Controlling usage of virtual disks before their attachment to virtual machines

• US 10,282,221 B2
• Filed: 11/16/2012
• Issued: 05/07/2019
• Est. Priority Date: 12/09/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arcese, Mauro, Ciano, Giuseppe, Pichetti, Luigi
• Primary Examiner(s): Puente, Emerson C
• Assistant Examiner(s): Chen, Zhi
• Application Number:
  US13/679,085
• Publication Number:
  US 20130152084A1
• Time in Patent Office: 2,363 Days
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

Controlling usage of virtual disks in a data-processing center hosting a set of virtual machines is described where each virtual disk comprises a set of software artifacts. A corresponding method comprises detecting a request of adding a new virtual disk comprising a set of new software artifacts to a selected one of the virtual machines, determining composition information of the new virtual disk, which includes an indication of the new software artifacts, retrieving an indication of usage entitlements of the new software artifacts in the data-processing center, enabling or preventing the attachment of the new virtual disk to the selected virtual machine according to a comparison between the composition information and the usage entitlements, attaching the new virtual disk to the selected virtual machine in response to the enabling thereof, and updating the usage entitlements in response to the attachment of the new virtual disk.

Claims

1. A method for controlling usage of virtual disks in a data-processing center hosting a set of virtual machines, the method comprising:

detecting a first request of attaching a new virtual disk comprising a set of new software programs to a first selected virtual machine, wherein the first selected virtual machine has a system virtual disk comprising a guest operating system attached to the system virtual disk and the set of new software programs comprises at least two new software programs;

loading an image of the new virtual disk into a virtual disk repository in response to detecting the first request of attaching the new virtual disk;

discovering the set of new software programs in the new virtual disk from the image of the virtual disk in the virtual disk repository;

adding composition information of the new virtual disk to a composition library, wherein the composition information of the new virtual disk comprises an indication of the set of new software programs, and wherein a unique identifier is associated with the composition information to indicate at least version information and that the composition information is retrieved from the composition library;

retrieving an indication of license entitlements of the set of new software programs from a license repository;

enabling the attachment of the new virtual disk to the first selected virtual machine in response to a comparison between the composition information of the new virtual disk and the license entitlements of the set of new software programs from the license repository, indicating that further usage of all software programs in the set of the new software programs is allowed;

in response to the enabling, attaching the new virtual disk to the first selected virtual machine and activating the set of new software programs; and

removing an old virtual disk from the first selected virtual machine, wherein removing the old virtual disk comprises;

deactivating old software programs comprised in the old virtual disk by executing an old de-activation module previously copied to the system virtual disk;

deleting the old de-activation module of the old virtual disk from the system virtual disk of the first selected virtual machine; and

automatically, and without manual intervention, updating the license entitlements of the set of new software programs in response to the attachment of the new virtual disk to the first selected virtual machine, wherein updating the license entitlements comprises updating a number of instances of the set of new software programs available for use; and

detecting a second request of attaching the new virtual disk to a second selected virtual machine;

retrieving the composition information of the new virtual disk from the composition library after detecting the second request;

preventing the attachment of the new virtual disk to the second selected virtual machine in response to a comparison between the composition information of the new virtual disk and the updated license entitlements of the set of new software programs, wherein the comparison indicates that further usage of at least one of the set of new software programs is not allowed; and

in response to the preventing, returning a warning message that the updated license entitlements cannot be fulfilled .

2. The method of claim 1, further comprising:

wherein loading the image of the new virtual disk comprises loading the image from a remote source and extracting the composition information from the image of the new virtual disk;

detecting a removal request of removing the old virtual disk comprising a set of old software programs from the first selected virtual machine;

detaching the old virtual disk from the first selected virtual machine;

determining composition information of the old virtual disk, the composition information of the old virtual disk comprising an indication of the set of old software programs; and

updating license entitlements of the set of old software programs in response to the detachment of the old virtual disk from the first selected virtual machine, wherein updating the license entitlements comprises updating a number of instances of the set of old software programs available for use.

3. The method of claim 2, wherein determining composition information of the old virtual disk comprises retrieving the composition information of the old virtual disk from the composition library, and

wherein discovering the set of new software programs in the new virtual disk comprises extracting the composition information of the new virtual disk from a descriptor thereof comprised in the new virtual disk.

4. The method of claim 1, further comprising

activating the set of new software programs by applying an activation module in the new virtual disk, and

wherein the step of activating the set of new software programs comprises:

collecting configuration information of the first selected virtual machine; and

customizing at least one of the set of new software programs according to the configuration information of the first selected virtual machine.

5. The method of claim 2, further comprising

activating the set of new software programs by applying an activation module comprised in the new virtual disk.

6. The method of claim 5,

wherein activating the new virtual disk comprises copying a new de-activation module of the set of new software programs from the new virtual disk to the system virtual disk of the first selected virtual machine.

7. The method of claim 6, the old de-activation module comprises one of:

a single deactivation script for all software programs in the set of old software programs, and

a distinct deactivation script for each software program in the set of old software programs.

8. The method of claim 1, wherein loading the image of the new virtual disk comprises loading the image from a website.

9. The method of claim 1, wherein activating the set of new software programs comprises launching an installation program.

10. The method of claim 1, wherein the requests of attaching the new virtual disk are submitted through a web interface.

11. The method of claim 4, wherein the configuration information of the first selected virtual machine is an IP address of the first selected virtual machine and the customizing at least one of the set of new software programs according to the configuration information of the first selected virtual machine comprises updating an IP address of a plurality of communication sockets that are embedded in data of the set of new software programs.

12. A computer program product comprising executable code stored in a non-transitory computer readable medium for causing a data-processing system to perform the steps of:

detecting a request of attaching a new virtual disk comprising a set of new software programs to a selected virtual machine, wherein the virtual machine has a system virtual disk comprising a guest operating system attached to the system virtual disk and the set of new software programs comprise at least two new software programs;

loading an image of the new virtual disk into a virtual disk repository, which is separated from the new virtual disk, in response to detecting the request of attaching the new virtual disk;

discovering the set of new software programs in the new virtual disk from the image of the virtual disk in the virtual disk repository;

adding composition information of the new virtual disk to a composition library, wherein the composition information of the new virtual disk comprises an indication of the set of new software programs, and wherein a unique identifier is associated with the composition information to indicate at least version information and that the composition information is retrieved from the composition library;

retrieving an indication of license entitlements of the set of new software programs from a license repository;

enabling the attachment of the new virtual disk to the selected virtual machine in response to a comparison between the composition information of the new virtual disk and the license entitlements of the set of new software programs from the license repository indicating that further usage of all software programs in the set of the new software programs is allowed;

in response to the enabling, attaching the new virtual disk to the selected virtual machine and activating the set of new software programs after copying a new de-activation module from the new virtual disk to the system virtual disk;

preventing the attachment of the new virtual disk to the selected virtual machine in response to the comparison between the composition information of the new virtual disk and the license entitlements of the set of new software programs which indicates that further usage of at least one of the set of new software programs is not allowed;

in response to the preventing, returning a warning message that the license entitlements cannot be fulfilled; and

removing an old virtual disk from the selected virtual machine by executing an old deactivation module previously copied to the system virtual disk; and

automatically, and without manual intervention, updating the license entitlements of the set of new software programs in response to the attachment of the new virtual disk to the selected virtual machine wherein updating the license entitlements comprises updating a number of instances of the set of new software programs available for use.

13. The computer program of claim 12, wherein the code further causes the data-processing system to perform:

wherein loading the image of the new virtual disk comprises loading the image from a remote source and extracting the composition information from the image of the new virtual disk;

detecting a removal request of removing the old virtual disk comprising a set of old software programs from a further selected virtual machine;

detaching the old virtual disk from the further selected virtual machine;

determining composition information of the old virtual disk, the composition information of the old virtual disk comprising an indication of the set of old software programs; and

updating license entitlements of the set of old software programs in response to the detachment of the old virtual disk from the further selected virtual machine, wherein updating the license entitlements comprises updating a number of instances of the set of old software programs available for use.

14. The computer program of claim 13, wherein determining composition information of the old virtual disk comprises retrieving the composition information of the old virtual disk from the composition library, and

wherein discovering the set of new software programs in the new virtual disk comprises extracting the composition information of the new virtual disk from a descriptor thereof comprised in the new virtual disk.