OSS + ELC EU 2026: Full Schedule

7-9 October, 2026
Prague, Czechia
View More Details & Registration
Important Note: Timing of sessions and room locations are subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2026 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

arrow_back View All Dates

09:05 CEST

Embedded Linux Kernel Testing With Pytest - Fabrizio Castro & Chris Paterson, Renesas Electronics Europe GmbH

Wednesday October 7, 2026 09:05 - 09:45 CEST

South Hall 3 A (Floor 3)

Testing drivers reliably across several versions of Linux (mainline, linux-next, stable, linux-cip, etc.) and several SoCs can be a challenging task, and it gets even more challenging if the whole process needs to be automated.

In this talk we introduce a testing framework centered around pytest, that makes heavy use of pytest markers to describe the test SW and HW requirements, and we combine this with other open-source projects (like Yocto, LAVA, and GitLab CI/CD) to fully automate Linux kernel testing on embedded devices.

Speakers

Fabrizio Castro

Principal Software Engineer, Renesas Electronics Europe GmbH

I fell in love with software and hardware when I was a boy. I've had the privilege of working with brilliant people on exciting projects across several industries and universities. For the past 15 years, I have dedicated my professional life to Embedded Linux and products based on... Read More →

Chris Paterson

Engineer, Renesas Electronics Europe GmbH

Chris Paterson is a Senior Staff Software Engineer focused on embedded Linux and making CI work on real hardware, where things rarely go to plan. He works with tools like LAVA and KernelCI, and contributes to the Civil Infrastructure Platform (CIP) project.

Wednesday October 7, 2026 09:05 - 09:45 CEST
South Hall 3 A (Floor 3)

Embedded Linux Conference

Audience Experience Level Beginner

11:20 CEST

Making Your CI Lab More Reliable - Patrick Titiano, Baylibre SAS

Wednesday October 7, 2026 11:20 - 12:00 CEST

South Hall 3 A (Floor 3)

If you've ever built your own CI Lab, you've probably already faced some of these issues:
- Remote power cycling of the boards (particularly when it requires pressing a push-button)
- Managing remote debug console
- Handling inrush current/power outage and surges
- Handling boards with heterogeneous form factors
- Handling remote GPIOS/accessories
- Handling remote displays/ KVMs
- Handling non-disruptive lab/board maintenance
- Handling distributed CI labs

At Baylibre, we've been dealing with CI Lab maintenance for many years, starting from 'scratch' (boards laying on shelves with wires all over the place) to standardised labs in server racks. In this presentation, we will share all the solutions we've found and developed to tackle all these issues, with the objective of improving the quality of our FOSS projects by making our CI labs reliable and easy to maintain.

Speakers

Patrick Titiano

Co-founder, System Power Management Expert at BayLibre, Baylibre SAS

Patrick Titiano has 20 years of engineering experience in embedded technologies. Patrick spent 9 years at Texas Instruments as an OMAP Power Management Expert (from architecture to use-case power optimization). Patrick also developed embedded diagnostic open source tools (“omapconf... Read More →

Wednesday October 7, 2026 11:20 - 12:00 CEST
South Hall 3 A (Floor 3)

Embedded Linux Conference

Audience Experience Level Beginner

11:40 CEST

ORBIT Launchpad: Building the Due Diligence Bridge Between Manufacturers and Open Source - Nicole Bates-Callaghan, Microsoft & Sarah Evans, Dell Technologies

Wednesday October 7, 2026 11:40 - 12:00 CEST

Chamber Hall (Floor 3)

The EU Cyber Resilience Act requires manufacturers to exercise due diligence when integrating open source components — but what does that actually look like in practice? ORBIT Launchpad is an OpenSSF initiative building the catalogs, criteria, and tooling that help manufacturers demonstrate they've done the work.

This talk covers how ORBIT Launchpad bridges the gap between regulatory intent and operational reality. We'll share how the CRAB-FOSC and CRAB-FOMA catalogs translate CRA obligations into actionable criteria that manufacturers can evaluate against, how we're aligning with complementary efforts across foundations to avoid duplication, and what the open source ecosystem needs to provide so that due diligence doesn't become an unfunded mandate on maintainers.

Attendees will leave with a practical understanding of: what due diligence means for manufacturers consuming open source under the CRA; how ORBIT Launchpad's open catalogs and tooling reduce that burden; and how standards bodies and open source communities can work together to make compliance achievable.

Speakers

Nicole B

Principal Technical Program Manager, Microsoft

Nicole Bates is a Principal Technical Program Manager on Microsoft's Azure OCTO Open Source Ecosystem team, where she focuses on open source supply chain security strategy. She co-chairs the IETF SCITT Working Group, ORBIT Launchpad SIG, and Supply Chain Integrity Working Group at... Read More →

Sarah Evans

Distinguished Engineer, Dell Technologies

Sarah Evans is a Distinguished Engineer and security applied research program lead at Dell Technologies, driving technical innovation for secure business outcomes. She is a recognized leader focusing on extending secure operations and supply chain principles to securing AI and agentic... Read More →

Wednesday October 7, 2026 11:40 - 12:00 CEST
Chamber Hall (Floor 3)

OSS Enabling & Management, Standards & Specifications

Audience Experience Level Beginner

13:30 CEST

Secure by Default in Embedded Linux: The Features You Are Probably Not Using - Marta Rybczynska, Ygreky

Wednesday October 7, 2026 13:30 - 14:10 CEST

South Hall 3 B (Floor 3)

Linux offers an impressive collection of security mechanisms, and recent years have added even more to the stack. Yet when reviewing embedded Linux products, I repeatedly run into a different problem: security features that are available, mature, and practical are simply not enabled.

Many embedded projects still start from vendor examples, reference BSPs, or existing products. As a result, design decisions made years ago often become the default for the next generation of devices. This talk focuses on a set of practical security mechanisms that embedded developers can deploy from the beginning of a project with relatively little effort.

Using examples from Yocto Project-based systems, we will examine features and tools such as:
- overlayfs with its advanced features
- filesystem permission hardening
- seccomp-based system call filtering
- fs-verity for file integrity protection
- fscrypt for protecting data belonging to different users and use cases.

We will discuss why they should be part of a base configuration and and show practical examples on how to do it.

Speakers

Marta Rybczynska

Founder and CEO, Ygreky

Marta Rybczynska has a network security background, with 20 years of experience in Open Source.
She has worked with embedded operating systems like Linux and various real-time OSes, and with
system libraries and frameworks up to user interfaces. Contributed to various projects in... Read More →

Wednesday October 7, 2026 13:30 - 14:10 CEST
South Hall 3 B (Floor 3)

Embedded Linux Conference

Audience Experience Level Beginner

13:30 CEST

Building Your Own Linux Kernel CI on Commodity Platforms - Shung-Hsi Yu, SUSE

Wednesday October 7, 2026 13:30 - 14:10 CEST

Panorama Hall (Floor 1)

While Continuous Integration (CI) has become a standard for most software projects via platforms like GitHub, testing massive, highly complex repositories like the Linux kernel has traditionally required bespoke environments. This limitation creates significant friction for new kernel contributors, out-of-tree module maintainers, and low-level system library authors attempting to validate compatibility against the latest development branches.

This session details a practical architecture for running the latest development kernels entirely within commodity CI environments. There are two key components: a highly optimized, VM-tuned kernel configuration, and vmtest, an open-source utility that abstracts away the complexities of QEMU configuration, seamlessly maps the CI workspace as the virtual machine's root filesystem via the 9P protocol, and propagates test command return codes back to the runner.

By the end of the session, attendees will gain the knowledge to build custom kernel CI workflows, leaving with a boilerplate GitHub Actions .yml from danobi/vmtest-action-demo to immediately deploy their own testing pipelines.

Speakers

Shung-Hsi Yu

Kernel Engineer, SUSE

Mainly working on maintaining the eBPF stack of SUSE Linux Enterprise Server (SLES) distribution.
Currently drawn to the inner working of eBPF verifier and formal verification.

Wednesday October 7, 2026 13:30 - 14:10 CEST
Panorama Hall (Floor 1)

Linux

Audience Experience Level Beginner

13:30 CEST

Making the Kernel Chat: How To Get Debug Output - Richard Weinberger, sigma star gmbh

Wednesday October 7, 2026 13:30 - 14:10 CEST

Terrace 2A (Floor 2)

When starting with Linux kernel development, beginners quickly encounter a frustrating roadblock: system crashes that produce absolutely no output, neither on the screen nor in the logs. Fortunately, Linux provides a rich toolbox designed to extract debug information even in the most desperate situations. The main challenge is knowing which tool fits a specific scenario and what data to expect.

In this talk, Richard shares practical guidance on the debugging mechanisms he has relied on over his past decade of working inside the Linux kernel. Attendees will learn how to break through the silence by deploying the right tool for the right type of crash. Besides well known mechanisms such as earlyprintk, pstore, and ftrace, Richard will reveal lesser known Linux debugging gems used to capture logs from freezing systems, trace internal behavior, and retrieve postmortem panic data.

By the end of the talk, beginners will have a clear and actionable roadmap for diagnosing actual kernel issues, ensuring they know exactly what to do the next time the kernel suddenly goes quiet.

Speakers

Richard Weinberger

CTO, sigma star gmbh

Richard Weinberger is co-founder of sigma star gmbh where he offers consulting services around Linux and IT security. Upstream he maintains various subsystems of the Linux kernel such as UserModeLinux and UBIFS. Beside of low level and security aspects of computers he enjoys growing... Read More →

Wednesday October 7, 2026 13:30 - 14:10 CEST
Terrace 2A (Floor 2)

Open Source 101

Audience Experience Level Beginner

13:30 CEST

From Reset To Main(): Porting Infineon TriCore AURIX To Zephyr - Parthiban N, Linumiz & Christoph Seitz, Infineon Technologies AG

Wednesday October 7, 2026 13:30 - 14:10 CEST

South Hall 2 B (Floor 2)

Infineon's AURIX family of automotive microcontrollers is based on the TriCore architecture and is widely used across automotive systems, from powertrain and chassis control to safety-critical ECUs. This talk presents the upstream effort to add TriCore architecture support and enable Infineon AURIX TC3x and TC4x devices in Zephyr (https://github.com/zephyrproject-rtos/zephyr/pull/107516).

Starting from CPU reset, we will walk through the key architecture bring-up steps required to reach the first Zephyr thread, including trap and interrupt handling, Context Save Area (CSA)-based context switching, and system timer integration. We will also cover the work required beyond the architecture layer, including SoC support, board enablement, and QEMU-based development and testing.

Finally, we will discuss the challenges of upstreaming a new architecture into Zephyr, from toolchain and CI integration to HAL dependencies and ecosystem support, along with the remaining work needed for automotive and safety-critical systems.

Speakers

Parthiban

Director of Engineering, Linumiz

With over 14 years of experience in software engineering, Parthiban founded Linumiz, a company that provides domain-neutral software services for U-Boot, Linux, and Zephyr, ranging from board bringup, board supported package, customization, device drivers, to over the air software... Read More →

Christoph Seitz

Field Application Engineer, Infineon Technologies AG

Started out designing FPGA-based high-speed data platforms — where open source first got under my skin. Now at Infineon, I drive adoption of Ethernet-based solutions in the automotive segment across EMEA, with a deep understanding of hardware-software interaction and industry standards... Read More →

Wednesday October 7, 2026 13:30 - 14:10 CEST
South Hall 2 B (Floor 2)

Zephyr Developer Summit

Audience Experience Level Beginner

13:50 CEST

The Japan-Type OSS Model: Native Species, Seeding Strategy, and Rules as Code - Kazuki Imamura, IPA: Innovation Platform Agency, Japan

Wednesday October 7, 2026 13:50 - 14:10 CEST

Chamber Hall (Floor 3)

Open source is now social infrastructure, rarely recognized until it fails. To shape a forward-looking strategy, we must know where we stand. In 2025, IPA ran two foundational surveys: a software-trends survey of domestic firms, and a GitHub study of 30,298 public-sector repositories across seven countries.

The findings show modest but clear momentum. Corporate OSS policy adoption rose from 32.0% to 36.7% (normalized), and vague "don't know" answers gave way to concrete work on security and talent development—a shift from awareness to practice. Japan's government OSS repositories rank alongside Germany, Singapore, and Estonia, with GIS and geospatial strengths grown from frontline needs—now a uniquely AI-ready foundation.

We propose a "Japan-Type OSS Model" with three axes: cultivating "native species" OSS rooted in real needs; a "seeding strategy" where the public sector publishes building blocks industry scales into services; and "Rules as Code," making institutions machine-readable for trustworthy AI.

This session shares what one country learned from mapping its terrain—and calls for cross-border collaboration on how open source will underpin digital sovereignty worldwide.

Speakers

Kazuki Imamura

Open Source Promotion, IPA: Innovation Platform Agency, Japan

Born in 1974. I started my current job in March 2024. Prior to that, I worked in web development for 13 years. I started activities as a civic tech contributor in 2018.

Wednesday October 7, 2026 13:50 - 14:10 CEST
Chamber Hall (Floor 3)

OSS Enabling & Management, Standards & Specifications

Audience Experience Level Beginner

15:35 CEST

FreeBSD as a Linux Platform: LinuxKPI, Linuxulator, and the Case for Convergence - Moin Rahman, The FreeBSD Project

Wednesday October 7, 2026 15:35 - 16:15 CEST

Panorama Hall (Floor 1)

Linux dominates modern infrastructure, yet its monopoly on hardware support and application ecosystems creates a false premise, that Linux is the only viable platform. FreeBSD has quietly built two production grade compatibility layers that challenge this assumption.
LinuxKPI implements Linux kernel APIs directly inside the FreeBSD kernel, enabling unmodified GPU, wireless, and RDMA drivers including but not limited to amdgpu, iwlwifi, and Mellanox OFED to compile and run natively. Contrary too emulation this is source-level API compatibility with negligible runtime overhead.
The Linuxulator complements this at the userland boundary which is a high-performance syscall translation layer that executes unmodified Linux ELF binaries on the FreeBSD kernel, with measured overhead consistently under 2% for I/O-bound workloads.
Combined with FreeBSD Jails and VNET, operators gain isolated Linux environments with native ZFS storage, DTrace observability, and a hardened network stack without a hypervisor.
This talk examines the architecture of both layers, their production deployment patterns, and the upstream contribution model that keeps them current with Linux kernel releases.

Speakers

Moin Rahman

Contributor, The FreeBSD Project

Long-time contributor to The FreeBSD project, he works on release engineering, reproducible build infrastructure, automated CI/CD pipelines, and distributed cluster administration. He also leads Cybermancer Infosec, a consultancy focused on Zero Trust OS pipelines, artifact verification... Read More →

Wednesday October 7, 2026 15:35 - 16:15 CEST
Panorama Hall (Floor 1)

Linux

Audience Experience Level Beginner

15:35 CEST

Iceberg for Agents - Turning Lakehouse Data Into AI-Ready Context - Andrew Madson, Fivetran

Wednesday October 7, 2026 15:35 - 16:15 CEST

Forum Hall (Floor 2)

AI agents fail in production because they're overwhelmed with data but starved for context. LLM models aren’t the problem. The bottleneck is the data stack: fragmented silos, inconsistent definitions, and logic hidden in tribal knowledge. Agents need structured, reliable, and interpretable context—not just data access.

In this session, we'll show how Apache Iceberg becomes the backbone of AI-ready pipelines. You’ll learn how to elevate your Iceberg implementation from a storage format to a live context layer that powers structured retrieval-augmented generation (RAG), schema-aware agents, and autonomous reasoning grounded in truth.

What we’ll cover:
1. Iceberg Foundations for AI - from ACID to Time Travel
2. From Rows to Relationships - The role of the semantic layer
3. Structured RAG in Practice - Fully open source

The session includes a live demo of a fully open-source Structured RAG stack built on Apache Iceberg, featuring semantic query translation, hybrid retrieval, and governed agent reasoning. Expect architecture diagrams, real code, and practical guidance.

Speakers

Andrew Madson

Head of Developer Relations, Fivetran

Andrew Madson is Head of Developer Relations at Fivetran, where he builds global programs that help developers and data teams adopt modern data and AI tooling. He previously led DevRel and evangelism at Tobiko Data (creators of SQLMesh) and Dremio, is author of the O'Reilly Definitive... Read More →

Wednesday October 7, 2026 15:35 - 16:15 CEST
Forum Hall (Floor 2)

Open AI & Data

Audience Experience Level Beginner

15:35 CEST

Your Backup Data Doesn't Belong To You - Julien Castets, Plaklar

Wednesday October 7, 2026 15:35 - 16:15 CEST

Terrace 2A (Floor 2)

You can rebuild your infrastructure from a git repo and migrate workloads across clouds. Your backup data is locked in a proprietary format, on vendor hardware, encrypted with keys you don't fully control. This talk applies the open-source portability argument to resilience, and examines what genuine backup ownership actually requires: open formats, storage-backend independence, and key custody that stays with the data owner.

Speakers

Julien Castets

Software Engineer, Plaklar

Julien Castets is a French software engineer based in Prague, Czech Republic. Passionate about infrastructure, he previously worked at cloud providers Scaleway and Koyeb as a DevOps and backend engineer, and now works at Plakar, an open-source backup platform, where he focuses on... Read More →

Wednesday October 7, 2026 15:35 - 16:15 CEST
Terrace 2A (Floor 2)

Open Source 101

Audience Experience Level Beginner

15:35 CEST

BoF: Open by Default or Intent: Inflection Points for Public Sector Open Source Decisions - Clare Dillon, CURIOSS; Remy DeCausemaker, CMS.gov; Johan Linåker, RISE Research Institutes of Sweden; Karel Rietveld, Netherlands Tax Administration

Wednesday October 7, 2026 15:35 - 16:15 CEST

Conference Hall (Floor 4)

Many organizations have bought into the value of open source, but don't choose to open source everything. This Bird of a Feather session focuses on the inflection points for public sector organizations: what actually causes an organization to move projects from closed source to Open Source, or — just as importantly — to make a deliberate call that something should stay closed. The triggers are rarely just technical. Public Sector organizations may consider the ROI on open sourcing; whether the codebase, the team, and the organization are actually in a position to do this well; if there are regulatory obligations or policy considerations that push you towards being more open or closed. Sometimes the honest answer is that the perceived collaboration overhead (e.g. documentation, governance) may not be worth it for code that's considered throwaway or not ready for public consumption. Session participants will include researchers, representatives from InnerSource Commons and OSPOs in public sector organizations who have experience navigating these decisions.

Speakers

Clare Dillon

Community Lead, CURIOSS

Clare Dillon is community lead for CURIOSS, a community for university and research institution OSPOs. Clare is also a PhD researcher with Lero, the Science Foundation Ireland Research Centre for Software and a member of Lero's OSPO team. Clare was the inaugural Executive Director... Read More →

Remy DeCausemaker

Acting Director, OSPO, CMS.gov

Remy DeCausemaker is the Acting Director of the Open Source Program Office at the Centers for Medicare & Medicaid Services (CMS.) Remy helps developers, designers, and other contributors work with dedicated civil servants to create open accessible health technology projects, programs... Read More →

Johan Linaker

Senior Researcher at RISE Research Institutes of Sweden and an Adjunct Assistant Professor at Lund University, RISE Research Institutes of Sweden

Johan Linåker is a Senior Researcher at RISE Research Institutes of Sweden and an Adjunct Assistant Professor at Lund University, working at the intersection of empirical software engineering, open technologies, and digital sovereignty. His work focuses on how public and private... Read More →

Karel Rietveld

Open Source Program Office lead, Netherlands Tax Administration

Working within the Chief Technology Office in building an Open Source Program Office for the Netherlands Tax administration, Customs and Benefits

Wednesday October 7, 2026 15:35 - 16:15 CEST
Conference Hall (Floor 4)

OSS Enabling & Management, Operations Management & OSPOs

Audience Experience Level Beginner

15:35 CEST

AI in Zephyr PSIRT: Lessons From the Front Line - Flavio Vinicius Alvares Ceolin, Hubble Network & David Brown, Linaro

Wednesday October 7, 2026 15:35 - 16:15 CEST

South Hall 2 B (Floor 2)

Zephyr’s security response is run by a small, mostly volunteer team handling a large and growing workload. Every vulnerability report must be triaged against a million-line codebase, confirmed in source, scored, mapped to a CWE, written up as a CVE record, documented for disclosure, and tracked across multiple release branches — often under embargo deadlines that don’t move. It’s repetitive, high-stakes work, and it’s exactly the kind of burden that burns maintainers out.

This talk is a candid look at how we started using AI to help: grounding analysis in the source tree with file:line citations, drafting CVE records against a strict schema to prevent fabricated fields, and reducing release vulnerability accounting from hours to minutes. It covers what worked, what failed, and the guardrails we built to keep a human in the loop. You’ll leave with a practical blueprint and checklist for using AI in security response — and an honest view of where it helps and where it’s still a liability.

Speakers

Flavio Vinicius Alvares Ceolin

Principal engineer, Hubble Network

Flavio Ceolin is a Principal Engineer at Hubble Network, where he works on embedded SDKs, device firmware, and communication protocols that use Zephyr and Bluetooth chips to connect devices to satellites. He is also a long-time Zephyr RTOS contributor, Zephyr’s Security Architect... Read More →

David Brown

Tech Lead, Linaro

David Brown has worked on the Linux kernel, with a focus on security for a number of years. Recently, he has been focusing on security as it relates to IoT and embedded devices, including focusing on secure booting, and secure network communications. He is currently the Security Chair... Read More →

Wednesday October 7, 2026 15:35 - 16:15 CEST
South Hall 2 B (Floor 2)

Zephyr Developer Summit

Audience Experience Level Beginner

16:30 CEST

MCP and AI Protocols: Questions for Open Source Managers - Ana Jiménez Santamaría, Linux Foundation

Wednesday October 7, 2026 16:30 - 16:50 CEST

Conference Hall (Floor 4)

Open protocols are creating a new layer of infrastructure for how AI agents connect to tools, data, and each other. For OSPOs and open source managers, this also creates a new governance surface: How should open source repositories document instructions for AI agents?; What policies are needed for AI-assisted contributions?; How can OSPOs help bring an open source perspective into agentic AI policies and processes while working with the teams responsible for security, legal and platform engineering?

This talk will introduce the basic concepts behind the open agent protocol landscape, with a special focus on the Model Context Protocol (MCP), and explore how OSPOs can apply this knowledge to open source policies, developer experience, contribution workflows, and reporting

The session will close with a few open questions and practical considerations for open source managers starting to explore this space, including how collaborative efforts such as TODO Group’s Agentic AI to Empower OSPOs initiative can help the community build in collaboration

Speakers

Ana Jiménez Santamaría

Senior Project Manager, Linux Foundation

Ana Jiménez Santamaría is an open source community leader and data scientist with 5+ years of experience at the Linux Foundation, working as Sr. project manager supporting global, multi-stakeholder IT ecosystems. She is also an Agentic AI Foundation Ambassador, helping developers... Read More →

Wednesday October 7, 2026 16:30 - 16:50 CEST
Conference Hall (Floor 4)

OSS Enabling & Management, Operations Management & OSPOs

Audience Experience Level Beginner

16:30 CEST

A Day in the Life of a CVE Remediator - Shubham Kalloli & Cameron Scholes, Ericsson Software Technology

Wednesday October 7, 2026 16:30 - 17:10 CEST

Terrace 2A (Floor 2)

This talk will focus on a day in the life of CVE remediators. It will go through the full process of identifying, resolving, upstreaming and following up CVEs in various dependencies. It will also go through the various Open Source tools that we use throughout the full process, touch on our experiences working upstream and go through how we are sharing this knowledge and experience internally.

Speakers

Shubham Kalloli

Senior Software Engineer, Ericsson Software Technology

Senior Software Engineer at Ericsson Software Technology working in the Open Source Community

Cameron Scholes

Software Engineer, Ericsson Software Technology

Cameron is a software engineer working for Ericsson Software Technology in Ireland for over 3 years. He has been working in many different open-source projects and communities with a focus on the security supply chain and CVE remediation upstream. He has experience with many different... Read More →

Wednesday October 7, 2026 16:30 - 17:10 CEST
Terrace 2A (Floor 2)

Open Source 101

Audience Experience Level Beginner

17:25 CEST

Sandlock: Rootless and Containerless Confinement for AI Agents - Cong Wang, Multikernel Technologies

Wednesday October 7, 2026 17:25 - 18:05 CEST

Panorama Hall (Floor 1)

Your AI agent just wrote some code and wants to run it on your machine. It can read your SSH keys, exfiltrate data to any host, and overwrite your project. How do you give it just enough freedom to be useful, and nothing more?

This talk presents Sandlock, an AI agent sandbox for Linux that locks a process down in about 5 milliseconds using nothing but the kernel. No root. No cgroups. No containers. Spinning up a container or microVM per agent action means image builds, privileged setup, and a ~100 ms tax on every launch. Sandlock makes confinement cheap enough to wrap every command an agent runs.

We will show how it composes three kernel features: Landlock for filesystem, network, and IPC scoping; seccomp-bpf for syscall filtering; and seccomp user notification, where a supervisor enforces memory limits, an IP and port allowlist, HTTP-level ACLs with zero-config HTTPS inspection, and a copy-on-write working directory.

Live demos: pin an agent's egress to a single API, give it data access but no network, preview every file it would change before committing, and see real numbers (44x faster startup than Docker).

Speakers

Cong Wang

Founder and CEO, Multikernel Technologies

Cong Wang is a professional Linux kernel developer mainly focuses on AI agent infrastructure, he founded Multikernel Technologies and Agentry. He has contributed over 1000 patches to the Linux kernel project and many other open source projects.

Wednesday October 7, 2026 17:25 - 18:05 CEST
Panorama Hall (Floor 1)

Linux

Audience Experience Level Beginner

17:25 CEST

Panel Discussion: Open Source in Software-Defined World - Sven Jeroschewski, Robert Bosch GmbH; Ana Jiménez Santamaría, Linux Foundation; Cornelius Schumacher, DB Systel GmbH; Agustin Benito Bethencourt, Independent

Wednesday October 7, 2026 17:25 - 18:05 CEST

Conference Hall (Floor 4)

Many initially hardware-driven industries, undergo a profound transformation and become more defined by software like it is the case in the automotive industry. Driven by increasing software complexity, this shift demands unprecedented levels of collaboration and joint integration. As many organizations whose core business was not selling software accelerate towards a more software-defined world, a critical question is how to consume, grow, run and consume the involved Open Source projects to deliver lasting value.

While many of the effects of open collaboration are not unique to a particular domain, the lessons learned from already more "software-defined" industries unlock invaluable insights that are collected in the TODO Group Business Guide.

Taking the learnings from that guide, this panel will delve into how Open Source activities effectively contribute to reaching business goals.

Join us to uncover enablers of sustainable Open Source development, learn from cross-industry successes, and equip your teams with the necessary competencies to thrive in the rapidly evolving software-defined world.

Speakers

Sven Erik Jeroschewski

OSPO Member, Robert Bosch GmbH

Sven Erik Jeroschewski is a Software Engineer with the OSPO of the Robert Bosch GmbH. He combines Open Source strategy with software engineering and actively works within the automotive open-source ecosystem by acting as a committer for Eclipse Kuksa. Sven studied Computer Engineering... Read More →

Ana Jiménez Santamaría

Senior Project Manager, Linux Foundation

Cornelius Schumacher

Open Source Steward, DB Systel GmbH

Cornelius helps teams at Deutsche Bahn, the German railway company, to use and contribute to open source software. He has a background from more than two decades in the open source community and industry. Originally a software developer he now focus on management of open source.

Agustin Benito Bethencourt

Consultant, self-employed

Independent consultant, focused on increasing organizational performance in two ways:
1.- Through Tagoross, the forum for professionals at the crossroad of open source as strategy and business
2.- By supporting their journey towards becoming good open source citizens, including AI... Read More →

Wednesday October 7, 2026 17:25 - 18:05 CEST
Conference Hall (Floor 4)

OSS Enabling & Management, Operations Management & OSPOs

Audience Experience Level Beginner

09:05 CEST

11:20 CEST

11:40 CEST

13:30 CEST

13:30 CEST

13:30 CEST

13:30 CEST

13:50 CEST

15:35 CEST

15:35 CEST

15:35 CEST

15:35 CEST

15:35 CEST

16:30 CEST

16:30 CEST

17:25 CEST

17:25 CEST

Get help with the event