DOT Security’s Post

The #Yocto project has a new release! As CNX Software Limited writes: The Yocto Project 5.0 codenamed “Scarthgap” has just been released with Linux 6.6, glibc 2.39, LLVM 18.1, and over 300 other recipe upgrades. Some other changes in Yocto Project 5.0 include: New variables: CVE_DB_INCR_UPDATE_AGE_THRES: Configure the maximum age of the internal CVE database for incremental update (instead of a full redownload). RPMBUILD_EXTRA_PARAMS: support extra user-defined fields without crashing the RPM package creation. OPKG_MAKE_INDEX_EXTRA_PARAMS: support extra parameters for opkg-make-index. EFI_UKI_PATH, EFI_UKI_DIR: define the location of UKI image in the EFI System partition. TARGET_DBGSRC_DIR: specifies the target path to debug source files USERADD_DEPENDS: provides a way to declare dependencies on the users and/or groups created by other recipes, resolving a long-standing build ordering issue Architecture-specific enhancements: genericarm64: a new MACHINE to represent a 64-bit General Arm SystemReady platform. Add Power8 tune to PowerPC architecture. arch-armv9: remove CRC and SVE tunes, since FEAT_CRC32 is now mandatory and SVE/SVE2 are enabled by default in GCC’s -march=armv9-a. arm/armv*: add all of the additional Arm tunes in GCC 13.2.0 Some new core recipes: bmaptool: a tool for creating block maps for files and flashing images, being now under the Yocto Project umbrella. core-image-initramfs-boot: a minimal initramfs image, containing just udev and init, designed to find the main root filesystem and pivot to it.  lzlib: a data compression library that provides LZMA compression and decompression functions.  lzop: a compression utility based on the LZO library, that was brought back after a (now reverted) removal. python3-jsonschema-specifications: support files for JSON Schema Specifications (meta-schemas and vocabularies), added as a new dependency of python3-jsonschema.  python3-maturin: a project that allows building and publishing Rust crates as Python packages. etc… QEMU has been upgraded to version 8.2.1 and had several improvements Rust has been upgraded to version 1.75, the Rust profiler options were enabled back, etc… Several wic Image Creator enhancements Various SDK-related improvements including: nativesdk: let MACHINE_FEATURES be set by machine-sdk configuration files. nativesdk: prevent MACHINE_FEATURES and DISTRO_FEATURES from being backfilled. Support for riscv64 as an SDK host architecture. Extend recipes to nativesdk: acpica, libpcap, python3-setuptools-rust. Several enhancements to testing, utility scripts, BitBake build tool, etc… A long list of security improvements and fixes An even longer list of recipe upgrades Etc… A link is available in the comments! #linux #embedded #embeddedsystems #opensource

Last week the version 5.0 of The Yocto Project, A Linux Foundation Project was launched under the name Scarthgap, it will be maintained for the next 4 years following the Long Term Support maintenance policy (until April 2028). During the 4 years of life of the first LTS version 3.1 of Yocto (named Dunfell) I tried to contribute regularly to the next one OpenEmbedded core that would be released. I didn't do much but I did something for the current version 5.0: $ git shortlog -sn --since="1 Apr, 2020" | head -10  2639 Alexander Kanavin  1546 Richard Purdie   986 Khem Raj   938 Ross Burton   866 Wang Mingyu   734 Bruce Ashfield   495 wangmy   304 Tim Orling   202 𝐉𝐨𝐬𝐞 𝐐𝐮𝐚𝐫𝐞𝐬𝐦𝐚   189 Martin Jansa If you like working with open source and have a manager who tells you that is not for you, send him catch snipe hunts (in Portuguese: apanhar gambozinos). The modern world runs on top of open source software. #yocto #openembedded #opensource

🌐 The Power of Open Source 🌐 Open-source software has revolutionized the tech industry by promoting collaboration, innovation, and transparency. Projects like Linux, Apache, and Kubernetes have become foundational technologies used by companies worldwide. 🐧🔧 The open source model allows developers from around the globe to contribute, improving software quality and security through community efforts. It also enables rapid prototyping and innovation, as anyone can build upon existing code to create new solutions. 🌍💡 For businesses, adopting open source can lead to cost savings and greater flexibility. However, it also requires a commitment to compliance and proper management to ensure security and compatibility. What open-source projects have you contributed to or benefited from? Share your experiences and favorite projects below! 👇 #OpenSource #TechCollaboration #Innovation #CommunityDriven #TechCommunity 

Join Daniel Bristot de Oliveira, Senior Principal Software Engineer at Red Hat, on Wednesday, April 3 at 9:00 AM PDT for an interactive, complimentary Mentorship Session exploring: “rtla timerlat: Debugging Real-Time Linux Scheduling Latency.” Debugging real-time Linux scheduling latency is a demanding task. And the demand for debugging this metric is increasing as more and more projects depend on it. For example, Linux in automotive and industrial applications is a trend. Historically, the preempt rt is tested using black box applications, but this approach has several limitations, as it does not help to find the root cause for bad latency values nor help to establish a pattern between different cases. rtla (real-time Linux analysis) is a kernel tool that facilitates debugging for real-time kernel features by integrating the measurements into kernel tracing features. In particular, rtla timerlat simplifies the debugging of scheduling latency by measuring the latency, tracing the main factors that cause a scheduling latency, producing a standardized auto analysis, and splitting the scheduling latency problem into small independent pieces of latency, all at once with user-friendly interface. This talk will present the rtla timerlat tool, the details of the timerlat tracer, and the tool's auto-analysis output, as well as demonstrate a strategy for debugging complex scheduling latency problems. Learn more & register: https://hubs.ly/Q02qqKP_0 #OpenSource #OSS #LinuxKernel #Linux #LinuxFoundation #OpenSourceSoftware #OpenSourceDevelopment #OpenSourceCommunity #Events #Debugging #SchedulingLatency #RealTimeLinux

Join Daniel Bristot de Oliveira, Senior Principal Software Engineer at Red Hat, TOMORROW at 9:00 AM PDT for an interactive, complimentary Mentorship Session exploring: “rtla timerlat: Debugging Real-Time Linux Scheduling Latency.” Debugging real-time Linux scheduling latency is a demanding task. And the demand for debugging this metric is increasing as more and more projects depend on it. For example, Linux in automotive and industrial applications is a trend. Historically, the preempt rt is tested using black box applications, but this approach has several limitations, as it does not help to find the root cause for bad latency values nor help to establish a pattern between different cases. rtla (real-time Linux analysis) is a kernel tool that facilitates debugging for real-time kernel features by integrating the measurements into kernel tracing features. In particular, rtla timerlat simplifies the debugging of scheduling latency by measuring the latency, tracing the main factors that cause a scheduling latency, producing a standardized auto analysis, and splitting the scheduling latency problem into small independent pieces of latency, all at once with user-friendly interface. This talk will present the rtla timerlat tool, the details of the timerlat tracer, and the tool's auto-analysis output, as well as demonstrate a strategy for debugging complex scheduling latency problems. Learn more & register: https://hubs.la/Q02qqZvq0 #OpenSource #OSS #LinuxKernel #Linux #LinuxFoundation #OpenSourceSoftware #OpenSourceDevelopment #OpenSourceCommunity #Events #Debugging #SchedulingLatency #RealTimeLinux

Linus Torvalds: My Inspiration Linus Torvalds, the creator of the Linux kernel, has been a huge inspiration to me throughout my journey in computer science. His story of building a free and open-source operating system from scratch, driven by passion and collaboration, is truly remarkable. What inspires me the most : Open-source philosophy: The idea of creating something impactful and making it accessible to everyone resonates deeply with me. Focus on excellence: Linus's dedication to quality and his relentless pursuit of improvement in the Linux kernel is something I aspire to in my own work. Collaborative leadership: His ability to foster a global community of developers and guide them towards a common goal is a valuable lesson in teamwork. Linus Torvalds' work has not only revolutionized the tech world but also embodies the spirit of innovation and open collaboration that I strive for in my own career. OpenSource Linux Neeraj Kumar Tharun H N #neerajkumar #LinusTorvalds #OpenSource #Inspiration #ComputerScience

#Community tech stack updates: — Orbit was acquired by Postman — crowd.dev was acquired by The Linux Foundation Who’s next? Honestly, I don’t know. No one does. We need purpose-built tech for Community & DevRel professionals to be successful in our roles. With it, we’ll be back in the dark age. Hopefully, the companies in the space will remain focused, build intentionally, & price fairly, so it’s a reasonable for the value gained. #CommunityManager #CommunityManagement

Open Source Software: Catalyst of Modern IT Open source software stands as a salient pin in the ever-evolving landscape of modern IT. It goes beyond mere code; it embodies a collaborative philosophy that drives innovation and shapes the way we approach technology. Topics: 1. The Role of Open Source: - Innovation Hub - Agility and Adaptability - Cost-Efficiency 2. Popular Open-Source Projects and Their Impact: - Linux Kernel - Apache Web Server - Mozilla Firefox - TensorFlow The Role of Open Source: Innovation Hub: Open source is an innovation hub, fostering collaboration and ideation globally. It breaks down silos, enabling developers to collectively enhance and refine software projects. #OpenSource #Technology #Innovation #Collaboration #IT #LinkedIn

The Impact of Open Source on Developing Countries and the AI Divide Join us as we discuss the crucial role of open source technology in bridging the tech divide in developing countries. Our guest, Eric Hugo, shares his insights on how Linux and other open-source solutions have empowered communities worldwide. Don't miss this eye-opening conversation! #OpenSourceImpact #DevelopingCountries #TechDivide #LinuxTechnology #CommunityEmpowerment #AIInclusion #OpenSourceRevolution #TechnologyForAll #DigitalEquality #BridgingTheGap

Teaching z/vm performance and analysis because someone needs to