Abstract: The examples disclosed herein provide for optimizing a quantum request. In particular, a classical computing system receives at least one quantum computing request. The classical computing system obtains quantum operation data from at least one quantum computing device. The classical computing system modifies the at least one quantum computing request based on the quantum operation data to optimize execution of the at least one quantum computing request by the at least one quantum computing device. The classical computing system sends the modified at least one quantum computing request to the at least one quantum computing device.

Abstract: The ability to employ a qubit for computation and/or information processing is fragile. A qubit is employable for calculation purposes only when the qubit is in “coherence” with other qubits of the quantum computation system and isolated from other elements of the universe. Temperatures near absolute zero are often required for such isolation. Heat, as well as other conditions may cause a qubit to become decohered and “entangled” with other elements of the universe. The invention mitigates adverse issues associated with qubit decoherence in quantum computing and information processing systems. During the execution of a quantum computation, the utilized qubits are monitored for signatures indicating qubit decoherence and/or likely decoherence. Rising heat and/or temperature of a qubit may be one signal of decoherence. During the calculation, when a qubit is determined to be anomalous, the invention “swaps-out” the anomalous qubit and “swaps-in” a non-anomalous qubit.

Abstract: A kernel of an operating system executing on a computing device is notified that the kernel is to provide network packets received by the kernel via a network interface to an eBPF program executing in an eBPF environment of the kernel. The eBPF program receives, from the kernel, a camera network packet originating from a camera. The eBPF program causes information derived from the camera network packet to be copied to an image buffer of a display device driver for presentation on a display device.

Abstract: Secure drivers for confidential virtual machines. A communication channel is established by a first device driver executing in a memory of a virtual machine manager (VMM) with a second device driver executing in a private memory of a user space memory of a confidential virtual machine that was initiated by the VMM. The private memory is inaccessible by the VMM. The first device driver provides the data over the communication channel to the second device driver within the user space memory. The second device driver receives the data. The second device driver modifies the private memory to include the data or prevents the data from being written to the private memory based on a criterion.

Abstract: Optimizing execution of quantum service definition files using a quantum optimization database is disclosed herein. In one example, a processor device of a computing device identifies a first one or more instructions within a quantum service definition file of a quantum service. The processor device next determines that the first one or more instructions correspond to a first entry in a quantum optimization database, the first entry comprising a result of a previous execution of the first one or more instructions. In response to determining that the first one or more instructions correspond to the first entry in the quantum optimization database, the processor device then modifies the quantum service definition file to incorporate the result of the previous execution of the first one or more instructions in place of the first one or more instructions.

Abstract: A package maintenance architecture can be provided for a computing system. For instance, a change status can be determined, the change status corresponding to a difference between reference content and endpoint content of at least one package storage location of a plurality of package storage locations. An update for the at least one package storage location can be determined based on the change status, wherein the update is configured according to a respective configuration scheme of a plurality of configuration schemes respectively associated with the plurality of package storage locations, and wherein the respective configuration scheme is associated with the at least one package storage location. Updating of the at least one package storage location according to the update can be initiated.

Abstract: A kernel monitor can be used to mitigate ransomware activity of a host system. In some aspects, a computing system can use the kernel monitor to monitor a set of system calls, such as by using a respective kernel program assigned to each system call. Each kernel program can alert the kernel monitor in response to an execution of a corresponding system call. The computing system can generate an affinity score associated with the set of system calls by comparing a system call pattern corresponding to the set of system calls to a ransomware pattern corresponding to historical ransomware activity. Based on a threshold comparison of the affinity score to a predefined tolerance, the computing system can control, for a predefined time window, write access to a filesystem of the host system.

Abstract: An execution measurement event associated with a Virtual Machine (VM) managed by a hypervisor is detected, wherein the VM is implemented using a first processor device of one or more processor devices. Responsive to detecting the execution measurement event, execution measurement information descriptive of a period of execution for the VM prior to detection of the execution measurement event is measured using the first processor device of the one or more processor devices. A cryptographic signature is generated for the execution measurement information, wherein the cryptographic signature verifies that the execution measurement information was measured using the first processor device.

Abstract: The technology disclosed herein generates, by a virtual machine running on a host computer system, a plurality of direct guest physical addresses, maps each guest virtual address of a plurality of guest virtual addresses to a direct guest physical address of the plurality of direct guest physical addresses, and updates, for each guest virtual address to direct guest physical address mapping, an entry of a shadow page table with the direct guest physical address to a guest physical address mapping.

Abstract: Migrating executing quantum processes into Quantum Isolation Zones (QIZs) is disclosed herein. In one example, a processor device of a quantum computing device determines to migrate a quantum process currently executing using a first one or more qubits on the quantum computing device into a first QIZ, wherein the first QIZ limits qubit visibility of any quantum process associated with the first QIZ to a plurality of qubits associated with the first QIZ. Upon determining to migrate the quantum process, the processor device transfers the first one or more qubits to the first QIZ and associates the quantum process with the first QIZ. The processor device then continues execution of the quantum process within the first QIZ.

Abstract: Systems and methods for supporting page faults for virtual machine network accelerators. In one implementation, a processing device may receive, at a network accelerator device of a computer system, from a network, a first incoming packet and a second incoming packet. Responsive to receiving a first notification that an attempt to store the first incoming packet at a first buffer of a plurality of buffers associated with the network accelerator device caused a page fault, the processing device may store the first incoming packet at a second buffer and append a first identifier of the first buffer to a faulty buffer data structure. Responsive to receiving a second notification indicating a resolution of the page fault, the processing device may remove the first identifier from the faulty buffer data structure. The processing device may store the second incoming packet at the first buffer.

Abstract: During a boot process of a computing device, a boot loader loads a kernel and an initial RAM disk image from a persistent storage device into RAM. The initial RAM disk image includes a file system that includes a camera application. The kernel is invoked, and the kernel mounts a RAM disk from the initial RAM disk image as a root file system. The kernel causes an initiation of the camera application into a user space. The camera application obtains an image frame from a camera. The camera application processes the image frame to generate a processed image frame, and provides the processed image frame to a frame buffer for presentation of the processed image frame on a display device.

Abstract: A computing system obtains a set of instructions configured to execute on a classical computing system. The set of instructions are evaluated to identify a cryptographic algorithm having a cryptographic algorithm type implemented by the set of instructions. Based on the cryptographic algorithm type, a candidate quantum algorithm comprising quantum instructions operable to attempt to breach the cryptographic algorithm is selected from a plurality of quantum algorithms. The set of instructions are translated into cryptographic quantum instructions that implement the cryptographic algorithm. Based on the cryptographic quantum instructions and the quantum instructions, a quantum instruction file is generated that, when executed, attempts to breach the cryptographic algorithm.

Abstract: Memory pages can be migrated between non-uniform memory access (NUMA) nodes based on entries in a page modification log according to some examples described herein. In one example, a physical processor can detect a request from a virtual machine to access a memory page. The physical processor can then update a page modification log to include an entry indicating the request. A hypervisor supporting the virtual machine can be configured to detect the request based on the entry in the page modification log and, in response to detecting the request, migrate the memory page from a second NUMA node to a destination NUMA node.

Abstract: The technology disclosed herein identifying a workflow file in a storage location associated with a trigger event responsive to detecting the trigger event, generating, using the identified workflow file, a new specification definition, storing, in a temporary service registry, the new specification definition, wherein the new specification definition is one of a plurality of temporary specification definitions in the temporary service registry, and identifying from the list of specification definitions the one or more specification definitions based on a parameter of a request responsive to receiving the request for one or more specification definitions of a list of specification definitions. The list of specification definitions including the plurality of temporary specification definitions in the temporary service registry and a plurality of predefined specification definitions in a remote service registry.

Abstract: Unikernel catalogs can be used to store and to facilitate efficient deployment of unikernels. For example, a node of a distributed computing environment can include a controller for controlling deployment of a unikernel at a target device. The controller can control deployment of the unikernel at the target device by receiving a unikernel catalog comprising a plurality of unikernels and executing a catalog checkup to verify the unikernel catalog. The controller may then detect a verification failure during the execution of the catalog checkup. In response to detecting the verification failure, the controller may determine a cause of the verification failure and transmit a notification indicating the verification failure and the cause of the verification failure to a target device.

Abstract: A supervisor on a destination host receives a request to migrate an application from a source host to the destination host and determines a total amount of memory associated with the application on the source host. The supervisor on the destination host allocates one or more memory pages in a page table on the destination host to satisfy the total amount of memory associated with the application on the source host, where the one or more memory pages are to be associated with the application on the destination host. Responsive to determining that the one or more memory pages have been allocated on the destination host, the supervisor on the destination host initiates migration of the application from the source host to the destination host.

Abstract: The present disclosure provides new and innovative systems and methods for managing nodes using polymorphic unikernals. In an example, a method includes generating, by a polymorphic unikernal service (PUS) system having a processor, a virtual machine. A generic unikernal may be created, retrieved, and/or embedded within the virtual machine. The PUS system may receive, from an Internet of Things (IoT) device (e.g., one of a plurality of nodes communicatively linked to the PUS system), a configuration file indicating a configuration of the IoT device. The PUS system may modify the generic unikernal to generate a modified unikernal based on the configuration of the IoT device. Furthermore, the PUS system may deploy the virtual machine on the IoT device. The deployed virtual machine may be embedded with the modified unikernal.

Abstract: A gateway service can facilitate communication for application programming interfaces (APIs) in edge devices. For example, the gateway service can receive a request from a software application to cause an API to perform an action. The gateway service can be generated based on a configuration file to extend capabilities associated with the API. The gateway service can determine that a request format of the request is incompatible with an interface format of the API. The gateway service can translate the request from the request format to the interface format. The gateway service can transmit the request in the interface format to the API to cause the API to perform the action indicated in the request.

Abstract: Disclosed herein is technology to efficiently test versions. An example method may include: receiving a plurality of versions of one or more code objects, wherein each version of the plurality of versions has at least one ancestor or descendent version among the plurality of versions; determining a first number of versions in a testing round; selecting, from the plurality of versions, a first set of versions satisfying a weight-based criterion, wherein a number of the first set of versions equals the first number; testing the first set of versions; and updating the plurality of versions based on a result of testing the first set of versions.