Program conference

Join us for the highlight of the event: the plenary conference. On the agenda: A welcome address from organizers and partners. The major trends in open source for 2025: innovations, challenges, and opportunities. Inspiring talks to explore the key themes of the event. An interactive session to share your expectations and discover the must-see moments. The detailed program and speaker lineup will be announced very soon. Stay connected!

TALK PRESENTED IN FRENCH – Digital autonomy, in terms of infrastructure, relies on three inseparable pillars: data centers, communication networks, and terminals. Through these, innovation is expressed through code design and data transfer. As an expert and neutral arbiter, Arcep is a public regulatory authority that acts as an architect and guardian of exchange networks as common goods. Arcep seeks to create a ‘transparency shock’ by providing tools to better inform users about the quality and availability of telecommunications operators’ services (coverage, speed, etc.). Among these tools, the ‘Mon réseau mobile’ cartographic site was designed as an open ‘Geocommons.’ This presentation aims to show, through examples, how a sovereign, interoperable, and replicable digital solution is designed to serve the general interest.

TALK PRESENTED IN FRENCH – Feedback on open-sourcing a Helm chart template for scaling generative AI services in production Kubernetes environments. A pull request was merged and submitted by our team to the official vLLM project to add a Helm chart example for deploying vLLM on Kubernetes. Pull Request Documentation This PR adds a Helm chart example for deploying vLLM on Kubernetes. The deployment follows two steps: Step 1: Load the model from S3 to the volume. An init container is launched and waits for the job of loading the model from S3 to the volume to finish. Step 2: Launch the vLLM engine. Once the model is loaded onto the volume, vLLM is started.

TALK PRESENTED IN FRENCH – AI, particularly LLMs, is trendy for generating responses, making it interesting for search engines. But what about enterprise search engines? We present here the new generative AI features of Datafari (vector search, indexing enrichment, Retrieval Augmented Generation), partly funded by the European Neural Datafari project. Discover the challenges addressed and the usefulness of these tools, and how to make them work in Datafari.

In the last few years, Europe finally understood how the oligopoly of a few global Internet platforms is damaging our economies and our societies. Open source has always been the main source of alternatives to dominant proprietary offers; it is just natural that political circles now consider it a fundamental component of any strategy toward alternative European services. However, many issues are still to be solved. Our digital autonomy requires software to be “European”, but what does it mean for open source to “be European”? What models are appropriate for cooperation between policymakers, industry and developers? Where should the money to fund product development come from? Should we leverage public procurement, research funds or both? Should products be shaped by public buyers or by the market? The talk will discuss options, hoping to promote debate.

TALK PRESENTED IN FRENCH – API Platform is a totally open-source, out-of-the-box framework for making APIs that follow all the Web’s best practices (standards, RFCs…) since its release, in 2015. In this talk, we’ll see how in a matter of seconds, thanks to the contributions of around 1,000 developers since the framework was created, we can easily have a robust API with auto-generated documentation, via the Swagger UI, whether for a REST or GraphQL API. Through concrete examples and feedback, we’ll explore how to contribute to API Platform and use it in your projects, whatever the complexity of your APIs. We’ll look at extending automatic documentation, adding custom filters, and integrating your own custom data sources.

TALK PRESENTED IN FRENCH – Thelia is an open-source e-commerce CMS, 100% French, and supported by OpenStudio. It represents a sovereign alternative to e-commerce solutions dominated by international players. At a time when geopolitical tensions highlight the fragility of our digital dependencies, regaining control over tools and data has become a strategic issue for both businesses and regions as “consumers.” Cédric Sibaud, Vice-President of OpenStudio and Co-creator of Thelia, and David Gonzales, founder of Justforpets and digital consultant, will share their experiences and vision for a more autonomous e-commerce, built on mastered technological building blocks.

The Model Context Protocol (MCP) is a standardized interface that enables Large Language Models (LLMs) to access external tools and domain-specific knowledge in real time. By enriching model context with live data and actionable tools, MCP enhances output quality and reduces hallucinations in specialized domains. Applied to cloud computing, MCP enables AI assistants to manage infrastructure, automate workflows, and stay aligned with evolving platforms. This talk introduces the OpenNebula MCP Server, a bridge between LLMs and OpenNebula, the European open source cloud management platform). It supports full lifecycle management of virtual resources and read-only inspection of infrastructure components, enabling intelligent automation and AI-enhanced development within OpenNebula environments.

This talk, based on our field experience of cooperation between APELL and OW2 on FOSS lobbying, advocating and funding at the European level, aims at highlighting: – Why FOSS is key for sovereignty and independence – How targeted funding can nurture the foundations of a European software stack (with the example of NGI and its public cascade funding scheme). – How compliance rules provide both a “business model” and a safe harbour, with a focus on CRA (Cyber Resilience Act), but also regulations like the AI act, the GDPR or NIS2. – Lobbying for FOSS at the EC, and how it turns given the global geostrategic context.

TALK PRESENTED IN FRENCH – Deploying an entire datacenter in less than 10 minutes, is it really possible? What if I told you it is? In this conference, I will delve into the details of this powerful tool, designed to automate the provisioning and management of physical servers with the same ease as virtual machines. During this conference, I will present how this open-source tool works. How we use it at Restos du Coeur to ‘scale’ hardware and quickly increase our capacity without keeping all the bare-metal permanently powered on. What better way to inspire adoption than a demonstration? We will deploy several servers together in less than 5 minutes, using the MaaS API and Terraform by sending a previously built Packer image. After this conference, you will definitely abandon the USB key for deploying your systems.

TALK PRESENTED IN FRENCH – In a context of increasing regulation of AI in Europe, explainability has become a key issue. Shapash is an open-source library developed by MAIF to make machine learning models understandable to everyone, thanks to an intuitive interface and auditable reports. Used in several large organizations, Shapash allows users to visualize, document, and share explanations of predictions. This conference will present the architecture of the solution, its industrial use cases, and upcoming innovations such as cloud compatibility, governance, and advanced visualization, with a focus on its impact on digital sovereignty. A live demonstration will illustrate how Shapash equips ethical and transparent AI.

SPONSOR CONFERENCE – PRESENTED IN FRENCH – Discover the advanced features of GLPI, the open-source IT service management solution, during this exclusive conference. Econocom, a European leader in digital transformation and technological services, and Eoris, a recognized expert in IT solutions and system integration, will share their testimonials and expertise on the implementation and use of GLPI. This interactive session will include a general presentation, concrete feedback, and a Q&A session.

Cristal (a wiki to connect them all) is an innovative and modular user interface for wikis, entirely developed in Typescript. It enables navigation and editing of rich content from multiple sources, including XWiki, local folders, GitHub, or NextCloud. It functions both as a web application and an Electron application. Designed to be modular and extensible, Cristal offers a modern and refined user experience. It can operate offline and allows users to work together in real-time. In this talk, I will show you the main internal elements of Cristal, as well as the obstacles encountered. This presentation will cover front-end development (Typescript, Vue, and React), inversion of control (Inversify), collaborative editing (Blocknote.js, y.js), and modular design systems (Vuetify, Shoelace).

TALK PRESENTED IN FRENCH – Faced with increasing constraints in terms of costs, technological dependence, and sovereignty related to proprietary solutions like VMware, Proxmox VE is emerging today as a complete, proven, and truly sovereign open-source alternative. During this talk, we will explore the strategic and technical dimensions of Proxmox VE, an integrated platform that effectively combines virtualization, storage, networking, and backup. Drawing on the new features of Proxmox version 8, concrete feedback from migrations from proprietary environments, as well as the prospects offered by the upcoming version 9, we will show how Proxmox enables full control over virtualization infrastructures. This robust, interoperable, and sustainable approach directly addresses the current challenges of IT services: budget control, use of open and sustainable technology, and the restoration of technological sovereignty.

TALK PRESENTED IN FRENCH – In an era where generative artificial intelligence (GenAI) is shaping industries and experiences, it is crucial to step back and observe emerging trends. Dive into a future where GenAI is not only powerfully innovative but also open, modular, and decentralized. Discover how the spirit of open source and the decentralized internet are transforming models, tools, and collaboration, and explore the trajectories that make AI accessible and adaptable to all uses. This conference aims to not only provide inspiring perspectives but also concrete avenues for those who wish to contribute to the development of a more open, adaptable, and equitable GenAI.

TALK PRESENTED IN FRENCH – This is the question we will try to answer by presenting how the consulting firm Ayming chose to experiment with Nextcloud to replace a SharePoint that had become too costly and obsolete. We will detail the approach taken, including a preliminary study to verify Nextcloud’s ability to meet both functional and technical needs, particularly in terms of SI integration and the implementation of a prototype to concretely evaluate the software and successfully complete the first integrations. We will see how, following this preliminary work, a country-specific instance was deployed, and how a more global instance for all of Ayming’s teams was designed and put into production. Throughout, contributions to Nextcloud and other software and modules around it will be presented.

There are still many open questions about how the public and private sectors should collaborate to achieve digital sovereignty. Typically, public sector organizations do not build the cars or houses they need. Instead, they procure them from private companies. However, private vendors of proprietary software have caused considerable problems in the context of digitization by creating enormous dependencies, costs, and risks. At the same time, digital sovereignty can only be achieved through widely used products. The resulting synergies have made big proprietary software vendors successful, and only the private sector has a direct incentive to provide them. This talk will propose a new contract between the private and public sectors. It will include specific rules that can be implemented immediately, protecting the digital sovereignty of states while making optimal use of the private sector’s advantages.

Tock OS and OxidOS are excellent open-source platforms for implementing Root-of-Trust (RoT) in secure embedded systems. Unlike closed-source RoT firmware, they offer transparency, auditability, and reduced vendor lock-in. Tock is written in Rust, ensuring memory safety and process isolation via a kernel separated from applications. It enables formal guarantees that drivers can’t corrupt memory, with zero runtime overhead. Tock’s architecture addresses key security concerns like memory corruption and privilege escalation, while its open development model fits RoT requirements. Industrial use cases include OpenTitan, zeroRISC, and Microsoft Pluton, which uses a Tock-based RoT on x86.

TALK PRESENTED IN FRENCH – Tired of concurrency bugs (deadlocks, race conditions) turning into security vulnerabilities in your microservices or Kafka/K8s environments? Traditional tests often fail to catch subtle timing errors. Discover TLA+, the formal method (created by L. Lamport, Turing Award winner) for specifying and proving the correctness and security of your distributed designs before writing a single line of code! This session demystifies TLA+ with a 100% practical approach: learn to model interactions, detect design flaws (which lead to vulnerabilities!), and avoid production disasters. An essential asset for securing your developments and strengthening the resilience of your software supply chain. Come discover how to integrate this “secret weapon” into your open-source projects.

TALK PRESENTED IN FRENCH – SparqlExplorer is an open-source software that allows users to navigate SPARQL endpoint data as if it were a web portal, without writing any queries. SPARQL is the W3C standard for querying RDF repositories. RDF is the W3C standard for expressing knowledge graphs integrated into the Web. Knowledge graphs are structured and semantically enriched data, making them ideal inputs for artificial intelligence processes. SparqlExplorer.App is one of the tools used in the SemGraph.logilab.fr methodology.

Since the creation of an Open Source Programme Office at the European Commission in November 2020, several public administrations have set up structures to steer and implement Open Source strategies, whether focused on producing sovereign solutions, contributing to existing Free Software projects, or supporting the adoption of open source. These OSPOs have disparate resources and ambitions, but often face similar challenges: but since they don’t know each other, they can’t collaborate much. How can they be networked?

Cyber threats has never been as impacting as today. New regulations like EU’s Cyber Resilience Act (CRA) will impose several security requirements on digital products. This is where VulnScout.io come in as a new Open Source vulnerability life cycle management tool. VulnScout.io will help you to track, manage and remediate vulnerabilities effectively using your Software Bill of Materials (SBOM). Having been firstly tested on The Yocto Project, a framework for designing embedded Linux systems, VulnScout.io helps ensure comprehensive detection and management of vulnerabilities affecting any fullstack solutions with SBOM. Aiswarya will present you this versatile tool and demonstrate it in action.

TALK PRESENTED IN FRENCH – There are many open-source tools in the Identity and Access Management (IAM) sector that follow protocol evolutions (SAML, OAuth2, OpenID Connect, etc.) and adapt to new market needs (mobile applications, REST APIs, 2FA, etc.). We will review the issues that IAM addresses today and present various free software solutions that meet these needs: OpenLDAP, the Apache Directory project, Keycloak, LemonLDAP::NG, LDAP Tool Box, LDAP Synchronization Connector…

TALK PRESENTED IN FRENCH – In a context where digital sovereignty and communication security are major issues, it is essential to equip ourselves with solutions that guarantee data control while ensuring smooth and effective collaboration. During the hackathon organized by DINUM, we demonstrated that XiVO Connect, our unified communications solution, is interoperable with the Matrix ecosystem, particularly instances based on Element, such as Tchap, the secure instant messaging service of the French government (DINUM). This federation and integration capability enables secure communication between different instances without dependence on a proprietary platform. Through the integration of XiVO softphony, users benefit from a complete work environment, combining telephony, video, instant messaging, and document sharing, while maintaining a high level of security and resilience.

MongoDB is widely used for its ease of use, but its move away from open source and licensing issues raise concerns, while running it demands extra resources and expertise. Is there an alternative that avoids costly migrations? This talk explores the state of document databases and argues for Postgres as the backbone of a new open source standard. Using FerretDB, we’ll show how Postgres can handle MongoDB workloads seamlessly and how users can keep using familiar MongoDB tools and frameworks while benefiting from Postgres’ reliability.

As any other open source company we had to understand the EU’s Cyber Resilience Act (CRA) and determine how we should deploy our compliance to it. It has been even more important to us as a lot of our products actually get deployed at highly sensitive levels, and the security of our solution is a key selling point to our business. With this in mind we had to do a deep analysis of the CRA and our security team worked hand in hand with our policy team to understand what our approach should be. This talk will walk the audience through our journey, sharing our learnings, and hopefully providing insights and learning that others can follow too.

Over 20 European tech organizations, led by OpenNebula Systems, launched Virt8ra in early 2025, an open source initiative focused on building Europe’s first sovereign virtualization stack. Part of the €3B IPCEI-CIS project, this collaboration created a European technological ecosystem around vendor-neutral cloud-edge continuum management and virtualization. Virt8ra enables interoperability and portability for applications, supporting low-latency use cases and reducing dependence on hyperscalers. In this talk we will present this initiative, its main technological results, and the different options for third-parties to join this community and contribute with their components and innovations.

TALK PRESENTED IN FRENCH – Fuzzing: Automating Security in Open Source Projects” Fuzzing is a powerful yet underutilized method for enhancing the security of open-source projects. This presentation will explain how to effectively integrate fuzzing into CI/CD pipelines to prevent vulnerabilities at scale. We will present results from Google’s OSS-Fuzz initiative and share our own campaigns on open-source projects in C/C++, Rust, Go, Android, and Python, covering domains such as telecoms, blockchain, media parsers, browsers, and AI frameworks like Triton Server or Ollama. A concrete feedback session on automated security.

TALK PRESENTED IN FRENCH – Join us for a practical and enriching session dedicated to creating precise, diverse, and inclusive images using open generative AI. This conference will show you how to overcome the limitations of traditional image banks by creating faithful representations of yoga postures, essential for projects where visual precision and diversity are indispensable. Thanks to ComfyUI’s modular workflows, the flexibility of LoRA (Low-Rank Adaptation) for style and pose control, and guidance tools like ControlNet, you will discover how to produce custom images with ease. From text-to-image generation to hybrid image-to-image workflows, we will address key challenges such as pose consistency and visual identity preservation. This session includes demonstrations, practical tips, and feedback from the creation of YogĀrkana, a website dedicated to yoga.

TALK PRESENTED IN FRENCH – In a context of digital transformation, organizations are deploying Digital Workplaces to centralize business tools and foster collaboration. However, real-time communication—calls, videoconferencing, messaging—often remains managed separately through poorly integrated proprietary solutions. This conference proposes breaking down silos: how to integrate VoIP into a unified digital environment using an open-source, sovereign, and adaptable solution like Linphone. Through a concrete case study, we will show how this component can fit into an existing Digital Workplace, simplifying usage, enhancing data control, and reducing dependence on closed platforms. This approach also interests Workplace publishers: like Interstis for Hexagone, other players (Watcha, Exo Platform, etc.) can enrich their offerings by natively integrating real-time communication features.

Explore how we achieved seamless integration of open-source applications into comprehensive bundles through our experiences with openDesk and Nextcloud Hub. This talk shares essential insights gained from integrating these complex software suites, demonstrating how open standards like OpenID Connect, OAuth2 Token Exchange, and SCIM can elevate user experiences. Learn how OpenProject successfully implemented a deep and seamless integration between OpenProject and Docs, effectively linking openDesk and LaSuite in record time during the HackDays hackathon. We will discuss how these standards streamline integrations, reduce costs, and enhance user satisfaction, emphasizing the collective effort required from software vendors to adopt these practices. Join us to understand the impact of these principles and be inspired to apply these lessons in your own projects, providing a robust alternative to Microsoft’s Office 365 and Google’s App Suite.

TALK PRESENTED IN FRENCH – Open Sourcing your Design System can boost collaboration, visibility, and innovation, but the reality is often more complex. Most Design Systems cannot be fully open due to branding, technical, and legal constraints, and external adoption remains limited. In this talk, discover why building a strong Innersource culture by encouraging internal contributions across teams is the key to a thriving Design System. Learn practical strategies to balance openness with internal needs, understand which parts to open such as tokens, generic components, and guidelines, and how to create sustainable governance. Walk away with a realistic roadmap to open your Design System smartly, starting from the inside out.

TALK PRESENTED IN FRENCH – Choosing the right collaboration tools is a strategic challenge. Many French organizations still opt for Microsoft 365, often for convenience or lack of awareness of alternatives. However, this economic and technological dependence on GAFAM raises major issues of sovereignty, strategic autonomy, security, and confidentiality. In this workshop, discover how to regain control of your information systems and collaborate independently and securely with eXo Platform. Through case studies (Occitanie region, cities of Lunel and Clichy-sous-Bois), we will show how to successfully migrate from Microsoft 365 and cover the entire functional scope thanks to the capabilities of eXo Platform and mail integration. We will also explore how the unified user experience through a service portal and seamless integration of business applications (GLPI, iXBus, etc.) constitutes a real lever for adoption.

CryptPad is a full-fledged collaborative office suite designed around end-to-end encryption to ensure the privacy of users and their data. As a web application, it aims to provide a familiar interface and feature set, making cryptography seamlessly useable by most people. From login to the real-time collaborative editing of documents, CryptPad has been designed around end-to-end encryption. This guarantees that all data remain secure, even from the administrators. In this talk, I will present the design of CryptPad and the benefits of end-to-end encryption for a security strategy that does not compromise on collaborative features. We will demonstrate as part of the talk an new API allowing to integrate CryptPad with other e2ee tools with a live demo for Nextcloud, Parsec or a Desktop app. – [Source Code](https://github.com/cryptpad/cryptpad) – [Project Website](https://cryptpad.org) – [Flagship Instance](https://cryptpad.fr) – [API](https://github.com/cryptpad/cryptpad-api)

In a world where software systems generate massive volumes of logs every second, effectively summarizing this data is vital for maintaining system health and performance. When a breakdown occurs, quickly absorbing large amounts of logs becomes a critical challenge. This talk demonstrates how to build a scalable system that combines Approximate Nearest Neighbor Search (ANNS) with Large Language Models (LLMs) to effectively summarize gigabyte-scale daily software logs. We’ll cover the technical architecture, implementation challenges, and present a working demo.

Eclipse Jetty is an open source Java web server created in 1995 that has sustained its developers and served clients from startups to global tech giants. During most of those three decades, the project has been self sustaining through a variety of business models and commercial vehicles. Not everything tried worked, but enough did to keep the project innovating and relevant through huge technical, legal and commercial changes. In this talk, Jetty’s founder reflects on three decades of evolving open source business models. Expect candid insights into what worked, what didn’t, and why. Whether you’re offering or consuming open source, you’ll gain understanding of sustaining a project commercially while keeping its open source soul intact.

TALK PRESENTED IN FRENCH – GenAI, LLMs are trendy and also raise security issues. Yet we have integrated them into our applications without feeling concerned. Our code is often the source of many vulnerabilities that we ignore. Let’s discover and exploit them together, live on an existing application. After this session, you will be able to answer these questions: What is a security vulnerability for an LLM? What is the developer’s role in security? What are the best practices to apply? Be prepared, anything goes!

TALK PRESENTED IN FRENCH – The technological landscape is evolving rapidly, and development teams are constantly under pressure to deliver faster while maintaining high standards of quality and security. This session will explore how an internal developer portal can significantly reduce developers’ workloads and allow them to focus on innovation and value creation. We will cover the fundamental concepts of the internal developer portal, also known as Platform Engineering or Internal Developer Platform (IDP). You will discover how an internal developer portal based on the open-source project Backstage.io centralizes tools and information, automates repetitive tasks, and minimizes friction. A demonstration will illustrate how a developer benefits from an internal developer portal by quickly joining a new project that complies with the organization’s technological standards.

TALK PRESENTED IN FRENCH – This presentation explores the challenges of scaling Jupyter for a large number of users. Traditional solutions like JupyterHub require substantial resources. In this presentation, we introduce JupyterLite, a Jupyter distribution that runs entirely in the browser, eliminating the linear relationship between the number of users and the resources required. We also present the Emscripten-Forge software distribution for WebAssembly, along with demonstrations of JupyterLite’s features with various kernels and extensions.

TALK PRESENTED IN FRENCH – Email remains the starting point for all collaborative uses, yet it is largely dominated by Microsoft. How can we build a sovereign collaborative environment when its central component—email—is locked in by American giants? BlueMind rises to this challenge: the only sovereign solution natively compatible with Outlook, it offers a robust alternative that minimizes changes while providing users with the best access experience. A natural alternative to Exchange/365, advanced migration tools, integration with major Digital Workplaces—come discover BlueMind, the central building block of a sovereign and controlled collaborative environment.

In an open source project like PrestaShop, 15% of contributions come from the community. However, results are mixed: contributions go unprocessed, practices lack standardization, internal teams are overloaded, and integration into the product roadmap is complex. To address these challenges, we launched a new approach: a call for contributions. This approach relies on a clear roadmap defined by the product teams, guided by user feedback and necessary technical developments. These calls enable us to concentrate efforts on priority topics that are better documented, technically ready, and easier to integrate. This presentation provides feedback on the past year, including concrete results and the goals of this new approach. We will explore how topics are selected, how we support contributors, and how this approach has accelerated collaboration and the quality of contributions. It offers a practical case study for any open source organization managing large volumes of contributions.

TALK PRESENTED IN FRENCH – As every year, the LinuxFr association continues to animate and contribute to the good atmosphere with part of the team, notably to give away books from ENI, Eyrolles, D-Booker, and subscriptions to GNU/Linux Magazine France (we went all out again, thanks to them for the donations)! We organize a daily raffle at 5 PM for about twenty minutes at our booth, with dozens of books to win to increase your knowledge by more than 42%. Knowledge grows when shared!

Want to track your consumption habits? Measure inflation? Or contribute to more transparency ? Open Prices is the latest project launched by the Open Food Facts community to collect products prices. We’ll show how, starting from zero and without any web scraping, 1500+ contributors gathered more than 100,000 prices in a year. Each is geo-located (OpenStreetMap) and verified with a proof image (price tags or receipts). In 2025, AI has become a key ingredient to ease and scale contribution, thus, having control over the models grew into a priority. We’ll share how we moved away from Gemini to our own in-house open source solutions to extract price data from receipts and pictures of store shelves.

As Digital Sovereignty is an increasing focus in Europe the demand for open source alternatives to non-european proprietary software explodes, in particular in public sector. Countries are trying to collaborate in their use of open source software despite using different models to procure it, but commercial open source companies are still having a hard time engaging the public sector in a win-win relationship. So how do we enable governments to keep their digital sovereignty, whilst propping up evonomy by supporting the sustainability of (often local) open source companies? This talk will share our experience of selling secure and sovereign Teams alternatives in Europe, our learnings and vision for the future.

TALK PRESENTED IN FRENCH – The barcode reader market is fragmented and resistant to flexibility. Vendors impose proprietary SDKs or applications, locking users into a single ecosystem, with switching providers requiring a complete rewrite of the interfacing application. enioka Scan is an open-source Android library that gives users the flexibility to choose the vendor that best suits their needs at any given time. It provides a common API for all supported readers, on top of each vendor’s proprietary SDK, open-sourced whenever possible. In this presentation, we will revisit the reasons behind the proprietary lock-in of barcode readers. After a brief history of the project, we will explain how the library works to be compatible with devices from different manufacturers and discuss reverse engineering as a tool for open-source developers.

TALK PRESENTED IN FRENCH – The SMTP protocol, the backbone of email, has evolved to address growing security challenges, often driven by web giants. This complexity pushes some to outsource their email, but in the era of GDPR and digital sovereignty, open-source alternatives exist for self-hosting emails. However, mastering security standards like DKIM, SPF, and DMARC is essential to prevent emails from ending up in spam. This talk offers a clear introduction to these standards, their utility, complementarity, and implementation, while highlighting pitfalls to avoid.

Discover how synthetic data is revolutionizing AI innovation in our engaging session! Explore the industry’s first fully open-source, enterprise-grade Synthetic Data Toolkit—empowering organizations to generate high-quality, privacy-safe synthetic data directly in their own environment. We’ll show how this breakthrough in data technology not only ensures regulatory compliance and fuels powerful AI applications, but also plays a pivotal role in data democratization—unlocking secure, equitable access to data insights across business units, technical teams, and decision-makers alike. Learn how leading organizations leverage synthetic data to unlock proprietary insights, enhance collaboration across silos, and scale AI responsibly. Join us to see live demonstrations, understand real-world impacts, and become part of the community shaping the future of open, privacy-first AI innovation.

TALK PRESENTED IN FRENCH – WebAssembly (WASM) is becoming a key foundation for secure, portable, and efficient software delivery, extending far beyond the browser. This session will present the strategic advantages of WASM for enterprises: components written in multiple languages, code reuse, targeted expertise, and enhanced security through module isolation. Thanks to its portability, WASM enables unique deployment across cloud, edge, and embedded systems, reducing costs and accelerating time-to-market. A relevant choice for those who want to future-proof their software architecture.

TALK PRESENTED IN FRENCH – Discover how Skore, new star in the sk-alaxy, can elevate your machine learning projects by integrating recommended practices and avoiding common pitfalls. In this practical talk, I’ll show you how to use this open-source python library to quickly and correctly evaluate and inspect models on one side, and how it can help to lead and deliver projects swiftly with great additional business value on the other side. Scientific and project excellence united. All of this with as little code as possible.

TALK PRESENTED IN FRENCH – Join us as we recount the trials of our company (BIRU, the creator of the Tenzu software) one year after deciding to take on the challenge of becoming an open-source publisher as a cooperative. What is our economic strategy? What funding sources have we accessed? What difficulties have we encountered, being neither a startup with shares to offer nor a cooperative with a standard business plan? Where does open source fit into all this? And what lessons have we learned from this experience?

Digital sovereignty, the ability for individuals and organizations to control their digital destiny, is a growing global imperative. This talk, “Open by Choice, Sovereign by Design,” will explore how the open-source industry is uniquely positioned to deliver this autonomy. We will discuss how open source fosters transparency, reusability, and freedom from vendor lock-in, enabling organizations to gain full control over their data, processes, and IT infrastructure. The talk will highlight how open source facilitates compliance with data protection laws, enhances security against cyber threats, and drives innovation through collaborative development, empowering entities to adapt swiftly to evolving needs and regulations while ensuring long-term maintainability and resilience. Let us Dance, not Fight!

TALK PRESENTED IN FRENCH – Don’t look for a one-size-fits-all replacement for VMWare—it doesn’t exist. The good news is that your alternative doesn’t need to address all of VMWare’s use cases, just yours. In this conference, discover how to define your needs by asking the right questions about the type of virtualization, performance, scalability, security, ease of use, community, support, and integration with SDN and storage. Based on our experiences, we will then provide some guidance on how to use them to select from the multitude of open-source solutions, including Kubernetes, OpenStack, oVirt, Podman, etc., the one that best suits your migration (because on this point, there’s no doubt—you need to migrate!).

TALK PRESENTED IN FRENCH – User onboarding, KYC, payments, account closure… Our software is mostly composed of multi-step business processes. When working in a distributed architecture, developers spend most of their time on “plumbing” to ensure these processes are robust. But that was before. Come discover Temporal, the open-source solution that is revolutionizing how we approach these needs, already adopted by Netflix, OpenAI, Uber, Salesforce, and most of the world’s leading tech companies.

TALK PRESENTED IN FRENCH – The rapid rise of artificial intelligence raises major ethical and environmental issues. This roundtable brings together key government stakeholders to share perspectives on how administrations integrate these dimensions into their digital strategies. Juliette Fropier (Ecolab) will present the work on measuring the environmental footprint of AI. Virginie Rozière (Ministry of Europe and Foreign Affairs) will provide a geopolitical and ethical reading of its uses. Thierry Lochon (Ministry of Ecological Transition) will discuss public policy levers for a more sustainable digital world. Finally, Mélanie Raphaël (DINUM) will share interministerial initiatives aimed at framing the development of AI in a logic of responsibility, transparency, and sustainability. An essential discussion to build a digital future aligned with our values.

TALK PRESENTED IN FRENCH – Koha is an Integrated Library System (ILS) born on the other side of the world, which is now the most widely used ILS globally. Licensed under GNU/GPL, it is developed by a close-knit, global community that has enabled the creation of numerous local businesses. Koha is an example of balance between community engagement and business objectives. This presentation will trace the history of Koha and highlight its uniqueness (notably the absence of a foundation or company leading the project) and the factors behind the project’s success.

In this round table (panel) discussion, we invite various guests from the European regulatory and policy field (i.e. the European Commission and Parliament, Member States’ governments as well as public administrations), the Open Source community and guests from civil society organisations. The discussion around increasing European digital or technological sovereignty has gained momentum as unprecedented international disputes continue and uncertainties keep rising. Digital Public Infrastructure is fundamental to our daily lives, for communication, business and social life. Dependencies and lock-ins into proprietary technologies and services create a “backdoor” that initiatives around increasing technological sovereignty want to overcome. The panel will explore the role of Open Source in this regard.

TALK PRESENTED IN FRENCH – What if you took back control of your IoT infrastructure? Discover why and how to migrate a device management platform from a PaaS (such as Azure) to a self-managed Kubernetes infrastructure. Objectives: Reduce cloud dependency; Strengthen technological sovereignty; Meet the scalability and resilience requirements specific to IoT device fleet management. We will share the concrete steps of this transition, the technical choices made, the benefits of Kubernetes, and highlight the key role of RabbitMQ in our message exchange architecture. A pragmatic feedback session for R&D teams seeking agility, scalability, and independence.

TALK PRESENTED IN FRENCH – NextGraph is an open source ecosystem providing solutions for end-users (a platform) and software developers (a framework/SDK), wishing to use or create decentralized apps featuring: live collaboration on rich-text and JSON documents, a sync protocol with end-to-end encryption, local-first based on CRDTs (it works offline too), portable and interoperable data, with high availability. NextGraph guarantees security, privacy and sovereignty, with total ownership of data and software, and full control over locality: we know where the data is stored, and where the automatic encrypted backups are.

Is Open Source a Good Economic Choice for Software Startups? This question has been a topic of debate in the ecosystem for 20 years. Matthieu Lavergne answers it with the COSS Report, a unique analysis of 25 years of data on over 800 venture capital-backed open-source companies. The result: COSS (Commercial Open Source Software) startups raise funds faster, at higher valuations, and achieve better exits than their proprietary software counterparts—especially in infrastructure. This talk debunks myths with solid data and offers a new perspective on the future of open-source software as a strategic competitive advantage in a world where trust, sovereignty, and transparency are becoming critical. Sources: https://cossreport.com/ https://blog.serenacapital.com/the-open-source-payoff-5e835c54c0f1

TALK PRESENTED IN FRENCH – Software Bill of Materials (SBOM) play a key role in managing the security and compliance of projects and software. Since 2021, software vendors supplying the U.S. government must provide an SBOM, and Europe is also committing through the Cyber Resilience Act and NIS2 Directive. These inventories offer greater visibility into software components, facilitating the detection of malicious dependencies and vulnerabilities. This talk will explore: The two main SBOM formats: CycloneDX (supported by OWASP) and SPDX (Linux Foundation). How to automate their generation in your CI/CD pipeline. Their use with tools like DependencyTrack. Discover how SBOMs can enhance the security of your software supply chain, ensure regulatory compliance, and anticipate vulnerabilities in your projects.

TALK PRESENTED IN FRENCH – Open source is now present in all software layers. Whether for internal development or for a client, it is almost impossible to ignore it. Many questions arise during the development phase: Which software components should be chosen? What kind of support can be expected? What is the lifespan and evolution of this component? What to do in case of a blocking bug? How to ensure compliance with licenses? And many more. We will try to address some of these questions by providing appropriate answers.

TALK PRESENTED IN FRENCH – Providing open-source technology has been our core business for over 15 years. Linphone, Flexisip, and Liblinphone are recognized software components, used worldwide for real-time IP communication solutions. In recent years, more and more organizations have expressed the need for a turnkey solution, without managing integration, deployment, or maintenance. To address this, we have expanded our model with the Linphone Suite, a packaged offering available in SaaS or On-Premise. This shift required a complete overhaul of our product vision, from design to communication, including development and value creation. During this conference, we will address the human, organizational, and strategic challenges related to this transition: active listening to business needs, solution design, industrialization of deployments, and moving from reactive management to proactive, user-centered product planning.

TALK PRESENTED IN FRENCH – Two editions ago, Tristan Nitot presented EROOM, an idea to reduce the environmental footprint of digital technology by a factor of 4. Two years later, the desire to turn this idea into a concrete approach is bearing fruit. Thus, EROOM is becoming a methodological reality—obviously open source—within a working group comprising developers, architects, and CIOs, with a simple approach: how to massively optimize software to keep hardware longer, do better quality work, and continue to innovate!

In the Inferno distributed OS, everything is a file: devices, network, processes, etc. All code runs in its own namespace: a per-process view of the filesystem, dynamically composed by mounting local or remote resources using 9P, Plan 9’s secure file-sharing protocol. We present acheron, a novel WebAssembly runtime for Inferno enabling sandboxed, portable code to interact with system resources through standard file operations and dynamic namespace composition. From there we build a mountable PaaS: a distributed execution environment where isolated WebAssembly modules are deployed, composed, and interconnected by mounting shared resources into their namespaces. We substitute reliance on container and heavyweight orchestration with Inferno’s native abstractions for isolation, service discovery, and secure resource delegation. This offers lightweight, decentralized service hosting with strong security boundaries and minimal overhead. We demo the system, and reflect on its potential.

TALK PRESENTED IN FRENCH – During this roundtable, we will discuss the challenges of an open and interoperable Open Source and Cyber compliance chain, which could drive cybersecurity frameworks and resilient, trustworthy Open Source. For this purpose, members of the ConCyOS consortium (Open Source and Cyber Compliance) made up of companies (Thales, Inno3, Examin) and research laboratories (INRIA) will answer various questions posed via the studio des communs (Campus Cyber).

TALK PRESENTED IN FRENCH – At a time when Europe is striving to bolster its digital sovereignty, the growing adoption of artificial intelligence in development environments presents a dilemma: how can we leverage the power of AI without becoming dependent on proprietary solutions or open-source offerings dominated by a single vendor? This presentation offers a concrete and European alternative: Eclipse Theia, a modular open-source platform for building cloud and desktop IDEs, and Theia AI, a framework designed to integrate AI in an open, transparent, and controllable manner within these environments. We will illustrate this approach through a live demonstration of Theia IDE, a complete and AI-native IDE built on Theia. The presentation will highlight the technical and strategic advantages of a truly open-source infrastructure, governed neutrally, in the face of current challenges related to confidentiality, compliance, and technological autonomy.

Deploying open-source software should empower us, but the reality of self-hosting is often a trade-off between vendor lock-in and operational chaos. This complexity is ultimately a barrier to digital sovereignty, forcing many organizations to abandon control over their most critical data and tools. We believe the solution isn’t to work harder, but to build smarter platforms. This talk introduces **Hop3**, an open-source PaaS that attacks this problem at its root. We will demonstrate how by embedding automated lifecycle management, reliability and resilience, and a radically simplified user experience directly into the platform, Hop3 makes sovereign infrastructure a practical and secure reality. Join us to see how you can finally escape the self-hosting trap and run F/OSS applications with the confidence and ease you’ve been promised, on your own terms.

TALK PRESENTED IN FRENCH – This year, join us again for the Associal Club! As every year, LinuxFr.org animates the associations, bringing together geeks, decision-makers, and enthusiasts for a festive and relaxed moment. On the agenda: Absolution speeches for repentant proprietary coders A fun and friendly quiz Prizes and gifts with all our friends Musical entertainment The musical part will be handled by Clément Oudot from Worteks. Join us for a festive moment filled with camaraderie, knowledge, and a touch of eccentricity.

TALK PRESENTED IN FRENCH – I present a feedback session on two innovative projects combining artificial intelligence, computer vision, and drones, with a strong open-source dimension. The Vision 4Rescue project uses open-source frameworks to detect people in real-time via drones dedicated to civil security, integrating upscaling algorithms and proxy streaming for precise zoom without network overload. Simultaneously, a drone simulator developed in Unity allows validating the detection of ARUCO markers for assisted landing, leveraging the modularity and sharing of the open-source community. This session shows how open source accelerates innovation, optimizes costs, and brings together an active community for critical projects.

TALK PRESENTED IN FRENCH – Defining governance is a critical step in building an open-source community, yet it is often underestimated or misunderstood. To address this, the “Partenariat Ouvert” (Open Partnership) offers a standardized, open, and adaptable model designed to simplify the definition of collaboration rules, particularly by aligning these aspects with economic and governance challenges. This roundtable brings together early adopters of this framework (public, private, and non-profit actors) for a transparent discussion on its practical application. Far from a simple presentation, participants will share their experiences, the adaptations they made to the model, and the challenges they faced. The goal is to draw collective lessons to improve this tool and share key insights with the audience on how to secure and sustain an open-source project. Resource: Open Partnership

Instrumentation is the secret ingredient that brings observability to life, revealing the intricate workings of applications in ways logs and metrics alone can’t match. In this talk, we’ll dive deep into the magic of OpenTelemetry instrumentation, exploring how to uncover hidden insights within your applications and services. Join us as we break down the essentials of OpenTelemetry instrumentation, including setting up automatic instrumentation for popular libraries and frameworks, and crafting custom spans to track the most critical parts of your workflows. You’ll see how simple, well-placed instrumentation points can reveal complex system behaviors, helping you detect bottlenecks, trace errors, and understand end-to-end request flows. Whether you’re new to observability or looking to master OpenTelemetry, this session will show you how to harness the full potential of instrumentation to transform your data into actionable insights. Discover the power of OpenTelemetry and bring clarit

Today, companies can find themselves locked-in using proprietary solutions, and can be easily subject to price increases or changes of terms, which can have a strong impact on their data privacy. When in such condition, Open Source solutions can be a strong contender to limit lock-in and enable companies to take back ownership of their data. However, migrating from such complex systems comes with its own set of challenges. How can these migration tools be financed? How to maintain existing functionalities of the existing software when migrating? Discover our experience of migrating the European Parliament (15 000 users, 700 spaces) as well as 20+ other companies from Confluence to XWiki. This talk will describe the main aspects that need to be taken into consideration when planning for the migration of such complex software. We will address every step required in a successful migration, from its preparation to its execution and to the change management aspects that come with it.

TALK PRESENTED IN FRENCH – Serverless is increasingly prevalent among cloud providers. However, it often comes with vendor lock-in, and not all cloud providers offer it as a standard. Does this mean we should abandon the deployment patterns promised by Serverless? No! There are alternatives that allow us to bypass the specifics of a cloud provider or even avoid cloud providers altogether by using them on our own infrastructure. In this talk, we will explore one such alternative: Knative. This powerful framework will take us into the world of Serverless with its Container-as-a-Service (CaaS) approach and Function-as-a-Service (FaaS), including scaling to zero. By the end of this talk, you will leave, hopefully, having discovered that Serverless is possible and that you don’t need to commit to a cloud provider for life.

TALK PRESENTED IN FRENCH – Microcks is a Cloud Native Computing Foundation project (100% open source) dedicated to API mocking and testing. In this session, I will briefly introduce the project, its concrete use cases, and our latest innovation: exposing mocks as MCP-compatible tools via Server-Sent Events (SSE). This allows AI agents to interact directly with APIs as if they were native tools. Attend a live demo to discover how Microcks facilitates rapid prototyping and development of AI agents!

TALK PRESENTED IN FRENCH – In the field of non-destructive testing, the CEA entrusted CODRA with the specification, design, and development of automatic reconstruction software for radiographed images, entirely based on open-source components and contributing to the scientific Python ecosystem. Thanks to a grid of geometric markers placed in the radiographed field, the algorithm automatically assembles a complete scene from partial images, without any prior external information (position, orientation, magnification). The complex and parameterizable processing was developed and refined using the open-source DataLab platform, remotely controlled to dynamically visualize each step of the pipeline. The development of this software opens the door to new applications in the fields of industrial imaging and security.

Two French ministries are making a major shift from proprietary office suites to Collabora Online, marking a key milestone in public sector digital autonomy. This talk shares the real-world story behind the migration – led by French consultancy Arawa and Collabora Online – covering strategy, challenges, technical deployment, and user adoption. We’ll explore how interoperability, training, and open standards played a role, and what it takes to replace tools like Microsoft Office at scale. Attendees will gain practical insights into how public institutions can take back control of their IT infrastructure using sustainable open source solutions.

TALK PRESENTED IN FRENCH – At a time when cloud, DevOps, and cloud-native technologies are widely discussed, should we abandon virtualization and consider it a technology of a bygone era? Come and discover Vates VMS, a complete virtualization stack that is fully integrated into the current context. During this talk, we will present tools developed by a team dedicated to “DevOps tools,” who develop whatever they set their minds to: > A Terraform provider > A Pulumi provider > A PowerShell module > An Ansible module > Kubernetes integrations (Rancher, Kubermatic, MicroK8s) > Development of a CCM and a CSI provider for Kubernetes All of this is open source, with professional support available for those who need it! We will discuss XCP-ng and Xen Orchestra, a comprehensive virtualization solution based on Xen, and the high level of expertise in this stack that can be found in France and Europe, from the kernel to the Terraform provider.

TALK PRESENTED IN FRENCH – Deep neural networks are revolutionizing AI, but their resource demands hinder deployment on embedded and real-time systems. How can we overcome this obstacle? This presentation will dive into the challenges of embedded AI and introduce Eclipse Aidge (https://eclipse.dev/aidge/), an open-source platform designed to simplify embedded AI development. It provides a comprehensive environment for designing, analyzing, optimizing, and deploying neural networks across various hardware targets. From Industry 4.0 to automotive and aeronautics, Aidge enables the creation of sophisticated AI applications, accelerates prototyping, and fosters innovation within an open-source ecosystem.

TALK PRESENTED IN FRENCH – Digital sovereignty” is on everyone’s lips, but what does it concretely mean for your projects and organization? How can you distinguish between mere marketing claims and genuine strategic autonomy? Faced with this ambiguity, there is an urgent need for a clear and actionable framework. This conference introduces a robust and open framework designed to define precise criteria for the sovereignty of digital software and services, based on 5 pillars: Legal, Operational, Technological, Economic, and Cultural (LOTEC). Through concrete examples from each pillar—from data localization to open-source project governance and supply chain control—you will discover a methodology to objectively assess your dependencies, strengthen your autonomy, and actively contribute to building a resilient and trustworthy European digital ecosystem.

Proprietary technologies have been the foundation of many cloud providers. But with the uncertainty caused by rising prices, evolving licenses and suppliers changing hands, we decided to take control of our own destiny. Can we go a different route and build a cloud provider using only Cloud Native Technology and Open Source? In this session, we’ll show you how we built a CSP using Kubernetes as its beating heart. We built it on top of Kubernetes, not because it’s good at managing containers, but because it can be used to manage petabytes of storage, complex networks and thousands of VMs – which is exactly what we needed. You’ll see behind the scenes how we orchestrate, provision, monitor, handle billing, and more, all using K8S. We’ll go through the challenges we faced, what failed, what worked – and how the open source ecosystem offers many of the answers to complex problems through simple solutions.

Spreadsheets aren’t going anywhere, but they can get smarter. Grist is a modern, open-source spreadsheet-database hybrid that combines the flexibility of Excel with the structure of a relational database and the ease of a no-code builder. Built with the polish of a commercial SaaS tool, it’s used by teams who often don’t even realize (or care) that it’s open source. This talk explores what it takes to build high-quality, end-user productivity software in the open. We’ll share the decisions that let us compete with Airtable and Notion, how we bridged the gap between developer power and spreadsheet familiarity, and why user experience is a core feature—not just a nice-to-have—even in open source.

TALK PRESENTED IN FRENCH – OpenSearch has evolved rapidly over the past three years, establishing itself as a reference solution for lexical search while also becoming a robust vector database. This in-depth presentation provides a comprehensive overview of OpenSearch’s capabilities, covering advanced machine learning search techniques, reranking features, and the integration of tools leveraging Retrieval-Augmented Generation (RAG) and ReAct solutions, including connectors, agents, and more. We will explore each technique through practical use cases and demonstrations.

TALK PRESENTED IN FRENCH – Officially inaugurated in April 2025, the France Numérique Libre collective was born at OSXP from a dual observation: there is a dynamic around free software in local authorities, and there is a need for peer exchange on these topics. One year later, with several hundred member local authorities, France Numérique Libre has become a central player in the choice of free, sovereign, and sustainable solutions. How and why did the idea for such a collective emerge in the corridors of OSXP one day in December 2024?

ClickHouse is a high-performance columnar database designed for analytical workloads, but running it efficiently in cloud-native environments presents unique challenges. This talk explores the architecture of ClickHouse and provides strategies for scaling it to handle massive data streams in containerized and distributed systems. We’ll cover topics like volume provisioning, efficient data ingestion pipelines, query optimization, and orchestration with Kubernetes. Real-world examples will demonstrate how to tackle common bottlenecks, improve performance, and reduce costs while maintaining reliability in cloud-native setups. Attendees will leave with actionable insights to build robust, scalable storage and analytics solutions with ClickHouse in modern environments.

Competing with tech giants like Microsoft and Google may seem impossible for smaller companies with limited resources. However, Nextcloud has proven that an open-source business model, remote work, and a culture of open communication and innovation can provide a path to success. This presentation will explore how organizations can leverage open-source development, a distributed workforce, and agile innovation strategies to build competitive alternatives with a fraction of the budget and workforce.

Personal or professional – Linux on the desktop matters! It’s the daily interface between users and digital sovereignty – and it’s often put last. While Linux rules the cloud, servers, and mobile devices, the desktop is where control, compliance, and independence become tangible. This talk explores the current state of Linux on the desktop in Europe, with a focus on two real-world case studies from a leading automotive company and the German government. We’ll examine success stories, roadblocks, and new approaches like immutable Linux, zero-trust models, and EU-level OS initiatives. If we ignore the desktop, we risk leaving the front door of digital sovereignty wide open – or we can start where it matters most: every desk, every user, every day.

TALK PRESENTED IN FRENCH – No governance. No product owner. No project management. No deadlines. No defined scope. And yet, PostgreSQL dominates every StackOverflow survey and stands as the world’s most beloved database. How is this possible? What mechanisms allow PostgreSQL to thrive? Intermittent participation, simple processes, lack of imposed common goals, and this golden rule: “A problem doesn’t need to be raised for a member to propose a solution.” A lesson in reverse management that challenges our preconceptions about organizational efficiency. What if chaos were actually the best form of organization?

How good is your SBOM? It is heavily dependent on the tool that you use. While there are many SBOM generation tools available, many of them fail to meet the basic requirements for a ‘good’ SBOM suitable for use in one of the use cases for which an SBOM can be used (vulnerability management, licence compliance, regulatory assessment). So how do you select a suitable tool? This session compares a number of tools and proposes criteria to be used when selecting a tool based on an assessment of a number of different target applications from a range of language ecosystems.

The rapid adoption of AI-assisted coding tools like GitHub Copilot and ChatGPT can accelerate software development processes, but it also introduces significant risks. Can the AI-generated code be copied mostly as-is from the open source code used for training its backing LLM? If yes, then we have a new problem with license compliance and the introduction of security bugs. Let’s explore how detection works and the implication of using LLMs to generate code for licensing, security and the future of open source.

In a world increasingly reliant on digital collaboration, Europe faces a pivotal choice: remain dependent on foreign technologies, or reclaim control with open source. This talk shares how Rocket.Chat, a leading open-source collaboration platform, has become a strategic asset for public agencies, critical infrastructure operators, and regulated industries seeking sovereign, secure, and interoperable communication tools. We’ll present real-world feedback from deployments across the EU, including use cases in defense, education, healthcare, and public administration—illustrating how open-source messaging, file sharing, and federation can reduce reliance on U.S. or Chinese cloud vendors. Beyond the product, we’ll cover governance, integration strategies, and what it takes to build a resilient open ecosystem in alignment with European values and regulations (SecNumCloud, NIS2, CRA, etc.). Let’s explore how collaboration can be sovereign—and why open source is its only viable foundation

TALK PRESENTED IN FRENCH – A Distributed and Sovereign Cloud Architecture for Industrial SMEs” The digital transformation of industrial SMEs cannot rely solely on centralized cloud solutions. In workshop environments, isolated sites, or critical workflows, network availability is never guaranteed. This conference proposes a pragmatic alternative: a distributed and sovereign cloud architecture, combining open-source components, real-time monitoring, and resilience at all levels (IT/OT). Discover a reproducible stack featuring: K3s for lightweight and robust Kubernetes, CEPH or Longhorn for distributed, fault-tolerant storage, Grafana + Prometheus + Loki for local and centralized monitoring, Syncthing/rsync for intelligent synchronization during network outages, End-to-end encryption and local access control to meet NIS2 requirements. Through concrete use cases (workshop monitoring, machine log collection, alert automation, sovereign backups), the conference demonstrates that it is possible to achieve a resilient and sovereign infrastructure.

TALK PRESENTED IN FRENCH – With the rise of open science, a vast amount of scientific data from research laboratories is being shared and made publicly available. However, these datasets often remain invisible due to a lack of sufficient metadata to describe and reuse them effectively. As part of the European LUMEN project, we will present the MDverse data catalog, dedicated to molecular dynamics simulation data. This intensive simulation technique is widely used, from materials physics to molecular biology, including the design of new drugs. We will introduce an original methodology for annotating data using large language models. We will detail the main Python libraries used, evaluate the performance achieved, and discuss the limitations associated with the use of these models.

TALK PRESENTED IN FRENCH – Born over 20 years ago within the French National Gendarmerie to address a critical IT asset management need, OCS Inventory is now an open-source solution adopted worldwide, with over 8 million downloads. This talk will trace the evolution of a public-sector project into a viable and structured economic model, now driven by the company FactorFX, while maintaining open governance and staying true to open-source values. We will revisit the key milestones of its transformation, the challenges faced by a 100% open-source solution, and the levers activated to ensure its sustainability: customer co-financing, community contributions, and collaborative prioritization. OCS Inventory exemplifies the success of a sovereign, sustainable, and interoperable open-source model, supported by concrete impact figures.

The EU’s Cyber Resilience Act (CRA) is rewriting the rules for hardware product development, demanding a new level of security and transparency. Over the years, the Zephyr RTOS project has established itself as a leading open-source platform for building secure, reliable, and scalable embedded systems. In this talk, we’ll explore best practices developed within the Zephyr project and how they directly align with key CRA mandates: – Accurate, comprehensive Software Bills of Materials (SBOMs) that reflect the full software stack. – Scalable vulnerability management, including how Zephyr’s security team tracks, patches, and discloses CVEs. – Security by Design, through features like secure boot, memory protection, and FOTA. This session is ideal for developers and product managers looking for a clear, actionable path to CRA compliance—whether they already use Zephyr or want to adopt proven practices for any embedded system.

Thuringia has successfully implemented the secure, user-friendly and open-source-based videoconferencing solution OpenTalk for its entire state administration. Built on OpenTalk and operated in the state data center, the ThMeet platform fulfills high demands on data protection, accessibility, and integration. This talk presents the strategic goals, technical challenges, and practical outcomes of the project – including increased user satisfaction, digital sovereignty, and real-world collaboration across ministries and municipalities.

TALK PRESENTED IN FRENCH – March 2024: A single PostgreSQL developer discovers a backdoor that would have compromised every Linux server on Earth. Within hours, Andrew Freund’s vigilance prevents the greatest cyberattack in history. But this wasn’t luck. This was PostgreSQL. While nation-states infiltrate software supply chains and proprietary databases hide their secrets in black boxes, one community has built an impenetrable fortress of transparency and collective vigilance. Discover the untold story of how PostgreSQL’s development culture creates the world’s most secure database ecosystem. Learn the rigorous processes that turn contributors into guardians of global digital infrastructure. And find out how you can join the ranks of those protecting Europe’s technological independence. Because in a world where your database might be your biggest security vulnerability, PostgreSQL isn’t just open source—it’s your digital immune system. The hero who saved the world was a Postgres developer. The next one could be

TALK PRESENTED IN FRENCH – IGN, Cerema, and Inria, with the help of a consortium of 13 partners, are joining forces to pilot the design and progressive deployment of France’s digital twin and its territories, which will help the state and local authorities plan the ecological transition. This national twin, combining a dynamic virtual replica of the territory and online digital services to interact with, will not only show the territory as it is but also how it would react to simulations of new developments, extreme weather events, new regulations, and thereby facilitate decision-making. We will present this technological innovation project based on open-source components and data and open governance in the service of resilience and adaptation of territories. Come meet us to discover how you can join this initiative!

TALK PRESENTED IN FRENCH – SCIC: A Cooperative Model for Open Source and Commons Management” The Collective Interest Cooperative Society (SCIC) legal structure remains relatively unknown despite its growth in recent years. It is designed to bring together employees, service beneficiaries, and other stakeholders in a single project, aligning well with the governance of a commons, including open-source software, provided there is an economic activity. SCICs benefit from the strength of the SCOP and SCIC network, which represents over €10 billion in revenue in 2024. This presentation will detail how a SCIC operates and use the example of SCIC Commown, a cooperative for responsible electronics, to illustrate commons management within an open-source strategy.

TALK PRESENTED IN FRENCH – As every year, the LinuxFr association continues to animate and contribute to the good atmosphere with part of the team, notably to give away books from ENI, Eyrolles, D-Booker, and subscriptions to GNU/Linux Magazine France (we went all out again, thanks to them for the donations)! We organize a daily raffle at 5 PM for about twenty minutes at our booth, with dozens of books to win to increase your knowledge by more than 42%. Knowledge grows when shared!

TALK PRESENTED IN FRENCH – Applications are increasing in number, and deployment has become more accessible than ever. With the omnipresence of Kubernetes and the efficiency of surrounding tools (Helm, ArgoCD, and more), everything is designed to accelerate and streamline production deployment. However, we quickly find ourselves, at best, with a large number of applications to manage. At worst, overwhelmed by the number of applications to maintain, accumulating technical debt with each version. So, how can we maintain all this without spending countless hours? This is where we used UpdateCLI, an open-source tool that automates our updates and helps us keep up the pace in a world that never slows down.