Abstract: Constraint based command invocations are dynamically queued in a cloud queue such that aspects of remote user devices may be remotely controlled with reduced exposure to inconvenient remotely issued commands. By monitoring conditions that may trigger command invocations, verifying rules of associated constraints prior to queuing command invocations, evaluating parameters to prioritize command invocations in a dynamic issuing order within cloud queue, examining factors and reverifying previously verified rules when determining whether to transmit a command from an command invocation located at a transmission position of the cloud queue, systems and methods herein provide a constrained environment within which user devices may be remotely controlled relatively free from unexpected cloud caused encumbrances during inopportune moments.

Abstract: An asynchronous accounting method for a blockchain is provided. After a block reaches a consensus, different types of data contained in block information of the block are written into message queues corresponding to the respective types of data. Each of the message queues correspond to a different one of the types of data contained in the block information. A next round of block consensus processing is started after the different types of data are written into the message queues corresponding to the respective types of data. The different types of data are read from the message queues corresponding to the respective types of data to perform persistence processing of a blockchain ledger.

Abstract: Embodiments provide approaches to selectively integrate with various providers based on reliability factors, user preferences, and/or other criteria. For example, a user in a location where an on-demand provider is available may attempt to utilize services provided by the on-demand provider in a different location where the on-demand provider has limited or no services available, but where one or more other on-demand providers may be available. The user may attempt to access services provided by the on-demand provider using an application provided by the on-demand provider. However, in the situation where the user is in the location where services provided by the on-demand provider are not available, the user would have to secure other means of accessing those services. In such a situation the user may be able to utilize the application to request services with at least one partner on-demand provider.

Abstract: There is disclosed in one example a computer apparatus, including: a hardware platform including a central processor unit (CPU) and a memory; and instructions encoded within the memory to instruct the CPU to: enumerate a plurality of running processes, and associate resource demands with the running processes; predict a resource starvation condition for at least one process; rank the plurality of running processes according to a dynamic ranking algorithm, wherein the ranking algorithm includes user engagement as an input for ranking a process; and according to the ranking and a safeguard algorithm, deallocate resources from a process ranked lower than the at least one process and assign the deallocated resources to the at least one process to mitigate the predicted resource starvation condition.

Abstract: A technique provides a solution for establishing a socket connection in a user space. After receiving a request for establishing a socket connection from a first application, the monitor sends the connection request to a second application, wherein the first application and the second application run on the same computing device. Then, the monitor coordinates establishing, in user space of the operating system, a peer-to-peer socket connection between the first application and the second application. By establishing a socket connection in the user space of the operating system, embodiments of the present disclosure can achieve a user space socket connection between different applications within a single computing device, thereby improving the performance of the operating system. In addition, embodiments of the present disclosure use the monitor (or controller) to coordinate inter-application connection establishment and resource allocation, thereby ensuring security of the operating system.

Abstract: A method executes inter-enclave communication via cache memory of a processor. The method includes: instantiating a first enclave such that it is configured to execute a first communication thread, which is configured to read/write data to the cache memory; instantiating a second enclave such that it is configured to execute a second communication thread, which is configured to read/write data to cache memory; executing, by the first enclave, the first communication thread to send message data to the second enclave, executing the first communication thread comprising writing the message data to the cache memory; and executing, by the second enclave, the second communication thread to receive the message data. Executing the second communication thread can include: monitoring the cache memory to determine whether the data message is being sent; and based upon determining the data message is being sent, reading from the cache memory to receive the data message.

Abstract: Methods and systems to improve coupling and cohesion of at least one educational program are provided. In some examples, the methods and systems include at least one educational program, where the at least one educational program comprises a first application programming interface (API) that is configured to be coupled to a second API of an internet enabled electronic device in a restricted state and partially decoupled in an unrestricted state.

Abstract: The present disclosure provides a data processing method and an apparatus and a related product. The products include a control module including an instruction caching unit, an instruction processing unit, and a storage queue unit. The instruction caching unit is configured to store computation instructions associated with an artificial neural network operation; the instruction processing unit is configured to parse the computation instructions to obtain a plurality of operation instructions; and the storage queue unit is configured to store an instruction queue, where the instruction queue includes a plurality of operation instructions or computation instructions to be executed in the sequence of the queue. By utilizing the above-mentioned method, the present disclosure can improve the operation efficiency of related products when performing operations of a neural network model.

Abstract: A processor may identify an action of a first device of the IoT devices. The processor may initiate a transfer from the first device to one or more other devices of the IoT devices. The processor may pause each thread being executed by the first device and the one or more other devices. The processor may transfer a unit from the first device to the one or more other devices.

Abstract: A computer program includes calls to a software library. A virtual function table is built that includes the calls to the software library in the computer program. A programmable device includes one or more currently-implemented accelerators. The available accelerators that are currently-implemented are determined. The calls in the software library that correspond to a currently-implemented accelerator are determined. One or more calls to the software library in the virtual function table are replaced with one or more corresponding calls to a corresponding currently-implemented accelerator. When a call in the software library could be implemented in a new accelerator, an accelerator image for the new accelerator is dynamically generated. The accelerator image is then deployed to create the new accelerator. One or more calls to the software library in the virtual function table are replaced with one or more corresponding calls to the new accelerator.

Abstract: Methods and systems may be associated with a cloud computing environment. A serverless function orchestrator may execute a socket activation for a VM to pre-provision a TCP socket (e.g., setting up virtual interfaces and creating socket structures) before the VM hosts any serverless function associated with the pre-provisioned TCP socket. After this socket activation, the orchestrator may receive a request for a first serverless function and, responsive to the received request, start the first serverless function on the VM using the pre-provisioned TCP socket. After the activation and prior to starting the first serverless function, the system may queue packets received in connection with the pre-provisioned TCP socket. In some embodiments, multiple TCP sockets, each associated with a VM, may activated before any serverless functions are hosted and the first serverless function is started on a VM selected based on information in a serverless function experience data store.

Abstract: An example operation may include a method comprising one or more of receiving a VNFC module status request from a NFVO where the status request specifies a VNFC instance (VNFCI), determining a target OS installation of the VNFCI, retrieving a list of one or more VNFC modules of the VNFCI, determining the status of the one or more VNFC modules wherein the status determination includes at least one or more of constructing a default status command, adapting the command to the target OS, executing the adapted status command, and recording a normalized status result, sending a VNFC module status notification.

Abstract: In an electronic device capable of running multiple software applications concurrently, applications, documents, cards, or other activities can be selected for hibernation so as to free up system resources for other activities that are in active use. A determination is made as to which activities should hibernate, for example based on a determination as to which activities have not been used recently or based on relative resource usage. When an activity is to hibernate, its state is preserved on a storage medium such as a disk, so that the activity can later be revived in the same state and the user can continue with the same task that was being performed before the activity entered hibernation.

Abstract: An example operation may include a method comprising one or more of receiving a VNFC module status request from a NFVO where the status request specifies a VNFC instance (VNFCI), determining a target OS installation of the VNFCI, retrieving a list of one or more VNFC modules of the VNFCI, determining the status of the one or more VNFC modules wherein the status determination includes at least one or more of constructing a default status command, adapting the command to the target OS, executing the adapted status command, and recording a normalized status result, sending a VNFC module status notification.

Abstract: Provided is an information processing device including an arithmetic processing unit that executes arithmetic processing related to calibration of detection of a sight line toward a display unit. The arithmetic processing unit determines calibration executability for each of both eyes based on acquired sight line data and uses only the sight line data of an eye for which calibration is determined to be executable when executing calibration for the eye.

Abstract: A method includes creating a publisher configured to send messages over a channel having a shared memory. The method includes creating at least one subscriber configured to receive the messages over the channel by sequentially referencing memory slots of the plurality of memory slots. The method includes determining that the next sequential memory slot is currently referenced by a subscriber. The method includes delaying sending the message by the publisher based on determining that the next sequential memory slot is currently referenced by the subscriber. The method includes receiving an event trigger indicative of message reading by the subscriber. The method includes, responsive to receiving the event trigger, determining that the next sequential memory slot is not currently referenced. The method includes sending the message to the next sequential memory slot based on determining that the next sequential memory slot is not currently referenced.

Abstract: Methods and system are provided for dynamically securing a workspace based on changes in the security context in which the workspace operates. Upon receiving a request from an IHS for access to a managed resource and receiving attributes of a risk context for the request, a risk score for the request is determined. A workspace definition that provides access to the managed resource is selected based on the risk score. A workspace definition includes security requirements for operation of the workspace by the IHS, where the security requirements are commensurate with the risk score. The workspace definition is transmitted to the IHS for operation of the workspace according to the security requirements. A risk context may include, IHS software, a physical environment in which the IHS is located, a physical location of the IHS, a classification of the requested resource, IHS hardware, and a user of the IHS.

Abstract: Techniques for implementing an on-demand serverless compute system that uses shared memory to share data between on-demand serverless compute applications are described.

Abstract: A system for device-specific event handler generation, includes a computing device configured to configure a first remote device to display an event handler graphic, receive a plurality of data via a data-reception event handler, retrieve at least a memory entry linked to the memory map index, divide a device identifier space into a first identifier set and a disjoint second identifier set, and configure the first remote device to generate a graphical view, wherein the graphical view includes at least a display element generated as a function of the at least a memory entry and a first selectable event graphic corresponding to a first selectable event handler, wherein the first selectable event handler is configured to trigger a first action if first remote device identifier corresponding to the first remote device matches the first identifier set and a second action if the identifier matches the second identifier set.

Abstract: A conferencing computing device, including memory storing one or more dispatch data structures. The conferencing computing device may further include a processor configured to receive a plurality of input packets at a shared port from a plurality of sender computing devices. Based on input packet data and the one or more dispatch data structures, the processor may add each input packet to an input queue bound to the shared port. The processor may transmit the input packets to a plurality of application program instances associated with the input queues. The processor may generate a plurality of output packets at the application program instances. The processor may add each output packet to an output queue associated with the application program instance at which that output packet was generated. The processor may, through the shared port, transmit the output packets to a plurality of recipient computing devices.

Abstract: Embodiments provide approaches to selectively integrate with various providers based on reliability factors, user preferences, and/or other criteria. For example, a user in a location where an on-demand provider is available may attempt to utilize services provided by the on-demand provider in a different location where the on-demand provider has limited or no services available, but where one or more other on-demand providers may be available. The user may attempt to access services provided by the on-demand provider using an application provided by the on-demand provider. However, in the situation where the user is in the location where services provided by the on-demand provider are not available, the user would have to secure other means of accessing those services. In such a situation the user may be able to utilize the application to request services with at least one partner on-demand provider.

Abstract: Embodiments of the present disclosure relate to a method for I/O data transmission in a Hyper-Converged Storage System (HCSS). The HCSS comprises at least one storage node having at least one device constructed with virtualization technology and a storage I/O processing module for accessing persistent storage resource of the HCSS. According to the method, an I/O request of a first type is received from the device by a System Disk front-end driver (SFD), wherein the I/O request of the first type is an I/O request to a system disk of the device. The I/O request of the first type and its corresponding response of a first type are transferred by the SFD between the device and the storage I/O processing module via a first shared memory, wherein the first shared memory is created by allocating a first memory region of the HCSS as the first shared memory.

Abstract: Methods, systems and computer-readable storage media for requesting programming of N portions of a plurality of non-volatile memories (NVMs) in accordance with received data. Redundancy information sufficient to recover from failures of M of the N portions for which programming was requested is updated in response to the requesting programming. Upon identifying one to M of the N portions that have failed the programming, re-programming of the one to M of the N portions is requested in accordance with data calculated based at least in part on the redundancy information.

Abstract: Systems and methods are provided for kernel routine callbacks. Such methods may include hooking a pre-callback handler and a post-callback handler to a pre-existing operating system of a computing device. According to the pre-callback handler, a kernel routine request for a kernel routine to be performed in a kernel mode of the operating system is obtained, whether to allow the kernel routine to be performed is determined, and the kernel routine is caused to be performed in the kernel mode to generate kernel routine results. According to the post-callback handler, whether to allow the kernel routine results of the kernel routine to be returned is determined, and the kernel routine results of the kernel routine is caused to be returned to an application that is executed in a non-kernel mode of the operating system.

Abstract: The present disclosure provides a method for tracking a method-call-chain. The method includes: setting a configuration item for whether to perform a method-call-chain tracking on a current application; intercepting before a method is called, and determining whether call chain information of the method needs to be outputted based on the configuration item; and when it is determined that the call chain information needs to be outputted, recording the call chain information of the method before executing a call request for the method, and outputting the recorded call chain information after the call request for the method is completed. The present disclosure further provides an electronic device and a computer readable storage medium. The method-call-chain tracking method, the electronic device, and the computer readable storage medium provided in the present disclosure allow the tracking of the method-call-chain without rewriting the codes by setting the configuration item and introducing a Spring-AOP.

Abstract: Aspects of the present invention include a method, system and computer program product for managing time sharing option address space on one computer system for a software program running on another computer system. The method includes a processor creating a time sharing option address space on a first computer, the time sharing option address space on a first computer configured to store data; running a computer program on a second computer; and managing data within the time sharing option address space with respect to the computer program running on a second computer.

Abstract: Systems and methods are disclosed for swapping or changing between stacks associated with respective applications when one application calls the other.

Abstract: Providing queuing in a log streaming system. A state of each of a set of queues of messages is maintained by sending messages to a state topic in the log streaming system. Responsive to a client writing a message to one of the queues, writing the message to a message topic for the queue in the log streaming system. Responsive to the client reading from one of the queues, reading a message from the message topic for the queue and storing property types relating to the availability of the message in the state topic for the queue by sending messages to the state topic referencing the message in the message topic.

Abstract: A multi-process interactive system is described. The system includes numerous processes running on a processing device. The processes include separable program execution contexts of application programs, such that each application program comprises at least one process. The system translates events of each process into data capsules. A data capsule includes an application-independent representation of event data of an event and state information of the process originating the content of the data capsule. The system transfers the data messages into pools or repositories. Each process operates as a recognizing process, where the recognizing process recognizes in the pools data capsules comprising content that corresponds to an interactive function of the recognizing process and/or an identification of the recognizing process. The recognizing process retrieves recognized data capsules from the pools and executes processing appropriate to contents of the recognized data capsules.

Abstract: An approach is provided for providing transactional operations in an event-driven polyglot language runtime environment. Native functionalities of a transaction processing system are exposed as interfaces to multiple languages and frameworks in the runtime environment. The transactional operations are called from modules. The transaction processing system is integrated with the modules. A prepare operation is sent to a resource manager (RM) via a resolution thread. For a committed transaction outcome of the resolution thread, the commit is logged, an indication of the commit is sent to the RM, the commit is performed, a completion indication of the commit is sent, and a forget operation is logged. For a rollback transaction outcome of the resolution thread, the rollback is logged, an indication of the rollback is sent to the RM, the rollback is performed, a completion indication of the rollback is sent, and the forget operation is logged.

Abstract: Embodiments of the present disclosure relate to communication methods and devices for virtual base stations. For example, data is sequentially read and written between the hardware accelerator and the general purpose processor of the baseband processing unit at the baseband processing unit arranged with a plurality of virtual base stations, thereby achieving sharing of the traditional hardware accelerator among a plurality of virtual base stations without introducing virtualization layer or increasing hardware complexity.

Abstract: In an embodiment, an operating system for a computer system is built on a set of capabilities. Each capability includes at least one pointer to a function that implements the capability. One or more actors are defined which use one or more of the capabilities, and which may be connected to other actors for communication through channels. The channels may be created and maintained by a channel actor. In an embodiment, one or more actors may be assembled to create a composed actor. The actors within the composed actor still communicate over the channels defined between the internal actors, but may pass channel identifiers for actors outside the composed actor, so that the actors within the composed actor communicate with the outside actors as if they were one single actor. Arbitrarily complex actors may be formed in this fashion, while still maintaining the stability and safety of the initial actors.

Abstract: A method for detecting ransomware. A set of control files in a set of locations in a file system is checked, by a computer system, in response to an event, wherein the set of control files has a set of extensions targeted by the ransomware. In response to detecting a change in any of the set of control files, a file copying process for the file system is disabled by the computer system.

Abstract: Embodiments of the present invention provide a method, system and computer program product for the integration of a rules engine with message oriented middleware. In an embodiment of the invention, a method for managing a messaging component in message oriented middleware has been provided. The method includes creating shared memory in the memory of a computer and adding or deleting tokens in the shared memory corresponding to objects such as messages and message queues, created in and removed from, respectively, in a messaging component of message oriented middleware. The method additionally includes applying rules in a rules engine to the tokens in the shared memory. Finally, the method includes directing management operations in the messaging component responsive to the applied rules by the rules engine.

Abstract: A flight control system for a flight control surface includes a first actuator control electronics (ACE), a second ACE, a third ACE, a first remote electronics unit (REU), and a second REU. The first ACE is configured to generate a first control signal for the flight control surface. The second ACE is configured to generate a second control signal for the flight control surface. The third ACE is configured to generate a third control signal for the flight control surface. The first REU is coupled to the first ACE and the second ACE, and configured to operate, based on the first control signal and the second control signal, an actuator coupled to the flight control surface. The second REU is coupled to the second ACE and the third ACE, and configured to operate, based on the second control signal and the third control signal, the actuator.

Abstract: A hardware-assisted Distributed Memory System may include software configurable shared memory regions in the local memory of each of multiple processor cores. Accesses to these shared memory regions may be made through a network of on-chip atomic transaction engine (ATE) instances, one per core, over a private interconnect matrix that connects them together. For example, each ATE instance may issue Remote Procedure Calls (RPCs), with or without responses, to an ATE instance associated with a remote processor core in order to perform operations that target memory locations controlled by the remote processor core. Each ATE instance may process RPCs (atomically) that are received from other ATE instances or that are generated locally. For some operation types, an ATE instance may execute the operations identified in the RPCs itself using dedicated hardware. For other operation types, the ATE instance may interrupt its local processor core to perform the operations.

Abstract: Generally, this disclosure provides systems, devices, methods and computer readable media for implementing function callback requests between a first processor (e.g., a GPU) and a second processor (e.g., a CPU). The system may include a shared virtual memory (SVM) coupled to the first and second processors, the SVM configured to store at least one double-ended queue (Deque). An execution unit (EU) of the first processor may be associated with a first of the Deques and configured to push the callback requests to that first Deque. A request handler thread executing on the second processor may be configured to: pop one of the callback requests from the first Deque; execute a function specified by the popped callback request; and generate a completion signal to the EU in response to completion of the function.

Abstract: The invention relates to a method for the exchange of engineering data (RED) between independent engineering tools (ET1 . . . ETx) of an engineering system (ESY) and to an engineering system, wherein engineering data (ET1PD . . . ETxPD) of each of the engineering tools (ET1 . . . ETx), which is associated with a project such as a production system, a switching system or a robot cell, is stored in a tool-specific data format in a data memory (SR, SPMR) associated with the engineering tool, and wherein user-selected engineering data (ET1D . . . ETxD) of the engineering tools, which is associated with a system function (SF1 . . . SFn) such as a project management function, a topology management function, a variable exchange function or a diagnosis function and which is of interest for at least an additional one of the engineering tools, is converted by means of a converting unit (ETC1 . . . ETCx) into a standardized data format and is stored in a standardized common data memory (CC).

Abstract: A client-server architecture is used in a multicore computer system to realize a single-core-equivalent (SCE) view. In the system, plural stacks, each having a core and a local cache subsystem coupled thereto, are divided into a client stack for running client threads, and server stacks each for running server threads. A shared cache having shared cache blocks, each coupled to the client stack and to one or more server stacks, is also used. The core of an individual server stack is configured such that computing resources utilizable in executing the server thread(s) are confined to the individual server stack and the shared cache block coupled thereto, isolating an inter-core interference caused by the server thread(s) to the client thread(s) to within the individual server stack, the shared cache block coupled thereto, any server stack coupled to this shared cache block, and the client stack to thereby realize the SCE view.

Abstract: Systems and methods are disclosed for clients and servers operating in a scaled cluster environment. Efficiencies are introduced to the process of connecting a client to a clustered environment by providing the client with the ability to attempt a connection with multiple servers in parallel. Servers operating the in the clustered environment are also capable of providing persistent storage of file handles and other state information. Ownership of the state information and persistent handles may be transferred between servers, thereby providing clients with the opportunity to move from one server to another while maintaining access to resources in the clustered environment.

Abstract: A computer-implemented method of performing inter-process communication includes a first process in a first operating system (OS) level container in a user space sending a message to a buffer process. The message is addressed to a second process in a second OS-level container in the user space. The buffer process communicates the message to the second process. A device for performing the computer-implemented method is also provided.

Abstract: A method for controlling actions for browser extensions includes registering, at a browser process module, a list of one or more rules from a browser extension, where the rules define one or more conditions and one or more corresponding actions to take when the conditions are satisfied. A renderer process module that is in communication with the browser process module applies the conditions to content of web pages rendered in the browser application. The renderer process module determines whether any of the conditions are satisfied by the content of the web pages rendered in the browser application using the renderer process module. The browser process module or the renderer process module performs the actions defined in the rules in response to at least one of the conditions defined in the rules being satisfied.

Abstract: Usages of language are analyzed in ways that are at least partially language independent. In preferred embodiments, portions of a document are hashed, and the resulting hash values are compared with each other and with those of other documents in real-time. Analyses can be used to gauge conformity of a document to one or more standards utilizing a hash triplet consisting of a hash for each document word and two involving the word and its preceding and following words, to provide suggestions to the author, and to filter email.

Abstract: A system for providing virtual applications from a remote based system based on native applications. A front end is configured to receive applications. A sequencer is configured to receive the applications from the front end and sequence the applications into virtual applications streamable to clients by the front end. This includes at least: sequencing a particular application of the received applications into a virtual application using a virtual machine; subsequent to sequencing the particular application, marking the virtual machine in a manner that causes the virtual machine to be reimaged prior to being used to sequence an additional application; and based on the marking, causing the virtual machine to be reimaged.

Abstract: The disclosure relates to technology handling events in a distributed computing environment. Events comprising a function executable by an instance are received from an event queue. The received events are mapped to an instance in a pool that executes a corresponding function. When it is determined that the instances in the pool are at least one of unavailable and do not include the function corresponding to the event, a new instance is created in the pool, where the new instance includes the function corresponding to the event. Instances in the pool may be terminated when frequency of occurrence patterns of the event with a corresponding function indicate the event is occurring less frequently such that fewer instances are required to execute the corresponding function. Otherwise, the events are dispatched to the appropriate instance in the pool for execution.

Abstract: An environment for easily executing a plurality of types of programs in cooperation with each other is provided. A control device includes: a first program executing unit that executes a sequence program for each first control cycle and calculates a first instruction value; a second program executing unit that executes an application program which is described in codes which are sequentially interpreted and calculates a second instruction value for each first control cycle; and a shared memory configured to be accessible by both the first program executing unit and the second program executing unit. The second program executing unit executes the application program while referring to the first shared variable value stored in the shared memory in accordance with the codes described in the application program.

Abstract: A number of transmissions of secure data communicated between a secure trusted device and an unsecure untrusted device in a DBMS is controlled. The data is communicated for database transaction processing in the secure trusted device. The number of transmissions may be controlled by receiving, from the untrusted device, an encrypted key value of a key and a representation of an index of a B-tree structure, decrypting, at the trusted device, the key and one or more encrypted index values, and initiating a transmission, a pointer value that identifies a lookup position in the index for the key. The index comprises secure, encrypted index values. Other optimizations for secure processing are also described, including controlling available computation resources on a secure trusted device in a DBMS and controlling transmissions of secure data that is communicated between a secure trusted device and an unsecure untrusted device in a DBMS.

Abstract: A device may receive, from a consumer device, an application programming interface (API) request that includes information associated with a consumer of data and information associated with a producer of the data. The data may be collected by one or more data sources associated with the producer. The device may identify a consumer context, associated with the consumer, based on the information associated with the consumer. The device may identify a producer context, associated with the producer, based on the information associated with the producer. The device may generate an API response based on the consumer context and the producer context. The API response may include data in accordance with the consumer context and the producer context. The device may provide, to the consumer device, the API response to permit the consumer to view or access the data.

Abstract: A method for transferring memory pages to a first and a second page repository identifies pages in a memory sharing operation for transfer to a first page repository and pages in a memory migration operation for transfer to a second page repository. Pages in the memory migration operation may be prepared for transfer prior to transfer of the pages in the memory sharing operation. Transferring pages in the migration operation may remove the need to transfer pages in the memory sharing operation.

Abstract: A method for messaging between operating system containers includes receiving, by a first proxy in a first user space container, a first message from a first service in the first user space container, the first message sent to the first proxy using a first messaging mechanism, forwarding, by the first proxy, the first message to a second proxy in a second user space container, the first message sent to the second proxy using a second messaging mechanism that is different than the first messaging mechanism, and delivering, by the second proxy, the first message to a second service in the second user space container.