Automatically fixing a corrupted file requested by a guest on a host machine

Patent metadata

Field	Value
Publication number	US-12524395-B1
Application number	US-202418905535-A
Country	US
Kind code	B1
Filing date	Oct 3, 2024
Priority date	Oct 3, 2024
Publication date	Jan 13, 2026
Grant date	Jan 13, 2026

Abstract

In one example, an operating system can receive, from a guest, a request for the content of a file stored on a computing device. The operating system and the guest can both be executing on the computing device. In response to receiving the request, the operating system can execute a validation process to validate an integrity of the file. In response to determining that the validation process failed, the operating system can transmit a first notification to an agent. In response to receiving the first notification, the agent can obtain a new copy of the file from a remote source. The agent can then transmit a second notification to the operating system. In response to receiving the second notification, the operating system can extract the content from the new copy of the file. The operating system can then provide the content to the guest to fulfill the request.

First claim

The invention claimed is:

1 . A non-transitory computer-readable medium comprising program code for an operating system, the operating system being executable by one or more processors of a computing device to perform operations including:
receiving, from a guest executing on the computing device, a request for content of a file; in response to receiving the request, executing a validation process to validate an integrity of the file; in response to determining that the validation process failed, transmitting a first notification to an agent, wherein the agent is configured to:
in response to receiving the first notification, obtain a new copy of the file from a remote source; and
after obtaining the new copy of the file, transmit a second notification to the operating system; and
in response to receiving the second notification:
extracting the content from the new copy of the file; and
providing the content to the guest to fulfill the request.

2 . The non-transitory computer-readable medium of claim 1 , wherein the agent is configured to overwrite the file on the computing device with the new copy of the file, prior to transmitting the second notification to the operating system.

3 . The non-transitory computer-readable medium of claim 1 , wherein the validation process involves:
determining an expected signature for the file; determining a current signature for the file; comparing the expected signature to the current signature; and in response to determining that the expected signature does not match the current signature, determining that the validation process failed.

4 . The non-transitory computer-readable medium of claim 3 , wherein the expected signature is a first checksum that was previously generated for the file at a first point in time prior to receiving the request, and wherein the current signature is a second checksum that was generated for the file at a second point in time subsequent to receiving the request.

5 . The non-transitory computer-readable medium of claim 1 , wherein the request is formatted as a system call to the operating system.

6 . The non-transitory computer-readable medium of claim 1 , wherein the agent is separate from the operating system, and wherein the agent executes in user space on the computing device.

7 . The non-transitory computer-readable medium of claim 1 , wherein the file is part of an image used to deploy the guest.

8 . The non-transitory computer-readable medium of claim 1 , wherein the guest is a container or a virtual machine.

9 . A method comprising:
receiving, by an operating system and from a guest executing on a computing device, a request for content of a file; in response to receiving the request, executing, by the operating system, a validation process to validate an integrity of the file; in response to determining that the validation process failed, transmitting, by the operating system, a first notification to an agent; in response to receiving the first notification, obtaining, by the agent, a new copy of the file from a remote source; after obtaining the new copy of the file, transmitting, by the agent, a second notification to the operating system; in response to receiving the second notification, extracting, by the operating system, the content from the new copy of the file; and providing, by the operating system, the content to the guest to fulfill the request.

10 . The method of claim 9 , wherein the agent is configured to overwrite the file on the computing device with the new copy of the file, prior to transmitting the second notification to the operating system.

11 . The method of claim 9 , wherein the validation process involves:
determining an expected signature for the file; determining a current signature for the file; comparing the expected signature to the current signature; and in response to determining that the expected signature does not match the current signature, determining that the validation process failed.

12 . The method of claim 11 , wherein the expected signature is a first checksum that was previously generated for the file at a first point in time prior to receiving the request, and wherein the current signature is a second checksum that was generated for the file at a second point in time subsequent to receiving the request.

13 . The method of claim 9 , wherein the request is formatted as a system call to the operating system.

14 . The method of claim 9 , wherein the agent is separate from the operating system, and wherein the agent executes in user space on the computing device.

15 . The method of claim 9 , wherein the file is part of an image used to deploy the guest.

16 . The method of claim 9 , wherein the guest is a container or a virtual machine.

17 . A computing device comprising:
an operating system; a guest; a processor; and a memory including instructions that are executable by the processor for causing the operating system to perform operations including:
receiving, from the guest, a request for content of a file;
in response to receiving the request, executing a validation process to validate an integrity of the file;
in response to determining that the validation process failed, transmitting a first notification to an agent, wherein the agent is configured to:
in response to receiving the first notification, obtain a new copy of the file from a remote source; and
after obtaining the new copy of the file, transmit a second notification; and

in response to receiving the second notification:
extracting the content from the new copy of the file; and
providing the content to the guest to fulfill the request.

18 . The computing device of claim 17 , wherein the agent is configured to overwrite the file on the computing device with the new copy of the file, prior to transmitting the second notification to the operating system.

19 . The computing device of claim 17 , wherein the validation process involves:
determining an expected signature for the file; determining a current signature for the file; comparing the expected signature to the current signature; and in response to determining that the expected signature does not match the current signature, determining that the validation process failed.

20 . The computing device of claim 17 , wherein the file is part of an image used to deploy the guest, and wherein the guest is a container or a virtual machine.

Assignees

• Red Hat Inc

Inventors

• Scrivano Giuseppe

Classifications

• G06F9/45545 Primary

  Guest-host, i.e. hypervisor is an application program itself, e.g. VirtualBox · CPC title

• G06F16/2365 Primary

  Ensuring data consistency and integrity · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title