate

11:55 CEST

Building a Digital Workplace for Civil Servants - Bastien Guerry, Interministerial Digital Directorate (FR Gov)

Wednesday September 18, 2024 11:55 - 12:15 CEST

Room 0.49 - 0.50 (Level 0)

Understand how a public administration can build an open source digital workplace. We will present the current state of the solution itself and our methodology for ensuring the robustness of the underlying open source libraries and applications.

Speakers

Bastien Guerry

Head of the Free Software unit at DINUM, Interministerial Digital Directorate (FR Gov)

I'm a developer, I contribute to the GNU project and I promote the use of Free Software within the French public administration.

Wednesday September 18, 2024 11:55 - 12:15 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Beginner

12:15 CEST

German Administration and Open Source - Thomas Fricke, Independent

Wednesday September 18, 2024 12:15 - 12:35 CEST

Room 0.49 - 0.50 (Level 0)

This talk describes a journey that began almost a quarter of a century ago. The first attempts to establish open source in Germany failed. Only with a cloud and digital sovereignty strategy was it possible to establish FOSS in the German administration. The speaker was involved in various initiatives, the Verwaltungsgitlab (OpenCode.de), the strategic papers of the IT Planning Council, OpenDesk, the founding of the Sovereign Tech Fund and is still centrally involved in the updating of the strategy. It provides an insight into the foundations of a private cloud strategy that ultimately paved the way for FOSS. The vision is a digitally sovereign administration cloud that ensures a secure and automated implementation of modern administration processes through DevSecOps as the engine of the processes. Translated with DeepL.com (free version)

Speakers

Thomas Fricke

Independent

Thomas Fricke has been working with containers and Kubernetes for 7 years, with Linux and networks for 30 and with computers for 40. His focus is on security in KRITIS environments (energy, health care) and the agile transformations that are necessary in these environments. He is... Read More →

Wednesday September 18, 2024 12:15 - 12:35 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Intermediate

14:00 CEST

Lightning Talk: Digital Sovereignty at Risk - Opportunities for Intervention - Kay Hartkopf, PD - Berater der öffentlichen Hand

Wednesday September 18, 2024 14:00 - 14:10 CEST

Room 0.49 - 0.50 (Level 0)

The importance of digital sovereignty in the public sector has been amplified in the European Union (EU) due to recent geopolitical changes and the risk of relying on foreign digital technology and services such as cloud and artificial intelligence (AI). This issue has gained significant attention, prompting calls for collective action to manage these risks. Therefore, it's crucial to explore potential strategies that the public sector can adopt to reduce these risks. The role of Open Source Software (OSS) in enhancing the digital sovereignty of the public sector is a significant point of discussion. We aim to showcase some of the actions currently being undertaken by the public sector in Europe and Germany to achieve digital sovereignty, highlighting the crucial role of OSS in these strategies. Additionally, we will share real-world examples to demonstrate the ongoing efforts, potential opportunities, and challenges that need to be tackled.

Speakers

Kay Hartkopf

Senior Managing Expert, PD - Berater der öffentlichen Hand

A seasoned professional with over 31 years of diverse experience across public administration, telecommunications, and industry sectors. Having started his career as a Systems Engineer in 1991 after graduating in Physics from Hamburg University, he has successfully held multiple leadership... Read More →

Wednesday September 18, 2024 14:00 - 14:10 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Intermediate

14:10 CEST

Lightning Talk: The Government and the Art of Infrastructure Maintenance - Powen Shiah & Mirko Swillus, Sovereign Tech Fund

Wednesday September 18, 2024 14:10 - 14:20 CEST

Room 0.49 - 0.50 (Level 0)

Join us in taking a look at how the Sovereign Tech Fund, a state-funded organization in Germany, has been developing ways to strengthen and support the free and open source ecosystem in the public interest. This ecosystem underpins the digital infrastructure, in particular the software components and tools, on which governments, private companies, and individuals rely. But what does it mean to strengthen this ecosystem? In this session, we’ll look at the different ways STF is putting public money to work for this mission. Some issues STF is working on include: a) Limited funding for long-term maintenance and security work b) Fragmented career and employment prospects for project maintainers c) Growing the pool of open source maintainers and contributors We’ll include lessons from the first two years of our existence, some insights from our survey of open source maintainers, as well ideas on how all the different parts in the FOSS landscape can work together for a more resilient and fair system. This is a work in progress, but we’re trying to ensure the software our societies depend on is sustainable in the long-term.

Speakers

Mirko Swillus

Program Manager, Sovereign Tech Fund

Mirko has 15 years of professional experience in software engineering, working in different setups and roles. He’s specifically interested in the question how engineering communities organise to achieve a sustainable productivity. Mirko is based in Dresden.

Powen Shiah

Communications, Sovereign Tech Fund

Powen handles communications at the Sovereign Tech Fund, highlighting the importance of open source digital infrastructure and the government's role in supporting it in the public interest. He’s worked in product marketing, communications, and internationalization in technology... Read More →

Wednesday September 18, 2024 14:10 - 14:20 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Any

14:20 CEST

Lightning Talk: From Spark to Flame: How Ideas and Collaboration Create a Ripple Effect in Public Sector Transformation - Nikki Winands & Alain Schoovers, Dutch Tax and Customs Administration

Wednesday September 18, 2024 14:20 - 14:30 CEST

Room 0.49 - 0.50 (Level 0)

We want to take you along in how modest yet "BOLD" ideas can spark and catalyze transformative organisational changes in the public sector. This session traces the evolution of small, innovative concepts into collaborative open source projects that revolutionize bureaucratic processes and cultural mindsets. We'll highlight the importance of discovering and collaborating with motivated and inspiring individuals who share a vision for change and embodying that change. By sharing our experience, you will gain insights into how these partnerships are crucial for activating and navigating the complexities of government structures, gaining support, creating momentum, and sustaining it. We transformed innovative sparks into powerful engines for systemic change by leveraging agile methodologies, engaging stakeholders, and building a coalition of champions. We aim to empower inspired individuals to continue championing their ideas, demonstrating that even the smallest initiative, when supported by the right people, can lead to significant transformations in governance and the way we serve the public.

Speakers

Alain Schoovers

Development Manager & Epic owner, Dutch Tax and Customs Administration

Hello, I'm Alain Schoovers. I blend strategic vision with adaptability, valuing genuine connections and understanding individual strengths and needs. My work, especially at the Dutch Tax and Customs Administration, involves sparking innovation through teamwork. I use agile methods... Read More →

Nikki Winands

Enterprise Architect, Dutch Tax and Customs Administration (Belastingdienst)

As an Enterprise Architect at the Dutch Tax Administration's CTO Office, I actively engage in initiatives in Sustainability, Open Source, and our transformative design system. With a 15-year background in IT, my approach is centered on driving innovation and continually pushing the... Read More →

Wednesday September 18, 2024 14:20 - 14:30 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Any

14:30 CEST

Lightning Talk: The BlueHats Awards: Funding Open Source Critical Libraries - Bastien Guerry, Interministerial Digital Directorate (FR Gov)

Wednesday September 18, 2024 14:30 - 14:40 CEST

Room 0.49 - 0.50 (Level 0)

In 2024, DINUM has partnered with NLnet to launch the BlueHats Awards: https://nlnet.nl/bluehatsprize/2024/ The prize will identify and support 4 FLOSS maintainers and give them 10K€ to encourage them to continue their work. The session will present the prize, lessons learned, and evolve into a discussion with NLnet and the winning maintainers.

Speakers

Bastien Guerry

Head of the Free Software unit at DINUM, Interministerial Digital Directorate (FR Gov)

I'm a developer, I contribute to the GNU project and I promote the use of Free Software within the French public administration.

Wednesday September 18, 2024 14:30 - 14:40 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Beginner

15:10 CEST

How Will IPCEI-CIS Redefine Open Source in the EU? - Alberto P. Martí, OpenNebula Systems

Wednesday September 18, 2024 15:10 - 15:50 CEST

Room 0.49 - 0.50 (Level 0)

The European Union has approved a €1.2 billion investment in the development of the first interoperable and openly accessible European data processing ecosystem, known as IPCEI-CIS. This initiative aims to reduce reliance on external providers and promote open source technologies. Despite skepticism about whether a state-driven initiative can foster open and collaborative software development, the EU's decision is one of the largest sovereignty-focused initiatives ever undertaken by the organization. The IPCEI-CIS project offers an alternative model based on leveraging European open source for mobilizing the many technological and innovation capabilities in the continent and creating together a Next-Generation European Platform for the Datacenter-Cloud-Edge Continuum. This powerful “made in EU” alternative will offer vendor neutrality and a sustainable future based on global collaboration, but fully aligned with the values and priorities of the European Union. In this presentation, we will discuss the challenges and opportunities that this project presents to citizens and developers, and how it will redefine the way we produce open source software in Europe.

Speakers

Alberto P. Martí

VP of Innovation, OpenNebula Systems

Alberto has developed most of his career in Spain and in the UK, both in the IT sector and in Academia. As VP of Open Source Innovation at OpenNebula Systems, he deals with strategic collaborations with public cloud/edge providers, open source initiatives, and development teams from... Read More →

Wednesday September 18, 2024 15:10 - 15:50 CEST
Room 0.49 - 0.50 (Level 0)

Open Source in the Public Sector

Audience Level Any