Abstract: Systems and methods for determining a topology of an application deployment on a distributed system can include receiving multiple traces of requests within an application, where the application includes multiple components. They can also include determining a number of times that each span between the components is traversed by a trace and associating each span with a corresponding weight reflecting the number of times that the span is traversed. Such systems and methods can further include selecting a deployment scenario based on the respective weights of each of the spans.

Abstract: A first command is received from a workload, by a host system executing a nested container storage interface (CSI) driver, to create a persistent volume. The nested CSI driver converts the first command used by the workload to create the persistent volume to a second command used by the host system to increase a capacity of a previously generated persistent volume allocated to the workload. The second command is transmitted to an undercluster CSI driver of the host system, wherein the second command causes the undercluster CSI driver to increase the capacity of the previously generated persistent volume.

Abstract: A system and method for prepopulating a container image repository for continuous integration (CI/CD) environments using volumes and/or layered images. The method includes executing, by the processing device, a container image that is configured as an image repository mirror for a remote server. The method includes executing, by the processing device, an application to cause the application to provide a request for one or more images to the container image. The method includes determining, by the container image, an absence of the one or more images in the container image. The method includes retrieving, by the container image responsive to determining the absence of the one or more images, the one or more images from the remote storage. The method includes providing, by the container image, the one or more images retrieved from the remote storage to the application.

Abstract: A method for providing teleportation services includes receiving, by a computing device, a first signal. The first signal indicates a request for a teleportation event between a first quantum computing system (QCS) and a second QCS. A first set of qubits is associated with the first QCS. A second set of qubits is associated with the second QCS. In response to receiving the first signal, the computing device causes an allocation of a first qubit of the first set of qubits for the teleportation event. In response to receiving the signal, the computing device causes an allocation of a second qubit of the second set of qubits for the teleportation event. The computing device receives a second signal that indicates a successful completion of the teleportation event. In response to receiving the second signal, the computing system causes a deallocation of the first qubit of the first set of qubits.

Abstract: Processing logic may obtain a configuration file of each of one or more proxies. Processing logic may parse the configuration file of each of the one or more proxies to determine one or more connections for each of the one or more proxies as defined by the configuration file. Each connection may support incoming or outgoing communication for each of the one or more proxies. Processing logic may generate a map that includes the one or more connections for each of the one or more proxies.

Abstract: A system includes a guest memory having guest physical pages (“GPPs”) that includes loan pages having a fixed quantity, a host memory, a processor in communication with the memory, and a virtual machine monitor (“VMM”). The VMM is configured to track a respective state (inflated or deflated) for each respective GPP. Additionally, the VMM is configured to track a respective status (in-use or unused) of each loan page, determine that each respective loan page is in-use, un-assign a first loan page from a corresponding GPP, discard the first loan page thereby changing the first loan page from in-use to unused, and assign the unused first loan page to a first GPP that is inflated, such that the first loan page's status updates to in-use. Each respective GPP having an inflated state is temporarily backed by the fixed quantity of loan pages.

Abstract: Techniques for configuring a packet session are disclosed. An example method includes receiving, at a network function, a packet from a virtual connection device. The method also includes identifying, by the network function, an action to perform on the packet and modifying the header based on the action to create a modified packet with a modified header. The method also includes copying the modified packet from the network function to the virtual connection device for the virtual connection device to perform the action on the modified packet based on the modified header. The method also includes configuring, by a processing device executing the network function, the virtual connection device to perform the action on subsequent packets of the packet session. The virtual connection device performs the action on the subsequent packets without copying the subsequent packets to the network function.

Abstract: The technology disclosed herein provides a cryptographic key wrapping system for verifying device capabilities. An example method may include: accessing, by a processing device, a wrapped key that encodes a cryptographic key; executing, by the processing device in a trusted execution environment, instructions to derive the cryptographic key in view of the wrapped key, wherein the executing to derive the cryptographic key comprises a task that consumes computing resources for a duration of time; using the cryptographic key to access program data; executing, by the processing device, the program data, wherein the executed program data evaluates a condition related to the duration of time; and transmitting a message comprising an indication of the evaluated condition.

Abstract: The technology disclosed herein enables a processor to receive, at a distribution unit, a first content request from a distribution electronic control unit (ECU) associated with a vehicle, wherein the first content request reflects one or more filtering criteria, determine whether a content item that satisfies the filtering criteria is stored on a storage device of the distribution unit, responsive to determining that the content item that satisfies the filtering criteria is not stored on the storage device of the distribution unit: send, to a managed content delivery service, a second content request, wherein the second content request includes the filtering criteria, and receive, from the managed content delivery service, the content item that satisfies the filtering criteria, and send the content item that satisfies the filtering criteria to the distribution ECU associated with the vehicle.

Abstract: A query request for data associated with a plurality of services executed by a plurality of host systems is received. A type of query associated with the query request is identified. A subset of the plurality of services comprising data associated with the type of query is identified using a query routing data structure, wherein the query routing data structure is received from a gateway system that generates the query routing data structure in view of receiving corresponding service schemas from the plurality of services. The query request is transmitted to the subset of the plurality of services identified using the query routing data structure.

Abstract: A quantum file management system is disclosed. A quantum file manager receives, from a requestor, a request to access a quantum file that comprises a plurality of qubits. The quantum file manager determines, for each respective qubit of the plurality of qubits, a qubit identifier of the respective qubit. The quantum file manager sends, to the requestor in response to the request, information that includes the qubit identifier for each respective qubit of the plurality of qubits.

Abstract: Systems, methods, and machine-readable instructions stored on machine-readable media are disclosed for copying a first permission of a file to a second permission of the file, wherein the file is stored on a host file system. The first permission is changed to a third permission. A request is received to access the file from a container file system. In response to the request and before providing the container file system with access to the file, changing the third permission to the second permission. The file is provided to the container file system based on the second permission.

Abstract: The present disclosure provides new and innovative systems and methods for publishing standardized data in a variety of formats. In an example, a computer-implemented method includes obtaining source data, wherein the source data is in a standardized format, obtaining target platform data comprising a target platform address and a target format, generating a directory structure based on the source data and the target format, generating target data based on the source data and the target format, wherein the target data is in the target format, packaging the target data in the directory structure, generating instructions based on the target platform data and the packaged data, and transmitting the packaged data and the instructions to a third-party server system identified by the target platform address.

Abstract: Systems and methods for managing host virtual addresses in a system call are disclosed. In one implementation, a processing device may receive, by a supervisor managing a first application), a system call initiated by the first application, wherein a first parameter of the system call specifies a memory buffer virtual address of the first application and a second parameter of the system call specifies the memory buffer virtual address of the second application. The processing device may also translate the memory buffer virtual address of the first application to a first physical address and may translate the memory buffer virtual address of the second application to a second physical address. The processing device may further compare the first physical address to the second physical address and responsive to determining that the first physical address matches the second physical address, the processing device may execute the system call using the memory buffer virtual address of the second application.

Abstract: A system includes a memory, an application TEE instance, an escrow TEE instance, and a server. The server is configured to receive a request to start the application TEE instance and launch the escrow TEE instance provisioned with a secret. The secret is initially accessible from a first location until the escrow TEE instance is provisioned and accessibility to the secret in the first location is restricted after provisioning the escrow TEE instance with the secret. The escrow TEE instance is configured to obtain a cryptographic measurement associated with the application TEE instance, validate the application TEE instance, and provide the secret from a second location to the application TEE instance.

Abstract: A data query for data is received that is associated with a first data node managed by a first executable service and a second data node managed by a second executable service. The data query comprises a subquery that is directed to the second executable service for access to the second data node. From the data query, a selection set is determined. The selection set includes the first data node and the second data node. In view of the selection set, a batch access request is generated to the second executable service that retrieves data for the subquery from the second data node in a single access request.

Abstract: A system includes a memory, a processor in communication with the memory, a hypervisor, and a trusted execution environment (TEE). The TEE is provisioned with a workload and includes an introspection module. The introspection module is configured to execute an introspection command according to an introspection policy. The introspection command is configured to validate at least one memory access associated with the workload. The introspection module is also configured to determine a status of a result of the introspection commands, wherein the status is one of a failure status and a success status.

Abstract: Improved systems and methods for hot reloading software applications are provided. In one embodiment, a method is provide that includes detecting an update for a software application. It may be determined whether the update represents a change to a class structure of the software application. If the update does not represent a class change, framework metadata for a class corresponding to the update may be replaced. If the update represents a class change, a runtime executable unit of the software application may be removed and replaced. After replacing the framework metadata and/or the runtime executable unit, the software application may be executed according to the update.

Abstract: Embodiments of the present disclosure include a processing device that, responsive to detecting an unavailability of a first node device of a plurality of node devices of a network, activates a proxy device to correspond to the first node device, detects a consensus operation among the plurality of node devices, wherein the consensus operation comprises a plurality of vote transmissions within the network, and controls the proxy device to provide a proxy vote transmission as part of the consensus operation.

Abstract: A system includes a memory and a processor. The memory is in communication with the processor and configured to initialize a secure interface configured to provide access to a virtual machine (VM) from a device, where the VM is associated with a level of security. A buffer is allocated and associated with the secure interface, where the level of security of the VM indicates whether the device has access to guest memory of the VM via the buffer. The buffer is then provided to the device. Inputs/outputs (I/Os) are sent between the device and the VM using the secure interface.