全全 所關注的議程

The toybox package contains a ~300 line bash script that cross-compiles a Linux system from source code and boots it to a shell prompt on a dozen QEMU targets, with a second script that automatically smoketests each image (it boots and runs, and the clock, network, and block device all work) to regression test new versions of Linux, qemu, and itself.

講者

Rob Landley

Rob maintains toybox and mkroot, writes linux docs, works to make Android a self-hosting development environment, fetches coffee for the j-core developers... Long ago he maintained busybox, co-founded Penguicon and Linucon, wrote for the Motley Fool, taught at Austin Community College, etc.

Wasm has emerged as a secure, portable, lightweight, and high-performance runtime sandbox for cloud-native workloads such as microservices and serverless functions. We will show how familiar container tools can be used to develop and share Wasm applications.

Today, there is a large ecosystem of battle-tested tools to create, manage, and deploy Linux container apps in both dev and prod environments. Developers want to use the same tools to manage their Wasm applications to reduce the learning curve and operational risks. More importantly, using the same tools would allow Wasm containers to run side by side with Linux containers. That enables the architectural flexibility to run some workloads (eg lightweight, stateless, transactional, scalable) in Wasm containers, and other workloads (eg long running, heavyweight) in Linux containers.

In this talk, I will cover how to create, publish, share and deploy real-world Wasm applications using Docker Desktop, Podman, containerd, and various flavors of Kubernetes. The examples will feature mixed container types to showcase how Wasm containers work side by side with existing Linux container apps.

講者

WasmEdge

Hung-Ying is a pioneer in compiler optimization and virtual machine design.
He is a prolific open source contributor, participating in many open-source projects, including WasmEdge, crun, solidity, and SOLL. 
Hung-Ying is also an active speaker and teacher.
 He is designing and teaching Solidity online courses in Taiwanese Mandarin.

In this talk, I will introduce coreboot + LinuxBoot development on Intel Xeon-SP platforms. Presenting why and how for this more open source approach for the system firmware for our servers.

講者

Johnny Lin

Currenlty I have been working on server BIOS (system firmware) for data centers. I have made some contribution to open source coreboot project and LinuxBoot (u-root) under commit author johnny_lin@wiwynn.com.

C++11之後，標準委員會多次強化了template的功能，導入了varadic pack, auto, fold expression等語法，大大提昇了STL的應用範圍。本議程將會導讀boost library中的hana，並講解這些功能的可能應用。內容包括了hana type computation的概念，也就是如何在C++中對class本身進行運算；以及hana struct，讓使用者對自己寫的class加上更多資訊，讓compiler得以運用這些資訊展開struct，降低我們需要寫的程式碼數量。

在資料處理，如轉換文字以及C++ struct的時候(yaml, argparse, json, protobuf)，這樣struct展開相當有用，作者自己也拿相同技術運用在硬體開發中的Verilog的輸出資料分析。傳統上高階語言如Python由於弱型別特性，此類應用場景使用起來會比C++等很強型別簡易許多。然而有了這樣的技術之後，我們便能享受到C++的效率以及高階語言的好用性。

講者

林裕盛

TODO...

Linux 核心的社群常給人一種遙不可及的感覺，想要參與卻又不得其門而入。究竟在 2023 想參與該社群是可能的嗎？到底需要會什麼？要怎麼交流？很容易被罵嗎？ —— 這些問題都會被一一解答。

講者

Shung-Hsi Yu

Kernel Engineer at SUSE working on BPF

在微服務架構下，client side 的應用程式可能由數十個不同的服務組合起來，在處理外部請求時，每個服務都必須考慮驗證授權、Cache、Rate Limiting…等機制，每個服務使用的程式語言與實作的方式不盡相同，容易造成開發及管理成本的上升。

此時若導入 API Gateway 的模式，由 API Gateway 統一負責處理請求的各項細節，服務本身就可以專注在業務邏輯的開發，管理者也能透過 API Gateway，輕鬆管理和監控系統上 API 運行的情況。

本次分享以 Kong API Gateway 為例，將示範如何使用 Kong API Gateway 管理 API 並為 API 服務加上驗證授權、Cache、Rate Limiting等機制，並分享Kong不同架構方式及其適用的情境

講者

RyanWang

往 SRE 前進的後端工程師

在這次分享中，我將介紹如何使用Python的ORM進行資料庫存取和DB Schema版本控制的實作。ORM是一種讓我們可以以物件導向的方式操作資料庫的技術，省去直接撰寫SQL查詢語句的麻煩。

首先，我將重點介紹Python中的SQLAlchemy ORM框架，它提供了一套豐富的工具，使我們能夠輕鬆地建立資料模型、執行查詢和進行資料庫遷移等操作。

接下來，我將深入探討資料庫存取的不同情境。我將解釋如何建立資料模型類別，並將其映射到資料庫表格。我們將討論查詢、新增、更新和刪除資料的方法，以及處理複雜的查詢操作，如聯結和聚合。

除了資料庫存取，我還會討論DB Schema版本控制的實作。我將以III DevOps開源專案的實際案例來示範如何使用ORM和Alembic來進行資料庫模型的版本升級。這將確保用戶端的資料庫能自動且安全地完成升級程序，以確保與應用程式版本的一致性。

最後，我們將進行實作示範，展示如何使用Python ORM進行資料庫存取和版本控制。這些示範將讓您體驗到ORM的優勢，並幫助您思考如何在自己的專案中應用這項技術。

這個分享將提供實用的知識和技巧，適合資料庫開發人員、Python開發人員，以及對資料庫存取和版本控制有興趣的人參加。讓我們一起探索使用Python ORM進行資料庫存取和版本控制的實作！

講者

李毅山

我是財團法人資訊工業策進會（資策會）的後端工程師，專精於使用Python進行開發工作。目前，我主要負責 III DevOps 開源專案的後端團隊工作。

我擁有豐富的使用Docker、Kubernetes等微服務開發架構的經驗，並熟練應用CI/CD工具。作為後端團隊的負責人，除了參與產品開發，我也在CI/CD工具整合方面提供了寶貴的建議，並將其實現為 III DevOps 平台產品的API自動回歸測試功能。例如黑箱掃描工具WebInspect和OWASP，白箱掃描工具SonarQube和Checkmarx，以及整合測試工具Postman和映像掃描工具Sbom等。

此外，我致力於研究如何有效運用後端技術來控制Kubernetes，以實現DevOps平台中多個團隊共享單一Cluster，並保持彼此獨立的開發測試環境。同時，我也專注於研究如何在保證效率的前提下，讓各個專案的Pipeline能夠與後端程式的升級相配合，並自動修改相應的Pipeline YAML檔以實現自動升級。

我對軟體開發技術的創新和團隊合作充滿熱情，並樂於分享Python在後端開發中的實踐方法和解決方案。作為後端工程師，我致力於推動團隊的成長，並提供高品質的技術解決方案。

TPM2 is not about making the computer more trustworthy to you. It is about forcing you, the user, to earn the trust of big corps by tethering your identity to the unique ID of the computer whenever you use a cloud service. The "fairness" of DRM, game anti-cheating, and exam proctoring will be more easily enforced if the big corps have rootkit-like control over everyone's computer. Reverse engineering tools such as virtual machine will not help the user regain total control of his own computer.

講者

ckhung

我的部落格之一： 玩具烏托邦

單元測試能夠讓你的程式碼變得更強健，但是在非同步任務的範疇內，測試變得不太容易，因為任務會在不同的 Thread/Coroutine 上運行，而任務完成的時間可能會不一，根據不同的完成時間，可能會產生不同的測試結果。

那麼要如何測試 Kotlin Coroutine 呢？

Kotlin Coroutine 函式庫內包含了 kotlinx-coroutine-test 類，在這裡面包含了許多針對 Kotlin Coroutine 所提供的方法。利用這些方法，我們就可以寫出簡單、易懂的 Coroutine 單元測試。

講者

Andy Lu

Android 開發者，Kotlin 讀書會志工。 專長 Kotlin 以及 Flutter，喜愛學習以及分享。 ⟪Kotlin 小宇宙 - 使用 Coroutine 優雅的執行非同步任務⟫ 作者

在分散式計算的領域中，etcd 扮演著一個關鍵的角色，提供了一個可靠的分散式鍵值存儲系統。這個議程希望透過深入淺出的方式解析 etcd 的架構和探索其程式碼，為大家解開 etcd 的祕辛。

講者

Jack Yu

A software engineer who want to continue to be a student. Currently working as Tech lead in Synology Inc., try to keep everyone's data secure and synced.

In the past few decades, event-driven architecture has become a common design paradigm for developing high-performance network servers, as it can efficiently handle concurrent requests using I/O multiplexing. However, the mitigation mechanisms for microarchitectural vulnerabilities such as Spectre and Meltdown have increased the overhead of already system call-intensive situations. Moreover, the synchronous execution blocking feature of traditional system calls makes it difficult to leverage advanced multi-core processors. To address these limitations and identify performance bottlenecks, this session will gradually analyze the evolution of the Linux I/O model and clarify the runtime of applications such as Redis and KeyDB. As a way to overcome these limitations, this session will also demonstrate the implementation of a specialized core module that improves the performance of event-driven network servers through I/O offloading. Our approach does not sacrifice high power consumption or security like kernel bypass techniques in exchange for high-performance throughput and latency. Additionally, we have conducted multiple experiments to compare our method with native systems, and the results show that our method improves bandwidth, latency, and power consumption without requiring the redesign or reimplementation of the entire application.

講者

Steven Cheng

Cheng is a computer science graduate with a master's and a bachelor's degree from National Cheng Kung University, Taiwan. His research interests are in system software and Linux kernel development. He has experience in system profiling and performance analysis of large-scale systems. He has published an academic paper in an international conference and presented several Linux-related topic in the conference held by Linux Foundation.

He has also interned as a silicon engineer at Google, where he contributed to improving the performance of simpleperf, a Android profiling tool. He is a self-motivated learner and a good team player. He is looking for a challenging and rewarding position in the field of system software engineering.

Reach out to me via linkedin: https://www.linkedin.com/in/eecheng/

There is still a lot of confusion about API gateways, Kubernetes gateways, and service meshes. A lot of this is because:

• People often mention these technologies with the same keywords, like canary deployments, rate limiting, and service discovery.
• All these technologies use reverse proxies.
• Some API gateways have their own Kubernetes gateways and service meshes and vice versa.
• There are a lot of articles/videos that compare the three technologies and conclude why one is better than the other.

In this talk, I will try to explain these technologies and share how they fundamentally differ and cater to different use cases.

講者

Navendu Pottekkat

Navendu Pottekkat is a maintainer of Apache APISIX and other open source projects. He helps new contributors to open source by mentoring through the Google Summer of Code and Linux Foundation Mentorship Program. Navendu writes and talks about the cloud native ecosystem and his experience in contributing to, building, scaling, and maintaining open source projects.

在Kubernetes裏，你可以監控和觀測很多數據! 但是, 最大的問題是哪一個是我們應該特別關注? 在這個演講，我們將分享對Kubernetes中十大指標的看法和觀察，以及如何立即開始.

講者

Steve Ng

Steve Ng is the head of Developer Relations for New Relic Asia Pacific and has worked in various roles in the industry for over a decade. At New Relic, Steve focuses on open source, observability, site reliability engineering, DevOps practices, cloud-native architecture, AIOps, and developer experience.

When FPGA became affordable, everyone can create his own chip easily nowadays. There are many open sourced FPGA projects on the Internet so even a non-experience software engineer can make their own chip easily.

In this session, I will introduce the basic concepts and resources for the audiences who want to learn how to make their own chip. I will also introduce the basic concepts behinds my open sourced ray tracing GPU project.

講者

Owen

I have 20+ years’ experience on game and GPU industry. Currently I am working for Arm's GPU team and interested in any topics about computer graphics.

本內容旨在實作高效記憶體配置器，針對多核系統提升性能。我們使用了 lock-free 設計和 atomic 操作進行記憶體配置，解決 lock 競爭問題。同時，透過 MADV_POPULATE 機制降低 page fault 次數，提高系統效能。

在 X86-64 與 Arm64 主機上的測試結果顯示配置器的可擴展性和效能優勢。這些優化技術和測試結果將提升記憶體配置效率，增強系統性能和可靠性。

講者

王漢祺

嗨 我是來自於台灣的王漢祺，目前是一名碩士生 對系統軟體開發有興趣！

在產生密碼用於加密各種協議，但隨機產生的數怎麼產生的？這些數字真的夠「隨機」嗎？產生亂數又需要多少時間？

在這個議程，想跟大家分享討論這些議題 - 運用 LFSR 得到亂數的手法 - Linux 運用哪些資訊來產生亂數？ - Linux 產生亂數的整個架構 ，/dev/random 和 /dev/urandom 對應到內部哪些實作？ - Linux RNG 如何達到 CSPRNG 要求？ - 如何去評估亂數的好壞，如何確保他「夠亂」

講者

黃柏愷

成大資工系、陽交大資工所畢業 現任職於 Trend Micro

1. The high level introduction of Open Source FW,
   • Open System FW/OpenBIOS with different architectures (UEFI, coreboot, etc..)
   • OpenBMC for all in one of server board and modular design for different devices in Datacenter
2. How the Open Source FW become major solution for server industry
3. Current status of Open System FW and OpenBMC for the commercial server
4. The challenge and things need to be done in future of Open Source FW

講者

Hancock Chang

25+ years experience with cross domain skills such as System Solution engineering, product/program management for various product portfolio including PC, Server (For Data Centre and Telco Infrastructure) and Embedded Solution (Automotive and BMC/BIOS), success in server product management through the driect collaboration continuously with various open source communities including OCP, OpenBMC, Linux Foundation, ONF, OSFC.

數位發展部積極發展並導入零信任、雲原生、容器化、DevOps等技術，會說明到數位部暨掛牌以來如何將服務轉移到雲端並導入Kubernetes。由於政府單位較少採用容器技術，數位部拋磚引玉，希望給各機關提供容器使用的參考，並探討如何解決相關稽核問題等。

講者

周詳

數位發展部資訊處解決方案架構師，畢業於交通大學資訊科學與工程研究所。

本次分享會探討 KIND (Kubernetes In Docker) 這個常見的 Kubernetes 測試工具是如何搭建起來的，其中又是如何將 Kubernetes 這個容器協調工具以 Docker 的方式架起，並且基於 Container in Container 的方式提供一個方便且快速的 Kubernetes 測試環境

講者

HungWei Chiu

HungWei is a co-founder of SDNDS-TW and CNTUG, two local communities in Taiwan. SDNDS-TW specializes in SDN and networking topics, while CNTUG focuses on Cloud Native approaches. Additionally, HungWei is dedicated to sharing his knowledge and experience through blog posts and speaking engagements at various conferences and meetups. Some of the events he has participated in include COSCUP 2022, COSCUP 2018 x openSUSE, Asia GNOME.Asia, Open Source Networking Days Taiwan, and GDG DevFest Taipei 2018.

KVM (Kernel-based Virtual Machine) 是 Linux 核心中的系統虛擬機器基礎建設，它是 Linux 核心模組，能讓 Linux 系統成為一個 Type-2 Hypervisor 。KVM 透過硬體虛擬化支援 (Intel VT, AMD-V) 來提供 CPU 和記憶體虛擬化功能。藉由硬體虛擬化技術，客體作業系統 (Guest OS) 不必經由軟體模擬或轉換指令，可以高效率且安全地直接執行在硬體上。使用者空間 (User Space) 的程式只要負責模擬週邊裝置、呼叫 KVM API ，即可建立並高效率地執行虛擬機器。

在這次議程中，將介紹 KVM 運作原理，並展示一個以 KVM 為基礎的精簡虛擬機器管理程式實作，它能在 x86-64 及 arm64 平台上運作，提供了基本的 VirtIO 儲存裝置、 serial 裝置 (用來作為 console) ，並且能成功在上面執行 Linux 系統。

講者

王彥傑

就讀國立臺灣大學資訊工程學系碩士班的學生，對 Linux 系統、系統軟體開發有興趣。 如有需要歡迎與我聯繫: yanjiewtw@gmail.com GitHub: https://github.com/yanjiew1

In this talk, we will look into how CalyxOS Team rewrote Android's sample OS updater app from Java to Kotlin while addressing deprecation and other issues along the process resulting in a modern app that any AOSP-based OS can use to update their A/B partition scheme devices.

講者

Aayush Gupta

Aayush Gupta (he/him), Android Developer and Developer Relations, is a self-taught developer, working on FOSS and various communities, prominently XDA Developers, for the past few years. He holds multiple titles in numerous communities, both personal and professional. Working remotely from Bhilai, India, he actively contributes to developing Android-related projects. In addition, he has been organizing Google Developer Groups Bhilai, a.k.a GDG Bhilai, to support the local community.

Kubernetes is one of powerful tools for container orchestration. In fact, it is really a matter of scheduling to manage container. Thus sometimes we should test and demonstrate what we thought to deploy properly working before we deploy in the product.

However, mostly resource is limited to test it. Therefore, KWOK(Kubernetes WithOut Kubelet) is really helpful to deploy & schedule purpose.
{https://github.com/kubernetes-sigs/kwok} And furthermore if you could save the resource, it could archive for Environmental Sustainability (https://github.com/cncf/tag-env-sustainability) as well!!!

So why don't you start from today? :)

講者

Hoon Jo

Since his experience as a system/network IT vendor, he has been providing Tech Advisor and Container Architecture Design for all projects related to Kubernetes in the Megazone GCP Cloud team. He is also an admin of the Facebook 'IT Infrastructure Engineers Group' and an open source contributor.

He likes to share his knowledge, so he has written lectures for Ansible and Kubernetes on Inflearn/Udemy, and he thinks it is important to document his knowledge, so he has written books (『Practical Programming in Python for System/Network Administrators』, 『Elegantly Answerable』), 『Kubernetes/Docker for Building Container Infrastructure Environments』 (Gilbut), and contributed articles to IT magazines. He is also a CNCF Ambassador and NAVER CLOUD PLATFORM Ambassador, contributing to the spread of the Kubernetes ecosystem.

考量到對於 sandbox 執行環境的需求，一個高效能且可嵌入式的 RISC-V 模擬器對滿足這樣的需求至關重要。受益於 RISC-V 的開源指令集和龐大的系統生態系，我們的模擬器得以用較低的記憶體開銷和可接受的執行速度來模擬 RISC-V 程式。 本次將介紹如何實作一個精簡且高效指令集模擬器，另外，也將討論如何透過加入周邊模擬，改造為可運行 Linux 的 RISC-V 系統模擬器。

講者

陳彥甫

目前就讀成大資訊工程所碩士二年級並實習於晶心科技，實驗室為前瞻系統實驗室，指導教授為黃敬群教授以及涂嘉恆教授，研究題目為 RISCV 模擬器，專案名稱為 rv32emu，主要研究方向為探討不同實作技巧對編譯器以及現代處理器的影響，並用以提升模擬器效能。

講者

莊集

現職是國立成功大學資訊工程所碩士二年級的學生，所屬前瞻系統研究實驗室，指導教授為涂嘉恆教授，研究主題與量子電腦模擬器相關，因修習 Linux 核心實作課程，參與 RISC-V 系統模擬器相關專案。

Nowadays security incident is increasing more and more. Then lots of vendor/community/institute are making efforts to find vulnerability on software. Not only commercial software, but also OSS is having vulnerability (remember Log4Shell, Dirty Pipe and so on). Then lots of security researchers are reporting vulnerability an d publish it with CVE-ids which is assigned by MITRE. In this session, Kazuki Omo will report recently trends of OSS CVE in 2022-2023. Also show some typical vulnerability PoC and pich up several example for exploite d vulnerability in 2022-2023 incident. And tell how you can catch up those news immediatelly and protect those vulnerability by using OSS product/solution.

講者

Kazuki Omo

Over 20 years experience in Unix/Linux/Windows system and many of Security related product. Working for OSS community over 17 years. Nowadays, Trainer for Threat intelligence, and speaks at lots of public seminar/session.

• Trainer for Threat Intelligence since 2020.
• Published SELinux and related security articles from 2004-2022.
• Maintainer of "LIDS(Linux Intrusion Detection System)".
• Published "Linux Security textbook" from LPI-Japan.
• Presentation on openSUSE.Asia Summit 2016 "openSUSE Security with OpenSCAP standard"
• Presentation on LinuxWorld C&D 2004 Japan "KB1-4 Keynote:Explanation about SELinux"
• Presentation on OSC 2007 TOKYO Japan "How to to daily operate for SELinux"

淺談Kubernetes Controller與CRD的一些設計思考思路，並且使用一個簡單設計的Network Controller來做為範例

講者

黃宇強 Date Huang

Date Huang is the maintainer of DozenCloud Project, ARM64 VPS Project, and EZIO Project, bare-metal server massive deployment solution.

Speaking Experience: OpenStack Day Taiwan 2016-2017, Open Source Summit North America 2017, ISC High Performance Project Poster 2018, Hong Kong Open Source Conference 2019, OSC Tokyo 2019, COScon '19, TWNOG 4.0, COSCUP 2021

作為一個系統軟體開發者常常需要在茫茫大海中找臭蟲(BUG)，需要快速閱讀大量讀程式碼，所以我們需要一個可以幫助我們的IDE，往往正確的配置IDE也是非常重要，因此這邊我會分享如何配置VScode讓他能很好的幫助我們。對於找臭蟲(BUG)與GDB的關係，這主題總是有講不完的經驗 ，使用GDB就像有上限很高的武器可是不會用的話，還是只能把它放旁邊。還有這神兵利器竟然是開源免費軟體比起商業軟體txxxx32更顯高CP工程師的價值。這次會分享如何撰寫GDB python script跟如何讓它幫助我們找到kernel 的臭蟲。這個議程會實例分享如何運用VScode及GDB幫我們找到riscv kernel BUG跟追蹤kernel 行為，聽完後會覺得GDB比printk方便節省加班時間。

講者

wayling

打雜工程師

Almost every system has BIOS firmware. Be it an individual box or enterprise-grade workload Servers. What is the need to change it? current BIOS is the result of so many innovative cycles. so just because it is proprietary firmware and we believe in OpenSource we should change it? In this talk, I will discuss How Firmware changed from time to time? Every time the driver and rationale in the Firmware growth path with the history of the Firmware? The Pace of Firmware improvement is not the same as it was sometimes back! Is it only Cloud or cyber security which has increased multi-variant releases in firmware? Like normal software, can we go for tailored firmware that can really make a direct difference for any business use case? Firmware capabilities should be scoped closely limited to booting the device only or a tailored firmware can aggregate the innovation and can help to solve many problems normal software is struggling with? This talk will have content on Libreboot firmware in terms of a tough journey and great acknowledgment for BIOS replacement.

講者

Preet Sharma

Preet is a Solution Architect at NCS-Singapore with 15 years of rich experience in Solutioning, Transformation, and Digitization. Preet has witnessed a revolutionary journey of technologies from dBase to SQL/NoSQL/GraphDB, from Pascal to Python, Onprem to Cloud, waterfall to agile along with multiple Business domain knowledge.

He is always keen to learn and conceptualize new things for better customer experience management. He is a customer-obsessed and collaboration believer.

In this talk, we will be discussing the importance of securing your Kubernetes cluster and how you can do it using the powerful tool, "m9sweeper." As the adoption of Kubernetes continues to grow, it has become more critical to prioritize the security of your cluster.

"M9sweeper" is an open-source security tool that is designed to detect and identify vulnerabilities and misconfigurations in your Kubernetes deployment. It offers a comprehensive set of checks that cover a broad range of security aspects, including network policies, access control, encryption, and pod security.

It has the potential of centralized monitoring of popular Kubernetes security tools Trivy, Gatekeeper, KubeSec, Kube-Hunter, Kube-bench, and Falco.

講者

Koteswara Rao Vellanki

I'm an experienced DevOps Engineer at UST with over 4 years of experience in the IT industry. Prior to joining UST, I worked with HCL Technologies and Agathsya Technologies. I completed my Master's degree in Computer Applications from Acharya Nagarjuna University, where I graduated with distinction. I have reasonable knowledge and expertise in DevOps tools, including containerization and orchestration technologies, and has a passion for solving complex problems to optimize business outcomes. I'm highly motivated, a quick learner, and always willing to go above and beyond to ensure successful project delivery.

Thread Local Storage, aka TLS, is a feature embedded in various programming language, such as C, C++ and Rust, that frees the programmer from the arduous management of shared variable. One of the TLS-powered feature that undergirds your daily Linux-based developement is "errno", a variable that helps you fathom the problem underneath the operating system.

We will talk about the mechanics of TLS and how does llvm support it. We will analyze the IR lowering strategy adopted by the M68k backends and examine how to further optimize the strategy.

講者

陳聖諺

TBD

使用者往往在使用自己的硬體時並不知道firmware 與hardware是在不安全的設定下執行，例如secure boot disabled 與 firmware 沒有更新到已安全性修復版本。或在一些需要更高security level 的場合，但卻無法立即檢查security level，因此需要一種自動化的方法來評估系統的安全性。fwupd 是用來自動更新系統上的firmware，包括了BIOS, ME, 以及各式周邊的firmware。fwupd 並有能力搜集所有firmware 的版本與系統的設定，在執行期間並可以使用這些資訊來評估系統firmware與hardware 的安全性。fwupd Host Security ID (HSI) 定義了Host security level，並使用一個簡單的數字告訴使用者platform 的安全程度。這個ID是由fwupd 社群所定義的條件來決定。同時在GNOME control panel 的 “Device Security” panel 中也可以輕鬆的取得。讓使用者可以更容易的了解系統的暴險程度。

講者

Kate Hsuan

目前主要貢獻上游軟體開發，包括了 Linux Kernel, fwupd, libcamera, GNOME以及Fedora。Kate也一直使用及貢獻開源軟體，在QCT時負責ONAP (Open Network Automation Platform) 電信產業專用開源專案，並與國外電信公司一起開發與貢獻 ONAP DCAE Datalake專案。在Hopebay Technologies 時利用Ceph 開發出Scalable Software Defined Storage，也長期關注OpenStack發展，並使用它開發和沛公有雲系統。

深入介紹開源專案Atmosphere 一套我們(Vexxhost)部屬在跨國公有雲與數十個私有雲的部屬方案 並分享為什麼我們需要開發這套部屬工具以及對我們目前使用狀況進行分析 也會展示demo務求讓各位看個仔細仔細再仔細

講者

Rico Lin

Cloud OpenStack Engineer @ Vexxhost

Vortex is an open source Hardware and Software project to support GPGPU based on RISC-V ISA extensions. Currently Vortex supports OpenCL/CUDA and it runs on FPGA. The vortex platform is highly customizable and scalable with a complete open source compiler, driver and runtime software stack to enable research in GPU architectures/compiler/run-time systems.

講者

Blaise Tine

Blaise Tine is a Professor in Computer Science Department at University of California, Los Angeles. He is a recent PhD Student graduate in the school of Computer Science at Georgia Institute of Technology, where he has lead the Vortex project. His research interests are in the area of hardware accelerators and software co-design, focusing in the architecture design, programming languages and compiler tools to support heterogenous computing. He is also interested in domain-specific applications of accelerators such as 3D graphics, graphs analytics, and machine learning.

BMC

講者

Christian Walter

None

This presentation provides an overview of perf, a performance analysis tool for Linux kernel and user program. We will explore how RISC-V ISA and SBI extensions support hardware event profiling.

The target audience includes Linux kernel developers and those interested in RISC-V architecture.

講者

林宇謙

RISC-V system software engineer

Golang is widely used in cloud-native and distributed systems. To keep the observability of the system, distributed tracing is a key technology. Previously, vendors and open-source communities always recommended using SDK to instrument codes, meaning, the developers have to change codes. In this session, we are going to introduce, for the first time, a complete auto instrumentation go agent solution built out-of-box by Apache SkyWalking.

講者

吴晟

A searcher, evangelist, and developer in the observability, distributed tracing, and APM. I was a board director and member of the Apache Software Foundation in 2021, as the first Chinese in the Apache board. Love open source software and culture. Created the Apache SkyWalking project and being its VP and PMC member. Co-founder and PMC member of Apache ShardingSphere. Microsoft/Alibaba Cloud/Tencent Cloud MVP. AWS Hero As a founding engineer at Tetrate, lead the observability for service mesh and hybrid cloud.

講者

刘晗

刘晗，Tetrate工程师，SkyWalking PMC成员，SkyWalking eBPF探针，SkyWalking Go Agent核心贡献者 曾就职于滴滴负责全链路压测部门，拉勾负责教育业务线

本次分享機會探討如何以 Grafana 以及其生態系下的各開源專案如 mimir, loki, tempo, promtail, agent 等打造一個兼容 metrics/logging/tracing 三面向的監控平台。 此外也會分享其架構並且與常見的解決方案，如 Prometheus, Jaeger, Opentelemetry, ELK 等進行比較來理解使用 Grafana 全家餐的好處

講者

HungWei Chiu

HungWei is a co-founder of SDNDS-TW and CNTUG, two local communities in Taiwan. SDNDS-TW specializes in SDN and networking topics, while CNTUG focuses on Cloud Native approaches. Additionally, HungWei is dedicated to sharing his knowledge and experience through blog posts and speaking engagements at various conferences and meetups. Some of the events he has participated in include COSCUP 2022, COSCUP 2018 x openSUSE, Asia GNOME.Asia, Open Source Networking Days Taiwan, and GDG DevFest Taipei 2018.

CUDA is the dominant language for parallel programming on GPU architecture, though other GPU programming languages, such as OpenCL and OpenMP exist. However, its use has been largely limited to NVIDIA devices, leading to recent efforts to enable its use on other platforms, such as CPUs and AMD/Intel GPUs. We aim to extend the reach of CUDA to RISC-V systems.

講者

Hyesoon Kim

Hyesoon Kim is professor in the School of Computer Science at the Georgia Institute of Technology and a co-director of center for novel computing hierarchy. Her research areas include the intersection of computer architectures and compilers, with an emphasis on heterogeneous architectures, such as GPUs and near-data-processing. She is a recipient of NSF Career award and is a member of Micro Hall of Fame. She is the chair of IEEE TCuARCH. Her research has been recognized with a best paper award at PACT 2015. She is an associate editor of Transactions on Architecture and Code Optimization and IEEE-CAL.

• 為何選擇 Rust 作為後端語言？
• 一個前端工程師從 JavaScript 的角度學習 Rust
• 深入 Tide 框架
• 如何使用 Tide 框架建立 CRUD 的 REST API

講者

朱章祺

滑板愛好者，軟體工程師，貓奴一枚。

過去幾年，曾因為疫情引起的晶片短缺，導致業者無法生產產品，進而影響到全球工業、車業，甚至是資訊業…等。近期，也因為許多國家的政策考量，需要特別檢視產品的來源。因此，能夠快速變更合適的料件來做開發應用，以提高產品、服務供給端的韌性，是一個重要技能。本次，將分想曾經使用過的晶片(架構)，列出相對應的 toolchain、debug tool 與相關開發經驗。

將說明如何使用 open source toolchain 和 debug tool 進行開發、除錯，並把程式燒錄到 ARM Cortex-M 開發板上。同樣的過程，也可套用到其他晶片的開發板，將實際舉例 ARM Cortex-A 與 RISC-V 32 & 64 Bits 的產品。此外，也會分享送 patch 到 debug tool upstream 的相關互動經驗。

講者

Jian-Hong Pan (StarNight)

A software engineer.

介紹如何從 需求搜集 到 變成程式碼 的一系列方法論的應用

講者

River

Backend Dept. Lead in XRSPACE inc. DDDTW member 喜歡研究並實踐軟體開發流程

Longhorn is a distributed block storage system that has been purpose-built for Kubernetes, making it an ideal cloud-native solution. As an incubating project of the Cloud Native Computing Foundation (CNCF), its main goal is to provide persistent and highly available storage for stateful workloads. In this presentation, we will be exploring Longhorn's architecture and specifically, the data path. Despite offering a wealth of features, such as snapshots, backups, and recurring jobs, there is still room for improvement in the data plane's performance. To address this, a data engine is integrated with Storage Performance Development Kit (SPDK) in the upcoming release, which improves the I/O data path, resulting in better latency and throughput. Additionally, we will introduce the Userspace Block Device Driver (ublk) as a frontend to enhance performance and reduce latency. This feature is particularly useful for edge devices that use legacy data engines.

講者

Jing-Wei Su

Jing-Wei Su is a Staff Software Engineer at SUSE from the end of 2021. He is interested in storage technology. He is currently working on the CNCF Longhorn project.

Rust is a great language for fast and secure code. Databases like MariaDB are great for fetching data. Lets go through a working example on how to use existing crates to make some fast and secure SQL functions implemented in Rust.

講者

Daniel Black

Daniel is a MariaDB all rounder. He started doing as a DBA, and then starting fixing the bugs. On the journey to continue these multi-perspectives of the same product, he found a niche at the MariaDB Foundation as their Chief Innovation Officer. There he continues to drive improvements in the code, the user usage, and the ecosystem in-between.

分享在coreboot 開發chromebook的經驗

講者

Eric Lai

Chromebook developer

你有踩進 apache 設定檔的坑浪費了好幾個小時，卻還是沒辦法有效設定反向代理伺服器的經驗嗎？或是你有被 zerotier 的裝置上限阻礙你發展你的 IoT 網絡嗎？作為一個以興趣驅動的網頁開發者，我便把在工作時遇到的各種常見的技術問題和需求整合成一套簡單易懂的開源系統 - Zoraxy。讓只有基本網絡知識的使用者都能夠輕易設定自己的 homelab 集群~

講者

tobychui

在台讀碩的香港人，現為成大資工所研究生。 研究以外是一名創客和開源開發者，主要使用 Go 語言和開發網頁相關技術。 個人主頁：https://imuslab.com/ Github：https://github.com/tobychui

Development of open source silicon platforms applicable to difficult real world use cases, much as Linux has become in the operating system space, quickly run into difficulty. A CPU ISA or small system on chip is only one part of a platform. The diverse and complex interfaces, signal processing, and compute tasks such a platform is called upon to provide mean a system approach is necessary.

We outline our experience building the J-Core platform, and how scratching our own itches lead to counter intuitive design decisions. Designed from the ground up to cover mixed signal processing in systems with complex and secure edge computing tasks, we also needed portability to multiple FPGA families, low cost silicon processes, and scalability for performance on advanced process nodes.

J-core is a completely open source platform, from the transistors through the OS and end user applications. Designed in the context of real world product development and deployments, the resulting platform is unique in the open hardware space.

講者

D. Jeff Dionne

Jeff is the original author of the uClinux kernel and OS. He has been designing and building open embedded systems with linux since the 1990s.

As the cloud native movement gains momentum, it becomes increasingly important to understand complex technical terms, concepts, and technologies. The CNCF Cloud Native Glossary (glossary.cncf.io) aims to define cloud native concepts in clear and simple language, making them accessible to everyone. In this session, Seokho Son, one of the maintainers of the Cloud Native Glossary and a CNCF Ambassador, will introduce the project and demonstrate how it can be a valuable resource for understanding cloud native terminology. You can use the Glossary to grasp complex terms and make your first contribution to the CNCF and the Cloud Native community. The community eagerly awaits your contributions! Join this session to learn how to utilize and contribute to the Cloud Native Glossary.

講者

Seokho Son

Seokho Son is a CNCF Ambassador and senior researcher & open source special fellow at the Electronics and Telecommunications Research Institute (ETRI), a national research institute in South Korea. His primary responsibilities include designing systems and devising algorithms for cloud and cloud-native computing to accomplish national research projects. He is one of the maintainers of the CNCF Cloud Native Glossary which aims to define cloud native concepts in clear and simple language, and he is contributing to Kubernetes by leading the Korean localization team in Kubernetes SIG-Docs and maintaining localization in Kubernetes/website. Furthermore, he is one of the maintainers of Cloud-Barista, a multi-cloud management platform. As an open source advocate, Seokho has served as a speaker at various cloud native events, including Cloud Native Community Groups and Kubernetes Forum in South Korea, and he is actively involved in mentoring open source contribution programs in South Korea.

Container image pulling is a critical component of modern application development and deployment workflows, but it can be slow and resource-intensive, particularly when pulling large images. Research shows the time to pull container image take 76% of the container startup time. This proposal explores the use of InterPlanetary File System (IPFS) cache and eStargz lazy pulling to improve the speed and efficiency of container image pulling.

講者

JenTing

A passionate and exquisite software developer in the backend, Kubernetes, and cloud-native projects.

Generated By ChatGPT

您好，「深入淺出 Go AST，動手做自己的 Linter」是一個很有趣也很有挑戰性的演講題目。在介紹此主題之前，讓我先簡單說明什麼是 Linter。

Linter 是一種程式碼分析工具，用於檢查程式碼中的錯誤、不良實踐和潛在的錯誤。這種工具在軟體開發中非常重要，因為它可以幫助開發人員更容易地發現和修正程式碼中的問題。在現代軟體開發中，Linter 已經成為一個不可或缺的工具。

然而，由於每個軟體項目都有其獨特的需求和細節，現有的 Linter 並不能解決所有的問題。這就是為什麼開發人員可能需要自己動手做 Linter 的原因之一。

而此演講主題「深入淺出 Go AST，動手做自己的 Linter」，是在介紹如何使用 Go 語言的 AST（抽象語法樹）來構建自己的 Linter。透過這個演講，您可以學習如何從頭開始建立一個 Linter，並了解如何使用 Go 語言中 AST 的各種特性。

總的來說，這個演講主題旨在教授開發人員如何利用現有的工具和資源，建立自己的 Linter，以解決他們在開發過程中所遇到的問題。相信透過這個演講，您將能夠更深入地了解 Linter 的重要性，以及如何運用 AST 建立自己的 Linter。

講者

YCKao

二度回鍋 Dcard 的 SRE，從 Intern 到 Sr.SRE 跟著 Dcard 團隊一起成長的工程師。 在 Node.js 0.x 版開始接觸後端，這幾年很喜歡 Go。

RISC-V 平台開機過程的簡介， 簡介過程使用到的軟體專案 (U-Boot, OpenSBI, Linux) ， 以及這些軟體專案所扮演的角色。

講者

梁育齊

晶心科技軟體工程師

We are Boledu Foundation. Our missions are (1) Target and Extend the Google Open Source Silicon program and (2) to Design hands-on lab materials for training, (3) Promote IC education. For the Caravel Harness, We have developed a Caravel FPGA validation platform. In addition, we also develop a software debugging framework which includes GDBWave, and a Riscv-Tracer to facilitate the verification process. The GDBWave parses the waveform after RTL simulation to manipulate GDB debugging with VexRiscv CPU. The Riscv-Tracer helps to translate waveform display to Riscv instructions representation. The Caravel FPGA validation system enables users quickly prototype their user project design on the Xilinx PYNQ board. In addition, the FPGA design and hardware bitstream can be developed using the Vitis tool free from Xilinx, Then be validated on Boledu online PYNQ board with Jupyter Python3 testbench.

講者

Jiin Lai

We are Boledu Foundation. Our missions are (1) Target and Extend the Google Open Source Silicon program and (2) to Design hands-on lab materials for training. (3) Promote IC education Boledu funder, Jiin Lai is the Chief Technology Officer of VIA Electronics. He has over 30 years of experience in the PC industry and the past 12 years in the storage space. Earlier in his career, he was a software engineer developing EDA tools. He later co-founded VIA Electronics. He led the engineering team that developed Intel and AMD compatible chipsets and x86 compatible processor. For the past decade, he developed SSD controllers and later shifted his focus to developing distributed computing storage systems. His responsibilities include product and architecture development with an eye toward future computing architecture needs. Has more than 50 US patents. Since 2020, he has taught "Applied Acceleration and Advanced Synthesis" courses at NTU, NTHU and NYCU. He also founded the Life Bridge Educational Foundation to promote technology education in schools.

The need for efficient and scalable data management and messaging protocols in distributed systems and IoT applications has become increasingly important in recent years. Zenoh is a new open-source protocol that addresses these issues by providing a lightweight, efficient, and scalable solution. It takes a data-centric approach to communication, which focuses on the data itself rather than the location or identity of the devices producing or consuming the data.

Moreover, Zenoh is built on Rust, a systems programming language known for its high performance, security, and reliability. Rust's unique features make Zenoh a fast and robust solution for managing and processing data in distributed systems and IoT applications.

In this talk, we will explore the architecture and features of Zenoh and discuss real-world use cases.

講者

Yuyuan Yuan

Rust enthusiast who likes to study language design and its applications in various domains. I am currently working on Eclipse Zenoh as a ZettaScale Taipei Team member.

No one wants to be responsible for breaking the build. But what can you do as a developer to avoid being the bad guy? How can project leads enable their teams to reduce the occurrence of broken builds? In talking within our own teams, we discovered that many developers weren’t running sufficient integration and End to End tests in their local environments because it’s too difficult to set up and administer test environments in an efficient way. That’s why we decided to rethink our entire local testing process in hopes of cutting down on the headaches and valuable time wasted. Enter Kuttl. Connecting Kuttl to CI builds has empowered our developers to easily configure a development environment locally that accurately matches the final test environment — without needing to become an expert CI admin themselves. These days, we hear, “Who broke the build?” far less often — and you can too!

講者

Ram Mohan Rao Chukka

Ram is a Senior Software Engineer at JFrog. Around 14 years of work experience and Previously worked for startup companies like CallidusCloud (SAP Company), Konylabs. Strong believer of open source software can change world and which helps to solve real world problems

At JFrog, I maintain open source helm charts and Ansible collections at Github .

Loves Automation, Linux, openSource

隨著微服務架構的不斷發展，Protocol Buffers v3 作為針對定義溝通介面的解決方案獲得了不少軟體產業的青睞，講者自己也在現職公司中充分享受到它帶來的生產力提升。

講者期望透過此次演講做個簡單的 Protocol Buffers v3 入門介紹，並從軟體產品開發的角度來討論他在開發中的合適使用情境。

講者

Rain

目前在 Netskope 擔任 Senior Software Engineer，心血來潮時會用 Python 和 Go 為自己喜歡的開源工具貢獻微薄之力（但不一定會被接受），同時也是名桌遊愛好者。

This presentation will provide a brief update on what is Universal Payload Design (UPL), and most importantly the journey there: as the UPL is a cross-projects Firmware Industrial Standard for the first time ever, where Silicon vendors and firmware communities (EDK2, coreboot, U-Boot, LinuxBoot, Slim Bootloader) come together to work on common open specification. We will share the technical part of what UPL is, and the impacts it will bring to open source firmware industry. Then we will share the 1 year journey of how this came together and many roadblocks faced, it would be a valuable sharing for open system firmware community.

講者

Lean Sheng Tan

Firmware developer from 9elements. Love electronic instrumental music & frisbee.

講者

Gua Guo

:)

我們打造了 RSA256 這個專案，展示一套開發硬體時的標準流程，依序開發 C model 、SystemC model、再到 verilog module，並開發 Verilator 驗證框架，使每個階段間都能夠交互驗證，加速硬體開發的平行化與正確性。

講者

yodalee

大學修了電路可是出社會之後都在軟體公司寫軟體，最近換公司碰到許久沒碰的硬體，只覺得硬體好難，跟大學一樣都靠同學罩我 QAQ

講者

林裕盛

TODO...

Open source communities are at the heart of an explosion of technical innovation, where industry leaders, engineers, and end users are collectively creating and improving the digital infrastructure on which the global economy depends. With an extensive community of members, connections with thousands of companies, and hundreds of thousands of open source contributors, the Linux Foundation is in a unique position to research open source collaboration and provide insights into emerging technology trends, best practices, and global impact of open source projects. In this session, Cailean Osborne, a Researcher at the Linux Foundation, will provide an overview of the Linux Foundation's latest research and discuss the "World of Open Source: 2023 Global Spotlight" survey, an ongoing research project that aims to better understand open source trends across world regions.

講者

Cailean Osborne

Cailean Osborne is a PhD Candidate in Social Data Science at the University of Oxford and a Researcher at the Linux Foundation. His research interests concern the political economy of open source software and the digital commons at large. At the Linux Foundation, Cailean supports LF Research with research projects on open source software trends. Previously, Cailean was the International Policy Lead at the UK Government’s Centre for Data Ethics & Innovation.

DevOps 是「開發」(Dev) 與「維運」(Ops) 的混合詞，是一種加速軟體開發和部署的技術。Hackathon 是「黑客」(Hack) 與「馬拉松」(Marathon) 的組合詞，是一個以馬拉松形式開發軟硬體的活動。在本議程中，講者將分享過去參加 Hackathon 比賽的經驗，講述如何在短時間內透過 Kubernetes 將 DevOps 融入到馬拉松式的開發流程中。

講者

YiHong Lin (uccu)

熱愛 DevOps 技術與 Hackathon 文化的碩士生

經過 Mozilla 裁員後的 Servo 到了 2023 年變得如何了呢？

講者

吳昱緯

One of rust.tw maintainers. Core member of Tauri.

This talk covers integration patterns of WebAssembly through backend software, like CLIs and side cars. It shows how to embed WebAssembly into Go applications, and what to watch out for when programming. When we’re done, you’ll have a good sense of how WebAssembly fits into what you’re working on.

講者

Adrian Cole

Adrian is an engineer working at Tetrate on Open Source projects. He’s been a routine contributor to open source for over a dozen years. Lately, he spends most of his time on wazero: the zero dependency WebAssembly runtime for Go developers. His past notable project work includes Zipkin, OpenFeign, and Apache jclouds.

Go 1.18 brought Generics. When we heard this official announcement initially, we thought we could finally write Go programs quickly and run them efficiently. But after one year, the characteristics of Generics suffer us in many ways. It doesn't become Swiss knife as we think. So I will share some experiences of using Generics, point out what is going on in the design of Generics, show how to use Generics well, and when to apply Generics.

講者

Hsueh-Tsung Kuo

• A programmer from game company in Taiwan.
• Backend (and temporary frontend) engineer.
• Usually develop something related to my work in Python, Ruby, ECMAScript, Golang, C#.
• Built CDN-aware game asset update system.
• Business large passenger vehicle driver.
• Care about chaotic traffic in Taiwan.
• Draw cute anime character in spare time.

-

講者

COSCUP Team

We are some random volunteers to make all these happen with YOU♥️ Join us: volunteer@coscup.org / https://volunteer.coscup.org/