Abstract: A system includes a memory, a processor in communication with the memory, and a first TEE instance. The first TEE instance is configured to maintain an encrypted secret, obtain a cryptographic measurement associated with a second TEE instance, validate the cryptographic measurement, and provision the second TEE instance with the encrypted secret. Additionally, the first TEE instance and the second TEE instance are both configured to service at least a first type of request.

Abstract: Some examples of the present disclosure relate to executing configuration files generated from specification files. In one particular example, a system can receive a specification file defining functions for an application programming interface (API) associated with a software entity. The system can generate a graph identifying keywords and relationships associated with the functions. The system can generate, based on the graph, a mapping dictionary that maps the functions to tasks usable in an executable file associated with the API. The system can generate the executable file including one or more of the tasks based on the mapping dictionary and execute the executable file to perform operations associated with the API and the software entity at a node.

Abstract: A method includes receiving input data that is used by a machine learning model to generate a first inference. The machine learning model was previously trained using a set of training data. The method also includes generating a set of modified input data based on the input data. The set of modified input data is generated without using the training data. The method further includes obtaining, from an explanation system, an explanation array. The explanation system is to generate the explanation array based on the machine learning model and the set of modified input data.

Abstract: Techniques for peer to peer sharing of files in a mobile environment are provided. In response to meeting a communication parameter of a second device, a processing device may determine whether the second device will maintain the communication parameter with a first device for at least a threshold amount of time. An amount of data that can be transferred between the first and second devices during a transfer window with the second device may be determined. Software manifests of the first and second devices may be compared to determine a set of software of the first device that need to be updated. A number of chunks for a first software of the set of software may be received from the second device, the number of chunks based on the amount of data that can be transferred between the first and second devices during the transfer window.

Abstract: In one example, a system can execute a first version of a software program during a time window. While executing the first version of the software program during the time window, the system can generate a software bill of materials (SBOM) for the software program. The SBOM can identify a dependency relied upon by the first version of the software program during the time window. The system can determine that the dependency has a vulnerability based on a Common Vulnerabilities and Exposures (CVE) record associated with the dependency. The system can then obtain an updated version of the dependency that lacks the vulnerability, generate a second version of the software program using the updated version of the dependency to mitigate the vulnerability, and deploy the second version of the software program. The system may also shut down the first version of the software program.

Abstract: Systems and methods for memory management for nested virtual machines. An example method may comprise running, by a host computer system, a hypervisor managing a first virtual machine; responsive to receiving, by the hypervisor, a request to create a second virtual machine nested within the first virtual machine, determining whether the second virtual machine will be using a physical address as a virtual address for a peripheral device; and responsive to determining that the second virtual machine will be using the physical address as the virtual address for the peripheral device, initializing a first data structure for address translation of the physical addresses of the second virtual machine corresponding to virtual addresses of the peripheral device to a host virtual addresses.

Abstract: A system can be provided for generating efforts to facilitate preparation and execution of software migrations. For example, the system can monitor software applications to generate metadata for the software applications. The system can also receive time-efforts for historical migrations of the software applications. The system can store the metadata and the time-efforts for the software applications in a database. Additionally, the system can receive, from a client device, an effort request associated with a migration of a software application. In response to receiving the effort request, the system can generate an effort for the migration of the software application based at least in part on the metadata and the time-efforts for the software applications. The system can then transmit the effort to the client device as a response to the effort request.

Abstract: Network paths can be selected based on power consumption according to some aspects of the present disclosure. In one example, a system can receive a routing request from user equipment. The system can determine a network paths of a wireless network, where each network path is a route between the user equipment and a service application associated with the routing request. The system can determine a power consumption associated with each network and select a network path for the routing request based on the power consumption associated with each network path. The system can enable the network path between the user equipment and the service application for the routing request.

Abstract: An example method may include generating a block list comprising a plurality of list items, wherein each list item identifies a respective block of a source virtual machine image, and the list items are ordered in the block list according to a timestamp of each respective block, wherein the timestamp indicates a time of a last access of the respective block, sending the block list to a destination computing device, receiving, from the destination computing device, one or more candidate blocks, determining whether the one or more candidate blocks are included in the source virtual machine image, and sending, to the destination computing device, a result indicating whether the one or more candidate blocks are included in the source virtual machine image.

Abstract: A system can be provided for managing computing resource consumption of user loaded software applications using control groups to facilitate safety compliance. For example, the system can detect an interference event between a user application executing within safety management system and a functional safety application executing within the safety management system. In response to detecting the interference event, the system can generate a control group for the user application. The control group can specify a portion of system resources of the safety management system to allocate to the user application. The system can then migrate the user application to the control group to allocate the portion of the system resources to the user application. In doing so, reoccurrence of the interference event can be prevented.

Abstract: Systems, methods, and apparatuses for regulating virtual processing device usage by emulating thermal throttling are provided herein. An example method comprises limiting a processing capacity allocated for a virtual processing device to a value equal to or below a threshold by transmitting, via a hypervisor, an indication to a guest that the virtual processing device has exceeded an operating temperature, wherein the value is below a current processing capacity of a host processing device.

Abstract: A system may comprise a group of processor cores configured to generate kernel-space threads in a kernel space and user-space threads in a user space of a Linux operating system. Each kernel-space thread may be executable by one of the processor cores to perform operations. For example, a kernel-space thread may receive a data packet transmitted from a client device via a network. The kernel-space thread may determine a particular communication channel assigned to a processor core that is executing the kernel-space thread. The kernel-space thread may determine if the data packet satisfies a condition based on information extracted from the data packet. In response to determining that the data packet does not satisfy the condition, the kernel-space thread may transmit data from the data packet via the particular communication channel to a user-space thread. The user-space thread may be configured to receive and process the data.

Abstract: Paravirtual pause loops in guest user space are provided by implementing, by a hypervisor for a virtualization environment, a paravirtual sleep command from a certain virtual machine of a plurality of virtual machines operating in the virtualization environment, the paravirtual sleep command indicating an instruction and a resource that the certain virtual machine is waiting on to perform the instruction; adding an entry to a work queue managed by the hypervisor for the plurality of virtual machines; and in response to the resource becoming available for the certain virtual machine: removing the entry from the work queue; and waking the certain virtual machine to perform the instruction with the resource.

Abstract: Techniques described herein relate to generating dynamic troubleshooting information for distributed computing systems. For example, a computer-implemented method can involve receiving a support request for an issue with respect to a computing environment. The support request can include a diagnostic file for the computing environment. In response, troubleshooting information associated with the issue or the computing environment can be identified in a support information database. A diagnostic software tool associated with the issue or the computing environment can be embedded within the troubleshooting information. Then, a graphical user interface displaying the troubleshooting information and including an interface element displaying a result generated by applying the diagnostic software tool to the diagnostic file can be output for use in resolving the issue.

Abstract: A system can be provided for to evaluating artificial intelligence (AI) generated structure language files. For example, the system can receive a first structured language file generated by a large language model (LLM). The first structured language file can include generated keys and generated values for a resource. The system can also receive a second structured language file, which can include test keys and test values for the resource. The system can further extract, using a schema for the resource, resource keys. The system can determine, based on a comparison of the generated keys and the resource keys, a valid key total. Similarly, the system can determine, based on a comparison of the generated values and the test values, a valid value total. The system can then generate performance metrics for the LLM. Each performance metric can depend on the valid key total or the valid value total.

Abstract: Systems and methods for copying a computing resource from a source execution environment to a destination execution environment. An example method may comprise receiving, by a processing device, a copy request to copy a computing resource from a source execution environment to a destination execution environment; retrieving, from the source execution environment, configuration data associated with the computing resource; modifying, in view of a configuration of the destination execution environment, a value of a configuration parameter of the configuration data; and installing, on the destination execution environment, the computing resource using the configuration data.

Abstract: A parameter for a storage system can be adjusted using a container image to meet a performance objective according to some aspects described herein. For example, a scheduler of a control plane can determine the performance objective for a container scheduled by the control plane by using a container image of the container. The performance objective can be associated with a software application of the container. Based on the performance objective, the control plane can tag an IO request of the container with an IO tag. The scheduler can cause an adjustment to the parameter for the storage system based on the IO tag for the IO request.

Abstract: Generating computer code to perform a matrix-multiply operation, for use in neural network compute or other applications may include determining parameters Rr (number of rows for a plurality of partitioned matrices A?), Rc (number of registers used for each column of a target matrix C?), and RL (number of processor registers used as a source for targets for vector broadcast instructions. For each row r in A?, having Rr rows, operations may be performed such that for each column i, if the element at row r and column i is non-zero: a vector broadcast instruction may be generate to a register for the element at row r and column i; and a set of fused multiply-add (FMA) instructions may be generated having as parameters the register, a set of registers for a target matrix, and a memory location for input data.

Abstract: An example method includes receiving, via a text input component of a containerized cluster user interface, text that includes an operation name that identifies a containerized cluster operation, wherein the text further includes a textual parameter name and a textual parameter value. The method further includes identifying a form field name that corresponds to the textual parameter name, wherein the form field name is identified using a mapping data structure associated with the containerized cluster operation, the mapping data structure includes one or more mappings, and each mapping associates a particular field name with a corresponding particular parameter name. The method may further include generating a form field value in view of the textual parameter value, and presenting the form field value in a form field identified by the form field name. The form field value and the text in the text input component may be simultaneously visible.

Abstract: The technology disclosed herein enables managing data access by communication protocols in continuous integration environments. An example method comprises scheduling, by a processor, a software build job to execute on a computing node of a computer system; identifying a first list specifying a first set of access privileges by the software job to a first set of communication protocols, wherein the first list is exclusively associated with the software build job; identifying a second list comprising a second set of access privileges to a second set of communication protocols, wherein the second list is specific to the computer system; and responsive to determining that the access privileges of the first list do not conflict with the access privileges of the second list, causing a filtering agent operating on the computing node to enforce the access privileges of the first list and the access privileges of the second list.