Abstract: Methods, systems, and computer program products for direct assignment of physical devices to confidential virtual machines (VMs). At a first guest privilege context of a guest partition, a direct assignment of a physical device associated with a host computer system to the guest partition is identified. The guest partition includes the first guest privilege context and a second guest privilege context, which is restricted from accessing memory associated with the first guest privilege context. The guest partition corresponds to a confidential VM, such that a memory region associated with the guest partition is inaccessible to a host operating system. It is determined, based on a policy, that the physical device is allowed to be directly assigned to the guest partition. Communication between the physical device and the second guest privilege context is permitted, such as by exposing the physical device on a virtual bus and/or forwarding an interrupt.

Abstract: Apparatus include a plurality of electrodes arranged in a sequence along a propagation axis between an ion inlet and an ion outlet to define an ion path and volume, wherein the electrodes are configured to receive respective voltages to produce an electric field in the volume that urges ions to propagate along the ion path downstream towards the ion outlet, wherein the sequence includes at least a first sequence portion including first and last electrodes configured to receive voltages according to a first function, and including at least one intermediate electrode situated between the first and last electrodes wherein the at least one intermediate electrode is configured to receive a voltage defining a voltage dip relative to the first function. Atmospheric flow tubes include a tube body and a central electrode configured to receive a time varying voltage configured to reduce a loss of the ions as the gas and ions flow along the flow tube volume to the flow tube outlet.

Abstract: Disclosed herein are embodiments of a system for selectively ionizing samples that may comprise a plurality of different analytes that are not normally detectable using the same ionization technique. The disclosed system comprises a unique split flow tube that can be coupled with a plurality of ionization sources to facilitate using different ionization techniques for the same sample. Also disclosed herein are embodiments of a method for determining the presence of analytes in a sample, wherein the number and type of detectable analytes that can be identified is increased and sensitivity and selectivity are not sacrificed.

Abstract: Disclosed herein are embodiments of a system for selectively ionizing samples that may comprise a plurality of different analytes that are not normally detectable using the same ionization technique. The disclosed system comprises a unique split flow tube that can be coupled with a plurality of ionization sources to facilitate using different ionization techniques for the same sample. Also disclosed herein are embodiments of a method for determining the presence of analytes in a sample, wherein the number and type of detectable analytes that can be identified is increased and sensitivity and selectivity are not sacrificed.