Operating system update and boot failure recovery

• US 7,340,638 B2
• Filed: 01/30/2003
• Issued: 03/04/2008
• Est. Priority Date: 01/30/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Anderson, Jason, Unal, Serdar, Nicholson, Clark, Witt, Wes
• Primary Examiner(s): Le; Dieu-Minh
• Application Number:
  US10/354,387
• Publication Number:
  US 20040153724A1
• Time in Patent Office: 1,860 Days
• Field of Search: 714/6, 714/2, 714/4, 714 11- 13
• US Class Current: 714/6.11
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/1417 Boot up procedures

Abstract

An improved operating system method that, in addition to the primary operating system, stores one or more alternate or recovery operating systems. The system monitors the operation of the present operating system and accesses the alternate or recovery operating system based on a fail-over algorithm when a fault condition is detected. The alternate or recovery operating systems are periodically updated.

Claims

1. An improved operating system method comprising the steps of:

storing a primary operating system on a first disk drive accessible by a computing system wherein during normal operation the computing system accesses the primary operating system so that the primary operating system is the present operating system; and

wherein the primary operating system is a bootable operating system;

storing a mirror operating system on a second disk drive accessible by the computing system wherein the mirror operating system is a mirror image of the primary operating system;

storing an updated operating system on a third disk drive accessible by the computing system wherein the updated operating system is a last-known-good image of the primary operating system;

storing a first-boot operating system on a fourth disk drive accessible by the computing system wherein the first-boot operating system is an image of the primary operating system at the time of a first boot of the primary operating system;

monitoring the operation of the present operating system;

based on a set of boot instructions, designating one of the mirror operating system, the updated operating system, and the first boot operating system as an alternate operating system; and

accessing the alternate operating system upon sensing an error in the operation of the primary operating system so that the alternate operating system becomes the present operating system.

2. The method of claim 1 wherein the updated operating system is overwritten with a current version of the primary operating system at periodic intervals.

3. The method of claim 2 wherein the periodic intervals are determined based on a number of times the computing system has been booted since a prior overwrite.

4. The method of claim 2 wherein the updated operating system is stored by imaging the operating system.

5. The method of claim 1 wherein the mirror operating system is created using RAID 1.

6. The method of claim 1 wherein the step of monitoring the operation of the primary operating system is performed using a watchdog timer that monitors the operation of the present operating system being used by the computing system.

7. The method of claim 6 wherein the watchdog timer causes the computing system to boot based on the boot instructions when the present operating system is non-functional for a predetermined time period.

8. The method of claim 1 comprising the step of maintaining a list of locations of operating systems that lists the operating systems in an order in which they should be accessed in the event that an error is sensed in the present operating system and wherein the boot instructions direct the computing system to access an operating system by referring to the list of locations of alternate operating systems.

9. The method of claim 1 comprising the step of initializing a set of fail-over operating systems by detecting operating systems, storing the locations of the operating systems in a fail-over memory location according to an order in which they are to be accessed, and storing an associated boot counter in the fail-over memory location for each operating system.

10. The method of claim 9 wherein the fail-over memory location resides in non-volatile random access memory.

11. The method of claim 9 wherein the boot instructions comprise a fail over algorithm that increments the boot counter of the present operating system each time the present operating system is booted and wherein the algorithm directs the computing system to boot on a next stored operating system upon a predetermined value of the boot counter associated with the present operating system.

12. The method of claim 9 wherein the algorithm monitors a watchdog timer that resets upon operating system activity and directs the computing system to boot when the watchdog timer reaches a predetermined time value and wherein the algorithm increments the error counter each time the watchdog timer reaches the predetermined time value.

13. The method of claim 12 comprising the steps of, prior to the initializing step, validating currently stored operating system locations if the watchdog timer caused the most recent computing system boot and setting the boot counters of any invalid operating system locations to a predetermined value.

14. The method of claim 1 comprising the step of prompting a computing system user to access the alternate operating system upon sensing an error in the operation of the present operating system.

15. The method of claim 1 wherein the computing system is a headless server.

16. The method of claim 1 comprising the step of alerting a computer user that an alternate operating system has been accessed.

17. The method of claim 16 wherein the user is alerted by a visual cue on the computing device.

18. The method of claim 16 comprising the step of e mailing an alert message to the computer user.

19. The method of claim 1 wherein the alternate operating system is a recovery operating system for recovering the computing system to a working state.

20. The method of claim 19 wherein the step of accessing the alternate operating system upon sensing an error is performed by monitoring a boot bit that is reset at each successful boot.

21. The method of claim 20 comprising the step of monitoring a diagnostic bit that is set based on the value of the boot bit.

22. The method of claim 21 comprising the step of performing diagnostic tests on the operating system when the diagnostic bit is set.

23. The method of claim 20 wherein the recovery operating system is accessed when the boot bit is set.

24. The method of claim 21 wherein the recovery operating system is accessed when the boot bit and diagnostic bit are both set.

25. The method of claim 19 comprising the step of prompting a user to access the recovery operating system.

26. An improved operating system method comprising the steps of:

storing a primary operating system on a first disk drive accessible by a computing system wherein during normal operation the computing system accesses the primary operating system as a present operating system so that the primary operating system is the present operating system;

storing a plurality of alternate operating systems accessible by a computing system, the plurality of alternate operating systems including;

a mirror operating system stored on a second disk drive wherein the mirror operating system is a mirror image of the primary operating system,

an updated operating system stored on a third disk drive wherein the updated operating system is a last-known-good image of the primary operating system, and

a first-boot operating system stored on a fourth disk drive wherein the first-boot operating system is an image of the primary operating system at the time of a first boot of the primary operating system;

storing a location and associated boot counter for each of the plurality of alternate operating system in an order in which the alternate operating systems are to be accessed;

periodically updating the updated operating system;

monitoring the operation of the present operating system;

incrementing the boot counter of the present operating system each time an error is sensed in the operation of the present operating system; and

accessing a next alternate operating system when the boot counter of the present operating system reaches a threshold value so that the next alternate operating system becomes the present operating system, wherein the next alternate operating system is one of the plurality of alternate operating systems.

27. For use with a computing system having a set of boot control instructions, a fail-over recovery system comprising:

a plurality of operating systems including;

a primary operating system stored on a first disk drive,

a mirror operating system that is a mirror image of the primary operating system and that is one of a plurality of alternate operating systems, the mirror operating system stored on a second disk drive,

an updated operating system that is a last-known-good image of the primary operating system and that is one of the plurality of alternate operating systems, the updated operating system stored on a third disk drive, and

a first boot operating system that is an image of the operating system at a first boot of the primary operating system and that is one of the plurality of alternate operating systems, the first-boot operating system stored on a fourth disk drive; and

an operating system table that lists each of the plurality of operating system, its location, and an order in which the alternate operating systems should be accessed;

wherein the boot control instructions access the operating system table to determine which operating system should be booted to control the computing system as the present operating system.

28. The fail-over recovery system of claim 27 comprising a watchdog timer that monitors the functioning of the present operating system and generates an error signal when the present operating system becomes unresponsive for a predetermined amount of time that causes the boot instructions to boot the computing system.

29. The fail-over recovery system of claim 28 wherein the operating system table comprises a boot counter associated with each operating system that is incremented each time the computing system is booted using the operating system.

30. The fail-over recovery system of claim 29 wherein the boot instructions access a next alternate operating system based on the boot counter of the present operating system, wherein the next alternate operating system is one of the plurality of alternate operating systems.

32. The fail-over recovery system of claim 27 comprising an imaging module that creates an image copy of the present operating system at predetermined intervals for storage as an alternate operating system.

33. The fail-over recovery system of claim 27 comprising a first boot operating system storage module that stores a copy of the present operating system at the first boot of the computing system as an alternate operating system.

34. The fail-over recovery system of claim 27 wherein the operating system table is stored in non volatile random access memory.

31. The fail-over recovery system 27 comprising a mirroring module that creates a mirror of the present operating system for storage as one of the alternate operating systems.

35. An improved operating system method comprising the steps of:

storing a primary bootable operating system on a first disk drive accessible by a computing system wherein during normal operation the computing system accesses the primary operating system as a present operating system so that the primary operating system is the present operating system;

storing a plurality of recovery operating systems accessible by a computing system, the plurality of recovery operating systems including;

a mirror operating system stored on a second disk drive wherein the mirror operating system is a mirror image of the primary operating system,

an updated operating system stored on a third disk drive wherein the updated operating system is a last-known-good image of the primary operating system, and

a first-boot operating system stored on a fourth disk drive wherein the first-boot operating system is an image of the primary operating system at the time of a first boot of the primary operating system;

storing a boot register for tracking the operating of the present operating system;

monitoring the operation of the present operating system;

setting a boot bit in the boot register upon computing system start and resetting the boot bit at each successful boot; and

accessing one of the plurality of recovery operating systems when the boot bit is set at computing system start.

36. An improved operating system comprising;

means for storing a primary bootable operating system in storage accessible by a computing system wherein during normal operation the computing system accesses the primary operating system so that the primary operating system is the present operating system;

means for storing one or more alternate operating systems in storage accessible by the computing system, the one or more alternate operating systems including;

a mirror operating system that is a mirror image of the primary bootable operating system,

an updated operating system that is a last-known-good image of the primary bootable operating system, and

a first-boot operating system that is an image of the primary bootable operating system at the time of a first boot of the primary operating system;

means for monitoring the operation of the present operating system; and

means for accessing at least one of the one or more alternate operating systems based on a set of boot instructions upon sensing an error in the operation of the primary operating system so that the at least one of the one or more alternate operating systems becomes the present operating system.

37. The improved operating system of claim 36 wherein the means for storing the one or more alternate operating systems stores a bootable copy of the primary operating system when the computing system is first booted, thereby creating the first-boot operating system.

38. The improved operating system of claim 36 wherein the means for storing the one or more alternate operating systems stores a bootable copy of the primary operating system that is overwritten with a current version of the primary operating system at periodic intervals to create the updated operating system.

39. The improved operating system of claim 36 wherein the means for storing the one or more alternate operating systems stores a bootable copy of the primary operating system that is the mirror operating system.

40. The improved operating system of claim 36 wherein the means for monitoring the operation of the primary operating system is a watchdog timer that monitors the operation of the present operating system being used by the computing system.

41. The improved operating system of claim 36 comprising means for maintaining a list of locations of operating systems that lists the operating systems in an order in which they should be accessed in the event that an error is sensed in the present operating system and wherein the boot instructions direct the computing system to access an operating system by referring to the list of locations of the one or more alternate operating systems.