DevConf.CZ 2025
2025-06-12..2025-06-14
-- online --
[DevConf.CZ 2019, DevConf.CZ 2020, DevConf.CZ 2021, DevConf.CZ 2023, DevConf.CZ 2025, DevConf.CZ 2026]
who it's for
platform engineers, site reliability engineers, kubernetes operators, security engineers, machine learning engineers, observability engineers, test and QA engineers
topics
bootc containers for bootable images; podman image build and conversion; kubevirt deployment of VMs from containers; Kubernetes-in-Kubernetes with Kamaji and Cluster API; kubernetes multitenancy image pulling; eBPF-based homelab observability; log analysis with Log Detective; LLM agents with vector DB RAG and MCP remediation; relation-based authorization with SpiceDB; TPM-based attestation and Keylime agent model; post-quantum algorithms in PKCS #11
| title | author | length |
|---|---|---|
| Keynote: Revolutionize your OS deploy and management with bootc containers | Alessandro Rossi, Luca Mattia Ferrari | 36m |
Bootc containers convert container images into bootable artifacts and the talk shows concrete tooling and working demos: image build with Podman, signing with… | ||
| Keynote: Fine-tuning our way towards openness in AI | Cedric Clyburn, Carol Chen | 33m |
Open source models are now claimed to match or beat proprietary ones and the session shows working demos: local vision and text inference with Rama Llama… | ||
| Will AI Steal Your IT Job? Find Out How to Stay Ahead! | Karel Piwko | 30m |
Claims that multimodal and reasoning models enable agents that act like a “skilled junior” and that major tools already embed AI such as GitHub Copilot and… | ||
| SRE'ing the SRE AI Agents | Boran SEREF | 36m |
An operational prototype uses LLMs plus a vector DB for RAG, Prometheus/Elasticsearch/tracing for realtime context, and an MCP layer that both reads metrics… | ||
| Predicting Faulty Validations in Cluster Issue Detection: A ML Approach | Liat Pele, Ofir Pele | 27m |
A dataset of about 400+ validation rules and git history yields numeric features—code length, entropy, time since introduction, comments, unit tests—and labels… | ||
| AI Next Door: Meet the Masterminds Shaping AI Innovation | Radek Vokal, Karel Piwko, Tomáš Tomeček, Vladimír Kadlec, Marek Grac, Patrik Plachy | 35m |
Panel covers Red Hat AI work and regional efforts: fine‑tuning LLMs for NLP, a deployed Log Detective tool that analyzes logs, and customer pilots for on‑prem… | ||
| How to Prevent AI Agents from Accessing Unauthorized Data | Sohan Maheshwar | 33m |
Claims that relationship‑based authorization prevents RAG exfiltration by enforcing fine‑grained permissions and reducing vector search surface, backed by a… | ||
| How I Built an AI to Beat the 1990s Arcade Game Double Dragon | Christopher J Nuland | 35m |
Built an agent that uses the PyBoy emulator and direct memory reads (health, X/Y, lives) with reinforcement learning, deployed across Kubernetes + KubeRay and… | ||
| Fighting logs with Log Detective | Jiri Podivin, Tomáš Tomeček | 35m |
A system that diagnoses RPM build failures by combining template mining (using Drain3) with LLMs (local Llama.cpp or hosted models like mistral-0.2), accepting… | ||
| Keylime: Pushing the Boundaries of Remote Attestation on the Edge | Anderson Toshiyuki Sasaki | 37m |
Keylime moves from a pull-based verifier-driven model to a push-based agent-driven model, replacing per-node HTTP servers and 2s polling with agents that… | ||
| Beware of the kernel RTNL mutex | Toke Høiland-Jørgensen | 31m |
The global RTNL mutex serializes all kernel networking control-plane changes and can turn routine queries into multi-second stalls — reproducible case shows… | ||
| Breaking Barriers: Cross-Distro CI/CD with Packit and OBS | Dan Čermák, František Lachman | 31m |
Packit now creates a source RPM from upstream and triggers OBS builds via XML API to run openSUSE builds and image/container outputs; a Google Summer of Code… | ||
| Implementing Post Quantum algorithms in PKCS #11 | Bob Relyea | 27m |
PKCS #11 3.2 adds explicit encapsulate/decapsulate and verify signature calls, mechanism IDs for MLKM, MLDDSA, SLDSA and XMSS, and a per-key parameter set plus… | ||
| Passwordless Auth: a JSON-Based Approach for modern authentication w/ SSSD & GNOME | Iker Pedrosa | 32m |
A JSON-based PAM conversation is implemented so SSSD sends a structured list of available mechanisms and GDM replies with the selected mechanism plus… | ||
| All you wanted to know about sw vulnerabilities…but were too busy to look into | Dejan Bosanac | 36m |
CVE history dates to CVE started 1999 and records carry IDs, descriptions and CVSS scores (example: 3.1 = 8.1, 4.0 base = 7.7, base+threat = 5.2)… | ||
| Taming the Wild West of ML: Practical Model Signing with Sigstore on Kaggle | Mihai Maruseac | 27m |
Train a simple TensorFlow/Keras digit model, upload to a hub, show an attacker tampering with a saved checkpoint and causing a malicious or crashing model… | ||
| Designing LLM Applications for Massive Datasets | Marina Volkova | 33m |
Claims a production pipeline that handles 200M+ records by treating the LLM as one modular component, not a monolith, using distributed preprocessing for… | ||
| AI is for the birds | Greg Blomquist | 35m |
A DIY system uses MobileNetV2 with transfer learning to classify squirrel vs not-squirrel, trained on about 140 images drawn from ImageNet, yielding roughly… | ||
| Generative AI Model Data Pre-Training on Kubernetes: A Use Case Study | Anish Asthana | 22m |
Demonstrates a production pipeline using Kubeflow Pipelines (KFP), Ray via KubeRay, and the open Data Prep Kit (DPK) to preprocess PetaByte-scale LLM data with… | ||
| Obituary - Lessons learned with a career in software? | Daniel Walsh | 39m |
Career arc traces concrete, reproducible work: upstreaming SELinux into the Linux kernel (NSA-sponsored, ~2002), inventing MCS mount-namespace isolation used… | ||
| Qubes OS: Security Through Isolation | Lukáš Czerner | 32m |
Qubes OS isolates tasks into separate VMs (called qubes) built on the Xen hypervisor, enforcing hardware memory and device isolation, GUI per-VM framebuffers… | ||
| Reproducible Builds in Fedora | Jelle van der Waa, Davide Cavalca, Zbigniew Jędrzejewski-Szmek | 34m |
Fedora reports reproducible builds for about 90% of packages after a year of fixes and a post‑processing tool called adeterminism that strips timestamps and… | ||
| Bootable Containers in Action: Hands on with Deploying AI Workloads | Cedric Clyburn, Carol Chen | 34m |
Bootable containers package a full OS plus kernel and are already donated to the CNCF; the demo builds a CentOS Stream 9 bootable image (~6–8 GB) with a… | ||
| The real dangers of AI | Miroslav Suchý | 35m |
Claims that the real dangers are mundane rather than apocalyptic: chatbots give harmful medical and legal advice and hallucinate laws, call‑center bots… | ||
| Taranis AI: Pioneering AI-Driven OSINT | Benjamin Akhras | 35m |
Taranis AI is a fully open-source OSINT platform that layers ML on the Taranis-NG/Taranis3 workflow to cut analyst bottlenecks. It uses named entity… | ||
| From InstructLab and Podman AI Lab to OpenShift AI: Simplifying LLM workflows | Alexon Ferreira de Oliveira | 35m |
A complete local-to-cluster workflow showing how InstructLab fine-tunes Granite-based models (producing a DavcomCZ V2), how Podman AI Lab runs that model in a… | ||
| Get Up and Running with Llamastack to Create AI Applications! | Urvashi Mohnani, Sally Ann O'Malley | 32m |
LlamaStack provides a unified API layer that connects model servers to apps; the demo runs llama 3 8B instruct (~5GB) served by Ramalama serve → Podman… | ||
| Implementing AI-Driven Administrative Access Auto-Approval for Database Operations | Pavel Táborský | 25m |
An AI-driven self-service system auto-approves temporary sysadmin access to MS SQL Servers, replacing a manual process that handled hundreds of requests per… | ||
| PagedAttention: Revolutionizing LLM Inference with Efficient Memory Management | Rahul Belokar, Sagar Jalindar | 28m |
PagedAttention implements OS-style paging inside vLLM to split KV caches into 16–32 token pages, allocates pages on demand from a pool, tracks tokens with an… | ||
| Simplify security compliance with bootable containers | Jan Honza Černý, Matus Marhefka | 37m |
Claim is that building hardened OS images inside standard container workflows produces systems that are compliant from first boot. The demo uses podman… | ||
| Image Mode Support in Testing Farm | Jan Havlín, Miroslav Vadkerti | 35m |
Image mode testing for RHEL/Fedora/CentOS Stream runs in Testing Farm using tmt and bootable container files that are converted to AMIs; to avoid a 20+ minute… | ||
| Building a composable IPsec implementation with Rust | Daiki Ueno | 26m |
A modular IKE implementation in Rust is presented as a library that composes at build time and embeds into apps, using a state-typed design to restrict… | ||
| Extending clusters to the edge and far edge with bootable containers | Clodagh Walsh | 24m |
Combines virtual kubelet and bootc to run native workloads on resource-constrained edge devices without a kubelet or container engine, using an edge agent plus… | ||
| Linux-PAM demystified | Dmitry Levin | 36m |
Explains that PAM is a dynamic library framework with per-service files in /etc/pam.d that splits work into authentication, account, session, password stages… | ||
| Understanding programmable system call security with Secomp-eBPF in Linux. | Kiran Kashinath Belle, Ravina R. Jain | 28m |
Demonstrates using eBPF + seccomp to compile and load BPF filters via prctl, observing that Linux exposes ~400 system calls and showing a working demo that… | ||
| PQC in OpenSSL Library | Tomas Vavra | 32m |
OpenSSL 3.5 (released 8 April) adds NIST-aligned post‑quantum primitives and integration: FIPS 203/204/205 support, ML‑KEM default key share for TLS‑1.3… | ||
| Agentic Incident Response | Birol Yildiz | 35m |
An AI agent automatically triages alerts, queries Grafana, Loki and Prometheus, checks recent deployments and the code repo, and produces a data-backed root… | ||
| Zap the Flakes! Leveraging AI to Combat Flaky Tests with CANNIER | Daniel Hiller | 34m |
Flaky end-to-end tests are flagged by a model that predicts flakiness from code and runtime metrics, so CI reruns target only suspicious tests instead of… | ||
| RamaLama: Running AI Models in Containers. | Daniel Walsh | 35m |
RamaLama is a developer tool that containerizes and runs local AI models: it wraps Podman/Docker, auto-detects GPUs and pulls GPU‑optimized OCI images (CUDA… | ||
| Agile Déjà Vu – Why Do We Keep Failing at Transformations? | Robert Piestansky | 36m |
Argues that most transformations fail because organisations swap values and principles for checklists and add meetings that create administrative overhead… | ||
| Event Driven Frontends: What, Why and How | Matthew Cox | 31m |
Brings raw business events from an append-only event store into the browser, building client-side state from daily snapshots plus incremental logs so initial… | ||
| Understanding & explaining Use-After-Free vulnerability, a critical security flaw | Maurizio Barbaro | 36m |
Explains what a Use‑After‑Free does in practice and shows two live demos: one leaks another user’s sensitive input from heap memory, the other chains a UAF in… | ||
| Quarkus Security for Spring developers | Michal Vavřík | 35m |
Shows how to run a Quarkus app secured with OpenID Connect using Quarkus OIDC and Quarkus REST, with Dev Services for OIDC starting a Keycloak or lightweight… | ||
| Shifting Performance Engineering Left | José Castillo Lema, Raul Sevilla | 36m |
Red Hat shifts performance testing into developers’ CI by embedding a Kubernetes-scale orchestration tool called Cubener/cubeer (create/delete/patch/read jobs… | ||
| Learn how to review PRs like an expert | Jan Rodák, Paul Holzinger, Matthew Heon, Neil Smith, Miloslav Trmač | 35m |
Podman reviewers handle an average of 200 PRs/month and focus on concrete signals: prioritize clear titles to triage, reject or request more eyes if a change… | ||
| Human-Like Behavior in Autonomous Systems | Dávid Halász | 33m |
Claims a concrete architecture that injects predictive digital twin models into vehicle-to-vehicle interaction, computes a blended trust score (0–100%) from… | ||
| Auto-instrumentation for GPU performance using eBPF | Marc Tudurí, Dominik Süß | 29m |
Prototype uses eBPF probes on CUDA libcalls to capture kernel launches, host↔device memory copies and allocations at the CPU side, then exposes those events as… | ||
| systemd @ Meta: From upstream to production | Daan De Meyer | 38m |
Meta runs systemd everywhere: bare metal, containers and VMs, currently on CentOS Stream 9 moving to 10 and shipping systemd 257 (skipping 256). Development is… | ||
| The Konflux Chronicles: Productizing Observability the Hard Way | Daniel Mellado, Mario Fernandez | 28m |
Productized the Observability Operator on Konflux (Kubernetes-native) using Tekton pipelines, producing snapshots, a release bundle/FBC and images that land in… | ||
| Batch Job / Queue Processing Without a Message Broker | Jan CIzmar | 31m |
Tolgee replaces external brokers by queuing jobs in PostgreSQL and using row locks to avoid double-processing, running workers inside the application… | ||
| From Code to Production in Minutes: Unleash SPAship to Elevate Developer Experience | Nikhita More, Soumyadip Chowdhury | 32m |
Open-source SPAship claims 72,000 deployments with an average deploy time of 6.45 seconds and demos showing a production deploy in ~10s; it provides a web… | ||
| Diagram as Code - Decoding Architectural Diagrams | Navinya Shende, Tarique Aman Aziz | 34m |
Argues that moving from static PNGs to code-driven models fixes stale, unversioned diagrams that often sit unchanged for years and frustrate teams; shows… | ||
| More privacy, better social welfare: using quantum resources for daily problems | Mário Fernandes | 23m |
Paper proves an inclusion order of four solution sets: classical no-correlation ⊂ classical correlated ⊂ direct quantum access ⊂ mediated access via cloud, and… | ||
| AI-infused command-line applications | Martin Stefanko | 33m |
Builds a Java CLI that sends prompts to OpenAI via LangChain4j, uses Quarkus Dev mode for hot reload and build-time code generation, and packages to a GraalVM… | ||
| Seven years with microservices: a critical review | Petr Kozelek | 35m |
Company runs about 150+ microservices (approaching 200) across ~15 teams on Azure + Kubernetes, with API gateway and Kafka for integration. Teams split into… | ||
| License to Observe - Why observability solutions need agents | Dominik Süß | 29m |
Agents sit between apps and storage to translate protocols (OTLP, Prometheus, syslog), enrich and relabel data, do sampling and turn logs into metrics so apps… | ||
| Five podman features you didn’t know about or that you should consider start using | Nicola Sella | 35m |
Five concrete Podman features are demonstrated with recorded demos and scripts: Quadlets for declarative systemd units that generate user units, Auto-Update… | ||
| The Future of Java is Today | Jan Lahoda | 34m |
Java now ships concrete, demoed features: the launcher runs multiple source roots and the new compact source files remove the boilerplate main class while… | ||
| Porting CentOS Stream to Apple Silicon Macs | Davide Cavalca, Neal Gompa | 30m |
Claims a working CentOS Stream build running on Apple Silicon by reusing Fedora Asahi Remix and Asahi Linux work and shipping a CentOS-tailored kernel… | ||
| How to do one-on-one meetings the right way | Serhii Turivnyi | 34m |
Argues that regular one-on-ones raise employee happiness and long-term development and must not be used for status updates; recommends no status updates, a… | ||
| 🌈 Chromatic 🎶 - Music, Math, Colour, and Free Software | Allison Karlitskaya | 32m |
Chromatic maps the 12-note chromatic scale to rainbow stickers, generates printable color-coded sheet music from a tiny Python generator that emits static HTML… | ||
| Decentralize everything! (or at least a part of your dev tools stack) | Vaclav Pavlin | 36m |
Demo creates a React app, publishes it to Radicle and the repo immediately syncs to nine other nodes so the code is recoverable even if a central service… | ||
| From Code to Clarity: Collaboration with Devels when Writing Product Documentation | Gerry Forde, Judith Magak | 35m |
Coauthoring docs from feature planning onward produces technically accurate, user-focused content: writers join planning calls, capture content journey mapping… | ||
| Optimizing Performance in Large-Scale React & Node.js Applications | Tejas Gavankar, Hrithik Gavankar | 34m |
Claims that 47% of users expect pages under 2s and a 1s delay cuts conversions ~7%, then shows concrete fixes and measured wins: uses Chrome DevTools, Web… | ||
| Writing controllers in rust | Danil Grigorev | 36m |
Compares Go tooling (controller-runtime, kubebuilder) with a Rust stack centered on Qass and async runtimes, showing concrete tradeoffs: uses Qass + tokio +… | ||
| AI-Driven Smart Farming Optimisation in the Green.Dat.AI Data Space | Ben Capper | 27m |
Horizon Europe Green.Dat.AI builds a working pilot that feeds satellite, drone and in‑situ sensors into the GEMMA Fusion Suite and the MyFarm platform to… | ||
| Encrypted DNS from Boot to Runtime: A Zero Trust Milestone in RHEL | Pavel Březina, Antonio Torres | 36m |
RHEL adds system-wide encrypted DNS that works during installation, early boot and runtime by changing more than 10 components (Anaconda, dracut, OpenSSL… | ||
| UKIs and composefs support for Bootable Containers | Timothée Ravier | 37m |
Using fs-verity plus a UKI hash, the UKI effectively signs and verifies every byte of a read‑only root tree via a Merkle hash chain; composefs separates file… | ||
| From Debugging to Prevention: Smarter Linux Diagnostics with Automation | Ayushi Tiwari, Akshay Ghodake | 20m |
Demonstrates a working pipeline that automates collection with sos-style tar archives, runs run_analysis.py (Insights‑Core rules) on a cron schedule, logs… | ||
| Securing Secrets at Scale: Integrating Ansible Automation with Conjur | James Freeman | 35m |
Concrete demo of Ansible + Conjur Open Source shows a simple home‑lab stack (Docker Conjur app, Postgres backend, TLS proxy) and a working flow: create YAML… | ||
| The Essential Pillars of Automation Testing for Success | Sagar Jitendra Mahendrakar | 21m |
Explains concrete fixes: stop automating everything and only script stable, repetitive cases; adopt page object model and test-data generation to prevent… | ||
| Service Mesh: The Missing Link in Developer Workflow Efficiency | Dionysis Tsoumas, Theofanis Pispirigkos | 36m |
Alfred treats each developer environment as a canary release using linkerd HTTPRoute header routing so only the target service version receives dev traffic… | ||
| Avocado testing framework and how can make your testing easier | Jan Richter, Harvey Lynden | 29m |
Avocado is a Python-based test runner that discovers and executes tests in any language, produces per-test logs and multiple result formats, and runs tests in… | ||
| Exploring new and upcoming Web Components features | Benny Powers | 22m |
ElementInternals lets custom elements call attachInternals to expose form behavior, set implicit ARIA defaults and participate in form submission via… | ||
| Integrate and Conquer: The Power of a Unified Backlog | Martina Slabejova | 28m |
Claim: a single prioritized backlog cuts duplicated work and clarifies priorities across merged teams of 220 people. Practical moves: pick one tool (Jira)… | ||
| Embracing Change: Navigating transformative shifts gracefully | Sushma Gajanur Shivakumar, Veronika Kabatova | 33m |
Claims a practical GRACE framework (Guardrails, Reframe, Adapt, Communicate, Empower) and shows it applied to a Red Hat / RHEL pipeline migration that provoked… | ||
| Engineering your own career growth | Pawel Pawlowski | 37m |
Defines career growth as a progression of skills and scope while saying promotion is an event that often reflects increased responsibilities and pay… | ||
| The Documentation Dream: One Team, No Silos, Shared Goal | Dominika Borges, Aneta Šteflová Petrová | 39m |
Teams adopt docs-driven testing and docs-as-code workflows at Red Hat projects like Foreman and Infinispan, with writers in sprint planning, QE validating a… | ||
| A Feasibility of On-Device ML for Adaptive User Interfaces in Frontend Development | Sahil Budhwar | 31m |
Claims feasibility of real-time, client-side personalization using small models (trained ~50 epochs on ~10–12 synthetic sessions) that load in under a megabyte… | ||
| Easily expand your on-premises OpenShift cluster | Andrea Fasano | 33m |
New workflow uses the oc CLI to bake a join artifact: oc adm node-image create introspects the cluster and emits an ISO (or PXE artifacts) — currently requires… | ||
| Effortless, standardised homelab observability with eBPF | Goutham Veeramachaneni | 31m |
Deploying eBPF-powered Beyla plus OpenTelemetry and Prometheus generates unified HTTP, SQL and trace telemetry across languages without changing app code, but… | ||
| Zoomers at Work: Swipe Right for Success | Nancy Jain, Anuj Singla | 36m |
Gen Z (born 1997–2012) grows up digital: ~90% mobile ownership, attention spans of 3–5 seconds, and Bank of America projects 33 trillion by 2030 in their… | ||
| Finding the Rhythm: Agile and Open Source Development in Harmony | Sabine Vogel, Eric Hadley | 33m |
Argues Scrum can coexist with open source by treating the community as an external dependency and controlling only what the team can finish: break large… | ||
| Kanban, our way | Laura Barcziová, František Lachman | 35m |
Team migrates from Scrum to a customized Kanban on a GitHub board with weekly releases, triage and labels for kind/area/impact/gain, soft WIP limits, and a… | ||
| Breaking Changes Without Breaking Users: Lessons from Packit 1.0 | Maja Massarini | 22m |
Packit 1.0.0 removes long-deprecated config keys (the last one, "sincet files", was deprecated in 2022) and that change risks CI breakage for downstream… | ||
| Navigating Open Source Contributions with a Chronic Illness: A Personal Journey | Christopher J Nuland | 36m |
A personal account describes a hyperPOTS diagnosis after COVID, about 30 doctor visits, and recurring gray-outs that force lifestyle changes; contributions… | ||
| Design in the times of AI | Maria Leonova | 34m |
A 130-person UXD team reports using 130-person UXD team workflows plus tools like Gemini and ChatGPT (and quick front-end helpers like Lovable) to cut projects… | ||
| Things I Wish I Knew When I Became a Manager | Micah Abbott, Greg Blomquist | 35m |
Concrete mistakes and fixes for new managers across three areas: managing teams, managing individuals, and managing yourself. Expect recurring pain from… | ||
| 🔥 Generative UI: The Future of Frontend (And Why You Should Care) | Daniel Ostrovsky | 38m |
Argues that real-time generative UI works by using LLMs only for intent classification while keeping private data inside micro‑frontends, shows a… | ||
| Automated Java Upgrades: From Pain to Productivity in 30 Minutes | Ludwig Steindl | 28m |
Shows a practical pipeline that upgrades Java apps end-to-end: Renovate opens PRs (9 in the Quarkus demo), CI (GitHub Actions) runs builds, OpenRewrite… | ||
| Providing secure Ingress into a multi-tenanted cluster using GatewayAPI | Thameez Bodhanya | 27m |
Shows a Kubernetes-native pattern that wires cert-manager, external-dns, and Kong Ingress controller with GatewayAPI so HTTP(S) and gRPC(S) routes are created… | ||
| From PIDs to Pods: the life cycle of an eBPF-autoinstrumented Kubernetes app | Marc Tudurí | 22m |
eBPF-based Beyla auto-attaches at the kernel level to produce HTTP request duration and traces enriched with path and method without touching app code, mapping… | ||
| From spreadsheet scheduling to Kubernetes: building an on-premise ML platform | Marek Molisch, Petr Chmelař | 33m |
On-prem Kubernetes replaces a spreadsheet and raises GPU utilization from ~50% to ~85% (sometimes >90%) by adding a fair-queuing plugin (Q scheduler plugin)… | ||
| GPT 4 IaC usecases IRL | Lev Goncharov | 25m |
Experiments use GitHub Copilot and local prompts against a 120‑file IaC repo (Ansible, Terraform, Python) and produce mixed results: Ansible lookup plugin… | ||
| Building Tech Communities: Lessons from a Decade of Experience | Jan Bleha | 15m |
Gives ten concrete rules: build bottom-up systems (call‑for‑papers, barcamp voting), design many-to-many formats (volunteer-run tracks, mastermind sessions)… | ||
| Unlocking Storage Efficiency: Diagnosing & Optimizing Performance in Scaling Infra | Deep Mistry | 27m |
Work on OpenShift’s container image storage diagnoses S3 multipart uploads that silently create incomplete blobs; about 3,000 flaky uploads with five retries… | ||
| Tog's Paradox: Why Requirements Always Spiral Out of Control | Krzysztof Przekwas | 36m |
Argues that complexity just moves between user and system using Tesler's Law and Tog's Paradox, shows that removing friction raises user expectations, and… | ||
| Strength Training for RHEL Lightspeed: Building Agility, One Rep at a Time | Ylenia Marasco | 32m |
RHEL Lightspeed moves from Kanban to Scrum by phasing in practices: planning, refinement, estimation, then retros and demos, not all at once. Meetings are… | ||
| Understanding AI job displacement through Cynefin framework | Deepak Koul | 30m |
Introduces a practical method: map your tasks to domains (Clear, Complicated, Complex, Chaotic) and score a vulnerability scale; examples classify adding a… | ||
| Simplifying container orchestration with Ansible and Podman | Fabio Alessandro Locati | 29m |
Argues that for small-scale deployments Kubernetes is overkill and shows a concrete alternative: Ansible plus Podman using the container.podman collection (29… | ||
| Kubernetes Multitenancy in Image Pulling | Standa Láznička | 28m |
Kubernetes adds an alpha kubelet feature that records image pull intent and final image pulled records on-disk, storing CRI image refs and credential hashes so… | ||
| From Legacy to Cloud Native: Transforming Applications with Konveyor AI | Marek Aufart | 27m |
Konveyor ships Kai, a VS Code extension that uses RAG with user-supplied LLMs to generate and iterate actual code patches, re-running the analyzer and… | ||
| Why OCP networking performances on VMs are suboptimal and how to improve them by 5x | Paolo Abeni | 35m |
OCP-on-OpenStack throughput suffers because GSO/GRO don’t survive double UDP encapsulation, forcing kernel segmentation and per-packet forwarding across… | ||
| Practical experiences with OpenStack on OpenShift | Jack Henschel, Sven Kieske | 36m |
Deploys OpenStack 18 control plane inside an OpenShift cluster running on bare metal, using Metal3 + OpenStack bare metal operator, EDPM for data plane… | ||
| Leveraging the Kubernetes Enqueue Scheduling Plugin for Smarter Workload Placement | Alessandro Di Stefano, Prashanth Sundararaman | 35m |
Describes Outrigger as a framework that uses Kubernetes’ scheduling gates via the Enqueue plugin to let controllers asynchronously patch pod specs before… | ||
| OCI Hooks: Enhancing Kubernetes Runtime Management | Igor Bezukh | 29m |
Built a wasp-agent that enables pod swap by installing a postStart hook into CRI-O’s rendered OCI config so virtual machine pods consume swap; it works but… | ||
| Black box side-channel leakage verification using statistical approach | Alicja Kario | 32m |
A practical black‑box verification workflow emerges: run paired randomized blocking experiments, hide test classes from the measurement harness, and use… | ||
| Automatic joining cloud VMs to FreeIPA identity domain | Alexandra Nikandrova, André Boscatto | 35m |
Podengo registers an existing FreeIPA deployment and orchestrates automatic secure enrollment of cloud VMs via a small client, a Podengo backend and the… | ||
| Take Your Tests to the Cloud with Testkube | Tomáš Hradec | 33m |
Testkube is a Kubernetes operator that runs tests as declarative TestWorkflow CRD objects, triggering Playwright, Selenium, JUnit/pytest, Postman… | ||
| Managing Your Laptop with Bootable Containers, Fedora Toolbox, Nix, & Home Manager | Miroslav Vadkerti | 33m |
Nix Toolbox integrates Nix flakes and Home Manager into Fedora Toolbox and Bootable Containers to produce a fully reproducible laptop image built by bluebuild… | ||
| Simplifying KubeVirt: New tools for easier VM management | Felix Matouschek | 30m |
KubeVirt adds concrete, usable features: virtctl now generates cloud-init configurations automatically, injects keys/passwords via the KubeVirt… | ||
| Plug & Play: Modular Networking for Kubernetes Virtualization | Edward Haas, Alona Paz | 33m |
KubeVirt makes VM networking fully pluggable by exposing five integration points (registration via a KubeVirt CR, CNI for pod networking, sidecar services… | ||
| Serverless MicroVMs for Containerized Applications | Nikita Sanjay Patwa, Neeraj Bhatt | 27m |
Shows a working pipeline that boots OCI images as lightweight VMs: uses Firecracker (boot <150 ms, ~5 MB overhead) managed by Ignite via simple commands like… | ||
| Following a packet journey through the networking stack in OpenShift | Antoine Tenart | 35m |
A single-node OpenShift cluster with two pods (HTTP client and server behind a Service) is traced end-to-end using Retis to capture function-level events; the… | ||
| Boxcutter - or what we learnt about managing objects with Server-Side-Apply in K8 | Nico Schieder | 29m |
Server-side-apply is presented as a field-level ownership model that lets multiple actors patch only the keys they care about while the API merges and tracks… | ||
| Beyond CAS: Why the world needs another Kubernetes Cluster Autoscaler | Josephine Pfeiffer | 32m |
Built a IBM Cloud Karpenter provider and benchmarked it against Cluster Autoscaler across EKS and IKS using Terraform, Ansible, kube-burner, Prometheus and… | ||
| Passkeys through FIDO: How to write your own client? | Mario Bodemann | 22m |
Walks through building a FIDO2/WebAuthn client end-to-end: Android app requests publicKeyCredentialCreationOptions from a server, negotiates transport… | ||
| Keeping the linux kernel secure across 10+ RHEL releases | Shreyank Gupta, Iurii Venglovskyi | 35m |
Red Hat maintains fixes across 15+ kernel streams (including real‑time and ELS tails) by running a two‑year‑old kernel sustaining engineering team that… | ||
| AIOps: Automating and Scaling ML and LLM Workloads in Production | Niket Ranjan | 31m |
A complete pipeline builds and runs a private RAG Q&A: Next.js UI calls a FastAPI backend that queries a self-hosted Llama 3.1 8B model with embeddings stored… | ||
| Integration testing for container images via Kind in GitLab CI | Michael Hofmann | 26m |
CKI runs ~30 Python microservices with ~20–30 daily deployments and frequent outages from API, import and entrypoint breaks. The team builds on Kind… | ||
| Testing Farm Konflux CI integration | Evgeny Fedin | 25m |
Shows a concrete, working integration that automates functional tests of container images and RPMs by running a shared Tekton pipeline inside Konflux CI and… | ||
| Declarative Networking in Declarative World, ver. 2025 | Mateusz Kowalski | 35m |
NMState exposes a declarative host-networking CRD and operator that applies NetworkManager configs from Kubernetes, now GA for day‑2 changes and integrated… | ||
| System provisioning and bootc, now and the future | Colin Walters | 35m |
A working workflow replaces or reinstalls a cloud VM with a bootc (bootable) container image and extends to bare metal by pushing OCI images to a registry… | ||
| Play with Kube using Podman | Matthew Heon | 26m |
Podman runs Kubernetes YAML locally: podman kube play applies Pods, Deployments, Volumes, ConfigMaps, Secrets, DaemonSets and Jobs without a cluster, on… | ||
| Kubernetes-in-Kubernetes with Kamaji, KubeVirt, and the Cluster API | Andrei Kvapil | 35m |
Implements Cluster API on bare metal using a single management Kubernetes cluster called Cozy Stack and proves tenant clusters run reliably: Kamaji control… | ||
| Bringing Incremental Backups to Kubernetes with CSI Snapshot Metadata Service | Praveen M, Rakshith R | 30m |
CSI adds a external snapshot metadata sidecar that exposes two new RPCs, GetMetadataAllocated and MetadataDelta, letting backup software request allocated… | ||
| How to stay compliant with and take benefits from the EU CRA (Cyber Resilience Act) | Roman Zhukov | 32m |
EU CRA applies beyond EU sellers to vendors, distributors and even projects that monetize code and creates mandatory duties like conformity assessment and… | ||
| The Art of Troubleshooting | Oliver Gondža | 35m |
Defines troubleshooting as a toolbox of concrete moves: start by checking if it worked before and what changed, use textual diffing between a working and… | ||
| How to Efficiently Manage Logs in Large-Scale Kubernetes Clusters | Aliaksandr Valialkin | 35m |
Compares ElasticSearch, Grafana Loki and VictoriaLogs with concrete benchmarks: claims 10x+ infrastructure savings, shows a real case where VictoriaLogs… | ||
| Building Your First Chatbot with LangChain and IBM's Granite LLM Model | Willian Rampazzo | 15m |
Builds a local chatbot using LangChain plus IBM's Granite LLM, running entirely on a downloaded model and source on GitHub; uses a C++ backend and a LangChain… | ||
| Timezones & Teams - What are the costs of having team spread across many timezones | Clément Verna | 16m |
Distributed teams produce concrete costs: a five‑minute late‑night unblock becomes hours of lost sleep and 5‑minute unblock becomes nightly mental load, code… | ||
| Locking Down PII: Why a Strong Frontend is Your First Defense | Ayushi Midha | 15m |
Claims a 105% increase in cyberattacks since 2020 and shows concrete frontend failures: an unvalidated React anchor enabling XSS, iframe injections from ads… | ||
| 5 1/2 things you can do about imposter syndrome | Nicole Wilker | 13m |
Claims that 80–90% of people experience imposter feelings, defines five types (expert, perfectionist/“120%”, natural genius, soloist, superhero) and gives… | ||
| Identity: Supporting dementia care with Free Software | Sofía Aritz Albors Escobés | 15m |
Identity stores structured life items and lets designated trustees access selected memories under configurable trustee-access contracts; current work shows… | ||
| Refining the Linux kernel CAN stack for RHIVOS | Davide Caratti, Felix Maurer, Filippo Storniolo | 14m |
Plan to add drop-reason on SKB tracepoints and a new CAN socket diag module so ss can list CAN sockets and why frames are dropped; drop-reason patches are in… | ||
| Optimizing Workload Management in a Multi-Cluster Environment: A Case Study | Jakub Guzik | 13m |
OpenShift CI runs over 1,000 GitHub repositories across about 10–12 build clusters, handling roughly half million tests per month by dispatching jobs… | ||
| Up your SSH security game | Allison Karlitskaya | 15m |
OpenSSH has supported FIDO2 tokens since 2020 and major forges (GitHub, Forĝejo/Codeberg) accept them; hardware keys store either resident keys (key material… | ||
| Turning computer programs into physical objects | Martin Kolman | 10m |
Bought an industrial GPU is unbearably loud, so code generates parts, prints kilograms of PLA and swaps the blower for a slow 80 mm fan plus a 3D‑printed… | ||
| How a hit on the head made me into a better leader | Norbert Haklik | 15m |
A bicycle crash on Sept 20 leads to a slow subdural hematoma revealed after a CT scan and drilled two holes to evacuate blood, with symptoms worsening after… | ||
| Using packit and testing farm for CI/CD and automation in an upstream project | Vojtech Trefny | 14m |
Packit runs a build for every merge as daily builds per commit, performs PR builds in temporary COPR repos (kept ~7–14 days), and invokes Fedora Testing Farm… | ||
| Ansible code Bot - The ultimate bot for your git repo | Arnav Bhati | 14m |
Ansible Code Bot scans selected GitHub repositories (public, private, and GitHub Enterprise Cloud) on demand or by schedule, flags ansible-lint issues… | ||
| Streamlining Business Workflows with Kogito: Automation Made Easy | Ramsha Ashraf | 12m |
Kogito compiles BPMN/DMN models into runnable code and generates REST Java APIs so workflows live alongside app code; demo builds a visa-request process with… | ||
| Applying Tekton to ingest data in RAG model | Joao Pedro Poloni Ponce | 14m |
Tekton YAML pipeline pulls two sources (public docs + internal Git repo), cleans out JS/CSS, chunks text into ~500-token pieces with overlap, then runs a… | ||
| Developing a Dyslexia Indicator Using Eye Tracking | Kevin Cogan | 15m |
Uses the Provo Corpus of eye movements (84 native English readers, age 18–25, 63 columns and ~230,000 rows) to extract fixation durations, saccade metrics and… | ||
| Playbooks or Makefiles: choose your trade offs before it is too late | Emmanuel "manue" Kasprzyk | 16m |
Comparison shows concrete tradeoffs: Makefiles for fast, monthly VM image builds run quickly with built-in dependency checks but become cryptic and error-prone… | ||
| Accessibility-First Development: Making Applications Inclusive from Day One | Aakanksha Bhende | 12m |
WHO estimates 1.3 billion people have disabilities, so building accessibility from day one reduces expensive rework, increases reach and prevents lawsuits… | ||
| What Have I Modified in SELinux: a new addition to your SELinux toolbox | Juraj Marcin | 14m |
Tool called WhimSE scans installed packages and the running SELinux policy, downloads package policy versions when needed, and compares modules, module… | ||
| Streamlining Investment Decisions with Python, LangChain, and RamaLama | David Duncan | 15m |
Prototype multi-agent trading pipeline built with Python, LangChain and RamaLama on Fedora aims to emit three daily stock picks but currently fails to fully… | ||
| Challenges and opportunities for RAN containerized workloads on the Edge | Javier Peña | 34m |
Describes why RAN CNFs need kernel and node-level changes: fixed frame latency (4G ~10 ms, 5G ~8–15 microseconds) forces real-time kernel and reserved CPU… | ||
| Processing TBs of Astronomy Data at Scale with the AC3 Horizon Research Project | Ben Capper, Kateryna Romashko | 11m |
AC3 automates end to end processing of telescope data by containerising tools like Starlight and selecting PPXF or Steckmap as appropriate then deploying them… | ||
| The Power of Backports : Business Impact and Automation Strategies | Jigar Raisinghani | 14m |
Backporting currently runs mostly manual and slow: 80% take ~20 days, about 50% take >46 days and some take over a year, leaving old releases exposed… | ||
| CODECO: AI-Driven Orchestration for Multi-Cluster Edge Deployment | Dean kelly, Alka Nixon, José Castillo Lema | 09m |
CODECO is a Kubernetes plug-in that uses AI to pick the best edge cluster for an app, claiming real-time gains in deployment efficiency across a hub plus… | ||
| Hacking a WiFi Lamp | Sebastián Guarino | 15m |
Device is opened, PCB identifies ESP8285 with 1MB flash and 26 MHz crystal, powered at ~70 mA. Serial pins are wired, boot pins toggled with buttons… | ||
| Practical diversity, the Fedora username change as a case study | Michael Scherer | 14m |
Project aims to make username changes possible across Fedora by iteratively breaking and fixing services in a test environment rather than promising abstract… | ||
| Advanced static site generation | Milan Tichavský | 06m |
Uses GitLab CI and Pages with SQLite-based cache plus jinja2 matplotlib and plotly to do incremental scraping, splitting long scrapes into shorter jobs that… | ||
| Open Documentation Academy: Easing into open source | Robert Krátký | 12m |
Project launched about 18 months ago that makes first open source contributions practical by maintaining a curated issue queue of small, well-documented… | ||
| container-snap: Atomic Updates from OCI Images using Podman’s Btrfs Driver | Dan Čermák | 15m |
Prototype plugin container-snap delivers atomic OS updates by creating btrfs subvolumes directly from OCI images and integrating with transactional-update… | ||
| Running Multi-Arch Builds & Tests in OpenShift CI/CD | Nick Moraitis | 15m |
CI/CD infrastructure runs across ~11 OpenShift clusters, executing ~5,000 jobs monthly and ~400,000 image builds; enabling multi-arch builds means… | ||
| Migrating from VMware to Kubernetes | Martin Nečas, Boris Odnopozov | 31m |
Forklift migrates VMs from VMware, RHV, OpenStack and OVA into Kubernetes KubeVirt/OpenShift by combining virt‑conversion (virt‑v2v with NBDKit and a… | ||
| PKCS#11 providers: security modules used as cryptographic backends | Zoltan Fridrich | 15m |
Adds PKCS#11 support into OpenSSL and GnuTLS so HSMs or software tokens plug in as drop‑in crypto backends. GnuTLS loads a module path via its global priority… | ||
| Browser automation/testing with BiDi and minimal dependencies | Martin Pitt | 15m |
Demonstrates that WebDriver BiDi is a W3C draft streaming JSON protocol already implemented in Firefox and Chromium and usable with only the installed browser… | ||
| Mentorship: Practical Advice for Success | Gloria Ciavarrini | 15m |
Mentorship delivers a rapid, measurable boost: expect visible progress in a month or two by treating the mentee role as active work—set short/mid/long-term… | ||
| Exploring the world of Small Language Models | Pranita Ghole | 16m |
Small language models run in the millions to a few billion parameters, can be distilled from larger models using knowledge distillation, shrunk by pruning and… | ||
| An open cloud for researchers, staff and students | Colm Dunphy, Jerry Horgan | 13m |
A liquid-cooled Walton data centre repurposes a decommissioned supercomputer into an experimental cloud that runs bare‑metal RHEL with OpenShift, operated by… | ||
| Multi-Cluster Networking: A Technology-Agnostic Network Operator for K8 Federation | Ryan Jenkins | 09m |
A technology-agnostic Network Operator automates federated Kubernetes networking using a CRD northbound API and a reconcile loop, currently integrating with… | ||
| The Git you don't know | Michał Borkowski | 35m |
Shows concrete Git fixes: step-by-step use of interactive rebase to split and reorder commits and when to use reset vs squash; how shallow clones can be tuned… | ||
| Tips and tricks how to speak at conferences | Štěpán Bechynský | 35m |
Trainer since 1995 condenses hard rules: never lie, always export to PDF as a backup, and test HDMI and resolution because PowerBI needs Full HD or its UI is… | ||
| Using Artifact Hub to gather community pieces to create your own pipeline | Joao Pedro Poloni Ponce | 16m |
Shows how to assemble a Tekton pipeline by pulling ready-made tasks from Artifact Hub instead of writing shell steps: uses a git-clone task v0.5.0 with params… | ||
| Automating Security and Compliance with AI-Based Analyzers | Vaibhav Pagar | 14m |
Claims that open-source tools speed DevSecOps by combining Trivy scans at build time with ThreatMapper sensors and a central console that map attack paths… | ||
| Effortlessly Scale Your Applications with OpenShift Serverless | Willian Rampazzo | 16m |
Deploys an API, a broker and a worker using OpenShift Serverless (Knative) and OpenShift Local (CRC), builds and pushes images to the local registry, and runs… | ||
| Why segmenting your infrastructure into tiers makes your infra design better | Thameez Bodhanya | 15m |
Presents a concrete three‑tier pattern: tier zero VPC and network foundations, tier one shared platform (EKS clusters, observability, AMIs) and tier two… | ||
| Timestamping with opentimestamps | Timothy M. Redaelli | 13m |
Claims that opentimestamps certifies a file’s existence date by embedding a Merkle root in a Bitcoin block so no central CA is needed and signatures can’t be… | ||
| Customising the Contributor Experience: AI Bots, Automation, Interactive Workflows | Aakanksha Bhende | 16m |
Open-source projects cut first-time contributor churn with concrete automation: 70% of first-time contributors don't return is the baseline motivating work… | ||
| A vision for software freedom in 2048 - what are we missing? | Matthias Kirschner | 35m |
FSFE outlines concrete goals and actions: push EU litigation against Apple at the European Court of Justice to force alternative app stores; make all publicly… | ||
| Breathing Life into Feathers: Engineering a Hyper-Realistic Animatronic Raven | Anat Wax | 35m |
Five servos drive coordinated head and body motion with per-servo speed, acceleration and safety bounds, driven from Python on a Raspberry Pi 5 and a Pololu… | ||
| about:Fediverse - An introduction to the decentralised social network | Tobias Diekershoff | 34m |
Fediverse in 2025 is a live, federated social web built on ActivityPub JSON inbox/outbox and discoverable via webfinger handles like email. Around 150… | ||
| Enforcing Device Neutrality in the EU | Lucas Lasota | 35m |
FSFE uses the EU Digital Markets Act to force gatekeepers to permit alternative app stores and free of charge effective interoperability with OS-controlled… | ||
| Commit messages as a long term investment | Faisal Al-Rayes | 15m |
Argues that well‑structured commit messages pay off over years by saving the reverse‑engineering time that otherwise accumulates (example: a personal “git log… | ||
| Concurrency vs Parallelism in Node.js: Understanding the Event Loop & Worker Threads | Rohit Bharmal, Hrithik Gavankar | 13m |
Node can handle thousands of concurrent connections on one thread but stalls on CPU-heavy work, so use non-blocking I/O + event loop for API and real-time… | ||
| Build It Your Way: Modular Pipelines for Bootable Containers | Rishabh Saini | 14m |
Bootable containers become reproducible OS images by writing a Containerfile and using bootc; this work adds a Unified Build API to machine-os-config to plug… | ||
| Embracing NVMe/TCP on the desktop | Tomáš Bžatek | 16m |
Proposal shows a working path to mount NVMe/TCP exports as ordinary desktop block devices using the kernel NVMe target, nvme-cli, libnvme, GVfs and udisks… | ||
| SMC-R protocol in Storage Software | Konstantin Maksimov | 15m |
SMC‑R implements RDMA for TCP sockets on Linux, integrated into SMC tools and the kernel net/smc tree, and is used in IBM Storage Scale on Linux on Z with… | ||
| Weekend Warriors: How your side project can change the tech world | Alessandro Rossi | 15m |
A concrete example: a weekend project becomes a working Telegram bot that solves a messy employee shift matrix and is still in a public repo with issues and… | ||
| Perfect Estimator in Strange New Worlds | Matěj Týč | 13m |
A thought experiment uses a Perfect Estimator and automated factories on a 120-hour iteration to show Fibonacci story points force probabilistic mapping: a 4h… | ||
| Godot Game Engine - how to start? | Luděk Šmíd, Monika Šmídová | 35m |
A duo uses Godot to build a working web-ready mini “duck shooter” during the demo: assets from Kenny are tiled into a 2D scene, collisions use Area2D shapes… | ||
| Regulated and Sovereign : Impact to the Open Source Developer | Karanbir Singh | 45m |
Open-source projects must start producing provable evidence: SBOMs and provenance, continuous CVE triage (example given: 16,582 reported, 16,581 not… | ||
| Favourite GDB developers tricks | Alexandra Petlanova Hajkova | 18m |
Claim that GDB is usually faster than printf debugging and demonstrate concrete commands: set a breakpoint at line 10 with B 10 then run and use p/type to… | ||
| nothing matches | ||