Jean-Marie Verdun

During this short talk, I will introduce CADCloud an online platform tightly integrated with FreeCAD and designed to manage version tracking and user collaborations in CAD. CADCloud aims to create a reference database of 3D models generated by FreeCAD users and allow them to easily handle their lifecycle and sharing.

CADCloud is new online platform designed under an MIT licence, and hosted by the Open Compute Project. It aims to ease collaboration between CAD user around the world, share models and display them directly into a web browser. Full lifecycle management is under implementation. The platform leverage FreeCAD open file format, and is tightly integrated into it within version 0.19 through the Cloud workbench. The source code is free, open and can be self hosted.

During that presentation I will run a quick demo of the OSFCI infrastructure which is developed by HPE to validate and build Open Source Firmware stack on Proliant server. I will introduce an overview at how the code works, and how to get involve, and make scale the platform. This project is available on github. https://github.com/hewlettpackard/osfci

OSFCI is an interactive testing platform for Open Source Firmware. From a single web browser, a firmware developer can recompile ROM at BMC and System level, load them to a real system, and execute an interactive session to validate firmware behavior on real hardware. The goal of this infrastructure is to provide end to end validation automation for firmware development, easing adoption for open source firmware at scale.

Other people: Marek Kasiewicz

We will introduce during this talk the work that we perform to automatize firmware testing based on linuxboot firmware project. The intend is to analyze the various challenges faced during CI implementation including node bricking management, firmware upload to testing nodes as well as testing result analysis. Our work is performed on Open Compute Hardware.

We take a look at differences observed in firmware security posture as mapped by CHIPSEC on a custom Winterfell node AMI based firmware vs. LinuxBoot w/ u-root. Using the findings as back-light, we also give an introduction to: a) tools for conducting firmware security research - Flashrom, Chipsec, Dediprog, Winterfell standalone node and a few more. b) alternatives to manufacturer firmware like LinuxBoot w/ u-root c) also demonstrating web-based: i) in-depth analysis for submitted firmware images - It's " brain " is growing at a healthy/steady clip of firmware already analyzed. There is also a cmdline JSON based API for it that will be made available during the talk. ii) Winterfell access with bios emulation - service is now in alpha with full shell access within a subset of u-root community with following functions all on point ( these will eventually be available as API ) : - Get SPI Flash emulator status - Stop emulator - Start emulator (the firmware parameter is the firmware the user wants to be tested) - Start the server through hard power on - Stop the server through hard power off

Other people: Arun Darlie Koshy