Coreboot conference Bonn 2015
The wiki is being retired!
Documentation is now handled by the same processes we use for code: Add something to the Documentation/ directory in the coreboot repo, and it will be rendered to https://doc.coreboot.org/. Contributions welcome!
- 1 Invitation letter
- 1.1 Target audience
- 1.2 Who will host the conference
- 1.3 Date
- 1.4 When should you attend
- 1.5 Goodies
- 1.6 Call for presentations
- 1.7 Call for discussion topics and development suggestions
- 1.8 Call for profiles
- 1.9 Call for developers
- 1.10 Travel information
- 1.11 Conference location
- 1.12 Accommodation
- 1.13 Spare time activities
- 1.14 Food and drinks
- 1.15 Date and time
- 1.16 Signing up / Registration
- 2 Agenda
- 2.1 Friday
- 2.1.1 09:30 Opening speech (10 min)
- 2.1.2 9:45 Keynote (15 min)
- 2.1.3 10:05 coreboot introduction (45 min)
- 2.1.4 10:50 mini-break (15 min)
- 2.1.5 11:05 Broken assumptions, and how coreboot deals with them (30 min)
- 2.1.6 11:40 A reasonably safe travel burner laptop (45 min)
- 2.1.7 12:30 lunch, getting to know each other (60 min)
- 2.1.8 13:30 NIST SP800-147 and the depthcharge payload (30 min)
- 2.1.9 14:05 coreboot quality assurance (45 min)
- 2.1.10 14:50 mini-break (15 min)
- 2.1.11 15:05 Blob free coreboot: A lost cause on x86? (30 min)
- 2.1.12 15:40 coreboot binary policy (20 min)
- 2.1.13 16:05 Making coreboot vendor/product friendly (30 min)
- 2.1.14 16:35 mini-break (15 min)
- 2.1.15 16:50 coreboot consortium (15 minutes)
- 2.1.16 17:10 Title (xx min)
- 2.1.17 ca. 19:00
- 2.2 Saturday
- 2.2.1 Morning presentations over Hangouts
- 2.2.2 15:00 Spare time activities (not part of the official conference)
- 2.3 Sunday
- 2.1 Friday
- 3 Participants
Dear vendors, developers, users and interested parties,
on behalf of the Federal Office for Information Security (BSI) Germany I would like to invite you to the coreboot conference and developer meeting on October 9-11 2015 in Bonn, Germany.
This conference and developer meeting is geared towards manufacturers of hardware (processors, chipsets, mainboards and servers/ laptops/ tablets/ desktops/ appliances) as well as developers of firmware with an interest in coreboot and the possibilities it offers as well as (potential) coreboot users. Both professionals and hobbyists are invited.
Who will host the conference
The Federal Office for Information Security (BSI) in Germany will host the conference in Bonn, Germany. As the national cyber security authority, the goal of the BSI is to promote IT security in Germany. For this reason, the BSI has funded coreboot development in the past for security reasons.
The date of the coreboot conference is Friday October 9 to Sunday October 11, 2015. This is scheduled directly after Embedded Linux Conference Europe to make travel arrangements easier for people attending both events.
When should you attend
If your main interest is forging business relationships and/or strategic coordination and you want to skip the technical workshops, Friday (and possibly Saturday) will be the outreach day of talks, presentations and discussions.
If your main interest is doing development, you can use the separate developer room next to the during all three days of the conference.
Call for presentations
We are looking for interesting talks/presentations about coreboot related topics for the first (and possibly second) day of the conference. Please note that those presentations are not intended to be advertisements or company portfolio presentations. Expected duration is between 10 and 45 minutes.
Submission: Please send the title, a brief summary, the expected duration and name/organization of the speaker to email@example.com until September 21. We will notify you of acceptance until September 28. If you want us to make sure the slides work fine with the projector at the venue, please submit your final slides in pdf form before October 7.
Call for discussion topics and development suggestions
We hope to stimulate discussion and foster new ideas as well as explore ways to improve code, development and deployment. The format for this will be a few minutes (1-5) of presenting your idea/topic followed by discussing it with the audience for approximately 5-20 minutes.
While there is no formal deadline for submission, we'd appreciate a submission to firstname.lastname@example.org before October 2 to be able to list the topic on the agenda to allow others to think about the topic in advance.
Call for profiles
This is the chance to tell others what you're doing, what you can offer and in what area you'd like to collaborate. If desired, we can attempt to distribute your profile to other conference participants before the conference.
Please submit such profiles before September 30 to email@example.com.
Call for developers
If you want to do development all day, every day, just come and do it. We have power, networking and some spare hardware (please tell us in advance if you need something on site, we might have it in our lab).
If you wonder about how to reach Bonn, there are three options available by plane:
- The closest is Cologne Airport (CGN), 30 minutes by bus to Bonn main station.
- Next is Dusseldorf Airport (DUS), 1 hour by train to Bonn main station.
- The airport with most international destinations is Frankfurt Airport (FRA), 1 hour by train to Bonn main station.
Another option is travelling by train:
- Bonn (main station: Bonn Hbf) is reachable by high-speed train (ICE), and other high-speed train stations (Cologne, Siegburg) are reasonably close (30 minutes). http://www.bahn.de/p_en/view/index.shtml is the easiest way to check your public transport options (train, buses etc.).
Travelling by car:
- Use a GPS navigation device with up-to-date maps, otherwise you may find yourself unable to go where you want due to subtle changes of turn restrictions in Bonn. Be warned that rush hour traffic in the morning and afternoon (Mo-Fr) can add delays of up to an hour if you're trying to get into or out of Bonn. Inside Bonn rush hour traffic is much less severe, expect roughly twice the expected time between 7am and 9am as well as between 4pm and 6pm.
http://www.stifterverband.info/veranstaltungen/wissenschaftszentrum_bonn/anfahrt/index.html (German only) An English version of the directions will be made available soon at http://coreboot.org/coreboot_conference_Bonn_2015
Accommodation is not centrally organized, but if desired we can point you to websites listing hotel contact information and/or booking services as well as the local tourist information office. We also have a small allotment of affordable bed&breakfast rooms at the venue reserved for conference participants, just ask us.
Spare time activities
If there is enough interest, it might be possible to get a tour of the former top secret bunker of the German Federal Government on Saturday evening. More info at http://regbu.de/Fremdsprachen/GB1.html Besides that, Bonn and Cologne have lots of tourist attractions (e.g. Cologne Cathedral, excavations of ancient Roman sites, a rich cultural life, ...).
Food and drinks
More info will be posted to http://coreboot.org/coreboot_conference_Bonn_2015 shortly.
Date and time
October 9-11 2015
- Friday: 9:00-19:00 (talks start at 9:30)
- Saturday: 9:30-15:00 (talks start at 10:00)
- Sunday: 9:00-19:00
Signing up / Registration
There is no fee, attending the conference is free.
To enable us to estimate the number of attendees (for catering etc.), please notify us ASAP whether you will attend the conference at firstname.lastname@example.org. Thank you!
Should you need a personal invitation email to justify attending the conference, please tell us and we'll try to oblige.
All information is also available at http://coreboot.org/coreboot_conference_Bonn_2015
Preliminary schedule, order still subject to change, some last-minute talks might still be added Please check back on thursday evening for a final schedule.
09:30 Opening speech (10 min)
Dr. Gerhard Schabhüser, Head of the department, Bundesamt für Sicherheit in der Informationstechnik.
9:45 Keynote (15 min)
Stefan Reinauer, Engineering Manager Firmware & Embedded Controller Group, Google Inc.
10:05 coreboot introduction (45 min)
Martin Roth, Google Inc.
10:50 mini-break (15 min)
11:05 Broken assumptions, and how coreboot deals with them (30 min)
Patrick Georgi, Google Inc. slides
11:40 A reasonably safe travel burner laptop (45 min)
Georg Wicherski, Manager Information Dominance, CrowdStrike
12:30 lunch, getting to know each other (60 min)
13:30 NIST SP800-147 and the depthcharge payload (30 min)
Patrick Georgi, Google Inc. slides
14:05 coreboot quality assurance (45 min)
Paul Menzel, Giant Monkey Software Engineering
14:50 mini-break (15 min)
15:05 Blob free coreboot: A lost cause on x86? (30 min)
Paul Menzel, Giant Monkey Software Engineering
15:40 coreboot binary policy (20 min)
Marc Jones slides
16:05 Making coreboot vendor/product friendly (30 min)
Stefan Reinauer, Marc Jones, Patrick Georgi slides
panel & discussion
- why do it?
- challenges vendors have
- release cycle - details
16:35 mini-break (15 min)
16:50 coreboot consortium (15 minutes)
Stefan Reinauer, Marc Jones
- who is it for?
- how does it work?
- role in community?
17:10 Title (xx min)
ca. 1.5 more hours of talks, order is being finalized now
Exploring local food and beverages... Possible destination is http://www.gasthausimstiefel.de/ Gasthaus im Stiefel. They do have local specialties and enough space for all of us. Other destinations are possible as well, let's talk about it sometime during friday lunch break and decide where to go.
NOTE: There will be no food on site on Saturday. We do have a 75 minute lunch break to go to restaurants close to the venue.
Morning presentations over Hangouts
Those who will not be physically at the conference in Bonn can still participate in the talks/presentations via video conferencing. Morning sessions over Hangouts are planned to begin at around 10:00 in the morning in Bonn. For reference this is 01:00 in California, 04:00 in New York, 16:00 in Taipei and Beijing. If there is enough interest additional sessions can be planned to accommodate people in various timezones.
If you live in Silicon Valley you may join a small group of people at Google's campus in Mountain View. See David's invite on the mailing list .
People from anywhere in the world are welcome to join the Hangouts session. There is a limited number of slots available, so if you would like to participate please contact David Hendricks (email@example.com). You may also ask on IRC (#coreboot on freenode). There are two ways to join:
- Use a Google-authenticated account such as Gmail. You will be able to join at any time.
- If you do not wish to use a Google-authenticated account you may request to join by following the meeting link. One of the session hosts will need to accept your request, so coordinate via e-mail or IRC.
Linux-As-Bootloader is an attempt to revive the old LinuxBIOS model of storing a stripped down Linux kernel alongside the firmware (e.g. in NOR flash). This approach allows us to leverage the power of Linux to give us maximum features and capabilities without duplicating a lot of kernel code. This is particularly useful for systems that have non-trivial drivers for storage, filesystems, network, etc. which may be used to boot the machine.
I will try to have a couple demos prepared to demonstrate this on x86 and ARM systems by bundling a kernel with Busybox and diagnostic utilities on the firmware ROM and booting Linux from main storage. Detailed instructions, scripts for building one's own Busybox rootfs, etc. will be posted on the coreboot wiki.
(See also: JELTKA )
Presenter: David Hendricks (dhendrix)
U-root is an embedded environment written in Go that is currently used as a payload for coreboot. Its aim is to provide an embedded environment where the user can inspect the source code and modify programs on-the-fly and potentially become smaller than binary-based environments as more utilities get bundled.
U-root includes only 5 binaries in its distribution: go, 6c, 6g, 6l, 6a. All other programs are compiled from source upon the first invocation (cached in memory thereafter), and compilation usually takes on the order of a few hundred milliseconds. U-root currently includes support for basic UNIX utilities and network utilities including a simple webserver. Since all programs are compiled from source they are 100% portable so long as the Go toolchain is supported for your architecture.
Presenter: Ron Minnich (rminnich)
Flashrom is a utility for programming ROMs that is commonly used by firmware developers as well as in support and manufacturing processes. It was spun off of coreboot many years ago and has remained as kind of a sister project ever since as many developers involved with flashrom are also involved with coreboot. This talk will attempt to summarize interesting developments upstream, in the ChromiumOS fork, considerations for manufacturing and field support versus end-user usage, and plans for the future.
Presenter(s): David Hendricks (dhendrix), possibly others
12:15 Automatic porting of coreboot (10 min)
Vladimir just managed to port coreboot to the Macbook Air. He is going to give a short presentation on how he did it with minimal effort.
Presenter: Vladimir Serbinenko
12:30 lunch break
13:30 CANCELED Automated testing of coreboot with REACTS (15 min)
talks until 14:50
15:00 Spare time activities (not part of the official conference)
If you plan to participate in the bunker tour, please note we have to leave 15:05. If you haven't yet told me that you want to come, please send a short email ASAP to  so I can try to adjust the number of participants.
16:45 Former government secret nuclear bunker (90 min)
Guided tour. Roughly 10 EUR/person for the tour (depends on number of participants)
We will be travelling there by tram+train. Please note that we will have to walk from the venue to the tram station (1 km) and from the final train station to the bunker (1.5 km). If you want to look up a timetable, use http://www.bahn.de/p_en/view/index.shtml . We'll board the tram at "Bonn Hochkreuz/Deutsches Museum Bonn", take the train at "Bad Godesberg Bahnhof, Bonn", and arrive at "Ahrweiler Markt".
|Venue||Sa, 10.10.2015||dep 15:05||walk 15 min|
|Bonn Hochkreuz/Deutsches Museum Bonn||Sa, 10.10.2015||dep 15:23||STR 16|
|Bad Godesberg Bahnhof, Bonn||Sa, 10.10.2015||arr 15:27||walk 8 min. Caution! The train station is under construction and NOT usable for anyone with a walking disability. If in doubt, ask early enough so we can organize alternative transportation or assistance.|
|Bonn-Bad Godesberg||Sa, 10.10.2015||dep 15:55||1 (subject to change, if in doubt look for signs "Trains to Koblenz")||RB 11156 (may also be another number, check the destination of the train)|
|Ahrweiler Markt||Sa, 10.10.2015||arr 16:29||2|
|Ahrweiler Markt||Sa, 10.10.2015||dep 16:30||walk 15 min|
|Regierungsbunker||Sa, 10.10.2015||arr 16:45|
Mostly development and one-on-one discussions, plus possibly a few talks.
The schedule will be decided ad-hoc depending on suggestions at the conference. If you have a great idea, talk about it and tell me (Carl-Daniel) to add it to the schedule!
Proposed topics include:
Building coreboot (tutorial)
A complete walkthrough for building your own coreboot image including payload and the settings you want.
Community building (group discussion)
Marc Jones slides
- things we do well and things we do poorly - owning your nak (Gerrit review process) - diversity - teaching moments
- growth of coreboot and need? - areas to maintain - process changes?
- Stefan Reinauer, Google Inc
- Georg Wicherski, CrowdStrike
- Wim Vervoorn, Eltan BV
- Gerard Duynisveld, Eltan BV
- Werner Zeh, Siemens AG
- Fabian Kunkel, BAP AB
- Nico Huber, secunet Security Networks AG
- Marc Jones, MJC
- ~30 other participants so far, waiting for OK to list them here