Loading…
Open Source Summit + Embedded Linux Conference North America...
May 18-20, 2026
Minneapolis, MN
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central DaylightTime (UTC -5). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.


arrow_back View All Dates
Wednesday, May 20
 

7:30am CDT

Welcome Coffee
Wednesday May 20, 2026 7:30am - 9:00am CDT

Wednesday May 20, 2026 7:30am - 9:00am CDT
Ballroom Foyer (Level One)

7:30am CDT

Zen Zone
Wednesday May 20, 2026 7:30am - 5:00pm CDT
All attendees may feel free to use the Zen Zone as needed. This is a quiet space for sensory relaxation, meditation, and worship. It is not to be used for conversations or as a workspace.
Wednesday May 20, 2026 7:30am - 5:00pm CDT
204B (Level Two)

7:30am CDT

Coat & Bag Check
Wednesday May 20, 2026 7:30am - 5:15pm CDT

Wednesday May 20, 2026 7:30am - 5:15pm CDT
Ballroom Lobby (Level One)

8:00am CDT

Registration & Badge Pick-Up
Wednesday May 20, 2026 8:00am - 5:00pm CDT

Wednesday May 20, 2026 8:00am - 5:00pm CDT
Ballroom Lobby (Level One)

9:00am CDT

Keynote: Welcome Back
Wednesday May 20, 2026 9:00am - 9:05am CDT

Wednesday May 20, 2026 9:00am - 9:05am CDT
101 A-J (Level One)

9:05am CDT

Keynote: Linus Torvalds, Creator of Linux & Git, in Conversation with Dirk Hohndel, Founder, DH Consulting
Wednesday May 20, 2026 9:05am - 9:35am CDT

Speakers
avatar for Dirk Hohndel

Dirk Hohndel

Founder, DH Consulting
Dirk is the Founder of DH Consulting. Prior to that, Dirk was VMware’s Chief Open Source Officer, where he lead the company’s Open Source Program Office, directing the efforts and strategy around use of and contribution to open-source projects and driving common values and processes... Read More →
avatar for Linus Torvalds

Linus Torvalds

Creator, Linux & Git
Linus was born on December 28, 1969, in Helsinki, Finland. He enrolled at the University of Helsinki in 1988, graduating with a master’s degree in computer science. His M.Sc. thesis was titled “Linux: A Portable Operating System” and was the genesis for what would become the... Read More →
Wednesday May 20, 2026 9:05am - 9:35am CDT
101 A-J (Level One)

9:40am CDT

Keynote: How Maintainers Can Build Their Way Through the AI Flood - Madelyn Olson, Valkey Project Maintainer and Principal Engineer, AWS & Jacob Murphy, Valkey Project Maintainer and Software Engineer, Google
Wednesday May 20, 2026 9:40am - 9:55am CDT
As the cost of generating code continues to decline, open source projects face a transformative shift in the nature of maintainership. The sheer volume of AI contributions – often characterized as "slop" – can easily overwhelm human reviewers. This keynote addresses the current state of development workflows by moving past AI hype toward a pragmatic, optimistic path for project sustainability. Developers need AI implementations that raise engineering standards now while projects anticipate advanced, industry-wide AI agents. 

AI enables maintainers to become more dogmatic about contribution quality. While asking a contributor for a complete refactor or exhaustive testing might have historically been viewed as an unreasonable barrier to entry, it is now a baseline expectation that AI can assist a contributor in meeting within minutes. High-validation requirements are framed not as hurdles, but as necessary filters to maintain a neat, efficient, and microsecond-optimized keyspace.

Drawing from two real-world implementations within the Valkey project for both security and backporting, this keynote will outline how AI agents are being used to combat maintainer burnout by automating tedious, time-intensive tasks now. The keynote will demo use cases for these intelligent bots that handle both 1) “provenance guard” security functions and 2) complex backporting and Continuous Integration (CI) testing across the project. These AI tools save engineers significant hours of manual labor each week while keeping humans in the loop for final sign-offs.

An important point that will be emphasized in the keynote: while AI excels at offloading labor, it cannot produce clarity or define a project's vision. The community remains the sole entity responsible for the strategic direction and soul of a project. Strategic thinking must not be externalized to models; instead, human-led governance must remain the primary source of long-term project trajectory.

Key Takeaways:
  • Raising the Bar: The lower cost of code necessitates higher standards for tests and validation to prevent the influx of low-quality submissions.
  • Agents as Guards and Guardrails: AI tools serve as the first line of defense in PR reviews, automating the routine labor of version maintenance and standard enforcement.
Intentional Governance: AI acts as a tool for execution, but clarity and project vision must remain entirely human-led and community-driven.
Speakers
avatar for Madelyn Olson

Madelyn Olson

Principal Engineer AWS, Maintainer of the Open-Source Valkey Project, AWS
Madelyn Olson is a co-creator and maintainer of Valkey, a high-performance key-value datastore, and Principal Engineer at Amazon Web Services (AWS). She focuses on building secure and highly reliable features, with a passion in working with open-source communities.
avatar for Jacob Murphy

Jacob Murphy

Staff Software Engineer, Google Cloud, Google Cloud
Jacob is a member of the Valkey Technical Steering Committee and an engineer on Google Cloud's Memorystore team.
Wednesday May 20, 2026 9:40am - 9:55am CDT
101 A-J (Level One)

9:55am CDT

Keynote: Zephyr: By Developers, For Developers - Kate Stewart, VP Dependable Embedded Systems,The Linux Foundation
Wednesday May 20, 2026 9:55am - 10:05am CDT
As adoption of the Zephyr RTOS continues to accelerate across industries, the project’s success is increasingly rooted in its commitment to adoption of open source best practices, open collaboration and a security-first mindset.
Equally important is how the project listens (and responds) to its developer community. Through annual surveys, collaborative meetings and ongoing research, the Zephyr community gathers actionable insights to guide technical direction. We’ll share key findings from recent developer surveys, the 10th anniversary milestone and highlight evolution of security practices to support CRA conformance and support analysis.

Attendees will gain a deeper understanding of how community-driven feedback loops translate into real-world improvements, ensuring Zephyr remains responsive to developer needs while advancing best practices across the embedded ecosystem.

Speakers
avatar for Kate Stewart

Kate Stewart

VP Dependable Embedded Systems, The Linux Foundation
Kate Stewart works with the safety, security and license compliance communities to advance the adoption of best practices into embedded open source projects. She has launched the ELISA and Zephyr Projects, as well as supporting other embedded projects. With more than 30 years of experience... Read More →
Wednesday May 20, 2026 9:55am - 10:05am CDT
101 A-J (Level One)

10:05am CDT

Keynote: Free to Use, Not Free to Run: Reinventing Package Registries - Robin Bender Ginn, Executive Director, OpenJS Foundation
Wednesday May 20, 2026 10:05am - 10:20am CDT
The package registries that distribute software across every major open source language ecosystem, from Python and Rust to JavaScript, Java, PHP, and beyond, will collectively serve over 10 trillion downloads in 2026, all of them free. But the infrastructure behind those downloads has never been free, and the small number of donors and volunteers quietly absorbing those costs can no longer keep pace with AI-driven demand and machine-scale supply chain attacks. In response, registry leaders have formally convened under the Linux Foundation to reinvent the model through the newly formed Sustaining Package Registries Working Group. This keynote explains what's breaking, what's changing, and what it means for every organization that builds on open source.  
Speakers
avatar for Robin Bender Ginn

Robin Bender Ginn

Executive Director, OpenJS Foundation
Robin Bender Ginn is the Executive Director of the OpenJS Foundation. Hosted by the Linux Foundation, OpenJS is the neutral home to grow and sustain the JavaScript and web ecosystem with 35 projects including Appium, Electron, Jest, jQuery, Node.js and webpack. Previously, Robin led... Read More →
Wednesday May 20, 2026 10:05am - 10:20am CDT
101 A-J (Level One)

10:30am CDT

Sponsor Activity - Distributed LLM inference with llm-d
Wednesday May 20, 2026 10:30am - 10:40am CDT
Live demo of llm-d highlighting benchmark-driven gains over naive load balancing with vLLM. Compare side-by-side results showing lower tail latency, faster time-to-first-token, and more consistent throughput under load—demonstrating how intelligent scheduling delivers smoother streaming and better GPU utilization for production-scale LLM inference.

Sponsor: Red Hat
Location: Solutions Showcase

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 
Wednesday May 20, 2026 10:30am - 10:40am CDT
Solutions Showcase, Ballroom A+B (Level One)

10:30am CDT

Sponsor Activity - Smarter LLM Inference: Faster Tokens, Lower Latency, Better GPU Utilization (+ Raffle)
Wednesday May 20, 2026 10:30am - 10:40am CDT
Distributed LLM inference with llm-d Live demo of llm-d highlighting benchmark-driven gains over naive load balancing with vLLM. Compare side-by-side results showing lower tail latency, faster time-to-first-token, and more consistent throughput under load—demonstrating how intelligent scheduling delivers smoother streaming and better GPU utilization for production-scale LLM inference.

Sponsor: Red Hat
Location: Solutions Showcase
Booth: G/S 5

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

Wednesday May 20, 2026 10:30am - 10:40am CDT
Solutions Showcase, Ballroom A+B (Level One)

10:30am CDT

10:30am CDT

Solutions Showcase
Wednesday May 20, 2026 10:30am - 2:10pm CDT
The Solutions Showcase is your hub to network, explore sponsor exhibits, and learn how these organizations are shaping the future of the ecosystem.

Wednesday May 20, 2026 10:30am - 2:10pm CDT
Solutions Showcase, Ballroom A+B (Level One)

11:00am CDT

Running Open Source Cloud Infrastructure for Public Health at Scale: Lessons From Ghana - Derek Asamoah-Amoyaw, AngloGold Ashanti Malaria Control (AGAMal)
Wednesday May 20, 2026 11:00am - 11:40am CDT
Public health systems increasingly rely on open source cloud infrastructure to deliver critical services, yet many are built and operated under tight budget, connectivity, and skills constraints.

This talk shares real-world lessons from designing, deploying, and operating Linux-based, open source cloud infrastructure supporting malaria control and public health programs in Ghana. It covers practical decisions around hybrid cloud architecture, containerization, data reliability, security tradeoffs, and operational resilience in environments with intermittent connectivity and limited resources.

Rather than theory, this session focuses on what actually worked, what failed, and how open source tools enabled sustainable systems for nonprofits and public sector teams. Attendees will gain actionable insights into building resilient, scalable cloud platforms using open source technologies—especially when operating outside ideal conditions.

This session is intended for practitioners building or maintaining cloud infrastructure who want honest, field-tested guidance from real deployments.
Speakers
avatar for Derek Asamoah-Amoyaw

Derek Asamoah-Amoyaw

Senior IT Infrastructure Officer, AngloGold Ashanti Malaria Control (AGAMal)
Derek Asamoah-Amoyaw is a Senior IT Infrastructure Officer with experience designing and operating cloud and open source systems for public health and nonprofit organizations in Ghana. His work focuses on building resilient, secure, and scalable infrastructure in resource-constrained... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
200F (Level Two)
  Cloud + Orchestration

11:00am CDT

How AGL SoDeV Accelerates the Future of Mobility Through Open-Source Collaboration - Yuichi Kusakabe, Honda Motor Co., Ltd.
Wednesday May 20, 2026 11:00am - 11:40am CDT
Automotive Grade Linux (AGL) is advancing Software Defined Vehicle (SoDeV) as a foundation for open, scalable, and collaborative automotive innovation. As vehicles become increasingly software-centric, accelerating collaboration between AGL SoDeV initiatives and the broader open-source automotive community is critical to shaping the future of mobility.
This session highlights how AGL SoDeV acts as a collaboration hub that connects industry-driven development with open-source community contributions. Building on a previously presented demo, we introduce updated workflows and tooling that reduce collaboration friction, improve governance transparency, and enable faster feedback loops between SoDeV activities and OSS communities.
Through an updated live demonstration, we show how governance automation and clear contribution flows can function as enablers rather than barriers. The talk focuses on practical lessons learned from evolving AGL SoDeV collaboration models, explaining what has changed, why it matters, and how these improvements help communities and organizations innovate together more effectively.
Speakers
avatar for Yuichi Kusakabe

Yuichi Kusakabe

Chief Architect, Honda Motor Co., Ltd.
Yuichi Kusakabe is the Chief Architect at Honda Motor Co., Ltd. , AGL(Automotive Grade Linux) member and COVESA(Connected Vehicle Systems Alliance) member since 2011 with over twenty years of Automotive and Open Source Software Experience.
Prior to joining Honda Motor he worked... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
208A+B (Level Two)
  Embedded Linux Conference

11:00am CDT

Defending the Branch: PAC, BTI & GCS on Linux - Bill Roberts, Arm Ltd
Wednesday May 20, 2026 11:00am - 11:40am CDT
As computing systems evolve, memory-safety exploits such as return-oriented programming (ROP) and jump-oriented programming (JOP) remain a serious threat. These attacks manipulate control flow within valid address space, reusing existing code “gadgets” to achieve the attackers desired results. Arm AArch64 provides architectural defenses against these attacks through Pointer Authentication Codes (PAC), Guarded Control Stack (GCS), and Branch Target Identification (BTI).

This talk explains how these technologies work and, more importantly, what Linux developers, distributions, packagers, and toolchains must do to deploy them correctly. We cover the AArch64 Linux ABI implications, including requirements for hand-written assembly, use of BTI and PAC instructions, and PAC key management. We dive into real-world toolchain and language impacts, including changes to C code generation, C++ exception unwinding, DWARF metadata updates, and use of Arm's hint space instructions. Attendees will also learn common pitfalls, debugging challenges, and deployment trade-offs observed in practice.

By the end of this session, participants will understand how to deploy PAC, GCS, and BTI across Linux.
Speakers
avatar for Bill Roberts

Bill Roberts

Principal Software Engineer, ARM Ltd
Bill is a software engineer with an eclectic background in various mobile development platforms, operating systems and security technologies. He is the author of "Exploring SE for Android" and is a maintainer of the tpm2-software stack. Bill is currently working on Fedora Linux.
Wednesday May 20, 2026 11:00am - 11:40am CDT
205C+D (Level Two)
  Linux
  • Audience Experience Level Any

11:00am CDT

KV-Cache Centric Inference: Building an Open Source LLM Serving Platform Around State - Martin Hickey, IBM Research
Wednesday May 20, 2026 11:00am - 11:40am CDT
We optimize LLM inference around compute—faster kernels, better batching, smarter parallelism. But in production, the real bottleneck is state. The KV‑cache holds precomputed attention data that turns a multi‑second prefill into a sub‑second cache hit. Lose it to eviction, isolate it on one node, or route away from it, and you pay the full compute cost again for work you already did.

llm-d is an open-source distributed inference platform, co-founded by Google, IBM Research, Red Hat, NVIDIA, and CoreWeave, that treats the KV‑cache as the core of the system rather than a byproduct. That enables tiered memory management—offloading KV blocks from GPU to CPU to shared storage—cross‑replica reuse so cached state computed anywhere is usable everywhere, and cache‑aware scheduling that routes requests to the replica most likely to hold their prefix.

This session walks through how llm-d and vLLM implement each layer of this stack, how they combine into a production system, and what the open‑source community can build on top. We’ll share benchmarks, Kubernetes deployment patterns, and practical guidance for operators running LLM workloads at scale.
Speakers
avatar for Martin Hickey

Martin Hickey

Senior Technical Staff Member, IBM Research
Martin Hickey is a STSM at IBM Research, focused on Open Source, Cloud Native Computing, and AI. Martin has notable contributions to open source projects like vLLM, LMCache, Kubernetes, Helm, OpenTelemetry and OpenStack. Martin is a core maintainer for LMCache and an emeritus core... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
211A+B (Level Two)
  Open AI & Data
  • Audience Experience Level Any

11:00am CDT

When Similar Is Good Enough: Rethinking Caching for AI - Madelyn Olson, Valkey & Jacob Murphy, Google Cloud
Wednesday May 20, 2026 11:00am - 11:40am CDT
Caching has traditionally relied on exact matches: the same input produces the same cached output. AI systems challenge this assumption by introducing semantic similarity — requests that are different on the surface but equivalent in meaning. This talk explores how caching is evolving to support AI workloads, from classical key-value strategies to semantic caching using vector search. We'll walk through a practical architecture that layers exact and semantic caches in front of an expensive model and demonstrate how hybrid caching can reduce cost and latency. This talk will explore multiple open-source systems, such as OpenSearch and Valkey, and discuss the tradeoffs that they provide and when they matter.
Speakers
avatar for Madelyn Olson

Madelyn Olson

Principal Engineer AWS, Maintainer of the Open-Source Valkey Project, AWS
Madelyn Olson is a co-creator and maintainer of Valkey, a high-performance key-value datastore, and Principal Engineer at Amazon Web Services (AWS). She focuses on building secure and highly reliable features, with a passion in working with open-source communities.
avatar for Jacob Murphy

Jacob Murphy

Staff Software Engineer, Google Cloud, Google Cloud
Jacob is a member of the Valkey Technical Steering Committee and an engineer on Google Cloud's Memorystore team.
Wednesday May 20, 2026 11:00am - 11:40am CDT
200A (Level Two)
  Open AI & Data

11:00am CDT

Panel Discussion: Code, Capital, and COSS: Winning Strategies for Startups - Hilary Carter & Sam Boysel, The Linux Foundation & Cara Delia, Red Hat
Wednesday May 20, 2026 11:00am - 11:40am CDT
Startups need to monetize fast with high quality code, and open source is a proven path to that objective. Integrators of open source solutions and COSS companies have an incredibly important and urgent role to play to bridge the gap between open source R&D and commercialization, especially in the context of trade uncertainty, digital independence and sovereignty movements, and economic headwinds.

Attendees will come away with empirical proof points that open source is an accelerator of value for COSS companies: at IPO, and M&A. And with a new survey in the field, they'll have the opportunity to influence outcomes for the benefit of startups and COSS companies everywhere!
Speakers
avatar for Cara Delia

Cara Delia

Manager, AI Community Infrastructure, Red Hat

avatar for Hilary Carter

Hilary Carter

SVP Research, The Linux Foundation
Hilary Carter is a writer, researcher, and team leader, producing engaging, decision-useful insights that broaden the understanding of open source and emerging technologies and their impact on business, government, and society. She has contributed to books and numerous research reports... Read More →
avatar for Sam Boysel

Sam Boysel

Data Scientist, The Linux Foundation
Sam Boysel is a Data Scientist at the Linux Foundation. He has extensive empirical research experience in topics across the open source ecosystem. His work leverages microeconomic theory to explore incentives, behaviors, and place value on open source dynamics. Before joining the... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
200H (Level Two)
  Open Source 101

11:00am CDT

BEAR-ing Fruit: How OpenSSF’s Working Group Is Diversifying Open Source Security - Yesenia Yser, Microsoft & Marcela Melara, Intel Corporation
Wednesday May 20, 2026 11:00am - 11:40am CDT
The OpenSSF BEAR (Belonging, Empowerment, Allyship, and Representation) Working Group is on a mission to make cybersecurity a place where everyone belongs! We knock down barriers and crank up the volume for underrepresented voices. We've learned that true representation is about building fun, lasting paths for participation.

In this session, we'll take you on a journey through the evolution of BEAR, culminating in the exciting launch of our newest global family member, SIG OSSAfrica (Open Source Security Africa)! We'll share some insights and "Aha!" moments from our monthly Community Office Hours - including those unexpected successful strategies - and get honest about the triumphs and challenges of our mentorship program.

Looking to level up your community game? Whether you want to understand the real-world challenges facing diverse groups in security or just need some practical, battle-tested frameworks for building vibrant community programs, this session is your toolkit. Get ready for an open, fun look at building a truly inclusive open source security community!
Speakers
avatar for Yesenia Yser

Yesenia Yser

Sr. Security Program Manager, Microsoft
As a cybersecurity expert of over 12 years, I have managed global crises with the unique skill set she’s gained as a practitioner and instructor in Brazilian Jiu Jitsu. My work spans incident response, internal security tooling, open source security, and AI safety—currently, empowering... Read More →
avatar for Marcela Melara

Marcela Melara

Research Scientist, Intel Corporation
Marcela Melara is a research scientist at Intel making distributed and cloud systems more trustworthy. Her current work focuses on developing solutions for high-integrity software and AI supply chains. She leads a number of internal, academic and open-source projects on supply chain... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
200J (Level Two)

11:00am CDT

Building an Interoperable and Responsible AI Ecosystem Through Standards and Open Source - Charles Eckel, CIsco Systems
Wednesday May 20, 2026 11:00am - 11:40am CDT
The rapid rise of AI and autonomous agents is transforming technology, from network infrastructure to intelligent applications. This session examines foundational efforts within leading global technology standards organizations (IETF, 3GPP, NIST, ETSI) and within the open source community, particularly the Linux Foundation, to establish essential frameworks for responsible, secure, and interoperable AI deployments.

Attendees will gain a comprehensive understanding of this evolving standardization landscape, the interplay with open source innovation, and opportunities to enhance and accelerate collaboration across these mostly disjoint communities to integrate AI ethically and securely into global networks.
Wednesday May 20, 2026 11:00am - 11:40am CDT
200E (Level Two)

11:00am CDT

Building an OSPO From the Ground Up: Enterprise Policy To Contribution and Compliance - Kevin Fruchey & Jeff Skarb, Lenovo
Wednesday May 20, 2026 11:00am - 11:40am CDT
Open Source Program Offices (OSPOs) are becoming essential for organizations of all sizes, yet many struggle with where to start and how to scale effectively. In this session, we will share a practical framework for building an OSPO based on real enterprise experience.

The talk begins with establishing an enterprise open source policy that aligns engineering, legal, and security stakeholders while enabling innovation. From there, it breaks down the two core OSPO pillars: contribution and compliance. Within compliance, the session dives deeper into managing distributed versus non-distributed software and explains why treating these use cases differently reduces friction and improves outcomes.

Attendees will gain a clear, adaptable model for designing an OSPO that works for large enterprises and can scale down for smaller organizations. The session focuses on real-world lessons learned, common pitfalls, and actionable guidance that teams can apply immediately.
Speakers
avatar for Kevin Fruchey

Kevin Fruchey

Open Source Program Office, Lead, General Motors
Kevin Fruchey has spent 12 years at General Motors, where he leads the company’s Open Source Program Office and focuses on building practical, scalable open source governance. He comes from a family that has owned and operated a movie theater for over 35 years, sparking a lifelong... Read More →
avatar for Jeff Skarb

Jeff Skarb

Open Source Program Office, Lead, General Motors
Jeff is an OSPO Lead at General Motors with a background in hardware engineering and open-source governance. He brings a practical, systems-focused approach to building scalable compliance programs and bridging technical, legal, and organizational priorities across varying engineering... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
200I (Level Two)

11:00am CDT

Keep It Clean: Practical Strategies for Reducing Build-System and Host Tech Debt - Joe Schneider, Dojo Five
Wednesday May 20, 2026 11:00am - 11:40am CDT
Long-running embedded projects inevitably accumulate build-system and host-platform debt. Team turnover, drifting documentation, and “crunch mode” shortcuts compound over time until onboarding a new engineer takes weeks and even experienced developers struggle to make safe changes. These problems are especially acute in Linux-based and cross-platform environments, where host variability and undocumented assumptions undermine reproducibility.

This session distills lessons learned from modernizing embedded firmware build environments across Linux hosts and CI systems. Attendees will learn practical techniques for eliminating “it works on my machine” failures, accelerating incremental and clean builds, and making build behavior explicit and reproducible using open-source tooling. Topics include scripting and automation patterns, modern command runners, and structuring build systems to be CI-friendly and maintainable.

Joe Schneider, embedded systems veteran and CEO of Dojo Five, will share concrete practices that reduce onboarding time, improve build reliability, and restore developer productivity by systematically attacking build-system and host-level technical debt.
Speakers
avatar for Joe Schneider

Joe Schneider

CEO, Dojo Five

Wednesday May 20, 2026 11:00am - 11:40am CDT
200G (Level Two)

11:00am CDT

Software Supply Chain Management With the Yocto Project - Joshua Watt, Garmin
Wednesday May 20, 2026 11:00am - 11:40am CDT
Managing software supply chains is an important part of safety critical software. In this talk, Joshua will describe the technologies, methods and lessons learned that the embedded software space uses to manage software supply chains using the Yocto project.
Speakers
avatar for Joshua Watt

Joshua Watt

Staff Software Engineer, Garmin
Joshua is a Staff Software Engineer for Garmin with 18 years experience producing consumer electronics. He has worked on the Yocto SPDX SBoM implementation, and is a member of the Yocto Project TSC as well as the OpenEmbedded TSC.
Wednesday May 20, 2026 11:00am - 11:40am CDT
200C (Level Two)
  Safety-critical Software

11:00am CDT

Building Autonomy on PX4: A Hands-On Workshop for Embedded and Robotics Developers - Ramon Roche, The Linux Foundation & Nuno Marques, Drone Solutions
Wednesday May 20, 2026 11:00am - 12:35pm CDT
By the end of this workshop, every attendee will land a simulated drone precisely on an ArUco marker using computer vision, with PX4 running the drone and ROS 2 handling the control logic. PX4 powers over a million drones worldwide, and in this session you'll run the exact same production firmware on your laptop. Precision landing on a visual marker is a real-world capability used in package delivery, autonomous charging, and marine recovery, and you'll build it from scratch.

We'll start by booting PX4 in Gazebo simulation and exploring the architecture of a production flight stack, including uORB, the pub-sub middleware that connects every module in PX4. From there, we'll connect PX4 to ROS 2 via the uXRCE-DDS bridge, build a custom flight mode using the px4-ros2-interface-lib, detect ArUco markers with OpenCV, and estimate pose from a simulated camera, and finally wire perception into the flight mode to execute an autonomous precision landing.

This workshop is for embedded developers looking for a robotics application of their existing skills, ROS 2 developers wanting to move beyond MAVLink offboard control, and anyone interested in seeing how perception, control, and middleware come together in a real flight stack. No drone experience required.
Hosted by Dronecode maintainers Ramón Roche and Nuno Marques, with guest contributors from the PX4 ecosystem.

Workshop Requirements (please read before attending):
Bring a laptop. Any OS works, but in order of expected smoothness: Linux is your best bet, followed by Windows, then macOS. Workshop materials and setup instructions live at https://github.com/Dronecode/ossna-26-workshop. Pre-install the Docker containers before arriving, since conference Wi-Fi might be unreliable and pulling multi-gigabyte images on-site will eat into your workshop time. macOS users should note that the container image doesn't run Gazebo well; use the official PX4 setup script at https://github.com/PX4/PX4-Autopilot/blob/main/Tools/setup/macos.sh with the --sim-tools flag to install Gazebo natively (details in the workshop repo). Join the Dronecode Discord at https://chat.dronecode.org for workshop updates, setup help, and community support before, during, and after the event, and keep an eye on the repo and Discord in the days leading up for any last-minute changes.


Speakers
avatar for Nuno Marques

Nuno Marques

Founder and Lead Software Engineer, Drone Solutions
Nuno Marques has more than 5 years of software engineering and system integration experience as a contractor and consultant, recording the participation in over 30 projects and product development for more than 25 companies and organisations in the drone industry over these years... Read More →
avatar for Ramon Roche

Ramon Roche

General Manager, The Linux Foundation
Ramón Roche is General Manager of the Dronecode Foundation, an open-source project under the Linux Foundation supporting drone and robotics development. He leads a global ecosystem behind technologies like PX4 and Pixhawk, and has over a decade of experience in open source. Ramón... Read More →
Wednesday May 20, 2026 11:00am - 12:35pm CDT
200D (Level Two)

11:20am CDT

Lightning Talk: Offline Open Knowledge: Running a Wikipedia Powered Game on Embedded Linux - Azmath Syeda, Independent
Wednesday May 20, 2026 11:20am - 11:35am CDT
This lightning talk walks through building a Wordle-style guessing game powered entirely by a local Wikipedia dump running on a Raspberry Pi. No cloud, no proprietary APIs, no internet required during gameplay.
We'll cover the practical technical journey: downloading and parsing Wikimedia dumps, extracting structured metadata into SQLite, building a lightweight Node.js server on ARM Linux, and running the game full-screen via Chromium in kiosk mode on a Pi connected to an HDMI display.
The result is a fully self-contained open knowledge game console. Live demo on actual hardware included.
Key takeaways: working with Wikimedia open data dumps, SQLite on constrained ARM hardware, Node.js performance on edge Linux, and Chromium kiosk mode as a game display layer.
Speakers
avatar for Azmath Syeda

Azmath Syeda

Senior Member of Technical Staff, Oracle
Creative technologist and firmware engineer building open source educational games at the intersection of Wikipedia, open data, and interactive experiences. Creator of Wiki Trendle, WikiLength, and others at Factorday. Currently a Senior Engineer at Oracle.
Wednesday May 20, 2026 11:20am - 11:35am CDT
208C+D (Level Two)
  Embedded Linux Conference

11:55am CDT

Lightning Talk: Untangling Secure Key Provisioning in U-Boot: Scalable EFuse Programming in Production - Harsha Vardhan Veerappan Murugesan & Kavitha Malarvizhi, Texas Instruments
Wednesday May 20, 2026 11:55am - 12:10pm CDT
Note: Open to presenting as Lightning Talk

Secure provisioning is a foundational step in productizing embedded Linux systems, especially when enabling secure boot and establishing silicon identity through eFuses or one-time programmable (OTP) memory. Yet many teams still rely on manual fuse programming flows that are error-prone and difficult to scale particularly when dealing with complex, vendor-specific fuse maps. This talk explores how modern U-Boot capabilities streamline secure device provisioning in real manufacturing workflows. It introduces an upstream enhancement to U-Boot’s fuse subsystem that supports bulk, structured eFuse programming. This approach makes fuse provisioning more automation-friendly, and suitable for production use. Attendees will gain practical insights on integrating U-Boot-based provisioning into factory flows.
Agenda:
1. Challenges in Traditional eFuse Programming on Embedded Systems
2. U-Boot’s Existing Fuse Subsystem and Its Limitations in Production Flows
3. Design and Upstream Integration of the 'fuse writebuff' command
4. Structured, Automated Provisioning using Memory Buffers
5. Practical Provisioning and Production Workflow Considerations
Speakers
avatar for Harsha Vardhan Veerappan Murugesan

Harsha Vardhan Veerappan Murugesan

Embedded Software Engineer, Texas Instruments India
Harsha Vardhan is a security-focused embedded software engineer at Texas Instruments, working on secure boot enablement and secure key provisioning for production platforms. He is an upstream contributor to U-Boot and authored the buffer-based eFuse programming enhancement in U-boot... Read More →
avatar for Kavitha Malarvizhi

Kavitha Malarvizhi

Software Engineering Manager and Security Architect, Texas Instruments
With over 17 years of experience in embedded systems and firmware development, Kavitha specialize in designing and securing boot ROMs and firmware for microcontrollers and processors. Currently, she serves as a Software Engineering Manager for Security firmware at Texas Instruments... Read More →
Wednesday May 20, 2026 11:55am - 12:10pm CDT
208C+D (Level Two)
  Embedded Linux Conference
  • Audience Experience Level Any

11:55am CDT

From Apps To Infrastructure: A Cloud Native First Approach - Julien Semaan, Kubex & Corey McGalliard, Akamai
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Traditional infrastructure GitOps workflows, commonly built on tools like Terraform or OpenTofu, often struggle with state management, limited reconciliation, and delayed drift detection. Because these systems operate outside the Kubernetes control plane, infrastructure changes follow different lifecycle and failure semantics than applications, making it difficult to reason about system-wide correctness and safety.

We’ll present a unified approach for managing both applications and infrastructure through the Kubernetes control plane. This approach brings together GitOps controllers and Crossplane to extend the Kubernetes API to infrastructure via an ecosystem of community-supported providers spanning major clouds, alternative clouds, and on-prem. The result is a vendor-neutral foundation where applications and infrastructure follow the same review, lifecycle, and reconciliation model.
Speakers
avatar for Corey McGalliard

Corey McGalliard

Engineering Manager, Akamai Cloud
My team and I power and protect life online by building an internal, opinionated Kubernetes platform that meets Akamai's change-safety, security, and compliance expectations while delivering an excellent developer experience. I'm interested in distributed computing and platform engineering... Read More →
avatar for Julien Semaan

Julien Semaan

Head of k8s Engineering @Kubex | CNCF TAG DevEx Tech Lead, Kubex
Julien is the Head of Kubernetes Engineering at Kubex and a Tech Lead with the CNCF TAG for Developer Experience. With deep roots in open source and cloud-native systems, he has been working with Kubernetes since 2017 and has led multiple product transitions to cloud-native archi... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200F (Level Two)
  Cloud + Orchestration
  • Audience Experience Level Any

11:55am CDT

It Works on My Bench (And Nowhere Else): DevOps for Embedded Systems - Colleen Lake, GitLab
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Embedded software complexity has doubled every four years for decades. The way most teams build and deploy it is still stuck in the 2010s. Version control exists, but it's still not unusual for code to be shipped from a sharpie-labeled SD card or prod code to live on one machine. Deployment still means walking over to a test bench and hoping nobody else is using it. "It works on my machine" is often an entire strategy.

This talk brings modern DevOps to embedded systems. We'll cover version control workflows that actually work for firmware, build environments that don't depend on that one engineer's laptop, CI/CD pipelines that integrate with real hardware, and deployment strategies that reduce the risk of bricking devices in the field. We'll also touch on what to steal from web DevOps and what doesn't translate when your deployment target isn't a cloud server.

We'll demo the whole flow: commit, build, deploy to hardware. You'll leave with practical patterns you can bring back to your own embedded projects. Some embedded experience is useful, but if you've ever been frustrated by how your team ships firmware, you'll get something out of this.
Speakers
avatar for Colleen Lake

Colleen Lake

Developer Advocate, GitLab
Colleen Lake is a Developer Advocate at Gitlab and her team's resident hardware geek. She’s worked with NASA and was featured on Gimlet Media’s Startup podcast. When she’s not playing with robots or coding you can usually find her lost in the woods or on the internet (@colleencode... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
208A+B (Level Two)
  Embedded Linux Conference

11:55am CDT

Open Source Starts Here: Lessons Learned From Building Linux Clubs for Students - Stu Keroff, Lake Middle School
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Where are the Open Source techs of tomorrow right now? They're in class!

In this session, Stu Keroff shares real-world lessons from launching and leading school-based Linux clubs that introduce students to open source through hands-on exploration, community building, and authentic technical problem-solving.

Drawing on firsthand experience, this talk covers:

1. How to start a Linux club from scratch in a school environment.
2. Structuring meetings to balance curiosity, chaos, and meaningful learning.
3. Working with school administrators and navigating policy constraints.
4. Keeping students engaged across skill levels.
5. Connecting students to the broader open source ecosystem
6. Using Open Source to help your community.

Attendees will leave with a practical framework for starting similar programs in their own communities—whether as educators, parents, open source maintainers, or industry professionals looking to strengthen the next generation of contributors.

Meet the techs of tomorrow where they are right now: in school.
Speakers
avatar for Stu Keroff

Stu Keroff

Teacher, Lake Middle School
Stu Keroff is a teacher and FOSS advocate who founded the world’s first school Linux club, the Community School of Excellence Asian Penguins, and later the Aspen Academy Penguin Corps and Lake Middle School Penguin Corps, helping students learn Linux, refurbish hardware, and give... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
205C+D (Level Two)
  Linux
  • Audience Experience Level Any

11:55am CDT

Zero Trust AI Agents: Securing MCP in Private Kubernetes Networks - Mithil Patel, Equinix
Wednesday May 20, 2026 11:55am - 12:35pm CDT
The transition from passive RAG to autonomous agentic workflows forces a dangerous trade-off: to be useful, agents need access; to be safe, they need restrictions. Giving a non-deterministic LLM distinct permissions to your Kubernetes cluster is a security nightmare, yet agentic tool execution demands real-world access to be effective.

This session introduces a battle-tested architecture for Zero Trust Agents. We will demonstrate how to secure Model Context Protocol (MCP) servers within private networks, replacing risky static credentials with a dynamic control plane that enforces strict safety guardrails.

Attendees will learn:

Identity for Autonomy: How to integrate OpenBao (LF Edge) to issue Just-In-Time (JIT) credentials, ensuring agents only hold permissions during active tool use.

Bounding Agency: Implementing "Read/Write Separation" at the protocol level, preventing stochastic errors or misinterpretations from causing deterministic outages.

Secure Orchestration: A blueprint for deploying MCP servers as secure bridges between AI reasoning and internal infrastructure.

Stop building toys. Learn how to deploy autonomous systems that your security team will actually approve.
Speakers
avatar for Mithil Patel

Mithil Patel

Principal Engineer, SRE, Equinix
Principal Engineer at Equinix driving DevOps/SRE strategy for Interconnection organization managing global infrastructure serving Fortune 500 companies. 10+ years building resilient distributed systems and Kubernetes platforms at scale. Deep expertise in cloud-native architectures... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200A (Level Two)
  Open AI & Data
  • Audience Experience Level Any

11:55am CDT

Serverless for Open-Source Maintainers: Automating the Boring, Scaling the Impact - Hemant Bharadwaj & Antra Purohit, Microsoft
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Open source projects often struggle not with code, but with scale: issue triage, pull request validation, release automation, and community operations all consume maintainer time. Serverless, when built on open standards, offers a powerful way to automate these workflows without adding operational overhead.
This talk explores how open source maintainers can use event‑driven, serverless patterns to automate project workflows such as issue labeling, CI triggers, release orchestration, and contributor notifications. Using open technologies like CloudEvents, CDEvents, OpenTelemetry, and container‑based functions on Kubernetes, we show how to build portable, vendor‑neutral serverless automation that works across environments.
Attendees will learn practical design patterns, common pitfalls, and real‑world examples of using serverless automation to improve project reliability, contributor experience, and maintainer sustainability without locking into any single platform.
Speakers
avatar for Hemant Bharadwaj

Hemant Bharadwaj

Senior Site Reliability Engineer at Microsoft, Microsoft
Hemant Bharadwaj is a Senior Site Reliability Engineer working on large-scale Linux infrastructure. He focuses on observability, incident response, debugging, and automation across distributed systems. His work centers on turning operational pain points into repeatable, open, and... Read More →
avatar for Antra Purohit

Antra Purohit

Software Engineer, Microsoft
Antra Purohit is a software engineer working on Linux‑based cloud and embedded platforms. She works on Yocto‑based systems and cloud infrastructure, translating open‑source technologies into reliable, production‑ready solutions.
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200H (Level Two)
  Open Source 101

11:55am CDT

Driving Strategic Value Through Open Source: OSPOs and R&D Organizations in the Era of the CRA - Georg Kunz & David Östman, Ericsson Software Technology
Wednesday May 20, 2026 11:55am - 12:35pm CDT
In today’s rapidly evolving tech landscape, aligning open source initiatives with product-focused R&D remains critical to achieving strategic business goals. We will share how Ericsson’s Open Source Program Office (OSPO) and R&D organizations collaborate on concrete challenges such as tightening cyber security requirements.

In this talk, David will present how we have ramped up a team to build and operate a Yocto Linux distribution, and how improved upstream engagement and ways-of-working allow us to better articulate and validate the business value behind this strategic investment. We will discuss the impact on developer productivity, product quality, security, CRA-readiness, and long-term maintainability.

At the same time, the EU Cyber Resilience Act (CRA) has become a major driver of change across our organization. Georg will share how the Ericsson OSPO and R&D have started to collaborate more tightly in response to the CRA. We will spotlight how the in-house Linux team addresses upcoming CRA requirements - and how their upstream work supports CRA compliance.
Speakers
avatar for Georg Kunz

Georg Kunz

Director Open Source Software, Ericsson
Georg is a director in Ericsson's Open Source Program Office. He is a passionate advocate for open source software and a long term contributor to a wide range of open source projects and communities. He currently serves on the Technical Advisory Council (TAC) and the Governing Board... Read More →
avatar for David Östman

David Östman

General Manager EST Sweden, Ericsson Software Technology
David is the General Manager of Ericsson Software Technology (EST) Sweden, leading a dedicated team of engineers developing open source software on projects like Linux, Yocto, and Valkey. With over 25 years of experience in the telecommunications industry, David began his career at... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200I (Level Two)

11:55am CDT

Retconning Accessibility Standards With ARIA-AT - Chris Cuellar, Bocoup
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Many accessibility applications and automated tests rely solely on an abstract representation of the user interface (the so-called "accessibility tree") as their source of truth. By ignoring the process that screen readers take to translate this abstraction into spoken text, developers often build false confidence in accessibility implementations and miss critical user experience issues.

This talk explores how Bocoup's technical innovations (capturing real screen reader output across platforms and operating systems) has enabled essential discussions among screen reader vendors, standards editors, and application developers at the W3C's ARIA-AT Community Group. We'll examine the incentive structures which pit market differentiation against consistency and even correctness. We'll demonstrate how the ARIA-AT project addresses this problem head-on with a test-driven approach to consensus and the ultimate goal of standardization.
Speakers
avatar for Chris Cuellar

Chris Cuellar

Engineer & Worker-Owner, Bocoup
Chris is a worker-owner at Bocoup and has nearly 15 years of experience building and creating on the web platform. Chris is also an artist, educator and community organizer and is based in unceded territory of the Tongva people and their neighbors (Los Angeles, California). In the... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200E (Level Two)

11:55am CDT

OCI Images: Not Just for Containers Anymore - Austin Abro, Defense Unicorns
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Docker popularized the container; OCI standardized the artifact. That shift, from a specific format to a global specification, is what allowed us to expand beyond just 'running apps.' Now, whether it's Cosign for security, OpenTofu for infrastructure, or Zarf for air-gapped distribution, the ecosystem is leveraging a common foundation to solve complex supply chain problems. Additionally, Kubernetes’ recent work on OCI read-only volumes signifies a paradigm shift: we are now using images as a pure data transfer mechanism rather than just a runtime environment. Yet the elegant design that enables the OCI images is mostly hidden from users.

In this session, we'll create our own custom OCI artifact from scratch. Along the way, we'll learn the benefits of the OCI specification: the efficiency of its storage model, its simple cross-platform experience, and its secure-by-default design. Developers will walk away with a starting point for packaging their own custom artifacts, while practitioners will gain a deeper understanding of the OCI artifacts powering their workflows.
Speakers
avatar for Austin Abro

Austin Abro

Software Engineer, Defense Unicorns
Austin Abro is a full-time maintainer of Zarf at Defense Unicorns, a tool built to enable declarative creation & distribution of software into air-gapped/constrained environments. Previously, he worked at Fiat Chrysler as a full stack Java developer before being promoted to technical... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200G (Level Two)

11:55am CDT

The Final Phase of Xen Safety: Solving Coverage and Residual Gaps - Stefano Stabellini, AMD
Wednesday May 20, 2026 11:55am - 12:35pm CDT
AMD, in collaboration with the Xen community, continues to advance efforts to make the Xen hypervisor safety-certifiable to ISO 26262 ASIL D and IEC 61508 SIL 3. The project has progressed from Safety Concept Approval toward the final certification phase.

This presentation will share practical lessons learned, including how we structure requirements and architecture specification documents to make them easier to review for Open Source experts. It will describe the tools and processes we use to maintain end-to-end traceability and explain how we leverage GitLab to automate requirements-based testing and verification pipelines.

We will also address the remaining challenges on the path to completion, including code coverage and FMEA. In particular, we will explain why achieving comprehensive code coverage is uniquely challenging for a widely used Open Source project such as Xen and outline the strategies we are applying to meet 100% code coverage targets.

Finally, we will describe our approach to FMEA (Failure Mode and Effects Analysis) and how it evolved to better align with existing upstream Xen failure-handling practices.
Speakers
avatar for Stefano Stabellini

Stefano Stabellini

Fellow, AMD
Stefano Stabellini is a Fellow at AMD, where he leads system software architecture and the virtualization team. Previously, he developed a virtualization-based security solution for containers and authored several security articles. Stefano has been involved in Xen development since... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200C (Level Two)
  Safety-critical Software

12:35pm CDT

Puppy Pawlooza
Wednesday May 20, 2026 12:35pm - 2:05pm CDT
Puppy Pawlooza returns for an afternoon of pure puppy joy! Come mingle with the most adorable pups around and enjoy wagging tails, playful energy, and plenty of heart-melting moments. Whether you're there for the cuddles or the laughs, it’s the perfect midday pick-me-up. Don’t miss this feel-good, fur-filled fest! 
Wednesday May 20, 2026 12:35pm - 2:05pm CDT
Solutions Showcase, Ballroom A+B (Level One)

12:35pm CDT

2:10pm CDT

Building a Shared, Persistent Virtual Filesystem for WebAssembly - Ayako Hayasaka, LY Corporation
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
Server-side WebAssembly applications need filesystem access, but current options are limited. Host filesystem access breaks portability and sandboxing. wasi-vfs is read-only and targets Preview 1. wasi-virt supports Preview 2 but remains read-only and single-application only.
We present a virtual filesystem built on WASI Preview 2 and the Component Model that supports read/write, multi-app sharing, dynamic attachment via RPC, and optional S3 persistence. The stack uses open-source tooling from the Bytecode Alliance: wasmtime, wac, and wit-bindgen.
The talk walks through our architecture: an inode-based in-memory filesystem exposed through custom adapters implementing wasi:filesystem, composed at build time with wac plug. We then separate the filesystem into a standalone server, add RPC for runtime attachment without recompilation, and layer S3 persistence for durability. Each stage is demonstrated live.
We close with lessons learned and tradeoffs between build-time composition and runtime RPC. No deep Wasm expertise is assumed. This talk is for developers building Wasm platforms, those exploring the Component Model, and anyone curious about filesystem virtualization in WebAssembly.
Speakers
avatar for Ayako Hayasaka

Ayako Hayasaka

Software Engineer, LY Corporation
Primarily responsible for providing company-wide technical support in the area of web backend development.
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200A (Level Two)
  Cloud + Orchestration

2:10pm CDT

Hello World, Meet the Spanimals: Getting Started With Observability - Tiffany Jernigan, Grafana Labs
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
What do a raccoon, a goat, and a goose have in common? They all take part in a tracing adventure where we’ll use OpenTelemetry and the Grafana observability stack to easily showcase a cloud-native observability scenario.

In this session, you’ll learn what distributed tracing is, why it’s incredibly helpful for understanding how requests flow through multi-service systems, and how it can reveal issues like latency and unexpected errors — alongside metrics, logs, traces, and profiles for a complete observability picture.

We’ll walk through a multi-service application that uses AI to generate animal facts and images, tracing each request from API call to fact and image generation to database storage. Along the way, you’ll learn how to use OpenTelemetry to instrument Python and Java applications and visualize the full request journey using easy to understand, open-source dashboards for metrics, logs, traces, and profiles.

If a goat can survive cloud-native observability, so can you.
Speakers
avatar for Tiffany Jernigan

Tiffany Jernigan

Senior Developer Advocate, Grafana Labs
Tiffany is senior developer advocate at Grafana Labs and a CNCF Ambassador. She also formerly worked as a software developer and developer advocate at VMware, Amazon, Docker, and Intel. Prior to that, she graduated from Georgia Tech with a degree in electrical engineering. In her... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200F (Level Two)
  Cloud + Orchestration

2:10pm CDT

Construct a Lean and Fast RISC-V System Emulator Capable of Running Linux - Jim Huang, National Cheng Kung University
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
While mature solutions such as QEMU provide broad architectural coverage, they are optimized for generality rather than minimal footprint, rapid bring-up, or architectural experimentation. To examine system-level design trade-offs, gain fine-grained control over memory and execution behavior, and enable lightweight Linux-based sandboxing and verification, we built a RISC-V system emulator from scratch.

rv32emu [1] supports RV32IMACF with Zifencei and Zicsr, along with CLINT, MMIO, and a complete Sv32 three-level page table. Through VirtIO integration, it efficiently maps Linux guest services to host resources. A tiered JIT compilation framework accelerates Linux workloads while reducing memory consumption compared to QEMU.

This talk presents the architectural decisions behind building a compact yet Linux-capable RISC-V system emulator, highlighting trade-offs in ISA support, memory management, JIT design, and device virtualization, and sharing practical techniques with a lean footprint without sacrificing performance or correctness.

[1] https://github.com/sysprog21/rv32emu
Speakers
avatar for Jim Huang

Jim Huang

Assistant Professor, National Cheng Kung University
Drawing from his contributions to the Android Open Source Project (AOSP), Jim specializes in real-time performance tuning and optimization of Linux-based automations. Additionally, he is a co-founder of the LXDE project, a lightweight desktop environment widely utilized in embedded... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
208C+D (Level Two)
  Embedded Linux Conference

2:10pm CDT

Using Embedded Linux for Autonomous Robot Control - Chloe Zhu, The Admissions Authority
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
The NAO robotics platform has been around for some time, originally developed by Aldebaran and SoftBank, and now by Maxtronics. Its OpenNAO operating system is based on the Gentoo embedded Linux OS, and uses the NAOqi API for autonomous robot control. We also used the OpenCV computer vision library as part of our open source software stack to program our NAO humanoid robot.

In this talk, I will present our work to engineer an autonomous behavior system that fuses real-time vision detection with motion planning and closed-loop control. We implemented a perception-to-action pipeline using NAOqi, OpenCV, and camera and motion calibration to detect targets, estimate relative pose, and drive head movement, walking, and task actions through a finite-state controller. We designed the system for robust target search, alignment, and approach under real hardware constraints. I will present a summary of our work, our results from participation in a robot golf tournament, and some thoughts on using open source to develop next-generation robotics platforms.
Speakers
avatar for Chloe Zhu

Chloe Zhu

Chief Technology Officer, The Admissions Authority
Hi everyone! My name is Chloé (Fangjun) Zhu. Currently, I am working on developing AI algorithms for unmanned aerial vehicle/drones, and for educational consultancy. I am also working on automation for industrial process control.

Prior to these, I worked as an Electrical Engine... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
208A+B (Level Two)
  Embedded Linux Conference
  • Audience Experience Level Any

2:10pm CDT

Breaking the TCP Barrier: Accelerated I/O for S3 with RDMA - Vidushi Mishra, IBM/Redhat
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
S3 APIs power modern Linux infrastructure, yet most object storage traffic still relies on TCP/IP. Under high concurrency and large transfers, TCP becomes CPU-intensive and limits throughput. RDMA promises Accelerated I/O through kernel bypass and zero-copy data movement—but applying RDMA to S3 workloads is not the same as NFS or block storage.

This session explores how RDMA can accelerate S3-style object transfers in distributed storage systems. We examine memory registration strategies, connection scalability, and what changes when dealing with multipart uploads, HTTP range reads, and parallel clients.

Through real validation scenarios, we compare throughput, latency, and CPU usage across TCP and RDMA paths. We’ll also highlight where RDMA excels, and where it falls short, such as in small-object or metadata-heavy workloads.

Attendees will gain a practical framework for evaluating Accelerated I/O in their own Linux storage environments: what to measure, what to tune, and what performance gains to realistically expect.
Speakers
avatar for Vidushi Mishra

Vidushi Mishra

Senior Storage Engineer in Storage Ceph, IBM/Redhat
Storage Engineer (12 yrs) in distributed storage—Ceph & S3-compatible object systems. I build and break at scale: performance + scalability + correctness across multi-tenant/multisite deployments (resharding, replication, lifecycle, archive tiers, IAM/ACLs, notifications). Benchmarks... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
205C+D (Level Two)
  Linux
  • Audience Experience Level Any

2:10pm CDT

Introduction To the Linux Boot Process - Angelina Vu & Karissa Sanchez, Microsoft
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
From the moment you press the power button to the instant the login prompt appears, a complex sequence of events happens behind the scenes to get your Linux system up and running. This talk aims to demystify the Linux boot process through a deep dive into each stage.
Starting from the role of system firmware, we compare legacy BIOS with modern UEFI and see why there has been a shift to UEFI. From there, we move on to the bootloader stage, discussing its function in loading the kernel and passing control over to it. Using GRUB as an example, we show how to view and customize bootloader configurations. Next, we explore the kernel initialization stage, including the role of initrd/initramfs, how the real root filesystem is mounted, and how the kernel initializes essential system components and launches the first userspace process. From there, control transitions to the init system. We examine SysVinit and its more modern alternative, systemd, and their roles in bringing the rest of the system online.
Finally, we cover practical debugging techniques, such as viewing boot logs, analyzing boot performance, optimizing boot up time, and improving security with features like Secure Boot.
Speakers
avatar for Angelina Vu

Angelina Vu

Software engineer, Microsoft
Angelina is a software engineer working on Microsoft’s Linux Emerging Technologies team.
avatar for Karissa Sanchez

Karissa Sanchez

Software Engineer, Microsoft
Karissa is a software engineer at Microsoft working on Linux Emerging Technologies. She recently graduated from MIT with a master’s degree in computer science. Her interests include Linux systems security and natural language processing.
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200H (Level Two)
  Open Source 101

2:10pm CDT

Beyond First PRs: Converting Students Into Long-Term Open Source Contributors - Mohd Toukir Khan, CodeDay
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
Open source projects everywhere are asking the same question: where will the next generation of reliable contributors or maintainers come from? The answer is already here, students, but most projects lack a repeatable, maintainer-friendly system to convert student interest into sustained, high-quality contributions.

This session presents a field-tested, scalable framework for turning students from first-time contributors into long-term community members and technical collaborators. Drawing from real program experience working with student contributor pipelines, we will break down how maintainers and organisations can design contribution pathways that reduce review burden, improve contribution quality, and increase retention, without diluting project standards.

We will cover practical ideas for structuring beginner-to-advanced issue ladders and contributor experience design that keeps students engaged beyond their first pull request. The talk will also address common maintainer concerns around signal-to-noise ratio and review bandwidth when working with early-career contributors.
Speakers
avatar for Mohd Toukir Khan

Mohd Toukir Khan

Director, Open Source Partnerships, CodeDay
As a Director at CodeDay Labs, I help students make their first-ever open-source contribution. My journey in tech revolves around a simple yet powerful idea: empowering communities through education.
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200J (Level Two)

2:10pm CDT

Running an Open Source Vulnerability Rewards Program - Hayden Blauzvern, Google
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
Stewardship of open source software extends beyond code contribution; it also requires a proactive commitment to security. In this session, a lead for Google's Open Source Software Vulnerability Rewards Program (OSS VRP) shares insights from managing a program that secures a vast and rapidly evolving portfolio of open source projects.

We will explore the complexities inherent in operating a VRP with such a broad scope. The session will cover lessons learned on identifying common vulnerability patterns, executing remediations at scale, and managing security incentives across an extensive landscape of diverse, unconnected projects.

As a call to action, we will encourage other organizations to invest in similar rewards programs for the projects they maintain, supporting and incentivizing security researchers to build a more resilient open source ecosystem for everyone.
Speakers
avatar for Hayden Blauzvern

Hayden Blauzvern

Technical Lead Manager, Google
Hayden Blauzvern is a technical lead manager on Google’s Open Source Security Team, focused on making open-source software more secure through code signing and applied transparency. Hayden is a maintainer and the community chair on the Sigstore project.
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200I (Level Two)

2:10pm CDT

What's the Deal With Human Rights and Technical Standards? - Daniel Appelquist, Samsung
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
The UN Office of the High Commissioner for Human Rights released a report late last year : "Making technical standards
work for humanity: New pathways for incorporating international human rights into standards development for digital technologies." Amongst other things, this report referenced the W3C Ethical Web Principles, Privacy Principles, and Code of Conduct as key examples of structural changes in the technical standards community in support of human rights. This talk will seek explore the relationship between technical standards and human rights, and focus on what we're doing in W3C to further the goal of supporting human rights.
Speakers
avatar for Daniel Appelquist

Daniel Appelquist

Open Source Strategist, Samsung
Dan Appelquist is Open Source Strategist at Samsung Open Source Group. He is a web & mobile industry veteran and long-time participant and leader in open source and open standards. He is co-chair of the W3C Advisory Board and was previously co-chair of the W3C Technical Architecture... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200E (Level Two)

2:10pm CDT

Is Maven Safe for Production? - Adam Kaplan, Red Hat & Manfred Moser, Chainguard
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
Apache Maven’s central role in the Java ecosystem is undeniable, however its flexible plugin framework creates significant hurdles for adopting modern secure software practices. Securing the Java software supply chain to meet CRA and other regulatory requirements can feel like a daunting, if not impossible task.

This session will dive deep into the technical complexities of producing secured Maven builds through the practical experiences of two open source redistributors. You will learn strategies for producing SLSA artifacts for Maven builds, approaches for signing Java artifacts with Sigstore Cosign, and barriers to producing complete and accurate Software Bills of Materials (SBOMs) with Maven. We will also explore newer developments in the Maven ecosystem for cataloging dependencies and establishing trust in the Maven build process. This talk will conclude with a discussion of current gaps in Maven that could be addressed with the upcoming release of Maven 4.
Speakers
avatar for Adam Kaplan

Adam Kaplan

Senior Principal Software Engineer, Red Hat
Adam Kaplan (he/him/his) is a software engineer at Red Hat, a maintainer of the Shipwright and Tekton projects, and former CD Foundation Governing Board member. He currently leads efforts to simplify hybrid cloud application development and secure Red Hat's software supply chain... Read More →
avatar for Manfred Moser

Manfred Moser

Sr Principal Dev Rel Engineer, Chainguard
Manfred Moser is a Sr Principal DevRel Engineer at Chainguard, bringing a profound focus on software supply chain security to the open source world. A dedicated community leader and published author, his technical expertise spans decades as a software engineer and advocate. He has... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200G (Level Two)

2:10pm CDT

From Pull Request To Patient Safety: How Tidepool Built an Open-Source Quality Management System - Tapani Otala, Tidepool
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
When software can directly affect whether someone lives or dies, "move fast and break things" isn't an option. But does that mean safety-critical software can't be open source? Tidepool's experience building Tidepool Loop - an FDA-cleared, open-source automated insulin delivery (AID) system for people with Type 1 diabetes - proves it can.

This talk explores how Tidepool developed an open-source quality management system (QMS) that achieves full requirements traceability and testability while preserving the collaborative, transparent ethos of open-source development. We'll walk through the real-world challenges of mapping regulatory requirements to code contributions, maintaining traceability across a distributed contributor base, and building test infrastructure that satisfies both FDA expectations and open-source community standards.

Attendees will leave with a practical framework for applying requirements traceability and verification practices to open-source projects operating in regulated or safety-critical domains from medical devices to automotive systems to critical infrastructure.
Speakers
avatar for Tapani Otala

Tapani Otala

VP, Engineering & Information Security Officer, Tidepool
Tapani has delivered innovative consumer electronics and cloud services over a 30+ year career. Before joining Tidepool in 2018, he was Sr. Director of Engineering at Samsung Research America, building cloud services for SmartTV and mobile apps. Prior to Samsung, he grew and led global... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200C (Level Two)
  Safety-critical Software
  • Audience Experience Level Any

2:10pm CDT

Building Autonomy on PX4: A Hands-On Workshop for Embedded and Robotics Developers (Continued) - Ramon Roche, The Linux Foundation & Nuno Marques, Drone Solutions
Wednesday May 20, 2026 2:10pm - 5:00pm CDT
By the end of this workshop, every attendee will land a simulated drone precisely on an ArUco marker using computer vision, with PX4 running the drone and ROS 2 handling the control logic. PX4 powers over a million drones worldwide, and in this session you'll run the exact same production firmware on your laptop. Precision landing on a visual marker is a real-world capability used in package delivery, autonomous charging, and marine recovery, and you'll build it from scratch.

We'll start by booting PX4 in Gazebo simulation and exploring the architecture of a production flight stack, including uORB, the pub-sub middleware that connects every module in PX4. From there, we'll connect PX4 to ROS 2 via the uXRCE-DDS bridge, build a custom flight mode using the px4-ros2-interface-lib, detect ArUco markers with OpenCV, and estimate pose from a simulated camera, and finally wire perception into the flight mode to execute an autonomous precision landing.

This workshop is for embedded developers looking for a robotics application of their existing skills, ROS 2 developers wanting to move beyond MAVLink offboard control, and anyone interested in seeing how perception, control, and middleware come together in a real flight stack. No drone experience required.
Hosted by Dronecode maintainers Ramón Roche and Nuno Marques, with guest contributors from the PX4 ecosystem.

Workshop Requirements (please read before attending): 
Bring a laptop. Any OS works, but in order of expected smoothness: Linux is your best bet, followed by Windows, then macOS. Workshop materials and setup instructions live at https://github.com/Dronecode/ossna-26-workshop. Pre-install the Docker containers before arriving, since conference Wi-Fi might be unreliable and pulling multi-gigabyte images on-site will eat into your workshop time. macOS users should note that the container image doesn't run Gazebo well; use the official PX4 setup script at https://github.com/PX4/PX4-Autopilot/blob/main/Tools/setup/macos.sh with the --sim-tools flag to install Gazebo natively (details in the workshop repo). Join the Dronecode Discord at https://chat.dronecode.org for workshop updates, setup help, and community support before, during, and after the event, and keep an eye on the repo and Discord in the days leading up for any last-minute changes.

Speakers
avatar for Nuno Marques

Nuno Marques

Founder and Lead Software Engineer, Drone Solutions
Nuno Marques has more than 5 years of software engineering and system integration experience as a contractor and consultant, recording the participation in over 30 projects and product development for more than 25 companies and organisations in the drone industry over these years... Read More →
avatar for Ramon Roche

Ramon Roche

General Manager, The Linux Foundation
Ramón Roche is General Manager of the Dronecode Foundation, an open-source project under the Linux Foundation supporting drone and robotics development. He leads a global ecosystem behind technologies like PX4 and Pixhawk, and has over a decade of experience in open source. Ramón... Read More →
Wednesday May 20, 2026 2:10pm - 5:00pm CDT
200D (Level Two)

3:05pm CDT

Cache Me If You Can: Decentralize Your Distributed Caches With Hollow - Viswanathan Ranganathan, Independent
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Distributed caches are often used for scenarios that don't actually require them. For massive datasets (100's of GB's or more), distributed caches make sense—the data simply won't fit in a single node's memory. However, distributed caches tend to be overkill when working with smaller data sets (100s of MBs to 10s of GBs) that do fit in memory. Additionally, using traditional In-Memory caching libraries creates additional operational challenges, such as cache stampedes during TTL expiration, memory spikes during reloads, and long cold-start times that directly affect deployment velocity.

This talk proposes an alternate, unconventional view: What if we could decentralize our cache while centralizing its preparation? We'll discuss how dataset distribution using Hollow (an open-source project by Netflix) enables applications to serve data from local memory with microsecond access latency while staying perfectly synchronized via delta-based updates.

We'll cover:
- Design trade-offs that make this pattern ideal for GB-scale, read-heavy workloads.
- Delta-based updates that optimize cache reloads/refreshes.
- Zero-downtime updates applied in milliseconds without memory spikes.
Speakers
avatar for Viswanathan Ranganathan

Viswanathan Ranganathan

Independent Software Practitioner
Viswanathan Ranganathan is a Senior Engineer at Netflix, where he's part of the Delivery Engineering team that powers every service deployment across the platform. His current focus is on building deployment safety and confidence features for Netflix's infrastructure. Previously... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200A (Level Two)
  Cloud + Orchestration

3:05pm CDT

The Service Mesh: Solving Microservice Chaos (And When You Actually Need One) - Mofesola Babalola, Extreme Networks & Hannah Olukoye, DKB Code Factory
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Microservices promised speed and independence, but for many SREs and developers, they delivered network complexity. Suddenly, we're all part-time network engineers. We have to code retry logic, timeouts, and circuit breakers into every service. We struggle to get uniform "golden signal" metrics. And how do we enforce that all 50 of our polyglot services are communicating securely over mTLS?

This is the "microservice tax," and it's holding us back.

Enter the service mesh. You've heard the buzzwords, Istio, Linkerd, but what is a mesh, and what problems does it actually solve? Is it just hype, or is it the key to taming a complex distributed system?

We'll cover the three pillars of a mesh:

Reliability: Automatic retries, timeouts, and circuit breakers.

Observability: Uniform metrics, logging, and tracing for every call.

Security: Automatic mTLS (encryption) and fine-grained authorization policies.
Speakers
avatar for Mofesola Babalola

Mofesola Babalola

Staff Site Reliability Engineer, Tempo.io
Mofesola Babalola is a Site Reliability Engineering leader, managing large-scale observability and service mesh systems powering millions users. With deep experience in Kubernetes, Istio, ArgoCD, and AWS, he specializes in building resilient platforms and automating infrastructure... Read More →
avatar for Hannah Olukoye

Hannah Olukoye

Engineering Manager, DKB Code Factory
Hannah is an Engineering Manager who translates complex software engineering concepts into people-centric strategies. Leveraging her background as a software engineer and Google Developer Expert for Android, she now focuses on building platforms that reduce developer cognitive load... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200F (Level Two)
  Cloud + Orchestration

3:05pm CDT

Building the Simplest Possible Linux System - Rob Landley, Hobbyist
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Once you've done enough of them, putting together a simple Linux system is easy. The hard part is working out what "simple" means in each new context.

We'll start by building and booting an example minimal Linux system to a shell prompt, first under QEMU and again on real hardware. Then we'll explain the theory: build environment (dependency management, reproducibility), native vs cross compiling (toolchain selection, libc selection, static vs dynamic), board bringup theory, kernel configuration, initramfs creation (and other root filesystem options), installing and booting, the init process and system bringup, hardware resource management and I/O categories, and running "your app" on its own dedicated device.

If there's time we'll go into software dependencies AGAIN (on target this time), add an example server (sshd), add a native toolchain to compile "hello world" on the target (build vs development environment), and some perspective on the online book "Linux From Scratch" for further reading (plus "what is a container".
Speakers
avatar for Rob Landley

Rob Landley

Hobbyist, Hobbyist
I've been working on Linux since 1998. I maintain toybox and mkroot. I used to maintain busybox, and was linux-kernel Documentation maintainer for a few months forever ago. I converted initramfs to use tmpfs after repeatedly failing to convince somebody else to do it, and wrote the... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
208C+D (Level Two)
  Embedded Linux Conference

3:05pm CDT

When 10,000 Screens Go Dark: Engineering Resilient Linux Drivers for Manufacturing Reality - Ram Mohan Rao Chukka, JFrog & Subhajit Ghosh, Tweaklogic
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Ten thousand LCD panels passed Incoming Quality Control. Firmware injection began. Production stopped.
During the development of our next-generation Automated Fare Collection (AFC) machines, we qualified multiple LCD vendors, designed a custom MIPI DSI touchscreen panel, developed display and peripheral drivers, and prepared for mass production. Everything worked—until firmware flashing began. Devices that previously functioned flawlessly suddenly booted to dead displays. The same firmware image now failed across the line.
The root cause wasn’t firmware. It wasn’t hardware failure. It was a silent vendor-side change: the LCD panel driver IC had been swapped for a different silicon revision—without changing the panel model.
The Linux DRM panel framework assumes static hardware described in the Device Tree. Manufacturing does not. MIPI DSI panel drivers are based on LCD model types not Display IC model types.
This talk presents a real-world production failure and the redesign that followed: replacing static panel definitions with runtime detection of display controller ICs via MIPI DCS, dynamic initialization sequencing, and a more resilient driver architecture.
Speakers
avatar for Ram Mohan Rao Chukka

Ram Mohan Rao Chukka

Senior Software Engineer, JFrog
Ram is a Senior Software Engineer at JFrog R&D . Previously worked for startup companies like CallidusCloud (SAP Company), Konylabs. Loves Automation, Linux, openSource
avatar for Subhajit Ghosh

Subhajit Ghosh

CTO, Tweaklogic
Embedded Linux professional and electronics hobbyist with experience in Linux driver development, kernel programming, system software and Edge AI.
Linux kernel contributor in device driver space.
Enjoy working with hardware and technology space.
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
208A+B (Level Two)
  Embedded Linux Conference

3:05pm CDT

Linux Live Patching: Architecture, Maturity, and Operational Reality - Ratnangi Nirek, Microsoft
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Linux Live Patching enables the application of critical kernel updates without requiring system reboots, addressing the growing demand for continuous availability in modern Linux deployments. As Linux underpins cloud infrastructure, telecommunications platforms, and mission-critical enterprise systems, rebootless patching has moved from a niche capability to an operational necessity.

This talk provides a practical overview of Linux live patching as implemented in the mainline kernel. It explains how live patching works at the function level, the kernel infrastructure that enables it, and the trade-offs involved in applying kernel changes at runtime. Attendees will gain insight into where live patching is effective, where it is not, and how it is used in real-world production environments.
Speakers
avatar for Ratnangi Nirek

Ratnangi Nirek

Sr Cloud Escalation Engineer, Microsoft
I'm a Senior Cloud Escalation Engineer and Subject Matter Expert specializing in Linux and Cloud for our Customer Service Support in Microsoft, focusing on delivering top-notch support to our clients. I'm passionate about knowledge sharing and mentorship, helping to ramp up new team... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
205C+D (Level Two)
  Linux

3:05pm CDT

Automating FOSS License Compliance Analysis: A Multi-LLM Workflow Approach Using N8n & FOSSology - Raghavendra Kamatagi, MBRDI
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
The EU Cyber Resilience Act (CRA), US Executive Order 14028, and CISA SBOM guidelines demand efficient FOSS license compliance in automotive software. Manual compliance analysis typically requires 25-50 hours per 100 components, creating significant release bottlenecks.
This talk presents an automated compliance workflow integrating n8n workflow automation, multi-LLM repository discovery (supporting Gemini, Claude, Perplexity, ChatGPT and Ollama), and FOSSology license scanning achieving an 80% reduction in compliance analysis time.
Our multi-LLM fallback architecture achieved 94% success in automated repository discovery, while FOSSology's agent suite provided license and copyright analysis superior to manual review. The system generates industry-standard artifacts including SPDX 2.3, CycloneDX SBOM, unified reports and ReadmeOSS formats.
Attendees will learn how to build AI-assisted compliance automation for regulated environments and take away a replicable framework for industrial FOSS governance at scale.
Speakers
avatar for Raghavendra Kamatagi

Raghavendra Kamatagi

FOSS Compliance Lead, Mercedes-Benz R&D India, MBRDI
Raghavendra Kamatagi is the FOSS Compliance Lead , driving the OSS process framework aligned with OpenChain ISO 5230 standards. He leads compliance automation efforts, integrating Black Duck Hub scans into Maven, Node.js, Golang, and Gradle build environments via CI/CD pipelines... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200I (Level Two)

3:05pm CDT

The Inclusion Disconnect: Scaling Open Source Strategies for the Large Enterprise - Masae Shida, VMware (Broadcom)
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Open source inclusion strategies often overlook the unique business goals and scaling complexities of large organizations. This talk addresses that disconnect, offering experience-led guidance on establishing effective cross-functional communication channels.
While many programs exist to encourage community inclusiveness, they rarely translate to corporate environments "as-is." Based on challenges observed in previous BoF sessions - although many people were interested in adopting open source, they were also frustrated with the same issues, yet did not have a functioning cross-BU channel in which to discuss. To close this gap I ran several programs to execute that:
• Connect and learn: Align teams through shared interests
• Shift mindsets: Instill an "upstream first" culture and environment
• Break barriers: Identify and remove obstacles preventing contributions
• Drive strategy: Leverage market and company trends to support decision-making
Participants will walk away with actionable strategies to enhance inclusiveness, ensuring that engagement efforts benefit both the organization’s bottom line and the wider open source ecosystem.
Speakers
avatar for Masae Shida

Masae Shida

Staff Open Source Program Manager, VMware (Broadcom)
Masae is a Staff Open Source Program Manager leading the company’s open source business and community strategy alignment. Previously she led numerous programs including large-scale DX/IT transformations as part of M&A at Cisco, security/compliance process implementation and consumer... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200J (Level Two)

3:05pm CDT

Standardizing Deterministic Interoperability and Resource-Intelligent Design in Medical Robotics - Lilinoe Harbottle, San Jose State University
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
In medical robotics, innovation can be bottlenecked by vertically integrated architectures that contribute to medical “deserts” due to high costs and limited interoperability. This session explores architectural frameworks for standardizing deterministic interoperability, shifting the safety burden from non-transparent hardware to auditable software logic. By establishing these standards, this work ensures that clinical technology is not restricted by fixed vendor-lock.

Through a methodology of high-precision kinematic verification and deterministic mapping, open-source code becomes the catalyst for hardware autonomy. This approach ensures sub-millisecond reliability in the operating room while promoting lifecycle sustainability through vendor-neutral middleware.

Attendees will learn about the implementation of safety-operated envelopes and clinical validation models that facilitate reproducible research and lower barriers to local manufacturing. By prioritizing architectural transparency over closed-loop frameworks, this session outlines a path toward a more sustainable and accessible future for global healthcare.
Speakers
avatar for Lilinoe Harbottle

Lilinoe Harbottle

Systems & Data Engineer, Independent / BME Researcher
Lilinoe Harbottle is a Systems & Data Engineer specializing in high-reliability software for medical robotics. She focuses on standardizing deterministic interoperability and vendor-neutral frameworks to ensure sub-millisecond reliability in safety-critical environments. A Sequoyah... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200C (Level Two)
  Safety-critical Software

3:45pm CDT

Ask the Expert Sessions
Wednesday May 20, 2026 3:45pm - 4:20pm CDT
Ask the Expert Session: Sit down with open source experts to gain knowledge 1:1 and ask all your pressing questions!

No sign-up necessary!  More information coming soon!
Wednesday May 20, 2026 3:45pm - 4:20pm CDT
TBA

3:45pm CDT

4:20pm CDT

Beyond Containers. Why MicroVMs Are Essential for Multi-Tenant Workloads - Alex Zenla, Edera
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
Containers are the de facto deployment model for our applications today, but is your Container Runtime appropriate for multi-tenant workloads?

If you don't know which Container Runtime you're using today, then it's likely that you're using a shared kernel, so your multi-tenant workloads aren't as isolated as you might think they are.

In this talk, we'll demonstrate how MicroVMs can provide a Hardened Container Runtime. We'll build an understanding of why namespaces and cgroups are limited in the isolation they provide, how the MicroVM architecture can provide an isolated kernel, and the open-source tools available today to implement this.

To demonstrate this, we'll use a Multi-Tenant Kubernetes Cluster to show an attack that can break container isolation, and how MicroVMs can mitigate it.
Speakers
avatar for Alex Zenla

Alex Zenla

CTO, Edera
Alex is a Founder & CTO at Edera, building technology for securing containers using hypervisors in Rust. She has contributed to many open source projects including Chromium, Chromium OS, Dart, and Ubuntu, some as early as 11 years old. Alex started in the corporate world at the age... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
200F (Level Two)
  Cloud + Orchestration

4:20pm CDT

ELC Closing Game
Wednesday May 20, 2026 4:20pm - 5:00pm CDT

Wednesday May 20, 2026 4:20pm - 5:00pm CDT
208A+B (Level Two)

4:20pm CDT

Syscall Tracing at Cloudflare Scale - Chris Arges, Cloudflare
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
System call tracing is critical for security monitoring, auditing, and debugging in large-scale Linux deployments. This talk explores kernel-level syscall tracing mechanisms, comparing their architectures, performance characteristics, and operational trade-offs.

We'll examine multiple approaches using eBPF, kernel tracepoints, and the Linux audit subsystem.
The presentation covers technical implementation details: how each mechanism hooks into the kernel syscall path, overhead characteristics under load, and the types of data they capture. I'll discuss performance implications and optimizations through real-world examples.
Speakers
avatar for Chris Arges

Chris Arges

Senior Systems Software Engineer, Cloudflare
Currently a Senior Systems Software Engineer at Cloudflare. I like to build things. I have a master's degree in Computer Engineering and 18 years of experience in software development and leadership both writing code and leading teams.

My mission is to make the world better where I can. Through my work I want to make the Internet more secure and reliable for everyone. In my free time I enjoy coaching and inspiring a future generation to grow, innovate and create a better world... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
205C+D (Level Two)
  Linux

4:20pm CDT

Day 2 Neurodiversity: Moving Beyond Fundamentals With Merge Forward - Ryan Etten, RHCA, Red Hat & Diana Todea, VictoriaMetrics
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
Open source has made progress in recognizing neurodiversity, but most conversations remain at the level of awareness and good intentions. What happens on Day 2, after we agree that inclusion matters?

We will examine what is still missing in the open source neurodiversity conversation, critique the narrative of neurotalent, and evaluate whether framing neurodivergent contributors as inherently gifted helps inclusion or creates new pressures. We need to ask: are we reinventing existing initiatives, or does the real gap lie in how our contribution models, communication norms, and governance structures are designed?

Our goal is to tackle structural questions rather than proposing a new label or movement. How can open source communities reduce cognitive friction, clarify expectations, and design processes that support a wider range of thinking styles? What concrete steps move us beyond fundamentals and into sustainable practice? Join Merge Forward to help move open source from a culture of good intentions to one of engineered accessibility.
Speakers
avatar for Ryan Etten

Ryan Etten

Senior Architect & Team Lead, Red Hat
Ryan Etten is a Senior Architect and Team Lead at Red Hat, specializing in the intersection of cloud native architectures and the human systems required to sustain them. A Red Hat Certified OpenShift Architect, he is a core contributor to the CNCF Merge Forward initiative and an advocate... Read More →
avatar for Diana Todea

Diana Todea

Developer Experience Engineer, VictoriaMetrics
Diana is a Developer Experience Engineer at VictoriaMetrics. She has worked as a Senior Site Reliability Engineer focused on Observability. She is an active member of the OpenTelemetry CNCF open source project, co-organizer of Cloud Native Days Romania, co-lead of neurodiversity working... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
200J (Level Two)

4:20pm CDT

From Active To Archive: Shepherding Repositories Through Their Sunset - Natalia Luzuriaga, Dinne Kopelevich, Remy DeCausemaker & Sachin Panayil, CMS.gov; Dawn Foster, Independent
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
In the world of Open Source there are plenty of talks, resources, and guides about where to begin, and how to grow your project. But what happens at the end? How do you know when It Is Time? And how do you say goodbye with compassion and dignity?

In this talk, members of the CHAOSS.community and the Open Source Program Office at the Digital Service at CMS.gov will be sharing their latest practitioner’s guide on archival. This talk will be highlighting use cases from the private and public sector, and demonstrating how to use repository metrics, maturity models, and archival checklists for succession planning, stewardship, and sunsetting of Open Source projects.

Projects are not valuable solely based upon the utility of their results or outputs, they reflect the record of our progress. Archives provide transparency, accountability, and attribution. Archives build trust, reduce duplicate work, and reduce risk. The work saved in our archived repositories allows historians and practitioners to more accurately and completely understand the story of open source.
Speakers
avatar for Remy DeCausemaker

Remy DeCausemaker

Open Source Lead, Digital Service at Centers for Medicare & Medicaid Services, CMS.gov
Remy DeCausemaker is the Open Source Lead for the Digital Service at the Centers for Medicare & Medicaid Services (CMS.) Remy helps developers, designers, and other contributors work with dedicated civil servants to create open accessible healthcare technology projects, programs... Read More →
avatar for Dawn Foster

Dawn Foster

Open Source Strategy Consultant, Self-Employed
Dr. Dawn Foster is an OSS strategy consultant. She is also on the board of CHAOSS and OpenUK, and was previously a co-chair of the CNCF Contributor Strategy Technical Advisory Group. She has 20+ years of experience at companies like VMware and Intel with expertise in community, strategy... Read More →
avatar for Natalia Luzuriaga

Natalia Luzuriaga

Software Engineer, Digital Service at CMS.gov
Natalia is a software engineer supporting the Digital Service at the Centers for Medicare and Medicaid Services (CMS.gov) where she is involved in launching and growing the first Open Source Program Office in the federal government. Currently, her work is focused on building tools... Read More →
avatar for Dinne Kopelevich

Dinne Kopelevich

Software Engineer, Digital Services at CMS.gov
Dinne is a United States Digital Corps Fellow detailed with the Open Source Program Office at the Digital Service at the Centers for Medicare and Medicaid Services. She is local to Denver, loves to travel, and has visited 6 of 7 continents.
avatar for Sachin Panayil

Sachin Panayil

Software Engineer @ Digital Service at Centers for Medicare & Medicaid, Centers for Medicare and Medicaid
Sachin is a United States Digital Corps Fellow detailed with the Open Source Program Office at the Digital Service at the Centers for Medicare and Medicaid Services working as a Software Engineer. Coming from New York City, he loves Hip Hop and recently started his Muy Thai journ... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
200I (Level Two)

4:20pm CDT

Modernizing Software Verification - Craig Christianson, United States Air Force
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
In this session, I will discuss the importance of verifying safety-critical software by giving real-world examples of peoples' lives who were saved or put at risk by software. I will share the compliance challenges faced by software engineers working on safety-critical software. I will give a brief overview of software assurance requirements for safety-critical systems and show how formal methods and automated reasoning are accelerating and improving the assurance process. I will give a brief introduction to automated reasoning tools and semantics, and I will share success stories from a handful of open-source projects who are using these methods to reach assurance goals faster. I will finish by walking the audience through the design of a simple demonstration project that utilizes these technologies.
Speakers
avatar for Craig Christianson

Craig Christianson

Electrical Engineer, United States Air Force
Craig Christianson is an Electrical Engineer currently serving in the 309th Software Engineering Group in the United States Air Force. Craig is a member of SkiCAMP, a small R&D team at Hill Air Force Base working to improve software development practices in the Air Force. Craig specializes... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
200C (Level Two)
  Safety-critical Software
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience Experience Level
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date -