Abstract: A source IT-infrastructure hosts a composite application including multiple functional modules connected to each other via communication links. An abstract pattern includes first nodes and first links representing the functional modules and communication links and lacks resource-related data enabling a deployment engine to instantiate a resource for providing a runtime environment. A target IT-infrastructure has assigned a resource catalog including, for each resource available in the target IT-infrastructure, a specification of the resource's capabilities, and includes second nodes and links, each second node being a representation of one or more of the resources of the target IT-infrastructure and including an indication of the capabilities of one or more resources represented by the second node. The first nodes and links of the abstract pattern are iteratively supplemented by the second nodes and second links.

Abstract: Accessing privileged objects in a server environment. A privileged object is associated with an application comprising at least one process resource and a corresponding semi-privileged instruction. The association is filed in an entity of an operating system kernel. A central processing unit (CPU) performs an authorization check if the semi-privileged instruction is issued and attempts to access the privileged object. The CPU executes the semi-privileged instruction and grants access to the privileged object if the operating system kernel has issued the semi-privileged instruction; or accesses the entity if a process resource of the application has issued the semi-privileged instruction to determine authorization of the process resource to access the privileged object.

Abstract: Replacing a source hypervisor by a target hypervisor in a system having a first level hypervisor managing multiple logical partitions to share a set of resources of a server. The source hypervisor enabling at least one source virtual machine to share resources that are assigned to a source logical partition of the multiple logical partitions where the source hypervisor runs, the target hypervisor enabling at least one target virtual machine to share resources that are assigned to a target logical partition of the multiple logical partitions where the target hypervisor runs, wherein memory segments of a physical memory of the server are assigned to the at least one source virtual machine.

Abstract: Accessing privileged objects in a server environment. A privileged object is associated with an application comprising at least one process resource and a corresponding semi-privileged instruction. The association is filed in an entity of an operating system kernel. A central processing unit (CPU) performs an authorization check if the semi-privileged instruction is issued and attempts to access the privileged object. The CPU executes the semi-privileged instruction and grants access to the privileged object if the operating system kernel has issued the semi-privileged instruction; or accesses the entity if a process resource of the application has issued the semi-privileged instruction to determine authorization of the process resource to access the privileged object.

Abstract: A method and computer system are provided for distributing a plurality of data portions from a server system to one or more client systems. The method includes receiving one or more first requests at the server, each first request being submitted by a client system and including a portion identifier, wherein a portion identifier is assigned to each data portion; in response to receiving the first request(s), transmitting a list of chunk identifiers to the requesting client systems, wherein the list of chunk identifiers specifies the data chunks whose meta-data includes the portion identifier contained in the first request; and transmitting some or all data chunks of a data chunk library to each of the requesting client systems. At the requesting client system, the client specifically selects the data chunks of the transmitted data chunks which are specified by the received list of chunk identifiers.

Abstract: A method is provided for placing a virtual machine on a target virtual machine manager out of multiple virtual machine managers. System management software is connected to the virtual machine managers and selects the target virtual machine manager for placing the virtual machine. The method includes: the system management software creating a memory profile for all virtual machines hosted on the multiple virtual machine managers, the system management software evaluating probabilities for samepage mapping of the virtual machine to be placed on the multiple virtual machine managers based on the memory profiles of the virtual machines, the system management software selecting under consideration of the probabilities for samepage mapping a most appropriate virtual machine manager as the target virtual machine manager, and the system management software placing the virtual machine on the target virtual machine manager.

Abstract: A virtual machine (VM) migration from a source virtual machine monitor (VMM) to a destination VMM on a computer system. Each of the VMMs includes virtualization software, and one or more VMs are executed in each of the VMMs. The virtualization software allocates hardware resources in a form of virtual resources for the concurrent execution of one or more VMs and the virtualization software. A portion of a memory of the hardware resources includes hardware memory segments. A first portion of the memory segments is assigned to a source logical partition and a second portion is assigned to a destination logical partition. The source VMM operates in the source logical partition and the destination VMM operates in the destination logical partition. The first portion of the memory segments is mapped into a source VMM memory, and the second portion of the memory segments is mapped into a destination VMM memory.

Abstract: A process can be scheduled between first and second hosts that using a virtual file system that is shared between the hosts can be used. The process, running on a first hypervisor of the first host, can be scheduled to run on a second hypervisor of the second host. A file can be created that includes the data content of the process address space for the file. The file can be mapped address space of the virtual file system. Data from the physical memory of the first host can be transferred to physical memory of the second host using page fault routines.

Abstract: A process can be scheduled between first and second hosts that using a virtual file system that is shared between the hosts can be used. The process, running on a first hypervisor of the first host, can be scheduled to run on a second hypervisor of the second host. A file can be created that includes the data content of the process address space for the file. The file can be mapped address space of the virtual file system. Data from the physical memory of the first host can be transferred to physical memory of the second host using page fault routines.

Abstract: Efficiently determining identical pieces of memory within a computer memory area, which is occupied by a virtual machine manager hosting multiple guests and the computer memory area being logically separated into memory pages of a unique size. Each guest is inspected for its structural characteristics by the virtual machine manager. The structural characteristics of each guest are compared by the virtual machine manager, wherein memory regions of guests having a similar structure are identified; and the identical memory pages are identified by the virtual machine manager by comparing hash values of memory pages located within memory regions of guests having a similar structure, wherein identical memory pages are determined by comparing hash values calculated over the contents of the memory pages.

Abstract: A virtual machine (VM) migration from a source virtual machine monitor (VMM) to a destination VMM on a computer system. Each of the VMMs includes virtualization software, and one or more VMs are executed in each of the VMMs. The virtualization software allocates hardware resources in a form of virtual resources for the concurrent execution of one or more VMs and the virtualization software. A portion of a memory of the hardware resources includes hardware memory segments. A first portion of the memory segments is assigned to a source logical partition and a second portion is assigned to a destination logical partition. The source VMM operates in the source logical partition and the destination VMM operates in the destination logical partition. The first portion of the memory segments is mapped into a source VMM memory, and the second portion of the memory segments is mapped into a destination VMM memory.

Abstract: Embodiments of the invention relate to providing isolated entropy elements for a virtual machine to increase entropy in a computing environment. At least one virtual machine is deployed on a hypervisor. The hypervisor generates entropy elements based on triggers related to a virtual machine. Identifiers are assigned to the entropy elements based on the triggers and the virtual machine. Use of the entropy elements is restricted for the virtual machine based on the assigned identifiers. The increase in entropy through providing isolated entropy elements for a virtual machine deployed on a hypervisor reduces the success of external attacks on data residing within the computing environment.

Abstract: A method and computer system are provided for distributing a plurality of data portions from a server system to one or more client systems. The method includes receiving one or more first requests at the server, each first request being submitted by a client system and including a portion identifier, wherein a portion identifier is assigned to each data portion; in response to receiving the first request(s), transmitting a list of chunk identifiers to the requesting client systems, wherein the list of chunk identifiers specifies the data chunks whose meta-data includes the portion identifier contained in the first request; and transmitting some or all data chunks of a data chunk library to each of the requesting client systems. At the requesting client system, the client specifically selects the data chunks of the transmitted data chunks which are specified by the received list of chunk identifiers.

Abstract: A virtual machine (VM) migration from a source virtual machine monitor (VMM) to a destination VMM on a computer system. Each of the VMMs includes virtualization software, and one or more VMs are executed in each of the VMMs. The virtualization software allocates hardware resources in a form of virtual resources for the concurrent execution of one or more VMs and the virtualization software. A portion of a memory of the hardware resources includes hardware memory segments. A first portion of the memory segments is assigned to a source logical partition and a second portion is assigned to a destination logical partition. The source VMM operates in the source logical partition and the destination VMM operates in the destination logical partition. The first portion of the memory segments is mapped into a source VMM memory, and the second portion of the memory segments is mapped into a destination VMM memory.

Abstract: Accessing privileged objects in a server environment. A privileged object is associated with an application comprising at least one process resource and a corresponding semi-privileged instruction. The association is filed in an entity of an operating system kernel. A central processing unit (CPU) performs an authorization check if the semi-privileged instruction is issued and attempts to access the privileged object. The CPU executes the semi-privileged instruction and grants access to the privileged object if the operating system kernel has issued the semi-privileged instruction; or accesses the entity if a process resource of the application has issued the semi-privileged instruction to determine authorization of the process resource to access the privileged object.

Abstract: Replacing a source hypervisor by a target hypervisor in a system having a first level hypervisor managing multiple logical partitions to share a set of resources of a server. The source hypervisor enabling at least one source virtual machine to share resources that are assigned to a source logical partition of the multiple logical partitions where the source hypervisor runs, the target hypervisor enabling at least one target virtual machine to share resources that are assigned to a target logical partition of the multiple logical partitions where the target hypervisor runs, wherein memory segments of a physical memory of the server are assigned to the at least one source virtual machine.

Abstract: A method for enabling file system tagging by an application includes creating tag associations for the file system by associating a tag with a file object. The association includes allocating a file association structure (FAS) in the storage device, which FAS has attributes including a pointer to a file handle of the file object and a list of names of tags associated with the file object. Associating the tag with a file object also includes allocating a tag structure for each tag in the file system. The tag structure includes a tag name and file associations for the tag. In response to a request for a read directory operation, the method includes retrieving the tag associations to identify the file object, dynamically assembling a directory entry structure that includes a hierarchical view of tags identified from the tag associations and corresponding file object, and returning the directory entry structure to the application.

Abstract: A method and computer system are provided for distributing a plurality of data portions from a server system to one or more client systems. The method includes receiving one or more first requests at the server, each first request being submitted by a client system and including a portion identifier, wherein a portion identifier is assigned to each data portion; in response to receiving the first request(s), transmitting a list of chunk identifiers to the requesting client systems, wherein the list of chunk identifiers specifies the data chunks whose meta-data includes the portion identifier contained in the first request; and transmitting some or all data chunks of a data chunk library to each of the requesting client systems. At the requesting client system, the client specifically selects the data chunks of the transmitted data chunks which are specified by the received list of chunk identifiers.

Abstract: Embodiments of the present invention address deficiencies of the art in respect to e2e SLA support in a network of both manageable and unmanageable portions and provide a method, system and computer program product for e2e SLA compliance across both managed and unmanaged network segments. In one embodiment of the invention, a method for e2e SLA compliance across both managed and unmanaged network segments can be provided. The method can include identifying both a managed segment and an unmanaged segment of an e2e network for a communications path implicated by an SLA, determining an observed delay for the unmanaged segment of the e2e network, computing from a desired delay for the communications path and the observed delay a differential delay, and constraining the managed segment to meet the differential delay in order to assure meeting the desired delay for the communications path implicated by the SLA.

Abstract: A method and computer system are provided for distributing a plurality of data portions from a server system to one or more client systems. The method includes receiving one or more first requests at the server, each first request being submitted by a client system and including a portion identifier, wherein a portion identifier is assigned to each data portion; in response to receiving the first request(s), transmitting a list of chunk identifiers to the requesting client systems, wherein the list of chunk identifiers specifies the data chunks whose meta-data includes the portion identifier contained in the first request; and transmitting some or all data chunks of a data chunk library to each of the requesting client systems. At the requesting client system, the client specifically selects the data chunks of the transmitted data chunks which are specified by the received list of chunk identifiers.