Software update rollbacks using file system volume snapshots

Patent metadata

Field	Value
Publication number	US-10509646-B2
Application number	US-201715720203-A
Country	US
Kind code	B2
Filing date	Sep 29, 2017
Priority date	Jun 2, 2017
Publication date	Dec 17, 2019
Grant date	Dec 17, 2019

Abstract

The embodiments set forth a technique for restoring a computing device to an operable state when a software update renders the computing device inoperable. According to some embodiments, a snapshot of a file system volume is automatically generated prior to executing the software update. When an issue is detected with the software update—e.g., the computing device freezes, the computing device cannot boot into an operable mode, etc.—the computing device can (1) automatically enter into a restoration mode, and (2) restore the file system volume to its previous state in accordance with the snapshot. In this manner, the issues caused by the software update are entirely mitigated, and the computing device can transition back into an operable state.

First claim

What is claimed is:

1. A method for restoring a computing device to an operable state in response to a software update that renders the computing device inoperable, the method comprising, at the computing device:
receiving the software update;
identifying a file system volume to which the software update corresponds;
generating an update flag within the computing device;
generating a snapshot of the file system volume;
executing an installation of the software update;
in response to detecting the installation of the software update, instantiating an operability monitor that executes in isolation from the software update, wherein the operability monitor is configured to:
monitor the installation of the software update to determine whether the computing device remains operable during the software update; and

in response to detecting the update flag during a reboot of the computing device:
instantiating the operability monitor to identify whether the computing device is inoperable subsequent to the software update being installed, wherein, when the operability monitor identifies that the computing device is inoperable, the operability monitor causes the file system volume to be restored based on the snapshot.

2. The method of claim 1 , wherein the software update comprises at least one of an operating system update, a device driver update, a firmware update, or a wireless carrier update.

3. The method of claim 1 , wherein the update flag is generated prior to generating the snapshot of the file system volume.

4. The method of claim 1 , further comprising, in response to identifying that the computing device is operable:
removing the update flag from the computing device.

5. The method of claim 1 , wherein the computing device is inoperable when an operating system on the computing device is unable to (1) load a user login screen, or (2) advance beyond the user login screen when valid login credentials are provided.

6. The method of claim 1 , wherein restoring the file system volume based on the snapshot comprises:
loading a recovery module that restores the file system volume based on the snapshot to cause all changes invoked from installing the software update to be eliminated within the file system volume.

7. The method of claim 1 , wherein the computing device is inoperable when at least one of the following conditions is met:
a power failure occurs at the computing device while installing of the software update that results in a corruption of the file system volume;
an incompatibility exists between a current software version and the software update; or
a bug is included in the software update.

8. The method of claim 1 , wherein the snapshot of the file system volume is generated when the file system volume is mounted and is being utilized by the computing device.

9. At least one non-transitory computer readable storage medium configured to store instructions that, when executed by at least one processor included in a computing device, cause the computing device to self-restore to an operable state in response to a software update that renders the computing device inoperable, by carrying out steps that include:
receiving the software update;
identifying a file system volume to which the software update corresponds;
generating an update flag within the computing device;
generating a snapshot of the file system volume;
executing an installation of the software update;
in response to detecting the installation of the software update, instantiating an operability monitor that executes in isolation from the software update, wherein the operability monitor is configured to:
monitor the installation of the software update to determine whether the computing device remains operable during the software update; and

in response to detecting the update flag during a reboot of the computing device:
instantiating the operability monitor to identify whether the computing device is inoperable subsequent to the software update being installed, wherein, when the operability monitor identifies that the computing device is inoperable, the operability monitor causes the file system volume to be restored based on the snapshot.

10. The at least one non-transitory computer readable storage medium of claim 9 , wherein the software update comprises at least one of an operating system update, a device driver update, a firmware update, or a wireless carrier update.

11. The at least one non-transitory computer readable storage medium of claim 9 , wherein the update flag is generated prior to generating the snapshot of the file system volume.

12. The at least one non-transitory computer readable storage medium of claim 9 , wherein the steps further include, in response to identifying that the computing device is operable:
removing the update flag from the computing device.

13. The at least one non-transitory computer readable storage medium of claim 9 , wherein the computing device is inoperable when an operating system on the computing device is unable to (1) load a user login screen, or (2) advance beyond the user login screen when valid login credentials are provided.

14. The at least one non-transitory computer readable storage medium of claim 9 , wherein restoring the file system volume based on the snapshot comprises:
loading a recovery module that restores the file system volume based on the snapshot to cause all changes invoked from installing the software update to be eliminated within the file system volume.

15. A computing device configured to self-restore to an operable state in response to determining that a software update renders the computing device inoperable, the computing device comprising:
at least one processor; and
at least one memory storing instructions that, when executed by the at least one processor, cause the computing device to:
receive the software update;
identify a file system volume to which the software update corresponds;
generate an update flag within the computing device;
generate a snapshot of the file system volume;
execute an installation of the software update;
in response to detecting the installation of the software update, instantiating an operability monitor that executes in isolation from the software update, wherein the operability monitor is configured to:
monitor the installation of the software update to determine whether the computing device remains operable during the software update; and

in response to detecting the update flag during a reboot of the computing device:
instantiate the operability monitor to identify whether the computing device is inoperable subsequent to the software update being installed, wherein, when the operability monitor identifies that the computing device is inoperable, the operability monitor causes the file system volume to be restored based on the snapshot.

16. The computing device of claim 15 , wherein the software update comprises at least one of an operating system update, a device driver update, a firmware update, or a wireless carrier update.

17. The computing device of claim 15 , wherein the update flag is generated prior to generating the snapshot of the file system volume.

18. The computing device of claim 15 , wherein the at least one processor further causes the computing device to, in response to identifying that the computing device is operable:
remove the update flag from the computing device.

19. The computing device of claim 15 , wherein the computing device is inoperable when an operating system on the computin

Assignees

• Apple Inc

Inventors

• Wolf Christopher A
• Matthew Jack R

Classifications

• G06F16/11

  File system administration, e.g. details of archiving or snapshots (error detection or correction of the data by redundancy in operations G06F11/14) · CPC title

• G06F9/4411

  Configuring for operating with peripheral devices; Loading of device drivers · CPC title

• G06F16/162

  Delete operations (erasing in storage systems G06F3/0652) · CPC title

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F8/71 Primary

  Version control (security arrangements therefor G06F21/57); Configuration management · CPC title