Abstract: The technology disclosed herein generates, by a virtual machine running on a host computer system, a plurality of direct guest physical addresses, maps each guest virtual address of a plurality of guest virtual addresses to a direct guest physical address of the plurality of direct guest physical addresses, and updates, for each guest virtual address to direct guest physical address mapping, an entry of a shadow page table with the direct guest physical address to a guest physical address mapping.

Abstract: Migrating executing quantum processes into Quantum Isolation Zones (QIZs) is disclosed herein. In one example, a processor device of a quantum computing device determines to migrate a quantum process currently executing using a first one or more qubits on the quantum computing device into a first QIZ, wherein the first QIZ limits qubit visibility of any quantum process associated with the first QIZ to a plurality of qubits associated with the first QIZ. Upon determining to migrate the quantum process, the processor device transfers the first one or more qubits to the first QIZ and associates the quantum process with the first QIZ. The processor device then continues execution of the quantum process within the first QIZ.

Abstract: Systems and methods for supporting page faults for virtual machine network accelerators. In one implementation, a processing device may receive, at a network accelerator device of a computer system, from a network, a first incoming packet and a second incoming packet. Responsive to receiving a first notification that an attempt to store the first incoming packet at a first buffer of a plurality of buffers associated with the network accelerator device caused a page fault, the processing device may store the first incoming packet at a second buffer and append a first identifier of the first buffer to a faulty buffer data structure. Responsive to receiving a second notification indicating a resolution of the page fault, the processing device may remove the first identifier from the faulty buffer data structure. The processing device may store the second incoming packet at the first buffer.

Abstract: During a boot process of a computing device, a boot loader loads a kernel and an initial RAM disk image from a persistent storage device into RAM. The initial RAM disk image includes a file system that includes a camera application. The kernel is invoked, and the kernel mounts a RAM disk from the initial RAM disk image as a root file system. The kernel causes an initiation of the camera application into a user space. The camera application obtains an image frame from a camera. The camera application processes the image frame to generate a processed image frame, and provides the processed image frame to a frame buffer for presentation of the processed image frame on a display device.

Abstract: A computing system obtains a set of instructions configured to execute on a classical computing system. The set of instructions are evaluated to identify a cryptographic algorithm having a cryptographic algorithm type implemented by the set of instructions. Based on the cryptographic algorithm type, a candidate quantum algorithm comprising quantum instructions operable to attempt to breach the cryptographic algorithm is selected from a plurality of quantum algorithms. The set of instructions are translated into cryptographic quantum instructions that implement the cryptographic algorithm. Based on the cryptographic quantum instructions and the quantum instructions, a quantum instruction file is generated that, when executed, attempts to breach the cryptographic algorithm.

Abstract: Memory pages can be migrated between non-uniform memory access (NUMA) nodes based on entries in a page modification log according to some examples described herein. In one example, a physical processor can detect a request from a virtual machine to access a memory page. The physical processor can then update a page modification log to include an entry indicating the request. A hypervisor supporting the virtual machine can be configured to detect the request based on the entry in the page modification log and, in response to detecting the request, migrate the memory page from a second NUMA node to a destination NUMA node.

Abstract: The technology disclosed herein identifying a workflow file in a storage location associated with a trigger event responsive to detecting the trigger event, generating, using the identified workflow file, a new specification definition, storing, in a temporary service registry, the new specification definition, wherein the new specification definition is one of a plurality of temporary specification definitions in the temporary service registry, and identifying from the list of specification definitions the one or more specification definitions based on a parameter of a request responsive to receiving the request for one or more specification definitions of a list of specification definitions. The list of specification definitions including the plurality of temporary specification definitions in the temporary service registry and a plurality of predefined specification definitions in a remote service registry.

Abstract: Unikernel catalogs can be used to store and to facilitate efficient deployment of unikernels. For example, a node of a distributed computing environment can include a controller for controlling deployment of a unikernel at a target device. The controller can control deployment of the unikernel at the target device by receiving a unikernel catalog comprising a plurality of unikernels and executing a catalog checkup to verify the unikernel catalog. The controller may then detect a verification failure during the execution of the catalog checkup. In response to detecting the verification failure, the controller may determine a cause of the verification failure and transmit a notification indicating the verification failure and the cause of the verification failure to a target device.

Abstract: A supervisor on a destination host receives a request to migrate an application from a source host to the destination host and determines a total amount of memory associated with the application on the source host. The supervisor on the destination host allocates one or more memory pages in a page table on the destination host to satisfy the total amount of memory associated with the application on the source host, where the one or more memory pages are to be associated with the application on the destination host. Responsive to determining that the one or more memory pages have been allocated on the destination host, the supervisor on the destination host initiates migration of the application from the source host to the destination host.

Abstract: The present disclosure provides new and innovative systems and methods for managing nodes using polymorphic unikernals. In an example, a method includes generating, by a polymorphic unikernal service (PUS) system having a processor, a virtual machine. A generic unikernal may be created, retrieved, and/or embedded within the virtual machine. The PUS system may receive, from an Internet of Things (IoT) device (e.g., one of a plurality of nodes communicatively linked to the PUS system), a configuration file indicating a configuration of the IoT device. The PUS system may modify the generic unikernal to generate a modified unikernal based on the configuration of the IoT device. Furthermore, the PUS system may deploy the virtual machine on the IoT device. The deployed virtual machine may be embedded with the modified unikernal.

Abstract: A gateway service can facilitate communication for application programming interfaces (APIs) in edge devices. For example, the gateway service can receive a request from a software application to cause an API to perform an action. The gateway service can be generated based on a configuration file to extend capabilities associated with the API. The gateway service can determine that a request format of the request is incompatible with an interface format of the API. The gateway service can translate the request from the request format to the interface format. The gateway service can transmit the request in the interface format to the API to cause the API to perform the action indicated in the request.

Abstract: Disclosed herein is technology to efficiently test versions. An example method may include: receiving a plurality of versions of one or more code objects, wherein each version of the plurality of versions has at least one ancestor or descendent version among the plurality of versions; determining a first number of versions in a testing round; selecting, from the plurality of versions, a first set of versions satisfying a weight-based criterion, wherein a number of the first set of versions equals the first number; testing the first set of versions; and updating the plurality of versions based on a result of testing the first set of versions.

Abstract: For each layer of a plurality of layers of a containerized unit of software instructions, a service loaded by the layer is determined. Service state information associated with the service loaded by the layer is retrieved, wherein the service state information comprises at least one of source software instructions that implement the service or code repository metadata for a code repository that stores the source software instructions. Code coverage information indicative of a degree of code coverage for the source software instructions that implement the service is obtained. Based at least in part on the code coverage information and the service state information, the layer is annotated with risk information indicative of a degree of risk associated with the layer.

Abstract: Systems and methods are provided. An example method can include obtaining, by a quantum computing system comprising one or more quantum computing devices, first data indicative of a first risk of quantum error associated with a first quantum process and second data indicative of a second risk of quantum error associated with the first quantum process. The example method can further include routing, by the quantum computing system based at least in part on the first data, a first portion of the first quantum process to first quantum hardware implementing a first plurality of qubits in a first quantum code space. The example method can further include routing, by the quantum computing system based at least in part on the second data, a second portion of the first quantum process to second quantum hardware implementing a second plurality of lower-fidelity qubits outside of the first quantum code space.

Abstract: Qubit predictability services for a quantum computing system are disclosed. In one example, a processor device of a computing system receives qubit utilization data that encodes a utilization history for each qubit in a set of qubits of a QCS. The processor device further performs one or more hypothesis tests for each qubit of the set of qubits based on the utilization history for the qubit and a set of quantum algorithms. The processor device further generates one or more predictability scores for each qubit of the set of qubits based on the one or more hypothesis tests for the set of qubits. The processor device further provides an indication of the one or more predictability scores for each qubit of the set of qubits to the QCS.

Abstract: A method includes determining, by a processing device, an intended level of power consumption associated with a network function; allocating, in view of the intended level of power consumption, a network device to the network function; allocating, in view of the intended level of power consumption, a processor to the network function; and designating the processor to handle interrupts from the network function via the network device.

Abstract: A virtual device can be provided to a virtual machine from a hypervisor. The virtual can correspond to a backend element accessible to the VM via communications with the virtual device. The hypervisor can intercept a communication from the VM directed to the backend element via the virtual device. The hypervisor can set a timer. The timer can track an elapsed time from the communication to a response from the backend element. The hypervisor can send the communication from the virtual machine to the backend element. The timer can then be determined to have expired without a response being received. The virtual device can then be disabled.

Abstract: Systems and methods for encryption support for virtual machines. An example method may comprise initializing, by a firmware module associated with a virtual machine running on a host computer system, an exclusion range register associated with the virtual machine with a value specifying a first portion of guest memory. The first portion of the guest memory may include an exclusion range marked as reserved. The second portion of the guest memory may b e encrypted using an ephemeral encryption key. Virtual machine firmware may identify, in the second portion of the guest memory, an instruction to a virtual device associated with the virtual machine, copy data corresponding to the instruction to the first portion of guest memory, and alert the hypervisor of the data stored in the first portion of guest memory.

Abstract: Event delivery can be managed by an event broker in a distributed computing environment. The event broker can receive an event message from a producer device, the event message having a payload and a key. The event broker can store the event message in an event queue based on the key. A sender node can transmit the event message to an event consumer. Subsequent to transmitting the event message, the event broker can cause the sender node to enter an idle state. The event broker can receive an error message from the event consumer while the sender node is in the idle state. After receiving the error message, the event broker can wake the sender node from the idle state. The sender node can initiate a retry process involving iteratively re-transmitting the event message to the event consumer.

Abstract: A request is received from a fleet device to be provided with a delta system image that includes differences between a system image currently residing on the fleet device and a most recent revised system image. It is determined that a first revised system image has been generated, and a second revised system image has been generated, wherein the second revised system image is the most recent revised system image. It is determined that the system image currently residing on the fleet device is the first system image. A first delta system image that includes differences between the first system image and the second revised system image is accessed. The first delta system image is sent to the fleet device.