Updating an operating system image using binary large object files

Patent metadata

Field	Value
Publication number	US-2025291571-A1
Application number	US-202418604601-A
Country	US
Kind code	A1
Filing date	Mar 14, 2024
Priority date	Mar 14, 2024
Publication date	Sep 18, 2025
Grant date	—

Abstract

Techniques for atomic live updates to operating systems are described herein. For example, a computing system can generate a first version of a binary large object (BLOB) file indicating first metadata for each file of a first version of an image for an operating system. The computing system can generate a second version of the BLOB file indicating second metadata for each file of a second version of the image. The second version can include new files associated with an update to the operating system. The computing system can execute the update to the operating system by remounting, by a file system for the operating system, the second version of the image of the operating system using the second metadata of the second version of the BLOB file.

First claim

What is claimed is:

1 . A system comprising:
a processing device; and a non-transitory memory comprising instructions that are executable by the processing device for causing the processing device to:
generate a first version of a binary large object (BLOB) file indicating first metadata for each file of a first version of an image for an operating system;
generate a second version of the BLOB file indicating second metadata for each file of a second version of the image, wherein the second version comprises a plurality of new files associated with an update to the operating system; and
execute the update to the operating system by remounting, by a file system for the operating system, the second version of the image of the operating system using the second metadata from the second version of the BLOB file.

2 . The system of claim 1 , wherein the memory further comprises instructions that are executable by the processing device for causing the processing device to:
identify a first set of services having access to the plurality of new files subsequent to execution of the update; stop execution of the first set of services prior to remounting the second version of the image of the operating system; and restart execution of the first set of services subsequent to remounting the second version of the image of the operating system.

3 . The system of claim 2 , wherein the memory further comprises instructions that are executable by the processing device for causing the processing device to:
identify a second set of services lacking access to the plurality of new files subsequent to execution of the update; and continue execution of the second set of services while remounting the second version of the image of the operating system.

4 . The system of claim 1 , wherein the memory further comprises instructions that are executable by the processing device for causing the processing device to, prior to generating the first version of the BLOB file:
mount, by the file system, the first version of the image of the operating system.

5 . The system of claim 1 , wherein the first metadata or the second metadata comprises, for each file of the operating system, a location of the file, and wherein the memory further comprises instructions that are executable by the processing device for causing the processing device to execute the update to the operating system by:
switching from accessing a file via a first location indicated by the first metadata of the first version of the BLOB file to a second location indicated by the second metadata of the second version of the BLOB file.

6 . The system of claim 1 , wherein the memory further comprises instructions that are executable by the processing device for causing the processing device to execute the update to the operating system while running the operating system.

7 . The system of claim 1 , wherein the file system has a same mount identifier used by the operating system prior to execution of the update and subsequent to execution of the update.

8 . A method comprising:
generating, by a processing device, a first version of a binary large object (BLOB) file indicating first metadata for each file of a first version of an image for an operating system; generating, by the processing device, a second version of the BLOB file indicating second metadata for each file of a second version of the image, wherein the second version comprises a plurality of new files associated with an update to the operating system; and executing the update to the operating system by remounting, by the processing device executing a file system for the operating system, the second version of the image of the operating system using the second metadata of the second version of the BLOB file.

9 . The method of claim 8 , further comprising:
identifying a first set of services having access to the plurality of new files subsequent to execution of the update; stopping execution of the first set of services prior to remounting the second version of the image of the operating system; and restarting execution of the first set of services subsequent to remounting the second version of the image of the operating system.

10 . The method of claim 9 , further comprising:
identifying a second set of services lacking access to the plurality of new files subsequent to execution of the update; and continuing execution of the second set of services while remounting the second version of the image of the operating system.

11 . The method of claim 8 , further comprising, prior to generating the first version of the BLOB file:
mounting, by the file system, the first version of the image of the operating system.

12 . The method of claim 8 , wherein the first metadata or the second metadata comprises, for each file of the operating system, a location of the file, and wherein executing the update to the operating system further comprises:
switching from accessing a file via a first location indicated by the first metadata of the first version of the BLOB file to a second location indicated by the second metadata of the second version of the BLOB file.

13 . The method of claim 8 , further comprising executing the update to the operating system while running the operating system.

14 . The method of claim 8 , wherein the file system has a same mount identifier used by the operating system prior to execution of the update and subsequent to execution of the update.

15 . A non-transitory computer-readable medium comprising program code that is executable by a processing device for causing the processing device to:
generate a first version of a binary large object (BLOB) file indicating first metadata for each file of a first version of an image for an operating system; generate a second version of the BLOB file indicating second metadata for each file of a second version of the image, wherein the second version comprises a plurality of new files associated with an update to the operating system; and execute the update to the operating system by remounting, by a file system for the operating system, the second version of the image of the operating system using the second metadata of the second version of the BLOB file.

16 . The non-transitory computer-readable medium of claim 15 , wherein the program code is further executable by the processing device for causing the processing device to:
identify a first set of services having access to the plurality of new files subsequent to execution of the update; stop execution of the first set of services prior to remounting the second version of the image of the operating system; and restart execution of the first set of services subsequent to remounting the second version of the image of the operating system.

17 . The non-transitory computer-readable medium of claim 16 , wherein the program code is further executable by the processing device for causing the processing device to:
identify a second set of services lacking access to the plurality of new files subsequent to execution of the update; and continue execution of the second set of services while remounting the second version of the image of the operating system.

18 . The non-transitory computer-readable medium of claim 15 , wherein the program code is further executable by the processing device for causing the processing device to, prior to generating the first version of the BLOB file:
mount, by the file system, the first version of the image of the operating system.

19 . The non-t

Assignees

• Red Hat Inc

Inventors

• Scrivano Giuseppe

Classifications

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title