))
x.com/naval
…
continue reading
With Hosts Hank Kee and Joe King
…
continue reading
Der Chaos Computer Club ist die größte europäische Hackervereinigung, und seit über 25 Jahren Vermittler im Spannungsfeld technischer und sozialer Entwicklungen.
…
continue reading
Whether we wear a lab coat or haven't seen a test tube since grade school, science is shaping all of our lives. And that means we all have science stories to tell. Every year, we host dozens of live shows all over the country, featuring all kinds of storytellers - researchers, doctors, and engineers of course, but also patients, poets, comedians, cops, and more. Some of our stories are heartbreaking, others are hilarious, but they're all true and all very personal. Welcome to The Story Collider!
…
continue reading
Expert insights on digital transformation, helping businesses leverage automation and data to accelerate growth and innovation. Featuring Cooperative Computing's Chief Revenue Officer Jim Barker, this podcast delivers actionable insights. Through relatable success stories and expert analysis, we explore how businesses can leverage hyper-personalization, hyper-automation, and data-driven decisions to gain competitive advantage. Whether you're a business leader modernizing legacy systems or im ...
…
continue reading
Step inside the diverse and fascinating worlds of cybersecurity professionals around the globe and hear their personal stories in their own words.
…
continue reading
This podcast is where we discuss different ways to run your I.T. business whether you are a one-person shop or leading a growing IT Service provider. This is the place for you.
…
continue reading
Stewart Alsop III reviews a broad range of topics with his father Stewart Alsop II, who started his career in the personal computer industry and is still actively involved in investing in startup technology companies. Stewart Alsop III is fascinated by what his father was doing as SAIII was growing up in the Golden Age of Silicon Valley. Topics include: - How the personal computing revolution led to the internet, which led to the mobile revolution - Now we are covering the future of the inte ...
…
continue reading
This podcast features intimate conversations with engineers who are in the forefront of building or teaching technology. Join us as we learn how our guests got started in tech, the type and level of education they've obtained, their work history, and personal stories about their journey. We publish the show on Apple, Spotify, YouTube, and the Web biweekly on Wednesdays at 12pm US Eastern Time. Subscribe and STAY TUNED!
…
continue reading
Explore how the latest technologies are shaping our world, from groundbreaking discoveries to transformative sustainability efforts. The NVIDIA AI Podcast shines a light on the stories and solutions behind the most innovative changes, helping to inspire and educate listeners. Every week, we’ll bring you another tale, another 30-minute interview, as we build a real-time oral history of AI that’s already garnered nearly 6.5 million listens and been acclaimed as one of the best AI and machine l ...
…
continue reading
Weekly podcasts from Science Magazine, the world's leading journal of original scientific research, global news, and commentary.
…
continue reading
A podcast about all things veterinary imaging, from the team at IMV imaging. Feeling inspired? Take a look at our range of online and in-person CPD courses: Learning Resources | IMV Imaging (imv-imaging.com)
…
continue reading
Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure. We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or ju ...
…
continue reading
We're increasingly dependent on technology. Our business and personal lives rely on it, but as you've probably noticed, it's unreliable.They promise it'll get better, but it usually gets worse. Our computers are slow, so we end up squinting at smartphones. We live in constant fear that something's going to happen to our personal data. So we're scared into paying for fake protection that proves useless when disaster strikes. The jokers we pay to fix our stuff have no clue what they're doing, ...
…
continue reading
Eli Davis, a special educator, teacher leader, and Ph.D. candidate, hosts discussions on the transformative power of AI in education. Bringing together a variety of voices who are doing the work in classrooms, you'll hear how AI can be a thought partner rather than a crutch and gain insights on navigating bias and leveraging AI to improve outcomes for all.
…
continue reading
Welcome to Opt Out, where I sit down with passionate people to learn why privacy matters to them, the tools and techniques they’ve found and leveraged, and where we encourage and inspire others towards personal privacy and data-sovereignty.
…
continue reading
GeekWire brings you the week's latest technology news, trends and insights, covering the world of technology from our home base in Seattle. Our regular news podcast features commentary and analysis from our editors and reporters, plus interviews with special guests.
…
continue reading
On Train Talks, we will discuss a variety of topics, including relationships, professional wrestling, stories from my personal life, sports, TV shows, Netflix, movies, and more. This will be the podcast where we dive deep into the topics discussed with a Special Guest occasionally. I’m a small YouTuber who has been making Content Since May 2016. Feel free to send topics!! subscribe to my YouTube link here: https://www.youtube.com/channel/UCyf0YvOfZ6rTbUSd96yAbjA My Social Media: 🟣 Instagram: ...
…
continue reading
In this podcast, host Sid Maestre and his co-host, John Gage, will discuss "What is the Thinking Into Results program"? Thinking into Results is a one-of-a-kind system based on over 75 years of intensive research into the science and mechanics of personal achievement: what really makes successful people successful. Be More, Do More, Have More. Starting today. Thinking into Results is a one-of-a-kind system based on over 75 years of intensive research into the science and mechanics of persona ...
…
continue reading
"Reach - Then Teach" offers host Derrick Brown's wisdom earned through life lessons learned about mentoring, mediation, and problem solving. The show uses "standup storytelling" (commentary, teaching, spoken word (poetry), rap, and song) to deliver compelling, thematic, personal narratives about love, change, equality, power, (self-)control, and purpose. Popular segments include "Dear Hannah (Letters To My Daughter)", "Fight The Good Fight", "LEarning", and "The BIG Picture." Visit reachthen ...
…
continue reading
Download This Show is your weekly guide to the world of media, culture, and technology. From social media to gadgets, streaming services to privacy issues. Each week Rae Johnston and guests take a fun, deep dive into how technology is reshaping our lives.
…
continue reading
Every week Linus and Luke discuss the most current happenings in the technology universe.
…
continue reading
Computer repair, personal computer instruction in Safety Harbor, Clearwater, Tampa, St Pete
…
continue reading
meet the meQuanics is a regular podcast discussing the developments in quantum technologies. Targeted at the lay person, we will discuss the state of the art research in quantum enabled technologies with experts worldwide.
…
continue reading
Prominent and distinguished Computer Scientists from academia and industry narrate their personal experiences of immigrating from where they grew up, to a completely different land (often the US), for study, work, or other reasons. The Immigrant Computer Scientists podcast, featuring these oral history interviews, is intended for a general audience, and does not require you to know Computer Science or Math or any science, or even be an immigrant! We neither draw conclusions nor take sides in ...
…
continue reading
Podcast by Friend Software Labs
…
continue reading
tnkgrl’s Mobile Tech Podcast is the place to hear the lowdown on the nitty gritty details of what’s happening the world of mobile technology – especially smartphones, personal gadgets and even car tech. tnkgrl (Myriam Joire) has been covering tech for over a decade and was previously Engadget’s Senior Mobile Editor, host of the Engadget Mobile Podcast, and co-host of TWiT’s All About Android.
…
continue reading
"Web 3.0 with Sam Kamani" is all about Web 3 and how it is going to change the world. If you are interested in learning more about the 4th Industrial revolution then this podcast is for you. Web 3.0 or Web 3 is often hailed as the technology that will usher in the 4th industrial revolution. This revolution is going to affect every industry, business, government and person on this planet. Web 3.0 is a collection of technologies that are going to change how we collaborate with each other and i ...
…
continue reading
Real jobs. Real people. Real advice Welcome to Future You, the podcast that takes you behind the scenes of a wide variety of careers. In each episode, we interview professionals from different industries, diving into their personal journeys, the challenges they’ve faced, and the lessons they’ve learned along the way. You’ll hear firsthand what a day in their job really looks like, get valuable tips and advice for breaking into their field, and discover what it truly takes to succeed in diffe ...
…
continue reading
I discuss a variety of topics in both the natural and social sciences, exploring the many fascinating insights that the scientific method yields about the world around us.
…
continue reading
Faculty and students from the South East Technology University (SETU) Ireland explore a wide range of topics related to computing and technology. Hosted by Rob O'Connor. All opinions are personal and do not represent University views.
…
continue reading
Healthy Mind Science is a show dedicated to translating youth and young adult mental health science and research into the real world. We have conversations with experts in psychology, neuroscience, human development, computer science, education and more with a focus on helping parents and educators take research findings into their everyday lives to ultimately better support our young people. Healthy Mind Science is an affiliate of the Center for Healthy Mind and Mood, which is an interdisci ...
…
continue reading
Audacious with Chion Wolf spotlights the stories of people whose experiences, professions, or conditions defy convention or are often misunderstood. Guided by deep curiosity and genuine compassion, the team behind Audacious creates space for the kinds of stories that rarely get told - and the kinds of questions we're often afraid to ask. From those speaking publicly for the very first time to voices already known around the world, every guest is met with care, and every story is honored as b ...
…
continue reading
Join longtime friends and entrepreneurs Dheeraj Pandey, founder of DevRev, and Amit Prakash, co-founder of ThoughtSpot, on The Effortless Podcast as they explore the art of building, innovating, and thriving in tech—without losing sight of what really matters. With decades of experience scaling companies and navigating risk, Dheeraj and Amit tackle tough questions for modern entrepreneurs: How can startups feel effortless in the face of endless challenges? What does “long-term greedy” mean w ...
…
continue reading
The Program that takes the mystery out of Tech. A former corporate executive, Jim Blue makes sure your technology matches your personal and business needs.
…
continue reading
Your Technology Tutor - Chet Davis shares technology tips you can use, in plain language you can understand. Learn to become more successful using your personal tech tools like the iPhone, Mac computers, video cameras and digital photography.
…
continue reading
Stimulating debate about BSF ICT
…
continue reading
Embodiment Coaching
…
continue reading
Original Science Fiction
…
continue reading
The Macron Show is a prank call podcast that has been running since 2015. It is hosted by a virtual character named Macron, who is portrayed by a person whose identity remains anonymous. Macron uses various voice changing techniques and a range of characters to prank call unsuspecting individuals. The show typically involves Macron and his team calling people from different parts of the world and engaging them in humorous and sometimes outrageous conversations. These pranks often revolve aro ...
…
continue reading
Welcome to The Monica Talks Cyber Podcast Experience: The fastest, easiest and an engaging way to build and grow your career and business in artificial intelligence, leadership and cybersecurity. Monica Talks Cyber is a technology, career and business podcast and an engaging platform for real stories, discussions and opinions from renowned global experts in technology, leadership and cybersecurity. The podcast show is hosted by Monica Verma, Hacker, CISO, Keynote Speaker, Founder & CEO, Mult ...
…
continue reading
My personal Substack danyblue.substack.com
…
continue reading
Childhood is finite at just shy of 9.5 million minutes. We only get one shot at it. One of the biggest decisions we make is how we will use that time. Research has confirmed time and time again that what children are naturally and unabashedly drawn to, unrestricted outside play, contributes extensively to every area of childhood development. The importance here cannot be understated. Every year we aim to match nature time with the average amount of American kid screen time (which is currentl ...
…
continue reading
Welcome to the Intelligent Performance Podcast where we are fanatical about excellence. We talk to fascinating people, diving deep into the world of personal and professional development, and identifying how you can apply this to your life. At Venom, Intelligent Performance is our core design principle for building notebook computers. Our goal is about helping you pursue the impossible, beat the odds, and do the remarkable.
…
continue reading
I make a lot of recordings in my car. I tend to rant about things going on but put it in a perspective to help me grow. Personal development is the true purpose of this podcast. While I will have rants, I will be using this to verbally think and have feedback to help me grow in life.
…
continue reading
1
Make your personal website, it's easy! (quellcode25)
12:52
12:52
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
12:52
Lighting Talk about how to make your own personal website and lose your fears and doubts about how to do it.In a world where social media platforms keeps degrading and closing, where more and more places of Internet get subjected to "Enshittification", to the loss of personalization and even censorship, there's this call to oppose this.A countercul…
…
continue reading
1
The Personal Computer Radio Show 9-24-25
54:00
54:00
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
54:00
In the News Are We Ready for Smart Glasses? Some People Are Definitely Losing Their Jobs Blaming AI Medical Tools for Providing Biased Treatment Bias in AI LLMs CEOs Try Cloning Themselves with AI A ‘Demoralizing' Trend has Computer Science Graduates Out of Work ITPro Series with Benjamin Rockwell Quiet Cracking From the Tech Corner Job Market For …
…
continue reading
1
A new generation of radiotherapies for cancer, and why we sigh
34:48
34:48
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
34:48
First up on the podcast, Staff Writer Robert F. Service joins host Sarah Crespi to talk about a boom in nuclear medicine, from new and more powerful radioisotopes to improved precision in cancer cell targeting. Next on the show, we talk about why we sigh. Maria Clara Novaes-Silva, a doctoral student at ETH Zürich, discusses how deep breaths cause m…
…
continue reading
1
Episode #57: Silicon, Sovereignty, and Speculation: The Stakes of AI’s Next Phase
59:45
59:45
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
59:45
In this episode of Stewart Squared, Stewart Alsop sits down with his father, Stewart Alsop II, for a wide-ranging conversation that moves from OpenAI’s massive semiconductor and Oracle deals, to the nature of money and the gold standard, to shifting dynamics in U.S.–China relations and modern warfare technologies like drones and cyber tools. They a…
…
continue reading
1
1KHO 588: Tantrum-Free Technology is Here! | Anjan Katta and Tristan Scott, Daylight Computer
58:33
58:33
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
58:33
What if the solution to tech-induced meltdowns wasn’t another app, but a different kind of screen altogether? In this urgent, hope-filled conversation, Ginny sits down with Daylight founder and CEO Anjan Katta as well as Tristan Scott—two innovators taking on Big Tech with what they call “the least computer possible.” They explain how Daylight’s re…
…
continue reading
1
Complex Systems Emerge from Iterations on Simple Designs
6:18
6:18
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
6:18
http://nav.al/iterateبقلم Naval
…
continue reading
1
Closing session of All Systems Go! 2025 (asg2025)
2:22
2:22
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
2:22
Closing session of All Systems Go! 2025Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about this event: https://cfp.all-systems-go.io/all-systems-go-2025/talk/DR8ELH/
…
continue reading
1
One Boot Config to Rule Them All: Bringing UAPI Boot Specification to Legacy BIOS (asg2025)
24:59
24:59
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
24:59
The UAPI Boot Loader Specification defines conventions that let multiple operating systems and bootloaders share boot config files. So far, only systemd-boot implements it - and it’s UEFI-only by design.As a result, hybrid UEFI/BIOS images require maintaining (and keeping in sync) two sets of bootloader configs: one for systemd-boot, and one for a …
…
continue reading
1
OS as a Service at Meta Platforms (asg2025)
25:30
25:30
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
25:30
I overview how OS management is done at Meta. We run millions of Linux servers and we have to make sure that OS gets updated on all of them in a given period of time. To do that we developed several products: MetalOS (Image based version of CentOS), Antlir (image builder) and Rolling OS Update (a service that keeps a set of DNF repos in sync with u…
…
continue reading
Today starts Marc's new format of reading headlines of tech articles and summarizing them more quickly so we can breeze through the backlog: We discuss flaws in battery packs that cause EVs to set on fire, and the goal of making designs (and people) that are more tolerant to faults Apple shocks the world by throwing us a bone, allowing us to repair…
…
continue reading
1
Yocto's hidden gem: OTA and seamless updates with systemd-sysupdate (asg2025)
26:33
26:33
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
26:33
Updates are a critical piece of managing your fleet of devices. Nowadays, Yocto-based distributions can utilize layers for well-established update mechanisms. But, did you know that recent releases of Yocto already come with a simple update mechanism?Enter systemd-sysupdate: a mechanism capable of automatically discovering, downloading, and install…
…
continue reading
`test.thing` is a VM runner which targets guests using an API defined by systemd. It started after a conversation at devconf about turning `mkosi qemu` into a library. A quick intro.~~composefs is an approach to image-mode systems without the disk images. Files are stored in a de-duplicated content-addressed storage with integrity guaranteed throug…
…
continue reading
1
A terminal for operating clouds: administering S3NS with image-based NixOS (asg2025)
34:54
34:54
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
34:54
S3NS is a trusted cloud operator that self-hosts Google Cloud infrastructure in France, targeting the SecNumCloud certification, the most stringent Cloud certification framework. SecNumCloud includes strict legal and operational constraints. To manage these systems securely and reproducibly, we’ve built a family of dedicated administration terminal…
…
continue reading
1
UKI, composefs and remote attestation for Bootable Containers (asg2025)
42:50
42:50
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
42:50
With Bootable Containers (bootc), we can place the operating system files inside a standard OCI container. This lets users modify the content of the operating system using familiar container tools and the Containerfile pattern. They can then share those container images using container registries and sign them using cosign.Using composefs and fs-ve…
…
continue reading
1
Introducing ue-rs, minimal and secure rewrite of update engine in Flatcar (asg2025)
24:20
24:20
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
24:20
Introduce ue-rs, a fresh project that aims to be a drop-in reimplementation of update engine, written in Rust.The goal of ue-rs is to have a minimal, secure and robust implementation of update engine, required by A/B update mechanism of Flatcar Container Linux. Just like the existing update engine, it downloads OS update payloads from a Nebraska se…
…
continue reading
1
Leveraging bootable OCI images in Fedora CoreOS and RHEL CoreOS (asg2025)
25:51
25:51
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
25:51
In last year's ASG!, bootc and bootable containers were introduced. In this talk, we'll go over what changed since last year, and how Fedora CoreOS and RHEL CoreOS are leveraging bootable containers to reduce maintenance and increase sharing.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about this event: https://cfp.al…
…
continue reading
1
Dirlock: a new tool to manage encrypted filesystems (asg2025)
26:27
26:27
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
26:27
In the Linux world there are several tools and technologies to encrypt data on a hard drive, most falling into one of two categories: block device encryption (like LUKS) or stacked filesystem encryption (like EncFs or gocryptfs). This presentation will introduce Dirlock, a new tool that belongs to a third category: native filesystem encryption, usi…
…
continue reading
1
container-snap: Atomic Updates from OCI Images using Podman’s Btrfs Driver (asg2025)
22:46
22:46
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
22:46
Traditional package updates using tools like RPM or Zypper can introduce risks, such as incomplete updates or accidentally breaking the running system. To overcome these challenges, we developed **container-snap**, a prototype plugin designed to deliver atomic OS updates—updates that are fully applied or rolled back without compromising the system'…
…
continue reading
1
pidfd: What have we been up to? (asg2025)
39:28
39:28
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
39:28
File descriptors for processes on Linux have been available for quite some time now. Userspace has adapted them widely.Over the last two years or so we've extended the abilities of pidfds significantly. This talk will go over all the new features and deep dive into their implementation and usage.Licensed to the public under https://creativecommons.…
…
continue reading
1
Forget zbus, zlink is the future of IPC in Rust (asg2025)
38:14
38:14
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
38:14
Last year, Lennart Poettering of the systemd fame, [gave a presentation](https://media.ccc.de/v/all-systems-go-2024-276-varlink-now-) at this very same conference, where he introduced Varlink, a modern yet simple IPC mechanism. He presented a case for Varlink, rather than [D-Bus](https://en.wikipedia.org/wiki/D-Bus) to be the future of Inter-proces…
…
continue reading
1
Privilege delegation for rootless containers, what choices do we have? (asg2025)
21:43
21:43
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
21:43
Going for minimal containers with restricted system calls and unprivileged users is the usual Kubernetes approach these days, and it works great for most web apps. However, the development of more complex infrastructure extensions frequently hinders application functionality.While looking for a solution to deploy virtiofsd in an unprivileged contai…
…
continue reading
1
CentOS Proposed Updates: Bridging the Gap between development and production (asg2025)
25:32
25:32
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
25:32
CentOS Stream is especially suited for production deployments. In these environments it's often common to develop improvements to distribution packages and want to contribute them upstream. Unfortunately, until very recently that required one to then maintain their own build and deployment pipeline for the packages, at least until the changes made …
…
continue reading
1
New Linux Kernel Coredump Infrastructure (asg2025)
41:04
41:04
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
41:04
Coredumping on Linux has long been a nightmare. Currently two modes are supported:(1) Dumping directly into a file somewhere on the filesystem.(2) Dumping into a pipe connected to a usermode helper process spawned as a child of the system_unbound_wq or kthreadd.For simplicity I'm mostly ignoring (1). There's probably still some users of (1) out the…
…
continue reading
GNOME has collected some very old code over the years. During the recent GNOME 49 release, we've made some drastic cleanups. Most visibly, we've dropped support for X11 and gained many dependencies on systemd. Let's explore some of the what and why for these changes!Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about t…
…
continue reading
1
Slim device software with systemd targets and nspawn (asg2025)
24:23
24:23
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
24:23
It has been 10 years since Axis Communications had a presentation at the systemd conference. Back then, we have shown how we have increased our product quality, stability and boot times by porting our platform to systemd. 10 years later, we had different challenges to keep the resource usages and boot times under control. We have started from botto…
…
continue reading
1
GNOME OS' prêt-à-booter image (asg2025)
26:05
26:05
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
26:05
GNOME OS is a distribution based around systemd-sysupdate. This year, we finally created a live installer image using the same /usr partition as the installed OS. The main innovation however is the ability to install without the need to reboot. The user can start working while the installation is happening.This live image is built using systemd-rep…
…
continue reading
1
1KHO 587: The Family Team Is the Most Important Team | Tim Green, Rocket Arm
35:13
35:13
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
35:13
In this unforgettable episode of The 1000 Hours Outside Podcast, Ginny Yurich sits down with former NFL player, lawyer, and New York Times bestselling author Tim Green. Though Tim now lives with ALS and communicates through adaptive technology, his wisdom, warmth, and humor shine through every word. From life in the NFL to raising a family, from wr…
…
continue reading
1
Shipping Flatpak applications with an image based system (asg2025)
27:58
27:58
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
27:58
Flatpak is the de-facto standard for distributing desktop applications across various Linux based systems. It also offers other advantages such as sandboxing. It is particularly useful for image based systems as it installs the applications into a separate location and doesn't try to modify the system.GNOME OS is GNOME's development, testing and QA…
…
continue reading
1
Unprivileged Containers, with Transient User Namespaces and ID Mapping, but Without SETUID Binaries (asg2025)
41:53
41:53
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
41:53
Many traditional container engines make use of the "subuid" concept and the "newuidmap" tool to implement a concept of "unprivileged" user-namespace containers on Linux. This approach has many shortcomings in my PoV, from both a security and scalability standpoint.Recent systemd versions provide a more powerful, more secure, mor scalable alternativ…
…
continue reading
1
oo7-daemon: One year later – Progress, Challenges, and What’s next (asg2025)
3:08
3:08
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
3:08
oo7-daemon is the new D-Bus Secret Service provider that aims to fully replace gnome-keyring. In this followup (continuation of my 2024 talk) lightning talk, I will go through the progress made, the challenges faced and the status of systemd credentials integration.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about th…
…
continue reading
1
From initramfs-tools to mkosi-initrd (asg2025)
6:55
6:55
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
6:55
Marco will review the features available in the initramfs-tools ecosystem, the initrd generator used by Debian and Ubuntu, and how they can be implemented (or not) by adopting mkosi-initrd.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about this event: https://cfp.all-systems-go.io/all-systems-go-2025/talk/E989ZX/…
…
continue reading
1
A new systemd container runtime?! (asg2025)
27:25
27:25
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
27:25
At Meta, we've been looking to revamp our internal container runtime (Twine). Instead of maintaining all the low level container runtime code ourselves, we'd much prefer having more of this managed by systemd. This talk will go over what we did to make systemd transient units a suitable environment for running system containers (pid namespace suppo…
…
continue reading
Simplify systemd management with `isd`! `isd` is a TUI offering fuzzy search for units, auto-refreshing previews, smart sudo handling, and a fully customizable interface for power-users and newcomers alike.If you ever became frustrated while typing:- `systemctl start --user unit-A.service` (manually starting a unit)- `systemctl status --user unit-A…
…
continue reading
1
Verification of OS artifacts without stateful keyrings (asg2025)
21:40
21:40
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
21:40
Many OS artifacts today are still verified using proprietary, stateful keyring formats.With the "File Hierarchy for the Verification of OS Artifacts (VOA)" an attempt is made to rid the ecosystem of this limitation by implementing a generic lookup directory.With extensibility in mind, this unifying hierarchy currently provides integration for OpenP…
…
continue reading
1
ParticleOS: Why is Lennart still not dogfooding systemd?! (asg2025)
37:46
37:46
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
37:46
More than six months have passed since Daan tried to ~~shame~~ gently peer pressure Lennart to actually use the stuff he builds, via a FOSDEM talk:https://fosdem.org/2025/schedule/event/fosdem-2025-4057-particleos-can-we-make-lennart-poettering-run-an-image-based-distribution-/Did he succeed? Is dogfooding standard practice now in the systemd devel…
…
continue reading
1
A simpler and faster firewall with bpfilter (asg2025)
39:39
39:39
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
39:39
For many years, firewall solutions on Linux have grown and evolved, without any major change, until eBPF. While eBPF can allow very fast and efficient packet filtering, the learning curve doesn't make it easily accessible to non-developers. bpfilter aims to bridge the gap between existing tools (nftables, iptables) and modern technologies such as e…
…
continue reading
1
Sandboxing services with Landlock (asg2025)
25:01
25:01
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
25:01
Landlock is an unprivileged kernel feature that enables all Linux users to sandbox their processes. Complementary to seccomp, developers can leverage Landlock to restrict their programs in a fine-grained way. While Landlock can be used by end users through sandboxer tools, there is currently no well-integrated solution to define security policies t…
…
continue reading
1
Integrating systemd-sysext images in an update stack (asg2025)
26:19
26:19
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
26:19
systemd-sysext provides a nice way to enhance a distribution with a read-only root filesystem without the need to reboot. But there is additional tooling necessary to manage the sysext images:* install an image which is compatible with the installed OS version* update installed images to the newest compatible version* rollback images in case of an …
…
continue reading
1
Look ma, no secrets! - bootstrapping cryptographic trust in my homelab using Nix, UKIs, TPMs and SPIFFE (asg2025)
27:35
27:35
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
27:35
All the big cloud providers provide your machines with a unique cryptographic identity that can be used to talk to their cloud services securely without having to manage or rotate any cryptographic secrets yourself. For example GCP has Service accounts and AWS has IAM roles. This ubiquity of cloud identity and the seamless integration with all the …
…
continue reading
1
Extending Fedora Atomic Desktops using systemd system extensions (asg2025)
25:54
25:54
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
25:54
On image based desktops distributions such as Fedora Atomic desktops and Universal Blue, users are expected to run their graphical applications using Flatpaks and their command line ones using containers. But that approach does not work well for some applications that require more privileges, direct access to devices or kernel interfaces.With syste…
…
continue reading
1
systemd-confext Two Years On: Versioned Overlays for /etc, Reloaded (asg2025)
25:45
25:45
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
25:45
systemd-confext is a lightweight overlay mechanism for /etc, allowing you to drop in a configuration extension ("confext") bundle and let systemd make it visible to your service as though it was already shipped with the base image. Building on the same extension magic as systemd-sysext, confext also introduces extra features tailored for the /etc u…
…
continue reading
1
Accessing shadow records via varlink (asg2025)
26:12
26:12
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
26:12
Provide a varlink service to access /etc/passwd and /etc/shadow so that no setuid and setgid binaries are necessary for this task.There are two independent "problems" which can be solved with the same idea: all files in /usr should be owned by root:root and no setuid binary should be needed. The first one is a requirement of image based updates of …
…
continue reading
Let's have an open discussion with systemd developers who are at ASG and users in the audience. We will open with the developers saying what they plan to work on in the near future, and then allow questions / comments from the audience.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about this event: https://cfp.all-syst…
…
continue reading
1
How I optimized away 94% CPU from zbus (asg2025)
24:03
24:03
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
24:03
Haven’t you ever wanted to find ways to make your Rust code the most optimal in the world? I know how you feel. This is a talk, where I’d tell you how easy it is to profile your Rust software and how most often the solutions are trivial.This is a story of how I used a few readily-available Open Source tools to achieve huge optimizations in [zbus](h…
…
continue reading
1
systemd: state of the project (asg2025)
21:47
21:47
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
21:47
Same as every year, a lot has happened in the systemd project since last year'sASG. We released multiple versions, packed with new components and features.This talk will provide an overview of these changes, commenting on successes andchallenges, and a sneak peak at what lies ahead.Licensed to the public under https://creativecommons.org/licenses/b…
…
continue reading
1
Linux IPC: Lost between Threading and Networking (asg2025)
25:57
25:57
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
25:57
Communication is paramount in modern application development. This applies equally well to the process of writing applications and to the code itself. The complexity of the tasks ahead of us calls for a distributed and coordinated development effort, and this often manifests in our code: We design distributed, communicating systems to split complex…
…
continue reading
Running **BPF** programs today requires *CAP_BPF* capability, which is an all or nothing BPF capability.But BPF nowadays spans a large area, from simple monitoring to potentially invasive fields like network or tracing.BPF Tokens aims to add fine grained BPF capabilities to systemd units and containers, avoiding to give the whole *CAP_BPF* capabili…
…
continue reading
1
Systing: tracing for the lazy (asg2025)
29:24
29:24
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
29:24
Systing helps you solve problems in minutes rather than days. Out of the box it gives you everything you could possibly need, combined with perfetto’s visualization you will never be confused again.This talk will introduce systing, a tracer that is built on modern BPF tooling, purpose built to debug large applications with complicated interactions.…
…
continue reading
1
Why you should contribute to systemd! (asg2025)
23:28
23:28
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
23:28
I'll use these 20 minutes to explain why and why contributing to systemd is a great experience. We'll avoid beating dead horses by not discussing git forges and email, but instead focus on the development experience, from building systemd distribution packages from git main, running integration tests against those distribution packages, debugging f…
…
continue reading
1
1KHO 586: Play-Based Childhoods Are Being Stolen | Nicole Runyon, Free to Fly
58:12
58:12
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
58:12
What happens when kids grow up without free play? Licensed therapist Nicole Runyon, LMSW, has been on the frontlines of America’s childhood mental health crisis, and what she’s seen is sobering: most of the children filling therapy offices don’t actually need therapy—they need their parents to reclaim the foundations of childhood. In this episode, …
…
continue reading
