2.0 -//Pentabarf//Schedule//EN PUBLISH T3CSGU@@talks.osfc.io -T3CSGU Open Firmware Beyond the Hyperscalers: Outcomes from the PremDay User Group en en 20260915T094500 20260915T101500 003000

Open Firmware Beyond the Hyperscalers: Outcomes from the PremDay User Group

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/T3CSGU/ Main Erwan Velu PUBLISH 9HUU8E@@talks.osfc.io -9HUU8E Memory-Mapped FPGA Peripherals on Zephyr: FMC and QSPI Approaches en en 20260915T103000 20260915T110000 003000

Memory-Mapped FPGA Peripherals on Zephyr: FMC and QSPI Approaches

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/9HUU8E/ Main Sahaj Sarup PUBLISH GSLJUP@@talks.osfc.io -GSLJUP Setting Boundaries: Securing overlooked OP-TEE attack vectors en en 20260915T113000 20260915T120000 003000

Setting Boundaries: Securing overlooked OP-TEE attack vectors

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/GSLJUP/ Main Marco Felsch PUBLISH UYLY99@@talks.osfc.io -UYLY99 Running baremetal Go in the AST2700 for simpler server management en en 20260915T121500 20260915T124500 003000

Running baremetal Go in the AST2700 for simpler server management

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/UYLY99/ Main Marvin Drees PUBLISH RHDDHV@@talks.osfc.io -RHDDHV The Switch Has No CPU: Running an Entire Fabric Switch on Its BMC en en 20260915T140000 20260915T143000 003000

The Switch Has No CPU: Running an Entire Fabric Switch on Its BMC

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/RHDDHV/ Main Sam Cook PUBLISH KQ8LNV@@talks.osfc.io -KQ8LNV A whole new world - Running a PBA on 'bare-metal UEFI' with TamaGo en en 20260915T144500 20260915T151500 003000

A whole new world - Running a PBA on 'bare-metal UEFI' with TamaGo

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/KQ8LNV/ Main Christian Walter Christian Grönke PUBLISH AAGWG7@@talks.osfc.io -AAGWG7 barebox and the Last Nasal Demon Riders en en 20260915T153000 20260915T160000 003000

barebox and the Last Nasal Demon Riders

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/AAGWG7/ Main Ahmad Fatoum PUBLISH LE99ND@@talks.osfc.io -LE99ND Automated Bare-Metal Remediation: Closing the Zero-Trust Loop with Staged Firmware Sanitization en en 20260915T163500 20260915T170500 003000

Automated Bare-Metal Remediation: Closing the Zero-Trust Loop with Staged Firmware Sanitization

This talk introduces a self-healing firmware state machine that bridges attestation and active-remediation, without shipping a powerful, portable, signed key-clearing payload across the fleet. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/LE99ND/ Main Nnamdi Ajah Giovanni Zantedeschi PUBLISH BVGH3B@@talks.osfc.io -BVGH3B Agentic AI Software Debugging in OpenBMC: Extracting Ground Truth from Binaries to Eliminate Hallucinations en en 20260915T172000 20260915T175000 003000

Agentic AI Software Debugging in OpenBMC: Extracting Ground Truth from Binaries to Eliminate Hallucinations

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/BVGH3B/ Main Jia, Chunhui PUBLISH QY9E7T@@talks.osfc.io -QY9E7T Fear of Flashing: Building confidence in firmware through automated testing en en 20260916T091000 20260916T094000 003000

Fear of Flashing: Building confidence in firmware through automated testing

The release-note caution "Do not update if your system is working" may be less common than it was a decade ago, but the implied risk has not gone away. Easier recovery keeps a failed update from bricking the device, but it still wastes the customer's time and turns the next install from a button press into a risk to schedule. So customers learn to avoid installing, while developers learn to avoid change, all from fear of flashing. At Oxide, the Service Processor and Root of Trust run our Hubris-based firmware in place of a typical BMC or EC, on our servers, power shelf controllers, and network switches. There is no call-home; customers update when they choose, and once a rack ships, whether we can reach it is up to them. We require confidence before release, and hope to earn customer trust afterwards. Improving our testing regime is one way to strengthen both. sp-test is a new harness for direct hardware testing. It uses tools developers know, can emulate parts of the control plane, and lets a test declare what it needs so it runs where it applies and skips without failure when it doesn't. Tests once described only in PR comments can now be checked in and reused. Tests can run unchanged from a developer's bench to hardware-based CI, so someone with no board of their own can get results from scarce, shared hardware. The hardest tests to run are often the ones most worth sharing: the update path exercised as it is in production, code that runs only when something has gone wrong, and fault insertion tests. Telemetry, task dumps, and logs make test results actionable for someone who was not there when it failed. This pattern is not specific to Hubris or to Oxide; any team could build the same kind of testing. A live demo on an off-the-shelf ST Nucleo board makes it concrete. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/QY9E7T/ Main Ben Stoltz PUBLISH ADBDGY@@talks.osfc.io -ADBDGY Bringing up Linux on a memory-safe CHERI RISC-V system en en 20260916T095500 20260916T102500 003000

Bringing up Linux on a memory-safe CHERI RISC-V system

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/ADBDGY/ Main Alice Ziuziakowska PUBLISH JQNFL3@@talks.osfc.io -JQNFL3 TrustZone Bring-Up on Qualcomm QCM6490: Open Firmware from EL3 to Linux EL2 with a Buildroot Developer Workflow en en 20260916T110000 20260916T113000 003000

TrustZone Bring-Up on Qualcomm QCM6490: Open Firmware from EL3 to Linux EL2 with a Buildroot Developer Workflow

The Qualcomm RB3 Gen2 (QCM6490/Kodiak) is a commercially available AArch64 development board with upstream Linux and U-Boot support. The official firmware environment is delivered through Qualcomm Linux and meta-qcom — a comprehensive but heavyweight Yocto-based BSP that is the right answer for production integration but a slow inner loop for firmware engineers iterating on TF-A, OP-TEE, or the boot chain. This talk describes the boot architecture of the QCM6490 platform while providing a Buildroot-based developer workflow — integrated into OP-TEE/build.git — as a fast alternative to meta-qcom for firmware engineers. A single make all builds the full stack from source. From that point, rebuilding any individual component in the bootloader stack or the kernel UKI — and regenerating and flashing the resulting image — becomes a lightweight operation, enabling fast iteration at any layer. The architecture is the main thread. Topics covered include: - Exception level layout - Boot chain: PBL → XBL → BL2 (TF-A, signed with Qualcomm Sectools in TEST mode) → FIP (OP-TEE + U-Boot) → Unified Kernel Image (UKI) containing kernel, DTB, initramfs, and cmdline as a single EFI binary. - OP-TEE integration - DSP remoteproc chain: sourcing ADSP/CDSP firmware and embedding the qcom_pas PAS Trusted Application as an OP-TEE early TA - Developer ergonomics vs. meta-qcom: a fetch-blobs target that pulls Qualcomm boot binaries from public Qualcomm and CodeLinaro repositories in minutes, replacing the need for a full Yocto build during development. **Demo** The talk closes with a live run of the OP-TEE **xtest** regression suite on the board, demonstrating the full Normal/Secure World path end to end. The talk is aimed at firmware engineers working on Qualcomm Arm platforms, and more broadly at anyone integrating OP-TEE with a vendor boot chain that diverges from the standard reference flow. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/JQNFL3/ Main Jorge Ramirez-Ortiz PUBLISH ZHW9PB@@talks.osfc.io -ZHW9PB AMD Embedded open-source strategy - The past, now and moving forward en en 20260916T114500 20260916T121500 003000

AMD Embedded open-source strategy - The past, now and moving forward

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/ZHW9PB/ Main Ritul Guru PUBLISH PCYGKN@@talks.osfc.io -PCYGKN Beyond EFI - what is next for firmware and booting? en en 20260916T133000 20260916T140000 003000

Beyond EFI - what is next for firmware and booting?

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/PCYGKN/ Main Simon Glass PUBLISH Z7PTYB@@talks.osfc.io -Z7PTYB Shipping the Hypervisor in Firmware: A Static-Partitioning Payload for Slim Bootloader en en 20260916T141500 20260916T144500 003000

Shipping the Hypervisor in Firmware: A Static-Partitioning Payload for Slim Bootloader

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/Z7PTYB/ Main Guo Dong Ravi Rangarajan PUBLISH XHMWY9@@talks.osfc.io -XHMWY9 OpenBMC at Cloud Scale: Scaleway’s Journey to Firmware Autonomy en en 20260916T152000 20260916T155000 003000

OpenBMC at Cloud Scale: Scaleway’s Journey to Firmware Autonomy

Beyond Scaleway’s own experience, we advocate for cross-industry collaboration and co-design, leveraging communities and events such as Premday to align operator requirements and accelerate shared solutions. We also believe that building in-house expertise around open firmware is becoming a strategic capability for infrastructure owners seeking greater control, flexibility, and innovation. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/XHMWY9/ Main Elyes Zekri Gauthier CARPENTIER PUBLISH 7788YB@@talks.osfc.io -7788YB Boot Chains and Build Systems en en 20260916T160500 20260916T163500 003000

Boot Chains and Build Systems

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/7788YB/ Main Jiji Freya Daniel Maslowski PUBLISH PZQ8JW@@talks.osfc.io -PZQ8JW Teaching an Old SoC New Tricks: Native raminit for Bay Trail en en 20260916T165000 20260916T172000 003000

Teaching an Old SoC New Tricks: Native raminit for Bay Trail

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2026/talk/PZQ8JW/ Main Mate Kukri PUBLISH 39MQKB@@talks.osfc.io -39MQKB go-tcg-storage: State of the Project and the Future en en 20260917T100000 20260917T101500 001500

go-tcg-storage: State of the Project and the Future

TCG Storage self-encrypting drives (SEDs) put full-disk encryption in the drive controller itself, exposed through the Trusted Computing Group's Security Subsystem Classes — Opal, Pyrite, Enterprise, and Ruby. In practice, managing them means wrestling with ComIDs, locking ranges, pre-boot authentication and shadow MBR, usually via legacy tooling like sedutil or vendor specific tools. go-tcg-storage takes a different path: a pure-Go, kernel-independent implementation of the TCG Storage stack, layered from a low-level drive interface (IF-SEND/IF-RECV over NVMe, SATA, and SAS) up through a core session library to a high-level locking API. This lightning talk covers three things: (1) a short primer on TCG Storage and why an open, library matters for firmware and boot security; (2) the current state of go-tcg-storage — what works, which drives and SSCs are covered, and where the rough edges are; and (3) the roadmap: broader SSC and transport coverage, PBA workflows, release and packaging, testing, and documentation. PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2026/talk/39MQKB/ Main Christian Grönke PUBLISH GN3GDN@@talks.osfc.io -GN3GDN NVIDIA's OpenBMC Contributions and the Road Ahead en en 20260917T101500 20260917T103000 001500

NVIDIA's OpenBMC Contributions and the Road Ahead

Over the past year, NVIDIA has deepened its investment in upstream OpenBMC, shifting from downstream patches toward upstreamt development. This talk covers what's landed upstream, and the tradeoffs in choosing to contribute rather than fork. We'll discuss the challenge of aligning fast-moving platform requirements with OpenBMC's community cadence, and how NVIDIA is restructuring internal workflows to reduce drift from upstream. Looking forward, we'll outline near-term priorities: and areas where closer collaboration with the community is needed. PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2026/talk/GN3GDN/ Main Deepak Kodihalli Harshit Aghera PUBLISH DERT3G@@talks.osfc.io -DERT3G Runtime Access Control in the Bootloader en en 20260917T103000 20260917T104500 001500

Runtime Access Control in the Bootloader

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2026/talk/DERT3G/ Main Ahmad Fatoum PUBLISH FVUHU8@@talks.osfc.io -FVUHU8 NORbert: Open source SPI flash emulation en en 20260917T111500 20260917T113000 001500

NORbert: Open source SPI flash emulation

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2026/talk/FVUHU8/ Main Arthur Heymans PUBLISH HMEUSQ@@talks.osfc.io -HMEUSQ Rewriting firware tools in rust, lowering the barrier with web tools en en 20260917T113000 20260917T114500 001500

Rewriting firware tools in rust, lowering the barrier with web tools

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2026/talk/HMEUSQ/ Main Arthur Heymans PUBLISH C8URL3@@talks.osfc.io -C8URL3 Minimalist UEFI Implementation for Virtual Machines en en 20260917T121500 20260917T123000 001500

Minimalist UEFI Implementation for Virtual Machines

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2026/talk/C8URL3/ Main Borhan Tuğsan Balcı PUBLISH EUBBBZ@@talks.osfc.io -EUBBBZ State of the UEFI: Open Firmware Standards Across Modern Computing Platforms en en 20260917T123000 20260917T124500 001500

State of the UEFI: Open Firmware Standards Across Modern Computing Platforms

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2026/talk/EUBBBZ/ Main Dong Wei PUBLISH BHNZZ9@@talks.osfc.io -BHNZZ9 Automation of Firmware Analysis and Government Standard Reporting en en 20260917T100000 20260917T120000 020000

Automation of Firmware Analysis and Government Standard Reporting

Attendees will see a live demonstration of the firmware analysis prototype, including security findings and severity ratings mapped to relevant NIST framework categories. The session will offer examples and discussions on the tool's usefulness, accuracy, and actionability. Participants do not need any prior knowledge of firmware reverse engineering, though a basic understanding of cybersecurity would aid in interpreting the tools' outputs. Feedback from both technical and non-technical attendees will inform future improvements to the prototype, including its interface, reporting structure, and relevance to practical firmware security workflows. PUBLIC CONFIRMED Workshop https://talks.osfc.io/osfc-2026/talk/BHNZZ9/ 2nd Room Paul Underhill PUBLISH JBDWBK@@talks.osfc.io -JBDWBK Arm SystemReady Workshop: Open Platforms and Firmware Development en en 20260917T143000 20260917T163000 020000

Arm SystemReady Workshop: Open Platforms and Firmware Development

PUBLIC CONFIRMED Workshop https://talks.osfc.io/osfc-2026/talk/JBDWBK/ 2nd Room Ann Cheng Dong Wei PUBLISH FK9WNA@@talks.osfc.io -FK9WNA Hands-on workshop: turning manual Hubris debugging into formal, shareable tests en en 20260917T143000 20260917T163000 020000

Hands-on workshop: turning manual Hubris debugging into formal, shareable tests

PUBLIC CONFIRMED Workshop https://talks.osfc.io/osfc-2026/talk/FK9WNA/ 3rd Room Ben Stoltz