Open Source Summit India 2026

The Linux ecosystem powers many, if not most, devices these days. Having a well designed sustainable way to build and maintain one – and not having to rely on a hodge-podge collection of hacky scripts – is critical. This talk introduces the Yocto Project - _the_ industry standard way to build and maintain your custom Linux.

With Yocto, one can build a custom (embedded or otherwise) Linux in an efficient and completely reproducible manner, along with several related advantages; it's a 100% open source, has the ability to build-in security features, all/most major BSP layers are already available, and more.

This session will show you exactly how to get started on building such a custom system with Yocto; it will of course include leveraging Yocto/OE’s famed layer+recipes model.

We all believe in open source - or we wouldn't be attending this conference. But although open source may be a "nice to have" property for software in general, this talk will try to convince you that security software really _must_ be open source. With nearly 30 years of open source and security experience, Mike will address some of the key ways in which the open source community does security - and also debunk a dangerous myth. We will ensure we have lots of times for questions - open source and security should both be two-way conversations!

Open source used to mean something simple: the code is open, the community builds it, and everyone benefits. That world is gone. Today, billion-dollar companies release model weights and call it "open source"

Projects launch with permissive licenses but lock their APIs behind paywalls. Foundations host projects where one vendor controls 95% of the commits. And a new generation of developers is entering open source through AI-generated pull requests they barely understand.

I've spent 7 consecutive Kubernetes release cycles on the release team, helped build and maintain Kargo - a OSS project for GitOps continuous delivery and worked as a CNCF Ambassador helping new contributors navigate this ecosystem

I've watched the definition of "open source" stretch, bend & sometimes break in real time.

This talk is about the real problems developers face today when they try to contribute to, depend on, or build careers around open source projects that don't play by the old rules. I'll share what I've learned about spotting "open-washing" evaluating project health beyond the GitHub star count, and building genuine community in an era where the incentives have fundamentally shifted.

Building modern applications in the cloud is exciting—but also overwhelming. You need CI/CD to ship fast, APIs to connect everything, and scalability to handle growth. But where do you start?

This session will break down the essentials of cloud-native development, covering CI/CD pipelines, API-driven architectures, and scalable deployments— while also showcasing how open-source cloud-native projects can accelerate your journey from beginner to pro.

You will learn:
1. CI/CD without confusion – Automate deployments with ArgoCD, Tekton & more.
2. APIs made simple – REST, GraphQL & event-driven APIs for cloud-native apps.
3. Scaling smartly – Kubernetes, Knative & serverless for effortless growth.
4. Open-source power-ups – CNCF projects that accelerate your development.
5. Best practices – The tools & workflows every cloud-native dev must know.

Join us to get a clear roadmap, hands-on tools, and the confidence to build, deploy, and scale like a pro!

If you feel overwhelmed by jargon thrown around in forums, conferences, and headlines focussed on containers and the cloud, you’re not alone. In 2026, image hardening, provenance, secure supply chains—oops, it’s happening again, isn’t it? Let’s step back.

This session takes a hands-on, bottom-up approach to understand containerization. Build along as we containerize a simple app and run it, starting with a naive approach and iteratively improving it until we have a production-grade image. At each step, new concepts are introduced only once we've understood the need for them. We'll work with Docker, understand container runtimes, even touch upon new-age tools like Rockcraft and Chisel.

To make this fun, we’ll use baking as a guiding analogy: images as recipes, dependencies as ingredients, and runtime environments as kitchens!

By the end, you’ll be able to walk confidently into real-world discussions about containers, ready to participate and learn better.

Every time one Pod talks to another in Kubernetes, the Linux kernel does a surprising amount of work.

Engineers know Pods get IP addresses. They know Services like ClusterIP and NodePort make workloads reachable. And they trust that traffic somehow finds the right destination.

But what actually happens to a packet once it leaves a Pod, especially when it needs to reach another Pod on a different node?

In this session, we trace that journey across a live Kubernetes cluster. We follow real Pod-to-Pod traffic, observe how packets move across nodes using native Linux networking primitives, and examine what enables flat, routable Pod networking without NAT between workloads.

Rather than treating Kubernetes networking as magic, we connect what we see to the underlying constructs like network namespaces, veth pairs, bridges, routing tables, and packet filtering rules.

Through live demos, attendees will build a clear, practical mental model of how Kubernetes moves packets and leave with a clear mental model for explaining, observing, and debugging Pod-to-Pod traffic in Kubernetes.