2.0 -//Pentabarf//Schedule//EN PUBLISH GT8NS7@@cfp.loadays.org -GT8NS7 Linux curriculum at HOGENT en en 20190504T100000 20190504T105000 0.05000

Linux curriculum at HOGENT

In this talk, an overview is given of the Linux curriculum at University College Ghent (HOGENT). This is *not* intended as a commercial, but rather to share our experience, and to ask feedback from the audience. HOGENT is planning to implement a curriculum reform the coming years and would welcome input from professional Linux users and admins. If you are a Linux trainer or teacher, you are welcome to use our course materials that we made available under open content licenses. Talk topics include: - course overview - assignments - student projects and team work - open source/open content teaching tools and materials Talk slides are available here: <https://gitpitch.com/bertvv/presentation-linux-hogent> PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/GT8NS7/ Room A Bert Van Vreckem PUBLISH TH8CFY@@cfp.loadays.org -TH8CFY What did you InSpec? en en 20190504T110000 20190504T115000 0.05000

What did you InSpec?

PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/TH8CFY/ Room A Gratien D'haese PUBLISH MHC3BE@@cfp.loadays.org -MHC3BE Running containers and Operating System images with systemd-nspawn en en 20190504T120000 20190504T125000 0.05000

Running containers and Operating System images with systemd-nspawn

According to its manpage, `systemd-nspawn` > may be used to run a command or OS in a light-weight namespace container. In many ways it is similar to chroot(1), but more powerful since it fully virtualizes the file system hierarchy, as well as the process tree, the various IPC subsystems and the host and domain name. In this talk, I'll go over what all of this means, how to use `systemd-nspawn` and how nspawn differs from docker, lxc/lxd and qemu-kvm. After that, I'll discuss how to use the `systemd-nspawn` and `machinectl` commands, how to run services inside containers and how to introspect the containers. After this, I'll quickly touch on a related project called `mkosi` ("make operating system image") that can be used to create images for containers and virtual-machines in one go. Basic knowledge of systemd service management and containers is recommended to attend this talk. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/MHC3BE/ Room A Pieter Lexis PUBLISH SSUFZP@@cfp.loadays.org -SSUFZP How I accidentally became an electronics engineer (actually I didn't) en en 20190504T140000 20190504T145000 0.05000

How I accidentally became an electronics engineer (actually I didn't)

AWS, DNS, K8S. We're being exposed to IT so much at work that some of us just call it a day and refrain from any hobbyist computer stuff in our private time and maybe you have also more important responsibilities to take care of such as family. But maybe you do still from time to time try to pursuit a fun project. If so, and if you know the "bottom drawer syndrome" (enthusiastically started something, first lost time, then interest, now stored things away out of sight) or if can relate to "buy first, think of a purpose for it later", this talk is for you. My motivation was to bring both purpose and John Bercow, I mean, orrrrder, to two such gadgets in my drawer, a Raspberry Pi and a LED stripe. In this talk I will recap and take you along on my journey during which I had to leave my usual comfort zone, that is software, and delve into hardware and electronics. Don't worry, this is not going to be a electronics 101 course. Instead I want to remedy some unwarranted fears and encourage you to look beyond the end of your (software) nose as electronics illiteracy did not stop me either from being successful as proven by my PiStripe uHAT which I'll bring along (and maybe give away one or two). PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/SSUFZP/ Room A Pieter Hollants PUBLISH VGS9YL@@cfp.loadays.org -VGS9YL IT Consultant / Zabbix Trainer en en 20190504T150000 20190504T155000 0.05000

IT Consultant / Zabbix Trainer

The presentation will explain how to setup the configuration in Zabbix so that Java applications can be monitored without manual configuration. Ex: Garbage collectors will be created on the fly and removed when changed. In the end we will see a short overview about what's new in 4.2 or what can be expected in 4.2 (a non LTS version) PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/VGS9YL/ Room A Patrik Uytterhoeven PUBLISH YCCEB3@@cfp.loadays.org -YCCEB3 Zabbix loadable C modules and Low-Level Discovery (LLD) en en 20190504T160000 20190504T165000 0.05000

Zabbix loadable C modules and Low-Level Discovery (LLD)

The Zabbix monitoring system has a number of different methods by which it can obtain monitoring data from systems or things it knows nothing about, but it can use scripts or programs you configure it to run in order to obtain the data you are interested in. You are probably aware of User Parameters and External Checks, and we'll shortly recapitulate. One very powerful but slightly more complicated method for obtaining external data is by using dynamically loadable C modules. We discuss what these are, how you create them, and how you can use this arguably most efficient method to provide monitoring data to Zabbix. Low-level discovery provides a way to automatically create items, triggers, and graphs for different entities. For instance, Zabbix can automatically start monitoring file systems or network interfaces on your machine, without the need to create items for each file system or network interface manually. Using a real-life practical example which we (_OwnTracks_) use to monitor vehicles issued with GPS trackers which end up communicating via MQTT, we will discuss how we implement Zabbix Low-Level Discovery directly from a C module and how the same C module is used to provide up-to-date information from the vehicles to Zabbix items. This basic principle can easily be adapted to provide similar functionality to Internet of Things (IoT) projects. While it helps if you can read a bit of C language code, if you cannot, we'll explain what's going on behind the scenes. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/YCCEB3/ Room A Jan-Piet Mens PUBLISH 9LFBP3@@cfp.loadays.org -9LFBP3 Ignite Karaoke en en 20190504T170000 20190504T175000 0.05000

Ignite Karaoke

We can mix the regular ignites with a random deck of ingites and have volunteers present these slides before the Pizza party starts PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/9LFBP3/ Room A Kris Buytaert PUBLISH CWEDZJ@@cfp.loadays.org -CWEDZJ Tying shoe laces en en 20190504T171500 20190504T172000 0.00500

Tying shoe laces

PUBLIC CONFIRMED Ignite https://cfp.loadays.org/2019/talk/CWEDZJ/ Room A Tim Speetjens PUBLISH YE8TTQ@@cfp.loadays.org -YE8TTQ What not to puppetize and how to do it anyway en en 20190504T173000 20190504T173500 0.00500

What not to puppetize and how to do it anyway

Add a customer there were some interesting problems that where solved by puppet where it was not the best solution. This will showcase some of those cases. This ranges from adding users to adding a bookmark in the chosen browser. PUBLIC CONFIRMED Ignite https://cfp.loadays.org/2019/talk/YE8TTQ/ Room A Bart Janssens PUBLISH ZQXSAG@@cfp.loadays.org -ZQXSAG Using Prometheus to monitor your deployment pipelines en en 20190504T173500 20190504T174000 0.00500

Using Prometheus to monitor your deployment pipelines

In order to optimize your continous delivery pipelines, and to make sure your delivery actually is continuous, it can be useful to collect some metrics about your pipelines. This talk introduces the Prometheus jenkins_exporter that I wrote for this purpose, how it came to be, and how it can be used to monitor pipelines in Jenkins. Specifically, ways to create dashboards and alerting rules to detect drift between versions deployed to different environments are discussed. PUBLIC CONFIRMED Ignite https://cfp.loadays.org/2019/talk/ZQXSAG/ Room A Lander Van den Bulcke PUBLISH XUKLKX@@cfp.loadays.org -XUKLKX Pizza Party en en 20190504T180000 20190504T210000 3.00000

Pizza Party

PUBLIC CONFIRMED Workshop https://cfp.loadays.org/2019/talk/XUKLKX/ Room A Everybody PUBLISH TFRG8G@@cfp.loadays.org -TFRG8G Clean Bash - Leveling up your shell scripting skills en en 20190504T110000 20190504T115000 0.05000

Clean Bash - Leveling up your shell scripting skills

Bash: the scripting language everyone loves to hate. The syntax is arcane and hard to read. Some concepts, e.g. booleans and exit status, are fundamentally different than other scripting or programming languages, which confuses novice users. Bash is not really suited for large, complex scripts. Bash scripts are usually one-offs: written once, and rarely touched afterwards. Consequenty, coding style, testability and maintainability are way down (or absent) on a sysadmin's priority list. However, Bash is ubiquitous. It's in every Linux and UNIX distribution, on every Mac laptop and, nowadays, even on Windows (when Git is installed). Even in the leanest, minimal, stripped down box, you at least have Bash. There are no dependencies. It's impossible to underestimate how useful it is for automating tedious tasks involving files or text. So there is definitely value in learning and using Bash. Let's say you have written shell scripts before. When you look at them again after months or even years, do you still understand how they work? If running a script fails, would you know what went wrong and how to look for bugs in the code? Does your script continue to work correctly if you run it multiple consecutive times? If you answered "no" to any of these questions, this talk is for you. Topics include: - Debugging and testing scripts - Improving readability - Robert C. Martin's "Clean code" applied to Bash - Idempotence Talk slides are available here: <https://gitpitch.com/bertvv/presentation-clean-bash> PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/TFRG8G/ Room B Bert Van Vreckem PUBLISH 8FUM8T@@cfp.loadays.org -8FUM8T What you most likely did not know about sudo… en en 20190504T120000 20190504T125000 0.05000

What you most likely did not know about sudo…

Everybody knows sudo, right? Sudo allows a system administrator to give certain users the ability to run some commands as root, while logging the executed commands and their arguments. It is installed by default on almost all Linux systems, and is available for most commercial UNIX systems. Still, even system administrators often only know it is the “prefix” to use before entering a command requiring root privileges. Learn how much more this simple looking tool can do! Most of the times the default configuration allows a group of users to run any commands: %wheel ALL=(ALL) ALL It’s a good first step, better than using the root account directly. This way you can trace who ran what commands on the system. But there are a lot more possibilities when configuring sudo, making your system more secure. Life is simple when when you have to give access a single user to a single command. But as soon as you have multiple users with the same access rights, it is not just shorter but also easier to maintain, if you use aliases. For added security, you can add a hash of binaries to sudo. This way if the binary changes for any reasons, like modifying it through a successful exploit, you can prevent it from being used. Using sudo does not make much sense without proper logging and alerting. There are three major possibilities: - syslog: all events are logged to syslog. For additional security, collect sudo logs centrally, so a malicious user cannot delete them easily. - e-mail: sudo can send e-mail alerts on different kinds of failures - debug: in depth logging of subsystems, mostly useful for developers Session recording is a fourth possibility. The terminal output can be saved in a local file and played back. You can play back what happened, even if the user started up an interactive shell. Instead of maintaining the sudoers file on each of your systems, you can use LDAP to configure sudo. It has some differences compared to a sudoers file, but also many advantages: - local users cannot manipulate the rules, - is easier to maintain, - goes live immediately. Starting with version 1.8, sudo has a plugin-based architecture. You can replace or extend sudo functionality using plugins. This way users can keep starting applications the usual way using sudo, but have a different configuration or policy engine behind the sudo command. There are both open source and commercial plugins available. For example the sudo_pair plugin – developed in Rust – enables monitoring and makes it possible to require interactive approval of sessions. As you can see, sudo has several lesser-known features that can make monitoring and access management easier for large organizations. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/8FUM8T/ Room B Peter Czanik PUBLISH BJP9KR@@cfp.loadays.org -BJP9KR (Re)discovering the ssh tips for Ansible (CentOS infra use case) en en 20190504T140000 20190504T145000 0.05000

(Re)discovering the ssh tips for Ansible (CentOS infra use case)

While a lot of people are using Ansible for easy ad-hoc tasks, using it in production to manage a fleet of servers spread all around the world can be challenging. In this talk we'll cover how , for the CentOS.org infra, we tried to optimize the playbook execution and we'll mainly dive into ssh itself (so the presented options can also be used outside of Ansible). We'll cover things like : * SSH CA and certificates, * how to use bastion/jump hosts , etc. * Multi DC configurations Slides from this talk (uploaded after event) : https://people.centos.org/arrfab/Events/Loadays-2019/loadays-2019-ssh-tips.html PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/BJP9KR/ Room B Fabian Arrotin PUBLISH 9XX37L@@cfp.loadays.org -9XX37L molecule test ansible en en 20190504T150000 20190504T155000 0.05000

molecule test ansible

A common need when you develop Ansible playbooks is to validate roles before production. For that purpose you need to instantiate temporary infrastructure. Molecule has been created to respond to this need. It has been promoted as a part of the official Ansible ecosystem last year, and is about to become the official SDK to develop and test new roles. This talk will take for granted that you know Ansible, present the tooling landscape around Molecule, showcase some basic usage, dissect a standard molecule scenario, and give some insights on how to integrate the tool in a delivery pipeline. We will go through some implementations done in the open source community: roles published in galaxy, projects relying on molecule for their QA testing (Kubernetes Operator SDK). PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/9XX37L/ Room B Fabrice @themr0c Flore-Thébault PUBLISH GWEDAS@@cfp.loadays.org -GWEDAS Ansible in a real world situation. The One Role to Rule Them All!! en en 20190504T160000 20190504T165000 0.05000

Ansible in a real world situation. The One Role to Rule Them All!!

When using Ansible in a real world situation, where there are multiple environments, like `dev`, `tst`, `acc` and `prod` it's hard to make sure the Ansible setup isn't to complex and that everything works. This presentation can assist you to make decisions for you own environment. Decisions about: - Inventory structure - Variable setup PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/GWEDAS/ Room B Ton Kersten PUBLISH 9LVCKD@@cfp.loadays.org -9LVCKD Scaling Ansible en en 20190504T170000 20190504T175000 0.05000

Scaling Ansible

This talk will walk through the incremental enhancements to the default Ansible configuration we have applied to one of the PowerDNS projects to effectively take down Ansible execution time from ~60 to ~6 minutes. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/9LVCKD/ Room B Andrea Tosatto PUBLISH RXVVYW@@cfp.loadays.org -RXVVYW Come listen to me, I’m a fraud; a story on impostor syndrome en en 20190505T100000 20190505T105000 0.05000

Come listen to me, I’m a fraud; a story on impostor syndrome

Come listen to my story and learn to harness your self-doubt. I’m here to show the little things I did differently every day: - How being kind to yourself is key. Forgive, don’t judge. Accept who you are. - Learn about your internal convictions and expose these to the world authentically and honestly. - How complimenting yourself and others goes a long way - Build a case for yourself by keep notes of people saying nice things about you - Self-doubt is a powerful tool as a leader, if used consciously - Focus on (professional) relationships, not on technical merit - Harness feedback, even it’s scary With these small, incremental improvements, I now live in a self-inflicted, perpetually non-existing comfort zone. I’m constantly in the imposter zone, because I’m constantly doing new things, learning new skills, meeting new people. And I love it! It has brought me many smaller and larger victories, a career that’s led me to new and unexpected ventures and most importantly, a network of friends and relationships I otherwise would never have had. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/RXVVYW/ Room A Joep Piscaer PUBLISH RDVLUD@@cfp.loadays.org -RDVLUD Scale Your Metrics with Elasticsearch en en 20190505T110000 20190505T115000 0.05000

Scale Your Metrics with Elasticsearch

This talk explores: * How are metrics stored in Elasticsearch? And how does this translate to disk use as well as query performance? * What does an efficient, multi-tier architecture look like that balances speed for today's data against density for older one? * How can you compress metrics and what does the mathematical model look like for that? We are trying this hands-on during the talk since this has become much simpler recently. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/RDVLUD/ Room A Philipp Krenn PUBLISH 8LJVEM@@cfp.loadays.org -8LJVEM Containers on RHEL 8 en en 20190505T120000 20190505T125000 0.05000

Containers on RHEL 8

With the RHEL 8 Beta release it became clear that Red Hat is officially dropping Docker for its own solution when it comes to containers: podman. A technology which is not new but nevertheless interesting to take a look at. During this presentation the details on podman as well as the tool to build containers, Buildah, is discussed and demonstrated. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/8LJVEM/ Room A Christopher Peeters PUBLISH STRQAS@@cfp.loadays.org -STRQAS Chaos security engineering in Kubernetes en en 20190505T140000 20190505T145000 0.05000

Chaos security engineering in Kubernetes

PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/STRQAS/ Room A Evis Barbullushi PUBLISH PLVANX@@cfp.loadays.org -PLVANX CI/CD with OpenShift en en 20190505T150000 20190505T155000 0.05000

CI/CD with OpenShift

PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/PLVANX/ Room A Tim Speetjens PUBLISH RCKHSM@@cfp.loadays.org -RCKHSM MetalK8s: An opinionated Kubernetes distribution with a focus on long-term on-prem deployments en en 20190505T160000 20190505T165000 0.05000

MetalK8s: An opinionated Kubernetes distribution with a focus on long-term on-prem deployments

End of 2017, [Scality](https://scality.com) decided to use Kubernetes as a deployment mechanism for its open-source [Zenko](https://github.com/scality/Zenko) data-orchestration solution. When looking for a solution to deploy Kubernetes on-premise, including suitable operational tooling and the ability to run in enterprise customer data centers, we failed to find a readily-available suitable offering based on our long experience with these environments, neither open-source nor commercial. At this point, the decision was made to create a new distribution based on the well-known Kubespray project, but further focusing on on-premise, long-term clusters with built-in operational tooling, and make this available as an open-source project, also spearheading open-source development practices within the company. Based on the learning building and deploying [MetalK8s](https://github.com/scality/metalk8s) 1.x, we took the decision to base deployment and operations of our future products on Kubernetes as well, increasing the importance of Kubernetes as an 'implementation detail' of the final product running in our enterprise customer datacenters. At this point, we further increased investments into MetalK8s, and also take the opportunity to change its architecture based on some shortcomings identified in MetalK8s 1.x. After introducing our path to Kubernetes and an overview of the goals of the project, we discuss what MetalK8s 2.x brings compared to the 1.x version, including the architectural switch from 'one-off' Ansible playbooks to a more dynamic, event-driven cluster orchestrated through SaltStack, as well as a glimpse at its local storage (disks, RAID controllers,...) management features, and how these resources are made available to solutions deployed in the cluster. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/RCKHSM/ Room A Nicolas Trangez PUBLISH BAQXTL@@cfp.loadays.org -BAQXTL From Tesla Hacking to the FreedomEV Project en en 20190505T170000 20190505T175000 0.05000

From Tesla Hacking to the FreedomEV Project

Why should we take control of our own cars? What are the risks and rewards? What can we do and what not. What should we do and don't? PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/BAQXTL/ Room A Jasper Nuyens PUBLISH YBSKZA@@cfp.loadays.org -YBSKZA OSS diversity is good (aka why we run various DNS servers flavors in CentOS.org infra) en en 20190505T100000 20190505T105000 0.05000

OSS diversity is good (aka why we run various DNS servers flavors in CentOS.org infra)

In this (brief ?) talk, we'll cover some of the DNS servers flavors that we use in the CentOS.org infra, and reasons why we do. So covering why we use Bind, Unbound, PowerDNS and Dnsmasq in parallel, as (depending on the case) authoritative or resolver/caching server[s] Slides : https://people.centos.org/arrfab/Events/Loadays-2019/loadays-2019-dns-diversity.html PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/YBSKZA/ Room B Fabian Arrotin PUBLISH EPUH7J@@cfp.loadays.org -EPUH7J Bootstrap your Cloud Infrastructure using puppet and HashiCorp stack en en 20190505T110000 20190505T115000 0.05000

Bootstrap your Cloud Infrastructure using puppet and HashiCorp stack

We all love infrastructure as code, we automate everything ™ but how many of us can really say we could destroy and recreate our core infrastructure without human intervention. Can you be sure there isnt a DNS problem or that all the things ™ are done in the right order This talk walks the audience through a green fields exercise that sets up service discovery using Consul, infrastructure as code using terraform, using images build with packer and configured using puppet. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/EPUH7J/ Room B Bram Vogelaar PUBLISH BT8PAW@@cfp.loadays.org -BT8PAW Leveraging Prometheus service discovery en en 20190505T120000 20190505T125000 0.05000

Leveraging Prometheus service discovery

Prometheus can get its list of targets in a number of ways: from static configurations over built-in service discovery all the way to custom service discovery implementations. This talk will give a brief overview of Prometheus itself, explain how these mechanisms actually work and show how they can be leveraged to autogenerate Prometheus configuration in a number of scenarios, from more classic environments based on Puppet to more "modern" environments employing immutable infrastructure principles. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/BT8PAW/ Room B Lander Van den Bulcke PUBLISH SZKHT9@@cfp.loadays.org -SZKHT9 How to write efficient and correct MySQL recipes for you configuration management system in 2019 en en 20190505T140000 20190505T145000 0.05000

How to write efficient and correct MySQL recipes for you configuration management system in 2019

During this session, I won't tell which configuration management system to use neither which module bit I will explain what are the errors to not perform again and why. I will also show you how to use the MySQL X Admin API in your recipes. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/SZKHT9/ Room B lefred PUBLISH NWYKLV@@cfp.loadays.org -NWYKLV Open Source databases and HA en en 20190505T150000 20190505T155000 0.05000

Open Source databases and HA

HA is an essential part of an architectural setup. Declaration of business and application requirements are essential during the actual design of the optimal database architecture. With increased levels of availability comes complexity and in some case operation woes. So what are the increased availability options within MySQL and other open source RDBMS solutions? How would they compare to each other? This presentation will cover: - The concept of increased availability, why it's essential for operations, what pitfalls exist. - Differences in between availability concepts - HA and MySQL - HA and PostgreSQL - HA and MongoDB - HA and the cloud, the good and the bad - Why HA is not DR PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/NWYKLV/ Room B Dimitri Vanoverbeke PUBLISH G97X3X@@cfp.loadays.org -G97X3X Look mom without containers! en en 20190505T160000 20190505T165000 0.05000

Look mom without containers!

In this talk will be illustrate an example of deployment of a vertically and horizontally scalable infrastructure using the immutable infrastructure paradigm, on digitalocean cloud platforms. PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/G97X3X/ Room B Matteo Valentini PUBLISH YMXZRK@@cfp.loadays.org -YMXZRK Running a mainframe on your laptop (for fun and profit) en en 20190505T170000 20190505T175000 0.05000

Running a mainframe on your laptop (for fun and profit)

Yes, this talk is about running your own mainframe on your own hardware. Mainframes are old, yes, but they are still very much alive. New hardware is still being developed and there are a lot of fresh jobs in this area too. A lot of mainframes run COBOL workloads. COBOL is far from a dead language. It processes an estimated 85% of all business transactions, and 5 billion lines of new COBOL code are written every year. In this session the speaker will help you in take your first steps towards running your own mainframe. If you like then after this session you can continue to build your knowledge of mainframe systems using the links provided during the talk. Come on in and learn the basics of a completely different computer system! And it will take you less than an hour to do that! PUBLIC CONFIRMED Talk https://cfp.loadays.org/2019/talk/YMXZRK/ Room B Jeroen Baten