Gunnar Wolf

An opportunity to meet the members of the Debian Technical Committee who are in attendance at DebConf, hear the status of open issues, and discuss pending and future issues.

Other people: Matthew Vernon Helmut Grohne Sean Whitton Christoph Berg Elana Hashman Niko Tyni

The Debian project is one of the heaviest users of the OpenPGP Web-of-Trust (WoT): Not only we use OpenPGP keys as one of the main ways to identify to different parts of our infrastructure (mainly, package uploads and GR voting), we also give a lot of weight to the relations, the connectedness, the social graph that the WoT draws for us. The WoT is, however, under attack from many different flanks. Protocol vulnerabilities, a threat model not compatible with current regulations (GDPR, I'm looking at you), and an Internet much less naïve and forgiving than the one that existed in the early 1990s force us to reconsider how the WoT works and how we use it. I am doing my PhD work following this line of thought, and I want to share with the project my work so far. The work is quite far from finished (and I want to use your input to help me fill in the blanks).

How is DebConf organization going, in general, across years? What should we be investing time and energy in? This is the DebConf committee's annual in-person meeting at DebConf.

Other people: Stefano Rivera Antonio Terceiro Daniel Lange Bernelle Verster

One of DebConf’s recurring activities is the Key Signing Party. It helps Debian strengthen and expand its web of trust. This session will: - Explain how keysigning is done in a DebConf setting - Validate the SHA256 hash of the KSP coordination document - Explain how to participate to people who did not send their keys in time Once DebConf is closer, we will link from this talk proposal to the relevant documents you should have in hand for the keysigning party.

Other people: Jonathan McDowell

Like every year, during DebConf21 the Debian Technical Committee wishes to share with you what we are up to. First of all, of course, we will go over the issues that have been brought to us. But, following up from last year's presentation, we will continue presenting our ideas in how to reshape or reimagine the Technical Committee in a way it works better and is more useful for the project.

Other people: Sean Whitton Elana Hashman David Bremner Christoph Berg Niko Tyni Margarita Manterola Simon McVittie

By now, we should have conquered the hearts, minds, and bandwidths of Debian contributors all over the world. Traditionally, this is the right spot to present some statistics, give us all a final group hug. See you next year!

Other people: Anisa Stefano Rivera Antonio Terceiro Jonathan Carter Margarita Manterola Nattie Mayer-Hutchings Praveen Arimbrathodiyil Nicolas Dandrimont Andrew Martin Adrian Cater

What does the Technical Committee do? How can it work better for Debian? This year, we will do a short recap of our activities last year, but the main focus we want to give to this BoF is how to best move forward and reshape the Technical Committee in a way that works better, and thus is more useful for Debian.

Other people: Sean Whitton David Bremner Elana Hashman Simon McVittie Margarita Manterola Philip Hands Niko Tyni

La familia de computadoras Raspberry Pi ya no debe resultar nueva para ninguno de nosotros. Desde su aparición en 2012 han vendido decenas de millones de unidades. Del mercado educativo, espacio original para el cual fueron diseñadas, saltaron a todo tipo de proyectos electrónicos y de _semiembebidos_ por su versatilidad y bajo precio. No es aventurado decir que estas humildes computadoras definieron un segmento completo de mercado. Debian es una de las primeras distribuciones Linux en tener buen soporte para la arquitectura ARM, a la cual pertenecen los procesadores de las Raspberry. Sin embargo, hasta hace poco, prácticamente nadie –ni siquiera nosotros los debianeros de corazón– podía recomendar el uso de Debian directamente para estas maquinitas. Desde un inicio, las Raspberry venían con una distribución derivada de Debian, pero con características muy propias, llamada _Raspbian_. Hace un par de años, Michael Stapelberg inició un proyecto para generar imágenes de Debian capaces de ser utilizadas en las Raspberry Pi. Después de un tiempo, yo retomé ese proyecto. En esta charla quiero presentarles lo que aquí describí, explicar las razones detrás de esta realidad, y presentarles el trabajo que hemos logrado este año para que puedan utilizar directamente el Debian que aman y en el que confían en todos sus proyectos Raspberry!

Welcome to DebConf20! Feel at home, grab a drink and snacks, and feel welcome to join us in the largest auditorium we have ever had in the world. We sincerely hope you are not jetlagged and that the facilities are conveniently located. We will make our best effort for you to feel home. Along with all the usual chores, doing the dishes, taking care of the kids, and so on. This session will... Well, basically serve the social purpose of saying "hello and welcome", and kickstarting our exciting week of online activities. We know that it's not the DebConf we usually have every year, but we are striving to provide the closest possible experience to it!

Other people: Judit Foglszinger Anisa Stefano Rivera Antonio Terceiro Daniel Lenharo de Souza Luna Jernberg Sruthi Chandran Nattie Mayer-Hutchings

Session to discuss possible locations for DebConf21!

An opportunity to meet the members of the Debian Technical Committee who are in attendance at Debconf, hear the status of open issues, understand the nature of the TC’s work, and discuss pending and future issues with the committee. URLs: https://www.debian.org/devel/tech-ctte

Other people: David Bremner Tollef Fog Heen Margarita Manterola

The impact of the Raspberry Pi series of computers cannot be downplayed: This tiny computer brings back the concept of computer as a environment for learning electronics, as a toy, as a tool for building other tools, as a prototyping aid... In a most convenient form factor, and for a low sweet price. The Raspberry series helped define a whole segment in computing, and nowadays tens of similar computers with different characteristics are available. However, given the Raspberries require a non-free firmware blob to boot... There has been no support for running The Universal OS on it. Most Raspberries in the wild run Raspbian, a Debian derivative that deviates quite a bit more than what we would like. We have dirtied our hands with the non-free package ``raspi3-firmware'', have adopted some build infrastructure, and by the time this talk is presented, should have built fully functional images for all of the families in the Raspberryscape! I want to share in this talk the process and status, and help increase our work's visibility!

A short update from the Debian Keyring maintainers about the current state of the keyring, as well as an opportunity for project members to ask any queries they might have.

Other people: Jonathan McDowell John Sullivan

Where will DebConf20 be held? It's your opportunity to suggest the best possible place in the world: Your own city! The presented bids are: - India (specific location not yet decided): [Slideshow (ODP)](https://salsa.debian.org/debconf-team/public/data/misc/blob/master/talks/dc18/dc20_in_your_city/debConfInIndiaBid2018NewVersion.odp "Slideshow (ODP)") - Israel (Haifa): [Slideshow (ODP)](https://salsa.debian.org/debconf-team/public/data/misc/blob/master/talks/dc18/dc20_in_your_city/bid-israel-2020.odp "Slideshow (ODP)"), [Slideshow (PDF)](https://salsa.debian.org/debconf-team/public/data/misc/blob/master/talks/dc18/dc20_in_your_city/bid-israel-2020.pdf "Slideshow (PDF)") - Portugal (Lisbon): [Slideshow (ODP)](https://salsa.debian.org/debconf-team/public/data/misc/blob/master/talks/dc18/dc20_in_your_city/SlideDebConf20Portugal.odp "Slideshow (ODP)") - Slovakia (Bratislava): [Video (webm)](https://salsa.debian.org/debconf-team/public/data/misc/blob/master/talks/dc18/dc20_in_your_city/debconf20-in-bratislava.webm "Video (webm)"), [Subtitles](https://salsa.debian.org/debconf-team/public/data/misc/blob/master/talks/dc18/dc20_in_your_city/debconf20-in-bratislava.srt "Subtitles")

An opportunity to meet the members of the Debian Technical Committee who are in attendance at Debconf, hear the status of open issues, understand the nature of the TC's work, and discuss pending and future issues with the committee. URLs: [https://www.debian.org/devel/tech-ctte](https://www.debian.org/devel/tech-ctte "Technical Committee")

Other people: Tollef Fog Heen David Bremner Philip Hands

One of DebConf’s recurring activities is the Key Signing Party. It helps Debian strengthen and expand its web of trust. This session will: • Explain how keysigning is done in a DebConf setting • Validate the SHA256 hash of the KSP coordination document • Explain how to participate to people who did not send their keys in time Note: It is strongly recommended for interested people to [read the Wiki page on our keysiging party/process](https://wiki.debconf.org/wiki/DebConf18/Keysigning) beforehand!

The Debian project has used a cryptographic keyring for most of its authentication for over twenty years. Recently, we have taken on the study of the social implications that can be learned from how it's shaped, and its inner movements. Our aim is not just to document, but to understand what it means. We don't want to keep it as an academic-only exercise. I want to share some of our insights in this session.

This should also be a opportunity to invite other projects to follow Debian in not only loosely using OpenPGP, but in constituting a true Curated Web-of-Trust keyring. This talk should serve as documentation and motivation towards what this means, exploring which policies we follow, and part of our rationale to it.

DebConf is an itinerant conference. Every year, teams interested in hosting DebConf in their countries / cities present a first version of their bids, to get the attendance excited, to feel how much work is there for them to do, and... just for fun! The DebConf bid is **not** selected during this session, but it is an important and traditional element of our conference. Teams can bid for DebConf at their city for basically the remainder of the year, and the winning location is decided usually towards March.

One of DebConf's recurring activities is the Key Signing Party. It helps Debian strengthen and expand its web of trust. This session will: • Explain how keysigning is done in a DebConf setting • Validate the SHA256 hash of the KSP coordination document • Explain how to participate to people who did not send their keys in time

Introduction to good GnuPG and keysigning practices. Re-verify the continuous keysigning hash, plus a brief introduction to what a Key-Signing Party is and how (and why!) is it being held "continuously" at DebConf16.

Other people: Stefano Rivera

Since the keyring-maint team started aggressively pushing for the retirement of short, obsoleted PGP keys two years ago, I started trying to get the keyring to "spew" some interesting data for us. Besides just showing the evolution on the number of keys conforming to our current best-practices, I started looking at the ugly entanglement of our keyring's graphical representation, and started hypothetizing what caused certain patterns to appear in its evolution. I am currently starting to do some aging and vitality analysis on the signatures and the keys themselves. The work I will be presenting is not likely to be a gamechanger for Debian, but it can be an entertaining way to understand social relationships in our project, and can lead us to understand some important turning points — maybe even forsee and prevent issues from arising at all.