11-12, August 2026 Seoul, South Korea View More Details & Registration Note: The schedule is subject to change.
The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Korea 2026 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.
This schedule is automatically displayed in Korea Standard Time (KST), UTC +9. To see the schedule in your preferred timezone, please select from the drop-down menu to the right.
Sign up or log in to add sessions to your schedule and sync them to your phone or calendar.
Zephyr initially set out to solve a problem that many embedded teams quietly struggled with: how to build dependable real-time systems without being locked into a single vendor, toolchain, or proprietary stack. The project introduced a new model built around portability, adoption of open source and security best practices, modern tooling, and a shared ecosystem of drivers and middleware.
From the start, there was the commitment to apply known best practices to its development. While Zephyr is a different code base, a lot of the lessons learned from developing the Linux Kernel were applied. The project has also focused on incorporating security best practices from the start which now enables it to make compliance easier for manufacturers looking to conform to the emerging Cybersecurity Resilence Act (CRA).
Best practices have also enabled the project to work towards achieving formal safety certification for 61508 and 26262. The project has achieved 61508 concept approval at this point, as is working towards formal certification, using a combination of traditional V-Model analysis, and innovative techniques to keep up with the speed of open source development.
Vice President of Dependable Embedded Systems, The Linux Foundation
Kate Stewart works with the safety, security and license compliance communities to advance the adoption of best practices into embedded open source projects. Since joining The Linux Foundation, she has launched the ELISA and Zephyr Projects, and supports other embedded projects. With... Read More →
As AI agents become active participants in software development, organizations need to rethink how they approach open source strategy. This talk explores why Agentic AI introduces new responsibilities for Open Source Program Office (OSPO) teams: from governance and policy to trust, security, and organizational enablement. This session shares a strategic perspective on how OSPOs can help organizations adopt AI agents responsibly while strengthening open source practices
Ana Jiménez Santamaría is an open source community leader and data scientist with 5+ years of experience at the Linux Foundation, working as Sr. project manager supporting global, multi-stakeholder IT ecosystems. She is also an Agentic AI Foundation Ambassador, helping developers... Read More →
Agentic AI is all the hype right now, but how do you actually implement such a system for real enterprise, cloud based use cases?
The challenge for developers, architects and platform engineers alike lies in custom building agents, and even more so, orchestrating these agents to collaborate effectively towards a common goal. Unfortunately though, despite all the promises from vendors, a "one-size-fits-all" or “off-the-shelf” approach just doesn't work due to the complex nature of software. In addition, just like traditional apps, these agentic systems will likely need to be deployed, managed and observed in cloud environments.
In this session we'll explore: * The spectrum of Agentic AI patterns * A real world-ish implementation of a highly performant - open source - agentic system (with Java!) * Deploying this agentic system to Kubernetes * Other considerations such as observability and fault tolerance to get it all running smoothly in production.
Kevin Dubois is often featured as a (keynote) speaker at conferences around the world, where he shares his passion and knowledge about developer experience, Agentic AI, open source, cloud native development and Java. He is also an author, java Champion, and an accomplished software... Read More →
Unikernels are specialized operating systems designed for efficiency by including only the components needed by an application. By eliminating the traditional user–kernel separation and omitting general-purpose services such as background daemons and unused device drivers, this design reduces system complexity and overhead while providing a fundamentally different execution model from conventional Linux systems. This study examines the structure of Unikraft-based unikernels from a library operating system perspective. It also presents an empirical comparison with Linux under controlled conditions. Both systems were deployed on the same Xen hypervisor and executed on a hardware platform, running the same application with a common subset of POSIX APIs. Execution latency was measured, and assembly-level analysis was performed to investigate potential reasons for the observed differences. The results are presented as an example of combining performance measurement and low-level inspection when analyzing specialized operating systems. Similar approaches may be applicable to other specialized OS or unikernel contexts, depending on the application and execution environment.
Software Engineer at Boeing, currently working on the Boeing Linux team since 2025. Previously involved in BFMS CPS verification at Boeing and HILS for infrared missile systems at the Agency for Defense Development in South Korea.
The Linux desktop system boasts strong customization and freedom, but its application ecosystem has long been a weakness. Recently, the Android system has millions of applications, covering all aspects of work and life. If we could integrate these and create a brand-new desktop experience, what kind of impact would it have?
This presentation will introduce our open-source project - OpenFDE (Open Fusion Desktop Environment). This is an innovative desktop environment that integrates the Android open-source project (AOSP) deeply with Linux applications, enabling users to run various Android applications seamlessly on their Linux desktops.
We will share: 1、Project Vision: Why did we choose AOSP and Linux integration? What problems are we aiming to solve? 2、Core Architecture: How do we achieve the integration of these two major systems? In-depth analysis of the key technologies of OpenFDE in terms of graphics, window management, and application lifecycle. 3、Live Demonstration: Witness firsthand the smooth coexistence of Linux and the latest Android applications (including large-scale games) in the OpenFDE environment.
Global security regulations such as the EU Cyber Resilience Act (CRA) have raised security requirements for embedded products. Open source components, especially the Linux kernel, must now support systematic vulnerability management, fast security patching, and long-term maintenance, making kernel security a key challenge.
This session discusses practical solutions for managing Linux kernel vulnerabilities in embedded products. It begins with an overview of recent kernel CVE trends and their impact on long-lived and customized kernels. The session then introduces a CI-based vulnerability response pipeline designed to minimize the time from CVE disclosure to patch deployment.
A key challenge is backporting security fixes to older or vendor-modified kernels, where patches often do not apply cleanly. To address this, the session presents an AI agent–based approach that assists developers by analyzing CVE data, upstream patches, and kernel context to suggest candidate backports.
By adopting an AI-assisted vulnerability response workflow, teams can reduce response time and prepare for compliance with evolving global security regulations.
Kyungsik Lee is a Senior Software Engineer at LG Electronics working on the Linux kernel for embedded consumer products. He currently focuses on kernel security, including vulnerability response and patch management. He has spoken at LinuxCon Japan and Open Source Summit + Embedded... Read More →
Open-source agents like Hermes and OpenClaw can reason and use tools, but edge deployment is still hard - not the model, the compute underneath: limited memory, tight power budgets, no ops team. Democratizing agentic AI means fixing the compute layer. This deep dive covers GPU and memory slicing at the edge: carving one device’s unified memory so multiple agents run concurrently on hardware as small as an NVIDIA Jetson, and time-sharing when demand exceeds memory.
We compare Jetson-class GPUs with NPUs from Axelera and DeepX - higher performance per watt - and what it takes to make them schedulable. HAMi, the CNCF Incubation project for hardware-agnostic GPU virtualization, is that layer: one scheduling plane across heterogeneous accelerators, fine-grained memory slicing, open source. A blueprint for edge AI without a cloud budget.
For more than 15 years, Qualcomm’s been actively involved in a range of Open Source ecosystems. Until recently, some parts of our development were handled behind closed doors, with contributions coming a bit later and enablement being somewhat limited. We tried various projects and partnerships to push things upstream sooner, but it wasn’t until lately that we truly made a complete shift.
Over the past 18 months, we’ve totally revisited our approach—moving an entire Linux product development ecosystem, with hundreds of contributors, from a private downstream setup to a full-blown Open Development model. This wasn’t just a surface change: it meant overhauling how our engineers work, syncing up our internal systems with open practices, and fundamentally changing the way our developers connect and collaborate.
In this session, we’ll share what made this transition work for us—including how we managed to weave our internal systems into Open Source workflows, encouraged developers to embrace new ways of thinking, and built scalable processes that can handle all sorts of Linux ecosystems and distributions.
Senior Director of Engineering, Qualcomm Technologies Inc
Craig Northway is a Senior Director of Engineering at Qualcomm Technologies, Inc. (QTI). Craig leads the Qualcomm Software Content Compliance team, a group formed to improve process, policy and tooling around Open Source software at Qualcomm, including within the Qualcomm Innovation... Read More →
Service operators often face a constant friction: maintaining high Service Level Indicators (SLIs) versus addressing immediate security vulnerabilities. While userspace updates cause minimal disruption, mitigating Linux kernel vulnerabilities traditionally mandates a full system reboot, forcing administrators into the dilemma of choosing between proactive security practices and continuous uptime.
This session explores the workings of Linux kernel live patching, details how a livepatch kernel module is built, examines the internal mechanisms that power the technology (e.g., ftrace), and provides a practical overview of the current ecosystem so administrators can start using live patches immediately.
Mainly working on maintaining the eBPF stack of SUSE Linux Enterprise Server (SLES) distribution. Currently drawn to the inner working of eBPF verifier and formal verification.
Trusted OSS is an open-source self-certification kit that guides any organization from zero to ISO/IEC 5230 (license compliance) and ISO/IEC 18974 (security assurance) conformance using AI agents. No prior expertise required.
Built by the OpenChain Korea Work Group and released under CC BY 4.0, the kit features:
• AI agents (Claude Code) that auto-generate company-specific compliance artifacts: OSS policy, SBOM, vulnerability response procedures, training curriculum, and conformance declaration • DevSecOps pipelines (SAST, SCA, secret detection, IaC) ready to drop into any CI/CD environment • A 5-level AI Coding Governance Maturity Model — from ad-hoc prompting (Level 1) to AI-augmented defense (findings-driven review, AI fuzzing) and continuous auto-remediation (Level 5).
In this session, I'll walk through how any team can go from no compliance process to a fully documented, self-certifiable program in hours, not months. I'll also share how we're using AI to close the compliance skills gap across Korean enterprises and SMEs — making OpenChain certification accessible to all.
Attendees leave with a working toolkit they can clone and run today.
Haksung Jang is the Open Source Program Manager at SK Telecom and Chair of the OpenChain Korea Work Group. He specializes in ISO/IEC 5230 and ISO/IEC 18974 compliance, leading open source governance programs at enterprise scale. He is the creator of Trusted OSS —an open-source, AI-powered toolkit that enables any organization to achieve OpenChain self-certification using AI agents... Read More →
Can you build OpenStack and Kubernetes clusters anywhere, across multiple clouds, and still understand how network connectivity works?
This session explores that question through a scenario using Cloud-Barista, an open-source multi-cloud orchestrator.
Instead of separate project overviews, this talk connects Cloud-Barista, OpenStack, and Kubernetes as infrastructure layers. Cloud-Barista provisions VMs on public clouds, then OpenStack is deployed on them. The OpenStack-based cloud is registered back into Cloud-Barista to create VMs and host a web service.
Will that service be reachable from Internet? If not, why? What makes it complex? These questions guide our explanation of network paths and reachability. We will apply the same lens to Kubernetes on multi-cloud VMs.
The focus is not just automation, but how connectivity works: public/private IPs, bastion access, cluster nodes, and how users reach workloads.
Beginners curious about these topics will gain practical insight into open-source infrastructure stacks.
This is not another cluster deployment talk. It is an experimental journey across open-source cloud layers, from multi-cloud IaaS to OpenStack and Kubernetes.
Special Fellow and Principal Researcher, CNCF Ambassador, ETRI
Dr. Son is a Special Fellow and Principal Researcher at the Electronics and Telecommunications Research Institute (ETRI), South Korea's national research institute. He develops systems and algorithms for cloud and cloud native computing in national projects. As a CNCF Ambassador... Read More →
AI coding tools can generate patches quickly, but maintainers still cannot merge a PR on generated code alone. They need evidence, what was reproduced, what changed, how it was validated, and whether the contributor actually reduced review work instead of shifting it downstream.
In this session, I draw on recurring patterns from reviewing and maintaining Argo CD contributions to show why many AI-assisted PRs stall and what makes others move quickly. I present a simple four-stage framework for review-ready OSS contributions, Set up the environment, validate the problem before changing code, harden the fix with tests and checks, and submit a PR with enough context and proof for efficient review. Attendees will leave with practical guidance they can use immediately to improve contribution quality and reduce maintainer burden.
DevOps Engineer | Argo CD Maintainer, Hyundai Autoever
Jaewoo is a DevOps Engineer at Hyundai-Autoever, focused on GitOps and cloud-native developer experience. He recently joined the Argo CD reviewer team after contributing to the project. In his free time, he enjoys going to the gym and running outdoors.
Catching transient performance drops is notoriously hard; by the time you attach a profiler, the bottleneck is often gone. Continuous tracing is the solution, but manually analyzing the resulting massive data is a huge hurdle.
This session introduces a practical methodology for always-on performance monitoring and automated analysis using Guider. First, we demonstrate how Guider efficiently profiles system performance in the background with minimal overhead. Upon detecting an anomaly, it automatically generates a retroactive report using trace data captured just before the event.
We will then show how to feed these structured reports into an AI pipeline. Instead of manually deciphering complex kernel metrics, you will see how AI instantly pinpoints the root cause of performance regressions.
Attendees will learn to build a continuous monitoring pipeline that automatically turns raw trace data into real-time, actionable insights.
Software Performance Architect, Hyundai Motor Company
Peace Lee is a Linux Performance Specialist. He has been analyzing and improving the performance of apps and system on various platforms based on Linux. He is the owner of Guider (https://github.com/iipeace/guider).
Hyundai motors , Korea Software Engineer 2023.3 ~ present - enhance performance in automotive system (linux, android)
LG electronics , Korea Software Engineer 2010.6 ~ 2023.2 - kernel/bsp debugging and optimization - performance enhancement in linux kernel/user space... Read More →
Terraform is widely used to manage infrastructure as code, but traditional drift detection relies on periodic scans or manual checks such as terraform plan. This approach often fails to detect real-time changes, manual modifications, or unauthorized actions.
In this technical feature demonstration, we present an open source approach to drift detection using an event-driven model powered by Falco.
We will demonstrate how:
infrastructure is provisioned using Terraform manual or out-of-band changes introduce drift Falco detects these changes in real time via event streams an open source tool analyzes and surfaces these events as actionable drift signals
Unlike traditional drift detection tools, this approach enables near real-time detection, user attribution, and continuous visibility into infrastructure changes.
This session introduces the concept of “event-driven runtime drift” and shows how it complements Terraform-based workflows using open source technologies.
The demo is based on a publicly available open source project, allowing attendees to reproduce the setup and apply it to their own environments.
Keita Higaki is a Senior Customer Solutions Engineer specializing in cloud-native security and Kubernetes runtime protection. He supports enterprise environments adopting runtime security using open source technologies such as Falco. He focuses on bridging Infrastructure-as-Code and... Read More →
What if you could replace your entire OS userspace — binaries, configs, services, even init itself — without ever stopping the kernel? No firmware POST, no hardware re-init, no multi-minute downtime. Just a clean userspace restart in seconds.
That's what soft-reboot (systemctl soft-reboot), implemented in systemd, delivers: a primitive that tears down all of userspace, pivots into a fresh root filesystem, and re-launches PID 1 — while the running kernel stays untouched.
This talk unpacks how soft-reboot works under the hood, why it matters for modern OS update workflows, and how it compares to a traditional reboot and kexec. We'll walk through real production use cases: zero-downtime OS updates, staged fleet rollouts, and rapid recovery from a wedged userspace — without paying the cost of a full boot cycle.
Attendees will leave with a clear mental model of soft-reboot internals, practical guidance on when to choose it over a full reboot or kexec, and concrete patterns for building soft-reboot-aware update pipelines.
If you've ever wished you could ship an OS update as fast as restarting a service, this talk is for you.
Senior Software Engineer - Linux Systems Group, Microsoft
Nandakumar works as Senior Software Engineer at Microsoft - Linux Systems Group. He has worked on router board bring up, linux kernel development and user space. He has extensive work experience on MIPS and x86 architecture. He has made several contributions to systemd upstream.
Prasanna Kumar is a seasoned Linux kernel engineer, is currently working for Microsoft's Linux Systems Group. He has worked on low level CPU architecture code, board bring up, driver development, file system and related utilities etc. He has contributed to Linux kernel.
