Open Source Summit Europe 2024
2024-09-16..2024-09-18
Vienna, Austria
[Open Source Summit Europe 2019, Open Source Summit Europe 2022, Open Source Summit Europe 2022: Open AI + Data Forum, Open Source Summit Europe 2023, Open Source Summit Europe 2024, Open Source Summit Europe 2024: Open AI + Data Forum, Open Source Summit Europe 2025]
[Open Source Summit + Embedded Linux Conference North America 2019, Open Source Summit India 2026, Open Source Summit India 2025, Open Source Summit Japan + AI_dev 2024, Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025, Open Source Summit North America 2025]
who it's for
open source maintainers, platform engineers, kernel developers, embedded systems engineers, security engineers, site reliability engineers, open source program office leads, product managers
topics
Kubernetes multi-tenant Kafka; Istio mTLS with SPIFFE; Tekton CI/CD and SLSA; multi-arch base images (SLE BCI); Zephyr sensor drivers; eBPF test-case generation; SPDX safety profile; OpenTelemetry tail sampling; RISC-V open standards; virtio-net PCI endpoint vring API; EU digital identity wallet; driverless printing via IPP
| title | author | length |
|---|---|---|
| LFX Mentorship Showcase | Asmit Malakannawar, prateek singh, Deepesha Burse, Akshay Gaikwad | 01h 36m |
Showcase highlights concrete outcomes: a contributor removed Cilium dependency from Tetragon and proves the in‑house controller reduces API load in load tests… | ||
| DevSecOps Transformation at Speed and Scale Using Tekton | Caroline Cameron, Tony Higham | 48m |
Centralized CI/CD platform uses Tekton as the orchestrator with Clair, SonarQube and OWASP ZAP for dependency, SAST and DAST checks, and a Continuous… | ||
| Solving for the Cloud Native Security Paradox | Robert Sirchia | 34m |
SUSE standardizes and ships enterprise base images called SLE BCI across aarch64 x86 ppc64le and s390x, offering three image tiers (micro/minimal/knit)… | ||
| Level Up Your Embedded Testing Game | Christian Schlotter, Tobias Kästner | 44m |
Pipeline converts FRETish requirements (exported JSON) via an open-source CLI to executable Robot Framework suites, then runs them through a custom twister… | ||
| Painless Multi-Tenant Kafka on Kubernetes with Istio at ASML | Thomas Reichel, Dominique Chanet | 47m |
ASML runs a vanilla Kafka cluster on Kubernetes using K operator and leverages Istio mutual TLS with SPIFFE workload IDs to give pods zero‑config auth. Two… | ||
| Learning from Firefighters to Improve Systems Reliability | Kerim Satirli | 43m |
Adapts the Ten Standard Firefighting Orders (codified since 1957, pocket 120 page playbook) to SRE practices and shows concrete practices that reduce operator… | ||
| OpenPrinting - We Make Printing Just Work! | Till Kamppeter | 53m |
OpenPrinting runs the CUPS ecosystem, implements IPP-based PDF as standard printing and adds driverless printing and scanning via IPP/eSCL/WSD; it maintains… | ||
| VirtIo-Net PCIe Function Using Linux PCI Endpoint Framework | Shunsuke Mie | 41m |
Implements a prototype virtio-net PCI function with a Linux PCI Endpoint framework backend and a reusable transport layer that exposes virtqueues via an… | ||
| Keynote: European Digital Identity Wallet: The Open-Source European Stack for Secu... | Paolo De Rosa | 15m |
European Union builds an open-source digital identity stack that provides legal ID/authentication, attribute exchange and payments with open-source specs and… | ||
| Scalable Multi-Node AI Workloads in Multi-Tenant AI Clouds U... | Girish Moodalbail, Leonid Grossman | 39m |
Built a production multi-tenant AI cloud from open source, using Open vSwitch (OVS) + Open Virtual Network (OVN) + OVN-Kubernetes CNI, with hardware TC/RTE… | ||
| Multi-Cloud Global Content Distribution at Cloud Native Speeds | Jiri Kremser, Yury Tsarev | 40m |
KGB claims to replace proprietary GSLB with an open source, Kubernetes-native DNS engine that is production-proven (Absa, Millennium BCP) and listed in CNCF… | ||
| Lightning Talk: With Great Traces Comes Great Costs: How to Reduce That Bill? | Prashansa Kulshrestha | 12m |
Distributed tracing costs explode at scale so the practical path is specific: mixed sampling fails because head and tail decisions across services break traces… | ||
| Lightning Talk: Millisecond Scale-to-Zero and the Quest to Never Pay for Idle Again | Felipe Huici | 10m |
Unikraft-built unikernels boot and sleep in true millisecond semantics: builds from Dockerfiles produce OCI images via a craft CLI, cold-booting standard apps… | ||
| Lightning Talk: Fort Kairos: A New Dawn for Secure Linux in Untrusted Environments | Mauro Morales | 10m |
Kairos implements Trusted Boot for edge Linux using unified kernel images signed with customer keys, Secure Boot, TPM-based measurements and disk encryption… | ||
| What Is an ABI, and Why Should You Care? | Shung-Hsi Yu | 39m |
Explains that ABI is the machine-level contract behind APIs and shows concrete breakages: renaming a shared function causes an undefined symbol, changing a… | ||
| UCSI, TCPM, PD, AltModes: Demystifying USB-C and Its Support in Linux | Dmitry Baryshkov | 43m |
Overview of how Linux actually implements USB‑C: the kernel uses a tcpm state machine to run PD negotiation and alt modes, with platform glue for TCPC/CC… | ||
| Keynote: A Unified Approach for Intelligent Deployments at the Edge | Derek Straka | 06m |
A new Debian derivative called Elixir promises a single binary distribution that runs from constrained devices to core servers, claiming to eliminate distro… | ||
| Keynote: Kernel Developer Roundtable | Alice Ryhl, Anna-Maria Behnsen, Dan Williams, Josef Bacik | 40m |
Rust adoption moves forward but slowly: tooling and buildbot friction delays conversions (one btrfs proof‑of‑concept stalls until build/test support matures)… | ||
| Keynote: Welcome Back | Gabriele Columbro | 02m |
Housekeeping items include an Ask the Experts session at 10:20, F F level 0, a women and non-binary lunch at 12:35 on rooftop F Terrace level 3 (open to… | ||
| How Is Integration Testing in Hybrid Cloud Possible? | Joe Winchester | 47m |
Shows how integration testing across z/OS and cloud works using the open-source Galasa framework: a Java engine with CLI, REST APIs and JUnit hooks that can… | ||
| Container Development Client for Reproducible Artifacts | Harsh Thakur, Kunal Verma | 25m |
A Lima VM template preinstalls Nix and Nix-snapshotter and runs a reproducible build workflow that produces separate dev and runtime OCI images, demonstrating… | ||
| Securing Data-in-Transit with Wireguard for Kubernetes Cluster | Dhiraj Sehgal, Davide Sellitri | 29m |
Combines WireGuard and Calico eBPF to encrypt inter-node Kubernetes traffic, using WireGuard’s kernel interface (about 4,000 lines of code) for high-throughput… | ||
| Linux Storage Stack Explained | Werner Fischer | 45m |
Overview of how Linux turns file operations into block I/Os and where latency or throughput actually changes: VFS plus page cache produce BIOs, block layer and… | ||
| Data Networks Neutrality with OpenConfig: Unveiling Challenges and Practical... | Alfonso Sandoval Rosas | 43m |
OpenConfig provides vendor-neutral YANG models and the demo shows configuring an ACL via NETCONF from Python using ncclient and pang to render trees, plus… | ||
| Open Source at a Crossroads | Michael Meskes | 42m |
Argues that open source is everywhere but monetization matters: services and support remain strong, not killed by cloud; cloud providers favor OSS to avoid… | ||
| What Was Life Like Before Open Source? | Dave Stokes | 43m |
Before open source, companies buy hardware, software, manuals and training from one vendor, source code costs extra, and interoperability is virtually… | ||
| MicroCeph: Simplifying Storage | Peter Sabaini | 19m |
MicroCeph packages a full Ceph cluster as a single snap package that runs from laptop to production; it boots single-node clusters with 3 simulated OSDs via… | ||
| Combining the Best of Two Worlds: From TF-IDF to Llama LLM | William Galindez Arias | 39m |
Practical pipeline built for thousands of product questions: deterministic rules with spaCy entity ruler to extract GitLab versions, URLs and custom “Cloud… | ||
| Lightning Talk: RISC-V and AI: How an Open-Standards ISA Underpins Portability f... | Philipp Tomsich | 09m |
RISC-V claims to make AI/ML kernels portable by standardizing two concrete extension types: an integrated matrix extension that reuses vector state for ~2–4×… | ||
| Panel: Why Open Source AI Matters for Europe | Justin Colannino, Sachiko Muto, Stefano Maffulli | 48m |
Panelists argue that open source AI already drives a massive market — a $8.8 trillion estimate — and that there are ~1 million models on Hugging Face to pick… | ||
| Lightning Talk: Building the AIverse: Standardizing Autonomous AI Agents for a Decent... | Chris Xie | 24m |
Proposes an "AIverse" OS: a standardized, modular agent stack with kernel services (memory, RAG, planning), interoperable protocols and templates that enable… | ||
| Global School Connectivity DataOps Platform | Shilpa Arora | 39m |
An open-source end-to-end DataOps stack now manages location and connectivity records for 2.1 million mapped schools with realtime telemetry from 93k schools… | ||
| Reducing Bias in AI with Open Source | Abubakar Siddiq Ango | 43m |
Claims that large models skew toward Western views because training sets and tokenizers favor English, with one example showing the same sentence takes 7… | ||
| Learning by Example: Highlights from Google Season of Docs | Erin McKean | 35m |
Google Season of Docs gives grants to open source projects to hire technical writers and publishes 73 case studies since 2021 that report concrete outcomes… | ||
| ELinux Wiki BOF | Tim Bird | 39m |
Status: hosted at Oregon State University and running 29,000 pages with roughly 3,000 content pages, the site keeps a 20+ year archive of Embedded Linux slides… | ||
| How to Enable Android (AOSP) on Your Developer Board | Mattijs Korpershoek | 38m |
Ports AOSP onto a BeaglePlay (TI AM62x) by syncing ~1,300 git projects (~200 GB), building Android 14 r60 and backporting a TI kernel tree (about 1,700… | ||
| How to Build Your Own High-Performance Charger with EVerest | Andreas Heinrich, Kai-Uwe Hermann | 35m |
EVerest provides a modular, embedded‑Linux stack that implements ISO 15118-2/20 and DIN 70121 with Plug & Charge and connects to backends via OCPP 2.0.1 / 1.6… | ||
| Embedded Linux in EOD Robots - Lessons Learned | Marcin Bis | 35m |
A decade of fielded EOD robots uses Embedded Linux with Yocto Project and occasional Buildroot or Ubuntu bases, supported by GitLab/Buildbot CI that consumes… | ||
| Keynote: The Security Symphony | Emily Fox | 15m |
Argument centers on access control and verification as the enduring security theme, tracing proof points: governments compiling Multics source and the Orange… | ||
| Keynote: The Community of Intelligence | Bryan Che | 12m |
Claims that open source already creates massive economic value — $8.8 trillion from popular projects — and that that model guides AI governance and datasets… | ||
| Keynote: Improving OSS Security Through Collaboration | Ryan Waite | 15m |
Microsoft describes concrete tools and standards: GitHub Dependabot auto-generates PRs to update vulnerable dependencies; Copacetic (CNCF Sandbox) uses Trivy… | ||
| Keynote: OpenSearch, Innovation and Community | Carl Meadows | 12m |
OpenSearch is a distributed search and analytics suite built on Apache Lucene with an integrated vector database and three core components: OpenSearch core… | ||
| Keynote: How openEuler is Powering Tomorrow's AI/Smart Infrastructure | Xinwei Hu | 10m |
Four-year-old openEuler presents a converged container stack plus openEuler NEXT OS for heterogeneous native computing, claiming out-of-box AI readiness with… | ||
| Keynote: Welcome Back | Gabriele Columbro | 04m |
Morning keynote lists conference logistics and highlights rather than technical content: schedule for Better Together diversity lunch at Vulka 21 (12:35)… | ||
| DAMON Recipes: Ways to Save Memory Using a Linux Kernel Subsystem in the Real World | SeongJae Park | 42m |
DAMON is a kernel access-pattern snapshotter (mainline since v5.15) with a userspace toolchain that monitors virtual/physical ranges and applies actions… | ||
| From Hardware to Linux | Stefan Eichenberger | 39m |
Step‑by‑step guide for taking an AM62 board from blank silicon to a login prompt using DFU over USB to load SPL, a three‑stage DFU chain that ends with U‑Boot… | ||
| AOSP Developers Birds of a Feather | Chris Simmonds | 44m |
A meetup for embedded Android developers focuses on concrete fixes: a community-curated registry of long‑supported dev boards (the devs for Android idea)… | ||
| Lightning Talk: Kustomize Your Operator | Moritz Wanzenböck | 16m |
Using kustomize inside an operator lets the operator ship baseline manifests and accept user-supplied kustomize patches that override any generated workload… | ||
| Challenges and Innovations Towards Spatial Safety in the Linux Kernel | Gustavo A. R. Silva | 47m |
Work since 2019 converts ad hoc trailing arrays into C99 flexible array members, annotates them and hardens memcpy so the kernel uses… | ||
| Real-time Scheduling Fault Simulation | Ben Dooks | 37m |
Evaluates concrete fault-injection techniques: strace and bpftrace (eBPF) inject syscall errors easily, the kernel fault injection framework exists but won’t… | ||
| How Did You Cook It? About Honda’s AOSP-Based IVI (in-Vehicle Infotainment) System | Yuichi Kusakabe | 41m |
Honda builds an in‑house IVI stack based on AOSP Android 11/12 qpr3 and upstream Linux LTS kernels, starts the software effort with started with two people and… | ||
| Linux in Space: Fault Detection, Recovery and Fault-Tolerant System Designs | Lenka Kosková Třísková | 42m |
Linux4Space examines real CubeSat practice: Raspberry Pi and BeagleBone demo mission and a custom 10×10×10 cm Linux computer built from COTS parts. Redundancy… | ||
| Developing on Containers with Dev Containers | Hrittik Roy | 32m |
Cloud workspaces launch from a devcontainer.json spec using the open-source tool DevPod (devpod.sh), which prebuilds and caches images to cut startup time… | ||
| Doing for Sustainability, What Open Source Did for Software | Asim Hussain | 49m |
An open‑source tool called Impact Framework converts easily observed signals (CPU utilization, page views, installs, prompts) into environmental impacts via… | ||
| Towards Useful, Reliable, and Scalable AI Agents | Tomas Dvorak | 39m |
IBM Research releases an open-source Bee stack for building production agents: B agent framework (TypeScript first, Python coming), B code interpreter… | ||
| Virter – How the "Docker for VMs" Can Help You Test the Linux Kernel | Christoph Böhmwalder | 37m |
Virter is a CLI front end for libvirt and cloud‑images that treats VM images like layered qcow2 artifacts so teams can pull, provision and push images to… | ||
| Getting Linux Distros to New Architectures | Bernhard Rosenkränzer | 30m |
Automated bootstrap scripts produce cross toolchains, a minimal chroot and an ordered package build list that resolves circular deps and rebuilds components… | ||
| Mastering Windows Monitoring in Kubernetes Environments | Mansi Kulkarni, Kanika Rana | 36m |
A monitoring stack is built on a Windows Server 2022 node using containerd with HostProcess containers so the Windows exporter runs as a host-process pod… | ||
| How to Make Your Kubernetes Add-Ons Management Painless in Multi Cloud | Eleni Grosdouli, Gianlu | 37m |
Demo shows Velos running in a management cluster that declares per-cluster cluster profiles or namespace profiles to install Helm charts, raw YAML/JSON and… | ||
| Panel Discussion: eBPF: A New Era in Cloud Infrastructure Tools | Liz Rice | 40m |
eBPF runs sandboxed programs inside the kernel to instrument and change behavior for observability, networking and security; real examples: Cilium/Tetragon… | ||
| Demystifying Secure Application Communication with Zero Trust and Istio Without Sidecars | Lin Sun | 37m |
Demonstrates that mutual TLS provides identity, confidentiality and integrity and that Istio ambient mesh can deliver mTLS without sidecars by simply label the… | ||
| Civil Infrastructure Platform: Empowering Sustainable Living with Industrial... | Yoshitake Kobayashi | 42m |
Civil Infrastructure Platform supplies an open-source Industrial Grade Linux base layer with four kernel versions (4.4, 4.19, 5.10, 6.1) and eight variants… | ||
| Practical Application of Verified Boot | Rouven Czerwinski | 42m |
Explains how to cryptographically verify bootloader, kernel and filesystem using concrete tools: signing.bbclass in Yocto, NXP CST for bootloader signing, a… | ||
| Fine-Grained Policies RBAC with OpenFGA | José Carlos Chávez | 33m |
OpenFGA implements relationship‑based access control (ReBAC) with a readable DSL with testable models and language SDKs, storing policies centrally but… | ||
| The Devboards Community for Android | Amit Pundir | 24m |
A curated index of boards that reliably run AOSP with links to kernel source, local manifests and vendor binaries plus build instructions and one or more… | ||
| Embedded Audio Policies Made Easy with WirePlumber | George Kiagiadakis | 42m |
WirePlumber integrates a role-based policy into PipeWire (merged since 0.54, current 0.56) that maps application media.role to hardware via loopbacks and… | ||
| What's Happening with Automotive Grade Linux and How Our Update to Yocto 5.0 Went | Walt Miner, T... | 42m |
Automotive Grade Linux moves its unified codebase onto Yocto 5.0 (scargap) LTS, merging support into Ricefish before the upstream tag and already pulling 5.0.3… | ||
| Why Quantum Safe Encryption Is the Next Y2K and How to Be Prepared | Joe Winchester | 40m |
Claims that quantum computers can break RSA/Diffie‑Hellman within a decade and create a harvest now decrypt later threat, citing Shor’s algorithm (1994) and… | ||
| Application of the Upcoming SPDX Safety Profile | Nicole Pappler | 26m |
Claims that SPDX 3.1 Safety Profile will model traceability across plans, requirements, tests and build artifacts so teams can produce a curated Safety SBOM… | ||
| Sponsored Panel Discussion: Hello Future! Meet Hedera’s Next Generation in Open Source Technology | Samson Goddy, Daniel Fozzati, Milan Wiercx van Rhijn, Daniela Barbosa, Wes Geisenberger, Dr. Leemon Baird | 41m |
Announcement: Hedera hands its entire codebase to Linux Foundation Decentralized Trust, claiming the first public DLT to transfer full source control to an… | ||
| Sponsored Session: Sustaining Git Performance Under Heavy Workloads | Daniele Sassoli | 34m |
GHS applies reinforcement learning (Q‑learning) to decide actions — create bitmap regeneration, repack refs, remove loose objects, or do nothing — and… | ||
| Who Owns This Code? Navigating Code Ownership from Inner to Open Source | Clare Dillon, Tom Sadler | 42m |
Five teams inherit a 10-year TV app codebase that became unrefactorable until ownership is assigned; ownership uses GitHub code-owners + branch protection… | ||
| Panel Discussion: Advancing Innovation Through Open Source: Lessons from the Vertical Industries | Jonas van den Bogaard, Cornelius Schumacher, Wolfgang Gehring, Karel Rietveld | 42m |
Companies in the energy sector say they must triple grid capacity and use shared open source tooling to scale digital controls; governments report a 20‑year… | ||
| Panel Discussion: What's the State of Open Source in Europe? Key Research Findings Revealed! | Mirko Boehm, Anna Hermansen, Adrienn Lawson, Cailean Osborne | 42m |
Survey covers 328 Europe responses and 22 expert interviews, finds 82% back public money, public code, yet only 30% of public organisations have an open‑source… | ||
| Exploration of Compliance Governance Based on Operating Systems | Zhenyu Zheng, Liu Yanfei | 18m |
Open Oiler describes concrete governance work: a custom IT pipeline generates dependency graphs and reverse‑dependency traces for its ~40–48k packages… | ||
| Demystifying CRI - Writing a CRI from Scratch | Filip Nikolic | 34m |
A minimal CRI implementation is built from scratch in Go that implements key RPCs (Version, PullImage, RunPodSandbox, CreateContainer), uses the CRI proto… | ||
| Lightning Talk: Cognitive and SelfAdaptive System for Distributed Tracing | Susobhit Panigrahi | 14m |
Claims a machine‑learned, tail‑based sampler layered over Jaeger/OpenTracing that replaces random 1–5% head sampling with a density‑aware semi‑supervised model… | ||
| Traceability and Automation Examples With Basil | Luigi Pellecchia, Gabriele Paoloni | 01h 01m |
BASIL is an open source quality-management system that links requirements, specs, test cases, test results and bugs to source code and documents, and it stores… | ||
| The Power of Mentorship: Your Path to Open Source Success | Stephanie Taylor | 42m |
Google Summer of Code runs 20 years and claims over 21,000 contributors, about 19,000 mentors and 45 million lines of code produced; eligibility now opens to… | ||
| Demystifying CNI Writing a CNI from Scratch | Filip Nikolic | 32m |
Builds a minimal CNI as an executable placed in /opt/cni/bin and a JSON config in /etc/cni/net.d, implemented as a bash CNI that creates a veth pair, moves one… | ||
| Panel Discussion: How to Chart Your Own Career Path in Open Source | Ildikó Váncsa | 41m |
Concrete tactics and tradeoffs: target widely used stacks like Kubernetes and CNCF projects rather than tiny hobby repos, use GitHub and LinkedIn to show… | ||
| How to Drive Consensus & Transparency in OpenSource Communities | Jill Lovato, Trishan de Lanerolle | 30m |
Practical playbook for running an open source community: define a clear North Star, codify governance with a charter and a lightweight RACI (roles, TSC, voting… | ||
| SBOM Implementation Reality - the SPDX Lite Profile for First Step | Norio Kobota, Takashi Ninjouji | 38m |
Introduces SPDX Lite as a minimal subset of SPDX 3.0 that mandates key license fields and a package-centric minimum to let low‑maturity companies produce… | ||
| Progressive Application Delivery: Istio Ambient Mesh and Argo Rollout in Action | Lin Sun | 43m |
Deploys a real K3s demo that uses Istio Ambient (node agent z tunnel and waypoint proxy) with ArgoCD and Argo Rollouts to shift traffic via Kubernetes Gateway… | ||
| Lightning Talk: Optimizing Kubernetes Multicluster Backup & Restore | Hường Đinh | 07m |
Centralized Velero management uses a single Velero controller on an admin cluster that creates a client for each target using its kubeconfig per target… | ||
| Hidden in Plain Sight: Corner Case Defects | Robert Altnoeder | 34m |
Shows four real defects with concrete causes and fixes: a power‑of‑two ceil/floor pair that loops forever for inputs > 2^62 and returns wrong values for 0… | ||
| Sponsored Session: How We Built GLIDE | Mickey Hoter, Madelyn Olson | 40m |
AWS builds GLIDE as an open source Valkey and Redis OSS 6.2/7.0/7.2 client with a Rust core and thin language wrappers (Python, Java now; Node and Go coming)… | ||
| Panel Discussion: Creating your Community Mentorship Program | Stephanie Taylor, María Cruz | 47m |
Comparative account of running mentorship programs: Google Summer of Code runs 1,200+ participants with ~195–200 organizations and a ~$500 org stipend per… | ||
| Cross Industry Demands and Collaboration Opportunities | Phillip Ahmann, Olivier Charrier | 41m |
Project teams present concrete deliverables: a Docker-based CI that builds images for a Kintex Hardware 102 board and QEMU, a GitLab repo at… | ||
| Panel Discussion: Powering Innovation through Open Source: The OpenSearch Story | Anandhi Bumstead | 31m |
OpenSearch moves under a neutral OpenSearch Software Foundation at the Linux Foundation and companies describe concrete contributions: a corporate push to… | ||
| New Dev, Old Codebase: A Series of Mentorship Stories | Carmen Huidobro | 39m |
Mentorship shows concrete wins: a junior turns a few-hundred-euro support role into a long-term dev relationship and 15 years of career growth, community… | ||
| Why Both Open Source and Africas Future Successes Are Intertwined | Peace Ojemeh, Ruth Ikegah | 45m |
Africa contributes concrete open source growth: GitHub shows 45% year‑over‑year growth in Nigerian contributors and a near‑million contributors trend, 2020 saw… | ||
| Understanding Cultural Differences When Approaching OSS | Daniel Izquierdo Cortázar, Willem Jiang | 48m |
Open source communities compare Western individualist brand-as-currency culture with Chinese ring-based trust networks and claim that contributors face 88… | ||
| What Makes a Good or Bad Open Source Experience | Ildikó Váncsa, Phil Robb | 43m |
Summarizes findings from a podcast of practitioner interviews that tie concrete numbers to problems: the claim that 80% of a product’s codebase is open source… | ||
| SBOM Open Questions | Alexios Zavras | 26m |
SPDX 3 is released and the field still lacks operational answers: which products get SBOMs, when they are generated in CI/CD, and whether SBOMs list only… | ||
| What's Happening in Japan? the Current Situation of SBOM | Ayumi Watanabe | 16m |
Japan shows slow but concrete SBOM adoption: only 27% compliance among 110 exporters to the EU, PoC projects across healthcare, automotive and software… | ||
| Promoting Group Wide Open Source Activity Within Sony | Kazumi Sato, Masayuki Kuwata | 14m |
Analysis of company contributions and tech trends identifies that MaterialX, OpenVDB and OpenUSD matter across game, picture and electronics units and that… | ||
| Testing, a Journey from Testing Kernels to Testing Debian and Yocto | Sudip Mukherjee | 29m |
Kernel and distribution testing pipeline that actually boots and exercises U-Boot, kernel and desktop on real Raspberry Pi 4 hardware using GitLab CI to… | ||
| The Cyber Resilience Act: Navigating Its Impact on Yocto-Based Products | Julien Bernet | 53m |
The Cyber Resilience Act forces Yocto-based products to provide a usable SBOM, five years of vulnerability support, secure update and 72‑hour incident… | ||
| Mesa3D Unveiled: From glDrawArrays to GPU Magic | Christian Gmeiner | 34m |
Shows exactly how a red triangle gets from OpenGL ES 2 calls through EGL into GPU work: vertex data uploaded with glGenBuffers/glBufferData, shaders written in… | ||
| Inspecting and Optimizing Memory Usage in Linux | João Marcos Costa | 40m |
Examines real measurements on an i.MX93 EVK with 2 GB RAM, showing Linux page structs cost ~64 bytes each (about 32 MB overhead) and using /proc/buddyinfo… | ||
| Testing Your Yocto Proj: from Ptest & Testimage to LAVA | Clara Kowalsky, Florian Bezdeka | 39m |
Yocto's testimage runs system tests by booting QEMU or real hardware and produces a testresults.json; ptest packages and runs package test suites at compile… | ||
| Give Me Back My GPIO Persistence Intro to the libgpiod GPIOManager | Bartosz Golaszewski | 23m |
Claim is that kernel persistence is rejected so a user‑space daemon solves it: libgpiod now includes gpio-manager, a two‑year effort merged to master and… | ||
| RISC-V and RISE Project BoF | Drew Fustini | 38m |
RISC-V has a live developer boards program offering Banana Pi boards (eight “L” class cores) and a Deep Computing DC Roma laptop with up to eight cores and ~16… | ||
| Pinctrl and GPIO - Interactions and Footguns | ChenYu Tsai | 19m |
Explains that Linux has two subsystems, pinctrl and GPIO, and demonstrates concrete failure modes: strict GPIO pin muxing is rarely enabled so a userspace… | ||
| Unleashing Collective Genius: Building GenAI Through Open Collaboration | Anni Lai | 40m |
Claim: open source GenAI is here to stay with over one million models and datasets on Hugging Face. A community called Generative AI Commons organizes four… | ||
| Introducing Open Platform for Enterprise AI | Arun Gupta | 38m |
An open platform project under LF AI & Data papers a composable framework of about 20 microservices (embeddings, retriever, ranker, guardrails) that assemble… | ||
| Taming DMA: Tales Wrestling Memory Corruption | Ahmad Fatoum | 39m |
DMA misconfiguration repeatedly turns into subtle memory corruption: a 40‑bit PCIe/SD host limitation truncates addresses and crashes unless the driver sets a… | ||
| How to Generate Test-Cases and Data Mocks for Microservices at Kernel Using eBPF | Neha Gupta, A... | 39m |
Keploy uses an eBPF UProbes/KProbes agent to record kernel-level API and DB calls from live traffic and autoconvert them to runnable test cases and realistic… | ||
| Tutorial: Securing Access to and from Remote Systems with WireGuard and Linux | Alex Feiszli | 01h 14m |
Sets up a minimal VPN using two Linux VMs and WireGuard, generates keypairs, uses WG-quick helper script to create interfaces, and adds iptables NAT rules (or… | ||
| Linux Sandboxing with Landlock | Mickaël Salaün | 32m |
Landlock lets unprivileged processes declare and enforce least‑privilege policies at runtime by creating a ruleset, adding file and resource rules tied to open… | ||
| Rusty Swapping: Rewriting a Zswap Backend in Rust | Vitaly Wool | 39m |
A Zswap backend (zblock) is reimplemented in Rust, registered via kernel stubs, and bench‑marked against the original C zblock, zsm and zbd. Build requires… | ||
| Embedded Linux Security: Dr Jekyll and Mr Hyde | Richard Weinberger | 32m |
Claims that Linux has useful security primitives but misconfiguration and device constraints create real, common failures: choosing the wrong primitives or… | ||
| Eight Years of Farming; Is EveryboArDy Happy? | nGeert Uytterhoeven | 41m |
Eight years of a home board farm grows from 6 boards -> 14 boards on a grounded metal rack, starting with a BeagleBone Black + ACME Cape for 8-channel power… | ||
| Building and Maintaining Binary Distributions with Yocto | Michael Opdenacker | 45m |
Yocto gains concrete binary-distribution features: an read-only PR server and support for an upstream PR chaining model that lets a local feed override… | ||
| Linux Power Management Features, Their Relationships and Interactions | Théo Lebrun | 36m |
Covers system-wide suspend and runtime PM with concrete pitfalls and fixes: suspend callbacks are prepare, suspend, suspend_late, suspend_noirq and misordering… | ||
| The Open Source AI Definition Is (Almost Ready) | Stefano Maffulli, Justin Colannino | 42m |
Open Source Initiative releases a Release Candidate definition after a multi‑year, global co‑design process that tested four example systems (PTI, BLOOM… | ||
| Automated Testing & Board Farming | Rouven Czerwinski, Jan Lübbe | 43m |
Lab infrastructure migrates the coordinator to a gRPC coordinator and adds small Linux test‑controller boards to replace flaky USB hubs, enabling the… | ||
| Visions for the Linux Kernel PWM Subsystem | Uwe KleineKönig | 40m |
Proposes a new PWM framework that replaces sysfs with a char device API that supports atomic reconfiguration, a duty offset waveform abstraction, four kernel… | ||
| BoF: The Yocto Project and OpenEmbedded | Josef Holzmayr, Philip Balister | 39m |
Community forum covering Yocto and OpenEmbedded status, roadmap items and recurring pain points: SPDX 3 support is already implemented and can produce… | ||
| Using Yocto to Debug Embedded Device Crashes | Etienne Cordonnier | 42m |
Yocto supports three practical ways to handle crash symbols: shipping full debug packages (example: core-image ~70 MB grows to ~390 MB with debug packages —… | ||
| Advanced System Profiling Tracing and Trace Analysis with Perfetto | AnnaLena Marx, Stefan Lengfeld | 43m |
Perfetto replaces systrace and runs on Android and Linux; Android devices (Android 9/10+) have Perfetto and Tracebox installed so tracing works out of the box… | ||
| Licensing Support by Build Systems and What Remains To Be Done | Jan Altenberg | 49m |
Build systems (Yocto, ELBE, ISAR) reliably produce images, source archives and disclosure artifacts but license metadata is often incomplete: a kernel scan… | ||
| The Case for an SoC Power Management Driver | Stephen Boyd | 41m |
Argues for an SoC PM driver that registers generic PM domains and attaches them to platform devices so device drivers no longer sequence clocks, resets or… | ||
| Transforming Mainframes: My Zowe-Python SDK Journey | Adbul Samad Siddiqui | 03m |
Enhances the Zowe-Python SDK with a concrete configuration-management feature and security-protocol fixes for z/OS access, implements and tests REST APIs for… | ||
| Keynote: Open Source as a Key Driver for Delivering on the UN Sustainable Dev Goals | Omar Mohsine | 12m |
UN presents a concrete program tying open source to the 17 SDGs with an explicit claim that open source is the main means of implementation, a three‑pillar UN… | ||
| Sponsored Session: Beyond the Buzz: Navigating AIs Myths and Realities | Ezequiel Lanza | 32m |
Argument that LLMs are overhyped and not universal tools, with concrete examples: use CNNs or YOLO for vision and RNNs/CNNs or classic ML for time series often… | ||
| You Never Know When You Need a Fork | Madelyn Olson, Viktor Söderqvist | 25m |
A drop-in fork of the last open Redis commit becomes Valkey, joined the Linux Foundation in one week and ships its first release in two weeks, aiming full… | ||
| Exploring the Potential of Zephyr in Automotive and Software Defined Vehicles | Philipp Ahmann | 16m |
More than 100 ECUs per car push Zephyr onto many Cortex‑M devices and standard peripherals (GPIO, I2C, UART) are already supported; POSIX on microcontrollers… | ||
| Lightning Talk: Implementing the Precision Time Protocol (PTP) in the Zephyr Proj... | Adam Wojasiński | 11m |
Implements PTP in Zephyr using POSIX sockets with timestamps carried in control messages and a small separated PTP clock driver; polling uses a file descriptor… | ||
| Lightning Talk: Using Zephyr to Power the Sustainable Cloud | Dan Kalowsky | 10m |
Ampere runs five Zephyr images on tiny ARMv7 management cores that power massive Neoverse hosts (up to 512 cores); the most critical is a mask ROM frozen 6–12… | ||
| Lightning Talk: The CFU: Custom Hardware with RISCV and Zephyr | Mohammed Billoo | 11m |
Demonstrates adding a Custom Function Unit into a RISC‑V core on an FPGA and calling it from Zephyr, using NeoRV32 on an OrangeCrab board so the design fits… | ||
| How to Contribute a Zephyr Sensor Driver | Maureen Helm | 53m |
Step-by-step checklist for a Zephyr sensor driver: implement a device tree binding with documented defaults, add Kconfig that uses the auto-generated DT exists… | ||
| Multi-tenant Logging with Opentelemetry Collector | Sandor Guba | 40m |
Builds a Kubernetes operator called Telemetry Controller that models logs as collector/tenant/subscription/output CRs, deploys OpenTelemetry Collector as a… | ||
| Coping with Zero Days with Cilium Tetragon | Liz Rice | 44m |
Cilium Tetragon uses eBPF to detect and forensically trace zero‑day exploitation by matching kernel events to specific vulnerable artifacts, for example hooks… | ||
| Building a Hypervisor Firewall with nftables and Rust | Stefan Hanreich | 31m |
Builds a working hypervisor firewall using nftables and Rust that leverages nftables-json schema and Rust types to emit JSON commands and get compile‑time… | ||
| Panel Discussion: Outreachy Linux Kernel Internship Report | Julia Lawall, Hans Verkuil, C... | 49m |
Outreachy funds $7,000 three‑month internships and the Linux kernel team runs two cycles per year; mentors plan ~10 days of prep, weekly video calls, and fast… | ||
| Zephyr LPWAN Connectivity Options and When to Choose Them | Jordan Yates | 34m |
Zephyr supports four native wireless stacks: IP (Wi‑Fi, LTE), Bluetooth LE, LoRa/LoRaWAN and IEEE 802.15.4 (Thread/Matter). LoRa gives the largest link budget… | ||
| Preparing Zephyr for Safety Element out of Context Certification | Nicole Pappler | 41m |
Zephyr pursues a SEooC certification aimed at SIL 3 with an option for ASIL D, delivering a documented safety manual, traced requirements and tests, and a… | ||
| Lightning Talk: Open Source Fleet Management in Zephyr | Maciej Sobkowski | 10m |
Open source Remote Device Fleet Manager (RDFM) adds Zephyr support by using MCUmgr over SMP to feed updates to Zephyr devices and relies on MCUboot for atomic… | ||
| Lightning Talk: Zephyr Portability with an AI Application on Very Different MCUs | Ales Ryska | 07m |
Single AI face detection app runs unchanged source on two very different MCUs by swapping DeviceTree + Kconfig entries only the target boards differ the… | ||
| Zephyr Network Subsystem Status and Overview | Jukka Rissanen | 20m |
Zephyr’s network stack is a complete, configurable IP stack with dual IPv4/IPv6 mode, sockets (POSIX-like and user-space restrictions), Ethernet, Wi‑Fi… | ||
| SCA for Containers: The Good, the Bad, and the Truth | Arun Azhakesan, Philippe Ombredanne | 46m |
A project attempts an SBOM Clarity index by running many open and commercial SCA tools against common container bases and finds frequent failures: invalid or… | ||
| Let Them Eat CAKES: A Sweet Dive Into a Modern Cloud Networking Stack | Krisztian Fekete | 45m |
Presents a concrete CAKES stack built from OSS: Cilium for eBPF-based CNI with label‑based identity caveats, Ambient mode (Istio) delivering sidecar‑less mTLS… | ||
| Messing up Your NUMA Topology with CXL | Hannes Reinecke | 42m |
CXL devices create extra NUMA nodes, the BIOS HMAT often lists many more nodes than actually usable, and measured behavior disagrees with tables: qemu emulated… | ||
| Surviving 19 Jan 2038 on 32 Bit Platforms: Lessons Learned and Common Problems | Alexander Kanavin | 40m |
Demonstrates that 32-bit systems must use time_t as 64-bit everywhere: kernel ABI (needs at least kernel 5.1, bulk fixes in 5.6), glibc time64 symbol… | ||
| Optimized String Processing in RISC-V: How Toolchain Improvements Can Boost Performance | Christo... | 38m |
Claims a concrete code pattern: use RISC‑V bitwise byte ops (example orc.b) and the find-zero trick to detect NUL bytes with two–three instructions instead of… | ||
| Panel Discussion: The Next Phase in OSS | Samson Goddy, Oluebube Princess Egbuna, Edidiong Askipo | 42m |
Program launches an IDB (Ideate, Design, Build) accelerator that takes experienced engineers, designers and PMs through a vetted, mentorship-heavy six-month… | ||
| Panel Discussion: Measuring the Health of Open Source Projects in Public Health | Cynthia Lo | 42m |
GitHub and WHO build a public project-health dashboard that queries the GitHub API, generates a JSON file via a GitHub Action, and serves a static Next.js site… | ||
| Lightning Talk: From Ideas to 3 Firmwares Powering Railway-Infrastructure Monitoring... | Tobias Meyer | 10m |
Claim: three firmwares in under two years that create a scalable wireless sensor network using Zephyr OS with about 200 sensors supported in upstream… | ||
| Lightning Talk: How to Create an Asset Tracker With Zephyr and Thingsboard In No... | Tobias Marquardt | 10m |
Working proof of concept that uses Zephyr on an nRF9160 DK with onboard modem and GNSS, sends position fixes via CoAP over UDP to ThingsBoard Cloud, and… | ||
| Developing Wildlife Camera Traps with Zephyr RTOS | Alex Bucknall | 21m |
Underwater time‑lapse camera platform built on Zephyr targets Adafruit Feather form‑factor (ESP32, nRF52, RP2040), uses UCam Mega with internal frame buffer… | ||
| Lightning Talk: Delta Firmware Over The Air (DFOTA) Update: Optim... | Romain Pelletant, Clovis Corde | 09m |
Delta OTA sends binary patches generated by a bsdiff-based Python tool and applies them on Zephyr using a low-footprint DFOTA API that implements Heatshrink… | ||
| Secure and Encrypted Boot in Zephyr RTOS | Parthiban N | 21m |
Demonstrates how MCUboot verifies Zephyr images using signed (and optionally encrypted) bootloaders, with an NXP i.MX RT example that uses HAB to boot a… | ||
| Zephyr Build System: Sysbuild and New Hardware Model | Torsten Tejlmand Rasmussen | 44m |
Describes a new hardware model V2 that splits board and SoC data into YAML and Kconfig so boards become reusable and locate as board/SoC/cluster/variant… | ||
| Deep Dive Into Traefik 3.0 | Emile Vauge | 40m |
Traefik 3.0 adds OpenTelemetry support for traces and metrics (logs follow when the Go SDK exits beta), implements Gateway API (HTTP/TLS, filters) with… | ||
| "Here Is a Clean Section of the Beach" - Proactively Auditing Op... | Munawar Hafiz, Michael Winser | 45m |
Alpha-Omega funds proactive scanning and OpenRefactory runs an ICR intelligent code repair static analyzer that audits packages at scale, producing… | ||
| Policing Open-Source Projects at Scale | Thomas Neidhart | 47m |
Eclipse Foundation stores each project’s settings as configuration-as-code repo per org (176 GitHub orgs, ~1,700 repos) using jsonnet templates, a GitHub App… | ||
| Tutorial: How to Win Friends & Influence LLMs (with Prompt Engineering) | James Busche | 59m |
Hands-on prompt engineering using Watson X and its Granite models shows concrete levers: set min/max tokens, stop sequences, temperature, top-p/top-k and… | ||
| Innovating in Open Source in Your Enterprise | Daniel Doubrovkine | 40m |
OpenSearch forks after a relicensing split, spends the first year renaming and packaging, then stabilizes and attracts contributions. A foundation launches to… | ||
| Capslock: Escaping Bad Dependencies | Jess McClintock | 38m |
Capslock is a CLI that analyzes Go packages with call-path analysis (function-level call graphs) to report which capabilities — network, filesystem, unsafe… | ||
| From Vision to Action: PagoPAs Journey Towards Open Source Leadership | Leonardo Favario | 42m |
PagoPA runs core national platforms serving 23,000 public administrations, a payments system mandated to all PAs and an app with 40 million downloads, and… | ||
| Panel Discussion: Bring Your Product Manager to the Open Source Party | Nithya A. Ruff | 45m |
Companies treat open source as a strategic business choice and must involve product managers in budgeting, compliance and upstream work; OSPOs look different —… | ||
| What Can Open Source Project Health Metrics Reveal About Project Users? | Sophia Vargas, Georg Link | 41m |
Researchers compare Flutter's monthly active users (Jan 2018–Feb 2021) against public proxies and find strong linear relationships using GrimoireLab and… | ||
| Bridging the Gap: Incorporate OpenSource In Product Managers Toolbox | Philipp Ahmann | 41m |
Argues product managers can quantify open source by adding concrete inputs to a make-or-buy Excel template, using PESTEL, SWOT, Kano and activity maps, sizing… | ||
| Design Thinking: Generative AI Style | Martin Hickey, Donal Madden | 43m |
An open-source agent system converts interview notes into ready-to-review agile artefacts: a product owner design thinker agent generates high-level epics and… | ||
| Towards Industrial AI Governance Inspired by OSPO: A Primer | Zoran Jovanovic | 44m |
Volvo Cars maps OSPO processes onto industrial AI governance, creating a Open Source Program Office in January 2023, a cross‑functional generative AI… | ||
| Generative Conversational AI Interoperability | Diego Gosmar | 31m |
OVON Specs define a JSON Universal API JSON envelope and a simple manifest discovery format that let heterogeneous assistants exchange utterances, whispers and… | ||
| VSCorode: Inside Your IDE, Inside Your Git Repository | Kevin Ward, Fabian Kammel | 46m |
Shows a working malicious extension that reads VS Code’s sqlite secrets DB and the OS keyring master secret via the secret storage API, decrypts tokens… | ||
| Tutorial: Build AI-Supercharged RAG Apps with a Vector Database | JP Hwang | 01h 35m |
Hands-on build of a RAG app using an open source stack: a Weaviate vector database plus local Ollama for embeddings and a small Gemma LLM, ingesting 100,000… | ||
| Sponsored Session: Application Security is a Community Effort | Fernando Diaz | 43m |
Shows how GitLab actually wires open source into its security pipeline: DAST builds on OWASP ZAP, container scanning reuses Trivy, and secret detection extends… | ||
| Sponsored Session: Confidential Computing - New Capabilities for New Workloads | Mike Bursell | 42m |
Hardware-based Trusted Execution Environments isolate code and data from the host and other tenants, and remote attestation returns cryptographic measurements… | ||
| From Data Tsunami to Actionable Insights | Dawn M Foster, Cali Dolfi | 43m |
Augur ingests git URLs into a relational Augur database so repeated analyses are quick, and an 8Knot dashboard built on Python + Dash reads that DB to show… | ||
| Sponsored Session: How to Make Your First Contribution to a CNCF Project | Daniel Krook | 39m |
CNCF hosts nearly 200 projects and about 300,000 contributors and lays out clear entry paths: Zero to Merge is a four‑week cohort that gets newcomers to a… | ||
| Track Keynote: TODO Updates & Announcements | Ana Jiménez Santamaría, Zhang Yiyang | 15m |
Announces a new certified open source developer exam for enterprise under development with Linux Foundation subject-matter experts, shares that the… | ||
| Milvus: Scaling Vector Data Solutions with Gen AI | Stephen Batifol | 37m |
Milvus is an open source, cloud‑native vector database built on MinIO and Kafka and designed to be stateless on Kubernetes with etcd for metadata and… | ||
| Simplifying Generative AI App Development Why Standards Matter | Katherine Druckman, Ezequiel Lanza | 33m |
Introduces a vendor-neutral reference architecture called OPA (Open Platform for Enterprise AI): a composed-file deployment of containerized microservices… | ||
| Planning for Retirement: How Can We Prepare for Software’s... | Victoria Ontiveros, Justin Murphy | 41m |
Argues that the real step is shared definitions (proposes support = predictable effective response to a new security risk), then machine-readable transparency… | ||
| Panel Discussion: Improving the Software Supply Chain Security | Tom Hennen, Michael Lieberman | 44m |
Panelists describe concrete progress: GUAC ingesting SBOMs and exposing GraphQL/REST APIs today to answer whether a CVE impacts one or 100 apps; sigstore for… | ||
| Navigating the Open Source Observability Landscape | Dotan Horovits | 41m |
OpenTelemetry becomes the vendor‑neutral OpenTelemetry GA framework covering traces, metrics and logs with an OTLP gRPC protocol, language SDKs, a collector… | ||
| InstructLab: Applying Open Source Methods to Building and Trai... | Martin Hickey | 40m |
InstructLab claims a workflow to add domain contributions to an existing LLM without full forking or end-to-end fine-tuning, using a pipeline of taxonomy +… | ||
| Collaboration with Universities and Enterprises OSPO: What's Next? | Jonas van den Bogaard | 29m |
Discussion summarizes concrete practices: OSPOs act as a bridge, universities run many tiny projects so CLAs are impractical and a developer origin or… | ||
| The Automotive OSPO | Masato Endo, Ana Jiménez Santamaría, Mary Wang | 43m |
Automotive companies now run OSPOs that tie license scanning into CI so a build breaks on forbidden licenses, maintain internal open source policies and… | ||
| The Challenges of Public Code: Building an Open Source Culture at BBC | Tom Sadler, David Buckhurst | 47m |
BBC runs ~99 public projects and supports big products (iPlayer 25M users, Sounds 5M) while 21,000 staff include 18,000 public‑service roles that trigger… | ||
| Measuring Security Risk: Community Engagement Is the Best Mitigation | Deb Nicholson | 30m |
Argues that active upstream engagement beats opaque metrics and GitHub stars and gives concrete tactics: passive listening via mailing lists and GitHub… | ||
| Open Source for the Greater Good | Cynthia Lo, Gia Coelho | 26m |
Highlights practical programs and limits for nonprofits using open source: the health platform DHIS2 runs in 80+ low and middle income countries, the Ruby for… | ||
| Measuring Suc... | Sean P. Goggins, Clare Dillon, Michael P. Nolan, Sayeed Choudhury | 43m |
CHAOSS Academic Working Group (formed 2023) finds most CHAOSS metrics don’t map to university needs and produces 37 goals before discovering major gaps… | ||
| Open Source Software Engineering Education | Stephen R Walli | 40m |
Experiment called Semesters of Code pairs undergraduates with well-run open source projects (OpenStack, PatternFly, Kubernetes, PowerShell, odyssey, mojaloop… | ||
| How Can We Define the Value of Open Source Work? | Sophia Vargas | 40m |
Compares concrete valuation methods: COCOMO applied to Kubernetes as a lines-of-code cost estimate, DORA-style release and recovery metrics for quality, and… | ||
| 1 Billion Dollars for Open Source Maintainers | Tobie Langel | 46m |
Argues that redirecting 0.05% of global developer spend yields $1 billion per year, enough to fund roughly 10,000 full‑time maintainers and management; shows… | ||
| The BlueHats Awards: Funding Open Source Critical Li... | Bastien Guerry, Jos van den Oever | 10m |
DINUM partners with NLnet to run the BlueHats Awards that give 4×10,000€ to four FLOSS maintainers selected for criticality, cybersecurity impact, financial… | ||
| German Administration and Open Source | Thomas Fricke | 22m |
A 25‑year push toward a digitally sovereign administration cloud centers on a cloud‑native, DevSecOps approach with Kubernetes everywhere and a GitLab‑based… | ||
| A-Typical but Fruitful Public Sector Collaborations Through OSPO's | Nico Rikken, Karel Rietveld | 52m |
Two Dutch OSPOs pair a public tax agency with a semi‑public grid operator and grow a national network from two to 18 organizations through biweekly working… | ||
| Start Building Distributed Applications with Ease Using Building Block APIs | Marc Duiker | 49m |
Dapr runs as a sidecar and exposes service invocation, pub/sub messaging and state stores APIs with concrete demos in .NET and JavaScript using Redis locally… | ||
| Creating Standards - From Writing a Spec to Obtaining ISO Status | Shane Martin Coughlan | 53m |
A community-built process specification (first draft October 2016) evolves into ISO/IEC 5230:2020 via the JTC-1 PAS Transposition Process and Joint Development… | ||
| The Future of Digital Identity - All You Need to Know About ID Wallets & How to... | Dominik Beron | 36m |
Claims that identity wallets can boot a three‑sided market get demonstrated with a working open‑source stack: a progressive web app wallet, issuer and verifier… | ||
| How Will IPCEI-CIS Redefine Open Source in the EU? | Alberto P. Marti | 52m |
IPCEI-CIS mobilizes €1.2 billion from 12 member states and about 100 companies to build an interoperable, openly accessible European data processing ecosystem… | ||
| The Government and the Art of Infrastructure Mainte... | Powen Shiah, Mirko Swillus | 12m |
Sovereign Tech Fund focuses public funding on longterm upkeep of foundational open source software with concrete programs: a general investment fund using… | ||
| Your K8s Infinity Gaunlet: The Marvel of KEDA and Cluster-API for Infinite Scale | Scott Rosenberg | 45m |
KEDA drives preemptive, event‑driven node scaling by writing to Cluster API machine deployments, using 50+ scalers (Prometheus, Kafka, SQS, APMs) to trigger… | ||
| Enhancing Artifact Security with GitHub’s Build Provenance... | Fredrik Skogman, Radoslav Dimitrov | 46m |
GitHub’s Build Provenance API produces SLSA-compatible in-toto attestations signed with Sigstore/Fulcio using ephemeral keys (certificates valid ~10 minutes… | ||
| Securing Workloads with Transaction Tokens and Minicloak | Dmitry Telegin | 29m |
Implements the IETF Transaction Tokens draft as a proof‑of‑concept Keycloak plugin (≈300 lines, 2 classes) that performs the basic token‑exchange flow… | ||
| Decentralized Identity Landscape: Communities, Projects, Technologies, and Tools | Markus Sabadello | 55m |
Overview of concrete decentralized identity components and live pilots: Decentralized Identifiers (DIDs) resolve to DID Documents and use crypto key pairs… | ||
| What is... | Ana Jiménez Santamaría, Nicholas Gates, Fiona Krakenbürger, Bastien Guerry, Alberto P. Marti | 41m |
Europe is moving from buzzwords to budgets: calls to replace precarious NGI funding include proposals for a multi‑billion EU open source fund and a €3,000… | ||
| From Spark to Flame: How Ideas and Collaboration... | Nikki Winands, Alain Schoovers | 09m |
Built a public‑sector design system ecosystem and released it as open source to create a single source of truth for developers and designers, using agile… | ||
| Back to Security Basics: Evaluating, Consuming, and Contributing Open Source... | Katherine Druckman | 41m |
Covers how to evaluate open source by concrete signals—active commits, release cadence, issue and PR responses, governance and contributor guides—and by… | ||
| An Unprecedented Partnership Between the Linux Foundation and the United Nat.. | Daniel Goldscheider | 45m |
OpenWallet Foundation claims an operational open-source wallet stack with about 60 members and 26 universities collaborating and a government advisory council… | ||
| Transforming the Future: Open Source Innovations for Digital Public Goods & Infra... | David Manset | 43m |
A 3.5-year EU-funded ITU–UNDP program builds a competency framework, training materials and an institutional playbook to deploy two staffed open source program… | ||
| The Parallel Universes of ISPOs an... | Clare Dillon, Tom Sadler, Russell Rutledge | 50m |
Claim: InnerSource Program Offices (ISPOs) are often necessary to make InnerSource work at scale by providing governance, tooling and advocacy rather than… | ||
| Our First Steps Establishing an Open Source Program Office | J. Manrique Lopez | 42m |
Inditex builds an OSPO over three years inside a 175,000‑person retail company with ~1,000 IT staff, establishing five internal communities and policies for… | ||
| Fast & Furious: From Zero to Open Source Community in 9 Weeks | Martin Hickey | 42m |
A proof of concept gets a quantized Llama-style model running on a Mac, then IBM and Red Hat build a full pipeline: CLI, backend CI/CD, taxonomy-based data… | ||
| Open Source Governance for Software Engineers | Tobie Langel | 38m |
Defines governance as the formalization of implicit norms to scale willing collaboration and argues for treating governance like code so human readers can… | ||
| Global and Regional Ope... | Xiaoya Xia, Richard Sikang Bian, Anni Lai, Willem Jiang | 44m |
Panelists argue Asia Pacific is the fastest-growing open source region and cite GitHub figures: India 2.5M new GitHub users (2022) and China 1.2M, while Europe… | ||
| Digital Sovereignty at Risk - Opportunities for Intervention | Kay Hartkopf | 11m |
European public sector programs prioritize concrete interventions: a Sovereign Tech Fund lists 195 technologies and has spent about €15M to support 40 projects… | ||
| Building a Digital Workplace for Civil Servants | Olivier Delteil | 18m |
National initiative builds an open-source digital workplace called L Suite with a focus on proconnect SSO, mail, and a Matrix-based messaging stack; work… | ||
| Extract Dependency Data on Scale with Renovate | Sebastian Poxhofer | 50m |
Renovate extracts concrete dependency data at scale by running managers for Dockerfiles, NPM, PDM, Terraform, GitHub Actions and many custom formats and… | ||
| Who Broke the Build? — Using Kuttl to Improve E2E Testing and Release Faster | Ram Mohan Rao Chukka | 33m |
A practical report on replacing slow remote E2E runs with Kuttl: teams convert Helm-chart and Artifactory stack tests into YAML testSuites (testSteps +… | ||
| RISC-V: Maturing an Open Standards Development Process | Philipp Tomsich | 49m |
RISC-V commits to becoming an internationally recognized standard by submitting as an ISO PAS fast-track candidate and tightening its specification lifecycle… | ||
| Advancing Transparency and Security in Software: A Deep Dive Into SPDXv3 | Alexios Zavras | 46m |
SPDX v3 moves from a monolithic document to a graph-based RDF model with modular profiles (core, software, licensing, security, AI, build, data), and publishes… | ||
| Towards Open Source-Compatible Standards | Tobie Langel | 49m |
National and international standards bodies sell standards as their revenue model, creating a conflict with software practices while legislation increasingly… | ||
| Bringing Existing Open-Source Code into MISRA Compliance | Roberto Bagnara | 52m |
Work on Zephyr and Xen targets MISRA compliance for selected x86_64 and arm64 configurations, funded partly by AMD, and produces documented deviations in the… | ||
| Stabilizing Chromium's Wayland Support: Implementing and Testing Fallback Tab Drag... | Max Ihlenfeldt | 31m |
Chromium implements a fallback tab dragging mode for Wayland that uses a simple drag icon and only creates a new window on drop, as an alternative to the… | ||
| Tackling Language Barriers in Open Source Docs: A Case Study of openEuler's... | Helen Liu, Wang Jing | 46m |
openEuler builds a G11N SIG and hires ~30 active contributors to translate ~200 repos where ~90% of READMEs are Chinese; a CI bot opens translation issues when… | ||
| Open Source and IP Departments: Risk Containment and Portfolio Management | Shane Martin Coughlan | 29m |
Explains how to reframe open source for legal teams as external risk containment and internal portfolio management, not evangelism: inventory current OSS, map… | ||
| Open Source Compliance Management - Removing the Thorn from... | Eleftheria Stefanaki, Jimmy Ahlberg | 42m |
Companies adopt the OpenChain Specification 2.1 (ISO/IEC 5230) as a practical blueprint: create a written open source policy, train staff, automate scanning of… | ||
| Dude, Where’s My Error?: How OpenTelemetry Records Errors, and Why It... | Adriana Villela, Reese Lee | 33m |
A small Python Flask app is instrumented both manually and with auto-instrumentation, forcing an exception whenever the die roll is even so errors reproducibly… | ||
| Evolving GitOps: Harnessing Kubernetes Resource Model for 5G Core | Ashan Senevirathne, Joel Studler | 43m |
Swisscom replaces checked-in low‑level configs with KRM-based intent resources, using Flux plus custom Kubernetes operators to dynamically assemble runtime… | ||
| Do One Thing, and Do It Well: Special Purpose OSes Apply the Unix App Philosoph... | Danielle Tal, Sean McGinnis, Felipe Huici, Frederic Crozat, Erik Nordmark | 48m |
Panelists compare specific builds and outcomes: Unikraft produces unikernels that boot in milliseconds and keep a POSIX API, converting standard Dockerfiles… | ||
| Cloud Native Threat Intelligence for... | Constanze Roedig, Tobias Grantner, Lukas Mahler, Josef Taha | 39m |
An open source framework called Kubernetes Storm Centre runs diverse honey‑clusters, ingests ebpf logs via eBPF/Tetragon, maps observables to STIX, and links… | ||
| Next-Gen Documentation with AI | Hema Veeradhi | 49m |
Claims that LLMs can auto-generate API and code docs get tested: a Streamlit UI pulls Python files from GitHub, runs open‑source models (Mistral, Llama, IBM… | ||
| Documentation Templates: A Helpful Aid or an Obstacle | Lana Novikova | 38m |
Templates from the Good Docs project provide ready-made README, bug report and contributing-guide structures in Markdown under a zero‑clause PD license and… | ||
| Online Hands-on Tech Docs, the Easy Way! | Jorge Morales Pou | 32m |
Open source platform Educates delivers browser-based, containerized labs that run on containers on Kubernetes and power Spring.Academy, Tanzu.Academy and… | ||
| Building the IDE Golden Path | Ben Potter | 46m |
Cloud developer environments (CDEs) standardize the inner loop by running editors and toolchains remotely using tools like code-server, VS Code SSH, JetBrains… | ||
| Enhancing Kernel Functional Safety Analysis with KS-nav | Alessandro Carminati, Gabriele Paoloni | 31m |
ks-nav reverse-engineers a Linux kernel binary to produce call and subsystem graphs that pinpoint which files and drivers (via the MAINTAINERS map) participate… | ||
| How Stakeholders Across Government, Enterprise, & Civil Society can Accelerate... | Hilary Carter, Sachiko Muto, Omar Mohsine, Nick Gates, Ruth Ikegah, Fiona Krakenbürger | 48m |
UN OSPOs for Good convenes ~600 attendees, surfaces a conference report and concrete outputs: an upcoming open source portal at open‑source.un.org listing UN… | ||
| How the Linux Foundation accelerates contributions, innovation and collaboration | Hilary Carter | 18m |
Announces the new OpenSearch Software Foundation (AWS-contributed) to house the OpenSearch code for search, analytics and observability; extends a Unified… | ||
| European companies have started to realize that open source is a critical component of innovation | Gabriele Columbro | 32m |
Two years in, Linux Foundation Europe reports 173 members and five active projects, and it focuses on reducing friction for European participation by hosting… | ||
| Welcome & Opening Remarks | Gabriele Columbro | 01h 03m |
Welcome keynote lists concrete outcomes: the 700 million downloads milestone for OpenSearch and its move into a neutral foundation; the rapid fork-and-release… | ||
| Introducing Hedera's Next Generation in Open Source | Dr. Leemon Baird | 08m |
Hedera contributes its entire open‑source stack into the Linux Foundation Distributed Trust project called Hyro, claiming to be the first public blockchain to… | ||
| Securing the Software Commons: Standards, Automation, and AI for a Resilie... | Abhishek Arya | 13m |
Describes concrete progress: community standards like salsa framework and osv vulnerability schema enable machine‑readable vulnerability exports and a single… | ||
| Linus Torvalds in Conversation with Dirk Hohndel | Linus Torvalds, Dirk Hohndel | 31m |
Linux ships on a nine‑week cadence with a recent 6.1 release and about 10–15k commits per release, most of them new or fixed hardware support since drivers… | ||
| nothing matches | ||