Automatic Acquisition and Installation of Software Upgrades for Collections of Virtual Machines

• US 20090100420A1
• Filed: 09/10/2008
• Published: 04/16/2009
• Est. Priority Date: 09/10/2007
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: MOKA5, INC.
• Inventors: Kachroo, Gautam, Rinard, Martin, Sapuntzakis, Constantine P.
• Granted Patent: US 8,839,221 B2
• Time in Patent Office: Days
• US Class Current: 717/171
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57

Abstract

An automated approach to updating, testing, and distributing virtual machine images is described. Centralized updates allow for a virtual machine image executed locally on thousands of machines to be updated in a single place and the automated testing and distribution signaling provides for smooth rollouts of the updates.

Claims

1. A method for managing software updates to a virtual machine, the virtual machine for use on a plurality of systems and devices making use of the virtual machine, the method comprising:

retrieving the virtual machine;

executing the virtual machine in a virtual machine monitor on a computer system;

applying one or more updates to the virtual machine to create an updated virtual machine;

performing one or more automated tests on the updated virtual machine using the virtual machine monitor on the computer system; and

determining that the one or more automated tests were successful, and consequently generating a signal indicating that the virtual machine has been updated and that the updated virtual machine is available for use on the plurality of systems and devices making use of the virtual machine.

2. The method of claim 1, wherein each system or device in the plurality of systems and devices maintains a copy of the virtual machine locally, and wherein the signal includes an address selected from the set consisting of a uniform resource locator (URL) and a uniform resource identifier (URI), wherein the address describes a location where the updated virtual machine can be downloaded.

3. The method of claim 1, wherein the one or more automated tests are selected from the set consisting of:

a test to determine that the updated virtual machine reboots successfully;

a test to determine that the updated virtual machine allows a test user to login successfully;

a test to determine that an application in the virtual machine launches successfully;

a test to determine that the updated virtual machine has network access; and

a test to determine that the updated virtual machine configuration complies with a predetermined security profile.

4. The method of claim 1, further comprising retrieving, executing, applying, performing and determining on a recurring basis to regularly update the virtual machine.

5. The method of claim 4, wherein the recurring basis comprises a predetermined time interval between updates.

6. The method of claim 4, wherein the recurring basis is comprises responding to receipt of a indication that an update is available.

7. The method of claim 1, wherein the virtual machine is associated with an update policy, the update policy specifying how the plurality of systems and devices using the virtual machine respond to the signal.

8. The method of claim 7, wherein the update policy specifies that the updated virtual machine must be used immediately.

9. The method of claim 7, wherein the update policy specifies that the virtual machine may be used until the next reboot before using the updated virtual machine.

10. A computer program product, stored on a tangible computer readable medium, the product comprising instructions operable to cause a computer system to perform a method for managing software updates to a virtual machine, the virtual machine for use on a plurality of systems and devices making use of the virtual machine, the method comprising:

retrieving the virtual machine;

executing the virtual machine in a virtual machine monitor on a computer system;

applying one or more updates to the virtual machine to create an updated virtual machine;

performing one or more automated tests on the updated virtual machine using the virtual machine monitor on the computer system; and

determining that the one or more automated tests were successful, and consequently generating a signal indicating that the virtual machine has been updated and that the updated virtual machine is available for use on the plurality of systems and devices making use of the virtual machine.

11. The computer program product of claim 10, wherein each system or device in the plurality of systems and devices maintains a copy of the virtual machine locally, and wherein the signal includes an address selected from the set consisting of a uniform resource locator (URL) and a uniform resource identifier (URI), wherein the address describes a location where the updated virtual machine can be downloaded.

12. The computer program product of claim 10, wherein the one or more automated tests are selected from the set consisting of:

a test to determine that the updated virtual machine reboots successfully;

a test to determine that the updated virtual machine allows a test user to login successfully;

a test to determine that an application in the virtual machine launches successfully;

a test to determine that the updated virtual machine has network access; and

a test to determine that the updated virtual machine configuration complies with a predetermined security profile.

13. The computer program product of claim 10, further comprising retrieving, executing, applying, performing and determining on a recurring basis to regularly update the virtual machine.

14. The computer program product of claim 13, wherein the recurring basis comprises a predetermined time interval between updates.

15. The computer program product of claim 13, wherein the recurring basis is comprises responding to receipt of a indication that an update is available.

16. The computer program product of claim 10, wherein the virtual machine is associated with an update policy, the update policy specifying how the plurality of systems and devices using the virtual machine respond to the signal.

17. The computer program product of claim 16, wherein the update policy specifies that the updated virtual machine must be used immediately.

18. The computer program product of claim 16, wherein the update policy specifies that the virtual machine may be used until the next reboot before using the updated virtual machine.