Abstract: A computer-implemented method includes receiving a request from a user, the request being one of a first request to push an image layer of a container from a local graph to an image repository or a second request to pull an image layer of a container image from the image repository to the local graph. The method further includes identifying permissions associated with the user and determining whether the permissions associated with the user authorize the user to perform an action associated with the request. The method further includes, responsive to determining that the permissions associated with the user authorize the user to perform the action associated with the request, performing the action, the action being one of pushing the image layer of the container from the local graph to the image repository or pulling the image layer of the container image from the image repository to the local graph.

Abstract: Container dependency management is provided. The container dependency management includes identifying a software service process file for a container at runtime, comparing the software service process file to a dependency management file for the container to identify one or more unreferenced dependencies, deleting the one or more unreferenced dependencies from the container, and in response to identifying a run error related to a first deleted dependency of the one or more unreferenced dependencies, rolling back deletion of the first deleted dependency.

Abstract: An image layer of a container image deployed as a container on a local resource is identified as having a patch in error. The image layer is marked, at an image repository, as having the patch in error. It is determined that one or more image layers of the container have a dependency on the image layer having the patch in error. The one or more image layers that have the dependency are indicated at the image repository. Recovery of the container is initiated, and the recovery is based on at least one of the marking or the indicating. To recover the container, selected image layers are to be pulled from the image repository. The image layer marked as having the patch in error and the one or more image layers indicated as having the dependency on the image layer are to be omitted from being pulled.

Abstract: World foundation models (WFMs) are trained to process video frames (observations) and a text prompt (perturbation) to generate output video corresponding to future observations based on the video frames and text prompt. Training WFMs requires a large amount of high-quality video training data with diverse content and action that is consistent with the physical world. The WFMs are trained to generate output video while maintaining three-dimensional consistency and physics accuracy. An image data curation pipeline is implemented that may be scaled to process large quantities of video data to produce a high-quality video training dataset.

Abstract: An image layer of a container image deployed as a container is identified as having a patch in error. The image layer is marked, at an image repository, as having the patch in error. It is determined that one or more image layers have a dependency on the image layer. The dependency for a particular image layer is one type selected from multiple types including a direct dependency and an indirect dependency. The one or more image layers that have the dependency are indicated at the image repository. Recovery of the container is initiated, and the recovery is based on at least one of the marking or the indicating. To recover the container, selected image layers are to be pulled from the image repository. The image layer marked as having the patch in error and the one or more image layers are to be omitted from being pulled.

Abstract: Methods, computer program products, and systems are presented. The method computer program products, and systems can include, for instance: performing natural language processing to process a text string of a user, wherein the text string specifies characteristics of a container image to be built; processing, with use of natural language processing, instances of text-based data that describe respective ones of a plurality of container images stored within a container image repository; selecting, in dependence on a result of the performing natural language processing, and the processing, a base image from the plurality of container images; and presenting prompting data to the user that prompts building of a new container image, wherein the prompting data references the base image.

Abstract: Embodiments of the present disclosure provide a solution for multimodal data processing. A method comprises: obtaining image data and text data; and extracting a target visual feature of image data and a target textual feature of text data using a feature extraction model. The feature extraction model comprises alternatively deployed cross-modal encoding parts and visual encoding parts. The extracting comprises: performing, using a first cross-modal encoding part of the feature extraction model, cross-modal feature encoding on a first intermediate visual feature of the image data and a first intermediate textual feature of the text data, to obtain a second intermediate visual feature and a second intermediate textual feature; performing, using a first visual encoding part of the feature extraction model, visual modal feature encoding on the second intermediate visual feature, to obtain a third intermediate visual feature.

Abstract: A computer-implemented method for debugging microservices within a Trusted Execution Environment (TEE). The TEE receives a debugging script and its corresponding digital signature. The debugging script is digitally signed by a private key to create the digital signature. The TEE verifies the authenticity and integrity of the debugging script by using a public key to validate the digital signature. The TEE executes the debugging script to perform debugging operations on the microservices and generates debugging results. The TEE encrypts the debugging results using the public key and transmits the encrypted debugging results to a logging service for storage.

Abstract: A supramolecule compound, a two-dimensional rare earth oxysalt, and a preparation method therefor are provided. By utilizing a series of ?-conjugated planar supramolecule compounds as synthesis templates, a variety of novel two-dimensional rare earth oxysalts can be produced. By carefully fine-tuning the properties of the supramolecule compound template, along with the types of oxoanion and organic amine, it is possible to effectively and precisely obtain two-dimensional rare earth oxysalts with diverse structures. This template-based synthesis strategy, leveraging supramolecule compounds, is highly versatile and applicable to all rare earth elements. It enables the preparation of two-dimensional rare earth oxysalts with uniform structures, containing either a single rare earth element or multiple elements, and allows for precise control over the material's properties.

Abstract: A surge protection device. The surge protection device includes a base and a protection module; the protection module includes inverted snaps, a slide groove, a PCB, a light guide column, and a Type-C interface; the base includes a lower housing, a cover, a grounding piece, wiring terminals, wire plugging ports, clips, inverted snap grooves, bus pins, and grounding clips; each wiring terminal includes a pressing block, a U-shaped elastic piece, and a copper busbar; the base and the protection module are connected by means of the clips, the inverted snap grooves, and the inverted snaps; and the slide groove is of an error-proof design. According to the present invention, wire plugging and unplugging can be achieved without using tools, and ordered arrangement of wires is achieved; in addition, a 30 kA instantaneous current or a larger impact current can be resisted.

Abstract: The present disclosure relates to optical lenses, camera modules, and electronic devices. One example optical lens includes a front lens element group, a first reflector, and a rear lens element group that are sequentially arranged in a direction from an object side to an image side. The first reflector is configured to reflect a ray from the front lens element group to the rear lens element group. The front lens element group is a fixed lens element group, and the first reflector is rotatably disposed in the lens to implement optical image stabilization.

Abstract: An optical lens includes a front lens group, a first turning element, a first rear lens group, and a second rear lens group. The front lens group includes a first front lens group and a second front lens group. When the first turning element is at a first position, the first turning element is on an image side of the first front lens group and reflects an emergent light beam of the first front lens group, and the optical lens has a first effective focal length F1. When the first turning element is at a second position, the first turning element is on an image side of the second front lens group and reflects an emergent light beam of the second front lens group, and the optical lens has a second effective focal length F2. The second effective focal length F2 is greater than the first effective focal length F1.

Abstract: Protection of sensitive data during debugging of a microservice executable is provided by generating, by a compiler, a customized debugging information file to facilitate debugging of the microservice executable in a confidential computing environment. The customized debugging information file is customized to protect sensitive microservice data during debugging of the microservice executable. The generating includes analyzing, by the compiler, microservice source code to identify one or more code regions of sensitive microservice data to be protected during debugging of the microservice executable, and based on the analyzing, generating the customized debugging information file, where the customized debugging information file excludes debugging information data for the identified sensitive microservice data to be protected. The method also includes providing the customized debugging information file to the confidential computing environment to facilitate the debugging of the microservice executable.

Abstract: Examples described herein provide a computer-implemented method that includes downloading a container image from an image repository. The method further includes deploying the container image as a container at a local graph. The method further includes identifying an image layer of the container image of the container as having a patch in error. The method further includes marking, at the image repository, the image layer as having the patch in error by modifying attributes of a manifest configuration for the image layer having the patch in error. The method further includes renewing the image layer with the patch in error on the local graph by setting a renewal attribute for the image layer having the patch in error to a renewal state.

Abstract: A unified place recognition framework handles both retrieval and re-ranking with a unified transformer model. The re-ranking modules utilizes feature correlation, attention value, and x/y coordinates into account, and learns to determine whether an image pair is from a same location.

Abstract: An approach is provided for quick container migration. Image metadata is retrieved from an image of a container being migrated from an old to a new server. Container migration-related information is extracted from the image metadata and the extracted information is analyzed. A new manifest is created that includes migration information based on the analyzed extracted information. Metadata of the container is analyzed and a new startup command is generated by combining the analyzed metadata of the container with other metadata of the container, new service port information, and disk usage information. Based on the analyzed metadata of the container, media including disks and images are uploaded to a directory in the new server. A service is started in the new server by running the new startup command. A startup of the container in the new server is verified.

Abstract: Embodiments check that a debugging mode of a code enables a data protection compilation; load a debugging information entry with a new attribute having a true value in response to the debugging mode of the code enabling the data protection compilation; activate a debugging session of the code; parse the debugging information entry with the new attribute; determine that the new attribute has the true value in response to parsing the debugging information entry with the new attribute; generate an enhanced debugging reply packet with a protect flag having the true value in response to determining that the new attribute has the true value; and prevent access of a variable of the code in response to determining that the new attribute has the true value.

Abstract: A system may include a memory and a processor in communication with the memory. The processor may be configured to perform operations. The operations may include monitoring network actions between resources within a network and extracting encryption data from said network actions. The operations may include detecting connection security data from said encryption data and obtaining a resource health report for a resource in said network. The operations may include merging connection security data with said resource health report and generating a security compliance report.

Abstract: Managing container privileges is provided. It is determined whether a result of comparing a request for an operation privilege to perform a privileged operation by a privileged container against privilege approval rules is an approval of the request. In response to determining that the result of comparing the request for the operation privilege to perform the privileged operation by the privileged container against the privilege approval rules is the approval of the request, the operation privilege is granted to the privileged container to perform the privileged operation. The privileged operation is performed using the privileged container.

Abstract: Automatic redeploying/upgrade of containers on multiple nodes using an Automated Deployment Software (ADS) having an Automated Deployment Tool (ADT) includes updating the ADS with a planned patch of a target layer, introducing a patchname sync command into the ADT to introduce a required patch type/specific patch and redeploy the containers, updating the ADT with a Producer Module (PM) and a Consumer Module (CM), running the ADT to cause the PM to update an image manifest item attribute, and push the image manifest item/new layer to a repository and running the ADT to cause the CM to read the image manifest item, identify and pull the unimpacted layers, and performing at least one of deploying/upgrading an application, or waiting for an available patch fix and deploying/upgrading the application.