https://media.ccc.de/c/osc26 This feed contains all events from osc26 as mp4 see video outro Thu, 10 Sep 2026 11:22:43 -0000 https://static.media.ccc.de/media/events/osc/2026/logo.png https://media.ccc.de/c/osc26 https://media.ccc.de/v/5115-kudos Let me introduce users to our new kudos recognition platform for openSUSE. https://hackweek.opensuse.org/25/projects/kudos-aka-opensuse-recognition-platform Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Sat, 27 Jun 2026 11:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5115-eng-Kudos_hd.mp4?1787147024 OXCqSCGc3txySdzIDaCihA 2026-06-27T11:00:00+02:00 Lubos Kocman No 5115, 2026, osc26, Community, Saal, osc26-eng, Day 3 openSUSE recognition platform Let me introduce users to our new kudos recognition platform for openSUSE. https://hackweek.opensuse.org/25/projects/kudos-aka-opensuse-recognition-platform Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:30:28 https://media.ccc.de/v/5150-amake-a-task-runner-for-your-ai-coding-tools If you've been using AI coding assistants from the terminal (things like Claude Code, Aider, or GitHub Copilot) you've probably noticed that you end up typing the same prompts over and over. "Create a PR for this branch." "Review the diff." "Refactor this module." And when you want to chain them together, you're copy-pasting output between invocations and hoping you don't mess up the order. I got tired of that, so I built amake. The idea is simple: you write an Amakefile (yes, like a Makefile, but for AI prompts) where you define tasks. Each task has a prompt, a tool to run it with, and optionally some dependencies. Then amake run review figures out the dependency graph, runs things in the right order, and pipes captured output from one task into the next. It's make for the age of AI-assisted development, same old idea of declarative task dependencies, just pointed at a different kind of tool. What makes it interesting in practice is that it doesn't care which AI tool you use. Claude Code, Aider, Copilot — they all have different CLIs with different flags and different ways of passing prompts. amake has an adapter layer that handles the translation, so you write the prompt once and pick the tool. You can even mix tools in the same pipeline: have one tool create a PR, then have another tool review it. Or use a completely unknown binary: amake will just shell out to it and pass your prompt as an argument. Some features: - template system for variable interpolation ({{vars.focus}}, {{env.HOME}}, {{tasks.describe.stdout}}); - an --edit-var flag that drops you into your $EDITOR when you need to write something longer than a one-liner; - a dry-run mode so you can verify your dependencies and resolved prompts before anything actually runs. In this talk I'll walk through the motivation and show some real workflows... and of course it's available in openSUSE! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 15:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5150-eng-amake_a_task_runner_for_your_AI_coding_tools_hd.mp4?1787140089 X7eyeG1DgQHKGjLgyA2Txw 2026-06-26T15:30:00+02:00 Alessio Biancalana No 5150, 2026, osc26, New Technologies, Saal, osc26-eng, Day 2 Making AI-assisted development reproducible, one Amakefile at a time If you've been using AI coding assistants from the terminal (things like Claude Code, Aider, or GitHub Copilot) you've probably noticed that you end up typing the same prompts over and over. "Create a PR for this branch." "Review the diff." "Refactor this module." And when you want to chain them together, you're copy-pasting output between invocations and hoping you don't mess up the order. I got tired of that, so I built amake. The idea is simple: you write an Amakefile (yes, like a Makefile, but for AI prompts) where you define tasks. Each task has a prompt, a tool to run it with, and optionally some dependencies. Then amake run review figures out the dependency graph, runs things in the right order, and pipes captured output from one task into the next. It's make for the age of AI-assisted development, same old idea of declarative task dependencies, just pointed at a different kind of tool. What makes it interesting in practice is that it doesn't care which AI tool you use. Claude Code, Aider, Copilot — they all have different CLIs with different flags and different ways of passing prompts. amake has an adapter layer that handles the translation, so you write the prompt once and pick the tool. You can even mix tools in the same pipeline: have one tool create a PR, then have another tool review it. Or use a completely unknown binary: amake will just shell out to it and pass your prompt as an argument. Some features: - template system for variable interpolation ({{vars.focus}}, {{env.HOME}}, {{tasks.describe.stdout}}); - an --edit-var flag that drops you into your $EDITOR when you need to write something longer than a one-liner; - a dry-run mode so you can verify your dependencies and resolved prompts before anything actually runs. In this talk I'll walk through the motivation and show some real workflows... and of course it's available in openSUSE! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:18:54 https://media.ccc.de/v/5171-leadership-in-the-open-source-community I have been in the team lead role for 15 years and am studying an EMBA course. When I review how we ran the openSUSE.Asia Summit for 12 years, I found some important leadership factors that mattered. I would like to share my observation from the openSUSE.Asia Summit to discuss leadership in the Open Source community. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Sat, 27 Jun 2026 10:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5171-eng-Leadership_in_the_Open_Source_Community_hd.mp4?1787114816 SEIiq2oDYR-Qu2ZmPivQwg 2026-06-27T10:00:00+02:00 Sunny No 5171, 2026, osc26, Community, Saal, osc26-eng, Day 3 I have been in the team lead role for 15 years and am studying an EMBA course. When I review how we ran the openSUSE.Asia Summit for 12 years, I found some important leadership factors that mattered. I would like to share my observation from the openSUSE.Asia Summit to discuss leadership in the Open Source community. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:33:22 https://media.ccc.de/v/5180-how-obs-is-used-by-the-syslog-ng-project syslog-ng has been a part of openSUSE for over two decades now. Ever since the Open(SUSE) Build Service has been available, the syslog-ng project has used it in several ways. In his talk, Peter shows you how syslog-ng OBS usage has changed over time. At first, it was simply making the latest syslog-ng version available to openSUSE users. Later, regular syslog-ng git snapshot builds were added. OBS supports a large variety of platforms, which helped to uncover a number of problems related to 32 bit and endianness. Finally, he will talk about Copr, the Fedora build service, and compares it to OBS to highlight the key similarities and differences. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 15:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5180-eng-How_OBS_is_used_by_the_syslog-ng_project_hd.mp4?1787113838 _4iN7TLw-V4IWGCzxyEgpA 2026-06-26T15:00:00+02:00 Peter Czanik No 5180, 2026, osc26, openSUSE, Saal, osc26-eng, Day 2 new versions, snapshots, platforms syslog-ng has been a part of openSUSE for over two decades now. Ever since the Open(SUSE) Build Service has been available, the syslog-ng project has used it in several ways. In his talk, Peter shows you how syslog-ng OBS usage has changed over time. At first, it was simply making the latest syslog-ng version available to openSUSE users. Later, regular syslog-ng git snapshot builds were added. OBS supports a large variety of platforms, which helped to uncover a number of problems related to 32 bit and endianness. Finally, he will talk about Copr, the Fedora build service, and compares it to OBS to highlight the key similarities and differences. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:20:24 https://media.ccc.de/v/5145-stamp Setuid binaries are not dangerous in themselves, but a rather worthwhile target that can lead to privilege escalation if they have a vulnerability. The goal is therefore to eliminate this attack surface. The kernel provides a solution with the no_new_privs flag, which effectively disables setuid/setgid bits and file capabilities. This flag can be set with systemd and the NoNewPrivs option in Pid1. In this talk I will present how this can be reached, what the current status is and where are the remaining problems are. about this event: https://c3voc.de Fri, 26 Jun 2026 14:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5145-eng-Stamp_hd.mp4?1787109789 t8phXdc-RkmhBsPd3Z6taA 2026-06-26T14:30:00+02:00 Thorsten Kukuk No 5145, 2026, osc26, Open Source, Saal, osc26-eng, Day 2 Setuid binaries are not dangerous in themselves, but a rather worthwhile target that can lead to privilege escalation if they have a vulnerability. The goal is therefore to eliminate this attack surface. The kernel provides a solution with the no_new_privs flag, which effectively disables setuid/setgid bits and file capabilities. This flag can be set with systemd and the NoNewPrivs option in Pid1. In this talk I will present how this can be reached, what the current status is and where are the remaining problems are. about this event: https://c3voc.de 00:27:41 https://media.ccc.de/v/5110-event-driven-infrastructure-autonomous-operation-and-unreliable-networks Automotive, industrial, and remote systems often operate in environments where connectivity is intermittent and centralized control cannot be assumed. Most automation assumes the network works and the controller can keep pushing state. In unreliable networks, systems must instead respond to local events, make deterministic decisions, and transition between explicit runtime states. This talk presents an event-driven architecture for infrastructure automation based on state machines and local decision-making. We’ll examine practical design patterns for building predictable, self-healing systems under network instability, and see some demos! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 13:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5110-eng-Event-Driven_Infrastructure_Autonomous_Operation_and_Unreliable_Networks_hd.mp4?1787109178 DxMmmqJXhVbNC4NfBROX2g 2026-06-26T13:30:00+02:00 Bo Maryniuk No 5110, 2026, osc26, New Technologies, Saal, osc26-eng, Day 2 Control Planes Are Optional Automotive, industrial, and remote systems often operate in environments where connectivity is intermittent and centralized control cannot be assumed. Most automation assumes the network works and the controller can keep pushing state. In unreliable networks, systems must instead respond to local events, make deterministic decisions, and transition between explicit runtime states. This talk presents an event-driven architecture for infrastructure automation based on state machines and local decision-making. We’ll examine practical design patterns for building predictable, self-healing systems under network instability, and see some demos! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:44:49 https://media.ccc.de/v/5218-cyber-resilience-act-update Get the update on the EU regulation requiring manufacturers and vendors of digital products to meet cybersecurity standards. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 13:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5218-eng-Cyber_Resilience_Act_Update_hd.mp4?1787103811 pbEzJRKcBtk8MVOZY2pqJA 2026-06-26T13:00:00+02:00 Hans de Raad No 5218, 2026, osc26, Open Source, Saal, osc26-eng, Day 2 Get the update on the EU regulation requiring manufacturers and vendors of digital products to meet cybersecurity standards. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:40:15 https://media.ccc.de/v/5175-opensuse-images-with-mkosi-in-obs For OS images we have kiwi, for Container images we can use Dockerfile or kiwi, but what if you want to build sysext images or UKI files in OBS? You can wrap them in an RPM, but this doesn't make any sense for sysext images or UKI files. In this presentation, I will provide an overview of the current state of image creation with mkosi in OBS. Which kind of images (e.g. Tumbleweed, MicroOS, sysext images, UKI) can we already build and what are the open issues, problems and what works already very well? Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 11:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5175-eng-openSUSE_images_with_mkosi_in_OBS_hd.mp4?1787102774 9XmvugOP19ubu21nASjliA 2026-06-26T11:30:00+02:00 Thorsten Kukuk No 5175, 2026, osc26, New Technologies, Saal, osc26-eng, Day 2 OS, sysext and UKI images For OS images we have kiwi, for Container images we can use Dockerfile or kiwi, but what if you want to build sysext images or UKI files in OBS? You can wrap them in an RPM, but this doesn't make any sense for sysext images or UKI files. In this presentation, I will provide an overview of the current state of image creation with mkosi in OBS. Which kind of images (e.g. Tumbleweed, MicroOS, sysext images, UKI) can we already build and what are the open issues, problems and what works already very well? Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:37:14 https://media.ccc.de/v/5178-elemental-building-an-image-based-opensuse-os Elemental is an open source toolkit that transforms standard OCI container images into fully bootable, immutable operating systems. In this session, we will dive into the new Elemental 3 implementation to showcase how an image-based openSUSE Tumbleweed is achieved and maintained. We will highlight its unique balance of strict immutability and flexible extensibility, driven by systemd-sysext OCI images. Through hands-on examples, attendees will learn how to leverage Elemental's declarative configuration to customize their deployments and learn how declarative, extensible container image paves the way for frictionless integration and lifecycle management in cluster-based cloud environments. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 11:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5178-eng-Elemental_Building_an_Image-based_openSUSE_OS_hd.mp4?1787099072 G305oM5Q8j9YOTKH-Akenw 2026-06-26T11:00:00+02:00 Dirk Müller No 5178, 2026, osc26, New Technologies, Saal, osc26-eng, Day 2 How do you build an operating system that is rock-solid, cloud-native, and highly customizable? Elemental is an open source toolkit that transforms standard OCI container images into fully bootable, immutable operating systems. In this session, we will dive into the new Elemental 3 implementation to showcase how an image-based openSUSE Tumbleweed is achieved and maintained. We will highlight its unique balance of strict immutability and flexible extensibility, driven by systemd-sysext OCI images. Through hands-on examples, attendees will learn how to leverage Elemental's declarative configuration to customize their deployments and learn how declarative, extensible container image paves the way for frictionless integration and lifecycle management in cluster-based cloud environments. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:28:05 https://media.ccc.de/v/5181-sl-micro-merging-to-sles-what-does-it-mean-for-opensuse SUSE has decided to merge two of the products - SUSE Linux Micro is not a standalone product, but SUSE Linux Enterprise Server can now operate in both standard and immutable mode. This talk will discuss the benefits for the overall code base, for the future of Leap Micro as well as for the openSUSE in general. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 10:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5181-eng-SL-Micro_Merging_to_SLES_What_Does_It_Mean_For_openSUSE_hd.mp4?1787098376 H0hpB7Dz0tfMgxSgwQo-jg 2026-06-26T10:30:00+02:00 jsrain No 5181, 2026, osc26, openSUSE, Saal, osc26-eng, Day 2 SUSE has decided to merge two of the products - SUSE Linux Micro is not a standalone product, but SUSE Linux Enterprise Server can now operate in both standard and immutable mode. This talk will discuss the benefits for the overall code base, for the future of Leap Micro as well as for the openSUSE in general. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:29:05 https://media.ccc.de/v/5176-running-uyuni-everywhere Uyuni is undergoing a massive architectural shift. What started as a traditional server application evolved into "fat containers" managed by mgradm, and has now reached a milestone: a flexible, "almost" cloud-native solution. While Podman remains a core pillar, Uyuni now expands its horizons to RKE2...and why not something else! This transition isn't just a change in packaging; it's a fundamental modernization effort. However, moving to the cloud brings its own set of challenges, validated setups, and architectural limits. In this tutorial, we will get our hands dirty by: - Deploying Uyuni on various container runtimes, with a primary focus on RKE2. - Exploring the shift from manual RPMs, scripts, and static configuration files to a streamlined "spin up and go" container workflow. - What's the next step? Where we are today, the hurdles we've cleared, and Uyuni's cloud-native future. Join this session to learn how to leverage the power of Kubernetes for system management and see how Uyuni is adapting to the modern infrastructure landscape. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 10:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5176-eng-Running_Uyuni_everywhere_hd.mp4?1787095117 Zwcwm_JVhJfuwWUKtYt2uA 2026-06-26T10:00:00+02:00 mbussolotto No 5176, 2026, osc26, Cloud, Containers, Virtualization, Saal, osc26-eng, Day 2 From Bare Metal to Cloud Uyuni is undergoing a massive architectural shift. What started as a traditional server application evolved into "fat containers" managed by mgradm, and has now reached a milestone: a flexible, "almost" cloud-native solution. While Podman remains a core pillar, Uyuni now expands its horizons to RKE2...and why not something else! This transition isn't just a change in packaging; it's a fundamental modernization effort. However, moving to the cloud brings its own set of challenges, validated setups, and architectural limits. In this tutorial, we will get our hands dirty by: - Deploying Uyuni on various container runtimes, with a primary focus on RKE2. - Exploring the shift from manual RPMs, scripts, and static configuration files to a streamlined "spin up and go" container workflow. - What's the next step? Where we are today, the hurdles we've cleared, and Uyuni's cloud-native future. Join this session to learn how to leverage the power of Kubernetes for system management and see how Uyuni is adapting to the modern infrastructure landscape. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:35:14 https://media.ccc.de/v/5120-from-student-to-contributor-getting-started-with-opensuse Many students want to contribute to open source but often do not know where to begin. In this talk, I will share my journey as a student discovering the openSUSE community and taking my first steps toward contributing. I will walk through how I explored the openSUSE ecosystem, joined community channels, learned about the Open Build Service (OBS), and started understanding how contributors collaborate on open-source projects. This talk will focus on practical insights, challenges I faced as a beginner, and how openSUSE provides a welcoming environment for new contributors. It is aimed at students and beginners who want to start contributing to open source and are looking for a clear and approachable starting point. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 17:45:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5120-eng-From_Student_to_Contributor_Getting_Started_with_openSUSE_hd.mp4?1787094170 T1yTq9puQ5WzpEvUihc0lw 2026-06-25T17:45:00+02:00 Geetansh Goyal No 5120, 2026, osc26, Community, Saal, osc26-eng, Day 1 My experience entering the openSUSE community as a student Many students want to contribute to open source but often do not know where to begin. In this talk, I will share my journey as a student discovering the openSUSE community and taking my first steps toward contributing. I will walk through how I explored the openSUSE ecosystem, joined community channels, learned about the Open Build Service (OBS), and started understanding how contributors collaborate on open-source projects. This talk will focus on practical insights, challenges I faced as a beginner, and how openSUSE provides a welcoming environment for new contributors. It is aimed at students and beginners who want to start contributing to open source and are looking for a clear and approachable starting point. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:16:04 https://media.ccc.de/v/5168-leveraging-local-llms-for-automated-changelog-generation Creating accurate changelog entries is often the final hurdle in the package submission process, where time pressure can lead to critical updates being overlooked. Since submission requests in the Open Build Service (OBS) contain the necessary technical context—including spec file diffs, file lists, and release notes—this task is an ideal candidate for automation using Large Language Models (LLMs). This talk explores the end-to-end workflow of fine-tuning a local LLM for this specialized task. We will cover how to extract data from OBS and the essential steps required to prepare it for training. Additionally, the talk discusses the fundamentals of fine-tuning, including model size selection and the optimization of tuning parameters. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 17:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5168-eng-Leveraging_Local_LLMs_for_Automated_Changelog_Generation_hd.mp4?1787091019 mZyBkz0KELUY4slcrbeEyg 2026-06-25T17:00:00+02:00 Christian Goll No 5168, 2026, osc26, Saal, osc26-eng, Day 1 Creating accurate changelog entries is often the final hurdle in the package submission process, where time pressure can lead to critical updates being overlooked. Since submission requests in the Open Build Service (OBS) contain the necessary technical context—including spec file diffs, file lists, and release notes—this task is an ideal candidate for automation using Large Language Models (LLMs). This talk explores the end-to-end workflow of fine-tuning a local LLM for this specialized task. We will cover how to extract data from OBS and the essential steps required to prepare it for training. Additionally, the talk discusses the fundamentals of fine-tuning, including model size selection and the optimization of tuning parameters. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:31:38 https://media.ccc.de/v/5211-keeping-digital-spaces-open-for-young-people The complexities of our world have led politicians around the world to drive legislation forward that is supposed to "protect children". Among these are tightening of privacy laws, restrictions on access to online platforms and social media, and attempts to force operating system vendors into age verification. Recently, openSUSE has changed its site terms to require all users to be at least 16 years old. After I called out this change, a lot of people expressed their concerns about this change. As pedagogic chair of the Teckids community, I have over a decade of experience in working with (very) young users and contributors in digital spaces, and in shaping spaces where they are legally allowed to fully participate. With this talk, I want to shed light on the most important legal and pedagogic issues around children and minors in digital spaces. As more and more ill-advised regulation endangers young people and makes them virtually invisible, I want to raise awareness in the community, and help everyone to get onto the same page in order to help discuss similar issues in the future. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 16:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5211-eng-Keeping_digital_spaces_open_for_young_people_hd.mp4?1787090222 wyT4ePWhazWjylNHhe449g 2026-06-25T16:30:00+02:00 Dominik George No 5211, 2026, osc26, Community, Saal, osc26-eng, Day 1 The complexities of our world have led politicians around the world to drive legislation forward that is supposed to "protect children". Among these are tightening of privacy laws, restrictions on access to online platforms and social media, and attempts to force operating system vendors into age verification. Recently, openSUSE has changed its site terms to require all users to be at least 16 years old. After I called out this change, a lot of people expressed their concerns about this change. As pedagogic chair of the Teckids community, I have over a decade of experience in working with (very) young users and contributors in digital spaces, and in shaping spaces where they are legally allowed to fully participate. With this talk, I want to shed light on the most important legal and pedagogic issues around children and minors in digital spaces. As more and more ill-advised regulation endangers young people and makes them virtually invisible, I want to raise awareness in the community, and help everyone to get onto the same page in order to help discuss similar issues in the future. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:26:32 https://media.ccc.de/v/5219-ci-cd-with-a-safety-net Modern software development relies heavily on CI/CD systems, but what happens when external platforms like GitHub go down or become inaccessible? OpenCloud addresses this risk by building a fully self-hosted, vendor-independent CI/CD infrastructure. This talk walks through our migration from Drone.io to Woodpecker CI, covering the architectural decisions behind the switch, how we ensure business continuity when third-party services fail, and how we integrated k6 load tests, Playwright E2E tests, and integration/acceptance testing into the pipeline. Expect practical lessons learned and a candid look at the trade-offs of going fully self-hosted. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 15:45:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5219-eng-CI_CD_with_a_Safety_Net_hd.mp4?1787086810 4sVCTyNSspT4bFUNgI3HYA 2026-06-25T15:45:00+02:00 fschade No 5219, 2026, osc26, Saal, osc26-eng, Day 1 Building a Vendor-Independent Pipeline for Business Continuity Modern software development relies heavily on CI/CD systems, but what happens when external platforms like GitHub go down or become inaccessible? OpenCloud addresses this risk by building a fully self-hosted, vendor-independent CI/CD infrastructure. This talk walks through our migration from Drone.io to Woodpecker CI, covering the architectural decisions behind the switch, how we ensure business continuity when third-party services fail, and how we integrated k6 load tests, Playwright E2E tests, and integration/acceptance testing into the pipeline. Expect practical lessons learned and a candid look at the trade-offs of going fully self-hosted. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:23:26 https://media.ccc.de/v/5100-virtui-manager-text-based-terminal-user-interface-application-for-managing-qemu-kvm-vm ### A New tool to manage Virtual Machine - **No X11** required: runs perfectly on headless servers and remote connections via SSH - **Transhypervisor View**: Manage VMs across multiple Libvirt servers in one unified dashboard - **Smart Caching**: caching reduces latency and API load - **Built directly** on the Libvirt API for maximum compatibility and stability with QEMU/KVM environments - **Real-time updates** via events ensure ultra-low bandwidth usage and immediate UI responsiveness - **Full support for snapshots and disk overlays**: branch your VM states or revert changes with confidence - **Manage large scale** fleets by selecting VMs using flexible regex patterns and group filters - **Custom Migration support**: workaround some migration limitation - **Granular Server** Preferences allow you to manage storage pools and network configurations remotely Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 15:15:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5100-eng-virtui-manager_text-based_Terminal_User_Interface_application_for_managing_QEMU_KVM_VM_hd.mp4?1787086237 EJ3_TlTUDlVfRlWd5COJHQ 2026-06-25T15:15:00+02:00 Antoine Ginies No 5100, 2026, osc26, Cloud, Containers, Virtualization, Saal, osc26-eng, Day 1 Manage VM with a TUI ### A New tool to manage Virtual Machine - **No X11** required: runs perfectly on headless servers and remote connections via SSH - **Transhypervisor View**: Manage VMs across multiple Libvirt servers in one unified dashboard - **Smart Caching**: caching reduces latency and API load - **Built directly** on the Libvirt API for maximum compatibility and stability with QEMU/KVM environments - **Real-time updates** via events ensure ultra-low bandwidth usage and immediate UI responsiveness - **Full support for snapshots and disk overlays**: branch your VM states or revert changes with confidence - **Manage large scale** fleets by selecting VMs using flexible regex patterns and group filters - **Custom Migration support**: workaround some migration limitation - **Granular Server** Preferences allow you to manage storage pools and network configurations remotely Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:29:00 https://media.ccc.de/v/5161-opensuse-leap-maintenance-in-times-of-the-git-workflow Same as SLES 16.0 has changed to the git workflow, the openSUSE Leap 16.0 maintenance has also changed to the git workflow. After we are using it now for over 6 months, we want to present how we are doing Leap 16.0 maintenance, what is happening where in which steps to help you better understand some of the new problems we are facing. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 14:45:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5161-eng-openSUSE_Leap_Maintenance_in_times_of_the_git_workflow_hd.mp4?1787081977 z3jiXYxW8dx1BqvgcRwarg 2026-06-25T14:45:00+02:00 Marcus Meissner No 5161, 2026, osc26, openSUSE, Saal, osc26-eng, Day 1 how to work in a git world Same as SLES 16.0 has changed to the git workflow, the openSUSE Leap 16.0 maintenance has also changed to the git workflow. After we are using it now for over 6 months, we want to present how we are doing Leap 16.0 maintenance, what is happening where in which steps to help you better understand some of the new problems we are facing. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:21:31 https://media.ccc.de/v/5157-git-package-workflow - Progress in last year - Current workflow and transition issues - Future plans Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 14:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5157-eng-Git_package_workflow_hd.mp4?1787081568 JMXMcYo3ZUebQ_7GkYbvEg 2026-06-25T14:00:00+02:00 Adam Majer No 5157, 2026, osc26, openSUSE, Saal, osc26-eng, Day 1 Past, Present and Future - Progress in last year - Current workflow and transition issues - Future plans Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:46:42 https://media.ccc.de/v/5102-fido2-tokens-in-practice FIDO2 tokens have thus far done a good job in improving account security on the wider internet. Yet, FIDO2 tokens may also be of use in general operating system security. In my talk I'd like to cover the aspects of running LUKS2 encryption using FIDO2 tokens, securing session logins for users with FIDO2 tokens and improving ssh security by binding ssh keys to FIDO2 tokens. The talk will feature the integration of all these different aspects into one single FIDO2 token. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 13:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5102-eng-FIDO2_Tokens_in_Practice_hd.mp4?1787075405 -cDqCV83DbRt3Gyxj-KP2Q 2026-06-25T13:00:00+02:00 Thomas Rahimi No 5102, 2026, osc26, openSUSE, Saal, osc26-eng, Day 1 Using FIDO2 for wider security tasks in OpenSUSE FIDO2 tokens have thus far done a good job in improving account security on the wider internet. Yet, FIDO2 tokens may also be of use in general operating system security. In my talk I'd like to cover the aspects of running LUKS2 encryption using FIDO2 tokens, securing session logins for users with FIDO2 tokens and improving ssh security by binding ssh keys to FIDO2 tokens. The talk will feature the integration of all these different aspects into one single FIDO2 token. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:49:43 https://media.ccc.de/v/5109-governance-by-jeff This session will focus on the governance proposal and what the current status is related to moving the proposal forward. This session creates space for future planning and discussion. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 11:15:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5109-eng-Governance_by_Jeff_hd.mp4?1787074119 GrNI88aBY0rR7f_aQDrXdw 2026-06-25T11:15:00+02:00 jeff_mahoney No 5109, 2026, osc26, openSUSE, Saal, osc26-eng, Day 1 This session will focus on the governance proposal and what the current status is related to moving the proposal forward. This session creates space for future planning and discussion. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:43:41 https://media.ccc.de/v/5210-digital-sovereignty-with-andreas-prins In this compelling keynote, Andreas Prins, Global Head of Sovereign Solutions at SUSE, explores why digital sovereignty has evolved from a niche concern into the "new normal" for global enterprises. Supported by recent research involving over 300 executives across 13 verticals, the session delves into the critical intersection of AI, resilience, and operational autonomy. **Key Themes & Highlights:** • **The Sovereign AI Paradigm:** With 64% of executives identifying sovereign AI as a top priority, the keynote explains how data control is now inseparable from AI strategy. • **The Shift Toward Resilience:** Prins reveals that over 90% of organizations now have a digital sovereignty strategy in place or under development, driven largely by concerns over vendor lock-in and a rise in data breaches by foreign entities. • **Open Source as the Foundation:** Discover why 94% of leaders view open source as mission-critical . The session highlights how open-source stacks provide the flexibility and workload portability necessary to maintain control in a shifting geopolitical landscape. • **The Three Pillars of Sovereign Workloads:** Engineering leader Rosella joins the stage to unpack the technical requirements for truly sovereign platforms: **Traceability:** Ensuring code and dependencies are inspectable and builds are reproducible . **Controllability:** Maintaining clear audit trails and "kill switch" capabilities regardless of where a workload resides . **Portability:** Breaking vendor lock-in to reclaim autonomy and enable deployment across any infrastructure • **SUSE’s Sovereign Solutions:** The session outlines SUSE’s latest ecosystem advancements, including Sovereign Premium Support based in Europe, the Sovereignty Specialization for partners, and strategies for workload repatriation and supply chain hardening. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 10:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5210-eng-Digital_Sovereignty_with_Andreas_Prins_hd.mp4?1787069660 rjPjVmFyX7SPkuUrbVFEgw 2026-06-25T10:30:00+02:00 Andreas Prins No 5210, 2026, osc26, Saal, osc26-eng, Day 1 In this compelling keynote, Andreas Prins, Global Head of Sovereign Solutions at SUSE, explores why digital sovereignty has evolved from a niche concern into the "new normal" for global enterprises. Supported by recent research involving over 300 executives across 13 verticals, the session delves into the critical intersection of AI, resilience, and operational autonomy. **Key Themes & Highlights:** • **The Sovereign AI Paradigm:** With 64% of executives identifying sovereign AI as a top priority, the keynote explains how data control is now inseparable from AI strategy. • **The Shift Toward Resilience:** Prins reveals that over 90% of organizations now have a digital sovereignty strategy in place or under development, driven largely by concerns over vendor lock-in and a rise in data breaches by foreign entities. • **Open Source as the Foundation:** Discover why 94% of leaders view open source as mission-critical . The session highlights how open-source stacks provide the flexibility and workload portability necessary to maintain control in a shifting geopolitical landscape. • **The Three Pillars of Sovereign Workloads:** Engineering leader Rosella joins the stage to unpack the technical requirements for truly sovereign platforms: **Traceability:** Ensuring code and dependencies are inspectable and builds are reproducible . **Controllability:** Maintaining clear audit trails and "kill switch" capabilities regardless of where a workload resides . **Portability:** Breaking vendor lock-in to reclaim autonomy and enable deployment across any infrastructure • **SUSE’s Sovereign Solutions:** The session outlines SUSE’s latest ecosystem advancements, including Sovereign Premium Support based in Europe, the Sovereignty Specialization for partners, and strategies for workload repatriation and supply chain hardening. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:30:41 https://media.ccc.de/v/5108-board-session Board Session offers the community a transparent view from the openSUSE Board over the past year and the direction and challenges. This session highlights what the Board focus on, where its role has made a difference, and where limitations or open questions remain. Equally important, this is an opportunity for dialogue and project guidance. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 10:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5108-eng-Board_Session_hd.mp4?1787068813 jRY7vC6EVu-02cQMwf6wmg 2026-06-25T10:00:00+02:00 Douglas DeMaio No 5108, 2026, osc26, openSUSE, Saal, osc26-eng, Day 1 Board Session offers the community a transparent view from the openSUSE Board over the past year and the direction and challenges. This session highlights what the Board focus on, where its role has made a difference, and where limitations or open questions remain. Equally important, this is an opportunity for dialogue and project guidance. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:21:52 https://media.ccc.de/v/5139-rewriting-distrobox-in-go-creating-the-foundation-of-a-brand-new-ecosystem With 12k GitHub stars, [Distrobox](https://distrobox.it) is arguably a very popular open-source project, featured in several Linux distributions, including openSUSE Aeon, SteamOS, and more. This talk shares the journey of rewriting Distrobox from POSIX shell to Go. I'll discuss the design decisions, architectural principles, and lessons learned in maintaining 100% feature parity while leveraging Go's modularity, testing capabilities, and performance. You'll see how this foundation enables future expansion and community innovation. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 10:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5139-eng-Rewriting_Distrobox_in_Go_creating_the_foundation_of_a_brand_new_ecosystem_hd.mp4?1784123283 kBRZLg045PAUwVckEBEabA 2026-06-26T10:30:00+02:00 Emanuele De Cupis No 5139, 2026, osc26, Cloud, Containers, Virtualization, Gallerie, osc26-eng, Day 2 With 12k GitHub stars, [Distrobox](https://distrobox.it) is arguably a very popular open-source project, featured in several Linux distributions, including openSUSE Aeon, SteamOS, and more. This talk shares the journey of rewriting Distrobox from POSIX shell to Go. I'll discuss the design decisions, architectural principles, and lessons learned in maintaining 100% feature parity while leveraging Go's modularity, testing capabilities, and performance. You'll see how this foundation enables future expansion and community innovation. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:41:09 https://media.ccc.de/v/5123-agentic-workloads-on-linux-btrfs-service-accounts-architecture As AI agents become more prevalent in enterprise environments, Linux systems need architectural patterns that provide isolation, security, and efficient resource management. This session explores an approach using BTRFS subvolumes combined with dedicated service accounts to build secure, isolated environments for autonomous AI agents in enterprise deployment. What we will explore: - Best Practices and Linux OS optimizations for AI agent workloads - BTRFS subvolume strategies for targeted differential updates to LLMs trained remotely, but used locally - Service account security patterns for autonomous systems - Edge deployment considerations that combine these strategies. - Practical implementation examples from openSUSE environments Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 15:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5123-eng-Agentic_Workloads_on_Linux_Btrfs_Service_Accounts_Architecture_hd.mp4?1784122400 xq46YnfA2xOuialuexA-dA 2026-06-26T15:30:00+02:00 David Duncan, Neal Gompa No 5123, 2026, osc26, Cloud, Containers, Virtualization, Gallerie, osc26-eng, Day 2 Leveraging Btrfs to Secure and Optimize AI Workloads As AI agents become more prevalent in enterprise environments, Linux systems need architectural patterns that provide isolation, security, and efficient resource management. This session explores an approach using BTRFS subvolumes combined with dedicated service accounts to build secure, isolated environments for autonomous AI agents in enterprise deployment. What we will explore: - Best Practices and Linux OS optimizations for AI agent workloads - BTRFS subvolume strategies for targeted differential updates to LLMs trained remotely, but used locally - Service account security patterns for autonomous systems - Edge deployment considerations that combine these strategies. - Practical implementation examples from openSUSE environments Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:54:48 https://media.ccc.de/v/5201-geeko-foundation-update This will be an update about the what and how the Geeko Foundation has supported the openSUSE Project this past year to include financial information and support for speakers at openSUSE events. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Sat, 27 Jun 2026 10:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5201-eng-Geeko_Foundation_Update_hd.mp4?1783711652 XUGaMEqNIQQTeoz0sEqW1A 2026-06-27T10:30:00+02:00 Douglas DeMaio No 5201, 2026, osc26, Community, Gallerie, osc26-eng, Day 3 This will be an update about the what and how the Geeko Foundation has supported the openSUSE Project this past year to include financial information and support for speakers at openSUSE events. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:22:04 https://media.ccc.de/v/5136-starting-open-source-from-zero-a-beginner-s-guide-for-students Many students are interested in open source but don’t know where to begin. As a first-year student who is currently starting my journey into open source, I understand the confusion and hesitation beginners face. In this talk, I will present a clear roadmap for getting started with open source, including understanding GitHub, finding beginner-friendly issues, and making the first contribution. I will also share common challenges beginners face and how to overcome them. This session is aimed at students who are at the very beginning of their journey and want a simple, practical starting point to enter the open-source ecosystem. Attendees will leave with a clear, actionable roadmap to start contributing to open source immediately. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Sat, 27 Jun 2026 10:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5136-eng-Starting_Open_Source_from_Zero_A_Beginners_Guide_for_Students_hd.mp4?1783711122 5xIm8AnBDYHG79qoHfnfrA 2026-06-27T10:00:00+02:00 pranavchoudhary, Dushyant_11 No 5136, 2026, osc26, Open Source, Gallerie, osc26-eng, Day 3 A simple roadmap for students to start contributing to open source Many students are interested in open source but don’t know where to begin. As a first-year student who is currently starting my journey into open source, I understand the confusion and hesitation beginners face. In this talk, I will present a clear roadmap for getting started with open source, including understanding GitHub, finding beginner-friendly issues, and making the first contribution. I will also share common challenges beginners face and how to overcome them. This session is aimed at students who are at the very beginning of their journey and want a simple, practical starting point to enter the open-source ecosystem. Attendees will leave with a clear, actionable roadmap to start contributing to open source immediately. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:19:39 https://media.ccc.de/v/5091-lightning-talks We want to have some lightning talks again. If you want to quickly present a small interesting topic with zero to two slides, add yourself to https://etherpad.opensuse.org/p/lightning-talks-osc2026 and link your slides there. If you are unsure, come talk to Bernhard at the conference. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 17:15:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5091-eng-lightning_talks_hd.mp4?1783706705 GWmtRr6EKBjMJYOONMl6_w 2026-06-26T17:15:00+02:00 Bernhard M. No 5091, 2026, osc26, Community, Gallerie, osc26-eng, Day 2 This is attendee-created content We want to have some lightning talks again. If you want to quickly present a small interesting topic with zero to two slides, add yourself to https://etherpad.opensuse.org/p/lightning-talks-osc2026 and link your slides there. If you are unsure, come talk to Bernhard at the conference. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:31:26 https://media.ccc.de/v/5159-llms-the-good-the-bad-and-the-ugly-from-a-security-pov Depending on who you ask we're either experiencing a revolution like the introduction of the steam machine or a collective mass delusion that will end in a crash. No matter what it is, it is changing how people code and package. This talk will present the basic risks when using LLMs for these tasks and how to handle them Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 16:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5159-eng-LLMs_The_good_the_bad_and_the_ugly_from_a_security_POV_hd.mp4?1783705979 xfZuMXAo08YAg8JuzdA3mg 2026-06-26T16:30:00+02:00 Johannes Segitz No 5159, 2026, osc26, New Technologies, Gallerie, osc26-eng, Day 2 How to not screw yourself and your users with LLMs Depending on who you ask we're either experiencing a revolution like the introduction of the steam machine or a collective mass delusion that will end in a crash. No matter what it is, it is changing how people code and package. This talk will present the basic risks when using LLMs for these tasks and how to handle them Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:43:39 https://media.ccc.de/v/5164-introducing-conky-bubbles Conky is a graphical system monitoring program for Linux, for many years I have maintained it in several Linux Distributions including openSUSE. In that time I have come across a number of its limitations especially if your goal is to write a config file that will work out of the box across a wide range of machines rather than creating tailor made configs for each machine. Beyond that writing a conky config that looks really good takes significant effort and often a lot of manually adjusting the location of elements. conky-bubbles aims to address the above issues using conky's lua integration and cairo to implement a layout engine, widgets, theming and hardware auto detection where possible. In this talk I will cover the long on and off process that it has taken to get to this point and the many unexpected challenges that I have had to overcome, from licensing issues to learning how to implement font rendering and chasing down memory leaks in the interface between C++ and Lua. I also spent significant time working with existing open source projects and will talk about integrating with and using resources from them to speed up development. I will then give a overview of how to setup and use and configure conky bubbles to meet your own needs. As well as running through a few examples. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 15:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5164-eng-Introducing_Conky_Bubbles_hd.mp4?1783702432 uE1Mtkc8X_Bmh1DlM3eOMg 2026-06-26T15:00:00+02:00 Simon Lees No 5164, 2026, osc26, Open Source, Gallerie, osc26-eng, Day 2 A Simpler way to create config files for conky. Conky is a graphical system monitoring program for Linux, for many years I have maintained it in several Linux Distributions including openSUSE. In that time I have come across a number of its limitations especially if your goal is to write a config file that will work out of the box across a wide range of machines rather than creating tailor made configs for each machine. Beyond that writing a conky config that looks really good takes significant effort and often a lot of manually adjusting the location of elements. conky-bubbles aims to address the above issues using conky's lua integration and cairo to implement a layout engine, widgets, theming and hardware auto detection where possible. In this talk I will cover the long on and off process that it has taken to get to this point and the many unexpected challenges that I have had to overcome, from licensing issues to learning how to implement font rendering and chasing down memory leaks in the interface between C++ and Lua. I also spent significant time working with existing open source projects and will talk about integrating with and using resources from them to speed up development. I will then give a overview of how to setup and use and configure conky bubbles to meet your own needs. As well as running through a few examples. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:22:53 https://media.ccc.de/v/5166-state-of-mesa3d-panfrost-on-arm-mali-and-powervr-on-risc-v-bring-up-challenges-and-progress This talk presents a current status update on open-source GPU support in Mesa3D, focusing on Panfrost for ARM Mali and emerging enablement efforts for Imagination PowerVR on RISC-V platforms. It outlines the practical challenges encountered when bringing up graphics on new hardware—covering kernel driver readiness, firmware constraints, userspace integration, and Mesa driver maturity. Using a recent RISC-V board bring-up as a case study, the session details the end-to-end process from early boot to functional OpenGL acceleration, and gaps in current upstream support. Particular attention is given to PowerVR enablement hurdles on RISC-V, where ecosystem fragmentation and limited documentation still require significant groundwork. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 14:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5166-eng-State_of_Mesa3D_Panfrost_on_ARM_Mali_and_PowerVR_on_RISC-V_Bring-up_Challenges_and_Progress_hd.mp4?1783701906 uzYjuxD8GdgirShg3UccAA 2026-06-26T14:30:00+02:00 rener No 5166, 2026, osc26, Embedded Systems and Edge Computing, Gallerie, osc26-eng, Day 2 Hardware bring-up to upstream Mesa: Driver maturity, Device Tree and EFI This talk presents a current status update on open-source GPU support in Mesa3D, focusing on Panfrost for ARM Mali and emerging enablement efforts for Imagination PowerVR on RISC-V platforms. It outlines the practical challenges encountered when bringing up graphics on new hardware—covering kernel driver readiness, firmware constraints, userspace integration, and Mesa driver maturity. Using a recent RISC-V board bring-up as a case study, the session details the end-to-end process from early boot to functional OpenGL acceleration, and gaps in current upstream support. Particular attention is given to PowerVR enablement hurdles on RISC-V, where ecosystem fragmentation and limited documentation still require significant groundwork. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:22:07 https://media.ccc.de/v/5160-a-post-quantum-cryptography-update The talk will go and review the current state of the Post Quantum Cryptography. We will look at how far the standardization has been gone, and then look into what is happening with openSUSE Leap and Tumbleweed. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 13:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5160-eng-A_post_quantum_cryptography_update_hd.mp4?1783698713 tL7BS0MzBOxQG5Tnw5eKIw 2026-06-26T13:30:00+02:00 Marcus Meissner No 5160, 2026, osc26, openSUSE, Gallerie, osc26-eng, Day 2 a 2026 update The talk will go and review the current state of the Post Quantum Cryptography. We will look at how far the standardization has been gone, and then look into what is happening with openSUSE Leap and Tumbleweed. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:28:29 https://media.ccc.de/v/5163-news-for-linux-on-z A lot has happened regarding openSUSE for s390x in the last year. We have been receiving access to a new mainframe with the possibility to test AI and the latest mainframe features. openSUSE zSystems is supported by Red Hat on OpenShift Virtualization with the goal that users can use it with OpenShift AI. Additionally, there are some interesting upstream projects who are enabling their software for s390x. You will receive an overview about what has been added to the open source community for Linux on Z. Finally, you will have a good understanding about what you can do with openSUSE zSystems in the future. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 13:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5163-eng-News_for_Linux_on_Z_hd.mp4?1783698045 VZKVzehV7PiVcuE_PKhpxw 2026-06-26T13:00:00+02:00 Sarah Julia Kriesch No 5163, 2026, osc26, New Technologies, Gallerie, osc26-eng, Day 2 What you can use with openSUSE and other Linux distributions on the Mainframe A lot has happened regarding openSUSE for s390x in the last year. We have been receiving access to a new mainframe with the possibility to test AI and the latest mainframe features. openSUSE zSystems is supported by Red Hat on OpenShift Virtualization with the goal that users can use it with OpenShift AI. Additionally, there are some interesting upstream projects who are enabling their software for s390x. You will receive an overview about what has been added to the open source community for Linux on Z. Finally, you will have a good understanding about what you can do with openSUSE zSystems in the future. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:25:40 https://media.ccc.de/v/5152-rootless-containers-as-self-hosted-runners Cloud runners and LLM APIs each run their own billing meter. Use both together and you are billed twice. This talk shows how we use self-hosted openSUSE containers for large codebases, and how we re-used it to eliminate that overlap. We walk through our Linux kernel testing pipeline: cache management, cross-architecture builds, checkpatch per-commit, and more. Then, we explore how we get the most of LLMs by running them inside the same container. Using pi.dev as the agent harness, we can swap the model, and tune the system prompt for one-shot requests. The agent runs after the top-level pipeline completes, with CI annotations (warnings and errors), being part of the prompt. The agent is instructed to assess the issues, and validate its claims by rebuilding and testing. As the output, it generates git patches, and summarizes the session into a structured review summary. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 11:45:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5152-eng-Rootless_containers_as_self-hosted_runners_hd.mp4?1783695251 K0mBqCjB6i4Rea4XkRCwLw 2026-06-26T11:45:00+02:00 gastmaier No 5152, 2026, osc26, Cloud, Containers, Virtualization, Gallerie, osc26-eng, Day 2 Faster, cheaper CI/CD and an AI agent playground Cloud runners and LLM APIs each run their own billing meter. Use both together and you are billed twice. This talk shows how we use self-hosted openSUSE containers for large codebases, and how we re-used it to eliminate that overlap. We walk through our Linux kernel testing pipeline: cache management, cross-architecture builds, checkpatch per-commit, and more. Then, we explore how we get the most of LLMs by running them inside the same container. Using pi.dev as the agent harness, we can swap the model, and tune the system prompt for one-shot requests. The agent runs after the top-level pipeline completes, with CI annotations (warnings and errors), being part of the prompt. The agent is instructed to assess the issues, and validate its claims by rebuilding and testing. As the output, it generates git patches, and summarizes the session into a structured review summary. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:13:32 https://media.ccc.de/v/5162-mainframe-best-practices-at-opensuse Are you interested in how the s390x architecture works at openSUSE? Or how do you receive development resources or the required support, if something is failing? Then this talk is made for you! You will hear our openSUSE best practices, with trainings for the Z architecture, until our process for collaborating with SUSE and IBM. There are special hints you should know with the goal that the openSUSE Release Engineer for openSUSE zSystems can receive your notifications. That all will be covered in this presentation! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Fri, 26 Jun 2026 10:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5162-eng-Mainframe_Best_Practices_at_openSUSE_hd.mp4?1783694932 ug2dmHzVurqE2TNDFgkVrA 2026-06-26T10:00:00+02:00 Sarah Julia Kriesch No 5162, 2026, osc26, Enablement, Gallerie, osc26-eng, Day 2 Are you interested in how the s390x architecture works at openSUSE? Or how do you receive development resources or the required support, if something is failing? Then this talk is made for you! You will hear our openSUSE best practices, with trainings for the Z architecture, until our process for collaborating with SUSE and IBM. There are special hints you should know with the goal that the openSUSE Release Engineer for openSUSE zSystems can receive your notifications. That all will be covered in this presentation! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:27:40 https://media.ccc.de/v/5089-what-happened-with-reproducible-builds During the last 2 years I spent a significant share of my time on improving reproducible builds for openSUSE and SLES. Here I want to give an overview of * What is this reproducible builds thingy again? * What we achieved since 2024 * What still needs work (may be finished before 2030) Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 13:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5089-eng-What_happened_with_reproducible_builds_hd.mp4?1783618628 CrRs4Nu1PazkTxP1PDTTzA 2026-06-25T13:00:00+02:00 Bernhard M. No 5089, 2026, osc26, Open Source, Gallerie, osc26-eng, Day 1 During the last 2 years I spent a significant share of my time on improving reproducible builds for openSUSE and SLES. Here I want to give an overview of * What is this reproducible builds thingy again? * What we achieved since 2024 * What still needs work (may be finished before 2030) Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:36:26 https://media.ccc.de/v/5170-evolution-of-the-openqa-ecosystem As the SUSE QE Dev and Infra teams, we maintain the primary open-source testing pipelines that power openSUSE distributions as well as SUSE products. Our mission is to provide uniquely comprehensive, system-level testing that ensures the integrity of everything from single OS images to complex, multi-machine service stacks. In this 10-minute lightning talk, we will provide a high-velocity update on the major advancements made within the QE ecosystem over the past year(s). We will cover key updates across our two primary domains: dev: openQA - upstream os-autoinst+openQA and related open source QA tooling and operating openQA on o3 – infra: QE infrastructure - OSD, o3 OS and base, qem-bot/qem-dashboard, hardware, compliance, etc. - SUSE specific solutions Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 11:45:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5170-eng-Evolution_of_the_openQA_Ecosystem_hd.mp4?1783615090 gnkePUy27ZZn0WliIT5bcg 2026-06-25T11:45:00+02:00 Oliver Kurz No 5170, 2026, osc26, openSUSE, Gallerie, osc26-eng, Day 1 Changes since the last years As the SUSE QE Dev and Infra teams, we maintain the primary open-source testing pipelines that power openSUSE distributions as well as SUSE products. Our mission is to provide uniquely comprehensive, system-level testing that ensures the integrity of everything from single OS images to complex, multi-machine service stacks. In this 10-minute lightning talk, we will provide a high-velocity update on the major advancements made within the QE ecosystem over the past year(s). We will cover key updates across our two primary domains: dev: openQA - upstream os-autoinst+openQA and related open source QA tooling and operating openQA on o3 – infra: QE infrastructure - OSD, o3 OS and base, qem-bot/qem-dashboard, hardware, compliance, etc. - SUSE specific solutions Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:18:01 https://media.ccc.de/v/5158-mariadb-11-8-protocol-security-it-just-works We in MariaDB care deeply about security. MariaDB security should be strong, automatic, enabled by default and easy to use. This talk will explain new security features in MariaDB client-server protocol — zero-configuration SSL and PARSEC authentication plugin. The first feature allows all MariaDB connections to be automatically encrypted with full end-to-end certificate verification without CA signed certificates or, really, any SSL configuration whatsoever. The second introduces a new trustless authentication protocol with built-in protection against brute-force, replay, and precomputation attacks. Keeping your connection secure from Man-in-the-Middle attacks is not optional in 2026. MariaDB takes the complexity out of it. You do not need to do anything — it just works. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 11:00:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5158-eng-MariaDB_118_Protocol_Security_-_It_just_works_hd.mp4?1783614688 ABctTK2IO-KGVP30UVH7fQ 2026-06-25T11:00:00+02:00 Sergei Golubchik No 5158, 2026, osc26, New Technologies, Gallerie, osc26-eng, Day 1 Zero-configuration SSL and PARSEC authentication We in MariaDB care deeply about security. MariaDB security should be strong, automatic, enabled by default and easy to use. This talk will explain new security features in MariaDB client-server protocol — zero-configuration SSL and PARSEC authentication plugin. The first feature allows all MariaDB connections to be automatically encrypted with full end-to-end certificate verification without CA signed certificates or, really, any SSL configuration whatsoever. The second introduces a new trustless authentication protocol with built-in protection against brute-force, replay, and precomputation attacks. Keeping your connection secure from Man-in-the-Middle attacks is not optional in 2026. MariaDB takes the complexity out of it. You do not need to do anything — it just works. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:32:02 https://media.ccc.de/v/5222-opensuse-grommunio-the-exchange-alternative As organizations look for practical ways to regain control over their collaboration infrastructure, open source becomes more than an alternative — it becomes a foundation and requirement for digital sovereignty. This talk presents grommunio as an open, enterprise-grade alternative to Microsoft Exchange, with a strong focus on the technology behind making it usable out of the box. The session will show how grommunio builds on the openSUSE ecosystem to deliver a complete collaboration appliance based on openSUSE 16.0, using KIWI to create a reproducible, maintainable, and deployable system image. Rather than only discussing groupware features, this talk goes behind the scenes: how the appliance is assembled, how openSUSE provides the operating system foundation, and how grommunio packages email, calendaring, contacts, mobile synchronization, Evolution/Thunderbird/Outlook compatibility, and administration into an integrated enterprise experience. A key focus is the out-of-the-box experience: turning a powerful open source software stack into a product that can be installed, configured, and operated by real organizations. The talk highlights how openSUSE technologies enable a reliable appliance model, how grommunio delivers enterprise collaboration on top of it, and why this matters for organizations that want to reduce vendor lock-in without compromising usability or professional requirements. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 25 Jun 2026 10:30:00 +0200 https://cdn.media.ccc.de/events/osc/2026/h264-hd/osc26-5222-eng-openSUSE_grommunio_-_The_Exchange_alternative_hd.mp4?1783524144 Lxl-7pFFKLsL0GwMgA4A6A 2026-06-25T10:30:00+02:00 Michael Kromer No 5222, 2026, osc26, Open Source, Gallerie, osc26-eng, Day 1 The foundation of solid enterprise communication As organizations look for practical ways to regain control over their collaboration infrastructure, open source becomes more than an alternative — it becomes a foundation and requirement for digital sovereignty. This talk presents grommunio as an open, enterprise-grade alternative to Microsoft Exchange, with a strong focus on the technology behind making it usable out of the box. The session will show how grommunio builds on the openSUSE ecosystem to deliver a complete collaboration appliance based on openSUSE 16.0, using KIWI to create a reproducible, maintainable, and deployable system image. Rather than only discussing groupware features, this talk goes behind the scenes: how the appliance is assembled, how openSUSE provides the operating system foundation, and how grommunio packages email, calendaring, contacts, mobile synchronization, Evolution/Thunderbird/Outlook compatibility, and administration into an integrated enterprise experience. A key focus is the out-of-the-box experience: turning a powerful open source software stack into a product that can be installed, configured, and operated by real organizations. The talk highlights how openSUSE technologies enable a reliable appliance model, how grommunio delivers enterprise collaboration on top of it, and why this matters for organizations that want to reduce vendor lock-in without compromising usability or professional requirements. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:27:35 media.ccc.de / RSS 0.3.3 CCC media team media@c3voc.de CCC media team No CCC Congress Hacking Security Netzpolitik A wide variety of video material distributed by the CCC. All content is taken from cdn.media.ccc.de and media.ccc.de A wide variety of video material distributed by the Chaos Computer Club. This feed contains all events from osc26 as mp4