Open Source Summit Europe 2023
2023-09-19..2023-09-21
-- online --
[Open Source Summit Europe 2019, Open Source Summit Europe 2022, Open Source Summit Europe 2022: Open AI + Data Forum, Open Source Summit Europe 2023, Open Source Summit Europe 2024, Open Source Summit Europe 2024: Open AI + Data Forum, Open Source Summit Europe 2025]
| title | author | length |
|---|---|---|
| Lightning Talk: How Jenga & Tetris Can Help Run More Containers with Lesser Costs & Downtime | Yash Bhatnager | 11m |
Describes a concrete implementation on Kubernetes that generates pod move and place recommendations using node and pod affinities, simulates migrations… | ||
| Lightning Talk: Checking Your Project for Non-inclusive Language | Nico Rikken | 07m |
Quick practical run down on tooling that finds and fixes non-inclusive terms across code and docs using automation rather than manual review. Demonstrates woke… | ||
| Scaling the Security Researcher to Eliminate OSS Security Vulnerabilities Once and For All | Jonathan Leitschuh | 46m |
Claims an automated pipeline that finds vulnerabilities with CodeQL and applies OpenRewrite transformations to produce 1,596 pull requests (40% merge rate) to… | ||
| OWASP Top 10 Vulnerabilities in Node.js | Marco Ippolito | 32m |
Overview of OWASP Top 10 applied to Node.js with concrete examples: undici 5.x HTTP smuggling CVE that triggers server‑side requests and hides attacker… | ||
| Why Should You Consider JavaScript on WebAssembly? | Angel M De Miguel Meana, Saúl Cabrera | 30m |
JavaScript runs as a compiled WebAssembly module by bundling a JS runtime into Wasm so code interprets without a native engine, demonstrated by Javy compiles… | ||
| Using Machine Learning Models in JavaScript Application | Aileen Villanueva Lecuona | 32m |
Shows how to load, run and retrain models with TensorFlow.js in Node and the browser, including a linear regression demo using arrays X/Y trained for 100… | ||
| OpenJS and Security Updates with Community Panel | Robin Bender Ginn, Joe Sepi, Paloma Andrade de Oliveira, Bethany Griggs, Erick Zhao | 36m |
OpenJS Foundation manages 40 projects with explicit governance (board, Cross Project Council, working groups) and a public calendar; Node’s security work… | ||
| Cross-dimensional Careers: Transitioning from Frontend to Backend | Jennifer Creighton, Wes Todd | 32m |
Two engineers who moved from web JavaScript UI into server-side tooling describe how the transition actually happens: moving via open source projects like… | ||
| Breaking Out of the Open Source Burnout Cycle | Nigel Brown | 34m |
Outlines concrete steps: time block and task block work, create passages to mastery by writing issues that new contributors can complete, run regular project… | ||
| Laying the Foundation on OSS Environmental Sustainability | Max Korbacher | 45m |
Claims a reproducible per-release KPI based on the Green Software Foundation Software Carbon Intensity (SCI) spec, implemented with a simple pipeline that… | ||
| Building an Open Government with Open Code and Open Source | Hans Kristian Flaatten | 54m |
Norway’s welfare agency reorganizes into product teams, hires ~800 developers across 20,000 staff, and adopts an open by default policy in 2018 with three… | ||
| Understanding Observability in Kubernetes | Divine Akachukwu Odazie | 32m |
Explains observability as four concrete signals — metrics logging tracing profiling — and shows tooling and steps: enable metric-server then run kubectl top… | ||
| Beyond the Trend: Authentic Approaches to Fostering Diversity in Open Source | Jessica Tegner | 31m |
Argues that authentic DE&I means practical changes not performative gestures, illustrating a case where an employer funds a two‑day She++ event that pays… | ||
| Lightning Talk: Building Ersilia: Open Source AI Modeling for Infectious Disease Research in the Global South | Dhanshree Arora | 07m |
An open source nonprofit builds GPLv3 tools and a pretrained Ersilia Model Hub of molecular embeddings, activity predictors and chemical space explorers for… | ||
| Diversity in Open Source, an Asian Perspective | Masae Shida | 43m |
Asia contains 60% of the world population yet shows weak leadership presence in many open source projects, with participation concentrated in China and India… | ||
| Istio and Cilium: Pushing the Boundaries of the Possible on Zero-Trust | Lin Sun | 45m |
Shows how Cilium and Istio actually enforce zero‑trust: installs a kind cluster, deploys Cilium 1.14 (with Hubble) and Istio 1.19, applies Cilium network… | ||
| Implementing the OpenSSF Best Practices Badges & Scorecards Into Your Project | CRob, David Wheeler | 39m |
Scorecard automatically rates repos on a scorecard 0–10 scale across ~18 automated checks (branch protection, pinned deps, signed releases, CI/fuzzing… | ||
| Is ChatGPT (and Other AI) the Enemy of Diversity? | Quiana Berry | 50m |
Claims and evidence center on real numbers and real failures: large language models hit 100 million users in two months, GPT‑4 shows an 82% reduction in… | ||
| OSPOs & Transition Paths for Regulated Environments | Ana Jiménez Santamaría, Nico Rikken, Clare Dillon, Remy DeCausemaker, Thomas Steenbergen | 45m |
Panel reports concrete paths: CMS handles ~65M Medicare, 88M Medicaid and 31M healthcare.gov users and maps a four‑level transparency → close collaboration →… | ||
| BoF: Positioning Your Next Open Source or Standard Project for Success | Scott Nicholas | 40m |
Four core factors drive sustainable projects: neutrality, IP clarity, open governance and long‑term funding. Put code in public GitHub/GitLab repos, add… | ||
| Demystifying Platform Engineering with OSS | Gedd Johnson | 34m |
Claims a production-ready internal developer platform can be built from OSS using Kubernetes and GitOps and demonstrates it with Big Bang plus Flux and Helm to… | ||
| When Observability Meets Sustainability: A Real World Experience | Marcelo Amaral, Hua Ye, Fan Meng | 33m |
A full‑stack measurement system collects ~100 metrics across security, reliability, operations and greenness, using sensors on racks and cooling plus… | ||
| Don't Start Over, Start Left: Choosing the Right Open Source... | Martin Hell | 43m |
An experimental pipeline pulls GitHub data into an automated SCA scoring engine, applies a quantile transform to normalize skewed metrics, and composes… | ||
| Jumpstart Your Journey to Cloud Native with SUSE.. | Miguel Pérez Colino, Stacey Miller | 36m |
SUSE Manager migrates its monolith into containers by first shipping a base container image with systemd, running the legacy app as one large container, then… | ||
| Don’t Ask What Community Can Do for You, but... | Bart Farrell, Jorge Turrado | 39m |
A live Argo CD demo shows a working pipeline that uses VS Code, Go, Docker and Kubernetes to deploy images; KEDA moved from donation (Mar 2020) to KEDA… | ||
| Using AI-enabled Edge Cloud Technologies to Strengthen Europe’s... | Idoia Iglesia, Marco Hierro | 12m |
IKERLAN describes deployed systems that keep raw factory data local while building a global model via federated learning with Flower and MLflow, applied to… | ||
| Panel Discussion: Demonstrating OSPO Value | Daniel Izquierdo, Dawn M Foster, Chan Voong, David Hirsch | |
Panelists explain how OSPOs turn goals into measurable claims, using a metrics lake approach and tools like Grimoire Lab, Augur and OSS Compass to collect… | ||
| Understanding the Sec in DevSecOps: Beyond Just Shifting Left | Abubakar Siddiq Ango | 36m |
Argues that security already must be 360 and not just "shift left," insisting on zero trust across developers, CI, build servers, production and suppliers… | ||
| OS-Climate: A Breakthrough Open Data and Open Source Analytics Collaboration for Accelerating Climate-Aligned Finance, Investing, Business and Policy | Matthew Sandoe | 42m |
OS-Climate builds an open stack: a Data Commons plus a Red Hat–implemented data mesh and Data Exchange that federates multiple sources (Trino used for… | ||
| Sylva Project, What Is It, What We Achieved, and Where Are We Going? | Guillaume Nevicato, Philippe Ensarguet | 41m |
Sylva builds an open Telco cloud stack that runs Kubernetes clusters on hypervisors and bare metal, uses Cluster API and GitOps with FluxCD, and already ships… | ||
| Open Source in the Age of Cloud and Microservices | Michael Meskes | 44m |
A 30+ year retrospective that claims open source now "rules the world," tracing Postgres from Berkeley to production, showing business models shifting toward… | ||
| Lightning Talk: MPIWasm: Executing WebAssembly on HPC Systems | Mohak Chadha | 11m |
MPIWasm executes MPI-based Wasm modules on x86_64 and aarch64 HPC nodes by linking to the host MPI library and mapping the module’s 32-bit linear memory to… | ||
| Lightning Talk: What Can be Learned from the Open Source Community in Israel? | Uriel Ofir, Abra rd | 07m |
A LinkedIn post grows into a Discord-run community that targets job seekers and helps dozens of beginners make their first open source contributions, receive… | ||
| How Can Your OSPO Drive Open Source Business Value for Your Organization? | Masae Shida | 40m |
OSPO guidance focuses on concrete decisions: pick a business model (examples given: open core (MongoDB, Elastic, GitLab), services/support (Red Hat)… | ||
| Let's Talk Community - How to Grow, Nurture, Engage, & Measure | Kim McMahon | 19m |
Argues that community growth is tactical not theoretical, showing three real cases: a acquired open project revived by conducting user interviews, producing a… | ||
| Open Source for Energy Access: How Open Innovations Promote Interoperability & Efficiency | Vivien Barnier | 37m |
Energy access needs low‑cost, interoperable tools not repeated proprietary work, and open funding of single solutions scales reuse across the sector. EnAccess… | ||
| Lightning Talk: How Not to Make Open Source - Lessons Learned | Leszek Manicki | 10m |
Wikimedia Deutschland finds that openness stalled by practice not license: 1200+ commits to wikibase in a year yield 75 contributions from 7 non‑Wikimedia… | ||
| ADHD: The Power of Diagnosis | Amanda Brock, Bart Farrell | 48m |
Two people describe getting adult ADHD diagnoses after decades—one at ~52 after an ASD assessment, one at 37—using private assessments, lengthy psychologist… | ||
| Smarter Than Your Average SBOM! | Matt Jarvis, Andrew Martin | 45m |
SBOMs are point-in-time structured manifests (JSON/XML) that are most useful when generated at build time in CI/CD and signed so consumers can revalidate… | ||
| Evolution and Scaling of Feature Store at Uber | Divya Nagar | 33m |
Palette runs 21,000+ features at 25M QPS with 99.999% uptime and shows exactly how that scale is achieved: ingest via Kafka, storage in Hive (offline) and… | ||
| Confidential Containers: Why, How, and Where Are We? | Magnus Kulke | 50m |
CNCF Confidential Containers (CoCo) aims to let unmodified container workloads run inside CPU-backed TEEs by wiring Kubernetes to confidential VMs using Kata… | ||
| Understanding the Legal Context of AI | Van Lindberg | 42m |
Explains how models are trained (architecture + implementation code + weights are just matrices of probabilities) and why that matters legally: training often… | ||
| Mix Kubernetes with Linux Kernel Tracing to Boost the Observability of Your Cluster | Tzvetomir Stoyanov | 30m |
An open source container-tracer project uses the Linux kernel tracing stack (tracepoints, dynamic tracing and perf-style events) to map Kubernetes pods to… | ||
| It's All About Trust: Why Confidential Computing Matters | Mike Bursell | 37m |
Explains why hardware TEEs actually change supply-chain risk: CPUs from Intel/AMD/Arm/NVIDIA provide SGX, TDX, SEV, SNP, CCA, Realms that encrypt memory and… | ||
| Large Block I/O for Linux | Hannes Reinecke | 37m |
Proposes changing Linux memory and page-cache units from 4K pages to folios so block I/O can use larger sector sizes (databases often prefer 16k increments)… | ||
| Keynote: Welcome Back Day 2 | Gabriele Columbro | 04m |
Morning housekeeping lists the Better Together diversity lunch at 1:00 p.m. on floor three, an Ask the Experts session for community leaders, a Lauren Mafel… | ||
| Sponsored Session: MLOps: Why DevOps Solutions Fall Short in the Machine Learning World | Eduardo Bonet | 41m |
Argues that DevOps tooling misses ML because people and artifacts differ: data scientists (not software engineers) prefer Jupyter-first workflows, need… | ||
| Opening the JAR: The Hitchhiker's Guide to JAR File Dependencies | Daniel Haim Breger | 28m |
Walks through exactly where dependencies hide inside JARs: pom.xml entries, the Maven assembly plugin that creates Uber-jars and the Maven Shade plugin that… | ||
| NanoVisor: Modernizing Container Runtime with an Architecture Refactor.. | Jianfeng Tan, Tianyu Zhou | 35m |
NanoVisor refactors gVisor to hit production performance: a rewritten userspace network stack plus device passthrough and C/Rust hot paths drop… | ||
| Poisoned Pickles Make You Ill | Adrian Gonzalez-Martin | 32m |
Pickle files for ML models are trivially weaponisable because they execute arbitrary Python on load; the session shows a concrete exploit that modifies a… | ||
| The Kernel Report | Jonathan Corbet | 41m |
Six mainline kernels ship since October with 2,100 developers in the peak 6.2 cycle and about 200–300 first‑time contributors per release; long‑term 4.14… | ||
| Improving Container Image Registry Availability with Kube Image Keeper | Jérôme Petazzoni | 48m |
kube-image-keeper (kuik) rewrites image refs to localhost:7439 via a mutating webhook, runs a proxy as a daemonset on every node and a controller that creates… | ||
| Adventures in Securing an Open Source Project: From Repo Security Zero to Hero | Kara Olive, Pedro Nacht | 43m |
A deliberately sabotaged repository is scored with OpenSSF Scorecard, lowered to about 1.2/10 (GitHub defaults score ~4.5) and then hardened into the top 1% of… | ||
| FedLess: Secure and Scalable Serverless Federated Learning | Mohak Chadha | 31m |
FedLess is an open‑source, cloud‑agnostic serverless FL framework that runs client functions on AWS Lambda, Google Cloud Functions and Azure Functions, uses… | ||
| Data Access Monitoring Operator (DAMO): User-Space Tool/Python Library for Access-Aware Profiling and Optimization of Your Linux Systems | SeongJae Park | 48m |
DAMON kernel subsystem provides region-based access sampling and adaptive region merging; DAMO is a Python user-space tool and library (PyPI, works on kernels… | ||
| Ketchup, Mustard, and Relish... | Laura Seay, Arnaud J Le Hors, Jay White, Michael Lieberman, Joshua Lock | 40m |
Panel covers concrete outputs: SLSA 1.0 (April, 3 build levels) defines provenance, unforgeable attestations and isolation strength for build platforms; the… | ||
| Reliable Userspace Spinlock | André Almeida | 29m |
Proposes using an extended rseq structure to record a thread’s rseq sched state so userspace can tell if a lock holder is actually running, spin only when the… | ||
| Credential Format Comparison SIG | Torsten Lodderstedt | 09m |
OpenWallet Foundation hosts a Credential Profile Comparison SIG that turned a crowdsourced Google Sheet into a searchable metrics configurator showing… | ||
| Keynote: From Artisans to AI: The Evolution of the Open Source Ecosystem | Ed Parsons | 17m |
Argues that data is the new code and that Google Maps relies on 80% data, warns that ML training needs controlled dataset access to avoid balkanizing the web… | ||
| Keynote: Welcome & Opening Remarks | Gabriele Columbro | 33m |
Conference logistics: sponsor showcase on floor zero after each keynote, expert sessions at 3:10, a Docker‑sponsored reception (badge required), and a women &… | ||
| Keynote: openEuler: Ushering in a Future of Intelligent, Diversified Computing | Xinwei Hu | 16m |
openEuler positions itself as a unified OS platform that runs across x86 arm RISC‑V Loongson hardware and targets cloud edge and embedded use cases, claiming a… | ||
| Keynote: Fireside Chat with Ola Ben Har and Marie Austenaa | Ola Ben Har, Marie Austenaa | 21m |
Open Wallet Foundation launches concrete contributions: Google donates the Android Identity Credential Library (libraries plus sample wallet and verifier apps… | ||
| Keynote: OpenSearch, Open Security: Bringing Transparency to Our Security Processes | Dave Lago | 05m |
OpenSearch publishes a GitHub vulnerability disclosure handbook that defines report-to-disclosure steps, runs an opt-in pre-disclosure partner list to notify… | ||
| Keynote: Thrive with Clean Code | Jonathan Vila | 06m |
Claims that poor code costs more than $2 trillion in the US alone, with $1.5 trillion tied to technical debt and $600 billion for bug fixes, and that teams… | ||
| Keynote: Keeping Open Open | Bryan Che | 07m |
Huawei describes concrete moves: releases a project called Quar as an orchestrator for multi‑sandbox containers (WASM or traditional) and publishes it under… | ||
| Keynote: The Evolving OSPO | Nithya A. Ruff | 16m |
OSPOs face five concrete pressures in 2023: Open-ish licenses that add patent clauses and usage restrictions, the creation of neutral hosts like the Open… | ||
| Keynote: Welcome Back Day 3 | Gabriele Columbro | 26m |
Linux Foundation AI & Data announces board-level new members Intel, IBM, AWS, reports growth from 9 to 63 members and from 1 to 55 hosted projects with 650… | ||
| How Open Source... | Dan Brown, Hilary Carter, Jonas van den Bogaard, Christophe Villemer, Bryce Bartmann | 42m |
LF Energy hosts working code that utilities are already running: OpenSTA forecasting model predicts hours-to-days net load and is replacing legacy forecasting… | ||
| Accelerating Software Defined Vehicles Through Open Source Software | Dan Cauchy | 42m |
Automotive Grade Linux claims a working Unified Code Base used by about 10 manufacturers and 150+ members, shipping biannual releases since 2016 (16 releases… | ||
| PyTorch Foundation: 1 Year of Open Governance | Ibrahim Haddad | 43m |
PyTorch Foundation reports concrete gains after one year: 36% more commits, over 2,000 new unique contributors and 18% growth in new community contributions… | ||
| GMEM: Generalized OS Memory Management for Accelerators | Weixi Zhu | 34m |
GMEM changes Linux MM to let drivers register hardware-specific mmu functions while the OS handles allocation and mapping, providing a unified virtual address… | ||
| Panel Discussion: Open Source... | Jesús Ruiz, Vanessa Santos, Coenraad Van Deventer, Hart Montgomery | 52m |
Europe is building concrete infrastructure: a paneuropean trust network (EBSI) in preproduction with a Spanish national chain (ISB) and a decentralized… | ||
| Fully Verified Open Silicon | Marno van der Maas | 32m |
OpenTitan presents a full verification pipeline: block and chip-level simulation, FPGA bring-up and imminent tape-out, using commercial EDA (Synopsys, Cadence)… | ||
| PostgreSQL Versus MySQL - Isn't a Database Just a Database | Pep Pla | 50m |
Comparison focuses on internals not marketing: MySQL uses pluggable engines (InnoDB default) with a clustered primary index so InnoDB clustered primary-key… | ||
| Open Source as a Product: Strategies for Building and Scaling Successful Open Source.. | David Hirsch | 35m |
Frames open source as a managed product: a three‑year OSPO workflow that insists on business-aligned roadmaps, mirrored GitHub issues into internal ticketing… | ||
| Backup and Recovery Strategies for Linux Systems | Riya Bansal | 29m |
Covers concrete choices and outcomes: uses Bakula with Bakulum GUI to run and estimate full, incremental and differential jobs (shows bytes, ETA and CPU)… | ||
| Let's Build Our Own Virtual RaspberryPi Using QEMU Virtualization | Vipul Gupta | 34m |
Claims that QEMU combined with KVM can run a near‑native Raspberry Pi image and that this is good enough for CI/CD, hardware prototyping, and device testing… | ||
| Overcoming Imposter Syndrome and Gaining Confidence as an Open Source Mentee | Asmit Malakannawar, Deepesha Burse | 32m |
Mentees describe concrete steps that reduced imposter feelings: joining programs like Google Summer of Code, Season of Docs and LFX, refactored documentation… | ||
| Best Practices for AI-Assisted Code Generation Tools (Like CoPilot) | Van Lindberg | 43m |
AI-assisted code generation causes five concrete risks: copyrighted memorized outputs, trade secret leakage if models are fine-tuned on private repos, security… | ||
| Beyond Code: The Importance of Elevating Non-Code Contributions | Abubakar Siddiq Ango, Fatima Sarah Khalid | 35m |
Argues that non-code work drives contributor growth and retention, citing a recent documentation hackathon that brought new volunteers to stale repos and a… | ||
| The Future of JavaScript Package Management | Darcy Clarke | 41m |
JavaScript package management shows concrete failures and concrete fixes: the ecosystem counts 2.5 million packages and ~210 billion downloads per month but… | ||
| Cost Visibility for Infrastructure as Code | Rufaida Mugalli | 29m |
Tool parses Terraform plan and returns a per-resource monthly estimate before apply, using Infracost API plus Terraform and GitHub Actions. A custom container… | ||
| Ten Practical Approaches for Building Inclusive Open Source and InnerSource.. | Gale McCommons, Clare Dillon, Shilla Saebi | 44m |
Ten concrete practices with measurable outcomes: use pronoun check-ins and written inclusivity statements, run meetings across time zones with shared notes and… | ||
| A Guide to Securing GitHub Based on Lessons Learned | Christine Abernathy | 39m |
F5 OSPO standardizes GitHub orgs using legitify and scorecard to audit orgs and repos, running scripts that produce JSON dashboards and badges. A test repo… | ||
| OSPOs and Engineering Effectiveness | Nithya A. Ruff, Mary Wang | |
Two OSPO case studies show concrete moves: Volvo builds an internal open source portal, automates license checks into CI/CD, trains open source champions at… | ||
| Node.js - What's Next - Catalyzing Change in the Node.js Ecosystem | Michael Dawson, Jean Burellier | 39m |
Node 27 ships and Node 20 LTS in weeks prompts upgrades—stop using Node 16, move to 18 or 20. Concrete changes: OpenSSL 3 upgrade may disable old algorithms… | ||
| Including Voices and Perspectives that Often Go Unheard | Stefka Dimitrova | 35m |
Uses Playback theater techniques—playback theater rituals, actor introductions, a conductor role and improvisational "yes and"—plus sociometry to map social… | ||
| Getting Started with BPF Security Observability | Vandana Salve | 53m |
eBPF attaches tiny programs to kernel control paths to capture execsnoop and opensnoop events, trace TCP connects, file opens/reads/writes and scheduler or… | ||
| Alternative Introduction to Quantum Computers | Konrad Gawda | 43m |
A programmer-focused primer that explains qubits as analog sliders, shows X, H and CNOT gates implemented with Qiskit, and demonstrates running circuits on AWS… | ||
| Revolutionising Browser Automation: A Deep Dive into the WebDriver BiDi Project and its Integration with Selenium | Tamsil Amani | 31m |
WebDriver BiDi promises a single, event-driven protocol that merges CDP-style low‑level control with WebDriver’s cross‑browser reach, using WebDriver BiDi over… | ||
| Scaling AI Workloads with Kubernetes: Sharing GPU Resources Across Multiple Containers | Jack Min Ong | 32m |
Kubernetes plus the NVIDIA GPU Operator and device plugin expose GPUs as integer devices so containers can share a card via MIG (up to seven compute slices) or… | ||
| Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall | José Carlos Chávez | 37m |
Argues that Zero Trust doesn’t replace WAFs but relocates them to per-workload policy enforcement, and demonstrates a concrete toolchain: Coraza — an open… | ||
| Deploying Your Own Language Models: A Use Case Demo with Open Source Tools | Shrey Anand, Surya Pathak | 40m |
A domain QA system for ROSA docs is built and demonstrated end-to-end: docs are encoded into 384‑dim embeddings, indexed in Qdrant vector DB, top‑k candidates… | ||
| Enabling VEX and Full SBOM Coverage with Wolfi Based Containers | Adolfo García Veytia | 33m |
Wolfi-based images ship full SBOM coverage (SPDX per package, file-level hashes) and an advisory feed that a new tool called vaccine consumes to emit OpenVEX… | ||
| Security Research with Open Source Software: Vol. Omega | Yesenia Yser | 44m |
Project targets 10,000 critical OSS repos and builds an automated pipeline: a Docker-based Omega analyzer with 20+ scanners that emits a single SARIF, a… | ||
| Identifying and Mitigating Cloud and Container Threats | Pablo Musa | 41m |
Covers build-to-runtime specifics: use minimal base images (example Node image drops from 15 critical/153 high to 1 critical/3 high when slimmed), apply image… | ||
| Your Software Supply Chain is Only as Secure as its Weakest Link | Boris Cipot | 25m |
Argues that open source transitive dependencies and missed patches are the real attack vectors, not cinematic zero-days, and prescribes concrete steps… | ||
| Keynote: State of the Foundation | Jim Zemlin | 32m |
Status update on governance, licensing and AI with concrete numbers and projects: a list of nine commercial relicensings frames the Terraform shift and prompts… | ||
| Using Kaskada to Do Real Time AI | Mick Semb Wever | 41m |
Kaskada is an open source, Rust/Arrow-powered realtime feature engine that claims native time travel for ML, lets you do timeline joins and windowed… | ||
| Keynote: Creating Sustainable Value – Open Source Technology Delivers the Essential.. | Vivek Mahajan | 13m |
Claims a prototype Fujitsu Monaka ARM processor at two nanometers that runs standard protocols, benchmarks competitively, costs about twice comparable chips… | ||
| Cloud-Native MLOps Platform for Python- and ML Engineers | Joan Fontanals Martínez | 35m |
Claims a cloud-native MLOps stack that takes a Python prototype to Kubernetes with minimal rework, centered on DocArray for multimodal documents and embeddings… | ||
| SEAPATH: A LF Energy Project for Critical Infrastructure with an Emphasis on Software Supply Chain Security | Eloi Bail, Mathieu Dupré | 36m |
SEAPATH virtualizes electrical-substation functions, bundles third‑party OSS, and already graduates to Early Adoption with 781% increase in contributors and an… | ||
| A New Data Model for Time Series Data Processing | Jeff Tao | 39m |
Proposes one table per sensor data model with columnar, block-oriented storage that keeps timestamps ordered, stores tags separately, and precomputes block… | ||
| Secure the Linux Kernel with eBPF Linux Security Module | Vandana Salve | 38m |
Shows how LSM hooks become runtime BPF programs so policies can be injected without a kernel module, using libbpf and the bpf(2) syscall, relying on BTF… | ||
| Building Python Binding for the Delta Lake Library in Rust | Florian Valeye | 26m |
Delta-rs is a native Rust reimplementation of the Delta Lake protocol that reads Parquet, converts to zero-copy Arrow columns, runs on Tokio for async, and… | ||
| Digital Forensics with Container Checkpointing | Daniel Simionato, Javier de la Rúa Martínez | 31m |
Container checkpointing captures a forensic snapshot of a running container including process memory, open file descriptors and sockets, and overlay FS diffs… | ||
| Improving the Security of a Large Open Source Project One Step at a Time | Michael Dawson, Rafael Gonzaga | 48m |
Node.js security working group describes concrete changes: OSSF funding pays a dedicated security role and multiplies volunteer effort; a documented threat… | ||
| Y2038 and Utmp/Wtmp on 64bit Systems | Thorsten Kukuk | 41m |
Shows that Y2038 can break pure 64‑bit Linux because glibc uses 32‑bit time_t on some 64‑bit ABIs, affecting utmp/wtmp/lastlog records and tools that parse… | ||
| Tutorial: Getting Started with Serverless WebAssembly and Spin | Mikkel Mørk Hegnhøj | 01h 34m |
Shows how to build, run and deploy a serverless WebAssembly app with Spin and Fermyon tooling, using the CLI sequence spin new, spin build, spin up to create a… | ||
| URUNC: A Unikernel Container Runtime | Georgios Ntoutsos, Anastassios Nanos | 40m |
urunc is a CRI-compatible container runtime that spawns unikernel VMs from OCI images created by bima, treating unikernels as processes and driving hypervisors… | ||
| How to Survive to High Demanding Services | Endika Gandarias | 34m |
AI translation and TTS services run on GPUs in Kubernetes and absorb ~400,000 requests in 12 hours from ~30,000 IPs. Logs use a custom Fluentd sidecar sending… | ||
| X86/Pie: Make Kernel Image's Virtual Address Flexible | Wenlong Hou | 48m |
X86/Pie: Make Kernel Image's Virtual Address Flexible - Wenlong Hou, Ant Group
Code reuse attacks reuse existing code snippets to bypass existing memory… | ||
| Adding Functionality to Make Windows Games Run Faster on Linux | Muhammad Usama Anjum | 40m |
A kernel-backed scanner implements PAGEMAP_SCAN ioctl and extends userfaultfd write-protect async plus unpopulated pte markers to track per-page write state… | ||
| Automated Full System Testing on Hardware with OpenQA | Laurence Urhegyi, Sam Thursfield | 40m |
Describes automating end-to-end embedded Linux tests by combining OpenQA with lava and GitLab CI to flash devices, inject a small qad daemon for screenshots… | ||
| Lessons Learned Migrating an Existing Product to a Multi Tenant Cloud Native Environment | Natalia Angulo, Carlos Sanchez | 39m |
Adobe Experience Manager is reworked into a multi-tenant, Kubernetes-based platform running on >37 clusters across regions and supporting ~17,000 customer… | ||
| Keynote: The Sovereign Tech Fund: Investing in Open Source Infrastructure in the Public Interest | Fiona Krakenbürger, Tara Tarakiyee | 16m |
A publicly funded program from the German ministry invests directly in widely used code and tools and runs a pilot that contracts and pays nine projects… | ||
| More Renewable Energy Into the Power Grid with Open Source | Jonas van den Bogaard, Nico Rikken | 43m |
Alliander runs a pipeline that turns measurements plus weather and market data into probabilistic forecasts (models refresh about every 50 minutes and retrain… | ||
| Illuminating Global Electric Vehicle Battery Supply Chains using Hyperleger Fabric | Coenraad Van Deventer | 31m |
Circulor’s live SaaS platform ties mined ore to finished EV batteries by tracking physical identifiers, ingesting system APIs and a mobile app, hashing key… | ||
| Panel Discussion: Advancing.. | Anna Hermansen, Kate Stewart, Sumer Johal, Chris Xie, Matthew Sandoe | 45m |
Panel shows concrete open source work tied to UN SDGs: the Zephyr RTOS runs trackers and an electrical-grid monitor with 10-year battery life and sits in… | ||
| Energy Proportional Edge Computing Infrastructure | Francesc Guim | 47m |
Proposes an Energy Proportional Edge Computing blueprint that uses time shifting and space shifting plus local power-state control to match compute to… | ||
| How to Lead Open Source Projects and Teams with Better Feedback | Jessica Tegner | 42m |
Explains a concrete feedback recipe: pair clear positive examples with specific negatives and end with praise using the sandwich method; give why something is… | ||
| Panel Discussion: What's the State of Open Source in Europe? | Hilary Carter, Colin Eberhardt, Sachiko Muto, Mirko Boehm | 43m |
LF Research with Scott Logic runs a Europe-focused survey (Apr–Jun) and 15 expert interviews and finds 89% say open source is valuable to their sector’s… | ||
| Measuring the Impact of Community Events | Brian Proffitt, Natalie Pazmiño | 39m |
Red Hat tests measurable tactics: a white paper "How to get involved in an open source project" distributed at SCALE then moved from GitHub (unable to count… | ||
| Lessons Learned from Organizations' Use of Open Source | Javier Perez | 46m |
Annual vendor‑neutral survey of 1,000+ orgs finds 80% increased use of open source last year; top investment areas are development lifecycle tooling… | ||
| Beyond OSPOs - Build a Strategic Open Source Business Unit | Alois Reitbauer | 48m |
Company builds a dedicated open source business unit that mimics commercial product orgs, with 50 people including engineering, product management and… | ||
| Lightweight and Fast WiFi Access in Virtual Machines | Jim Huang, En-Wei Wu | 24m |
A lightweight Wi‑Fi kernel driver called vwifi implements a minimal subset of 802.11 on top of cfg80211, converting 802.11 management frames into Ethernet… | ||
| OpenTofu Project Overview | Kuba Martin, Roni Frantchi | 30m |
OpenTofu is a fully open fork of Terraform handed to the Linux Foundation, positioned as a drop-in replacement compatible with Terraform 1.5.x and the 1.6… | ||
| Servo Web Rendering Engine Reboot | Manuel Rego | 31m |
Servo resumes active maintenance under Linux Foundation Europe with GitHub activity tripling and monthly TSC meetings. Roadmap shows concrete progress: WPT… | ||
| Workshop: Building and Managing an Open Source Program Office | Ibrahim Haddad | 01h 39m |
Concrete playbook for creating and running an OSPO with budgets, staffing and metrics rather than slogans: templates and an 80-slide deck cover policy… | ||
| Will Large-Scale Automated Scanning Stop Malware on OSS Repositories? | Zachary Newman | 41m |
Case study of PyPI shows automated scanning fails as a preventive gate: three scanners (PyPI checks, OSS Detect Backdoor, Bandit) flag the majority of benign… | ||
| Greening the AI Cloud: Validating Power Models for Kubernetes Containers | Marcelo Amaral | 27m |
Machine learning drives up to 40% of data center energy and Kepler framework measures per-process, container, pod and job power using eBPF collectors for low… | ||
| Establishing Trusted and Secure Foundation for Device Management Using Open Source Software | Tushar Khandelwal | 25m |
End-to-end POC implements IETF RATS attestation on a CoreStone1000 reference platform with a secure enclave running Trusted Firmware‑M, producing JWT… | ||
| Building On-Ramps for Non-Code Contributors in Open Source | Natali Vlatko, Celeste Horgan | 42m |
Maintainers spend under 25% of their time coding, so concrete steps matter: publish meeting times and channels (Google Calendar, Slack/Discord), create a short… | ||
| Automated & Observable Deployments with Flux + Keptn | Priyanka Ravi | 38m |
Flux runs continuous GitOps reconciliation (source, kustomize, Helm, image and notification controllers) and is bootstrapped with a single bootstrap command to… | ||
| Sponsored Session: The Search for Transparency and Accountability in the Age of AI: RAI & XAI as Essential Tools | Ezequiel Lanza | 39m |
Summarizes responsible AI as four concrete requirements — fairness, transparency, accountability, privacy — and shows actual tooling: uses IBM AI Fairness 360… | ||
| FORK IT ALL if You Fork It | Daniel Doubrovkine | 44m |
Amazon forks Elasticsearch and Kibana into OpenSearch, copies and renames code across 75+ GitHub repositories, runs IP and security audits, builds CI/CD and an… | ||
| Asymmetries in Open Source: What Can Research Tell Us about Closing the Consumption-contribution Gap to Improve the Sustainability of OSS? | Adrienn Lawson | 32m |
Global survey (Apr–Jun 2023, ~900+ starts; Europe n=307) shows ~90% of organizations use OSS but only 48% contribute code (54% in Europe), creating a clear… | ||
| Map of Science: A UI for Open-Source Science | Alexy Khrabrov, Tim Bonnemann | 37m |
MOSS maps papers, labs, OSS projects, contributors and grants to show which tools actually drive science; a live prototype uses kumu demo plus automated… | ||
| For Want of a Nail: Industry Analyst Lessons Learned on the State of Software Development | Jon Collins | 53m |
GigaOm research uses RFP-style surveys and customer interviews to show specific shifts: vendors add LLMs and Copilot-style features and security tools embed AI… | ||
| AO.Space: An Open Source Solution for Personal Data Ownership | Jianmin Wang | 31m |
AO.space is an open source personal-server stack that gives users account and data control by generating device-owned private keys and publishing a… | ||
| Emulating Devices in Linux Using Greybus Subsystem | Vaishnav Mohandas Achath | 28m |
Greybus subsystem exposes a way to emulate Linux devices so the kernel sees real drivers probing and interacting without hardware: the demo uses a BeagleBoard… | ||
| Puzzlefs - the Next-Generation Container Filesystem | Armand-Ariel Miculas | 39m |
Puzzlefs implements content-defined chunking using FastCDC to deduplicate layers, stores metadata with Cap’n Proto, and provides a FUSE userspace filesystem… | ||
| Expanding the Capabilities of LLMs Through Community Collaboration | Antonio Fernández, Jose García | 37m |
Community open‑source tools show concrete upgrades: embeddings plus an indexer (LLama Index) let a 14,000‑character web page be handled by chunking into 18… | ||
| A Milestone for Open Source Security: How the Brand New ISO 18974 Certification Looks Like and Why the ISO 5230 Supports as a Stepping Stone | Katharina Grauf, Marcel Scholze | 42m |
New ISO 18974 defines a compact, auditable open source security management system built around the software bill of materials (SBoM) and mirrors ISO 5230’s… | ||
| Kubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive Workloads | Moritz Eckert | 40m |
Three practical patterns for confidential computing on Kubernetes: process enclaves via Intel SGX with language runtimes or Gramine, VM-level isolation using… | ||
| Growing the Chain: Trusting Build Provenance from Userspace | Billy Lynch | 33m |
Shows how to link an artifact to CI config and the runner by using Sigstore + OIDC to mint short‑lived keys and sign provenance, and by applying SLSA levels to… | ||
| Panel Discussion: The Impact of the CRA on the Open Source Ecosystem | Cheukting Ho, Mirko Boehm, Greg Kroah Hartman, Laura Seay, Justin Colannino, Phil Robb | 42m |
The Cyber Resilience Act draft makes entities who “make software available” liable, requires 24-hour reporting of active exploits to ENISA, mandates software… | ||
| Ostree for the Uninitiated - What You Need to Get Up and Running with Ostree on Your Next Project | Davis Roman | 46m |
Step‑by‑step recipe to get an ostree-enabled Yocto Raspberry Pi 4 image: build with Yocto meta-updater, create ostree commits (refs/logs/content checksums)… | ||
| Minimalist Best Practices in Kubernetes Operators | Jonathan Berkhahn | 32m |
Recommends shrinking operators by removing generated cruft and following three concrete moves: turn on metrics via controller runtime so Prometheus scrapes… | ||
| IMA Namespaces for Containers | Asier Gutierrez | 29m |
Adds a new IMA namespace so each container gets vpcr virtual PCRs that extend into a per-container cpcr and then into physical TPM PCR 12, with kernel patches… | ||
| BoF: How to Build a Tech Community: The Fine Art of Organizing Meetups | Juan Manuel Perafan | 35m |
Organizing local meetups scales quickly: set a narrow identity, secure a sponsor or venue, and recruit two speakers; practical rules here include 10 hours of… | ||
| The Compiler Plugin Framework to Facilitate Customized Compilation and Development | Yongnian Le, Mingchuan Wu | 38m |
A compiler plug-in framework called pink decouples plugin logic from GCC and LLVM, using MLIR as the neutral IR and gRPC between a plugin server and… | ||
| How SteamOS is Contributing to the Linux Ecosystem | Alberto Garcia | 35m |
SteamOS ships an Arch-based, unlocked OS with a full KDE desktop and a gaming mode that runs Windows games via Proton/Wine adaptations; contributing concrete… | ||
| Overcoming I/O Bottlenecks in LLM Training with Open-Source Distributed Caching | Lu Qiu, Jasmine Wang | 25m |
An open-source distributed caching layer (Alluxio) is presented that sits between object/HDFS storage and training nodes, using hierarchical cache: memory →… | ||
| Strace - Swiss Army Knife to Trace, Analyze, RT Debug | Harald König | 54m |
strace is used to record exact system calls, timestamps and children so you can find missing config files, slow syscalls and reproduce timing-dependent bugs… | ||
| DIY Private Container Registry | Márk Sági-Kazár | 30m |
Evaluates hosted registries but finds customers resist new cloud accounts, so moves to open-source choices and picks Harbor for project scoping and robot… | ||
| Building Knowledge Graphs | Sumit Pal | 44m |
Knowledge graphs require a graph database plus shared ontologies and taxonomies, not just one-off engineering, and work best when domain experts, data… | ||
| Creating Dynamic Kubernetes Resources with Crossplane Functions | Steven Borrelli | 33m |
Crossplane adds Composition Functions as pipelineable steps that run as an OCI image behind a Kubernetes Service, accept a gRPC run function request, and… | ||
| WireGuard and the Future of Cloud Networking | Alex Feiszli | 37m |
WireGuard is a low‑level, kernel‑integrated VPN protocol that claims near‑native latency and modern asymmetric crypto, and is already built into the Linux… | ||
| Tutorial: Linux Memory Management and Containers | Gerlof Langeveld | 01h 36m |
Covers how Linux demand paging, LRU page lists and NUMA zones drive swapping and OOM selection (page size typically 4K, swappiness default 60) and how… | ||
| Building SaaS Services with CHAOSS Technology to Evaluate Community Health and Sustainability | Daniel Izquierdo Cortázar, Yehui Wang | 39m |
CHAOSS provides ~100 metrics and 11 metric models and produces open software like Augur and GrimoireLab; GrimoireLab ships a pipeline with Sorting Hat for… | ||
| Contributor Growth Strategies for OSS Projects | Dawn M Foster | 40m |
Argues that projects stop burning out by using concrete templates and metrics not vague community platitudes and gives CNCF governance and maintainer… | ||
| Insights from the Cloud Native Security Slam | Eddie Knight | 45m |
CNCF’s Security Slam brings 13 projects together to run a subset of OpenSSF Scorecard checks via CLOMonitor and accumulate 11 months of scorecard results… | ||
| Early Splash Screen Using U-Boot | Devarsh Thakkar, Nikhil M Jain | 25m |
Adds a splash screen into U-Boot’s SPL to show the logo about two seconds earlier and to remain visible through Falcon boot where U-Boot proper is skipped… | ||
| Tutorial: Developing Portable eBPF Applications Workshop | Lin Sun | 01h 31m |
Hands-on workshop shows how to build libbpf CO-RE eBPF programs, package them as BumbleBee as OCI images, push to a registry (demo uses localhost:5000) and run… | ||
| Keynote: Contributing to Critical Open Source Projects: Lessons from PostgreSQL | Jonathan S. Katz | 07m |
AWS reports a dramatic increase in contributions to PostgreSQL over the past two years and helps land features in PostgreSQL 16 released a week ago; work… | ||
| The SBOM Way! The Art of Consuming, Enriching, and Managing Inbound.. | Anupam Ghosh, Arun Azhakesan | 42m |
A new package portlet in SW360 models binary packages separately from source components, ingests CycloneDX and SPDX SBOMs, and links releases by VCS to reduce… | ||
| Keynote: Software Security: _You_ are the Calvary | Cristina Bentué | 13m |
Claims that embedding security at design time removes most vulnerabilities and speeds delivery. Teams run four-hour whiteboard sessions where developers… | ||
| Dependency Management: The Cause of—and Solution to—All Supply Chain Problems | Eve Martin-Jones, Josie Anugerah | 38m |
Shows that dependency resolution is NP‑complete, demonstrates resolvers by reimplementing real bugs and even using 9x9 Sudoku as a test case, and delivers… | ||
| Keynote: Do Repeat Yourself - Designing Open-source Libraries for Modern Machine Learning | Patrick von Platen | 16m |
Argues for a purposeful Do Repeat Yourself strategy instead of strict DRY, applied to Hugging Face’s Transformers and Diffusers: each model lives in a single… | ||
| Bringing Service Security to a New Level: An Introduction to SaaSBOMs | Ivana Atanasova, Rose Judge | 36m |
Defines SaaSBOM as a runtime snapshot linking one service to many SBOMs and claims SPDX and CycloneDX are building formats and profiles to express that… | ||
| Keynote: Given the Choices We Have: The Power of Allyship | Fatima Sarah Khalid | 06m |
Claims that allyship is actionable not performative and builds a usable toolkit called an allyship knapsack that includes voice, time, platform, donations and… | ||
| nothing matches | ||