0:00:07.254,0:00:07.504 Right, good afternoon 0:00:07.817,0:00:12.360 It is the lightning talks sessions at[br]DebConf Hamburg 2018 0:00:13.019,0:00:17.895 We've got seven speakers, and I guess[br]we'll just get going 0:00:18.352,0:00:22.107 Starting with Tobias Platn???,[br]talking about Debian on Power9. 0:00:27.528,0:00:36.302 Yesterday I, hm no, on friday,[br]I received my new Power9 machine. 0:00:36.519,0:00:37.710 A Talos 9 (II). 0:00:40.456,0:00:44.680 And it has an IBM Power9 processor 0:00:45.658,0:00:52.946 So, the only distro that I know that will[br]work is Debian. 0:00:55.748,0:01:01.820 Then, this is a new PowerPC 64 bits[br]architecture, 0:01:02.330,0:01:06.553 that can run in little-endian mode. 0:01:07.255,0:01:10.823 I downloaded a Debian installer. 0:01:11.834,0:01:16.531 First, I chosed the stable version, but 0:01:17.492,0:01:21.211 that crashed during install. 0:01:21.733,0:01:28.208 And, then I retried a different version,[br]a daily version. 0:01:29.265,0:01:37.455 And this one, which is based on Buster,[br]correctly installed. 0:01:38.264,0:01:44.682 I can even have a graphical environment,[br]working out of the box. 0:01:45.696,0:01:52.899 And, the installer then complained that[br]there is no boot partition 0:01:53.862,0:02:04.744 for older PowerPCs, and this boot partition is[br]not needed, since the TalosII 0:02:05.162,0:02:13.166 has a newer systems starting with power7[br]used petitboot. 0:02:16.038,0:02:22.581 So, that needs to be fixed in the Debian[br]installer, 0:02:23.259,0:02:29.066 that it doesn't produce the warning[br]on Power machines. 0:02:32.143,0:02:37.359 And now I have a working Debian[br]installation, 0:02:38.079,0:02:40.300 which I can use. 0:02:49.707,0:02:52.912 (thanks) [applause] 0:02:54.093,0:02:55.411 Thank you very much, that was very quick. 0:02:55.639,0:02:57.328 Next up is Thimothée Jaussoin, 0:02:57.890,0:03:01.721 talking about Movim, the XMPP social[br]platform. 0:03:05.572,0:03:07.427 Give him a moment to get set up. 0:04:32.681,0:04:34.262 I think it's a bit better this way. 0:04:34.755,0:04:36.976 Who already heard about the platform Movim? 0:04:38.679,0:04:44.207 OK, so we have a couple of people that[br]know about the project here. 0:04:45.054,0:04:48.307 Just to present you what I ??? could be a[br]parallel universe 0:04:48.481,0:04:50.653 but is actually the current universe we're[br]living with. 0:04:52.233,0:04:54.307 Lots of different chat platforms. 0:04:54.594,0:04:56.036 The same thing on social networks. 0:04:56.779,0:05:00.051 We keep reinventing the wheel[br]all the time. 0:05:02.563,0:05:03.455 We don't have this problem with e-mails 0:05:03.742,0:05:07.157 hopefully actually the e-mail standards[br]came way before before all of those 0:05:08.182,0:05:09.515 proprietary solutions 0:05:10.092,0:05:15.089 So we have ??? and Google and Microsoft[br]are still using SMTP, IMAP, for now. 0:05:15.567,0:05:19.559 So everything is compatible, and we have[br]a lot of clients on top of that. 0:05:19.773,0:05:21.747 But for chat, and social networks, it's[br]not the case. 0:05:22.750,0:05:26.054 So the idea of Movim is to build a[br]social platform. 0:05:28.958,0:05:32.801 In there, we can put a little couple of[br]ingredients. 0:05:33.414,0:05:37.407 First, it needs to be Open-Source, for the[br]transparency, for the fact that you can 0:05:37.584,0:05:41.829 have feedback and improvements,[br]for the security part. Bring some trust 0:05:42.035,0:05:47.128 I think that you guys here know about the[br]advantages of Free Software, and 0:05:47.578,0:05:52.731 especially on the communication part,[br]on social networks, but it's not enough. 0:05:53.745,0:05:56.915 We also need to be in control, actually[br]in this social network. 0:05:57.382,0:05:59.249 So it need to be simple and transparent 0:05:59.532,0:06:02.121 on the UI but also on the protocol level. 0:06:02.345,0:06:07.222 On the really deep below stacks. 0:06:08.183,0:06:10.276 So we'll need to have a strong and reliable[br]encryption, 0:06:10.493,0:06:14.743 so don't reinvent also an encryption[br]- talking about Telegram, here - 0:06:15.987,0:06:19.209 And, yeah, need some trusts in sights[br]here. 0:06:19.439,0:06:22.300 I mean a community, and not a company[br]that you will blindly trust 0:06:22.844,0:06:25.718 to take care of all of your communications. 0:06:25.937,0:06:26.953 But it's not enough. 0:06:27.661,0:06:32.071 It needs to be decentralized. Because[br]centralized social networks, 0:06:32.274,0:06:33.482 even if it's opensource, 0:06:33.687,0:06:36.727 if it's only one instance, you have to[br]still trust the instance. So would like to 0:06:36.917,0:06:39.509 deploy your instance, you would like to[br]trust someone else, 0:06:39.674,0:06:42.656 you can only, sometimes, trust only[br]yourself in seldom cases 0:06:44.050,0:06:46.627 Decentralization also brings robustness 0:06:50.497,0:06:54.605 So that's too many times that actually[br]one server is failing, think Signal 0:06:55.078,0:06:59.115 had an issue recently, about this kind[br]of thing there. 0:06:59.272,0:07:02.567 The issue was with the Amazon servers,[br]the whole thing didn't worked 0:07:02.731,0:07:04.077 for a couple of hours. 0:07:04.429,0:07:06.660 And then, resist against censorship and[br]control. 0:07:06.865,0:07:09.145 Same thing with Telegram, I think in[br]Russia. 0:07:09.307,0:07:13.995 I'm talking more about the IM part, but[br]it's also applicable to social networks. 0:07:14.179,0:07:18.439 It's exactly the same thing, just that the[br]exchanges of information are a bit different. 0:07:18.976,0:07:20.749 So, you need these steps but 0:07:21.552,0:07:23.845 all those platforms here 0:07:24.962,0:07:33.484 (I just made this conference 3 years [br]ago, just added Mastodon recently) 0:07:37.125,0:07:43.934 So i might talk about different sorts[br]of platforms 0:07:44.452,0:07:46.932 There is communication between those[br]platforms, kind of standards that are 0:07:47.108,0:07:50.036 starting to come in, especially between[br]Diaspora and Mastodon, 0:07:50.257,0:07:51.944 but there is still a lot of work to do[br]there. 0:07:52.828,0:07:56.406 So, the secret ingredient is about[br]compatibility, about extensibility. 0:07:56.885,0:07:58.634 Don't try to reinvent the wheel again, 0:07:58.843,0:08:00.232 don't try to create another social network, 0:08:00.612,0:08:03.790 or another IM platform that will have all[br]those communication troubles. 0:08:04.145,0:08:05.253 So, I mean a long-term vision. 0:08:07.652,0:08:10.517 And, actually, the secret ingredient[br]is standardization, in these things. 0:08:11.240,0:08:18.348 So, this standard should[br]have a couple of features, 0:08:19.535,0:08:23.706 support news feeds, communities, IM, chatroom[br]presences, know who's online, profiles, 0:08:24.084,0:08:26.961 video conferencing security, bridges to the Web. 0:08:28.240,0:08:29.524 And then it will be real-time. 0:08:31.799,0:08:32.973 And, 1 minute? 0:08:33.451,0:08:35.350 This protocol actually exists, it's called[br]XMPP. 0:08:36.176,0:08:40.060 So the goal of the project is:[br]- take XMPP implemented 0:08:40.710,0:08:43.859 - and doing a lot of innovation on[br]top of the project 0:08:44.493,0:08:48.857 So, server-side it's a simple XMPP[br]client, webserver, simple to install 0:08:49.342,0:08:51.121 (PHP, MySQL PostgreSQL) 0:08:51.684,0:08:55.472 And user-side, it's also super simple[br]to use, you need simply a browser, 0:08:57.505,0:09:02.207 it's responsive, it's light, it's fast and[br]is built actually for small communities. 0:09:03.426,0:09:05.195 There are pods all around the world. 0:09:05.471,0:09:07.347 You're really invited to deploy your own[br]pods. 0:09:07.834,0:09:11.255 There is already ten thousands accounts[br]on the official pod 0:09:11.470,0:09:12.417 30 languages 0:09:12.651,0:09:13.889 Debian packages coming soon 0:09:14.137,0:09:16.619 Thanks to the help of some people[br]in this room. 0:09:17.506,0:09:19.666 And, that's it ! 0:09:20.578,0:09:22.690 So if you want more information,[br]everything is on the website, 0:09:22.913,0:09:25.174 you can join the chat room. 0:09:25.385,0:09:26.527 Or, the twitter. 0:09:27.210,0:09:30.576 [applause] 0:09:31.005,0:09:32.163 Thank you very much. 0:09:32.620,0:09:35.902 Next up is Thomas Lange, Mrfai,[br]talking about dracut. 9:59:59.000,9:59:59.000 Today, I'm not talking about FAI[br]but about dracut. 9:59:59.000,9:59:59.000 dracut is a replacement for initramfs[br]which is used by most other distributions. 9:59:59.000,9:59:59.000 If I'm correct, only Ubuntu and Debian[br]and derivatives are using initramfs-tools 9:59:59.000,9:59:59.000 All other distributions already moved[br]to dracut. 9:59:59.000,9:59:59.000 Today I want to show how you can get[br]an experience with dracut 9:59:59.000,9:59:59.000 without deinstalling initramfs-tools. 9:59:59.000,9:59:59.000 Ben Hutchings did some patches, I think[br]two years ago, so it's possible. 9:59:59.000,9:59:59.000 What you have to do, there's a package[br]called "dracut-core", 9:59:59.000,9:59:59.000 which does not conflict with[br]initramfs-tools. 9:59:59.000,9:59:59.000 I have a virtual machine. 9:59:59.000,9:59:59.000 So, debian/fai… 9:59:59.000,9:59:59.000 On this machine, I will now install[br]the dracut-core package 9:59:59.000,9:59:59.000 and that's it. 9:59:59.000,9:59:59.000 We still have one initrd. 9:59:59.000,9:59:59.000 And now I can say… 9:59:59.000,9:59:59.000 Oh no, first I have to copy the dracut version[br]and then I can generate 9:59:59.000,9:59:59.000 a new initrd with dracut. 9:59:59.000,9:59:59.000 dracut uses the usual hooks or module[br]system, 9:59:59.000,9:59:59.000 it does not use the hooks from the initramfs[br]things but it already includes 9:59:59.000,9:59:59.000 a lot of hooks, so for example if you have[br]a cryptsetup, 9:59:59.000,9:59:59.000 you do not need the hooks for[br]initramfs-tools from the cryptsetup package 9:59:59.000,9:59:59.000 because dracut already includes this[br]and a lot of other things. 9:59:59.000,9:59:59.000 After generating a new initrd,[br]you update your grub and you see 9:59:59.000,9:59:59.000 we have now two entries in the grub. 9:59:59.000,9:59:59.000 One with the old initrd which was created[br]by… 9:59:59.000,9:59:59.000 the default one is the initrd which is[br]created by initramfs-tools 9:59:59.000,9:59:59.000 and here you have the boot entry for[br]the new dracut initrd 9:59:59.000,9:59:59.000 and it boots up and works. 9:59:59.000,9:59:59.000 What we need is that more people are[br]using it and giving it a try. 9:59:59.000,9:59:59.000 In your environment, on your hardware,[br]does dracut work? 9:59:59.000,9:59:59.000 We had a discussion, like 5 years ago, if[br]Debian… 9:59:59.000,9:59:59.000 When will Debian switch from initramfs-tools[br]to dracut? 9:59:59.000,9:59:59.000 And still there's no real need because[br]initramfs-tools works for everybody 9:59:59.000,9:59:59.000 but I think in the long term, we will[br]switch it, 9:59:59.000,9:59:59.000 so please help us, write bug reports 9:59:59.000,9:59:59.000 or just give it a try, if it works for you[br]or not. 9:59:59.000,9:59:59.000 That's it. 9:59:59.000,9:59:59.000 [Applause] 9:59:59.000,9:59:59.000 Next up is TecKids talking about[br]their organization. 9:59:59.000,9:59:59.000 Ok, those of you who attended the[br]Skolelinux talk already heard about TecKids. 9:59:59.000,9:59:59.000 I want to give a few details about what[br]else we do. 9:59:59.000,9:59:59.000 TecKids is a non-profit organization based[br]in Germany, but 9:59:59.000,9:59:59.000 we're working internationally and 9:59:59.000,9:59:59.000 we are completely centered around free[br]software and we do basically everything 9:59:59.000,9:59:59.000 concerning free software in education in[br]the context of children and adolescents, 9:59:59.000,9:59:59.000 young people. 9:59:59.000,9:59:59.000 More than 50% of our active members[br]are minors. 9:59:59.000,9:59:59.000 There's an "s" missing, sorry. 9:59:59.000,9:59:59.000 They are of course not minor but they are[br]minors. 9:59:59.000,9:59:59.000 Sorry, kids, if you are watching this. 9:59:59.000,9:59:59.000 They're minors and we are a fully[br]democratic organization 9:59:59.000,9:59:59.000 like in the FOSS spirit 9:59:59.000,9:59:59.000 and the most important thing is that we[br]get children involved with all the parts 9:59:59.000,9:59:59.000 of the organization, both operational and[br]tutoring and workshops 9:59:59.000,9:59:59.000 and working with free software projects,[br]giving presentations. 9:59:59.000,9:59:59.000 Normally some children would be here but[br]as this conference was right in the middle of 9:59:59.000,9:59:59.000 schooltime, this was not so easy. 9:59:59.000,9:59:59.000 So what do we do. 9:59:59.000,9:59:59.000 First of all, we want to get children[br]interested in programming, in coding, 9:59:59.000,9:59:59.000 in technical stuff and also in free software. 9:59:59.000,9:59:59.000 This we do by running youth programs[br]at free software conferences 9:59:59.000,9:59:59.000 like the FrOSCon where normally around[br]100 to 120 children attend and 9:59:59.000,9:59:59.000 use Debian and all that cool stuff and[br]learn what they can do with it. 9:59:59.000,9:59:59.000 We do peer learning, so those children[br]who already know many things and 9:59:59.000,9:59:59.000 are very interested, they start tutoring[br]other children. 9:59:59.000,9:59:59.000 Of course we have non-tech fun together,[br]we are outside, 9:59:59.000,9:59:59.000 there is a social program with staying[br]over night, having a barbecue and 9:59:59.000,9:59:59.000 all that stuff that helps building[br]a community. 9:59:59.000,9:59:59.000 Those who are even more interested can get[br]actively involved in preparing workshops, 9:59:59.000,9:59:59.000 organizing events, preparing talks, looking[br]at open source projects, 9:59:59.000,9:59:59.000 helping others get a free messenger[br]instead of WhatsApp, 9:59:59.000,9:59:59.000 working on HowTo, how to spread the word[br]among youths and all of that. 9:59:59.000,9:59:59.000 And then ??? at conference and raise[br]awareness, 9:59:59.000,9:59:59.000 this is our presentation team from[br]the Chemnitz Linux Days 9:59:59.000,9:59:59.000 and they are presenting the whole[br]??? of free software in education 9:59:59.000,9:59:59.000 at our SchulFrei booth which is[br]"School free" in German. 9:59:59.000,9:59:59.000 They are presenting all projects that are[br]involved in this common booth and 9:59:59.000,9:59:59.000 care for free software education. 9:59:59.000,9:59:59.000 If you are interested in that, maybe[br]because you have children or 9:59:59.000,9:59:59.000 want to have children or are involved[br]in education in some way, 9:59:59.000,9:59:59.000 there are quite a few things that you[br]can do. 9:59:59.000,9:59:59.000 You can help working on projects, you[br]can work with mentoring the children 9:59:59.000,9:59:59.000 in coding or organisational activities. 9:59:59.000,9:59:59.000 You can help spreading the word, also[br]raising awareness that 9:59:59.000,9:59:59.000 many many software projects do have[br]some involvement with children, 9:59:59.000,9:59:59.000 even indirectly, like a web browser[br]like Firefox, 9:59:59.000,9:59:59.000 such applications are used by children and[br]they may have other needs, 9:59:59.000,9:59:59.000 and they may have other views on that, 9:59:59.000,9:59:59.000 so it's very important to at least think[br]about what children or schools or 9:59:59.000,9:59:59.000 teachers as well do with this software. 9:59:59.000,9:59:59.000 Pardon? One minute, thank you. 9:59:59.000,9:59:59.000 We need help with presentations at[br]conferences, 9:59:59.000,9:59:59.000 so not every time the same people have to[br]get a day off at work and travel to conferences 9:59:59.000,9:59:59.000 there's much more manpower needed. 9:59:59.000,9:59:59.000 And of course, every ngo, every non-profit[br]organization is lacking money, 9:59:59.000,9:59:59.000 so if you have already donated to Debian[br]and still have money left, 9:59:59.000,9:59:59.000 you might want to give your money to[br]the future, which is children. 9:59:59.000,9:59:59.000 Don't forget donating to Debian. 9:59:59.000,9:59:59.000 I don't know if I am shot if I don't say that. 9:59:59.000,9:59:59.000 [laughter] 9:59:59.000,9:59:59.000 And there's also liberapay, it's a free[br]donation platform, 9:59:59.000,9:59:59.000 just have a look at it and if you want to[br]help us, actively just go to our web site, 9:59:59.000,9:59:59.000 find some communication means or just[br]talk to someone you find 9:59:59.000,9:59:59.000 at any conference who is wearing this[br]shirt with our logo. 9:59:59.000,9:59:59.000 Thank you. 9:59:59.000,9:59:59.000 [Applause] 9:59:59.000,9:59:59.000 Next up is Thomas Koch, talking about[br]containers. 9:59:59.000,9:59:59.000 Almost ready. 9:59:59.000,9:59:59.000 We do have one more space at the end[br]if anybody feels, you know, 9:59:59.000,9:59:59.000 inspired to tell us all the things. 9:59:59.000,9:59:59.000 I mean, we did have one very last minute[br]sign up. 9:59:59.000,9:59:59.000 Meanwhile, I guess I can make[br]announcements while I'm here. 9:59:59.000,9:59:59.000 Front desk will be available again[br]after lunch, as will t-shirts. 9:59:59.000,9:59:59.000 Anybody who hasn't had a t-shirt yet, 9:59:59.000,9:59:59.000 basically, if you signed up, you're allowed[br]to get a t-shirt, come see me, 9:59:59.000,9:59:59.000 yes, free of charge, 9:59:59.000,9:59:59.000 come see me at front desk when it's[br]open again after lunch. 9:59:59.000,9:59:59.000 Because I do know some people been[br]reticent to come up and, you know, 9:59:59.000,9:59:59.000 ask one… 9:59:59.000,9:59:59.000 I've probably given effectively[br]a lightning talk on not giving… 9:59:59.000,9:59:59.000 I think so. 9:59:59.000,9:59:59.000 Right, here we go. 9:59:59.000,9:59:59.000 Ein, zwei, ok. 9:59:59.000,9:59:59.000 Hello, I'm Thomas Koch, I work for Google, 9:59:59.000,9:59:59.000 I work in support for Google Container[br]Engine, Google kubernetes engine. 9:59:59.000,9:59:59.000 Who knows what Kubernetes is? 9:59:59.000,9:59:59.000 Oh, so few, ok. 9:59:59.000,9:59:59.000 It's a thing to orchestrate containers[br]on many many nodes, 9:59:59.000,9:59:59.000 up to thousands of nodes. 9:59:59.000,9:59:59.000 It was started by Google, open sourced[br]by Google in 2015 I believe. 9:59:59.000,9:59:59.000 First contributor was Red Hat, it is 100%[br]open source, it's written in Go 9:59:59.000,9:59:59.000 and by now it has won the market of[br]managing containers on large nodes. 9:59:59.000,9:59:59.000 I just was at the KubeCon in Copenhagen[br]with 4300 participants and 9:59:59.000,9:59:59.000 every company you can imagine has[br]an offering about Kubernetes. 9:59:59.000,9:59:59.000 Just some logos of companies that use or[br]contribute to Kubernetes 9:59:59.000,9:59:59.000 and even more logos and these slides are[br]outdated, so there are even more. 9:59:59.000,9:59:59.000 Kubernetes, you have some masters that[br]control kubelet on every node. 9:59:59.000,9:59:59.000 A kubelet can start containers and can[br]set up networking stuff 9:59:59.000,9:59:59.000 and can set up volumes and the basic[br]concept of computation, 9:59:59.000,9:59:59.000 the basic primitive is a pod. 9:59:59.000,9:59:59.000 A pod is one to many containers running[br]together in one environment 9:59:59.000,9:59:59.000 so that you have the possibility to have[br]sidecars running beside your main containers 9:59:59.000,9:59:59.000 that does additional stuff. 9:59:59.000,9:59:59.000 It has proven useful in Google's internal[br]??? container management engine 9:59:59.000,9:59:59.000 that you want to have certain containers[br]always running containers 9:59:59.000,9:59:59.000 and sharing resources. 9:59:59.000,9:59:59.000 An other important primitive is volumes. 9:59:59.000,9:59:59.000 Kubernetes can manage your storage and[br]provision storage to be accessible 9:59:59.000,9:59:59.000 to your containers. 9:59:59.000,9:59:59.000 You can combine many parts that provide[br]the same service to be accessible 9:59:59.000,9:59:59.000 under the same IP address and so have[br]failover enable like this 9:59:59.000,9:59:59.000 and of course then you have controlers[br]that scale your services, 9:59:59.000,9:59:59.000 scale down your services, restart failed[br]pods 9:59:59.000,9:59:59.000 or drain nodes that you want to take away 9:59:59.000,9:59:59.000 And my question now is what is the role[br]of Debian in a world where 9:59:59.000,9:59:59.000 Kubernetes becomes more and more popular[br]even if not that many of you have heard about it 9:59:59.000,9:59:59.000 I believe that Kubernetes will become[br]even more popular 9:59:59.000,9:59:59.000 and even as a Debian Maintainer, I'm[br]enthusiastic about how easy it becomes now 9:59:59.000,9:59:59.000 to run your stuff in Kubernetes. 9:59:59.000,9:59:59.000 But you only need a very minimal host[br]operating system to install Kubernetes 9:59:59.000,9:59:59.000 on your servers, afterwards you need[br]a bare image, a base image for your container 9:59:59.000,9:59:59.000 which is normally also a very minimal image 9:59:59.000,9:59:59.000 and you don't do "apt-get install apache2"[br]anymore to have a web server, 9:59:59.000,9:59:59.000 you take an apache container image and then[br]you extend this image and 9:59:59.000,9:59:59.000 put your app onto this image, so you don't[br]need an apache Debian image anymore 9:59:59.000,9:59:59.000 in such a world. 9:59:59.000,9:59:59.000 Will we still need this in Debian? 9:59:59.000,9:59:59.000 However, nothing is perfect. 9:59:59.000,9:59:59.000 On KubeCon, I also saw companies offering 9:59:59.000,9:59:59.000 "Oh, we scan you container images for[br]outdated libraries" and 9:59:59.000,9:59:59.000 you have long times to update your cluster[br]because all the containers need to be stopped 9:59:59.000,9:59:59.000 you download new images, you start whole[br]new environments 9:59:59.000,9:59:59.000 so there are optimizations possible there 9:59:59.000,9:59:59.000 and people are wondering 9:59:59.000,9:59:59.000 "Ok, where does my stuff come from?[br]Is it from a trusted source?" 9:59:59.000,9:59:59.000 And my crazy thoughts, maybe it's an[br]opportunity here 9:59:59.000,9:59:59.000 if Debian would become a source of trusted[br]binaries or even container images. 9:59:59.000,9:59:59.000 Thank you. 9:59:59.000,9:59:59.000 [Applause] 9:59:59.000,9:59:59.000 Next up, Pierre Pronchery, talking about[br]Manticore, DeepState and DeforaOS 9:59:59.000,9:59:59.000 Are you pretty much ready? 9:59:59.000,9:59:59.000 I think so. 9:59:59.000,9:59:59.000 Meanwhile, does anybody know any[br]dance routines, you know, 9:59:59.000,9:59:59.000 just to bridge over the time, because[br]I'm not going to. 9:59:59.000,9:59:59.000 I don't think I know any Jerks. 9:59:59.000,9:59:59.000 Hopefully nearly there. 9:59:59.000,9:59:59.000 You fling my phone from me. 9:59:59.000,9:59:59.000 It's ok, nobody calls me anyway. 9:59:59.000,9:59:59.000 I'm afraid I haven't got any more[br]announcements. 9:59:59.000,9:59:59.000 We are pleased to announce that there[br]are no current announcements available. 9:59:59.000,9:59:59.000 The news has been called off. 9:59:59.000,9:59:59.000 Do you actually have slides? 9:59:59.000,9:59:59.000 I'm wondering if we should your round. 9:59:59.000,9:59:59.000 Ok, right, we have the interval act, an[br]interpretive dance by Andrew Shadura 9:59:59.000,9:59:59.000 on the nature of git crecord being[br]for the win. 9:59:59.000,9:59:59.000 Well, you know, anything to bridge[br]the time, right? 9:59:59.000,9:59:59.000 If in doubt, make the font bigger. 9:59:59.000,9:59:59.000 Maybe I should give a lightning talk[br]about that. 9:59:59.000,9:59:59.000 I think I might, just at the very end, I'll[br]just disguise it as an announcement. 9:59:59.000,9:59:59.000 Ready? 9:59:59.000,9:59:59.000 There, no. 9:59:59.000,9:59:59.000 I prefer that. 9:59:59.000,9:59:59.000 Yes, but we don't. 9:59:59.000,9:59:59.000 Why? 9:59:59.000,9:59:59.000 Did you see what happened earlier? 9:59:59.000,9:59:59.000 What happened earlier? 9:59:59.000,9:59:59.000 Please use the hand microphone. 9:59:59.000,9:59:59.000 Ok. 9:59:59.000,9:59:59.000 Alright, listen to a man but not me. 9:59:59.000,9:59:59.000 [laughter] 9:59:59.000,9:59:59.000 Can you hear me? 9:59:59.000,9:59:59.000 So, I'm just going to show you a small[br]utility I wrote. 9:59:59.000,9:59:59.000 Actually, I didn't write it from scratch,[br]I just ported it from… Anyway. 9:59:59.000,9:59:59.000 Let's see, we've got a git diff of 9:59:59.000,9:59:59.000 things with a Debian package. 9:59:59.000,9:59:59.000 Lot's of changes, and I forgot to commit[br]them individually. 9:59:59.000,9:59:59.000 There's lots of patches and things, 9:59:59.000,9:59:59.000 I just want to, somehow, sort this out. 9:59:59.000,9:59:59.000 So I just run "git crecord" and suddenly[br]I can see all the things here. 9:59:59.000,9:59:59.000 I can unwrap the diffs… 9:59:59.000,9:59:59.000 What's happening with the ??? 9:59:59.000,9:59:59.000 I can basically select individual bits[br]of the diff and… 9:59:59.000,9:59:59.000 Let's just deselect all things, commit[br]those, just a few. 9:59:59.000,9:59:59.000 There were just a few patches ??? 9:59:59.000,9:59:59.000 so I'm going to commit them now,[br]yes, like refresh patches. 9:59:59.000,9:59:59.000 Let's say just "Refresh", just enough. 9:59:59.000,9:59:59.000 Oh, mmh. 9:59:59.000,9:59:59.000 It's not going to work, because I haven't[br]got a card 9:59:59.000,9:59:59.000 and I forgot to disable the… 9:59:59.000,9:59:59.000 I don't think I can, I don't remember,[br]I probably can't disable PGP signing unfortunately 9:59:59.000,9:59:59.000 it's not implemented yet. 9:59:59.000,9:59:59.000 Anyway. 9:59:59.000,9:59:59.000 Using this thing you can, it's better than… 9:59:59.000,9:59:59.000 How is it properly called. 9:59:59.000,9:59:59.000 It's better than the builtin ??? 9:59:59.000,9:59:59.000 I can't even remember it's name. 9:59:59.000,9:59:59.000 That one. 9:59:59.000,9:59:59.000 I didn't exactly hear exactly what he said,[br]like "git patch something" 9:59:59.000,9:59:59.000 "git add --patch" 9:59:59.000,9:59:59.000 And there's an other one which is… 9:59:59.000,9:59:59.000 There's one a bit more interactive and[br]one which is a bit less interactive. 9:59:59.000,9:59:59.000 This is ??? interactive and there[br]will be more features. 9:59:59.000,9:59:59.000 It is actually, it was originally written[br]for mercurial 9:59:59.000,9:59:59.000 and this was a thing I really missed[br]when I had to use git 9:59:59.000,9:59:59.000 and now I don't have to anymore. 9:59:59.000,9:59:59.000 This is it. 9:59:59.000,9:59:59.000 It's in Debian, you can apt install it[br]if you prefer. 9:59:59.000,9:59:59.000 It's in Debian, you can apt install it[br]if you prefer, 9:59:59.000,9:59:59.000 or you can install it from source and[br]there would be more features later. 9:59:59.000,9:59:59.000 That's it. 9:59:59.000,9:59:59.000 Thank you 9:59:59.000,9:59:59.000 [Applause] 9:59:59.000,9:59:59.000 Now, Pierre Pronchery talking about[br]all the things that I said 9:59:59.000,9:59:59.000 he was going to talk about earlier. 9:59:59.000,9:59:59.000 One moment please. 9:59:59.000,9:59:59.000 [Applause] 9:59:59.000,9:59:59.000 Sorry about that, I didn't really plan[br]for this, 9:59:59.000,9:59:59.000 so I made the slides 5 minutes ago. 9:59:59.000,9:59:59.000 So, I'm Pierre Pronchery, thank you[br]for having me, 9:59:59.000,9:59:59.000 even if I'm actually an officiel NetBSD[br]developer, 9:59:59.000,9:59:59.000 but I'm been using Debian since 1999,[br]so maybe I'm alowed, 9:59:59.000,9:59:59.000 I'm also a security consultant, interested[br]in Kernel development, 9:59:59.000,9:59:59.000 security integration, and so on. 9:59:59.000,9:59:59.000 What you cannot see on the slides[br]right now is that 9:59:59.000,9:59:59.000 I'm also on the board of directors[br]of NetBSD. 9:59:59.000,9:59:59.000 So actually I'm in a good position to talk[br]about the project if you'd like to. 9:59:59.000,9:59:59.000 I would like to talk to you about Manticore[br]today. 9:59:59.000,9:59:59.000 It's a symbolic execution tool, 9:59:59.000,9:59:59.000 basically, it uses a CPU emulator, which[br]can be hardware assisted of course, 9:59:59.000,9:59:59.000 to run and analyze programs or algorithms,[br]so parts of programs on a simulated system 9:59:59.000,9:59:59.000 and one of the aims is actually[br]to make them crash 9:59:59.000,9:59:59.000 so to make extensive fuzzing and be very[br]efficient at fuzzing by possibly tracing 9:59:59.000,9:59:59.000 instructions and so on, whatever is going[br]on inside the program. 9:59:59.000,9:59:59.000 It supports static Linux binaries in 32-bits[br]and 64-bits modes, 9:59:59.000,9:59:59.000 also it supports ARM 32-bits, support is[br]ongoing for ARM 64-bits, 9:59:59.000,9:59:59.000 it also works with Ethereum bytecode. 9:59:59.000,9:59:59.000 There are official releases on GitHub,[br]it's already packaged in PkgSrc by myself 9:59:59.000,9:59:59.000 and I'm actually looking for volunteers[br]to package it for Debian 9:59:59.000,9:59:59.000 or possibly help me to do so. 9:59:59.000,9:59:59.000 I'm actually sponsored by Trail of Bits,[br]the developer of Manticore, 9:59:59.000,9:59:59.000 to work on this, which is also why[br]I'm here. 9:59:59.000,9:59:59.000 The companion to Manticore is called[br]DeepState, 9:59:59.000,9:59:59.000 it's specifically meant for Unit Testing[br]with symbolic execution. 9:59:59.000,9:59:59.000 It supports not just Manticore but also[br]an other backend for analyzing 9:59:59.000,9:59:59.000 running binaries, 9:59:59.000,9:59:59.000 It's called angr, this other backend,[br]which was developed as a side node 9:59:59.000,9:59:59.000 for the Cyber Grand challenge[br]of DARPA last year. 9:59:59.000,9:59:59.000 DeepState is currently packaged[br]in 2 separate packages in PkgSrc 9:59:59.000,9:59:59.000 by myself again, 9:59:59.000,9:59:59.000 unfortunately not yet fully upstream[br]in PkgSrc, 9:59:59.000,9:59:59.000 but basically I made one package with[br]??? binaries and then the Python bindings. 9:59:59.000,9:59:59.000 This is also on GitHub but with no official[br]release yet, 9:59:59.000,9:59:59.000 because this is a very young project still 9:59:59.000,9:59:59.000 so I'm also for a volunteer in Debian[br]to help me package that. 9:59:59.000,9:59:59.000 And then, a shameless addition, I'm also[br]a developer of, the main developer of 9:59:59.000,9:59:59.000 DeforaOS, an open source desktop[br]environment, and with some more parts 9:59:59.000,9:59:59.000 in the project, 9:59:59.000,9:59:59.000 I have about 50 repositories now in this. 9:59:59.000,9:59:59.000 I'm therefore also looking for volunteers[br]to package that into Debian, 9:59:59.000,9:59:59.000 there are still projects we haven't[br]packaged yet, as far as I know. 9:59:59.000,9:59:59.000 So, since I'm here, I figured I could[br]as well get my PGP key signed, 9:59:59.000,9:59:59.000 I suppose it's one of the steps to become[br]a developer 9:59:59.000,9:59:59.000 and if there are more, I've heard[br]there are plenty, 9:59:59.000,9:59:59.000 then please help me out with this, I'll[br]welcome any assistance doing that. 9:59:59.000,9:59:59.000 Alright. Thank you. 9:59:59.000,9:59:59.000 [Applause] 9:59:59.000,9:59:59.000 Thank you very much. 9:59:59.000,9:59:59.000 I guess that's it. 9:59:59.000,9:59:59.000 The next lightning talk session that I'm[br]aware of is at DebConf18 in Taiwan. 9:59:59.000,9:59:59.000 I hope to see as many of you as possible[br]there. 9:59:59.000,9:59:59.000 Off you go, lunch time. 9:59:59.000,9:59:59.000 [Applause]