Chaos Computer Club - archive feed

The development model for the classic release distribution of openSUSE - Leap - has changed several times. Currently it shares the binaries with SUSE SLE. This has advantages, but as well limitations. The talk explains how the development model has evolved and its current pitfalls. In the second part we will introduce the Adaptable Linux Platform (ALP) and discuss the current state of development The development model for the classic release distribution of openSUSE - Leap - has changed several times. Currently it shares the binaries with SUSE SLE. This has advantages, but as well limitations. The talk explains how the development model has evolved and its current pitfalls. In the second part we will introduce the Adaptable Linux Platform (ALP) and discuss the current state of development about this event: https://c3voc.de

Spring Forward, Fall Back... but why? Take a trip from Railway Time to the Olson database, as we explore the strange history of Time Zones and Daylight Saving Time. about this event: https://c3voc.de

DNS is at the heart of the network. Without it, we are hopelessly lost. We can't even google for it. It allows us humans to map the network into the human domain and vice-versa. Yet we ignore it as unimportant part of network security fabric and allow individual unnamed corporation to control over 20% the internet lookups, because they are not evil. This presentation should serve as a quick survey of DNS technologies from basic overview of how DNS works, to DoT, DoH, and DNScrypt. Finally we cover DNSSEC and reasons we should stop ignoring it if we want a trustworthy and resilient infrastructure. Finally we will cover why running your own DNS server should be the first thing you do to secure your own networks. Fun Fact: pdns-recursor in openSUSE is DNSSEC validating by default for half a decade already DNS is at the heart of the network. Without it, we are hopelessly lost. We can't even google for it. It allows us humans to map the network into the human domain and vice-versa. Yet we ignore it as unimportant part of network security fabric and allow individual unnamed corporation to control over 20% the internet lookups, because they are not evil. This presentation should serve as a quick survey of DNS technologies from basic overview of how DNS works, to DoT, DoH, and DNScrypt. Finally we cover DNSSEC and reasons we should stop ignoring it if we want a trustworthy and resilient infrastructure. Finally we will cover why running your own DNS server should be the first thing you do to secure your own networks. Fun Fact: pdns-recursor in openSUSE is DNSSEC validating by default for half a decade already about this event: https://c3voc.de

centre is a simple Go program (github.com/https://github.com/Harvey-OS/go/tree/main/cmd/centre), which runs as a daemon or interactive program and lets you manage all your IoT devices with one file -- formatted like /etc/hosts. centre was originally written for Plan 9 networks, but is becoming widely used for many other Oses. Like many of us, I have a house full of IoT and server systems, some running Plan 9, some Linux, and all of which need DHCP, TFTP, HTTP, and 9P boot services. Over the years, I've had my fun with various DHCP daemons, TFTP and HTTP boot servers, and 9p servers for Plan 9. All of these needed configuration files in all kinds of formats, and all had lots of ways to fail with each new upgrade. centre removes these headaches. With just one program, one directory, and one configuration file, all the services you need are managed by the centre. In this talk, I'll go over what it is, how to set it up, and how it works. centre is a simple Go program (github.com/https://github.com/Harvey-OS/go/tree/main/cmd/centre), which runs as a daemon or interactive program and lets you manage all your IoT devices with one file -- formatted like /etc/hosts. centre was originally written for Plan 9 networks, but is becoming widely used for many other Oses. Like many of us, I have a house full of IoT and server systems, some running Plan 9, some Linux, and all of which need DHCP, TFTP, HTTP, and 9P boot services. Over the years, I've had my fun with various DHCP daemons, TFTP and HTTP boot servers, and 9p servers for Plan 9. All of these needed configuration files in all kinds of formats, and all had lots of ways to fail with each new upgrade. centre removes these headaches. With just one program, one directory, and one configuration file, all the services you need are managed by the centre. In this talk, I'll go over what it is, how to set it up, and how it works. about this event: https://c3voc.de

You're shopping for new hardware, but you're not sure if it will be supported by openSUSE? This talk explains some basics on how hardware support works and what ways you have to find out if your hardware is supported or not. After 17 years of Linux hardware compatibility testing and hardware certification I can tell some good advice. You're shopping for new hardware, but you're not sure if it will be supported by openSUSE? This talk explains some basics on how hardware support works and what ways you have to find out if your hardware is supported or not. After 17 years of Linux hardware compatibility testing and hardware certification I can tell some good advice. about this event: https://c3voc.de

The ceremony in which we open the event about this event: https://c3voc.de

<p>Seit Jahren fliehen Menschen aus Krisen- und Kriegsregionen über die sogenannte Balkanroute, auf der Suche nach einem sicheren Ort zum Leben. People on the Move stecken, im bosnischen Grenzkanton Una-Sana, in einer „Sackgasse“, weil die kroatische Polizei systematisch gewaltvolle Pushbacks, also illegale Rückführungen aus Kroatien nach Bosnien, durchführt.</p><p>Diese rechtswidrige, unmenschliche Praxis wird von der EU mitfinanziert. In Bosnien und Herzegowina ist die Situation für die Fliehenden katastrophal: unter menschenunwürdigen Bedingungen leben sie in Zelten und Ruinen.</p><p>Seit dem Februar 2022 fliehen circa 5 Millionen Menschen aufgrund des Angriffskriegs in der Ukraine und viele konnten innerhalb kürzester Zeit sichere Orte in der EU finden. Dieses Verantwortungsbewusstsein und die gelebte Solidarität für ukrainische Menschen auf der Flucht, zeigt was möglich ist, wenn der politische Wille zum Handeln vorhanden ist: sichere Fluchtwege und offene Grenzen sind umsetzbar!</p><p>Wie kann dieser politische Willen genutzt und ausweitet werden? Wie kann Aufmerksamkeit verteilt werden? Und welche Rolle spielen Vereine die People on the Move unterstützen dabei?</p><p>Im Rahmen der monatlich stattfindenden Veranstaltung "Debate! Humanitarian Aid" von Cadus e.V., berichtet <a href="https://blindspots.support/" rel="noopener" target="_blank">Blindspots</a> von der aktuellen Lage im bosnisch-kroatischen und slowakisch-ukrainischen Grenzgebiet und zeigt dabei Lebensrealitäten von Menschen vor Ort auf. Zudem wird die Arbeit von Blindspots vorgestellt – einem Verein, der People on the Move unter dem Motto „SolidarityWithoutBorders“ unterstützt.</p> about this event: https://cadus.org/debate

At SUSE, and openSUSE we have short feedback loops to ensure compliance with a range of certifications, but our tools can have real world impact beyond the physical barriers, I will talk about how openQA can support operations in Healthcare, Manufacturing, Automotive, Edge, Transportation, and Elections. At SUSE, and openSUSE we have short feedback loops to ensure compliance with a range of certifications, but our tools can have real world impact beyond the physical barriers, I will talk about how openQA can support operations in Healthcare, Manufacturing, Automotive, Edge, Transportation, and Elections. about this event: https://c3voc.de

In this talk I'm gonna talk about how we use self hosted and open source solutions at school. In this talk I'm gonna talk about how we use self hosted and open source solutions at school. about this event: https://c3voc.de

As the world moves to using machine learning more and more, a question arises of how to prevent cyber criminals from attacking systems using ML frameworks. In this talk, we will cover why machine learning needs security practices and how we develop TensorFlow to be secure. We will discuss topics such as fuzzing and code transformations for secure software development with a focus on how these are applied within TensorFlow ecosystem. As the world moves to using machine learning more and more, a question arises of how to prevent cyber criminals from attacking systems using ML frameworks. In this talk, we will cover why machine learning needs security practices and how we develop TensorFlow to be secure. We will discuss topics such as fuzzing and code transformations for secure software development with a focus on how these are applied within TensorFlow ecosystem. about this event: https://c3voc.de

warewulf4 is a rewrite of the well known warewulf cluster management tool in golang. With this new iteration its possible to leverage the possibilities which emerged with broad use of containers. The origins of warewulf4 is the hpcng community which is/was also behind projects like Apptainer (former known as Singularity), Centos and Rocky linux. A basic setup of a HPC cluster and the key concept of the configuration mechanism of warewulf4 are covered in this talk. warewulf4 is a rewrite of the well known warewulf cluster management tool in golang. With this new iteration its possible to leverage the possibilities which emerged with broad use of containers. The origins of warewulf4 is the hpcng community which is/was also behind projects like Apptainer (former known as Singularity), Centos and Rocky linux. A basic setup of a HPC cluster and the key concept of the configuration mechanism of warewulf4 are covered in this talk. about this event: https://c3voc.de

This talk will introduce the SUSE Product Security team, who handles the software security processes for openSUSE and also SUSE Linux Enterprise. The SUSE Product Security work is split into "reactive" and "proactive" areas and engineering groups these days. Reactive work refering to what is traditionally known as "security incident response", while proactive refers to security audits, design reviews and related areas of secure software development. The talk will focus on the reactive side, giving statistics, and talk about some highlights from the last year. Also bringing a small overview over how closing the leap gap changes affects the openSUSE Maintenance process. This talk will introduce the SUSE Product Security team, who handles the software security processes for openSUSE and also SUSE Linux Enterprise. The SUSE Product Security work is split into "reactive" and "proactive" areas and engineering groups these days. Reactive work refering to what is traditionally known as "security incident response", while proactive refers to security audits, design reviews and related areas of secure software development. The talk will focus on the reactive side, giving statistics, and talk about some highlights from the last year. Also bringing a small overview over how closing the leap gap changes affects the openSUSE Maintenance process. about this event: https://c3voc.de

Recently MicroOS can be installed with remote attestation, using the TPM as a root of trust and Keylime as a service to report and verify the status of our systems. In this talk we will see what is a TPM, how Keylime can be installed in MicroOS and used to monitor the health of our system in production and what to do when we detect a compromised system. Recently MicroOS can be installed with remote attestation, using the TPM as a root of trust and Keylime as a service to report and verify the status of our systems. In this talk we will see what is a TPM, how Keylime can be installed in MicroOS and used to monitor the health of our system in production and what to do when we detect a compromised system. about this event: https://c3voc.de

The SUSE QE Tools Team - Who we are and what we are doing. This talk will give an overview of who is the SUSE QE Tools team, what is in our responsibility, what we did in the past time and what we do. The products that we care about will be presented and the workflows of the team will be shown. Opportunities for contributions will be discussed. https://v.gd/okurz_osc22 The SUSE QE Tools Team - Who we are and what we are doing. This talk will give an overview of who is the SUSE QE Tools team, what is in our responsibility, what we did in the past time and what we do. The products that we care about will be presented and the workflows of the team will be shown. Opportunities for contributions will be discussed. https://v.gd/okurz_osc22 about this event: https://c3voc.de

The SLE Base Container Images (BCI) want to create a flexible developer experience that provides, integrates with, and supports language native tools and workflows by offering a self-contained environment targeting a specific version of any given programming language ecosystem to facilitate software development, testing and deployment.​ These images are meant to run on any Linux and K8s distributions, are freely redistributable and come with a pre-configured repository offering the same enterprise grade packages shipped by SUSE flagship product SUSE Linux Enterprise Server. The freely available repository offers a lighter set of packages carefully cherry-picked from the official SLES repositories, however it is possible to push an already purchased SLES subscription to these images hence having access to the full universe of packages available. The SLE Base Container Images (BCI) want to create a flexible developer experience that provides, integrates with, and supports language native tools and workflows by offering a self-contained environment targeting a specific version of any given programming language ecosystem to facilitate software development, testing and deployment.​ These images are meant to run on any Linux and K8s distributions, are freely redistributable and come with a pre-configured repository offering the same enterprise grade packages shipped by SUSE flagship product SUSE Linux Enterprise Server. The freely available repository offers a lighter set of packages carefully cherry-picked from the official SLES repositories, however it is possible to push an already purchased SLES subscription to these images hence having access to the full universe of packages available. about this event: https://c3voc.de

General security recommendations for openSUSE developers. This includes specific recommendations on how to package software in a more secure ways and how to create a developer setup that is secure. For this we will shed some light on the specific challenges and quirks of the tool chains we use and how they relate to security. General security recommendations for openSUSE developers. This includes specific recommendations on how to package software in a more secure ways and how to create a developer setup that is secure. For this we will shed some light on the specific challenges and quirks of the tool chains we use and how they relate to security. about this event: https://c3voc.de

The way how we build openSUSE Leap has changed, so did the way how we report issues against it. This lightning talk will show you how to correctly report bugs for openSUSE Leap. https://en.opensuse.org/openSUSE:Submitting_bug_reports The way how we build openSUSE Leap has changed, so did the way how we report issues against it. This lightning talk will show you how to correctly report bugs for openSUSE Leap. https://en.opensuse.org/openSUSE:Submitting_bug_reports about this event: https://c3voc.de

Whats up with openSUSEway? Current status. Sharing the results of running openSUSEway/sway on openSUSE MicroOS Desktop and Fedora. https://denisok.github.io/oSC/oSC22-openSUSEway.html Whats up with openSUSEway? Current status. Sharing the results of running openSUSEway/sway on openSUSE MicroOS Desktop and Fedora. https://denisok.github.io/oSC/oSC22-openSUSEway.html about this event: https://c3voc.de

This talk is the annual review of openSUSE on Arm, mainly focused on AArch64, but it will also cover armv7 and armv6. At the end, we will have a quick look at the future and where the community could help. This talk is the annual review of openSUSE on Arm, mainly focused on AArch64, but it will also cover armv7 and armv6. At the end, we will have a quick look at the future and where the community could help. about this event: https://c3voc.de

Since long every year is announced to be the "year of the Linux desktop", and every year there is no real breakthrough. In this talk I will look at some reasons why there is no breakthrough yet. **About me:** Software developer, 25+ years Linux. I was the person responsible for Linux on the Desktop at the last European PC manufacturer (Fujtsu) for 17 years and can tell from my own experience why Linux on the desktop is an ongoing struggle. Since long every year is announced to be the "year of the Linux desktop", and every year there is no real breakthrough. In this talk I will look at some reasons why there is no breakthrough yet. **About me:** Software developer, 25+ years Linux. I was the person responsible for Linux on the Desktop at the last European PC manufacturer (Fujtsu) for 17 years and can tell from my own experience why Linux on the desktop is an ongoing struggle. about this event: https://c3voc.de

** Required Magic's Carpet: How we designed a mass deployment system for Linux. ** In 2014 we started working with a major Irish bank to help them with a project to upgrade 7,500 Linux workstations across all of their branches. Over the next two years we completed that task - not just once - but on a weekly basis, across 900 locations - with just **two** people, and **zero** site visits. Our discoveries of their systems and techniques led us to build "Carpet" (formally known as "Snoopea"), a tool to rapidly roll out - and maintain - Linux systems across a wide area network. The systems don't have to be desktop based either - so long as the devices are network connected, Carpet can deploy IOT, Server and virtual machines too. This high level talk is an overview of the the journey to take the original CLI based system to a modern, web based tool - including how we used Kiwi (and image builder), and Nuitka (a python compiler) to build certain components. We'll start from the beginning for those that missed the first part in 2019! ** Required Magic's Carpet: How we designed a mass deployment system for Linux. ** In 2014 we started working with a major Irish bank to help them with a project to upgrade 7,500 Linux workstations across all of their branches. Over the next two years we completed that task - not just once - but on a weekly basis, across 900 locations - with just **two** people, and **zero** site visits. Our discoveries of their systems and techniques led us to build "Carpet" (formally known as "Snoopea"), a tool to rapidly roll out - and maintain - Linux systems across a wide area network. The systems don't have to be desktop based either - so long as the devices are network connected, Carpet can deploy IOT, Server and virtual machines too. This high level talk is an overview of the the journey to take the original CLI based system to a modern, web based tool - including how we used Kiwi (and image builder), and Nuitka (a python compiler) to build certain components. We'll start from the beginning for those that missed the first part in 2019! about this event: https://c3voc.de

A New Way to Create Enlightenment Themes. Enlightenment Themes are very large and complex, this makes them immensely flexible but also means the amount of effort to create a new Theme is huge. To try and find some middle ground here I have been working on a new theme engine that is much less flexible but means you can create a new theme just by changing images and a couple of files. One of the first examples of this is the new default theme for openSUSE Leap 15.4. In this talk I'll walk through the process of making a new theme with this engine as well as showing a few examples. I'll also show you how to make GTK and KDE apps play nicely together. But because everyone is not interested in Enlightenment i'll spend a fair section of time explaining how gtk and kde themes work and how you can or can't easily make your own versions of them. A New Way to Create Enlightenment Themes. Enlightenment Themes are very large and complex, this makes them immensely flexible but also means the amount of effort to create a new Theme is huge. To try and find some middle ground here I have been working on a new theme engine that is much less flexible but means you can create a new theme just by changing images and a couple of files. One of the first examples of this is the new default theme for openSUSE Leap 15.4. In this talk I'll walk through the process of making a new theme with this engine as well as showing a few examples. I'll also show you how to make GTK and KDE apps play nicely together. But because everyone is not interested in Enlightenment i'll spend a fair section of time explaining how gtk and kde themes work and how you can or can't easily make your own versions of them. about this event: https://c3voc.de

The board will kick off the conference and give some options important to be discussed throughout the event. The board will kick off the conference and give some options important to be discussed throughout the event. about this event: https://c3voc.de

"Ich sollte mehr Sport machen." - Wer hat sich das noch nicht gedacht? In diesem Petit Foo geht es um Sport speziell für Nerds: Welche Möglichkeiten gibt es? Wie kann man Sport effektiv und nerdfreundlich betreiben? Und worauf sollte man achten? about this event: https://www.chaospott.de

Laut der Homepage der Stadt Zürich werden in einer smarten Stadt gute Ideen entwickelt und umgesetzt: «Smart City Zürich steht für Innovation in der Stadtverwaltung Zürich. Durch Testen, Lernen und Fördern von innovativen Vorhaben nutzt Smart City Zürich den digitalen Wandel als Chance für die Stadt. Das Ziel ist es, heute und in Zukunft die hohe Lebensqualität in Zürich zu erhalten und weiter auszubauen, die nachhaltige Entwicklung zu fördern und Zürich als Innovations- und Wirtschaftsstandort zu stärken.» Wie die Stadt diese grossen Ziele erreichen möchte, welche Hürden es auf dem Weg dahin gibt und wie es mit dem Umgang mit Personendaten steht, diskutieren wir mit Maximilian Stern. Maximilian Stern ist Politikwissenschafter, Co-Autor der «Agenda für eine digitale Demokratie» (mit Daniel Graf) und Vizepräsident des staatslabors. Seit drei Jahren ist er Co-Programmleiter im Smart City Team der Stadt Zürich, wo er an der Digitalisierung von Dienstleistungen und Prozessen der Zürcher Stadtverwaltung arbeitet. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zur-frage-wie-wird-zuerich-eine-smartcity/

Presentation of case studies of the XRCB in the context of Barcelona and the decentralization of open infrastructures for radio broadcasters. about this event: https://pretalx.c3voc.de/ecb2022/talk/T7TEJG/