Snapshot retention lock at file system, file set/directory level to instantly lock all files

Patent metadata

Field	Value
Publication number	US-11954067-B2
Application number	US-202117495325-A
Country	US
Kind code	B2
Filing date	Oct 6, 2021
Priority date	Oct 6, 2021
Publication date	Apr 9, 2024
Grant date	Apr 9, 2024

Abstract

A snapshot is taken of at least a portion of a file system having a set of files to retain over a retention duration. The snapshot is taken at a level of the file system or a directory of the file system. A retention lock is applied to the snapshot to block, over the retention duration, operations involving deletion of the snapshot. The retention lock is not applied to the set of files.

First claim

What is claimed is:

1. A method of indirectly protecting files comprising:
periodically closing an air gap between a primary backup storage system and a vault storage system;
upon the air gap being closed, replicating at least a portion of a file system comprising a plurality of files to retain over a retention duration from the primary backup storage system to the vault storage system; and
after replication of the files to the vault storage system,
taking a snapshot of the files at the vault storage system, the snapshot being at a level of the file system or a directory of the file system; and
applying a retention lock to the snapshot at the vault storage system to block, over the retention duration, operations involving deletion of the snapshot, but not applying the retention lock to the files, the files at the vault storage system thereby remaining unlocked.

2. The method of claim 1 wherein the snapshot is a first snapshot, is of a first directory of the file system, and the method further comprises:
taking a second snapshot of a second directory of the file system, the second directory being a child directory of the first directory, the first directory thereby being a parent directory; and
inheriting, by the second snapshot, the retention lock applied to the first snapshot.

3. The method of claim 1 wherein the snapshot is a first snapshot, is of a first directory of the file system, the retention lock is a first retention lock, and the method further comprises:
taking a second snapshot of a second directory of the filesystem, the second directory being a parent directory of the first directory;
applying a second retention lock to the second snapshot;
taking a third snapshot of a third directory of the file system, the third directory being a child directory of the first directory; and
inheriting, by the third snapshot, a retention lock applied to one of the first or second snapshots, the inherited retention lock having a retention duration greater than a retention duration of another of the first or second snapshots.

4. The method of claim 1 wherein the snapshot is a first snapshot, is of a first directory of the file system, the retention lock is a first retention lock, and the method further comprises:
taking a second snapshot of the first directory;
applying a second retention lock to the second snapshot;
taking a third snapshot of a second directory of the file system, the second directory being a child directory of the first directory; and
inheriting, by the third snapshot, a retention lock of one of the first or second snapshots, the inherited retention lock having a retention expiration date later than a retention expiration date of another of the first or second snapshots.

5. The method of claim 1 wherein the snapshot is a first snapshot, is of a first directory of the file system, and the method further comprises:
after the retention lock of the first snapshot has expired, receiving a request to delete the first snapshot;
determining that there exists a second snapshot of a second directory of the file system, the second directory being a child directory of the first directory, and the second snapshot having a retention lock that has not expired; and
blocking the request to delete the first snapshot.

6. The method of claim 1 wherein the applying a retention lock comprises:
setting in metadata of the snapshot a flag indicating that the snapshot is retention-locked for the retention duration.

7. The method of claim 1 wherein the vault storage system comprises security credentials separate from the primary backup storage system.

8. The method of claim 1 further comprising:
receiving a request to modify the retention lock applied to the snapshot at the vault storage system;
determining whether the request is to shorten an expiration date of the retention lock or extend the expiration date;
if the request is to shorten the expiration date, denying the request; and
if the request is to extend the expiration date, allowing the request.

9. A system for indirectly protecting files comprising: a processor; and memory configured to store one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of:
periodically closing an air gap between a primary backup storage system and a vault storage system;
upon the air gap being closed, replicating at least a portion of a file system comprising a plurality of files to retain over a retention duration from the primary backup storage system to the vault storage system; and
after replication of the files to the vault storage system,
taking a snapshot of the files at the vault storage system, the snapshot being at a level of the file system or a directory of the file system; and
applying a retention lock to the snapshot at the vault storage system to block, over the retention duration, operations involving deletion of the snapshot, but not applying the retention lock to the files, the files at the vault storage system thereby remaining unlocked.

10. The system of claim 9 wherein the snapshot is a first snapshot, is of a first directory of the file system, and the processor further carries out the steps of:
taking a second snapshot of a second directory of the file system, the second directory being a child directory of the first directory, the first directory thereby being a parent directory; and
inheriting, by the second snapshot, the retention lock applied to the first snapshot.

11. The system of claim 9 wherein the snapshot is a first snapshot, is of a first directory of the file system, the retention lock is a first retention lock, and the processor further carries out the steps of:
taking a second snapshot of a second directory of the filesystem, the second directory being a parent directory of the first directory;
applying a second retention lock to the second snapshot;
taking a third snapshot of a third directory of the file system, the third directory being a child directory of the first directory; and
inheriting, by the third snapshot, a retention lock applied to one of the first or second snapshots, the inherited retention lock having a retention duration greater than a retention duration of another of the first or second snapshots.

12. The system of claim 9 wherein the snapshot is a first snapshot, is of a first directory of the file system, the retention lock is a first retention lock, and the processor further carries out the steps of:
taking a second snapshot of the first directory;
applying a second retention lock to the second snapshot;
taking a third snapshot of a second directory of the file system, the second directory being a child directory of the first directory; and
inheriting, by the third snapshot, a retention lock of one of the first or second snapshots, the inherited retention lock having a retention expiration date later than a retention expiration date of another of the first or second snapshots.

13. The system of claim 9 wherein the snapshot is a first snapshot, is of a first directory of the file system, and the processor further carries out the steps of:
after the retention lock of the first snapshot has expired, receiving a request to delete the first snapshot;
determining that there exists a second snapshot of a second directory of the file system, the second directory being a child directory of the first directory, and the second snapshot having a retention lock that has not expired; and
blocking the request to delete the first snapshot.

14. The system of claim 9 wherein the applying a retention lock comprises:
setting in metad

Assignees

• Dell Products Lp

Inventors

• Gunda Kalyan C
• Rath Jagannathdas

Classifications

• G06F16/128 Primary

  Details of file system snapshots on the file-level, e.g. snapshot creation, administration, deletion (error detection or correction of the data by redundancy in operations or in hardware G06F11/14, G06F11/16) · CPC title

• G06F11/1448

  Management of the data involved in backup or backup restore · CPC title

• G06F16/122

  using management policies (point-in-time backing up or restoration of persistent data G06F11/1446; file migration policies for HSM systems G06F16/185) · CPC title

• G06F16/176

  Support for shared access to files; File sharing support · CPC title

• G06F2201/84

  Using snapshots, i.e. a logical point-in-time copy of the data · CPC title