0.9 yocto-project-summit-2021-11 2021-11-30 2021-12-02 3 00:05 https://pretalx.com https://pretalx.com/media/yocto-project-summit-2021-11/img/YoctoDevDay_Logo_RBG-white-summit-pretalx_HBJ29RA_rJqQswd.png UTC Room A Lightning Talk 2021-11-30T12:00:00+00:00 12:00 00:10 Welcome all the Yocto Project Summit 2021.11 attendees yocto-project-summit-2021-11-13393-welcome-to-yocto-project-summit-2021-11-beginners Beginner track Behan Webster en Welcome talk to introduce the Summit to all the attendees. Training track attendees should come first to this talk before heading over to the training room for the first session there. Presentation track attendees can just stay in this track for the rest of the day! false https://pretalx.com/yocto-project-summit-2021-11/talk/J8TDME/ https://pretalx.com/yocto-project-summit-2021-11/talk/J8TDME/feedback/ Room A Hand-on class 2021-11-30T12:30:00+00:00 12:30 03:00 This seminar is for people who are new to using the Yocto Project and want an introduction to the basics of how to use bitbake and start to build images to be used with QEMU. yocto-project-summit-2021-11-13391-introduction-to-the-yocto-project-and-bitbake Beginner track Behan Webster en This talk will be the first of a series of 2 seminars which will cover the topics of: * Bitbake * Recipes * Tasks * Operators * Common variables * What to do when things go wrong * Building an embedded image http://bit.ly/YPS202111-intro false https://pretalx.com/yocto-project-summit-2021-11/talk/RUCVC8/ https://pretalx.com/yocto-project-summit-2021-11/talk/RUCVC8/feedback/ Room A Hand-on class 2021-11-30T16:30:00+00:00 16:30 03:00 This seminar is for people who are new to using the Yocto Project and want an introduction to the basics of layers, building images, and other initial topics yocto-project-summit-2021-11-13392-introduction-to-layers-images-and-more Beginner track Tom King en This talk will be the second of a series of 2 seminars which will cover the topics of: * Introduction to layers * What's in each of the provided layers * Booting your image with QEMU * Board support packages * Images * Toaster * Building an application http://bit.ly/YPS202111-intro false https://pretalx.com/yocto-project-summit-2021-11/talk/QEXZMU/ https://pretalx.com/yocto-project-summit-2021-11/talk/QEXZMU/feedback/ Room B Lightning Talk 2021-11-30T12:30:00+00:00 12:30 00:10 Welcome all the Yocto Project Summit 2021.11 attendees yocto-project-summit-2021-11-13394-welcome-to-yocto-project-summit-2021-1-hands-on Hands on Lab David Reyna en Welcome talk to introduce the Summit to all the attendees. Training track attendees should come first to this talk before heading over to the training room for the first session there. Presentation track attendees can just stay in this track for the rest of the day! false https://pretalx.com/yocto-project-summit-2021-11/talk/VCBG3K/ https://pretalx.com/yocto-project-summit-2021-11/talk/VCBG3K/feedback/ Room B Hand-on class 2021-11-30T13:00:00+00:00 13:00 01:30 Hands-on session using devtool, the Yocto Project tool that helps you create/update recipes and work with recipe source trees. You will learn how to create new recipes based upon a source tree; modify the sources of a recipe, create patches and update the recipe to apply them; upgrade a recipe to a new upstream version, and more. yocto-project-summit-2021-11-12911-hands-on-session-using-devtool-the-yocto-project-tool-that-helps-you-create-update-recipes-and-work-with-recipe-source-trees Saul Wold en Hands-on session using devtool, the Yocto Project tool that helps you create/update recipes and work with recipe source trees. You will learn how to create new recipes based upon a source tree; modify the sources of a recipe, create patches and update the recipe to apply them; upgrade a recipe to a new upstream version, and more. false slides slides in pdf https://pretalx.com/yocto-project-summit-2021-11/talk/G3M3PC/ https://pretalx.com/yocto-project-summit-2021-11/talk/G3M3PC/feedback/ Room B Hand-on class 2021-11-30T15:30:00+00:00 15:30 01:30 In this hands-on class, we will learn how to leverage the Yocto Project to debug an embedded Linux system. yocto-project-summit-2021-11-13182-linux-debugging-on-yocto-project-based-systems Sergio Prado en There are several techniques to debug an embedded Linux system that can be applied in both user space and kernel space. Depending on the problem, you may need different tools, like addr2line for crash dump analysis, GDB for interactive debugging, ftrace for kernel tracing, valgring to catch memory-related issues, gprof for application profiling, etc. In this hands-on class, we will learn how the Yocto Project can help and improve the experience of the developer when debugging an embedded Linux system, and put into practice with exercises to solve kernel and user-space bugs injected in a QEMU based Linux system. false Slides https://pretalx.com/yocto-project-summit-2021-11/talk/DXL7UV/ https://pretalx.com/yocto-project-summit-2021-11/talk/DXL7UV/feedback/ Room B Hand-on class 2021-11-30T18:00:00+00:00 18:00 01:30 The Linux kernel is a key component of your board support package (BSP). In this session, we will discuss various practical ways of building the Linux kernel in the Yocto Project. We will cover building a traditional git tree and defconfig, an out-of-tree kernel module, a linux-yocto based kernel, adding kernel fragments for additional functionality and other common workflow patterns. This session will be a combination of a talk and hands-on labs. yocto-project-summit-2021-11-13229-hands-on-kernel-lab-introduction-to-linux-yocto-kernel-config-fragments-and-common-workflow-patterns /media/yocto-project-summit-2021-11/submissions/EURLMP/yocto-tux_9EZyfWQ.png Tim Orling en The linux-yocto workflow is a powerful and flexible way to provide a consistent kernel experience across many platforms. But the use of yocto-kernel-cache metadata (a structured tree of kernel fragments) and the linux-yocto git repository often confuses newcomers to the Yocto Project. Many traditional developers prefer to use “a git tree and a defconfig” to build their kernel, so we will also cover this use case. Individual platforms will also differ in the use of bootloader, device tree and other details that involve where the kernel is installed and how it is booted. We will give hands-on practical examples of these use cases to help you on your journey to creating and working with well-behaved Yocto Project BSP layers. false Kernel Lab Slides https://pretalx.com/yocto-project-summit-2021-11/talk/EURLMP/ https://pretalx.com/yocto-project-summit-2021-11/talk/EURLMP/feedback/ Room A Lightning Talk 2021-12-01T12:00:00+00:00 12:00 00:10 Welcome all the Yocto Project Summit 2021.11 attendees yocto-project-summit-2021-11-13395-welcome-to-yocto-project-summit-2021-11-talks Intermediate Track Trevor Woerner en Welcome talk to introduce the Summit to all the attendees. Training track attendees should come first to this talk before heading over to the training room for the first session there. Presentation track attendees can just stay in this track for the rest of the day! false https://pretalx.com/yocto-project-summit-2021-11/talk/AE8PXM/ https://pretalx.com/yocto-project-summit-2021-11/talk/AE8PXM/feedback/ Room A Talk 2021-12-01T12:20:00+00:00 12:20 00:30 RAUC is a safe and secure open source software solution for A/B updates of embedded Linux devices. It supports the Yocto Project and OpenEmbedded, Buildroot and PTXdist. Upgrades are performed through RAUC bundles which can be installed either through the network or using the old-fashioned way with a USB stick. In 2020 layer meta-rauc-community was created to provide examples how to integrate the lightweight update client RAUC on various machines. Initially it supported Raspberry Pi. In 2021 the layer was moved to the RAUC organization in GitHub and over the time it was ported to new machine, including sunxi (Allwinner) and qemux86-64. The presentation is appropriate for anyone interested in software upgrades. We will talk about the evolution of meta-rauc-community and provide guidelines for porting to new machines using Yocto and OpenEmbedded BSP layers. yocto-project-summit-2021-11-13233-a-b-linux-updates-with-rauc-and-meta-rauc-community-now-in-the-future Leon Anavi en The flexibility and open source nature of RAUC makes it a popular solution for A/B updates of embedded Linux devices. The integration of RAUC ith the Yocto Project and OpenEmbedded on a new hardware requires advanced skills because there are numerous steps. To support RAUC we need to setup U-Boot, enable SquashFS in the Linux kernel configurations, use ext4 file system, create partitions and configure RAUC slots, generate certificates and setup U-Boot environment configurations with a script to switch RAUC slots over upgrades. In 2020 a new integration layer called meta-rauc-community was created to simplify the getting started process with RAUC, Yocto and OpenEmbebedded. Initially it contained examples only for Raspberry Pi. Thanks to numerous community contributions support for Allwinner (also known as sunxi) devices and qemux86-64 was added. In 2021 the layer was moved to the RAUC organization in GitHub. What are the next steps and how to port it to new devices? The presentation is appropriate for anyone with basic knowledge about the Yocto Project and OpenEmbedded. It will help other software developers in the community to overcame faster and easier similar technical difficulties while integrating the RAUC client on embedded Linux devices and hopefully contribute back to meta-rauc-community. false A/B Linux updates with RAUC and meta-rauc-community https://pretalx.com/yocto-project-summit-2021-11/talk/83YKWV/ https://pretalx.com/yocto-project-summit-2021-11/talk/83YKWV/feedback/ Room A Talk 2021-12-01T12:55:00+00:00 12:55 00:30 This talk will give an overview of the Yocto Project's Hash Equivalence Service (hashserv) and PR Service (prserv). The use cases for these tools will be explored and a demo of each will be given. The new features added to these services since the initial dunfell release in April 2020 will then be discussed, highlighting the read-only modes and the support for connecting to an upstream service. The new features will be demonstrated and the new use cases which these features enable will be presented. Finally, possible future developments will be discussed. This talk will be appropriate for attendees familiar with bitbake but with no prior knowledge of these services. It will also be useful to those with experience using these services who are unfamiliar with the new features added since the dunfell release. yocto-project-summit-2021-11-13203-an-overview-of-the-hash-equivalence-pr-services Paul Barker en ### hashserv When bitbake looks at the inputs for a build task (the recipe, inherited classes, relevant variables set by conf files and the inputs of other relevant build tasks), a hash of the input data is generated. This is the basis of the Shared State (sstate) caching provided by bitbake - if in a future build the hash of the input data for a build task is the same, the previously generated sstate can be reused instead of re-running the build task. This allows for significant time savings in subsequent builds once the sstate cache is populated. The Hash Equivalence Service (hashserv) is a standalone service developed within the bitbake project which can further improve sstate re-use. It maintains a database of input hashes for build tasks and the hashes of their output data. Traditionally, if the input hash for a build task changes then all dependent tasks need to be re-executed even if the output data from the first task is identical. However with hashserv enabled, bitbake can detect the case where output data from a task is identical to a previous execution and it can mark the two different input hashes as equivalent. This allows dependent tasks to be skipped where sstate data is available for the previous input hash, potentially giving significant improvements in sstate re-use and corresponding reductions in build time. ### prserv The PR Service (prserv) is a standalone service developed within the bitbake project which maintains a database of input hashes for build tasks and a corresponding package revision (`PR`) value. This allows bitbake to ensure that the package revision increments each time a recipe is rebuilt with different input data. This in turn ensures that on-device package upgrades work as expected when a package is rebuilt false Slides https://pretalx.com/yocto-project-summit-2021-11/talk/AWE3JP/ https://pretalx.com/yocto-project-summit-2021-11/talk/AWE3JP/feedback/ Room A Talk 2021-12-01T13:40:00+00:00 13:40 00:30 This talk will mainly focus on explaining how easily you can create custom Linux images for CM4 Carrier Boards, X86, and STM32 Boards using Yocto project. Also, at the end of the talk, there will be two HMI demos based on Qt, LVGL, and a demo to showcase secure and robust OTA updates to these SBCs using Mender. yocto-project-summit-2021-11-12737-embedded-linux-on-cm4-carrier-boards-x86-and-stm32-boards-with-yocto-project /media/yocto-project-summit-2021-11/submissions/NRS8DT/pic_wqmQ3oZ.jpg Lakshantha Dissanayake en With the custom BSP layers for CM4 Carrier Boards, X86, and STM32 Boards, developed by Seeed, developers can start building cross-platform applications right away. Also with the qt5 layer, you can build GUI applications. The addition of the mender layer allows you to perform secure and robust OTA updates to these SBCs. false Embedded Linux on CM4 Carrier Boards, X86 and STM32 Boards with Yocto Project https://pretalx.com/yocto-project-summit-2021-11/talk/NRS8DT/ https://pretalx.com/yocto-project-summit-2021-11/talk/NRS8DT/feedback/ Room A Talk 2021-12-01T14:15:00+00:00 14:15 00:30 Getting scalable CI/CD setup for efficient Yocto project builds is an important step for ensuring high quality. In this talk, Joshua will cover the Zuul CI system, and how he is running it on Kubernetes to ensure high quality for the meta-phosh layer. yocto-project-summit-2021-11-13199-ci-cd-with-zuul-and-kubernetes Joshua Watt en This talk will cover the basics of Zuul, running Zuul on Kubernetes, the CI build workflow used by meta-phosh, and on-target testing done to ensure the layer remains functional. false slides https://pretalx.com/yocto-project-summit-2021-11/talk/NP9AGQ/ https://pretalx.com/yocto-project-summit-2021-11/talk/NP9AGQ/feedback/ Room A Lightning Talk 2021-12-01T14:50:00+00:00 14:50 00:15 Jami in yocto and on i.MX6 : How to bring fully distributed and secure communication capabilities to embedded products and IOT yocto-project-summit-2021-11-13191-jami-in-yocto-and-on-i-mx6 L'hôpital kévin en Jami is a communication tool developed by Savoir-faire Linux. It is a free and open source audio, video and text peer-to-peer communication platform. Our work was to include Jami in Yocto Project to be able to use it on every platform supported by this generator of custom Linux distributions. Firstly, we tested it on an X86 architecture. But to prove that Jami could run on an embedded board, we tested it on an i.MX6. false Slides https://pretalx.com/yocto-project-summit-2021-11/talk/XXQYLT/ https://pretalx.com/yocto-project-summit-2021-11/talk/XXQYLT/feedback/ Room A Lightning Talk 2021-12-01T15:50:00+00:00 15:50 00:15 This short talk will present the new tools we can make use of now that the Yocto Project mailing list is mirrored to lore.kernel.org. The `b4` tool will be introduced and a demo will be given of how this tool can be used to quickly apply patches from the mailing list to a local repository, show differences between patch versions and autogenerate thank you messages. The talk will also briefly touch on the `patatt` patch attestation tool which can be used to cryptographically sign patches sent via a mailing list. yocto-project-summit-2021-11-12987-yocto-project-lore-new-mailing-list-tools Paul Barker en Recently the Yocto Project & OpenEmbedded mailing lists have been added to the lore.kernel.org public-inbox server. This allows us to make use of new tools developed within the Linux kernel community to simplify the process of reviewing, testing and accepting patches submitted via mailing lists. This talk is presented in the hope that these tools can become more widely used within the Yocto Project community now that they are available, hopefully making life easier for maintainers! false Slides https://pretalx.com/yocto-project-summit-2021-11/talk/NMA9H9/ https://pretalx.com/yocto-project-summit-2021-11/talk/NMA9H9/feedback/ Room A Talk 2021-12-01T16:10:00+00:00 16:10 00:30 Clang is an alternative C/C++ compiler based on LLVM infrastructure. While the primary system compiler in yocto project is GCC, clang offers some advantages in some usecases, this talk will go over firstly on how to use clang compiler in Yocto project based distributions. secondly it will talk about cases where it make more sense to use it and where it maybe not as effective, In some cases it could be beneficial to use it surgically for some large scale C++ apps. yocto-project-summit-2021-11-13033-why-and-how-to-use-clang-compiler-with-yocto-project Khem Raj en Clang is compiler is a C/C++ compiler based on LLVM, this is becoming a commonly used compiler with time as it offers modern compiler infrastructure which is extensible beyond a traditional C/C++ static compiler. It provides additional tools e.g. linters, static analyzer based on clang common infrastructure ( libclang ), the talk will cover what it provides beyond a C/C++ static compiler. There is a method to use it as default compiler in yocto project which will be covered as well. it will also cover the case of mixed mode where both GCC and Clang could be in play for specific applications e.g. chromium or webkit using clang while rest of system uses gcc. There is also debugger port called LLDB which is an alternative de bugger, LLD is fast linker which could be used either as default linker or using -fuse-ld option on certain applications. It will discuss advantages of doing so. A take away from this talk would be to know how and when to use clang compiler in yocto project to get maximum benefits. false Slides https://pretalx.com/yocto-project-summit-2021-11/talk/WER8YA/ https://pretalx.com/yocto-project-summit-2021-11/talk/WER8YA/feedback/ Room A Talk 2021-12-01T16:45:00+00:00 16:45 00:30 The phosh shell and phoc compositor together are a GNOME based GUI designed to work on a mobile phone. We will describe how to build phosh with the meta-phosh layer, look at what components outside of oe-core are required (mostly from meta-gnome), demonstrate how to create an image with gtk+3 applications similar to core-image-sato, and show how to build a pure GNOME image. Finally, we will discuss the open issues remaining to turn phosh into a sato replacement. yocto-project-summit-2021-11-13197-phosh-a-gnome-based-wayland-shell-and-compositor /media/yocto-project-summit-2021-11/submissions/7JYTFR/phosh_h5X6pIp.png Tim Orling en Phosh (PHOne SHell) is a shell and phoc (PHOne Compositor) is a compositor for Wayland. Unlike many other compositors, it is based on GNOME and gtk+3 without any other requirements (such as Qt). Phosh was developed by Purism and is now part of GNOME World and under active development in the GNOME community. Phosh and phoc implement the standard GNOME desktop interfaces, meaning it is capable of running gtk+3 and GNOME applications without modification. This makes it a good candidate for replacing matchbox and sato (core-image-sato). Because phosh was designed for mobile phone use, there are some implementation details that will need to be overcome before it can be considered a full-fledged replacement for sato and matchbox. Examples of these current issues are the default lock screen (where the PIN is numeric only) and default portrait alignment of the display. false Phosh Slides https://pretalx.com/yocto-project-summit-2021-11/talk/7JYTFR/ https://pretalx.com/yocto-project-summit-2021-11/talk/7JYTFR/feedback/ Room A Talk 2021-12-01T17:30:00+00:00 17:30 00:30 The meta-virtualization layer has been providing core virtualization and container support to the OpenEmbedded community since 2012. This talk is an example of how to build and deploy a test cluster using components only from meta-virtualization. This includes the server and agent, along with supporting utilities and user space components. High level comparisons to alternate k3s providers will be considered and discussed. The presentation will cover the basic definitions, the building blocks and how they should be configured for a functional, single node system (running in a virtual machine). It will also show how a sample service can be deployed to the cluster once it is up and running. Finally it will illustrate future work and remaining items to allow K3S from meta-virtualization to be part of a local test pipeline. yocto-project-summit-2021-11-13029-deploying-a-k3s-cluster-with-meta-virtualization Bruce Ashfield en This talk is between a tutorial and presentation. While it won't be fully hands on, enough detail will be provided for attendees to reproduce the configuration and builds in their own environment. It is intended to provide a tangle example of how Yocto can be used to build and deploy to a modern container stack. It will be suitable for both a beginner and advanced user, as well as managers/developers. No in depth knowledge of container fundamentals will be required to understand the presentation. false slides https://pretalx.com/yocto-project-summit-2021-11/talk/ALSXDF/ https://pretalx.com/yocto-project-summit-2021-11/talk/ALSXDF/feedback/ Room A Hand-on class 2021-12-01T18:15:00+00:00 18:15 02:00 A chance for all the attendees to meet socially and show off their drink. yocto-project-summit-2021-11-13396-yocto-project-summit-social-hour After Hours Hangout en Since we're not in person, and won't be able to have an in-person social, this is a chance to visit together after the summit. Everyone can grab the mic and talk, ask questions, share their own project, or show off their drink. Cool zoom backgrounds are encouraged. No formal talk. Just people hanging out and talking about whatever they want! This session will *not* be recorded! false https://pretalx.com/yocto-project-summit-2021-11/talk/CNF8NH/ https://pretalx.com/yocto-project-summit-2021-11/talk/CNF8NH/feedback/ Room A Talk 2021-12-02T12:00:00+00:00 12:00 00:15 Welcome all the Yocto Project Summit 2021.11 attendees yocto-project-summit-2021-11-13397-welcome-to-yocto-project-summit-2021-11-talks Intermediate Track Trevor Woerner en Welcome talk to introduce the Summit to all the attendees. Training track attendees should come first to this talk before heading over to the training room for the first session there. Presentation track attendees can just stay in this track for the rest of the day! false https://pretalx.com/yocto-project-summit-2021-11/talk/AZEH97/ https://pretalx.com/yocto-project-summit-2021-11/talk/AZEH97/feedback/ Room A Talk 2021-12-02T12:20:00+00:00 12:20 00:30 SELinux is a security enhancement to Linux which allows users and administrators more control over access control. By default it is enabled in Red Hat Enterprise Linux and Fedora distributions but can be added on others like Debian or Ubuntu. Thanks to the meta-selinux layer it can be also integrated into Yocto build. In my presentation, I would like to provide an overview of the exsisting layer and show simple step-by-step instruction to run base core-image-selinux. yocto-project-summit-2021-11-13212-getting-started-with-meta-selinux-enhancing-system-security-on-qemu Tomasz Żyjewski en The theoretical part of the presentation will consist of a description of SELinux, types of SELinux policies, the ability to add own rules and the content of the discussed layer. As part of the verification, core-image-selinux running on QEMU will be presented. The presentation will contain step-by-step instructions that will allow to run the basic image, choose other policies, add own personalized access rules and introduce additional improvements. The main focus of this lecture will be a kind of getting started presentation to facilitate the use of meta-selinux. false presentation v1.1 presentation v1.2 https://pretalx.com/yocto-project-summit-2021-11/talk/SPLD9P/ https://pretalx.com/yocto-project-summit-2021-11/talk/SPLD9P/feedback/ Room A Talk 2021-12-02T12:55:00+00:00 12:55 00:50 So far, doing any kind of Yocto/OE development always required a somewhat decently powered machine running linux. There are situations where this is not the case anymore, and I'll show you how. yocto-project-summit-2021-11-12934-having-a-yocto-in-your-browser Josef Holzmayr en Unless the demo gods fail me, I will show: - using the ESDK in a browser tab - a docker container geared towards YP development in the "cloud" - the CI/CD workflow I used in order to make it work. false Slides including links. https://pretalx.com/yocto-project-summit-2021-11/talk/WZCMAJ/ https://pretalx.com/yocto-project-summit-2021-11/talk/WZCMAJ/feedback/ Room A Talk 2021-12-02T14:15:00+00:00 14:15 00:30 OpenEmbedded and the Yocto Project is a story of an open source project that has gone places non of the original developers expected. This is the story of the long strange trip. yocto-project-summit-2021-11-13196-a-brief-history-of-openembedded-and-the-yocto-project Philip Balister en This talk covers the history of OpenEmbedded and how the Yocto Project came to be. Working from a project timeline, this talk will describe the origins of OpenEmbedded and the path from Linux on handheld Linux devices to Mars. Along the way, OpenEmbedded became the foundation of the first Linux Foundation collaborative project. false https://pretalx.com/yocto-project-summit-2021-11/talk/BWMMPM/ https://pretalx.com/yocto-project-summit-2021-11/talk/BWMMPM/feedback/ Room A Lightning Talk 2021-12-02T14:50:00+00:00 14:50 00:15 Flatpak is a tool for delivering and sandboxing apps. Find out how to use it in your Yocto images with the meta-flatpak layer. yocto-project-summit-2021-11-13204-meta-flatpak-flatpak-in-yocto-yocto-in-flatpak Sam Thursfield en meta-flatpak provides a flatpak package which you can install in your images. With this your image can run any of the 100s of Linux apps available on Flathub. That’s the easy part. With meta-flatpak you can also turn your existing image into a Flatpak runtime, which could be the starting point for a whole ecosystem of apps specific to your device. This talk with give a brief overview of these concepts, along with an update of the status of the meta-flatpak layer. false Slides V1 https://pretalx.com/yocto-project-summit-2021-11/talk/P3XJSN/ https://pretalx.com/yocto-project-summit-2021-11/talk/P3XJSN/feedback/ Room A Lightning Talk 2021-12-02T15:50:00+00:00 15:50 00:15 Enjoy a hopefully fun insight into the everyday life of the Yocto Project. yocto-project-summit-2021-11-12933-conversations-in-yocto Josef Holzmayr en A description would ruin the fun. Not this time, friends! :) false Sildes. Kind of. https://pretalx.com/yocto-project-summit-2021-11/talk/TJCMYC/ https://pretalx.com/yocto-project-summit-2021-11/talk/TJCMYC/feedback/ Room A Talk 2021-12-02T16:10:00+00:00 16:10 00:30 With the recent increase in security scrutiny, how do we leverage Yocto's extensibility and flexibility to streamline development and keep our products secure? This talk will focus on key security ideas and their implementation in Yocto for different stages of development. yocto-project-summit-2021-11-13225-using-yocto-to-secure-your-device-from-development-to-production Kevin Chau en In the early development stage, we will explore threat modelling to establish what types of attacks and/or vulnerabilities are of concern to Yocto's software supply chain. We will look at methods for generating reproducible and off-line builds to ensure that we can always build the same image, regardless of network connectivity or changes upstream. In the pre-production stage, we will evaluate integration strategies for Yocto to handle image signing, key management infrastructure, and deployment. Attendees will be able to use this example process as a springboard to customize their own security solutions for their specific systems. false Slides https://pretalx.com/yocto-project-summit-2021-11/talk/BYPJJG/ https://pretalx.com/yocto-project-summit-2021-11/talk/BYPJJG/feedback/ Room A Talk 2021-12-02T16:45:00+00:00 16:45 00:30 The linux-yocto reference kernel is part of OE core and provides a stable and tested set of targets (simulated and hardware) as part of each release. While there are reference BSPs and contributed vendor BSPs, a common questions is: "How would I create a new BSP, and use the configuration fragments provided along with linux-yocto ?" Background on how the kernel is maintained, and how fragments are organized will be presented, followed with a concrete example of creating a new qemu BSP based on an in-tree defconfig. Extending the newly created BSP to offer optional kernel types and features to the end user will then be presented and discussed. The available tools to create, audit and deploy the kernel will also be discussed as part of the presentation. yocto-project-summit-2021-11-13030-using-linux-yocto-yocto-kernel-tools-to-create-and-maintain-a-bsp Bruce Ashfield en This presentation will provide detailed steps on how to use the existing infrastructure and tooling to develop new BSPs and share/leverage knowledge of other developers. It will also provide information about why this is desirable, rather than relying solely on in-tree/demo defconfigs. It will be suitable for the beginner user and integrator. Experienced kernel developers with their own workflows may also be interested. false slides https://pretalx.com/yocto-project-summit-2021-11/talk/ATMMV9/ https://pretalx.com/yocto-project-summit-2021-11/talk/ATMMV9/feedback/ Room A Talk 2021-12-02T17:30:00+00:00 17:30 00:30 When deploying IoT devices to the field, they become inherently difficult to access physically. In the ideal case the devices always work predictably and you have an approach to do OTA software updates in a controlled manner, so you can systematically improve your device fleet over time, by fixing bugs, security issues and adding new features. In the real world, even if you do your due diligence and planning, strange things will happen to individual devices in the field. Your customers will contact you and ask why the product is not working according to their expectations. Is there something wrong with the device, software applications or the expectations/usage of the customer? This needs to be addressed right away, your customer is waiting. But where to start? Remote access is a common term used for different features, for example remote terminal, that will enable efficiently diagnosing such issues remotely. Based on research on solutions used across many different IoT product companies, we will go through the most common needs around Remote access. We will also survey different open source technologies, including system applications and network protocols, that can be used for remote access purposes and compare them. yocto-project-summit-2021-11-12692-remote-access-to-iot-devices-common-needs-and-approaches Alan Martinovic en This presentation will help the embedded Linux development community see why Remote access may be useful in their products, so it could be integrated before devices are released to the field. It will also save time by helping guide which specific features and tools can be used to achieve their needs. false Presentation slides for upcoming talks https://pretalx.com/yocto-project-summit-2021-11/talk/PZVTZY/ https://pretalx.com/yocto-project-summit-2021-11/talk/PZVTZY/feedback/