Abstract: A system can instantiate a first container and a sidecar container on a first node. The system can transmit configuration data from the first container to the sidecar container. The system can then initiate a migration of the sidecar container from the first node to a second node, where the second node has a different computer architecture than the first node. The second node can provide the configuration data from the sidecar container to a second container, for example after the migration is complete.

Abstract: Described is a system and method that includes executing, by a processing device, a data risk mitigation service (DRMS), to monitor, for each node of a plurality of nodes in a mesh network, at least one of metadata indicating a health state of a node or a call for help from the node. The method includes determining, by the DRMS, whether the node is in an unstable state in view of the metadata or the call for help from the node. The method includes in response to determining that the node is in the unstable state, rerouting incoming data of the node and evacuating data stored in the node.

Abstract: Access requests for policy-based access control systems can be managed according to some examples. In one example, a system can receive, from a client device, a first access request for accessing a particular resource. The system can determine a first response approving or denying the first access request based on an access control policy. The system can store a data entry indicating the first response to the first access request. The system can set a flag to indicate that a future access request for the particular resource is to be handled using the data entry. Subsequent to setting the flag, the system can receive a second access request from the client device for accessing the particular resource. Based on determining that the flag is set, the system can determine a second response to the second access request based on the data entry rather than the access control policy.

Abstract: A system can receive a request for establishing a communication channel between a first node executing a first operating system and a second node executing a second operating system, the second operating system being different from the first operating system. The system can obtain specification data configured for deploying a container that includes the first operating system and communication software. The system can, in response to receiving the request, transmit the specification data to the second node. The second node can deploy the container with the first operating system and the communication software based on the specification data. The communication software can establish the communication channel between a first instance of the first operating system executing on the first node and a second instance of the first operating system executing in the container.

Abstract: Systems and methods providing a parallel booting operating system. In one implementation, a primary operating system is booted using a primary operating system image residing in a first disk partition. The primary operating system includes a base operating system and provides a first service. A secondary operating system is booted in parallel to the primary operating system. The secondary operating system is booted using a secondary operating system image residing in a second disk partition. The secondary operating system can include a copy of the base operating system, and can provide the first service and a second service. Responsive to a triggering event, the primary operating system is switched to the secondary operating system.

Abstract: A seed, a computing resource characteristic, and a computing resource permitted condition corresponding to the computing resource characteristic are received. A request is received from a requestor to implement a computing element that utilizes the computing resource characteristic. The request includes a computing resource value for the computing resource characteristic. A requestor token is received from the requestor. A server token is generated using the first seed. It is determined that the requestor token matches the server token, and that the computing resource value meets the computing resource permitted condition. In response, the request to implement the computing element is granted.

Abstract: Embodiments of the present disclosure include a processing device that, responsive to detecting an unavailability of a first node device of a plurality of node devices of a network, activates a proxy device to correspond to the first node device, detects a consensus operation among the plurality of node devices, wherein the consensus operation comprises a plurality of vote transmissions within the network, and controls the proxy device to provide a proxy vote transmission as part of the consensus operation.

Abstract: A system and method of performing a rebase action to image layers of a container. The method includes receiving a first indication that an image update of a first container is available. The first container includes a base layer and one or more first layers. The method includes updating, in response to receiving the first indication, the base layer based on the image update to create an updated base layer. The method includes rebasing, by a processing device using the updated base layer, the one or more first layers to create one or more rebased first layers. The method includes the storing the one or more rebased first layers in a repository to be reused to update a second container.

Abstract: Generating filesystem images with integrated containers is disclosed herein. In one example, a processor device obtains a filesystem tree comprising a plurality of filesystem files, and also obtains a container image comprising a plurality of container files. Based on the filesystem tree and the container image, the processor device generates a filesystem image that comprises the filesystem tree and the plurality of container files. The processor device then stores the filesystem image on a persistent data store.

Abstract: Systems and methods are disclosed for a consensus-based node retirement in a mesh network. An example system includes: a mesh network comprising a plurality of nodes, including a first node, a second node, and a mesh controller; a processor; and memory. The memory may store instructions that, when executed by the one or more processors, may cause the mesh controller to: distribute a mesh membership contract to the mesh network, the mesh membership contract comprising membership rules; receive, from the first node, based on a performance status of the second node, an identification of a deficiency in a performance metric of the second node, wherein the deficiency is based on a failure of the second node to satisfy a membership rule; and remove, after a consensus by the mesh network for the identified deficiency, one or more capabilities of the second node from the mesh network.

Abstract: Systems and methods providing a layered operating system in a device-limited environment. In one implementation, a plurality of functionalities available to a device are identified. The device comprises a base operating system. Each functionality is associated with a corresponding operating system layer. A triggering event associated with a functionality of the plurality of functionalities is detected. Responsive to detecting the triggering event, the operating system layer corresponding to the functionality is added to the base operating system.

Abstract: A system and method of performing a version control in a mesh network of nodes is disclosed. The method includes executing, by a processing device, a mesh version control life cycle service (VCLS) to maintain a manifest of a mesh network. The manifest comprises, for each node in the mesh network, a history of one or more services executing on a node and a service version for each service of the one or more services. The method includes performing a version control of the mesh network based on the manifest, comprising sending a message to a first node of the mesh network to instruct the first node to change a version of a service executing on the first node from a first version to a second version.

Abstract: Described is a system and method that includes executing, by a processing device, a staging creation service (SCS) to monitor a development of an application in a development environment of the application. The method includes removing, by the SCS, a production cluster of a plurality of production clusters from a production cluster pool in response to one or more development tests of the application having passed in the development environment. Each production cluster of the plurality of production clusters comprises a production environment of the application. The method includes assigning, by the SCS, the production cluster to be a staging cluster comprising a staging environment of the application to perform one or more staging tests of the application.

Abstract: Systems and methods providing mesh network reconfiguration for service reinforcement. In one implementation, a value of a workload metric associated with a first communication device in a first zone of a mesh network is identified. The first communication device is running a first service. Responsive to determining that the value of the workload metric satisfies a defined condition, a second communication device in a second zone of the mesh network is identified. The capacity of the second communication device satisfies a capacity criterion. The first service is started on the second communication device.

Abstract: Embodiments of the present disclosure provide techniques for peer to peer sharing of files in a mobile environment. In response to coming within communication range of a second device, a processing device may determine whether the second device will remain in communication range with a first device for at least a threshold amount of time. An amount of data that can be transferred between the first and second devices during a transfer window with the second device may be determined. Package manifests of the first and second devices may be compared to determine a set of packages of the first device that need to be updated. A number of chunks for a first package of the set of packages may be received from the second device, the number of chunks based on the amount of data that can be transferred between the first and second devices during the transfer window.

Abstract: Embodiments of the present disclosure relate to systems and methods for creating logical groups of packages by tagging individual packages with a tag associated with metadata corresponding to packages that are part of the group. A group of packages may be defined from a plurality of packages that make up an application ecosystem using the tag. A command to perform a first operation of a set of operations performed by the package manager on the group of packages may be provided to a package manager, wherein the command may reference the tag and wherein the package manager is modified to perform each of the set of operations on one or more of the plurality of packages simultaneously. The first operation may be performed by the package manager on the group of packages simultaneously using the metadata to identify each package that is part of the group.

Abstract: A system and method of using wireless charging to redistribute power resources within a mesh network. The method includes monitoring, by a processing device of a control node of the mesh network, a plurality of nodes of the mesh network to obtain a power distribution (PD) report comprising a plurality of battery levels associated with the plurality of nodes. The method includes identifying a first node of the mesh network having a first battery in a first deficit power state based on the PD report. The method includes identifying a second node of the mesh network having a second battery in a second surplus power state based on the PD report. The method includes transmitting a message to the second node of the mesh network to cause the second node to wirelessly charge the first battery of the first node.

Abstract: A method of managing updates in a mesh network includes determining that an update is available for a first computing node of a mesh network and identifying one or more characteristics of the first computing node of the mesh network. The method further includes determining an update strategy for providing the update to the first computing node in view of the one or more characteristics of the first computing node and providing the update to the first computing node in view of the update strategy.

Abstract: A method includes determining characteristics of nodes of a mesh network and selecting one or more nodes of the mesh to receive a payload in view of the characteristics of the plurality of nodes of the mesh network. The method further includes pushing the payload to the one or more selected nodes of the mesh network, wherein the one or more nodes propagate the payload to remaining nodes of the mesh network.

Abstract: Processing logic may determine that a service is absent among a plurality of nodes within a zone of a mesh network. Processing logic may nominate one of the plurality of nodes to run the service. Processing logic may request a consensus among the plurality of nodes within the zone of the mesh network to confirm the nomination. Processing logic may, in response to receiving confirmation of the nomination by the plurality of nodes in the zone of the mesh network, push the service to the one of the plurality of nodes to run the service.