← / Janson K.1.105 (La Fontaine) K.3.201 K.3.401 K.3.601 K.4.201 K.4.601 H.1301 (Cornil) H.1302 (Depage) H.1308 (Rolin) H.1309 (Van Rijn) H.2213 H.2214 H.2215 (Ferrer) AW1.120 AW1.126 UA2.114 (Baudoux) UA2.118 (Henriot) UA2.220 (Guillissen) UA4.218 UB2.147 UB2.252A (Lameere) UB4.132 UB4.136 UB5.132 UB5.230 UD2.120 (Chavanne) UD2.218A UD2.208 (Decroly) UD6.215
09:00 Free as in Burned Out: Who Really Pays for Open Source? Know Your Enemies: Live Exploit of a PHP Engine Security Breach Introduction to Local First & Welcome to our devroom Welcome to the SDR/DSP devroom An introduction to Plan 9 Accessible software performance Welcome to the Gaming and VR Devroom Accelerating scientific code on AI hardware with Reactant.jl Welcome to the Open Hardware and CAD/CAM Devroom Externally verifying Linux’s real-time deadline scheduling capabilities Welcome to Identity and Access Management devroom! From printers and Python to pondlife and pathology: research into and using the OpenFlexure Microscope Draupnir: a field report on building community focussed T&S tooling within an open federation BLog: High-Performance Per-Component Binary Logging Welcome to the Audio, Video & Graphics Creation Bringing WebAssembly to constrained devices with Rust: Runtimes, tooling, and real-world tradeoffs Carving JSON in heap dumps Crystal: A language for humans and computers The state of Go Backtraces for embedded Linux C and C++ programs Intro to the Decentralized Internet & Privacy devroom Welcome to the SBOMs and Supply Chains devroom! Welcome to the Confidential Computer Devroom
  CRDTs, E2EE, permissions and Jazz! Verilog-AMS in Gnucap An Introduction to the OpenID Shared Signals Framework Bringing Decentralization to Your Doorstep: 5 Years in Browsers
  Securing the Linux Boot Process with COCONUT-SVSM
09:15 Beyond Git: Collaborative Version Control for Godot
  Open Source Digital Voice for Space and Terrestrial Communications Netboot without throwing a FIT Bugbane: Simplifying consensual Android forensics Building a minimal cross-platform terminal UI library
 
09:30 Taming your Yjs documents Orchestrating PowerDNS deployments with servfail-sync The Snakemake SLURM Plugin: Reproducible Computing vs. HPC Policies Instrument and Unit Test an Asm-only OS Kernel by Turning it into an Anykernel Community Curation of Natural Science Collections with DiSSCo Community moderation in Matrix Rust meets cheap bare-metal RISC-V Profile-Guided Optimization (PGO) in Go: current state and challenges From C to Rust on the ESP32: A Developer’s Journey into no_std Re-decentralizing the web platform with Wasm GC When One Product Has Three SBOMs: Lessons from Embedded Vulnerability Management
  Nextcloud as Identity Provider? SCIM Client Integration for Multi-Platform Collaboration Restartable confidential guests on QEMU hypervisor - where is the challenge?
  GEFS: A Good Enough File System Full-Body Tracking in Godot VR ECAD / MCAD collaboration with IDX OF-nodes, Fwnodes, Swnodes, Devlinks, Properties - Understanding How Devices Are Modeled in Linux Automate all the things! Using Puma to automate UI actions in Android applications BLUE - A generic build-system crafted entirely in Guile
09:45 F3D, Fast and minimalist 3D Viewer
  Beyond nvidia-smi: Tools for Real GPU Performance Metrics
 
10:00 Strategy for Trusting your Employer in Open Source: a Historical Approach The Hidden Life of Infrastructure: How Control Moves Through Code, Chips, and Nations Local-First in Production: How We Built Plane's Collaborative Wiki with Yjs Very low frequency (VLF) time and frequency transfer signal analysis using KiwiSDR recordings JUBE: An Environment for systematic benchmarking and scientific workflows Colandr 2.0: reflections on a near-decade of free and open evidence synthesis tooling development, management, and use Stop Reinventing in Isolation: Bringing Open Source to Trust & Safety Infrastructure Flexible math operations on network packet fields with Nftables RustBoy: A Rust journey into Game Boy dev How the **** do I do that? Making 300+ forensic parsers easily accessible Modern Development Tools and Practices for GNU Guile Brewed for Speed: How Go’s Green Tea GC Works Ariel OS - The Embedded Rust Software Stack for Microcontroller-based Internet of Things Contextual SBOMs and impact on vulnerability management Securing Memory Isolation in Texas Instruments Microcontrollers
  Breaking architecture barriers: Running x86 games on ARM Keeping applications secure by evolving OAuth 2.0 and OpenID Connect
  The Euroshack
10:15 Building a multi-arch CI pipeline for 13 targets. What could possibly go wrong?
  Audio and music production on Plan 9 KiConnect 1 Year In Combining Trace(r)s: Kernel ftrace & LTTng UST The Missing Level: Why EU Open Source Fails Locally Graphite a busy year in review
  In defence of GnuPG: Key Sovereignty in an Age of Digital Feudalism OpenCCA: An Open Framework to Enable Arm CCA Research
10:30 Automerge + Keyhive Design Overview Anatomy of a Resilient Nameserver: Concurrency, Resolution, and Protection Keeping the P in HPC: the EESSI Way Scaling Gmsh-based FEM on LUMI: Efficiently Handling Thousands of Partitions Unit Testing in Fortran Building Open and Reproducible AI Practices for LMICs (and Beyond) Matrix State of the Union Public Procurement for Digital Sovereignty Async Rust in Godot 4: Leveraging the engine as a runtime Dangerzone: Bleach your documents Guile development outside of Emacs Inside Reflection The Ultimate Office Chair: Hacking a BMW Comfort Seat with an ESP32 Beyond SBOM: Integrating VEX into Open Source Workflows
  Porting game engine renderer to Vulkan as an absolute beginner Inside ProConnect: Building a Modern Federated Identity Provider for Government Services
  wSDR -- web based SDR processing Reproducible XFS Filesystems - Populating Images Without Mounting
10:45 Testing ESPHome in the really world
  The GNU Name System, its applications and roadmap Challenges of Remote Attestation for Confidential Computing Workloads
  Where's GIMP going after 3.2
11:00 Who Pays Your Bills? Sustainability, Community and Business: The Open Source Triangle Reverse Engineering the World's Largest Music Streaming Platform NextGraph: E2EE sync engine, SDK, graph DB, and reactive ORM The state of Open Source XR: Monado and beyond Productive Parallel Programming with Chapel and Arkouda Dune 3D - 2½ years in the 3rd dimension Accelerating vLLM Inference with Quantization and Speculative Decoding Lighter, faster, simpler: An Element Web for the future Verification of Linux kernel code Common Expression Language (CEL) in Rust Investigating Security Incidents with Forensic Snapshots in Kubernetes Wastrel: WebAssembly Without the Runtime Understanding Why Your CPU is Slow: Hardware Performance Insights with perf-go Build Once, Trust Always: Single-Image Secure Boot with barebox From Passive Data to Active Defense: Supply Chain Policy-as-Code with Conforma
  Unified Quality Feedback Across CI/CD Pipelines Privacy and Sovereignty in a Post Quantum Open World
  Towards unified full-stack performance analysis and automated computer system design with Adaptyst
11:15 Lesson from Cloud Confidential Computing Remote Attestation Sample
  How to develop and test a PWM driver
  FIR filter design with Parks-McClellan Remez SlimeVR Full Body Tracking
11:30 Who Funds the Egg? Cracking the FOSS Funding Paradox ElectricSQL: Query-driven Sync in TanStack DB Track Energy & Emissions of User Jobs on HPC/AI Platforms using CEEMS OQTOPUS: Open Quantum Toolchain for OPerators and USers Matrix RTC x Godot - A Battle Royal From policy to practice: implementing the EU AI Act for open-source software GStreamer 1.28 and beyond Calling JIT-compiled Roto scripts from Rust I spent my summer reverse engineering ESXi VMFS, you? Lisp is clay: the power of composable DSLs Concurrency + Testing = synctest ARM SCP firmware porting CRA-Ready SBOMs: A Practical Blueprint for High-Quality Generation
  CI/CD with Gerrit, AI-Enhanced Review, and Hardware-in-the-Loop Testing in Jenkins Pipelines SUSEID - Sovereign IAM at SUSE
  Designing EUR 20 Open Source Hardware running Free/Libre Open Source Software IoT home server Update on the SLUB allocator sheaves bare-sgx: A Bare-Metal C Runtime for Intel SGX Development with Minimal Trust
11:45 NoiseModelling and Its FLOSS Ecosystem for Environmental Noise Assessment Digital Omnibus: is the EU's tech simplification a Risk or Opportunity for Open Source? Namecoin and Tor as a Public Key Infrastructure
  Making the NOVA microhypervisor fit for thousands of devices and interrupts How to Measure Software Performance Reliably Practical ECS for Game Development in Rust with Bevy
 
12:00 Building the next generation of open source contributors – Lessons from 30 years of Postgres Fear and Loathing in the App Stores: when FLOSS principles collide with the Gatekeeper interests BlockNote, Prosemirror and Yjs 14: Versioning and Track Changes Querying DNS for software updates Partly Cloudy with a Chance of Zarr: A Virtualized Approach to Zarr Stores from ECMWF Fields Database LibrePCB 2.0 – More Than Just a New Look Sustainable decentralised comms at Element seccomp listeners for nested containers The Fediverse and the EU's Digital Services Act: solving the challenges of modern social media? Clickhouse’s C++ and Rust journey Your function signature here please. Functional reactive programming with propagators gomodjail: library sandboxing for Go modules Tamper-resistant factory data from the bootloader Deutsche Bahn's Approach to Large-Scale SBOM Collection and Use
  Non-Blocking Continuous Code Reviews Credentials for Linux: Bringing Passkeys to the Linux desktop How to do a Podcast with Free Software? Standardization and Open-source Implementation of Attested TLS for Confidential Computing
  ZigRadio: a lightweight, ergonomic flow graph signal processing framework for SDR Snagboot: vendor-agnostic, open-source and developer-friendly recovery and reflashing tool
12:15 RELab: An Open Infrastructure for Collaborative Product Data Collection in the Circular Economy
  20 Years of Eurobattle.net: A Retrospective on the PvPGN Server and Its Open Source Ecosystem The Blackpants are Pants for your Blackhat DMLS vs DMLS: decentralizing/distributing Messaging Layer Security sbom-cve-check: Lightweight open-source CVE analysis tool for your embedded systems
  Open source firmware for high assurance confidential infrastructure
12:30 Open Source Design, the wake up call for developers! Towards a Local-First Linux Desktop with Modal, Reflection and p2panda DNS: A Love Affair with Lovecraftian Horrors skiftOS: Building a microkernel-based operating system from the ground up Pulling 100k revisions 100× faster Zero‑Touch HPC Nodes: NetBox, Tofu and Packer for a Self‑Configuring SLURM Cluster TPMs and the Linux Kernel: unlocking a better path to hardware security Profiling Rust applications with Parca Guix Container Images - and what you can do with them Resilient file uploading with Go Longer-Term Support releases for Buildroot
  Developer Experience is more than just Productivity metrics Cockpit and passwordless login
  Podlibre: Podcast Audio Editing for the AI Age Illuminating the Frame: Enhancing Flash Control in V4L2 Half-time recap & precap for Decentralized Internet devroom LibreOffice and Collabora Online - how we managed to automate SBOM generation for a large legacy project
12:45
 
  Digital RF distribution at CERN
13:00 CRA Integration – How FOSS compliance measures support CRA obligations, especially regarding documentation, security updates, and traceability. FreeSewing: How to buy less, create more, and feel great about it Teamtype: multiplayer mode for your text editor – towards a Collaborative Editing Protocol Accelerating complex Bioinformatics AI pipelines with Kubernetes How Open Hardware Projects Create Ecosystems Keeping Legislative Data Accessible A Modern Look at Secure Boot Building performance-critical Python tools with Rust: Lessons from production Designing attestations UI: The Security and Safety of OSS package supply chain Extending sqlc: augmented generation of repositories in Go libcamera software ISP status update
  Rethinking CPU scheduling for dynamic workloads on Sculpt OS Self-Healing Rollouts: Automating Production Fixes with Agentic AI Passwordless authentication mechanisms from the GUI (GDM)
  Database benchmarks: Lessons learned from running a benchmark standard organization Observability for AI Workloads on HPC: Beyond GPU Utilization Metrics HowTheyVote.eu - how we make European Parliament roll-call votes more accessible
13:15 Crunching code like it is 1982 Data science from the command line: a look back at 2 years of using xan Engineering XMPP Federation: Building Messaging, Voice & Social Features Across Independent Projects Get the most out of Linux for music production Peergos: Capability-Based Access Control for an Encrypted Web
  Radicle: Local-First Code Collaboration Developing software tools for accelerated and differentiable scientific computing using JAX How to engage with policymakers as civil society Implementing Block-Max Pruning in Rust: Faster Learned Sparse Retrieval for Modern Search Forget SBOMs, use PURLs
  Eliza: Rewriting the original AI chatbot from 60 years BC (Before ChatGPT)
13:30 Implementing the Cyber Resilience Act - engaging with open source usermode linux without MMU Ty: Adventures of type-checking Python in Rust The UX Layer of Security: Understanding User-Driven Vulnerabilities How to Instrument Go Without Changing a Single Line of Code Raw to Real and Green to Great: Open Source Camera Tuning for Linux Devices with libcamera
  High Performance Jupyter Notebooks with Zasper Your Cluster is Lying to ArgoCD (And How to Catch It) Reduce attack surface or keep compatibility: lessons of sudo-rs and run0 transition plans
  Miru: Building a collaborative video editor with offline support White Rabbit for the masses: distributed coherent SDR on generic FPGA boards Capability Based Security in Redox Collaboration, Iteration, Documentation, and Validation: An OpenFlexure Microscope Story midiMESH: Network MIDI with Elixir on ESP32 via AtomVM
13:45 Charming Gray Buttons of the XX century: how widget toolkits evolved with computer architectures ROCm™ on TheRock(s) The Skills of a FLOSS Developer and Why They Are Important in Open Research Movim: Building a Decentralized Social Network on XMPP OCapN: The secure, decentralized protocol of the future
  Using CRDTs for collaborative commenting in your favourite free software desktop word processor Continuous Performance Engineering HowTo
  Teleportal: A real-time collaborative editing framework
14:00 The Geopolitics of Code: From Digital Sovereignty to Global Fragmentation Automating translation of a bestseller to spark children's interest in coding A Local First collaborative workplace? Update on the High Performance Software Foundation (HPSF) SSH logins in practice: certificates vs. OPKSSH The limits of ABI stability in the kernel Rust in Mercurial: the wider benefits Debugging Exclusion: Building Disability-Inclusive Open Source Projects Multi-Vector embeddings revolution? or evolution? Making of GoDoctor: an MCP server for Go development No Line Like Mainline: Update On The Fully Mainline Software Stack For Rockchip SoCs What is new in SPDX 3.1 which is now a Living Knowledge Graph
  Composing capability security and CRDTs MEP2, a Simple Mail Transfer Protocol (but not that one) The Most Bizarre Software Bugs in History Modular in the DAW: Cardinal origins, tips and tricks
  Designing for Local-First: UX Patterns for a Network-Optional World Machine Learning on Air: Overview and Tutorial on Open-Source Machine Learning Frameworks for DSP and Radio iroh p2p connections
14:15 Transactions: Making CMRX kernel internals lock-free Research software engineering: a movement and its instantiation at the University of Illinois Urbana-Champaign What are you listening to now?: Implementing "Now Playing" feature in modern XMPP
  KiCad Status Bug reporting made less buggy
 
14:30 Logux: local-first as framework not database Writing an ultrafast Lua/JSON encoder+decoder as a LuaJIT module ngdevkit: Free and Open Source C/C++ development on the Neo Geo in 2026 Package management in the hands of users: dream and reality Linux-PAM Demystified and Beyond VFS News MBROLA and eSpeak NG as a MIDI singing voice synthesizer Taming Git complexity with Rust and Gitoxide Gephi Lite: We Built a Data Visualization Tool, But We Couldn't Design It Systems Programming: Lessons from Building a Networking Stack for Microcontrollers Add Support for New Boards to Mainline Linux, U-Boot and Yocto A semantic framework for modelling and analysing supply chains through SBOMs
  Bringing automatic detection of backdoors to the CI pipeline NextGraph: E2EE decentralized platform & framework
  Deriving Maximum Insight: Open-Source Graph-Enhanced RAG for Complex Question Answering
14:45 Practical Persistence on Microkernels (ft. PhantomOS) Trusted by design: how to set up your research software for community adoption Bonfire: Modular Communication Tools on the Open Social Web
  The beauty of hardware translation
  Autonomous SDR platform based on Zynq/AD9361 (extension of PlutoSDR architecture) AI-based failure aggregation Become an orchestra composer using FOSS!
15:00 The Hacker Folk Art of Esoteric Code From Drones to Data: Building an Open Mapping Ecosystem for All SQLRooms: Local-First Analytics with DuckDB, Collaborative Canvas, and Loro CRDT Sync Spack v1.0 and Beyond: Managing HPC Software Stacks FreeCAD - state of affairs The journey after a breaking change: rewriting bind-dyndb-ldap for modern BIND Reproducing a syzbot Bug in 5 Minutes — Now with virtme-ng! Rust Coreutils in Ubuntu: Because /bin/true deserves memory safety too Design Systems in Open Source Modularizing a 10-Year Monolith: The Architecture, The People, and the Pain The Year in Embedded Security
  Walkaway Stack: Radical, infrastructure-independent peer-to-peer systems
  How To Move Bytes Around Hacking the last Z80 computer ever made
15:15 DASL Your Protocols!
  Writing axle OS's desktop compositor What Is Still Missing in System Call Tracing Could Compliance Costs Sustain FOSS? A Theory of Voluntary Attestations Linux Pro audio... like a pro! Multi-Stage Retrieval in Elasticsearch - Present and Future
  A Programming Language Perspective on Replication Building CDviz: Lessons from Creating CI/CD Observability Tooling
15:30 The Filesystem Diaries: Scaling Btrfs in an Enterprise Early Electronic Computing in Belgium: Analysis and Simulation of the IRSIA FNRS Mathematical Machine Status update on EESSI, the European Environment for Scientific Software Installations Implementing Encrypted DNS in Fedora and Kubernetes Clusters with FreeIPA DNS Rethinking network services: Freedom and modularity with Rama You Don’t Need to Be a Designer to Design: Fixing UX in Open Source My old trains have a second life, with TinyGo! Pixel on life-support, upgrading from Android 12 to Android 16 C/C++ Build-time SBOMs with pkgconf
  VRT IQ tools at the Dwingeloo Radio Telescope
  OCCT3D 8.0: Evolving the Open Source Geometry Kernel Tuning Embedded Linux for Low Power Could Compliance Costs Sustain FOSS? A Panel With The Public Sector MIDI Live performer
15:45 Visualising Wikipedia Reverse Google: From email to decentralization
  A Performance Comparison of Kubernetes Multi-Cluster Networking
  Willow - A family of peer-to-peer storage protocols Updates on GNU/Hurd progress: rump drivers, 64bit, SMP, software bootstrapping ... Why build an 8-bit homebrew computer in 2026 Automated Testing of VoIP Infrastructure: Lessons from the Field
16:00 Lightning lightning talks 2 The Meshiverse OR The Revolution of the Little Radios Using OpenMP's interop for calling GPU-vendor libs with GCC Migrating Multi-Factor Authentication: FreeIPA WebUI's Journey from Dojo to React Working with small data that you dare to share Solving Pre-silicon Kernel Upstream for RISC-V First Ever PAW, a programmable DAW Random seeds and state machines: An approach to deterministic simulation testing in Rust Understanding developer needs - User research in Forgejo Language support in Meilisearch Go Around The World Without Wires MicroPythonOS: the best of Android, now on Microcontrollers. AppStore, OTA Updates, Touch Screen, Camera and much more! Enhancing Swift’s Supply Chain Security: Build-time SBOM Generation in Swift Package Manager
  qaul.net - Internet Independent Wireless Mesh Communication App
 
16:15 Dial-up revisited: Why it's needed and how to run an oldschool ISP AT: The Billion-Edge Open Social Graph
  Get to know local-first pioneers PouchDB & CouchDB — Look ma, offline with no CRDTs! MAX2771 broadband SDR: impact of low bit resolution and application to passive radar measurements A love letter to KiCAD ERC Rich Packet Metadata - The Saga Continues Participating in Standardisation around the CRA Rehorse: sheet music and rehearsal app for bands
  Formal Verification in Rocq, an Exhaustive Testing
16:30 Microkernels: The last 15 years in retrospective Load Testing Real React Applications for Production Performance A Brief* overview of what makes modern accelerators interesting for HPC Creating a new CA backend for FreeIPA with the help of AI PyGambit: an open-source software for game theory Effective standard-setting Syd: Writing an application kernel in Rust Use eye tracking to figure out usability issues, the open source way Go Lightning Talks One Flutter Embedder to Rule Them All Generating SBoMs for BuildStream projects
  Multi-transport chat messaging & cryptographic identities with Delta Chat and Chatmail relays
  Seed Hypermedia: The Future of Digital Sovereignty Behind the beam spring keyboard: Mainframe technology through the lens of an IBM 3278 terminal Unlocking extra cluster capacity with enhanced Linux cgroup scheduling OpenSearch v3: A New Era of Search Innovation - From Neural Sparse ANN to Agentic Workflows and everything in-between
16:45 We d-build it, but they didn't come Independent and sustainable audio publishing with Faircamp
 
 
17:00 Open Source Security in spite of AI
 
 
17:15
 
 
17:30
 
 
17:45
  Closing FOSDEM 2026
 
18:00
 
 
18:15