Abstract: Log information is retrieved from a log of a container running in a virtual machine in response to a request for the log information, by accessing a virtual disk of the virtual machine, reading the log of the container from the virtual disk and preparing the requested log information from the log, and transmitting the requested log information to a virtual machine (VM) management process running in a host computer of the virtual machine for the VM management process to forward to a requestor of the log information. Alternatively, log data of the container running in the virtual machine may be streamed to the VM management process over a virtual socket communication channel that is established between the virtual machine and the VM management process.

Abstract: A data processing system for implementing operations that generate a dynamically-sized output is presented. The data processing system includes a reconfigurable processor that is configured to implement a first operation, a second operation, a recording unit, and a control unit. The first operation generates an output, wherein a size of the output is unknown during a configuration phase. The second operation receives the output of the first operation as an input. The recording unit generates control data that is indicative of the size of the output. The control unit that provides the control data to the second operation, wherein the second operation processes the input based on the control data.

Abstract: An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes: launching, in cooperation with a security module of a host, a guest as a virtual machine (VM) managed by the virtualization layer, the security module generating an attestation report from at least a portion of the VM loaded into memory of the host; sending the attestation report from the security module to a trust authority; receiving, in response to verification of the attestation report by the trust authority, a secret from the trust authority at the security module; and providing the secret from the security module to the guest.

Abstract: The invention relates to a method for promoting the modification, preferably by homology-dependent repair (HDR), of a target site in a genome of a cell. The method comprises the steps of introducing a template DNA molecule and one or more DNA repair inhibitors into a cell which comprises or is capable of expressing a site-specific DNA endonuclease (e.g. Cas9). The DNA repair inhibitors comprise one or more aurora kinase inhibitors, wherein the aurora kinase inhibitors are selected from the group consisting of AT9283, PHA-680632, TAK-901 and CCT137690, together with one or more other inhibitors. The invention also relates to kits comprising the aforementioned DNA repair inhibitors.

Abstract: The invention relates to a method for promoting the modification, preferably by homology-dependent repair (HDR), of a target site in a genome of a cell. The method comprises the steps of introducing a template DNA molecule and one or more DNA repair inhibitors into a cell which comprises or is capable of expressing a site-specific DNA endonuclease (e.g. Cas12a). The DNA repair inhibitors comprise BAY598, together with one or more other inhibitors. The invention also relates to kits comprising the aforementioned DNA repair inhibitors.

Abstract: Methods, systems, devices and apparatuses for a engine compartment ventilation system. The engine compartment ventilation system includes a grille cover. The grille cover is configured to cover an engine compartment of the vehicle. The grille cover has one or more grille shutters. The engine compartment ventilation system includes a sensor. The sensor is configured to measure an ambient temperature of an environment surrounding the vehicle. The engine compartment ventilation system includes an electronic control unit. The electronic control unit is coupled to the one or more grille shutters and the sensor. The electronic control unit is configured to control the one or more grille shutters based on the ambient temperature of the environment surrounding the vehicle.

Abstract: Smart window apparatus, systems, and related methods for use with vehicles are disclosed. A disclosed apparatus includes control circuitry configured to obtain data associated with a vehicle that is parked, determine, based on the data, a status of the vehicle associated with relatively high cabin temperature or an unattended occupant in the vehicle, and open a vehicle window via a window actuator to cool the vehicle cabin. The control circuitry is also configured to detect, based on the data, an event in an environment associated with the vehicle while the vehicle window is open and adjust the vehicle window via the window actuator in response to the detection.

Abstract: A virtualized computing system includes: a host cluster including hosts executing a virtualization layer on hardware platforms thereof, the virtualization layer configured to support execution of virtual machines (VMs), the VMs including a pod VM, the pod VM including a container engine configured to support execution of containers in the pod VM, the pod VM including a first virtual disk attached thereto; and an orchestration control plane integrated with the virtualization layer, the orchestration control plane including a master server in communication with a pod VM controller, the pod VM controller configured to execute in the virtualization layer external to the VMs and cooperate with a pod VM agent in the pod VM, the pod VM agent generating root directories for the containers in the pod VM, each of the root directories comprising a union a read/write ephemeral layer stored on the first virtual disk and a read-only layer.

Abstract: An example virtualized computing system includes: a host cluster having a virtualization layer directly executing on hardware platforms of hosts, the virtualization layer supporting execution of virtual machines (VMs), the VMs including pod VMs and native VMs, the pod VMs including container engines supporting execution of containers in the pod VMs, the native VMs including applications executing on guest operating systems; an orchestration control plane integrated with the virtualization layer and including a master server and native VM controllers, the master server managing lifecycles of the pod VMs and the native VMs; and management agents, executing in the native VMs, configured to receive decoupled information from the master server through the native VM controllers and to provide the decoupled information for consumption by the applications executing in the native VMs, the decoupled information including at least one of configuration information and secret information.

Abstract: A data storage device is disclosed comprising a non-volatile storage medium (NVSM) having a plurality of data sectors and a plurality of reserve sectors. A map-out value is generated for each of a first plurality of the data sectors based on a read latency of each of the first plurality of data sectors, and when the map-out value of a first data sector in the first plurality of data sectors exceeds a threshold, a first logical block address (LBA) is mapped from the first data sector to a first reserve sector. When the map-out value of a second data sector in the first plurality of data sectors exceeds the map-out value of the first data sector, the first LBA is mapped from the first reserve sector back to the first data sector, and a second LBA is mapped from the second data sector to the first reserve sector.

Abstract: Introspection into containers running in virtual machines (VMs) that are instantiated on a host computer is achieved. A method of processing an introspection command for a container, funning in a virtual machine, is carried out by a VM management process, and includes the steps of receiving a first request that is formulated according to a first protocol, e.g., transmission control protocol, and includes the introspection command, identifying the virtual machine from the first request, formulating a second request that includes the introspection command, according to a second protocol (e.g., virtual socket protocol), and transmitting the second request to a container management process running in the virtual machine for the container management process to execute the introspection command.

Abstract: An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes: launching, in cooperation with a security module of a host, a guest as a virtual machine (VM) managed by the virtualization layer, the security module generating an attestation report from at least a portion of the VM loaded into memory of the host; sending the attestation report from the security module to a trust authority; receiving, in response to verification of the attestation report by the trust authority, a secret from the trust authority at the security module; and providing the secret from the security module to the guest.

Abstract: An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts.

Abstract: An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes storing, in a trust authority, a pre-defined attestation report for a workload executing in a virtual machine (VM) managed by the virtualization layer, the pre-defined attestation report including a hash of at least a portion of an image of the VM; receiving, at the trust authority from a security module of a host in which the VM executes, an attestation report generated by measuring memory of the VM; comparing the attestation report with the pre-defined attestation report; and generating an indication of validity for the workload based on a result of the comparison.

Abstract: An example method of application monitoring in a virtualized computing system including a host cluster of having a virtualization layer directly executing on hardware platforms of hosts, the virtualization layer supporting execution of virtual machines (VMs) and integrated with an orchestration control plane includes: receiving, at a pod VM controller, a health monitoring specification, the pod VM controller executing in the virtualization layer external to the VMs; providing, from the pod VM controller to a pod VM agent executing in a pod VM of the VMs, the health monitoring specification, the pod VM including a container engine supporting execution of containers therein; executing, in the pod VM by the pod VM agent, at least one probe of an application executing in one or more of the containers; and returning, from the pod VM agent to the pod VM controller, application health status obtained from the at least one probe.

Abstract: In one set of embodiments, confidential data needed by a workload component running within a worker VM can be placed on an encrypted virtual disk that is attached to the worker VM and hardware-based attestation can be used to validate the worker VM's software and isolate its guest memory from its hypervisor. Upon successful completion of this attestation process, a data decryption key can be delivered to the worker VM via a secure channel established via the attestation, such that the hypervisor cannot read or alter the key. The worker VM can then decrypt the contents of the encrypted virtual disk using the data decryption key, thereby granting the workload component access to the confidential data.

Abstract: A framework is provided that assigns a digital certificate to each VM-based control plane element and computing node (i.e., worker VM) of a workload orchestration platform implemented in a virtualized environment, where the digital certificate is signed by a trusted entity and provides cryptographic proof that the control plane element/worker VM has been successfully attested by that trusted entity using hardware-based attestation. Each control plane element/worker VM is configured to verify the digital certificates of other platform components prior to communicating with those components. With these digital certificates in place, when an end-user submits to the platform's front-end control plane element a new workload for deployment, the end-user can verify the digital certificate of the front-end control plane element in order to be assured that the workload will be deployed and executed by the platform in a secure manner.

Abstract: Example implementations relate hybrid cloud compliance and remediation service. A hybrid cloud management system may comprise a first service to evaluate a compliance check for a hybrid cloud environment utilizing a framework that corresponds to different cloud services of the hybrid cloud environment, a second service to publish a compliance event based on the compliance check of the first service, and a third service to route the compliance event based on a remediation action determined by the third service, where the first, second, and third services are deployed as services in a cluster.

Abstract: Methods, systems, devices and apparatuses for an air management system that circulates air to reduce the cabin temperature within a vehicle. The air management system includes a window configured to allow air circulation within the vehicle. The air management system includes an actuator coupled to the window and configured to open or close the window to control an amount of air circulation. The air management system includes a sensor. The sensor is configured to measure or determine a cabin temperature within the vehicle. The air management system includes an electronic control unit. The electronic control unit is coupled to the actuator and the sensor and configured to determine, using the sensor, that the cabin temperature is greater than or equal to a first temperature and control the actuator to open the window and allow air circulation within the vehicle.

Abstract: Smart window apparatus, systems, and related methods for use with vehicles are disclosed. A disclosed apparatus includes control circuitry configured to obtain data associated with a vehicle that is parked, determine, based on the data, a status of the vehicle associated with relatively high cabin temperature or an unattended occupant in the vehicle, and open a vehicle window via a window actuator to cool the vehicle cabin. The control circuitry is also configured to detect, based on the data, an event in an environment associated with the vehicle while the vehicle window is open and adjust the vehicle window via the window actuator in response to the detection.