Abstract: Receive a first electronics control unit (ECU) profile, the first ECU profile comprising a first set of services. Switch execution, on an ECU, by a processing device, to the first ECU profile from a second ECU profile, the second ECU profile comprising a second set of services, wherein an intersection of the first set of services and the second set of services comprises a third set of services. Start, on the ECU, a set of services included in the first ECU profile and not included in the third set of services.

Abstract: Systems and methods for a delta based task analysis in CI systems are disclosed. The systems and methods analyze a first job, which includes multiple first tasks, and a second job, which includes multiple second tasks. The systems and methods identify a set of different tasks between the first tasks and the second tasks. The systems and methods then create a third job based on the set of different tasks, which includes metadata corresponding to the first job and the second job. The systems and method execute the first job and the third job, which completes the second job based on the metadata included in the third job.

Abstract: Systems, methods, and apparatuses for determining a cause of an error in a computing environment, such as a permission denied error in a linux computing environment, are provided herein. An example method comprises executing an application in a linux environment, monitoring a plurality of linux subsystems and functions via an instrumentation inserted on a kernel, and responsive to a failure of the application, providing a summary of a cause of the failure based upon the monitoring of the linux subsystems and functions.

Abstract: Some examples of the present disclosure relate to risk analysis of test failures that occurred during a testing phase of a continuous integration pipeline. In one particular example, a system can detect a failure of a test during a testing phase of a continuous integration pipeline. The testing phase can involve executing a group of tests in a plurality of configurations prior to merging an update to source code into a code base of a software application. Based on detecting the failure of the test during the testing phase, the system can access historical data associated with prior executions of the test, determine a risk score associated with the failure of the test based on the historical data, and perform an action associated with the source code based on the risk score.

Abstract: A system can be provided for deploying bare metal clusters that satisfy custom resource requests. For example, the system can receive from a client device, a custom resource request. The custom resource request can include a set of requirements for a bare metal cluster. The set of requirements can include a number of nodes for the bare metal cluster. The system can determine a set of resources that satisfies the set of requirements. The set of resources can include virtual Internet Protocol (IP) addresses and a set of baseband management controller (BMC) IP addresses. A number of BMC IP addresses in the set of BMC IP addresses can be equal to the number of nodes for the bare metal cluster. Additionally, the system can generate, based on the set of resources, a configuration file for the bare metal cluster and deploy, based on the configuration file, the bare metal cluster.

Abstract: A method and system may operate a neural network (NN), e.g. during inference or training, by executing a first tensor column comprising task instruction code representing at least one computation spanning a number of layers of the NN, the execution producing an output, and compressing that output. In order to execute a next tensor column, the output may be uncompressed to produce uncompressed output; and the second tensor column may be executed, the second tensor column including task instruction code representing at least one computation spanning a number of layers of the NN. The second tensor column may take as input the uncompressed output.

Abstract: Techniques for signing a package manager file are disclosed. An example method includes receiving, at a signing client, a package manager file and a signing request to cryptographically sign the package manager file. The package manager file includes a header and a payload. The method also includes inspecting the header of the package manager file to determine whether the header includes a digest comprising a hash of the payload. Responsive to determining that the header does include the digest, the method also includes sending the header from the signing client to a signing server without sending the payload, and receiving a signed header from the signing server.

Abstract: The present disclosure is a new and innovative system, methods and apparatus live storage migration. In an example, a system includes a memory and processor in communication with the memory. The processor is configured to receive a request to perform live storage migration of a guest managed by a source hypervisor on a source machine to a destination machine. The guest is configured to store data in blocks of block storage. The source hypervisor, executing on the processor, receives a hint for each block of data in block storage of the guest via an agent of the guest, wherein the hint relates to properties of a specific block of data. The source hypervisor then determines an efficient prioritization that identifies which blocks to copy and in what order as a part of the live storage migration based on the hints received from the agent. The source hypervisor then copies the blocks of data identified for copying in the migration based on the prioritization, saving time and computational resources.

Abstract: A kernel monitor can be used to mitigate ransomware activity of a host system. In some aspects, a computing system can use the kernel monitor to monitor a set of system calls generated by the host system within a time window to perform a functionality. The kernel monitor can include a respective kernel program monitoring each system call in the set of system calls. The set of system calls can be filtered by the kernel monitor to identify a subset of system calls associated with encrypting a filesystem of the host system. The computing system can determine that the subset of system calls is indicative of ransomware activity associated with the host system based on the subset of system calls exceeding a predefined threshold. Subsequently, the computing system can perform a mitigation operation to mitigate the ransomware activity.

Abstract: Access to a physical device associated with a computing system can be shared with multiple virtual machines by delegating control of the physical device to a primary virtual machine (PVM). In some aspects, a virtual machine monitor (VMM) of the computing system can generate a hardware description that describes the physical device. The VMM can initiate the PVM, which can use the hardware description to acquire control of the physical device from a host kernel of the computing system. The VMM can delegate control of the physical device from the host kernel to the PVM. After control of the physical device is delegated to the PVM, the PVM is configured to perform a device sharing process to share access to the physical device with the SVM.

Abstract: A method includes receiving, from a first container of a plurality of virtualized computing entities, a request to diagnose a first network connectivity malfunction associated with the first container. The method further includes identifying a first package of the plurality of packages based on data associated with the first container satisfying at least one criterion of the plurality of criteria.

Abstract: Systems and methods for automated targeted patching of a target system. In one embodiment the present disclosure includes a method for compiling binary files from a source code package; running a diff tool to determine differences between the binary files and an application already installed on a target system; generating, based on the determined differences, a patch that includes at least one file to be installed on the target system; generating, a mapping file, the mapping file including information on where the at least one file will be installed on the target system; combining, the mapping file and the patch into a patch package; and installing the patch package on the target system.

Abstract: A method includes selecting a guest address of an address space of a virtual machine for optimizing memory mapped input/output (MMIO) emulation and initializing a page modification log associated with the virtual machine as full. The method further includes receiving an access of the guest address by the virtual machine and, in response to receiving the access to the guest address, triggering a page modification log full event, and exiting to a hypervisor of the virtual machine to perform a task associated with the guest address.

Abstract: A method includes collecting resource utilization statistics associated with execution of an application, identifying calls to a function associated with management of the application, and adjusting an allocation of computing resources for executing the application in view of the resource utilization statistics and the calls to the function.

Abstract: A fair and efficient guest to hypervisor virtual machine socket protocol may be provided by: in response to a host determining to reject a message received from a guest that was previously accepted for processing by the host, transmitting a rejection to the guest; in response to receiving, at the guest, the rejection, adding the message to a processing request queue on the guest; in response to determining that resources to handle the message have become available for the guest, transmitting an indication to the guest that the host is able to reaccept the message; in response to receiving, at the guest, the indication, retransmitting the message to the host according to the processing request queue; and in response to receiving the message from the guest a second time, accepting the message in an execution queue in a virtual memory of the host.

Abstract: Container image tooling storage migration is generally described. In some examples, a first pull operation for a first container image may be performed. The first container image may be generated using a first container management tool. In various cases, a first binary representation of the first container image may be read. The first binary representation may be associated with the first container management tool. In some examples, a second binary representation of the first container image that corresponds to a second container management tool may be received. In various cases, a first container may be executed by the second container management tool using the second binary representation.

Abstract: Systems, methods, and apparatuses for migrating secrets from cloud-based secret manager instances to local secret manager instances while preserving an original topology of the cloud-based secret manager instances are provided herein. An example system includes a computer-readable memory containing a local secret manager. The example system also includes a processing device configured to obtain an initial secret management topology from one or more cloud-based secret manager instances, associate each cloud-based secret manager instance with respective geographical locations, and migrate secrets from each respective cloud-based secret manager instance into the local secret manager, organized by the geographical locations, in a final secret management topology that mimics the initial secret management topology.

Abstract: In some examples, an access control system can use a certificate authority to implement access control of a node in a distributed computing system. The access control system can determine an access role of a node of one or more nodes in the distributed computing system. The access role can define one or more permissions of the node with respect to accessing system resources of the distributed computing system. The access control system can identify, based on the access control role of the node, a certificate authority corresponding to the access role. The access control system can assign, to the node, an access certificate generated by the certificate authority and corresponding to the access role of the node. The access control system can control, based on the access certificate of the node, whether an access request initiated by the node is allowed.

Abstract: Systems and methods are disclosed that deploy software code from a dataset into a computing environment. The systems and method collect energy metrics of the software code while executing in the computing environment. The systems and methods determine a sustainability label for the software code based on the energy metrics. The systems and methods assign the sustainability label to the software code to produce a sustainability-based dataset.

Abstract: A method includes receiving architecture instructions for a plurality of microservices, the architecture instructions comprising one or more design parameters for one or more of the plurality of microservices. The method also includes generating, by a processing device, in view of a machine learning model, a deployment configuration for the architecture instructions, wherein the deployment configuration comprises one or more deployment parameters in view of the one or more design parameters. The method also includes receiving an update to the deployment configuration. The method also includes response to receiving the update, modifying the architecture instructions to reflect the update to the deployment configuration.