Managing peripherals in a containerized environment

Patent metadata

Field	Value
Publication number	US-12175272-B2
Application number	US-202117391912-A
Country	US
Kind code	B2
Filing date	Aug 2, 2021
Priority date	Aug 2, 2021
Publication date	Dec 24, 2024
Grant date	Dec 24, 2024

Abstract

Peripherals can be managed in a containerized environment. A peripheral can be virtualized in multiple containers to allow applications hosted in the containers to access the peripheral. Local applications may also be allowed to access the peripheral. Such access may be enabled by virtualizing handles to the peripheral. The applications' access to the peripheral may be managed in accordance with policy to thereby ensure that one application's access does not negatively impact another application's access.

First claim

What is claimed:

1. A method for managing peripherals in a containerized environment, the method comprising:
detecting that a first application is attempting to open a peripheral by detecting that an operating system has responded to an I/O request of the first application by providing a handle to the peripheral;
preventing the first application from receiving the handle to the peripheral by providing a first virtualized handle rather than the handle to the first application;
mapping the first virtualized handle to the handle;
detecting that a second application is attempting to open the peripheral by detecting that the operating system has responded to an I/O request of the second application by providing the handle to the peripheral;
preventing the second application from receiving the handle to the peripheral by providing a second virtualized handle rather than the handle to the second application;
mapping the second virtualized handle to the handle;
receiving an I/O request that includes the first virtualized handle or the second virtualized handle; and
modifying the I/O request by replacing the first virtualized handle or the second virtualized handle with the handle.

2. The method of claim 1 , wherein the first application is hosted in a first container and the second application is hosted in a second container.

3. The method of claim 2 , wherein the first and second containers are software containers.

4. The method of claim 2 , wherein the first and second containers are hardware containers.

5. The method of claim 2 , wherein the first container is a software container and the second container is a hardware container.

6. The method of claim 1 , wherein the first application is hosted in a container and the second application is a local application.

7. The method of claim 1 , further comprising:
virtualizing the peripheral in one or more containers in which the first and second applications are hosted.

8. The method of claim 1 , wherein a management service creates the first and second virtualized handles.

9. The method of claim 1 , wherein a first instance of a peripheral management driver running in a first container creates the first virtualized handle and a second instance of the peripheral management driver running in a second container creates the second virtualized handle.

10. The method of claim 1 , further comprising:
receiving a response to the I/O request that includes the handle; and
modifying the response to the I/O request by replacing the handle with the first virtualized handle or the second virtualized handle.

11. The method of claim 1 , further comprising:
receiving I/O requests from the first application or the second application that target the peripheral; and
managing the I/O requests in accordance with policy.

12. The method of claim 11 , wherein managing the I/O requests in accordance with policy comprises one or more of: arbitrating, prioritizing or enforcing a quality of service.

13. The method of claim 1 , further comprising:
detecting that a third application has been loaded;
determining that the third application has a higher priority than the first application or the second application; and
preventing the first application or the second application from accessing the peripheral while allowing the third application to access the peripheral.

14. A method for managing peripherals in a containerized environment, the method comprising:
determining that a first application hosted in a first container should have access to a peripheral, the peripheral being associated with a handle by which the peripheral is accessed;
virtualizing the peripheral in the first container by creating a first virtualized handle, mapping the first virtualized handle to the handle, and providing the first virtualized handle to the first application to cause the first application to use the first virtualized handle rather than the handle to access the peripheral;
determining that a second application hosted in a second container should have access to the peripheral;
virtualizing the peripheral in the second container by creating a second virtualized handle, mapping the second virtualized handle to the handle, and providing the second virtualized handle to the second application to cause the second application to use the second virtualized handle rather than the handle to access the peripheral;
receiving I/O requests that target the peripheral that has been virtualized in the first and second containers;
determining that a first set of the I/O requests are from the first application by detecting that each I/O request in the first set of the I/O requests includes the first virtualized handle;
determining that a second set of the I/O requests are from the second application by detecting that each I/O request in the second set of the I/O requests includes the second virtualized handle; and
managing the I/O requests in accordance with policy, including applying the policy in a first manner to the first set of the I/O requests based on the first set of the I/O requests being from the first application, and applying the policy in a second manner, different from the first manner, to the second set of the I/O requests based on the second set of the I/O requests being from the second application.

15. The method of claim 14 , wherein managing the I/O requests in accordance with policy comprises one or more of: arbitrating, prioritizing or enforcing a quality of service.

16. One or more computer storage media storing computer executable instructions which when executed implement a method for managing peripherals in a containerized environment, the method comprising:
detecting that a first application is attempting to open a peripheral by detecting that an operating system has responded to an I/O request of the first application by providing a handle to the peripheral;
preventing the first application from receiving the handle to the peripheral by providing a first virtualized handle rather than the handle to the first application;
mapping the first virtualized handle to the handle;
detecting that a second application is attempting to open the peripheral by detecting that the operating system has responded to an I/O request of the second application by providing the handle to the peripheral;
preventing the second application from receiving the handle to the peripheral by providing a second virtualized handle rather than the handle to the second application;
mapping the second virtualized handle to the handle;
receiving an I/O request that includes the first virtualized handle or the second virtualized handle; and
modifying the I/O request by replacing the first virtualized handle or the second virtualized handle with the handle.

17. The computer storage media of claim 16 , wherein the first application is hosted in a first container and the second application is hosted in a second container.

18. The computer storage media of claim 17 , wherein the first and second containers are software containers.

19. The computer storage media of claim 17 , wherein the first and second containers are hardware containers.

20. The computer storage media of claim 17 , wherein the first container is a software container and the second container is a hardware container.

Assignees

• Dell Products Lp

Inventors

• Iyer Vivek Viswanathan
• Vajravel Gokul Thiruchengode
• Gatson Michael S

Classifications

• G06F2009/45562

  Creating, deleting, cloning virtual machine instances · CPC title

• G06F2009/4557

  Distribution of virtual machine instances; Migration and load balancing · CPC title

• G06F2009/45587

  Isolation or security of virtual machine instances · CPC title

• G06F9/52

  Program synchronisation; Mutual exclusion, e.g. by means of semaphores · CPC title

• G06F9/542

  Event management; Broadcasting; Multicasting; Notifications · CPC title