2.0 -//Pentabarf//Schedule//EN PUBLISH JUR9JU@@talks.osfc.io -JUR9JU Planet Scale Deployment of LinuxBoot at Google en en 20251007T094500 20251007T100500 002000

Planet Scale Deployment of LinuxBoot at Google

PUBLIC CONFIRMED Keynote https://talks.osfc.io/osfc-2025/talk/JUR9JU/ Main David Hu PUBLISH SXS7MD@@talks.osfc.io -SXS7MD State of the UEFI: A Standardized Approach to Firmware en en 20251007T101500 20251007T103500 002000

State of the UEFI: A Standardized Approach to Firmware

PUBLIC CONFIRMED Keynote https://talks.osfc.io/osfc-2025/talk/SXS7MD/ Main PUBLISH LNJAGZ@@talks.osfc.io -LNJAGZ How to Run a Company with Open-Source en en 20251007T104500 20251007T110500 002000

How to Run a Company with Open-Source

PUBLIC CONFIRMED Keynote https://talks.osfc.io/osfc-2025/talk/LNJAGZ/ Main Christian Walter PUBLISH AV9UZC@@talks.osfc.io -AV9UZC Death By Iteration en en 20251007T111500 20251007T114500 003000

Death By Iteration

Small hardware teams and startups often face tight constraints and hidden iteration loops, and unmanaged change propagation can quietly burn through time, money, and morale. While software teams can often "fail fast," hardware development demands more foresight. This talk shows how systems architecture tools like Dependency Structure Matrix (DSM), Weighted Decision Matrix, and Tradeoff Studies can help teams make smarter decisions early and maintain flexibility without chaos. The talk will walk through real-world examples of: Mapping component dependencies to predict ripple effects of change Evaluating competing concepts with structured decision frameworks Managing features across electrical, mechanical, and firmware domains Prioritizing decisions when architecture isn’t fully frozen It will also touch on how these tools can live inside lean processes, so they don’t slow teams down, but actually help them go faster, more confidently. If you’ve ever had to ship a board revision because a tiny dependency was missed, or found yourself stuck in the purgatory of change propagation while the market moved on, this talk might be for you. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/AV9UZC/ Main Emmanuel Odunlade PUBLISH X9DJ8M@@talks.osfc.io -X9DJ8M Bootstrapping RISC-V Systems: Introducing rv-runtime-generator en en 20251007T133000 20251007T140000 003000

Bootstrapping RISC-V Systems: Introducing rv-runtime-generator

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/X9DJ8M/ Main Furquan Shaikh PUBLISH 7DXCNN@@talks.osfc.io -7DXCNN Announcing dutctl: A Streamlined Device Management for Open Firmware Development en en 20251007T141500 20251007T144500 003000

Announcing dutctl: A Streamlined Device Management for Open Firmware Development

## What is dutctl? dutctl is an open-source command-line tool and service ecosystem designed specifically for managing development and test devices in firmware development environments. It provides a unified interface for interacting with various development boards, test fixtures, and embedded platforms, regardless of their underlying communication protocols or management interfaces. The project consists of: - A command-line client (dutctl) for direct device interaction - A server component for managing remote device access - Device agents that run close to hardware and expose a consistent API - A flexible plugin architecture for extending functionality ## The Problem dutctl Solves Firmware development has long suffered from fragmented tooling. Each hardware vendor typically provides their own management utilities, each with different interfaces, capabilities, and quirks. This creates several challenges: 1. Developers must learn multiple tools and interfaces 2. Automation becomes difficult across heterogeneous device fleets 3. Collaboration is hindered by inconsistent tooling 4. CI/CD pipelines become complex and brittle 5. Device sharing across teams is manual and error-prone dutctl addresses these issues by providing a consistent, programmable interface to diverse hardware, enabling standardized workflows regardless of the underlying devices. ### Who Can Use dutctl dutctl serves several key user groups in the open firmware community: - **Firmware Developers**: Streamline daily development tasks with consistent device control - **QA Engineers**: Build reliable test automation across diverse hardware - **DevOps Teams**: Integrate hardware testing into CI/CD pipelines with per-commit verification - **Open Hardware Projects**: Provide consistent management interfaces for your custom boards - **Educational Institutions**: Simplify device access for students learning firmware development Whether you're working on coreboot, LinuxBoot, OpenBMC, or custom firmware projects, dutctl helps manage your development and test devices more efficiently. ### Key Features 1. **Unified Command Interface**: Control various devices through consistent commands 2. **Remote Device Management**: Access and control devices over the network 3. **Bidirectional Command Streaming**: Real-time interaction with device outputs 4. **Multi-Architecture Support**: Test on different architectures in parallel 5. **Extensible Plugin System**: Add support for new hardware components and protocols 6. **Scalability**: Enable distributed device fleets and team collaboration ### Try & Contribute We invite the open firmware community to: 1. **Try dutctl**: Download and integrate it into your firmware development workflow 2. **Provide Feedback**: Help us refine the tool to better meet community needs 3. **Contribute**: Add support for your hardware platforms and use cases The Code is available on https://github.com/blindspotsoftware/dutctl PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/7DXCNN/ Main Jens Topp PUBLISH DKWH38@@talks.osfc.io -DKWH38 IPMI HTTPS Interface: Towards a Password-Free BMC en en 20251007T153000 20251007T160000 003000

IPMI HTTPS Interface: Towards a Password-Free BMC

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/DKWH38/ Main Lei Yu PUBLISH VJYNY8@@talks.osfc.io -VJYNY8 Developing OpenBMC Firmware on Arm Servers Using the Arm Fixed Virtual Platform (FVP) en en 20251007T161500 20251007T164500 003000

Developing OpenBMC Firmware on Arm Servers Using the Arm Fixed Virtual Platform (FVP)

This session presents a virtualized development platform that brings OpenBMC to Arm’s Neoverse Fixed Virtual Platform (FVP). Co-developed by Arm and 9elements, the platform supports early firmware bring-up, testing, and standards validation without requiring physical hardware. The talk covers the high-level architecture, which includes a virtual BMC and an Auxiliary Satellite Management Controller (SatMC), and demonstrates how the platform enables critical server manageability features defined by Arm’s Server Base Manageability Requirements (SBMR), including: - The SBMR-defined side-band interface using MCTP/PLDM - In-band host communication via IPMI and Redfish - Out-of-band Redfish and IPMI access - Use cases such as RAS event logging, boot progress reporting, and telemetry collection The presentation also highlights a hybrid development configuration that pairs the virtual host with a physical ASPEED AST2600 EVK acting as the BMC. Attendees will gain insight into how virtual infrastructure can accelerate OpenBMC development, streamline integration workflows, and validate standards-based manageability features on Arm servers— even before silicon is available. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/VJYNY8/ Main Samer El-Haj-Mahmoud PUBLISH WQTKQT@@talks.osfc.io -WQTKQT OpenBMC Behavior-Based Fault Injection Testing Method en en 20251007T170000 20251007T173000 003000

OpenBMC Behavior-Based Fault Injection Testing Method

This presentation introduces a behavior-based fault injection testing methodology tailored for OpenBMC firmware. In BMC (Baseboard Management Controller) development, a significant portion of engineering effort is devoted to handling abnormal system behaviors. Ensuring stability and robustness under such conditions remains a critical challenge, particularly given the complex reproduction scenarios associated with many OpenBMC-related faults. Traditional testing techniques often fall short in addressing these difficulties. To overcome these limitations, we adopt a behavior-driven approach inspired by fuzz testing. By injecting faults at the I/O layer, we enrich the diversity of grey-box test scenarios. Our methodology begins with constructing fixed fault models derived from real-world failure cases, as recorded in systems like JIRA. These models are then programmatically mutated to expand the coverage of fault types and injection points. A newly developed fault injection toolchain is used to perform comprehensive validation of OpenBMC firmware, with a focus on exception handling and recovery mechanisms. The proposed approach offers several key advantages: - Low Dependency: Faults are injected dynamically at runtime without requiring modifications to source code, service restarts, or firmware reflashing. - High Reliability: Tests are conducted directly on release firmware builds, ensuring result accuracy without altering runtime configurations. - Strong Interpretability: Injection events, timing, and fault models are explicitly derived from known issues, making test results easier to analyze and correlate. - Cross-Scenario Compatibility: The method supports execution across different environments, including QEMU virtual platforms and physical hardware targets. To implement this methodology, we leverage dynamic instrumentation tools such as Frida and eBPF, along with custom-developed scripts. The testing framework supports multiple techniques, including: - Operation-sequence-based fault injection - Log-keyword-based fault triggering - Interception of system libraries and components By leveraging these methods, we can accelerate the iteration and refinement of OpenBMC, thereby substantially enhancing its stability and robustness. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/WQTKQT/ Main Lei Yu Jia, Chunhui PUBLISH XL73DH@@talks.osfc.io -XL73DH Intel(R) signed FSP and verified Boot en en 20251008T093000 20251008T100000 003000

Intel(R) signed FSP and verified Boot

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/XL73DH/ Main Ravi Rangarajan Sai Chaganty Christian Albrecht PUBLISH APKCKF@@talks.osfc.io -APKCKF OCP L.O.C.K. en en 20251008T101500 20251008T104500 003000

OCP L.O.C.K.

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/APKCKF/ Main Jeff Andersen PUBLISH NSN8YT@@talks.osfc.io -NSN8YT Using Open-Source Firmware for Embedded Military Applications en en 20251008T111500 20251008T114500 003000

Using Open-Source Firmware for Embedded Military Applications

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/NSN8YT/ Main Jay Talbott PUBLISH YZMMKG@@talks.osfc.io -YZMMKG Open-Source Firmware under the European CRA en en 20251008T120000 20251008T123000 003000

Open-Source Firmware under the European CRA

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/YZMMKG/ Main Christian Walter PUBLISH 7ZADQ9@@talks.osfc.io -7ZADQ9 Open Source Keyboards and How to Build Them en en 20251008T141500 20251008T144500 003000

Open Source Keyboards and How to Build Them

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/7ZADQ9/ Main Henry Lie PUBLISH TZSQVZ@@talks.osfc.io -TZSQVZ The State of TamaGo en en 20251008T150000 20251008T153000 003000

The State of TamaGo

In recent months the TamaGo framework expanded its support to new targets. This talk explores the TamaGo runtime evolution towards ta "Rosetta Stone" for integration of freestanding Go runtimes within arbitrary environment, whether bare metal or OS supported, such evolution is playing an important role in the upstreaming efforts of TamaGo runtime changes towards the vanilla Go distribution. We will also explore the recently developed support of AMD64 architectures and its applications for unikernel execution under a variety of Linux KVM frameworks as well as under the Unified Extensible Firmware Interface (UEFI). We will cover the tooling, API and expanded deployment scenarios resulting from the AMD64 support, as well as the resulting unified AMD64/ARM/RISC-V runtime API and its advantages in the role of code development cross-firmware and cross-cloud deployments. Finally we discuss the interactions with the u-root project, used to create the go-boot project and the future roadmap to a potential support for a bare metal u-root integration. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/TZSQVZ/ Main Andrea Barisani PUBLISH 3NBSKP@@talks.osfc.io -3NBSKP Deep dive into the system firmware vision of a CSP en en 20251008T160000 20251008T163000 003000

Deep dive into the system firmware vision of a CSP

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/3NBSKP/ Main Jiming Sun Nandagopal Sathyanarayanan PUBLISH RDPS8G@@talks.osfc.io -RDPS8G Debugging techniques using Slim Bootloader en en 20251008T164500 20251008T171500 003000

Debugging techniques using Slim Bootloader

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/RDPS8G/ Main Ravi Rangarajan Sachin Kamat PUBLISH 7VJKDV@@talks.osfc.io -7VJKDV UEFI DevCon: Next Frontiers in Firmware Standardization: OCP OPF Efforts and Their Effect on UEFI en en 20251009T101500 20251009T104500 003000

UEFI DevCon: Next Frontiers in Firmware Standardization: OCP OPF Efforts and Their Effect on UEFI

PUBLIC CONFIRMED UEFI DevCon https://talks.osfc.io/osfc-2025/talk/7VJKDV/ Main PUBLISH MAQBK3@@talks.osfc.io -MAQBK3 UEFI DevCon: Web-Scale UEFI Configuration Management for Heterogeneous Infrastructure en en 20251009T104500 20251009T111500 003000

UEFI DevCon: Web-Scale UEFI Configuration Management for Heterogeneous Infrastructure

PUBLIC CONFIRMED UEFI DevCon https://talks.osfc.io/osfc-2025/talk/MAQBK3/ Main Nnamdi Ajah PUBLISH GRGW8S@@talks.osfc.io -GRGW8S UEFI DevCon: Virtualization for UEFI DXE Driver Testing and Deployment Validation en en 20251009T111500 20251009T114500 003000

UEFI DevCon: Virtualization for UEFI DXE Driver Testing and Deployment Validation

PUBLIC CONFIRMED UEFI DevCon https://talks.osfc.io/osfc-2025/talk/GRGW8S/ Main Aaron Rossetto PUBLISH R9T8UY@@talks.osfc.io -R9T8UY UEFI DevCon: Signed and Dangerous: BYOVD Attacks on Secure Boot en en 20251009T114500 20251009T121500 003000

UEFI DevCon: Signed and Dangerous: BYOVD Attacks on Secure Boot

PUBLIC CONFIRMED UEFI DevCon https://talks.osfc.io/osfc-2025/talk/R9T8UY/ Main PUBLISH 7JLBKL@@talks.osfc.io -7JLBKL UEFI DevCon: The Patina UEFI Revolution: A Rust-Based Approach en en 20251009T121500 20251009T124500 003000

UEFI DevCon: The Patina UEFI Revolution: A Rust-Based Approach

PUBLIC CONFIRMED UEFI DevCon https://talks.osfc.io/osfc-2025/talk/7JLBKL/ Main Michael Kubacki PUBLISH WTJVWM@@talks.osfc.io -WTJVWM UEFI DevCon: Secure and Scalable Firmware Updates via Capsules en en 20251009T124500 20251009T131500 003000

UEFI DevCon: Secure and Scalable Firmware Updates via Capsules

PUBLIC CONFIRMED UEFI DevCon https://talks.osfc.io/osfc-2025/talk/WTJVWM/ Main Sean Loe Mohamad Saleh PUBLISH AU9PHG@@talks.osfc.io -AU9PHG Stitching Trust: Measured Boot Across Open-Source Firmware with Firmware Handoff en en 20251009T101500 20251009T103000 001500

Stitching Trust: Measured Boot Across Open-Source Firmware with Firmware Handoff

We'll explore how the Firmware Handoff (as defined in the Arm Firmware Handoff Specification https://firmwarehandoff.github.io/firmware_handoff/main/index.html) provides a standardized data structure for passing information between firmware stages operating across different exception levels and execution environments. This talk further dives into how Arm is leveraging the Firmware Handoff Specification to connect key open-source boot components to enable a consistent, end-to-end measured boot flow. The session will include implementation insights from real-world prototypes, discussions on upstream engagement, and how this work integrates with TPM-backed attestation, event logs, and remote attestation. Open source components in focus include the Trusted Firmware-A (TF-A), EDK2, Linux, other standalone libraries and standards that enable this flow. This is a practical talk for those interested in measured boot, firmware architecture, open-source firmware handoff and building measurable trust from the first instruction to the final init. PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2025/talk/AU9PHG/ SR1 Prachotan Reddy Bathi PUBLISH JD997Z@@talks.osfc.io -JD997Z An introduction and update on Universal Payload Specification en en 20251009T103500 20251009T105000 001500

An introduction and update on Universal Payload Specification

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2025/talk/JD997Z/ SR1 Guo Dong Dhaval Sharma PUBLISH 3TSXWW@@talks.osfc.io -3TSXWW OpenBMC - More than a board in a box en en 20251009T105500 20251009T111000 001500

OpenBMC - More than a board in a box

In this lightning talk, I will discuss various server setups that a BMC might need to manage, based on my experience contributing to the OpenBMC project. Many within the industry now encounter systems that are more complex than a basic baseboard within a chassis, which impacts how management solutions are developed and implemented. In a previous talk, I covered multi-host platforms and the specific challenges associated with managing these systems. This presentation will delve further into additional server configurations that are commonly encountered in the field. Understanding these setups is beneficial for guiding feature development in OpenBMC, ensuring it meets the real-world needs of modern server environments. Additionally, I will outline solutions that OpenBMC provides for effectively describing and managing more intricate topologies. These solutions are designed to enhance management capabilities and improve operational efficiency. Attendees will gain a clearer understanding of how OpenBMC can be leveraged to address the complexities of current server systems. PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2025/talk/3TSXWW/ SR1 Oliver Brewka PUBLISH GLT8BN@@talks.osfc.io -GLT8BN Flashless/Stateless firmware, addressing modern security through fast updates and firmware less approach en en 20251009T113000 20251009T114500 001500

Flashless/Stateless firmware, addressing modern security through fast updates and firmware less approach

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2025/talk/GLT8BN/ SR1 Jean-Marie Verdun PUBLISH PYG399@@talks.osfc.io -PYG399 shrinking u-root with tinygo en en 20251009T115000 20251009T120500 001500

shrinking u-root with tinygo

u-root's versatility enables us to deploy memory-safe Go code to small places we need firmware in. But some places are tinier than others, and Go binaries are not generally known for their compactness. The solution for that might be to change your go compiler, from upstream go to tinygo: "a compiler for small places". In this talk, we will show the efforts, achievements, and pitfalls we encountered while enabling u-root builds using tinygo. Furthermore, we will provide an outlook on the near future of tinygo enablement and offer an overview of the remaining roadblocks. PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2025/talk/PYG399/ SR1 David Hu Leon Gross PUBLISH U7ZSRY@@talks.osfc.io -U7ZSRY Server Host Firmware-Agnostic Platform Configuration Change Method and Format en en 20251009T121000 20251009T122500 001500

Server Host Firmware-Agnostic Platform Configuration Change Method and Format

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2025/talk/U7ZSRY/ SR1 Paul Grimes, PMTS FW Engineer – AMD Server Firmware Abner Chang PUBLISH RLWN7J@@talks.osfc.io -RLWN7J Developing UEFI applications in bare metal Go en en 20251009T124500 20251009T131500 003000

Developing UEFI applications in bare metal Go

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/RLWN7J/ SR1 Andrea Barisani PUBLISH KQUBPB@@talks.osfc.io -KQUBPB Zephyr-powered OpenBMC with LittleBMC SOC is developed by Alibaba Cloud en en 20251009T141500 20251009T144500 003000

Zephyr-powered OpenBMC with LittleBMC SOC is developed by Alibaba Cloud

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2025/talk/KQUBPB/ SR1 Kuiying Wang PUBLISH ENXBAW@@talks.osfc.io -ENXBAW Hands-On Workshop: Running OpenBMC and Validating Server Manageability on Virtual Arm Servers en en 20251009T101500 20251009T121500 020000

Hands-On Workshop: Running OpenBMC and Validating Server Manageability on Virtual Arm Servers

This 60-minute workshop provides hands-on experience with OpenBMC running in a fully virtual Arm server environment using the Neoverse Fixed Virtual Platform (FVP). Co-developed by Arm and 9elements, the platform enables firmware development and standards validation well before physical hardware is available. The session walks attendees through building and launching OpenBMC on a Base FVP (acting as the BMC) that communicates with a separate Neoverse FVP (representing the server host). The host platform includes a Manageability Control Processor (MCP), which acts as the Arm SBMR Satellite Management Controller (SatMC). These virtual systems communicate via simulated side-band and in-band channels using industry-standard interfaces. This workshop focuses on developer workflows and testing, with minimal architectural deep dive. Attendees will: - Launch OpenBMC in a dual-FVP environment - Explore telemetry and RAS logging over MCTP/PLDM - Send live telemetry data to a Redfish client - Use PLDM File I/O to transfer binary crash logs - Exercise Redfish and IPMI interfaces from Linux and UEFI - Run the SBMR-ACS to verify manageability compliance Participants will leave with instructions and open source tools from gitlab.arm.com/server_management/PoCs/fvp-poc and github.com/ARM-software/sbmr-acs, ready to apply them in CI, bring-up, or testing pipelines. If participants would like to run the demonstration independently, participants should either prepare a standard / high-performance Linux laptop, or remotely access their own powerful workstation. The recommended laptop configuration is provided below. Pre-built Image available : https://github.com/gtossk2/2025_osfc_workshop Operating System: Ubuntu 22.04 / 24.02 Processor: Intel i5 / AMD Ryzen 5 (with H-series suffix) Memory (RAM): 32 GB PUBLIC CONFIRMED Workshop https://talks.osfc.io/osfc-2025/talk/ENXBAW/ SR2 John Chung PUBLISH U97PQH@@talks.osfc.io -U97PQH Arm SystemReady Band Compliance: A Hands-On Workshop en en 20251009T141500 20251009T161500 020000

Arm SystemReady Band Compliance: A Hands-On Workshop

PUBLIC CONFIRMED Workshop https://talks.osfc.io/osfc-2025/talk/U97PQH/ SR2 Sunny Wang