Abstract: A system includes a memory, a processor in communication with the memory, a hypervisor, and a trusted execution environment (TEE). The TEE is provisioned with a workload and includes an introspection module. The introspection module is configured to execute an introspection command according to an introspection policy. The introspection command is configured to validate at least one memory access associated with the workload. The introspection module is also configured to determine a status of a result of the introspection commands, wherein the status is one of a failure status and a success status.

Abstract: Systems and methods for managing host virtual addresses in a system call are disclosed. In one implementation, a processing device may receive, by a supervisor managing a first application), a system call initiated by the first application, wherein a first parameter of the system call specifies a memory buffer virtual address of the first application and a second parameter of the system call specifies the memory buffer virtual address of the second application. The processing device may also translate the memory buffer virtual address of the first application to a first physical address and may translate the memory buffer virtual address of the second application to a second physical address. The processing device may further compare the first physical address to the second physical address and responsive to determining that the first physical address matches the second physical address, the processing device may execute the system call using the memory buffer virtual address of the second application.

Abstract: A data query for data is received that is associated with a first data node managed by a first executable service and a second data node managed by a second executable service. The data query comprises a subquery that is directed to the second executable service for access to the second data node. From the data query, a selection set is determined. The selection set includes the first data node and the second data node. In view of the selection set, a batch access request is generated to the second executable service that retrieves data for the subquery from the second data node in a single access request.

Abstract: Embodiments of the present disclosure include a processing device that, responsive to detecting an unavailability of a first node device of a plurality of node devices of a network, activates a proxy device to correspond to the first node device, detects a consensus operation among the plurality of node devices, wherein the consensus operation comprises a plurality of vote transmissions within the network, and controls the proxy device to provide a proxy vote transmission as part of the consensus operation.

Abstract: Power consumption can be reduced by preventing a memory image from being destaged to a nonvolatile memory device. For example, a system can determine, subsequent to a computing device being in a first power mode and having a memory image stored in a first nonvolatile memory device that performs a caching function, that the computing device is in a second power mode that is a higher power mode than the first power mode. The system can, in response to determining that the computing device is in the second power mode, generate a first command to store the memory image in a volatile memory device and prevent the memory image from being stored in a second nonvolatile memory device. The system can, in response to generating the first command, store the memory image in the volatile memory device.

Abstract: Improved systems and methods for hot reloading software applications are provided. In one embodiment, a method is provide that includes detecting an update for a software application. It may be determined whether the update represents a change to a class structure of the software application. If the update does not represent a class change, framework metadata for a class corresponding to the update may be replaced. If the update represents a class change, a runtime executable unit of the software application may be removed and replaced. After replacing the framework metadata and/or the runtime executable unit, the software application may be executed according to the update.

Abstract: A method and system for providing shareable and cross-application non-destructive content processing pipelines. A set of non-destructive edits for a content item is received via a first content processing application, wherein the set of non-destructive edits includes a series of operations performed by a user on the content item. The set of non-destructive edits is stored in a shareable format. The set of non-destructive edits is exported in the shareable format, wherein the set of non-destructive edits is importable by a second content processing application different from the first content processing application.

Abstract: A system includes a memory and a processor. The memory is in communication with the processor and configured to initialize a secure interface configured to provide access to a virtual machine (VM) from a device, where the VM is associated with a level of security. A buffer is allocated and associated with the secure interface, where the level of security of the VM indicates whether the device has access to guest memory of the VM via the buffer. The buffer is then provided to the device. Inputs/outputs (I/Os) are sent between the device and the VM using the secure interface.

Abstract: A method includes, with a computing system, storing a first container image. The first container image may be defined by a first set of layers. The method further includes, with the computing system, storing a second container image, the second container image defined by a second set of layers. The second set of layers has at least one file in common with a file in the first set of layers. The method further includes, with the computing system, performing an analysis of the first set of layers and the second set of layers. The method further includes, with the computing system, using the analysis to create a new set of layers such that both the first container image and the second container image can be derived from the new set of layers.

Abstract: A method includes creating, by a hypervisor executing on a processing device, a first virtual machine nested within a second virtual machine. The method further includes identifying a context of the second virtual machine and providing, to a context of the first virtual machine, a parent context pointer indicating the context of the second virtual machine.

Abstract: A system and method of selectively distributing blocks of a quantum assembly language (QASM) file over resources of a quantum computing environment to optimize performance of the quantum computing environment. The method includes receiving a quantum assembly language (QASM) file comprising a plurality of blocks. The method includes calculating a plurality of complexity scores each indicative of a degree of complexity to process a respective block of the plurality of blocks. The method includes calculating a plurality of risk scores associated with a pool of quantum computers, each risk score is indicative of a likelihood of a respective quantum computer of the pool of quantum computers entering an undesired state responsive to processing a respective block of the plurality of blocks. The method includes selectively distributing, based on the plurality of risk scores, each of the plurality of blocks to a single quantum computer of the pool of quantum computers.

Abstract: Disclosed systems and methods initiate an instance of an isolated application on a node computing device. The systems determine that the isolated application requests exclusive access to a block storage resource, create a control group associated with the block storage resource to provide access to members of the control group and set an access rate limit to zero for non-members of the control group, and assig the isolated application to the control group.

Abstract: Examples relating to simulating quantum services are provided. In one example, a quantum service definition file comprising a plurality of instructions is obtained. One or more instruction sets are determined from the plurality of instructions. Each instruction set is communicated to a plurality of quantum simulator nodes. Each quantum simulator node is associated with a different configuration profile for a quantum computing device. For each instruction set, a result set is obtained from each quantum simulator node. The result set includes data indicative of one or more performance metrics associated with an execution of the instruction set by a quantum computing device. A composite result set is determined based at least in part on the result set from each quantum simulator node.

Abstract: Systems and methods are disclosed for a consensus-based node retirement in a mesh network. An example system includes: a mesh network comprising a plurality of nodes, including a first node, a second node, and a mesh controller; a processor; and memory. The memory may store instructions that, when executed by the one or more processors, may cause the mesh controller to: distribute a mesh membership contract to the mesh network, the mesh membership contract comprising membership rules; receive, from the first node, based on a performance status of the second node, an identification of a deficiency in a performance metric of the second node, wherein the deficiency is based on a failure of the second node to satisfy a membership rule; and remove, after a consensus by the mesh network for the identified deficiency, one or more capabilities of the second node from the mesh network.

Abstract: A request for a traffic topology of a service mesh including traffic between multiple services that utilize multiple communication protocols is received. In response to receiving the request, metric data associated with the traffic between the multiple services is acquired. The traffic topology of the traffic between the multiple services is generated using the metric data, the traffic topology illustrating corresponding traffic for one or more of the multiple communication protocols and one or more metrics associated with the corresponding traffic.

Abstract: Quantum entanglement protection is disclosed. An entanglement checker receives, from a requestor, a request associated with a first qubit. In response to receiving the request, the entanglement checker accesses qubit entanglement information that identifies an entanglement status of the first qubit. The entanglement checker determines, based on the qubit entanglement information, the entanglement status of the first qubit, and sends a response to the requestor based on the entanglement status.

Abstract: The examples disclosed herein provide classifying quantum errors. In particular, a classical computing system receives quantum error data from a first quantum computing device of a quantum computing system. The quantum error data includes error identification data and error correction data. The error identification data is associated with occurrence of a quantum error. The error correction data is associated with a corrective action taken by the first quantum computing device to correct the quantum error. The classical computing system determines an error type of the quantum error of the error identification data. The classical computing system associates an error classification tag with the quantum error data. The error classification tag identifies a quantum error type. The classical computing system sends the error classification tag to the first quantum computing device. The classical computing system processes a quantum computing request based on the error classification tag.

Abstract: Described is a system and method that includes executing, by a processing device, a data risk mitigation service (DRMS), to monitor, for each node of a plurality of nodes in a mesh network, at least one of metadata indicating a health state of a node or a call for help from the node. The method includes determining, by the DRMS, whether the node is in an unstable state in view of the metadata or the call for help from the node. The method includes in response to determining that the node is in the unstable state, rerouting incoming data of the node and evacuating data stored in the node.

Abstract: Application lifecycle management based on real-time resource usage. A first plurality of resource values that quantify real-time computing resources used by a first instance of an application is determined at a first point in time. Based on the first plurality of resource values, one or more utilization values are stored in a profile that corresponds to the application. Subsequent to storing the one or more utilization values in the profile, it is determined that a second instance of the application is to be initiated. The profile is accessed, and the second instance of the application is caused to be initiated on a first computing device utilizing the one or more utilization values identified in the profile.

Abstract: Log files are received from disparate remote system machines separate from the log master server machine. Error checking code is executed to identify missing log files of the received log files from the disparate remote system machines and determine whether to ignore the missing log files. In response to determining to ignore the missing log files the received log files are stored on shared storage of the log master server machine.