Abstract: An article has first and second substrates with a spacer between them. The spacer includes beams connecting a plurality of walls, with openings between the beams. The plurality of walls includes multiple first, second, and third portions. The first and second portions are not parallel and have top and bottom edges that define a height of the wall and contact the first and second substrates, respectively. The third portions have top edges continuous with the top edges of the first and second portions but a smaller height than the height of the wall. At a given plane intersecting a first or second portion and perpendicular to the top and bottom edges, the thickness of at the top edge is plus or minus ten percent of the thickness at the bottom edge. The third portions are connected with some of the beams connecting the walls.

Abstract: A data processing system for implementing operations that generate a dynamically-sized output is presented. The data processing system includes a reconfigurable processor that is configured to implement a first operation, a second operation, a recording unit, and a control unit. The first operation generates an output, wherein a size of the output is unknown during a configuration phase. The second operation receives the output of the first operation as an input. The recording unit generates control data that is indicative of the size of the output. The control unit that provides the control data to the second operation, wherein the second operation processes the input based on the control data.

Abstract: A data processing system for implementing operations that generate a dynamically-sized output comprises a reconfigurable processor and a compiler. The compiler generates configuration data for configuring the reconfigurable processor to implement first and second operations and first and second connections. The first operation generates an output, and the second operation receives the output of the first operation as an input. The size of the output is unknown when generating the configuration data, and the output comprises a number of elements that is smaller than or equal to a predetermined maximum number of elements. The first connection for the output and the second connection for the input are both suitable for a transmission of the predetermined maximum number of elements. The reconfigurable processor is configured with the configuration data such that the reconfigurable processor implements the first operation, the second operation, the first connection, and the second connection.

Abstract: A data processing system for implementing operations that generate a dynamically-sized output includes a reconfigurable processor that is configured to implement first and second operations and control circuitry. The first operation generates an output, whose size is unknown during a configuration phase. The second operation receives the output as an input. During a write operation, the first operation is enabled to write a first portion of the output to a first portion of a buffer, while the second operation reads a first portion of the input that is different than the first portion of the output from a second portion of the buffer that is different than the first portion of the buffer. The control circuity includes a control unit that: directs the second operation during a read operation following the write operation to read data as the input from the buffer that was stored during the write operation.

Abstract: In some aspects, a program is executed on a coarse-grained reconfigurable (CGR) processor. The CGR determines that the program produces an output that includes a variable length tensor, determines a maximum size of the variable length tensor and sets, based on the maximum size, a maximum of a counter associated with the program. The counter is set to an initial value of zero. The CGR initiates execution of the program, causing the program to receive an input tensor. Based on determining that the program is operating on a first portion of the input tensor, the CGR performs an update to the counter, to create an updated counter, and communicates the updated counter to one or more consumers within the program. After determining that the program has completed operating on the input tensor, a final size of the output is communicated to one or more downstream consumers external to the program.

Abstract: A log is received at a user space process of a host from a logical logging component of a virtual computing instance (VCI), the log generated by a container running on the VCI. The log is communicated from the user space process to a logical logging component of the host. The log is communicated from the logical logging component of the host to a logging process of the host. The log is configured and stored in host storage.

Abstract: Methods, system, and articles of manufacture are disclosed to provide high availability to a cluster of nodes. Example apparatus disclosed herein are to identify member nodes of a cluster, determine whether an instance of an infrastructure supervisor is operating on any of the nodes, when an infrastructure supervisor is determined to not be operating, instantiate an infrastructure supervisor, and broadcast a discovery message to other nodes.

Abstract: A method for provisioning images to deploy containerized workloads in a virtualized environment can include bringing up a containerized workload in a virtualized computing environment responsive to receiving a request to run a containerized workload in the virtualized computing environment. Bringing up the containerized workload can include creating a VMDK that includes a container image in shared storage of an image registry responsive to authenticating with the image registry, attaching the VMDK to a virtual computing instance, responsive to receiving a request, made by a container running in the VCI, for a file of the container image in the attached VMDK, retrieving the file from the shared storage, and bringing up the containerized workload using the file.

Abstract: Methods are provided for utilizing machine learning operations configured for use in processing missing pieces of visual data in image data to predict potential location of defects and/or damage in storage device disks. These predictions can allow for a sufficient ability to categorize disks during storage device quality inspections. This can allow for quality inspections to conclude before all areas of the disk surface are scanned. Because less surface area of the disks within the storage device require scanning, the time required for quality inspection scanning prior to deployment can be greatly reduced. Additionally, the partial scans occurring prior to deployment may be supplemented or updated after deployment through the performance of a dense scan. These secondary scans can be configured to scan all previously unscanned areas during storage device downtimes or in response to an environmental trigger such that the storage device will not exhibit any loss in performance.

Abstract: A user identity management platform is provided that manages user identity for an enterprise, such as a retail enterprise. In particular, a specific identity graph structure is provided that allows for flexible management and selection of user account information depending on the context in which that user account information is to be used. Confidence scores may be maintained for nodes and edges and probabilistic techniques associated with account activity may be used to improve confidence of association among nodes within a cluster representing a unique user.

Abstract: A user identity management platform is provided that manages user identity for an enterprise, such as a retail enterprise. In particular, a specific identity graph structure is provided that allows for flexible management and selection of user account information depending on the context in which that user account information is to be used. Confidence scores may be maintained for nodes and edges and probabilistic techniques associated with account activity may be used to improve confidence of association among nodes within a cluster representing a unique user.

Abstract: A user identity management platform is provided that manages user identity for an enterprise, such as a retail enterprise. In particular, a specific identity graph structure is provided that allows for flexible management and selection of user account information depending on the context in which that user account information is to be used. Confidence scores may be maintained for nodes and edges and probabilistic techniques associated with account activity may be used to improve confidence of association among nodes within a cluster representing a unique user.

Abstract: A user identity management platform is provided that manages user identity for an enterprise, such as a retail enterprise. In particular, a specific identity graph structure is provided that allows for flexible management and selection of user account information depending on the context in which that user account information is to be used. Confidence scores may be maintained for nodes and edges and probabilistic techniques associated with account activity may be used to improve confidence of association among nodes within a cluster representing a unique user.

Abstract: An example virtualized computing system includes: a host cluster having a virtualization layer directly executing on hardware platforms of hosts, the virtualization layer supporting execution of virtual machines (VMs), the VMs including pod VMs and native VMs, the pod VMs including container engines supporting execution of containers in the pod VMs, the native VMs including applications executing on guest operating systems; an orchestration control plane integrated with the virtualization layer and including a master server and native VM controllers, the master server managing lifecycles of the pod VMs and the native VMs; and management agents, executing in the native VMs, configured to receive decoupled information from the master server through the native VM controllers and to provide the decoupled information for consumption by the applications executing in the native VMs, the decoupled information including at least one of configuration information and secret information.

Abstract: An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes storing, in a trust authority, a pre-defined attestation report for a workload executing in a virtual machine (VM) managed by the virtualization layer, the pre-defined attestation report including a hash of at least a portion of an image of the VM; receiving, at the trust authority from a security module of a host in which the VM executes, an attestation report generated by measuring memory of the VM; comparing the attestation report with the pre-defined attestation report; and generating an indication of validity for the workload based on a result of the comparison.

Abstract: In one set of embodiments, confidential data needed by a workload component running within a worker VM can be placed on an encrypted virtual disk that is attached to the worker VM and hardware-based attestation can be used to validate the worker VM's software and isolate its guest memory from its hypervisor. Upon successful completion of this attestation process, a data decryption key can be delivered to the worker VM via a secure channel established via the attestation, such that the hypervisor cannot read or alter the key. The worker VM can then decrypt the contents of the encrypted virtual disk using the data decryption key, thereby granting the workload component access to the confidential data.

Abstract: A vehicle and method for vehicle noise reduction for vehicle occupants are provided. The method comprises detecting a position of a window of the vehicle; and controlling the duty of an operational component of the vehicle based on the position of the window of the vehicle and at least one of: a speed of the vehicle, and a presence of a sound-reflecting structure proximate to the vehicle; wherein the operational component is external to a cabin of the vehicle; and wherein noise generated by the operational component increases with a duty of the operational component.

Abstract: Methods are provided for utilizing machine learning operations configured for use in processing missing pieces of visual data in image data to predict potential location of defects and/or damage in storage device disks. These predictions can allow for a sufficient ability to categorize disks during storage device quality inspections. This can allow for quality inspections to conclude before all areas of the disk surface are scanned. Because less surface area of the disks within the storage device require scanning, the time required for quality inspection scanning prior to deployment can be greatly reduced. Additionally, the partial scans occurring prior to deployment may be supplemented or updated after deployment through the performance of a dense scan. These secondary scans can be configured to scan all previously unscanned areas during storage device downtimes or in response to an environmental trigger such that the storage device will not exhibit any loss in performance.

Abstract: A framework is provided that assigns a digital certificate to each VM-based control plane element and computing node (i.e., worker VM) of a workload orchestration platform implemented in a virtualized environment, where the digital certificate is signed by a trusted entity and provides cryptographic proof that the control plane element/worker VM has been successfully attested by that trusted entity using hardware-based attestation. Each control plane element/worker VM is configured to verify the digital certificates of other platform components prior to communicating with those components. With these digital certificates in place, when an end-user submits to the platform's front-end control plane element a new workload for deployment, the end-user can verify the digital certificate of the front-end control plane element in order to be assured that the workload will be deployed and executed by the platform in a secure manner.

Abstract: Log information is retrieved from a log of a container running in a virtual machine in response to a request for the log information, by accessing a virtual disk of the virtual machine, reading the log of the container from the virtual disk and preparing the requested log information from the log, and transmitting the requested log information to a virtual machine (VM) management process running in a host computer of the virtual machine for the VM management process to forward to a requestor of the log information. Alternatively, log data of the container running in the virtual machine may be streamed to the VM management process over a virtual socket communication channel that is established between the virtual machine and the VM management process.