Open Source Summit Europe 2025: Full Schedule

25-27, August 2025
Amsterdam, Netherlands
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time, CEST (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

arrow_back View All Dates

09:00 CEST

Linux Power Management Features & Their Interactions, Part 2 - Théo Lebrun, Bootlin

Wednesday August 27, 2025 09:00 - 09:40 CEST

Elicium 2

Over time, many features have been introduced into the Linux kernel to tackle various Power Management related needs. Most features rely upon the device model to provide its features, making each feature in isolation have rather understandable behavior and straight forward APIs. Complexity can creep in however when those various features interact with each other.

Breadths is so wide that it takes two talk to cover features. This is a continuation talk expanding on last year's.

Topics targeted are system-wide suspend wakeup sources, device & generic power domains, the concept of latency tolerance (QoS), async PM and others.

Speakers

Théo Lebrun

Embedded Linux engineer & trainer, Bootlin

Théo joined Bootlin as an intern, studying the potential applications for the PipeWire ecosystem to embedded topics. He then went onto kernel work: deep suspend-to-RAM support for a TI automotive SoC and upstreaming of base platform support for Mobileye hardware. Théo also acts... Read More →

Wednesday August 27, 2025 09:00 - 09:40 CEST
Elicium 2

Embedded Linux Conference

Audience Experience Level Intermediate

09:00 CEST

Software ISP FOSS Support for MIPI Cameras - Hans de Goede, Red Hat & Bryan O'Donoghue, Linaro

Wednesday August 27, 2025 09:00 - 09:40 CEST

D201

Many recent Windows (on ARM and x86) laptops have replaced the standard UVC USB camera module with a raw MIPI camera-sensor using a CSI receiver and ISP in the CPU to process the raw data into an image (and on smartphones this has been the norm for ages).

Supporting these cameras under Linux is an ongoing challenge. At FOSDEM 2024 a solution using a software ISP running on the CPU was presented as a solution to get these cameras to work with a fully opensource stack.

This talk will look at where support for MIPI cameras using the software ISP is at now, 1.5 years later, mainly focusing on the ubiquitous x86 laptops using cameras connected to Intel's IPU6.

Depending on ongoing work this will include a demo of recent developments such as running the software ISP on the GPU and the first FOSS color-corrected images from an IPU6 attached sensor with the color calibration done using all FOSS tools.

Speakers

Hans de Goede

Principal Software Engineer, Red Hat

Hans de Goede is a FOSS developer and enthusiast with 20 years of experience. He is a maintainer for the kernel’s x86 platform drivers subsystem.

Bryan O'Donoghue

Software Engineer, Linaro

Embedded developer, Dublin/Europe

Wednesday August 27, 2025 09:00 - 09:40 CEST
D201

Embedded Linux Conference

Audience Experience Level Intermediate

09:00 CEST

Zephyr Workbench: Open Source Zephyr Extension for VSCode - Roy Jamil, AC6

Wednesday August 27, 2025 09:00 - 09:40 CEST

D202

Zephyr Workbench is an open source Visual Studio Code (VSCode) extension. The purpose is to provide a "few-clicks" platform to manage Zephyr components. It is designed to simplify and accelerate the workflow for building Zephyr applications by automating the setup process (especially on Windows), importing Zephyr SDK, and managing West workspaces, thereby dramatically reducing the barrier to entry for developers of all levels. Whether you’re launching your first Zephyr project or working on a sophisticated multi-board application, this extension provides intuitive configuration wizards and seamless integration with built'in debugging tools.

Furthermore, Zephyr Workbench ensures reproducible builds and rapid turnaround times while effectively managing the projects. Its integrated one-click flashing and debugging feature that supports most West runners, including OpenOCD, J-Link, PyOCD, STLink, and Linkserver. The tool also offers a visual interface that executes West commands, streamlining the process of managing Zephyr projects from creation to deployment, while also providing easy access to memory reports and configuration tools, SPDX and more.

Speakers

roy.jamil@ac6.fr

Training Engineer, AC6

Roy Jamil, with a PhD in the field of Asymmetric Multiprocessing (AMP) and real-time embedded systems, has over six years of experience as a Training Engineer at Ac6. He trains hundreds of engineers annually. His experience includes programming, Linux, drivers, Yocto, and various... Read More →

Wednesday August 27, 2025 09:00 - 09:40 CEST
D202

Zephyr Developer Summit

Audience Experience Level Intermediate

09:50 CEST

A Journey To the Secure World of OPTEE From the Non-secure World of Linux - Manorit Chawdhry & Keerthy Jagadeesh, Texas Instruments

Wednesday August 27, 2025 09:50 - 10:30 CEST

Elicium 2

OP-TEE is a Trusted Execution Environment (TEE) that serves as a companion to a non-secure Linux kernel running on an Arm processor. It operates on the secure side of ARM TrustZone and is one of several open-source operating systems compatible with it.

In this talk, we will explore

- Basics of TrustZone and basic introduction of OP-TEE

- Different types of trusted applications(TA) that OP-TEE provides

- Example usecases of TAs and which one to use for different usecases.

- Interaction of TAs ( and optee in general ) with the Linux

The talk will explain all this using an example application that allows writing and reading to/from the one-time programmable(OTP) efuses on Texas Instruments K3 platforms.

Speakers

Manorit Chawdhry

Software Engineer, Texas Instruments

Manorit Chawdhry is a software engineer working at Texas Instruments in the Linux Core Product Development Team for Jacinto Processors. He primarily focuses on security for K3 devices and bootloaders.

Keerthy Jagadeesh

Software Applications Engineer, Texas Instruments

Keerthy Jagadeesh is an ardent Linux developer team of the Texas Instruments and has been an active Linux contributor for the past 10+ years. He has worked on thermal management for TI SoCs, PMIC drivers, low power modes for AM437x SoCs. Maintains TI THERMAL DRIVER & maintains TI... Read More →

Wednesday August 27, 2025 09:50 - 10:30 CEST
Elicium 2

Embedded Linux Conference

Audience Experience Level Intermediate

09:50 CEST

From Raw To Refined: The Evolution of Raw Flash Support in Linux - Miquèl Raynal, Bootlin

Wednesday August 27, 2025 09:50 - 10:30 CEST

Elicium 1

The Memory Technology Device (MTD) subsystem has come a long way from its early days of rudimentary flash support. As embedded systems have evolved, so too has Linux’s ability to manage and interface with raw flash memory devices — from parallel NAND and NOR to modern SPI-based variants.

While SPI NOR initially led the charge, the past few years have seen SPI NAND support in Linux grow rapidly, gaining robustness, better performance, and broader compatibility. But the story doesn't end there. Improvements across the MTD stack continue to shape how developers design with raw flash.

This talk takes a tour through the evolution of raw flash support in Linux: how we got here, what’s new, and what it means for future designs. Whether you’re maintaining legacy NAND systems or eyeing SPI NAND for your next embedded project, we’ll explore the practical impact of recent changes and what to expect next. Raw flashes might not be dead just yet — they’ve just gotten smarter.

Speakers

Miquèl Raynal

Embedded Linux and kernel engineer, Bootlin

Miquèl Raynal joined Bootlin in 2017 as an embedded Linux engineer. He is the

Wednesday August 27, 2025 09:50 - 10:30 CEST
Elicium 1

Embedded Linux Conference

Audience Experience Level Intermediate

09:50 CEST

Zephyr RTOS: Under 1KB of RAM - Parthiban N & Karthikeyan Krishnasamy, Linumiz

Wednesday August 27, 2025 09:50 - 10:30 CEST

D203

On a well-supported hardware platform/SoC, the typical RAM required to run simple applications like hello_world or blinky is around 1.5 KB with the default configurations. SoCs with RAM under 8 KB are common in single-purpose application use cases. With the recent announcement of the world’s smallest microcontroller from TI [1], featuring just 1 KB of SRAM, this coincidentally overlapped with our initial efforts to get the MSPM0 family series into the Zephyr RTOS upstream.

As of today, the smallest RAM where Zephyr can run is 2 KB, supporting UART and GPIO, which utilizes over 90% of the RAM. We often encounter the "FLASH/RAM overflowed by N bytes" error when attempting to get Zephyr working under 1 KB of RAM.

In this talk, we will share the challenges faced while running a useful use case application under 1 KB using Zephyr. Achieving this was made possible thanks to the small footprint of the kernel (i.e., 128 bytes). We will discuss what goes beyond GCC’s -Os and -Oz flags and how we managed to get true multitasking with I2C, SPI, and ADCs running, all while keeping current consumption under 2 µA.

[1]: https://bit.ly/42uSCC6

Speakers

Karthikeyan Krishnasamy

Embedded Software Engineer, Linumiz

Karthikeyan, who has experience in embedded software development over 3 years, works at Linumiz and is principally responsible for board support and driver development for custom boards using Linux and Zephyr RTOS. He is contributor of Zephyr RTOS.

Wednesday August 27, 2025 09:50 - 10:30 CEST
D203

Zephyr Developer Summit

Audience Experience Level Intermediate

11:00 CEST

Modernizing Resource Management in Embedded Systems Using eBPF - Michał Wilczyński, Samsung Electronics

Wednesday August 27, 2025 11:00 - 11:40 CEST

Elicium 2

Embedded systems must carefully balance limited resources. This presentation shows how we used eBPF to improve resource management in TizenOS through two solutions: a new low-memory detection system and a dynamic cache tuner. Our eBPF-based low-memory detector significantly reduced false alarms while identifying problems earlier than traditional approaches. The cache tuner successfully improved I/O performance during disk-heavy workloads while automatically reducing memory pressure. Both solutions use eBPF to collect data with minimal overhead. Ill share implementation details, code examples, and test results to help others apply similar approaches to their embedded systems, contributing reusable patterns that can strengthen resource management across the embedded Linux ecosystem.

Speakers

Michał Wilczyński

Linux Kernel Enginner, Samsung Electronics

Michał Wilczyński is a Linux Kernel Engineer at Samsung, working on Tizen OS—where he gets to hack on the heart of smart devices. Before that, he spent time at Intel building networking drivers for the Linux kernel, and earlier in his career, he worked at Nokia and F5 Networks... Read More →

Wednesday August 27, 2025 11:00 - 11:40 CEST
Elicium 2

Embedded Linux Conference

Audience Experience Level Intermediate

11:00 CEST

The Secret Lives of OSS Designers: Understanding Designers Contributing To OSS - Eriol Fox, Superbloom

Wednesday August 27, 2025 11:00 - 11:40 CEST

G001-002

In October 2023 Superbloom.design published findings from 10-16 week diary studies reported by designers actively working on OSS contributions. The diary studies aim was to investigate some of the key questions relating to design in OSS and fill some of the larger systemic “gaps” of information from non-code contributors’ experiences in OSS. There is existing research about designers in open source, but it has focused on analysis of data on issue trackers or interviews with designers.

This session will cover an overview of the study, some of the key learnings and recommendations from Superbloom Designers on how to improve and progress design in OSS.

Speakers

Eriol Fox

Senior Designer and Researcher, Superbloom

Eriol has been working as a designer for 10+ years working in for-profits and then NGO's and open-source software organisations, working on complex problems like sustainable food systems, peace-building and crisis response technology. Eriol now works at Superbloom design, research... Read More →

Wednesday August 27, 2025 11:00 - 11:40 CEST
G001-002

Equity + Inclusion + Accessibility

Audience Experience Level Intermediate

11:00 CEST

Europe-China Open Source: Digital Sovereignty & Sustained Collaboration - Yehui Wang, Huawei & Daniel Izquierdo Cortázar, Bitergia

Wednesday August 27, 2025 11:00 - 11:40 CEST

G105

In an era of geopolitical shifts, countries seek technological independence, with open source as a key strategy. While US/European developer density is well-known, their interconnections with China’s ecosystem remain under explored. This talk aims at providing an overview based on quantitative data of the evolution of the European and Chinese ecosystems. And give indicators of commonalities across both industries through potentially shared interests.

According to 2024 global open source data released by China's OpenAtom Foundation:

• Europe leads with 3M+ active developers (17.8% YoY growth), while China follows with 2.2M+ (24.05% growth).

• Europe dominates mature domains like OS (3.49M annual contributions) and front-end (9.59M), while China excels in emerging fields such as AI (+29.94% ) and semiconductors (+121.64%).

This is growing a non-exclusive and possibly complementary ecosystem of body of knowledge, tools, and processes where different parties can take advantage of.

This talk will share some thoughts on possible collaboration pathways including: technical synergies (trusted AI and compliance), policy alignments, and community coordination by lowering the barriers.

Speakers

Yehui Wang

Open Source Data Analyst and Governance Expert, Huawei

Yehui Wang currently serves as an open source governance expert at Huawei Open Source Management Center. He also holds a position as a board member in the CHAOSS community and is a co-founder of the OSS-Compass community.

Daniel Izquierdo Cortázar

CEO, Bitergia

Daniel Izquierdo is a researcher and co-founder of Bitergia and currently holding the position of CEO, he is focused on the quality of the data, research of new metrics, analysis and studies of interest for Bitergia customers via data mining and processing. Daniel earned a PhD in... Read More →

Wednesday August 27, 2025 11:00 - 11:40 CEST
G105

OpenGovCon

Audience Experience Level Intermediate

11:00 CEST

The SBOM Era: Leaving No Open Source Project Behind With Osskb.org - Agustin Benito Bethencourt, Toscalix Consulting & Jeronimo Ortiz, SCANOSS

Wednesday August 27, 2025 11:00 - 11:40 CEST

G104

Creating complete, machine-readable SBOMs in standardized formats can be a significant burden for many open source projects, especially for resource-constrained, large integration efforts, projects dealing with complex dependencies, etc. Detection of undeclared dependencies and unwanted snippets is one of their main challenges.

This talk introduces osskb.org, a free of charge service by the Software Transparency Foundation (STF) designed to make accurate open source scanning accessible to all. Integrated as a back-end already by popular open source tools like FOSSology, ORT, FOSSLight, scanoos.py, or Theia, OSSKB.org detects open source files and code snippets against one of the largest open source knowledge bases, providing license information and without compromising user privacy.

The session will address key questions about STF's mission, governance and shareholders, it will walk attendees through the open source technologies behind osskb.org, and will demo how OSSKB.org works integrated with popular compliance tools and with pipelines.

Speakers

Agustin Benito Bethencourt

Independent consultant, Toscalix Consulting

Agustín has guided projects, and organizations throughout the life cycle of OSS based products and services in different markets. He now works as an independent consultant, focused on helping organizations in two ways: applying advanced data analytics to production environments to... Read More →

Jeronimo Ortiz

DevSecOps, SCANOSS

DevSecOps working at SCANOSS, passionate about helping organizations embrace DevOps culture and streamline processes

Wednesday August 27, 2025 11:00 - 11:40 CEST
G104

Operations Management

Audience Experience Level Intermediate

11:00 CEST

Insights Into the Safe Open Source Vehicle Core Project for SDV - Philipp Ahmann, Etas GmbH (BOSCH)

Wednesday August 27, 2025 11:00 - 11:40 CEST

D204

The Safe Open Vehicle Core (S-Core) project represents a collaborative code-first initiative between automotive OEMs and Tier suppliers developing a safety-certifiable middleware stack for high-performance control units in software-defined vehicles.

Since its foundation, the project has focused on documentation, software and testing heavily leveraging automated CI tooling and a docs-as-code approach that utilizes open-source tools including sphinx-needs, Bazel, and PlantUML. This presentation outlines achievements by 30+ contributors from 8+ companies and highlights currently available components.

S-Core aims for compatibility with POSIX-based OSes like Automotive Grade Linux or Zephyr. Complementary to the ELISA project, it focuses on achieving ISO 26262, ASPICE, and ISO 21434 compliance for upper layers beyond the operating system.

The talk details S-Core's roadmap and current achievements, identifies reusable tools for other projects, explains contribution processes for missing stack components, and provides information on its safety certification approach. It concludes with an outlook towards development plans for remaining 2025 and upcoming 2026.

Speakers

Philipp Ahmann

Automotive OSS Process Lead, Etas GmbH (BOSCH)

Philipp Ahmann is a Senior OSS Community Manager at ETAS (a Bosch subsidiary), specializing in safety-critical automotive open source software. With 15+ years' experience in Linux automotive platforms, he has held roles from software engineer to project & line manager.He currently... Read More →

Wednesday August 27, 2025 11:00 - 11:40 CEST
D204

Safety-critical Software

Audience Experience Level Intermediate

11:00 CEST

From Code To Current: Reducing Energy Consumption in Zephyr - Fabian Pflug, On behalf of myself

Wednesday August 27, 2025 11:00 - 11:40 CEST

D203

When designing battery-powered sensor devices, optimizing the power consumption of all components is crucial. While many sensors offer low-power modes, the generic sensor interface in Zephyr may not always utilize these modes efficiently.

In this talk, I will provide an in-depth look at how Zephyr’s Power Management Subsystem works, how to integrate it into your device drivers, and how it can be used to further reduce power consumption.

Using examples such as a battery level sensor and I2C sensors, I will demonstrate various strategies to manage and minimize a sensor's energy usage. There are multiple approaches to integrating power management within the Zephyr operating system, and I will discuss how sensor characteristics influence which method results in longer battery life. Achieving optimal energy efficiency requires careful consideration of several parameters.

Additionally I will compare different MCU's and their influence on Power consumption and how Zepyhr enables a quick and easy way to switch and compare results on different platforms.

Speakers

Fabian Pflug

Embedded Software Developer, On behalf of myself

Starting with optimizing power consumption in high performance systems, and training AI models for medical data Fabian Pflug has long since shifted to working with embedded systems. As a Zephyr contributor and embedded software developer for years he knows some of the caveats that... Read More →

Wednesday August 27, 2025 11:00 - 11:40 CEST
D203

Zephyr Developer Summit

Audience Experience Level Intermediate

11:00 CEST

Zephyr as a Data Source: Tools and Practices - Dmitrii Golovanov, Intel Corporation

Wednesday August 27, 2025 11:00 - 11:40 CEST

D202

Zephyr Twister tool allows to apply data-driven approach in firmware development - with extended test data collection as input for trends visualization, performance impact and root cause analysis, anomaly detection, ML/LLM applications, etc.

This session provides an overview of the recently added Twister features for extended data collection as well as several use cases including Zephyr benchmarks, memory footprint, and test coverage analysis.

It should be interesting and insightful for a wide range of Zephyr practitioners: for vendors dealing with huge amount of test data from their CI pipelines as well as for individual contributors.

Speakers

Dmitrii Golovanov

OS Development Engineer, Intel Corporation

Software Engineer with 30+ years of experience at telecom, networks, and fintech: middleware, data pipelines, ML applications, RTOS, telemetry, QoS.

Wednesday August 27, 2025 11:00 - 11:40 CEST
D202

Zephyr Developer Summit

Audience Experience Level Intermediate

11:55 CEST

U-Boot in the Fast Lane: Developing a Safety Test Framework for Automotive Applications - Neha Francis, Texas Instruments

Wednesday August 27, 2025 11:55 - 12:35 CEST

D201

This session presents a proposal for a Safety Test framework in U-Boot. We use the ongoing integration effort of a Built-In Self Test (BIST) driver as an example and dive into the challenges we face during upstreaming it. In systems with heterogeneous SoCs such as the Texas Instruments (TI) K3 family, U-Boot may be required to bootstrap not just Linux running cores but also other MCUs running safe operating systems. Running safety tests on these cores would mean drivers execute safety diagnostics both triggering HW tests e.g. BIST, POST, JTAG etc. as well as SW e.g. STLs and SDLs prior to booting the MCU. At present, lack of a clear, dedicated subsystem leads to categorizing safety-related drivers under misc/. While this is a convenient approach, it may not be scalable as safety use-cases and applications increase.

The need of such a framework would be inevitable following the increase in safety-driven automotive systems. It could become a useful precursor to enabling ELISA systems and starting safe RTOSes. It would also benefit systems using Linux ecosystems such as RedHat's In-Vehicle Operating System (RHIVOS). A Safety Test uclass framework would be proposed in this session.

Speakers

Neha Francis

Embedded Software Engineer, Texas Instruments

Neha Malcom Francis is a Software Engineer working in Texas Instruments in the Linux Core Product Development Team for Jacinto Processors. Neha mainly works on U-Boot development along with assisting customer requirements.

Wednesday August 27, 2025 11:55 - 12:35 CEST
D201

Embedded Linux Conference

Audience Experience Level Intermediate

11:55 CEST

The Hidden Heroes: How Non-Technical Contributors Find Their Place in Open Source Communities - Miaolai Zhou & Lahari Chowtoori, AWS

Wednesday August 27, 2025 11:55 - 12:35 CEST

G001-002

In the open source world, while code contributions often take the spotlight, the ecosystem thrives on the crucial work of non-technical contributors. Through interviews with over 10 seasoned open source professionals in documentation, program management, and community building, we explore the vital role of non-technical contributors in open source ecosystems. Our talk delves into their emotional and professional journeys, from navigating code-centric communities to becoming essential project pillars.

We'll share authentic stories about overcoming imposter syndrome, achieving breakthroughs, and maintaining engagement despite challenges. The discussion examines how community dynamics and project structures influence non-technical contributors' experiences and success.

Drawing from these insights, we'll present practical strategies for project maintainers and community leaders to create welcoming spaces, develop inclusive contribution pathways, and foster long-term engagement with non-technical contributors. Whether you're leading an open source project or considering non-technical contributions, you'll gain actionable knowledge for building more inclusive and sustainable communities.

Speakers

Miaolai Zhou

Program Manager, AWS

Mila is a passionate program manager at AWS, spearheading funding programs that provide vital resources to open source projects. Her unwavering commitment to empowering and supporting these communities fosters sustainability, drives innovation, and enables collaboration. She actively... Read More →

Lahari Chowtoori

Technical Program Manager, AWS

Lahari Chowtoori is an AI enthusiast and Technical Program Manager at AWS, focusing on open source, Machine Learning, and Artificial Intelligence. With a background in Data Science and Machine Learning, she is passionate about democratizing AI knowledge and fostering community collaboration.She... Read More →

Wednesday August 27, 2025 11:55 - 12:35 CEST
G001-002

Equity + Inclusion + Accessibility

Audience Experience Level Intermediate

11:55 CEST

Panel DIscussion: NeoNephos: Building an Open Source Foundation for Europe's Digital Future - Ihor Dvoretskyi, Cloud Native Computing Foundation with Additional Panelists to be Announced

Wednesday August 27, 2025 11:55 - 12:35 CEST

Auditorium

In this panel discussion, founding members and leaders of the NeoNephos Foundation will share how their organizations drive open innovation through collaborative, vendor-neutral open source development. As a newly formed initiative announced at KubeCon London 2025, NeoNephos (neonephos.org) aims to support the creation of a resilient, interoperable cloud-edge continuum for Europe and beyond.

Panelists will share the story behind the launch of NeoNephos, what inspired its creation, and how it brings together industry, public sector, and open source communities to solve shared challenges. They will reflect on what it means to build a foundation from the ground up, the values driving the initiative, and how NeoNephos plans to support collaboration at the intersection of cloud, edge, and European digital sovereignty. The discussion will also highlight key projects hosted by the foundation—such as Project Gardener—and explore how panelists’ organizations contribute to and leverage these solutions to drive innovation within their ecosystems.

Speakers

Ihor Dvoretskyi

Senior Developer Advocate, Cloud Native Computing Foundation

Ihor Dvoretskyi is a Senior Developer Advocate at the Cloud Native Computing Foundation, known for his contributions to Kubernetes.

Wednesday August 27, 2025 11:55 - 12:35 CEST
Auditorium

Open Source Leadership

Audience Experience Level Intermediate

11:55 CEST

Fixing the Watchdog: How Open Documentation Empowers Community-Driven Hardware Support - Andrew Halaney, Netflix & Eric Chanudet, Red Hat, Inc

Wednesday August 27, 2025 11:55 - 12:35 CEST

G106

Hardware documentation varies widely in quality and accessibility — ranging from treasured to frustratingly opaque. In this talk, we’ll introduce a framework for classifying types of hardware documentation and discuss their impact on enabling community-driven innovation.

We’ll showcase a real-world example of valuable documentation by exploring how Texas Instruments’ open documentation for the J784S4EVM empowered us to debug and fix its watchdog system. This process involved navigating multiple subsystems within the SoC, leveraging publicly available resources every step of the way.

Attendees will gain insight into how open documentation accelerates debugging, fosters collaboration, and enables independent hardware support. Beyond this case study, we hope to inspire vendors to embrace open documentation practices and encourage community members to prioritize documentation quality when selecting hardware.

https://lore.kernel.org/linux-arm-kernel/hqifchzwvzyexlcq6vfhlnrp3sixkgk23vau6o46k6einn5vee@gj5a53ee2gsi/T/#m7ecce818686b775105367e19e9548970c26c4427

https://lore.kernel.org/all/20240911-j784s4-esm-enable-v2-0-957f56b588d9@redhat.com/

Speakers

Andrew Halaney

Software Engineer, Netflix

Andrew is a software at Netflix, supporting Netflix's base OS as well as its kubernetes dataplane. He has experience in Linux systems, ranging from bring up for automotive infotainment systems to cloud servers running container workloads. He's upstreamed support for various hardware... Read More →

Eric Chanudet

Principal Software Engineer, Red Hat, Inc

I joined the Red Hat Automotive Kernel team in 2021 and worked on improving boot time to match the requirement of the Red Hat In Vehicle OS kernel as well as helped enable and support arm64 platforms for it.

Wednesday August 27, 2025 11:55 - 12:35 CEST
G106

Technical Documentation

Audience Experience Level Intermediate

13:00 CEST

Zbus 2030: Community-Driven Directions for Zbus - Rodrigo Peixoto, Edge-UFAL/Citrinio

Wednesday August 27, 2025 13:00 - 13:45 CEST

D202

We invite you to join us in shaping the future of ZBus! Your ideas and perspectives are invaluable, and we genuinely want to hear them. Join us for a community-driven discussion about our strategic directions, and let’s work together to create something great.

Speakers

Rodrigo Peixoto

Embedded Software Engineer, Edge-UFAL/Citrinio

Embedded Systems enthusiast and passionate surfer. Rodrigo has been the R&D Lead Embedded Systems Engineer at Edge Innovation Center since 2015. Professor at the Federal University of Alagoas since 2011. Co-founder at Citrinio. Zephyr bus maintainer (ZBus subsystem).

Wednesday August 27, 2025 13:00 - 13:45 CEST
D202

Zephyr Developer Summit

Audience Experience Level Intermediate

14:10 CEST

Easily Generating Debian-Based Embedded Systems - Clara Kowalsky & Felix Mößbauer, Siemens AG

Wednesday August 27, 2025 14:10 - 14:50 CEST

Elicium 2

Debian ensures long-term stability and offers a wide range of packages that simplify software development. However, it lacks tools to efficiently create reproducible and customizable images as provided by Yocto. In this talk, we give an update on the open source build system Isar, which has been around since 2017 and combines the strengths of Debian and Yocto to create images for various x86, ARM64 and RISC-V boards.

Using the RPi4b as an example, we walk you through setting up the build environment, adding your application and flashing the image to the hardware. We illustrate new Isar features, such as the integration of the sstate cache. Furthermore, we give an outlook on enhancing your system with Secure Boot and Over-the-Air (OTA) firmware updates with swupdate, using the Isar layer from the LF Civil Infrastructure Platform project.

Speakers

Clara Kowalsky

Linux Software Engineer, Siemens AG

Clara Kowalsky is working as a consultant software engineer in the Linux Expert Center at Siemens AG. She contributes to multiple inner-source and open-source projects, especially in the area of real-time (e.g., Xenomai) and embedded Linux tooling. She gives internal trainings on... Read More →

Felix Mößbauer

Realtime Linux Expert, Siemens AG

Having a strong background in High Performance Computing, Felix is currently focusing on embedded Linux platforms for realtime applications. Hereby, he works across country and company boundaries to unify patterns that are recurring and mandatory for embedded products (like secure... Read More →

Wednesday August 27, 2025 14:10 - 14:50 CEST
Elicium 2

Embedded Linux Conference

Audience Experience Level Intermediate

14:10 CEST

The Bootloader: An Underestimated Risk To Embedded Linux Security - Richard Weinberger, sigma star gmbh

Wednesday August 27, 2025 14:10 - 14:50 CEST

D201

As regulations like the Cyber Resilience Act (CRA) drive the adoption of stronger security measures, features such as verified and secure boot are becoming increasingly common. Within this context, the bootloader plays a crucial role in establishing the chain of trust for embedded Linux systems. This talk will explore security vulnerabilities in popular bootloaders that can undermine the effectiveness of verified boot. Attendees will gain a deeper understanding of these risks and learn practical techniques to mitigate them, ultimately improving the security posture of embedded devices.

Speakers

Richard Weinberger

CTO, sigma star gmbh

Richard Weinberger is co-founder of sigma star gmbh where he offers consulting services around Linux and IT security.

Wednesday August 27, 2025 14:10 - 14:50 CEST
D201

Embedded Linux Conference

Audience Experience Level Intermediate

14:10 CEST

Why Further Development on Publiccode.yml Is Neccessary - Tom Ootes, developer.overheid.nl

Wednesday August 27, 2025 14:10 - 14:50 CEST

G105

My story/message/ problem statement would be:

- A cultural change needs to take place. Instead of building software themselves, organizations should first explore the landscape (open standards/existing projects).

- However, not all OSS projects are yet findable in the public sector/with suppliers.

- Also, much metadata available in repositories is not platform-agnostic (thus embedded in Gitlab/Github)

- The agnostic standard that solves this: publiccode.yml. We need to apply this standard but also invest in it/contribute to it. Only then will it become more usable.

- "Infrastructure-as-code" projects within the government are increasingly available as open source. Organizations like Kadaster and Wigo4IT are about to open source this. To make the Dutch Digital Infrastructure more sovereign, it is crucial that these open source infrastructure components are also made findable.

- The publiccode.yml standard is already being used by FR/DE and Brussels, so it's logical to invest in this standard. We will have to make all our initiatives easily findable/searchable! The quality regarding metadata needs to improve.

Besides this i would like to emphasize that working OSS is just more fun.

Speakers

Tom Ootes

Developer Advocate, developer.overheid.nl

Has been working for the Dutch Government for in several roles. As a front-end dev for the Dutch Ministry of Health during covid building the Source Tracing Platform. Got interested in how developers co-operate within this government.

Wednesday August 27, 2025 14:10 - 14:50 CEST
G105

OpenGovCon

Audience Experience Level Intermediate

14:10 CEST

Proactive Protection: Using AI To Safeguard Your Code and Supply Chain From Vulnerabilities - Meha Bhalodiya & Ruchi Pakhle, Red Hat

Wednesday August 27, 2025 14:10 - 14:50 CEST

G104

Step into a world where your code and supply chain is not just defended but dynamically shielded against digital adversaries. "Proactive Protection: Unleashing AI for Digital Fortification" immerses you in a riveting exploration of cutting-edge security tactics. Through captivating narratives and interactive simulations, delve into AI's transformative role in anticipating and neutralizing vulnerabilities before they strike. Discover how predictive algorithms, automated response mechanisms, and real-time threat intelligence converge to create a proactive defense ecosystem that adapts and evolves with your digital assets.

By the session's end, arm yourself with actionable strategies to infuse AI-driven resilience into your codebase and supply chain, ensuring a fortified digital frontier against ever-evolving cyber threats.

Speakers

Ruchi Shrikant Pakhle

Software Engineer, Red Hat

Software Engineer @Red Hat | GSoC'25 @AsyncAPI | LFX Spring'22 @open-horizon | Open Source Developer @asyncapi | Python geek and AI developer in free time :D

Meha Bhalodiya

Software Quality Engineer, Red Hat

A Software Quality Engineer at Red Hat, where I work with the OpenShift Container Platform team.

Wednesday August 27, 2025 14:10 - 14:50 CEST
G104

Operations Management

Audience Experience Level Intermediate

14:10 CEST

Open Source Unlocked: Smart Strategies for Maximising Efficiency & Impact - Avijit Biswas & Supriya Chitale, IKEA

Wednesday August 27, 2025 14:10 - 14:50 CEST

G107

In today’s fast-moving digital world, the pressure to innovate quickly and cost-effectively has never been greater. Open source holds incredible promise—not just as a technical solution, but as a strategic enabler of scalable, sustainable growth. Yet many organizations are still figuring out how to turn that promise into measurable impact.

At IKEA, we’ve reimagined how open source fits into our technology strategy. This talk will walk you through how we’ve reduced vendor lock-in, lowered costs, and improved flexibility by making smart, intentional choices about when and how to use open-source alternatives. It’s not just about cutting costs—it’s about creating value, building resilience, and staying in control of our digital future.

We’ll share real examples from our IT and AI journey, showing how open source can support both innovation and long-term sustainability—without compromising on quality or governance.

Key takeaways:

• How to align open-source adoption with strategic IT and AI goals

• Ways to drive cost-conscious product development at scale

• Lessons from reducing dependency on proprietary vendors

• Building resilient systems through proactive risk management

Speakers

Avijit Biswas

Open Source SME, IKEA IT AB

I’m Avijit Biswas—known to most as Avi. I’m a passionate open-source professional and technology strategist with over 15 years of experience in digital transformation and secure software development. At IKEA, I co-lead initiatives like open-source strategy, secure software practices... Read More →

Supriya Chitale

Open Source Program Office Manager, IKEA

Supriya Chitale is currently working at IKEA as Open Source Program Office Manager. She has 20 years experience in software industry with specialization in topics related to Open Source and InnerSource. She is a parent to a teenager and in her free time, she loves to travel and learn... Read More →

Wednesday August 27, 2025 14:10 - 14:50 CEST
G107

OSPOCon

Audience Experience Level Intermediate

14:10 CEST

Building a Solarpunk Web: Open Source for a Sustainable Digital Future - Mike Gifford, CivicActions

Wednesday August 27, 2025 14:10 - 14:50 CEST

TBA

We’re in a climate crisis—and the web isn’t off the hook. From energy-hungry AI to bloated, resource-intensive websites, our industry’s digital footprint is growing fast.

This talk explores how we can flip the script using open source tools to measure and reduce the carbon impact of our work. We’ll dive into practical ways to assess emissions, spotlight FOSS projects leading the way, and share actionable steps every open source project can take to help cut down energy use.

Together, we can build toward a solarpunk future—one where technology empowers a healthier planet and better lives for everyone.

Speakers

Mike Gifford

Open Standards and Practices Lead, CivicActions

Mike Gifford is an open standards and practices lead at CivicActions and a thought leader on digital accessibility in the public sector. He is also a W3C Invited Expert and recognized authoring tool accessibility expert.

Wednesday August 27, 2025 14:10 - 14:50 CEST
TBA

Wildcard

Audience Experience Level Intermediate

14:10 CEST

MIDI2 in the Real World With Zephyr - Titouan Christophe, Mind

Wednesday August 27, 2025 14:10 - 14:50 CEST

D202

Since the 1980s, the MIDI (Musical Instruments Digital Interface) protocol has been the leading standard for connecting digital instruments and controllers in live performances and digital audio workstations. In the last 5 years, a brand new revision of this protocol has been released, supporting multiple transports that adapt it to the modern world of high-speed bidirectional communications.

In this talk, we will first look at an overview of the MIDI2 protocol, what it improves on the former MIDI (1) version, how to define its topology, and what kind of data it conveys. We will then dive into practical considerations for developing a custom MIDI2 device, using Zephyr as an example development platform considering:

- USB-MIDI2.0

- Network MIDI2 (UDP based)

- Universal MIDI Packet (UMP) Endpoints discovery and dynamic configuration

- (Possibly) MIDI Capability Inquiry (MIDI-CI)

Speakers

Titouan Christophe

Embedded Software Developer, Mind

Titouan is an embedded and backend developer who worked in remote railway vehicle monitoring and automated visual quality control for the manufacturing industry. He's been using FLOSS and contributing occasionally.

Wednesday August 27, 2025 14:10 - 14:50 CEST
D202

Zephyr Developer Summit

Audience Experience Level Intermediate

15:05 CEST

Feasibility and Architecture of a Dual-Board Embedded System: Yocto & Zephyr Integration - Andrea Ricchi & Dario Binacchi, Amarula Solutions

Wednesday August 27, 2025 15:05 - 15:45 CEST

Elicium 1

In this presentation, we provide an in-depth look at our experience conducting an industrial feasibility study focused on a dual-board embedded system designed for communication over CAN bus. The system architecture consists of two boards, each with distinct operating environments. The primary board runs a Linux-based system that leverages Flutter for a responsive graphical user interface, while the secondary board operates on Zephyr RTOS, utilizing LVGL to deliver lightweight graphical functionality.

We walk through the complete development lifecycle of this system, beginning with hardware selection and bring-up, progressing through board support package (BSP) development, device tree configuration, and peripheral driver integration. We also discuss the differences in system architecture between Linux and Zephyr. We then analyze Flutter and LVGL, evaluating their suitability for embedded UI development, performance trade-offs, and integration strategies.

Attendees will gain practical insights into designing and evaluating industrial embedded systems while overcoming the challenges of multi-platform development and integration.

Speakers

Dario Binacchi

Embedded Linux and kernel engineer, Amarula Solutions

With a thesis on DSP I graduated in Software Engineering in 2000, but above all I started my career in the embedded world, first on bare-metal systems and then on architectures with Linux operating systems.

Andrea Ricchi

Embedded Software Engineer, Amarula Solutions

I am a software developer passionate about all the branches of technology; constantly approaching new technologies and new programming languages to improve my point of view about the great world of computer science.

Wednesday August 27, 2025 15:05 - 15:45 CEST
Elicium 1

Embedded Linux Conference

Audience Experience Level Intermediate

15:05 CEST

How and Why Do the Bad Guys Attack Embedded Products? - Marta Rybczynska, Ygreky

Wednesday August 27, 2025 15:05 - 15:45 CEST

D201

Unlike traditional IT systems, embedded devices are often physically accessible to attackers. This key difference shapes both the threats and the methods used to exploit them.

In this talk, Marta will explore the attacker's mindset and approach: what they see, how they think, and where they strike - using real-world examples from recent years. She will walk through physical interfaces, software stacks, and the often-overlooked organizational and social "features" that open the door to compromise.

Participants will learn how to map the attack surface of their own products and build a so-called "threat model" of their.

To wrap up, Marta will share practical recommendations to avoid the most common pitfalls - and reflect on what has (and hasn’t) changed since Jake Edge’s observations at ELC 2009.

Speakers

Marta Rybczynska

Technical Program Manager, Security Team, Eclipse Foundation/Ygreky

Marta Rybczynska has a network security background, with 20 years of experience in Open Source. She has worked with embedded operating systems like Linux and various real-time OSes, and with system libraries and frameworks up to user interfaces. She has been involved in various Open... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
D201

Embedded Linux Conference

Audience Experience Level Intermediate

15:05 CEST

Strategies for Rate Limiting Network Packet Ingress - Schuyler Patton & Daolin Qiu, Texas Instruments

Wednesday August 27, 2025 15:05 - 15:45 CEST

G102-103

A major concern of a network connected application on an embedded platform is reducing any impact from high network traffic that is unrelated to the running application. Typically, this is called network broadcast storms and network attacks. Rate limiting packet ingress is a key strategy in preventing high processor bandwidth consumption caused by a network storm. In general, rate limiting packet ingress implies intentionally dropping packets. In order to setup ingress rate limiting, several different options are possible. These options include evaluating the tc Linux utility (e.g. tc qdisc), eBPF, or simply adjusting the Ethernet PHY link speed. A demonstration of these three options in action and how they can be used to prevent high-rate ingress traffic from causing negative processor impact will be showcased. A comparison of the impact from using tc and eBPF will also be discussed. The overall goal is to use these options to drop ingress packets in order to minimize ARM microprocessor bandwidth.

Speakers

Schuyler Patton

Systems and Applications Engineer, Texas Instruments

Schuyler Patton, a Member Group Technical Staff at Texas Instruments (TI), has extensive experience working on embedded Linux systems using ARM based Micro-processor devices (MPU). He has developed expertise in various end equipment system designs that require networking and various... Read More →

Daolin Qiu

Systems and Applications Engineer, Texas Instruments

Daolin Qiu is an embedded systems application engineer at Texas Instruments (TI). Her focus areas are real-time networking and control applications using embedded Linux. She also provides technical support on low level Ethernet issues for TI customers using embedded Linux. She received... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
G102-103

Linux

Audience Experience Level Intermediate

15:05 CEST

Digital Commons: Technological Building Blocks for European Digital Sovereignty - Nick Gates, OpenForum Europe & Mirko Boehm, The Linux Foundation

Wednesday August 27, 2025 15:05 - 15:45 CEST

Auditorium

European digital sovereignty has become one of the dominant narratives for the development of European public digital infrastructure. This panel will make the case that a Digital Commons approach provides scalable, open source alternatives that enhance choice and technical control, while providing viable options for policymakers implementing digital sovereignty initiatives.

In the session, technical experts will share examples of how initiatives like the proposed Open Internet Stack and EuroStack are creating amplification opportunities for developers. The session will explore proposed Technological Building Blocks – such as network infrastructure and identity frameworks – and show how Digital Commons mapped to these Building Blocks can be integrated into workflows.

In doing so, the session will show that Digital Commons projects enable true interoperability through open design, access, community governance, and APIs – essential elements for resilient and maintainable infrastructure. Participants will gain insights into leveraging these tools, understand patterns, and learn about European Commission funding mechanisms supporting open, sovereign infrastructure development.

Speakers

Nick Gates

Senior Policy Advisor, OpenForum Europe

Nick Gates is a Policy Advisor at OpenForum Europe, where he leads OFE’s work on the NGI Commons initiative and manages projects related to open source research and policy. Nick has significant experience in digital government, particularly around open source, public financial management... Read More →

Mirko Boehm

Community Development, Linux Foundation Europe, The Linux Foundation

Mirko Boehm is a free and open source software contributor, community manager, licensing expert and researcher, with contributions to major open source projects like the KDE Desktop, the Open Invention Network, the Open Source Initiative and others. He is a visiting lecturer and researcher... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
Auditorium

Open Source Leadership

Audience Experience Level Intermediate

15:05 CEST

Freedom, Diversity, and Sovereignty: The Power of Open Source in Europe’s Digital Future - John Samuel, Seventh State

Wednesday August 27, 2025 15:05 - 15:45 CEST

G105

As the world grows increasingly fragmented, Europe stands at a digital crossroads. The loss of digital independence threatens its cultural, intellectual, and economic values. Post-Brexit, freedom of movement has been constrained—now, Europe risks a similar fate in the digital realm. Dependence on proprietary, foreign technologies undermines Europe’s digital sovereignty and its ability to shape its future.

This talk explores why Europe must invest in open-source software to preserve its freedoms, diversity, and identity in an evolving digital ecosystem. Open-source is more than technology—it’s a path to autonomy, reduced corporate dependency, and dynamic local markets that drive innovation. As software reshapes our lives, open-source ensures Europe’s digital landscape remains as diverse as the continent itself.

We’ll examine how open-source can counter AI’s global, generic biases by fostering systems that reflect Europe’s rich cultural tapestry. By embracing open-source, Europe can protect its digital future and core freedoms of movement, trade, and expression that define its identity. What does Europe stand to lose if it fails to invest in open-source technologies?

Speakers

John Samuel

Founder and Business Leader, Seventh State

John Samuel is a technologist and founder of Seventh State, a UK-based boutique consultancy specializing in Open Source. With clients like Bloomberg, Orange, Paychex, and Siemens, he has a long-standing passion for technology, dating back to the 80s. He enjoys dismantling and reassembling... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
G105

OpenGovCon

Audience Experience Level Intermediate

15:05 CEST

Navigating Uncertainty: Operational Risk Management in the Open-Source Sector - Eleni Katsoula, Collabora

Wednesday August 27, 2025 15:05 - 15:45 CEST

G104

As a consultancy working at the heart of the open-source ecosystem, Collabora operates in a landscape defined by constant change—technologically, economically, and organizationally. In this talk, we’ll explore how you can build operational resilience through intentional risk management, agile resource planning, and a deep understanding of the unique dynamics of working in this field.

We’ll look at how to balance the unpredictability of client pipelines, evolving upstream projects, and distributed collaboration with the need for sustainable business practices and delivery reliability. Drawing on principles of adaptive planning and lightweight risk frameworks, this session will offer practical approaches to identifying vulnerabilities, allocating resources effectively, and maintaining agility without losing focus.

Whether confronting fluctuating demand, evolving stakeholder landscapes, or macroeconomic uncertainty, open-source consultancies must rely on principles rather than predictions. This talk frames operational resilience as an emergent property of adaptive systems—rooted in flexibility, decentralization, and continuous feedback.

Speakers

Eleni Katsoula

Engineering Operations Manager, Collabora

I am a multilingual, internationally experienced executive & consultant, specializing in Business Operations, IT Management & Strategic Planning. With a strong background in engineering operations, business analytics, and financial planning, I help companies streamline processes... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
G104

Operations Management

Audience Experience Level Intermediate

15:05 CEST

Engineering Trust: Formulating Continuous Compliance for Open Source - Paul Albertella & Kaspar Matas, Codethink

Wednesday August 27, 2025 15:05 - 15:45 CEST

D204

Requirements are broken. High-level requirements are a wish list; stakeholders just make a list of features. Low-level requirements are a narrative; developers just describe what is implemented.

Formal process models see the dynamic nature of FOSS projects as a problem, but this can be a key part of their value. However, because requirements are broken, the intent and expectations that inform the software are often lost in the noise.

The Eclipse Trustable Software Framework (TSF) is a lightweight continuous compliance framework, designed as and for FOSS. It lets you organise and evidence your own objectives, not just those demanded by standards. As an open project, with only git as a prerequisite, it is also workflow-agnostic.

Its unique outcome is an automated, transparent and traceable body of evidence, quantified by a confidence score. This informs project decisions, such as where to focus future efforts, and enables consumers to evaluate their trust in the software.

We provide an overview of the TSF and examples of how it is applied. We then show how the model and methodology can be mapped to functional safety standards, to support certification and ongoing assessment.

Speakers

Paul Albertella

Consultant, Codethink

I'm passionate about software engineering processes and the role that open source software and communities are playing in their evolution. My current focus is on the Trustable Software Framework in relation to safety and the use of Linux and open source tools in the Automotive industry... Read More →

Kaspar Matas

Software Engineer, Codethink

PhD in Computer Science from the University of Manchester researching FPGAs.

Wednesday August 27, 2025 15:05 - 15:45 CEST
D204

Safety-critical Software

Audience Experience Level Intermediate

15:05 CEST

Documentation That Runs: Bridging Code, Prose, and Interactivity - Kailan Blanks, Fastly

Wednesday August 27, 2025 15:05 - 15:45 CEST

G106

Some developers like to study documentation, while others dive straight into their editor to start hacking on code — but what if documentation was the code? With today’s technologies it is more feasible than ever to blur the line between learning and building, by embedding live, editable examples directly into docs. Join me as I explore examples of interactive documentation from across the open source ecosystem and unpack five years' worth of lessons from building interactive docs for a developer platform.

Speakers

Kailan Blanks

Senior Software Engineer, Fastly

As part of the Developer Experience team at Fastly, Kailan is responsible for customer-facing tooling and content. As part of his work, he maintains the Fastly Developer Hub and various open-source projects for Fastly’s serverless compute environment. Outside of work hours, he builds... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
G106

Technical Documentation

Audience Experience Level Intermediate

15:05 CEST

Why Quantum Safe Encryption Is the Next Y2K, and How To Be Prepared - Joe Winchester, IBM

Wednesday August 27, 2025 15:05 - 15:45 CEST

TBA

Client server computing relies on encryption algorithms to ensure that data sent across networks cannot be read, or faked, by untrusted parties. This is the rock on which financial computing works in a business to customer environment, as well as how data at rest is protected from malicious prying eyes reading our personal data.

This talk will cover the basics of how Diffe-Hellman encryption works, how symmetric and asymetric keys operate, as well as how all of this will soon become unsafe because of quantum computing. As well as showing the audience the basics (no maths degree required) this talk will show how quantum safe encryption is able to address this, and how folks can get wise and get started.

Speakers

Joe Winchester

Senior Technical Staff Member, IBM

I work on open source projects around software tooling platforms. My current project is Zowe, which is part of the Linux Foundation and Open Mainframe Project where I am part of the leadership committee and an ambassador. Prior to Zowe I worked on Eclipse tooling and before that Java... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
TBA

Wildcard

Audience Experience Level Intermediate

15:05 CEST

A Slice of Zephyr Pi! - Chris Boross, Raspberry Pi

Wednesday August 27, 2025 15:05 - 15:45 CEST

D203

Since the first Raspberry Pi boards were released in 2012, they have been used by hobbyists, educators and professionals all over the world, and pushed to their limits in space, on deserts and in the deep sea. With the introduction of the RP2040 and RP2350 microcontrollers over the past few years, Raspberry Pi entered the world of deeply embedded systems with some fresh ideas. The Zephyr community quickly set to work supporting this new hardware – and it hasn’t stopped since!

This talk will cover the current state of Zephyr support for Raspberry Pi microcontrollers, how we got here and how developers can contribute to further improvements. This includes working on building blocks of the open source embedded ecosystem such as OpenOCD. We will look at support for Rust and RISC-V, as well as the Programmable I/O (PIO) which is unique to Raspberry Pi. Finally, we will show a survey of open source applications and hardware built with the combination of Zephyr and Raspberry Pi, with some tips for using them in your own projects.

Speakers

Chris Boross

Raspberry Pi Silicon and Compute Hardware, Raspberry Pi

Chris Boross supports customers around the world in their use of Raspberry Pi Silicon and Compute Hardware.

Wednesday August 27, 2025 15:05 - 15:45 CEST
D203

Zephyr Developer Summit

Audience Experience Level Intermediate

16:20 CEST

Integrating EPSS and CVSS in Open Policy Agent To Quarantine Real-world Vulnerabilities - Nigel Douglas, Cloudsmith

Wednesday August 27, 2025 16:20 - 17:00 CEST

Emerald Room

CVSS (Common Vulnerability Scoring System) and EPSS (Exploit Prediction Scoring System) are both valuable tools for vulnerability management, but they serve different purposes. CVSS assesses the inherent severity of a vulnerability, whereas EPSS estimates the likelihood of that vulnerability being exploited in the wild. At Cloudsmith, we integrate open source projects like EPSS and the Trivy scanner for CVSS analysis into Open Policy Agent (OPA) to strengthen supply chain enforcement.

In this session, we’ll examine four recent CVEs that highlight the contrast between these two approaches—cases where vulnerabilities score highly under CVSS but have a low EPSS probability, and others with high EPSS scores (indicating strong exploit potential) that had not yet been published in the NIST CVE database at the time of artifact scanning. These examples underscore the importance of leveraging both CVSS and EPSS in a comprehensive vulnerability management strategy.

We’ll also explore how open-source tools like OPA can be used to enforce these security controls effectively within the software supply chain.

Speakers

Nigel Douglas

Head of Developer Relations, Cloudsmith

Nigel Douglas is the Head of Developer Relations at Cloudsmith. He champions Cloudsmith’s developer ecosystem by creating compelling educational content, engaging with developer communities, and promoting Cloudsmith as the go-to solution for artifact management and supply chain... Read More →

Wednesday August 27, 2025 16:20 - 17:00 CEST
Emerald Room

Cloud & Containers

Audience Experience Level Intermediate

16:20 CEST

Enhancing Interrupt Controller Reliability: Implementing Error Detection Correction in Linux - Priyadarsini G, Samsung Semiconductor India Research, Bangalore

Wednesday August 27, 2025 16:20 - 17:00 CEST

Elicium 1

Error Detection and Correction (EDAC) is critical for ensuring data integrity and system reliability, particularly in modern high-performance computing architectures. ARM’s Generic Interrupt Controller is widely used in multi-core processors design, where fault tolerance is essential for maintaining system stability. With the rising risk of transient and permanent faults due to hardware aging, radiation effects, and environmental interference, integrating EDAC mechanisms into interrupt controller is essential for preventing data corruption and unexpected system failures.

This work presents the first implementation of EDAC for ARM GIC-600 interrupt controller in Linux kernel, extending EDAC subsystem with new patches and drivers to integrate ARM’s error-reporting capabilities. The talk explores the necessity of EDAC in mitigating errors in interrupt controller and includes sample code snippets demonstrating how to extend the Linux EDAC framework to support error logging and correction.

Furthermore, we present performance benchmarks and case studies evaluating the effectiveness of EDAC in interrupt controller, highlighting trade-offs between error resilience and system overhead.

Speakers

Priyadarsini G

Associate Staff Engineer, Samsung Semiconductor India Research, Bangalore

Priyadarsini is an accomplished Embedded Software Engineer with over 5 years of experience in embedded systems domain. With a passion for technology and a flair for innovation, she has consistently delivered exceptional solutions in the domain of embedded systems. She is well-versed... Read More →

Wednesday August 27, 2025 16:20 - 17:00 CEST
Elicium 1

Embedded Linux Conference

Audience Experience Level Intermediate

16:20 CEST

Yocto or Debian for Your Embedded System? Yes. - Alan Martinovic, Northern.tech

Wednesday August 27, 2025 16:20 - 17:00 CEST

D201

Many embedded products start with a stock Debian image. It’s quick to get started and familiar from laptop installations, but what works for prototyping becomes a liability as the product matures. A stock installation created directly on the device—by clicking through menus and tweaking settings at runtime—gets frozen into a fragile “golden image” that breaks as soon as you need reproducibility or more than a few people work on the device.

On the other hand, Yocto gives you full control—down to the exact version of systemd or how 'ls' gets built... even when you don't want to. It’s powerful, but comes with a steep learning curve, long build times, and complexity that feels overwhelming in the early stages of development.

This talk is about a third approach. By reusing prebuilt Debian packages, you can assemble a custom OS without relying on the golden image or Yocto. We’ll look at how this model works and show hands-on examples of building minimal images with several tools and how it compares to the other two approaches.

Speakers

Alan Martinovic

Senior Customer Engineer, Northern.tech

I've been working with embedded Linux for over 10 years, covering everything from low-level systems to full product experiences and customer-facing work. These days, I help teams handle device lifecycle challenges and roll out OTA updates. Along the way, I've worked with a bunch of... Read More →

Wednesday August 27, 2025 16:20 - 17:00 CEST
D201

Embedded Linux Conference

Audience Experience Level Intermediate

16:20 CEST

Civil Infrastructure Platform: State of Industrial Grade Linux - Yoshitake Kobayashi & Dinesh Kumar, Toshiba Corporation

Wednesday August 27, 2025 16:20 - 17:00 CEST

G102-103

The Civil Infrastructure Platform (CIP) project continues to advance Industrial Grade Linux for mission-critical systems requiring long-term reliability, security, and regulatory alignment. This talk will provide the latest updates across CIP’s core activities. We’ll begin with progress on the next Super Long-Term Support (SLTS) CIP kernel based on Linux 6.12, designed to offer a robust foundation for products with extended life cycles.

Then, we’ll cover CIP Security Working Group activities, including alignment with IEC 62443-4. Following successful 4-1 process conformance in 2024, efforts now focus on meeting the technical requirements of 4-2. These activities not only support industry best practices but also lay groundwork for compliance with the EU Cyber Resilience Act (CRA). We will also share updates from the Software Update Working Group, which is integrating The Update Framework (TUF) to ensure secure and reliable updates for embedded systems. Finally, we will highlight contribution trends and point to resources for developers and companies looking to engage with CIP and help shape secure, sustainable Linux-based critical infrastructure.

Speakers

Dinesh Kumar

Engineering Manager, Toshiba Corporation

Yoshitake Kobayashi

Senior Manager, Toshiba Corporation

Yoshitake Kobayashi leads open source initiatives at Toshiba Corporation, where his team develops and maintains a Linux distribution used across a range of Toshiba products. His research interests include operating systems, distributed systems, and dynamically reconfigurable systems... Read More →

Wednesday August 27, 2025 16:20 - 17:00 CEST
G102-103

Linux

Audience Experience Level Intermediate

16:20 CEST

MISRA C and C++ in OSS: Yes, We Can! - Roberto Bagnara, BUGSENG / University of Parma

Wednesday August 27, 2025 16:20 - 17:00 CEST

D204

Building software systems that embody industry best practices for safety and security cannot be done in unrestricted C or C++. While C and C++ have many strong points, their rooting the the C of the 1970's are the origin of their weakness: they have many aspects that are not fully defined, obscure corners that can easily mislead programmers, and C comes without any sort of run-time error detection. As open-source software is being adopted in safety- and security-critical systems, compliance with the relevant industry standards is becoming a priority. The MISRA C and MISRA C++ coding standard define subsets of C and C++ that have been adopted across all industry sectors that develop software in critical contexts. In this tutorial, we introduce MISRA C/C++, their key role in the development of critical systems' software and their relevance to industry safety and security standards. The presentation is specifically designed for open-source practitioners and will leverage our experience in bringing the MISRA coding standards in open-source projects (most prominently, Xen and Zephyr).

Speakers

Roberto Bagnara

Functional Safety Expert / Professor, BUGSENG / University of Parma

Roberto Bagnara is professor of Computer Science at the University of Parma and Software Verification Expert and Evangelist at BUGSENG. He coauthored more than 40 papers, in international journals and conference proceedings, on programming languages, static analysis and other techniques... Read More →

Wednesday August 27, 2025 16:20 - 17:00 CEST
D204

Safety-critical Software

Audience Experience Level Intermediate

16:30 CEST

Lightning Talk: Zephyr in Education - Vixay Phimmasane, Institute of Embedded Systems, Zurich University of Applied Sciences & Flavio Felder, ZHAW InES

Wednesday August 27, 2025 16:30 - 16:40 CEST

D202

The Institute of Embedded Systems at the Zurich University of Applied Sciences uses Zephyr for several lab exercises for BSc, MSc and students in further education.

These labs include topics like embedded security, bootloaders, and general operating system concepts.

In this lightning talk, we will showcase these labs and discuss the challenge of providing a uniform Zephyr development environment that can be set up quickly and reliably.

Speakers

Flavio Felder

Research Assistant, ZHAW InES

Born and raised in Switzerland, I started my journey with a four-year apprenticeship as an electronic technician, followed by earning a Bachelor of Science in Electrical Engineering. Now, I work full-time as a Research Assistant at the Institute of Embedded Systems at the Zurich University... Read More →

Vixay Phimmasane

Research Associate, Institute of Embedded Systems

Vixay Phimmasane obtained his Bachelor's degree in electrical engineering in 2021

Wednesday August 27, 2025 16:30 - 16:40 CEST
D202

Zephyr Developer Summit

Audience Experience Level Intermediate

16:40 CEST

Lightning Talk: Protecting Zephyr Against Memory Safety Vulnerabilities With the New CHERI Hardware Architecture - Jennifer Jackson, University of Birmingham

Wednesday August 27, 2025 16:40 - 16:50 CEST

D202

There is currently an urgent need for companies to reduce and eventually eliminate software-based memory safety vulnerabilities from their product lines. This requirement begins with the underlying operating systems and extends to the applications that depend on them.

This talk will advocate that now is the right time for the Zephyr operating system to embrace an emerging new hardware architecture extension called CHERI (Capability Hardware Enhanced RISC Instructions) to protect its software and applications against memory vulnerabilities from being exploited.

The CHERI technology has a development history spanning nearly 15 years and is backed by the recent formation of the CHERI Alliance - a consortium of businesses (including ARM, Google and Microsoft), academic institutions, and government organisations.

The talk will provide a summary of the CHERI technology, the latest developments, and the work being done to provide CHERI-RISC-V architecture support for Zephyr.

Speakers

Jennifer Jackson

Research Fellow, University of Birmingham

Jennifer Jackson is a Research Fellow at the University of Birmingham and has been working on projects involving CHERI-based hardware since 2021. She has a PhD from the University of Warwick and has worked both within academia and industry. Her background is in electronic engineering... Read More →

Wednesday August 27, 2025 16:40 - 16:50 CEST
D202

Zephyr Developer Summit

Audience Experience Level Intermediate