Open Source Summit Japan + AI_dev 2024
2024-10-28..2024-10-29
Tokyo, Japan
who it's for
open source developers, kernel engineers, embedded software engineers, machine learning engineers, platform engineers, security engineers
topics
kernel LTS branch management; KernelCI continuous testing; diffusion model runtimes; NF4 quantization and offloading; CXL memory emulation in QEMU; GPU training network tuning; Wasm on resource constrained devices; OSPO governance and procurement; automated vulnerability patching; open telemetry instrumentation
| title | author | length |
|---|---|---|
| LFX Mentorship Showcase - Moderated by Shuah Khan | Shuah Khan | 30m |
An LFX mentorship showcase that lists concrete outcomes: litmusctl revamp replaces old CLI flows with prompt library, removes the kubectl dependency, adds unit… | ||
| Secure and Encrypted Boot in Zephyr RTOS | Parthiban N | 24m |
MCUboot with HAB on i.MX RT verifies a CSF-signed MCUboot using a public-key hash fused into OTP via goSign/CST, then chain-loads Zephyr from slot0/slot1… | ||
| Democratizing Diffusion Models with Diffusers | Sayak Paul | 39m |
An open-source Python library (Apache 2) that runs state‑of‑the‑art image and video diffusion models (Mochi1, Stable Diffusion 3/3.5, Flux) with four‑line… | ||
| Step by Step, What Should We Do for the Kernel Ecosystem? | Hirotaka Motai | 48m |
Linux kernel LTS support shifts to a two-year LTS projected EOL, forcing embedded teams to either keep many branches (examples: 5.15, 4.9, 4.4, even 2.x) or… | ||
| Contributing to KernelCI for Better Testing and Collaboration | Arisu Tachibana | 31m |
KernelCI runs 220 build configurations on ~45 hardware platforms, receives seven CI frontends and produced ~6.18 million test results and ~140,000 builds last… | ||
| Improving Bpftrace Reliability | Daniel Xu | 35m |
bpftrace reliability work focuses on concrete fixes: reproducible CI built with NYX flake to ship identical builds and AppImage-style static bundles, a VM test… | ||
| How Can Your OSPO Maximize Open Source Business Value for the Organization? | Masae Shida | 39m |
OSPO delivers a best-practice guide, a questionnaire and a scored project health assessment of ~16–17 criteria run every six months, using green/amber/red… | ||
| Optimize Your AI Cloud Infrastructure: A Hardware Perspective | Liang Yan | 40m |
Benchmarks run MLPerf CNN/RNN/Transformer models on an H100 cluster using Megatron/DeepSpeed and measure the impact of POD scheduler, Device Plugin, GPU/NUMA… | ||
| A Next-generation IoT Platform for Edge AI Apps Leveraging Se... | Munehiro Shimomura, Kenji Shimizu | 32m |
A next-gen stack ships as ITOS Local Edition with an open-source local-console (Python, open source) that deploys Wasm modules and AI models to small AI… | ||
| Unlocking Local LLMs with Quantization | Marc Sun | 40m |
Quantization reduces model size roughly 4× (FP32→INT8) and shows near‑zero accuracy loss for 8‑bit while 4‑bit begins to degrade; experiments report 1.5×… | ||
| Exploring CXL Memory: Configuration and Emulation | Yasunori Goto | 33m |
Hands-on guide to running CXL memory under QEMU shows reproducible steps: use QEMU CXL 2.0 emulation, create type‑3 memory backends (RAM or file for persistent… | ||
| Data Prep Kit: A Comprehensive Cloud-Native Toolkit for Scalable Da... | Daiki Tsuzuku, Takuya Goto | 38m |
Open-source Data Prep Kit (DPK) assembles concrete components — a pdf2packet extractor, chunking, deduplication and embedding steps — and runs them at scale on… | ||
| Exploring Distributed Caching for Faster GPU Training with NVMe, GDS, and RDMA | Hope Wang, Bin Fan | 38m |
Kubernetes-native distributed cache (Alluxio) uses NVMe, RDMA and GPU Direct Storage with UCX and a Netty data plane to feed GPUs. Single-worker FIO reaches… | ||
| Discover Valkey: The Path to Now | Hayato Tustsumi | 33m |
Valkey claims fully Redis‑7.2 compatible behavior while switching to a BSD‑3 vendor‑neutral license and community governance; project forms rapid momentum with… | ||
| Recent TPM Security Enhancements to the Linux Kernel | James Bottomley | 42m |
Recent Linux kernel patches (merged in 6.10) make every TPM transaction use sessions salted to a kernel-derived null primary so a changed null seed after a TPM… | ||
| eBPF BoF | Shung-Hsi Yu, Yutaro Hayakawa | 39m |
Gathering of eBPF users and developers maps current pain points: community resources like docs.ebpf.io and meetups are growing, but kernel verifier bugs still… | ||
| Middle-Platform Empowerment: Growing and Sustaining Open Source Projects... | Xiaoya Xia, Peggy Dong | 41m |
Ant Group OSPO runs an internal open‑source incubator that formalizes project lifecycles with sandbox → incubation → graduation checkpoints, cross‑functional… | ||
| The Role of Open Source Management Talent in Ensuring Software... | Ana Jiménez Santamaría, Daniel Izquierdo Cortázar | 42m |
An applied claim: using CHAOSS metrics and OSS Scorecard plus dependency analysis uncovers 131 high‑risk Go components among Kubernetes dependencies driven… | ||
| The Future of OSS and Multi-tenancy: Adapting Architecture for Modern Demands | Takanori Tanaka | 19m |
Exastro IT Automation moves from one-instance-per-tenant to a single multi-tenant instance by reworking core architecture into organizations and workspaces to… | ||
| Securing the Future: Modernising Singapore Government IT Policy Throug... | Hunter Nield, Eugene Lim | 45m |
Singapore rewrites security policy as machine-readable JSON stored in Git, exposing a repository, change history and diffs so agencies see who changed what… | ||
| Enhancing Open Source Collaboration: From Incentive Programs to Data-Driven Contribu... | Xiaoya Xia | 42m |
Proposes a quantifiable reward system named Openrank network centrality that uses GitHub event data (issues, PRs, comments, reviews) and a PageRank-like graph… | ||
| Keynote: Welcome & Opening Remarks | Noriaki Fukuyasu | 07m |
Opening remarks cover logistics and numbers: Wi‑Fi and schedule on badge and lunch in Hall B on the 4th floor with coffee and the solution showcase there, a… | ||
| Keynote: Fujitsu's Open Source Vision and Initiatives | Vivek Mahajan | 15m |
Fujitsu commits to an open-source compute stack: Monaka 2nm 144-core is an ARM-based dual-socket datacenter processor with a fully open software stack and… | ||
| Best Practices for Reducing Patent Risk to OSS Projects | Keith Bergelt | 39m |
Open Invention Network describes a shift from operating-company risk to non-practicing-entity (PAE) attacks and shows concrete defenses: a cross-license tied… | ||
| Architecting Kubernetes-Based Internal Developer Platforms: Essential Patterns... | Hiroshi Hayakawa | 41m |
Explains a concrete Kubernetes-based IDP architecture: an automated Crossplane-driven provisioner plus API/CLI/GUI interfaces, tenancy choices of namespace vs… | ||
| Open Discussion on Understanding Cu... | Daniel Izquierdo Cortázar, Ana Jiménez Santamaría, Yuki Hattori, Willem Jiang | 40m |
Panel summarizes concrete tactics for bridging Asian and Western open source practices, arguing that Japanese nemawashi and uchi-soto and Chinese ring‑based… | ||
| Unlocking Agility with Open Source: A Guide for Modern Businesses | Younes Hairej | 28m |
A fintech moves from vendor lock-in to a self-managed stack, rebuilding with Terraform, Kubernetes and Prometheus/Grafana for observability, cutting… | ||
| Keynote: Accelerating GenAI Adoption with Containers: Unleashing AI/ML Development... | Ivan Curkovic | 07m |
Claims containers speed GenAI adoption by giving isolated reproducible environments and by packaging LLM tools and functions inside images. Demonstration shows… | ||
| Keynote: Honda’s Journey and Challenges Toward Software-Defined Vehicles | Kazuo Tsubouchi | 07m |
Honda frames a shift to a data‑centric, cloud‑integrated SDV and lays out an E‑architecture built around a central ECU and zoning CUs plus cloud integration… | ||
| Keynote: Leveraging Zephyr and ML to Bring Smart Devices to Market, Faster | Kate Stewart | 14m |
Zephyr integrates on-device ML using TensorFlow Lite Micro plus microTVM and Edge Impulse, with graphics via LVGL, and automated SBOMs in SPDX formats. The… | ||
| Safe Systems with Linux | Philipp Ahmann, Kate Stewart | 38m |
Proposal embeds machine‑readable requirements into kernel source using an SPDX:W requirement header with unique IDs so tests, files and configs can link into a… | ||
| Enhancing Cyber Resilience and Sustainability in Critical... | Yoshitake Kobayashi, Dinesh Kumar | 37m |
Civil Infrastructure Platform provides an Industrial Grade Linux base layer that offers 10+ years maintenance, a reference image with 142 packages, and claims… | ||
| A Practical Guide to Using International Standards for Open Source Procurement | Shane Martin Coughlan | 40m |
Claims that ISO standards cut procurement overhead and risk by replacing bespoke requirements with agreed processes, backed by specific standards ISO/IEC 5230… | ||
| SBOM Implementation Reality: From Crawl to Walk - SPDX Lite Pro... | Norio Kobota, Takashi Ninjouji | 37m |
Introduces SPDX Lite as a compact profile of SPDX 3.0 that forces package‑level mandatory fields and makes license data required so companies can produce… | ||
| Embedded Software Development Efficiency Improvement with Docker and Kubernetes | Tao Chen | 22m |
Demonstrates packing CI tools into Docker images so developers run the exact pipeline checks locally instead of waiting for remote jobs, shows Kubernetes used… | ||
| Securing the Unseen: Defending Against Open Source Software Supply Chain Attacks | Lawrence Crowther | 29m |
Open source makes up 80–90% of deployed code so a tiny app can pull in 73,000 lines of third‑party code and 79 transitive deps on average. Examples include… | ||
| BoF: PETs - Privacy-Enhancing Technologies Compared, Discussed &... | Mike Bursell, Mark Bundgaard | 37m |
Session compares practical PETs and when to use each: Confidential Computing (TEE hardware, near real‑time, typically under ~20% overhead, now available on… | ||
| From Policy Enthusiast to Legislators' Contact Point | Ciarán O'Riordan | 39m |
Governments already adopt the EU Cyber Resilience Act and the AI Act with obligations kicking in mostly by 2027, and the EU agency estimates 70% FOSS in… | ||
| OSS Bird’s Eye View : a Comprehensive Picture of the Open | Shinji Enoki, Taishi Yoneshima | 40m |
Community-built visual diagram maps Japanese open source projects since 2012 and now covers 10+ main categories, updated yearly with concrete changes (2023: 69… | ||
| Keynote: Executive Director Update | Jim Zemlin | 31m |
Open source provides the actual building blocks behind major tech shifts, and rebuilding them would cost $9 trillion replacement cost. The Linux kernel runs in… | ||
| Keynote: Accelerating Software Defined Vehicles through Open Source | Dan Cauchy | 19m |
AGL reports eight years of a unified codebase that now serves as a 70–80% production starting point for infotainment, clusters and telematics, with nine major… | ||
| Secure Code, Safe Future: Mastering Security in Critical Software Development | Lawrence Crowther | 23m |
C and C++ code in critical systems still produces classic, exploitable bugs — examples include Heartbleed (66% of sites affected, 500,000 unpatched months… | ||
| OSS Sustainability... | Yuichi Nakamura, Ayumi Watanabe, Shingo Fujimoto, Masato Endo, Munehiro Ikeda | 30m |
Japan Linux Foundation launches an evangelist program and companies report concrete moves: Toyota OSPO created in January and backed by continuous engineer… | ||
| Open Source LLMs in the Cloud: Scalable Solutions | Miley Fu, Hung-Ying Tai | 40m |
Three deployment paths: Python stacks (LangChain, LlamaIndex), native runtimes (llama.cpp, vLLM) and WebAssembly via WasmEdge and WASI NN; claim is that 16–20… | ||
| Unlocking the Power of OpenTelemetry: Enhancing Design, Development... | Takaya Ide, Yasuo Nakashima | 31m |
Experiment shows attaching an OpenTelemetry agent to Java services and running a collector container with a request generator and CloudWatch/X‑Ray backend… | ||
| eBPF-Powered Observab... | Paras Mamgain, Anmol Krishan Sachdeva, Samrat Priyadarshi, Miki Katsuragi | 42m |
eBPF hooks collect CPU/GPU power counters (RAPL, NVML, ACPI) and expose energy in joules per node and per pod via Kepler as Prometheus metrics, then… | ||
| AGL Roadmap Update | Walt Miner | 32m |
AGL reports two releases a year with quirky quillback as the new LTS and an ongoing Ricefish series of patch releases through early next year while planning a… | ||
| How to Accelerate Contribution in Auto... | Philipp Ahmann, Masato Endo, Yuichi Kusakabe, Hiroyuki Ishii, Ryunosuke Yamashita, Meixia Wang | 40m |
Automotive firms show up in few Linux kernel contributor rankings despite heavy OSS use, so concrete fixes include create an OSPO with contribution rules, scan… | ||
| Exploring Pillars of Trustworthy AI: Robustness and Fairness | Niharika Shrivastava | 42m |
Shows how tiny, computed perturbations—derived from the loss gradient—break classifiers (using gradient-sign perturbation (FGSM)) and how adversarial training… | ||
| Data Contracts Are Good for AI | Jean-Georges Perrin | 42m |
Argues that standardized data contracts (ODCS v3) turn metadata into an executable source of truth and cut AI risk by enforcing schemas, SLAs and data‑quality… | ||
| Secure and Efficient Sensing Applications with Wasm: Sony... | Ryu Ishimoto, Ekaterina Kravchenko | 42m |
Sony’s edge stack claims portable, sandboxed vision apps by combining WebAssembly Micro Runtime (<30k footprint) with WASI for standard host calls and an Edge… | ||
| From Complexity to Clarity: Addressing Challenges in AI BOMs for... | Gopi Krishnan Rajbahadur, Kate Stewart | 37m |
SPDX 3.0 adds AI and data profiles to capture models, datasets and their provenance, and the team produces an analyzed AI SBOM for a handwriting recognition… | ||
| RabbitMQ-less OpenStack Cluster Supporting 14,000 HVs in One... | Yushiro Furukawa, Masahito Muroi | 41m |
Claim: an RabbitMQ-less OpenStack RPC backend replaces RabbitMQ with a custom HTTP driver plus Consul service discovery and a broadcaster, removes the… | ||
| Software Defined Hardware Accelerated Data-Centric Computing... | Hidetsugu (Hyde) Sugiyama, Masaharu Kanda | 32m |
Demo shows an x86 OpenShift host composably attach Intel IPU cards and run ARM MicroShift on DPU nodes over a PCIe fabric, with container network functions… | ||
| Dynamic Scaling of GPUs for Container Apps with Composable Disaggregated... | Jin Hase, Lei Zhang | 38m |
Built a working system that composes PCIe/CXL-attached GPUs on demand and hooks into Kubernetes autoscaling: Composable Disaggregated Infrastructure (CDI), a… | ||
| Effective and Efficient: Learn from AGL’s Delive... | Agustin Benito Bethencourt, Daniel Izquierdo Cortázar | 42m |
AGL’s delivery pipeline is measured end-to-end with simple, repeatable metrics and an open ETL stack, showing that builds typically flow in lead time 19–43… | ||
| Bug Hunting in Distributed Systems: Using Robustness Tests to Test... | Chun-Hung Tseng, Arka Saha | 33m |
etcd builds a robustness-test framework that injects live failures with gofail, runs varied traffic profiles and mixed-version clusters, and validates… | ||
| AGL Software Defined Vehicle Update | Jerry Zhao | 36m |
AGL SDV Expert Group reports concrete additions to the Unified Code Base: a virtio-based device virtualization stack extended for multimedia since 2020, a… | ||
| Virtio-Loopback Status and Next Steps | Michele Paolino, Timos Ampelikiotis | 26m |
Virtio-Loopback implements a virtio HAL that lets unmodified virtio drivers talk to user-space devices so the same virtio-based apps run on VMs and bare metal… | ||
| Bringing AI on-Device: From Cloud to Edge | Catalin Vasile | 31m |
Compares cloud inference versus on-device tradeoffs and shows working examples: DETR quant at ~19 FPS on an iPhone 13 (sped 1.5×), Stable Diffusion 1.5 running… | ||
| Deep-Dive in VirtIO: Virtualized AGL with VirtIO to Achieve Cloud-Native Environment... | Kazuki Kuzu | 27m |
Claims that VirtIO device virtualization lets the same AGL VM binary run unchanged across cloud and edge, and demonstrates it with concrete tooling: builds two… | ||
| Volvo Cars' OSPO Journey - Drive OSS Maturity Level | Mary (Meixia) Wang | 40m |
Volvo Cars forms an OSPO in 2022 and runs it with four people after about 1 year 10 months of grassroots work, adopts OpenChain in April, joins Kisa… | ||
| AGL VSS Proxy and Gateway Demo Walkthrough | Scott Murray | 32m |
A working agl-vss-proxy daemon converts Vehicle Signal Specification updates into MQTT using a protobuf payload and the Eclipse Cooka data broker over gRPC… | ||
| How to Extend AD/ADAS Sensors Accessibility to IVI Domain in the... | Woosung Rain Kim, Dongwoo Han | 37m |
A kernel-space ghost device prototype shares cameras, radar and NVMe storage across multiple SoCs over PCIe, implemented by modifying the NTB transport and… | ||
| Build a Container Image from Scratch | Danish Prakash | 36m |
Manual assembly of an OCI image builds the four concrete parts: layers (tar.gz change sets), content-addressable blobs, a JSON config and a… | ||
| Secure and Efficient Data Sharing with Federated Cloud Storage | Masataka Mizukoshi | 24m |
A virtual data lake aggregates only metadata while original files remain in place, enabling on‑demand transfer and centralized access control; implementation… | ||
| AGL in the Cloud: Progress on AMI Builds | Jan-Simon Möller | 19m |
AGL boots as an AWS AMI built from the meta-aws layer and uploaded via the create-e2 script (requires AWS CLI, IAM roles, and an S3 bucket). Images exist for… | ||
| Establishing a Software-Defined Multi-Display Framework with Unified HMI | Kenta Murakami | 40m |
Open-source Unified HMI claims to separate display software from hardware by streaming GPU command streams over IP so a single RBGPU proxy and RB GPU lender… | ||
| Exploring Best Practice for Implementing Authn and Authz in a Cloud-Native... | Yoshiyuki Tabata | 42m |
Dives into concrete design and a live demo integrating Keycloak + OPA/OpenFGA for cloud‑native authn/authz, showing access tokens issued by Keycloak, NGiNX… | ||
| A Case Study in API Cost of Running Analytics in the Cloud at Scale with an... | Bin Fan, Hope Wang | 29m |
Measurement shows 1–10 PB/day Presto workloads produce >10 billion small I/O requests (50% under 10 KB), yielding cloud GET costs that can exceed $1M/year… | ||
| Computing Infrastructure for 2024 | Haruhisa Fukano, Koichi Fueda | 34m |
Claims an open photonic disaggregated computer that links cloud-to-edge with all‑optical PCIe switches, NFS over RDMA over photonic networks, and composable… | ||
| Security for AI and Multi-Party Collaboration with Confidential Computing (Oh, and... | Mike Bursell | 36m |
Describes how hardware Trusted Execution Environments produce a cryptographic attestation measurement (CPU/GPU signs a hash with an unextractable key) and how… | ||
| Possibility of Dynamic Rebalance in Multi-node HPC Vehicle Environment for SDV | Bucci Kawabuchi | 44m |
AosEdge implements dynamic rebalance across multi-node in-vehicle clusters using lightweight OCI-compatible containers plus unikernels booted with Zephyr+Xen… | ||
| Meeting Software License Compliance Policies During the Inbound Process: A Practi... | Julian Coccia | 31m |
Shows how to build an inbound gate that detects and blocks GPLv3 artifacts by mining a local KB with the open-source stack: Miner to extract files and… | ||
| Running Containers on a Resource Constrained Embedded Device | Jeff Shaw | 36m |
Shows how to run containers on a 32‑bit single‑core router with 792 MHz CPU, 256 MB RAM and 256 MB flash by using lxc instead of Docker (Docker is too big)… | ||
| Empowering the Map Ecosystem With Open Data | Marc Prioleau | 41m |
Overture Maps Foundation builds openly licensed six base layers (transportation, places, boundaries, buildings, addresses, base) contributed by AWS Meta… | ||
| Helping the PyTorch Community Improve the Security Posture of th... | Jeffrey Borek, Moriyoshi Ohara | 41m |
PyTorch moves under Linux Foundation governance, adopts OpenSSF best practices, and hardens dependency management after a malicious pip package in 2022 and… | ||
| Analyzing Your System with Tracing Libraries | Steven Rostedt | 41m |
trace-cmd front end moves functionality into libraries so applications can use trace-cmd features programmatically; libtracefs mounts and reads tracefs… | ||
| Real-Time Scheduling Fault Simulation | Ben Dooks | 39m |
Work shows practical fault injection using user space: strace-based API errors and a discovered stress-ng deadline bug (reported and fixed). eBPF/bpftrace… | ||
| Keynote: Powering the Global Digital Identity Revolution | Brian Behlendorf | 16m |
OpenWallet Foundation builds open-source wallet stacks and toolkits for verifiable credentials, aiming for interoperable wallets, key recovery, selective… | ||
| Keynote: Harmonizing from Core to Edge – Jegan Arthanari, Vice President, Global Field Engineering | Jegan Arthanari | 06m |
eLxr is a new Debian derivative that ships pre-built binaries tuned for cloud-native and AI workloads to avoid rebuilding from source, claiming smaller… | ||
| Keynote: The Future and Value of Composable Disaggregated Infrastructure | Naoki Oguchi | 05m |
Composable Disaggregated Infrastructure disaggregates servers into pools of CPU, memory and accelerators connected by PCI or CXL 3.0 shared memory switches… | ||
| Keynote: The Kernel Report | Jonathan Corbet | 21m |
Six major releases land each year with roughly 14,000 commits from ~2,000 developers and about 250 new contributors per release, on a reliable 9–10 week… | ||
| The Dark Side of AI: The Hidden Risks in Open-Source AI Models | Tal Folkman | 36m |
Covers concrete attacks and demos: a popular npm library with 10 million weekly downloads becomes a dropper, cncjs pulls in 800 transitive packages, and… | ||
| Open Source Al and PyTorch | Matt White | 08m |
Open source AI is framed as an ecosystem around PyTorch and related tooling, not just academic reproducibility; building a model like Mistrl 7B under Apache… | ||
| Desktop Linux War Stories | Anna Aitchison | 25m |
Company call centre ran 100% Linux desktops in the 1990s then drifted back to Windows and Office365, showing migration can reverse when business needs require… | ||
| The Year in Open Source Security | Marta Rybczynska | 41m |
A concise inventory of concrete 2024 events: NVD stalled on Feb 12 and leaves a backlog while CVE adoption moves to JSON v5 and new CNAs (Linux kernel, curl… | ||
| Linux Kernel CVEs: What Has Caused So Many to Suddenly Show Up? | Greg Kroah-Hartman | 36m |
kernel.org is now the CNA for Linux CVEs and it documents and assigns fixes publicly, usually with a one to two week delay, using three independent reviewers… | ||
| Keynote: Welcome Back | Noriaki Fukuyasu | 02m |
Morning keynote announces a newly launched Delux Linux training rewritten to cover modern cloud native tooling and workflows, positioned as an updated… | ||
| Keynote Discussion: Partner... | Sujata Tibrewala, Omar Mohsine, Masanori Kusunoki, Bastien Guerry | 36m |
Japan publishes a small set of open tools like geoc Coda but struggles with maintenance illustrated by a broken COVID contact‑tracing app; the UN rolls out a… | ||
| What's Happening in Japan? The Current Situation of SBOM | Ayumi Watanabe | 32m |
Japan reports concrete progress: METI issues SBOM guidance (v1 July 2023, v2 Aug 2024) with 60 pages added and 100 public comments, and national strategy… | ||
| Trials and Tribulations of Updating Dependencies for Vulnerability... | Xueqin Cui, Michael Kedar | 39m |
OSV scanner implements guided remediation that resolves dependency graphs via deps.dev/open source insights, computes concrete patches, and writes fixes back… | ||
| What I Learned from Participating in the Kubernetes Upstream Community | Akihito Inou | 35m |
Contributor journey spans six+ years with hands‑on upstream work: pushing patches so community applies fixes (avoiding internal patch maintenance), adding a… | ||
| BoF: Meet the Zephyr Community | Hiroshi Tokita, Yasushi Shoji | 39m |
Zephyr is already running on boards from Raspberry Pi Pico up to soft‑core CPUs on FPGAs; teams report 100,000+ upstream commits and say the new west k command… | ||
| Who Broke the Build? — Using Kuttl to Improve E2E Testing and Release Faster | Ram Mohan Rao Chukka | 35m |
Engineers adopt Kuttl to run declarative, YAML-based end-to-end tests locally against a kind local cluster (Docker or Rancher Desktop), including Helm… | ||
| Kubernetes WG-LTS: Why We Need LTS? | Yuiko Mori | 29m |
Kubernetes currently has a 14-month support lifecycle with a release cadence of three times per year and an enforced n-3 skew, forcing upgrades about once a… | ||
| AlmaLinux in Japan: Progress and Achievements Over the Past Year | Yohei Suzuki, Takanori Suzuki | 32m |
AlmaLinux Japan reports concrete results over the past year including an APAC board seat and two full time engineers from Japan driving contributions, added… | ||
| Analysis of and Lessons from the Xz-Utils Vulnerability – What Mig... | Taku Shimosawa, Atsuya Kato | 40m |
xz-utils contains a deliberate backdoor hidden in test archives and release scripts that appear in versions 5.6.0 and 5.6.1, enabling remote command execution… | ||
| Automated Vulnerability Patching with Copa | Anubhav Gupta | 20m |
Copa is a CNCF sandbox CLI that automatically patches OS-level container-image vulnerabilities by reading Trivy or Grype reports and adding a single patch… | ||
| The Telemetry of Trust, Using Attestations to Secure Your SDLC... | Jesse Sanford, Jagadish Ramidi | 38m |
Autodesk uses cryptographically signed attestations to tell a verifiable story for each build, generating multiple statements per run (they demo six… | ||
| Surviving Project Abandonment: Meteor.js Case Study | Jan Dvorak | 39m |
Meteor falls near-abandoned after a company pivot and lack of communication but rebounds because a large ecosystem and active forums keep packages maintained… | ||
| How to Make Open Source Work for Your Career | Sujata Tibrewala | 37m |
Advice on turning open source into career currency with concrete moves and outcomes: debrand DPDK from Intel by swapping Intel slides for neutral branding, run… | ||
| Lessons Learned on Following Security Best Practices in Zephyr | Kate Stewart | 29m |
Zephyr becomes a CVE Numbering Authority early on, gains silver in 2018 and gold in 2019, and runs a volunteer PSIRT that manages embargoes with a policy… | ||
| Device Management and Delta Update for Embedded Devices with SWUpdate and TUF | Koshiro Onuki | 40m |
Integrates SWUpdate with The Update Framework (TUF) plus device management and WFX to generate device-aware delta images so constrained embedded units download… | ||
| nothing matches | ||