Loading…
June 23 - 25, 2025
Denver, Colorado
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Mountain Daylight Time (UTC/GMT -6). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Company: Beginner clear filter
Monday, June 23
 

11:20am MDT

AI for Kernel Engineers - Sasha Levin, NVIDIA
Monday June 23, 2025 11:20am - 12:00pm MDT
Beyond the hype, AI is already impacting Linux kernel engineering workflows. This talk presents concrete examples from real-world applications in Linux kernel LTS maintenance and CVE assignment processes. We'll examine where AI tools have meaningfully improved development processes and where they fall short.
Drawing from hands-on experience, we'll demonstrate how AI assists in analyzing patches for LTS kernel trees and streamlines vulnerability classification workflows. We'll share specific metrics showing both successes and limitations, focusing on practical applications rather than theoretical possibilities. We'll also explore emerging opportunities where AI could enhance kernel development while maintaining high engineering standards.
This technical session provides kernel developers, maintainers, and engineering leaders with actionable insights for integrating AI tools into their workflows while preserving the rigor of kernel development practices.
Speakers
avatar for Sasha Levin

Sasha Levin

Distinguished Software Engineer, NVIDIA
Sasha helps maintain the Linux Kernel Stable and LTS trees. He is currently employed by NVIDIA where he helps make Linux better. Previously, Sasha was employed by Google, Microsoft, and the Ksplice team in Oracle.
Monday June 23, 2025 11:20am - 12:00pm MDT
Bluebird Ballroom 2D
  Linux

11:20am MDT

Effortlessly Build, Run, Secure, and Manage Traffic for a Generative AI Application From Scratch - Lin Sun, solo.io
Monday June 23, 2025 11:20am - 12:00pm MDT
Generative AI (GenAI) is ushering in a new era of human innovation, but building your own GenAI application can feel overwhelming. Which Large Language Model (LLM) should you choose? Should you incorporate Retrieval-Augmented Generation (RAG)? How can you ensure your application runs securely and efficiently on Kubernetes, with robust observability and debugging? And how do you manage API calls and control costs for external LLMs?

This demo-driven session will guide you step by step through building, running, securing, and managing traffic for a GenAI application from scratch. Starting with a native setup, we’ll then transition to Kubernetes, simplifying the entire process. You’ll learn how to enhance your application with domain-specific knowledge using RAG and leverage cloud-native tools like Kubernetes, Prometheus, Kiali, Istio, and the Kubernetes Gateway API to run your application securely and effectively.
Speakers
avatar for Lin Sun

Lin Sun

Head of Open-Source, solo.io
Lin is the Head of Open Source at Solo.io, and a CNCF TOC member and ambassador. She has worked on the Istio service mesh since the beginning of the project in 2017 and serves on the Istio Steering Committee and Technical Oversight Committee. Previously, she was a Senior Technical... Read More →
Monday June 23, 2025 11:20am - 12:00pm MDT
Bluebird Ballroom 3A
  Open Source 101

11:20am MDT

Open Source in the Federal Government - Jordan Kasper, Independent
Monday June 23, 2025 11:20am - 12:00pm MDT
The federal government builds and maintains hundreds of thousands of software systems - and it would be difficult to find a system that doesn't rely on open source software. In fact, the government is likely the single largest consumer of OSS in the world and considering the criticality of the mission, the security of those systems is paramount. There has been limited guidance on how government programs should select, consume, contribute to, and publish open source software, but things are getting better! This session will discuss the current landscape of open source in the federal government and present methods for how we can secure our own systems with tools and processes to vet open source projects, ingest that software securely, and support those projects with substantive contributions.
Attendees from government entities, contractors, and members of the community should attend to learn how the government can tackle the supply chain risks inherent in open source while still capturing the benefits that it has to offer. They'll come away with an understanding of how this might impact their work, and how by working together we can build a better open source ecosystem for everyone.
Speakers
avatar for Jordan Kasper

Jordan Kasper

Sr Technical Advisor
Jordan Kasper is a software engineer, conference speaker, and open source zealot. He spent much of his career building web applications for organizations of all sizes. In 2017, he joined the U.S. Digital Service to help make tech better for all Americans, working in multiple federal... Read More →
Monday June 23, 2025 11:20am - 12:00pm MDT
Bluebird Ballroom 3F
  OpenGovCon

11:20am MDT

Why Rust and Zephyr Are a Good Fit - David Brown, Linaro
Monday June 23, 2025 11:20am - 12:00pm MDT
When seeking to use Rust for embedded development, there are several options, including bare-metal, a few rust-specific rtos implementations, and several existing RTOSes. This talk discusses why Zephyr is a good fit for an embedded Rust, and especially how we are able to leverage some of Zephyr's strengths, including a rich and diverse set of supported targets, and some of Zephyr's features, such as the work queue mechanism, and how it fits well with Rust's async system.
Speakers
avatar for David Brown

David Brown

Senior Engineer, Linaro
David Brown is part of Linaro, and has worked on the Linux kernel, with a focus on security for a number of years. Recently, he has been focusing on security as it relates to IoT and embedded devices, including focusing on secure booting, and secure network communications. He is currently... Read More →
Monday June 23, 2025 11:20am - 12:00pm MDT
Bluebird Ballroom 2B
  Zephyr

1:30pm MDT

Implementing Zero Trust Security in Jenkins Pipelines With Open Source Tools - Steve Taylor, DeployHub, Inc
Monday June 23, 2025 1:30pm - 1:50pm MDT
As cyber threats become increasingly sophisticated, the traditional perimeter-based security model no longer suffices. Zero Trust Security offers a modern framework that assumes no entity—user, device, or application—can be trusted by default, emphasizing "never trust, always verify." But how can this framework be applied effectively within automated CI/CD pipelines like Jenkins?

In this talk, we’ll provide a practical introduction to Zero Trust Security, exploring its key principles and the critical role it plays in modern software delivery. Attendees will learn how to integrate Zero Trust practices into Jenkins pipelines using powerful open-source tools. From secrets management to policy enforcement and continuous vulnerability management, this session will provide actionable steps to secure the entire software development lifecycle.
Speakers
avatar for Steve Taylor

Steve Taylor

CTO, DeployHub
Steve Taylor is a visionary and leader in open-source security, DevOps, and securing the software supply chain. Long before “CI/CD” became a buzzword, Steve was designing cutting-edge pipelines for Fortune 1000 companies, redefining how software is built and deployed. His innovative... Read More →
Monday June 23, 2025 1:30pm - 1:50pm MDT
Bluebird Ballroom 3B
  cdCon

1:30pm MDT

Gopher Meets Crab: A Rust Journey in Cloud Native - Phil Estes, AWS
Monday June 23, 2025 1:30pm - 2:10pm MDT
If you've been around the container and cloud native ecosystem for any length of time, you know most major components are written in Go: from Docker to runc and from Kubernetes to etcd! This means that many of the common constructs, for example the OCI specs, or Kubernetes API resources, are easy to use from other Go programs, but not quite as easy when you step outside of the Go ecosystem.

In this talk we'll dive into the experience of trying to use containers from a Rust-written client and delve into existing work from early adopters of Rust. There are quite a few crates that help us along the way, providing some level of parity for Rust developers in the cloud native ecosystem. There are still complexities and hurdles as well, and we'll share our experience navigating this as a long-time Go programmer and Rust newbie.

Attendees will take away some quick tips as well as gotchas for working in the container and cloud native ecosystem as a Rust developer and, who knows, maybe soon the Gopher and the Crab will be the best of friends.
Speakers
avatar for Phil Estes

Phil Estes

Principal Engineer, Core Container Technology, AWS
Phil is a Principal Engineer for Amazon Web Services (AWS), focused on core container technologies that power AWS container offerings like Fargate, EKS, and ECS. Phil is an active contributor and maintainer for the CNCF containerd runtime project, and participates in the Open Container... Read More →
Monday June 23, 2025 1:30pm - 2:10pm MDT
Bluebird Ballroom 2G
  Cloud + Containers

1:30pm MDT

Heterogeneous Linux and RTOS Software Architecture for Low-Price RISC-V Cores - Jim Huang & 繼寬 邱, National Cheng Kung University
Monday June 23, 2025 1:30pm - 2:10pm MDT
SoCs are increasingly heterogeneous, featuring multiple processor clusters and special-purpose accelerators. As a result, Asymmetric Multiprocessing (AMP) systems must support different operating environments running concurrently on the same chip. This talk outlines the software architecture needed to develop applications for AMP setups, enabling operating systems to interact across diverse homogeneous and heterogeneous configurations. In this way, AMP applications can leverage the parallelism provided by these varied architectures.

Our prototyping efforts focus on low-cost RISC-V processor cores configured as AMP systems, running both the Linux kernel and RTOSes such as ThreadX. This setup includes an IPC layer that implements RPMSG communication between cores. Additionally, our proxy infrastructure highlights how a proxy on the master core can handle POSIX library calls from RTOS-based remote contexts.
Speakers
avatar for Jim Huang

Jim Huang

Assistant Professor, National Cheng Kung University
Drawing from his contributions to the Android Open Source Project (AOSP), Jim specializes in real-time performance tuning and optimization of Linux-based automations. Additionally, he is a co-founder of the LXDE project, a lightweight desktop environment widely utilized in embedded... Read More →
avatar for Chi-Kuan Chiu

Chi-Kuan Chiu

Student, National Cheng Kung University
Chi-Kuan Chiu is currently pursuing the B.S. degree in computer science with National Cheng Kung University.
Monday June 23, 2025 1:30pm - 2:10pm MDT
Bluebird Ballroom 2A
  Embedded Linux Conference

1:30pm MDT

Accelerating Computation With GPU Parallel Processing: Enhancing Performance and Efficiency - Akhilesh Shenoy & Aakarsh Jain, Samsung Semiconductor
Monday June 23, 2025 1:30pm - 2:10pm MDT
Graphics Processing Units (GPUs) have become key to modern computing, enabling high-performance parallel processing beyond their original role in gaming. Today, they are critical for solving complex computational challenges effectively. To achieve high levels of parallelism, OpenCL is commonly used to break tasks into kernels, which are executed by multiple threads. Optimizing OpenCL performance on GPUs remains a persistent challenge, as it involves fine-tuning both software (OpenCL code, kernels) and hardware. One of the critical factors influencing GPU performance is the effective use of workgroups. The size of workgroups significantly impacts parallelism and efficiency.
This session focuses on key software optimizations in OpenCL, such as efficient memory management, kernel fusion and optimal workgroup sizing in improving GPU performance. We will demonstrate, how optimized OpenCL code can significantly enhance parallel execution and efficiency. This talk also addresses challenges faced by automotive GPUs, including power and thermal constraints with strategies to overcome these. Best practices for writing efficient OpenCL code tailored for automotive GPUs will also be outlined.
Speakers
avatar for Akhilesh Shenoy

Akhilesh Shenoy

Associate Staff Engineer at Samsung Semiconductor, Samsung Semiconductor
Embedded Software developer with 4yrs of experience in Linux BSP, domain.
avatar for Aakarsh Jain

Aakarsh Jain

Associate Staff Engineer at Samsung Semiconductor, Samsung Semiconductor
6yrs of experience in Embedded Linux BSP
Monday June 23, 2025 1:30pm - 2:10pm MDT
Bluebird Ballroom 2E
  Linux

1:30pm MDT

Disconnected Environments in a Connected World - Daniel Moch, Lockheed Martin & Eddie Zaneski, Defense Unicorns
Monday June 23, 2025 1:30pm - 2:10pm MDT
Most modern software assumes the internet is always available—but what happens when it’s not? Air-gapped environments are more prevalent than you might think. While they are essential in government, they’re also common in finance, healthcare, and manufacturing. Yet, a surprising amount of today’s tooling—from CI/CD pipelines to package managers—relies on network access and fails when that assumption is broken.

Working in these environments means finding new ways to handle familiar problems. In this talk, we’ll look at the challenges teams face when managing dependencies, applying updates, and automating deliveries without internet access. We’ll share practical solutions, real-world examples, and ways to make modern development practices work in restricted environments.
Speakers
avatar for Daniel Moch

Daniel Moch

Staff Software Engineer, Lockheed Martin
For over 20 years, Daniel has worked as a software engineer in the Defense and Aerospace industry. His experience ranges from embedded device drivers to large logistics and information systems. In recent years, he has focused on helping legacy programs adopt modern DevOps practices... Read More →
avatar for Eddie Zaneski

Eddie Zaneski

Technical Advisor to the CTO, Defense Unicorns
Eddie lives in Denver, CO with his wife and dog. He loves open source and works on the Kubernetes project. When not hacking on random things you'll most likely find him climbing rocks somewhere.
Monday June 23, 2025 1:30pm - 2:10pm MDT
Bluebird Ballroom 3F
  OpenGovCon

2:25pm MDT

Make Valkey Multi-threaded With Userspace RCU - Jim Huang, National Cheng Kung University
Monday June 23, 2025 2:25pm - 3:05pm MDT
This presentation explores how to create a multi-threaded version of Valkey by employing userspace Read-Copy-Update (RCU) to achieve high performance. With fewer than 2,000 lines of code modifications, we introduce a coordinator-worker pattern, enabling key-value stores like Valkey and Redis to handle tasks concurrently across multiple threads while using a per-thread event loop for I/O operations. Userspace RCU facilitates lock-free data sharing between a writer thread and multiple reader threads, dramatically improving read performance.

Our experiments show that the multi-threaded Valkey can achieve over one million operations per second on a standard server.
Speakers
avatar for Jim Huang

Jim Huang

Assistant Professor, National Cheng Kung University
Drawing from his contributions to the Android Open Source Project (AOSP), Jim specializes in real-time performance tuning and optimization of Linux-based automations. Additionally, he is a co-founder of the LXDE project, a lightweight desktop environment widely utilized in embedded... Read More →
Monday June 23, 2025 2:25pm - 3:05pm MDT
Bluebird Ballroom 2E
  Linux

2:25pm MDT

Navigating the Sea of CVEs: Securing Your Linux Distributions - Jess Lowe & Holly Gong, Google
Monday June 23, 2025 2:25pm - 3:05pm MDT
Are you drowning in a sea of vulnerability advisories, wondering why patching one thing doesn't fix everything? Despite a shared origin, a CVE's impact diverges significantly across Linux distributions. Consequently, a fix at the source does not automatically translate to comprehensive protection downstream. Each distribution requires independent patching, leading to a complex web of security advisories stemming from a single flaw.

In this talk, you'll learn how OSV tools can help you navigate this sea of advisories. We'll explore the root causes of advisory proliferation in Linux and demonstrate how OSV.dev aggregates and cross-references vulnerability data at scale to provide a more complete picture. You'll also see how OSV-Scanner accurately identifies vulnerabilities in your Linux systems, considering distribution-specific nuances and offering actionable guidance. By the end of this session, you'll be equipped with the knowledge and tools to patch smarter and secure your Linux infrastructure more effectively.
Speakers
avatar for Jess Lowe

Jess Lowe

Software Engineer, Google
Jess is a Software Engineer in the Google Open Source Security Team working on OSV.dev and OSV-Scanner.
avatar for Holly Gong

Holly Gong

Software Engineer, Google
Software Engineer at Google
Monday June 23, 2025 2:25pm - 3:05pm MDT
Bluebird Ballroom 2D
  Linux

2:25pm MDT

Radical Transparency: Lessons From Open-Sourcing Nearly All Company Documentation - Victor Lyuboslavsky, Fleet Device Management
Monday June 23, 2025 2:25pm - 3:05pm MDT
In an era when transparency is often a corporate buzzword, few companies truly embrace it at scale. What happens when a company commits to making nearly all of its internal documentation open source? What are the benefits, risks, and unexpected cultural shifts that arise?

In this session, we’ll take a deep dive into our company’s journey of open-sourcing nearly all documentation—from GitHub issues and design review notes to sprint demos and research documents. We’ll explore the motivations behind this decision, the technical and cultural challenges we faced, and the impact on our customers, employees, and open-source contributors.

Join us as we dissect the practical realities of radical transparency in engineering and product development. Whether you’re considering a similar approach or simply want to understand how transparency at scale affects innovation, security, and collaboration, this session will provide invaluable lessons and strategies.
Speakers
avatar for Victor Lyuboslavsky

Victor Lyuboslavsky

Software Engineer, Fleet Device Management
Victor is an engineer, author, and entrepreneur with over 25 years of technical leadership and hands-on development experience. Victor has worked in various industries, including semiconductors, health care, and cyber security. He is currently building security telemetry and MDM at... Read More →
Monday June 23, 2025 2:25pm - 3:05pm MDT
Bluebird Ballroom 3D
  Technical Documentation

3:35pm MDT

Intentrace, Making Strace More Human Using Rust - Mohammad Khalid, Independent
Monday June 23, 2025 3:35pm - 3:45pm MDT
Understand how all binaries interact with the linux kernel, how the linux kernel sees userspace code, how it expects it to behave, and how you, an author of such programs, should in response interact with it. intentrace is a rewrite of strace in Rust. currently in Beta.
Speakers
avatar for Mohammad Khalid

Mohammad Khalid

Software Engineer
A Mechanical Engineer and current Rust programmer. Mohammad had a short stint in manufacturing, and another in Oil & Gas, has since transitioned into Software Engineering and is interested in low level programming.
Monday June 23, 2025 3:35pm - 3:45pm MDT
Bluebird Ballroom 2D
  Linux

3:35pm MDT

Navigating the Challenges of Meeting Government SBOM Regulations in Decoupled Architectures - Tracy Ragan, DeployHub, Inc
Monday June 23, 2025 3:35pm - 4:15pm MDT
As government regulations, such as Executive Order 14028 - Improving the Nation's Cybersecurity, drive organizations to adopt Software Bill of Materials (SBOM) reporting, modern software systems face unique challenges in achieving compliance. Decoupled cloud-native architectures—comprised of microservices, containers, APIs, and distributed dependencies—make it exponentially more difficult to produce accurate, real-time SBOMs. This talk explores the complexities of implementing SBOM practices in distributed environments, the risks of non-compliance, and strategies to streamline compliance efforts.
Speakers
avatar for Tracy Ragan

Tracy Ragan

CEO, DeployHub, Inc.
Tracy is a recognized expert in software supply chain security and DevSecOps, specializing in managing complex, decoupled architectures. She is the CEO of DeployHub, a scalable continuous vulnerability management platform that empowers software to 'self-heal' by automatically applying... Read More →
Monday June 23, 2025 3:35pm - 4:15pm MDT
Bluebird Ballroom 3F
  OpenGovCon

3:35pm MDT

Real-Time I/O (RTIO) for Developing Real-Time Zephyr Applications - Luis Ubieda, Croxel
Monday June 23, 2025 3:35pm - 4:15pm MDT
RTIO is a relatively new subsystem in Zephyr, and it enables applications to perform time-critical I/O operations.

This presentation covers:
- Basics of RTIO.
- Async vs Sync paradigms.
- In-tree examples of RTIO: Sensors and Bus drivers.
- Integration guide: how to use RTIO in your Zephyr application.
- Demo: Comparison of Sensor driver with RTIO vs without RTIO.

This presentation is for you:
- You want to learn about RTIO.
- You struggle at achieving real-time performance in Zephyr applications.
- You want to optimize performance of your existing application.
Speakers
avatar for Luis Ubieda

Luis Ubieda

Lead Firmware Engineer, Croxel
Luis Ubieda is the Lead Firmware Engineer at Croxel. He is a Zephyr TSC electee and is an active Zephyr collaborator in Sensors and RTIO.
Monday June 23, 2025 3:35pm - 4:15pm MDT
Bluebird Ballroom 2B
  Zephyr

4:30pm MDT

Effortless Secure and Control Traffic Using Kubernetes Gateway API for Ingress, Egress and Mesh Traf - Lin Sun, solo.io
Monday June 23, 2025 4:30pm - 5:10pm MDT
How do you secure and control traffic for your north-south (ingress/egress) and east-west (service-to-service) traffic within your Kubernetes cluster? Do you have a unified approach for debugging, observability, and operational consistency across all traffic types?
With the growing maturity of the Kubernetes Gateway API, it’s now easier than ever to manage traffic in all directions with a unified and consistent approach. The Gateway API allows you to control and secure traffic flow without requiring application restarts, offering a seamless way to manage both ingress and egress traffic, as well as service mesh (east-west) communication.
This demo-driven session will showcase how to use the Kubernetes Gateway API to control traffic for both north-south and east-west directions. Leveraging Istio Ambient Mesh, Kgateway, and HTTP metrics, we’ll dynamically monitor application health, progressively roll out new versions, and control external API calls to optimize costs.
Speakers
avatar for Lin Sun

Lin Sun

Head of Open-Source, solo.io
Lin is the Head of Open Source at Solo.io, and a CNCF TOC member and ambassador. She has worked on the Istio service mesh since the beginning of the project in 2017 and serves on the Istio Steering Committee and Technical Oversight Committee. Previously, she was a Senior Technical... Read More →
Monday June 23, 2025 4:30pm - 5:10pm MDT
Bluebird Ballroom 2F
  Cloud + Containers

4:30pm MDT

How To Accelerate Software Defined Vehicle(SDV) With OSS - Yuichi Kusakabe, Honda Motor Co., Ltd.
Monday June 23, 2025 4:30pm - 5:10pm MDT
This presentation is the story of Honda's first in-house software development of IVI(In-Vehicle Infotainment) software.
Why Honda promotes in-house software development - Building an in-house software development team that started with two people, All development process from scratch, There is no silver bullet that will solve many problems.
However, we were able to launch this model successfully based on Honda's DNA of Waigaya, A00, and 120% quality products. The key to this is the use of AOSP(Android Open Source Project) and some OSS.
This presentation will show how a traditional automotive OEM like Honda was able to create an in-house software development team and use OSS, including AOSP. By applying OpenChain(ISO/IEC 5230) self-certification and SPDX Lite to our development process, we solved many problems and achieved a higher starting point.
However, vehicles have difficult requirements, so we will tell you the points to minimize the customization of OSS.
Speakers
avatar for Yuichi Kusakabe

Yuichi Kusakabe

Chief Architect / OSPO Tech Lead, Honda Motor Co., Ltd.
Yuichi Kusakabe is the Chief Architect at Honda Motor Co., Ltd. , AGL(Automotive Grade Linux) member and COVESA(Connected Vehicle Systems Alliance) member since 2011 with over twenty years of Automotive and Open Source Software Experience. Prior to joining Honda Motor he worked for... Read More →
Monday June 23, 2025 4:30pm - 5:10pm MDT
Bluebird Ballroom 2A
  Embedded Linux Conference

4:30pm MDT

Improve Load Balancing With Machine Learning Techniques Based on the Sched_ext Framework - Jim Huang, National Cheng Kung University
Monday June 23, 2025 4:30pm - 5:10pm MDT
This talk presents a method to enhance CPU scheduling by leveraging machine learning (ML) to extract the key features necessary for task migration, allowing for dynamic and stable optimization of workloads in scenarios prone to CPU imbalance. The approach is built on the sched_ext framework, which integrates eBPF to support user-defined scheduling policies within the Linux kernel.

While conventional approaches maximize CPU utilization, they often overlook contention for lower-level hardware resources, leading to performance bottlenecks -- particularly in compute-intensive servers. By using an ML-based, resource-aware load balancer, this method effectively addresses such imbalances. With sched_ext, we can collect training data and run inference on the model without modifying the kernel.

Our experiments demonstrate that, for certain workloads, this ML-driven approach can outperform EEVDF, offering notable performance gains for the CPU scheduler.







Speakers
avatar for Jim Huang

Jim Huang

Assistant Professor, National Cheng Kung University
Drawing from his contributions to the Android Open Source Project (AOSP), Jim specializes in real-time performance tuning and optimization of Linux-based automations. Additionally, he is a co-founder of the LXDE project, a lightweight desktop environment widely utilized in embedded... Read More →
Monday June 23, 2025 4:30pm - 5:10pm MDT
Bluebird Ballroom 2D
  Linux

4:30pm MDT

TODO Steering Committee - Management & OSPO Ask Anything - Brittany Istenes, FINOS Ambassador, ToDo Group Steering Committee; Natali Vlatko, Cisco; Georg Kunz, Ericsson; Ashley Wolf, GitHub; Stephen Augustus, Bloomberg L.P.; Annania Melaku, F5
Monday June 23, 2025 4:30pm - 5:10pm MDT
This Ask Anything session connects attendees to the TODO Group Steering Committee. The TODO Group is an open community of practitioners who aim to create, share knowledge and collaborate on best practices on open source management in organizations to run successful Open Source Program Offices.

Members of the steering committee will assist the audience through the best practices, guides, and tools made by and for open source managers to help them in their day-to-day responsibilities, as well as share their first-hand experiences and lessons learned in building and operating OSPOs. Additionally, attendees will learn ways to connect with the TODO Group – the largest OSPO community dedicated to building best practices in open source management. The session will also provide information on accessing OSPO mentorship in their local regions.
Speakers
avatar for Annania Melaku

Annania Melaku

Open Source Program Manager, NGINX part of F5
Annania Melaku is a Technical Program Manager on the Community Team at NGINX, where she focuses on open source strategy and community programs. With a background in software, she brings experience from industries including defense, telecom, and tech. Annania is passionate about building... Read More →
avatar for Georg Kunz

Georg Kunz

Open Source Manager, Ericsson
Georg is a passionate advocate for open source software and a long term contributor to a wide range of open source projects and communities. He currently serves on the Technical Advisory Council (TAC) and the Governing Board of the Open Source Security Foundation (OpenSSF) as well... Read More →
avatar for Ashley Wolf

Ashley Wolf

Director, Open Source Programs, GitHub
Ashley Wolf is the Director of Open Source Programs at GitHub. She runs initiatives and programs to empower developers to be successful with open source. She is also passionate about helping companies participate in the open source community. Prior to joining GitHub, Ashley led the... Read More →
avatar for Stephen Augustus

Stephen Augustus

Technical Architect, Office of the CTO, Bloomberg L.P.
Technical Architect, Office of the CTO at Bloomberg
avatar for Brittany Istenes

Brittany Istenes

OSPO Strategist, FINOS Ambassador, ToDo Group Steering Committee Member
Brittany Istenes started off her career as an elementary school educator which then led to a path of tech. Brittany has led advisory councils, special interest groups, open source contributions, community building, InnerSource initiatives and all the gray areas in between. As a FINOS... Read More →
avatar for Natali Vlatko

Natali Vlatko

Open Source Lead Architect, Cisco
Natali Vlatko (she/her) is an Open Source Lead Architect at Cisco, specializing in open software, policy, and governance. She is a SIG Docs Co-Chair for Kubernetes and a member of the TODO Group Steering Committee. She plays on the fun computer in her spare time. Her academic background... Read More →
Monday June 23, 2025 4:30pm - 5:10pm MDT
Bluebird Ballroom 3G
  OSPOCon

4:30pm MDT

Optimizing Zephyr for Peak Performance - Jacob Beningo, Beningo Embedded Group
Monday June 23, 2025 4:30pm - 5:10pm MDT
The Zephyr Project is a leading open-source RTOS for resource-constrained, real-time applications. Its modularity, vendor neutrality, and rich ecosystem make it a powerful choice for embedded developers. However, achieving peak performance requires a deep understanding of Zephyr’s internals and optimization strategies.

This session explores techniques to optimize Zephyr applications for efficiency, low latency, and real-time predictability. Attendees will learn how scheduling, memory management, and interrupt handling impact performance and how to fine-tune these elements for specific workloads. We’ll cover configuring Zephyr for high-performance execution, reducing runtime overhead, and debugging bottlenecks.

Key topics include:
• Zephyr’s scheduling model and task prioritization
• Optimizing interrupts and reducing latency
• Fine-tuning memory management and resource allocation
• Profiling and debugging performance issues
• Advanced optimizations for power efficiency and I/O

Whether you’re developing for IoT, industrial automation, or real-time control, this session will equip you with practical strategies to maximize Zephyr’s performance and reliability.
Speakers
avatar for Jacob Beningo

Jacob Beningo

Embedded Software Consultant, Beningo Embedded Group
Jacob Beningo helps embedded teams modernize software architecture, streamline development, and adopt best practices for high-quality, real-time systems. As founder of Beningo Embedded Group, he provides expert training and guided learning to improve code quality, accelerate development... Read More →
Monday June 23, 2025 4:30pm - 5:10pm MDT
Bluebird Ballroom 2B
  Zephyr

5:30pm MDT

BoF: From Origins To Open Source: The Journey of DreamWorks Animation's Production Path Tracer, MoonRay - Randy Packer, DreamWorks Animation
Monday June 23, 2025 5:30pm - 6:30pm MDT
MoonRay is DreamWorks Animation's open-source production rendering engine, used to create memorable imagery from movies such as How to Train Your Dragon: The Hidden World, Puss in Boots: The Last Wish, The Wild Robot, the upcoming Bad Guys 2 and future titles.

We’ll talk about MoonRay’s origins as an experiment and its foundation for rendering-as-a-service in animated and non-animated content, stylized and photoreal, to its current use as the core production renderer for the feature film studio pipeline at DreamWorks Animation.

After diving into MoonRay’s use at the studio, we’ll present our path to open-sourcing MoonRay, the goals and challenges to launch that, the experiences gained since launch, what it means for DreamWorks, and where we see the potential for the open source community to embrace it and its future in animation, vfx, simulation, visualization, and more.
Speakers
avatar for Randy Packer

Randy Packer

Sr. Manager, Production Software, DreamWorks Animation, DreamWorks Animation
Randy is sr. manager of rendering, shading and machine learning teams at DreamWorks, having started in 2015 as his first foray into the animation and the film industry. Randy's led the efforts of advancing MoonRay and it's feature set and related technologies since prior to it's usage... Read More →
Monday June 23, 2025 5:30pm - 6:30pm MDT
Bluebird Ballroom 3A
  Wildcard, Open Source Leadership

5:45pm MDT

Lightning Talk: LF Energy SEAPATH : Building an Open Source Ecosystem for the Energy Industry - Christophe Villemer, Savoir-faire Linux
Monday June 23, 2025 5:45pm - 5:55pm MDT
The LF Energy SEAPATH project has reached a major milestone with its V1 release in January 2025, establishing itself as the open-source reference for virtualized digital substations. Over the past five years, the project has grown into a structured, collaborative effort that bridges utilities, vendors, hardware manufacturers, and tech companies—unifying a traditionally conservative industry around open innovation. This talk will explore the SEAPATH journey: from its inception as a technical initiative to its current role as a strategic enabler of IT/OT convergence in energy systems. Attendees will gain insights into the challenges of engaging industry stakeholders, the best practices that have sustained growth, and the lessons learned in building an ecosystem where open-source principles drive real-world adoption. SEAPATH’s success is also a testament to the power of community-driven collaboration enabled by LF Energy, which has provided a neutral, trusted framework to bring together key players in the energy sector and accelerate open innovation.
Speakers
avatar for Christophe VILLEMER

Christophe VILLEMER

Executive vice president, Savoir-faire Linux
Christophe is an engineer entrepreneur passionate about creating value through collaboration. He has been involved in open source communities for 20 years also acting as an evangelist for numerous open source projects. At Savoir-faire Linux, he drives strategic and technological partnerships... Read More →
Monday June 23, 2025 5:45pm - 5:55pm MDT
Bluebird Ballroom 3C
  Open Source Leadership
 
Tuesday, June 24
 

11:00am MDT

Unleashing the Power of Mutation Testing: Supercharging Software Quality and Resilience - Emma Taylor, SciTec
Tuesday June 24, 2025 11:00am - 11:20am MDT
Mutation testing is a powerful technique used to assess the effectiveness of software tests by introducing small, deliberate changes (mutations) to the codebase. These mutations simulate common coding errors, offering a robust way to evaluate how well existing test suites can detect potential faults. This talk will explore the principles behind mutation testing, its applications in real-world development cycles, and its potential to uncover gaps in test coverage that traditional testing methods may miss. Attendees will learn about the core concepts, tools, and strategies for integrating mutation testing into CI/CD workflow, as well as the challenges and best practices for maximizing its benefits. Whether you’re looking to improve the robustness of your tests or dive deeper into software quality assurance, this session will provide valuable insights into how mutation testing can take your software’s reliability to the next level.
Speakers
avatar for Emma Taylor

Emma Taylor

Software Engineer, SciTec
Emma Taylor is a Full-Stack Developer with a BS in Computer Science and Electrical Engineering, specializing in scalable, high-performance systems. Skilled in Java, C/C++, Docker, and microservices, she uses mutation testing to enhance code quality and identify test coverage gaps... Read More →
Tuesday June 24, 2025 11:00am - 11:20am MDT
Bluebird Ballroom 3B
  cdCon

11:00am MDT

Breaking and Fixing the Kernel: Crashes, Debugging & Performance Tuning - Hardik Garg & Thomas Ballasi, Microsoft
Tuesday June 24, 2025 11:00am - 11:40am MDT
Debugging Linux kernel crashes is a fundamental skill for developers working in kernel development. In this session, we’ll dive into four of the most common crash types—null pointer dereference, stack overflow, use-after-free, and divide-by-zero. Using real-world examples from an Azure Linux VM, we’ll analyze dmesg logs, walk through kernel crash reports, and demonstrate how to effectively debug these issues using tools like gdb and KASAN.
Beyond debugging, we’ll explore the performance impact of kernel configurations. Specifically, we’ll examine how kernel command-line parameters influence performance, using the SRSO mitigation as a case study. This session will provide practical insights into debugging crashes and optimizing kernel performance, helping developers strike a balance between stability, security, and efficiency in real-world deployments.
Speakers
avatar for Hardik Garg

Hardik Garg

Software Engineer, Microsoft
I work with the Linux Systems Group at Microsoft, focusing on maintaining the LCOW kernel and supporting hardware bring-up with Maintenance Operating Systems (MOS). I maintain the kernel build, test, and release pipeline, optimizing kernel performance across different hardware platforms... Read More →
avatar for Thomas Ballasi

Thomas Ballasi

Software Engineer (Linux Systems Group), Microsoft
Thomas Ballasi is a software engineer specializing in embedded Linux development. As a member of the Linux Systems Group at Microsoft, he contributes to advancing Linux on ARM64 platforms. With multiple years of experience, Thomas has worked extensively with Yocto, Buildroot, and... Read More →
Tuesday June 24, 2025 11:00am - 11:40am MDT
Bluebird Ballroom 3A
  Open Source 101

11:00am MDT

Funding Security in Open Source: Insights From FreeBSD’s Audit Journey - Deb Goodkin, FreeBSD Foundation & Michael Winser, Alpha-Omega
Tuesday June 24, 2025 11:00am - 11:40am MDT
Funding a security initiative can be a game-changer for open source projects, but what does it really take to make it successful?

In this talk, we’ll share insights from a funded security audit in FreeBSD—how we secured support, scoped the work, engaged the community, and navigated challenges. You’ll learn how to evaluate if funding is right for your project, what to expect from the process, and how to collaborate effectively with sponsors.

Whether you're considering funding for security, sustainability, or growth, this session will equip you with practical takeaways to make it a success.
Speakers
avatar for Deb Goodkin

Deb Goodkin

Executive Director, FreeBSD Foundation
Deb is the Executive Director of the FreeBSD Foundation, joining as the first employee back in August 2005. Before venturing into the world of open source and operating systems, she spent two decades working as an embedded firmware engineer, technical marketer, and technical sales... Read More →
avatar for Michael Winser

Michael Winser

Technical Strategist, Alpha-Omega
Michael is a 40 year veteran in the software industry, with over 25 of those years at Google and Microsoft. He co-founded Alpha-Omega while at Google. Michael is an industry expert in software supply chain security, software development, and developer ecosystems. In addition to Alpha-Omega... Read More →
Tuesday June 24, 2025 11:00am - 11:40am MDT
Bluebird Ballroom 3C
  Open Source Leadership

11:55am MDT

Who Are You Building For: Pipelines Have a Purpose - Andrew McNamara & Julen Landa Alustiza, Red Hat
Tuesday June 24, 2025 11:55am - 12:15pm MDT
Software is built for a purpose. The same property applies to build platforms!

We will show you how we are leveraging Tekton and Tekton Chains at Red Hat to create a build platform that meets developers where they are at. Developers start with the pipeline defined in their git repository – free for them to modify and update on their terms, with Tekton tasks ready to scan artifacts for vulnerabilities and Renovate pre-configured to help keep dependencies up to date.

This platform helps make sure that the artifacts are going somewhere. Using the detailed SLSA Provenance generated by Tekton Chains, the build platform enables policy driven development. Developers can see in their PRs whether they are on track to meet the target’s requirements – whether it is pushing to a development or production environment. Gone are the days saying “I didn’t know I had to do that!”

We won’t send the artifacts just anywhere, however, as we can tailor policies to ensure that you are meeting all of the requirements. The platform can inspect the provenance to ensure that artifacts are built using trusted steps and all required checks are good for takeoff!
Speakers
avatar for Andrew McNamara

Andrew McNamara

Engineer, Red Hat
Andrew McNamara is passionate about usable CI/CD, security, and DevSecOps, drawing from his experience of building and shipping containerized software at IBM and Red Hat. As a SLSA maintainer, Andrew is helping people identify how to approach and understand supply chain security... Read More →
avatar for Julen Landa Alustiza

Julen Landa Alustiza

Ansible Delivery Pipelines Architect, Red Hat
I am an Open Source enthusiast currently working for Red Hat as Ansible Delivery Pipelines techincal lead.
Tuesday June 24, 2025 11:55am - 12:15pm MDT
Bluebird Ballroom 3B
  cdCon

11:55am MDT

The Responsible Generative AI Framework Pathways: Where Do We Go From Here? - Ofer Hermoni, iForAI & Oita Coleman, Open Voice TrustMark Initiative
Tuesday June 24, 2025 11:55am - 12:35pm MDT
The Responsible Generative AI Framework (RGAF) lays the foundation for ethical and transparent AI development, but what comes next? This panel will explore the Responsible AI Pathways, a set of strategic directions designed to move from framework to implementation.

Panelists will discuss the four key pathways shaping the future of responsible AI:
• Big-Picture Alignment – Understanding AI’s role in humanity’s future and aligning LF AI & Data initiatives with ethical AI progress.
• Ecosystem Mapping – Identifying gaps, overlaps, and collaboration opportunities within the global Responsible AI landscape.
• Deep Dive into Core Dimensions – Addressing AI safety, security, sustainability, and other critical aspects for responsible development.
• Practical Implementation – Grounding principles in real-world use cases, industry applications, and open-source tooling.
This session will also highlight the role of AI safety and security in responsible AI adoption and provide attendees with insights, strategies, and next steps to ensure AI innovation remains transparent, accountable, and trustworthy.
Join us for a forward-thinking discussion on how to shape the future of responsible Gen AI.
Speakers
avatar for Ofer Hermoni

Ofer Hermoni

Founder, Chief AI Officer, iForAI
Dr. Ofer Hermoni is a visionary AI leader with a Ph.D. in Computer Science and 60+ patents in AI, security, networking, and blockchain. He co-founded the Linux Foundation AI and served as its inaugural technical chair, shaping the global AI ecosystem. A two-time startup founder, he... Read More →
avatar for Oita Coleman

Oita Coleman

Project Lead / Senior Advisor, Open Voice TrustMark Initiative
Oita Coleman is the Project Lead/Senior Advisor at the Open Voice TrustMark Initiative, a global Linux Foundation project dedicated to educating and advocating for open standards and best practices for conversational AI technologies. In her role, she is responsible for developing... Read More →
Tuesday June 24, 2025 11:55am - 12:35pm MDT
Bluebird Ballroom 3E
  Open AI + Data

11:55am MDT

Steps Towards Achieving a Secure Linux Server - Karissa Sanchez & Angelina Vu, Microsoft
Tuesday June 24, 2025 11:55am - 12:35pm MDT
Linux is widely regarded as being a strong choice for those who value a secure operating system, but what is it about Linux that earns it this reputation? In addition, while it may be more secure than alternatives, it is by no means impenetrable. What are the weaknesses in a Linux system and how are they commonly exploited by malicious actors? More importantly, what can be done by administrators to ensure that their system is as secure as possible? We will use an example of somebody setting up an Ubuntu web server as a starting point and discuss ways in which the web server can be hardened. We will highlight the importance of implementing best security practices such as using Linux Security Modules, configuring firewalls, and more. As we discuss these best practices, we will demonstrate ways in which failing to use them can leave the web server vulnerable to malicious actors. Ultimately, the audience will leave the talk with an understanding of how Linux systems are vulnerable to attacks, what can be done to harden a Linux system, and how implementing some of these best practices can prevent attacks.
Speakers
avatar for Karissa Sanchez

Karissa Sanchez

Software Engineer, Microsoft
Karissa is a software engineer at Microsoft working on Linux Emerging Technologies. She recently graduated from MIT with a master’s degree in computer science. Her interests include Linux systems security and natural language processing.
avatar for Angelina Vu

Angelina Vu

Software engineer, Microsoft
Angelina is a software engineer at Microsoft working on the Linux Emerging Technologies team. She graduated from the University of California, Davis at the end of 2022 with a degree in CS. She started her Linux journey in the summer of 2021 as an intern on Microsoft's Linux Systems... Read More →
Tuesday June 24, 2025 11:55am - 12:35pm MDT
Bluebird Ballroom 3A
  Open Source 101

2:10pm MDT

Lightning Talk: Streaming and Processing Edge Vision Data in Real Time - Joyce Lin, Viam
Tuesday June 24, 2025 2:10pm - 2:20pm MDT
Edge-based computer vision gives us real-time insights, but getting that data where it needs to go without high bandwidth, lag, or hardware strain is a big challenge. Learn how to build a fast, event-driven vision pipeline using WebRTC for real-time streaming and gRPC for lightweight commands. Whether for security cameras or IoT, you'll gain a practical blueprint for a scalable, open-source vision system to stay responsive at the edge while being cost-effective, adaptable, and cloud-independent.
Speakers
avatar for Joyce Lin

Joyce Lin

Head of developer relations, Viam
Joyce Lin is the head of developer relations at Viam, a robotics platform that connects software with smart machines in the physical world. Based in San Francisco, she is also a Tiktok influencer, dog mom, cat mom, and writer.
Tuesday June 24, 2025 2:10pm - 2:20pm MDT
Bluebird Ballroom 3E
  Open AI + Data

2:10pm MDT

Let’s Farm Out Our Image Builds! - Urvashi Mohnani, Red Hat
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
As the fast-paced AI-driven landscape of computing continues to diversify, the importance of multi-arch container images cannot be overstated. Applications are no longer confined to data centers but extend across multiple platforms, devices, and appliances.

Wouldn’t it be great if we could build images for every architecture from just one machine? It would be even more amazing if we could do that without the slowness of emulation! This is where Podman farm comes in. Podman farm is a new feature that allows you to 'farm' out builds to groups of machines you have access to, enabling you to easily build multi-architecture images with a single command. In this talk, we will highlight the challenges of multi-architecture builds and demonstrate how Podman farm addresses them, keeping performance and usability in mind.

Container images that run seamlessly across different architectures ensure consistency, reduce complexity, and accelerate the development cycle. This session will empower attendees to develop on one architecture and deploy confidently on another.
Speakers
avatar for Urvashi Mohnani

Urvashi Mohnani

Principal Software Engineer, Red Hat
Urvashi Mohnani is a Principal Software Engineer on the OpenShift Container Tools team at Red Hat. She has spent the last few years contributing to and maintainer open source container tools projects including podman, buidlah, cri-o, and skopeo. She is a co-organizer of DevConf.US... Read More →
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
Bluebird Ballroom 2G
  Cloud + Containers

2:10pm MDT

Highlighting the AI in AbleIsm - Michelle Frost, JetBrains
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
The origins of artificial intelligence can be traced back to Ancient Greek mythology and philosophy, where early musings on what it means to be human began. Throughout history, these ideas have shaped our understanding of intelligence and influenced our pursuit of creating machines like us. However, this quest often relies on an idealized version of what it means to be “human”, leading to the exclusion of diverse representations and perpetuating ableism. In this talk, we will explore how AI technologies contribute to modern ableism by reinforcing narrow definitions of intelligence and humanity. We will examine the exclusions inherent in these definitions and discuss whom these technologies leave behind and how. By understanding these biases embedded in AI, we can better address its role in society and work towards more inclusive technology.
Speakers
avatar for Michelle Frost

Michelle Frost

AI Advocate, JetBrains
Michelle Frost is an AI Advocate at JetBrains. With over a decade of engineering experience, Michelle holds a Bachelor of Science in Computer Science from UMKC, a Master of Science in Artificial Intelligence from Johns Hopkins University, and is a Microsoft AI MVP. Michelle is also... Read More →
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
Bluebird Ballroom 3G

2:10pm MDT

Linux Networking: Key Understanding and Practical Troubleshooting - Muna Nwaiwu, Google
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
This session provides a comprehensive overview of essential Linux networking concepts, from IP addressing and routing to practical troubleshooting techniques. Participants will learn to configure network interfaces, diagnose common network issues, and gain the confidence to manage Linux network environments effectively.
Speakers
avatar for Muna Nwaiwu

Muna Nwaiwu

Network Engineer, Google
Munachimso Victor Nwaiwu, Network Engineer at Google, drives AI network infrastructure optimization. He has deep expertise in enterprise, data center, and edge network design and automation. He consistently enhances network operations. Prior roles at Lenovo and Facebook focused on... Read More →
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
Bluebird Ballroom 3A
  Open Source 101

2:10pm MDT

Panel Discussion: It Takes a Village - The Case for a Versatile Open Source Workforce - Ildiko Vancsa, Open Infrastructure Foundation; Charles Eckel, Cisco Systems; Ray Paik, PingCAP; Ria Farrell Schalnat, HPE
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
Open source has become mainstream; but not everyone knows what the term really means or how to succeed with it. New legal regulations such as the Cyber Resilience Act (CRA) in the EU will raise further awareness and require everyone to pay closer attention to open source software. However, there are also equal pressures to streamline and cut costs, often resulting in scaling back open source programs.

This panel brings you speakers in different job roles, including community manager, OSPO program compliance manager, open source maintainer, and standards lead. The panelists will explore their responsibilities, interactions and strategies for success to capture why each of these roles are critical to the success and sustainability of the open source ecosystem, whether we look at open source projects or corporate organizations whose products and services depend on open source.

Join us to learn about how you can build and leverage versatile teams to succeed with open source sustainably!
Speakers
avatar for Ria Schalnat

Ria Schalnat

Open Compliance Manager, HPE
I am delighted to work with the Open Program Office of Hewlett Packard Enterprise! This role is the culmination of my prior lives as a computer programmer, lawyer and adjunct professor specializing in intellectual property subjects. I have counseled numerous clients in patent portfolio... Read More →
avatar for Ildiko Vancsa

Ildiko Vancsa

Director of Community, Open Infrastructure Foundation
As Director of Community at the OpenInfra Foundation, Ildikó is the Community Manager for the StarlingX and the Kata Containers projects, and a co-leader of the OpenInfra Edge Computing Group. Ildikó has been contributing to projects like OpenStack, Anuket and State of the Edge... Read More →
avatar for Charles Eckel

Charles Eckel

Principal Engineer, Global Technology Standards, Cisco Systems
Charles is a recognized champion of open source, standards, and interoperability. In IETF, he started IETF Hackathons, advancing the pace and relevance of Internet standards by combining open source and standards. He serves as IETF liaison manager to 3GPP, helping them collaborate... Read More →
avatar for Ray Paik

Ray Paik

Community Manager, PingCAP
Ray is a Community Manager at PingCAP where he is helping to grow the TiDB community. Prior to PingCAP, Ray managed open source communities at Cube Dev, GitLab and the Linux Foundation. Ray has been a speaker at open source conferences such as All Things Open, Community Leadership... Read More →
Tuesday June 24, 2025 2:10pm - 2:50pm MDT
Bluebird Ballroom 3F
  OSPOCon

3:05pm MDT

Apache Gravitino: A Multi-regional, Geo-distributed Meta Datalake - Justin Mclean, Datastrato
Tuesday June 24, 2025 3:05pm - 3:45pm MDT
Managing metadata can be complex and time-consuming, but Apache Gravitino offers the ultimate solution. It provides a single source of truth for multi-regional data with geo-distributed architecture support. This allows you to store and manage your data in one place, accessible from anywhere globally. With unified data and AI asset management, you get centralized security and data access management, making data protection easier. Gravitino helps you focus more on your data by simplifying tasks and offering these benefits:
- Secure and centralized metadata storage and management
- Anytime, anywhere data access
- Streamlined data management with an easy-to-use UI
Gravitino is the ideal solution for simplifying metadata management processes.
Speakers
avatar for Justin Mclean

Justin Mclean

Community Manager, Datastrato
Justin Mclean is a highly experienced professional with over 30 years in web application development, education, and community work, and is an active contributor to open source software. Justin is a renowned speaker at conferences worldwide and currently serves as the Community Manager... Read More →
Tuesday June 24, 2025 3:05pm - 3:45pm MDT
Bluebird Ballroom 2F
  Cloud + Containers

3:35pm MDT

Lightning Talk: Shift Left With AI: Smarter Code Reviews for DevOps Acceleration - Vaibhav Tupe, Equinix
Tuesday June 24, 2025 3:35pm - 3:45pm MDT
In the fast-paced world of CI/CD, traditional code reviews can become a bottleneck, slowing down development and introducing risks due to human errors or inconsistencies. What if you could have an AI-powered assistant that reviews your code in real-time, providing actionable insights, detecting security vulnerabilities, and ensuring compliance—all while integrating seamlessly into your DevOps pipeline?

This session explores how Generative AI is transforming code reviews in CI/CD environments. We will dive into how AI-driven assistants can enhance developer productivity, improve code quality, and automate security and compliance checks.

We will cover:
The challenges of traditional code reviews in modern CI/CD workflows
How Generative AI enhances automated code reviews for speed and accuracy
Real-world use cases and best practices for integrating AI-powered code review assistants into your pipelines
The impact of AI on security, compliance, and developer experience
By the end of this session, you’ll understand how to leverage AI to make your CI/CD pipelines smarter, faster, and more secure—reducing friction in your development lifecycle while ensuring high-quality code.
Speakers
avatar for Vaibhav Tupe

Vaibhav Tupe

Tech Lead, Equinix
Vaibhav Tupe is a distinguished Technology Advisory Board Member and Engineering Leader specializing in cybersecurity, cloud, and AI-ready data center infrastructure. With over 13 years of experience, he currently serves as a Technology Leader at Equinix USA, where he drives high-performance... Read More →
Tuesday June 24, 2025 3:35pm - 3:45pm MDT
Bluebird Ballroom 3B
  cdCon

4:20pm MDT

Unveiling Arm Confidential Computing Architecture Software Stack - Kevin Zhao, Linaro
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
As confidential virtual machines become mainstream in confidential computing, the Arm Confidential Computing Architecture (CCA) was introduced as a key innovation of Arm v9 in 2021. Linaro has been deeply involved in integrating CCA into open-source projects over the past years.
In this presentation, we'll share the progress of our open-source enablement efforts. This includes the current status of fundamental software support and the next-stage plan for projects such as TF - A, Kernel, and Qemu. We'll also talk about container runtime adoption in Kata containers and Confidential containers. For instance, we'll detail the work on supporting CCA in Kata container runtimes with Qemu backend, like in kata-deploy. The support for guest-components and Trustee in Confidential containers will be covered too.
Remote attestation is another crucial aspect that can't be overlooked. To reduce solution fragmentation in open-source projects for production, Arm and Linaro are collaborating on an end-to-end experimental attestation platform using Veraison project components. We'll present a case study from the Confidential Containers project to show the practical adoption of these technologies.
Speakers
avatar for Kevin Zhao

Kevin Zhao

Senior Tech Lead, Linaro
Kevin Zhao is currently the tech lead at Linaro Data Center Group. He has been working on Arm server ecosystem for more than 8 years, including the open source IAAS solutions, distribute storage and confidential computing. Now, he is actively working on Arm Confidential Computing... Read More →
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 2G
  Cloud + Containers

4:20pm MDT

DEI Is Dead: What Happens Next? - Jennifer "Jen" Madriaga, The LInux Foundation
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Many organizations, companies, and departments are now eliminating DEI programs, and with this development, you may be asking what happens next. Even though DEI programs may be disappearing, the conversation around what it entails will still exist. How do we frame the conversation now, and what can we do to advocate on behalf of underrepresented groups? I will walk through some ways in which we can move forward. As someone who had to work with a global audience, I found that the term DEI did not always resonate with everyone. From that experience, I had to find ways to discuss the issues that DEI was meant to address, such as disparity in experiences, perceptions around fairness, the need for better communication processes, and psychological safety on teams. We can use these lessons with a global audience that had different histories and cultural contexts to ensure that conversation is relevant for everyone.
Speakers
avatar for Jen Madriaga

Jen Madriaga

Chief of Staff, Events, The Linux Foundation
Jen Madriaga has worked with numerous open source communities for over a decade through her work at Red Hat and the Linux Foundation. She is committed to building healthy and successful communities and interested in creating solutions collaboratively. While at Red Hat, she co-founded... Read More →
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3G

4:20pm MDT

A Beginner's Guide To Programming Quantum Computers With Open-Source Tools - Sagar Kesarpu & Harikrishna Muriki, Discover Financial Services
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Welcome to this exciting session that's all about diving into the world of quantum computing!
🚀 Whether you're just starting out or already have some knowledge, we're here to guide you through the basics and help you get hands-on with programming quantum computers using cool open-source tools.
Forget all the jargon – we're here to break it down for you in a friendly and easy-to-understand way. From qubits to quantum gates and circuits, we've got you covered! You'll get to play around with frameworks like Qiskit, Cirq, and Pennylane while writing and running simple quantum algorithms. It's like a fun tech playground! 🎮 Curious about how quantum computing differs from classical computing and its real-world applications? We'll explore that too! And let's not forget the amazing open-source quantum frameworks that are driving innovation in this field. We're talking Qiskit, Cirq, Pennylane, and more – all waiting for you to explore.

By the end of this session, you'll be equipped with the basics and practical skills needed to kickstart your journey into the quantum computing world. Perfect for developers, researchers, and tech enthusiasts like yourself!

🌟 Ready to take the plunge? Join us for an exciting adventure in the quantum computing ecosystem!

Topics we'll cover: - Introduction to Quantum Computing: Think qubits, superposition, and quantum gates – we'll make it crystal clear! - Quantum vs. Classical Computing: Let's explore the differences and get a glimpse of the potential applications. - Open-Source Quantum Frameworks: Discover the wonders of Qiskit, Cirq, Pennylane, and more! - Hands-On Programming: Get your hands dirty writing and running simple quantum algorithms – it's all about learning by doing! - Real-World Use Cases: See how quantum computing is making waves in cryptography, optimization, and machine learning. - Community and Resources: Find out how you can be part of the quantum journey and leverage open-source projects.

🌈 So, grab your virtual seat and get ready to unlock the magic of quantum computing with us! Let's make learning together a blast! 🌌🪐
Speakers
avatar for Sagar Kesarpu

Sagar Kesarpu

Senior Principal Application Engineer, Discover Financial Services
Passionate about leveraging technology to drive innovation and solve technical problems. I am a tech enthusiast with a keen interest in cloud computing, open source and emerging technologies. With a curiosity-driven mid set and a commitment to continuous learning, I enjoy exploring... Read More →
avatar for Harikrishna Muriki

Harikrishna Muriki

Senior Principal Application Engineer, Discover Financial Services
I'm deeply passionate about using technology to spark innovation and tackle the toughest technical challenges. As a true tech enthusiast, I’m all in when it comes to cloud computing, open-source solutions, and the latest cutting-edge technologies. Driven by curiosity and an unwavering... Read More →
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3A
  Open Source 101

4:20pm MDT

Building the Future Developer: Trends in Open Source, Education, AI and Industry - Phoebe Quincy, GitHub & Kim Schlesinger, Contentful
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Over the past decade, open source and developer education have evolved dramatically. This talk explores key trends shaping the landscape, from shifts in bootcamp models and messaging to the role of open source in learning pathways. We'll examine what has persisted, what has transformed, and what these changes mean for educators, industry leaders, and learners. Whether you're building developer education programs, contributing to open source learning initiatives, or navigating the intersection of both, this session will provide valuable insights into the forces driving the future of developer education.

Key Themes:
- The evolution of bootcamps and CS degrees and the shifting narratives around developer training
- The enduring role of open source as both a learning tool and a career accelerant
- How industry expectations for self-taught and formally trained developers have changed
- The impact of AI and automation on developer education and skills acquisition

Speakers
avatar for Phoebe Quincy

Phoebe Quincy

Senior Program Manager, Education Programs, GitHub
Phoebe Quincy is a veteran advocate for developer education, specializing in open-source development and community engagement. She previously managed Hacktoberfest at DigitalOcean and now leads Education programs at GitHub, working to make open-source education more accessible, inclusive... Read More →
avatar for Kim Schlesinger

Kim Schlesinger

Technical Learning Experience Designer, Contentful
Kim Schlesinger is a seasoned tech educator specializing in Kubernetes, containers, and curriculum design. With a passion for making complex technical concepts accessible, she has helped many developers and teams build their skills in cloud-native technologies. Kim is currently a... Read More →
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3C
  Open Source Leadership

4:20pm MDT

The O[S]PO Organization for the Age of AI - Paul Holland, Hewlett Packard Enterprise
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
The rapid pace of innovation is accelerating, and the role of open technologies and methodologies (i.e., open source software, open AI, open data, open collaboration, etc.) have become increasingly critical to enable company competitiveness. Open Source Program Offices (OSPOs) have emerged as a best practice to facilitate company collaboration and innovation with open source software, yet this org pattern is flexible and scalable to other “opens”. Come explore how organizations can adapt their OSPOs to be Open Program Offices (OPOs) and respond to rapid advancements in openness, especially for open community AI.

In particular, we’ll discuss:
- How to optimize the OPO organization for AI – what is different and what is leverageable
- Practical approaches for embedding openness of all kinds into your organization
- Where best to locate an OPO in an organization and the implications of the options
- Extending to open standards and open hardware
- How to drive org alignment and shape your open strategy

Openness is more than a philosophy—it’s a competitive advantage for the future of AI and for community development of any size.
Speakers
avatar for Paul Holland

Paul Holland

Director - Open Program Office, Hewlett Packard Enterprise
Paul is Director of Hewlett Packard Enterprise's Open Program Office, helping HPE teams drive the company's open technology strategy, engage in the right open communities, and comply with licensing. Paul has a B.S. in Computer Science from Colorado State University, an M.B.A. from... Read More →
Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3F
  OSPOCon
 
Wednesday, June 25
 

11:00am MDT

Turning Policies, Standards, and Governance Into Enablers for Open-Source Innovation - Mark Paulsen, TD Bank
Wednesday June 25, 2025 11:00am - 11:20am MDT
Policies, standards, and governance are often perceived as hurdles for innovation - especially within regulated industries where it may be difficult to leverage and contribute to open-source. But there is a way to reframe these perceived obstacles and turn them into streamlined "guardrails" that can help drive innovation and enable the ability to not only consume, but also contribute to open-source.
Speakers
avatar for Mark Paulsen

Mark Paulsen

Head, Open-Source Program Office, TD Bank
Over 20 years of experience in the tech industry working in startup environments as well as global enterprises. Passionate about building open and welcoming communities and helping developers around the world be successful, keep in the flow, and be happy in the job they love.
Wednesday June 25, 2025 11:00am - 11:20am MDT
Bluebird Ballroom 2F
  Standards + Specifications

11:00am MDT

Panel Discussion: From First PR To Lifelong Impact: Helping People Thrive in Open Source - Dawn Foster & Ruth Ikegah, CHAOSS; Sandeep Kanabar, Gen; Shuah Khan, The Linux Foundation
Wednesday June 25, 2025 11:00am - 11:40am MDT
Open source is the foundation of modern software, yet many projects struggle with sustainability—not just in attracting contributors, but in ensuring they stay, grow, and thrive. The landscape of open source contribution has evolved dramatically, demanding a fresh approach to community building and contributor engagement.

Traditional pathways into open source don’t work for everyone. This panel brings together experts who have successfully expanded contributor pipelines beyond the usual audience—through initiatives like the CNCF Deaf and Hard-of-Hearing WG, CHAOSS Africa, and mentorship programs. We’ll explore best practices for guiding contributors from their first PR (or non-code contribution) to meaningful, long-term engagement.

Beyond code, open source thrives on diverse contributions: marketing, content creation, event planning, automation, governance, and more. By broadening the definition of “contributor,” we lower barriers to entry, strengthen projects, and build a more inclusive, resilient ecosystem.

Join us for a discussion on how we can transform contributor journeys to be more inclusive, fulfilling, and impactful for individuals and the broader open source ecosystem.
Speakers
avatar for Dawn Foster

Dawn Foster

Director of Data Science, CHAOSS
Dr. Dawn Foster works as the Director of Data Science for CHAOSS where she is also a board member / maintainer. She is co-chair of CNCF TAG Contributor Strategy and an OpenUK board member. She has 20+ years of experience at companies like VMware and Intel with expertise in community... Read More →
avatar for Sandeep Kanabar

Sandeep Kanabar

Lead Software Engineer | CHAOSS Asia WG, Gen (formerly NortonLifeLock)
Hailing from India, Sandeep is a passionate software engineer working at Gen (formerly NortonLifeLock), a global leader in CyberSecurity. A frequent meetup speaker, Sandeep enjoys sharing his lessons with the community. He's a staunch advocate for open-source, diversity and inclusion... Read More →
avatar for Shuah Khan

Shuah Khan

Kernel Maintainer & Linux Fellow, The Linux Foundation
Shuah Khan is a Kernel Maintainer & Linux Fellow at The Linux Foundation. She is an experienced Linux Kernel developer, maintainer, and contributor. She authored, A Beginner’s Guide to Linux Kernel Development (LFD103) training course. She designed and leads the Mentorship program... Read More →
avatar for Ruth Ikegah

Ruth Ikegah

Community Lead, CHAOSS Project
Ruth Ikegah is an Open Source Program Manager, Technical Writer, GitHub Star, and Public Speaker. She serves as the Community Lead at CHAOSS Africa, working to improve the health of Open Source communities on the continent. She also doubles as a maintainer in the Diversity, Equity... Read More →
Wednesday June 25, 2025 11:00am - 11:40am MDT
Bluebird Ballroom 3H

11:00am MDT

Implementing Zero Trust in Government Settings: Strategies, Challenges, and Best Practices - Steve Taylor, DeployHub, Inc
Wednesday June 25, 2025 11:00am - 11:40am MDT
With escalating cyber threats and increasing regulatory pressure, government agencies face a critical need to modernize their security strategies. The Zero Trust model—"never trust, always verify"—has emerged as a cornerstone for safeguarding sensitive data and infrastructure. However, implementing Zero Trust in government settings presents unique challenges, including legacy systems, complex compliance requirements, and the need to balance security with operational efficiency. This talk will provide a roadmap for adopting Zero Trust principles in government environments, offering actionable insights to overcome obstacles and ensure mission readiness.
Speakers
avatar for Steve Taylor

Steve Taylor

CTO, DeployHub
Steve Taylor is a visionary and leader in open-source security, DevOps, and securing the software supply chain. Long before “CI/CD” became a buzzword, Steve was designing cutting-edge pipelines for Fortune 1000 companies, redefining how software is built and deployed. His innovative... Read More →
Wednesday June 25, 2025 11:00am - 11:40am MDT
Bluebird Ballroom 3G
  OpenGovCon

11:20am MDT

Unlocking Telco APIs: How Open Source Is Driving Standardization & Interoperability - Markus Kummerle, Deutsche Telekom
Wednesday June 25, 2025 11:20am - 11:40am MDT
In the world of API development, standardization & interoperability are essential for seamless integration across industries. CAMARA Project, in collaboration with GSMA, TM Forum, and the LF, leads the charge in harmonizing telco API standards. Through open collaboration, the project has established a unified, industry-wide framework that simplifies API adoption for telco operators, enabling them to integrate with marketplaces, aggregators, & hyperscalers more efficiently.
This session summarizes the telco API ecosystem, the key organizations shaping it, and how developers can get involved:

How CAMARA defines telco end-user-facing APIs and streamlines adoption for operators; The GSMA Open Gateway Initiative’s role in standardizing API distribution across different channels;
TM Forum’s work in enabling communication between operators, marketplaces, and hyperscalers; and Practical ways developers can contribute—whether by implementing APIs within operators, connecting exposure platforms, integrating their own portals, or adapting products to fit into this growing ecosystem.

Explore how OSS transforms the telco industry and how to be part of this collaborative movement!
Speakers
avatar for Markus Kummerle

Markus Kummerle

Program Manager Deutsche Telekom API Exposure, Deutsche Telekom
Markus Kümmerle is responsible for the 5G Network Exposure Program at Deutsche Telekom. Since 2014 Markus has been responsible for Quality for the System Integration / Digital Solutions unit of T-Systems. In parallel, he continues driving large projects and programs. In 2020 he took... Read More →
Wednesday June 25, 2025 11:20am - 11:40am MDT
Bluebird Ballroom 2F
  Standards + Specifications

11:55am MDT

From Classroom To Cloud: Bridging Academia and the Open Source Ecosystem - Andy Anderson, IBM Research & Professor Corey Leong, Valencia College
Wednesday June 25, 2025 11:55am - 12:35pm MDT
This session introduces **Interns for Open Source (IFOS)**, a program that offers undergraduate and graduate Computer and Information Sciences students hands-on experience with open source projects for academic credit. Over 10 weeks, students bridge classroom learning and real-world application by contributing through issue tracking and pull requests. Their fresh perspectives provide open source communities with valuable feedback, usability insights, and rigorous testing. Students sharpen technical skills, learn professional workflows, and build portfolios. Open source projects benefit from innovative ideas and unbiased input. Attendees will learn about the program structure, its benefits for students and open source communities, and how to get involved.
Speakers
avatar for Corey Leong

Corey Leong

Professor Cloud Computing, Valencia College
Prior to teaching, I worked in the IT industry for 25 years. I currently teach cloud computing courses, oversee open source mentorships and cloud internships.
avatar for Andy Anderson

Andy Anderson

Software Architect, IBM Research
Andy is an experienced software architect with a strong track record of leading research and engineering teams on hybrid cloud and Kubernetes-based platform development. He has a wealth of experience in software development, cloud computing, and data analysis. Andy is particularly... Read More →
Wednesday June 25, 2025 11:55am - 12:35pm MDT
Bluebird Ballroom 3H

11:55am MDT

Fast Inference, Furious Scaling: Leveraging VLLM With KServe - Rafael Vasquez, IBM
Wednesday June 25, 2025 11:55am - 12:35pm MDT
In this talk, we will introduce two open-source projects vLLM and KServe and explain how they can be integrated to leverage better performance and scalability for LLMs in production. The session will include a demo showcasing their integration.

vLLM is a high-performance library specifically designed for LLM inference and serving, offering cutting-edge throughput and efficiency through techniques such as PagedAttention, continuous batching, and optimized CUDA kernels, making it ideal for production environments that demand fast, large-scale LLM serving.

KServe is a Kubernetes-based platform designed for scalable model deployment. It provides robust features for managing AI models in production, including autoscaling, monitoring, and model versioning.

By combining vLLM's inference optimizations with KServe's scalability, organizations can deploy LLMs effectively in production environments, ensuring fast, low-latency inference and seamless scaling across cloud platforms.
Speakers
avatar for Rafael Vasquez

Rafael Vasquez

Open Source Software Developer, IBM
Rafael Vasquez is a software developer on the Open Technology team at IBM. He previously completed an MASc. working on self-driving car research and transitioned from a data scientist role in the retail field to his current role where he continues to grow his passion for MLOps and... Read More →
Wednesday June 25, 2025 11:55am - 12:35pm MDT
Bluebird Ballroom 3E
  Open AI + Data

11:55am MDT

Open Source Software: Hollywood’s Secret Sauce for Visual Effects and Animation - David Morin, Academy Software Foundation
Wednesday June 25, 2025 11:55am - 12:35pm MDT
Open source software is the basis for the tools used to create almost all visual effects and animation used in the motion picture industry today, providing the backbone for creating blockbuster films like The Wild Robot, Moana 2, Dune, Oppenheimer, the Star Wars movies and all of the Marvel Cinematic Universe films.

The most important open source projects that are used on almost every film production today are housed at the Academy Software Foundation (ASWF), which provides a neutral forum for open source software developers in the motion picture and broader media industries to share resources and collaborate on technologies for image creation, visual effects, animation and sound.

The Foundation has flourished since its launch in 2018, hosting 14 projects and supporting a growing ecosystem of open source engineers. During this session, David Morin, Executive Director of the Academy Software Foundation, will share more about the Foundation’s growth over the last six years, including new open source projects, engineering events such as Dev Days, and D&I initiatives including the Summer Learning Program.
Speakers
avatar for David Morin

David Morin

Executive Director, Academy Software Foundation, Academy Software Foundation
David Morin is Executive Director of the Academy Software Foundation. He has participated in the development of motion capture and 3D software since “Jurassic Park” at companies such as Softimage, Microsoft, Avid Technology, Autodesk and Epic Games. David is also chair of the... Read More →
Wednesday June 25, 2025 11:55am - 12:35pm MDT
Bluebird Ballroom 2E
  Wildcard

2:10pm MDT

Billy and Eddie's Declassified Git Survival Guide - Billy Lynch, Chainguard & Eddie Zaneski, Defense Unicorns
Wednesday June 25, 2025 2:10pm - 2:50pm MDT
Have you ever botched your git repo so badly that you needed to delete it and reclone it? You're not alone!

This talk dives into the dark side of Git - exploring common disasters like accidental force-pushes, tangled merge conflicts, unrelenting rebases, and the dreaded detached HEAD. We'll look at how and why these situations arise, exploring the underlying Git mechanics that got us into the situation and how we can undo or resolve these problems.

You'll come away from this talk with a greater understanding of Git internals, and the knowledge and tools necessary to rescue yourself from any Git workflow gone awry!
Speakers
avatar for Billy Lynch

Billy Lynch

Staff Software Engineer, Chainguard
Billy is a staff software engineer at Chainguard, working on developer tools and securing software supply chains for everyone! He is a contributor and maintainer to the Sigstore, Tekton, and gittuf projects, and is the creator of gitsign. Prior to working at Chainguard, Billy worked... Read More →
avatar for Eddie Zaneski

Eddie Zaneski

Technical Advisor to the CTO, Defense Unicorns
Eddie lives in Denver, CO with his wife and dog. He loves open source and works on the Kubernetes project. When not hacking on random things you'll most likely find him climbing rocks somewhere.
Wednesday June 25, 2025 2:10pm - 2:50pm MDT
Bluebird Ballroom 3A
  Open Source 101

2:10pm MDT

From Wait Times To Real-Time: Empowering DPI for Seamless Citizen Engagements With GenAI Agents - Alex Coqueiro, AWS
Wednesday June 25, 2025 2:10pm - 2:50pm MDT
In this session, I will explore how Generative AI agents are becoming a cornerstone of Digital Public Infrastructure (DPI) using open source, reshaping citizen services and empowering governments to deliver more efficient, responsive, and accessible public services. Learn how Generative AI Agents are revolutionizing government websites, offering 24/7 citizen support, and providing real-time assistance across a wide range of public services. With the ability to handle inquiries, process data, and generate personalized responses, these AI agents significantly reduce wait times and streamline interactions, ensuring faster and more seamless communication between citizens and government agencies. We’ll dive into practical applications, from simplifying bureaucracy to enhancing transparency and accountability, and discuss the transformative potential of Generative AI in creating smarter, more inclusive government channels.
Speakers
avatar for Alex Coqueiro

Alex Coqueiro

Head of Solutions Architecture at AWS, AWS
I oversee the Solutions Architects Team. My responsibilities encompass serving as the technical strategist, effectively guiding and influencing customers in Government, Education, Healthcare, and Non-profit sectors on a day-to-day basis through direct and indirect interactions. I... Read More →
Wednesday June 25, 2025 2:10pm - 2:50pm MDT
Bluebird Ballroom 3G
  OpenGovCon

2:10pm MDT

We Need a Standard for Open Source Package Requirements - Elitsa Bankova & Eve Martin-Jones, Google
Wednesday June 25, 2025 2:10pm - 2:50pm MDT
What does a version specification look like? Most would say that one looks something like “1.2.3”.

But what does a requirement look like? That is a more complicated question and answers vary and depend on which packaging ecosystem —Maven, Cargo, PyPI and so on— is involved.

While Semver 2.0 offers a generally agreed upon syntax for versions, there is no standard for requirements.

Understanding how requirements work is required for addressing issues such as vulnerabilities and license conflicts. The absence of an agreed-upon requirement specification limits the ability to understand the problem and limits the sharing of tooling across ecosystems.

Deps.dev has looked at the way requirements are specified in five ecosystems and translated them into a single set representation that enables unified tooling. We’ve discovered many ecosystem-specific quirks, but also discovered much commonality we can build upon.

This talk will define the essence of requirements, demonstrate how they are incompletely met by various existing systems, and most importantly we will argue that a well-defined, well-supported requirement specification is vital to the industry.
Speakers
avatar for Eve Martin-Jones

Eve Martin-Jones

Senior Software Engineer, Google
Eve is an engineer working on open source software security at Google. She lives in Australia, with her cat Mochi, who is surprisingly proficient at JavaScript. Between D&D campaigns, she can be found deciphering the Cargo dependency-resolution algorithm bug-for-bug, advocating for... Read More →
avatar for Elitsa Bankova

Elitsa Bankova

Software Engineer, Google
Elitsa is a Software engineer at Google, Australia and is working on Open Source security. She has lived in over 4 countries: born in Bulgaria, she graduated from the University of Edinburgh and worked in Google Switzerland before moving down under. Outside of work, you can find her... Read More →
Wednesday June 25, 2025 2:10pm - 2:50pm MDT
Bluebird Ballroom 2F
  Standards + Specifications

2:10pm MDT

Tutorial: Understanding the Carbon Impact of Your Machine Learning Applications - Neeraj Pandey, Vivid Climate & Priyanshi Arora
Wednesday June 25, 2025 2:10pm - 3:45pm MDT
This session will guide attendees through the process of understanding and mitigating the carbon emissions of machine learning models and AI systems. We'll delve into methods for measuring the environmental impact of these technologies and discuss the pivotal role developers play in pioneering eco-conscious computing. Participants will gain insights into optimizing algorithms, adopting sustainable coding practices, and choosing energy-efficient tools to minimize the carbon footprint of their machine learning projects.

Additionally, we'll examine the environmental considerations of deploying AI systems in the cloud. As cloud computing becomes integral to deploying AI solutions, understanding its ecological impacts is crucial. We'll cover strategies for making environmentally responsible decisions when selecting and utilizing cloud services, aiming to maintain the eco-friendliness of AI applications.

Together, we'll explore how to balance the demands of advanced computational technologies with the urgent need for sustainability.
Speakers
avatar for Neeraj Pandey

Neeraj Pandey

Co-Founder, Vivid Climate
Neeraj is the co-founder of Vivid Climate, a climate management and accounting platform. Neeraj is a polyglot. Over the years, he has worked on a variety of full-stack software and data-science applications, as well as computational arts, and likes the challenge of creating new tools... Read More →
avatar for Priyanshi Arora

Priyanshi Arora

Brand Data Analyst
Priyanshi is a brand data analyst and creative artist.
Wednesday June 25, 2025 2:10pm - 3:45pm MDT
Bluebird Ballroom 3F
  Open AI + Data

3:05pm MDT

Newcomer… but Not New - Emily Shaffer & Ivan Frade, Google
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
Most of the advice around new contributor experience is oriented towards developers at the beginning of their career - students or those breaking into the tech industry. This time, though, we want to talk about the basics of contribution for senior developers who already have plenty of industry experience. These potential contributors have more than enough technical expertise, but still struggle to participate in open source. For them the barriers tend to be more social and “communicational” than technical, as their previous incentives, goals, and development cultures are fairly different from those present in most open source communities.

As open source contributors working in a big company, we watch our colleagues face these issues. We want to share our experience and what we learned while trying to help these colleagues participate in open source development for the first time.
Speakers
avatar for Emily Shaffer

Emily Shaffer

Staff Software Engineer, Google
Emily Shaffer is a staff software engineer at Google working on Git and other source-control-related open source projects; once upon a time, she comaintained OpenBMC's IPMI stack. She's passionate about software best practices, regular expressions, and her dog, Crash Override.
avatar for Ivan Frade

Ivan Frade

Software Engineer, Google
Long time ago, I installed linux out of curiosity. That led to hobby contributions, which grew into work in the GNOME desktop (via maemo, nokia's flavor for mobile devices), which eventually, after a few other adventures, brought me to Google. Here I work on the git hosting, contributing... Read More →
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
Bluebird Ballroom 3H

3:05pm MDT

Open Collaboration in Action: How We Build RISC-V - Rafael Sene, The Linux Foundation | RISC-V International
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
Discover the power of open collaboration with this behind-the-scenes journey into the creation of RISC-V. This session unveils how a global community of engineers, researchers, and innovators work together to design and refine the RISC-V instruction set architecture, bringing open-source principles to silicon. From the challenges of aligning diverse contributions to the triumphs of groundbreaking breakthroughs, you'll learn how the RISC-V ecosystem fosters creativity, accelerates innovation, and democratizes hardware development. Whether you're a seasoned developer or new to hardware design, this talk will inspire you to join the movement redefining the future of computing. Don’t miss this opportunity to see open collaboration in action and learn how you can contribute to shaping the RISC-V revolution!
Speakers
avatar for Rafael Sene

Rafael Sene

Technical Program Manager, The Linux Foundation | RISC-V International
Rafael Peria de Sene is a Technical Program Manager at the Linux Foundation and RISC-V International with over 15 years of experience in software engineering and technical leadership. He has played a key role in expanding the RISC-V ecosystem globally, particularly in Latin America... Read More →
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
Bluebird Ballroom 3A
  Open Source 101

3:05pm MDT

Building Trust Through Proactive Security - Key Parts of the Trusted Software Supply Chain - Przemyslaw Roguski & Ralph Bean, Red Hat
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
As security concerns continue to grow in the software industry, customers seek assurance that the software they rely on is built securely. While applying security patches is essential, it is equally important to understand the proactive measures taken throughout the development process to ensure that our software is built securely.

Red Hat follows a comprehensive Secure Software Development Lifecycle (SDLC) framework to improve software security during the entire software lifecycle. We use an open source end-to-end build and release environment, which uses SLSA framework as a guide for reinforcing and gating the build process to secure and fortify your software supply chain against various threats.

This session will include:
- The key difference between proactive and reactive security measures.
- SDLC objectives and how Red Hat achieves them to meet high security standards.
- Overview of how automated testing and open-source solutions enhance SDLC.
- Proactive vulnerability management during the build lifecycle phase.
- Secure software building with attestation data production, including CSAF/VEX and SBOM.
- Future of AI testing within the software supply chain security.
Speakers
avatar for Przemyslaw Roguski

Przemyslaw Roguski

Principal Product Security Engineer, Red Hat
Przemysław “Rogue” Roguski is a Security Architect at Red Hat who specializes in shift-left security initiatives included in build and release processes. He is focused on the security data improvements, especially security data usability in the vulnerability management and production... Read More →
avatar for Ralph Bean

Ralph Bean

Senior Principal Software Engineer, Red Hat
Ralph is an engineer at Red Hat and member of the Konflux Governance Committee. He's happiest when learning new things, the open source way.
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
Bluebird Ballroom 3G
  OpenGovCon

3:05pm MDT

Towards a Better Adoption Model - Nigel Brown, AWS
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
The Linux Foundation has hundreds of projects under its auspices all working to gain adoption — especially in the case of forks like OpenBao and Valkey. In this struggle for adoption, projects could be doing more in support of our common goal. This talk proposes a system by which projects can work together, integrate each other, and increase cohesion between projects under a common foundation. This talk will serve as the opening of a discussion meant to engage both the participants and maintainers of projects and Linux Foundation community members.
Speakers
avatar for Nigel Brown

Nigel Brown

Senior OSS Developer Advocate, Valkey, AWS
Nigel is a Senior Developer Advocate based in Austin, Texas. He was drawn to the craft of software engineering because of the agency it provides people to build and interact with worlds of their own creation. He focuses on Cloud Native technologies and his passions in technology are... Read More →
Wednesday June 25, 2025 3:05pm - 3:45pm MDT
Bluebird Ballroom 2E
  Wildcard, Open Source Leadership

4:20pm MDT

Accelerating GenAI Innovation: Lessons From Intuit's Agents and Tools Framework - Shradha Ambekar & Conrad De Peuter, Intuit
Wednesday June 25, 2025 4:20pm - 5:00pm MDT
Join us to discover how Intuit's GenAI framework is reshaping AI development, enabling swift integration of AI functions across varied business units. We'll focus on a robust framework of reusable agents and tools derived from open-source technologies like LangChain/LangGraph, facilitating diverse functionalities from simple data retrieval to complex processes such as query generation, optimization, pipeline creation and debugging. This framework dramatically reduces the time required for data workers to operationalize data pipelines and supports diverse customer interactions through notebooks, no-code approaches, REST integrations, and Python libraries, catering to a wide range of needs including agent developers and teams in pre-production settings. Our meticulous evaluation process ensures that each tool and agent is rigorously tested against high-performance benchmarks to guarantee reliability and consistency before deployment. By centralizing these AI components, Intuit has not only accelerated development timelines but also upheld a high standard of quality, establishing a benchmark for crafting scalable, effective AI solutions in the dynamically evolving tech landscape.
Speakers
CD

Conrad De Peuter

Senior Staff AI Scientist, Intuit
Conrad De Peuter is a Senior Staff AI Scientist and Manager at Intuit. He has worked on deep learning models in the document understanding space, delivering reusable AI services from a central platform, and most recently as the lead for a portfolio of product-focused R&D projects... Read More →
avatar for Shradha Ambekar

Shradha Ambekar

Senior Staff Software Engineer, Intuit
Shradha Ambekar is a senior staff software engineer with the Data Platform Group at Intuit. She is an experienced technologist and has led projects working with GENAI, Spark, Kafka, Presto, Athena, Cassandra and Vertica. She has made numerous open-source contributions to presto, calcite... Read More →
Wednesday June 25, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3F
  Open AI + Data

4:20pm MDT

Open Source and CVE's: A Love Story? - Marcus Tenorio, ControlPlane
Wednesday June 25, 2025 4:20pm - 5:00pm MDT
When we think of Open Source and CVEs, only bad things come to mind—problems and headaches.

But what if I told you that’s not the case? That, in fact, OSS and CVEs form one of the greatest love stories humanity has ever known. Forget Romeo and Juliet; think Log4J and other "love tales" .

In this talk, we’ll explore how, like every beautiful love story, there are villains, triumphs, and a vibrant community behind it all.

Join us for this fairy tale where we uncover why OSS and CVEs have always been in love with each other.
Speakers
avatar for Marcus Tenorio

Marcus Tenorio

Engineering Manager, ControlPlane
Mart is an engineering manager at ControlPlane, where he enjoys managing various consultants who teach him every day how to break things and become a better manager and engineer. Mart began his journey in cybersecurity trying to understand why so many people liked prime numbers... Read More →
Wednesday June 25, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3A
  Open Source 101

4:20pm MDT

How To Stay Compliant With and Take Benefits From the EU CRA (Cyber Resilience Act) - Roman Zhukov, Red Hat
Wednesday June 25, 2025 4:20pm - 5:00pm MDT
The EU Cyber Resilience Act (CRA) aims to safeguard European consumers and at first glance it targets only the EU market. But in fact the entire OSS ecosystem falls under its scope as CRA creates mandatory cybersecurity requirements for vendors, distributors, integrators, even enterprise consumers and, in fact, the entire open-source ecosystem by introducing terms like “Manufacturer”, “Steward”, “Individual developer” among others. So, how to ensure **you** stay compliant?

I’ll cover what we, as part of the various working and regulatory expert groups, are doing to help the entire open-source community navigate the actual requirements. We’ll explore how these roles are played together by the leading industry players (yes, revealing some non-trivial scenarios) and what best practices and tools can be used right away for your organization or by you as an individual contributor. Finally, let’s discuss how we together should turn CRA into an opportunity to make open-source better for all.
Speakers
avatar for Roman Zhukov

Roman Zhukov

Principal Security Community Architect, Red Hat
Practicing Cybersecurity expert, engineer and manager (15+ years), (ISC)2 CC (Certified in Cybersecurity). Currently - Principal Security & Community Architect at Red Hat. Ex. - Head of Product Security & Privacy for Data Center & AI SW at Intel. Roman has broad experience from security... Read More →
Wednesday June 25, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3D
  Operations Management
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience Experience Level
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.