 All right. Good afternoon. It is the lightning talk session at the minute of Deb Confamble 2018 We've got seven speakers And I guess we'll just get going starting with Tobias Platten talking about Debian on power nine yesterday I Know on Friday. I Received my new power nine machine at Carlos nine and it has an IBM power nine processor so the only Distro that I know that will work is Debian since this is a new power PC 64 bit architecture that can run in Little Indian mode. I Downloaded a Debian installer first I chose the stable version but that crash during install and Then I retried a different version a daily version and This one which is based on Buster correctly installs. I can even have a graphical environment working out of the box and Installer still complains that there is no boot partition for older power PCs and This boot partition is not needed since Detalos 2 and other newer systems starting with power 7 use petite boot So that needs to be Fixed in the Debian installer that it doesn't produce the warning on power machines and Now I have working Debian installation Which I can use Thank you very much. That was very quick. Next up is Timotija Swann talking about MoVim the XMPP social platform Give him a moment to get set up. I think it's a bit better this way Who already heard about the platform MoVim? Okay, so we have a couple of People that knows about the project here Just to present you what actually could be a parallel universe, but it's actually the current universe. We're living with Lots of different chats platform. It's the same thing on the social network We keep reinventing the wheel all the time We have don't have this problem with emails. Hopefully actually the email standards came way before all those Proprietary solutions, so we have once on and Google and Microsoft are still using SMTP IMAP and For now so everything is compatible and then we just have a lot of clients on top of that But for chat and for social network is not the case So the idea of MoVim is to build a social platform In there we can put a little Couple of ingredients first is need to be open source for the transparency for the fact that you can have feedback and improvements for the security part So bring some trust. I think you guys here knows about the advantages of free software especially on the Communication part a social network, but it's not enough We also need to bring control actually in this social network So it need to be simple and transparent on the UI But also on the protocol level on the really a deep in deep deep. Yeah below on a stacks Needs to have a strong and reliable encryption. So don't reinvent also an encryption looking talking about Telegram here And yeah, I need to have some trust inside So I mean a community and not only a company that you will blindly trust to Take care of all your communication, but it's not enough It need to be decentralized Because yeah centralized social network, even if it's open source if it's only one instance You have to still trust the instance. So you would like to deploy your instance You would like to trust someone else you can only sometimes trust only yourself in some cases Decentralization also bring your business Yeah, we are really So that's many too many time that actually one server is failing. I think signal have an issue recently about This kind of thing there and they had issue with their Amazon server. The whole things didn't work for a couple of hours And then resist against and some ship control same thing with telegram I think in Russia at the moment. I'm talking more about the IM part But it's also can be applied at the social network park is exactly the same thing just as the information that our exchange are a bit different, so you need these steps, but all those Platform here, that's only things that actually I made these conferences Three years ago, and I just added my son and Recently, but actually yeah, we still have like this big Yeah difference of platforms That it's there is communication with the platform So there is kind of standard that are starting to come in as especially between Jasper and my son But there is still a lot of work to do there So the secret ingredient is about compatibility about extensibility Don't try to reinvent the wheel again and don't try to create another social network or others I am platform that will have all those communication troubles. So having a long-term vision and this Actually secret ingredient is the standardization in these things so this secret ingredients should have a couple of Yeah, this standard actually should have a couple of features Support use feeds communities. I am chat room presences know who is your online the profiles the video conferencing the security Bridges to the web And then need to be real-time and One minute. Yeah, this protocol actually exists. It's colleagues MPP So the goal of the project is to actually taking some PP implemented And doing a lot of innovation on top of the project So server side is a simple XMPP clients web server simple simple to install PHP minus QL per SQL and On the user side is also like super simple to use and simply a browser to do that. This is responsive It's light. It's fast and it's built actually for small communities There is parts already all around the world and you're already invited to deploy your own post There is already 10,000 accounts are registered on the official port 30 languages They be on package coming soon. Thanks to the help of the people some people in this room and That's it Yeah, so if you have more information everything's on the website and you can join the chat room or the Twitter Thank you very much. Next up is Thomas Lange. Mr. Phi talking about dracat Yeah Today I'm not talking about five but about Dracat Dracat is a replacement for in the drama fairs Which is used by most other distributions? if I'm correct only Ubuntu and Debian and the Divertives are using in a drama fairs tools are all other distributions already moved to Dracat And today I want to show how you can get an experience with Dracat without de-installing in a drama fairs tools Ben Hutchison did some patches. I think two years ago, so it's possible So what you have to do? There's a package called Dracat core, which does not conflict with in the drama fairs tools and I Have a virtual machine so Phi so on this machine I Will now Install the dracat dracat core package and That's it. We still have one in it Rd And now I can say Dracat now first I have to Copy the the to a Dracat version and then I can Generate a new in it Rd with Dracat Dracat uses the usual hooks or Module system. It does not use the hooks from the in a drama fairs things But it already includes a lot of hooks So for example, if you have a crypt setup, you do not need the crypt setup hooks Then the hooks for in a drama fairs tools from the trip setup Package because Dracat already includes this and a lot of other things so after Generating a new in it Rd. You update your group and you see we have now two entries in the grub So one with the old in it Rd, which was created by The default one is the the in it Rd, which is created by in a drama fairs tools And here you have the boot entry for the new Dracat In it Rd and it boots up and works so what what What we need is That's More people are using and giving it a try so in your environment on your hardware does Dracat work and We have a lot of discussion like five years ago if Debian or when will Debian switch from in the drama fairs tools to Dracat and still there's no real need because in a drama fairs tool works for everybody But I think in the long term we will switch it. So please help us Write buck reports or just give it a try if it works for you or not. That's it Thank you very much. Next up is tech kids talking about their organization Okay, those of you who attended the school young stalk Already heard about tech kids. I want to give a few details about what what else we do Tech kids is nonprofit organization based in Germany, but we are working working on cutting my hair we're working internationally and Yeah, we are completely centered around free software and we do basically everything concerning free software and education and in the context of children adolescents young people more than 50% of our active members are are minors There's an S missing. Sorry. They are of course not minor, but they are minors and Sorry kids if you are watching They're minors and we are a fully democratic organization like in the foster spirit and The most important thing is that we get children involved with all the parts of the organization both operational and Tutoring in workshops and working with free software projects giving presentations Normally some children would be here, but as this conference was right in the middle of the school time This was not so easy So what do we do first of all we want to get children and interested in Programming and coding and technical stuff, but and also in free software this we do by running youth programs at Free software conferences like the Frostcon where normally around 100 to 120 children attend and yeah use Debian and all that cool stuff and learn what they can do with with it We do peer learning so those children who already Know many things and are very interested. They get start tutoring other children These workshops, of course, we have Nontech fun together. We are outside. There is a social program with staying overnight having a barbecue and All that's all that stuff that helps building a community Those who are even more interested can get actively involved in preparing workshops organizing events Preparing talks looking at open-source projects helping others Get a free like like a free messenger instead of what's up working on how to how to spread the word among youth and all of that and Then visit conference and raise awareness. This is our presentation team from the Chemnitz-Dinox days and They are presenting the whole cannon of free software education at our schul frei booth with this school-free in German it's and They are presenting all projects that are involved in this in this in this common booth and and Care for free software education If you're interested in that maybe because you have children or want to have children or how involved in education in some way There's there are quite a few things that that you can do you can have working on projects can have and work it with mentoring the children in coding or organizational activities You can have spreading the word also raising awareness that many many software projects do Do have some involvement with children even indirectly like a web browser like like Firefox Such applications are used by children and they may have other needs and they may have other views on that So it's very important to at least think about what what children or schools or Teachers as well do with this software One minute. Thank you We need help in with presentations at conferences. So not every time the same people have to Get a get a day off at work and travel to conferences There's much more manpower needed and of course every every NGO every non-profit organization is lacking money so if you have already donated to Debian and still have money left you might want to give your money to the future which is Children Okay Don't forget donating to Debian. So maybe I don't know if I am shot if I don't say that Okay, and there's a lever I pay it's a free Free donation platform Just have a look at it if you want and if you want to help us actively just go to our website find some communication means or just Talk to someone you find at any conference who was wearing this this shirt with with our logo. Thank you Next up is Thomas Koch talking about containers Almost ready. We do have one more space at the end if anybody feels, you know inspired to Tell us all the things. I mean we did have one very very last-minute sign up We've got one more space Met Meanwhile, I guess I can make announcements while I'm here front desk will be available again after lunch as well t-shirts anybody who hasn't had a t-shirt yet Basically if you signed up you're allowed to get a t-shirt come see me. Yes free of charge Come see me at front desk when it's open again after lunch because I Do know some people have been reticent to come up and you know ask for one I've probably given effectively a lightning talk. I'm not giving that. Oh Right, here we go. Hi, it's fine. Okay. Hello. I'm Thomas Koch. I work for Google I work in support for Google container engine with Google Kubernetes engine and Kubernetes who knows what Kubernetes is so few okay, it's thing to Orchestrate containers on many many nodes up to thousands of nodes. It was started by Google open source by Google 2015 I believe First big contributor was redhead. It is 100% open source. It's written in go and by now it has won the market of Managing containers on Large nodes. I just was at the KubeCon in Copenhagen with 4,300 Participants and every company you can imagine has an offering about Kubernetes Yeah, just some logos of companies that use or contribute to Kubernetes and even more logos and this slides are outdated so there are even more and Kubernetes you have some masters that controls Cubelet on every node the cubelet can start containers and can set up networking stuff and can set up volumes and The basic concept of computation the basic primitive is a pot a pot is One too many containers running together in one environment so that you have the possibility To have side cars running beside your main containers that does additional stuff It has proven useful in Google's internal Borg container management engine that you want To have certain containers always running together and sharing resources Another important primitive is volumes so Kubernetes can manage your storage and provision storage to be accessible to your containers you can Combine many pots that provide the same service to be accessible under the same IP address and so Have fail over enabled like this and of course Then you have controllers that scale your services scale down your services restart failed ports or Drain nodes that you want to take away and my question now is what is the role of Dappian in a world where come Kubernetes becomes more and more popular even if Not that many of you have heard about it I believe that Kubernetes will become even more popular and Even as a Dabian maintainer. I'm enthusiastic about how easy it becomes now to run your stuff in Kubernetes But you only need a very minimal host operating system to install Kubernetes on your servers afterwards you need Bear image a base image for your container, which is normally also a very minimal image And you don't do app get install Apache 2 anymore to have a web server you take an Apache container image and then you extend this image and Put your app on to this image So you don't need an Apache DB an image anymore in such a word Will we still need this in Dabian? However, nothing is perfect. So on KubeCon I also saw companies offering. Oh, we scan your container images for outdated libraries and You have long times to update your cluster because all the images all the containers needs to be stopped you Download new images you start whole new environments So there are optimizations possible there and People are wondering. Okay. Where does my stuff come from? Is it from a trusted source? And my crazy thoughts maybe it's an opportunity here if Dabian would become a source of trusted binaries or even container images Thank you Sorry, am I in shock? Yeah, next up. Yeah, we're going to be talking about Manticore deep state and deferrer OS You pretty much ready Ready as will ever be right Meanwhile, does anybody know any good dance routines, you know Just a bridge over the time because I'm not going to I don't think I know any jokes Hopefully nearly there Fling my phone from me It's okay. Nobody calls me anyway, so I'm afraid I haven't gotten any more announcements We're pleased to announce that there are no no current announcements available the news has been called off Do you actually have slides? I'm wondering if we should swap you around but Okay, right we have the interval act Interpretive dance by Andrei Shadura on the nature of get see record being for the win. Well, you know anything to bridge the time, right? Okay ready If in doubt make the font bigger Maybe I should give a lightning talk about that I Think I might just at the very end I'll just Disguise it as announcements Ready I prefer that Did you see what happened earlier All right, listen to a man, but not me Get on with it Can you hear me? Okay, so I'm just going to show you Small tiny utility I wrote actually I didn't read write it from scratch. I just ported it from Anyway, so let's see. We've got a Get diff of like I've been doing like things with a different package lots of changes And I forgot to commit them individually So and now I like there's lots of patches and things and I just want to somehow sort this out so I just run get see record and Suddenly I see I can see all of the things here. I can unwrap the diffs What's happening with the lights? and I can I can basically I can select bits individual bits of the of the diff and I Let's just deselect all things Commit those just a few they were like a few patches refreshed. So I'm going to commit them now Yes, like refresh patches Let's say it's just fresh just enough Oh It's not going to work Right because I haven't got a card and I forgot to disable the I don't think I can I don't remember I probably can't really Can't disable pgp sion. Unfortunately, it's not implemented yet. Anyway. Yeah, this is using this thing you can It's better than Has it's properly called Like it's better than the built-in gets gets all I can't even remember its name Yeah, like that one Yeah, but I Didn't actually hear exactly what he said but like gitpatch something Github Get a dash-patch yeah get a dash-patch and there's another one which is Bit there's one which a bit more interactive and the one which is a bit less interactive This is mega interactive and there will be more features It is actually it was originally written for mercurial and this was the thing which I really missed when I had to use git And now I don't have to anymore This is it It's in Debian that's so you can up to install it if you prefer Am I not? Okay, it's it's in Debian and you can up to install it if you prefer Or you can install it from source and there will be more features later at some point That's it. Thank you Now now Pierre Pranchery talking about all the things that I said he was going to talk about earlier one moment, please Yeah, I know I'll even wear a suit Sorry about that, I didn't really plan for this so I made these slides five minutes ago. All right, so I'm Pierre Pranchery Thank you for having me even if I'm actually an official NetBSD developer, but I've been using Debian since 99 so maybe I'm allowed and I'm also a security consultant Interesting in channel development security integration and so on what you cannot see on the slide right now is that I'm also on the board of directors of NetBSD So actually I'm in a good position to talk about the project if you would like to I would like to talk to you about MonteCore today It's a symbolic execution tool So basically it uses a CPU emulator which can be hardware assisted of course to run and analyze programs or algorithms so parts of programs on a simulated system and One of the aims actually to make them crash so to make extensive fuzzing and be very efficient at fuzzing by possibly tracing Instructions and so on Whatever is going on inside the program It supports static Linux binaries in 32-bit and 64-bit modes. Also. It supports arms 32-bit 32-bit story Support is ongoing for arm 64-bit. It also works with Ethereum bad code There are official releases on github. It's already packaged in package source by myself And I'm actually looking for volunteers to package it for Debian or possibly help me to do so I'm actually sponsored by Shadow of Beats the developer of MonteCore to work on this Which is also why I'm here The companion to MonteCore is called deep state. It's Specifically meant for unit testing with symbolic execution. It supports not just MonteCore, but also another backend for analyzing analyzing binaries running binaries. It's so it's called anger this other backend Which has developed as a side note for the cyber grand challenge of DARPA last year So deep state is currently packaged in two separate packages in package source by myself again Unfortunately, not yet fully upstream in package source But basically I made one package with some extra binaries and then the Python bindings This is also on github, but with no official release yet because this is a very young project still So I'm also looking for a volunteer in Debian to help me package that and Then a shameless addition. I'm also developer of or the main developer of D4OS open source Desktop environment and with some more parts in a project. I have about 50 repositories now in this And I'm therefore also looking for Volunteers to package that into Debian. There are still Projects you haven't packaged yet as far as I know So since I'm here, I figured I could as well get my PGP key signed I suppose that's one of the steps to become a developer and if there are more I heard there are plenty then Then please help me out with this. I would welcome any assistance doing that. All right Thank you very much. I guess that's it the next lightning talk session that I'm aware of is at Debian 18 in Taiwan Hope to see as many of you as possible there Right off you go. Lunchtime