Open Source Summit + AI_dev Japan 2024

The Linux kernel is at the core of any Linux system; the performance and capabilities of the kernel will, in the end, place an upper bound on what the system as a whole can do. This talk will review recent events in the kernel development community, discuss the current state of the kernel and the challenges it faces, and look forward to how the kernel may address those challenges. Attendees of any technical ability should gain a better understanding of how the kernel got to its current state and what can be expected in the near future.

The announcement that the kernel LTS period would be two years came as a shock to embedded Linux developers (especially in Japan). However, it was also the moment that they had been relying on the kernel maintainers.Hirotaka wondered what we could do for the maintainers who worked so hard to maintain the kernel LTS, and started "Linux Kernel LTS Study Group" in Japan.A number of issues came up, including those related to kernel testing, the product development period and LTS period, and upgrading kernel versions. In this session, he will share the summary of discussions with in-house kernel developers working in Japanese companies and some examples of Open Source projects that can help you solve them, and encourage what other in-house kernel developers or just user can do as a first step for the kernel community.

Many products and services are dependent on the Linux Kernel. Because of this the Linux Kernel has to be tested on many different hardware to ensure the stability and reliability of these products or services, this is why KernelCI needs more collaboration both from users and companies. The Linux Kernel upstream community has requested more contributions from companies and users, in particular on the testing ecosystem, such as adding and reporting test results. By understanding corporate usage, the community can more easily provide support and collaborate effectively. KernelCI is one of the current main Kernel testing frameworks and is helping ensure the quality, stability and long-term maintenance of the Linux kernel. As a member of the KernelCI Technical Steering Committee (TSC), I will give details on KernelCI developments and directions. I will talk about current KernelCI new projects. I will talk about KCI tool usage and how it is possible to test own patches with the current KernelCI API and running the test privately. This session will provide useful information for people interested in adopting KernelCI and encourage them to contribute to KernelCI.

CXL memory offers the promise of increased memory capacity, which addressing the limitations of conventional DDR DRAM, and also features a memory pool that allows users to dynamically adjust memory allocation based on workload needs. The Linux community has been rapidly developing many CXL features. Additionally, users can try a CXL memory environment with QEMU emulation without actual CXL hardware. This allows users to experiment with CXL memory features in an emulated environment. However, there are some difficulties and considerations when using CXL memory. For example, you cannot use CXL (2.0 or later) memory devices without configuring them using the "cxl create-region" command. Moreover, if you want to utilize memory interleave to achieve optimal performance, you need to understand the hardware topology, including the CXL switch, and reconfigure the region for CXL volatile memory at every boot time. While development is ongoing, these features may be improved in the future. However, there are still many difficulties for users at present. This talk will cover how to use CXL memory and its emulation.

Recent security updates to Linux, such as the new Systemd Unified Kernel Image[1] rely on the discrete or firmware integrated TPM (Trusted Platform Module) to verify boot and release secrets securely. However, there are many known attacks against the TPM chip itself. We will discuss the newly upstreamed Linux Kernel TPM security patches[2], which not only provide a basis for securely communicating with the TPM but also provide a novel defences against a wide variety of TPM based attacks by using a unique (to Linux) null key scheme. This talk will cover what TPM based attacks are (including interposer attacks), how the Trusted Computing Group expects you to tell you're talking to a real TPM and how you can communicate with it securely and use its policy statements to govern key use and release. We will then move on to how the new Linux Kernel patches extend this and can be leveraged to validate the TPM on every boot and continually monitoring it for any TPM interposer substitutions in real time. [1] https://github.com/uapi-group/specifications/blob/main/specs/unified_kernel_image.md [2] https://lore.kernel.org/all/20240429202811.13643-1-James.Bottomley@HansenPartnership.com/

bpftrace is a popular and powerful dynamic tracer for Linux systems. In the vast majority of uses cases, bpftrace does its job quickly, efficiently, and accurately. However with the rapid growth of users, use cases, and features, the bpftrace community has started to feel (technical) growing pains. In particular, we've started to uncover various reliability issues. In this talk, we will cover what is already done as well as what is currently broken and how we will systematically fix and prevent these issues from re-occuring. Because bpftrace sits at the intersection of operating systems, compilers, and observability, we have the fortunate advantage of being able to absorb techniques and tricks from these fairly different disciplines. We hope that some of the knowledge we share will be both interesting as well practical to attendees. Audience participation is highly welcome. In particular, we are quite interested in receiving feedback in the form of bug reports, feature requests, complaints, etc.

Since its introduction 10 years ago, eBPF has steadily gain grounds in networking, tracing, observability, and security applications. But a great technology cannot not thrive on the technical part alone, the people part matters, too. This session hopes to bring eBPF user, developers, and enthusiasts together to exchange novel ideas, discuss best practices, share pain points, and most importantly, collaborate and grow together as a community.