Fault-tolerant patching system

• US 7,908,600 B2
• Filed: 06/30/2005
• Issued: 03/15/2011
• Est. Priority Date: 06/30/2005
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Nguyen, PhiDien Ha, Ganguly, Shamik, Saha, Debashis
• Primary Examiner(s): Zhen; Wei Y
• Assistant Examiner(s): Coyer; Ryan D
• Application Number:
  US11/173,838
• Publication Number:
  US 20070006208A1
• Time in Patent Office: 2,084 Days
• Field of Search: 717/101, 717/103, 717110-113, 717121-130, 717168-178
• US Class Current: 717/168
• CPC Class Codes: G06F 11/1433 during software upgrading
• CPC Class Codes: G06F 11/1451 by selection of backup contents

Abstract

Techniques that promote a fault-tolerant patching system are described. According to one such technique, a patching operation is performed in two phases. During the first phase, before the updates specified in the patching operation are actually applied, an attempt is made to backup files, or portions thereof, which are going to be updated by the patching operation. If a failure is detected during the first phase, then the patching operation aborts without proceeding to the second phase. During the second phase, an attempt is made to perform the updates that the patching operation specifies. If a failure is detected during the second phase, then all of the updated files, or portions thereof, are restored; those files or file portions are replaced with their corresponding backed-up copies, which were made during the first phase. The foregoing technique is extensible to a system in which prospectively affected files are distributed among nodes.

Claims

1. A computer-implemented method of preparing to patch files, comprising:

interacting with two or more computers to identify two or more file portions of a target program residing on the two or more computers that are targeted for update by a patch, wherein the interacting comprises comparing contents of the patch with contents of the target program residing on the two or more computers;

instructing the two or more computers to make copies of the identified two or more file portions that are targeted for update by the patch, wherein at least two of the two or more file portions reside on different computers of the two or more computers;

determining whether at least one computer of the two or more computers was unable to make a copy of a file portion that resides on that computer, wherein the two or more computers include a first computer and a second computer that is different than the first computer;

determining that the first computer was unable to make a copy of a file portion that resides on the first computer;

determining that the second computer was able to make a copy of a file portion that resides on the second computer;

in response to determining that the first computer was unable to make a copy of a file portion that resides on the first computer, then;

(a) instructing the first computer to abort a patching operation before any of the two or more file portions has been updated by the patch, and

(b) instructing the second computer to abort the patching operation;

wherein the method is performed by one or more computing devices.

2. The method of claim 1, further comprising:

determining whether a failure occurred during the patching operation on at least one computer of the two or more computers; and

in response to determining that a failure occurred during the patching operation on at least one computer of the two or more computers, instructing the two or more computers to reverse the patching operation by replacing, with corresponding copies of file portions that were made before the patching operation was performed, all file portions that were modified by the patching operation.

5. The method of claim 1, wherein a first set of file portions, comprising all file portions that are targeted for update by the patch at one computer of the two or more computers, is different than a second set of file portions, comprising all file portions that are targeted for update by the patch at another computer of the two or more computers.

6. The method of claim 1, wherein each file that is targeted for update by the patch is determined to be a separate file portion.

7. The method of claim 1, wherein logic that determines the file portions that are targeted for update by the patch is provided separately from the patch.

11. The method of claim 1, wherein the method is performed by a patching tool executing at one of the two or more computers or a third computer that is not one of the two or more computers.

3. A volatile or non-volatile computer-readable storage medium storing instructions which, when executed by one or more processors, causes:

interacting with two or more computers to identify two or more file portions of a target program residing on the two or more computers that are targeted for update by a patch, wherein the interacting comprises comparing contents of the patch with contents of the target program residing on the two or more computers;

instructing the two or more computers to make copies of the identified two or more file portions that are targeted for update by the patch, wherein at least two of the two or more file portions reside on different computers of the two or more computers;

determining whether at least one computer of the two or more computers was unable to make a copy of a file portion that resides on that computer, wherein the two or more computers include a first computer and a second computer that is different than the first computer;

determining that the first computer was unable to make a copy of a file portion that resides on the first computer;

determining that the second computer was able to make a copy of a file portion that resides on the second computer;

in response to determining that the first computer was unable to make a copy of a file portion that resides on

(a) instructing the first computer to abort a patching operation before any of the two or more file portions has been updated by the patch, and

(b) instructing the second computer to abort the patching operation.

4. The volatile or non-volatile computer-readable storage medium of claim 3, wherein the steps further comprise instructions, when executed by the one or more processors, further cause:

determining whether a failure occurred during the patching operation on at least one computer of the two or more computers; and

in response to determining that a failure occurred during the patching operation on at least one computer of the two or more computers, instructing the two or more computers—

to reverse the patching operation by replacing, with corresponding copies of file portions that were made before the patching operation was performed, all file portions that were modified by the patching operation.

8. The volatile or non-volatile computer-readable storage medium of claim 3, wherein a first set of file portions, comprising all file portions that are targeted for update by the patch at one computer of the two or more computers, is different than a second set of file portions, comprising all file portions that are targeted for update by the patch at another computer of the two or more computers.

9. The volatile or non-volatile computer-readable storage medium of claim 3, wherein each file that is targeted for update by the patch is determined to be a separate file portion.

10. The volatile or non-volatile computer-readable storage medium of claim 3, wherein logic that determines the file portions that are targeted for update by the patch is provided separately from the patch.

12. The volatile or non-volatile computer-readable storage medium of of claim 3, wherein the instructions implement a patching tool that executes at one of the two or more computers or a third computer that is not one of the two or more computers.

13. A method for performing a distributed patching operation, the method comprising, as part of the distributed patching operation:

instructing a plurality of nodes of a multi-node system to patch a plurality of files that reside on the plurality of nodes;

wherein a first file of the plurality of files resides on a first node of the plurality of nodes;

wherein a second file of the plurality of files resides on a second node, of the plurality of nodes, that is different than the first node;

determining whether a failure of the distributed patching operation occurred at two or more of the plurality of nodes;

determining that a failure of the distributed patching operation occurred at the first node;

determining that a failure of the distributed patching operation did not occur at the second node;

in response to determining that a failure of the distributed patching operation occurred at the first node;

(a) instructing the first node to abort the distributed patching operation, and

(b) instructing the second node to abort the distributed patching operation;

wherein the method is performed by two or more computing devices.

14. The method of claim 13, wherein instructing the plurality of nodes comprises instructing the first node to make a backup copy of the first file and instructing the second node to make a backup copy of the second file.

15. The method of claim 14, wherein:

determining whether a failure of the distributed patching operation occurred at two or more of the plurality of nodes comprises determining whether the first node was able to make a backup copy of the first file and determining whether the second node was able to make a backup copy of the second file; and

determining that a failure of the distributed patching operation occurred at the first node comprises determining that the first node was unable to make a backup copy of the first file.

16. The method of claim 13, wherein instructing the plurality of nodes comprises instructing the first node to applying a patch of the first file and instructing the second node to apply a patch of the second file.

17. The method of claim 16, wherein:

determining whether a failure of the distributed patching operation occurred at two or more of the plurality of nodes comprises determining whether the first node was able to apply the patch of the first file and determining whether the second node was able to apply the patch of the second file; and

determining that a failure of the distributed patching operation occurred at the first node comprises determining that the first node was unable to apply the patch of the first file.

18. A volatile or non-volatile computer-readable storage medium for performing a distributed patching operation, the medium storing instructions which, when executed by one or more processors, cause, as part of the distributed patching operation:

instructing a plurality of nodes of a multi-node system to patch a plurality of files that reside on the plurality of nodes;

wherein a first file of the plurality of files resides on a first node of the plurality of nodes;

wherein a second file of the plurality of files resides on a second node, of the plurality of nodes, that is different than the first node;

determining whether a failure of the distributed patching operation occurred at any of the plurality of nodes;

determining that a failure of the distributed patching operation occurred at the first node;

determining that a failure of the distributed patching operation did not occur at the second node;

in response to determining that a failure of the distributed patching operation occurred at the first node;

(a) instructing the first node to abort the distributed patching operation, and

(b) instructing the second node to abort the distributed patching operation.

19. The volatile or non-volatile computer-readable storage medium of claim 18, wherein instructing the plurality of nodes comprises instructing the first node to make a backup copy of the first file and instructing the second node to make a backup copy of the second file.

20. The volatile or non-volatile computer-readable storage medium of claim 19, wherein:

determining whether a failure of the distributed patching operation occurred at two or more of the plurality of nodes comprises determining whether the first node was able to make a backup copy of the first file and determining whether the second node was able to make a backup copy of the second file; and

determining that a failure of the distributed patching operation occurred at the first node comprises determining that the first node was unable to make a backup copy of the first file.

21. The volatile or non-volatile computer-readable storage medium of claim 18, wherein instructing the plurality of nodes comprises instructing the first node to applying a patch of the first file and instructing the second node to apply a patch of the second file.

22. The volatile or non-volatile computer-readable storage medium of claim 21, wherein:

determining whether a failure of the distributed patching operation occurred at two or more of the plurality of nodes comprises determining whether the first node was able to apply the patch of the first file and determining whether the second node was able to apply the patch of the second file; and

determining that a failure of the distributed patching operation occurred at the first node comprises determining that the first node was unable to apply the patch of the first file.