1 99:59:59,999 --> 99:59:59,999 Right, good afternoon 2 99:59:59,999 --> 99:59:59,999 It is the lightning talks sessions at DebConf Hamburg 2018 3 99:59:59,999 --> 99:59:59,999 We've got seven speakers, and I guess we'll just get going 4 99:59:59,999 --> 99:59:59,999 Starting with Tobias Platn???, talking about Debian on Power9. 5 99:59:59,999 --> 99:59:59,999 Yesterday I, hm no, on friday, I received my new Power9 machine. 6 99:59:59,999 --> 99:59:59,999 A Talos 9 (II). 7 99:59:59,999 --> 99:59:59,999 And it has an IBM Power9 processor 8 99:59:59,999 --> 99:59:59,999 So, the only distro that I know that will work is Debian. 9 99:59:59,999 --> 99:59:59,999 Then, this is a new PowerPC 64 bits architecture, 10 99:59:59,999 --> 99:59:59,999 that can run in little-endian mode. 11 99:59:59,999 --> 99:59:59,999 I downloaded a Debian installer. 12 99:59:59,999 --> 99:59:59,999 First, I chosed the stable version, but 13 99:59:59,999 --> 99:59:59,999 that crashed during install. 14 99:59:59,999 --> 99:59:59,999 And, then I retried a different version, a daily version. 15 99:59:59,999 --> 99:59:59,999 And this one, which is based on Buster, correctly installed. 16 99:59:59,999 --> 99:59:59,999 I can even have a graphical environment, working out of the box. 17 99:59:59,999 --> 99:59:59,999 And, the installer then complained that there is no boot partition 18 99:59:59,999 --> 99:59:59,999 for older PowerPCs, and this boot partition is not needed, since the TalosII 19 99:59:59,999 --> 99:59:59,999 has a newer systems starting with power7 used petitboot. 20 99:59:59,999 --> 99:59:59,999 So, that needs to be fixed in the Debian installer, 21 99:59:59,999 --> 99:59:59,999 that it doesn't produce the warning on Power machines. 22 99:59:59,999 --> 99:59:59,999 And now I have a working Debian installation, 23 99:59:59,999 --> 99:59:59,999 which I can use. 24 99:59:59,999 --> 99:59:59,999 (thanks) [applause] 25 99:59:59,999 --> 99:59:59,999 Thank you very much, that was very quick. 26 99:59:59,999 --> 99:59:59,999 Next up is Thimothée Jaussoin, 27 99:59:59,999 --> 99:59:59,999 talking about Movim, the XMPP social platform. 28 99:59:59,999 --> 99:59:59,999 Give him a moment to get set up. 29 99:59:59,999 --> 99:59:59,999 I think it's a bit better this way. 30 99:59:59,999 --> 99:59:59,999 Who already heard about the platform Movim? 31 99:59:59,999 --> 99:59:59,999 OK, so we have a couple of people that know about the project here. 32 99:59:59,999 --> 99:59:59,999 Just to present you what I ??? could be a parallel universe 33 99:59:59,999 --> 99:59:59,999 but is actually the current universe we're living with. 34 99:59:59,999 --> 99:59:59,999 Lots of different chat platofrms. 35 99:59:59,999 --> 99:59:59,999 The same thing on social networks. 36 99:59:59,999 --> 99:59:59,999 We keep reinventing the wheel all the time. 37 99:59:59,999 --> 99:59:59,999 We don't have this problem with e-mails 38 99:59:59,999 --> 99:59:59,999 hopefully actually the e-mail standards came way before before all of those 39 99:59:59,999 --> 99:59:59,999 proprietary solutions 40 99:59:59,999 --> 99:59:59,999 So we have ??? and Google and Microsoft are still using SMTP, IMAP, for now. 41 99:59:59,999 --> 99:59:59,999 So everything is compatible, and we have a lot of clients on top of that. 42 99:59:59,999 --> 99:59:59,999 But for chat, and social networks, it's not the case. 43 99:59:59,999 --> 99:59:59,999 So the idea of Movim is to build a social platform. 44 99:59:59,999 --> 99:59:59,999 In there, we can put a little couple of ingredients. 45 99:59:59,999 --> 99:59:59,999 First, it needs to be Open-Source, for the transparency, for the fact that you can 46 99:59:59,999 --> 99:59:59,999 have feedback and improvements, for the security part. 47 99:59:59,999 --> 99:59:59,999 I think that you guys here know about the advantages of Free Software, and 48 99:59:59,999 --> 99:59:59,999 especially on the communication part, on social networks, but it's not enough. 49 99:59:59,999 --> 99:59:59,999 We also need to be in control, actually in this social network. 50 99:59:59,999 --> 99:59:59,999 So it need to be simple and transparent 51 99:59:59,999 --> 99:59:59,999 on the UI but also on the protocol level. 52 99:59:59,999 --> 99:59:59,999 On the really deep below stacks. 53 99:59:59,999 --> 99:59:59,999 So we'll need to have a strong and reliable encryption, 54 99:59:59,999 --> 99:59:59,999 so don't reinvent also an encryption - talking about Telegram, here - 55 99:59:59,999 --> 99:59:59,999 And, yeah, need some trusts in sights here. 56 99:59:59,999 --> 99:59:59,999 I mean a community, and not a company that you will blindly trust 57 99:59:59,999 --> 99:59:59,999 to take care of all of your communications. 58 99:59:59,999 --> 99:59:59,999 But it's not enough. 59 99:59:59,999 --> 99:59:59,999 It needs to be decentralized. Because centralized social networks, 60 99:59:59,999 --> 99:59:59,999 even if it's opensource, 61 99:59:59,999 --> 99:59:59,999 if it's only one instance, you have to still trust the instance. So would like to 62 99:59:59,999 --> 99:59:59,999 deploy your instance, you would like to trust someone else, 63 99:59:59,999 --> 99:59:59,999 you can only, sometimes, trust only yourself in seldom cases 64 99:59:59,999 --> 99:59:59,999 Decentralization also brings robustness 65 99:59:59,999 --> 99:59:59,999 So that's too many times that actually one server is failing, think Signal 66 99:59:59,999 --> 99:59:59,999 had an issue recently, about this kind of thing there. 67 99:59:59,999 --> 99:59:59,999 The issue was with the Amazon servers, the whole thing didn't worked 68 99:59:59,999 --> 99:59:59,999 for a couple of hours. 69 99:59:59,999 --> 99:59:59,999 And then, resist against censorship and control. 70 99:59:59,999 --> 99:59:59,999 Same thing with Telegram, I think in Russia. 71 99:59:59,999 --> 99:59:59,999 I'm talking more about the IM part, but it's also applicable to social networks. 72 99:59:59,999 --> 99:59:59,999 It's exactly the same thing, just that the exchanges of information are a bit different. 73 99:59:59,999 --> 99:59:59,999 So, you need these steps but 74 99:59:59,999 --> 99:59:59,999 all those platforms here 75 99:59:59,999 --> 99:59:59,999 (I just made this conference 3 years ago, just added Mastodon recently) 76 99:59:59,999 --> 99:59:59,999 So i might talk about different sorts of platforms 77 99:59:59,999 --> 99:59:59,999 There is communication between those platforms, kind of standards that are 78 99:59:59,999 --> 99:59:59,999 starting to come in, especially between Diaspora and Mastodon, 79 99:59:59,999 --> 99:59:59,999 but there is still a lot of work to do there. 80 99:59:59,999 --> 99:59:59,999 So, the secret ingredient is about compatibility, about extensibility. 81 99:59:59,999 --> 99:59:59,999 Don't try to reinvent the wheel again, 82 99:59:59,999 --> 99:59:59,999 don't try to create another social network, 83 99:59:59,999 --> 99:59:59,999 or another IM platform that will have all those communication troubles. 84 99:59:59,999 --> 99:59:59,999 So, I mean a long-term vision. 85 99:59:59,999 --> 99:59:59,999 And, actually, the secret ingredient is standardization, in these things. 86 99:59:59,999 --> 99:59:59,999 So, this standard should have a couple of features, 87 99:59:59,999 --> 99:59:59,999 support news feeds, communities, IM, chatroom presences, know who's online, profiles, 88 99:59:59,999 --> 99:59:59,999 video conferencing security, bridges to the Web. 89 99:59:59,999 --> 99:59:59,999 And then it will be real-time. 90 99:59:59,999 --> 99:59:59,999 And, 1 minute? 91 99:59:59,999 --> 99:59:59,999 This protocol actually exists, it's called XMPP. 92 99:59:59,999 --> 99:59:59,999 So the goal of the project is: - take XMPP implemented 93 99:59:59,999 --> 99:59:59,999 - and doing a lot of innovation on top of the project 94 99:59:59,999 --> 99:59:59,999 So, server-side it's a simple XMPP client, webserver, simple to install 95 99:59:59,999 --> 99:59:59,999 (PHP, MySQL PostgreSQL) 96 99:59:59,999 --> 99:59:59,999 And user-side, it's also super simple to use, you need simply a browser, 97 99:59:59,999 --> 99:59:59,999 it's responsive, it's light, it's fast and is built actually for small communities. 98 99:59:59,999 --> 99:59:59,999 There are pods all around the world. 99 99:59:59,999 --> 99:59:59,999 You're really invited to deploy your own pods. 100 99:59:59,999 --> 99:59:59,999 There is already ten thousands accounts on the official pod 101 99:59:59,999 --> 99:59:59,999 30 languages 102 99:59:59,999 --> 99:59:59,999 Debian packages coming soon 103 99:59:59,999 --> 99:59:59,999 Thanks to the help of some people in this room. 104 99:59:59,999 --> 99:59:59,999 And, that's it ! 105 99:59:59,999 --> 99:59:59,999 So if you want more information, everything is on the website, 106 99:59:59,999 --> 99:59:59,999 you can join the chat room. 107 99:59:59,999 --> 99:59:59,999 Or, the twitter. 108 99:59:59,999 --> 99:59:59,999 [applause] 109 99:59:59,999 --> 99:59:59,999 Thank you very much. 110 99:59:59,999 --> 99:59:59,999 Next up is Thomas Lange, Mrfai, talking about dracut. 111 99:59:59,999 --> 99:59:59,999 Today, I'm not talking about FAI but about dracut. 112 99:59:59,999 --> 99:59:59,999 dracut is a replacement for initramfs which is used by most other distributions. 113 99:59:59,999 --> 99:59:59,999 If I'm correct, only Ubuntu and Debian and derivatives are using initramfs-tools 114 99:59:59,999 --> 99:59:59,999 All other distributions already moved to dracut. 115 99:59:59,999 --> 99:59:59,999 Today I want to show how you can get an experience with dracut 116 99:59:59,999 --> 99:59:59,999 without deinstalling initramfs-tools. 117 99:59:59,999 --> 99:59:59,999 Ben Hutchings did some patches, I think two years ago, so it's possible. 118 99:59:59,999 --> 99:59:59,999 What you have to do, there's a package called "dracut-core", 119 99:59:59,999 --> 99:59:59,999 which does not conflict with initramfs-tools. 120 99:59:59,999 --> 99:59:59,999 I have a virtual machine. 121 99:59:59,999 --> 99:59:59,999 So, debian/fai… 122 99:59:59,999 --> 99:59:59,999 On this machine, I will now install the dracut-core package 123 99:59:59,999 --> 99:59:59,999 and that's it. 124 99:59:59,999 --> 99:59:59,999 We still have one initrd. 125 99:59:59,999 --> 99:59:59,999 And now I can say… 126 99:59:59,999 --> 99:59:59,999 Oh no, first I have to copy the dracut version and then I can generate 127 99:59:59,999 --> 99:59:59,999 a new initrd with dracut. 128 99:59:59,999 --> 99:59:59,999 dracut uses the usual hooks or module system, 129 99:59:59,999 --> 99:59:59,999 it does not use the hooks from the initramfs things but it already includes 130 99:59:59,999 --> 99:59:59,999 a lot of hooks, so for example if you have a cryptsetup, 131 99:59:59,999 --> 99:59:59,999 you do not need the hooks for initramfs-tools from the cryptsetup package 132 99:59:59,999 --> 99:59:59,999 because dracut already includes this and a lot of other things. 133 99:59:59,999 --> 99:59:59,999 After generating a new initrd, you update your grub and you see 134 99:59:59,999 --> 99:59:59,999 we have now two entries in the grub. 135 99:59:59,999 --> 99:59:59,999 One with the old initrd which was created by… 136 99:59:59,999 --> 99:59:59,999 the default one is the initrd which is created by initramfs-tools 137 99:59:59,999 --> 99:59:59,999 and here you have the boot entry for the new dracut initrd 138 99:59:59,999 --> 99:59:59,999 and it boots up and works. 139 99:59:59,999 --> 99:59:59,999 What we need is that more people are using it and giving it a try. 140 99:59:59,999 --> 99:59:59,999 In your environment, on your hardware, does dracut work? 141 99:59:59,999 --> 99:59:59,999 We had a discussion, like 5 years ago, if Debian… 142 99:59:59,999 --> 99:59:59,999 When will Debian switch from initramfs-tools to dracut? 143 99:59:59,999 --> 99:59:59,999 And still there's no real need because initramfs-tools works for everybody 144 99:59:59,999 --> 99:59:59,999 but I think in the long term, we will switch it, 145 99:59:59,999 --> 99:59:59,999 so please help us, write bug reports 146 99:59:59,999 --> 99:59:59,999 or just give it a try, if it works for you or not. 147 99:59:59,999 --> 99:59:59,999 That's it. 148 99:59:59,999 --> 99:59:59,999 [Applause] 149 99:59:59,999 --> 99:59:59,999 Next up is TecKids talking about their organization. 150 99:59:59,999 --> 99:59:59,999 Ok, those of you who attended the Skolelinux talk already heard about TecKids. 151 99:59:59,999 --> 99:59:59,999 I want to give a few details about what else we do. 152 99:59:59,999 --> 99:59:59,999 TecKids is a non-profit organization based in Germany, but 153 99:59:59,999 --> 99:59:59,999 we're working internationally and 154 99:59:59,999 --> 99:59:59,999 we are completely centered around free software and we do basically everything 155 99:59:59,999 --> 99:59:59,999 concerning free software in education in the context of children and adolescents, 156 99:59:59,999 --> 99:59:59,999 young people. 157 99:59:59,999 --> 99:59:59,999 More than 50% of our active members are minors. 158 99:59:59,999 --> 99:59:59,999 There's an "s" missing, sorry. 159 99:59:59,999 --> 99:59:59,999 They are of course not minor but they are minors. 160 99:59:59,999 --> 99:59:59,999 Sorry, kids, if you are watching this. 161 99:59:59,999 --> 99:59:59,999 They're minors and we are a fully democratic organization 162 99:59:59,999 --> 99:59:59,999 like in the FOSS spirit 163 99:59:59,999 --> 99:59:59,999 and the most important thing is that we get children involved with all the parts 164 99:59:59,999 --> 99:59:59,999 of the organization, both operational and tutoring and workshops 165 99:59:59,999 --> 99:59:59,999 and working with free software projects, giving presentations. 166 99:59:59,999 --> 99:59:59,999 Normally some children would be here but as this conference was right in the middle of 167 99:59:59,999 --> 99:59:59,999 schooltime, this was not so easy. 168 99:59:59,999 --> 99:59:59,999 So what do we do. 169 99:59:59,999 --> 99:59:59,999 First of all, we want to get children interested in programming, in coding, 170 99:59:59,999 --> 99:59:59,999 in technical stuff and also in free software. 171 99:59:59,999 --> 99:59:59,999 This we do by running youth programs at free software conferences 172 99:59:59,999 --> 99:59:59,999 like the FrOSCon where normally around 100 to 120 children attend and 173 99:59:59,999 --> 99:59:59,999 use Debian and all that cool stuff and learn what they can do with it. 174 99:59:59,999 --> 99:59:59,999 We do peer learning, so those children who already know many things and 175 99:59:59,999 --> 99:59:59,999 are very interested, they start tutoring other children. 176 99:59:59,999 --> 99:59:59,999 Of course we have non-tech fun together, we are outside, 177 99:59:59,999 --> 99:59:59,999 there is a social program with staying over night, having a barbecue and 178 99:59:59,999 --> 99:59:59,999 all that stuff that helps building a community. 179 99:59:59,999 --> 99:59:59,999 Those who are even more interested can get actively involved in preparing workshops, 180 99:59:59,999 --> 99:59:59,999 organizing events, preparing talks, looking at open source projects, 181 99:59:59,999 --> 99:59:59,999 helping others get a free messenger instead of WhatsApp, 182 99:59:59,999 --> 99:59:59,999 working on HowTo, how to spread the word among youths and all of that. 183 99:59:59,999 --> 99:59:59,999 And then ??? at conference and raise awareness, 184 99:59:59,999 --> 99:59:59,999 this is our presentation team from the Chemnitz Linux Days 185 99:59:59,999 --> 99:59:59,999 and they are presenting the whole ??? of free software in education 186 99:59:59,999 --> 99:59:59,999 at our SchulFrei booth which is "School free" in German. 187 99:59:59,999 --> 99:59:59,999 They are presenting all projects that are involved in this common booth and 188 99:59:59,999 --> 99:59:59,999 care for free software education. 189 99:59:59,999 --> 99:59:59,999 If you are interested in that, maybe because you have children or 190 99:59:59,999 --> 99:59:59,999 want to have children or are involved in education in some way, 191 99:59:59,999 --> 99:59:59,999 there are quite a few things that you can do. 192 99:59:59,999 --> 99:59:59,999 You can help working on projects, you can work with mentoring the children 193 99:59:59,999 --> 99:59:59,999 in coding or organisational activities. 194 99:59:59,999 --> 99:59:59,999 You can help spreading the word, also raising awareness that 195 99:59:59,999 --> 99:59:59,999 many many software projects do have some involvement with children, 196 99:59:59,999 --> 99:59:59,999 even indirectly, like a web browser like Firefox, 197 99:59:59,999 --> 99:59:59,999 such applications are used by children and they may have other needs, 198 99:59:59,999 --> 99:59:59,999 and they may have other views on that, 199 99:59:59,999 --> 99:59:59,999 so it's very important to at least think about what children or schools or 200 99:59:59,999 --> 99:59:59,999 teachers as well do with this software. 201 99:59:59,999 --> 99:59:59,999 Pardon? One minute, thank you. 202 99:59:59,999 --> 99:59:59,999 We need help with presentations at conferences, 203 99:59:59,999 --> 99:59:59,999 so not every time the same people have to get a day off at work and travel to conferences 204 99:59:59,999 --> 99:59:59,999 there's much more manpower needed. 205 99:59:59,999 --> 99:59:59,999 And of course, every ngo, every non-profit organization is lacking money, 206 99:59:59,999 --> 99:59:59,999 so if you have already donated to Debian and still have money left, 207 99:59:59,999 --> 99:59:59,999 you might want to give your money to the future, which is children. 208 99:59:59,999 --> 99:59:59,999 Don't forget donating to Debian. 209 99:59:59,999 --> 99:59:59,999 I don't know if I am shot if I don't say that. 210 99:59:59,999 --> 99:59:59,999 [laughter] 211 99:59:59,999 --> 99:59:59,999 And there's also liberapay, it's a free donation platform, 212 99:59:59,999 --> 99:59:59,999 just have a look at it and if you want to help us, actively just go to our web site, 213 99:59:59,999 --> 99:59:59,999 find some communication means or just talk to someone you find 214 99:59:59,999 --> 99:59:59,999 at any conference who is wearing this shirt with our logo. 215 99:59:59,999 --> 99:59:59,999 Thank you. 216 99:59:59,999 --> 99:59:59,999 [Applause] 217 99:59:59,999 --> 99:59:59,999 Next up is Thomas Koch, talking about containers. 218 99:59:59,999 --> 99:59:59,999 Almost ready. 219 99:59:59,999 --> 99:59:59,999 We do have one more space at the end if anybody feels, you know, 220 99:59:59,999 --> 99:59:59,999 inspired to tell us all the things. 221 99:59:59,999 --> 99:59:59,999 I mean, we did have one very last minute sign up. 222 99:59:59,999 --> 99:59:59,999 Meanwhile, I guess I can make announcements while I'm here. 223 99:59:59,999 --> 99:59:59,999 Front desk will be available again after lunch, as will t-shirts. 224 99:59:59,999 --> 99:59:59,999 Anybody who hasn't had a t-shirt yet, 225 99:59:59,999 --> 99:59:59,999 basically, if you signed up, you're allowed to get a t-shirt, come see me, 226 99:59:59,999 --> 99:59:59,999 yes, free of charge, 227 99:59:59,999 --> 99:59:59,999 come see me at front desk when it's open again after lunch. 228 99:59:59,999 --> 99:59:59,999 Because I do know some people been reticent to come up and, you know, 229 99:59:59,999 --> 99:59:59,999 ask one… 230 99:59:59,999 --> 99:59:59,999 I've probably given effectively a lightning talk on not giving… 231 99:59:59,999 --> 99:59:59,999 I think so. 232 99:59:59,999 --> 99:59:59,999 Right, here we go. 233 99:59:59,999 --> 99:59:59,999 Ein, zwei, ok. 234 99:59:59,999 --> 99:59:59,999 Hello, I'm Thomas Koch, I work for Google, 235 99:59:59,999 --> 99:59:59,999 I work in support for Google Container Engine, Google kubernetes engine. 236 99:59:59,999 --> 99:59:59,999 Who knows what Kubernetes is? 237 99:59:59,999 --> 99:59:59,999 Oh, so few, ok. 238 99:59:59,999 --> 99:59:59,999 It's a thing to orchestrate containers on many many nodes, 239 99:59:59,999 --> 99:59:59,999 up to thousands of nodes. 240 99:59:59,999 --> 99:59:59,999 It was started by Google, open sourced by Google in 2015 I believe. 241 99:59:59,999 --> 99:59:59,999 First contributor was Red Hat, it is 100% open source, it's written in Go 242 99:59:59,999 --> 99:59:59,999 and by now it has won the market of managing containers on large nodes. 243 99:59:59,999 --> 99:59:59,999 I just was at the KubeCon in Copenhagen with 4300 participants and 244 99:59:59,999 --> 99:59:59,999 every company you can imagine has an offering about Kubernetes. 245 99:59:59,999 --> 99:59:59,999 Just some logos of companies that use or contribute to Kubernetes 246 99:59:59,999 --> 99:59:59,999 and even more logos and these slides are outdated, so there are even more. 247 99:59:59,999 --> 99:59:59,999 Kubernetes, you have some masters that control kubelet on every node. 248 99:59:59,999 --> 99:59:59,999 A kubelet can start containers and can set up networking stuff 249 99:59:59,999 --> 99:59:59,999 and can set up volumes and the basic concept of computation, 250 99:59:59,999 --> 99:59:59,999 the basic primitive is a pod. 251 99:59:59,999 --> 99:59:59,999 A pod is one to many containers running together in one environment 252 99:59:59,999 --> 99:59:59,999 so that you have the possibility to have sidecars running beside your main containers 253 99:59:59,999 --> 99:59:59,999 that does additional stuff. 254 99:59:59,999 --> 99:59:59,999 It has proven useful in Google's internal ??? container management engine 255 99:59:59,999 --> 99:59:59,999 that you want to have certain containers always running containers 256 99:59:59,999 --> 99:59:59,999 and sharing resources. 257 99:59:59,999 --> 99:59:59,999 An other important primitive is volumes. 258 99:59:59,999 --> 99:59:59,999 Kubernetes can manage your storage and provision storage to be accessible 259 99:59:59,999 --> 99:59:59,999 to your containers. 260 99:59:59,999 --> 99:59:59,999 You can combine many parts that provide the same service to be accessible 261 99:59:59,999 --> 99:59:59,999 under the same IP address and so have failover enable like this 262 99:59:59,999 --> 99:59:59,999 and of course then you have controlers that scale your services, 263 99:59:59,999 --> 99:59:59,999 scale down your services, restart failed pods 264 99:59:59,999 --> 99:59:59,999 or drain nodes that you want to take away 265 99:59:59,999 --> 99:59:59,999 And my question now is what is the role of Debian in a world where 266 99:59:59,999 --> 99:59:59,999 Kubernetes becomes more and more popular even if not that many of you have heard about it 267 99:59:59,999 --> 99:59:59,999 I believe that Kubernetes will become even more popular 268 99:59:59,999 --> 99:59:59,999 and even as a Debian Maintainer, I'm enthusiastic about how easy it becomes now 269 99:59:59,999 --> 99:59:59,999 to run your stuff in Kubernetes. 270 99:59:59,999 --> 99:59:59,999 But you only need a very minimal host operating system to install Kubernetes 271 99:59:59,999 --> 99:59:59,999 on your servers, afterwards you need a bare image, a base image for your container 272 99:59:59,999 --> 99:59:59,999 which is normally also a very minimal image 273 99:59:59,999 --> 99:59:59,999 and you don't do "apt-get install apache2" anymore to have a web server, 274 99:59:59,999 --> 99:59:59,999 you take an apache container image and then you extend this image and 275 99:59:59,999 --> 99:59:59,999 put your app onto this image, so you don't need an apache Debian image anymore 276 99:59:59,999 --> 99:59:59,999 in such a world. 277 99:59:59,999 --> 99:59:59,999 Will we still need this in Debian? 278 99:59:59,999 --> 99:59:59,999 However, nothing is perfect. 279 99:59:59,999 --> 99:59:59,999 On KubeCon, I also saw companies offering 280 99:59:59,999 --> 99:59:59,999 "Oh, we scan you container images for outdated libraries" and 281 99:59:59,999 --> 99:59:59,999 you have long times to update your cluster because all the containers need to be stopped 282 99:59:59,999 --> 99:59:59,999 you download new images, you start whole new environments 283 99:59:59,999 --> 99:59:59,999 so there are optimizations possible there 284 99:59:59,999 --> 99:59:59,999 and people are wondering 285 99:59:59,999 --> 99:59:59,999 "Ok, where does my stuff come from? Is it from a trusted source?" 286 99:59:59,999 --> 99:59:59,999 And my crazy thoughts, maybe it's an opportunity here 287 99:59:59,999 --> 99:59:59,999 if Debian would become a source of trusted binaries or even container images. 288 99:59:59,999 --> 99:59:59,999 Thank you. 289 99:59:59,999 --> 99:59:59,999 [Applause]