Container-first architecture

Patent metadata

Field	Value
Publication number	US-12032977-B2
Application number	US-202017440701-A
Country	US
Kind code	B2
Filing date	May 11, 2020
Priority date	May 10, 2019
Publication date	Jul 9, 2024
Grant date	Jul 9, 2024

Abstract

In one embodiment, a computing device comprises memory circuitry and processing circuitry. The memory circuitry is to store a plurality of container images, comprising: a first container image comprising a first set of applications; and a second container image comprising a virtual machine, a guest operating system, and a second set of applications. The processing circuitry is to: instantiate a plurality of containers on a host operating system, wherein the plurality of containers comprises a first container and a second container; execute the first set of applications in the first container, wherein the first set of applications is to be executed on the host operating system; and execute the virtual machine in the second container, wherein the guest operating system is to be executed on the virtual machine and the second set of applications is to be executed on the guest operating system.

First claim

What is claimed is:

1. A computing device, comprising:
memory circuitry to store a plurality of container images, wherein the plurality of container images comprises:
a first container image comprising a first set of applications, wherein the first set of applications is to be executed on a host operating system; and
a second container image comprising a virtual machine, a guest operating system, and a second set of applications, wherein the guest operating system is to be executed on the virtual machine and the second set of applications is to be executed on the guest operating system; and
processing circuitry to:
instantiate a plurality of containers on the host operating system, wherein the plurality of containers correspond to the plurality of container images, and wherein the plurality of containers comprises a first container corresponding to the first container image and a second container corresponding to the second container image;
execute the first set of applications in the first container, wherein the first set of applications is to be executed on the host operating system; and
execute the virtual machine in the second container, wherein the guest operating system is to be executed on the virtual machine and the second set of applications is to be executed on the guest operating system.

2. The computing device of claim 1 , wherein the processing circuitry to execute the virtual machine in the second container is further to:
detect a set of hardware characteristics on the computing device; and
dynamically configure the virtual machine based on the set of hardware characteristics detected on the computing device.

3. The computing device of claim 2 , wherein the processing circuitry to execute the virtual machine in the second container is further to:
identify a set of hardware requirements for the virtual machine; and
determine that the set of hardware characteristics detected on the computing device satisfy the set of hardware requirements for the virtual machine.

4. The computing device of claim 3 , wherein the set of hardware characteristics detected on the computing device comprises a central processing unit (CPU) type, a number of available CPU cores, and a memory capacity.

5. The computing device of claim 1 , wherein the memory circuitry comprises persistent memory circuitry, and wherein the persistent memory circuitry is to persistently store an operating system image for the host operating system in an immutable state.

6. The computing device of claim 5 , wherein the persistent memory circuitry is further to persistently store an initial RAM disk of the host operating system in the immutable state.

7. The computing device of claim 1 , wherein the processing circuitry is further to perform, upon boot of the computing device, an integrity verification on:
a system BIOS of the computing device;
an operating system image of the host operating system; and
the plurality of container images.

8. The computing device of claim 1 , wherein the processing circuitry is further to instantiate, upon boot of the host operating system, a container runtime environment to bootstrap user space on the host operating system.

9. The computing device of claim 1 , wherein the processing circuitry is further to configure, via a software-defined silicon interface, one or more hardware configuration controls of the computing device with a per-container scope.

10. At least one non-transitory machine-readable storage medium having instructions stored thereon, wherein the instructions, when executed on processing circuitry of a computing device, cause the processing circuitry to:
retrieve, from memory circuitry, a plurality of container images, wherein the plurality of container images comprises:
a first container image comprising a first set of applications, wherein the first set of applications is to be executed on a host operating system; and
a second container image comprising a virtual machine, a guest operating system, and a second set of applications, wherein the guest operating system is to be executed on the virtual machine and the second set of applications is to be executed on the guest operating system;
instantiate a plurality of containers on the host operating system, wherein the plurality of containers correspond to the plurality of container images, and wherein the plurality of containers comprises a first container corresponding to the first container image and a second container corresponding to the second container image;
execute the first set of applications in the first container, wherein the first set of applications is to be executed on the host operating system; and
execute the virtual machine in the second container, wherein the guest operating system is to be executed on the virtual machine and the second set of applications is to be executed on the guest operating system.

11. The storage medium of claim 10 , wherein the instructions that cause the processing circuitry to execute the virtual machine in the second container further cause the processing circuitry to:
detect a set of hardware characteristics on the computing device; and
dynamically configure the virtual machine based on the set of hardware characteristics detected on the computing device.

12. The storage medium of claim 11 , wherein the instructions that cause the processing circuitry to execute the virtual machine in the second container further cause the processing circuitry to:
identify a set of hardware requirements for the virtual machine; and
determine that the set of hardware characteristics detected on the computing device satisfy the set of hardware requirements for the virtual machine.

13. The storage medium of claim 12 , wherein the set of hardware characteristics detected on the computing device comprises a central processing unit (CPU) type, a number of available CPU cores, and a memory capacity.

14. The storage medium of claim 10 , wherein the memory circuitry comprises persistent memory circuitry, and wherein the persistent memory circuitry is to persistently store an operating system image for the host operating system in an immutable state.

15. The storage medium of claim 14 , wherein the persistent memory circuitry is further to persistently store an initial RAM disk of the host operating system in the immutable state.

16. The storage medium of claim 10 , wherein the instructions further cause the processing circuitry to perform, upon boot of the computing device, an integrity verification on:
a system BIOS of the computing device;
an operating system image of the host operating system; and
the plurality of container images.

17. The storage medium of claim 10 , wherein the instructions further cause the processing circuitry to instantiate, upon boot of the host operating system, a container runtime environment to bootstrap user space on the host operating system.

18. The storage medium of claim 10 , wherein the instructions further cause the processing circuitry to configure, via a software-defined silicon interface, one or more hardware configuration controls of the computing device with a per-container scope.

19. A method, comprising:
retrieving, from memory circuitry of a computing device, a plurality of container images, wherein the plurality of container images comprises:
a first container image comprising a first set of applications, wherein the first set of applications is to be executed on a host operating system; and
a second container image comprising a virtual machine, a guest operating system,

Assignees

• Intel Corp

Inventors

• Rodriguez Bryan J
• Doshi Kshitij A
• Smith Ned M
• Millsap Michael G

Classifications

• G06F2009/45562

  Creating, deleting, cloning virtual machine instances · CPC title

• G06F9/45533

  Hypervisors; Virtual machine monitors · CPC title

• G06F2009/45583

  Memory management, e.g. access or allocation · CPC title

• G06F9/5077 Primary

  Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455) · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title