Abstract: An information handling system includes a service module that may detect an action performed on a passthrough device, invoke an application programming interface on a hypervisor, receive a response to the action on the passthrough device from the hypervisor, and push management information to a management controller. The hypervisor may detect the passthrough device, proxy an operating system call associated with the action to a guest operating system of the virtual machine over the application programming interface, and transmit the response received from the guest operating system to the service module. The guest operating system may echo the operating system call on a virtual machine, and proxy the response to the operating system call to the hypervisor.

Abstract: An example virtualized computing system includes a host cluster having a virtualization layer executing on hardware platforms of hosts, the virtualization layer supporting execution of virtual machines (VMs), the VMs including pod VMs and native VMs, the pod VMs including container engines supporting execution of containers in the pod VMs, the native VMs including applications executing on guest operating systems; and an orchestration control plane integrated with the virtualization layer, the orchestration control plane including a master server having a pod VM controller to manage lifecycles of the pod VMs and a native VM controller to manage lifecycles of the native VMs.

Abstract: An information processing apparatus that is able to execute an extended application, and a method of controlling the information processing apparatus are provided. The information processing apparatus holds, in a launched state, a virtual machine (VM) for executing the extended application, determines, in a case that the extended application is launched, whether or not the extended application can reuse the VM. In a case that it is determined that the extended application can reuse the VM, the information processing apparatus determines whether or not a VM that can be reused by the extended application is held, and in a case that it is determined that the VM which can be reused by the extended application is held, execute the extended application using the held VM.

Abstract: Disclosed is a method for designing an application task architecture for an electronic control unit based on an AUTOSAR operating system that is adaptable to a plurality of microcontrollers. Prior to association with a microcontroller, the method involves developing the application task architecture by using at least one virtual core different from the one or more cores of the microcontroller, the various tasks being assigned respectively to the at least one virtual core, and associating the at least one virtual core with the one or more cores of the microcontroller so as to allocate tasks assigned to the at least one virtual core to the core or among the cores of the microcontroller.

Abstract: An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes: launching, in cooperation with a security module of a host, a guest as a virtual machine (VM) managed by the virtualization layer, the security module generating an attestation report from at least a portion of the VM loaded into memory of the host; sending the attestation report from the security module to a trust authority; receiving, in response to verification of the attestation report by the trust authority, a secret from the trust authority at the security module; and providing the secret from the security module to the guest.

Abstract: Latency experienced by a user of a client device may be reduced by preloading virtual devices in anticipation of a connection request from the client device. For example, a plurality of virtual devices may be partially loaded prior to a connection request from a client device. In response to the connection request from the client device, a user associated with the client device may be identified and user profile information associated with the user may be retrieved. Based on the retrieved user profile information associated with the user, a virtual device, from among the plurality of preloaded virtual devices, may be loaded, such that the loading of the virtual device is complete and is specific to the user of the client device.

Abstract: Methods and systems are disclosed for automated semantic tagging that include detecting a particular thread executed by a processor and identifying a root process of the particular thread. An object-process link may be by linking an object that executed code that called the particular thread to the root process. A thread list of thread definitions of the object may be identified. A particular thread definition that corresponds to the particular thread can be mapped. Resource types to be consumed upon executing an instance of the thread instantiated from the particular thread definition can be identified and the corresponding values of the resource types can be determined. A process specification can be generated that encapsulates the thread definition, resource types and values so as to reproduce a state of the root process at a point in which the particular thread executed.

Abstract: An information processing apparatus and a method of controlling the information processing apparatus are provided. The information processing apparatus is operable to install and execute an application for providing an extended function, obtains, from a server, a containerized application linked to a logged-in user or designated by a user and stores the obtained application in a storage. The apparatus weights the application stored in the storage in accordance with a characteristic or a usage state of the application and deletes an application stored in the storage based on the weighting in accordance with a logout of the user.

Abstract: A method and a system to perform the method are disclosed, the method includes receiving, by a virtualization server communicatively coupled with a client device, a request to provide a virtual machine (VM) to a client device, accessing a profile associated with the client device, instantiating a VM on the virtualization server, wherein the VM is a linked clone VM of a base VM, wherein the linked clone VM has (1) a read-only access to a shared range of a persistent memory associated with the base VM, wherein the shared range of the persistent memory is determined in view of the profile associated with the client device and stores at least one application installed on the virtualization server, (2) a write access to a private range of the persistent memory, wherein the private range is associated with the VM, and providing the VM to the client device.

Abstract: A method for managing composed information handling systems includes obtaining a composition request for a composed information handling system, making a first determination that a first information handling system is not capable of servicing the composition request local, and based on the first determination: allocating, an available resource on the first information handling system to the composed information handling system, sending a resource allocation request to a system control processor manager for access to an additional resource, obtain, in response to the allocation request, a notification for access to a second information handling system of the information handling systems that provides the available resource, setting up management services for available resource and the additional resource to obtain logical hardware resources, and presenting the logical hardware resources to at least one compute resource set as bare metal resources.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media for using certificate injection tasks to generate containers having corresponding digital certificates. One of the methods includes receiving, by the distributed computing system, a source container image. A certificate injection task is executed, including: launching a container instance from the source container image and executing injection code within an execution environment of the launched container instance that writes one or more digital certificates to one or more corresponding locations within a file system of the execution environment. An output container image having the one or more digital certificates is then generated.

Abstract: Systems and methods for managing containerized clusters from virtualization management systems. An example method may include identifying one or more cluster entities of a containerized computing cluster, where the containerized computing cluster comprises a plurality of virtual machines running on one or more host computer systems, generating one or more virtualization management entities in the virtualization management system, wherein each virtualization management entity represents a respective cluster entity, receiving a request to perform an operation on a specified virtualization management entity in the virtualization management system, identifying a cluster entity represented by the virtualization management entity, translating, responsive to the request, the request to one or more commands to be performed on the identified cluster entity of the containerized computing cluster, and sending the one or more commands to the containerized computing cluster.

Abstract: A data management system comprises: a storage appliance configured to store a snapshot of a virtual machine; and one or more processors in communication with the storage appliance. The one or more processors are configured to perform operations including: identifying a plurality of shards of the virtual machine; requesting a snapshot of each of the plurality of shards; receiving the shards asynchronously; ordering the received snapshot shards sequentially into a results queue; and storing a single snapshot of the virtual machine based on the ordered snapshot shards. Operations may further include maintaining a flow control queue that limits the number of snapshot shards requested.

Abstract: Described herein is a system for identifying controls not aligned with updated compliance data. The system may scrub external data sources for updated compliance data. The system may detect and extract the updated compliance data from the external data sources. The system may identify and correlate controls of compliance applications currently using compliance data which has now been updated. The system determines whether a control exists to cover the updated compliance data. In the event, a control does not exist or an existing control does not cover the updated compliance data, a requirement may be generated for generating a new control or modifying an existing control for the updated compliance data.

Abstract: Disclosed are aspects of interference-aware virtual machine assignment for systems that include graphics processing units (GPUs) that are virtual GPU (vGPU) enabled. In some examples, an interference function is used to predict interference for assignment of a workload to a graphics processing unit (GPU). The interference function outputs a predicted interference to place the workload on the GPU. The workload is assigned to the GPU based on a comparison of the predicted interference to a plurality of predicted interferences for the workload on various GPUs.

Abstract: A container image arrangement method executed by a processor included in a computer to execute a process, the computer being connected to each of a plurality of nodes, the process includes, identifying a first node that has a first storage storing a container image and has a largest number of containers started from the container image among the plurality of nodes, determining whether the container operating in the first node is capable of starting in a second node among the plurality of nodes other than the first node, where the second has a second storage storing the container image, and storing the container image in a third storage included in a third node different from each of the first node and the second node among the plurality of the nodes when it is determined that the container is not capable of starting in the second node.

Abstract: Methods, apparatus, systems and articles of manufacture to store and access multi-dimensional data are disclosed. An example apparatus includes a memory; a memory allocator to allocate part of the memory for storage of a multi-dimensional data object; and a storage element organizer to: separate the multi-dimensional data into storage elements; store the storage elements in the memory, the stored storage elements being selectively executable; store starting memory address locations for the storage elements in an array in the memory, the array to facilitate selectable access of data of the stored elements; store a pointer for the array into the memory.

Abstract: Mechanisms are provided to implement a multi-layer analytics framework. The multi-layer analytics framework obtains a plurality of analytics from one or more analytics source computing systems, at least two analytics being written in different computer programming languages. The multi-layer analytics framework applies a wrapper to each of the analytics in the plurality of analytics to thereby generate wrapped analytics. The wrapper provides a unified interface for executing the analytics in the plurality of analytics regardless of the particular computer programming language used to create the analytics. The multi-layer analytics framework registers the wrapped analytics in an analytics registry, and executes an analytics pipeline comprising wrapped analytics in the analytics registry to perform an analytics operation based on the unified interface of the wrappers of the wrapped analytics.

Abstract: A remote desktop system includes a primary virtual machine, a plurality of secondary virtual machines, a primary terminal configured to log in to the primary virtual machine, and a secondary terminal configured to log in to a secondary virtual machine. When a user of the primary virtual machine needs to share image data of the primary virtual machine with a user of the secondary terminal for viewing, the primary virtual machine sends the image data to the primary terminal, and then the primary terminal shares the image data with the secondary terminal. This reduces data transmission pressure on a communications network between a virtual machine center and a terminal center.

Abstract: Technology is described for a checkpoint service for code function checkpoints associated with instances of code functions executed by a computing hub in a local area network. Subsequent to the execution of a code function being suspended by the computing hub, the computing hub may generate a code function checkpoint describing the execution of the code function. The computing hub may persist the code function checkpoint to storage using a checkpoint service. The computing hub may create the code function checkpoint in response to monitoring metrics associated with the computing hub, such as processor overutilization. The computing hub may resume the execution of the code function at a later time using the code function checkpoint retrieved from the checkpoint service.