BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.all-systems-go.io//all-systems-go-2026//PZMUJL
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-all-systems-go-2026-KJNYQ8@cfp.all-systems-go.io
DTSTART;TZID=CET:20260930T153500
DTEND;TZID=CET:20260930T160000
DESCRIPTION:Using mkosi and apparmor.d as building blocks\, this talk prese
 nts a prototype minimal Debian server. The goal is not to provide yet anot
 her Linux distribution\, but to explore how hard it is to build personaliz
 ed\, hardened server images.\n\nOn top of the usual mkosi-backed features 
 such as UKIs\, A/B updates and dm-verity\, the project adds a whole-system
  AppArmor policy and an immutable `/etc`. Because older devices also matte
 r\, the prototype supports the Raspberry Pi 3 (UEFI) too\, with minor chan
 ges to the security model. The talk presents the differences in design\, a
 ttacker model\, and implementation between the various targets.
DTSTAMP:20260710T215941Z
LOCATION:Galerie
SUMMARY:Immutable\, Fully-Confined Debian Server Images\, Even on a Raspber
 ry Pi 3 - Alexandre Pujol
URL:https://cfp.all-systems-go.io/all-systems-go-2026/talk/KJNYQ8/
END:VEVENT
END:VCALENDAR