Chaos Computer Club - archive feed

In this talk, I will present different use cases for using BPF in a Kubernetes cluster. BPF is a Linux in-kernel virtual machine and there are different kinds of BPF programs for different subsystems that will be considered: kprobes, traffic control, cgroups, LSM. I’ll follow with concrete examples, such as Weave Scope’s HTTP Statistics plugin. Finally, I’ll share tips and tricks on how to develop...

When configuration changes, daemon-reload stops the world in an increasingly unsustainable way. The problem is getting worse for two reasons: (1) heavier use of systemd means more units and longer reload times and (2) expanded use of socket activation/D-Bus activation/automount means more things urgently need PID 1's attention. There are ways to fix this up, but we'll need to move away from stoppi...

This presentation is about a new 802.11 wireless daemon for Linux. It is a lightweight daemon handling all aspects around WiFi support for Linux. It is designed with a tiny footprint for IoT use cases in mind. After its initial release last year, this provides the update on the progress and its integration into ConnMan and Network Manager. about this event: https://c3voc.de

Potential solutions to achieving containerization on constrained devices. 1. Why? 2. a content addressable elf linker (bolter) 3. space efficient container imaging (korhal) 4. oci compliant runtime (railcar) about this event: https://c3voc.de

cgroupv1 (or just "cgroups") has helped revolutionise the way that we manage and use containers over the past 8 years. A complete overhaul is coming -- cgroupv2. This talk will go into why a new control group system was needed, the changes from cgroupv1, and practical uses that you can apply to improve the level of control you have over the processes on your servers. We will go over: - Design deci...

kube-spawn is a tool to easily start a local, multi-node Kubernetes cluster on a Linux machine. While it was originally meant to be used mainly by developers of Kubernetes, it has been turned into a tool that is great for just trying Kubernetes out. In this talk, I will give a general introduction to kube-spawn and cover integration issues. about this event: https://c3voc.de

The container has become one of the most overloaded industry buzzwords of the last five years. From Jails to LXC to Zones to systemd-nspawn Docker to rkt - there's an assortment of different tools on different platforms that call themselves containers, and no clear consensus what it means when it comes to distributing containers or implementing the underlying technical details. The Open Container...

In a world of connected devices, IoT and embedded systems, building robust products needs a modern deployment workflow where security and constant updates are as important as the product itself. The abilities of these systems to protect themselves, isolate applications inside sandboxes or containers, and support constant updates will enhance the product's security, its longevity and all the offere...

Containers are pretty cool, but in scenarios where they don't satisfy all the requirements, service providers still rely on virtualization. Hardware virtualization became mainstream 1 decade ago and it never stopped evolving. I even dare to say that virtualization is not boring anymore! In this presentation I will talk about the most significant hardware changes in the virtualization world. about...

Used by many major distributions, systemd is widely known in the desktop and server world. But it is not so common to find it in embedded product. In this talk, we will show how systemd can be a real benefit for the embedded world; for both your sanity and your time. We will discuss how systemd was integrated into Phantom, a speaker from Devialet, and what was the pro and cons of using it. about t...

Kubernetes promises healing your application on all kinds of failure scenarios, but why not self-heal Kubernetes itself? about this event: https://c3voc.de

Secure boot as it currently exists in desktop Linux distributions is sufficient to verify that the bootloader and kernel have not been tampered with, but generally does nothing to ensure that userland is secure. How can we fix that? about this event: https://c3voc.de

How to get a slightly broken hard disk for testing file systems or udisks? A wifi access point which supports the old 802.11b standard for writing a test case for NetworkManager? Downloading a photo from a particular camera model which you don't own, but got a libgphoto bug report for? In this hands-on presentation and live demo of various Linux kernel and userspace tools I will show you how. abou...

casync is a novel tool for delivering OS images across the Internet. While there are many tools like this around, casync has some features that set it apart. In this talk we'll discuss why it is useful for delivering your IoT, container, application or OS images, and how you can make use of it. about this event: https://c3voc.de

Updating embedded systems reliably requires more than just the actual update process. This presentation gives an overview of the overall design and components needed for successful system updates. about this event: https://c3voc.de

AgileBits, the company behind the 1password password manager, published a spec for their “opvault” format to show how confident they are in its design. This eliminates the need to reverse-engineer the encryption when trying to read from such a vault on a system where they don’t provide their tool. In this talk we’ll see an overview of the design of the format, such as the key derivation or the dec...

Nowadays, most end devices have multiple network interfaces to connect to the Internet. They usually pick a statically configured default interface, such as WiFi, which they prefer over LTE when both are available, but this is not necessarily the choice that provides the best performance to the application. Socket Intents is a research prototype that addresses the problem of finding policies of wh...

about this event: https://c3voc.de

Gerne möchte ich Euch Einblicke in das Thema Forensik geben; speziell könnte es um Windows-Forensik gehen. Ich möchte aufzeigen, welche Daten man beim normalen Arbeiten gewollt oder ungewollt im System hinterlässt und wie Forensiker das nutzen um Aussagen zu treffen. Insbesondere möchte ich aber auch verdeutlichen, wie halbseiden teilweise die Aussagekraft von forensischen Analysen ist. Zeitlich s...

Eine technikphilosophische Podiumsdiskussion über die kommende Hypermoderne und was sie mit unseren Datenspuren macht. Mit Prof. Bernhard Irrgang, TU Dresden Paul Stadelhofer und Kai Uwe Michel, netphiltech.com ajuvo, c-base, about this event: https://c3voc.de

"Willkommen in der Welt von *BSD!" Die Veranstaltung wird die bestehenden Abarten und Ausprägungen von BSD (UNIX) vorstellen. about this event: https://c3voc.de

Writing FOSS software is fun. But re-using software of other people tends to be the opposite of fun, often because we can not even install it from source. This talk will present how to properly open source software for reusability. We will introduce the concept of software packaging, existing solutions from well-known Linux distributions and modern all-rounders such as conda up to from-source dist...

Am Anfang wurden Computer mit Menschen verglichen, damit an dem Fremden etwas Vertrauliches entdeckt werden konnte. So, wie man beim Tisch bis heute von "Beinen" spricht, half damals die Metapher vom "Elektronengehirn". Heute wird, andersrum, der "Arbeitsspeicher" bemüht, um z. B. über das Kurzzeitgedächtnis des Menschen zu reden - und gleichzeitig fleißig an menschenähnlichen Robotern gebastelt....

Die SLUB hat als erste wissenschaftliche Bibliothek Deutschlands ein Makerspace eröffnet. Im Vortrag wird über die Motivation, Herausforderungen, Nutzungsbedingungen und die Integration des Makerspace und seiner Angebote in Forschung und Lehre berichtet. about this event: https://c3voc.de

about this event: https://c3voc.de