Abstract: A system includes an application instance or application environment instance and a first cloud service of a trusted cloud provider. The first cloud service is configured to receive an encrypted disk image and to launch the application instance or application environment instance. The system also includes a second cloud service of a first alternate cloud provider, which is configured to launch a first attestation service instance from an attestation disk image that includes a secret and to provide the secret to the application instance or application environment instance.

Abstract: Test scenarios can be generated for decision models on a computer according to some examples. In one example, a system can determine groupings of user input tests for a decision model based on outputs produced by inputting the user input tests into the decision model. Each grouping can include a portion of the user input tests. For each grouping, the system can determine an impact score for each input for each user input test. The system can determine sub-groupings within each grouping based on the impact scores for the inputs. The system can then identify a particular user input test within each sub-grouping. The system can then generate a test scenario file for the decision model based on the particular user input test for use in testing the decision model.

Abstract: A workflow resource manager receives a request to execute a workflow in a cloud computing environment. The workflow resource manager determines that a first set of cloud computing resource requirements associated with the first set of operations for the workflow is satisfied by available cloud computing resources, and responsive to determining that a second set of cloud computing resource requirements associated with a subsequent set of operations for the workflow is not satisfied by the available cloud computing resources, rejects the request to execute the workflow.

Abstract: In various examples disclosed herein, provided is a method for generating metadata to facilitate code generation. The method can include receiving a first file that includes information relating to a first set of components in a first notation syntax and a second file that includes information relating to a second set of components in a second notation syntax. The method can also include cross-validating the first file and the second file to determine that a first reference, in a first component of the first set of components, to a second component of the second set of components is valid. The method can also include generating a first metadata file that includes identification information relating to the first reference. The method can also include generating code to be executed based on the first metadata file, the first file, and the second file.

Abstract: Container image building using dependency container images. First dependency information that identifies a first set of dependencies necessary to generate a first application container image is accessed. A dependency container image index that identifies dependencies contained in one or more dependency container images is accessed. A first dependency container image of the one or more dependency container images is selected based on the dependency container image index and the first dependency information. The first dependency container image lacks at least one dependency identified in the first set of dependencies. A new dependency container image is generated using the first dependency container image and the at least one dependency. A new entry is stored in the dependency container image index that identifies the new dependency container image and each dependency contained in the new dependency container image.

Abstract: Systems and methods for flow rule installation latency testing in software defined networks. In some examples, a hypervisor may deploy a virtual network switch configured to route data to virtualized computing environments executing on the hypervisor. A client process may be deployed in a first container executing on the hypervisor. A server process may be deployed on the hypervisor. The client process may receive a first request to deploy a virtual machine on the hypervisor. The client process may generate first instructions configured to cause the server process to generate a first namespace. The server process may generate the first namespace and may communicatively couple the first namespace to the virtual network switch.

Abstract: Systems and methods for configuration management through information and code injection at compile time. An example method comprises: receiving a source code comprising one or more references to a variable; receiving metadata associated with the source code, wherein the metadata specifies a range of values of the variable; and identifying, in view of the range of values of the variable, a reachable section of the source code.

Abstract: Aspects and features of the present disclosure can reconcile node sharing within a production rule network that is fully coded in a compiled language. As an example, the shared, stateless class can represent constraints shared by the alpha node of a rete network. Code can be post processed to create a shared stateless class defined in memory. When the rule engine is executed and the rule network is produced, the shared stateless class can be referenced to evaluate a constraint shared by a node of the production rule network, reducing the number of classes stored in memory. Garbage collection can be used within the shared stateless class, deleting objects from memory structure when no longer used, further improving storage efficiency.

Abstract: The sizes of image files for deploying software in a computing environment can be reduced according to some examples described herein. In one example, a system can identify base image files that each include at least a predefined amount of dependencies relied upon by target software. The system can then select a particular base image file, from the base image files, having a smallest size as compared to a remainder of the base image files. The system can then build a customized image file from the base image file, where the customized image file is configured for deploying the target software to a computing environment.

Abstract: Seamless integration of multiple applications in tutorials is disclosed herein. In one example, a processor device of a computing device displays, within browser software, a tutorial interface comprising a tutorial guide, wherein the tutorial guide comprises a plurality of task links, and each task link corresponds to an application of a plurality of applications. The processor device receives, using the browser software via a user input device, a first user input indicating a selected task link among the plurality of task links. Responsive to receiving the first user input, the processor device initiates execution of a first application corresponding to the selected task link, wherein the first application executes within the tutorial interface instead of requiring a user to launch and switch between multiple applications in multiple browser tabs or windows.

Abstract: Software and system settings can be migrated between computing environments. In one example, a system can receive a group of software identification modules defining a group of software fingerprints for detecting a group of software components. Each software identification module can include a respective software fingerprint for detecting a respective software component. The system can determine that a source computing environment includes one or more software components from within the group of software components by analyzing the source computing environment using each respective software fingerprint in the group of software fingerprints. The system may then deploy the one or more software components in a target computing environment.

Abstract: Mechanisms for the systematic iterative analysis of unstructured data files are disclosed. A first handler is initiated to analyze a plurality of files. Information about each respective file of the plurality of files analyzed by the first handler is stored in a data structure. The information includes a file identifier that identifies the respective file, a handler identifier that identifies the first handler, and results or a reference to results of an analysis of the respective file by the first handler.

Abstract: A processing device receives a request to perform an operation for an object in a storage system. The request includes a custom path for the object that represents the content of the object. The custom path for the object includes a hash value resulting from a hashing algorithm. The processing device determines a data store that stores the one or more other objects having a respective custom path that corresponds to the custom path in the request. Responsive to determining the data store, the processing device performs the operation for the object using the data store.

Abstract: The technology disclosed herein can be used to evaluate system recovery using emulated production systems. In accordance with one example, the technology can involve accessing state data of a target computing device that is in a production environment, the state data can include a performance measurement of a target computing device; updating a configuration of a computing device to adjust a performance of the computing device to correspond to the performance measurement of the target computing device; introduce, by the processing device, a disturbance to the computing device; determining, by the processing device, a performance of the computing device at a time after the introducing the disturbance; and generating performance data indicating an effect the disturbance has on the computing device.

Abstract: A method includes receiving, an operation from a container to synchronize container data from memory to a file system mounted by the container and determining whether the file system indicates that the operation is to be ignored. The method further includes, in response to determining that the file system indicates that the operation is to be ignored, preventing, by the operating system kernel executing on the processing device, performance of the operation.

Abstract: Systems and methods for providing a container network interface (CNI) specification that has been modified with a set of annotations, a set of operations, and a set of policies to provide network configuration reuse, network configuration replication, and database management (garbage collection) functionality are described. In response to receiving a request to initiate a function, whether the function is to be reused or replicated may be determined. In response to determining that the function is to be reused, calling a container network interface (CNI) plugin with a first operation that decouples database functions from network functions, so that the database can cache and reuse a network configuration generated for the function. In response to determining that the function is to be replicated, calling the CNI plugin with a second operation to create the network configuration and generate and store a template of the network configuration in the database.

Abstract: Embodiments relate to systems and methods for cloud-based brokerage exchange of software entitlements. A user can host on-premise software applications on physical hardware, and extend those applications to the cloud based on a set of entitlements developed in conjunction with the vendor(s) of the software. The set of entitlements enjoyed by the user and/or offered by the vendor(s) can be exposed to a bidding marketplace via a brokerage engine and associated bidding service, which can be hosted on a Web site. Other users, and/or other vendors interesting in consuming or supplying premise or loud-based images of the software, or related services, can be to obtain or supply those resources through the brokerage service. The license terms including usage rates, number of users or images, security constraints, and/or other terms of software delivery and usage can be recorded in a dynamically updated entitlement database.

Abstract: An example system includes a memory, a processor in communication with the memory, and a supervisor. The supervisor is configured to allocate a memory space in the memory to a workload executing on the processor. The supervisor is configured to store data written by the workload as dirty memory in the memory space at least until the data is written back to a data storage. Based on a type of the workload being a first type, the supervisor is configured to trigger write back of at least a portion of the dirty memory into the data storage in response to the dirty memory exceeding a threshold level. Based on the type of the workload being a second type, the supervisor is configured to delay write back of the dirty memory into the data storage in response to the dirty memory exceeding the threshold level.

Abstract: Methods and systems for improved integration functions for applications are provided. In one embodiment, a method is provided that includes receiving a request to execute an application. The request may specify a primary container image for the application and a secondary container image for an integration function used by the application. A primary container may be created for execution of the primary container image and a secondary container image separate from the primary container may be created for execution of the secondary container image. The primary and secondary containers may be executed to implement the application.

Abstract: A host with a memory, which stores a guest, a filesystem cache, and a proxy cache, has a filesystem manager executing on a processor that receives a first request to locate a file in a first filesystem. In response to receiving the first request, a filesystem proxy in the proxy cache associated with the first filesystem is queried. The first request is responded to based on metadata retrieved from the filesystem proxy. A second request is received to modify the file. In response to receiving the second request, the first filesystem is instantiated in the filesystem cache, where a second filesystem is evicted from the filesystem cache to reclaim storage capacity for the first filesystem. The file in the first filesystem is modified.