
Chaos Computer Club - archive feed
14,494 episodes — Page 135 of 290
Trust is good, control is better - A (short) story about Network Policies (asg2019)
Testing the effectiveness of Kubernetes Network Policies can be done in different approaches. In this talk we will show you the benefits and drawbacks of different approaches and what solution we finally chose. Probably everybody who uses Kubernetes in a productive environment with multiple users possibly has looked at policies. Often the operators of the cluster(s) just trust the policies but in some cases it might be useful to control if the policies actually have taken action and often there are just to many Policies in the cluster setup to manually test them all (and obviously you don’t want to do this). Testing the effectiveness of the Network Policies can be done in different approaches. In this talk we will show you the benefits and drawbacks of different approaches and what solution we finally chose. Also we will show you some other tools and how they complement our solution. As a takeaway you will get an overview of different testing strategies for policies, as well as understanding challenges in testing policies in general and the Kubernetes ecosystem. We will get a feeling that it’s not always the best idea to just trust other plugins to implement the policies correctly. Our solution is open-sourced under https://github.com/inovex/illuminatio/ about this event: https://cfp.all-systems-go.io/ASG2019/talk/QXMUUW/
Distributing Freedesktop SDK applications to Flatpak, Snapd and Docker (asg2019)
BuildStream is used to build Freedesktop SDK for different deployment systems allowing applications based on it to be distributed at once to multiple systems. Flatpak, Snapd and Docker are similar. They are all used for deployment and applications use their own runtime. Each system has its own tools for development. Flatpak uses Flatpak Builder. Snapd uses Snapcraft. Docker development is based on `Dockerfile`s. Freedesktop SDK was developed to be the runtime of Flatpak. It used to be partly built with Flatpak Builder. It has since changed to be built with a deployment system agnostic tool: BuildStream. For this reason we can export the Freedesktop SDK to multiple formats. We will show how it is possible to build an application for the three systems at once. about this event: https://cfp.all-systems-go.io/ASG2019/talk/CF7FSX/
oomd2 and beyond: a year of improvements (asg2019)
oomd is a userspace out-of-memory killer. This talk covers past, present, and future development along with possible plans for systemd integration. Running out of memory on a host is a particularly nasty scenario. In the Linux kernel, if memory is being overcommitted, it results in the kernel out-of-memory (OOM) killer kicking in. Perhaps surprisingly, the kernel does not often handle this well. oomd builds on top of recent kernel development to effectively implement OOM killing in userspace. This results in a faster, more predictable, and more accurate handling of OOM scenarios. oomd has gained a number of new features and interesting deployments in the last year. The most notable feature is a complete redesign of the control plane which enables arbitrary but "gotcha"-free configurations. In this talk, Daniel Xu will cover past, present, future, and path-not-taken development plans along with experiences gained from overseeing large deployments of oomd. Anita Zhang will close the talk with a discussion of why oomd would be a great addition to systemd. about this event: https://cfp.all-systems-go.io/ASG2019/talk/DQX3DH/
VR Map: Using OSM Data In a WebVR Environment (sotm2019)
Can you actually walk through or fly over a 3D scene of live OSM data using a VR headset - and if so, can this be done in a way that easily transforms to a view on a normal computer (or mobile) screen? The answers are "Yes" and "Yes", and this talk will show how this can be done with relatively simple code, and just inside a web browser! Mixed Reality (XR), i.e. Virtual and Augmented Reality, opens up new possibilities for 3D visualizations of OpenStreetMap data. With WebXR and Mozilla's A-Frame library, it's really simple to create cross-device XR experiences running right in the browser with very little code, and scaling well from mobile via laptop/desktop to fully immersive VR headset experiences. VR Map is a demo that brings all that together and allows you to walk or "fly" through a virtual model of the real world courtesy of live OSM data from the Overpass API. The talk will describe WebXR as Mixed Reality APIs for the browser and A-Frame as Mozilla's library to make it really simple to build WebXR scenes. Then, it will dive into how those technologies were used together with live OSM data to create the VR Map demo and show how it enables people to move through virtual models built from that real-world data. This will include a dive into an actual live demo, and into the HTML+JavaScript code used to create this experience. Through all that, it hopefully will show an interesting new perspective on OpenStreetMap - and hopefully inspire developers to build similar experiences. about this event: https://pretalx.com/sotm2019/talk/9TMRYN/
Squeezing Water from Stone - KornShell in 2019 (asg2019)
Despite of it's old age, ksh still remains one of the most popular shells. In 2013, David Korn and others who worked on ksh were laid off from AT&T Bell Labs. This lead to speculations of death of ksh. In 2017, Siteshwar Vashisht and Kurtis Rader resumed it's development on GitHub. This talk will be about what makes ksh so challenging to maintain and how new developers are trying to revive it. about this event: https://cfp.all-systems-go.io/ASG2019/talk/CV9R3N/
Generating seccomp profiles for containers using podman and eBPF (asg2019)
Currently everyone uses the same seccomp rules for running their containers. This tool allows us to generate seccomp rules based on what the container actually requires and allows us to lock down the container. We had a GSOC student this summer who instrumented podman to allow it to run containers and then genrate the seccomp rules for the container based on the syscalls that the container actually made. Once you have this newly generate seccomp file and are satisfied that you have thoroughly tested the container, you can run the container inproduction using the seccomp.json file. This talk will explain how the tool works and demonstrate it in action. about this event: https://cfp.all-systems-go.io/ASG2019/talk/ACEWHG/
The state of Thunderbolt on GNU/Linux (asg2019)
A summary of the current state of Thunderbolt, kernel as well as user space, including the latest development where the the input–output memory management unit (IOMMU) is used to prevent Direct Memory Access (DMA) attacks. A brief explanation and discussion of such such an attack, the recent Thunderclap attacks, will be given including with a focus on how it is related to the IOMMU feature on Linux. about this event: https://cfp.all-systems-go.io/ASG2019/talk/HXLJNF/
Past and Future of the OSMF Membership Working Group (sotm2019)
What is an OSMF working group, what does the membership working group in particular do, and how can you improve the experience of an OSMF membership. The OSMF working groups are the main way in which the foundation supports OSM in specific areas. I am part of the membership working group since 2016. I will talk about working groups in general, what we do in the membership working group, and also talk about my experience in the latter. In the last year, we had quite a few new things going on like the fee-waiver program, we could improve our processes by using a support tracker and getting part of our procedures finally written down. And then there was the ever increasing wave of member sign ups before the elections, which this year raised the question of how we can protect the OSMF from being taken over by lots of new members from a particular interest group. There is still a lot of room for improvements of the experience for the OSMF members, and a few tasks that are still unresolved will be discussed in the last part of my presentation. And maybe you are interested in helping with one of them. We are all volunteers and it turns out some things need quite a bit of time and endurance to get done. We would be glad to get new participants to our group. about this event: https://pretalx.com/sotm2019/talk/FAGNLA/
Communication and Knowledge Transfer in OSM (sotm2019)
The OSM-Community uses many different platforms and channels to discuss, organize and document internal issues. This talk provides an overview about the relevance and reach of these tools at local and international level and also locks into pros and cons of this strategy of communication in OSM. Creating a world map with as much detail as possible requires a lot of communication at local and international level. There must be a place to discuss local mapping details and to organize mapping and hacking events. Additionally, a lot of international communication is needed in international OSM projects as well as in the OSMF and the Working Groups. Plus users and software developers also have their own discussion and documentation channels. For this purpose a lot of tools and platforms are established in OSM: Mailing lists, forums, wikis, websites, social media, etc. This variety of communication media is important and makes OpenStreetMap the colorful, open and diverse project it is today. But it also complicates the search on a particular topic and raises a number of questions: Where do I have to search to get up-to-date information? How can you distinguish between proposals, current and outdated content? What do you do if many sources contradict each other? How can knowledge best be passed on to subsequent OSM generations? This talk is intended to overview various communication platforms and their relevance and reach at local and international level. In addition, the advantages and disadvantages of the current strategy for communication and knowledge transfer will be discussed. about this event: https://pretalx.com/sotm2019/talk/R3BAWM/
Purely Functional Package Management (asg2019)
Ever experienced a broken system by simply upgrading packages? No more! This talk introduces the purely functional package manager Nix and the advancements all software distributions can benefit from - with some of those already implemented in mainstream package managers like snap. about this event: https://cfp.all-systems-go.io/ASG2019/talk/AD8VYE/
Möglichkeiten der Enttarnung steganographischer Kommunikation im Medium natürlicher Sprachen (DS2019)
Wer sich gegen Überwachung von Kommunikation wehren will, kann sich entweder kryptographischer oder steganographischer Methoden bedienen. Der Vortrag diskutiert die Möglichkeiten und Grenzen der Enttarnung steganographischer Kommunikation im Medium natürlicher Sprachen. Steganographische Kommunikation ist die Kunst des Versendens von Nachrichten über einen offenen Kanal, so dass niemand außer den intendierten Empfänger/innen überhaupt von der Existenz der Nachricht weiß, geschweige denn ihren Inhalt dekodieren kann. Dies unterscheidet sie von der Kryptographie, bei der die Existenz der verborgenen Botschaft prinzipiell wahrnehmbar ist. Häufig werden Bilder als Trägermedien steganographischer Botschaften gewählt. Doch ebenso häufig ist das Verbergen von Nachrichten in unscheinbaren natürlichsprachlichen Nachrichten, etwa wenn Jihadisten Anleitungen zum Bombenbau als Kochrezepte tarnen. Nach einem Überblick über unterschiedliche Spielarten der klandestinen Kommunikation diskutiert der Vortrag die folgenden Fragen: - Was sind typische Merkmale steganographischer Kommunikation im Medium natürlicher Sprachen? - Welche Ansätze zu ihrer Enttarnung gibt es? - Lassen sich überhaupt zuverlässige maschinelle Methoden für die Enttarnung entwickeln? - Mit welchen Maßnahmen kann man eine Enttarnung schwieriger machen? about this event: https://datenspuren.de/2019/fahrplan/events/10373.html
QUBES OS - Eine Einführung (DS2019)
Eine kurze Einführung in Qubes-OS - einem vernünftig sicherem Betriebssystem - und ein Erfahrungsbericht über die private Nutzung des selbigen. Der Vortrag beschreibt die Herausforderungen mit klassischen Betriebssystemen und die Gründe für Qubes OS. Es folgt ein Überblick über die Architektur und ein paar Live-Beispiele. Zum Abschluss gibt es noch ein paar Informationen aus meiner Erfahrung mit Qubes OS. about this event: https://datenspuren.de/2019/fahrplan/events/10456.html
Senpai - Automatic memory sizing for containers (asg2019)
Due to virtual memory and optimistic caching strategies, true memory consumption of an application, and true utilization of a system's RAM, are mostly unknowns on modern operating systems. This has always made memory provisioning a tough and error-prone trial-and-error task, but it's aggravated with containerization, where the stated goal is thinner margins and higher resource efficiency. Senpai is a userspace tool that harnesses recently developed Linux kernel features to automatically shrink cgroups to their smallest possible memory size without notably affecting the performance of the contained applications. This talk goes over the motivation to develop senpai, how it works, and success stories from the Facebook fleet. about this event: https://cfp.all-systems-go.io/ASG2019/talk/TCBLRG/
“Keepin' it fresh (and good)!” - Continuous Ingestion of OSM Data at Facebook (sotm2019)
Building forward from our work presented last year at State of the Map, we have created a system to assist mappers via machine learned models. In addition, we have built an automated ingestion framework for OSM data at scale that allows us to selectively update parts of the map instead of doing a full snapshot change. Building forward from our work on __Mobius Logical Changesets__ (presented last year at SotM US 2018), we have created an __automated ingestion and integrity framework__ for OSM data that allows us to __selectively__ update parts of the map instead of doing a full snapshot change all at once. Decomposing a large set of changes in this way gives us the flexibility to __rapidly ingest__ our own additions to the map, focus on __geographical areas of importance__ to downstream products, and allows us to __quickly apply hotfixes__ whenever egregious problems do arise. With millions of tiny changes happening every week, we have created a system that is built on __per-feature approval and preprocessing__, that allows us to ingest changes at scale, while creating rules to __automatically process logical changesets and enforce integrity constraints (e.g. anti-vandalism, anti-profanity etc.).__ Due to the contextual nature of some of the changes in OpenStreetMap, the system combines Human Approval, necessary for highly visible features such as names of large administrative areas, with __Automated AI/ML-based approval__: for example, using __computer vision techniques__ to reconcile newly created features against __satellite imagery ground truth__, or applying __NLP techniques__ to determine whether other user-visible string changes are sensible and valid. These components are combined to create a __continuous ingest-validate-deploy cycle__ for OSM map data. about this event: https://pretalx.com/sotm2019/talk/3WQKAX/
CyclOSM, a bicycle oriented render for every cyclist (sotm2019)
CyclOSM is a new cycling render. It is free and aims at rendering new bicycle-specific features, in order to take into account the diversity of cycling practices. CyclOSM is a new cycling render. It is free and aims at rendering more features than OpenCycleMap, in order to take into account the diversity of cycling practices. For urban bikers (bike commuting), we decided to render all available types of cycle tracks and lanes, in a lateralized manner, as well as key POIs such as bicycle parkings, parkings shared with motorbikes, specific bike features (elevators / ramps), speed limitations, and surfaces of the highways to avoid paving stones. For bicycle tourers, we also rendered bicycle touring routes as well as a set of essential POIs (emergency services, shelters, tourism, shops) as wel las elevation data to help you design your bike journey. Building on the excellent quality of the OpenStreetMap data in Paris, we are also in touch with some local bicycle organizations to gather feedback and help them have a quick and detailed view of the current state of the cycling road infrastructure in the city. As such, a particular emphasis has been put on well rendering the quality of the infrastructures (clearly differentiating bidirectional cycle ways, dedicated lanes versus shared with public transport, etc) as well as some new elements which were not previously rendered: bike boxes and bumps. Designing a map render for every cyclist is a challenging task: bike infrastructures are usually parcimonious and very tightly bound to the road network, which makes bike-first visualizations not as readable as wished. There are also a wide variety of cyclist profiles, each requiring slightly different emphasis. CyclOSM is our attempt at tackling this challenge. In this talk, we will briefly sum up the main rendered features as well as discuss the design decisions and the difficulties of bicycle-oriented rendering. This talk will also provide a basic "getting started" summary, to help you start contributing and hacking this new render. A demo is already available at https://cyclosm.github.io/cyclosm-cartocss-style/example.html (limited to a few French cities at the moment, soon extended). The CyclOSM render is also available on the MapOSMatic instance https://maposmatic.osm-baustelle.de/. All contributions (issues, enhancements ideas or actual code through pull requests) are welcome at https://github.com/cyclosm/cyclosm-cartocss-style/ ! about this event: https://pretalx.com/sotm2019/talk/SBDEU8/
Lightning Talks II (sotm2019)
Lightning Talks ## OpenStreetMap intrinsic quality assessment using “Is OSM up-to-date?” web application <em>Marco Minghini and Francesco Frassinelli</em> <p>Approaches to analyze OpenStreetMap (OSM) intrinsically, i.e. based on the history of data, have become an established way to achieve a wide range of final goals, most importantly to study its quality. Started in 2017, “Is OSM up-to-date?” is an open source web application licensed under AGPL and mainly written in Python. It can be also run in the command line or inside a Docker container. The target beneficiaries of the software are OSM users and communities, who need to assess the quality of data in a given area to decide whether to use it or not as well as where mapping efforts should be best directed, and OSM researchers and scholars, who can use it as a tool to help in their OSM quality studies. The project has a dedicated wiki page (https://wiki.openstreetmap.org/wiki/Is_OSM_up-to-date), source code is hosted on GitHub (https://github.com/frafra/is-osm-uptodate) and a demo is available at https://is-osm-uptodate.frafra.eu. Using the OSM API, the web application generates history-based, quality-oriented visualizations of OSM nodes and ways having at least one tag for any rectangular user-selected region. Such visualizations (on top of a grayscale OSM basemap) are available for the following criteria: date of creation, date of last edit, number of versions, number of different contributors who edited that node or way, and frequency of update. When an OSM node or way is clicked, a popup shows its values for the previously mentioned criteria as well as the list of currently available tags and the links to the OSM iD editor (in edit mode on that node or way), history and details of that node or way (both linked to the OSM website). A number of additional features to further improve the analysis of quality is currently planned (see https://github.com/frafra/is-osm-uptodate/labels/enhancement).</p> ## Deriviste - Click and Go Photo Mapping <em>Christopher Beddow</em> <p>There are many OSM editing tools, but only one that allows the user to click inside a Mapillary image to add new data to the map. Richard Fairhurst's Deriviste tool was a quick experiment that proved this was possible, but it's important to ask more questions. How useful is the tool? How accurate and precise is it? How can it be improved?</p> ## Fifty states in 12 years and five minutes <em>Minh Nguyễn</em> <p>A whirlwind historical tour of the OpenStreetMap project in the United States.</p> ## "MAPAbabae": Using OSM as a Tool for Mapping with Women and For Women <em>Andi Tabinas, Arnalie Vicario</em> <p>We would like to share how we, as part of the Social Welfare and Development agency of the Philippines (DSWD), have utilized OSM to have a collaborative and gender-inclusive approach of mapping points of interests catering to women.</p> ## Reverse Geocoding Is Not Simple <em>Ilya Zverev</em> <p>Having seen a dozen of different geocoders, I did not expect to find myself writing another one. But here I am, tasked with making a reverse geocoder better than the industry-standard Nominatim. Turns out it is a fun and not so straightforward task. Let’s see what can go wrong.</p> about this event: https://pretalx.com/sotm2019/talk/BBRMPZ/
re:claimID (DS2019)
re:claimID is a decentralised service for self-sovereign personal data sharing. It allows users to reclaim their privacy and control over their digital identities and data while at the same time offering standard compliant protocol support through OpenID Connect. In this lecture, we present the motivation behind the technology and the technical foundations. <p> Today, users are often required to share personal data, like email addresses, to use services on the web. As part of normal service operation, such as notifications or billing, services require access to -- ideally fresh and correct -- user data. Sharing attributes in the Web today is often done via centralised service providers to reduce data redundancy and to give services access to current, up-to-date information even if the user is currently offline. Abuse of this power is theoretically limited by local laws and regulations. But, the past has shown that even well-meaning identity providers struggle to keep user data safe as they become major targets for hackers and nation state actors while striving for monetising anonymised statistics from these data. We advocate for a new, decentralised way for users to manage their identities for the following reasons: </p> <ul> <li> The current state of omniscient identity providers is a significant threat to the users' privacy.</li> <li>Users must completely trust the service provider with respect to protecting the integrity and confidentiality of their identity in their interest.</li> <li>The service provider itself is facing substantial liability risks given the responsibility of securely managing potentially sensitive personal data of millions of users.</li> </ul> <p>re:claimID is built as a service on top of the peer-to-peer framework <a href="https://gnunet.org">GNUnet</a>.<br/> It emerged from research conducted by the research group "Secure Applications and Services" at the <a href="https://www.aisec.fraunhofer.de/de/fields-of-expertise/projekte/reclaim.html">Fraunhofer AISEC</a> research institute.<br/> A scientific, peer-reviewed paper on the theoretical foundations of re:claimID was published at <a href="https://ieeexplore.ieee.org/document/8456003">TrustCom 2018</a> (<a href="https://arxiv.org/abs/1805.06253v1">Arxiv</a>).<br/> re:claimID is primarily developed in the <a href="https://git.gnunet.org/gnunet.git/tree/src/reclaim">GNUnet source tree</a> as Free Software. Accompanying tools and sources can be found in the <a href="https://gitlab.com/reclaimid">Gitlab project</a>. </p> about this event: https://datenspuren.de/2019/fahrplan/events/10383.html
Share Edits and Insights with the Overpass Tools (sotm2019)
<p>Not every data item in OpenStreetMap can have an immediate impact on the rendered map. But you can make every data item visible on a map and share the links or share the data, no matter how much the item is special interest. This is the purpose of Overpass API and Overpass Turbo. Our aim is to create special interest maps like this one for [historic street lamps](http://osmstreetlight.bplaced.net/#16/51.2339/6.7829), this one for [vehicle restrictions](http://maxheight.bplaced.net/overpass/map.html?zoom=14&amp;lat=49.4&amp;lon=8.68&amp;layers=B0000000TFFTFFFFFFFF), or simply [all restaurants by cuisine](https://overpass-turbo.eu/s/I6z). An introduction to the Overpass API, to Overpass Turbo and the query language will be given. The aims are that the participants are afterwards able to filter for one for more tags, variants of tags, one or more keys, geographical regions, and combinations of such criteria. The Overpass API also supports to count objects, to dump them to GeoJSON, to retreive them in QGIS, in uMap, or a couple of [other downstream tools](https://dev.overpass-api.de/overpass-doc/en/targets/index.html). I will try my best to advance to these topics as well, but questions on the more basic issues have precedence. Thus the advanced topics are expected to rather go to an additional informal session if there are people interested in that. Please ensure that your are familar with the concepts of tags, nodes, ways, and relations, or read [an introduction here](https://dev.overpass-api.de/overpass-doc/en/preface/osm_data_model.html). You will benefit best from the workshop if you bring your own device with browser, internet access, and sufficiently large screen to view a map.</p> about this event: https://pretalx.com/sotm2019/talk/N9RCV8/
Introduction to OSM: How it's made and how it's used (sotm2019)
This session provides an entertaining yet informative introduction into everything you need to know about OpenStreetMap. If you're new to OpenStreetMap, or maybe just know a little, then this session will fill you in on everything you need to know about OpenStreetMap. How did it start? How does it work? How can you contribute, and how can you use the data? What is this "Mapnik" think I keep hearing about and why do people always look at me funny when I say the license should be changed? OpenStreetMap is not just a database or a web site; it is a living and breathing project with a huge community and a 15-year history. Rather than just showing a sequence of slides, this session will be a tour de force presented by many different individuals, where entertaining dialogue is interspersed with hands-on short demonstrations and explanations. Attendees will leave this session with a good idea of how OSM works, of how they can contribute to OSM, and of how to use its wealth of data for making their own maps or just counting post boxes in their home town. But they will also see that OSM is very much about human beings. They will learn how to become part of the community of map makers, code writers, and general activists that make OSM into the great success it is today. about this event: https://pretalx.com/sotm2019/talk/NPYVSP/
systemd @ Facebook in 2019 (asg2019)
We'll be covering happenings, learnings and new challenges running and supporting systemd in production on the Facebook fleet throughout the past year. This talk is a followup to [State of systemd @ Facebook](https://cfp.all-systems-go.io/ASG2018/talk/192/) that was presented last year. We'll cover the latest developments, how we're leveraging new systemd features, the design of our CI/CD pipeline for systemd, and finally discuss a number of interesting case studies. about this event: https://cfp.all-systems-go.io/ASG2019/talk/983XHL/
Assisted Intelligence - How we map with the support of new technologies (sotm2019)
Deep learning methods for feature extraction using computer vision are giving concrete results. This talk provides an overview of feature detection from satellite imagery and how machine learning can provide a seamless mapping experience for mappers, allowing them to utilize their knowledge to enrich maps further. Deep learning methods for feature extraction using computer vision are giving concrete results. This talk provides an overview of feature detection from satellite imagery and how machine learning can provide a seamless experience for mappers, allowing them to utilize their knowledge to enrich maps further. When using OpenStreetMap for disaster response and humanitarian action, time and data quality are critical. Automated tools around OpenStreetMap have revolutionized disaster response, allowing mappers to leverage their local knowledge to organize themselves in action and to contribute to highly relevant maps. Over the last year, Tasking Manager team at HOT conceptualized an initiative to test using data derived using machine learning models to improve task creation, quality of edits and overall experience for mappers. Within Tasking Manager Working Groups we are collaborating between different actors to test concepts directly applied to two countries: Tanzania and Uganda. Two tools in pilot phase to assist mappers are around 1) Task Creation and facilitation: identify areas that need most work and/ or need an experienced mapper based on task complexity and gap analysis 2) Assisted Mapping: leverage machines to do the heavy lifting around digitizing features, such as buildings and roads, one by one and allowing mappers to focus on their essential craft of mapping. In this talk the presenters will share their findings, learning and existing challenges with the technology. about this event: https://pretalx.com/sotm2019/talk/DPGWFB/
Driving South East Asia Forward with OpenStreetMap (sotm2019)
It’s been more than a year since we at Grab incorporated OpenStreetMap into our ecosystem and we have come a long way since then. This talk will focus on our learning journey, our tools, the challenges and our experiences working in the South East Asia region and the vibrant OpenStreetMap communities here. In the past few years, Grab as the biggest ride-sharing provider in Southeast Asia, is one of the biggest users and contributors of OpenStreetMap (OSM) in this region. We have put a great amount of effort into building a healthy ecosystem around it. We now have a better understanding of OpenStreetMap, mapping within its infrastructure, and how communities form one of its strongest pillars. We are excited to share how Grab started from scratch and gradually built a unified framework to manage OSM data as well as, more importantly, the velocity and data richness Grab has contributed back to OSM. We have worked closely with the different corporates, partners and the communities in the South East Asia region to support, build, guide, and empower ourselves and the community in contributing to improving OpenStreetMap. It has been a great learning journey so far with its share of peaks and valleys. Through this talk, we’d want to share our challenges and learnings from these experiences with the global OpenStreetMap community: - Grab’s ecosystem of managing OSM is a crowdsourcing system powered by data analysis, AI techniques, and other organic components - These include manual moderation and on the ground feedback from our well-trained map operations officers who are in every country striving to make the map as accurate as possible with local knowledge - Our experience in collaborating with the vibrant South East Asian Communities and different community partners like HOTOSM, through different programs and initiatives leading to a stronger community in this region - Collaborating with imagery partners like OpenStreetCam and Mapillary by contributing and making imagery available for cities like Singapore and Chiang Mai - Working along with the other corporates in this region as well as representing SEA on the OpenStreetMap Foundation advisory board - We will also share interesting findings of OSM in Southeast Asia and also shed light on how Grab has driven OSM to evolve here. about this event: https://pretalx.com/sotm2019/talk/PAG8CN/
Get to know OSGeo and how OSGeo is connected to OpenStreetMap (sotm2019)
OSGeo is all about Open Source Software, Open Data and Open Education. Learn about OSGeo and what builds up this great organization and find out how OpenStreetMap is used by OSGeo projects, how OpenStreetMap can use OSGeo projects and how the two OSGeo and OpenStreetMap are conneted. The Open Source Geospatial Foundation (OSGeo) is a not-for-profit organization whose mission is to foster global adoption of open geospatial technology by being an inclusive software foundation devoted to an open philosophy and participatory community driven development. The foundation provides financial, organizational and legal support to the broader open source geospatial community. OSGeo vision: Empower everyone with open source geospatial OSGeo was founded in 2006 and is well established as a global organization with Local Chapters all over the world. OSGeo represents and supports more than 25 software projects (https://www.osgeo.org/projects/) like QGIS, PostGIS or GDAL. OSGeo organizes many events global and regional all over the world (https://www.osgeo.org/events/). On every event OpenStreetMap is a topic in some of the talks or workshops. The initiative GeoForAll (https://www.osgeo.org/initiatives/geo-for-all/) is an OSGeo Committee and has an Educational outreach and has the mission for making geospatial education and opportunities accessible to all. There is also the OSGeoLive project that covers more than 50 software projects, Open Data and also documentation and tutorials. OSGeoLive is a self-contained bootable DVD, USB thumb drive or Virtual Machine based on Lubuntu, that allows you to try a wide variety of open source geospatial software without installing anything. OpenStreetMap data and software are also included on OSGeoLive. OpenStreetMap data is involved in many OSGeo projects f.e. as sample data, sample service. There is also functionality available to handle OSM data f.e the variety of OSM specific plugins for QGIS or support for OSM in GDAL (https://www.gdal.org/drv_osm.html) or routing on OSM data with pgRouting. Learn about OSGeo and how OSGeo and OSM are connected and join the OSGeo community. about this event: https://pretalx.com/sotm2019/talk/VZVFMS/
Angewandter Datenschutz (DS2019)
Dieser Vortrag gibt einen Überblick wie Datenschutz in der Praxis umgesetzt werden kann. about this event: https://datenspuren.de/2019/fahrplan/events/10467.html
How to use OpenStreetMap data with the Desktop GIS QGIS (sotm2019)
The Desktop GIS QGIS offers many ways to work with OpenStreetMap data. This presentation will give an overview on how you can use OpenStreetMap data with QGIS. The Desktop GIS QGIS (https://qgis.org) is Open Source software and an OSGeo project (https://osgeo.org). QGIS offers many possibilities to work with different sort of data - vector, raster & services. You can visualize, style, edit and process data and your have a great variety of additional functionality via Python plugins. QGIS offers many ways to work with OpenStreetMap data. Most of the possibilities can be added via plugins. You can download OSM data directly - complete data or only a subset via the Overpass API. You can use a search module for OSM data. Load OSM data as OGC WMS or as background. You can create great 3D maps with your OSM data. You can use a routing plugin and offer a routing on your OSM data. You can create field papers and create great print layouts. You can analyze your data and process it. You can publish your OSM data as an OGC WMS or WFS with QGIS Server. QGIS is a great Desktop QGIS and even more. This presentation will give an overview on how you can use OpenStreetMap data with QGIS and will demonstrate it via use cases. QGIS is written in C++ and uses the Qt library. QGIS is a community project with many people from all over the world involved. about this event: https://pretalx.com/sotm2019/talk/JNXE9Q/
Observe - offline, cross-platform field mapping tool for OpenStreetMap (sotm2019)
Over the last few months, we’ve been building an offline first field mapping tool for the OpenStreetMap ecosystem called Observe. Observe makes field surveying, and verification easy for mappers, and works on iOS and Android. My talk will cover how Observe integrates with mapping workflows and helps improve OSM data from the field. I'll also touch upon fundamentals of building Observe and our assumptions on field mapping. Field verification is an important part of keeping OSM data accurate. So far, field mapping exercises are largely manual, cumbersome, or requires internet connectivity. OpenStreetMap has an active mobile editing ecosystem, but they don't offer the same editing experience as iD for beginners. Most often mapping campaigns need an equally good tool that allows edits from the field to verify existing data and improve data quality. Observe is a cross-platform, offline-first field mapping tool for OpenStreetMap, perhaps the first of its kind. Our primary goal was to build an application that makes field observation easy, and provide comparable experience to iD on Android and iOS — with some success. Observe focuses on browsing OSM data, and allows users to add new points, or verify existing information. The edits made offline are stored on the phone, and uploaded when the mapper goes online. Observe is a product of several iterations of user research and a couple of years of conceptualization. The talk will: - introduce motivations behind building Observe - look at some specific use cases in campaign management - share internals of building the application - discuss challenges around offline editing and our approach to conflict resolution - gather feedback and launch a developer edition of the application about this event: https://pretalx.com/sotm2019/talk/39SBT8/
Keynote (sotm2019)
Karen M. Sandler is the executive director of the Software Freedom Conservancy, which is the nonprofit home of dozens of free and open source software projects including Git, Etherpad, QEMU, Selenium and Inkscape (to name a few. She is known as a cyborg lawyer for her advocacy for free software as a life-or-death issue, particularly in relation to the software on medical devices. Prior to joining Conservancy, she was the executive director of the GNOME Foundation. Before that, she was the general counsel of the Software Freedom Law Center. Karen co-organizes Outreachy, the award-winning outreach program for people who are subject to systemic bias and underrepresented in tech. Karen is an adjunct Lecturer-In-Law at Columbia Law School and a Visiting Scholar at UC Santa Cruz. She is the recipient of the Free Software Foundation's 2017 Award for the Advancement of Free Software as well as an O'Reilly Open Source Award. Karen M. Sandler is the executive director of the Software Freedom Conservancy, which is the nonprofit home of dozens of free and open source software projects including Git, Etherpad, QEMU, Selenium and Inkscape (to name a few. She is known as a cyborg lawyer for her advocacy for free software as a life-or-death issue, particularly in relation to the software on medical devices. Prior to joining Conservancy, she was the executive director of the GNOME Foundation. Before that, she was the general counsel of the Software Freedom Law Center. Karen co-organizes Outreachy, the award-winning outreach program for people who are subject to systemic bias and underrepresented in tech. Karen is an adjunct Lecturer-In-Law at Columbia Law School and a Visiting Scholar at UC Santa Cruz. She is the recipient of the Free Software Foundation's 2017 Award for the Advancement of Free Software as well as an O'Reilly Open Source Award. about this event: https://pretalx.com/sotm2019/talk/VC8ESD/
Eröffnung DS19 (DS2019)
Eröffnung der Datenspuren 2019 about this event: https://datenspuren.de/2019/fahrplan/events/10468.html
Hikar - OSM Augmented Reality for Walkers across Europe (sotm2019)
Hikar is an OSM-based augmented reality navigation app for walkers and hikers, showing OSM ways overlaid on the camera feed of the device and, in the latest version, virtual signposts pointing the way to nearby points of interest. This technical talk will introduce Hikar, detail the many new developments since it was last presented at SOTM Birmingham 2013, and describe how it works in technical detail. Augmented reality (AR) has gained a great deal of media attention in recent years, helped in no small measure by the massive mainstream success of Pokemon Go. However, AR has a great deal of potential for real-world applications too, particularly for outdoor users, which has only partly been realised to date. A number of geospatial AR apps have been available for some years, including Layar and Wikitude, primarily focusing on points of interest (POIs), but many are proprietary and closed-source. One potential but little-explored application of AR is to provide navigation tools for hikers and other outdoor users, by overlaying paths and hiking trails on the camera feed of the device. An early version of the app discussed here, Hikar, was presented at SOTM Birmingham 2013, with the footpaths and trails sourced from OSM; however this version was difficult to use and was restricted in coverage to England and Wales. After a hiatus, development on Hikar has restarted in the past year, partly inspired by increased mainstream interest in AR and helped a great deal by the availability of global Terrarium elevation tiles and increasingly-affordable web hosting. The app (available on Google Play) now covers the whole of Europe and shows not only OSM ways but also virtual signposts, showing the distance and direction to nearby OSM POIs at path junctions, helping people navigate in the field. Virtual signposts support Greek and Cyrillic as well as Roman alphabets. The talk will include an in-depth technical discussion on how the virtual signposts feature has been implemented. Problems and issues with the app as it stands (such as the realism of the path and signpost placement, and inaccuracies with GPS and mapping data) will be discussed, along with strategies for resolving those problems, and future work (which may have already started by SOTM) will be outlined, including the use of computer vision and surface detection to more accurately place the virtual data within the real world. about this event: https://pretalx.com/sotm2019/talk/DETEML/
Human Mapping with Machine Data (sotm2019)
How useful are map features automatically extracted from street-level images? Can they be trusted? These are some of the questions we tried to answer through community campaigns and student-led research in 2019. We will share some of these lessons and elicit a broader discussion on the methods that can be used to turn automatically extracted features into useful OpenStreetMap data. In early 2019, Mapillary began generating point data representing map features that have been recognized and extracted from images, including benches, fire hydrants, bike racks, and post boxes. We worked with various Mapillary communities and users to test the value of this new form of data. In this presentation, we’ll explore two campaigns. The first was the ***#mapillary2osm*** campaign which made point data available to six communities (Antwerp, Austin, Ballerup, Kyiv, Melbourne, São Paulo) in GeoJSON files and then encouraged map edits to turn each point into nodes on OpenStreetMap. Each location was given a 25 km^2 focus area and encouraged to add these points with the hashtag ***#mapillary2osm***, with the results being shared on a public leaderboard. The second was a project led by undergraduate students from the University of Washington’s Department of Geography. This particular project focused on a suburb of Portland, Oregon with the goal of validating and verifying Mapillary data in order to enrich OpenStreetMap. This involved measuring the difference between the OpenStreetMap data before and after the project and augmenting with Mapillary point data. We’ll conclude by looking at the longer term possibilities of editing OpenStreetMap with data derived using computer vision. about this event: https://pretalx.com/sotm2019/talk/KAPNKV/
Gehackt. Und nu? (DS2019)
Wer etwas auf sich hält, wird heutzutage auch mal gehackt. Das gilt insbesondere für Unternehmen. Doch wie geht es dann weiter? Dieser Vortrag beschreibt die unterschiedlichen Phasen eines Hackerangriffs und wie man als gehackter professionell reagiert, neudeutsch "Incident Response" betreibt. about this event: https://datenspuren.de/2019/fahrplan/events/10393.html
eBPF support in the GNU Toolchain (asg2019)
This talk covers the ongoing effort about adding eBPF support to the GNU Toolchain. eBPF is a virtual machine running within the Linux kernel; initially intended for user-level packet capture and filtering, eBPF has since been generalized to also serve as a general-purpose infrastructure for non-networking purposes. This talk covers the ongoing effort about adding eBPF support to the GNU Toolchain. eBPF is a virtual machine running within the Linux kernel; initially intended for user-level packet capture and filtering, eBPF has since been generalized to also serve as a general-purpose infrastructure for non-networking purposes. Binutils support is already upstream [1]. This includes a CGEN cpu description, assembler, disassembler and linker. By the time of the conference a simulator will be available as well, along with GDB support. A GCC backend will be submitted for inclusion upstream before September. The first part of the talk will be a brief general description of the project, its components, what motivated us to start working on it, and an update on the project's status at the time of the conference. Then we will discuss the particular challenges of supporting a target like eBPF: On one hand, the kernel virtual machine has some unique characteristics that have a definitive impact on the tooling, like the in-kernel validator and the specialized contexts in which eBPF programs run. We will show how the tools can help improving the eBPF programmer's experience. On the other hand, the exact shape of compiled eBPF code is still subject to change, and is in fact rapidly changing and evolving. Initially quite simple in terms of toolchain needs (single compilation units, no linking) this is changing as more kernel systems are being changed/written to be based on eBPF, and as the in-kernel validator is becoming more and more sophisticated. Along with bigger and more complex programs comes the need for more abstraction, hence modularity and code reuse. Kernel hackers are already discussing about bpf-to-bpf calls, run-time linking, and so on. This increased level of ambition and sophistication imposes additional requirements on the tools. Finally, interoperability with clang/llvm (the other available toolchain supporting eBPF) will be also discussed, in the more general context of ABI and conventions for compiled eBPF, which are still to be (well) defined and documented. [1] https://sourceware.org/ml/binutils/2019-05/msg00306.html about this event: https://cfp.all-systems-go.io/ASG2019/talk/MAYDS8/
Data Quality and Feature Extraction at scale with RoboSat.pink (sotm2019)
How to use plain OpenData and Imagery, to train, an accurate Deep Learning model, able to detect inconsistencies in OSM dataset, to spot it and to extract features. And make it works at scale, with OpenSource solution, named: RoboSat.pink. Deep Learning approaches already proves that they can be helpful for QA or MissingMap areas. RoboSat.pink as an efficient OpenSource Deep Learning toolbox dedicated to GeoSpatial Imagery, can definitely help to quickly compare two datasets, as OSM and a coverage Imagery, and do it at scale. And spot where differences are significant enough, to value, that a human give them a look. This talk will focus on: - How to create an accurate trained model, for buildings and roads detection, from plain OpenData, without the needs to spend to much for hand-labeling features. - How to generate predictions faster, to lower the IT hardware footprint as much as we can. Point here, is to allow that anyone with a recent gamer video card, already can play with this tools. For information, RoboSat.pink main characteristics: - Provides several command line tools, you can combine together to build your own workflow - Follows geospatial standards to ease interoperability and data preparation - OSM data loader (using PyOsmium) - Build-in cutting edge Computer Vision model and loss implementations (and allows to replace by your owns) - Support either RGB or multibands imagery (as multispectral) - Allows Data Fusion - Rich and efficient Data Augmentation abilities (using Albumentations) - Static Web-UI tools to easily display, hilight or select results - High performances about this event: https://pretalx.com/sotm2019/talk/7ZXRXB/
Development and testing with lrun (asg2019)
During development and testing it is often needed to test different kernels or run various sets of unit tests quickly. With lrun it is possible to do exactly that. It utilizes existing technology including UML, KVM and Namespaces to facility different environments. It has been in active use for testing Bluetooth and Wi-Fi features on Linux and can be easily extended to other technologies in the future. This presentation will introduce lrun and its design. It will also show demos of its current use cases. about this event: https://cfp.all-systems-go.io/ASG2019/talk/N8YRKX/
Keynote: Open up! Why digital mobility needs participation (sotm2019)
Baden-Württemberg’s Ministry of Transport aims at developing regional mobility data towards an open and interoperable framework for new mobility solutions - as part of a sustainable traffic system, realising efficiency, climate protection and living quality. On the way there, fair chances for innovation are key: Not only for better results but also for a the involvement of most different societal actors. Cross-thinking and open innovation are corner stones in such a process. Baden-Württemberg’s Ministry of Transport aims at developing regional mobility data towards an open and interoperable framework for new mobility solutions - as part of a sustainable traffic system, realising efficiency, climate protection and living quality. On the way there, fair chances for innovation are key: Not only for better results but also for a the involvement of most different societal actors. Cross-thinking and open innovation are corner stones in such a process. The keynote speech develops the need for open innovation against the background of the concept of sustainable mobility. It also gives insight into participation in innovation projects and the use of Open Street Map as a sustainable and non-discriminatory digital basis for new mobility. about this event: https://pretalx.com/sotm2019/talk/TWARHC/
Who needs money? – Cash for FOSS (DS2019)
Wir stellen unser Förderprogramm für Open-Source-Softwareentwicklung vor und laden zur Bewerbung für die aktuelle Förderrunde ein. Der Prototype Fund ist ein Förderprogramm für selbständige Software-Entwickler*innen und kleine Teams, die innovative Ideen prototypisch umsetzen wollen. Sie bekommen dafür fast 50.000 Euro Förderung vom Bundesministerium für Bildung und Forschung. Wir unterstützen die Projekte nicht nur finanziell, sondern auch ideell, mit Weiterbildungen, Zugang zu Netzwerken und Coachings. Mit dem Prototype Fund fördern wir Public Interest Tech in Deutschland, wir fördern Talente und helfen ihnen dabei, sich zu professionalisieren. Wir schaffen damit ein positives Klima für neue Ideen und mehr Experimentierfreudigkeit. Uns ist besonders wichtig, dass die Bewerbung und die Förderung möglichst unbürokratisch sind. Damit sprechen wir eine neue Zielgruppe an, die besonders engagiert und agil ist und die sich bisher im Fördersystem nicht wiedergefunden hat. Es geht hier um anwendungsnahe Projekte an der Schnittstelle von Technologie und gesellschaftlichen Herausforderungen. Mit ihnen wollen wir die Technikentwicklung vorantreiben. Bis zum 30.9. könnt ihr euch für unsere siebte Bewerbungsrunde bewerben. about this event: https://datenspuren.de/2019/fahrplan/events/10379.html
Building Portable Service Images with Buck (asg2019)
Buck is an opensource build system. At Facebook, we’ve taught it to build container images that work with systemd. At Facebook we use an open-source build system called Buck. Buck is a build system designed to provide more strong guarantees of incremental builds, reproducibility, and dependency management. Open-source Buck can now be used to construct fully described and fully self-contained container images that work with systemd! I will show how we use this tool internally at Facebook and how it can be used externally (It’s open-source!) to build service containers for use by systemd. I will dive into the the details of how these builds are performed with systemd-nspawn, how we use the Buck system to define the systemd services and their dependencies, and how these images work at runtime. about this event: https://cfp.all-systems-go.io/ASG2019/talk/K7E7T7/
Opening (sotm2019)
Opening Session Opening Session about this event: https://pretalx.com/sotm2019/talk/HFET3E/
OsmInEdit : a simple indoor editor (sotm2019)
The Indoor Map Creator is an easy-to-use open-source map editor for OSM indoor data. It's web-based with an intuitive user interface to make mapping indoors accessible and easy for everyone. Check it out and enjoy mapping buildings! The demand for Indoor Navigation is increasing worldwide. Unlike outdoor GPS navigation, indoor navigation is still rare and expanding at a slow pace. That is in part due to the fragmented landscape for positioning technology and in part due to the absence of indoor maps. Successful mapping starts with good tools. That's why we have developed a tool for mappers to create and edit indoor maps easily. With OSMInEdit we aim to repeat the OSM success story for the indoor space. The foundation for the OSM indoor data model is already laid out. The “Simple Indoor Tagging” schema is the community consensus on how to represent indoor data in OSM. It allows tagging of indoor specific content and is actively used and supported by the community. Popular OSM editors like ID and JOSM lack essential features that are required to map buildings - you need, for example, specific styling to filter data level by level, specific indoor tags, and indoor specific validation rules. OSMInEdit is an easy-to-use use web-based map editor that solves these specific challenges. It offers, for example, “Simple Indoor Tagging” presets, specific indoor styling, the ability to import custom floor plans, display them in the background and an easy way to edit routing graphs. about this event: https://pretalx.com/sotm2019/talk/VAADJ9/
Yomi - an openSUSE installer based on SaltStack (asg2019)
We will present [Yomi](https://github.com/openSUSE/yomi), a new proposal for installing Linux using [SaltStack](https://github.com/saltstack/salt). This installer is designed to be used in heterogeneous clusters, where you need a bit of intelligence during the installation and be integrated as one more step in the provisioning process. [Yomi](https://github.com/openSUSE/yomi) is a new kind of installer for the [open]SUSE family based on SaltStack and independent of AutoYaST. The goal of this project is to make the installation of Linux (currently openSUSE) when: * You have a cluster of heterogeneous nodes (different profiles of memory, storage, CPU and network configurations) * The installation needs to be unattended * The installer needs to make decisions based on local profiles and external data * The installation process needs to be integrated, as one step more, into a more complicated provisioning workflow. The dependencies of Yomi are minimal, as only Salt and a very few CLI tools are required, which make it ideal to be deployed a booted from PXE Boot. about this event: https://cfp.all-systems-go.io/ASG2019/talk/KDEYJZ/
Bits und Bäume (DS2019)
Digitalisierung und Nachhaltigkeit sind die entscheidenden, existenziellen Herausforderungen des 21. Jahrhunderts. Obwohl beide Themen stark miteinander wechselwirken, werden sie bislang noch viel zu wenig gemeinsam gedacht und diskutiert. Die Bits&Bäume-Bewegung möchte das ändern! Gemeinsam wollen Menschen aus der Nachhaltigkeitsbewegung und der Tech-Szene aufzeigen, was Digitalisierung und Nachhaltigkeit verbindet und rufen dazu auf, die Grenzen der eigenen Filterblase zu erweitern. Die zentrale Frage lautet dabei: "Wie kann Digitalisierung vom Brandbeschleuniger sozialer und ökologischer Probleme zu einem Teil der Lösung werden?" Der Vortrag gibt - basierend auf den bisherigen Veranstaltungen - einen Überblick, was theoretisch getan werden müsste und stellt andererseits Maßnahmen zur Diskussion, die tatsächlich getan werden können. Die auf der 1. Bits-und-Bäume-Konferenz 2018 in Berlin erarbeiteten <a href="https://bits-und-baeume.org/forderungen/info/de">Forderungen</a> umfassen die Themenfelder Gemeinwohlorientierung, Demokratie, Datenschutz und Kontrolle von Monopolen, Bildung, Entwicklungs- und Handeslpolitk, IT-Sicherheit, sowie die Langlebigkeit von Software und Hardware. Zum Beispiel wird von Unternehmen gefordert, in Produktionsländern menschenrechtliche und ökologische Sorgfaltspflichten einzuhalten oder dass Software-Hersteller die Verantwortung für Sicherheitslücken in ihren Produkten tragen. Diese Forderungen sind einerseits also sehr naheliegend und in ihrer Plausibilität schon fast trivial. Andererseits verdeutlicht ein Abgleich mit der aktuellen Realität doch, wie groß die Missstände tatsächlich sind. Der Wert der elf Forderungen liegt darin, das große Ganze im Blick zu haben. Papier - auch digitales - ist aber geduldig und vom Aufschreiben der Forderungen allein werden diese nicht umgesetzt.<br><br> Die Herausforderung besteht nun darin, Maßnahmen auf individueller, zivilgesellschaftlicher, unternehmerischer und politischer Ebene zu finden und umzusetzen, welche die Digitalisierung im Sinne der B&B-Forderungen umgestalten - Schritt für Schritt und voraussichtlich gegen Widerstände und Beharrungskräfte. about this event: https://datenspuren.de/2019/fahrplan/events/10452.html
Linux distro should be an upstream contributor too (asg2019)
Come and learn about packit: tooling which enables you to integrate your upstream project into Fedora linux. Imagine a world where Linux distributions provide feedback about using your upstream project back to the project. So that when you are working on a change, you'll know right away: * if it builds or a project Z changed API again * if it works or that your change doesn't work with older systemd which this distro has * or if your change breaks components which depend on your project That's not all! If we have a service which can do all of this, why not propose a new upstream release automatically as a change to the linux distro once the release is done? Wouldn't it be awesome if upstream developers could control and track in which version their software is in Fedora 30? Sounds interesting? Please join us in this session and learn more about the packit tool and the packit service: tooling which makes your dream come true. about this event: https://cfp.all-systems-go.io/ASG2019/talk/US8XA9/
Coinboot - Cost effective, diskless GPU clusters for blockchain hashing and beyond (asg2019)
How to run clusters for GPU computing based blockchain hashing diskless on cost effective commodity hardware. Running the nodes of a cluster diskless is quite common in HPC environments. The challenges to run diskless in the context of blockchain hashing for cryptocurrencies are different. There are constraints like to run sufficiently on hundreds of machines with commodity 1 Gbit/s network hardware or the modest RAM size of 4 Gigabyte. This talk will provide insights in the technical approaches that made it possible to run GPU-clusters for blockchain hashing diskless and provide an outlook to other potential GPU-based use cases beyond blockchain hashing. I will discuss like how some early userspace trickery and state of the art RAM compression is used. How to handle the modest given RAM size and how a neat toolset based on container-runtimes helps to easily build boot images and plug-in packages. And how to use plug-in packages as an elegant way for adding further software like proprietary GPU drivers to the computing nodes of the clusters. about this event: https://cfp.all-systems-go.io/ASG2019/talk/XNU7NE/
Revamping libcontainer's systemd driver (asg2019)
In this talk, I'll go through my efforts to revamp libcontainer's systemd driver, in particular to support the unified cgroup hierarchy. libcontainer is part of runc (opencontainers/runc in GitHub) and is used by the Docker and containerd ecosystem to spawn containers. This work is trying to bridge the gap between the Docker/containerd/Kubernetes ecosystem and cgroup2 through the unified hierarchy, using systemd as an authoritative container manager. I'll also touch on alternative approaches (such as crun and systemd-nspawn) and briefly talk about the OCI standard and the need for it to evolve to properly support cgroup2 semantics. about this event: https://cfp.all-systems-go.io/ASG2019/talk/YPU3HL/
Privacy-Respecting Linux Desktop Monitoring (asg2019)
Whether to support users, ensure their security, or meet compliance goals, organizations need to deploy monitoring of their desktop machines. Yet, many approaches overreach by effectively being rootkits. In this presentation, we'll examine: * What data a monitoring system needs to collect * Where the data we need lives on a modern Linux desktop * Which data sources expose sandbox-friendly API access * Sandboxing the monitoring daemon itself about this event: https://cfp.all-systems-go.io/ASG2019/talk/3ZKVWF/
Rootless, Reproducible & Hermetic: Secure Container Build Showdown (asg2019)
How can we build hostile and untrusted code in containers? There are many options available, but not all of them are as safe as they claim to be... Rootless container image builds (as distinct from rootless container runtimes) have crept ever closer with orca-build, BuildKit, and img proving the concept. They are desperately needed: a build pipeline with an exposed Docker socket can be used by a malicious actor to escalate privilege - and is probably a backdoor into most Kubernetes-based CI build farms. With a slew of new rootless tooling emerging including Red Hat’s buildah, Google’s Kaniko, and Uber’s Makisu, we will see build systems that support building untrusted Dockerfiles? How are traditional build and packaging requirements like reproducibility and hermetic isolation being approached? In this talk we: - Detail attacks on container image builds - Compare the strengths and weaknesses of modern container build tooling - Chart the history and future of container build projects - Explore the safety of untrusted builds about this event: https://cfp.all-systems-go.io/ASG2019/talk/PVYETJ/
Our enemies in blue - Kristian Williams (DS2019)
Sometimes things in our society can look as if they were always there. Take for example police. Today majority of the people living next to us can’t imagine the world without police in our neighborhood. However it was not always like that. Kristian Williams, anarchist and author of Our Enemies in Blue and Fire the Cops, will talk about the history of policing in the United States, from its origin in slave patrols to the present era of militarization and community policing. Particular attention will be given to the role of police in repression movement fighting for social justice and greater equality. about this event: https://datenspuren.de/2019/fahrplan/events/10398.html
Time-limited login sessions (asg2019)
How Endless are implementing time-limited scopes in systemd, using that to implement time-limited login sessions, and then using that to implement parental controls on the desktop. about this event: https://cfp.all-systems-go.io/ASG2019/talk/8RB73U/
Transactional Updates with Btrfs (asg2019)
Transactional updates (also called atomic updates) are a way to update a system without interfering with the currently running system - making this a rock-solid way to update any machine, from embedded systems to cluster nodes. What do openSUSE MicroOS, Fedora CoreOS, Chrome OS, Ubuntu Core and Android have in common? All of them are using a *read-only root file system* and so called *transactional / atomic updates* to update a system safely - without having to worry that a broken update could leave your system in some undefined state. This talk will focus on how to use *btrfs*' snapshot feature to implement such a transactional system and explain where the pitfalls of implementing such a system compared to a traditional read-write system are. about this event: https://cfp.all-systems-go.io/ASG2019/talk/SXENPK/
Impact of zstd (asg2019)
Zstandard (zstd) is a new lossless compression algorithm with a very attractive compression rate and performance. In production environments it comes with some quantifiable benefits but also with some surprising issues. about this event: https://cfp.all-systems-go.io/ASG2019/talk/DG3YDE/