Video summary
The video begins with a somber yet reflective opening regarding the recent loss of several community members, specifically mentioning P2 and Lunar from Debian. The speaker expresses deep gratitude for the outpouring of tributes but shares a personal wish that such kind words were shared more often while people are still alive rather than only after death. Following this emotional introduction, the first technical presentation focuses on Chameleon, an alternative implementation of OpenPGP written in Rust. This tool aims to be a drop-in replacement for GnuPG with full feature compatibility, utilizing GnuPG's keyring or more sophisticated management from SeaOA. The speaker highlights that while the software is available in Debian Trixie and New, it requires careful installation to ensure the correct binary path is used, though removing the original GnuPG package is a viable option for testing.
The second segment addresses challenges within the Debian translation workflow, specifically focusing on the delays and friction experienced by new contributors. The speaker introduces an experimental tool designed to streamline this process by leveraging GitLab repositories instead of traditional mailing lists and waiting periods. This Python-based application allows translators to work immediately after receiving a Salsa account, utilizing a distributed system where code resides on local laptops while metadata is centralized in a Git repository. By automating tasks like creating merge requests and managing translation statuses, the tool aims to reduce bureaucracy and encourage greater participation from volunteers who might otherwise be discouraged by slow review times or unclear instructions.
The third talk shifts focus to critical electrical safety issues, particularly as data centers expand into outdoor environments where risks increase. The speaker recounts a tragic incident involving a telecommunications user who fell to their death after dropping a metallic measuring tape that was pushed onto a high-voltage line by the wind. This example underscores the dangers of working near power lines and the increasing risks associated with placing high-density equipment outside, which often necessitates proximity to electrical infrastructure. The presentation also covers specific hazards like loop currents in grounding systems, the dangers of swollen batteries that can catch fire or explode, and the strict regulations required for handling lithium-ion batteries, emphasizing that standard low-voltage safety gear is insufficient against high-voltage threats.
The final portion of the video serves as a brief administrative note regarding communication channels within the Debian community. The speaker reminds attendees that official Debian developers possess Jabber and XMPP addresses associated with their debian.org email domains, which can be easily configured using standard client settings or passwords stored in the dchat-elder tool. For those who are not yet part of the developer team but wish to participate in real-time communication, the talk suggests joining the broader Jabbra network or self-hosting solutions like Prosody and Ejabberd, both of which are well-maintained within the Debian ecosystem. The session concludes with applause, reinforcing the community's commitment to both technical innovation and personal safety.
Read the full video transcript
hello everyone uh welcome to M de last
uh afternoon in uh in capital we will
have some lightning talks so uh I won't
present everyone like Olivier sorry old
girl Leon yes who is going to talk to us
about a nice camon s that allows us to
use seya instead of new PG yes your own
go go go thank you
tord
um yeah you know me a bit I used stab a
long time but I'm also involved with the
CCC since
Longo and this year way too many people
died P2 and lunar from Debian yesterday
I learned about a third CCC friend this
year who died and that reminded me to
say something I didn't want to say
yesterday quote from a friend since a
few days all these kind words I read all
over the place make me cry and Shout
inside maybe we should tell each other
this sort of thing more often why we
still alive what about
that don't get me wrong I'm immensely
grateful for all the people like you all
who've been putting in the effort to
write and publish tributes this is
amazing for Luna's close friends and
families and as a way to collectively
deal with the death of someone we love
respect whatever but still if I'm being
honest once I'm dead I'll be pissed off
to know that all these people are saying
all these kind things about me that they
never told me face to
face so seriously thank you all for your
amazing
work and now five minutes about seoa and
please don't thank me today I'm
exhausted I don't want to talk about
this talk about technical stuff or hug
me or
whatever so about chameleon
trying out seoa the easy way open pgp
written in
Rust oh yeah I'm ho or
ol I don't know much about rust I do
know Debian packaging and I know Debian
processes I don't know much about seoa
as well so all bucks are
mine and bgp and gpg in the past pgp was
the software today pgp usually means
open pgp as in the standards and pgp the
software is gone and there's Sno and
seoa pgp and 10 other implementations
and many are in
Debian so this is the seoa
logo and seoa is open pgp in Rust and
rust you probably know why rust is good
and seoa aims to be a library there's
also seoa the command but seoa aims to
be a
library and this talk is not about seoa
this is about chameleon you can install
the command line client you can use
octopus and
sunboard there's also the status open
pgp
protocol but if you want to know about
seoa I recommend ustus winter talk from
decom
24 um thanks to the video team and
enough
introduction so what is chameleon
chameleon is Sea's alternative
implementation of a tool following the
gy E command line interface it's meant
as a dropin replacement using SQ as a
back end
the goal is to be 100% feature and bu
compatible we're
sensible but some features will not be
implemented it uses gpg's key ring but
it can also use more sophisticated Key
Management from
seoa and one message to remember the
original idea of this talk hello world
up install gpg from SQ the end thank you
the Kya packages are team maintained
with Alexander Kel and my service
uploaders in the past dkg has done work
but dkg wants to focus on the big on the
general ecosystem and on the standards
work I've been freelancing with like 10
or bit more hours per month in shoya
I've done about 100 uploads mostly in
the beginning sponsoring Alexander's KW
work by now I've understand the rest um
Debbie and de cargo con stuff
so I'm doing my own uploads now and the
Deb and rust team is very
lovely um if you search for Cameleon you
find five
packages and there's gpg SQ and gpg vsq
like the verification tool and the other
tool and there's from Square which I
explain up install G gpg SQ installs the
chameleon binary but into it with a
different path only if you install
gpg from
SQ um you user bin gpg will be diverted
and chameleon becomes
gpg and on Trixie I've done on all my
production systems which is
one um but I also tested removing first
that was the first thing I did and
removing works so you can try out
chameleon if you find bucks which break
your use cases you can get rid of it and
fine um
still not the
end um up update with chamon Works dep
sign Works encrypting and decrypting
files
Works um and there's more things that
work um so I'd asked you to just install
it and try it
out and five
bucks and you might want to install SQ
CU SQ is really nice
so and it's only available in Trixie or
new and we won't put it into
backports and we are discussing security
support with the security team probably
not for the whole rust ecosystem but
there are already rust applications
which get security support and we want
it for secoya it's definitely help
welcome on
this there's documentation there's a
Upstream book about seoa and the Debian
wiki page um which is quite
comprehensive now GM recently added how
to use mut with SQ and not with
chameleon um so these page is suppos
good and please fire
bucks early and often Upstream L
box and that's it thank
you I'm not sure there's time for
questions I guess not no reading all
right not reading not reading yeah we
don't really have time thank you so much
but we can talk in person with h and
thank you very much um I think there's a
second person now I don't know who who
yeah
yeah sorry from if I remember correctly
um who is going to talk about something
yeah okay he's arriving um yep can you
can you try to Mi microphone maybe thank
you and it's already on it's one maybe
no head
one thank
you should be okay yeah thanks somewhere
on the wiki it had maximum three slides
so I put 10 slides in to flee lights uh
so that's why they look like this uh the
last months on and enough I've been
doing something I called it po depc comp
manager and I've been having fun doing
this so I went you well I want to share
this fun with all of you and I'll just
say very quickly what's the situation
with decom
translations the steps to translate them
and then because I don't like some of
this workflow and some contributors seem
to not get very engaged in some
languages what they been playing on and
this is just an experiment that I've
been doing so I just want to get some
feedback at some point about this um so
dep conf uh translations yeah here this
is the strings that are in Dean po lank
cipo for Catalan uh ptvr for Portuguese
Brazilian there's more than 440 packages
that have these um strings there so when
you do up install some package it ask
you what do you want to do in some
upgrades
installation and often there are very
few strings per package so it's not
translations of hundreds and hundreds of
strings is just a package that has two
or three quick
things
and there's 10 languages with more than
80% of the strings that are
translated but then there's a very big
number of languages that have very few
strings translated so I said there's
some room that we can improve here and
then the documented steps to translate
is where some new contributors get a bit
stuck that you jump there you read the
steps and they say send an email to um
this mailing list wait but you don't
know how long send an email to a
previous translator but you know like
all of these is to translate you often
four five six strings validate using
these things manually and then final
step use back report uh and uh it says
what to do and you need to set up the
severity the tax at this attachment with
a patch or the file and then include
some
translations so the problems is this
waiting time that some translations get
lost on that like they want to do but
then they send a email they know how
long to wait there's no review encourage
there's no Sala uh encourage um you
don't know what to do next you need to
go to a website that is uh it gets
updated but not in real time and you
don't know how to assign packages to a
person so what I've been playing and
this is the experiment is uh testing
Catalan and now in Portuguese since a
few days ago uh thanks to Paulo it's a
CLA based tool but without any need of
new infrastructure doesn't you don't
need to know G um there's no waiting
times you can just start translating
more immediately when you get a Sals
account and the final step instead of
doing a bar report that I might
Implement is uh doing a merch request on
salsa so I want to leverage more salsa
flow and I might do the B report as well
it can be used offline and it has threee
roles uh because some translators in
some languages want to translate but
they don't want to give uh to create mer
request give feedback to Upstream
Upstream the they maintain of the
package they just want to do only
translation without all the other things
and some only want to review things so I
have these three Rs and I hope that
should be fun uh to use um there's some
we web lights being installed in deian
uh and I think that both things can live
together uh but I need to look more at
web lights and who prefers web lights or
CLI tool or
how so I could do a demo but I'll not
risk it in a lighting talk but
basically I want to talk how it's
implemented but how to use it is you do
a g Crone if your language have been
added the moment uh Catalan and
Portuguese you can find immediately the
things that need translation well the
app ending translation doesn't have a
translator assigned you can do edit
package it runs P edit or it's
configurable you change the status these
are uh different status and I'll do the
transitions to um avoid mistakes here
and then the manager can do a merch
request create package the manager is
anyone that uh has a personal access
token in the configuration file so using
gitlab um python flee gitlab it can
create a mer request with the new
translation for the
package and
then part of the fund that I'm doing
besides helping we've been using this in
Catalan for a few um well for a few for
uh to um 20 or 20 20 or 30 packages is
that I'm using git as a storage so I'm
using a uh repository on
gitlab and then instead of having a
database to not have more infrastructure
in deian the tool that you run locally
is interacting with this git repository
using python free git and it has some
metadata files uh because the number of
files were talking about 400 500 we
don't need a relational database it's
being fun to do and seems to be working
so far so as a translator you just
execute you don't need to use git uh you
don't need to use git but it uses git as
a
background uh in as a storage so you can
just use the things and it ask every now
and then do you want to push this do you
want it does it writes a commit for you
and there is a a package well the ca the
language profile and there is also the
uh it's called meta metadata thing
instead of status but there is a Json
file that contains who is a who is
translated review has changed mer
request ID mer request URL and other
data that gets
updated and as I said I implemented this
in Python 3 git which for the
translators this is all that they need
um and it's a normal repository the
manager can create and update merch
requests on this way and also part of
the fun is could this way of interacting
with
um with some packages or something could
be used outside uh the dep com translate
like I'm I'm finding this quite
interesting way of having some service
I'm calling this a distributed system
because the code is in many laptops the
data is centralized on the on Sala
and last thing this uh Catalan
translator who jumped and started using
this and Reporting back that um his name
is po pox and Del that I want to thanks
for all the feedback uh from here and if
anyone had any very quick question there
20
seconds or no questions and we catch up
later just one yes
thanks do you have plans to store the
translation on your stuff and give a
commments to maintainer to just pull all
the newly available translation from
time to time uh yes some of this is done
and some is in PL but yeah I have
plans very good thanks thank you thank
you very much thank you thank you very
[Applause]
much I think rukai is going to prepare
and have a talk about electricity stuff
I don't I don't understand French French
people talking about French stuff you
know
I everything is going to be all
right
soon today I will speak to you as a
professional because my day job part of
my day job concern and fact I I am
member of B committee about electricity
sa safety in France as a member of
sen so
uh this is one of your best par Olympic
uh swinger it is go through the channel
without members and it was EIT by
electricity so that is the damage that
could be good could get by
electricity so I will talk you about a
case of a Telco user uh he was doing
some measurement on the top of a to
water tower in order to implement a data
center on the top of water to to he let
fall a measuring tape metallic measuring
tape and the wind push the tape to the
high voltage line it died
so remember that we get more and more
data Network in a outside place and
outside place are not so
safe uh Green Building video protection
bioclimatic data centers means that we
will push the limit of the data center
outside so you will get Aima outside
because it's better in for
cooling you put high energy density so
we will push the high voltage line
inside the data
center uh no clear B between Network
equipment building electrical
engineering for instance you have Linux
on automata that are in power um box so
if you put your hand with glood you
could die for programming the Linux so
you you have an increasing risk for
engineer and I see it on the statistic
and I can have the photo of a guy that
die if you die in France I could have
the photo of the cas so please
no um there are a new problem due to the
loople in the legislation in the all
Europe uh a protection is a nuisance for
it
because it decrease the LCD that is the
the breaker decrease the availability of
your data center because you need to
test it once per years and it have
tendency to trip to stray current so
remove it oh we found a loop all if
you're if you on your rack you put small
wheel it is not a fixed electrical
installation it is a machine and so you
could remove the L
CD the only oblig mandatory stuff is a
one by
one sticker and a lock if you open the
lock you have no protection against the
gr current it's you that go the live to
the
ground please if you see this sign but
your
[Music]
gloves low voltage do not mean no risk I
imp me fire short
circuit son I remember that we could not
break the Sun so you could not break the
solar panel because you could not remove
the Sun a battery we could not remove
the chemical process so the supply will
be
here this is it will burn your wrench
will burn if you put it on
12v battery so use insulated tools
Safety First no ring no watch no
metallic stuff no
chain batteries please do not follow
YouTube tutorial how to repair your
electrical
bike now this is in French because they
following the OV Data Center fire we
have pretty strict regulation about
battery manipulation in fact you could
on a sing P people could only manipulate
a truck battery everything you need to
be um teaching and this is is more uh
more hard to get is agreed by special
State
body and every year you need to be re
agreed with a reing of two days or in
only one
um centers in Celesta alas when your
battery is swollen please do not touch
it do not do everything I have a people
that die in uh in a companies that is
specialized on remade
material uh so uh if a battery is
swollen throw it
away thank you for your attention do you
have any question
uh where do you dispose of swollen
batteries if your for your workplace
should guide you some vermiculate or
some sand material with box with a sand
and normally if you manipulate battery
uh you should put in something that
could not burn at home do not put it on
the balcony put it on the GR
but not on the table and then what do I
do with it do I just cordon off my
living room go get out and call the
fireworker please okay thank
you another a question about
electricity who asks who I I thought you
wanted to ask something else okay so
thank you very much ruk thank you for
your presentation
uh we see you
later Martina has another slide to to
show
us and if you manage to make up your
mind you might have a two minute slot to
present us something um I'll give me
this m
it's uh only one slide in fact um it's
uh about all the deian developers here
uh who have an official debian.org mail
address um just to make sure that you
know that you can have also a Jabba and
xmpp address as well uh with a
debian.org
domain and uh you can easily create uh
this account by setting your RTC which
is realtime communication or something
uh password in the dad and Elder which
all DDS probably know um and if you're
not a DD and cannot have this account uh
just check out join ja.org for an
account or something else or self host
with Pro and E which are wellmaintained
with in Debian so self hosting is also
an option that's all thank you
[Applause]