2.0 -//Pentabarf//Schedule//EN PUBLISH RHELPK@@pretalx.com -RHELPK Welcome - Day 1 en en 20251202T120000 20251202T121500 001500

Welcome - Day 1

Welcome - Day 1 PUBLIC CONFIRMED Lightning Talk https://pretalx.com/yocto-project-summit-2025-12/talk/RHELPK/ Walnascar Josef Holzmayr PUBLISH TDSBE7@@pretalx.com -TDSBE7 Introduction to The Yocto Project and Bitbake en en 20251202T121500 20251202T134500 013000

Introduction to The Yocto Project and Bitbake

This talk will be the first of a series of 2 seminars which will cover the topics of: * Bitbake * Recipes * Tasks * Operators * Common variables * What to do when things go wrong * Building an embedded image PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/TDSBE7/ Walnascar Behan Webster PUBLISH 3ZUTZU@@pretalx.com -3ZUTZU Introduction to Layers, Images and more en en 20251202T140000 20251202T153000 013000

Introduction to Layers, Images and more

This talk will be the second of a series of 2 seminars which will cover the topics of: * Introduction to layers * What's in each of the provided layers * Booting your image with QEMU * Board support packages * Images * Toaster * Building an application PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/3ZUTZU/ Walnascar Tom King PUBLISH WNE7XA@@pretalx.com -WNE7XA sbom-cve-check: Lightweight Python tooling for out-of-build CVE analysis of SPDX3 SBOMs en en 20251202T154000 20251202T161000 003000

sbom-cve-check: Lightweight Python tooling for out-of-build CVE analysis of SPDX3 SBOMs

**sbom-cve-check** was conceived to help produce artifacts necessary in vulnerability assessment which will be a periodic action for CRA compliance. Developers, integrators and manufacturers will need to archive the SBOM as part of a release, and regularly conduct automated vulnerability reporting. Yocto today is able to generate the SBOM for its builds, and can also do CVE analysis. Our main problem was that this capability is intricately tied to the build, and cannot be replicated based on only the SBOM: one must rerun the whole build. We present sbom-cve-check: a new tool to conduct automated vulnerability analysis based on the SBOM, without rebuild, and relying on the open SPDX3 standard. **sbom-cve-check** aims at being an efficient replacement for the cve-check logic currently available in Yocto. It pulls from several databases, including NVD and CVE List, and supports multiple annotation formats, such as Open VEX and Yocto's custom format. sbom-cve-check currently supports the following export formats: SPDX3, CSV and Yocto's cve-check output format. The tool is provided under the GPLv2 license, and contributions are of course welcome :). PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/WNE7XA/ Walnascar Olivier Benjamin Benjamin Robin PUBLISH 3KKPQM@@pretalx.com -3KKPQM Agentic LLMs as Your Pair Programming Partner: Lessons from Recent Cursor-Assisted Yocto Development en en 20251202T163000 20251202T170000 003000

Agentic LLMs as Your Pair Programming Partner: Lessons from Recent Cursor-Assisted Yocto Development

# The Productivity Revolution Here's what using "AI" - by which I mean Cursor backed by claude-4-sonnet in agentic mode - has genuinely transformed in my workflow: ## Research and Problem-Solving AI searches multiple sources, combines results, and presents options orders of magnitude faster than I can Google. I'm constantly learning new approaches to problems I thought I understood. ## Tool Mastery AI knows ways to use tools I've used for years that I never discovered. It analyses code-bases faster than I can grep, and interrogates command-line tools to understand their operation in real-time. ## Automation Everything Setting up repositories, managing commits, creating CI workflows, generating documentation - AI can automate these tasks by actually running the commands and learning from the output. # Real Examples That Matter ## E-ink Display Debugging I asked AI to SSH into our target board, capture webcam images of the code running on our controller chip, analyse what was displayed, identify mistakes, and iterate until the e-ink display showed correctly. This normally takes days - we did it in hours. ## Automated Power Optimisation We're now automating access to test equipment in our remote hardware lab. AI monitors power consumption as we make BSP changes, takes automated readings, and feeds results back into the optimization process for better battery life. # The Critical Gotchas - Content Overload: AI creates far too much content and makes things unnecessarily complex - Rabbit Holes: It gets confused and can chase irrelevant solutions - Happy Compliance: Ask it to do something nonsensical and it will absolutely do it - Tracking Management: You need to keep it focused on what you actually need to achieve # The Essential Insight This only works because I stay in control. AI is incredibly powerful, but you need: - Your experience to know what questions to ask - Feedback loops like CI testing and target board validation - Constant course correction to prevent hallucinations # Community Discussion How do we share these techniques? What feedback loops work best? How do we prevent AI from creating technical debt while harnessing its genuine productivity gains? I've got real examples to share, but I want to hear what's working for others. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/3KKPQM/ Walnascar Alex Lennon PUBLISH X9VJYK@@pretalx.com -X9VJYK KAS in automotive projects en en 20251202T170000 20251202T171500 001500

KAS in automotive projects

Handling the complexity of automotive software projects with Openembedded/Yocto is very challenging. Contributing factors to this include the complex automotive SoCs in general and of course the vendor-supplied BSPs with many meta-layers. They include multiple image and distro variants, as well as specific machine configurations for the hardware and the emulation. On top of that the project developers put on top of that the project specific layers, build variants and configurations. To handle that in automotive projects, a standardized way is required to deal with all of this complexity without developing something new. In our case KAS was adopted as the best solution, that fulfilled all the requirements on such a tool. The talk will highlight the general idea of KAS and the problem it solves within Openembedded/Yocto projects. After explaining how to set up KAS projects the next step is an overview of how it is used in our automotive project will be given. It will be highlighted how we manage multiple layers, different machines, images and distros to build different targets with the help of KAS. Afterwards, it will be shown how it enabled our project to have a standardized way for developers and the CI to trigger builds with specific configurations easily. At the end of the talk the key reasons to use KAS will be summarized and an outlook will be given onthe development that is currently happening with bitbake-setup. PUBLIC CONFIRMED Lightning Talk https://pretalx.com/yocto-project-summit-2025-12/talk/X9VJYK/ Walnascar Michael Estner PUBLISH 3Z9QRJ@@pretalx.com -3Z9QRJ Yocto BSP with STM32MP en en 20251202T172000 20251202T175000 003000

Yocto BSP with STM32MP

The community finds the STMP32MP Yocto BSP Layer is quite complicated, and it is quite difficult to developed a new machine based on ST machine configuration. The aim of this talk is to give a BSP implementation example, as well as how ST abstracts key BitBake BSP variables and uses advanced development techniques to support their boards in a generic way. Talking about STM32MP, STM32MP2 specifically, also means talking about ARM Trust Boot and firmware update and how ST handles that in Yocto. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/3Z9QRJ/ Walnascar Talel BELHAJSALEM PUBLISH RV3ZZC@@pretalx.com -RV3ZZC Social hangout - Day 1 en en 20251202T180000 20251202T200000 020000

Social hangout - Day 1

Social hangout - Day 1 PUBLIC CONFIRMED After hours social https://pretalx.com/yocto-project-summit-2025-12/talk/RV3ZZC/ Walnascar PUBLISH TTWVXV@@pretalx.com -TTWVXV Hands-On Setup en en 20251202T121500 20251202T122500 001000

Hands-On Setup

Hands-On Setup PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/TTWVXV/ Whinlatter David Reyna PUBLISH GXDTRX@@pretalx.com -GXDTRX BBSC - bitbake-setup clang Livecoding en en 20251202T122500 20251202T125500 003000

BBSC - bitbake-setup clang Livecoding

Livecoding as you know it. An idea to show, a rough concept how it's supposed to work, and then finding the problems live. PUBLIC CONFIRMED Lightning Talk https://pretalx.com/yocto-project-summit-2025-12/talk/GXDTRX/ Whinlatter Josef Holzmayr PUBLISH V9YJMW@@pretalx.com -V9YJMW DevTool Hands-on Class en en 20251202T125500 20251202T142500 013000

DevTool Hands-on Class

devtool is a powerful set of features that can greatly enhance package development with the Yocto Project. Be prepared to be impressed and wish you had known this tool earlier! This class will teach users about the features available with this tool. It will then guide the users through the process of importing new packages, generating and editing recipes, testing them on a target system and also how to create new patches for existing recipes. Last but not least, this class will be run using the latest Yocto release, Whinlatter. PUBLIC CONFIRMED Hands-on class https://pretalx.com/yocto-project-summit-2025-12/talk/V9YJMW/ Whinlatter Michael Opdenacker, Root Commit PUBLISH PV3SLG@@pretalx.com -PV3SLG Yocto and Bitbake Tooling en en 20251202T144000 20251202T161000 013000

Yocto and Bitbake Tooling

Many of the basic everyday Yocto tasks can be tedious. That is why the many amazing developers contributing to the Yocto project have created tools that come with Yocto to automate such tedious tasks. Often beginners can end up wasting time on small issues for simple changes for example: Creating a recipe but the recipe is not detected. Creating a bbappend that fails to append. Creating a layer but the layer configuration is not correctly defined. Setting a variable but it does not take affect. Often there are manual approaches to tasks such as creating layer and recipes by hand which can lead to such issues as above. The standard Yocto tooling can automate manual tasks that can be error prone for beginners thus avoiding such errors. This talk will briefly cover the following Yocto and Bitbake tools: - bitbake-layers - bitbake-getvar - bitbake - recipetool - runqemu - oe-depends-dot - oe-pkgdata-util - oe-run-native - buildhistory-collect-srcrevs To fullfill tasks such as: - creating a Yocto project from scratch - creating layers - adding third party layers - validating layer and recipe definitions - determining inter-layer, inter-recipe, inter-task dependencies - creating reproducible builds - inspecting build environments - patching recipe source code - debugging the kernel - emulating the kernel - inspecting packages - running native tooling without installing locally - version locking all floating SRCREVs PUBLIC CONFIRMED Hands-on class https://pretalx.com/yocto-project-summit-2025-12/talk/PV3SLG/ Whinlatter Anakin Childerhose PUBLISH SWNBQS@@pretalx.com -SWNBQS Welcome - Day 2 en en 20251203T120000 20251203T121500 001500

Welcome - Day 2

Welcome - Day 2 PUBLIC CONFIRMED Lightning Talk https://pretalx.com/yocto-project-summit-2025-12/talk/SWNBQS/ Walnascar PUBLISH 9PBHQP@@pretalx.com -9PBHQP Improving CVE Triage for the Linux Kernel en en 20251203T121500 20251203T124500 003000

Improving CVE Triage for the Linux Kernel

Since the Linux kernel became a CVE Numbering Authority (CNA), the number of associated CVEs has increased. Security teams must address these CVEs to meet regulatory and customer requirements, increasing their workload unless automation is implemented. In this talk, we analyze the status of CVEs for each LTS kernel branch. Then, we demonstrate how leveraging CVE kernel metadata and recent SPDX generation enhancements within oe-core can reduce CVE false positives by 70% and provide detailed responses for all kernel-related CVEs. This process uses output from vex or the cve-check bbclass as input. Additionally, it enables more detailed per-binary information about the source code used to compile any package built with The Yocto Project. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/9PBHQP/ Walnascar Daniel Turull PUBLISH BUH9GG@@pretalx.com -BUH9GG Configuration Fragments & bitbake-setup en en 20251203T125000 20251203T132000 003000

Configuration Fragments & bitbake-setup

This talk will introduce the new features described above and show how they can be used. It will also show how you can write your own Configuration Fragments and `bitbake-setup` configuration files, as well as where to place them in a layer. It will discuss the migration paths from the combined `poky` git repository or from other layer setup tools. The talk will finish with some ideas of how we can continue to improve these tools. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/BUH9GG/ Walnascar Yoann Congal PUBLISH EUWBYR@@pretalx.com -EUWBYR Writing a Distro for No-one (or Anyone) en en 20251203T132500 20251203T134000 001500

Writing a Distro for No-one (or Anyone)

This quick presentation talks about the considerations of building a Yocto distribution without a specific target in mind. We'll discuss when a generic distro makes sense, how to plan for the unknown, and some best practices for architecture, kernel, userspace, and documentation. Topics include: - Why and when to write a general-purpose distro, and the distro's role in embedded Linux projects. - Choosing hardware targets before users or use cases are defined. - Optimizing the distro for flexibility and reuse in Yocto projects. - The Linux kernel's role in a generic distro. - Creating references and documentation. PUBLIC CONFIRMED Lightning Talk https://pretalx.com/yocto-project-summit-2025-12/talk/EUWBYR/ Walnascar Esa Jääskelä PUBLISH ACAQGV@@pretalx.com -ACAQGV cve-check: which way forward? en en 20251203T140000 20251203T143000 003000

cve-check: which way forward?

Outline: - CVE/NVD and the state of the landscape - What is cve-check? What worked? What didn't work? - yocto-vex-check? What worked? What didn't work? - Options going forward PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/ACAQGV/ Walnascar Marta RYBCZYNSKA, Ygreky PUBLISH RZGDFW@@pretalx.com -RZGDFW Enabling UEFI Secure Boot on x86 en en 20251203T143500 20251203T150500 003000

Enabling UEFI Secure Boot on x86

After briefly introducing Secure Boot and meta-secure-core, dive into project creation. I will create a genericx86-64 build and demo how to provision the keys and secure boot on hardware. Then I will create an intel-corei7-64 build (using meta-intel) showing changes required to use that machine. After demoing booting intel-corei7-64, I’ll show how to generate your own keys instead of using the sample keys provided. Lastly, I’ll walk through how to change the Grub password from the default. Trademarks displayed in this presentation are the property of their respective owners. No claim of ownership is intended, and all recognized trademarks, logos, and service marks belong to the companies or individuals to whom they are registered. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/RZGDFW/ Walnascar Gregory Meiste PUBLISH XSM7NL@@pretalx.com -XSM7NL Feedback on dm-verity integration under secure boot with Yocto en en 20251203T151000 20251203T154000 003000

Feedback on dm-verity integration under secure boot with Yocto

This talk provides a detailed walkthrough of the real-world integration of dm-verity in a Yocto-based Linux distribution to ensure data integrity across multiple system partitions. We will cover the configuration of dm-verity within the Yocto build system, its interaction with Secure Boot across various hardware platforms, and the implications for system updates. The session will also address performance overhead, update workflows for read-only root filesystems, and common failure modes encountered during boot authentication. Debugging techniques and mitigation strategies will be discussed to equip attendees with the technical knowledge required to successfully integrate dm-verity into their own secure embedded platforms. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/XSM7NL/ Walnascar Pierre Gal PUBLISH AMBENP@@pretalx.com -AMBENP Implementing Secure Boot on ARM Platforms with Yocto: A Case Study on NXP i.MX en en 20251203T155000 20251203T162000 003000

Implementing Secure Boot on ARM Platforms with Yocto: A Case Study on NXP i.MX

Not all ARM devices include UEFI or a TPM, yet embedded systems still need strong guarantees of authenticity and integrity. This session explains how to build a secure and trusted boot chain on ARM platforms directly using SoC-provided mechanisms. Focusing on the NXP `i.MX` SoC family, we’ll walk through: * Using the High Assurance Boot (`HABv4`) to sign and verify U-Boot and kernel images * Fusing keys inside the SoC’s OTP memory * Extending trust to userspace through `dm-verity` and `dm-crypt`, even without a TPM * Leveraging ARM TrustZone and OP-TEE for trusted key management and runtime validation This talk echoes the [YPS 2024.12 session “Secure Boot All the Way to Userspace” by Mikko Rapeli](https://www.youtube.com/watch?v=mNC5suIlWAQ), bringing similar principles to embedded hardware where UEFI is unavailable. Attendees will learn practical Yocto integration patterns and reproducible workflows to implement secure boot and trusted execution on ARM-based devices, ready for deployment in production environments. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/AMBENP/ Walnascar Mathieu Dupré PUBLISH 9JWKV7@@pretalx.com -9JWKV7 VulnScout + Yocto: Evolving Vulnerability and Compliance Management en en 20251203T162500 20251203T165500 003000

VulnScout + Yocto: Evolving Vulnerability and Compliance Management

The evolution of regulatory frameworks such as the EU Cyber Resilience Act require continuous vulnerability monitoring and assessment of the software supply chain. While Yocto already ensures reproducibility and transparency, maintaining visibility into vulnerabilities across hundreds of software packages remains a challenge. VulnScout addresses this need by analyzing SBOMs (SPDX, CycloneDX, and others) and correlating components with several vulnerability data sources, including NVD, OSV, and Yocto’s native cve-check output. It can operate in interactive mode, through a web interface for efficient review and assessment, or in non-interactive mode for CI pipelines, filters, and automate the production of reports. The accompanying meta-vulnscout layer integrates these capabilities into Yocto builds, providing tasks to: - Generate and collect SBOMs for images or other artifacts - Run vulnerability scans as part of BitBake builds - Merge cve-check results with external feeds - Optionally fail builds or generate structured reports based on severity thresholds This session will demonstrate current features and discuss upcoming developments, including better Yocto Project integration, vulnerability assessment, and continuous monitoring. Attendees will gain a clear view of how VulnScout and meta-vulnscout can help secure Yocto-based products and how the community can collaborate on their evolution. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/9JWKV7/ Walnascar Jérôme Oufella Valentin Boudevin PUBLISH C933T3@@pretalx.com -C933T3 Hardening Your Container Supply Chain with Yocto‑Built Base Images en en 20251203T170000 20251203T171500 001500

Hardening Your Container Supply Chain with Yocto‑Built Base Images

We will replace an Alpine base image in a micro‑service with an OCI‑compliant image generated by Yocto. Along the way you will learn that we can: - compile every dependency from source under fully reproducible builds; - strip unused libraries, toolchains and the package manager to shrink the attack surface; - automatically generate file level SPDX SBOMs; -feed vulnerability scanners with deterministic package metadata. A comparison quantifies the impact on image size, package count, and open‑CVE exposure. PUBLIC CONFIRMED Lightning Talk https://pretalx.com/yocto-project-summit-2025-12/talk/C933T3/ Walnascar Anders Heimer PUBLISH RDTCUR@@pretalx.com -RDTCUR From CVEs to Compliance: Strengthening Security for EU RED GEC-1 with Yocto en en 20251203T172000 20251203T175000 003000

From CVEs to Compliance: Strengthening Security for EU RED GEC-1 with Yocto

As regulatory frameworks like EU RED introduce stricter cybersecurity requirements, maintaining visibility into vulnerabilities has become critical for embedded Linux developers. This talk walks through the process of improving a security posture to meet GEC-1 compliance goals using the Yocto Project’s cve-check tool and related workflows. Topics include: * How to use and extend cve-check for ongoing vulnerability tracking * Challenges of applying security updates in long-lived products * Strategies for prioritizing fixes and handling false positives * Lessons learned integrating compliance requirements into a Yocto-based workflow * The role of meta-lts-collab in supporting long-term maintenance While specific implementation details will remain high-level, the goal is to share actionable insights for teams working toward stronger security and compliance practices with Yocto. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/RDTCUR/ Walnascar Colin Pinnell McAllister PUBLISH MG8H8V@@pretalx.com -MG8H8V Social hangout - Day 2 en en 20251203T180000 20251203T200000 020000

Social hangout - Day 2

Social hangout - Day 2 PUBLIC CONFIRMED After hours social https://pretalx.com/yocto-project-summit-2025-12/talk/MG8H8V/ Walnascar PUBLISH UGBFS3@@pretalx.com -UGBFS3 Self-paced hands-on YP Tools class en en 20251203T143500 20251203T160500 013000

Self-paced hands-on YP Tools class

This is a self-paced version of the Tools hands-on class, with guidance from the experts. This is also a special invitation for the Beginner's Class students to try out the tools direct, since the official class was at the same time as the Beginning Classes. Instructions are provided on how to set up the classes on your own host. Please open the class slides and set up your host the day before, since the initial build will take many hours. A limited number of pre-configured VM hosts will also be available. PUBLIC CONFIRMED Hands-on class https://pretalx.com/yocto-project-summit-2025-12/talk/UGBFS3/ Whinlatter David Reyna Anakin Childerhose PUBLISH EEVRRL@@pretalx.com -EEVRRL Welcome - Day 3 en en 20251204T120000 20251204T121500 001500

Welcome - Day 3

Welcome - Day 3 PUBLIC CONFIRMED Lightning Talk https://pretalx.com/yocto-project-summit-2025-12/talk/EEVRRL/ Walnascar PUBLISH CLTKKY@@pretalx.com -CLTKKY Yocto in the Real World – Philips Case Study en en 20251204T121500 20251204T124500 003000

Yocto in the Real World – Philips Case Study

Setting the Stage: Embedded Software Development (5 minutes) Challenges of embedded system development in modern industries The growing need for custom, maintainable, and optimized software stacks Why Yocto is a popular choice in this context Philips Case Study Overview The Role of Yocto in the Philips Project How Yocto was chosen as the solution Benefits of Yocto: Customization, scalability, long-term maintenance How Yocto addressed Philips’ specific needs: Custom Linux Distribution for Philips embedded devices Real-time requirements, security features, and ease of integration Key technical features of Yocto used: Layered architecture Recipe management for build automation SDK generation for development consistency Cross-compilation for ARM-based processors Key Challenges & Solutions Challenge 1: Customization and Integration Challenge 2: Security Challenge 3: Long-Term Support and Maintenance Yocto’s Real-World Benefits for Philips Time-to-market reduction through automated builds Tailored, lightweight OS for embedded systems with optimized performance Ease of scaling the system across different device families and models Maintaining a single build environment for multiple product lines Conclusion and Q&A PUBLIC CONFIRMED Product Showcase https://pretalx.com/yocto-project-summit-2025-12/talk/CLTKKY/ Walnascar Ed Langley PUBLISH RT8L3Y@@pretalx.com -RT8L3Y Yocto Linux in Mission Critical Energy Systems – A Hitachi Energy Journey en en 20251204T125000 20251204T132000 003000

Yocto Linux in Mission Critical Energy Systems – A Hitachi Energy Journey

Hitachi Energy has a rich history dating back to the 19th century, marked by technological innovation and strategic mergers that have shaped its evolution into a global force in electrification and power grids. Driven by a commit-ment to sustainability, security, resilience, and affordability, Hitachi Energy actively contributes to the moderniza-tion of energy systems, making electricity more accessible worldwide. In product development, adopting Embedded Linux and Yocto enhances flexibility and maintainability, with strong legal compliance, license management, and open-source collaboration. Hitachi Energy is rolling out Linux-based energy grid automation products and this talk covers their transition to embedded Linux via Yocto, addressing industry protocol support, impacts of the EU Cyber Resilience Act, OSS license challenges, and navigating these within a slow-evolving sector. PUBLIC CONFIRMED Product Showcase https://pretalx.com/yocto-project-summit-2025-12/talk/RT8L3Y/ Walnascar Benjamin Weber PUBLISH 7ZEQ3P@@pretalx.com -7ZEQ3P Designing for Longevity: Embedded Software as a Determinant of Electronic Component Lifetime en en 20251204T132500 20251204T135500 003000

Designing for Longevity: Embedded Software as a Determinant of Electronic Component Lifetime

Designing for longevity means shifting focus from short-term delivery to long-term maintainability. Embedded software, if engineered with reproducibility, modularity, and security in mind, becomes the determining factor in extending the life of electronic components. The Yocto Project provides both the tools and the structure to implement these practices effectively. Through disciplined layer management, automated validation, and secure update infrastructures, developers can create products that remain functional, maintainable, and secure over many years. By treating software as a lifecycle driver rather than a disposable component, we contribute not only to technical excellence but also to environmental sustainability and the principles of green electronics. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/7ZEQ3P/ Walnascar Lenka Kosková Třísková PUBLISH ENVHQJ@@pretalx.com -ENVHQJ Multiverse of Maintenance: Where ROS meets Yocto, and every combination is a new reality. en en 20251204T140500 20251204T143500 003000

Multiverse of Maintenance: Where ROS meets Yocto, and every combination is a new reality.

Maintaining the meta-ros layer for the Yocto Project is more than just embedded systems work—it's a multidisciplinary effort that spans Python automation, cloud-native CI/CD, developer experience, and open source community building. In this talk, Rob Woolley shares lessons learned from maintaining meta-ros, including the use of the superflore Python tool to auto-generate BitBake recipes from upstream ROS metadata, and how GitHub Actions streamline monthly syncs with rosdistro. Rob will also explore how integrating the kas configuration tool has simplified onboarding and reproducibility, despite the complexity of supporting 20+ Yocto/ROS distribution combinations. He’ll walk through the use of advanced Git techniques to manage this matrix, and how a Terraform-powered GitLab CI farm on AWS spot instances enables scalable, cost-effective testing—coordinated via GitLab SaaS. The session will highlight how SDK generation, pre-built images, and native build environments improve developer workflows, and how community engagement through GitHub, Discord, Discourse, and biweekly working group meetings fosters collaboration and innovation. Whether you're an embedded developer, DevOps engineer, or open source contributor, this talk will show how cross-domain skills can elevate the sustainability and impact of a complex Yocto layer. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/ENVHQJ/ Walnascar Rob Woolley PUBLISH B7EK7K@@pretalx.com -B7EK7K genericarm64:what is it and how can it help you? en en 20251204T144000 20251204T151000 003000

genericarm64:what is it and how can it help you?

A lot of development has been done to make 64bit Arm architectures work well with GNU/Linux SW stack. Low level bootloader (u-boot etc) and Linux kernel support has been upstreamed and many boards and devices from multiple vendors will work out-of-the-box at least for basic functionality like memory, CPU, highspeed buses like PCIe, serial consoles and ethernet. Since support for these devices exists in upstream kernel, it just needs to be enabled in downstream Linux distributions, which is what Yocto machine configuration genericarm64 does. The SoCs and boards working with genericarm64 need an Arm System Ready compatible firmware, with UEFI support. Either vendor or u-boot or edk2 open source SW can be used to provide this firmware, with or without extra security components from the Trusted Firmware umbrella https://www.trustedfirmware.org/. With the device and board and firmware and necessary kernel support enabled, genericarm64 can boot a number boards from a number of vendors. The default core-image-sato images can be used to test boards from multiple vendors and can be used as a starting point for product specific configuration and to compare HW from different vendors. The traditional SoC vendor way of providing vendor and product specific layers and build configurations makes comparing different boards and their features harder. They also tie solutions to specific supported branches, possibly only an older LTS, even when support exists in latest development branch in Yocto. It is hard to compare different product specific builds because environments are complext to setup and manage, though some HW specific usecases may not work with upstreamed SW and thus may require vendor specific firmware, SW or BSP SW support in genericarm64. The default Yocto Project builds for genericarm64 are also a bit limited on the contents of the SW stack, since in Yocto community oe-core only contains quite minimal set of SW components. Additional layers like meta-security, meta-virtualisation, meta-arm etc may need to be added in such cases. Vendors providing HW and firmware support can also use Linaro service like ONELab to test their HW and firmware versions so that they are compatible with Yocto genericarm64 and also other Linux distributions. Yocto genericarm64 also uses Linaro Lava to test different boards and firmware variants so that boot to serial console etc and execution of Yocto upstream oeqa runtime tests work. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/B7EK7K/ Walnascar Mikko Rapeli PUBLISH BCPNTE@@pretalx.com -BCPNTE Your Vendor's BSP Is Probably Not Built for Product Longevity. Now What? en en 20251204T151500 20251204T154500 003000

Your Vendor's BSP Is Probably Not Built for Product Longevity. Now What?

This talk will take a critical look at the state of vendor BSPs from an integrator's perspective. We will explore the common pitfalls: opaque custom tooling, automatic inclusion of demo software, reliance on unmaintained kernel forks, and the widespread avoidance of Yocto LTS releases. We'll discuss the differing perspectives of vendors and product developers, examine both good and bad real-world examples, and make the case for why writing your own sleek BSP layer is an absolutely valid strategy. Writing your own board descriptions and leveraging the stability of mainline Yocto and Linux kernels is not as daunting as it seems and can be the key to building truly sustainable and maintainable products. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/BCPNTE/ Walnascar Anna-Lena Marx PUBLISH PFKZZN@@pretalx.com -PFKZZN Why do we need Clang/LLVM en en 20251204T155500 20251204T162500 003000

Why do we need Clang/LLVM

Clang is another C/C++ compiler in addition to GCC which is now part of OpenEmbedded Core and yocto project users will get it out of box. This talk covers the needed know-how to use it in various capacities e.g. just for one package, system-wide builds with clang. Clang has additional tools which are good to have in the toolbox, eg. LLD is new linker implementation which is blazing fast linking large C++ programs. LibTooling based tools like clang-tidy provide needed checks close to static analyzers and it can be customized, clang-format is a lint'ing tool and clang-scan provides a static analyzer, with meta-clang it can be enabled to generate HTML reports. Having clang moved out of meta-clang, the question why we still need it, will be answered, there still are distro build policy fragments e.g. LTO, Thin-LTO to enable distro-wide settings. Then there are recipes which need clang explicitly which have moved to different layers e.g. meta-oe but some tweaks still are needed for some cases. LLVM is now shared across rust compiler, clang compiler and mesa and more use cases to come. Finally, It will tackle information on building Clang based C/C++ SDKs. There might be more use cases for GPU toolchains in future that involves clang/MLIR which can be enabled in Yocto project. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/PFKZZN/ Walnascar Khem Raj PUBLISH X979CC@@pretalx.com -X979CC Toolchain Testing Advancements: GCC, Glibc, Rust & Clang/LLVM en en 20251204T163000 20251204T170000 003000

Toolchain Testing Advancements: GCC, Glibc, Rust & Clang/LLVM

This session will delve into the evolution of key development toolchains—GCC, GLIBC, Binutils, Rust and Clang/llvm —and their testing within the Yocto Project. We will discuss the latest enhancements over previous releases, provide an overview of current testing methodologies, and share upcoming improvements aimed at ensuring robust toolchain behavior. Attendees will gain a deeper understanding of the toolchain testing process, including the challenges faced and the solutions being developed to maintain cutting-edge support for multiple architectures. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/X979CC/ Walnascar Sundeep KOKKONDA PUBLISH DWXS3N@@pretalx.com -DWXS3N meta-st-stm32mp and Me: A Journey from Buildroot to Yocto en en 20251204T170500 20251204T173500 003000

meta-st-stm32mp and Me: A Journey from Buildroot to Yocto

"Updates are easy", they said... When I meet "they", they owe me a drink! To start, I will go through the process of migrating from a Buildroot project to a Yocto Project. Once the dust has settled on that phase of the project, I will go through the tasks involved of integrating a bespoke board into the meta-st-stm32mp layers and updating tf-a, u-boot and the Linux kernel. The guide is quite short and seems straightforward enough, so it should be an easy job... Let us find out the reality. PUBLIC CONFIRMED Talk https://pretalx.com/yocto-project-summit-2025-12/talk/DWXS3N/ Walnascar Ming PUBLISH MR3HJJ@@pretalx.com -MR3HJJ Social hangout - Day 3 en en 20251204T180000 20251204T200000 020000

Social hangout - Day 3

Social hangout - Day 3 PUBLIC CONFIRMED After hours social https://pretalx.com/yocto-project-summit-2025-12/talk/MR3HJJ/ Walnascar