231 oSAS23 2023-10-21 2023-10-22 2 00:15 2023-10-21T09:30:00+08:00 09:30 00:30 A112 Short Talk 4331-opening-session Main Track Opening talk Opening talk false Yang Peng 2023-10-21T10:15:00+08:00 10:15 00:15 A112 Lighting Talk [Virtual] 4238-opensuse-including-leap-tumbleweed-open-build-services-openqa-yast A use case of Patricia-tree: MIB retrieving Main Track In SuSE* Linux, MIB files are located in /usr/share/snmp/mibs. User can install MIB by zipper install snmp-mibs-x.x.x.x. In Data Center, OS running in server must quickly interpret trap information from BMC, and must reply any request from outside world for MIB. **Patricia tree** developed from a compressed binary trie is one of the famous longest search algorithm. For example, it has been popularly deployed in core router for IPv6 table searching. Each element node has a bit-number, either 0 or 1, to let search algorithm decide which target bit should be compared. If the compared bit value is 0, it then goes to left child, otherwise, it continuously goes to right sibling. Unlike Binary trie, those unused element nodes can be eliminated in Patricia Tree. This is why we insist Patricia tree can save memory resources for MIB parsing in the system initial phase. Nevertheless, all search algorithms of Binary trie, actually it is a binary tree internally, are still highly adaptive for Patricia. **My solution** 1.Scramble each object id to ASCII code, and concaternate all of object id together to create a bit string. 2.Build a normal binary tree 3.Eliminate degree one nodes 4.Calculate decision bit number for each node 5.replace/combine empty node with value node NODE *patricia_get(char oid, NODE *cur, NODE *parent) { while(TRUE) db = (oid >> (OID_BIT_NUM - cur->db)) & 0x01; if (cur->db > parent->db) parent = cur; if (db is equal to 0) cur = cur->left; else cur = cur->right; else break; return cur; } In SuSE* Linux, MIB files are located in /usr/share/snmp/mibs. User can install MIB by zipper install snmp-mibs-x.x.x.x. In Data Center, OS running in server must quickly interpret trap information from BMC, and must reply any request from outside world for MIB. **Patricia tree** developed from a compressed binary trie is one of the famous longest search algorithm. For example, it has been popularly deployed in core router for IPv6 table searching. Each element node has a bit-number, either 0 or 1, to let search algorithm decide which target bit should be compared. If the compared bit value is 0, it then goes to left child, otherwise, it continuously goes to right sibling. Unlike Binary trie, those unused element nodes can be eliminated in Patricia Tree. This is why we insist Patricia tree can save memory resources for MIB parsing in the system initial phase. Nevertheless, all search algorithms of Binary trie, actually it is a binary tree internally, are still highly adaptive for Patricia. **My solution** 1.Scramble each object id to ASCII code, and concaternate all of object id together to create a bit string. 2.Build a normal binary tree 3.Eliminate degree one nodes 4.Calculate decision bit number for each node 5.replace/combine empty node with value node NODE *patricia_get(char oid, NODE *cur, NODE *parent) { while(TRUE) db = (oid >> (OID_BIT_NUM - cur->db)) & 0x01; if (cur->db > parent->db) parent = cur; if (db is equal to 0) cur = cur->left; else cur = cur->right; else break; return cur; } false dtseng 2023-10-21T10:30:00+08:00 10:30 00:30 A112 Short Talk 4313-managing-indonesia-opensuse-community-mirror-infrastructure Do we still need a mirror? Main Track Mirror is one of the key success of distributing openSUSE to the user. Availability of the mirror play an important role in the life cycle of a distribution. Indonesia has quite a number of openSUSE users and installations. Before the Indonesia community had its own mirror, usually iso download and update traffic would be directed to Singapore, Taiwan or Japan. Since May 22 2018 the Community has its own opensuse mirror (https://repo.opensuse.id), and start on November 29 2019 we also manage our own tumbleweed mirror (https://twrepo.opensuse.id). Both of mirror are located in Jakarta Indonesia, in two separated building. Currently, average visitor of repo.opensuse.id is 811 visitors/day and 207,000 hits/day with around 4TB Tx data monthly, and average visitor of twrepo.opensuse.id is 608 visitors/day and 150,000 hits/day with around 5.5TB Tx data monthly. We use openSUSE Leap, rsync and nginx for our mirrors. repo.opensuse.id curently keep around 1.7TB repository data, using 4CPU and 16GB of RAM. twrepo.opensuse.id hold around 1.3TB repository data, using 4 CPU and 8GB of RAM. With the introduction of CDN in openSUSE, how does this affect the usage of repos? We will see what happen in the future :-) Mirror is one of the key success of distributing openSUSE to the user. Availability of the mirror play an important role in the life cycle of a distribution. Indonesia has quite a number of openSUSE users and installations. Before the Indonesia community had its own mirror, usually iso download and update traffic would be directed to Singapore, Taiwan or Japan. Since May 22 2018 the Community has its own opensuse mirror (https://repo.opensuse.id), and start on November 29 2019 we also manage our own tumbleweed mirror (https://twrepo.opensuse.id). Both of mirror are located in Jakarta Indonesia, in two separated building. Currently, average visitor of repo.opensuse.id is 811 visitors/day and 207,000 hits/day with around 4TB Tx data monthly, and average visitor of twrepo.opensuse.id is 608 visitors/day and 150,000 hits/day with around 5.5TB Tx data monthly. We use openSUSE Leap, rsync and nginx for our mirrors. repo.opensuse.id curently keep around 1.7TB repository data, using 4CPU and 16GB of RAM. twrepo.opensuse.id hold around 1.3TB repository data, using 4 CPU and 8GB of RAM. With the introduction of CDN in openSUSE, how does this affect the usage of repos? We will see what happen in the future :-) false M. Edwin Zakaria 2023-10-21T11:00:00+08:00 11:00 00:30 A112 Short Talk [Virtual] 4325-running-your-home-nextcloud-aio-and-ad-free-browsing-with-leap-micro Main Track Leap Micro is not your typical distribution but rather a small low maintenance HostOS, that uses automatic transactional-updates and can be fully managed out of the box from a web browser. I'd like to share with you how I use it with a Raspberry PI at home and deployment of for example Pi-hole for ad-free browsing at home or NextCloud AIO. Deployment of Leap Micro via self-install wizard can be done under two minutes. Leap Micro is not your typical distribution but rather a small low maintenance HostOS, that uses automatic transactional-updates and can be fully managed out of the box from a web browser. I'd like to share with you how I use it with a Raspberry PI at home and deployment of for example Pi-hole for ad-free browsing at home or NextCloud AIO. Deployment of Leap Micro via self-install wizard can be done under two minutes. false Lubos Kocman 2023-10-21T11:45:00+08:00 11:45 00:30 A112 Short Talk 4304-efficient-open-source (Personal Perspective) Main Track This speech targets students, teachers, and staff members who have recently been exposed to open source. The speech offers step-by-step guidance on how to embark on the journey of open source, starting from a person who is unfamiliar but interested in open source, gradually getting involved and embracing open source, transitioning from "toy projects" to community projects, discovering one's own path in the community, and eventually having the potential to become a significant open source pioneer. This speech targets students, teachers, and staff members who have recently been exposed to open source. The speech offers step-by-step guidance on how to embark on the journey of open source, starting from a person who is unfamiliar but interested in open source, gradually getting involved and embracing open source, transitioning from "toy projects" to community projects, discovering one's own path in the community, and eventually having the potential to become a significant open source pioneer. false xingyu.wang 2023-10-21T13:30:00+08:00 13:30 00:30 A112 Short Talk 4277-a-journey-to-resolve-the-xdg-autostart-generator-issue Main Track After updating KDE Plasma 5.25, several applications do not start automatically when a user login a desktop session on both openSUSE Tumbleweed and Leap 15.5. This issue affects input methods such as IBus and Fcitx, which are essential for us. The cause of this problem is the systemd-xdg-autostart-generator. systemd-xdg-autostart-generator is a new mechanism to launch applications listed in autostart directories (e.g., /etc/xdg/autostart) at session startup. Instead of a desktop environment, systemd launches those applications as user services. Plasma adopted and started to use this mechanism by default since version 5.25. However, due to the following problems, systemd-xdg-autostart-generator cannot start desktop files derived from a former version of openSUSE. 1. systemd-xdg-autostart-generator inappropriately ignores desktop files with X-GNOME-Autostart-Phase key 2. systemd-xdg-autostart-generator kills daemonized applications In this talk, I will explain the following topics: * A basic concept of Systemd user service and Systemd generator * Technical details of those bugs of systemd-xdg-autostart-generator * A root cause of Bug 2 and how state transition of a systemd service happens inside Systemd. * A story until this problem is fixed in Leap 15.5 After updating KDE Plasma 5.25, several applications do not start automatically when a user login a desktop session on both openSUSE Tumbleweed and Leap 15.5. This issue affects input methods such as IBus and Fcitx, which are essential for us. The cause of this problem is the systemd-xdg-autostart-generator. systemd-xdg-autostart-generator is a new mechanism to launch applications listed in autostart directories (e.g., /etc/xdg/autostart) at session startup. Instead of a desktop environment, systemd launches those applications as user services. Plasma adopted and started to use this mechanism by default since version 5.25. However, due to the following problems, systemd-xdg-autostart-generator cannot start desktop files derived from a former version of openSUSE. 1. systemd-xdg-autostart-generator inappropriately ignores desktop files with X-GNOME-Autostart-Phase key 2. systemd-xdg-autostart-generator kills daemonized applications In this talk, I will explain the following topics: * A basic concept of Systemd user service and Systemd generator * Technical details of those bugs of systemd-xdg-autostart-generator * A root cause of Bug 2 and how state transition of a systemd service happens inside Systemd. * A story until this problem is fixed in Leap 15.5 false Fuminobu Takeyama 2023-10-21T14:00:00+08:00 14:00 00:30 A112 Short Talk 4310-the-awesome-lf-reports good open source reports Main Track Linux Foundation is publishing many reports which report open source effective.I introduce some reports for example: _State-of-CD-Report_ This report research How DevOps enhance development and how enhanced DevOps itself.This report also reports best practice trends. _Edge Native Applications Principles Whitepaper_ This report focuses on Edge Native. Now we usually use "cloud native" and we know what cloud native is. but we didn't use "Edge Native" despite it being major and important. sometimes we use it, but we didn't focus on Edge Native principles.This report compares Edge Native and Cloud Native. _Recommended Practices for Hosting and Managing Open Source Projects on GitHub_ This report shows many GitHub feature that helps open-source activity. _The Open Source Opportunity for Microgrids_ Microgrids are a keyword for electricity. Especially now we have climate change. open source has a very important role in Microgrids. This report explains not only how to use open source but also state in microgrids. and how open source is useful for microgrids. I helped to publish some Japanese ver such as reviews and replacement letters. so I read some documents.I hope this talk leads audience read these reports. Linux Foundation is publishing many reports which report open source effective.I introduce some reports for example: _State-of-CD-Report_ This report research How DevOps enhance development and how enhanced DevOps itself.This report also reports best practice trends. _Edge Native Applications Principles Whitepaper_ This report focuses on Edge Native. Now we usually use "cloud native" and we know what cloud native is. but we didn't use "Edge Native" despite it being major and important. sometimes we use it, but we didn't focus on Edge Native principles.This report compares Edge Native and Cloud Native. _Recommended Practices for Hosting and Managing Open Source Projects on GitHub_ This report shows many GitHub feature that helps open-source activity. _The Open Source Opportunity for Microgrids_ Microgrids are a keyword for electricity. Especially now we have climate change. open source has a very important role in Microgrids. This report explains not only how to use open source but also state in microgrids. and how open source is useful for microgrids. I helped to publish some Japanese ver such as reviews and replacement letters. so I read some documents.I hope this talk leads audience read these reports. false hashimotosyuta 2023-10-21T14:30:00+08:00 14:30 00:30 A112 Short Talk [Virtual] 4322-opensuse-leap-16-0 Main Track Let's talk about the current state and ongoing plans with openSUSE Leap 16.0 which is based on SUSE's Adaptable Linux Platform. Let's discuss options that we have on the table. This will be an updated variant since the oSC203 containing contributor survey results and further progress on the Leap 15.X successor. Let's talk about the current state and ongoing plans with openSUSE Leap 16.0 which is based on SUSE's Adaptable Linux Platform. Let's discuss options that we have on the table. This will be an updated variant since the oSC203 containing contributor survey results and further progress on the Leap 15.X successor. false Lubos Kocman 2023-10-21T15:00:00+08:00 15:00 00:30 A112 Short Talk 4241-designing-in-the-open Takeaways from struggling as a designer in a developer-first environment Main Track I'm Anushka, a past Outreachy intern with Fedora. When one of our blog prompts was "everybody struggles", I decided to pen down my struggles with being a designer in open source. During my time in college and professionally otherwise, I had never heard of designers pursuing a career in open source and felt that design didn't belong here. I still believe as a designer; it is intimidating to begin contributing to open-source. But, I also feel designers have the power to shift OSS from being developer-friendly to a user-friendly environment; the community just need a little push. Designing couldn’t be measured in 0s and 1s, as success isn’t determined by if a pull request was closed or merged. Through my talk, I want to start conversations around how open source can reward contributions in design. UX design is a mutually collaborative process where everybody feels related to any idea or implementation. Unlike merging pull requests, it is very hard for designers to get attribution for their work today. There is a huge opportunity waiting for us to make an impact by building designer-friendly OSS tools that are accessible and inclusive, and who knows, we might witness a change in this narrative. Right now, I only have a talk prepared- but with the right direction from the community, I'm open to adding some interactive bits as well so that we conclude with a solution to the problems I raise! I'm Anushka, a past Outreachy intern with Fedora. When one of our blog prompts was "everybody struggles", I decided to pen down my struggles with being a designer in open source. During my time in college and professionally otherwise, I had never heard of designers pursuing a career in open source and felt that design didn't belong here. I still believe as a designer; it is intimidating to begin contributing to open-source. But, I also feel designers have the power to shift OSS from being developer-friendly to a user-friendly environment; the community just need a little push. Designing couldn’t be measured in 0s and 1s, as success isn’t determined by if a pull request was closed or merged. Through my talk, I want to start conversations around how open source can reward contributions in design. UX design is a mutually collaborative process where everybody feels related to any idea or implementation. Unlike merging pull requests, it is very hard for designers to get attribution for their work today. There is a huge opportunity waiting for us to make an impact by building designer-friendly OSS tools that are accessible and inclusive, and who knows, we might witness a change in this narrative. Right now, I only have a talk prepared- but with the right direction from the community, I'm open to adding some interactive bits as well so that we conclude with a solution to the problems I raise! false Anushka Jain 2023-10-21T15:45:00+08:00 15:45 00:30 A112 Short Talk 4292-some-of-my-personal-experience-with-the-linux-and-open-source-software My own exprenice and thoughts about them Main Track How do I work together with the community together debugging the system-tray icon disappearance related to plasma-discover, apper and packagekit. Edit Kicad(electronic design tool) project file with text editor. The trouble caused by the BitLocker without following the KISS(Keep it simple, stupid) under Microsoft Windows. Some computational thinking I used during the creation of an SDR (software-defined radio) FM transmitter. My own thoughts of implementing the open source foundation organization structure and rules into an anime club. How do I work together with the community together debugging the system-tray icon disappearance related to plasma-discover, apper and packagekit. Edit Kicad(electronic design tool) project file with text editor. The trouble caused by the BitLocker without following the KISS(Keep it simple, stupid) under Microsoft Windows. Some computational thinking I used during the creation of an SDR (software-defined radio) FM transmitter. My own thoughts of implementing the open source foundation organization structure and rules into an anime club. false Benxi Yang 2023-10-21T16:15:00+08:00 16:15 00:30 A112 Short Talk 4259-alp-and-opensuse-the-future-of-leap Main Track This talk will look at ALP and what it means for the future of openSUSE's stable distro's. Firstly we will look at SUSE's current plans for ALP, then we will look at how the openSUSE community is currently using ALP to create its future stable Linux distributions. <I'll add more information here as it becomes available> This talk will look at ALP and what it means for the future of openSUSE's stable distro's. Firstly we will look at SUSE's current plans for ALP, then we will look at how the openSUSE community is currently using ALP to create its future stable Linux distributions. <I'll add more information here as it becomes available> false Simon Lees 2023-10-21T16:45:00+08:00 16:45 00:30 A112 Short Talk 4244-open-source-is-an-option-of-life Main Track My presentation is focusing on encouraging more people to get involved in open Source community and project. At the beginning of this topic, I will explain why open Source is an option of our life by sharing some stories, then we will analyse what blocks some people to join open Source community (e.g. Time, Technology, English, and so on) and think about if these factors really do matter. In the end, we will discuss how could we start as beginners. We would expect to see more new faces in open Source community in the future. My presentation is focusing on encouraging more people to get involved in open Source community and project. At the beginning of this topic, I will explain why open Source is an option of our life by sharing some stories, then we will analyse what blocks some people to join open Source community (e.g. Time, Technology, English, and so on) and think about if these factors really do matter. In the end, we will discuss how could we start as beginners. We would expect to see more new faces in open Source community in the future. false Sunny 2023-10-21T10:15:00+08:00 10:15 01:00 A108 Long Talk [Virtual] 4262-selinux-introduction Learn the basic steps of working with SELinux Main Track SUSE will move from AppArmor to SELinux. This means that openSUSE versions that reuse larger part of the SUSE codebase will likely also use SELinux. SELinux is an awesome security system, but is not easy to understand for beginners. This talk will explain the basic concepts and show you basic steps of working with SELinux. That hopefully will give you foundational knowledge that you can use to explore SELinux on your own SUSE will move from AppArmor to SELinux. This means that openSUSE versions that reuse larger part of the SUSE codebase will likely also use SELinux. SELinux is an awesome security system, but is not easy to understand for beginners. This talk will explain the basic concepts and show you basic steps of working with SELinux. That hopefully will give you foundational knowledge that you can use to explore SELinux on your own false Johannes Segitz 2023-10-21T11:15:00+08:00 11:15 00:30 A108 Short Talk 4253-a-simple-quick-introduction-to-packaging-for-opensuse Main Track This talk doesn't aim to teach you everything about packaging but mostly tries to expose you to the basics along with what is possible so that if you'd like to package something yourself you will have a starting point as a reference. This talk doesn't aim to teach you everything about packaging but mostly tries to expose you to the basics along with what is possible so that if you'd like to package something yourself you will have a starting point as a reference. false Simon Lees 2023-10-21T11:45:00+08:00 11:45 00:30 A108 Short Talk 4283-using-opensuse-in-the-public-cloud Main Track openSUSE is a project that serves to promote the use of free and open-source software. openSUSE is well known for its Linux distributions, mainly Tumbleweed, a tested rolling release, and Leap, a distribution with long-term support. MicroOS and Kubic are new transactional, self-contained distributions for use as desktop or container runtime. ( https://en.wikipedia.org/wiki/OpenSUSE ) Public Cloud services are delivered over the public Internet, and they may be offered as a paid subscription, or free of charge. Architecturally, there are few differences between public- and private-cloud services, but security concerns increase substantially when services (applications, storage, and other resources) are shared by multiple customers. In this talk - I will introduce What is Public Cloud ? GCP ( Google Cloud Platform ) / Azure (Microsoft Azure platform) / AWS( Amazon Web Services) ? How to start with Public Cloud ? Documents / Resources with Cloud Service. Introduce Public Cloud Service - Keyword / type Why should you use Public Cloud Service? ( time / price / autoscale / … ) Cloud CLI Tools with openSUSE / Cloud Shell Run openSUSE in the public cloud openSUSE is a project that serves to promote the use of free and open-source software. openSUSE is well known for its Linux distributions, mainly Tumbleweed, a tested rolling release, and Leap, a distribution with long-term support. MicroOS and Kubic are new transactional, self-contained distributions for use as desktop or container runtime. ( https://en.wikipedia.org/wiki/OpenSUSE ) Public Cloud services are delivered over the public Internet, and they may be offered as a paid subscription, or free of charge. Architecturally, there are few differences between public- and private-cloud services, but security concerns increase substantially when services (applications, storage, and other resources) are shared by multiple customers. In this talk - I will introduce What is Public Cloud ? GCP ( Google Cloud Platform ) / Azure (Microsoft Azure platform) / AWS( Amazon Web Services) ? How to start with Public Cloud ? Documents / Resources with Cloud Service. Introduce Public Cloud Service - Keyword / type Why should you use Public Cloud Service? ( time / price / autoscale / … ) Cloud CLI Tools with openSUSE / Cloud Shell Run openSUSE in the public cloud false Max Huang 2023-10-21T13:30:00+08:00 13:30 02:00 A108 Workshop 4256-packaging-workshop Main Track This aims to be an interactive session where we work on the basics of packaging, we will walk through updating and creating packages. If you have a package you need help creating, modifying or updating time permitting we can look at those as well. Also if you have anything specific you'd like to look at feel free to email me before hand. This aims to be an interactive session where we work on the basics of packaging, we will walk through updating and creating packages. If you have a package you need help creating, modifying or updating time permitting we can look at those as well. Also if you have anything specific you'd like to look at feel free to email me before hand. false Simon Lees 2023-10-21T15:45:00+08:00 15:45 01:00 A108 Long talk 4265-opensuse-inside-wsl How easy setup openSUSE for daily using inside WSL Main Track WSL stands for "Windows Subsystem for Linux." It is a compatibility layer or feature in Windows 10 and Windows 11 that allows users to run a Linux environment directly within the Windows operating system. WSL enables developers and users to access the powerful Linux command-line tools, utilities, and applications without the need for dual-booting or virtual machines. With WSL, you can install and run various Linux distributions, such as Ubuntu, Debian, Fedora, and others, from the Microsoft Store. Once installed, you can launch a Linux terminal within Windows, and it will provide you with a familiar Bash shell or other Linux shells, allowing you to execute Linux commands and utilize Linux utilities natively. WSL was first introduced by Microsoft in 2016. The initial version, WSL 1, was officially released on August 2, 2016, as part of the Windows 10 Anniversary Update (version 1607). Since then user for openSUSE start gain numbers. But not all people familiar how to install and use openSUSE inside WSL. With this talk, I want re-introduce again how to install openSUSE in WSL. This include variant openSUSE Leap and Tumbleweed. Then will continue with tips and tricks how to maximize openSUSE on daily activity. I hope people who join session can start using openSUSE without need reinstall their hardware. And will spread to the world how easy using openSUSE. WSL stands for "Windows Subsystem for Linux." It is a compatibility layer or feature in Windows 10 and Windows 11 that allows users to run a Linux environment directly within the Windows operating system. WSL enables developers and users to access the powerful Linux command-line tools, utilities, and applications without the need for dual-booting or virtual machines. With WSL, you can install and run various Linux distributions, such as Ubuntu, Debian, Fedora, and others, from the Microsoft Store. Once installed, you can launch a Linux terminal within Windows, and it will provide you with a familiar Bash shell or other Linux shells, allowing you to execute Linux commands and utilize Linux utilities natively. WSL was first introduced by Microsoft in 2016. The initial version, WSL 1, was officially released on August 2, 2016, as part of the Windows 10 Anniversary Update (version 1607). Since then user for openSUSE start gain numbers. But not all people familiar how to install and use openSUSE inside WSL. With this talk, I want re-introduce again how to install openSUSE in WSL. This include variant openSUSE Leap and Tumbleweed. Then will continue with tips and tricks how to maximize openSUSE on daily activity. I hope people who join session can start using openSUSE without need reinstall their hardware. And will spread to the world how easy using openSUSE. false Estu Fardani 2023-10-21T16:45:00+08:00 16:45 00:30 A108 Short Talk 4319-migrating-university-learning-management-system-workloads-to-rke-based-kubernetes-cluster The Story on How to Migrate Moodle Distributed Workloads to RKE-Based Kubernetes Cluster Main Track Deploying University Learning Management System (LMS) workloads on your On-premises could be as easy (or maybe challenging) as it is done on the cloud (either private or public). It depends on the complexity (single or distributed workloads), budgets, number of users, and the engineer who handle the jobs. LMS like Moodle, has proven in the last 10 years to provide highly effective online learning management services for more than 150 thousand (registered) Universities and industries, and more than 378 million users around the globe. The ability to provide high-quality LMS will determine the satisfaction of its users. The next challenge is how to distribute the workloads (with high traffic from users) can be done effectively and efficiently, apart from being easy to manage. This talk will present the story of how to migrate the distributed workloads formerly deployed on Docker Swarm Clusters to RKE-based Kubernetes Cluster Services: the challenges, costs, technical preparation, team involved, technology choices, bugs, and best practices. Deploying University Learning Management System (LMS) workloads on your On-premises could be as easy (or maybe challenging) as it is done on the cloud (either private or public). It depends on the complexity (single or distributed workloads), budgets, number of users, and the engineer who handle the jobs. LMS like Moodle, has proven in the last 10 years to provide highly effective online learning management services for more than 150 thousand (registered) Universities and industries, and more than 378 million users around the globe. The ability to provide high-quality LMS will determine the satisfaction of its users. The next challenge is how to distribute the workloads (with high traffic from users) can be done effectively and efficiently, apart from being easy to manage. This talk will present the story of how to migrate the distributed workloads formerly deployed on Docker Swarm Clusters to RKE-based Kubernetes Cluster Services: the challenges, costs, technical preparation, team involved, technology choices, bugs, and best practices. false Andi Sugandi 2023-10-21T10:15:00+08:00 10:15 01:00 A109 Long talk 4307-opensuse-running-on-risc-v Main Track This presentation primarily focuses on the current status and introduction of openSUSE running on RISC-V. We will begin by providing an overview of the fundamentals of RISC-V, followed by a discussion on the popular RISC-V products that are widely adopted in the Chinese market. We will also demonstrate and operate applications and games on the Sophgo Milk-V Pioneer powered by openSUSE. If anyone in the audience has questions, I will do my best to address them. This presentation primarily focuses on the current status and introduction of openSUSE running on RISC-V. We will begin by providing an overview of the fundamentals of RISC-V, followed by a discussion on the popular RISC-V products that are widely adopted in the Chinese market. We will also demonstrate and operate applications and games on the Sophgo Milk-V Pioneer powered by openSUSE. If anyone in the audience has questions, I will do my best to address them. false houge 2023-10-21T11:15:00+08:00 11:15 01:00 A109 Long talk 4268-locked-down-opensuse-tumbleweed-kernel kernel lock-down Main Track Summary ======= The openSUSE Tumbleweed kernel is lockded-down since v6.4.3 when secure boot is enabled. It means that the behavior of Tumbleweed kernel will align with SLE and openSUSE Leap when secure boot is enabled. In this session, I will explain reason and lock-down functions in kernel. Agenda ====== - What is the lock-down function in kernel? What's the relation with UEFI secure boot? - Why does Tumbleweed kernel locked-down? - What functions will be locked-down when secure boot is enabled? What should user - Q&A Summary ======= The openSUSE Tumbleweed kernel is lockded-down since v6.4.3 when secure boot is enabled. It means that the behavior of Tumbleweed kernel will align with SLE and openSUSE Leap when secure boot is enabled. In this session, I will explain reason and lock-down functions in kernel. Agenda ====== - What is the lock-down function in kernel? What's the relation with UEFI secure boot? - Why does Tumbleweed kernel locked-down? - What functions will be locked-down when secure boot is enabled? What should user - Q&A false Joey Lee 2023-10-21T13:30:00+08:00 13:30 02:00 A109 Workshop 4274-the-load-balancer-based-on-apache-http-server Main Track When it comes to load balancing, the first thing that comes to mind is LVS, Nginx, HAproxy and other specialized load balancing software. However, the oldest web server, Apache HTTP Server, comes with a load balancing feature. In some less demanding scenarios, there is no need to use the more complex configuration of LVS, Nginx, HAproxy. This topic will use Nextcloud as an example to demonstrate how to use Apache HTTP Server to achieve simple load balancing. When it comes to load balancing, the first thing that comes to mind is LVS, Nginx, HAproxy and other specialized load balancing software. However, the oldest web server, Apache HTTP Server, comes with a load balancing feature. In some less demanding scenarios, there is no need to use the more complex configuration of LVS, Nginx, HAproxy. This topic will use Nextcloud as an example to demonstrate how to use Apache HTTP Server to achieve simple load balancing. false Yang Peng 2023-10-21T15:45:00+08:00 15:45 00:30 A109 Short Talk 4316-securing-docker-containers-preventing-privilege-escalation-and-enhancing-vulnerability-detection Main Track Containerization, led by Docker, has revolutionized the world of software deployment, offering efficiency and scalability. However, alongside these benefits, ensuring container security has become a paramount concern. Docker containers operate in isolated environments, but vulnerabilities can still emerge. Privilege escalation is one such challenge where an attacker gains elevated access within a container, potentially compromising the entire host system. Vulnerabilities within container images are another concern, as malicious actors can exploit these weak points to breach systems. Hardening Docker environments is crucial to minimize security risks. Start with secure image practices - utilize minimalist base images and regularly update them. Remove unnecessary components and apply security patches promptly. Configure host systems to limit the impact of any potential breach within a container. Employ network segmentation and access controls to restrict unauthorized interactions between containers. Privilege escalation prevention involves a layered approach. Employing the principle of least privilege is key. Containers should run with the minimum necessary privileges, restricting the potential for attackers to gain higher-level access. Utilize Decker's built-in security features such as user namespaces to isolate container users from host users. Employ capabilities like AppArmor and seccomp to limit the actions containers can perform. Clair, an open-source tool, addresses the vulnerability aspect of Docker security. It scans container images for known vulnerabilities in their components, libraries, and dependencies. Integrating Clair into your Continuous Integration and Continuous Deployment (CI/CD) pipeline enables proactive vulnerability assessment before deployment. Containerization, led by Docker, has revolutionized the world of software deployment, offering efficiency and scalability. However, alongside these benefits, ensuring container security has become a paramount concern. Docker containers operate in isolated environments, but vulnerabilities can still emerge. Privilege escalation is one such challenge where an attacker gains elevated access within a container, potentially compromising the entire host system. Vulnerabilities within container images are another concern, as malicious actors can exploit these weak points to breach systems. Hardening Docker environments is crucial to minimize security risks. Start with secure image practices - utilize minimalist base images and regularly update them. Remove unnecessary components and apply security patches promptly. Configure host systems to limit the impact of any potential breach within a container. Employ network segmentation and access controls to restrict unauthorized interactions between containers. Privilege escalation prevention involves a layered approach. Employing the principle of least privilege is key. Containers should run with the minimum necessary privileges, restricting the potential for attackers to gain higher-level access. Utilize Decker's built-in security features such as user namespaces to isolate container users from host users. Employ capabilities like AppArmor and seccomp to limit the actions containers can perform. Clair, an open-source tool, addresses the vulnerability aspect of Docker security. It scans container images for known vulnerabilities in their components, libraries, and dependencies. Integrating Clair into your Continuous Integration and Continuous Deployment (CI/CD) pipeline enables proactive vulnerability assessment before deployment. false Yan Arief 2023-10-21T16:15:00+08:00 16:15 00:30 A109 Short Talk 4328-build-an-opensuse-lxc-image-to-replace-the-default-container-in-chrome-os Main Track Crostini is Google's umbrella term for making Linux application support easy to use and integrating well with Chrome OS.This topic will how to build a opensuse lxc image and install it on a Chromebook in a container (via Crostini). Crostini is Google's umbrella term for making Linux application support easy to use and integrating well with Chrome OS.This topic will how to build a opensuse lxc image and install it on a Chromebook in a container (via Crostini). false Shane Sun 2023-10-21T16:45:00+08:00 16:45 00:30 A109 Short Talk 4271-pet-container-on-linux Main Track This lecture is mainly about a development direction of containerization technology on Linux - pet container. Traditionally, containers should be stateless and have a short life cycle, one service for one container. The user should build the container and replace it when its contents need to be updated, not update it interactively. The pet container, on the contrary, has a long life cycle, the user uses and updates it interactively, and it can contain multiple services. The mutable container on the immutable system is an example of a pet container. The immutable distributions launched by Fedora and openSUSE use pet container to provide flexible software installation methods and development environments on the immutable system. However, I have found that these tools have some flaws and problems. For example, the pollution of the host environment (this is completely contrary to the purpose of container sandboxing), the created container can no longer be adjusted, etc. Moreover, the existing container tools do not provide sufficient support for the application scenarios of pet containers. This presentation aims to explore the possibility of developing a new tool for pet containers, or modifying an existing tool, and what kind of work would be required to do so. This lecture is mainly about a development direction of containerization technology on Linux - pet container. Traditionally, containers should be stateless and have a short life cycle, one service for one container. The user should build the container and replace it when its contents need to be updated, not update it interactively. The pet container, on the contrary, has a long life cycle, the user uses and updates it interactively, and it can contain multiple services. The mutable container on the immutable system is an example of a pet container. The immutable distributions launched by Fedora and openSUSE use pet container to provide flexible software installation methods and development environments on the immutable system. However, I have found that these tools have some flaws and problems. For example, the pollution of the host environment (this is completely contrary to the purpose of container sandboxing), the created container can no longer be adjusted, etc. Moreover, the existing container tools do not provide sufficient support for the application scenarios of pet containers. This presentation aims to explore the possibility of developing a new tool for pet containers, or modifying an existing tool, and what kind of work would be required to do so. false Nianqing Yao