Abstract: A method, system, apparatus, and computer program product for efficiently outsourcing projects, such as software development projects, are presented. A business entity may precisely and succinctly define one or more requests for proposals (RFPs) using predefined service identifiers which specify discrete, short-term projects (e.g., 4 weeks or less) with fixed inputs and outputs and objective evaluation metrics which allow for each project to be evaluated using, for example, automated evaluation software tools. By posting RFPs on a web site, the business entity solicits bids from third party vendors to perform the project identified in the RFP. Since individual projects are identified with objective inputs, outputs, and evaluation metrics, vendors can bid on the project with minimal evaluation and speculation regarding the appropriate bidding price for the project.

Abstract: A method, system, apparatus, and computer program product for efficiently outsourcing projects, such as software development projects, are presented. A business entity may precisely and succinctly define one or more requests for proposals (RFPs) using predefined service identifiers which specify discrete, short-term projects (e.g., 4 weeks or less) with fixed inputs and outputs and objective evaluation metrics which allow for each project to be evaluated using, for example, automated evaluation software tools. By posting RFPs on a web site, the business entity solicits bids from third party vendors to perform the project identified in the RFP. Since individual projects are identified with objective inputs, outputs, and evaluation metrics, vendors can bid on the project with minimal evaluation and speculation regarding the appropriate bidding price for the project.

Abstract: Method, apparatus, and computer program product are provided for dynamically changing containerized workload isolation in response to detection of a triggering factor. In some embodiments, workload is containerized using a default container runtime (e.g., runC) that spawns one or more cgroup-based containers on a compute node using resource limiting capabilities of the compute node's host kernel including cgroups and namespaces. In some embodiments, in response to a triggering factor, such as a host kernel vulnerability, at least some of the containerized workload is migrated from running in the one or more cgroup-based containers to one or more virtual machines (VMs) launched by a standby container runtime (e.g., runV). In some embodiments, the cgroups and namespaces of the one or more cgroup-based containers are live migrated, without service interruption, to one or more VM runtimes on the one or more VMs using CRIU—checkpoint/restore in userspace.

Abstract: A method, system, apparatus, and computer program product for efficiently outsourcing projects, such as software development projects, are presented. A business entity may precisely and succinctly define one or more requests for proposals (RFPs) using predefined service identifiers which specify discrete, short-term projects (e.g., 4 weeks or less) with fixed inputs and outputs and objective evaluation metrics which allow for each project to be evaluated using, for example, automated evaluation software tools. By posting RFPs on a web site, the business entity solicits bids from third party vendors to perform the project identified in the RFP. Since individual projects are identified with objective inputs, outputs, and evaluation metrics, vendors can bid on the project with minimal evaluation and speculation regarding the appropriate bidding price for the project.

Abstract: Method, apparatus, and computer program product are provided for dynamically changing containerized workload isolation in response to detection of a triggering factor. In some embodiments, workload is containerized using a default container runtime (e.g., runC) that spawns one or more cgroup-based containers on a compute node using resource limiting capabilities of the compute node's host kernel including cgroups and namespaces. In some embodiments, in response to a triggering factor, such as a host kernel vulnerability, at least some of the containerized workload is migrated from running in the one or more cgroup-based containers to one or more virtual machines (VMs) launched by a standby container runtime (e.g., runV). In some embodiments, the cgroups and namespaces of the one or more cgroup-based containers are live migrated, without service interruption, to one or more VM runtimes on the one or more VMs using CRIU—checkpoint/restore in userspace.