Open Source Summit India 2026

Efficient interrupt handling is at the heart of modern operating systems, enabling hardware devices to communicate seamlessly with the kernel. In the Linux ecosystem, the evolution from legacy line based interrupts to advanced mechanisms like Message Signaled Interrupts (MSI) and MSI X has significantly improved scalability, performance, and reliability. Yet, for many developers and practitioners, the inner workings of these mechanisms remain opaque.
This talk aims to demystify PCI interrupt handling in Linux, with a focus on MSI/MSI X. We will begin by revisiting the limitations of traditional interrupt models, then explore how MSI/MSI X leverage in band signaling to overcome them. Attendees will gain insights into:
• The architectural differences between legacy interrupts and MSI/MSI X.
• How the Linux kernel configures and manages these interrupts.
• Practical debugging techniques for PCI devices using MSI/MSI X.
• Real world performance implications in networking, storage, and virtualization workloads.

Java is fundamentally changing. Enterprises deploying to Kubernetes now demand nanosecond startup times, minimal memory footprints, and fully optimized containers. This advanced session goes beyond basic JVM tuning to explore the cutting edge of Java modernization for cloud-native deployment. We’ll provide a deep dive and comparative analysis of optimization techniques, including Jib for minimal image creation, utilizing GraalVM Native Image for incredible cold-start acceleration, and leveraging the CRaC project (Coordinated Restore at Checkpoint) for state-of-the-art responsiveness. Join this hands-on Cloud Native Experience walkthrough to see live demonstrations of complex configuration patterns, detailed trade-off discussions, and actionable strategies for dramatically improving the cost-efficiency and velocity of your containerized Java microservices.

In large Kubernetes clusters, scaling isn’t just about replicas — it’s about distribution efficiency.
When hundreds of pods start simultaneously, container image pulls can silently become your biggest bottleneck.

In this session, we’ll explore how Dragonfly (D7y) transforms traditional image pulling into a peer-to-peer, high-performance distribution system within Kubernetes.

We’ll break down:
Why image pull storms happen
How P2P distribution solves real scaling problems
Dragonfly architecture in Kubernetes
Live flow of how images propagate across nodes
Real-world performance improvements and use cases
This talk is for engineers who want their clusters to scale smarter — not slower.
Because Kubernetes is fast
but only if your images are too.

Protecting privacy for customers and business partners is a key requirement across jurisdictions and sectors, but proving that privacy is preserved can be extremely difficult. Confidential Computing, available as a chip-level capability across servers and clouds, provides not only isolation for sensitive data and applications, but also cryptographic assurances that it is in place.
This session explains how Confidential Computing can be used as the basis for privacy-centric systems and processes, and the types of assurance that can be derived using remote attestation.
Confidential Computing also has uses across supply chain, collaboration, AI and blockchain - we will touch on these topics as well.

Modern confidential computing technologies like AMD SEV-SNP and Intel TDX provide a reliable way to isolate guest workload and data in use from the virtualization or cloud infrastructure. Protecting data at rest is, however, not something you get ‘by default’. The task is particularly challenging for traditional operating systems where users expect to get full read/write experience.

The good news is that Linux OS already offers a number of great technologies which can be combined to achieve the goal: dm-verity and dm-integrity, LUKS, discoverable disk images and others. Doing it all right, however, is left as an “exercise to the reader”. In particular, the proposed solution must allow for meaningful remote attestation at any time in the lifetime of the guest.

The talk will focus on the recent developments in various upstream projects like systemd and dracut which are focused on making full disk encryption consumable by confidential computing guests running in a cloud.

Cloud-native systems generate massive volumes of telemetry signals for metrics, logs, and traces, but more data does not always improve observability. Many teams struggle with noisy signals and poorly designed pipelines that increase storage costs and flood engineers with low-value alerts.

In this hands-on workshop, we focus on building effective, noise-free telemetry pipelines using OpenTelemetry Collector, with the LGTM stack (Loki, Grafana, Tempo, and Mimir) as the backend observability platform. Participants will deploy collectors and design pipelines using processors such as filter, transform, and attributes, along with OTTL (OpenTelemetry Transformation Language) for fine-grained filtering and signal transformation. We will also demonstrate tail-based sampling for traces and routing processors to selectively direct telemetry to appropriate backends, helping control signal volume and storage cost.

By the end of the workshop, attendees will gain practical experience designing OpenTelemetry pipelines that prioritize signal quality over quantity using various filtering and processing techniques.

Cloud-native environments are growing in scale and complexity, making traditional security approaches difficult to sustain. Static rules and fragmented tooling create operational overhead and slow down both security and platform teams.
This session explores how AI-driven security agents can shift cloud-native protection from reactive alerting to proactive risk identification. By analyzing contextual signals across infrastructure, workloads, and configurations, AI can detect risk patterns early and support faster, smarter security decisions.
The talk also introduces Model Context Protocols as a mechanism for enabling controlled, auditable, least-privilege access to infrastructure tools and telemetry. This allows AI systems to operate safely within governance boundaries while maintaining strong visibility.
Attendees will gain practical insights into embedding AI into cloud-native security workflows, reducing friction for DevOps and platform teams, and strengthening secure-by-design architectures at scale.