by Lee Garrett

At: miniDebConf Berlin 2024

Closing talk

Room: c-base

by Holger Levsen

At: miniDebConf Berlin 2024

This short talk will explain to you how (when) to run:

and similar with s#gpg#gpgv#.

src:rust-sequoia-chameleon-gnupg is available in unstable (and by the time of the MiniDebConf, hopefully in trixie too) and in this short talk I will explain how you can use it (almost) as a full drop-in replacement today.

Under the hood, the chameleon is sequoia and while you can use OpenPGP like you've done it "forever", there's more.

Room: c-base

by Helmut Grohne

At: miniDebConf Berlin 2024

Debian has settled on moving aliased files from / to /usr via DEP17. While initially it looked a lot like we would change dpkg, this is not the route we are going now. I am giving a summary of the discussion results and explaining the resulting solution together with its advantages and disadvantages. I also delve into the process choices being made and try to derive a few early lessons learned.

Room: c-base

by Holger Levsen

At: miniDebConf Berlin 2024

Currently when building (official) Debian packages, there are 3 kinds of build artifacts,

The 4th type of build artifacts are used eg by src:binutils and src:gccX packages and today are stored in .debs making the builds of these important core packages unreproducible, shiver.

Please read https://wiki.debian.org/BuildArtifacts to learn more about this issue and possible ways out. And then please join this workshop if this topic interests you!

Room: c-base

by Rudolph Bott

At: miniDebConf Berlin 2024

Lightning Talks

Room: c-base

by Martin

At: miniDebConf Berlin 2024

In some applications of wind and solar power, meteorological measurement values need to be transmitted "live" or in real-time. Data loggers, running Debian, by Ammonit Measurement GmbH Berlin do that using XMPP. We will explain, how that works, which (free!) software we use, and which standards, RFCs and XEPs, are being deployed.

Room: c-base

by Matthias Geiger

At: miniDebConf Berlin 2024

In this talk I will give an insight on how the Debian Rust Packaging process works. I will start with an introduction on Rust and the ecosystem, give an overview about the packaging workflow, and talk a bit about GTK-rs applications. I held a similar talk at the Ubuntu Summit in Riga 2023.

Room: c-base

by Simon Josefsson

At: miniDebConf Berlin 2024

How to improve security of apt repositories with transparency techniques. I will describe attack threat models we should protect against that the apt ecosystem currently do not have any defense against. This goes beyond the current PGP/GnuPG-based trust system. I propose we need a mechanism inspired by WebPKI's Certificate Transparency, and that we consider existing technologies such as HTTPS canary files, Sigstore's public transparency log, Sigsum's public transparency log, and Filippo Valsorda's spicy signatures. I will talk about interactions with reproducible builds to increase safety of package upgrades.

Room: c-base

by Hanno Böck

At: miniDebConf Berlin 2024

In 2008, a severe security vulnerability was discovered in Debian's OpenSSL package. Due to a bug, cryptographic keys generated with the affected OpenSSL packages used very limited entropy, effectively limiting the number of possible keys to a few ten thousands. This was 16 years ago, but it turns out that affected keys are still used in the wild.

The speaker has developed the tool badkeys, a free software tool to scan cryptographic public keys for known vulnerabilities. By scanning DKIM public keys, several keys affected by the 2008 Debian OpenSSL bug were discovered. This allowed creating valid DKIM signatures for several high-profile domains. In some cases, signed mails show up with a company Logo in popular email clients due to a mechanism called BIMI.

See also: https://badkeys.info/

https://16years.secvuln.info/

Room: c-base

by Carsten Aulbert

At: miniDebConf Berlin 2024

At the Max Planck Institute for Gravitational Physics (Albert Einstein Institute) we are running a largish computing facility called "Atlas".

In this talk I want to briefly show how we scaled up from earlier iterations with 10 computers installed manually, to the current 3,500 server set-up with Debian GNU/Linux as our foundation and not much personnel.

I will try to at least touch the basics of operation like automatic installation and configuration with FAI/salt, getting work done with HTCondor, monitoring, daily tasks and chores, and how educating users usually pays off in the long run.

Ideally, anyone with some Linux background should be able to understand all of it as I do not plan to dive into details too much.

Room: c-base