Канал: All Systems Go!

asynchronous dbus with C++ co-routines

asynchronous dbus with C++ co-routines

antlir2: Deterministic image builds with buck2

antlir2: Deterministic image builds with buck2

Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes!

Microsoft Azure Boost: Image-based Linux powering the Azure fleet. Wait, what? Really?! Yes!

mkosi: Building Bespoke Operating System Images

mkosi: Building Bespoke Operating System Images

Wolfi: A Secure-by-Default Distro for Curing Container CVE Chaos

Wolfi: A Secure-by-Default Distro for Curing Container CVE Chaos

Building image-based OSes with BuildStream

Building image-based OSes with BuildStream

Closing session of All Systems Go! 2023

Closing session of All Systems Go! 2023

openSUSE Aeon - Desktop Linux finally done right?

openSUSE Aeon - Desktop Linux finally done right?

Exploring RAUC: A Flexible Building Block for Image-Based Updates

Exploring RAUC: A Flexible Building Block for Image-Based Updates

systemd-repart: Building Discoverable Disk Images

systemd-repart: Building Discoverable Disk Images

Replica.one: A Software-defined Operating System

Replica.one: A Software-defined Operating System

tvix-store

tvix-store

Attaching CPUs via USB

Attaching CPUs via USB

Carbon OS + homed

Carbon OS + homed

Oxidizing the Arch Linux packaging infrastructure

Oxidizing the Arch Linux packaging infrastructure

A/B partitioning - let's talk about the dirty RW files

A/B partitioning - let's talk about the dirty RW files

64-bit time_t on armhf: Running abi-compliance-checker on all of Ubuntu

64-bit time_t on armhf: Running abi-compliance-checker on all of Ubuntu

Principle of least configuration

Principle of least configuration

PID FD-ize all the things!

PID FD-ize all the things!

Casync is not dead, or how I learned to love desync

Casync is not dead, or how I learned to love desync

Fast, correct, reproducible builds with Nix + Bazel

Fast, correct, reproducible builds with Nix + Bazel

A story of a bootloader^W^Wthree bootloaders

A story of a bootloader^W^Wthree bootloaders

Kernel command line and UKI; systemd-stub and the ‘stubby’ alternative

Kernel command line and UKI; systemd-stub and the ‘stubby’ alternative

systemd-boot integration in openSUSE

systemd-boot integration in openSUSE

Writing your own NixOS modules for fun and (hopefully) profit

Writing your own NixOS modules for fun and (hopefully) profit

Trusted, Confidential and Cloud Native Workloads. An intro to the Confidential Containers project

Trusted, Confidential and Cloud Native Workloads. An intro to the Confidential Containers project

Talos Linux - TrustedBoot for a minimal Immutable OS

Talos Linux - TrustedBoot for a minimal Immutable OS

Confidential Compute: State-of-the-art and how to get started

Confidential Compute: State-of-the-art and how to get started

Adventures of Linux Userspace at Meta

Adventures of Linux Userspace at Meta

Making a magic deduplicating tar using the FICLONE ioctl

Making a magic deduplicating tar using the FICLONE ioctl

Disaggregated networks: Is network hardware special?

Disaggregated networks: Is network hardware special?

Y2038: replace utmp with logind

Y2038: replace utmp with logind

WIP: Sandboxing APT

WIP: Sandboxing APT

Booting fast: Why does power-on to login still last longer than one second?

Booting fast: Why does power-on to login still last longer than one second?

Linux & TPMs

Linux & TPMs

An Unified TPM Event Log for Linux

An Unified TPM Event Log for Linux

Gaining Linux insights with Inspektor Gadget, an eBPF tool and systems inspection framework

Gaining Linux insights with Inspektor Gadget, an eBPF tool and systems inspection framework

bpfilter: a BPF-based packet filtering framework

bpfilter: a BPF-based packet filtering framework

Soft Reboot: atomically replace rootfs and reboot userspace without kernel restart

Soft Reboot: atomically replace rootfs and reboot userspace without kernel restart

New Mount API

New Mount API

Why would you still want to use strace in 2023?

Why would you still want to use strace in 2023?

Retake of service restarts

Retake of service restarts

System and Configuration Extensions for Image-based Linux Distros and Beyond

System and Configuration Extensions for Image-based Linux Distros and Beyond

Forensic container checkpointing and analysis

Forensic container checkpointing and analysis

Unified Kernel Images (UKIs)

Unified Kernel Images (UKIs)

Encrypted Btrfs Subvolumes: Keeping Container Storage Safe

Encrypted Btrfs Subvolumes: Keeping Container Storage Safe

Opening session of All Systems Go! 2023

Opening session of All Systems Go! 2023

All Systems Go! Live Stream

All Systems Go! Live Stream

All Systems Go! 2019

All Systems Go! 2019

Closing

Closing

Senpai - Automatic memory sizing for containers

Senpai - Automatic memory sizing for containers

The state of Thunderbolt on GNU/Linux

The state of Thunderbolt on GNU/Linux

Stateful systems on immutable infrastructure

Stateful systems on immutable infrastructure

Linux distro should be an upstream contributor too

Linux distro should be an upstream contributor too

eBPF support in the GNU Toolchain

eBPF support in the GNU Toolchain

Purely Functional Package Management

Purely Functional Package Management

Boot Loader Specification + sd-boot

Boot Loader Specification + sd-boot

Yomi - an openSUSE installer based on SaltStack

Yomi - an openSUSE installer based on SaltStack

systemd @ Facebook in 2019

systemd @ Facebook in 2019

Generating seccomp profiles for containers using podman and eBPF

Generating seccomp profiles for containers using podman and eBPF

BMC management with bmc-toolbox

BMC management with bmc-toolbox

Container Live Migration

Container Live Migration

OCIv2: Container Images Considered Harmful

OCIv2: Container Images Considered Harmful

iwd - State of the union

iwd - State of the union

pidfds: Process file descriptors on Linux

pidfds: Process file descriptors on Linux

Squeezing Water from Stone - KornShell in 2019

Squeezing Water from Stone - KornShell in 2019

Trust is good, control is better - A (short) story about Network Policies

Trust is good, control is better - A (short) story about Network Policies

Building Portable Service Images with Buck

Building Portable Service Images with Buck

oomd2 and beyond: a year of improvements

oomd2 and beyond: a year of improvements

Distributing Freedesktop SDK applications to Flatpak, Snapd and Docker

Distributing Freedesktop SDK applications to Flatpak, Snapd and Docker

Development and testing with lrun

Development and testing with lrun

Coinboot - Cost effective, diskless GPU clusters for blockchain hashing and beyond

Coinboot - Cost effective, diskless GPU clusters for blockchain hashing and beyond

Using RPMs for systemd development

Using RPMs for systemd development

Alternatives to standard utilities

Alternatives to standard utilities

Custom cgroup-bpf programs in systemd

Custom cgroup-bpf programs in systemd

Impact of zstd

Impact of zstd

Time-limited login sessions

Time-limited login sessions

Buildroot : Using embedded tools to build container images

Buildroot : Using embedded tools to build container images

News from the coreboot land

News from the coreboot land

Revamping libcontainer's systemd driver

Revamping libcontainer's systemd driver

Microcontroller Firmware from Scratch

Microcontroller Firmware from Scratch

Resource control @ Facebook - 2019

Resource control @ Facebook - 2019

Transactional Updates with Btrfs

Transactional Updates with Btrfs

GNU poke, an extensible editor for structured binary data

GNU poke, an extensible editor for structured binary data

How Microsoft SQL Server Went Multi-Platform: SQLPAL

How Microsoft SQL Server Went Multi-Platform: SQLPAL

Securing Bare Metal Micro Services: Service Mesh

Securing Bare Metal Micro Services: Service Mesh

Reinventing Home Directories

Reinventing Home Directories

PostgreSQL at low level: stay curious!

PostgreSQL at low level: stay curious!

Rootless, Reproducible & Hermetic: Secure Container Build Showdown

Rootless, Reproducible & Hermetic: Secure Container Build Showdown

Effective infrastructure monitoring with Grafana

Effective infrastructure monitoring with Grafana

Traceloop for systemd and Kubernetes + Inspektor Gadget

Traceloop for systemd and Kubernetes + Inspektor Gadget

Privacy-Respecting Linux Desktop Monitoring

Privacy-Respecting Linux Desktop Monitoring

Atomic updates and configuration files in /etc

Atomic updates and configuration files in /etc

Opening

Opening

Closing

Closing

Early boot provisioning systems

Early boot provisioning systems

Lightning Talks

Lightning Talks

Netboot21: Bootloaders in the 21st Century

Netboot21: Bootloaders in the 21st Century

Efficient Network Analytics with BPF/eBPF using Skydive

Efficient Network Analytics with BPF/eBPF using Skydive

Using systemd to high level languages

Using systemd to high level languages

Past, present and future of system containers

Past, present and future of system containers

Is Cockpit Secure?

Is Cockpit Secure?

Replacing Docker with Podman

Replacing Docker with Podman

Fearless Multimedia Programming

Fearless Multimedia Programming

libcapsule

libcapsule

Using Machine Learning to find Linux bugs

Using Machine Learning to find Linux bugs

Configuration Driven Event Tracing with Traceleft and eBPF

Configuration Driven Event Tracing with Traceleft and eBPF

2018 Desktop Linux Platform Issues

2018 Desktop Linux Platform Issues

Kexec/Kdump under the hood

Kexec/Kdump under the hood

The Future of Networking APIs

The Future of Networking APIs

Flatpak, a technical walkthrough

Flatpak, a technical walkthrough

The State of Your Supply Chain

The State of Your Supply Chain

Chef in Strange Places

Chef in Strange Places

Passive filesystem verification

Passive filesystem verification

Running Android on the Mainline Graphics Stack

Running Android on the Mainline Graphics Stack

Peer to peer OS and flatpak updates

Peer to peer OS and flatpak updates

Container Runtimes: draw some lines

Container Runtimes: draw some lines

State of systemd @ Facebook

State of systemd @ Facebook

Scale Your Auditing Events

Scale Your Auditing Events

CRI-O: All the Runtime Kubernetes need

CRI-O: All the Runtime Kubernetes need

BPF and the future of the kernel extensibility

BPF and the future of the kernel extensibility

Is my system fast?

Is my system fast?

Portable Services are Ready to Use

Portable Services are Ready to Use

Thunderbolt 3 hardware enablement for GNU/Linux

Thunderbolt 3 hardware enablement for GNU/Linux

Container Run-times and Fun-times

Container Run-times and Fun-times

Titus: Adventures in Multi-tenant Scheduling

Titus: Adventures in Multi-tenant Scheduling

dbus-broker

dbus-broker

systemd in 2018

systemd in 2018

Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security

Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security

oomd

oomd

To Run an App With Guarantees We Must First Create The Universe

To Run an App With Guarantees We Must First Create The Universe

Fluent Bit: Solving Logging Challenges for Cloud Native Environments

Fluent Bit: Solving Logging Challenges for Cloud Native Environments

Path-agnostic binaries, co-installable libraries, and How To Have Nice Things

Path-agnostic binaries, co-installable libraries, and How To Have Nice Things

From Physical to Cloud to Container

From Physical to Cloud to Container

Playing with casync @ instagram

Playing with casync @ instagram

Monitoring Linux Capabilities in the Container using BPF

Monitoring Linux Capabilities in the Container using BPF

Monitoring File System Syscalls in a Distributed Architecture

Monitoring File System Syscalls in a Distributed Architecture

Being compliant with Open Container Initiative Spec

Being compliant with Open Container Initiative Spec

Resource Control @FB

Resource Control @FB

nettools

nettools

A debugger from scratch

A debugger from scratch

HTTP tunneling in Go using HTTP/2 streams

HTTP tunneling in Go using HTTP/2 streams

LinuxBoot and booting fast

LinuxBoot and booting fast

Little Services, Big Risks

Little Services, Big Risks

Fedora CoreOS

Fedora CoreOS

2017 Software updates for connected Linux devices: key requirements

2017 Software updates for connected Linux devices: key requirements

2017 Landlock LSM: Towards unprivileged sandboxing

2017 Landlock LSM: Towards unprivileged sandboxing

2017 Journal as a Storage and Other Adventures in User Session Recording

2017 Journal as a Storage and Other Adventures in User Session Recording

2017 Closing

2017 Closing

2017 Updating Embedded Systems -- Putting it all Together

2017 Updating Embedded Systems -- Putting it all Together

2017 Tango with systemd

2017 Tango with systemd

2017 Building a secure boot chain to userland

2017 Building a secure boot chain to userland

2017 What's in a container? The OCI Answer

2017 What's in a container? The OCI Answer

2017 Update on new WiFi daemon for Linux

2017 Update on new WiFi daemon for Linux

2017 Creating your own 1password clone

2017 Creating your own 1password clone

2017 Insecure containers?

2017 Insecure containers?

2017 Virtualization: what changed in the last decade

2017 Virtualization: what changed in the last decade

2017 Which network to use when - Socket Intents

2017 Which network to use when - Socket Intents

2017 Introducing Bluetooth Mesh

2017 Introducing Bluetooth Mesh

2017 Meson and the changing Linux build landscape

2017 Meson and the changing Linux build landscape

2017 High-performance Linux monitoring with eBPF

2017 High-performance Linux monitoring with eBPF

2017 Synchronizing images with casync

2017 Synchronizing images with casync

2017 Cyborg Teams

2017 Cyborg Teams

2017 Simulate hardware for integration testing

2017 Simulate hardware for integration testing

2017 Modern deployment for Embedded Linux and IoT

2017 Modern deployment for Embedded Linux and IoT

2017 Using BPF in Kubernetes

2017 Using BPF in Kubernetes

2017 kube-spawn: testing multi-node Kubernetes clusters on Linux systems

2017 kube-spawn: testing multi-node Kubernetes clusters on Linux systems

2017 Unbreaking reloads: strategies for fast and non-blocking reconfiguration

2017 Unbreaking reloads: strategies for fast and non-blocking reconfiguration

2017 cgroupv2: Linux's new unified control group hierarchy

2017 cgroupv2: Linux's new unified control group hierarchy

2017 kubernetes for toasters?

2017 kubernetes for toasters?

2017 What If Component xxx Dies? Introducing Self-Healing Kubernetes

2017 What If Component xxx Dies? Introducing Self-Healing Kubernetes

2017 Using systemd for containers @ Facebook

2017 Using systemd for containers @ Facebook

2017 Portals, dynamic permissions in Flatpak

2017 Portals, dynamic permissions in Flatpak

2017 systemd @ Facebook — a year later

2017 systemd @ Facebook — a year later

2017 Getting Started with Habitat

2017 Getting Started with Habitat

2017 Azure networking integration challenges

2017 Azure networking integration challenges

2017 Fix, forget, or forge a new path?

2017 Fix, forget, or forge a new path?

2017 Really crazy container troubleshooting stories

2017 Really crazy container troubleshooting stories

2017 Containers without a Container Manager, with systemd

2017 Containers without a Container Manager, with systemd

2017 State of the rkt container runtime

2017 State of the rkt container runtime

2017 Reproducible Builds - where do we want to go tomorrow?

2017 Reproducible Builds - where do we want to go tomorrow?

2017 Streamlining systemd's code and safety

2017 Streamlining systemd's code and safety

2017 Containers: What Did We Learn?

2017 Containers: What Did We Learn?

2017 Rust memory management

2017 Rust memory management

2017 A gentle introduction to [e]BPF

2017 A gentle introduction to [e]BPF

2017 The IoT botnet wars, Linux devices, and the absence of basic security hardening

2017 The IoT botnet wars, Linux devices, and the absence of basic security hardening

2017 Cockpit: A Linux sysadmin session in your Browser

2017 Cockpit: A Linux sysadmin session in your Browser

2017 Securing Home Automation with Tor

2017 Securing Home Automation with Tor

2017 Building containers all day

2017 Building containers all day

2017 Network troubleshooting in heterogeneous cloud environment with Skydive

2017 Network troubleshooting in heterogeneous cloud environment with Skydive

2017 Incremental Adoption of Open Services with Habitat

2017 Incremental Adoption of Open Services with Habitat

2017 Opening

2017 Opening