Abstract: A system and method of Byzantine fault prevention in mesh networks. The method includes detecting a consensus operation among a plurality of node devices of a network for a blockchain operation of a blockchain within the network, wherein each consensus operation includes a vote transmission associated with the blockchain within the network, wherein detecting the consensus operation includes examining an approval status of a particular vote transmission associated with a particular consensus operation. The method includes controlling, by a processing device responsive to detecting the consensus operation, content of a proxy vote transmission provided by a proxy device corresponding to at least one node device of the plurality of node devices by setting the content of the proxy vote transmission based on the approval status of the particular vote transmission. The method includes causing the proxy device to transmit the proxy vote transmission.

Abstract: A server device that is configured to provide service to client devices in a second geographic zone determines that a client device is transitioning from a first geographic zone to the second geographic zone. The server device receives a client device manifest that identifies a configuration of the client device. Based on the client device manifest, the server device determines that the configuration of the client device does not match a policy of the second geographic zone. The server device sends to the client device instructions that, if performed by the client device, will cause the configuration of the client device to match the policy of the second geographic zone.

Abstract: A server device that is configured to provide service to client devices in a second geographic zone determines that a client device is transitioning from a first geographic zone to the second geographic zone. The server device receives a client device manifest that identifies a configuration of the client device. Based on the client device manifest, the server device determines that the configuration of the client device does not match a policy of the second geographic zone. The server device sends to the client device instructions that, if performed by the client device, will cause the configuration of the client device to match the policy of the second geographic zone.

Abstract: Systems and methods providing a parallel booting operating system. In one implementation, a primary operating system is booted using a primary operating system image residing in a first disk partition. The primary operating system includes a base operating system and provides a first service. A secondary operating system is booted in parallel to the primary operating system. The secondary operating system is booted using a secondary operating system image residing in a second disk partition. The secondary operating system can include a copy of the base operating system, and can provide the first service and a second service. Responsive to a triggering event, the primary operating system is switched to the secondary operating system.

Abstract: Edge nodes in distributed computing environments can be updated according to some aspects described herein. For example, a first node in the distributed computing environment can receive an update request from a management node. The update request can include an update file for updating a second node. In response to receiving the update request, the first node can generate a first partition and a second partition, containing the update file, within the first node. Additionally, the first node can generate a network tunnel between the first node and the second node. The first node can mount a file system for the second node onto the first partition and a copy of the file system onto the second partition of the first node via the network tunnel. The first node also can update the file system in the second partition using the update file to generate an updated file system.

Abstract: Systems and methods for automated targeted patching of a target system. In one embodiment the present disclosure includes a method for compiling binary files from a source code package; running a diff tool to determine differences between the binary files and an application already installed on a target system; generating, based on the determined differences, a patch that includes at least one file to be installed on the target system; generating, a mapping file, the mapping file including information on where the at least one file will be installed on the target system; combining, the mapping file and the patch into a patch package; and installing the patch package on the target system.

Abstract: Deriving a container from a package set is disclosed. Package set metadata that identifies a plurality of packages to be included in a container image based on a package set is accessed. A container configuration file referencing the plurality of packages is generated based at least in part on the package set metadata. The container configuration file includes one or more commands complying with a container builder syntax that are implementable by a container builder to generate a container image including the plurality of packages. The container configuration file is stored in a memory of a computer system.

Abstract: Quantum version control (QVC) services are disclosed that manage, track, and archives updates to the contents of a quantum file (QF). The QVC service tracks versions of a QF as updates are made to the QF, assigns a unique identifier to each version of the QF, and generates a version history for the QF. The QVC service enables a recovery of each version of the QF within the version history. The version history is encoded in metadata for the QF. The metadata for the QF enables the access of any version of the QF in the QF's version history. A set of qubits is prepared, such that quantum states of the set of qubits are in a superposition. The superposition of the quantum states of the set of qubits simultaneously encodes each version of the version history.

Abstract: Embodiments of the present disclosure include a processing device that, responsive to detecting an unavailability of a first node device of a plurality of node devices of a network, activates a proxy device to correspond to the first node device, detects a consensus operation among the plurality of node devices, wherein the consensus operation comprises a plurality of vote transmissions within the network, and controls the proxy device to provide a proxy vote transmission as part of the consensus operation.

Abstract: Systems and methods are disclosed for a consensus-based node retirement in a mesh network. An example system includes: a mesh network comprising a plurality of nodes, including a first node, a second node, and a mesh controller; a processor; and memory. The memory may store instructions that, when executed by the one or more processors, may cause the mesh controller to: distribute a mesh membership contract to the mesh network, the mesh membership contract comprising membership rules; receive, from the first node, based on a performance status of the second node, an identification of a deficiency in a performance metric of the second node, wherein the deficiency is based on a failure of the second node to satisfy a membership rule; and remove, after a consensus by the mesh network for the identified deficiency, one or more capabilities of the second node from the mesh network.

Abstract: An application programming interface (API) gateway device receives an API request from a client device, the API gateway to provide access to a plurality of services provided by a plurality of compute nodes. A cluster manifest is created based on metadata associated with the API request and characteristics of the plurality of services, the cluster manifest identifying a logical view of a subset of the plurality of services provided by a subset of the plurality of compute nodes. The API request is routed to one of the subset of the plurality of services based on the cluster manifest.

Abstract: A gateway device receives a request from a client device, the gateway to provide access to a plurality of services provided by a plurality of compute nodes. A manifest is created based on metadata associated with the request and characteristics of the plurality of services, the manifest identifying a logical view of a subset of the plurality of services provided by a subset of the plurality of compute nodes. The request is routed to one of the subset of the plurality of services based on the manifest.

Abstract: Embodiments of the present disclosure involve determining that a first subsequent version of a plurality of subsequent versions of a package is available, a repository is generated and a delta difference between a current version of the package and the first subsequent version of the package is committed to the repository. For each further subsequent version of the plurality of subsequent version of the package that is determined to be available, a delta difference between the further subsequent version of the package and an immediately preceding version of the package is generated and committed to the repository. In this way, a volume of discreet repositories that includes the delta difference history between each of the existing versions of the package is maintained and can be accessed to enable a client to build a subsequent (or previous) version of a package even if the current version they are running is multiple versions behind (or ahead).

Abstract: Described is a system and method that includes executing, by a processing device, a data risk mitigation service (DRMS), to monitor, for each node of a plurality of nodes in a mesh network, at least one of metadata indicating a health state of a node or a call for help from the node. The method includes determining, by the DRMS, whether the node is in an unstable state in view of the metadata or the call for help from the node. The method includes in response to determining that the node is in the unstable state, rerouting incoming data of the node and evacuating data stored in the node.

Abstract: Application lifecycle management based on real-time resource usage. A first plurality of resource values that quantify real-time computing resources used by a first instance of an application is determined at a first point in time. Based on the first plurality of resource values, one or more utilization values are stored in a profile that corresponds to the application. Subsequent to storing the one or more utilization values in the profile, it is determined that a second instance of the application is to be initiated. The profile is accessed, and the second instance of the application is caused to be initiated on a first computing device utilizing the one or more utilization values identified in the profile.

Abstract: Methods, systems, and computer program products of this disclosure provide a staged transmission service (e.g., a data transfer service for downloading or uploading) at a transfer node to a device in motion (DIM) wirelessly paired to the transfer node. When a DIM accepts a download task, the download node paired with the DIM receives a notice from the DIM of the acceptance. The download node retrieves, from a data repository, a dataset specified by the download task. A processing device of the download node may stage the dataset in a staged download service in preparation to transfer the dataset to the DIM. The processing device may initiate a transfer of at least a portion of the dataset to the DIM responsive to one or more data transfer properties satisfying a predefined set of conditions. The data transfer properties are determined based on a location and a movement of the DIM.

Abstract: An application programming interface (API) gateway device receives an API request from a client device, the API gateway to provide access to a plurality of services provided by a plurality of compute nodes. A cluster manifest is created based on metadata associated with the API request and characteristics of the plurality of services, the cluster manifest identifying a logical view of a subset of the plurality of services provided by a subset of the plurality of compute nodes. The API request is routed to one of the subset of the plurality of services based on the cluster manifest.

Abstract: Software builds can be constructed according to previously recorded software repository metadata. For example, a computing device can record, by a first application programming interface, metadata for a software repository at various times. The metadata can include a timestamp indicating a time that the metadata was recorded. The computing device can receive a metadata request for metadata for the software repository at a particular time. The first application programming interface can determine a latest timestamp that precedes the particular time. The computing device can provide the client device with access to the metadata associated with the latest timestamp for use in producing a software build having characteristics of the metadata at the particular time.

Abstract: Processing logic may provide a first container having a first software version. Processing logic may create a second container having a second software version within the first container. Processing logic may replace the first container with the second container, in response to testing of the second container satisfying one or more criteria.

Abstract: A system and method of protecting communication in a mesh network of nodes. The method including receiving a request from a joiner node of the mesh network to join the mesh network. The method including validating permissions for the joiner node responsive to receiving the request. The method including acquiring one or more dictionary objects based on the permissions. The method including granting, by a control node of a mesh network, access rights for the joiner node to join the mesh network by transmitting an access rights message comprising the one or more dictionary objects to the joiner node, wherein the access rights message causes the joiner node to locally store the one or more dictionary objects and use the one or more dictionary objects when communicating with one or more nodes of the mesh network.