Thomas Goirand

Debian is ideally suited to run in cloud environments and the cloud team has been hard at work ensuring that our users get the best possible experience. The team would like to invite you to learn more about what we've been up to, how we can help you, and how you can contribute.

Other people: Noah Meyerhans Bastian Blank

A lot of work has been done for packaging Puppet 6 in Bullseye, but unfortunately, it didn't fully make it, as a major component (jruby) couldn't be packaged. This BoF is to get the Puppet packaging team together, and discuss the way forward for Puppet in Debian.

Since Buster, a lot of features have been implemented in OCI (OpenStack Cluster Installer) which now makes it ready for deploying full compute clouds production. This presentation will give the audience an overview of how it's been made, and what can be done with OCI.

This is the usual cloud image BoF, where the Debian cloud team discuss the maintenance of the Debian cloud images. The Debian cloud team, indeed, maintains official Debian cloud images for Azure, AWS, GCE and OpenStack/Generic, through a unified build system.

Like last year, Infomaniak is sponsoring 30 yubikeys for DDs, DMs and others. Nearly all have been already assigned, but if you are a DD, then you can still apply for one (by writing to zigo @ d.o, signed with your gpg key, using your Debian address), but please don't do it in Curitiba, it will be too late. Join me in a session where I'll teach how to use your Yubikey. You will learn: - How to generate subkeys and what they are for. - How to store the Auth, Sign and Encrypt subkeys in your yubikey. - How to ssh using a Yubikey (using the ssh key derived from your Auth subkey). - How to use KeepassXC as password store, with the password vault encrypted with the HMAC store on your Yubikey. This session will *not* cover using the Yubikey as 2FA device.

After 4 releases of Debian with OpenStack, we now have Buster that is shipped with the first OpenStack installer. This installer has been written from scratch, and represent 1 year of development. It was very shortly presented last year in Debconf Taiwan. As it is now production ready, this is now time to show the world how it works. This presentation will go over details of how to use OCI, and how it can be used to deploy OpenStack under Debian. Details about OCI can be read over here: https://salsa.debian.org/openstack-team/debian/openstack-cluster-installer

It looks like a bunch of us are interested in writing a new Debian installer that would live on a live distribution, rather than using Busybox as it is today. Let's talk about how we can do it.

As Infomaniak has offered 30 yubikeys to DDs in Debconf, this workshop will teach how to set it up, so you can be up and running to upload packages signed with your GPG subkeys in the Yubikey. This will also help to avoid some of the traps.

After 7 years of OpenStack existence, it's time to step back, and understand why using, and operating it is more important than ever. In this talk, we'll cover why running your workload on the cloud is becoming increasingly crucial because of the costs and agility of the cloud empowers its users. We'll see why running on the cloud, rather than on legacy dedicated servers, gives more freedom than ever. Then we'll see why using OpenStack over proprietary solutions matters for your freedom. Finally, we'll see how choosing Debian to run OpenStack makes a real difference in avoiding vendor lock-in.

Discussion session for the Debian Cloud team: - status on official images - tools for building our images - etc…

Other people: Steve McIntyre Tomasz Rybak

Many vendors proudly display logos of distributions for which they have certification. For example, Red Hat certifies that their operating system works on some Supermicro servers, and Supermicro displays a Red Hat logo on these servers pages showing that they do work with Red Hat X. This type of certification is very important, because some of the most corporate companies mandate an HCL (hardware compatibility list) before selecting an operating system. This puts Debian completely out of the game, as Debian has so far failed to have a certification program, even though it was a clear request from some hardware makers. In this BoF, we'll try to see how to address this situation, and provide a way to certify hardware.

In this talk, we will review what happened in the OpenStack world over the last year: new projects that appeared in Debian (Congress, Aodh, Gnocchi, Magnum, Mistral, Senlin and Zaqar), and improvements in the existing projects (walk through important bits of the release notes), and how Debian became the base for the packaging of commercial products: Mirantis OpenStack is now fully based on the Debian packaging of OpenStack, and puppet-openstack is now fully compatible with Debian. Then, in a 2nd part of this talk, we'll cover a broader topic: we'll see how a CI/CD and automation for writing packages (and more specifically Python modules) could help Debian developers at large, using either Jenkins, or Gerrit, Nodepool and Zuul, running an OpenStack deployment to build packages. We'll see how Mirantis implemented its CI (and what it can do), and how this is currently done in upstream OpenStack CI/CD infrastructure, and how we could deploy it for Debian, inside our own infrastructure.