DebConf19

Será evidenciada a principal técnica de empacotamento utilizada pela distribuição Debian, que é a DebHelper. Trata-se de um curso, com duração de 3 dias, abordando o processo completo de um empacotamento, mostrando como é gerado um arquivo .deb, seguindo os rigorosos padrões exigidos pelo Debian. O objetivo é ensinar empacotamento e formar novos mantenedores de pacotes. Serão feitos uploads de alguns pacotes feitos pelos próprios alunos. É conveniente que cada um leve o seu notebook.

Será evidenciada a principal técnica de empacotamento utilizada pela distribuição Debian, que é a DebHelper. Trata-se de um curso, com duração de 3 dias, abordando o processo completo de um empacotamento, mostrando como é gerado um arquivo .deb, seguindo os rigorosos padrões exigidos pelo Debian. O objetivo é ensinar empacotamento e formar novos mantenedores de pacotes. Serão feitos uploads de alguns pacotes feitos pelos próprios alunos. É conveniente que cada um leve o seu notebook.

Será evidenciada a principal técnica de empacotamento utilizada pela distribuição Debian, que é a DebHelper. Trata-se de um curso, com duração de 3 dias, abordando o processo completo de um empacotamento, mostrando como é gerado um arquivo .deb, seguindo os rigorosos padrões exigidos pelo Debian. O objetivo é ensinar empacotamento e formar novos mantenedores de pacotes. Serão feitos uploads de alguns pacotes feitos pelos próprios alunos. É conveniente que cada um leve o seu notebook.

In this session we will introduce Open Day, give practical information, and have an open Q&A, addressing the rest of the day as well as DebConf proper which starts the next day.

A principal maneira de colaborar com o Projeto Debian é fazendo empacotamento de software. Mas existem várias outras formas que você pode ajudar mesmo não tendo conhecimento técnico. Nessa palestra, vou mostrar em detalhes quais são essas outras formas. Você pode traduzir, reportar bugs, escrever tutoriais básicos e avançados, elaborar materiais gráficos, organizar eventos, etc. Não deixe para amanhã a contribuição que você pode fazer hoje para o Debian, porque o projeto precisa de você!

A privacidade em nossa sociedade não é mais um direito, é um privilégio! Em um mundo cada vez mais conectado, manter nossas informações seguras é um grande desafio. Esta palestra aborda problemas relacionados à **Internet das Coisas**, **segurança de dados** e **vazamento de informações**. Os participantes conhecerão tecnologias existentes e soluções livres para ambientes de comunicação seguros (e-mail e mensagens instantâneas).

I am currently exploring the next phase in my life, trying to combine what I believe is important - urban resource flows, with what I enjoy - games and visualisation and beautiful things. This talk is suited for people who are interested in games, data driven visualisation, and bringing academic work to the general public, policy and practitioners. Imagine an augmented reality game, a mix between something like Township or SimCity and Ingress or Pokemon Go, with a visual style similar to the Lumino City game. Imagine a building game that uses real cities and real challenges – like the recent water crisis in Cape Town, where real resource limitations need to be managed. The game can start from a blank start to build your city or start with what exists in reality and modify it in certain ways (utopia or apocalypse) and play with what happens due to your decisions. https://aquasavvy.co.za/augmented-reality-game-for-citizen-scientists/ This would need a lot of different initiatives, data libraries etc to fit together well. Debian has experience in how very many different things fit together, and have experience in how different licensing options interface (or not), and maybe I can help improve this. In this talk I will show what I try to do and what information I have found so far. I may show prototypes and what I have found in the Debian space, and probably have a whole lot of questions for the audience. I am just venturing into this and using the talk to give a deadline to my early research, so very much a work in progress. Help, comments, critique, co-presenters welcome. I may link more strongly to a related academic initiative, Metabolism of Cities, e.g. https://prototype.metabolismofcities.org/cities/cape-town/sectors/water/

A palestra visa ilustrar ao público de computação forense algumas táticas e técnicas de como usar o Debian como um Sistema Operacional Forense em um pen drive, desde a aquisição, exame até análise das evidências. Tópicos que serão abordados:
• Instalar Debian no Pen Drive
• Clonar HD usando o dcfldd
• Montar a imagem dd com Kpartx
• Montar uma timeline de HD usando Plaso
• Análise de registro do Windows com RegRipper
• Recuperando dados usando Photorec
• Checando a integridade das evidências

Este minicurso tem como objetivo explicar o que é Sistema de Controle de Versão (Version Control System ou VCS), como funciona o controle de versão ou versionamento de arquivos e sua importância no desenvolvimento de software em equipe. Explicar as vantagens e desvantagens de algumas dos VCS's mais utilizadas atualmente. Também vamos aprender alguns comandos básicos do Git, que é o VCS mais utilizado atualmente, para começarmos a versionar os nossos projetos pessoais ou profissionais e como colocar o nosso projeto em uma plataforma de hospedagem de código com controle de versionamento como o GitLab.

- Conceitos - Softwares Livres - Debian - comunicação síncrona e assíncrona. - Quem e por que alguém ajuda. - Uma certa etiqueta - Como se ajudar? - solução de problemas (guia básico) - Onde obter ajuda - Listas: http://debianbrasil.org.br/listas - Canais IRC: http://debianbrasil.org.br/irc - Grupo Telegram: https://t.me/debianbrasil https://t.me/debianbr

Have you already heard about Open Educational Resources (OER)? Do you know how an Open License works? In this talk, we will discuss those topics and learn more about why those things are so important for education. This talk is built for anyone who wants to get more involved with open education and wish to apply its concepts for any material under open licenses. We will take a brief look at the history of the Open Educational Resources and the open licenses (specifically Creative Commons), we will discuss the results of a survey with future teachers about their previous knowledge about OER and Open licenses, and we will talk about how we can change this scenario.

A Internet das Coisas (IoT) permite que objetos com computação embarcada se comuniquem, sensoriem e atuem no ambiente. Um de seus pilares é a disponibilidade de plataformas abertas e acessíveis, tais como os Single Board Computers (SBCs). Essa talk irá apresentar o programa Caninos Loucos, que projeta e desenvolve SBCs brasileiros, abertos, e a preços acessíveis, ideais para uso em diversas aplicações IoT. Nela você irá conhecer a história do Caninos Loucos, os produtos desenvolvidos até o momento, e a nossa visão de futuro. Seja no campo maker ou de negócios, você está convidado a conhecer, experimentar e buscar aplicações para a plataforma brasileira oficial de Internet das Coisas. Você vai ver que projetar e fabricar computadores aqui no Brasil, no fim das contas, não é 100% loucura: é realidade.

O objetivo da palestra será explicar o que é e como funciona o Projeto Debian. Haverá a abordagem sobre aspectos históricos, o ciclo de processamento de pacotes e a organização interna do projeto e dos seus colaboradores, além de algumas estatísticas interessantes.

###Context Web tracking is a common practice used to monitor the behavior of a particular user on a website. This kind of data is frequently unauthorizedly collected all over the web by big corporations and used or sold for targeted advertising, which is a huge privacy concern. ###Content In this short talk, we are going to briefly cover the most common fingerprinting methods used for tracking purposes. Subsequently, we are going to explain how to fight them by enhancing your web browser with several Free Software solutions. ###Audience Anyone. No technical skills are required.

This is mostly a journey talk, where I talk about why I took the "Debian road" and how the meaning of Debian evolved over months for me. From the technical things to the philosophical side, expiating the horrible mistakes I made all the way, I share the story of a 19 y/o who, with no prior experience in Ruby, JavaScript, Golang, and Perl, helped in over 200+ packages and became the youngest Debian Maintainer in India in less than 90 days. With this, I hope other new people would get on-board with the Debian project :)

Nesta palestra falaremos sobre os benefícios de contribuir para projetos FLOSS participando de uma comunidade local de contribuidores. Em particular, traremos um estudo de caso do FLUSP (FLOSS at USP), um grupo universitário sediado no Centro de Competência de Software Livre (CCSL). O FLUSP é um grupo de extensão do IME-USP, que, tal como outros grupos de extensão, visa incentivar os estudantes a buscarem conhecimentos além daqueles oferecidos pela grade curricular. Com o objetivo de encorajar a participação brasileira no cenário internacional de desenvolvimento de projetos FLOSS, o FLUSP já vem contribuindo com projetos como Kernel Linux, Git e GCC. Assim, com base nessa experiência, abordaremos como a inserção e participação nestas grandes comunidades de software livre foi facilitada pelo trabalho em conjunto, e as vantagens de se ter um amparo local ao se contribuir com FLOSS. Trazendo o exemplo do FLUSP, será discorrido assuntos como os benefícios de reuniões presenciais semanais, a importância da programação em pares, o objetivo de sempre passar o conhecimento a frente e meios para mobilizar novos contribuidores como: organização de installfests, palestras e hackathons. Falaremos mais especificamente, também, sobre a formação de grupos FLOSS no ambiente universitário, abordando a participação do corpo docente, a parceria com disciplinas semestrais e burocracias envolvidas no processo. Por fim, apresentaremos alguns dos resultados obtidos: discussão e construção de contribuições em equipe, os projetos que já receberam contribuições do grupo e os tipos de contribuições, desdobramentos em trabalhos de conclusão de curso, e participações em programas como Outreachy e GSoC. Portanto, se você pensa em se juntar a uma comunidade FLOSS, ou gostaria de fundar uma, esta é uma conversa para você.

Architectural bugs Spectre and Meltdown have caused major panic and still worry many. Oddly, some proposed mitigations that require installing proprietary blobs have not caused similar worries, despite growing awareness about prevalent data collection, built-in backdoors and the risks of placing too much trust in software and hardware designers with interests not aligned with those of users. Whom can we trust, then? What lessons are there for the Free Software community? Being suspicious of Web blobs and foggy computing, and not victimizing anyone through them, do we have anything to fear but fear itself?

A palestra é sobre a Operadora de Telecom (AS53135), que usa o Debian em grande parte da sua infraestrutura. Mostrando como o Debian pode ajudar em diversas áreas, trazendo performance, segurança e estabilidade para a empresa. Inclusive com exemplo de uso em missão crítica (router roteando um grande tráfego de dados +30Gbps/+3Mpps agregado). The talk is about Telecom Operator (AS53135), which uses Debian for much of its infrastructure. Showing how Debian can help in many areas, bringing performance, security and stability to the enterprise. Including with example of use in mission critical (router routing a great traffic of data +30Gbps/+3Mpps aggregated).

A BoF especially targeted at DebConf first timers, from DebConf old timers. What to expect, how to communicate effectively, how to get the most from this experience. This has been done at DebCon15 and DebConf16 before, was received well but unfortunately wasn't continued - and noticed to be lacking during last year's DebConf. So .. here we go again. :)

Vamos falar a origem da palavra comunidade e sobre a influência que esses grupos podem exercer na sua carreira e na sua vida pessoal, focando principalmente nas comunidades de Software Livre e de linguagens de programação. Além disso, pretendemos incentivar mais pessoas a conhecerem e participarem de alguma comunidade. Nosso objetivo é mostrar que essa experiência envolve coisas boas, ruins e maravilhosas.

Diante da complexidade enfrentada para realizar o processo de instalação de Sistemas Operacionais customizados em grupos de grande volume de computadores, a necessidade por automatização deste processo, afim de maximizar o desempenho dos seus colaboradores durante o processo de instalação e minimizar o tempo gasto nesta tarefa, é cada vez mais necessária. Desta forma, a adoção de mídias de instalação personalizadas tem sido amplamente utilizada, através da criação de um live-CD responsável pela automatização do processo exigindo interação mínima do usuário. Na palestra, descreveremos o processo de utilização desta filosofia para instalação automatizada do Sistema Operacional Debian nos ATMs (Agências da Caixa Econômica Federal) e TFLs (Terminais Financeiros das Lotéricas da CEF). Por fim, foi elaborado um sistema web em Python para realizar as tarefas de automação necessárias, com essa aplicação é possível realizar os recoverys das máquinas, geração de imagens e escolha de pacotes, manutenção remota nos ATMs, consulta de logs, além de ser possível executar qualquer comando diretamente no terminal da máquina. Audiência: Segurança, setor bancário.

Welcome to Curitiba! Opening Ceremony for DebConf19, practical information, and all sorts of Q&A.

We attempt to compute a description of the possible effects a maintainer script may have on the file system. Our final objective is to use this information for the quality assessment of Debian maintainer scripts. The technique of symbolic execution consists in following all the possible execution paths of a script, while recording in a symbolic form the interaction with the file system. The symbolic form (technically a formula in some logical formalism) describes the modification of the file system performed by the script on any initial file hierarchy. For the moment we have used these symbolic descriptions to extract cases in which a script may fail. Plans for future work include analyzing the symbolic descriptions in order to decide properties like idempotency of scripts, or relations between scripts like that their order of execution is independent, or that one script undoes the effect of an other script. Our analysis applies to an abstraction of *nix file systems, and also abstracts away from some aspects of scripts, in particular from tools that operate on the contents of files. Despite these limitations we have already some first interesting results. It is important to remember, however, that a possible error case detected by our tool is not automatically a bug, not only because of possible false positives of our tool, but also because it may be the right decision of a maintainer to make their script fail in case it encounters a situation it cannot cope with. We hope to have some discussion with the audience about how one can decide whether a failure is a bug or not. This work is part of the ongoing CoLiS project which aims at applying formal methods to the quality assessment of Debian maintainer scripts. Previous results on the syntactic analysis of maintainer scripts had been presented at Debconf18. This is joint work with Benedikt Becker, Claude Marché, Mihaela Sighireanu and Yann Regis-Gianas from our research teams in Saclay and Paris.

Debian Cloud Team is there for over 3 years. Our main goal is to maintain official Debian images for the cloud and some cloud-related packages. During this period we have achieved many improvements but we still have a lot of work to do and things to discuss. Cloud environment changes rapidly which does not always fit Debian release model. In order to cope with some of these changes and better support our users in cloud environments, we've been lately changing the team structure and some processes. We're getting more formalized, taking more responsibilities and cooperating more with SPI. We'd like to present to the wider public what we already did and our current and next steps, and what we have in store for the Buster release! We'd also like to collect feedback from the Debian community as it is really important and should help us in making decisions for the future of Debian in the Cloud.

In this BoF we want to discuss tools to create GNU R packages.

2019 is an interesting year. It is the fiftieth anniversary of Unix, the Internet, Woodstock, the LGBTQ movement in the USA, and Linus' birthday. 1994 was the year that V1.0 of the Linux kernel was released, the Linux/Alpha project started, and Beowulf High Performance Computers were invented. 1999 (twenty years ago) the Linux Terminal Server Project (LTSP) was started, and the Linux Professional Institute was formed. Many of these projects had a fundamental change to computing, and this talk will discuss what some of those changes were and why they are important even today.

Want to help the DebConf video team? Join this session to learn how all of it works and be prepared to help the team stream and record the DebConf activities.

UEFI Secure Boot has been a long journey in Debian We started talking about it in 2012, maybe earlier. We now have it up and running, on 3 different architectures. Let's celebrate that. Some topics to discuss: - why did it take so long? - how does it work? - what are the implications? - should you trust it? - what happens next?

Since more than ten years I have been maintaining (what has become) piuparts.debian.org mostly by myself, with some notable help by DSA hosting stuff and Andreas Beckmann providing patches and filing (lots of very valuable RC) bugs. There also have been many people who have submitted bugs and patches, for which I'm very thankful too. But, the everyday maintenance of the piuparts.debian.org service is on my shoulders, I'm deploying changes and I'm deciding what code to merge and deploy. This works nicely but has become boring and tedious too. Recently I have asked for i386 piuparts-slaves to be provided by DSA. DSA replied (on irc, there's no reply on https://rt.debian.org/Ticket/Display.html?id=6787 ) that they would prefer if those systems were not maintained by DSA but by the piuparts.d.o maintainers which is largely/only me. (And don't get me wrong, I ♥ DSA, this is just an example where I feel I cannot commit to do more permanent maintenance work on p.d.o...) I'd like piuparts.d.o to be extended to other architectures and whatnot, also to use piuparts for release.d.o even more, but, I also like this to be long term sustainable. This is like my 3rd or 4th attempt to improve this situation, I'm curious for the DebConf19 edittion ;) Disclaimer for readers in the future: of course this talk description is exaggerated, born out exhaustion and frustration. It's is a lame attempt to get more people involved. A non-lame attempt would focus more on the fun sides and the joys of being (partly) responsible that Debian lives up to the high quality standards it's known for. Hopefully $you will be proposing this talk for DebConf20 or 21! It's a bit more work than such a lame attempt but it's totally worth it! Carry the piuparts torch into the next decade!

annual meeting of people interested in Python in Debian

Software transparency is an effort to improve on the cryptographic signatures of the APT package manager by introducing a Merkle tree transparency log for package meta data and source code, similar to certificate transparency. This allows us to provide two security properties: The detection of targeted backdoors introduced by a malicious archive and the validation of the reproducible builds property. We present an overview of the architecture and report on the progress made since DebConf18, which includes: - (almost) removing online operations for the client - secured mirror available - compatibility to Certificate Transparency gossip hub to defend against equivocation attacks There are also lots of things that still need to be done, and we will talk about that as well!

It's not uncommon to see students wanting to discuss or learn a topic that isn't in the course curriculum. Without the proper references, teachers or colleagues to engage in a different topic, students may not follow that idea. One way of solving this is to find other students (and even teachers) with common interests to start developing extra curricular activities. This is how Enigma was created, a study group about privacy, cryptography and security at the University of Campinas (Brazil). In this talk, I will give an overview of the experience, share lessons learned, and discuss best practices based on the audience's experiences as well.

One of DebConf’s recurring activities is the Key Signing Party. It helps Debian strengthen and expand its web of trust. This session will: * Explain how keysigning is done in a DebConf setting * Validate the SHA256 hash of the KSP coordination document * Explain how to participate to people who did not send their keys in time Useful links: [Key Signing Party participants • DebConf 19](https://people.debian.org/~gwolf/dc19_ksp/) [debconf19-ksp.txt](https://salsa.debian.org/debconf-team/public/data/dc19/raw/be6d109237ebdad25601879ea21d90a09797313a/ksp/debconf19-ksp.txt) [debconf19-ksp-signed.txt](https://salsa.debian.org/debconf-team/public/data/dc19/raw/47c78bd05adc59581243958f98ca06834d3ceece/ksp/debconf19-ksp-signed.txt)

I will describe and demonstrate Boundery, a Debian derivative to allow non-technical users (including those who have no idea what Linux or Debian are) to securely host server applications in their home using cheap hardware. Example server applications are a complete email server, a Wordpress blog (complete with ActivityPub support), and more. Using a read-only rootfs and containers, we provide an install, administration and update model that is similar to that of smart phone OSes. Breaking applications into subcontainers allows better isolation and security. For example, in an email server application, SMTP, spasassassin, clamav, IMAP and webmail can all be separate containers. Further, stateless containers like SMTP, spamassassin and clamav can be torn down and rebuilt for every incoming email, making compromising those services far less impactful to your privacy and security. Private services, like webmail and IMAP are only accessible via VPN, managed transparently for the user.

The goal of this talk is to give the whole Debian community an update on the state of Reproducible Builds in Debian and in the whole free software world as well as to explain what we are aiming for the bullseye release. It’s been 6 years since Reproducible Builds were first introduced to the Debian community at large at DebConf13 in Vaumarcus and much progress has been achieved since, yet the buster release has not really achieved reproducible builds. In this talk we will explain the current status, explain what's missing and hopefully present workable ideas how to improve things for bullseye.

During the DPL campaign, there was discussion of two related issues. First, we discussed moving our packaging to Git repositories on salsa.debian.org presumably as a matter of policy. Second we discussed moving away from source packages and to a model where `git push` is used to upload packages. This is a requirements collecting BOF for that discussion. We'll discuss what people would like out of such and experience, how we might meet those requirements, and problems meeting the requirements. Deciding whether to make this changes is out of scope: that belongs on our mailing lists. But if we were going to do it, what would people want? That belongs here. Requirements will be conflicting. Choosing which conflicting requirements to meet is out of scope beyond noting the conflict. This is a brainstorming session.

Containers are getting a more and more popular way to distribute and run applications on servers, and its use is beginning to gain ground among embedded systems. In this talk we will discuss, in practice with development boards, the challenges of cross-development for embedded systems and how Debian containers can be a powerful option to help.

It's been a great year in Debian. Buster is better than ever. I'd like to discuss where we are and some of the interesting questions before us as we go forward.

This BoF will include discussion of the DebConf Bursaries process this year, and how it might be improved in the future.

The Linux kernel has a very active development community, constantly adding not only new hardware support but new features. Some of these features can simply be enabled by the configuration in the Debian package, but some also require support from other user-space packages. This talk will cover some of the more interesting changes made in the past year, and any work that's still needed to support these in Debian.

Several years ago the Raspberry Pi was released to the world. Unfortunately the computer that costs 35 USD in most countries often retails for 150 USD in Brazil due to shipping, insurance and customs duties. In an attempt to correct this, the Raspberry Pi Foundation was brought to Brazil and two years was spent in an attempt to license and manufacture RPis in Brazil. While ten systems were eventually produced, the request was denied. After that another design was located, and another path was followed. Three years later the "Labrador" was created and is now ready for large scale manufacture. More flexible than the Raspberry Pi Model 3, faster, with more RAM and more flexibility, the Labrador will run current releases of Debian. As the project progressed, it became a core component of the Brazilian Internet of Things (IoT) program along with a small sensor computer (the "Pulga", Portuguese for "Flea") and a soon-to-be developed small server/router system, the Bankar. The project also morphed from being "just create a less expensive "RPi" to stimulating design and manufacturing of high quality "Open" computer systems in Latin America. An NGO is being formed called "Caninos Loucos" ("Crazy Canines") and sophisticated plans for creating a completely Open Computing system with no binary blobs is in the works.

This sessions aims to produce a collective thinking between women and LGBTQI+ about creating safe and cosy spaces in tech collectives, with a feminist perspective. Through the exchange of experiences and practices with those who will attend the session, we'll talk about what make as feel "safe", the value of creating intersectional knowledge, ideas and realities with collaborative work in technology, and how to create this space together. Our audience is women and LBGTQI+ individuals, groups or collectives, to create a safe space to express freely, in a safe environment. Please, if you don't identify as part of the audience, we kindly ask you to participate in another activity. LGBTQI+ is an acronym that means Lesbians, Gays, Bi, Trans, Queer/Questioning, Intersex, and more.

debootstrap is one of the important pieces for debian-installer, debian-based containers, and so on. As a one of its maintainers, I'll introduce the changes (and fails ;) in debootstrap in Debian10 and discuss more changes in the future. https://tracker.debian.org/pkg/debootstrap

Discussion of Debian Cloud Team: * Status of official Debian accounts and images * User/permission management * automation of creation, testing, publishing images * improvements to created images * should we try to take care of containers and similar technologies? We invite all people interested of using Debian in various clouds to share their experience, needs, and wishes for Debian in clouds.

This work presents the implementation of a Clustered Network File System. In 4th November 2017 we received nine old servers and it was started a recovery project [1]. As result, five servers were recovered and it has been currently used for research and educational applications. This Cluster uses five old servers (named as Amanda, Carolina, Elisa, Gabriela, and Helena) running Debian 9 (Stretch). The Cluster is running at IFPR Telecommunications Laboratory (Labtelecom) in the internal network 192.168.1.0/24 [2]. Some characteristics of servers and network address are listed below: Amanda - 192.168.1.3/24 - Dell Power Edge 2850 - Intel(R) Xeon(TM) CPU 3.00GHz, 4G Carolina - 192.168.1.10/24 - Dell Power Edge 2850 - Intel(R) Xeon(TM) CPU 3.00GHz, 2G Elisa - 192.168.1.12/24 - IBM X-series 346 - Intel(R) Xeon(TM) CPU 3.20GHz, 256M Gabriela - 192.168.1.14/24 - HP Proliant DL380 - Intel(R) Pentium(R) III CPU family 1133MHz, 3G Helena - 192.168.1.16/24 - IBM E-server - Intel(R) Pentium(R) III CPU family 1133MHz, 2G Despite of legacy hardware, each server presents some operation and management functions, such as, DHCP Server, Local repository, Multimedia Server (DLNA), FTP Server, and Fail-over. This network has an average of 75 clients per day and an expansion up to 150 clients is expected in the next two years. The goal of this talk is to introduce how some minimalist configurations on Debian can easily provide network services in a low cost cluster. Some information and references about this cluster are described in Portuguese at: [1] https://sites.google.com/a/ifpr.edu.br/gustavothl/labtelecom/servidores-de-rede [2] https://sites.google.com/a/ifpr.edu.br/gustavothl/labtelecom/cluster

It is common to find local `sendmail(1)`-compatible Mail Transport Agent on workstations, usually configured as nullmailer (relay-only) to a remote submission agent. However finding a local IMAP server seems less common. Instead a typical desktop Mail User Agent implements the full mail stack, from storage to rendering/edition, via custom caching, threading, searching, and notification mechanisms. I will argue for local IMAP servers in order to reduce latency and enable offline mode with _thin clients_: such a client conforms to the UNIX philosophy as it takes care of rendering and nothing else, and relies on the underlying IMAP server for [searches](https://tools.ietf.org/html/rfc3501#section-6.4.4 "The IMAP SEARCH Command"), [sorting/threading](https://tools.ietf.org/html/rfc5256 "The IMAP SORT and THREAD Extensions"), [notification](https://tools.ietf.org/html/rfc5465 "The IMAP NOTIFY Extension") as well as storage (including caching). Such solution is fully compositional as it relies on documented protocols (namely [IMAP4rev1 and its extensions](https://tools.ietf.org/html/rfc3501 "IMAP4rev1")) for the gluing part. That leaves the problem of synchronization between multiple devices (and/or IMAP accounts), in arbitrary topologies. There again IMAP comes to the rescue with its [QRESYNC extension](https://tools.ietf.org/html/rfc7162 "The IMAP CONDSTORE and QRESYNC Extensions"), which enables stateful and efficient bi-directional synchronization between two IMAP4rev1 servers. I will briefly present such a synchronization program, [InterIMAP](https://tracker.debian.org/pkg/interimap "InterIMAP"), and show a few benchmark metrics to justify its presence in the ecosystem and compare with so-called “full” synchronization solutions.

There are a lot of new things in APT to discover. This talk will showcase new features and improvements in apt 1.9, what my vision for apt 2.0 looks like, and what we still need to do. I'll also discuss some changes to python-apt that will allow us to write faster python-apt applications, and showcase some noteworthy changes in other related packages such as dpkg and unattended-upgrades.

Software transparency is a proposal to make some attacks by a compromised archive detectable. In this session, we will do a quick recap of the current software transparency architecture proposal and then discuss how to proceed. The possible areas of idea collection and discussion include: - the current state of the implementation, what works, what doesn't - being helpful for reproducible builds - integration within libapt - interface to dak

Chrome OS is Google’s Linux-based operating system that focuses on speed, simplicity and security. From the beginning Chrome OS computers could run Chrome, and a few specially made applications, but since 2016 they also fully support Google Play, enabling users to access millions of Android apps. Chrome OS devices are readily available from many manufacturers. Since version 69 of Chrome OS, released in the fall of 2018, users can run a Debian GNU/Linux operating system inside a VM and container. This opens the option of running any Linux desktop app on a Chrome OS device, instantly making Chrome OS devices the most easily available Linux computer for a consumer to get. In this talk we will discuss: - The architecture of Linux on Chrome OS (aka Crostini), and its rationale - Its current features and functionality - Personalizing and configuring your container - Enterprise features to control linux deployments on Chrome OS - Roadmap plans, and best ways to ship Linux applications on Chrome OS

Do you like to sing? We do, and we would like to sing together some nice choral music. Everybody is welcome, even if you (think you) are not good at singing. We will have some easy music and you might discover that it is not that hard after all, but very enjoyable. Don't be shy, even if you have never read music or sang. We will try to have fun together, and we need your help. :-)

A palestra é sobre a Operadora de Telecom (AS53135), que usa o Debian em grande parte da sua infraestrutura. Mostrando como o Debian pode ajudar em diversas áreas, trazendo performance, segurança e estabilidade para a empresa. Inclusive com exemplo de uso em missão crítica (router roteando um grande tráfego de dados +13Gbps/+1.8Mpps). The talk is about Telecom Operator (AS53135), which uses Debian for much of its infrastructure. Showing how Debian can help in many areas, bringing performance, security and stability to the enterprise. Including with example of use in mission critical (router routing a great traffic of data +13Gbps/+1.8Mpps).

Debian System Images are usually generated by custom scripts around debootstrap. In this talk I shall present a Debian tool (`debos`) that helps creating customized Debian System images for different environments. `debos` has been created having embedded systems in mind. Images are customized via YAML description file, often called `recipe`. `debos` parses `debos recipes` to generate custom Debian images. `debos` is not only suitable for embedded images, but it can be used in other environments such creating VM images, cloud images, … `debos` is core component of several Debian derivatives CI loop. It also does not require sysadmin capabilities.

The Debian Anti-Harassment team has been working to help by providing advice on Code of Conduct issues and potential Code of Conduct issues. This session is to meet with the A-H team to discuss current activities, past activities, and the future of the team and its role within the Debian community.

Ganeti is a cluster virtualization manager providing simple, standalone and robust virtualization clusters using a bunch of commodity KVM or Xen hosts. It was initially developed inside Google but made available as Free Software in 2007 and has been included in Debian since Lenny. Since then, it has become a virtualization platform of choice for many companies and organizations around the world, among which the Debian Project itself. After a couple of years in hiatus, development is slowly resuming with the project being gradually handed over to the community. This talk aims to give a bit of background on Ganeti itself and describe the current state of affairs. It will highlight all present and future challenges, from community-driven development and project governance, to transitioning to present-day Haskell and Python 3 and supporting current hypervisor versions. System administrators and Python or Haskell coders looking for an interesting project to contribute to will feel at home with this talk. Most people interested in virtualization technologies will also hear a couple of interesting bits.

The Diversity Team was officially found in April but has been around for longer, in the spirit of the Diversity Statement. This session aims at figuring out how to improve the visibility of our already diverse community and how to improve on that grounds. The session will also be a chance to meet people from the local Grupo Dignidade, which organizes and offers infrastructure for LGBTI+ groups to connect and improve the situation of queer people in Brazil. They will speak about their approaches to increase the safety for minority groups, and offer insight into their work.

We want to find old content on the Debian web site. Then let's discus what to do with it. Update, remove or merge to other places? This session should make it easy to agree about actions we like to take on specific content. We will share links to content you like to discuss during the session via IRC or gobby. It should not be a general discussion about bigger changes of the web site.

A Internet das Coisas (IoT) permite que objetos com computação embarcada se comuniquem, sensoriem e atuem no ambiente. Um de seus pilares é a disponibilidade de plataformas abertas e acessíveis, tais como os Single Board Computers (SBCs). Essa talk irá apresentar o programa Caninos Loucos, que projeta e desenvolve SBCs brasileiros, abertos, e a preços acessíveis, ideais para uso em diversas aplicações IoT. Nela você irá conhecer a história do Caninos Loucos, os produtos desenvolvidos até o momento, e a nossa visão de futuro. Seja no campo maker ou de negócios, você está convidado a conhecer, experimentar e buscar aplicações para a plataforma brasileira oficial de Internet das Coisas. Você vai ver que projetar e fabricar computadores aqui no Brasil, no fim das contas, não é 100% loucura: é realidade.

After 4 releases of Debian with OpenStack, we now have Buster that is shipped with the first OpenStack installer. This installer has been written from scratch, and represent 1 year of development. It was very shortly presented last year in Debconf Taiwan. As it is now production ready, this is now time to show the world how it works. This presentation will go over details of how to use OCI, and how it can be used to deploy OpenStack under Debian. Details about OCI can be read over here: https://salsa.debian.org/openstack-team/debian/openstack-cluster-installer

The FreedomBox blend of Debian offers people the chance to run a suite of personal web services free from the control of third parties ... but it does still require a traditional Internet connection, complete with all of the privacy and anonymity concerns that entails. That caveat disappears, however, if the FreedomBox has the Tor network as its only connection to the outside world. Entirely by chance, I found myself cut off from own public FreedomBox machine last year, but I soon discovered that Tor-only access has some distinct advantages. This talk will describe my personal experience installing and running a FreedomBox installation that is accessible only over Tor. Some of the difficulties found in combining FreedomBox and Tor are easily overcome, such as properly configuring multiple Tor hidden ".onion" services and securely distributing cryptographic key material. Other hurdles, however, point to weak points that users would be unwise to fiddle with, such as using long-term cookies with Tor Browser. The talk will describe the challenges and shortcomings encountered in depth — including Tor hidden-service management en masse, working with Let's Encrypt, key management, service persistence, remote monitoring, and mobile-device access. It will offer suggestions for expanding what packages FreedomBox offers, and will detail the configuration and preference settings required to use Tor Browser and Tor for Android with essential services. Whatever the obstacles, however, audience members will see that it is possible to not only combine the user freedom of FreedomBox with the anonymity of the Tor network, but to come away with a stronger system when the two work in concert.

MariaDB is currently quite stable in Debian and we should have a fairly good opportunity to work on adding new features and capabilities related to MariaDB & co packaging in Debian. Attend this BoF session and express your needs and wishes, or get to know the current maintainers and get help on how to contribute to MariaDB & tools packaging in Debian.

Introduce the salsa-ci pipeline for Debian packagers explaining: * Why and where it comes from. * Advantages of having CI in a Debian package. * How to use it with a simple demo. * Roadmap and how to contribute to the project. --- We gave this talk in the mini-debconf at Hamburg and we got really good feedback about it. So, I'd like to give it to a broader audience in Curitiba :). https://meetings-archive.debian.net/Public/debian-meetings/2019/miniconf-hamburg/salsaci.webm https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg?action=AttachFile&do=view&target=salsa-ci-team-slides.pdf

A certificação Linux Essentials do Linux Professional Institute é a mais introdutória no mundo do Software Livre. Nesse workshop, Cesar Brod, diretor de relacionamento com comunidades do LPI irá fazer uma revisão dos tópicos da prova, deixando você mais preparado para passar nela. Mas se você está começando a trabalhar com o Linux, essa sessão também servirá como uma introdução suave às entranhas do sistema operacional e ao uso do shell script (a tela preta!). Traga seu computador com o Debian 9 instalado nele (ou em uma máquina virtual) e venha se divertir conosco.

From chats apps to cloud storage, the dominant cloud-based services are designed to be walled gardens: they prohibit inter-operation with other platforms, they control the flow of your data, and they use network effects to lock you in. Big tech companies have used this “walled garden” business model to concentrate market control, leaving consumers with fewer and fewer real options. In the United States, antitrust law hasn’t yet succeeded in stopping the concentration of power. But users want a new way to compute in the cloud: one that is free, open, trustworthy, and empowering. What should you do while the law catches up with technology? Free yourself from big tech using grassroots technology. Enter FreedomBox. FreedomBox is Debian’s home server system: it is a Debian pure blend designed to make it easy for anyone to host their own server on inexpensive, pocket-sized computer hardware. FreedomBox is designed around the principle that the exploitation of user data and attention should be technologically impossible. Its simple user interface empowers individuals to host their own Internet services without technical expertise, like an encrypted chat server that can replace Whatsapp, a VoIP server, a personal website, file sharing, a metasearch engine, and much more. In April 2019, sales of the first-ever commercial FreedomBox product were launched. The product, dubbed a “Pioneer Edition FreedomBox Home Server Kit,” is being sold by Olimex, a company which specializes in Open Source Hardware. In this talk, you will learn about big tech’s concentration of market control, how it effects users who rely on cloud services, and why antitrust law hasn’t succeeded in protecting consumers against this threat. Next, you will learn why Debian’s world-class software ecosystem should provide the alternative to big tech. Last, you will learn how FreedomBox uses Debian to empower people to leave big tech platforms. This session is targeted at a general audience who is interested in big tech and the cloud. No prior technical knowledge is required.

Font packages preset a distinct mix of challenges for an OS project like Debian. In addition to their fundamental weirdness (providing bits that are simultaneously a content element and executable code), fonts can be installed in multiple locations — system-wide and per-user, free-software and proprietary, from upstream repositories and from downloaded .zip files — and user applications are expected to gracefully handle all of the permutations within a single "Font" menu item. Font packages are a recurring stumbling block for smaller language communities, where operating-system support may lag behind and upstream designers may be wholly unacquainted with free software. Furthermore, the low-level privileges granted to font binaries poses practical and security challenges for newer application-packaging formats like Snap and Flatpak, as well as for transactional system-image operating system projects like OSTree and Ubuntu Core. This talk will outline the concerns of such app-packaging and OS-image projects, then present a possible solution in the form of a simple thought experiment: what if Debian stopped providing font packages altogether? In the hypothetical font-packageless world, individual users would install their own fonts on a per-user basis only. That change would trigger a number of ripple effects, from altering how system libraries like fontconfig match font names, to how GTK and Qt access fonts, to how end-user applications provide fonts. A user-only font stack would be simpler and have fewer security issues, and it could reduce the lag between an upstream font's release and its availability to Debian users. This talk will conclude with a look at the down sides of upending the font-packaging mindset, such as font management on the desktop, font versioning, global-language support, font synchronization, and font discovery. But it will, hopefully, ask attendees to reconsider how and why individual fonts are packaged for Debian and for other free-software distributions, and to explore possible alternatives in the years ahead.

BoF for the Debian Go Packaging Team. Team Website: https://go-team.pages.debian.net/ Salsa Team: https://salsa.debian.org/go-team

So-called smartphones have long been recognized as a surveillance problem by the Free Software community, and it feels like, even at the speed of light, no personal data can escape them any more. Still, they offer useful features that many people find valuable enough to make up for their perceived privacy loss, to everyone's detriment. What if we could get the useful features without sacrificing our privacy? We have enough Free Software and Hardware, and we could have surveillance-Free OLPC-like networking with Tor, using onion-like services for incoming calls. Time seems ripe. Who wants one? Who wants to make them? How can we make them viable?

A principal maneira de colaborar com o Projeto Debian é fazendo empacotamento de software. Mas existem várias outras formas que você pode ajudar mesmo não tendo conhecimento técnico. Nessa palestra, vou mostrar em detalhes quais são essas outras formas. Você pode traduzir, reportar bugs, escrever tutoriais básicos e avançados, elaborar materiais gráficos, organizar eventos, etc. Não deixe para amanhã a contribuição que você pode fazer hoje para o Debian, porque o projeto precisa de você!

Get-together to discuss if, how, when and where to possibly have a MiniDebconf 2020 in Germany.

In Debian we strongly value the ability to compile a package from its sources, administering liberally RC bugs to packages that do not possess this feature. However, sources are never enough to build a package: you also need an already-compiled Debian distribution to satisfy all the dependencies, which often create cycles and self-dependencies. This create a chicken-and-egg problem, with theoretical and practical implications. It has to do with security, auditability, architecture bootstrapping, reproducible builds and free software philosophy. Some projects are ongoing to fix this situation, both in Debian and outside of it. We would like to discuss the motivations, current state of the art, and future directions of bootstrappable builds. The long term goal is, one glorious day, to be able to compile the whole Debian given all of its sources and no more than a few kilobytes of binary code. Spoiler: we're not yet there. There is a lot of work to do, it is fun and your patches are more than welcome. If you want to warm up, here you have a few links: * [http://bootstrappable.org/](http://bootstrappable.org/) * [https://wiki.debian.org/HelmutGrohne/rebootstrap](https://wiki.debian.org/HelmutGrohne/rebootstrap) * [https://gitlab.com/giomasce/asmc](https://gitlab.com/giomasce/asmc) * [https://gitlab.com/giomasce/nbs](https://gitlab.com/giomasce/nbs) * [https://www.gnu.org/software/mes/](https://www.gnu.org/software/mes/)

The Ruby team maintains over 1500 packages in Debian. I have been active in the Ruby team for a while now. And I believe that we, the Ruby team, as a whole, can improve on a lot of things, like, sponsoring new contributor's packages, taking sessions, etcetera. During the BOF session, I'd be discussing a few topics like them, which would encourage more new contributors to join the team and help us in the maintenance of all the gems and applications. Moreover, something that worries me is the "retainment rate" of the new contributors. If this continues, then after few years down the line, the Ruby team would be in a little trouble. There are a lot of packages under the team and so is the need for more contributors. And it'd be lovely to have more DMs and DDs emerging out in this process :)

You will learn the most important concepts of how games are integrated in the Debian distribution, how many are there and how you can find them. More than 600 games are freely available in the main distribution written in Perl, Java, Haskell, C, C++, Python and other languages. The first 20 minutes will give you an overview about the current state of games in Debian, what is good and what can be improved. During the rest of the time you can ask questions about everything you ever wanted to know about games in Debian. Let's discuss!

MariaDB is a large package with many parallel releases maintained, extensively used libraries and the packages carry along a data directory that needs to stay intact upgrade after upgrade. Packaging MariaDB is a complex task and ensuring smooth upgrades and avoiding regressions requires a lot of work. However, with the introduction of Salsa, the Debian Gitlab service, and the continuous integration system it includes, every commit in MariaDB packaging is nowadays extensively tested and maintaining high quality is significantly easier. In this talk I explain how Salsa-CI works in general, how it is applied for MariaDB packaging in Debian, and how the testing system has evolved in the past year and how it has proven itself truly priceless.

Typical DebConf photo as usual

This talk is for past and current GSoC/Outreachy students to present their projects which they did with Debian. We (Outreach) team will also give introduction about these programs and will ask mentors to share their experience about mentoring students too.

debian/copyright file is an important piece of Debian package, however, not all of them are accurate, hard to write it down and follow to upstream update. To improve them, let's share your knowledge and discuss. * We have a lot of not accurate old-style debian/copyright files - How do we update them to "copyright format 1.0" (https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/) with fewer efforts? * What is the best way to describe debian/copyright - any good tools and its usage? * OpenChain project (https://www.openchainproject.org/) from Linux Foundation pushes SPDX format, should we consider to adapt/collaborate with its works? * Yocto Project (https://www.yoctoproject.org/) uses "hashes" for license files to track license changes - a good idea for Debian, too? * etc...

Persistent memory is a new technology that straddles the concepts of memory and storage. It can be used to serve as either, but to get the most out of it, you need to adapt a good part of your software. And the kernel is too slow to help you much this time. As these concepts are not widely known yet, and the software stacks are not quite mature, this talk will mostly cover what you can use persistent memory for, and basics of programming it, but it is time to start thinking how to integrate pmem support in a distribution.

Debian 10 (Buster) ships with AppArmor enabled by default. AppArmor is a Mandatory Access Control framework. When enabled, AppArmor confines programs according to a set of rules that specify what files a given program can access. This proactive approach helps protect the system against both known and unknown vulnerabilities. As any security measure that can block operations that would otherwise be allowed, this change has potential to occasionally break stuff and cause headaches. During this workshop, we will share skills about: * using Debian with AppArmor * identifying issues caused by incomplete AppArmor policy and reporting them * improving existing AppArmor policy * shipping AppArmor policy in Debian packages

Lightning Talks! They're short, they're possibly sweet, they're a veritable variety pack of topics in a short amount of time!

Yearly BoF of people working on scientific packages that are assembled under the Debian Science umbrella. The discussion should touch common techniques (for instance citations and registries of scientific packages) as well as how we could enhance the QA work in Debian Science.

The social purpose of Debian is important: it provides a free and open software ecosystem which respects user freedom. Debian's ecosystem is so rich, reliable, and privacy-respecting that it is often used as the building material of other distributions. How can we promote this vision of technology in society more broadly? As individuals, we insist on integrating software freedom into our lives by using Debian. Many of us even try to offer software freedom to our friends and family. But what if we want to advocate for software freedom for our entire society or government? Changing laws, policies, and social norms is not easy, but it is an essential component of any social movement. Join this session to learn how Debian’s social purpose can be complemented by advocacy in law, policy, and society. You will hear from the CTO of India’s premiere digital liberties organization, SFLC.IN, which has worked on India’s IT policy at the national level, and a representative of the Software Freedom Law Center and the FreedomBox Foundation. This session welcomes people with any level of experience fighting for change. If you come to this session with lots of experience, then we hope that you’ll share it with others. Come to this session if you want to learn about the general ways in which you can advocate for software freedom in your society. Though we won’t give you concrete advice about what you should do next, we hope to give you a clear idea about your options.

Come help your DPL enjoy his new-found joy as a DJ. I'll bring some of my favorite electronic music (mostly Trance and Progressive with a bit of other stuff thrown in for variety) and my free software DJ stack. Bring some energy, and a sense of adventure and we'll dance the time away! Unless people point me at a lot more good open-culture electronic music than I've found so far, you will be *tainted* by non-free music. Participants who complain too loudly without providing free suggestions of their own will be placed in a room with "Share the Software" on endless repeat.

Static analysis tools are criminally underused in software engineering; not only can they detect many common problems, pitfalls and security issues, unlike test suites, no additional code needs to be written. Futhermore, many tools provide helpful hints on how to fix the issues they expose. In Debian, Lintian dissects packages and tries to find bugs and policy violations. It contains automated checks for many aspects of Debian policy as well as some checks for common errors. Reports are generated and published on the lintian.debian.org website. In this talk you will learn about the past, present and future of Lintian, as well as how to contribute and make Debian better.

At [DebConf17](https://debconf17.debconf.org/talks/165/ "Debian for Medical Software") Roche Diagnostics presented the internally developed “Roche Linux” which is based on Debian GNU/Linux. Fast forward two years, we would like to share our experience with migrating a medical device to Linux, debianizing and developing software on Debian. Furthermore we would like to demonstrate our Debian toolchain and share how we create reproducible and upgradeable Debian environments for development, test and production on multiple architectures.

During Debian Project Leader Elections 2019 I asked to all candidates how to increase diversity in Debian with DDs outside Europe and North America. Later Jonathan called it as "geographical diversity", and I am using this idea for this BoF. So, let's talk how the Project can encourage people from southern hemisphere to contribute to Debian. Do we need more Debian events outside Europe and North America sponsored by Debian with DDs from there? Does Debian has budget to sponsor people to go to Europe and North America to join Debian events because most of DDs are there? We can read more about this thread before the BoF here: https://lists.debian.org/debian-vote/2019/03/msg00208.html

TrieHash is a perfect hash function generator written for APT (and dpkg is in progress). It generates C code from a given list of words, that code performs substantially faster than competing perfect hash functions. I'll be discussing the basics of tries, compiler optimizations, and tricks for multi-byte access and case-insensitive comparisons in (GNU) C, and how these techniques were used to build TrieHash.

Annual get-together for the Arm porters and users, to discuss the state of the multiple Arm ports: - Current status - Future plans - Issues …

All packages in Ubuntu main, and a few Universe, and the corresponding Debian packages, have been imported into Launchpad git repositories. This short talk shows how these packages are organized in repositories, branches and tags, to facilitate proposing fixes.

Marielle Franco, Brazilian LGBT and human rights activist, was killed in March 2018. Her widow, Monica Benicio, continued her fight for better treatment of the poor, the LGBT community and black Brazilians. Her murder has still not been solved and as the police investigation drifts, Monica is a plunged into a new crisis - the probable election of Jair Bolsonaro. On the eve of his inauguration, the film documents Monica’s involvement in the campaign opposing Bolsonaro and shoots of hope in the election of some local politicians from other parties, plus the aftermath of the election which suggests a terrifying future for LGBT rights and politicians who oppose the Government, and little hope for Marielle’s murder case being adequately solved.

A short update from the Debian Keyring maintainers about the current state of the keyring, as well as an opportunity for project members to ask any queries they might have.

Like last year, Infomaniak is sponsoring 30 yubikeys for DDs, DMs and others. Nearly all have been already assigned, but if you are a DD, then you can still apply for one (by writing to zigo @ d.o, signed with your gpg key, using your Debian address), but please don't do it in Curitiba, it will be too late. Join me in a session where I'll teach how to use your Yubikey. You will learn: - How to generate subkeys and what they are for. - How to store the Auth, Sign and Encrypt subkeys in your yubikey. - How to ssh using a Yubikey (using the ssh key derived from your Auth subkey). - How to use KeepassXC as password store, with the password vault encrypted with the HMAC store on your Yubikey. This session will *not* cover using the Yubikey as 2FA device.

PostgreSQL is the most advanced open-source relational database system and is used in various parts of the Debian infrastructure like dak, wanna-build and salsa. Through the apt.postgresql.org project, every supported major version of PostgreSQL is available for every supported version of Debian. This talk will give an overview about new features, extensions, modules and external projects in the PostgreSQL ecosystem that are available for buster. Also, it will highlight how to easily build a high-available 3-node PostgreSQL cluster on vanilla Debian.

There are lots of ideas out there about how to run a free and open source software project... but not all strategies were created equal. Sometimes governance "just happens" but more often than not, projects end up with some things that work and some that don't. Transparency, clear expectations and compassion go a long way towards helping you find people who support your vision but can still bring new ideas to the table when it comes time to talk implementation. Your project's governance should reflect your values and empower individuals to succeed within its structure. Specific topics that will be covered: * How to bring in people who share your vision * Why transparency matters * Sharing expectations early and often * Which legal decisions to sort out early Maintaining and scaling your project is easier when you've laid a good foundation. The wider community is mature enough that we can learn from what's already been done and set up new projects for success. This talk will cover some of the big red flags you'll want to avoid as well as some of the structural details that will help avoid issues later on.

This is an opportunity we have to, among other things: - Meet each other and strengthen contacts. - Share community practices and events. - Talks about a shared latin-american-caribean Mini DebConf - Local needs related to Debian in general.

The impact of the Raspberry Pi series of computers cannot be downplayed: This tiny computer brings back the concept of computer as a environment for learning electronics, as a toy, as a tool for building other tools, as a prototyping aid... In a most convenient form factor, and for a low sweet price. The Raspberry series helped define a whole segment in computing, and nowadays tens of similar computers with different characteristics are available. However, given the Raspberries require a non-free firmware blob to boot... There has been no support for running The Universal OS on it. Most Raspberries in the wild run Raspbian, a Debian derivative that deviates quite a bit more than what we would like. We have dirtied our hands with the non-free package ``raspi3-firmware'', have adopted some build infrastructure, and by the time this talk is presented, should have built fully functional images for all of the families in the Raspberryscape! I want to share in this talk the process and status, and help increase our work's visibility!

It is impressive how much time and resources a team can save by using the open-build-service infrastructures to manages their packages creation and distribution. OBS is a generic system to build and distribute packages from sources in an automatic, consistent and reproducible way. Andrew Lee will cover the benefits of using OBS, explain some of it features and workflow for all your packaging and releasing needs, like automatically build package from scratch on multiple target distros and architectures, and show you how to setup OBS infrastructure to build your own Debian based distro easily.

Started in late 2014, [Debian LTS](https://wiki.debian.org/LTS/ "Debian LTS") exists and has provided additional security support for the Squeeze, Wheezy and Jessie releases. LTS support for Stretch is also planned. In this BoF we want to briefly explain how LTS is done, how you can support it, either finanically or by volunteer work and provide a venue for discussions how to improve it. The targetted audience for this talk is everyone, user, contributor, sysadmin, sponsor, you. Though of course due to the subjects being discussed this will be a quite technical discussion.

A palestra mostrará como um colaborador do Debian poderá se tornar um Debian Maintainer (DM) ou um Debian Developer (DD). Serão abordados assuntos como a assinatura de chaves GPG, as declarações necessárias e as provas a serem realizadas, dentre outros passos essenciais. O principal objetivo será desmistificar os processos e encorajar as pessoas que queiram participar mais a fundo no projeto. Complementarmente, serão apresentadas outras formas de colaboração para quem quer iniciar e relizar os primeiros trabalhos, visando se tornar membro oficial um dia.

Debian supports a growing number of development boards, mostly running one of Debian's *several* ARM architectures. More boards are released to the wild every month! Sometimes they go feral, abandoned by their manufacturers and supported by volunteer communities. A few of the more recent ones even act suspiciously like laptops. The challenge is that they are all so similarly different. In order to boot Debian on a new, unique board, changes may be required in several packages, some needing coordination upstream, and some packaging changes may be specific to Debian. I'll touch on my workflows, communication channels, observation habits in the wild, and more to inspire your very own adventure!

RDMA, Remote DMA, allows remote systems to read and write directly from local memory. This is typically used by high-performance network interfaces, such as data centers and clusters. RDMA gives you high bandwidth and low latency. It typically requires support from the network interfaces, as well as potentially adapting the applications. This talk is a short HOWTO on using RDMA with Debian to make their high-performance network run faster. We will demonstrate how to test RDMA support without any specialized hardware (using soft-RoCE), and how to use it with existing applications (with libvma).Then finally, we will review the state of RDMA in buster and what is still missing, both in the kernel and user-space tools.

Want to show off your project? Need a little longer than a lightning talk but not as long as a whole session? Have we got an event for you! Live demo slots are 10 minutes each.

Licenciamento de software sempre foi um tema polêmico ou nebuloso para muitos. O objetivo desta palestra é desmistificar o assunto, mostrando os principais aspectos a respeito de licenciamento e direitos autorais. Serão usados exemplos de softwares proprietários e livres, destacando os principais pontos para o entendimento. Também serão mostradas algumas formas erradas de interpretação e utilização. Uma pergunta para instigar a curiosidade: será mesmo que todo código GPL tem que dar origem a outro código GPL?

The OSI was co-founded in 1998 by former Debian Project Leader Bruce Perens with the aim of explaining, advocating and protecting the term open source. Debian shares the OSI's desire to encourage software freedom and Debian's Social Contract commits it to producing a system which is 100% free. Since 2012, the Debian Project has been part of the Open Source Initiative (OSI) as an affiliate member. This panel/talk will discuss the role of the OSI, some of the history of the OSI and Debian but also how the OSI's Open Source Definition is closely based on the Debian Free Software Guidelines, the document that defines the types of software licenses which the Debian Project accepts.

Debian and the Free Software Foundation, along with its GNU Project, share many goals and ideals. They are two of the most mature and dedicated organizations working in the free software movement. This is an annual opportunity to talk in person about how they can better work together and inspire each other. FSF members (and potential members) will meet to talk about the FSF’s work, the FSF's relationship with Debian, and progress of the movement as a whole: * A very brief update by the FSF’s executive director on highlights of the FSF’s work since the last DebConf * Feedback (positive and negative) from members, and a little brainstorming about what the FSF should and shouldn’t be doing * A review of the current relationship between the FSF and Debian * A discussion of areas for collaboration, focused on projects that could be completed or significantly advanced before the next DebConf Recognizing that we can't cover everything in 45 minutes, at the beginning, we'll choose some specific topics to focus on under this general umbrella. Past sessions at DebConf have led to concrete positive results like collaboration on the hardware database at https://h-node.org/. Let’s have another productive one! This session will not be recorded, in order to make participants feel more comfortable speaking informally.

Apertis, an automotive Debian derivative, has historically relied on a combination of Open Build System and Git to store packages. However, since OBS provides only rudimentary Subversion-like version control, this workflow has been proven to be inefficient, especially when it comes to merging updates from Debian or rebasing to a new release. Apertis is currently underway a migration which will result in all packages stored in Git only with OBS used for builds only. This transition is challenging since the way Debian packages have traditionally been built does not translate well to all-in-Git workflows. Lessons learnt as part of this transition are as beneficial for Apertis as they are for Debian itself and other derivatives. Since this work is currently in progress, but a major part of it is scheduled to be completed before DebConf, the description and the title of the talk are subject to change.

In this talk will be presented software projects for musical creation, including software synthesizers, DAW, sound desks, mixer for DJ, drum machine, MIDI tools, Jack, audio editing, languages and programming environments for live coding, among others. All the free software projects presented are available in Debian and can be easily installed with a simple `apt install`. The talk is aimed to whom is curious about tools for sound and music in Debian, covering only it's basic features, focusing mainly on how to install and how to use these features. This talks is a tour around sound and music tools available on Debian. At the end of the talk will be reserved some time for a live coding performance using TidalCycles.

Free software will not win by "merely" replacing proprietary software. We need to lead with a vision of how the world could be. A voluntary community, one where people participate by choice, does not have to replicate the power structures, gate-keeping or casual cruelty of the systems it seeks to replace. We could make free software the most empowering place to build software. Free software tools could enable new ways of crafting user experiences that proprietary software providers seem unwilling to offer. Free software could tranform the relationship between users and developers, so that users feel like partners instead of sales metrics. Free software communities should be seeking to outdo proprietary software's methods and social norms in every possible way. This talk will focus on: * The people we're building free software **for** * The people we're building free software **with** * The people who aren't here **yet** We've made a great start by empowering many technical and semi-technical users, but we can't stop there. (What kind of utopia only has coders in it?) Let's build a kinder and more practical free software movement to empower all kinds of people!

Será evidenciada a principal técnica de empacotamento utilizada pela distribuição Debian, que é a DebHelper. A palestra, em grande parte demonstrativa, abordará o processo completo de um empacotamento, mostrando como é gerado um arquivo .deb, seguindo os rigorosos padrões exigidos pelo Debian. Esta atividade será voltada para todos os interessados no assunto e que não puderam comparecer na oficina de 3 dias que foi feita na primeira semana da DebConf.

The content team meets to discuss what we can improve for Debconf 2020.

A short update from the Debian Data Protection team about the current state of their work, as well as an opportunity for project members to raise any queries they might have.

In this session I would discuss about: * Differences between non-free fonts, free (DFSG-free) fonts and fonts that's allowed to be in main. * (Probably wrong) assumption of ttf and otf font formats as "preferable file for making modifications", and the paradox it causes. * Reasons why we want to build fonts from source. * The battle of making fonts of source formats buildable.

The pkg-perl team will again take the opportunity to meet in person - or remotely - for discussing current topics and planning future work. Items for discussion and work are collected at https://wiki.debian.org/Teams/DebianPerlGroup/OpenTasks

This talk will be an introduction to Shoelaces, a tool to automate the bootstrapping of servers. I'll share how we use it to dynamically generate preseed files that can be used along with the Debian-installer. Shoelaces serves iPXE boot scripts, cloud-init configuration, and any other configuration files over HTTP to servers booting over iPXE. It also does a few other things to make it easier to manage your server deployments, such as: * using templates to avoid repetition * automatic install-script selection by using IP, network or PTR of the booting server. * Shoelaces is lightweight. Given that it was coded in Go, it's distributed as a single binary and does not have heavy dependencies. It also does not use any database, making it's installation and usage a bliss. * provides a simple but nice UI to show the current configuration, and history of servers that booted. The target audience for this talk is administrators that have to install baremetal servers on a regular basis and are looking forward to automate this task.

Many of us started work in Free Software from a position of indifference, if not outright hostility, to the challenges and rewards of "management", whatever that is. For better or worse this indifference doesn't usually last long, as any project involving more than one person soon discovers that it's not just about cranking out code, but about dealing with conflict, motivating volunteers, and balancing differing goals and priorities. This session will be for sharing best practices, lessons learned, and asking questions. Whether you are the Debian project leader, or coordinating with one other developer on a project with 3 users, this BoF welcomes your ideas and your questions. Notes: infinote://gobby.debian.org/debconf19/bof/you-are-manager

All packages in Ubuntu main, and a few Universe, and the corresponding Debian packages, have been imported into Launchpad git repositories. I'd like to show how these are structured so that people can perform these tasks: - add fixes on top (mostly for SRUs [Stable Release Update]s) - contribute to the release in development - how to quickly check what is the Ubuntu Delta wrt Debian - how to perform merges from Debian, i.e., apply the Ubuntu delta on top of the Debian package

Será demonstrado como o GIT e o GBP (Git Build Package) podem ser utilizados para ajudar no controle de versão durante o processo empacotamento de software no Debian.

As on every DebConf the members of the Debian Med team will meet to discuss future development. There will be a short introduction into Debian Med for newcomers.

In this BOF, we will discuss about how is making arts, music and design on free software. What programs are great, how the foss community deal with designers and artists and show some good examples of what is being created.

Let's talk about use cases for building Debian based deployments using the Molior Debian Build System! https://github.com/molior-dbs/molior

Currently Salsa admin and the Salsa-CI team are two separate groups with no overlap. In this session we could discuss how these teams could collaborate in the future, and in general check how well aligned the interests and goals of these teams are. Salsa as git hosting and Salsa-CI as quality control is a great combo that helps a lot of Debian Developers to save time on change managements / regression testing and thus empowers them to do more truly productive work to help Debian.

At the beginning of the Buster cycle, it was unclear whether Debian Live still had a future. Nearly 2 years later, Debian Live is very much alive! In this session, we'll briefly cover a few topics: - A retrospective of the the buster cycle - Revisit whether we still need so many i386 flavours - How to approach QA tasks in the future - Deprecating vmdebootstrap and maintenance - Future build work - General feedback / any other business

An opportunity to meet the members of the Debian Technical Committee who are in attendance at Debconf, hear the status of open issues, understand the nature of the TC’s work, and discuss pending and future issues with the committee. URLs: https://www.debian.org/devel/tech-ctte

Discussion about RISC-V architecture in Debian. - Next steps going forward.

As my wedding approached, my longstanding desire to learn about music and about DJing became a driving need. So, what's the big deal? Go download DJ software and get with the mix. There's even DJ software in Debian. I'm blind and for the work I'd like to do all the software is visual. So I decided to write my own. This is a case study about how Debian and the free software we curate made it possible for me as someone who sees the world differently to find art and achieve a dream. It's more about how free software opens opportunities to view the world differently than the technical challenges I faced, although I'll throw in some code for good measure. It's a story of opportunities realized but also challenges relating to people who think differently. It's a story of art and the power of understanding how the world works.

In the embedded product development, developers carefully need to select the base system and development tools from various Linux distributions and open source software. Selecting appropriate distro and tools is necessary for efficient product development. Especially in the industrial world, 10+ years maintenance is required, including security fixes, reproducible builds, and continuous system updates. Debian has been applied to industrial products because of its affinity with the demands in such developments. Kazuhiro will introduce several approaches for embedded product development, which are based on Debian sources, binaries, and tools. He also shows the basic usage and preferred use cases of each approach, including the relations between important features in Debian.

It is 15 years of Debian Women. How far have we come? Is Debian (and Free Software) gender diverse enough? What are we doing to improve diversity? Are these steps effective/sufficient? If not, where are we going wrong? What more can we do? These are some of the questions which we will explore to find answers/solutions/actions. This will be more of a discussion, and not a talk. Anyone who is concerned about gender ratios in the Debian community, come join the discussion.

Want to know what the Outreach team does? Are you interested in getting involved in one of the mentorship programs Debian participates in? Do you have ideas about what we can do in the future, to do a better, more exciting job? Then come to the Outreach BoF, to discuss what the team has been up to over the past year and where the future of Debian outreach lies. This session is for past, current, and future mentors; past and potential participants in internship programs; and anyone who wants to talk about our participation in programs like Google Summer of Code and Outreachy.

Discussion session for the Debian website team: - new homepage - new download area - removing dead content, or looking for new maintainers - slimming things down Potentially many more topics, could be a busy session!

During this talk we aim to present current progress on RISC-V architecture in Debian.

We walked through the information age towards the fourth industrial revolution and are now facing what has been described as "the age of surveillance capitalism". Liberty is again being threatened and computer software pervades every single act of our daily routines. Even our sense of self is at stake when e-book readers and TVs can gather more information about our feelings, emotions and reactions than ourselves. Who are we anyhow? In a somewhat marginal, far-from-the-mainstream trend, programmers and enthusiasts work on a different direction, one that is closer to what the roots of this digital revolution were about. Thanks to these warriors we are now able to run a 100% free computer system on our homes, one that does not subjugate us, a freedom respecting, collectively developed and transparent environment with which we can do our computing our way, with no big brother to pull our strings and rob us from our will. In this talk / concert we will present how far FOSS has come as general purpose workbench and discuss about how a musician, artist and engineer struggled for two decades in the search of a platform to perform his craft that doesn't compromise his freedom and ethics. Even though we still face many challenges ahead (fragmentation and lack of hardware support to name a couple), like an empty canvas to a painter, a Debian-powered computer in 2019 allows a sound designer to create textures, rhythms and ambiences, to bend time and space, to manipulate reality. This talk/performance is targeted to users and developers interested in helping to pave the way for GNU/Linux as a creators' platform. Art is freedom, music is freedom, our hearing capabilities and sensibility to sound is what kept us alive as a species in our caves at night, hundreds of thousands of years ago, and it is time to fight again.

Meetup for folks interested in Xen on Debian. From my point of view as a maintainer, the Debian Xen packages are in reasonable shape in buster. Work is needed for bullseye. Security updates are hard work. This is an opportunity for users and contributors to give feedback, and help out, with Xen on Debian and also feed back to Xen on upstream. (Ian is a maintainer of Xen in Debian and works on the upstream Xen Project for Citrix.)

Assembléia Geral Extraordinária do ICTL. Se você não é associad@ ao ICTL não tem problema aparecer. Nós temos umas questões burocráticas pra discutir, e isso tende a ser chato, mas se conseguirmos vencer essa pauta rápido, podemos trocar idéias sobre o ICTL em geral.

A cautionary tale for these times of democracy in crisis - the personal and political fuse to explore one of the most dramatic periods in Brazilian history. Combining unprecedented access to leaders past and present, including Presidents Dilma Rousseff and Lula da Silva, with accounts of her own family's complex past, filmmaker Petra Costa (ELENA) witnesses their rise and fall and the tragically polarized nation that remains. Official trailer: https://www.youtube.com/watch?v=xLe24M_PB5E The movie screening will be in room Antonina, on the 12th floor of the hotel.

Movement activism often focuses on economic decisions. Buy this ethically made product; don't buy that one made by a company that funds terrible things. In free software, we encourage people to boycott (for example) Microsoft, and to instead support companies who sell machines with GNU/Linux. It's an intuitive idea that, as individuals wanting to make the world better, we should use our willingness to spend or not spend money to reward those who do right and punish those who do wrong. Throughout history, this has sometimes been effective. But how effective? Can it be dangerous? There is a danger of *reducing* activism and social change strategy to these decisions. We see this in the free software movement, when some activist campaigns aimed at persuading people to stop using proprietary software are met with responses like, "If you don't like Apple products, just don't buy them. Help make free products that are better than theirs. Why campaign against them?" or "How can you criticize proprietary software but still drive a car that has it?" As an advocate, have you ever heard these responses, or felt like a hypocrite, or stumbled trying to explain to others why the situation is more complicated than "just don't buy it"? How do we form a holistic movement strategy for advancing user freedom that takes consumer activism as far as possible, without overprioritizing it? How does or doesn't Debian fit into the picture? I hope those interested in effectively fighting for user freedom will join me as I share thoughts formed from 16 years of experience working on the Free Software Foundation's advocacy efforts, against the backdrop of some highlights from the history of other social movements.

An internet kiosk is a special use case. A single computer is shared by an indefinite number of users. Lots of security concerns arise. In Asia and elsewhere multiple non-latin languages have to be supported. We decided to create a custom lightweight distribution, Meilix and a generator web app that allows you to preconfigure an ISO with the wallpaper and desktop settings in place. Here in India I study as an undergraduate electrical engineering student but I was thrilled to work with a grant of FOSSASIA on the Meilix (“Mei” means roughly “nice”) project for several months. In this talk, we will get into the challenge to build our own customized Kiosk. You will also understand the workflow of the project and the best use of Travis CI and Github infrastructure. We use Flask framework to design a basic webapp named Meilix-Generator for the user to go there and provide their configuration and build their distro. We deploy the webapp on Heroku. We took the most common approach to a project which gives a GUI to customize our own Linux Distro with LXQT as a desktop environment, which is implemented first time ever. I will explain what steps we take to make internet access more inclusive and exciting for everyone and what steps we undertake to add conversational interface features.

This talk aims to share how the Cubans started using Debian GNU/Linux and how was the adoption of the OS. Also we will cover some aspects of our LUG, the activities we are doing spreading the word about Debian GNU/Linux and Free Software in general. Finally we will show you examples of software we are developing to solve some of our local needs, aiming to exchange experiences and get help and advice for creating a better local community in Cuba.

DebConf 2020 has been scheduled to take place in Israel. We need to have an open discussion about the political message that this project decision sends, and how it affects the people within our community who support the BDS (Boycott, Disinvestment, Sanctions) movement against the policies of the Israeli Government, all the while reiterating our support to the individual members of the local organizing team, who are our peers in Debian. A campaign has been brewing for a few weeks, calling on the DebConf Committee and the Debian Community to rescind the decision of holding the project's yearly conference in Israel. We hold this session to have an open, small scale conversation, hopefully with members from the DebConf 2020 team, members of the DebConf Committee, supporters of the boycott movement, and other stakeholders in the Debian community, to try to come up with ideas how to move forward.

This session will describe how the speaker went about building a personal home automation setup that tried to avoid the privacy and security concerns usually seen in these setups. A whirlwind tour will be provided covering building your own IoT hardware, setting up internal systems to remove reliance on a working internet connection and designing to cope with less technical home occupants. Unexpected bonuses will also be discussed, as well as various compromises that have been made in the speaker's setup that could be improved. This talk will touch upon a number of low level details, but due to time constraints not attempt to go into complete depth on each of them. Pointers will be provided for those who wish to read up on the full details in order to implement their own setup.

Lightning Talks! They're short, they're possibly sweet, they're a veritable variety pack of topics in a short amount of time!

The Debian System Administration team will provide a status update on its activities since DebConf18 and will discuss objectives for the following year.

Session to discuss possible locations for DebConf21!

We have the fine tradition of having DebConf N share their experiences with DebConf N+1. The DebConf committee will also be present and we invite a core member of every team to come around and help with the knowledge transfer. The session will begin with a DebConf20 presentation.

It's time to finish the show! Let's say goodbye to Curitiba.