At: DebConf25
https://debconf25.debconf.org/talks/147-preseed-your-pbx-for-fun-and-profit/

Private Branch eXchange (PBX) systems connect desk phones in your school or office to outside lines from the telephone company. Over the past 25 years, open source Asterisk-based systems like FreePBX replaced many proprietary competitors in phone closets around the world, by bridging calls between legacy analog copper lines, digital interfaces such as ISDN PRIs, and now ubiquitous Voice-over-IP (VoIP) solutions like SIP and WebRTC.

PBX systems typically run around the clock, routing low latency audio streams and providing emergency calling capabilities to end users. Sangoma produces a line of hardware appliances, as well as cloud solutions, that offer curated FreePBX web interface experiences to help non-Linux users manage their systems effectively.

For many years, Sangoma targeted CentOS for installations; but when the CentOS EOL date of July 2024 came up on the horizon, the decision was made to switch to Debian as the primary target for new FreePBX deployments. This overhaul involved migrating internal build pipelines and many pieces of custom code, including our ISO delivery mechanism.

During construction of the new FreePBX 17 Distro ISO, derived from Debian 12, we endeavored to make the install as simple as possible using both existing and potentially novel preseed customization ideas. Highlights of this talk will include:

• Presentation of our GPLv2'd Ansible role "sngfd12" for quickly generating a custom preseeded ISO based on the upstream stock Debian ISO as input.
• Controlling expression of preseed selection at GRUB installer prompt using a unique "spice level" concept.
• Automatically partitioning, RAIDing, and resizing (sharing some clever insights for partman fans 😃
• Novel approaches to randomized password generation during installation - a topic particularly relevant to embedded application developers w/r/t ongoing regulatory changes in this area.

Room: Petit amphi
Scheduled start: 2025-07-18 10:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/63-the-role-of-free-software-and-debian-in-green-sustainability/

This talk explores the pivotal role of free software, with a focus on Debian, in advancing sustainability within the technology sector. As digital infrastructures continue to grow, the environmental footprint of proprietary software becomes increasingly apparent. In this session, we will discuss how free software reduces the ecological impact of proprietary alternatives by promoting energy-efficient practices, longevity, and reuse. Debian, as an open-source project, not only minimizes the need for frequent hardware upgrades but also encourages more sustainable development practices in software creation and distribution.

The audience for this talk includes developers, open-source enthusiasts, and environmental advocates interested in understanding how technology can contribute to environmental sustainability. Attendees will gain insight into how Debian’s open-source philosophy aligns with green computing principles, helping reduce electronic waste and supporting long-term environmental goals. Key topics will include the advantages of using lightweight software, optimizing resource consumption, and how the community-driven nature of Debian fosters a culture of sustainability.

Room: Méridienne
Scheduled start: 2025-07-18 10:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/137-salsa-ci-now-running-for-27-000-packages-what-have-we-learnt/

I have been using Salsa CI since its inception, and contributing as a
team member since 2019. Now in 2025 there are over 27,000 source
packages in Debian using it, and since summer 2024 also some Ubuntu
developers have started using it too.

In this talk I will walk through how Salsa CI has evolved in past
years, what it today offers to developers maintaining Debian packages
and showcase one particular large and complex pipeline that has
ensured MariaDB has had nearly zero packaging regressions in any new
versions nor stable or security updates in past 5 years. I will also
share how you can participate in Salsa CI development - and what is
on some of the planned next improvements.

Room: Grand amphi
Scheduled start: 2025-07-18 10:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/62-mitigating-kernel-development-bottlenecks-and-supporting-the-gnulinux-ecosystem-with-kworkflow/

The Linux kernel project sits at the base of a gigantic and complex Free Software ecosystem. As a two-way road, downstream projects - the most prominent, Debian - feed off the kernel development while returning contributions to the upstream and giving it importance. Be it downstream or upstream development, if you work with the Linux kernel source code, chances are that you probably had to do one (if not all) of the following: set up a testing environment for custom kernels; fetching, optimizing, and managing several .config files; building a kernel from source; deploying a custom kernel to a testing environment. Before doing these tasks, some questions must be answered: Do I use physical machines or VMs as testing environments? What will the distro(s) of the target machine(s) be? Where do I get a base .config for a specific distro and architecture? What optimizations to do for building? How do I deploy the custom kernel to a particular testing environment?

For each combination of answers to these questions, surely, there will be a different sequence of commands, processes, paths to consider, and so on. After a few runs, you will probably be tired of manually doing all this work and will create scripts to automate your workflow. The problem is, if your workflow mutates a little or has slight variations, or your scripts have bugs, you will need to waste your precious development time maintaining these scripts that were not your objective in the first place! This is where kworkflow (kw), a Developer Automation Workflow System (DAWS), enters the scene. With a unified interface to many commands, kw abstracts many of these details, streamlines and automates time-consuming workflows, and enforces good practices so kernel developers can focus on the code they are writing, not on whether the make command was typed correctly.

• Want to up a VM? Run kw vm --up;
• Want to fetch a .config from within a machine in the network? Run kw kernel-config-manager --fetch;
• How about compiling with optimizations and cross-compilation? Do some simple configuration with kw config, then just fire kw build;
• I doubt installing custom kernels and modules is as simple as running one command, right? Wrong, you just need kw deploy.

In reality, kw does much more than this. For example, there is a Terminal User Interface (TUI) feature to consult and manipulate patches sent to the mailing lists, resulting from a PhD applied research. This talk will introduce the key features of kw and show how it can be used to improve your kernel development workflows.

Even though kernel development has worked well for more than 30 years, we understand bottlenecks in developers' workflows are risking the long-term sustainability of the whole ecosystem, and projects like kw are vital to avoid this scenario beyond just automating tasks. At the end of the talk, we will want to collect feedback from the best community in the GNU/Linux distro world, the Debian community, about what kw is doing right and wrong and how the community experience and knowledge can help us have a more comprehensive view of the GNU/Linux ecosystem.

Room: Petit amphi
Scheduled start: 2025-07-18 10:00:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/56-virtme-ng-quickly-test-a-kernel-from-debian/

In this talk, we’ll introduce virtme-ng, a tool used to easily test a Linux kernel on a virtual machine.

You can compile your own kernel and use your system’s root filesystem — but you can also use a prebuilt Ubuntu kernel along with its rootfs.

Similar support for Debian is in the works, which will also be covered in this presentation.

Room: Petit amphi
Scheduled start: 2025-07-18 09:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/200-lightning-talks/

Lightning talks and Live Demos - present yours here! Lightning talk slots are 5 minutes.

• 00:40 Roland Clobus: QA with openQA
• 07:12 Evangelos Ribeiro Tzaras: How I ported (?) a phone to Mobian
• 12:20 Kiruthika NV: KVM in PowerVM LPAR
• 17:26 Philip Hands: Debian Tartan
• 22:45 Elena Grandi: #FreeSoftWear
• 26:17 Andrew Martin Adrian Cater: Accessibility
• 30:09 Holger Levsen: the videoteam - the first 20 years
• 34:51 highvoltage: A very quick introduction to system-installer
• 40:34 Philip Hands: StreetComplete
• 43:16 Edward Betts: Packaging Home Assistant

Room: Méridienne
Scheduled start: 2025-07-18 09:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/182-cirocmdebiannet-a-debian-ci-with-amd-gpus-for-aiml-packages/

Much of number-crunching today is performed on GPUs. This especially applies to AI/ML-driven workloads. ROCm is AMD's open source software stack for general purpose GPU computing, challenging Nvidia's CUDA.

The Debian ROCm team's mission is to integrate and support ROCm on Debian to the point that using an AMD GPU (enterprise and consumer) for computation tasks is only an apt-get away. And with "support", we don't just mean packaging the libraries: we want to actually demonstrate just how well ROCm works.

To this end, we forked Debian's CI tools and bootstrapped our own environment with GPU support, currently featuring more than a dozen GPU architectures. Our CI works exactly like Debian's official CI, except that we only look at the subset of packages linked to ROCm libraries.

In this talk, I'll present a brief overview of our CI, and the policy and technical challenges we faced bootstrapping it. I'll then show how contributors can adapt their packages to get coverage in our CI.

Room: Grand amphi
Scheduled start: 2025-07-18 09:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/8-modern-and-interoperable-email-with-jmap/

Landscape of email client applications is dominated by IMAP, the only ubiquitous interoperable protocol allowing one to read emails.

However IMAP suffers numerous flows making it inefficient and hill suited to modern software constraints.

Those reasons led to the standardization of JMAP, IMAP 21st century replacement.

This talk aims to cover JMAP technical detail, and its software landscape so that Debian email maintainers fall in love with the protocol.

Room: Petit amphi
Scheduled start: 2025-07-17 18:00:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/59-kubernetes-in-debian-a-resurgence-from-the-ashes/

Last year, we talked about the first steps of bringing Kubernetes into Debian. Since then, the Debian Kubernetes Team has made big progress!

In this talk, I’ll share what we’ve achieved over the past year: new tools, important package updates, and a fresh upstream version that fixes many bugs and security issues (CVEs). We’ll look at how these improvements are helping Debian become a better home for Kubernetes users and developers.

I’ll also talk about what’s coming next and how you can get involved.

Let’s keep building something great together.

Room: Petit amphi
Scheduled start: 2025-07-17 17:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/154-skills-exchange-triaging-large-numbers-of-failures/

Large-scale QA work in Debian requires processing a significant number of packages, and eventually report bugs to the Debian BTS. Varying levels of automation can be involved, and several different solutions are used throughout the Debian project.

Come to this BoF and share the tools and techniques that you use to triage and report bugs about your large-scale QA efforts/bug reporting/transition.

• triaging failures in build and autopkgtest logs using collab-qa-tools (terceiro)

If you are interested in presenting, please contact terceiro@d.o so we can organize.

Room: Méridienne
Scheduled start: 2025-07-17 17:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/119-automating-downstream-debian-package-builds-and-updates-in-ci/

The Wikimedia Foundation's infrastructure runs on Debian. We sometimes need to make local changes to packages provided by Debian, or to backport Debian packages from newer releases to run in our production environments. Wherever we've done this, we also need to be able to apply updates from Debian, particularly bug-fix updates from stable point releases or security updates.

We've developed tooling to do this automatically in our gitlab-based CI environment. This tooling can periodically poll Debian for updates, attempt to merge those updates with local changes, and then build the resulting package and upload it to our staging apt repository. Further, it uses a git-first workflow, which means users do not have to be familiar with complex quilt-based workflows to make changes to Debian packages and have them built in CI.

This talk will explain how this tooling works, and how it has made our lives easier. The tooling is Free Software, so it will also explain how it could be used outside of the Wikimedia environment; if you use Debian packages in your environment and sometimes need to modify or backport what Debian ships, this could be for you!

Room: Grand amphi
Scheduled start: 2025-07-17 17:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/54-whats-new-in-openstack-epoxy-and-in-debian/

This talk will give an update on the new features available in the new Epoxy release, as shipped in Debian 13 (aka: Trixie). It's been a long time I haven't made such a talk (3 years now), and a lot has happened since.

It will also go through what new things were implemented in OpenStack Cluster Installer (aka: OCI), which is also shipped in Debian. Many things were implemented which makes this cluster manager even more production ready than it used to be.

Room: Petit amphi
Scheduled start: 2025-07-17 16:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/98-future-of-archive-wide-testing/

Over the years, Debian has grown many services and efforts to perform various kinds of tests on source or binary packages: archive rebuilds, autopkgtest & ci.debian.net, reproducible builds, lintian, piuparts, debcheck, etc, etc, etc. There are also efforts to provide integration within a salsa CI pipeline, infrastructure to manage those tests (such as debusine), and infrastructure to expose results to maintainers (UDD and Tracker). Various tools have also been built to organize such tests and assist with processing results.

After an overview (hopefully complete!) of the current state of things, the aim of this BoF will be to identify gaps, opportunities for convergence, share feedback about potential improvements to processes, etc.

Room: Méridienne
Scheduled start: 2025-07-17 16:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/130-infrastructure-as-code-meets-linux-distribution-our-debian-derivative-cicd-experience/

In this presentation, we share our experience developing eLxr, a Debian derivative distribution, using GitLab CI/CD pipelines over the past year. We'll focus on the technical implementation and challenges of applying CI/CD to distribution maintenance.

Our team built pipelines handling the complete distribution lifecycle—from package building to release management. We'll explain how GitLab CI/CD helped automate repetitive tasks, ensure build consistency, and implement quality checks throughout development.

We'll demonstrate specific pipeline configurations and show how this approach helped us maintain reliable updates while tracking upstream Debian. The presentation includes concrete examples of how automation improved our ability to detect integration issues early and maintain consistent quality.

Room: Grand amphi
Scheduled start: 2025-07-17 16:30:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/127-whats-new-in-apertis-a-debian-derivative-tailored-for-industrial-embedded-devices/

Apertis is a collaborative OS platform that includes an operating system, but also tools and cloud services to optimize development and increase reliability.
Targeting industrial embedded devices, Apertis is used, for instance, in the Atari VCS game console and in the Bosch D-tect 200 wall scanner.

This presentation will provide an overview of the differences between Apertis and Debian, covering everything from infrastructure to available packages, including testing on real hardware (thanks to LAVA) and SBOM generation (to make sure your legal department is happy!).

We'll then explore at the latest developments in the Apertis ecosystem, and take a look at what’s on the horizon.

Finally, we’ll highlight how our work in Apertis contributes back to Debian, in line with its “Upstream First” policy. For instance, some packages now available in Debian exist thanks to the work done in Apertis!

Room: Petit amphi
Scheduled start: 2025-07-17 15:00:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/174-hardening-debian-from-uefi-to-userland-an-example-with-lf-energy-seapath/

Mathieu and Eloi are the main contributors of LF Energy SEAPATH which use Debian as an VM hypervisor to host critical applications within Digital Substations.

SEAPATH is used in production by RTE, the french electricity Transmission Service Operator (TSO). Because SEAPATH is used in a critical environment, cybersecurity hardening need to be deployed on top of Debian.

This talk walks through the full system hardening process on Debian, starting with UEFI secure boot configuration and ending at service-level protections. We’ll cover secure bootloader (GRUB) configurations, encrypted and integrity-verified storage (dm-crypt, dm-verity), kernel hardening via command-line parameters, systemd service sandboxing, and general Debian-level hardening strategies.

Attendees will gain actionable steps to improve the security posture of their Debian deployments, whether on laptops, servers, or embedded systems.

Room: Méridienne
Scheduled start: 2025-07-17 15:00:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/149-salsa-bof/

Please join this session, and meet Sasla admins. Let's discuss how we can improve Salsa, and the Debian Git packaging infrastructure.

We're open to many topics, including:

• CI/CD (though this may be in another BoF?)
• tag2upload
• Salsa runners
• etc.

Salsa admins are also open to discuss how we can better serve the Debian project.

Room: Grand amphi
Scheduled start: 2025-07-17 15:00:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/48-testing-debian-on-embedded-systems-using-labgrid-and-gitlab-ci/

Testing multiple embedded systems that run a partial Debian derivate is a challenge!

You might install kernels that do not boot and require a restore of the device.

You want to test hardware interfaces and image based updates.

You want to have a good overview of the test results.

Test results are not binary, e.g. if you want to record the max. latencies of a real-time system.

In this talk we will share our experience of building a testlab and showing how other operating systems like Mobian could benefit from it.

Room: Petit amphi
Scheduled start: 2025-07-17 14:00:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/31-dont-fear-the-tpm/

After many years of being treated as something to be disabled or ideally avoided TPMs (Trusted Platform Modules) are gaining in popularity within the Linux community as a method of increasing system security. This talk aims to provide an overview of what a TPM actually is, why you as an individual, or an organisation, might be interested in using TPMs on your systems, and finally some pointers about how you can start doing so on a Debian system.

No existing knowledge about TPMs on the part of attendees is expected.

Room: Méridienne
Scheduled start: 2025-07-17 14:00:00+02:00

At: DebConf25
https://debconf25.debconf.org/talks/109-go-team-bof/

A time for Go Team members and other interested parties to get together for discussion. While no formal plan currently exists, we'll probably spend a decent amount of time discussing proposed changes to team workflows.

Everyone is welcome, whether you're an active Go Team member, interested in contributing, or just curious about this corner of Debian.

Room: Grand amphi
Scheduled start: 2025-07-17 14:00:00+02:00