Composable machine image

• US 10,338,946 B1
• Filed: 01/04/2018
• Issued: 07/02/2019
• Est. Priority Date: 12/20/2011
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Allen, Nicholas Alexander
• Primary Examiner(s): Cox, Natisha D
• Application Number:
  US15/862,523
• Time in Patent Office: 544 Days
• Field of Search: None
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors

Abstract

A computer system image is executed on a computing node over a network. A system specification file transmitted over the network specifies the computer system image by specifying components of the computer system image. The components include an operating system and at least one resource. The system specification file also contains a signature associated with the resource. A resource is determined to be authorized to be incorporated into the computer system image by verifying the signature. A computer system image can then be formed based on the components specified by the system specification file and executed locally.

Claims

1. A method for executing a computer system image on a computing node, comprising:

receiving from a user data indicative of a selection of a specification file from a plurality of specification files, wherein the plurality of specification files are defined by a plurality of other users, wherein the user selects one of the plurality of specification files;

obtaining, based on the data indicative of the selection, the specification file, wherein the specification file comprises references to components of the computer system image, the components including a base system image and a resource, the specification file also comprising at least a signature associated with the resource for validating the specification file;

preparing the computer system image based on the components specified by the specification file by at least ensuring that the resource is incorporated into the computer system image; and

executing the computer system image on the computing node.

2. The method of claim 1, wherein obtaining the specification file comprises obtaining the specification file from a sharing platform configured to allow the other users to share the plurality of specification files.

3. The method of claim 2, wherein at least a portion of the plurality of specification files are associated with corresponding categories on the sharing platform, wherein at least a portion of the categories are indicative of an intended usage of a system using the specification file.

4. The method of claim 1, further comprising verifying, based on one or more controls associated with specification file, that the user is authorized to access the specification file.

5. The method of claim 4, wherein the one or more controls are imposed on the specification file by at least one of the other users that is associated with the specification file.

6. The method of claim 4, wherein the one or more controls specify a group of users that are authorized to access the specification file.

7. The method of claim 1, wherein preparing the computer system image based on the components specified by the specification file comprises generating a virtual image based on the components specified by the specification file.

8. A system for executing a computer system image on a computing node, comprising:

a processor;

a memory in electronic communication with the processor, the memory having stored thereon computer-readable instructions that upon execution by the processor at least;

receive from a user data indicative of a selection of a specification file from a plurality of specification files, wherein the plurality of specification files are defined by a plurality of other users, wherein the user selects one of the plurality of specification files;

obtain, based on the data indicative of the selection, the specification file, wherein the specification file comprises references to components of the computer system image, the components including a base system image and a resource, the specification file also comprising at least a signature associated with the resource for validating the specification file;

prepare the computer system image based on the components specified by the specification file by at least ensuring that the resource is incorporated into the computer system image; and

execute the computer system image on the computing node.

9. The system of claim 8, wherein the memory having stored thereon computer-readable instructions that upon execution by the processor at least obtain the specification file further comprise instructions that at least obtain the specification file from a sharing platform configured to allow at least the other users to share the plurality of specification files.

10. The system of claim 9, wherein at least a portion of the plurality of specification files are associated with corresponding categories on the sharing platform, wherein at least a portion of the categories are indicative of an intended usage of a system using the specification file.

11. The system of claim 8, wherein the memory having stored thereon computer-readable instructions that upon execution by the processor at least verify, based on one or more controls associated with specification file, that the user is authorized to access the specification file.

12. The system of claim 11, wherein the one or more controls are imposed on the specification file by at least one of the other users that is associated with the specification file.

13. The system of claim 11, wherein the one or more controls specify a group of users that are authorized to access the specification file.

14. The system of claim 8, wherein the memory having stored thereon computer-readable instructions that upon execution by the processor at least prepare the computer system image based on the components specified by the specification file further comprise instructions that at least generate a virtual image based on the components specified by the specification file.

15. An apparatus for executing a computer system image on a computing node, comprising:

a storage device having stored thereon a plurality of specification files, wherein the plurality of specification files are defined by a plurality of users; and

at least one computing device having a memory to configure a processor at least to;

receive from a user data indicative of a selection of a specification file from the plurality of specification files, wherein the user selects one of the plurality of specification files;

obtain, based on the data indicative of the selection, the specification file, wherein the specification file comprises references to components of the computer system image, the components including a base system image and a resource, the specification file also comprising at least a signature associated with the resource for validating the specification file;

prepare the computer system image based on the components specified by the specification file by at least ensuring that the resource is incorporated into the computer system image; and

execute the computer system image on the computing node.

16. The apparatus of claim 15, wherein the at least one computing device configured to at least obtain the specification file further comprises the at least one computing device configured to at least obtain the specification file from a sharing platform configured to allow at least the other users to share the plurality of specification files.

17. The apparatus of claim 16, wherein at least a portion of the plurality of specification files are associated with corresponding categories on the sharing platform, wherein at least a portion of the categories are indicative of an intended usage of a system using the specification file.

18. The apparatus of claim 15, wherein the at least one computing device is further configured at least to verify, based on one or more controls associated with specification file, that the user is authorized to access the specification file.

19. The apparatus of claim 18, wherein the one or more controls are imposed on the specification file by at least one of the other users that is associated with the specification file.

20. The apparatus of claim 18, wherein the one or more controls specify a group of users that are authorized to access the specification file.