Chaos Computer Club - archive feed

Ein deprimierender Überblick und ein hoffentlich weniger deprimierender Ausblick. Das Meme mit dem "This is fine"-Hund in Flammen ist beliebt. Aber damit morgen besser als heute wird, müssen wir aushalten, das vieles so gar nicht in Ordnung ist. Nicht nur, wenn es um Klimakatastrophe und Co. geht, sondern auch in Bezug auf den Grundrechteabbau in unserer digitalen Welt - trotz der vermeintlichen "...

http, ssl, html, js, Werbeblocker ublock origin, noscript, ghostery. ... Was passiert wenn wir uns ins Neuland begeben? In diesem Talk wird eine Reise ins Neuland unternommen. about this event: https://talks.datenspuren.de/ds23/talk/KBWS7U/

Opening about this event: https://talks.datenspuren.de/ds23/talk/VY99KZ/

Podcast Soiree Wir reden wie immer über die News des Monats sowie über OT-Sicherheit. Außerdem füllen wir eure Podcast-Queue. about this event: https://talks.datenspuren.de/ds23/talk/DJYKKS/

Presentation from Solidarity Zone initiative that support those repressed for actions against war Solidarity zone's member will talk about political context, led to the failure of peaceful protest, screws tightening and appearing of individual acts of militant resistance against russian imperialism and military aggression in Ukraine. In our helping work we face, on the one hand, with symbolic acti...

Presentation about repressions in Belarus and anarchists movement in exile In August 2020 belarusian people rose against dictatorship of Alexander Lukashenko hopying to overthrow a regime, existing in Belarus since 1994. Several months of protests ended up in mass wave of repressions and political migration from the country. With thousands of political prisoners out of which at least 30 are anarch...

Closing session of All Systems Go! 2023 about this event: https://cfp.all-systems-go.io/all-systems-go-2023/talk/PKSMVD/

sdbusplus generates ergonomic and compile-time type-checked dbus bindings built atop sd-bus. This library is heavily used within the OpenBMC project to provide all IPC between its many userspace processes. This talk will give an overview of how OpenBMC leverages dbus, how sdbusplus facilitates its usage, as well as an introduction on our approach for asynchronous programming with C++ co-routines....

In this talk we’ll discuss antlir2, Meta’s solution to building container and bare metal operating system images. We’ll talk about how we have built performant, hermetic and deterministic image building infrastructure on top of buck2 (Meta’s new open source build system) and how we enable users to compose their own multi-language projects with full operating systems, write tests and deploy their i...

BuildStream is a tool for building / integrating software stacks. In a way, it has a similar goal to bitbake / yocto and Android repo, but takes a completely different approach. It can be used to take software from various sources, build it with various buildsystems in a reproducible sandbox, and cache results for speedy rebuilds. In this talk I give a brief overview of Buildstream, how it is used...

A quick journey through the Azure infrastructure, specifically looking at how image-based Linux is used for Azure Boost, what it enables, what interesting security and performance features were added and where to find them upstream. Believe it or not, today Linux is right at the core of Microsoft Azure's infrastructure, on the very nodes that run all those fancy virtual machines. Getting there was...

Are you using container images with hundreds of known vulnerabilities? The majority of us are using images based on the Docker official images available on the Docker Hub. This includes base images – such as Debian and Ubuntu – as well as application images such as nginx and redis. Unfortunately these images often have hundreds of known vulnerabilities due to excessively large dependency trees wit...

mkosi is a tool for building operating system images. In this talk we'll give an introduction to mkosi, how we use it to develop systemd and discuss how we want to support running and updating systems with mkosi and other systemd tooling. Github repository: https://github.com/systemd/mkosi/ Initial blog post on mkosi: https://0pointer.net/blog/mkosi-a-tool-for-generating-os-images.html about this...

Recently, atomic updates via image based systems have become more relevant for servers and desktops, as they allow predictable management of large fleets. In the embedded Linux space, this approach has been the default for many years and proven updaters exist already. In this talk, we will delve into RAUC and look at how its design and features have been driven by the requirements for robust, atom...

openSUSE Aeon (formerly MicroOS Desktop) aims to be a fully fledged modern Linux Desktop leveraging as many of the latest user space innovations available including: - Immutable OS with Transactional Updates - Secure Boot - TPM Encryption - Flatpaks & OCI containers as primary application delivery This talk will introduce the distribution, highlight the adoption of some of the latest foundational...

Network operating systems commonly provide a stable userspace platform for networking devices. Integration of userspace applications as well as low-level hardware support are handled by firmware build systems. Existing build systems for network operating systems display numerous limitations by either targeting only distinct types of devices, using cumbersome methodologies to add additional feature...

systemd-repart has recently learned many features to make it useful for building discoverable disk images. In this talk, we'll give a deep-dive on the new features and how they can be used to assemble discoverable disk images. about this event: https://cfp.all-systems-go.io/all-systems-go-2023/talk/VPQADA/

A/B partitioning is great - you hermetically drop-in the whole new OS and boot into it. Although, how can we manage and migrate the RW configuration and state files that lie within? Can we do that reliably on both OS upgrades and downgrades? This talk will explore the design used on the SteamDeck, the issues we've seen while drawing analogies, and future inspiration with "Fitting Everything Togeth...

Arch Linux has worked with its own packaging framework - Arch Linux Package Management (ALPM) - for about 20 years. This talk is about an effort to rewrite low-level components and to create specifications for related metadata files using the Rust programming language. It will cover new projects in the ALPM (https://gitlab.archlinux.org/archlinux/alpm/) group as well as several other related ones...

This talk will explore the ideas from Lennart's "Fitting Everything Together" blog post, particularly the A/B partitioning scheme and its bootloader design, comparing it with the approach used on the SteamDeck. Spoiler alert, we're not using sd-boot. We will focus on the requirements that drove us to the latter design, some implementation details, and hurdles we needed to overcome to achieve that...

Modification of the kernel command line has historically been one of the easiest ways to customize system behavior. Bootloaders allow for persistent changes via config-files and on-the-fly changes interactively during system boot. System behavior changes made via the kernel command line are not limited to the kernel itself. Userspace applications from installers to init systems and beyond also tak...

The build system should get out of the way to let us focus on our tasks, not be distracted by slow or unreliable builds, get fast feedback on changes, and let us know what’s in the software we’re shipping to our users. But, what does it take for a build system to be really fast and reliable? What does it take to know what’s in the software? It requires aggressive parallelism and distributed cachin...

openSUSE is a general purpose, rpm based distribution. One of it's unique features is the use of btrfs snapshots to offer rollback of the root file system of both traditional as well as transactional systems. This talk explains the challenges faced to integrate systemd-boot into openSUSE. about this event: https://cfp.all-systems-go.io/all-systems-go-2023/talk/E9NVZE/

This talk will be a whirlwind overview of NixOS modules and the lessons I've learned with maintaining and writing new ones. Nix modules are the core of how you organize configuration and service config, but there's a lot of "draw the rest of the owl" subtext as to how you actually go about writing them. This talk covers some best practices for how to write and organize your NixOS modules so that y...

The talk wants to provide a brief introduction into Confidential Containers Project. We'll discuss the rationale behind Confidential Computing and how concepts like Trusted Computing or Remote Attestation can be leveraged by end-users to guard their workloads not only from malicious actors but also their cloud service provider. Confidential Containers, an open-source CNCF project, aims to extend t...