0:00:07.254,0:00:07.504 Right, good afternoon 0:00:07.817,0:00:12.360 It is the lightning talks sessions at[br]DebConf Hamburg 2018 0:00:13.019,0:00:17.895 We've got seven speakers, and I guess[br]we'll just get going 0:00:18.352,0:00:22.107 Starting with Tobias Platn???,[br]talking about Debian on Power9. 0:00:27.528,0:00:36.302 Yesterday I, hm no, on friday,[br]I received my new Power9 machine. 0:00:36.519,0:00:37.710 A Talos 9 (II). 0:00:40.456,0:00:44.680 And it has an IBM Power9 processor 0:00:45.658,0:00:52.946 So, the only distro that I know that will[br]work is Debian. 0:00:55.748,0:01:01.820 Then, this is a new PowerPC 64 bits[br]architecture, 0:01:02.330,0:01:06.553 that can run in little-endian mode. 0:01:07.255,0:01:10.823 I downloaded a Debian installer. 0:01:11.834,0:01:16.531 First, I chosed the stable version, but 0:01:17.492,0:01:21.211 that crashed during install. 0:01:21.733,0:01:28.208 And, then I retried a different version,[br]a daily version. 0:01:29.265,0:01:37.455 And this one, which is based on Buster,[br]correctly installed. 0:01:38.264,0:01:44.682 I can even have a graphical environment,[br]working out of the box. 0:01:45.696,0:01:52.899 And, the installer then complained that[br]there is no boot partition 0:01:53.862,0:02:04.744 for older PowerPCs, and this boot partition is[br]not needed, since the TalosII 0:02:05.162,0:02:13.166 has a newer systems starting with power7[br]used petitboot. 0:02:16.038,0:02:22.581 So, that needs to be fixed in the Debian[br]installer, 0:02:23.259,0:02:29.066 that it doesn't produce the warning[br]on Power machines. 0:02:32.143,0:02:37.359 And now I have a working Debian[br]installation, 0:02:38.079,0:02:40.300 which I can use. 0:02:49.707,0:02:52.912 (thanks) [applause] 0:02:54.093,0:02:55.411 Thank you very much, that was very quick. 0:02:55.639,0:02:57.328 Next up is Thimothée Jaussoin, 0:02:57.890,0:03:01.721 talking about Movim, the XMPP social[br]platform. 0:03:05.572,0:03:07.427 Give him a moment to get set up. 0:04:32.681,0:04:34.262 I think it's a bit better this way. 0:04:34.755,0:04:36.976 Who already heard about the platform Movim? 0:04:38.679,0:04:44.207 OK, so we have a couple of people that[br]know about the project here. 0:04:45.054,0:04:48.307 Just to present you what I ??? could be a[br]parallel universe 0:04:48.481,0:04:50.653 but is actually the current universe we're[br]living with. 0:04:52.233,0:04:54.307 Lots of different chat platforms. 0:04:54.594,0:04:56.036 The same thing on social networks. 0:04:56.779,0:05:00.051 We keep reinventing the wheel[br]all the time. 0:05:02.563,0:05:03.455 We don't have this problem with e-mails 0:05:03.742,0:05:07.157 hopefully actually the e-mail standards[br]came way before before all of those 0:05:08.182,0:05:09.515 proprietary solutions 0:05:10.092,0:05:15.089 So we have ??? and Google and Microsoft[br]are still using SMTP, IMAP, for now. 0:05:15.567,0:05:19.559 So everything is compatible, and we have[br]a lot of clients on top of that. 0:05:19.773,0:05:21.747 But for chat, and social networks, it's[br]not the case. 0:05:22.750,0:05:26.054 So the idea of Movim is to build a[br]social platform. 0:05:28.958,0:05:32.801 In there, we can put a little couple of[br]ingredients. 0:05:33.414,0:05:37.407 First, it needs to be Open-Source, for the[br]transparency, for the fact that you can 0:05:37.584,0:05:41.829 have feedback and improvements,[br]for the security part. Bring some trust 0:05:42.035,0:05:47.128 I think that you guys here know about the[br]advantages of Free Software, and 0:05:47.578,0:05:52.731 especially on the communication part,[br]on social networks, but it's not enough. 0:05:53.745,0:05:56.915 We also need to be in control, actually[br]in this social network. 0:05:57.382,0:05:59.249 So it need to be simple and transparent 0:05:59.532,0:06:02.121 on the UI but also on the protocol level. 0:06:02.345,0:06:07.222 On the really deep below stacks. 0:06:08.183,0:06:10.276 So we'll need to have a strong and reliable[br]encryption, 0:06:10.493,0:06:14.743 so don't reinvent also an encryption[br]- talking about Telegram, here - 0:06:15.987,0:06:19.209 And, yeah, need some trusts in sights[br]here. 0:06:19.439,0:06:22.300 I mean a community, and not a company[br]that you will blindly trust 0:06:22.844,0:06:25.718 to take care of all of your communications. 0:06:25.937,0:06:26.953 But it's not enough. 0:06:27.661,0:06:32.071 It needs to be decentralized. Because[br]centralized social networks, 0:06:32.274,0:06:33.482 even if it's opensource, 0:06:33.687,0:06:36.727 if it's only one instance, you have to[br]still trust the instance. So would like to 0:06:36.917,0:06:39.509 deploy your instance, you would like to[br]trust someone else, 0:06:39.674,0:06:42.656 you can only, sometimes, trust only[br]yourself in seldom cases 0:06:44.050,0:06:46.627 Decentralization also brings robustness 0:06:50.497,0:06:54.605 So that's too many times that actually[br]one server is failing, think Signal 0:06:55.078,0:06:59.115 had an issue recently, about this kind[br]of thing there. 0:06:59.272,0:07:02.567 The issue was with the Amazon servers,[br]the whole thing didn't worked 0:07:02.731,0:07:04.077 for a couple of hours. 0:07:04.429,0:07:06.660 And then, resist against censorship and[br]control. 0:07:06.865,0:07:09.145 Same thing with Telegram, I think in[br]Russia. 0:07:09.307,0:07:13.995 I'm talking more about the IM part, but[br]it's also applicable to social networks. 0:07:14.179,0:07:18.439 It's exactly the same thing, just that the[br]exchanges of information are a bit different. 0:07:18.976,0:07:20.749 So, you need these steps but 0:07:21.552,0:07:23.845 all those platforms here 0:07:24.962,0:07:33.484 (I just made this conference 3 years [br]ago, just added Mastodon recently) 0:07:37.125,0:07:43.934 So i might talk about different sorts[br]of platforms 0:07:44.452,0:07:46.932 There is communication between those[br]platforms, kind of standards that are 0:07:47.108,0:07:50.036 starting to come in, especially between[br]Diaspora and Mastodon, 0:07:50.257,0:07:51.944 but there is still a lot of work to do[br]there. 0:07:52.828,0:07:56.406 So, the secret ingredient is about[br]compatibility, about extensibility. 0:07:56.885,0:07:58.634 Don't try to reinvent the wheel again, 0:07:58.843,0:08:00.232 don't try to create another social network, 0:08:00.612,0:08:03.790 or another IM platform that will have all[br]those communication troubles. 0:08:04.145,0:08:05.253 So, I mean a long-term vision. 0:08:07.652,0:08:10.517 And, actually, the secret ingredient[br]is standardization, in these things. 0:08:11.240,0:08:18.348 So, this standard should[br]have a couple of features, 0:08:19.535,0:08:23.706 support news feeds, communities, IM, chatroom[br]presences, know who's online, profiles, 0:08:24.084,0:08:26.961 video conferencing security, bridges to the Web. 0:08:28.240,0:08:29.524 And then it will be real-time. 0:08:31.799,0:08:32.973 And, 1 minute? 0:08:33.451,0:08:35.350 This protocol actually exists, it's called[br]XMPP. 0:08:36.176,0:08:40.060 So the goal of the project is:[br]- take XMPP implemented 0:08:40.710,0:08:43.859 - and doing a lot of innovation on[br]top of the project 0:08:44.493,0:08:48.857 So, server-side it's a simple XMPP[br]client, webserver, simple to install 0:08:49.342,0:08:51.121 (PHP, MySQL PostgreSQL) 0:08:51.684,0:08:55.472 And user-side, it's also super simple[br]to use, you need simply a browser, 0:08:57.505,0:09:02.207 it's responsive, it's light, it's fast and[br]is built actually for small communities. 0:09:03.426,0:09:05.195 There are pods all around the world. 0:09:05.471,0:09:07.347 You're really invited to deploy your own[br]pods. 0:09:07.834,0:09:11.255 There is already ten thousands accounts[br]on the official pod 0:09:11.470,0:09:12.417 30 languages 0:09:12.651,0:09:13.889 Debian packages coming soon 0:09:14.137,0:09:16.619 Thanks to the help of some people[br]in this room. 0:09:17.506,0:09:19.666 And, that's it ! 0:09:20.578,0:09:22.690 So if you want more information,[br]everything is on the website, 0:09:22.913,0:09:25.174 you can join the chat room. 0:09:25.385,0:09:26.527 Or, the twitter. 0:09:27.210,0:09:30.576 [applause] 0:09:31.005,0:09:32.163 Thank you very much. 0:09:32.620,0:09:35.902 Next up is Thomas Lange, Mrfai,[br]talking about dracut. 0:09:58.997,0:10:02.293 Today, I'm not talking about FAI[br]but about dracut. 0:10:02.895,0:10:10.278 dracut is a replacement for initramfs[br]which is used by most other distributions. 0:10:11.204,0:10:18.435 If I'm correct, only Ubuntu and Debian[br]and derivatives are using initramfs-tools 0:10:18.765,0:10:22.640 All other distributions already moved[br]to dracut. 0:10:24.015,0:10:28.810 Today I want to show how you can get[br]an experience with dracut 0:10:29.261,0:10:31.800 without deinstalling initramfs-tools. 0:10:32.749,0:10:37.485 Ben Hutchings did some patches, I think[br]two years ago, so it's possible. 0:10:38.598,0:10:41.847 What you have to do, there's a package[br]called "dracut-core", 0:10:42.197,0:10:44.074 which does not conflict with[br]initramfs-tools. 0:10:46.684,0:10:49.213 I have a virtual machine. 0:10:51.931,0:10:55.228 So, debian/fai… 0:10:55.926,0:11:03.568 On this machine, I will now install[br]the dracut-core package 0:11:05.357,0:11:07.007 and that's it. 0:11:08.395,0:11:10.536 We still have one initrd. 0:11:14.012,0:11:15.192 And now I can say… 0:11:15.448,0:11:33.986 Oh no, first I have to copy the dracut version[br]and then I can generate 0:11:34.317,0:11:36.178 a new initrd with dracut. 0:11:38.818,0:11:44.576 dracut uses the usual hooks or module[br]system, 0:11:45.187,0:11:50.659 it does not use the hooks from the initramfs[br]things but it already includes 0:11:50.881,0:11:54.554 a lot of hooks, so for example if you have[br]a cryptsetup, 0:11:54.799,0:12:02.635 you do not need the hooks for[br]initramfs-tools from the cryptsetup package 0:12:03.233,0:12:07.911 because dracut already includes this[br]and a lot of other things. 0:12:08.515,0:12:13.878 After generating a new initrd,[br]you update your grub and you see 0:12:14.291,0:12:16.388 we have now two entries in the grub. 0:12:17.587,0:12:21.194 One with the old initrd which was created[br]by… 0:12:22.362,0:12:26.695 the default one is the initrd which is[br]created by initramfs-tools 0:12:27.371,0:12:32.660 and here you have the boot entry for[br]the new dracut initrd 0:12:33.389,0:12:35.476 and it boots up and works. 0:12:41.613,0:12:47.606 What we need is that more people are[br]using it and giving it a try. 0:12:48.404,0:12:51.625 In your environment, on your hardware,[br]does dracut work? 0:12:53.096,0:12:57.393 We had a discussion, like 5 years ago, if[br]Debian… 0:12:57.787,0:13:01.490 When will Debian switch from initramfs-tools[br]to dracut? 0:13:02.462,0:13:06.332 And still there's no real need because[br]initramfs-tools works for everybody 0:13:06.901,0:13:09.392 but I think in the long term, we will[br]switch it, 0:13:09.844,0:13:13.895 so please help us, write bug reports 0:13:14.224,0:13:16.318 or just give it a try, if it works for you[br]or not. 0:13:17.030,0:13:18.113 That's it. 0:13:18.816,0:13:23.597 [Applause] 0:13:24.111,0:13:27.810 Next up is TecKids talking about[br]their organization. 0:14:18.637,0:14:24.767 Ok, those of you who attended the[br]Skolelinux talk already heard about TecKids. 0:14:24.987,0:14:27.369 I want to give a few details about what[br]else we do. 0:14:28.932,0:14:33.079 TecKids is a non-profit organization based[br]in Germany, but 0:14:33.373,0:14:37.919 we're working internationally and 0:14:42.814,0:14:48.200 we are completely centered around free[br]software and we do basically everything 0:14:49.607,0:14:54.605 concerning free software in education in[br]the context of children and adolescents, 0:14:54.605,0:14:55.348 young people. 0:14:55.859,0:14:58.733 More than 50% of our active members[br]are minors. 0:14:59.882,0:15:01.244 There's an "s" missing, sorry. 0:15:01.858,0:15:03.858 They are of course not minor but they are[br]minors. 0:15:06.570,0:15:08.807 Sorry, kids, if you are watching this. 0:15:10.388,0:15:13.283 They're minors and we are a fully[br]democratic organization 0:15:13.656,0:15:15.186 like in the FOSS spirit 0:15:16.214,0:15:20.979 and the most important thing is that we[br]get children involved with all the parts 0:15:21.191,0:15:25.143 of the organization, both operational and[br]tutoring and workshops 0:15:25.604,0:15:28.882 and working with free software projects,[br]giving presentations. 0:15:29.888,0:15:34.253 Normally some children would be here but[br]as this conference was right in the middle of 0:15:34.767,0:15:37.058 schooltime, this was not so easy. 0:15:38.226,0:15:39.264 So what do we do. 0:15:39.549,0:15:43.420 First of all, we want to get children[br]interested in programming, in coding, 0:15:43.911,0:15:46.092 in technical stuff and also in free software. 0:15:46.752,0:15:50.299 This we do by running youth programs[br]at free software conferences 0:15:50.551,0:15:55.835 like the FrOSCon where normally around[br]100 to 120 children attend and 0:15:56.613,0:16:00.710 use Debian and all that cool stuff and[br]learn what they can do with it. 0:16:04.489,0:16:09.320 We do peer learning, so those children[br]who already know many things and 0:16:09.757,0:16:12.775 are very interested, they start tutoring[br]other children. 0:16:14.380,0:16:18.854 Of course we have non-tech fun together,[br]we are outside, 0:16:19.397,0:16:23.999 there is a social program with staying[br]over night, having a barbecue and 0:16:24.758,0:16:27.808 all that stuff that helps building[br]a community. 0:16:29.316,0:16:33.515 Those who are even more interested can get[br]actively involved in preparing workshops, 0:16:33.768,0:16:38.764 organizing events, preparing talks, looking[br]at open source projects, 0:16:39.223,0:16:44.998 helping others get a free messenger[br]instead of WhatsApp, 0:16:45.373,0:16:50.310 working on HowTo, how to spread the word[br]among youths and all of that. 0:16:51.243,0:16:54.366 And then visit conferences and raise[br]awareness, 0:16:54.555,0:16:56.107 this is our presentation team from[br]the Chemnitz Linux Days 0:16:57.346,0:17:00.468 and they are presenting the whole[br]"can" of free software in education 0:17:00.918,0:17:05.282 at our SchulFrei booth which is[br]"School free" in German. 0:17:08.777,0:17:15.129 They are presenting all projects that are[br]involved in this common booth and 0:17:17.934,0:17:19.521 care for free software education. 0:17:21.212,0:17:25.395 If you are interested in that, maybe[br]because you have children or 0:17:25.608,0:17:29.158 want to have children or are involved[br]in education in some way, 0:17:30.942,0:17:33.780 there are quite a few things that you[br]can do. 0:17:34.447,0:17:40.196 You can help working on projects, you[br]can work with mentoring the children 0:17:41.019,0:17:43.900 in coding or organisational activities. 0:17:45.621,0:17:48.478 You can help spreading the word, also[br]raising awareness that 0:17:49.592,0:17:55.599 many many software projects do have[br]some involvement with children, 0:17:55.911,0:17:59.507 even indirectly, like a web browser[br]like Firefox, 0:18:00.018,0:18:03.696 such applications are used by children and[br]they may have other needs, 0:18:03.994,0:18:05.484 and they may have other views on that, 0:18:05.884,0:18:10.307 so it's very important to at least think[br]about what children or schools or 0:18:11.705,0:18:14.077 teachers as well do with this software. 0:18:14.746,0:18:16.213 Pardon? One minute, thank you. 0:18:18.071,0:18:20.443 We need help with presentations at[br]conferences, 0:18:21.071,0:18:28.509 so not every time the same people have to[br]get a day off at work and travel to conferences 0:18:29.072,0:18:30.883 there's much more manpower needed. 0:18:31.361,0:18:37.428 And of course, every ngo, every non-profit[br]organization is lacking money, 0:18:37.840,0:18:41.667 so if you have already donated to Debian[br]and still have money left, 0:18:42.131,0:18:47.389 you might want to give your money to[br]the future, which is children. 0:18:50.346,0:18:52.192 Don't forget donating to Debian. 0:18:52.587,0:18:54.959 I don't know if I am shot if I don't say that. 0:18:57.299,0:19:02.778 And there's also liberapay, it's a free[br]donation platform, 0:19:03.041,0:19:06.531 just have a look at it and if you want to[br]help us, actively just go to our web site, 0:19:06.785,0:19:11.504 find some communication means or just[br]talk to someone you find 0:19:11.748,0:19:15.604 at any conference who is wearing this[br]shirt with our logo. 0:19:16.069,0:19:17.077 Thank you. 0:19:17.684,0:19:22.524 [Applause] 0:19:38.988,0:19:41.637 Next up is Thomas Koch, talking about[br]containers. 0:19:48.654,0:19:49.555 Almost ready. 0:19:49.875,0:19:50.140 We do have one more space at the end[br]if anybody feels, you know, 0:19:50.140,0:19:58.512 inspired to tell us all the things. 0:19:58.829,0:20:02.525 I mean, we did have one very last minute[br]sign up. 0:20:24.490,0:20:26.843 Meanwhile, I guess I can make[br]announcements while I'm here. 0:20:27.185,0:20:30.678 Front desk will be available again[br]after lunch, as will t-shirts. 0:20:30.896,0:20:32.562 Anybody who hasn't had a t-shirt yet, 0:20:33.887,0:20:37.205 basically, if you signed up, you're allowed[br]to get a t-shirt, come see me, 0:20:37.895,0:20:39.618 yes, free of charge, 0:20:40.941,0:20:43.656 come see me at front desk when it's[br]open again after lunch. 0:20:45.298,0:20:48.518 Because I do know some people been[br]reticent to come up and, you know, 0:20:48.754,0:20:49.577 ask one… 0:20:55.199,0:20:59.037 I've probably given effectively[br]a lightning talk on not giving… 0:21:09.754,0:21:12.220 Hello, I'm Thomas Koch, I work for Google, 0:21:12.570,0:21:17.694 I work in support for Google Container[br]Engine, Google kubernetes engine. 0:21:20.232,0:21:22.982 Who knows what Kubernetes is? 0:21:26.102,0:21:27.158 Oh, so few, ok. 0:21:27.782,0:21:33.565 It's a thing to orchestrate containers[br]on many many nodes, 0:21:34.205,0:21:35.666 up to thousands of nodes. 0:21:36.471,0:21:42.960 It was started by Google, open sourced[br]by Google in 2015 I believe. 0:21:44.408,0:21:49.983 First contributor was Red Hat, it is 100%[br]open source, it's written in Go 0:21:50.545,0:21:58.400 and by now it has won the market of[br]managing containers on large nodes. 0:21:59.088,0:22:05.240 I just was at the KubeCon in Copenhagen[br]with 4300 participants and 0:22:05.605,0:22:09.472 every company you can imagine has[br]an offering about Kubernetes. 0:22:11.668,0:22:16.894 Just some logos of companies that use or[br]contribute to Kubernetes 0:22:17.746,0:22:22.350 and even more logos and these slides are[br]outdated, so there are even more. 0:22:23.840,0:22:30.571 Kubernetes, you have some masters that[br]control kubelet on every node. 0:22:31.065,0:22:36.105 A kubelet can start containers and can[br]set up networking stuff 0:22:36.570,0:22:43.506 and can set up volumes and the basic[br]concept of computation, 0:22:43.960,0:22:45.884 the basic primitive is a pod. 0:22:46.267,0:22:51.531 A pod is one to many containers running[br]together in one environment 0:22:51.971,0:22:57.385 so that you have the possibility to have[br]sidecars running beside your main containers 0:22:57.753,0:22:59.092 that does additional stuff. 0:22:59.703,0:23:05.648 It has proven useful in Google's internal[br]??? container management engine 0:23:06.060,0:23:09.967 that you want to have certain containers[br]always running containers 0:23:10.167,0:23:11.497 and sharing resources. 0:23:12.356,0:23:14.400 An other important primitive is volumes. 0:23:14.932,0:23:20.593 Kubernetes can manage your storage and[br]provision storage to be accessible 0:23:20.964,0:23:22.135 to your containers. 0:23:23.683,0:23:31.443 You can combine many parts that provide[br]the same service to be accessible 0:23:31.767,0:23:37.545 under the same IP address and so have[br]failover enable like this 0:23:37.896,0:23:42.648 and of course then you have controlers[br]that scale your services, 0:23:43.080,0:23:46.081 scale down your services, restart failed[br]pods 0:23:48.807,0:23:51.719 or drain nodes that you want to take away 0:23:54.724,0:23:59.654 And my question now is what is the role[br]of Debian in a world where 0:23:59.949,0:24:05.934 Kubernetes becomes more and more popular[br]even if not that many of you have heard about it 0:24:08.024,0:24:13.391 I believe that Kubernetes will become[br]even more popular 0:24:14.581,0:24:20.325 and even as a Debian Maintainer, I'm[br]enthusiastic about how easy it becomes now 0:24:20.625,0:24:23.024 to run your stuff in Kubernetes. 0:24:24.522,0:24:30.670 But you only need a very minimal host[br]operating system to install Kubernetes 0:24:31.084,0:24:37.966 on your servers, afterwards you need[br]a bare image, a base image for your container 0:24:38.401,0:24:40.666 which is normally also a very minimal image 0:24:41.250,0:24:45.640 and you don't do "apt-get install apache2"[br]anymore to have a web server, 0:24:46.058,0:24:52.008 you take an apache container image and then[br]you extend this image and 0:24:52.483,0:24:59.501 put your app onto this image, so you don't[br]need an apache Debian image anymore 0:24:59.790,0:25:01.332 in such a world. 0:25:02.589,0:25:05.108 Will we still need this in Debian? 0:25:06.625,0:25:09.106 However, nothing is perfect. 0:25:09.485,0:25:13.108 On KubeCon, I also saw companies offering 0:25:13.695,0:25:17.865 "Oh, we scan you container images for[br]outdated libraries" and 0:25:19.579,0:25:27.290 you have long times to update your cluster[br]because all the containers need to be stopped 0:25:28.247,0:25:31.736 you download new images, you start whole[br]new environments 0:25:33.542,0:25:36.251 so there are optimizations possible there 0:25:37.320,0:25:38.560 and people are wondering 0:25:38.799,0:25:41.359 "Ok, where does my stuff come from?[br]Is it from a trusted source?" 0:25:43.125,0:25:46.330 And my crazy thoughts, maybe it's an[br]opportunity here 0:25:46.753,0:25:52.337 if Debian would become a source of trusted[br]binaries or even container images. 0:25:53.622,0:25:54.568 Thank you. 0:25:55.191,0:26:00.211 [Applause] 0:26:01.248,0:26:09.735 Next up, Pierre Pronchery, talking about[br]Manticore, DeepState and DeforaOS 0:26:11.854,0:26:13.887 Are you pretty much ready? 0:26:14.748,0:26:15.636 I think so. 0:26:32.528,0:26:36.072 Meanwhile, does anybody know any[br]dance routines, you know, 0:26:37.193,0:26:40.230 just to bridge over the time, because[br]I'm not going to. 0:26:46.011,0:26:47.700 I don't think I know any Jerks. 0:26:50.969,0:26:52.485 Hopefully nearly there. 0:26:53.303,0:26:56.427 You fling my phone from me. 0:26:57.424,0:26:59.260 It's ok, nobody calls me anyway. 0:27:24.172,0:27:27.253 I'm afraid I haven't got any more[br]announcements. 0:27:32.435,0:27:35.911 We are pleased to announce that there[br]are no current announcements available. 0:27:43.322,0:27:44.767 The news has been called off. 0:27:50.848,0:27:52.601 Do you actually have slides? 0:28:00.817,0:28:02.660 I'm wondering if we should swap you around 0:28:05.024,0:28:10.001 Ok, right, we have the interval act, an[br]interpretive dance by Andrew Shadura 0:28:10.224,0:28:12.888 on the nature of git crecord being[br]for the win. 0:28:17.951,0:28:20.203 Well, you know, anything to bridge[br]the time, right? 0:28:51.746,0:28:53.401 If in doubt, make the font bigger. 0:28:56.452,0:28:58.462 Maybe I should give a lightning talk[br]about that. 0:29:01.773,0:29:06.242 I think I might, just at the very end, I'll[br]just disguise it as an announcement. 0:29:07.700,0:29:08.683 Ready? 0:29:10.262,0:29:11.313 There, no. 0:29:11.798,0:29:12.936 I prefer that. 0:29:13.674,0:29:14.801 Yes, but we don't. 0:29:15.569,0:29:16.303 Why? 0:29:17.023,0:29:18.340 Did you see what happened earlier? 0:29:18.936,0:29:20.285 What happened earlier? 0:29:26.600,0:29:27.895 Please use the hand microphone. 0:29:28.361,0:29:28.839 Ok. 0:29:30.388,0:29:32.603 Alright, listen to a man but not me. 0:29:33.624,0:29:34.403 [laughter] 0:29:48.357,0:29:48.914 Can you hear me? 0:29:49.493,0:29:54.927 So, I'm just going to show you a small[br]utility I wrote. 0:29:55.241,0:29:59.386 Actually, I didn't write it from scratch,[br]I just ported it from… Anyway. 0:30:00.056,0:30:02.696 Let's see, we've got a git diff of 0:30:04.068,0:30:06.932 things with a Debian package. 0:30:07.458,0:30:09.978 Lot's of changes, and I forgot to commit[br]them individually. 0:30:10.550,0:30:13.882 There's lots of patches and things, 0:30:14.547,0:30:16.723 I just want to, somehow, sort this out. 0:30:17.355,0:30:23.875 So I just run "git crecord" and suddenly[br]I can see all the things here. 0:30:24.255,0:30:26.396 I can unwrap the diffs… 0:30:28.140,0:30:30.085 What's happening with the ??? 0:30:31.213,0:30:36.839 I can basically select individual bits[br]of the diff and… 0:30:39.179,0:30:44.535 Let's just deselect all things, commit[br]those, just a few. 0:30:45.063,0:30:47.027 There were just a few patches refreshed 0:30:47.949,0:30:53.731 so I'm going to commit them now,[br]yes, like refresh patches. 0:30:57.408,0:30:59.635 Let's say just "Refresh", just enough. 0:31:01.594,0:31:02.526 Oh, mmh. 0:31:05.276,0:31:08.774 It's not going to work, because I haven't[br]got a card 0:31:09.270,0:31:10.606 and I forgot to disable the… 0:31:12.061,0:31:17.784 I don't think I can, I don't remember,[br]I probably can't disable PGP signing unfortunately 0:31:18.049,0:31:19.386 it's not implemented yet. 0:31:20.120,0:31:20.583 Anyway. 0:31:22.245,0:31:24.611 Using this thing you can, it's better than… 0:31:27.406,0:31:29.343 How is it properly called. 0:31:30.484,0:31:32.971 It's better than the builtin git thing ... 0:31:33.222,0:31:34.412 I can't even remember it's name. 0:31:40.455,0:31:40.969 That one 0:31:47.384,0:31:52.192 I didn't exactly hear exactly what he said,[br]like "git patch something" 0:31:54.953,0:31:57.800 "git add --patch" 0:31:58.369,0:31:59.653 And there's an other one which is… 0:32:00.096,0:32:03.234 There's one a bit more interactive and[br]one which is a bit less interactive. 0:32:04.570,0:32:06.672 This is mega interactive and there[br]will be more features. 0:32:07.172,0:32:09.385 It is actually, it was originally written[br]for mercurial 0:32:10.150,0:32:13.497 and this was a thing I really missed[br]when I had to use git 0:32:14.072,0:32:15.768 and now I don't have to anymore. 0:32:16.670,0:32:17.670 This is it. 0:32:18.434,0:32:21.675 It's in Debian, you can apt install it[br]if you prefer. 0:32:23.073,0:32:26.647 It's in Debian, you can apt install it[br]if you prefer, 0:32:27.338,0:32:29.940 or you can install it from source and[br]there would be more features later. 0:32:30.809,0:32:32.215 That's it. 0:32:33.074,0:32:34.449 Thank you 0:32:35.015,0:32:37.464 [Applause] 0:32:38.585,0:32:42.116 Now, Pierre Pronchery talking about[br]all the things that I said 0:32:42.553,0:32:43.803 he was going to talk about earlier. 0:32:52.500,0:32:53.424 One moment please. 0:33:29.801,0:33:31.837 [Applause] 0:34:35.400,0:34:37.480 Sorry about that, I didn't really plan[br]for this, 0:34:37.846,0:34:39.524 so I made the slides 5 minutes ago. 0:34:40.098,0:34:42.057 So, I'm Pierre Pronchery, thank you[br]for having me, 0:34:42.615,0:34:45.002 even if I'm actually an officiel NetBSD[br]developer, 0:34:45.844,0:34:48.540 but I'm been using Debian since 1999,[br]so maybe I'm alowed, 0:34:49.547,0:34:53.456 I'm also a security consultant, interested[br]in Kernel development, 0:34:53.807,0:34:55.254 security integration, and so on. 0:34:56.121,0:34:57.822 What you cannot see on the slides[br]right now is that 0:34:58.151,0:35:00.114 I'm also on the board of directors[br]of NetBSD. 0:35:00.955,0:35:04.285 So actually I'm in a good position to talk[br]about the project if you'd like to. 0:35:05.784,0:35:07.701 I would like to talk to you about Manticore[br]today. 0:35:08.832,0:35:10.363 It's a symbolic execution tool, 0:35:10.749,0:35:14.472 basically, it uses a CPU emulator, which[br]can be hardware assisted of course, 0:35:15.122,0:35:20.555 to run and analyze programs or algorithms,[br]so parts of programs on a simulated system 0:35:21.617,0:35:23.464 and one of the aims is actually[br]to make them crash 0:35:23.778,0:35:29.413 so to make extensive fuzzing and be very[br]efficient at fuzzing by possibly tracing 0:35:30.578,0:35:34.336 instructions and so on, whatever is going[br]on inside the program. 0:35:35.575,0:35:39.901 It supports static Linux binaries in 32-bits[br]and 64-bits modes, 0:35:40.261,0:35:45.858 also it supports ARM 32-bits, support is[br]ongoing for ARM 64-bits, 0:35:46.300,0:35:48.743 it also works with Ethereum bytecode. 0:35:49.634,0:35:54.293 There are official releases on GitHub,[br]it's already packaged in PkgSrc by myself 0:35:55.222,0:35:57.941 and I'm actually looking for volunteers[br]to package it for Debian 0:35:58.459,0:36:00.249 or possibly help me to do so. 0:36:01.834,0:36:05.226 I'm actually sponsored by Trail of Bits,[br]the developer of Manticore, 0:36:05.616,0:36:08.123 to work on this, which is also why[br]I'm here. 0:36:09.880,0:36:12.704 The companion to Manticore is called[br]DeepState, 0:36:13.437,0:36:17.340 it's specifically meant for Unit Testing[br]with symbolic execution. 0:36:18.090,0:36:22.083 It supports not just Manticore but also[br]an other backend for analyzing 0:36:22.717,0:36:25.491 running binaries, 0:36:25.812,0:36:30.765 It's called angr, this other backend,[br]which was developed as a side node 0:36:31.072,0:36:33.392 for the Cyber Grand challenge[br]of DARPA last year. 0:36:34.849,0:36:38.285 DeepState is currently packaged[br]in 2 separate packages in PkgSrc 0:36:38.609,0:36:39.559 by myself again, 0:36:39.977,0:36:42.358 unfortunately not yet fully upstream[br]in PkgSrc, 0:36:42.765,0:36:47.384 but basically I made one package with[br]??? binaries and then the Python bindings. 0:36:48.221,0:36:50.747 This is also on GitHub but with no official[br]release yet, 0:36:51.070,0:36:52.822 because this is a very young project still 0:36:53.528,0:36:56.054 so I'm also for a volunteer in Debian[br]to help me package that. 0:36:57.415,0:37:01.975 And then, a shameless addition, I'm also[br]a developer of, the main developer of 0:37:02.208,0:37:07.135 DeforaOS, an open source desktop[br]environment, and with some more parts 0:37:07.554,0:37:08.361 in the project, 0:37:08.720,0:37:11.045 I have about 50 repositories now in this. 0:37:12.210,0:37:16.718 I'm therefore also looking for volunteers[br]to package that into Debian, 0:37:16.959,0:37:19.662 there are still projects we haven't[br]packaged yet, as far as I know. 0:37:21.113,0:37:25.432 So, since I'm here, I figured I could[br]as well get my PGP key signed, 0:37:26.382,0:37:28.467 I suppose it's one of the steps to become[br]a developer 0:37:28.797,0:37:31.651 and if there are more, I've heard[br]there are plenty, 0:37:33.129,0:37:37.956 then please help me out with this, I'll[br]welcome any assistance doing that. 0:37:38.812,0:37:41.575 Alright. Thank you. 0:37:42.084,0:37:45.350 [Applause] 0:37:45.782,0:37:46.719 Thank you very much. 0:37:47.091,0:37:48.296 I guess that's it. 0:37:48.613,0:37:52.756 The next lightning talk session that I'm[br]aware of is at DebConf18 in Taiwan. 0:37:53.158,0:37:54.843 I hope to see as many of you as possible[br]there. 0:37:55.488,0:37:57.452 Off you go, lunch time. 0:37:58.286,0:38:01.835 [Applause]