International Business Machines Corporation

Yanyan Hu

Guang Cheng Li

Chao Zhu

Yubo Li

Yuan Yuan

Shengjiao Cao

Rong Yan

Yonghua Lin

Angelo De Caro

Karthik Nandakumar

Qiming Teng

An example operation may include one or more of receiving one or more responses to a storage request for a blockchain from one or more endorser nodes of the blockchain, extracting transaction data of the storage request included in the one or more responses, generating a zero-knowledge proof of endorsement based on the extracted transaction data and the one or more responses, and transmitting the zero-knowledge proof to a blockchain node for inclusion within a data block among a hash-linked chain of data blocks.

Zero-knowledge proof for blockchain endorsement

An example operation may include one or more of receiving, at an endorser node, a request message from a client system which comprises data to be stored on a blockchain, determining whether to endorse the data via invocation of chaincode which receives the data as input and executes the data against a current state of the blockchain, in response to a determination to endorse the data, generating a response message including a result of the execution and signing the response message based on a traceable blinded ring signature associated with the endorser node, and transmitting the generated response message that has been signed with the traceable blinded key ring to the client system.

Blinded endorsement for blockchain

Examples of techniques for running kernel dependent applications in containers are disclosed. In one example implementation, a method includes initiating, by a processing system, a user mode Linux (UML) kernel in a container of a host. The method further includes initiating, by the processing system, an agent inside the UML, the agent configured to handle system call redirection from a host kernel of the host. The method further includes enabling, by the processing system, a system call hook kernel module on the host to hook a system call received from the container. The method further includes determining, by the processing system, whether the UML kernel is running inside the container. The method further includes, based at least in part on determining that the UML is running inside the container, passing, by the processing system, the system call to the UML kernel inside the container.

Running a kernel-dependent application in a container

A method, computer program product, and computer system are provided for running an application over a host kernel. The method intercepts a system call initiated by a container instance running on a host kernel, then determines whether the initiating container instance is tagged with a mapping to a virtual machine (VM) also running on the host kernel. The method further redirects the system call to the mapped VM responsive to the initiating container instance being tagged with a mapping to a VM, wherein the system call is to be processed by the VM.

Running kernel dependent applications inside a container

A resource management method, system, and computer program product for creating a dummy virtual machine (VM) in a Virtual Machine (VM) hypervisor and a dummy container in a container engine for a resource management purpose, adding hooks for each of the VM and the container, and calling the container engine to update a resource allocation in the dummy container when the hook of the VM is started and the VM hypervisor to update a resource allocation in the dummy VM when the hook of the container is started.

Managing system resources in containers and virtual machines in a coexisting environment

A computer-implemented method for collecting usage data includes running, by a computer processor, virtual firmware at least partially in a virtual hardware layer of a virtual machine. Usage data describing the virtual machine is received, at the virtual firmware and from a kernel subsystem of the virtual machine. The usage data is transmitted from the virtual firmware to a collector on a host machine that hosts the virtual machine.

Growing community of inventors

Beijing, China

Yanyan Hu