Michael Banck

Nowadays, companies use more and more SaaS providers in the cloud for their operations. However, there can still be a lot value in operating your own infrastructure, be it for compliance reasons or in order to better control your costs. In particular, we think running highly integrated services on bare Debian systems makes it very easy to update and (in case of problems) debug those services. Two examples will be discussed in this session: 1. Building a 3-node highly available PostgreSQL cluster using the Patroni Debian package and 2. Installing a stand-alone PostgreSQL installation fully featured with backups, monitoring and administration tools via the Elephant-Shed packages. Both can be deployed non-interactively via e.g. Ansible. The first uses Debian-specific scripts which allow to configure a 3-way cluster identically on each node based off a template configuration. The second uses extensive integration of systemd services to configure and automate e.g. backups, as well as provisioning capabilities provided by Grafana. Links: https://www.credativ.com/blog/integrating-patroni-debian https://www.credativ.com/blog/debian-integration-patroni-and-vip-manager https://github.com/credativ/ansible-playbook-patroni-debian https://elephant-shed.io

BSI-Grundschutz ist ein Leitfaden für den sicheren Betrieb von IT Systemen, welcher auch einen Baustein für Datenbanken umfasst. Auf der einen Seite wird BSI-Grundschutz sowohl bei der Einführung als auch bei der täglichen Umsetzung oft als unliebsamer administrativen Overhead wahrgenommen. Auf der anderen Seite erlaubt eine Umsetzung mit Augenmaß aber eine deutliche Verbesserung der Sicherheit und der Arbeitsabläufe.

Dieser Vortrag stellt die nötigen Maßnahmen vor, um eine Standard-Installation von PostgreSQL so zu härten, dass sie nach BSI-Grundschutz betrieben werden kann. Außerdem werden Best-Practies sonstiger für den sicheren Betrieb benötigter Konzepte wie Patch-Management, Backup (inkl. Restore-Tests) und Monitoring diskutiert.

PostgreSQL ist für seine Datensicherheit berühmt - die Entwickler legen größten Wert darauf, dass die von ihm verwalteten Nutzerdaten nicht verloren gehen. Trotzdem kann es auf Grund defekter Hardware, Betriebssystem-Fehlern oder (selten aber vorkommend) PostgreSQL-Problemen zu Datenverlust kommen.

Dieser Vortrag bietet eine Übersicht über die Sicherheits-Vorrichtungen von PostgreSQL. Außerdem werden die zur Verfügung stehenden zusätzlichen Möglichkeiten zur Erhöhung der Datensicherheit besprochen. Hierzu gehören die Verwendung von Checksummen, die Validierung von Backups oder der Einsatz von Programmen zur Erkennung von Daten-Inkonsistenzen.

PostgreSQL is the most advanced open-source relational database system and is used in various parts of the Debian infrastructure like dak, wanna-build and salsa. Through the apt.postgresql.org project, every supported major version of PostgreSQL is available for every supported version of Debian. This talk will give an overview about new features, extensions, modules and external projects in the PostgreSQL ecosystem that are available for buster. Also, it will highlight how to easily build a high-available 3-node PostgreSQL cluster on vanilla Debian.

Get-together to discuss if, how, when and where to possibly have a MiniDebconf 2020 in Germany.

Other people: Tobias Frost Holger Levsen Lee Garrett

The pkg-postgresql team packages the core Postgres database server/client, the supporting postgresql-common infrastructure, as well as numerous extensions and 3rd party projects around it. In addition, some of its members also maintain the official Postgres APT repository at apt.postgresql.org. This repository hosts not only the default Postgres version per Debian (and Ubuntu) relase, but also all other upstream supported versions. This talk will present how Postgres works in Debian/Ubuntu, give an overview of the pkg-postgresql team's work, highlight some of the most useful extensions and projects and also briefly present the changes in Postgres between the releases for jessie (9.4) and stretch (9.6), as well as in the upcoming 10 release.

This will be a screening of the film "The Internet's Own Boy: The Story of Aaron Swartz" by Brian Knappenberger. See https://en.wikipedia.org/wiki/The_Internet%27s_Own_Boy and http://www.imdb.com/title/tt3268458/ for more information.

Discussing about future fundraising ideas for DebConf18

Other people: Yao Wei

Debichem is a Debian pure blend that focuses on chemistry-related software. While it was easy to package all FLOSS projects in the field back in the early 2000s when Debichem started, nowadays the number of upstream projects has increased considerably while the number of project members as stayed consistently low over the years. This talk will give an overview of what's new for Debichem in stretch, and what the plans for buster are.

Working session to kick-off fundraising for DebConf17 and possibly early advise for DebConf18 proposals.