2.0 -//Pentabarf//Schedule//EN PUBLISH UHHGNY@@pretalx.com -UHHGNY Arch Linux: Past, Present and Future en en 20201010T120000 20201010T124500 004500

Arch Linux: Past, Present and Future

PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/UHHGNY/ Arch Conf Allan McRae Levente 'anthraxx' Polyak PUBLISH B9BPWX@@pretalx.com -B9BPWX Infrastructure at Arch - Making servers go brrrrr en en 20201010T130000 20201010T134500 004500

Infrastructure at Arch - Making servers go brrrrr

Arch Linux is a complex open-source project with many moving parts, quite a few pieces of infrastructure, and many people involved. Arch uses some modern DevOps tools like Ansible and Terraform. All of our infrastructure is entirely in the open (except for where is unreasonable to do so). While we do try to follow the general Arch dogma of keeping things simple, this sometimes conflicts with doing things _right_ and maintainable. We're mostly hosted at Hetzner with a few sponsored servers for non-critical and non-trusted services. Among our public services are: - Accounts/SSO - AUR - BBS - Bug tracker - GitLab - Mailing lists - Main page and package list - Mirror list - Patchwork - Security tracker - Wiki Next to these public services, we also operate quite a few staff-only services such as: - Build servers - Kanboard - Mail servers - Monitoring stack: Grafana, Prometheus, Alertmanager - Phrik - Quassel Our servers and services used to be hand-configured without any audit trail. In the past years, we've started the effort of formalising all services we operate using Ansible and Terraform which has been very helpful. ### Ongoing efforts While there have always been minor efforts here and there for various tasks, in recent times we've seen some increased activity especially in these topics: - Automation: Many parts in Arch have always been done manually. We're currently trying to automate many aspects of the release process for the ISO, VMs and Docker (all separate projects with different requirements). - Keycloak SSO migration: We want to have a central account service that allows for secure user account and access management. - GitLab migration: We want our GitLab to be the central point for code contribution, issue reporting, and automation. A full migration would also hopefully allow us to get rid of Flyspray, Kanboard, and Patchwork which decreases stack complexity. - Increase user engagement: As Arch Linux is a 100% volunteer-driven project, we need to be as friendly and welcoming to any potential outside contributors as we can. To this end, we're trying to increase bus factors and visibility to get users engaged. ### The future We have a long list things we eventually want to have and we're slowly moving there. The general outlook is: - More contributors - More automation - More openness - More granular access PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/B9BPWX/ Arch Conf Sven-Hendrik Haase PUBLISH 9PD9TP@@pretalx.com -9PD9TP Enter the Matrix: Install your own Matrix server on Arch Linux en en 20201010T140000 20201010T144500 004500

Enter the Matrix: Install your own Matrix server on Arch Linux

Matrix is an [open standard](https://matrix.org/) for interoperable, secure and decentralised, real-time communication over the Internet. It can be used to power Instant Messaging, VoIP/WebRTC signaling, Internet of Things communication - or anywhere you need a standard HTTP API for publishing and subscribing to data whilst tracking the conversation history. By self-hosting Matrix you begin to take control of your own data and your own communications. You also get to join an ever-growing federated network of over 40,000 servers, totaling over 18M users. In this talk, I'll show you how to install Synapse, the reference Matrix server implementation, so you too can enter the Matrix. PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/9PD9TP/ Arch Conf Brendan Abolivier PUBLISH 39BGNS@@pretalx.com -39BGNS The State of Reproducible Builds en en 20201010T150000 20201010T154500 004500

The State of Reproducible Builds

PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/39BGNS/ Arch Conf Morten Linderud PUBLISH V8FCE9@@pretalx.com -V8FCE9 Protecting secrets and securing the boot process using a Trusted Platform Module (TPM) en en 20201010T170000 20201010T174500 004500

Protecting secrets and securing the boot process using a Trusted Platform Module (TPM)

A Trusted Platform Module is a small cryptographic device present in many modern computer systems. It can be used to store cryptographic keys and perform operations with them without revealing the private part of the key to the main operating system in order to prevent unauthorised access. Furthermore, access to the stored keys can be limited e.g. depending on an expected system state to prevent some "evil maid" type attacks. We are going to look at how to make use of the cryptographic capabilities of a TPM to store SSH and PGP keys in an extraction-resistant way. Furthermore, we are going to look into storing full disk encryption keys tied to the expected state of the boot loader, kernel and initramfs (similar to what BitLocker offers in the Windows world). This can be used to detect and prevent some forms of "evil maid" attacks to avoid booting into a system compromised from the outside. The talk will feature some hands-on demonstrations tailored to Arch Linux, using software available in the official repositories. PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/V8FCE9/ Arch Conf Jonas Witschel PUBLISH RTUB3M@@pretalx.com -RTUB3M Custom Kernels on Edge Devices in 2020 en en 20201010T180000 20201010T182000 002000

Custom Kernels on Edge Devices in 2020

Custom kernels, such as the Linux RT Kernel as well as the Xanmod boast a kernel-level preemption which are supposed to make them better at real time tasks. We have seen a lot of applications of this, such as machines with real time kernels go into space. Let us see how an edge computing device running Arch Linux on a custom kernel fairs any better in 2020. PUBLIC CONFIRMED Lightning Talk https://pretalx.com/arch-conf-online-2020/talk/RTUB3M/ Arch Conf Angad Sharma PUBLISH UH7BTX@@pretalx.com -UH7BTX Packaging Rust Applications for Arch Linux en en 20201010T182000 20201010T184000 002000

Packaging Rust Applications for Arch Linux

PUBLIC CONFIRMED Lightning Talk https://pretalx.com/arch-conf-online-2020/talk/UH7BTX/ Arch Conf Orhun Parmaksız PUBLISH 9RLYAJ@@pretalx.com -9RLYAJ Bootstraping a minimal image for kernel development en en 20201010T184000 20201010T190000 002000

Bootstraping a minimal image for kernel development

PUBLIC CONFIRMED Lightning Talk https://pretalx.com/arch-conf-online-2020/talk/9RLYAJ/ Arch Conf André Almeida PUBLISH BATHN7@@pretalx.com -BATHN7 Rolling your own security team for fun and no profit at all en en 20201010T190500 20201010T195000 004500

Rolling your own security team for fun and no profit at all

PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/BATHN7/ Arch Conf Levente 'anthraxx' Polyak PUBLISH B3EGZX@@pretalx.com -B3EGZX Archiso - creating an installation medium en en 20201011T120000 20201011T124500 004500

Archiso - creating an installation medium

Since its inception (somewhere back in 2006) different developers have been taking care of archiso as the in-house project to create installation media for Arch Linux. It gained various features over the years, while serving the i686 and x86_64 architectures. Although development of the tool has slowed down due to available time and/ or interest, 2020 has seen a lot of changes and more are yet to come. We will look at the following topics (among others): * move to gitlab * various outstanding fixes * code refactoring and cleanup * linting and initial implementation on automated testing * additional scripts * license change * move towards an easier configuration through templates Additionally, the road towards a complete automation of the installation media release and a few new features such as accessibility and reproducibility will be discussed. PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/B3EGZX/ Arch Conf David Runge PUBLISH SFZNGS@@pretalx.com -SFZNGS What is next for Pacman? (Ideas that may never eventuate) en en 20201011T130000 20201011T132000 002000

What is next for Pacman? (Ideas that may never eventuate)

PUBLIC CONFIRMED Lightning Talk https://pretalx.com/arch-conf-online-2020/talk/SFZNGS/ Arch Conf Allan McRae PUBLISH 98NC78@@pretalx.com -98NC78 pytest-pacman - generating test data for libalpm with Python en en 20201011T132500 20201011T134500 002000

pytest-pacman - generating test data for libalpm with Python

PUBLIC CONFIRMED Lightning Talk https://pretalx.com/arch-conf-online-2020/talk/98NC78/ Arch Conf Jelle van der waa PUBLISH KWBUEU@@pretalx.com -KWBUEU Linux memory management at scale en en 20201011T140000 20201011T144500 004500

Linux memory management at scale

PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/KWBUEU/ Arch Conf Chris Down PUBLISH ZQLAZ8@@pretalx.com -ZQLAZ8 Arch Linux Team Q&A en en 20201011T150000 20201011T154500 004500

Arch Linux Team Q&A

PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/ZQLAZ8/ Arch Conf The Arch Linux Team PUBLISH 7D3RPM@@pretalx.com -7D3RPM GamerOS: An Arch Linux based gaming OS en en 20201011T170000 20201011T174500 004500

GamerOS: An Arch Linux based gaming OS

PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/7D3RPM/ Arch Conf Alesh Slovak PUBLISH BBJ98U@@pretalx.com -BBJ98U distri: researching fast Linux package management en en 20201011T180000 20201011T184500 004500

distri: researching fast Linux package management

In my work on distri, I show that package managers can fill almost any line rate (1 Gbps, 10 Gbps, 100 Gbps) effortlessly with the right architecture. In this talk, I will explain the key ideas in distri’s architecture, and what impact they have on the resulting system. For example, packages are distributed as SquashFS images in distri, which makes their contents immutable and the overall system harder to break. Slides: https://docs.google.com/presentation/d/1tiMGtnsvYyVYml_yYGK0vZY1LloLg0Y48MP8_E6dwRE/edit PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/BBJ98U/ Arch Conf Michael Stapelberg PUBLISH HFUDJZ@@pretalx.com -HFUDJZ How to organise your digital life in a privacy-preserving, machine-agnostic, and practical manner en en 20201011T190000 20201011T194500 004500

How to organise your digital life in a privacy-preserving, machine-agnostic, and practical manner

PUBLIC CONFIRMED Talk https://pretalx.com/arch-conf-online-2020/talk/HFUDJZ/ Arch Conf Zvezdin Besarabov PUBLISH NUQYEB@@pretalx.com -NUQYEB Closing Talk: Arch Linux Conf in review en en 20201011T200000 20201011T202000 002000

Closing Talk: Arch Linux Conf in review

PUBLIC CONFIRMED Lightning Talk https://pretalx.com/arch-conf-online-2020/talk/NUQYEB/ Arch Conf Morten Linderud