Systems and methods for efficiently downgrading operating systems installed on network devices

• US 10,289,401 B1
• Filed: 12/30/2016
• Issued: 05/14/2019
• Est. Priority Date: 12/30/2016
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Gerraty, Simon J.
• Primary Examiner(s): Lyons, Andrew M.
• Application Number:
  US15/395,868
• Time in Patent Office: 865 Days
• Field of Search: 717168-178
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/4406 Loading of operating system

Abstract

The disclosed computer-implemented method may include (1) receiving, at a network node within a network, a request to downgrade a first version of an operating system that is currently active to a second version of the operating system that predates the first version of the operating system, (2) rebooting the network node to facilitate downgrading the first version of the operating system to the second version of the operating system, and (3) during the reboot, downgrading the first version of the operating system to the second version of the operating system by (A) reclassifying an active set of packages from the first version of the operating system as a previous set of packages and (B) executing a pending set of packages from the second version of the operating system. Various other methods, systems, and computer-readable media are also disclosed.

Claims

1. A method comprising:

receiving, at a network node within a network, a request to downgrade a first version of an operating system that is currently active to a second version of the operating system that predates the first version of the operating system;

searching metadata associated with an active set of packages from the first version of the operating system for any downgrade actions that need to be performed to successfully revert the operating system from the first version to the second version;

during the search, identifying at least one downgrade action of at least one package within the active set of packages from the first version of the operating system, wherein the downgrade action comprises undoing at least one configuration change to the network node that;

was made by the package within the active set of packages from the first version of the operating system; and

is not backwards compatible with the second version of the operating system;

determining that at least one additional configuration change made to the network node by at least one package within the active set of packages from the first version of the operating system is backwards compatible with the second version of the operating system;

rebooting the network node to facilitate downgrading the first version of the operating system to the second version of the operating system; and

during the reboot, downgrading the first version of the operating system to the second version of the operating system by;

deactivating the active set of packages by renaming the active set of packages from the first version of the operating system as a previous set of packages;

performing the downgrade action to revert the network node to a state that is compatible with the second version of the operating system by undoing the configuration change;

maintaining the additional configuration change intact due at least in part to the additional configuration change being backwards compatible with the second version of the operation system; and

executing a pending set of packages from the second version of the operating system.

2. The method of claim 1, wherein downgrading the first version of the operating system to the second version of the operating system comprises:

identifying a creation date of the first version of the operating system;

identifying a creation date of the second version of the operating system;

comparing the creation date of the first version of the operating system with the creation date of the second version of the operating system;

determining, based at least in part on the comparison, that the second version of the operating system predates the first version of the operating system; and

determining that the request is directed to a downgrade rather than an upgrade due at least in part to the second version of the operating system predating the first version of the operating system.

3. The method of claim 1, wherein downgrading the first version of the operating system to the second version of the operating system comprises reclassifying the pending set of packages from the second version of the operating system as the active set of packages.

4. The method of claim 1, wherein executing the pending set of packages from the second version of the operating system comprises activating the pending set of packages from the second version of the operating system such that the network node boots from the pending set of packages.

5. The method of claim 1, wherein the active set of packages from the first version of the operating system and the pending set of the packages from the second version of the operating system share some packages in common.

6. The method of claim 1, wherein downgrading the first version of the operating system to the second version of the operating system comprises:

identifying at least one package within the active set of packages from the first version of the operating system that is not included in the pending set of packages from the second version of the operating system; and

deactivating the package within the active set of packages that is not included in the pending set of packages.

7. A system comprising:

a receiving module, stored in memory, that receives, at a network node within a network, a request to downgrade a first version of an operating system that is currently active to a second version of the operating system that predates the first version of the operating system;

a downgrade module, stored in memory, that;

searches metadata associated with an active set of packages from the first version of the operating system for any downgrade actions that need to be performed to successfully revert the operating system from the first version to the second version;

identifies, during the search, at least one downgrade action of at least one package within the active set of packages from the first version of the operating system, wherein the downgrade action comprises undoing at least one configuration change to the network node that;

was made by the package within the active set of packages from the first version of the operating system; and

is not backwards compatible with the second version of the operating system;

determines that at least one additional configuration change made to the network node by at least one package within the active set of packages from the first version of the operating system is backwards compatible with the second version of the operating system;

a reboot module, stored in memory, that reboots the network node to facilitate downgrading the first version of the operating system to the second version of the operating system;

a downgrade module, stored in memory, that downgrades the first version of the operating system to the second version of the operating system during the reboot by;

deactivating the active set of packages by renaming the active set of packages from the first version of the operating system as a previous set of packages;

performing the downgrade action to revert the network node to a state that is compatible with the second version of the operating system by undoing the configuration change;

maintaining the additional configuration change intact due at least in part to the additional configuration change being backwards compatible with the second version of the operation system; and

executing a pending set of packages from the second version of the operating system; and

at least one physical processor that executes the receiving module, the reboot module, and the downgrade module.

8. The system of claim 7, wherein the downgrade module:

identifies a creation date of the first version of the operating system;

identifies a creation date of the second version of the operating system;

compares the creation date of the first version of the operating system with the creation date of the second version of the operating system;

determines, based at least in part on the comparison, that the second version of the operating system predates the first version of the operating system; and

determines that the request is directed to a downgrade rather than an upgrade due at least in part to the second version of the operating system predating the first version of the operating system.

9. The system of claim 7, wherein the downgrade module reclassifies the pending set of packages from the second version of the operating system as the active set of packages.

10. The system of claim 7, wherein the downgrade module activates the pending set of packages from the second version of the operating system such that the network node boots from the pending set of packages.

11. The system of claim 7, wherein the active set of packages from the first version of the operating system and the pending set of the packages from the second version of the operating system share some packages in common.

12. The system of claim 7, wherein the downgrade module:

identifies at least one package within the active set of packages from the first version of the operating system that is not included in the pending set of packages from the second version of the operating system; and

deactivates the package within the active set of packages that is not included in the pending set of packages.

13. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

receive, at a network node within a network, a request to downgrade a first version of an operating system that is currently active to a second version of the operating system that predates the first version of the operating system;

search metadata associated with an active set of packages from the first version of the operating system for any downgrade actions that need to be performed to successfully revert the operating system from the first version to the second version;

identify, during the search, at least one downgrade action of at least one package within the active set of packages from the first version of the operating system, wherein the downgrade action comprises undoing at least one configuration change to the network node that;

was made by the package within the active set of packages from the first version of the operating system; and

is not backwards compatible with the second version of the operating system;

determine that at least one additional configuration change made to the network node by at least one package within the active set of packages from the first version of the operating system is backwards compatible with the second version of the operating system;

reboot the network node to facilitate downgrading the first version of the operating system to the second version of the operating system; and

downgrade, during the reboot, the first version of the operating system to the second version of the operating system by;

deactivating the active set of packages by renaming the active set of packages from the first version of the operating system as a previous set of packages;

performing the downgrade action to revert the network node to a state that is compatible with the second version of the operating system by undoing the configuration change;

maintaining the additional configuration change intact due at least in part to the additional configuration change being backwards compatible with the second version of the operation system; and

executing a pending set of packages from the second version of the operating system.

14. The non-transitory computer-readable medium of claim 13, wherein the computer-executable instructions, when executed by the processor of the computing device, further cause the computing device to:

identify a creation date of the first version of the operating system;

identify a creation date of the second version of the operating system;

compare the creation date of the first version of the operating system with the creation date of the second version of the operating system;

determine, based at least in part on the comparison, that the second version of the operating system predates the first version of the operating system; and

determine that the request is directed to a downgrade rather than an upgrade due at least in part to the second version of the operating system predating the first version of the operating system.