Chaos Computer Club - recent events feed

“lau diba oi„ (Motu für “Ich kenne Dich") dreht sich um das pazifische Konzept von Mana – den spirituellen Zweck, den alles hat. Sinn und Zugehörigkeit – tief in der Kultur und den Vorfahren verwurzelt, befreit von Vorstellungen, die wir von uns selbst haben, mit wiederentdecktem Selbstbewusstsein. Mit Spoken Word, Tanz, experimentellem Sound und Streichinstrumenten führt uns die BiPoC-FLINTA-Gruppe auf eine Reise zu uns selbst. Language: EN Translation: NO Recording: YES “When I follow the river to its source, the place where I originally belong is myself. Who is she? Who was she? Who will she be?” “lau diba oi” (Motu for “I know you”) revolves around the Pacific concept of mana —the spiritual purpose that everything has. Rediscovering meaning, belonging, and self-awareness — deeply rooted in culture and ancestors, freeing ourselves from the ideas we have about ourselves. Spoken word, dance, experimental sounds, string instruments. Collective, queer, BiPoc, FLINTA. Language: EN Translation: NO Recording: YES Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

„Haare ab, Haare hoch, steil, ein Gebirge aus Haar, Haare wie Messer, die aus dem Kopf stechen.“ Eine jugendliche Punkerin spricht am Ende der DDR über ihr Leben und ihre Erfahrungen. Ihr älteres erwachsenes Ich kommentiert und reflektiert aus der Zukunft. Es geht um Kunst und Liebe, um Anarchie, um das Rumhängen mit Freunden, um das Baden in der Kiesgrube und darum, dass sie nicht Frau sein will, sondern Punk, aber immer wieder Frau sein muss. Durch die Ich-Figur gehen diverse politische Diskurse hindurch und kommen spielerisch zum Ausdruck. Noisiger Live-Sound unterstreicht die Wortspiele. Language: DE Translation: YES Recording: YES “Hair off, hair up, steep, a mountain of hair, hair like knives sticking out of the head. "A young punk talks about her life and experiences at the end of the GDR. Her older adult self recalls the past from the future. It's about art and love, anarchy, hanging out with friends, swimming in the gravel pit. It’s not wanting to be a woman but a punk, and always being put back into a woman-shaped box. Various political discourses are coursing through the first-person narrator in a playful way. Noisy live sound underscores the juicy words. Language: DE Translation: YES Recording: YES Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

The board will be available during this time to present and provide information for the project. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Want to talk a few minutes about interesting stuff? => Add yourself to https://etherpad.opensuse.org/p/lightning-talks-osc2025 Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

With the integration of systemd-boot or grub2-bls bootloaders in the distribution, both (partially) following the boot loader specification (BLS), we have the chance to use the systemd tools to set a full disk encryption installation using TPM2 and FIDO2 keys. The sdbootutil is managing both aspects, the BLS integration and the FDE configuration. In this talk we will present how this model works in openSUSE and how can be used and troubleshooted. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

How does openSUSE look from the outside? In this talk, two SUSE expats share how their Geeko hearts started to ache when they were no longer part of the inner circle. Where are openSUSE's strengths, and how are they shining? Where does it desperately need to improve to maintain relevance? There is so much excellence across so many disciplines to be presented to communities outside SUSE's roof. Is openSUSE targeted being an in-house project, or is it ready to engage more broadly with the open source world? Expect some war stories from the days after, and some highly subjective advice. We will leave you and us with some answers and many open questions. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

In this talk, we’ll explore how Supervision streamlines common computer vision tasks, from loading datasets to annotating and analyzing images or videos. We’ll also discuss its lightweight nature, making it an ideal choice for running AI-powered vision applications on resource-constrained devices. Through practical demonstrations, attendees will learn how to set up and optimize Supervision for real-world IoT applications, including smart surveillance, automated counting, and industrial monitoring. Whether you're a developer, researcher, or IoT enthusiast, this session will show how you can leverage Supervision to bring efficient computer vision solutions to edge devices. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

The exponentially growing **AI/ML** and **LLMs** advancements bring concerns about privacy, as there is a risk of data exposure to online LLMs service providers. Setting up **LLMs in-house** requires a **high computational cost** which is a major obstacle for businesses across various sectors such as Retail, Healthcare, Finance, etc. These industries seek to leverage the power of LLMs to drive **profitability** in their overall business while maintaining **control over their data.** In this session, we will explore the **Edge Ecosystem Analytics** and its transformative potential in **GenAI Applications** through seamless orchestration via **openSUSE Leap** and **Rancher-managed Kubernetes**. This approach helps overcome challenges in adopting and deploying cutting-edge GenAI applications securely and efficiently at the edge. Key Topics: - Overview of **Large Language Models (LLMs)** - Scope for **Edge Computing** in AI revolution - Benefits over privacy concerns by **localization of LLMs** - Real-world Application Showcase by leveraging **GenAI for Edge Ecosystem Analytics** - Integration of Retrieval-Augmented Generation (**RAG**) Pipeline into **Rancher & K3s** - Challenges while deploying **GenAI applications at the Edge** This short talk will showcase a real-world GenAI-based application, highlighting the utilization of the **RAG pipeline** as well as a **data modeling pipeline** to continually improve analytic outputs and its seamless integration with **Rancher and K3s**. Attendees will learn about **Rancher and K3s** in managing Kubernetes deployments for GenAI applications, LLM optimization techniques such as **RAG**, overview of **Fine Tuning** and **AI Agents**. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

At oSC23, I [presented](https://www.youtube.com/watch?v=abNBhLug2Ls) the challenges that we, a small community of openSUSE users, faced back home when building our first mirror in Mauritius. Two years later, I'm sharing updates on how we're expanding further and adding a second mirror in Mauritius to host more mirror content for the local community. We still face challenges, which I will share during this talk, and I hope it triggers a discussion around how we can further optimize and support mirrors for smaller economies. If we get things right, it can be a template for other countries that still do not feature on [mirrors.opensuse.org](https://mirrors.opensuse.org). Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Let's discover how to extend ArgoCD's capabilities by building a sophisticated drift detection and auto-remediation system. We'll demonstrate how to combine ArgoCD's Resource Hooks, Custom Health Checks, and the ApplicationSet controller to create an intelligent system that not only detects configuration drift but automatically resolves it based on defined policies. Through live coding, we'll build a custom controller that monitors for unauthorized changes, implements smart rollback decisions, and provides real-time notifications. Learn how to leverage ArgoCD's API to implement advanced reconciliation patterns, track drift metrics, and create audit trails of all remediation actions. Perfect for teams dealing with dynamic environments where maintaining configuration consistency is crucial. This session advances the GitOps ecosystem by: - Introducing new patterns for extending ArgoCD's core functionality - Contributing an open-source drift detection framework - Demonstrating advanced use cases for Resource Hooks - Providing solutions for common enterprise compliance challenges - Showing how to build sophisticated automation around ArgoCD - Sharing reusable patterns for custom health checks - Adding intelligence to standard GitOps workflows Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Scham durchdringt alle Lebensbereiche. Was passiert, wenn wir unsere Scham offenlegen? Wie reagieren wir, wenn wir uns selbst mit unserer Scham konfrontieren? Ist Scham eigentlich immer sozial? Das Kollektiv Rhymth berührt uns mit fragmenthaften Texten, vielen kleinen, nicht selten aufwühlenden, intimen„Alltagserfahrungen“ und detaillierten Beobachtungen. Durch das Offenlegen des Individuellen hoffen wir, das Kollektive besser zu verstehen. Language: DE + EN Translation: YES Recording: YES Shame permeates all areas of life. What happens when we reveal our shame? How do we react when we are confronted with our own shame? Is shame always social? The collective Rhymth touches us with fragmentary texts, many small, often disturbing intimate “everyday experiences” and detailed observations. By revealing the individual detail, we hope to better understand the big picture. Language: DE + EN Translation: YES Recording: YES Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

No one wants to be responsible for breaking the build. But what can you do as a developer to avoid being the bad guy? How can project leads enable their teams to reduce the occurrence of broken builds? In talking within our own teams, we discovered that many developers weren’t running sufficient integration and End to End tests in their local environments because it’s too difficult to set up and administer test environments in an efficient way. That’s why we decided to rethink our entire local testing process in hopes of cutting down on the headaches, heartaches, and valuable time wasted. Enter Kuttl. Connecting Kuttl to CI builds has empowered our developers to easily configure a development environment locally that accurately matches the final test environment — without needing to become an expert CI admin themselves. These days, we hear, “Who broke the build?” far less often — and you can too! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

We'll showcase the next big thing for authentication @ SUSE, the current landscape and the challenges we're facing. Agenda: - Motivation & Concerns (The current software stack in place and the administration challenges) - Project Scope (Tenets & Priorities) - Connection points with openSUSE Community - Timeline - Demo Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Es gibt sie, die guten Lösungen für (Klima-)Gerechtigkeit und echte Nachhaltigkeit, auch wenn einige rechte, alte Männer gerade alles tun, um mit aller Gewalt den Deckel drauf zu halten. Maja Göpel, Nachhaltigkeits- und Transformationsforscherin, ist eine, die ihr alle kennen solltet! Autorin zahlreicher Bücher, Forscherin und Beraterin. Immer ist sie mit der Frage beschäftigt: Wie können wir das “andere”, bessere Leben gestalten? They exist: good solutions for (climate) justice and genuine sustainability, even if some right-wing old men are currently doing everything in their power to keep them under wraps. Maja Göpel, sustainability and transformation researcher, is someone you should all know! Author of numerous books, researcher, and consultant: she is always preoccupied with the question: How can we shape a “different”, better life? Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Many of you know that the [kiwi](https://osinside.github.io/kiwi/) appliance image build tool is used to produce most of openSUSE's images. But did you know that other distributions have recently adopted it too, particularly our friends in the Fedora and CentOS projects? This presentation discusses the story of how this came to be, the methodology of encouraging growth and development, the feedback that improved kiwi in the process, and the takeaways for encouraging broader community adoption of good tools, regardless of who they're from. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

With the types of products and projects that we regularly work on many of us don't get alot of exposure to new fancy technology, this talk aims to give a quick introduction to one of these topics, web assembly. As some background, For the last year i've been helping to port Little Piggy Tracker (LGPT) a clone of the LSDJ audio software for Game Boy to various handheld devices. At the same time I saw a conference talk that was an introduction to web assembly, this prompted me to ask the ever dangerous question "how hard can it be?" It turns out the answer to that question was not that hard so this talk will go through a brief overview of webassembly followed by the process I went through to port my code along with some of the other challenges i've had porting LGPT to other devices. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Distributed compute at scale is a bit complex back home in Mauritius - cloud service providers are literally an ocean away, and local policies have a history of hindering technological progress. To "bring the cloud home", so to speak, a small team of tech enthusiasts decided to build a Kubernetes (K3s) cluster distributed across the country, in a bid to drive down costs while boosting resilience and availability. This session goes over the challenges of setting up such a geographically distributed cluster on baremetal hardware, including fighting latency, connection issues, dynamic IPs, and distributed storage, all while keeping costs minimal. While not entirely technical in nature, this presentation will go over some of the very unique challenges of living on an island in Africa with regards to The Cloud and digital infrastructure in general. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Unsere langjährige Weggefährtin Greta teilt mit uns ihr fundiertes Wissen zu Menopause, hormonellen Hintergründen, emotionalen Symptomen und dem Einfluss persönlicher Lebensmuster. Sie nährt uns mit ihrem Wissensschatz, QiGong-Körperübungen und neuen, stärkenden Ideen zu einer Lebensphase, über die wir entweder gar nicht oder negativ sprechen – lasst uns das gemeinsam ändern! Wechseljahre, ein Thema für uns alle, denn wir sind entweder selbst betroffen oder kennen Menschen, die es sind. Language: DE Translation: YES Recording: YES Our longtime companion Greta shares her in-depth knowledge of menopause, its hormonal background, emotional symptoms, and the influence of personal lifestyle patterns. She empowers us with her wealth of knowledge, QiGong exercises, and new, strengthening ideas about a phase of life that we either don't talk about at all or talk about negatively—let's change that together! Language: DE Translation: YES Recording: YES Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Open-source software has transformed the software industry, resulting in lower costs, greater security, and much greater flexibility for software developers and end users alike. The transparency provided by open-source software has improved security dramatically. Companies cannot hide back-doors in open-source software. Open solutions allow widespread review and testing, resulting in improved software quality and security. While there are a few open-source hardware projects, most notably RISC-V, most hardware remains proprietary and closed-source. Engineers developing new products often use chips that are black-boxes. This is particularly problematic when developing solutions using hardware secure elements, small security chips used in IoT devices, crypto hardware wallets, mobile devices, industrial control systems, and other small devices. Developers have no visibility into the implementation of these devices, and cannot validate their security. In this presentation we will cover: Challenges with closed source hardware secure elements: Our experience with closed source secure elements (and the problems we found) Benefits of open source/open architecture hardware secure elements: Transparency, trust, and auditability Rapid response to vulnerabilities Community collaboration and innovation Compliance & certification Get your devkit at the workshop or order here and start playing! :) https://145324096.hs-sites-eu1.com/samples-order-form Documentation and tools: https://github.com/tropicsquare Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

How do you scale quality in a fast-moving open source project like Uyuni? In this talk, I’ll walk you through our journey adopting TestOps practices to bring automation, visibility, and resilience into our quality engineering process. We’ll explore how infrastructure automation with Terraform and Salt laid the foundation for consistent, on-demand testing environments. From there, we introduced test observability using Prometheus and Grafana to analyze historical trends and gain visibility into test behavior over time. A key part of our process includes tracking flaky tests and known issues through a custom system that connects our internal QE workflows directly with test reports. To accelerate feedback loops, we implemented smart test selection in Pull Requests, targeting only the affected components with relevant end-to-end tests. We also integrated synthetic monitoring of key product metrics into our daily pipelines, ensuring continuous insight into overall health. Thanks to designing our own DevContainers, we improved engineer's experience on their IDEs. We are also working on providing public AWS-based test reports reinforcing transparency. Our journey is a story of small, iterative changes that helped us align quality with development at scale. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

# Kalpa Desktop is a Plasma desktop derived from MicroOS, and Tumbleweed, providing a immutable system base, with a containerized workflow, through distrobox and podman, and Desktop applications via Flathub. ## Kalpa grew out of the initial work by Richard Brown, with MicroOS Desktop, but has diverged over the past three years. ## Kalpa's focus is on providing users with: - A well-tested and current Plasma-Wayland desktop - A minimal installation, without a bunch of applications you may not want or need - Robust stability, through the use of atomic updates, no more broken updates - Just a "Damn Good™" basic desktop installation, that's designed to *be* a desktop, and that's all # This presentation will present the current state of the Project, and examine the future roadmap for Kalpa Desktop. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Ever wonder what goes on behind the scenes to keep your favorite open-source projects (relatively) secure? Spoiler alert: it's not magic (mostly)! This talk is a peek into the world of a security engineer who spends their days auditing code, hunting down vulnerabilities, and trying to make the open-source world a little less "Oops!" and a little more "Awesome!". We'll dive into: - What actually goes into a software audit. (Think less "spreadsheets," more "WTF is that?") - The thrill (and occasional horror) of vulnerability research. - Why this matters to you, even if you don't write code for a living. (Hint: it's about more than just avoiding the next big breach.) - How we, as a community, can all contribute to making open source safer – because, let's face it, we're all in this together. So, if you've ever been curious about the security side of open source, or just want to hear some war stories from the front lines, come join me! Let's talk about how we can make the open-source ecosystem more secure, one audit at a time. For you, for me, for everyone! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

The current process of openSUSE membership application can be cumbersome and overall approval deem lengthy or inconsistent. This is due to way applications are made, some times information is lacking, there are back-and-forths, before membership officials can finalise an application. The current state of membership management has its limitations and it is not friendly, either for the members, the membership officials, or the election officials (who need the active membership info to run elections). In this lightning talk, I'll quickly go through some of the hurdles and possible solutions to ease the process. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

To ease the pain of testing container images, we’ve developed the `pytest_container` plugin for [pytest](https://pytest.org/). The plugin makes it possible to use pytest to perform tests on containers and software inside containers. You don’t have to take care of pulling images, building them, or picking ports on the host. You just describe your container setup and pass it to a test function. In return, the plugin gives you a connection to the container. Using the connection, you can verify the container’s state using the [testinfra](https://testinfra.readthedocs.io/) python framework. The plugin even cleans up after itself when you’re done. In short, `pytest_container` makes it possible to write tests in Python: no need to build your own framework from scratch or worry about the boring container plumbing tasks. Join this talk to see `pytest_container` in action and learn how it can make your life easier! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

The Steam Deck has transformed mobile gaming — but in one crucial area, it still lags behind: security. Until now, no Steam Deck-focused Linux distribution has offered full disk encryption by default, leaving sensitive user data unprotected. In this talk, I present Yuga Linux, a distribution built on openSUSE technologies, tailored specifically for the Steam Deck with a strong focus on security, compatibility, and gaming performance. I will explain how Yuga Linux leverages openSUSE packages and the Open Build Service (OBS) to build a custom kernel and all essential components to fully support both SteamOS's gaming and desktop modes — while adding something no other Steam Deck distribution currently offers: secure, user-friendly encryption. You'll learn: - Why encryption matters for handheld gaming devices. - How I integrated tik, the installer from Aeon, to support TPM-backed full disk encryption. - How I built deckrypt, a custom tool that allows users to input passwords using the Steam Deck's gamepad when fallback manual unlocking is needed. - The challenges and key technical decisions behind building an openSUSE-based gaming distro for a new hardware category. The session will include a live demo of the boot process, unlocking the encrypted system, and running Steam Gamemode and Desktop Mode seamlessly on Yuga Linux. If you’re curious about gaming, Linux customization, TPM integration, or just want to see what the future of secure mobile gaming looks like, this talk is for you. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

In this session, a brief explanation about what Uyuni is and what it can achieve will be shared as an introduction for newbies or as a knowledge reminder for the part of the audience already knowing the product. This part of the session is mainly a summary of last year's session. Secondly, we will try to summarize the changes that have happened within the last year in Uyuni, in the period of time between the last openSUSE Conference and now. Last but not least, we will try to look forward and present what's coming next (what we know) and also gather feedback of where we want to move to (about what we don't know). Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de