{"acronym":"asg2019","aspect_ratio":"16:9","updated_at":"2026-04-09T22:30:06.009+02:00","title":"All Systems Go! 2019","schedule_url":"events/all_systems_go/2019","slug":"conferences/all_systems_go/asg2019","event_last_released_at":"2019-09-21T02:00:00.000+02:00","link":"","description":"","webgen_location":"conferences/all_systems_go/asg2019","logo_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/logo.png","images_url":"https://static.media.ccc.de/media/events/all_systems_go/2019","recordings_url":"https://cdn.media.ccc.de/events/all_systems_go/2019","url":"https://api.media.ccc.de/public/conferences/asg2019","events":[{"guid":"147efef1-ba80-5748-9655-fb5cd41f61f9","title":"eBPF support in the GNU Toolchain","subtitle":null,"slug":"ASG2019-126-ebpf-support-in-the-gnu-toolchain","link":"https://cfp.all-systems-go.io/ASG2019/talk/MAYDS8/","description":"This talk covers the ongoing effort about adding eBPF support to the GNU Toolchain.  eBPF is a virtual machine running within the Linux kernel; initially intended for user-level packet capture and filtering, eBPF has since been generalized to also serve as a general-purpose infrastructure for non-networking purposes.\n\nThis talk covers the ongoing effort about adding eBPF support to the GNU Toolchain.  eBPF is a virtual machine running within the Linux kernel; initially intended for user-level packet capture and filtering, eBPF has since been generalized to also serve as a general-purpose infrastructure for non-networking purposes.\n\nBinutils support is already upstream [1].  This includes a CGEN cpu description, assembler, disassembler and linker.  By the time of the conference a simulator will be available as well, along with GDB support. A GCC backend will be submitted for inclusion upstream before September.\n\nThe first part of the talk will be a brief general description of the project, its components, what motivated us to start working on it, and an update on the project's status at the time of the conference.\n\nThen we will discuss the particular challenges of supporting a target like eBPF:\n\nOn one hand, the kernel virtual machine has some unique characteristics that have a definitive impact on the tooling, like the in-kernel validator and the specialized contexts in which eBPF programs run.  We will show how the tools can help improving the eBPF programmer's experience.\n\nOn the other hand, the exact shape of compiled eBPF code is still subject to change, and is in fact rapidly changing and evolving.  Initially quite simple in terms of toolchain needs (single compilation units, no linking) this is changing as more kernel systems are being changed/written to be based on eBPF, and as the in-kernel validator is becoming more and more sophisticated.  Along with bigger and more complex programs comes the need for more abstraction, hence modularity and code reuse.  Kernel hackers are already discussing about bpf-to-bpf calls, run-time linking, and so on. This increased level of ambition and sophistication imposes additional requirements on the tools.\n\nFinally, interoperability with clang/llvm (the other available toolchain supporting eBPF) will be also discussed, in the more general context of ABI and conventions for compiled eBPF, which are still to be (well) defined and documented.\n\n[1] https://sourceware.org/ml/binutils/2019-05/msg00306.html","original_language":"eng","persons":["Jose E. Marchesi"],"tags":["asg2019","126","2019"],"view_count":138,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-02-26T05:45:04.396+01:00","length":2221,"duration":2221,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/126-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/126-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/126-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/126-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-126-ebpf-support-in-the-gnu-toolchain","url":"https://api.media.ccc.de/public/events/147efef1-ba80-5748-9655-fb5cd41f61f9","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":7},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":1},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":7},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":7},{"event_id":7880,"event_guid":"8617d047-766c-5837-9350-a35c6d29d7cb","weight":3},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":8},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":11},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":8},{"event_id":7909,"event_guid":"18b9979c-f66d-5009-b3e7-7d5184fd185e","weight":3},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":6},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":6},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":8}]},{"guid":"54225488-d685-57fb-9065-481bd2450f5e","title":"Opening","subtitle":null,"slug":"ASG2019-170-opening","link":"https://cfp.all-systems-go.io/ASG2019/talk/A3KZGD/","description":"Opening of All Systems Go!","original_language":"eng","persons":["Chris Kuehl"],"tags":["asg2019","170","2019"],"view_count":59,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2024-03-19T09:30:05.088+01:00","length":606,"duration":606,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/170-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/170-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/170-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/170-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-170-opening","url":"https://api.media.ccc.de/public/events/54225488-d685-57fb-9065-481bd2450f5e","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7667,"event_guid":"4bc8bbe5-cb04-5a2b-b441-a696be055948","weight":1},{"event_id":7820,"event_guid":"9a497fd7-62b4-5b5b-bf09-5dd123d18305","weight":1},{"event_id":7853,"event_guid":"6f7e3185-8a4d-506f-8942-6abf80440691","weight":1},{"event_id":7862,"event_guid":"b96f6ea5-4853-53ac-97bb-97a53e3c73d3","weight":1},{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":5},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":5},{"event_id":7866,"event_guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","weight":3},{"event_id":7868,"event_guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","weight":5},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":4},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":10},{"event_id":7872,"event_guid":"99754f29-ce19-55cf-bd1d-07332a6a794e","weight":1},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":1},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":7},{"event_id":7884,"event_guid":"0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","weight":1},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":1},{"event_id":7890,"event_guid":"8a203dd4-c4d8-51af-b01e-8a199a515c16","weight":1},{"event_id":7898,"event_guid":"2b6de0da-88c5-5199-8b49-84bfe4eb355b","weight":1},{"event_id":7907,"event_guid":"61270840-b28d-53dc-984c-434b809bc8d2","weight":1},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":4},{"event_id":7931,"event_guid":"3dfebbb5-eb33-4779-9440-c9c902983b82","weight":1},{"event_id":7933,"event_guid":"751ad00b-1ae7-4d90-ac24-8872e15e373e","weight":1}]},{"guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","title":"oomd2 and beyond: a year of improvements","subtitle":null,"slug":"ASG2019-135-oomd2-and-beyond-a-year-of-improvements","link":"https://cfp.all-systems-go.io/ASG2019/talk/DQX3DH/","description":"oomd is a userspace out-of-memory killer. This talk covers past, present, and future development along with possible plans for systemd integration.\n\nRunning out of memory on a host is a particularly nasty scenario. In the Linux kernel, if memory is being overcommitted, it results in the kernel out-of-memory (OOM) killer kicking in. Perhaps surprisingly, the kernel does not often handle this well. oomd builds on top of recent kernel development to effectively implement OOM killing in userspace. This results in a faster, more predictable, and more accurate handling of OOM scenarios.\n\noomd has gained a number of new features and interesting deployments in the last year. The most notable feature is a complete redesign of the control plane which enables arbitrary but \"gotcha\"-free configurations. In this talk, Daniel Xu will cover past, present, future, and path-not-taken development plans along with experiences gained from overseeing large deployments of oomd. Anita Zhang will close the talk with a discussion of why oomd would be a great addition to systemd.","original_language":"eng","persons":["Daniel Xu","Anita Zhang"],"tags":["asg2019","135","2019"],"view_count":225,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2024-08-20T15:45:03.048+02:00","length":1290,"duration":1290,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/135-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/135-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/135-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/135-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-135-oomd2-and-beyond-a-year-of-improvements","url":"https://api.media.ccc.de/public/events/dad4ba00-7141-5e7d-af7d-02f492f4b5e5","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7863,"event_guid":"54225488-d685-57fb-9065-481bd2450f5e","weight":1},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":8},{"event_id":7867,"event_guid":"2dd3d338-37ae-5b15-8292-1f124c0235a4","weight":6},{"event_id":7868,"event_guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","weight":1},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":6},{"event_id":7877,"event_guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","weight":4},{"event_id":7880,"event_guid":"8617d047-766c-5837-9350-a35c6d29d7cb","weight":1},{"event_id":7881,"event_guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","weight":2},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":11},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":13},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":2},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":10},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":4},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":9},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":5},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":5},{"event_id":7926,"event_guid":"47ead120-c630-5091-bf6e-5b72c6f98ec8","weight":6}]},{"guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","title":"Squeezing Water from Stone - KornShell in 2019","subtitle":null,"slug":"ASG2019-121-squeezing-water-from-stone-kornshell-in-2019","link":"https://cfp.all-systems-go.io/ASG2019/talk/CV9R3N/","description":"Despite of it's old age, ksh still remains one of the most popular shells. In 2013, David Korn and others who worked on ksh were laid off from AT\u0026T Bell Labs. This lead to speculations of death of ksh. In 2017, Siteshwar Vashisht and Kurtis Rader resumed it's development on GitHub. This talk will be about what makes ksh so challenging to maintain and how new developers are trying to revive it.","original_language":"eng","persons":["Siteshwar Vashisht"],"tags":["asg2019","121","2019"],"view_count":122,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-04-30T17:00:07.096+02:00","length":1249,"duration":1249,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/121-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/121-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/121-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/121-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-121-squeezing-water-from-stone-kornshell-in-2019","url":"https://api.media.ccc.de/public/events/b231881d-afaf-56f5-a57a-eaaab6668d79","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":9},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":2},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":15},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":8},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":3},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":13},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":20},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":8},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":8},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":7}]},{"guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","title":"iwd - State of the union","subtitle":null,"slug":"ASG2019-147-iwd-state-of-the-union","link":"https://cfp.all-systems-go.io/ASG2019/talk/WBJNQQ/","description":"The open source wireless daemon iwd has been introduced about 5 years ago and has seen an active development since its inception. The last year has been focused on behind the scenes work for new Wi-Fi standards that make connection setup faster, make roaming smoother and also introduce new security standards including WPA3. This presentation will demonstrate the new advances in Wi-Fi support for Linux and show how they improve the usage from within Network Manager and other connection managers.","original_language":"eng","persons":["Marcel Holtmann"],"tags":["asg2019","147","2019"],"view_count":498,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-13T13:15:11.342+01:00","length":1622,"duration":1622,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/147-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/147-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/147-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/147-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-147-iwd-state-of-the-union","url":"https://api.media.ccc.de/public/events/7bc76c4b-311d-55e4-b60e-1c837b15ed7b","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":27},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":24},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":57},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":4},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":51},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":69},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":5},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":29},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":40}]},{"guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","title":"Transactional Updates with Btrfs","subtitle":null,"slug":"ASG2019-128-transactional-updates-with-btrfs","link":"https://cfp.all-systems-go.io/ASG2019/talk/SXENPK/","description":"Transactional updates (also called atomic updates) are a way to update a system without interfering with the currently running system - making this a rock-solid way to update any machine, from embedded systems to cluster nodes.\n\nWhat do openSUSE MicroOS, Fedora CoreOS, Chrome OS, Ubuntu Core and Android have in common? All of them are using a *read-only root file system* and so called *transactional / atomic updates* to update a system safely - without having to worry that a broken update could leave your system in some undefined state.\n\nThis talk will focus on how to use *btrfs*' snapshot feature to implement such a transactional system and explain where the pitfalls of implementing such a system compared to a traditional read-write system are.","original_language":"eng","persons":["Ignaz Forster"],"tags":["asg2019","128","2019"],"view_count":288,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-20T14:30:08.784+01:00","length":2554,"duration":2554,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/128-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/128-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/128-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/128-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-128-transactional-updates-with-btrfs","url":"https://api.media.ccc.de/public/events/1ea14c32-c58c-513c-ab1f-40ac082e985c","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":22},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":23},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":23},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":20},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":3},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":3},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":19}]},{"guid":"04ca5cae-20ff-516b-a362-94c7b2dc5c6a","title":"Yomi - an openSUSE installer based on SaltStack","subtitle":null,"slug":"ASG2019-118-yomi-an-opensuse-installer-based-on-saltstack","link":"https://cfp.all-systems-go.io/ASG2019/talk/KDEYJZ/","description":"We will present [Yomi](https://github.com/openSUSE/yomi), a new proposal for installing Linux using [SaltStack](https://github.com/saltstack/salt). This installer is designed to be used in heterogeneous clusters, where you need a bit of intelligence during the installation and be integrated as one more step in the provisioning process.\n\n[Yomi](https://github.com/openSUSE/yomi) is a new kind of installer for the [open]SUSE family based on SaltStack and independent of AutoYaST.\n\nThe goal of this project is to make the installation of Linux (currently openSUSE) when:\n\n* You have a cluster of heterogeneous nodes (different profiles of memory, storage, CPU and network configurations)\n* The installation needs to be unattended\n* The installer needs to make decisions based on local profiles and external data\n* The installation process needs to be integrated, as one step more, into a more complicated provisioning workflow.\n\nThe dependencies of Yomi are minimal, as only Salt and a very few CLI tools are required, which make it ideal to be deployed a booted from PXE Boot.","original_language":"eng","persons":["Alberto Planas Dominguez"],"tags":["asg2019","118","2019"],"view_count":271,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-10-14T12:30:05.192+02:00","length":2264,"duration":2264,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/118-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/118-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/118-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/118-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-118-yomi-an-opensuse-installer-based-on-saltstack","url":"https://api.media.ccc.de/public/events/04ca5cae-20ff-516b-a362-94c7b2dc5c6a","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":3},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":7},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":1},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":3},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":1},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":1},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":9},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":6},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":6}]},{"guid":"2dd3d338-37ae-5b15-8292-1f124c0235a4","title":"Traceloop for systemd and Kubernetes + Inspektor Gadget","subtitle":null,"slug":"ASG2019-159-traceloop-for-systemd-and-kubernetes-inspektor-gadget","link":"https://cfp.all-systems-go.io/ASG2019/talk/98A9LW/","description":"Presenting [traceloop](https://github.com/kinvolk/traceloop), a “time travel” tracing tool to trace system calls in cgroups using BPF and overwritable ring buffers.\n\nMany people use the “strace” tool to synchronously trace system calls using ptrace. [Traceloop](https://github.com/kinvolk/traceloop) similarly traces system calls but asynchronously in the background, using BPF and tracing per cgroup. I’ll show how it can be integrated with systemd and with Kubernetes via [Inspektor Gadget](https://github.com/kinvolk/inspektor-gadget).\n\nTraceloop's traces are recorded in a fast, in-memory, overwritable ring buffer like a flight recorder. As opposed to “strace”, the tracing could be permanently enabled on systemd services or Kubernetes pods and inspected in case of a crash. This is like a always-on “strace in the past”.\n\nTraceloop uses BPF through the gobpf library. Several new features have been added in gobpf for the needs of traceloop: support for overwritable ring buffers and swapping buffers when the userspace utility dumps the buffer.\n\nhttps://github.com/kinvolk/traceloop\nhttps://github.com/kinvolk/inspektor-gadget\nhttps://github.com/iovisor/gobpf\n\nSlides: https://docs.google.com/presentation/d/1zIZUrTrD7FkS9pHnWz87ZmoLTrO1g9-J_lDMD7E5kdo/edit","original_language":"eng","persons":["Alban Crequy"],"tags":["asg2019","159","2019"],"view_count":96,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-02-08T12:30:06.711+01:00","length":2250,"duration":2250,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/159-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/159-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/159-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/159-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-159-traceloop-for-systemd-and-kubernetes-inspektor-gadget","url":"https://api.media.ccc.de/public/events/2dd3d338-37ae-5b15-8292-1f124c0235a4","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":4},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":4},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":1},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":4},{"event_id":7877,"event_guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","weight":5},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":6},{"event_id":7890,"event_guid":"8a203dd4-c4d8-51af-b01e-8a199a515c16","weight":3},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":7},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":5},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":3},{"event_id":7926,"event_guid":"47ead120-c630-5091-bf6e-5b72c6f98ec8","weight":5}]},{"guid":"06a90eaf-78a4-52d6-b29d-ce47622c4955","title":"Development and testing with lrun","subtitle":null,"slug":"ASG2019-148-development-and-testing-with-lrun","link":"https://cfp.all-systems-go.io/ASG2019/talk/N8YRKX/","description":"During development and testing it is often needed to test different kernels or run various sets of unit tests quickly. With lrun it is possible to do exactly that. It utilizes existing technology including UML, KVM and Namespaces to facility different environments. It has been in active use for testing Bluetooth and Wi-Fi features on Linux and can be easily extended to other technologies in the future. This presentation will introduce lrun and its design. It will also show demos of its current use cases.","original_language":"eng","persons":["Marcel Holtmann"],"tags":["asg2019","148","2019"],"view_count":59,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2024-04-07T21:15:03.937+02:00","length":932,"duration":932,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/148-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/148-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/148-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/148-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-148-development-and-testing-with-lrun","url":"https://api.media.ccc.de/public/events/06a90eaf-78a4-52d6-b29d-ce47622c4955","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7251,"event_guid":"b69c19ce-7c89-4afd-9396-ea664f80dba7 ","weight":1},{"event_id":7423,"event_guid":"54aa059d-1205-5afb-8a11-68ef351b0ab9","weight":1},{"event_id":7431,"event_guid":"508fe23f-bc69-4521-abc3-59b649598eb5","weight":1},{"event_id":7866,"event_guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","weight":1},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":3},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":2},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":1},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":6},{"event_id":7877,"event_guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","weight":6},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":6},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":8},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":11},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":6},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":9},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":5},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":1}]},{"guid":"259c3989-a0c3-57a0-8515-c10f29613830","title":"Container Live Migration","subtitle":null,"slug":"ASG2019-120-container-live-migration","link":"https://cfp.all-systems-go.io/ASG2019/talk/E88Z7V/","description":"The difficult task to checkpoint and restore a process is used in many container runtimes to implement container live migration. This talk will give details how CRIU is able to checkpoint and restore processes, how it is integrated in different container runtimes and which optimizations CRIU offers to decrease the downtime during container migration.\n\nIn this talk I want to provide details how CRIU checkpoints and restores a process. Starting from ptrace() to pause the process, how parasite code is injected into the process to checkpoint the process from its own address space. How CRIU transforms itself to the restored process during restore. How SELinux and seccomp is restored.\n\nI also want to give an overview how CRIU uses userfaultfd for lazy migration and dirty page tracking for pre-copy migration.\n\nI want to end this talk with an overview about how CRIU is integrated in different container runtimes to implement container live migration.","original_language":"eng","persons":["Adrian Reber"],"tags":["asg2019","120","2019"],"view_count":163,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-17T02:45:02.841+01:00","length":1138,"duration":1138,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/120-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/120-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/120-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/120-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-120-container-live-migration","url":"https://api.media.ccc.de/public/events/259c3989-a0c3-57a0-8515-c10f29613830","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":11},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":10},{"event_id":7881,"event_guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","weight":3},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":9},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":14},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":13}]},{"guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","title":"Stateful systems on immutable infrastructure","subtitle":null,"slug":"ASG2019-166-stateful-systems-on-immutable-infrastructure","link":"https://cfp.all-systems-go.io/ASG2019/talk/RLCDFS/","description":"Lessons learned operating thousands of stateful production clusters on top of Fedora and systemd-nspawn.\n\nAiven is a cloud data platform operating thousands of production clusters on top of different cloud infrastructure providers (e.g. AWS, GCP).  We offer the latest open source database \u0026 streaming engines to our users around the world, and implement most of our platform using the latest open source software including Fedora and systemd-nspawn.\n\nWe wanted to base our platform on a fast moving Linux distribution like Fedora to gain quick access to new technology and avoid having to backport a lot of things.  Fast moving distributions are typically not supported for a long time, but implementing an immutable infrastructure where deployed machines are not touched afterwards makes it possible to use them in production.\n\nIn this talk we’ll share the details of our architecture and the lessons we’ve learned as well as problems we’ve faced over the years operating hundreds of thousands of virtual machines and containers with it on top of six different public clouds.","original_language":"eng","persons":["Hannu Valtonen"],"tags":["asg2019","166","2019"],"view_count":155,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-11-10T10:30:05.387+01:00","length":2280,"duration":2280,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/166-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/166-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/166-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/166-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-166-stateful-systems-on-immutable-infrastructure","url":"https://api.media.ccc.de/public/events/090131ec-ac5c-5b60-85a0-6d080ea4054c","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":7},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":9},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":1},{"event_id":7879,"event_guid":"b5ead4a4-e2f5-55d1-8ce1-ae27fbab329c","weight":1},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":6},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":7},{"event_id":7897,"event_guid":"9796777f-c3ca-5018-b6f5-b88e0fc24f6d","weight":2},{"event_id":7909,"event_guid":"18b9979c-f66d-5009-b3e7-7d5184fd185e","weight":1},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":10},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":5},{"event_id":7918,"event_guid":"147efef1-ba80-5748-9655-fb5cd41f61f9","weight":8},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":7}]},{"guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","title":"pidfds: Process file descriptors on Linux","subtitle":null,"slug":"ASG2019-172-pidfds-process-file-descriptors-on-linux","link":"https://cfp.all-systems-go.io/ASG2019/talk/TPS8TS/","description":"Traditionally processes are identified globally via process identifiers (PIDs). Due to how pid allocation works the kernel is free to recycle PIDs once a process has been reaped. As such, PIDs do not allow another process to maintain a private, stable reference on a process. On systems under pressure it is thus possible that a PID is recycled without other (non-parent) processes being aware of it. This becomes rather problematic when (non-parent) processes are in charge of managing other processes as is the case for system managers or userspace implementations of OOM killers.\n\nOver the last months we have been working on solving these and other problems by introducing pidfds – process file descriptors. Among other nice properties, the allow callers to maintain a private, stable reference on a process.\n\nIn this talk we will look at challenges we faced and the different approaches people pushed for. We will see what already has been implement and pushed upstream, look into various implementation details and outline what we have planned for the future.","original_language":"eng","persons":["Christian Brauner"],"tags":["asg2019","172","2019"],"view_count":268,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-19T21:00:11.510+01:00","length":2574,"duration":2574,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/172-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/172-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/172-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/172-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-172-pidfds-process-file-descriptors-on-linux","url":"https://api.media.ccc.de/public/events/355ea6a0-d58b-5a47-a613-312ede6b1859","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":20},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":3},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":21},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":21},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":20},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":20}]},{"guid":"3c8f6eff-42ef-5c5d-abfd-00fb58b4d6e8","title":"Coinboot - Cost effective, diskless GPU clusters for blockchain hashing and beyond","subtitle":null,"slug":"ASG2019-141-coinboot-cost-effective-diskless-gpu-clusters-for-blockchain-hashing-and-beyond","link":"https://cfp.all-systems-go.io/ASG2019/talk/XNU7NE/","description":"How to run clusters for GPU computing based blockchain hashing diskless on cost effective commodity hardware.\n\nRunning the nodes of a cluster diskless is quite common in HPC environments. The challenges to run diskless in the context of blockchain hashing for cryptocurrencies are different. There are constraints like to run sufficiently on hundreds of machines with commodity 1 Gbit/s network hardware or the modest RAM size of 4 Gigabyte. This talk will provide insights in the technical approaches that made it possible to run GPU-clusters for blockchain hashing diskless and provide an outlook to  other potential GPU-based use cases beyond blockchain hashing.\nI will discuss like how some early userspace trickery and state of the art RAM compression is used. How to handle the modest given RAM size and how a neat toolset based on container-runtimes helps to easily build boot images and plug-in packages. And how to use plug-in packages as an elegant way for adding further software like proprietary GPU drivers to the computing nodes of the clusters.","original_language":"eng","persons":["Gunter Miegel"],"tags":["asg2019","141","2019"],"view_count":101,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-12-11T19:30:05.939+01:00","length":1434,"duration":1434,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/141-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/141-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/141-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/141-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-141-coinboot-cost-effective-diskless-gpu-clusters-for-blockchain-hashing-and-beyond","url":"https://api.media.ccc.de/public/events/3c8f6eff-42ef-5c5d-abfd-00fb58b4d6e8","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":3},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":4},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":4},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":3},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":5},{"event_id":7884,"event_guid":"0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","weight":3},{"event_id":7889,"event_guid":"d4f88c04-93ec-56ce-ae97-973a04b96fbd","weight":4},{"event_id":7890,"event_guid":"8a203dd4-c4d8-51af-b01e-8a199a515c16","weight":3},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":3},{"event_id":7895,"event_guid":"259c3989-a0c3-57a0-8515-c10f29613830","weight":3},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":6}]},{"guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","title":"OCIv2: Container Images Considered Harmful","subtitle":null,"slug":"ASG2019-123-ociv2-container-images-considered-harmful","link":"https://cfp.all-systems-go.io/ASG2019/talk/VMTEPT/","description":"Most modern container image formats use tar-based linear archives to represent root filesystems, which results in many issues when using modern container images. In this talk, we will demonstrate a solution to this problem that we plan to propose for standardisation within the Open Container Initiative (code-named \"OCIv2 images\").\n\nThis talk is specific to the Open Container Initiative's image specification, but the same techniques could be applied to other systems (though we'd obviously recommend using OCI). \n\nIn order to avoid the [numerous issues with tar archives](https://www.cyphar.com/blog/post/ociv2-images-i-tar) it is necessary to come up with a different format. In addition, layer representations result in needless wasted space for storage of files which are no longer relevant to running containers. Massive amounts of duplication are also rampant within OCI images because tar archives are completely opaque to OCI's content-addressable store.\n\nLuckily the problem of representing a container root filesystem for distribution is very similar to existing problems within backup systems, and we can take advantage of prior art such as [restic](https://restic.net/) to show us how we can get significant space-savings and possibly efficiency savings.\n\nHowever, we also must ensure that the runtime cost of using this new system is equivalent to existing container images. Container images are efficient at runtime because they map directly to how overlay filesystems represent change-sets as layers, but with some tricks it is possible for us to obtain most of the improvements we also gained in distribution with de-duplication.\n\nOur proposed solution to all of these problems will be laid out, with opportunities for feedback and discussion.","original_language":"eng","persons":["Aleksa Sarai"],"tags":["asg2019","123","2019"],"view_count":381,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-11-20T16:30:06.785+01:00","length":2327,"duration":2327,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/123-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/123-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/123-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/123-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-123-ociv2-container-images-considered-harmful","url":"https://api.media.ccc.de/public/events/b9883475-56ad-5749-9c65-e178a1e6bbfb","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":10},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":8},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":15},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":2},{"event_id":7880,"event_guid":"8617d047-766c-5837-9350-a35c6d29d7cb","weight":1},{"event_id":7881,"event_guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","weight":7},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":10},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":17},{"event_id":7884,"event_guid":"0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","weight":2},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":1},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":8},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":1},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":10},{"event_id":7895,"event_guid":"259c3989-a0c3-57a0-8515-c10f29613830","weight":13},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":15},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":2},{"event_id":7926,"event_guid":"47ead120-c630-5091-bf6e-5b72c6f98ec8","weight":10}]},{"guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","title":"Privacy-Respecting Linux Desktop Monitoring","subtitle":null,"slug":"ASG2019-175-privacy-respecting-linux-desktop-monitoring","link":"https://cfp.all-systems-go.io/ASG2019/talk/3ZKVWF/","description":"Whether to support users, ensure their security, or meet compliance goals, organizations need to deploy monitoring of their desktop machines. Yet, many approaches overreach by effectively being rootkits. In this presentation, we'll examine:\n\n* What data a monitoring system needs to collect\n* Where the data we need lives on a modern Linux desktop\n* Which data sources expose sandbox-friendly API access\n* Sandboxing the monitoring daemon itself","original_language":"eng","persons":["David Strauss"],"tags":["asg2019","175","2019"],"view_count":175,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2024-11-10T07:45:02.625+01:00","length":1535,"duration":1535,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/175-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/175-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/175-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/175-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-175-privacy-respecting-linux-desktop-monitoring","url":"https://api.media.ccc.de/public/events/3349eaff-53ab-5345-afa9-b6ed4203ce6a","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":23},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":11},{"event_id":7868,"event_guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","weight":13},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":18},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":13},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":16}]},{"guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","title":"systemd @ Facebook in 2019","subtitle":null,"slug":"ASG2019-142-systemd-facebook-in-2019","link":"https://cfp.all-systems-go.io/ASG2019/talk/983XHL/","description":"We'll be covering happenings, learnings and new challenges running and supporting systemd in production on the Facebook fleet throughout the past year.\n\nThis talk is a followup to [State of systemd @ Facebook](https://cfp.all-systems-go.io/ASG2018/talk/192/) that was presented last year. We'll cover the latest developments, how we're leveraging new systemd features, the design of our CI/CD pipeline for systemd, and finally discuss a number of interesting case studies.","original_language":"eng","persons":["Davide Cavalca"],"tags":["asg2019","142","2019"],"view_count":426,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-20T01:30:03.027+01:00","length":1446,"duration":1446,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/142-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/142-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/142-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/142-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-142-systemd-facebook-in-2019","url":"https://api.media.ccc.de/public/events/b0b3fa50-d9db-511a-9fb1-9edb96bd3401","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":40},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":27},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":27},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":64},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":2},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":19},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":24},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":45},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":70},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":20},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":29},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":34},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":19},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":21}]},{"guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","title":"Impact of zstd","subtitle":null,"slug":"ASG2019-167-impact-of-zstd","link":"https://cfp.all-systems-go.io/ASG2019/talk/DG3YDE/","description":"Zstandard (zstd) is a new lossless compression algorithm with a very attractive compression rate and performance.  In production environments it comes with some quantifiable benefits but also with some surprising issues.","original_language":"eng","persons":["Oskari Saarenmaa","Ville Tainio"],"tags":["asg2019","167","2019"],"view_count":546,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-01-25T16:00:13.996+01:00","length":252,"duration":252,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/167-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/167-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/167-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/167-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-167-impact-of-zstd","url":"https://api.media.ccc.de/public/events/a738a107-7051-544d-98cf-b6c3adce4a3f","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":45},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":36},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":85},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":23},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":108},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":21},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":51},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":45},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":51},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":19}]},{"guid":"8a203dd4-c4d8-51af-b01e-8a199a515c16","title":"Trust is good, control is better - A (short) story about Network Policies","subtitle":null,"slug":"ASG2019-138-trust-is-good-control-is-better-a-short-story-about-network-policies","link":"https://cfp.all-systems-go.io/ASG2019/talk/QXMUUW/","description":"Testing the effectiveness of Kubernetes Network Policies can be done in different approaches. In this talk we will show you the benefits and drawbacks of different approaches and what solution we finally chose.\n\nProbably everybody who uses Kubernetes in a productive environment with multiple users possibly has looked at policies. Often the operators of the cluster(s) just trust the policies but in some cases it might be useful to control if the policies actually have taken action and often there are just to many Policies in the cluster setup to manually test them all (and obviously you don’t want to do this). Testing the effectiveness of the Network Policies can be done in different approaches. In this talk we will show you the benefits and drawbacks of different approaches and what solution we finally chose. Also we will show you some other tools and how they complement our solution. As a takeaway you will get an overview of different testing strategies for policies, as well as understanding challenges in testing policies in general and the Kubernetes ecosystem. We will get a feeling that it’s not always the best idea to just trust other plugins to implement the policies correctly. Our solution is open-sourced under https://github.com/inovex/illuminatio/","original_language":"eng","persons":["Maximilian Bischoff","Johannes Scheuermann"],"tags":["asg2019","138","2019"],"view_count":82,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2024-10-01T12:30:03.299+02:00","length":2232,"duration":2232,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/138-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/138-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/138-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/138-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-138-trust-is-good-control-is-better-a-short-story-about-network-policies","url":"https://api.media.ccc.de/public/events/8a203dd4-c4d8-51af-b01e-8a199a515c16","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7839,"event_guid":"abf66e62-0ad5-5cf1-bb6a-a15b95f0800b","weight":1},{"event_id":7847,"event_guid":"bf3e6d3e-17cd-51a6-a065-d6a2fdb35234","weight":1},{"event_id":7857,"event_guid":"9baa0eba-3465-5f4e-b83c-60b76cdd7960","weight":1},{"event_id":7858,"event_guid":"40582acc-93b6-512b-a096-623120a1d677","weight":1},{"event_id":7861,"event_guid":"95b24088-2a42-5bbe-af23-1061a63a4966","weight":1},{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":9},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":13},{"event_id":7877,"event_guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","weight":8},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":7},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":9},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":5},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":6},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":5}]},{"guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","title":"Purely Functional Package Management","subtitle":null,"slug":"ASG2019-155-purely-functional-package-management","link":"https://cfp.all-systems-go.io/ASG2019/talk/AD8VYE/","description":"Ever experienced a broken system by simply upgrading packages? No more! This talk introduces the purely functional package manager Nix and the advancements all software distributions can benefit from - with some of those already implemented in mainstream package managers like snap.","original_language":"eng","persons":["Franz Pletz"],"tags":["asg2019","155","2019"],"view_count":236,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-04-08T16:00:03.879+02:00","length":2302,"duration":2302,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/155-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/155-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/155-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/155-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-155-purely-functional-package-management","url":"https://api.media.ccc.de/public/events/895baa61-c621-50c3-8b3b-1e69333f76a2","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":6058,"event_guid":"7fe2a84b-bbed-4a4e-80fb-85b581c14b13","weight":1},{"event_id":6078,"event_guid":"8a3c7006-ba7f-451c-a555-3a9ca4af5f2f","weight":1},{"event_id":6103,"event_guid":"c6d2bb1a-26b4-4382-a149-55f0b86ff4c4","weight":1},{"event_id":7251,"event_guid":"b69c19ce-7c89-4afd-9396-ea664f80dba7 ","weight":1},{"event_id":7423,"event_guid":"54aa059d-1205-5afb-8a11-68ef351b0ab9","weight":1},{"event_id":7431,"event_guid":"508fe23f-bc69-4521-abc3-59b649598eb5","weight":1},{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":23},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":18},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":32},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":1},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":1},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":1},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":19},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":29},{"event_id":7887,"event_guid":"06a90eaf-78a4-52d6-b29d-ce47622c4955","weight":1},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":19},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":19}]},{"guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","title":"Reinventing Home Directories","subtitle":null,"slug":"ASG2019-164-reinventing-home-directories","link":"https://cfp.all-systems-go.io/ASG2019/talk/VSQRXA/","description":"Let's bring the UNIX concept of Home Directories into the 21st century.\n\nThe concept of home directories on Linux/UNIX has little changed in the last  39 years. It's time to have a closer look, and bring them up to today's standards, regarding encryption, storage, authentication, user records, and more.\n\nIn this talk we'll talk about \"systemd-homed\", a new component for systemd, that reworks how we do home directories on Linux, adds strong encryption that makes sense, supports automatic enumeration and hot-plugged home directories and more.","original_language":"eng","persons":["Lennart Poettering"],"tags":["asg2019","164","2019"],"view_count":11169,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-04-01T20:30:07.353+02:00","length":2666,"duration":2666,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/164-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/164-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/164-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/164-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-164-reinventing-home-directories","url":"https://api.media.ccc.de/public/events/878e4754-c346-5b93-96d2-1ca8bf5109c3","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7110,"event_guid":"3e7f1444-b72c-594f-b033-d96b21c1961c","weight":23},{"event_id":7729,"event_guid":"9d030aa8-27aa-509b-913f-ee9eff97257b","weight":23},{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":84},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":39},{"event_id":7866,"event_guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","weight":18},{"event_id":7868,"event_guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","weight":18},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":28},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":34},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":23},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":28},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":27},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":85},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":153},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":20},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":57},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":64},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":136},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":32},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":27},{"event_id":7926,"event_guid":"47ead120-c630-5091-bf6e-5b72c6f98ec8","weight":15},{"event_id":7973,"event_guid":"696a345a-9ef1-5985-8dd6-84c9ef22950c","weight":16},{"event_id":7988,"event_guid":"f1b2d665-2521-4f00-a8ba-b3e6b55d78ca","weight":19},{"event_id":7989,"event_guid":"a75f727b-b87b-4e64-a8c0-a80a20325b94","weight":31}]},{"guid":"99754f29-ce19-55cf-bd1d-07332a6a794e","title":"How Microsoft SQL Server Went Multi-Platform: SQLPAL","subtitle":null,"slug":"ASG2019-131-how-microsoft-sql-server-went-multi-platform-sqlpal","link":"https://cfp.all-systems-go.io/ASG2019/talk/GTYJFV/","description":"How did Microsoft made SQL Server available on Linux, Containers and ARM CPUs? Come hear the story from the SQL Server engineering team.\n\nWe'd love to tell the story on how we made SQL Server available to ecosystems outside of Windows in this talk. It's a great story that involves quite a bit of interesting technologies and we'd like to share that with everyone!","original_language":"eng","persons":["Argenis Fernandez","Brian Gianforcaro","Eugene Birukov"],"tags":["asg2019","131","2019"],"view_count":259,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-01-22T22:45:09.059+01:00","length":2461,"duration":2461,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/131-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/131-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/131-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/131-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-131-how-microsoft-sql-server-went-multi-platform-sqlpal","url":"https://api.media.ccc.de/public/events/99754f29-ce19-55cf-bd1d-07332a6a794e","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7863,"event_guid":"54225488-d685-57fb-9065-481bd2450f5e","weight":1},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":7},{"event_id":7866,"event_guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","weight":1},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":10},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":3},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":1},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":3},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":6},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":8},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":9},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":1},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":3},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":11},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":6},{"event_id":7919,"event_guid":"595b1468-e708-5711-9879-404a83be790f","weight":1}]},{"guid":"0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","title":"Using RPMs for systemd development","subtitle":null,"slug":"ASG2019-149-using-rpms-for-systemd-development","link":"https://cfp.all-systems-go.io/ASG2019/talk/JM7GDN/","description":"Using RPMs can be very advantageous during development of systemd on Fedora. In order to make that viable, we need to build them from a git checkout and have the ability to use incremental builds.\n\nI will explore tooling I've been using and building to use RPMs during systemd development. I'll quickly cover the motivation and advantages while I manage to build one during a lightning demo.","original_language":"eng","persons":["Filipe Brandenburger"],"tags":["asg2019","149","2019"],"view_count":84,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2024-08-31T22:45:03.246+02:00","length":240,"duration":240,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/149-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/149-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/149-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/149-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-149-using-rpms-for-systemd-development","url":"https://api.media.ccc.de/public/events/0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7863,"event_guid":"54225488-d685-57fb-9065-481bd2450f5e","weight":1},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":8},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":11},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":1},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":12},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":20},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":3},{"event_id":7898,"event_guid":"2b6de0da-88c5-5199-8b49-84bfe4eb355b","weight":1},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":9}]},{"guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","title":"Rootless, Reproducible \u0026 Hermetic: Secure Container Build Showdown","subtitle":null,"slug":"ASG2019-146-rootless-reproducible-hermetic-secure-container-build-showdown","link":"https://cfp.all-systems-go.io/ASG2019/talk/PVYETJ/","description":"How can we build hostile and untrusted code in containers? There are many options available, but not all of them are as safe as they claim to be...\n\nRootless container image builds (as distinct from rootless container runtimes) have crept ever closer with orca-build, BuildKit, and img proving the concept. They are desperately needed: a build pipeline with an exposed Docker socket can be used by a malicious actor to escalate privilege - and is probably a backdoor into most Kubernetes-based CI build farms.\n\nWith a slew of new rootless tooling emerging including Red Hat’s buildah, Google’s Kaniko, and Uber’s Makisu, we will see build systems that support building untrusted Dockerfiles? How are traditional build and packaging requirements like reproducibility and hermetic isolation being approached? In this talk we: \n- Detail attacks on container image builds\n- Compare the strengths and weaknesses of modern container build tooling\n- Chart the history and future of container build projects\n- Explore the safety of untrusted builds","original_language":"eng","persons":["Andrew Martin"],"tags":["asg2019","146","2019"],"view_count":306,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-02-09T11:45:06.921+01:00","length":2150,"duration":2150,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/146-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/146-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/146-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/146-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-146-rootless-reproducible-hermetic-secure-container-build-showdown","url":"https://api.media.ccc.de/public/events/5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":15},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":11},{"event_id":7866,"event_guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","weight":13},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":18},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":7}]},{"guid":"47ead120-c630-5091-bf6e-5b72c6f98ec8","title":"Senpai - Automatic memory sizing for containers","subtitle":null,"slug":"ASG2019-134-senpai-automatic-memory-sizing-for-containers","link":"https://cfp.all-systems-go.io/ASG2019/talk/TCBLRG/","description":"Due to virtual memory and optimistic caching strategies, true memory consumption of an application, and true utilization of a system's RAM, are mostly unknowns on modern operating systems. This has always made memory provisioning a tough and error-prone trial-and-error task, but it's aggravated with containerization, where the stated goal is thinner margins and higher resource efficiency.\n\nSenpai is a userspace tool that harnesses recently developed Linux kernel features to automatically shrink cgroups to their smallest possible memory size without notably affecting the performance of the contained applications.\n\nThis talk goes over the motivation to develop senpai, how it works, and success stories from the Facebook fleet.","original_language":"eng","persons":["Johannes Weiner"],"tags":["asg2019","134","2019"],"view_count":143,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-28T19:45:05.533+01:00","length":1423,"duration":1423,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/134-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/134-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/134-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/134-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-134-senpai-automatic-memory-sizing-for-containers","url":"https://api.media.ccc.de/public/events/47ead120-c630-5091-bf6e-5b72c6f98ec8","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":15},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":7},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":9},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":8},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":10},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":8},{"event_id":7913,"event_guid":"04ca5cae-20ff-516b-a362-94c7b2dc5c6a","weight":2},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":2}]},{"guid":"d4f88c04-93ec-56ce-ae97-973a04b96fbd","title":"Building Portable Service Images with Buck","subtitle":null,"slug":"ASG2019-143-building-portable-service-images-with-buck","link":"https://cfp.all-systems-go.io/ASG2019/talk/K7E7T7/","description":"Buck is an opensource build system.  At Facebook, we’ve taught it to build container images that work with systemd.\n\nAt Facebook we use an open-source build system called Buck.  Buck is a build system designed to provide more strong guarantees of incremental builds, reproducibility, and dependency management.  Open-source Buck can now be used to construct fully described and fully self-contained container images that work with systemd! I will show how we use this tool internally at Facebook and how it can be used externally (It’s open-source!) to build service containers for use by systemd.  I will dive into the the details of how these builds are performed with systemd-nspawn, how we use the Buck system to define the systemd services and their dependencies, and how these images work at runtime.","original_language":"eng","persons":["Lindsay Salisbury"],"tags":["asg2019","143","2019"],"view_count":100,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-01-25T11:30:07.547+01:00","length":1539,"duration":1539,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/143-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/143-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/143-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/143-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-143-building-portable-service-images-with-buck","url":"https://api.media.ccc.de/public/events/d4f88c04-93ec-56ce-ae97-973a04b96fbd","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":1},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":1},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":7},{"event_id":7871,"event_guid":"4fb36c1f-144d-54a4-b4de-873384e98c40","weight":3},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":1},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":1},{"event_id":7877,"event_guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","weight":3},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":1},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":7},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":9},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":4},{"event_id":7887,"event_guid":"06a90eaf-78a4-52d6-b29d-ce47622c4955","weight":1},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":4},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":1},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":1},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":9},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":7},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":4},{"event_id":7918,"event_guid":"147efef1-ba80-5748-9655-fb5cd41f61f9","weight":1},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":4},{"event_id":7923,"event_guid":"19b2b529-d037-53ac-8e5e-81028aea4827","weight":1},{"event_id":7930,"event_guid":"71c8ae1e-b22d-4576-9ec8-cc0920ac61a4","weight":1},{"event_id":7934,"event_guid":"6238c286-33b4-4388-9637-9c4024f0d9e8","weight":1},{"event_id":7936,"event_guid":"fc47f807-2b7a-4409-b980-3e12322fe6d5","weight":1}]},{"guid":"b5ead4a4-e2f5-55d1-8ce1-ae27fbab329c","title":"Buildroot : Using embedded tools to build container images","subtitle":null,"slug":"ASG2019-124-buildroot-using-embedded-tools-to-build-container-images","link":"https://cfp.all-systems-go.io/ASG2019/talk/B7D7BC/","description":"The embedded world has dealt with image creation for decades. \nWhy not use those decade of experience to reliably create image for the datacenter world ?\n\nBuilding an OS image in a reliable, reproducible, tracable and archivable way is a hard problem,  but it is a problem that the embedded world has been working on for decades and where mature and easy to use tools exist\n\nNowdays, the world of containers is rediscovering these problems and most tools do not provide the level of tracability and reliability needed to be able to properly track the content of an image in every detail and be confident that it is possible to report what changes are local and what licenses are used.\n\nBuildroot is one of the tools the embedded world provides to solve that problem. It is robust, mature, deadly simple to use and can really help getting back the control on container images.","original_language":"eng","persons":["Jérémy Rosen"],"tags":["asg2019","124","2019"],"view_count":178,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-12-23T13:45:04.456+01:00","length":1760,"duration":1760,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/124-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/124-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/124-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/124-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-124-buildroot-using-embedded-tools-to-build-container-images","url":"https://api.media.ccc.de/public/events/b5ead4a4-e2f5-55d1-8ce1-ae27fbab329c","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":10},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":7},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":9},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":12},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":5},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":7},{"event_id":7909,"event_guid":"18b9979c-f66d-5009-b3e7-7d5184fd185e","weight":2},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":7},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":8},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":1},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":3}]},{"guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","title":"The state of Thunderbolt on GNU/Linux","subtitle":null,"slug":"ASG2019-150-the-state-of-thunderbolt-on-gnu-linux","link":"https://cfp.all-systems-go.io/ASG2019/talk/HXLJNF/","description":"A summary of the current state of Thunderbolt, kernel as well as user space, including the latest development where the the input–output memory management unit (IOMMU) is used to prevent Direct Memory Access (DMA) attacks. A brief explanation and discussion of such such an attack, the recent Thunderclap attacks, will be given including with a focus on how it is related to the IOMMU feature on Linux.","original_language":"eng","persons":["Christian Kellner"],"tags":["asg2019","150","2019"],"view_count":298,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-01-03T04:30:08.996+01:00","length":1463,"duration":1463,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/150-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/150-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/150-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/150-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-150-the-state-of-thunderbolt-on-gnu-linux","url":"https://api.media.ccc.de/public/events/fd85bb93-e67e-5ecc-ad41-8470024119fe","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":15},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":11},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":27},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":14},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":21},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":14},{"event_id":7879,"event_guid":"b5ead4a4-e2f5-55d1-8ce1-ae27fbab329c","weight":2},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":18},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":21},{"event_id":7884,"event_guid":"0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","weight":2},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":12},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":21},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":10},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":14},{"event_id":7919,"event_guid":"595b1468-e708-5711-9879-404a83be790f","weight":2},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":2},{"event_id":7926,"event_guid":"47ead120-c630-5091-bf6e-5b72c6f98ec8","weight":2}]},{"guid":"df4ceb70-2c63-538c-b581-e60adc89f261","title":"Distributing Freedesktop SDK applications to Flatpak, Snapd and Docker","subtitle":null,"slug":"ASG2019-145-distributing-freedesktop-sdk-applications-to-flatpak-snapd-and-docker","link":"https://cfp.all-systems-go.io/ASG2019/talk/CF7FSX/","description":"BuildStream is used to build Freedesktop SDK for different deployment systems allowing applications based on it to be distributed at once to multiple systems.\n\nFlatpak, Snapd and Docker are similar. They are all used for deployment and applications use their own runtime.\n\nEach system has its own tools for development. Flatpak uses Flatpak Builder. Snapd uses Snapcraft. Docker development is based on `Dockerfile`s.\n\nFreedesktop SDK was developed to be the runtime of Flatpak. It used to be partly built with Flatpak Builder. It has since changed to be built with a deployment system agnostic tool: BuildStream. For this reason we can export the Freedesktop SDK to multiple formats.\n\nWe will show how it is possible to build an application for the three systems at once.","original_language":"eng","persons":["Valentin David"],"tags":["asg2019","145","2019"],"view_count":93,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-01-16T09:45:10.691+01:00","length":1406,"duration":1406,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/145-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/145-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/145-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/145-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-145-distributing-freedesktop-sdk-applications-to-flatpak-snapd-and-docker","url":"https://api.media.ccc.de/public/events/df4ceb70-2c63-538c-b581-e60adc89f261","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":5},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":13},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":4},{"event_id":7879,"event_guid":"b5ead4a4-e2f5-55d1-8ce1-ae27fbab329c","weight":5},{"event_id":7880,"event_guid":"8617d047-766c-5837-9350-a35c6d29d7cb","weight":1},{"event_id":7881,"event_guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","weight":7},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":7},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":1},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":1},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":5},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":1},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":1},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":12},{"event_id":7919,"event_guid":"595b1468-e708-5711-9879-404a83be790f","weight":1}]},{"guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","title":"Revamping libcontainer's systemd driver","subtitle":null,"slug":"ASG2019-151-revamping-libcontainer-s-systemd-driver","link":"https://cfp.all-systems-go.io/ASG2019/talk/YPU3HL/","description":"In this talk, I'll go through my efforts to revamp libcontainer's systemd driver, in particular to support the unified cgroup hierarchy.\n\nlibcontainer is part of runc (opencontainers/runc in GitHub) and is used by the Docker and containerd ecosystem to spawn containers. This work is trying to bridge the gap between the Docker/containerd/Kubernetes ecosystem and cgroup2 through the unified hierarchy, using systemd as an authoritative container manager. I'll also touch on alternative approaches (such as crun and systemd-nspawn) and briefly talk about the OCI standard and the need for it to evolve to properly support cgroup2 semantics.","original_language":"eng","persons":["Filipe Brandenburger"],"tags":["asg2019","151","2019"],"view_count":80,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-04-22T00:30:05.233+02:00","length":1612,"duration":1612,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/151-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/151-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/151-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/151-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-151-revamping-libcontainer-s-systemd-driver","url":"https://api.media.ccc.de/public/events/0ca00408-9684-58d3-a7c3-7d7b6cae6b75","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":6},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":5},{"event_id":7881,"event_guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","weight":9},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":7},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":7},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":2},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":2},{"event_id":7890,"event_guid":"8a203dd4-c4d8-51af-b01e-8a199a515c16","weight":8},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":2},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":9},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":6}]},{"guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","title":"Atomic updates and configuration files in /etc","subtitle":null,"slug":"ASG2019-119-atomic-updates-and-configuration-files-in-etc","link":"https://cfp.all-systems-go.io/ASG2019/talk/KYTCJV/","description":"Atomic Updates and user modified configuration files in /etc often lead to hard to resolve conflicts. In this talk, I want to show the most common and biggest problems and possible solutions.\n\nMore and more Linux Distributors have a Distribution using atomic updates to update the system. They all have the problem of updating the files in /etc, as an admin could do changes after the update but before the reboot to activate the updates. But everybody come up with another solution which solves their usecase, but is not generic useable. Additional there is the \"Factory Reset\" of systemd, which no big distribution has really fully implemented today. A unique handling of /etc for atomic updates could also help to convince upstream developers to add support to their applications, while currently they hesitate to add distribution specific patches and support.\n\nDuring this talk, I will describe the different areas of problems and possible solutions. The goal is to provide a concept working for all Linux Distributors (like the FHS). My dream is, that no package installs anything in /etc, it should only contain changes made by the system administrator or configuration files managed by the system administrator.\n\nFor some problems, it would be already enough today if Linux distributors would adjust the configuration of applications or use all features of them. Other requires minimal to intrusive changes to packages, and for the last kind complete new concepts are necessary.","original_language":"eng","persons":["Ignaz Forster"],"tags":["asg2019","119","2019"],"view_count":264,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-19T12:30:10.001+01:00","length":2359,"duration":2359,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/119-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/119-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/119-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/119-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-119-atomic-updates-and-configuration-files-in-etc","url":"https://api.media.ccc.de/public/events/9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":36},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":39},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":36},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":51},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":24},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":27},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":32}]},{"guid":"4fb36c1f-144d-54a4-b4de-873384e98c40","title":"Securing Bare Metal Micro Services: Service Mesh","subtitle":null,"slug":"ASG2019-136-securing-bare-metal-micro-services-service-mesh","link":"https://cfp.all-systems-go.io/ASG2019/talk/H3YZZM/","description":"Learn how a Service Mesh can secure your bare-metal (non-virtualized) workloads quickly without any code modifications to improve your security posture.\n\nZero Trust is an information security mantra to not implicitly trust any the underlying infrastructure (hardware, network, software, etc). For many organizations, this extends into the cloud where this philosophy is applied to workloads running in public, virtualized clouds. We'll be taking this philosophy to protect an insecure application, the Fortune Cookie Micro Service, running atop a bare metal cloud with a Service Mesh to provide authentication and encryption of data in motion without the complexities of virtualization or containerization. This walkthrough uses all open source software (Terraform for the deployment atop the Packet bare metal cloud and Consul for the service mesh) atop Ubuntu physical nodes.","original_language":"eng","persons":["John Studarus"],"tags":["asg2019","136","2019"],"view_count":90,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-08-26T09:30:04.195+02:00","length":2273,"duration":2273,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/136-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/136-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/136-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/136-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-136-securing-bare-metal-micro-services-service-mesh","url":"https://api.media.ccc.de/public/events/4fb36c1f-144d-54a4-b4de-873384e98c40","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7828,"event_guid":"f31f31a9-edc5-5aa8-94e9-3bcbf87c7b4a","weight":1},{"event_id":7834,"event_guid":"d37118e7-992d-5e2a-92cb-890b437b96b6","weight":1},{"event_id":7843,"event_guid":"d21c048c-ff08-5483-af93-a32b0e13fe48","weight":1},{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":5},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":9},{"event_id":7868,"event_guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","weight":1},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":1},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":9},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":2},{"event_id":7881,"event_guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","weight":4},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":6},{"event_id":7885,"event_guid":"3c8f6eff-42ef-5c5d-abfd-00fb58b4d6e8","weight":1},{"event_id":7887,"event_guid":"06a90eaf-78a4-52d6-b29d-ce47622c4955","weight":1},{"event_id":7889,"event_guid":"d4f88c04-93ec-56ce-ae97-973a04b96fbd","weight":1},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":1},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":4},{"event_id":7897,"event_guid":"9796777f-c3ca-5018-b6f5-b88e0fc24f6d","weight":1},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":5},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":1},{"event_id":7918,"event_guid":"147efef1-ba80-5748-9655-fb5cd41f61f9","weight":1},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":6},{"event_id":7923,"event_guid":"19b2b529-d037-53ac-8e5e-81028aea4827","weight":1},{"event_id":7930,"event_guid":"71c8ae1e-b22d-4576-9ec8-cc0920ac61a4","weight":1},{"event_id":7934,"event_guid":"6238c286-33b4-4388-9637-9c4024f0d9e8","weight":1},{"event_id":7936,"event_guid":"fc47f807-2b7a-4409-b980-3e12322fe6d5","weight":1}]},{"guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","title":"Time-limited login sessions","subtitle":null,"slug":"ASG2019-132-time-limited-login-sessions","link":"https://cfp.all-systems-go.io/ASG2019/talk/8RB73U/","description":"How Endless are implementing time-limited scopes in systemd, using that to implement time-limited login sessions, and then using that to implement parental controls on the desktop.","original_language":"eng","persons":["Philip Withnall"],"tags":["asg2019","132","2019"],"view_count":62,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-02-03T13:45:07.382+01:00","length":264,"duration":264,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/132-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/132-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/132-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/132-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-132-time-limited-login-sessions","url":"https://api.media.ccc.de/public/events/faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":9},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":8},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":10},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":1},{"event_id":7877,"event_guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","weight":9},{"event_id":7880,"event_guid":"8617d047-766c-5837-9350-a35c6d29d7cb","weight":1},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":8},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":15},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":5},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":1},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":1},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":3},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":7},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":5}]},{"guid":"83df2d55-c0b0-502d-b2c7-330d3aa654e7","title":"Closing","subtitle":null,"slug":"ASG2019-171-closing","link":"https://cfp.all-systems-go.io/ASG2019/talk/WB9TFT/","description":"Closing of All Systems Go! 2019","original_language":"eng","persons":["Chris Kuehl"],"tags":["asg2019","171","2019"],"view_count":46,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2022-07-31T18:15:08.309+02:00","length":664,"duration":664,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/171-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/171-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/171-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/171-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-171-closing","url":"https://api.media.ccc.de/public/events/83df2d55-c0b0-502d-b2c7-330d3aa654e7","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":1396,"event_guid":"import-75b2d58a4dc12e1a88","weight":1},{"event_id":2770,"event_guid":"3d7c47ca-7e31-11e5-b91e-e9254c67ce68","weight":1},{"event_id":3563,"event_guid":"0bf48766-2a96-4c65-bc82-54c490c5c4e3","weight":1},{"event_id":4588,"event_guid":"75ec22d6-e0ec-54f3-9d7a-965500ee5f77","weight":1},{"event_id":6193,"event_guid":"cb735f21-5baf-59a6-9d61-bac0b17e7335","weight":1},{"event_id":6196,"event_guid":"7116cc1b-3e28-569d-8c87-2c46715f9382","weight":1},{"event_id":6723,"event_guid":"89e5bbf5-ed9a-58dc-962b-91ebfba80da3","weight":1},{"event_id":7824,"event_guid":"a059fb6b-edcb-58a6-8609-6bc409b6b943","weight":1},{"event_id":7862,"event_guid":"b96f6ea5-4853-53ac-97bb-97a53e3c73d3","weight":1},{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":2},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":2},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":7},{"event_id":7872,"event_guid":"99754f29-ce19-55cf-bd1d-07332a6a794e","weight":4},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":1},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":4},{"event_id":7884,"event_guid":"0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","weight":3},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":3},{"event_id":7919,"event_guid":"595b1468-e708-5711-9879-404a83be790f","weight":2},{"event_id":7941,"event_guid":"065e7cc8-56d7-4e84-8df8-a593248e6ae8","weight":1},{"event_id":7989,"event_guid":"a75f727b-b87b-4e64-a8c0-a80a20325b94","weight":3}]},{"guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","title":"Effective infrastructure monitoring with Grafana","subtitle":null,"slug":"ASG2019-162-effective-infrastructure-monitoring-with-grafana","link":"https://cfp.all-systems-go.io/ASG2019/talk/XJAWA7/","description":"In this talk David will show Grafana's advanced features to manage a fleet of Linux hosts. He will also show relevant metrics and logging datasources and how they can be combined to get a full picture of what is going on.","original_language":"eng","persons":["David Kaltschmidt"],"tags":["asg2019","162","2019"],"view_count":2403,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-29T01:15:04.119+01:00","length":2088,"duration":2088,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/162-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/162-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/162-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/162-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-162-effective-infrastructure-monitoring-with-grafana","url":"https://api.media.ccc.de/public/events/3d439f1d-e67a-5e92-96b6-3a9c5ad30965","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":36},{"event_id":7866,"event_guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","weight":23},{"event_id":7868,"event_guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","weight":15},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":29},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":84},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":15},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":15},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":17},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":45},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":74},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":27},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":40},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":28},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":23},{"event_id":7989,"event_guid":"a75f727b-b87b-4e64-a8c0-a80a20325b94","weight":15}]},{"guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","title":"Microcontroller Firmware from Scratch","subtitle":null,"slug":"ASG2019-161-microcontroller-firmware-from-scratch","link":"https://cfp.all-systems-go.io/ASG2019/talk/JDCVYP/","description":"Follow a journey of writing STM32 microcontroller firmware from scratch, using open-source tools.\n\nFollow Nikolay Kondrashov's journey of learning to write firmware for an STM32 microcontroller (the Blue Pill one) from scratch, using only open-source tools. From blinking LEDs, to controlling a toy car, without the complicated, and license-restricted manufacturer's libraries, or the comfortable crutches of the Arduino stack. Learn where to look for information, which tools you might need, and how to do it yourself with a similar or a different microcontroller.","original_language":"eng","persons":["Nikolai Kondrashov"],"tags":["asg2019","161","2019"],"view_count":653,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-02-27T02:30:03.223+01:00","length":1551,"duration":1551,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/161-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/161-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/161-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/161-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-161-microcontroller-firmware-from-scratch","url":"https://api.media.ccc.de/public/events/2d010334-8e60-5428-b831-b0bf7b3ba6af","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":15},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":20},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":28},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":24},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":1},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":1},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":18},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":17},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":27},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":17},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":24},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":22},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":21}]},{"guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","title":"News from the coreboot land","subtitle":null,"slug":"ASG2019-156-news-from-the-coreboot-land","link":"https://cfp.all-systems-go.io/ASG2019/talk/UUYNXW/","description":"What happened in the coreboot based firmware world since last year? How to get started?\n\nIn September, coreboot 4.10 will have been released, and the Open Source Firmware Conference took place. Take this opportunity to present the latest news and changes in the coreboot based firmware world. AMD devices are available with coreboot, and after Google and Puri.sm more vendors like System76 ship their devices with coreboot. While at it, give a quick introduction how to get started.","original_language":"eng","persons":["Paul Menzel"],"tags":["asg2019","156","2019"],"view_count":224,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-13T12:45:08.862+01:00","length":1485,"duration":1485,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/156-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/156-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/156-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/156-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-156-news-from-the-coreboot-land","url":"https://api.media.ccc.de/public/events/dcabb3af-fcac-5e83-a77d-5aa655cd95b3","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":17},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":18},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":2},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":27},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":14},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":18},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":15},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":25},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":2},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":22},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":18},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":17}]},{"guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","title":"Resource control @ Facebook - 2019","subtitle":null,"slug":"ASG2019-133-resource-control-facebook-2019","link":"https://cfp.all-systems-go.io/ASG2019/talk/KEK3MD/","description":"Resource control is reaching feature completeness and the focus at facebook is shifting towards productionizing. Let's go over what feature completeness means and the productionizing efforts.\n\nUntil recently, we never had all the kernel and system features needed to implement work-conserving comprehensive resource control. With the recent additions of senpai, io.weight and cpu.headroom and others, we now have all pieces to implement protection, stacking and side-loading.\n\nOur focus at facebook is gradually shifting towards productionizing resource control so that service owners can obtain high resource reliability and utilization without worrying about the details.\n\nLet's go over how resource control features come together to form the basic resource profiles and how we're trying to productionize them.","original_language":"eng","persons":["Tejun Heo","Dan Schatzberg"],"tags":["asg2019","133","2019"],"view_count":166,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-10-22T18:45:04.623+02:00","length":1971,"duration":1971,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/133-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/133-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/133-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/133-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-133-resource-control-facebook-2019","url":"https://api.media.ccc.de/public/events/21aca390-bc0c-5eef-a867-1b57a7ee36ab","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":13},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":11},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":12},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":9},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":13},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":2},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":9},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":19}]},{"guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","title":"Alternatives to standard utilities","subtitle":null,"slug":"ASG2019-157-alternatives-to-standard-utilities","link":"https://cfp.all-systems-go.io/ASG2019/talk/JFC7VC/","description":"Several of the standard tools like `grep` and `find` have rewritten alternatives, performing the tasks much quicker and have a more intuitive interface. Present some of them.","original_language":"eng","persons":["Paul Menzel"],"tags":["asg2019","157","2019"],"view_count":630,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-10-20T15:00:03.935+02:00","length":204,"duration":204,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/157-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/157-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/157-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/157-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-157-alternatives-to-standard-utilities","url":"https://api.media.ccc.de/public/events/40aa2960-6288-5a2f-bf6f-268746f0ecdf","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":74},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":51},{"event_id":7869,"event_guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","weight":24},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":153},{"event_id":7873,"event_guid":"bc369d82-ced8-535d-a824-32b2efdf9528","weight":33},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":20},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":27},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":25},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":108},{"event_id":7884,"event_guid":"0caaa7aa-f6bd-55ba-8ccc-e698afa5c9df","weight":20},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":21},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":20},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":69},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":70},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":70},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":29},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":21},{"event_id":7989,"event_guid":"a75f727b-b87b-4e64-a8c0-a80a20325b94","weight":19}]},{"guid":"595b1468-e708-5711-9879-404a83be790f","title":"Linux distro should be an upstream contributor too","subtitle":null,"slug":"ASG2019-125-linux-distro-should-be-an-upstream-contributor-too","link":"https://cfp.all-systems-go.io/ASG2019/talk/US8XA9/","description":"Come and learn about packit: tooling which enables you to integrate your upstream project into Fedora linux.\n\nImagine a world where Linux distributions provide feedback about using your upstream project back to the project. So that when you are working on a change, you'll know right away:\n* if it builds or a project Z changed API again\n* if it works or that your change doesn't work with older systemd which this distro has\n* or if your change breaks components which depend on your project\n\nThat's not all! If we have a service which can do all of this, why not propose a new upstream release automatically as a change to the linux distro once the release is done? Wouldn't it be awesome if upstream developers could control and track in which version their software is in Fedora 30?\n\nSounds interesting? Please join us in this session and learn more about the packit tool and the packit service: tooling which makes your dream come true.","original_language":"eng","persons":["Martin Sehnoutka"],"tags":["asg2019","125","2019"],"view_count":75,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-12-05T19:00:06.664+01:00","length":1984,"duration":1984,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/125-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/125-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/125-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/125-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-125-linux-distro-should-be-an-upstream-contributor-too","url":"https://api.media.ccc.de/public/events/595b1468-e708-5711-9879-404a83be790f","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":10},{"event_id":7866,"event_guid":"3349eaff-53ab-5345-afa9-b6ed4203ce6a","weight":6},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":13},{"event_id":7872,"event_guid":"99754f29-ce19-55cf-bd1d-07332a6a794e","weight":1},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":1},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":7},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":16},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":1},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":6},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":10}]},{"guid":"8f67b425-117b-5575-839f-f6d9e3604f3a","title":"PostgreSQL at low level: stay curious!","subtitle":null,"slug":"ASG2019-117-postgresql-at-low-level-stay-curious-","link":"https://cfp.all-systems-go.io/ASG2019/talk/AXPVZ3/","description":"Have you ever encountered a transient performance issue, that was hard to\ninvestigate only from the database point of view? On top of how many layers of\nabstraction your database is working? What is the difference between running\nyour database on a bare metal, VM or inside a container?\n\nPostgreSQL does not work in the vacuum, it heavily relies on functionality\nprovided by an underlying platform. And sometimes to answer these questions\nabove one needs to step back and look at a problem not only from a database\npoint of view. In this talk we will discuss how to achieve that, how to tame\nsuch tools as strace, perf or eBPF to troubleshoot intricate issues and stay\ncurious.\n\nHave you ever encountered a transient performance issue, that was hard to\ninvestigate only from the database point of view? On top of how many layers of\nabstraction your database is working? What is the difference between running\nyour database on a bare metal, VM or inside a container?\n\nPostgreSQL does not work in the vacuum, it heavily relies on functionality\nprovided by an underlying platform. And sometimes to answer these questions\nabove one needs to step back and look at a problem not only from a database\npoint of view. In this talk we will discuss how to achieve that, how to tame\nsuch tools as strace, perf or eBPF to troubleshoot intricate issues and stay\ncurious.","original_language":"eng","persons":["Dmitrii Dolgov"],"tags":["asg2019","117","2019"],"view_count":258,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2024-12-18T21:00:02.496+01:00","length":2262,"duration":2262,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/117-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/117-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/117-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/117-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-117-postgresql-at-low-level-stay-curious-","url":"https://api.media.ccc.de/public/events/8f67b425-117b-5575-839f-f6d9e3604f3a","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":29},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":16},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":28},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":11},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":2},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":2},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":24},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":2},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":27},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":11},{"event_id":7917,"event_guid":"895baa61-c621-50c3-8b3b-1e69333f76a2","weight":11},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":11}]},{"guid":"8617d047-766c-5837-9350-a35c6d29d7cb","title":"Custom cgroup-bpf programs in systemd","subtitle":null,"slug":"ASG2019-144-custom-cgroup-bpf-programs-in-systemd","link":"https://cfp.all-systems-go.io/ASG2019/talk/M8DVWG/","description":"The primary focus is to gather feedback from systemd community regarding ongoing and future work to introduce custom cgroup-bpf programs to systemd.\nThe motivation is to give a user a capability to attach their own cgroup-bpf programs to systemd containers.\n\nThis is a continuation of \u003ca href=\"https://github.com/systemd/systemd/issues/10227\" title=\"discussion\"\u003e started at ASG2018 and followed by \u003ca href=\"https://github.com/systemd/systemd/pull/12151\" title=\"PR12151\"\u003e and \u003ca href=\"https://github.com/systemd/systemd/pull/12419\" title=\"PR12419\"\u003e.\n\nCurrently systemd utilizes BPF macro-assembly which is poorly extendable and maintainable, so the 1st iteration would be introducing `libbpf` library to systemd. The first attempt was made and it raised valid questions about `libbpf` testability and dependencies it introduces. We’d like to address that.\nAnother topic of focus may be implementation details, such as how to store libbpf programs: either as bytecode or as restricted C which compiles with the rest of systemd.\nFor attendees with no context a brief intro to eBPF will be made including new initiatives which may be of use to systemd, e.g. “Compile once, run everywhere”.\nSince this is ongoing work the agenda may vary depending on activity in PRs.","original_language":"eng","persons":["Julia Kartseva"],"tags":["asg2019","144","2019"],"view_count":128,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2025-12-28T13:00:16.939+01:00","length":1389,"duration":1389,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/144-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/144-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/144-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/144-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-144-custom-cgroup-bpf-programs-in-systemd","url":"https://api.media.ccc.de/public/events/8617d047-766c-5837-9350-a35c6d29d7cb","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":11},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":11},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":1},{"event_id":7881,"event_guid":"faa5c5e3-6a1e-5c6d-bd90-eb270142ec6e","weight":1},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":11},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":11},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":1},{"event_id":7888,"event_guid":"dad4ba00-7141-5e7d-af7d-02f492f4b5e5","weight":1},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":2},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":1},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":2},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":1},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":7}]},{"guid":"9796777f-c3ca-5018-b6f5-b88e0fc24f6d","title":"BMC management with bmc-toolbox","subtitle":null,"slug":"ASG2019-165-bmc-management-with-bmc-toolbox","link":"https://cfp.all-systems-go.io/ASG2019/talk/7WMKLH/","description":"This talk is about the bmc-toolbox, an open-source project that leverages the _Baseboard Management Controller_ (iLOs iDracs and similar)  to help manage a large fleet (\u003e50K) of bare metal servers at Booking.com\n\n[bmc-toolbox.github.io](https://bmc-toolbox.github.io/)\n\nIts goal is to provide vendor agnostic tooling to manage the lifecycle of bare metal servers,\nthis talk describes the tools part of bmc-toolbox and various aspects of managing a large fleet of bare metal servers.\n\nThe bmc-toolbox leverages the _Baseboard Management Controller_ to help manage the lifecycle of datacenter bare metal.  It provides vendor agnostic tools and a library in Go lang to *inventorize*, *configure*, *manage**, **update* a large fleet of bare metal assets with the help of the BMC.\n\n- *bmclib* - A Go lang library that provides a consistent set of methods to interface with BMCs.                                                                                                                   \n- *dora* - tool to **inventorize** a fleet of bare metal servers and chassis assets.                                                                                                                               \n- *bmcbutler* - tool to handle **configuration management**  for a fleet of bare metal server and chassis BMCs.                                                                                                    \n- *actor* - A single **API webservice** endpoint to interact with a fleet of bare metal BMCs.                                                                                                                      \n- *bmcldap* - LDAP based **authentication/authorization** service/proxy for BMCs.                                                                                                                                  \n- *bmcfwupd* - tool to **update** the BMC firmware.\n\nThis talk covers,\n- The challenges managing the provisioning and lifecycle of a *not yet hyperscale* size set of bare metal servers.\n- The purpose of the tools included of bmc-toolbox, how they help make our lives easier\n- How the tooling interacts with the BMCs (vendor specific APIs, Redfish)\n- The current state of Redfish in the wild","original_language":"eng","persons":["Joel Rebello","Juliano Martinez"],"tags":["asg2019","165","2019"],"view_count":266,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-01-21T14:00:17.650+01:00","length":2518,"duration":2518,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/165-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/165-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/165-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/165-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-165-bmc-management-with-bmc-toolbox","url":"https://api.media.ccc.de/public/events/9796777f-c3ca-5018-b6f5-b88e0fc24f6d","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":14},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":7},{"event_id":7868,"event_guid":"5ca3e1c8-3349-50aa-ba63-f209fcaad3f7","weight":2},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":11},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":7},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":12},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":9},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":18},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":12},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":16},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":2}]},{"guid":"bc369d82-ced8-535d-a824-32b2efdf9528","title":"GNU poke, an extensible editor for structured binary data","subtitle":null,"slug":"ASG2019-127-gnu-poke-an-extensible-editor-for-structured-binary-data","link":"https://cfp.all-systems-go.io/ASG2019/talk/BKXVJQ/","description":"GNU poke is a new interactive editor for binary data.  Not limited to editing basic entities such as bits and bytes, it provides a full-fledged procedural, interactive programming language designed to describe data structures and to operate on them.\n\nGNU poke is a new interactive editor for binary data.  Not limited to editing basic entities such as bits and bytes, it provides a full-fledged procedural, interactive programming language designed to describe data structures and to operate on them.  Once a user has defined a structure for binary data (usually matching some file format) she can search, inspect, create, shuffle and modify abstract entities such as ELF relocations, MP3 tags, DWARF expressions, partition table entries, and so on, with primitives resembling simple editing of bits and bytes.  The program comes with a library of already written descriptions (or \"pickles\" in poke parlance) for many binary formats.\n\nGNU poke is useful in many domains.  It is very well suited to aid in the development of programs that operate on binary files, such as assemblers and linkers.  This was in fact the primary inspiration that brought me to write it: easily injecting flaws into ELF files in order to reproduce toolchain bugs.  Also, due to its flexibility, poke is also very useful for reverse engineering, where the real structure of the data being edited is discovered by experiment, interactively.  It is also good for the fast development of prototypes for programs like linkers, compressors or filters, and it provides a convenient foundation to write other utilities such as diff and patch tools for binary files.\n\nThis talk (unlike Gaul) is divided into four parts.  First I will introduce the program and show what it does: from simple bits/bytes editing to user-defined structures.  Then I will show some of the internals, and how poke is implemented.  The third block will cover the way of using Poke to describe user data, which is to say the art of writing \"pickles\".  The presentation ends with a status of the project, a call for hackers, and a hint at future works.","original_language":"eng","persons":["Jose E. Marchesi"],"tags":["asg2019","127","2019"],"view_count":463,"promoted":false,"date":"2019-09-20T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-23T22:30:06.103+01:00","length":2652,"duration":2652,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/127-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/127-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/127-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/127-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-127-gnu-poke-an-extensible-editor-for-structured-binary-data","url":"https://api.media.ccc.de/public/events/bc369d82-ced8-535d-a824-32b2efdf9528","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":15},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":22},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":34},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":24},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":15},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":16},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":33},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":3},{"event_id":7892,"event_guid":"b231881d-afaf-56f5-a57a-eaaab6668d79","weight":2},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":14},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":7},{"event_id":7925,"event_guid":"fd85bb93-e67e-5ecc-ad41-8470024119fe","weight":14}]},{"guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","title":"Boot Loader Specification + sd-boot","subtitle":null,"slug":"ASG2019-163-boot-loader-specification-sd-boot","link":"https://cfp.all-systems-go.io/ASG2019/talk/HFJMLU/","description":"The boot loader specification defines a generic drop-in based solution for defining boot targets. sd-boot is a boot loader for UEFI systems, and included in the systemd source tree. In this talk we’ll have a closer look on the what, the why and the how of the specification and the boot loader.","original_language":"eng","persons":["Lennart Poettering"],"tags":["asg2019","163","2019"],"view_count":2124,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-04-09T22:30:06.005+02:00","length":2455,"duration":2455,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/163-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/163-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/163-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/163-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-163-boot-loader-specification-sd-boot","url":"https://api.media.ccc.de/public/events/53354cbe-c92f-5c48-82e3-194690b28f0c","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7864,"event_guid":"3d439f1d-e67a-5e92-96b6-3a9c5ad30965","weight":28},{"event_id":7865,"event_guid":"9dbd53a6-97d6-55b6-8ef0-e339aae4ff20","weight":32},{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":136},{"event_id":7874,"event_guid":"1ea14c32-c58c-513c-ab1f-40ac082e985c","weight":19},{"event_id":7876,"event_guid":"2d010334-8e60-5428-b831-b0bf7b3ba6af","weight":22},{"event_id":7877,"event_guid":"0ca00408-9684-58d3-a7c3-7d7b6cae6b75","weight":1},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":17},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":51},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":70},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":40},{"event_id":7910,"event_guid":"b0b3fa50-d9db-511a-9fb1-9edb96bd3401","weight":34}]},{"guid":"18b9979c-f66d-5009-b3e7-7d5184fd185e","title":"Generating seccomp profiles for containers using podman and eBPF","subtitle":null,"slug":"ASG2019-140-generating-seccomp-profiles-for-containers-using-podman-and-ebpf","link":"https://cfp.all-systems-go.io/ASG2019/talk/ACEWHG/","description":"Currently everyone uses the same seccomp rules for running their containers.  This tool allows us to generate seccomp rules based on what the container actually requires and allows us to lock down the container.\n\nWe had a GSOC student this summer  who instrumented podman to allow it to run containers and then genrate the seccomp rules for the container based on the syscalls that the container actually made.  \n\nOnce you have this newly generate seccomp file and are satisfied that you have thoroughly tested the container, you can run the container inproduction using the seccomp.json file.\n\nThis talk will explain how the tool works and demonstrate it in action.","original_language":"eng","persons":["Dan Walsh"],"tags":["asg2019","140","2019"],"view_count":230,"promoted":false,"date":"2019-09-21T00:00:00.000+02:00","release_date":"2019-09-21T02:00:00.000+02:00","updated_at":"2026-03-27T13:15:05.448+01:00","length":1615,"duration":1615,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/140-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/140-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/140-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2019/140-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/ASG2019-140-generating-seccomp-profiles-for-containers-using-podman-and-ebpf","url":"https://api.media.ccc.de/public/events/18b9979c-f66d-5009-b3e7-7d5184fd185e","conference_title":"All Systems Go! 2019","conference_url":"https://api.media.ccc.de/public/conferences/asg2019","related":[{"event_id":7870,"event_guid":"878e4754-c346-5b93-96d2-1ca8bf5109c3","weight":5},{"event_id":7875,"event_guid":"21aca390-bc0c-5eef-a867-1b57a7ee36ab","weight":4},{"event_id":7878,"event_guid":"dcabb3af-fcac-5e83-a77d-5aa655cd95b3","weight":1},{"event_id":7879,"event_guid":"b5ead4a4-e2f5-55d1-8ce1-ae27fbab329c","weight":2},{"event_id":7880,"event_guid":"8617d047-766c-5837-9350-a35c6d29d7cb","weight":4},{"event_id":7882,"event_guid":"a738a107-7051-544d-98cf-b6c3adce4a3f","weight":5},{"event_id":7883,"event_guid":"40aa2960-6288-5a2f-bf6f-268746f0ecdf","weight":5},{"event_id":7886,"event_guid":"df4ceb70-2c63-538c-b581-e60adc89f261","weight":3},{"event_id":7891,"event_guid":"355ea6a0-d58b-5a47-a613-312ede6b1859","weight":5},{"event_id":7893,"event_guid":"7bc76c4b-311d-55e4-b60e-1c837b15ed7b","weight":4},{"event_id":7894,"event_guid":"b9883475-56ad-5749-9c65-e178a1e6bbfb","weight":8},{"event_id":7914,"event_guid":"53354cbe-c92f-5c48-82e3-194690b28f0c","weight":4},{"event_id":7918,"event_guid":"147efef1-ba80-5748-9655-fb5cd41f61f9","weight":4},{"event_id":7922,"event_guid":"090131ec-ac5c-5b60-85a0-6d080ea4054c","weight":1}]}]}