February 24-26, 2027
Montreal, Canada
DevOps Conference
The list of presentations is subject to change without notice.
DevOps
Accessibility work too often gets framed as a compliance checklist handed down after the fact something bolted on, resented, and rushed. This talk makes the case for a different model: accessibility as an ongoing partnership between developers, designers, and the disabled users who actually rely on the result. Drawing on nearly two decades as a daily screen reader user working alongside dev and design teams, I'll walk through what that partnershi
DevOps
Once upon a time, a query triggered a crashing bug. After automated failure handling, the application re-sent the query, and MySQL crashed again. This triggered a cascading failure, which resulted in datastore unavailability. Unfortunately, mistakes made during incident response led to avoidable data loss. This talk covers what happened, how we handled the incident, what we learned, and the infrastructure changes we made to prevent recurrence.
DevOps
Your Spring Boot app is 1 MB, but its image is 713 MB, and 590 MB of that changes on every build. Live, we will shrink it step by step: multi-stage builds, layered jars, buildpacks, jlink and distroless. Then we move from size to speed and use AppCDS, AOT and CRaC to take startup from seconds to milliseconds. Each step comes with measured numbers and an honest price tag, so you can choose which kind of ultimate your image needs.
DevOps
LLMs coupled with coding agents can be very effective and are designed to be goal seeking. One of the ways to unlock this capability is to provide a computing environment to LLMs. There are many commercial products that offer sandboxes like E2B, Daytona, Docker Sandboxes etc. In this talk we will peel back the covers of how these work. We will see how to stage files for the sandbox, how to securely hoist secrets and limit network access.
DevOps
Development environments should not take longer to configure than the code takes to write. This session explores Dev Containers and GitHub Codespaces for creating consistent, repeatable environments. Learn how devcontainer.json works, how local containers compare with cloud Codespaces, how teams can standardize setup, and where these tools do and do not fit.
DevOps
Chaque application produit ses logs à sa façon, et rarement comme on en a besoin. Le Collector OpenTelemetry sait transformer presque n'importe quel format en télémétrie cohérente et exploitable, à condition d'en maîtriser les opérateurs. Vous apprendrez à construire et tester un pipeline de parsing, à appliquer les conventions sémantiques et à éviter les erreurs qui font silencieusement disparaître vos données.
DevOps
Are you looking to rapidly deploy your content? Are you looking to understand the full DevOps process? Come for this demo-only presentation where we start from scratch, template a React website and API with Aspire, live-code both Dockerfiles, live-code Kubernetes YAML resources, build up a DevOps pipeline in GitHub Actions, and deploy to Kubernetes. Then we commit, and watch the magic flow into place. You too can automate your full-stack DevOps.
DevOps
The massive increase in supply chain attacks for trusted packages causes serious risks to many organizations. Packages get infected, versions get bumped and malicious code gets rapidly distributed at enormous scale.
In this presentation we’ll take a closer look at how an artifact firewall prevents you from pulling in infected packages by enforcing OSV.dev rules at request time, introducing quarantine windows, and offering an audit trail.
In this presentation we’ll take a closer look at how an artifact firewall prevents you from pulling in infected packages by enforcing OSV.dev rules at request time, introducing quarantine windows, and offering an audit trail.
DevOps
Human-in-the-loop might be the easy answer, but a better model is where people set direction, agents execute, and review at key checkpoints. The real skill is deciding where a human has to own the call. This session works through that using a personal night-sky viewing planner application and weighing where AI should or shouldn't take the wheel. Attendees will leave with skills to decide where AI should drive and where it should ride along.
DevOps
Containers run from images, and images are created by Dockerfiles. But what is a layer? And what ends up inside the image? What files and executables are added? And how does the base image affect all of this? What if I use a different base image? Container Images aren't a black box. Lets open them up, and create a few from scratch. We'll also discuss how image internals help us our manage supply-chain security for SBOMs.
DevOps
In a server side app, it's easy to find out what went wrong from logs. But what about the client side? The W3C's Reporting API for Content-Security-Policy, Network Error Logging, Document and permission policies, and reporting endpoint HTTP headers can let you know about all kinds of client-side issues that you'd otherwise never see. Find out how to use them, and solve all the problems that only your customers have been seeing!
DevOps
Package ecosystems like npm, PyPI, Maven, NuGet and Composer each have controls against software supply chain attacks. We'll compare their capabilities, expose the limits of client-side controls, and show how centralized policies can be enforced at the gate, before they reach the CI/CD pipeline.
We'll cover topics like centralized policy as code, dependency cooldowns, audit trails, OSV rules, and the need for a vendor-neutral artifact firewall.
We'll cover topics like centralized policy as code, dependency cooldowns, audit trails, OSV rules, and the need for a vendor-neutral artifact firewall.
DevOps
A mixed-stack repository rarely feels like one application. Python, Node.js, Go, Java, and .NET services each bring their own setup and logs. Aspire gives them one place to run, connect, and report telemetry. Working examples cover service discovery, connection strings, health-aware startup, and OpenTelemetry. Learn to manage a mixed stack without replacing its tools and carry the same application model into deployment.
DevOps
Quantum computing poses a looming threat to current encryption algorithms, so we need a new approach: post-quantum cryptography. This talk explores why we need PQC, how it works, why it's important to use it now, new standardised PQC algorithms like ML-KEM, industry adoption of these approaches, and practical migration steps for developers and ops people to protect our data, systems, and applications now and in the rapidly-approaching future.
DevOps
Docker was created as a containerization system, but nowadays it also serves as a security mechanism for build isolation and sandboxing AI agents.
This talk covers various security features, the limitations you need to know, and the most effective ways to properly secure your Docker containers.
This talk covers various security features, the limitations you need to know, and the most effective ways to properly secure your Docker containers.
DevOps
I have never shipped software on a release train. Eight apps, multiple services, a deploy every few commits. I will show the structural choices continuous deployment forces on you: a version per app, forward-only fixes, schema changes split across two deploys, env flags instead of rollbacks. Also where it truly costs more, like migrations and device firmware. You will leave knowing what to change first, and what it will not fix.
DevOps
Recovering cloud workloads after a regional event or ransomware attack requires more than runbooks. This session covers the technical requirements for full-scale recovery and the DevOps practices that make them work under pressure: clear communication, team empowerment, and frequent experimentation. You'll learn how to build a culture of resilience that turns individual craft into repeatable, reliable recovery when disaster strikes.
DevOps
What can a small Proxmox home lab teach us about disaster recovery? Using a two-node environment as a case study, this session explores how concepts such as RPO, RTO, service prioritization and recovery planning can improve resilience without clusters, shared storage or enterprise budgets. Attendees will leave with a better understanding of recovery trade-offs and practical disaster recovery thinking.
DevOps
Coding agents are changing the way we build software. While it has not replaced our need for understanding code, abstractions and designs, it has profoundly changed the way we engage with our editors and our environment. This talk we explore some of the experiments with coding environments and experiments around sandboxing, ephemeral cloud development environments, treating traces as an artifact alongside code and the team dynamics around those.
DevOps
Even with robust CI/CD, production rollouts can hit unexpected snags. While in Kubernetes, Argo Rollouts excels at Progressive Delivery, what if we could go a step further?
This session explores how to elevate your release process by integrating Agentic AI with Argo Rollouts canary deployments. We'll demonstrate how an intelligent agent can automatically analyze and propose a fix for a rollout failure, pinpointing the root cause.
This session explores how to elevate your release process by integrating Agentic AI with Argo Rollouts canary deployments. We'll demonstrate how an intelligent agent can automatically analyze and propose a fix for a rollout failure, pinpointing the root cause.
DevOps
Want to learn DevOps, cloud and infrastructure engineering without running up an enormous cloud bill? Build your own cloud playground. Starting with inexpensive hardware, I’ll build a complete environment using Proxmox, Packer, Terraform and Kubernetes, adding identity and security along the way. We’ll see how the same infrastructure-as-code, automation and security principles apply from a homelab to production cloud environments.
DevOps
AI agents aren't just writing code anymore. They're executing it. I gave agents access to real cloud infrastructure and turned off the guardrails. This talk shares five war stories of what went wrong, a framework for thinking about when agents are safe to use, and the benchmark we're still missing. You'll leave with concrete safeguards for your own agent setup.
DevOps
Every kill-switch you ship becomes another system to own: ownership, stale entitlements, and combinatorial tests nobody runs. I’ll walk production flag debt - rollbacks that lied, “temporary” flags that outlived the product - and leave you with a lifecycle checklist: when to flag, when to delete, and how to test without exploding the matrix.
© 2010-2026 ConFoo. All rights reserved. Code of Conduct
Cookie Consent
To provide the best experiences, the usage of cookies are necessary. Some are essential for the proper functioning of the site, while others help us better cater to your interests.