Loading…
Open Source Summit + Embedded Linux Conference North America...
May 18-20, 2026
Minneapolis, MN
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central DaylightTime (UTC -5). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.


Company: Intermediate clear filter
arrow_back View All Dates
Wednesday, May 20
 

11:00am CDT

Running Open Source Cloud Infrastructure for Public Health at Scale: Lessons From Ghana - Derek Asamoah-Amoyaw, AngloGold Ashanti Malaria Control (AGAMal)
Wednesday May 20, 2026 11:00am - 11:40am CDT
Public health systems increasingly rely on open source cloud infrastructure to deliver critical services, yet many are built and operated under tight budget, connectivity, and skills constraints.

This talk shares real-world lessons from designing, deploying, and operating Linux-based, open source cloud infrastructure supporting malaria control and public health programs in Ghana. It covers practical decisions around hybrid cloud architecture, containerization, data reliability, security tradeoffs, and operational resilience in environments with intermittent connectivity and limited resources.

Rather than theory, this session focuses on what actually worked, what failed, and how open source tools enabled sustainable systems for nonprofits and public sector teams. Attendees will gain actionable insights into building resilient, scalable cloud platforms using open source technologies—especially when operating outside ideal conditions.

This session is intended for practitioners building or maintaining cloud infrastructure who want honest, field-tested guidance from real deployments.
Speakers
avatar for Derek Asamoah-Amoyaw

Derek Asamoah-Amoyaw

Senior IT Infrastructure Officer, AngloGold Ashanti Malaria Control (AGAMal)
Derek Asamoah-Amoyaw is a Senior IT Infrastructure Officer with experience designing and operating cloud and open source systems for public health and nonprofit organizations in Ghana. His work focuses on building resilient, secure, and scalable infrastructure in resource-constrained... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
200F (Level Two)
  Cloud + Orchestration

11:00am CDT

How AGL SoDeV Accelerates the Future of Mobility Through Open-Source Collaboration - Yuichi Kusakabe, Honda Motor Co., Ltd.
Wednesday May 20, 2026 11:00am - 11:40am CDT
Automotive Grade Linux (AGL) is advancing Software Defined Vehicle (SoDeV) as a foundation for open, scalable, and collaborative automotive innovation. As vehicles become increasingly software-centric, accelerating collaboration between AGL SoDeV initiatives and the broader open-source automotive community is critical to shaping the future of mobility.
This session highlights how AGL SoDeV acts as a collaboration hub that connects industry-driven development with open-source community contributions. Building on a previously presented demo, we introduce updated workflows and tooling that reduce collaboration friction, improve governance transparency, and enable faster feedback loops between SoDeV activities and OSS communities.
Through an updated live demonstration, we show how governance automation and clear contribution flows can function as enablers rather than barriers. The talk focuses on practical lessons learned from evolving AGL SoDeV collaboration models, explaining what has changed, why it matters, and how these improvements help communities and organizations innovate together more effectively.
Speakers
avatar for Yuichi Kusakabe

Yuichi Kusakabe

Chief Architect, Honda Motor Co., Ltd.
Yuichi Kusakabe is the Chief Architect at Honda Motor Co., Ltd. , AGL(Automotive Grade Linux) member and COVESA(Connected Vehicle Systems Alliance) member since 2011 with over twenty years of Automotive and Open Source Software Experience.
Prior to joining Honda Motor he worked... Read More →
Wednesday May 20, 2026 11:00am - 11:40am CDT
208A+B (Level Two)
  Embedded Linux Conference

11:00am CDT

When Similar Is Good Enough: Rethinking Caching for AI - Madelyn Olson, Valkey & Jacob Murphy, Google Cloud
Wednesday May 20, 2026 11:00am - 11:40am CDT
Caching has traditionally relied on exact matches: the same input produces the same cached output. AI systems challenge this assumption by introducing semantic similarity — requests that are different on the surface but equivalent in meaning. This talk explores how caching is evolving to support AI workloads, from classical key-value strategies to semantic caching using vector search. We'll walk through a practical architecture that layers exact and semantic caches in front of an expensive model and demonstrate how hybrid caching can reduce cost and latency. This talk will explore multiple open-source systems, such as OpenSearch and Valkey, and discuss the tradeoffs that they provide and when they matter.
Speakers
avatar for Madelyn Olson

Madelyn Olson

Principal Engineer AWS, Maintainer of the Open-Source Valkey Project, AWS
Madelyn Olson is a co-creator and maintainer of Valkey, a high-performance key-value datastore, and Principal Engineer at Amazon Web Services (AWS). She focuses on building secure and highly reliable features, with a passion in working with open-source communities.
avatar for Jacob Murphy

Jacob Murphy

Staff Software Engineer, Google Cloud, Google Cloud
Jacob is a member of the Valkey Technical Steering Committee and an engineer on Google Cloud's Memorystore team.
Wednesday May 20, 2026 11:00am - 11:40am CDT
200A (Level Two)
  Open AI & Data

11:00am CDT

Building an Interoperable and Responsible AI Ecosystem Through Standards and Open Source - Charles Eckel, CIsco Systems
Wednesday May 20, 2026 11:00am - 11:40am CDT
The rapid rise of AI and autonomous agents is transforming technology, from network infrastructure to intelligent applications. This session examines foundational efforts within leading global technology standards organizations (IETF, 3GPP, NIST, ETSI) and within the open source community, particularly the Linux Foundation, to establish essential frameworks for responsible, secure, and interoperable AI deployments.

Attendees will gain a comprehensive understanding of this evolving standardization landscape, the interplay with open source innovation, and opportunities to enhance and accelerate collaboration across these mostly disjoint communities to integrate AI ethically and securely into global networks.
Wednesday May 20, 2026 11:00am - 11:40am CDT
200E (Level Two)

11:00am CDT

Keep It Clean: Practical Strategies for Reducing Build-System and Host Tech Debt - Joe Schneider, Dojo Five
Wednesday May 20, 2026 11:00am - 11:40am CDT
Long-running embedded projects inevitably accumulate build-system and host-platform debt. Team turnover, drifting documentation, and “crunch mode” shortcuts compound over time until onboarding a new engineer takes weeks and even experienced developers struggle to make safe changes. These problems are especially acute in Linux-based and cross-platform environments, where host variability and undocumented assumptions undermine reproducibility.

This session distills lessons learned from modernizing embedded firmware build environments across Linux hosts and CI systems. Attendees will learn practical techniques for eliminating “it works on my machine” failures, accelerating incremental and clean builds, and making build behavior explicit and reproducible using open-source tooling. Topics include scripting and automation patterns, modern command runners, and structuring build systems to be CI-friendly and maintainable.

Joe Schneider, embedded systems veteran and CEO of Dojo Five, will share concrete practices that reduce onboarding time, improve build reliability, and restore developer productivity by systematically attacking build-system and host-level technical debt.
Speakers
avatar for Joe Schneider

Joe Schneider

CEO, Dojo Five

Wednesday May 20, 2026 11:00am - 11:40am CDT
200G (Level Two)

11:00am CDT

Software Supply Chain Management With the Yocto Project - Joshua Watt, Garmin
Wednesday May 20, 2026 11:00am - 11:40am CDT
Managing software supply chains is an important part of safety critical software. In this talk, Joshua will describe the technologies, methods and lessons learned that the embedded software space uses to manage software supply chains using the Yocto project.
Speakers
avatar for Joshua Watt

Joshua Watt

Staff Software Engineer, Garmin
Joshua is a Staff Software Engineer for Garmin with 18 years experience producing consumer electronics. He has worked on the Yocto SPDX SBoM implementation, and is a member of the Yocto Project TSC as well as the OpenEmbedded TSC.
Wednesday May 20, 2026 11:00am - 11:40am CDT
200C (Level Two)
  Safety-critical Software

11:55am CDT

Driving Strategic Value Through Open Source: OSPOs and R&D Organizations in the Era of the CRA - Georg Kunz & David Östman, Ericsson Software Technology
Wednesday May 20, 2026 11:55am - 12:35pm CDT
In today’s rapidly evolving tech landscape, aligning open source initiatives with product-focused R&D remains critical to achieving strategic business goals. We will share how Ericsson’s Open Source Program Office (OSPO) and R&D organizations collaborate on concrete challenges such as tightening cyber security requirements.

In this talk, David will present how we have ramped up a team to build and operate a Yocto Linux distribution, and how improved upstream engagement and ways-of-working allow us to better articulate and validate the business value behind this strategic investment. We will discuss the impact on developer productivity, product quality, security, CRA-readiness, and long-term maintainability.

At the same time, the EU Cyber Resilience Act (CRA) has become a major driver of change across our organization. Georg will share how the Ericsson OSPO and R&D have started to collaborate more tightly in response to the CRA. We will spotlight how the in-house Linux team addresses upcoming CRA requirements - and how their upstream work supports CRA compliance.
Speakers
avatar for Georg Kunz

Georg Kunz

Director Open Source Software, Ericsson
Georg is a director in Ericsson's Open Source Program Office. He is a passionate advocate for open source software and a long term contributor to a wide range of open source projects and communities. He currently serves on the Technical Advisory Council (TAC) and the Governing Board... Read More →
avatar for David Östman

David Östman

General Manager EST Sweden, Ericsson Software Technology
David is the General Manager of Ericsson Software Technology (EST) Sweden, leading a dedicated team of engineers developing open source software on projects like Linux, Yocto, and Valkey. With over 25 years of experience in the telecommunications industry, David began his career at... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200I (Level Two)

11:55am CDT

Retconning Accessibility Standards With ARIA-AT - Chris Cuellar, Bocoup
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Many accessibility applications and automated tests rely solely on an abstract representation of the user interface (the so-called "accessibility tree") as their source of truth. By ignoring the process that screen readers take to translate this abstraction into spoken text, developers often build false confidence in accessibility implementations and miss critical user experience issues.

This talk explores how Bocoup's technical innovations (capturing real screen reader output across platforms and operating systems) has enabled essential discussions among screen reader vendors, standards editors, and application developers at the W3C's ARIA-AT Community Group. We'll examine the incentive structures which pit market differentiation against consistency and even correctness. We'll demonstrate how the ARIA-AT project addresses this problem head-on with a test-driven approach to consensus and the ultimate goal of standardization.
Speakers
avatar for Chris Cuellar

Chris Cuellar

Engineer & Worker-Owner, Bocoup
Chris is a worker-owner at Bocoup and has nearly 15 years of experience building and creating on the web platform. Chris is also an artist, educator and community organizer and is based in unceded territory of the Tongva people and their neighbors (Los Angeles, California). In the... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200E (Level Two)

11:55am CDT

OCI Images: Not Just for Containers Anymore - Austin Abro, Defense Unicorns
Wednesday May 20, 2026 11:55am - 12:35pm CDT
Docker popularized the container; OCI standardized the artifact. That shift, from a specific format to a global specification, is what allowed us to expand beyond just 'running apps.' Now, whether it's Cosign for security, OpenTofu for infrastructure, or Zarf for air-gapped distribution, the ecosystem is leveraging a common foundation to solve complex supply chain problems. Additionally, Kubernetes’ recent work on OCI read-only volumes signifies a paradigm shift: we are now using images as a pure data transfer mechanism rather than just a runtime environment. Yet the elegant design that enables the OCI images is mostly hidden from users.

In this session, we'll create our own custom OCI artifact from scratch. Along the way, we'll learn the benefits of the OCI specification: the efficiency of its storage model, its simple cross-platform experience, and its secure-by-default design. Developers will walk away with a starting point for packaging their own custom artifacts, while practitioners will gain a deeper understanding of the OCI artifacts powering their workflows.
Speakers
avatar for Austin Abro

Austin Abro

Software Engineer, Defense Unicorns
Austin Abro is a full-time maintainer of Zarf at Defense Unicorns, a tool built to enable declarative creation & distribution of software into air-gapped/constrained environments. Previously, he worked at Fiat Chrysler as a full stack Java developer before being promoted to technical... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200G (Level Two)

11:55am CDT

The Final Phase of Xen Safety: Solving Coverage and Residual Gaps - Stefano Stabellini, AMD
Wednesday May 20, 2026 11:55am - 12:35pm CDT
AMD, in collaboration with the Xen community, continues to advance efforts to make the Xen hypervisor safety-certifiable to ISO 26262 ASIL D and IEC 61508 SIL 3. The project has progressed from Safety Concept Approval toward the final certification phase.

This presentation will share practical lessons learned, including how we structure requirements and architecture specification documents to make them easier to review for Open Source experts. It will describe the tools and processes we use to maintain end-to-end traceability and explain how we leverage GitLab to automate requirements-based testing and verification pipelines.

We will also address the remaining challenges on the path to completion, including code coverage and FMEA. In particular, we will explain why achieving comprehensive code coverage is uniquely challenging for a widely used Open Source project such as Xen and outline the strategies we are applying to meet 100% code coverage targets.

Finally, we will describe our approach to FMEA (Failure Mode and Effects Analysis) and how it evolved to better align with existing upstream Xen failure-handling practices.
Speakers
avatar for Stefano Stabellini

Stefano Stabellini

Fellow, AMD
Stefano Stabellini is a Fellow at AMD, where he leads system software architecture and the virtualization team. Previously, he developed a virtualization-based security solution for containers and authored several security articles. Stefano has been involved in Xen development since... Read More →
Wednesday May 20, 2026 11:55am - 12:35pm CDT
200C (Level Two)
  Safety-critical Software

2:10pm CDT

Building a Shared, Persistent Virtual Filesystem for WebAssembly - Ayako Hayasaka, LY Corporation
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
Server-side WebAssembly applications need filesystem access, but current options are limited. Host filesystem access breaks portability and sandboxing. wasi-vfs is read-only and targets Preview 1. wasi-virt supports Preview 2 but remains read-only and single-application only.
We present a virtual filesystem built on WASI Preview 2 and the Component Model that supports read/write, multi-app sharing, dynamic attachment via RPC, and optional S3 persistence. The stack uses open-source tooling from the Bytecode Alliance: wasmtime, wac, and wit-bindgen.
The talk walks through our architecture: an inode-based in-memory filesystem exposed through custom adapters implementing wasi:filesystem, composed at build time with wac plug. We then separate the filesystem into a standalone server, add RPC for runtime attachment without recompilation, and layer S3 persistence for durability. Each stage is demonstrated live.
We close with lessons learned and tradeoffs between build-time composition and runtime RPC. No deep Wasm expertise is assumed. This talk is for developers building Wasm platforms, those exploring the Component Model, and anyone curious about filesystem virtualization in WebAssembly.
Speakers
avatar for Ayako Hayasaka

Ayako Hayasaka

Software Engineer, LY Corporation
Primarily responsible for providing company-wide technical support in the area of web backend development.
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200A (Level Two)
  Cloud + Orchestration

2:10pm CDT

Construct a Lean and Fast RISC-V System Emulator Capable of Running Linux - Jim Huang, National Cheng Kung University
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
While mature solutions such as QEMU provide broad architectural coverage, they are optimized for generality rather than minimal footprint, rapid bring-up, or architectural experimentation. To examine system-level design trade-offs, gain fine-grained control over memory and execution behavior, and enable lightweight Linux-based sandboxing and verification, we built a RISC-V system emulator from scratch.

rv32emu [1] supports RV32IMACF with Zifencei and Zicsr, along with CLINT, MMIO, and a complete Sv32 three-level page table. Through VirtIO integration, it efficiently maps Linux guest services to host resources. A tiered JIT compilation framework accelerates Linux workloads while reducing memory consumption compared to QEMU.

This talk presents the architectural decisions behind building a compact yet Linux-capable RISC-V system emulator, highlighting trade-offs in ISA support, memory management, JIT design, and device virtualization, and sharing practical techniques with a lean footprint without sacrificing performance or correctness.

[1] https://github.com/sysprog21/rv32emu
Speakers
avatar for Jim Huang

Jim Huang

Assistant Professor, National Cheng Kung University
Drawing from his contributions to the Android Open Source Project (AOSP), Jim specializes in real-time performance tuning and optimization of Linux-based automations. Additionally, he is a co-founder of the LXDE project, a lightweight desktop environment widely utilized in embedded... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
208C+D (Level Two)
  Embedded Linux Conference

2:10pm CDT

What's the Deal With Human Rights and Technical Standards? - Daniel Appelquist, Samsung
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
The UN Office of the High Commissioner for Human Rights released a report late last year : "Making technical standards
work for humanity: New pathways for incorporating international human rights into standards development for digital technologies." Amongst other things, this report referenced the W3C Ethical Web Principles, Privacy Principles, and Code of Conduct as key examples of structural changes in the technical standards community in support of human rights. This talk will seek explore the relationship between technical standards and human rights, and focus on what we're doing in W3C to further the goal of supporting human rights.
Speakers
avatar for Daniel Appelquist

Daniel Appelquist

Open Source Strategist, Samsung
Dan Appelquist is Open Source Strategist at Samsung Open Source Group. He is a web & mobile industry veteran and long-time participant and leader in open source and open standards. He is co-chair of the W3C Advisory Board and was previously co-chair of the W3C Technical Architecture... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200E (Level Two)

2:10pm CDT

Is Maven Safe for Production? - Adam Kaplan, Red Hat & Manfred Moser, Chainguard
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
Apache Maven’s central role in the Java ecosystem is undeniable, however its flexible plugin framework creates significant hurdles for adopting modern secure software practices. Securing the Java software supply chain to meet CRA and other regulatory requirements can feel like a daunting, if not impossible task.

This session will dive deep into the technical complexities of producing secured Maven builds through the practical experiences of two open source redistributors. You will learn strategies for producing SLSA artifacts for Maven builds, approaches for signing Java artifacts with Sigstore Cosign, and barriers to producing complete and accurate Software Bills of Materials (SBOMs) with Maven. We will also explore newer developments in the Maven ecosystem for cataloging dependencies and establishing trust in the Maven build process. This talk will conclude with a discussion of current gaps in Maven that could be addressed with the upcoming release of Maven 4.
Speakers
avatar for Adam Kaplan

Adam Kaplan

Senior Principal Software Engineer, Red Hat
Adam Kaplan (he/him/his) is a software engineer at Red Hat, a maintainer of the Shipwright and Tekton projects, and former CD Foundation Governing Board member. He currently leads efforts to simplify hybrid cloud application development and secure Red Hat's software supply chain... Read More →
avatar for Manfred Moser

Manfred Moser

Sr Principal Dev Rel Engineer, Chainguard
Manfred Moser is a Sr Principal DevRel Engineer at Chainguard, bringing a profound focus on software supply chain security to the open source world. A dedicated community leader and published author, his technical expertise spans decades as a software engineer and advocate. He has... Read More →
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200G (Level Two)

3:05pm CDT

Cache Me If You Can: Decentralize Your Distributed Caches With Hollow - Viswanathan Ranganathan, Independent
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Distributed caches are often used for scenarios that don't actually require them. For massive datasets (100's of GB's or more), distributed caches make sense—the data simply won't fit in a single node's memory. However, distributed caches tend to be overkill when working with smaller data sets (100s of MBs to 10s of GBs) that do fit in memory. Additionally, using traditional In-Memory caching libraries creates additional operational challenges, such as cache stampedes during TTL expiration, memory spikes during reloads, and long cold-start times that directly affect deployment velocity.

This talk proposes an alternate, unconventional view: What if we could decentralize our cache while centralizing its preparation? We'll discuss how dataset distribution using Hollow (an open-source project by Netflix) enables applications to serve data from local memory with microsecond access latency while staying perfectly synchronized via delta-based updates.

We'll cover:
- Design trade-offs that make this pattern ideal for GB-scale, read-heavy workloads.
- Delta-based updates that optimize cache reloads/refreshes.
- Zero-downtime updates applied in milliseconds without memory spikes.
Speakers
avatar for Viswanathan Ranganathan

Viswanathan Ranganathan

Independent Software Practitioner
Viswanathan Ranganathan is a Senior Engineer at Netflix, where he's part of the Delivery Engineering team that powers every service deployment across the platform. His current focus is on building deployment safety and confidence features for Netflix's infrastructure. Previously... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200A (Level Two)
  Cloud + Orchestration

3:05pm CDT

Building the Simplest Possible Linux System - Rob Landley, Hobbyist
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Once you've done enough of them, putting together a simple Linux system is easy. The hard part is working out what "simple" means in each new context.

We'll start by building and booting an example minimal Linux system to a shell prompt, first under QEMU and again on real hardware. Then we'll explain the theory: build environment (dependency management, reproducibility), native vs cross compiling (toolchain selection, libc selection, static vs dynamic), board bringup theory, kernel configuration, initramfs creation (and other root filesystem options), installing and booting, the init process and system bringup, hardware resource management and I/O categories, and running "your app" on its own dedicated device.

If there's time we'll go into software dependencies AGAIN (on target this time), add an example server (sshd), add a native toolchain to compile "hello world" on the target (build vs development environment), and some perspective on the online book "Linux From Scratch" for further reading (plus "what is a container".
Speakers
avatar for Rob Landley

Rob Landley

Hobbyist, Hobbyist
I've been working on Linux since 1998. I maintain toybox and mkroot. I used to maintain busybox, and was linux-kernel Documentation maintainer for a few months forever ago. I converted initramfs to use tmpfs after repeatedly failing to convince somebody else to do it, and wrote the... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
208C+D (Level Two)
  Embedded Linux Conference

3:05pm CDT

When 10,000 Screens Go Dark: Engineering Resilient Linux Drivers for Manufacturing Reality - Ram Mohan Rao Chukka, JFrog & Subhajit Ghosh, Tweaklogic
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Ten thousand LCD panels passed Incoming Quality Control. Firmware injection began. Production stopped.
During the development of our next-generation Automated Fare Collection (AFC) machines, we qualified multiple LCD vendors, designed a custom MIPI DSI touchscreen panel, developed display and peripheral drivers, and prepared for mass production. Everything worked—until firmware flashing began. Devices that previously functioned flawlessly suddenly booted to dead displays. The same firmware image now failed across the line.
The root cause wasn’t firmware. It wasn’t hardware failure. It was a silent vendor-side change: the LCD panel driver IC had been swapped for a different silicon revision—without changing the panel model.
The Linux DRM panel framework assumes static hardware described in the Device Tree. Manufacturing does not. MIPI DSI panel drivers are based on LCD model types not Display IC model types.
This talk presents a real-world production failure and the redesign that followed: replacing static panel definitions with runtime detection of display controller ICs via MIPI DCS, dynamic initialization sequencing, and a more resilient driver architecture.
Speakers
avatar for Ram Mohan Rao Chukka

Ram Mohan Rao Chukka

Senior Software Engineer, JFrog
Ram is a Senior Software Engineer at JFrog R&D . Previously worked for startup companies like CallidusCloud (SAP Company), Konylabs. Loves Automation, Linux, openSource
avatar for Subhajit Ghosh

Subhajit Ghosh

CTO, Tweaklogic
Embedded Linux professional and electronics hobbyist with experience in Linux driver development, kernel programming, system software and Edge AI.
Linux kernel contributor in device driver space.
Enjoy working with hardware and technology space.
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
208A+B (Level Two)
  Embedded Linux Conference

3:05pm CDT

Linux Live Patching: Architecture, Maturity, and Operational Reality - Ratnangi Nirek, Microsoft
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
Linux Live Patching enables the application of critical kernel updates without requiring system reboots, addressing the growing demand for continuous availability in modern Linux deployments. As Linux underpins cloud infrastructure, telecommunications platforms, and mission-critical enterprise systems, rebootless patching has moved from a niche capability to an operational necessity.

This talk provides a practical overview of Linux live patching as implemented in the mainline kernel. It explains how live patching works at the function level, the kernel infrastructure that enables it, and the trade-offs involved in applying kernel changes at runtime. Attendees will gain insight into where live patching is effective, where it is not, and how it is used in real-world production environments.
Speakers
avatar for Ratnangi Nirek

Ratnangi Nirek

Sr Cloud Escalation Engineer, Microsoft
I'm a Senior Cloud Escalation Engineer and Subject Matter Expert specializing in Linux and Cloud for our Customer Service Support in Microsoft, focusing on delivering top-notch support to our clients. I'm passionate about knowledge sharing and mentorship, helping to ramp up new team... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
205C+D (Level Two)
  Linux

3:05pm CDT

Automating FOSS License Compliance Analysis: A Multi-LLM Workflow Approach Using N8n & FOSSology - Raghavendra Kamatagi, MBRDI
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
The EU Cyber Resilience Act (CRA), US Executive Order 14028, and CISA SBOM guidelines demand efficient FOSS license compliance in automotive software. Manual compliance analysis typically requires 25-50 hours per 100 components, creating significant release bottlenecks.
This talk presents an automated compliance workflow integrating n8n workflow automation, multi-LLM repository discovery (supporting Gemini, Claude, Perplexity, ChatGPT and Ollama), and FOSSology license scanning achieving an 80% reduction in compliance analysis time.
Our multi-LLM fallback architecture achieved 94% success in automated repository discovery, while FOSSology's agent suite provided license and copyright analysis superior to manual review. The system generates industry-standard artifacts including SPDX 2.3, CycloneDX SBOM, unified reports and ReadmeOSS formats.
Attendees will learn how to build AI-assisted compliance automation for regulated environments and take away a replicable framework for industrial FOSS governance at scale.
Speakers
avatar for Raghavendra Kamatagi

Raghavendra Kamatagi

FOSS Compliance Lead, Mercedes-Benz R&D India, MBRDI
Raghavendra Kamatagi is the FOSS Compliance Lead , driving the OSS process framework aligned with OpenChain ISO 5230 standards. He leads compliance automation efforts, integrating Black Duck Hub scans into Maven, Node.js, Golang, and Gradle build environments via CI/CD pipelines... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200I (Level Two)

3:05pm CDT

Standardizing Deterministic Interoperability and Resource-Intelligent Design in Medical Robotics - Lilinoe Harbottle, San Jose State University
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
In medical robotics, innovation can be bottlenecked by vertically integrated architectures that contribute to medical “deserts” due to high costs and limited interoperability. This session explores architectural frameworks for standardizing deterministic interoperability, shifting the safety burden from non-transparent hardware to auditable software logic. By establishing these standards, this work ensures that clinical technology is not restricted by fixed vendor-lock.

Through a methodology of high-precision kinematic verification and deterministic mapping, open-source code becomes the catalyst for hardware autonomy. This approach ensures sub-millisecond reliability in the operating room while promoting lifecycle sustainability through vendor-neutral middleware.

Attendees will learn about the implementation of safety-operated envelopes and clinical validation models that facilitate reproducible research and lower barriers to local manufacturing. By prioritizing architectural transparency over closed-loop frameworks, this session outlines a path toward a more sustainable and accessible future for global healthcare.
Speakers
avatar for Lilinoe Harbottle

Lilinoe Harbottle

Systems & Data Engineer, Independent / BME Researcher
Lilinoe Harbottle is a Systems & Data Engineer specializing in high-reliability software for medical robotics. She focuses on standardizing deterministic interoperability and vendor-neutral frameworks to ensure sub-millisecond reliability in safety-critical environments. A Sequoyah... Read More →
Wednesday May 20, 2026 3:05pm - 3:45pm CDT
200C (Level Two)
  Safety-critical Software

4:20pm CDT

Beyond Containers. Why MicroVMs Are Essential for Multi-Tenant Workloads - Alex Zenla, Edera
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
Containers are the de facto deployment model for our applications today, but is your Container Runtime appropriate for multi-tenant workloads?

If you don't know which Container Runtime you're using today, then it's likely that you're using a shared kernel, so your multi-tenant workloads aren't as isolated as you might think they are.

In this talk, we'll demonstrate how MicroVMs can provide a Hardened Container Runtime. We'll build an understanding of why namespaces and cgroups are limited in the isolation they provide, how the MicroVM architecture can provide an isolated kernel, and the open-source tools available today to implement this.

To demonstrate this, we'll use a Multi-Tenant Kubernetes Cluster to show an attack that can break container isolation, and how MicroVMs can mitigate it.
Speakers
avatar for Alex Zenla

Alex Zenla

CTO, Edera
Alex is a Founder & CTO at Edera, building technology for securing containers using hypervisors in Rust. She has contributed to many open source projects including Chromium, Chromium OS, Dart, and Ubuntu, some as early as 11 years old. Alex started in the corporate world at the age... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
200F (Level Two)
  Cloud + Orchestration

4:20pm CDT

Syscall Tracing at Cloudflare Scale - Chris Arges, Cloudflare
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
System call tracing is critical for security monitoring, auditing, and debugging in large-scale Linux deployments. This talk explores kernel-level syscall tracing mechanisms, comparing their architectures, performance characteristics, and operational trade-offs.

We'll examine multiple approaches using eBPF, kernel tracepoints, and the Linux audit subsystem.
The presentation covers technical implementation details: how each mechanism hooks into the kernel syscall path, overhead characteristics under load, and the types of data they capture. I'll discuss performance implications and optimizations through real-world examples.
Speakers
avatar for Chris Arges

Chris Arges

Senior Systems Software Engineer, Cloudflare
Currently a Senior Systems Software Engineer at Cloudflare. I like to build things. I have a master's degree in Computer Engineering and 18 years of experience in software development and leadership both writing code and leading teams.

My mission is to make the world better where I can. Through my work I want to make the Internet more secure and reliable for everyone. In my free time I enjoy coaching and inspiring a future generation to grow, innovate and create a better world... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
205C+D (Level Two)
  Linux

4:20pm CDT

Day 2 Neurodiversity: Moving Beyond Fundamentals With Merge Forward - Ryan Etten, RHCA, Red Hat & Diana Todea, VictoriaMetrics
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
Open source has made progress in recognizing neurodiversity, but most conversations remain at the level of awareness and good intentions. What happens on Day 2, after we agree that inclusion matters?

We will examine what is still missing in the open source neurodiversity conversation, critique the narrative of neurotalent, and evaluate whether framing neurodivergent contributors as inherently gifted helps inclusion or creates new pressures. We need to ask: are we reinventing existing initiatives, or does the real gap lie in how our contribution models, communication norms, and governance structures are designed?

Our goal is to tackle structural questions rather than proposing a new label or movement. How can open source communities reduce cognitive friction, clarify expectations, and design processes that support a wider range of thinking styles? What concrete steps move us beyond fundamentals and into sustainable practice? Join Merge Forward to help move open source from a culture of good intentions to one of engineered accessibility.
Speakers
avatar for Ryan Etten

Ryan Etten

Senior Architect & Team Lead, Red Hat
Ryan Etten is a Senior Architect and Team Lead at Red Hat, specializing in the intersection of cloud native architectures and the human systems required to sustain them. A Red Hat Certified OpenShift Architect, he is a core contributor to the CNCF Merge Forward initiative and an advocate... Read More →
avatar for Diana Todea

Diana Todea

Developer Experience Engineer, VictoriaMetrics
Diana is a Developer Experience Engineer at VictoriaMetrics. She has worked as a Senior Site Reliability Engineer focused on Observability. She is an active member of the OpenTelemetry CNCF open source project, co-organizer of Cloud Native Days Romania, co-lead of neurodiversity working... Read More →
Wednesday May 20, 2026 4:20pm - 5:00pm CDT
200J (Level Two)
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience Experience Level
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date -