Sublayered application layered system

• US 7,970,789 B1
• Filed: 01/03/2006
• Issued: 06/28/2011
• Est. Priority Date: 06/11/2003
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Blaser, Jared, Cook, Randall
• Primary Examiner(s): Bullock, Jr.; Lewis A
• Assistant Examiner(s): Wang; Jue
• Application Number:
  US11/324,496
• Time in Patent Office: 2,002 Days
• Field of Search: None
• US Class Current: 707/783
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines

Abstract

The inventions relate generally to layered computing systems that provide public access to the content of the layers. Also disclosed herein are prioritization schemes usable in a layered computing system, including prioritization by layer type, by assigned priority weights, by access type, by sub-layers and by read-write indicators. Processes may further be associated to layers from which they originate, and priority given to associated layers thereby. Association may also be provided for installer services, thereby depositing an applications updates into its layer. Layers may also contain file reference information including exclusion or inclusion entries indicating what files may be written thereto. Paths recorded in layers may also embed variables to true paths on a layered system. Detailed information on various example embodiments of the inventions are provided in the Detailed Description below, and the inventions are defined by the appended claims.

Claims

1. A layered computing system for accessing files in a base filesystem and a plurality of enabled layers, some of those layers having sublayers associated thereto to be enabled in tandem with those layers, where the layers allow a version of a file to be maintained in one layer while a conflicting version of the file is maintained in another layer, the system prioritizing accesses with respect to the enabled layers and sublayers, said system comprising:

a processor;

data and program storage accessible by said processor, said storage comprising one or more data storage devices;

an operating system stored to said storage;

computer readable instructions located to said program storage, wherein said instructions are configured to be executed by said processor to perform the functions of;

receiving commands to enable or disable an identified layer,

identifying one or more sublayers associated to the identified layer, the sublayers comprising one or more read-write sublayers associated with the identified layer,

enabling or disabling the identified layer and its associated sublayers in tandem upon receiving a command to enable or disable the identified layer,

receiving from an application a request to perform a file operation, that request containing a file reference appropriate to a file system,

identifying a set of enabled layers and,

searching the set of enabled layers and a base file system for the file object corresponding to the file reference,

if, in performing the search, a file object is found corresponding to the file reference in one of the enabled layers, returning a virtual file handle to that file object,

if, in performing the search, a file object is found corresponding to the file reference in a base filesystem, returning a file handle to that base file object,

if, in performing the search, a file object is not found corresponding to the file reference, and if the request was not a write request, returning a result indicating that no file object corresponding to the file reference can be accessed,

if, in performing the search, a file object is not found corresponding to the file reference, and if the request was a write request, returning a virtual file handle or a base file handle to a new file object in one of the enabled layers, and

providing for a resetting of the read-write sublayers by;

receiving a command to reset, the command identifying a layer,

identifying the read-write sublayer associated with the identified layer, and

removing all file objects from the identified read-write sublayer associated with the identified layer.

2. A layered computing system according to claim 1 wherein layers and sublayers may carry an indicator of whether they may be written to, wherein said instructions are further configured to perform the function disallowing, for write requests, a file object to be found in a layer not indicated for writing.

3. A layered computing system according to claim 1 wherein an application layer may be treated as read-only and further wherein the read-write sublayer is for recording configurations to the application, the system further tracking process associations with enabled layers to specially prioritize associated layers over other layers, wherein said instructions are further configured to perform the functions of

for a new process executed from an enabled application layer, associating the new process to that application layer,

in determining a priority for searching the enabled layers and a base filesystem, if a requesting process is associated to a layer, prioritizing that application layer and its associated sublayers specially relative to other enabled layers, and

if the request to perform a file operation is a write request, disallowing the finding of a file object in a read-only application layer.

4. A layered computing system according to claim 1, wherein:

the method further comprises, for each enabled layer, identifying a priority weight and determining a priority for searching the enabled layers and a base filesystem, the priority determination made from the identified priority weights,

in determining a priority, an application layer associated to a requesting process is prioritized below its sublayers.

5. A layered computing system according to claim 1, wherein:

the method further comprises, for each enabled layer, identifying a priority weight and determining a priority for searching the enabled layers and a base filesystem, the priority determination made from the identified priority weights,

in determining a priority, for an application layer not associated to a requesting process, prioritizing its associated sublayers over that layer.

6. A set of non-transitory computer readable storage media containing computer instructions for accessing files in a base filesystem and a plurality of enabled layers, some of those layers having sublayers associated thereto to be enabled in tandem with those layers, and for prioritizing accesses with respect to the enabled layers and sublayers, where the layers allow a version of a file to be maintained in one layer while a conflicting version of the file is maintained in another layer, the set of non-transitory computer readable storage media comprising at least one medium upon which is stored the computer instructions executable by a computing system to achieve the functions of:

receiving commands to enable or disable an identified layer,

identifying one or more sublayers associated to the identified layer, the sublayers comprising one or more read-write sublayers associated with the identified layer,

enabling or disabling the identified layer and its associated sublayers in tandem upon receiving a command to enable or disable the identified layer,

receiving from an application a request to perform a file operation, that request containing a file reference appropriate to a file system,

identifying a set of enabled layers,

searching the set of enabled layers and a base file system for the file object corresponding to the file reference,

if, in performing the search, a file object is found corresponding to the file reference in one of the enabled layers, returning a virtual file handle to that file object,

if, in performing the search, a file object is found corresponding to the file reference in a base filesystem, returning a file handle to that base file object,

if, in performing the search, a file object is not found corresponding to the file reference, and if the request was not a write request, returning a result indicating that no file object corresponding to the file reference can be accessed,

if, in performing the search, a file object is not found corresponding to the file reference, and if the request was a write request, returning a virtual file handle or a base file handle to a new file object in one of the enabled layers, and

providing for a resetting of the read-write sublayers by;

receiving a command to reset, the command identifying a layer,

identifying the read-write sublayer associated with the identified layer, and

removing all file objects from the identified read-write sublayer associated with the identified layer.

7. A set of non-transitory computer readable storage media according to claim 6 wherein layers and sublayers may carry an indicator of whether they may be written to, wherein said instructions are further configured to perform the function disallowing, for write requests, a file object to be found in a layer not indicated for writing.

8. A set of non-transitory computer readable storage media according to claim 6 wherein an application layer may be treated as read-only and further wherein the read-write sublayer is for recording configurations to the application, the instructions further providing for the tracking of process associations with enabled layers to specially prioritize associated layers over other layers, wherein said instructions are further configured to perform the functions of:

for each enabled layer, identifying a priority weight,

determining a priority for searching the enabled layers and a base filesystem, the priority determination made from the identified priority weights,

for a new process executed from an enabled application layer, associating the new process to that application layer,

in determining a priority for searching the enabled layers and a base filesystem, if a requesting process is associated to a layer, prioritizing that application layer and its associated sublayers specially relative to other enabled layers, and

if the request to perform a file operation is a write request, disallowing the finding of a file object in a read-only application layer.

9. A set of non-transitory computer readable storage media according to claim 8, wherein said instructions are further configured to perform the functions of:

representing the determined priority for searching the enabled layers and base file system with a sequence of numeric priority values,

assigning, to the application layer associated with the requesting process, a numeric priority value that indicates the layer is prioritized specially relative to the other enabled layers.

10. A set of non-transitory computer readable storage media according to claim 8, wherein associating the new process to the application layer comprises providing, within a table, an entry that identifies an association between the new process and the application layer, the entry comprising identifiers that identify the new process and the application layer.

11. A set of non-transitory computer readable storage media according to claim 10, wherein said instructions are further configured to perform the functions of determining that the new process is associated with the application layer by identifying, within the table, the entry that identifies the association between the new process and the application layer.

12. A set of non-transitory computer readable storage media according to claim 6, wherein said instructions are further configured to operate a layer manager application that can command enablement, disablement and importation of layers, wherein manager accepts commands from a network connection.

13. A set of non-transitory computer readable storage media according to claim 12, wherein said instructions are further configured to report the set of layers installed to the system to a network requester, and further wherein said instructions are further configured to operate a layer manager application that can receive layers from a network host, and command enablement, disablement and importation of layers.

14. A method for accessing files in a base filesystem and a plurality of enabled layers, some of those layers having sublayers associated thereto to be enabled in tandem with those layers, and for prioritizing accesses with respect to the enabled layers and sublayers, wherein the layers allow a version of a file to be maintained in one layer while a conflicting version of the file is maintained in another layer, the method comprising the steps of:

receiving commands to enable or disable an identified layer;

identifying one or more sublayers associated to the identified layer, the sublayers comprising one or more read-write sublayers associated with the identified layer;

enabling or disabling the identified layer and its associated sublayers in tandem upon receiving a command to enable or disable the identified layer;

receiving from an application a request to perform a file operation, that request containing a file reference appropriate to a file system;

identifying a set of enabled layers;

searching the set of enabled layers and a base file system for the file object corresponding to the file reference;

if, in performing the search, a file object is found corresponding to the file reference in one of the enabled layers, returning a virtual file handle to that file object;

if, in performing the search, a file object is found corresponding to the file reference in a base filesystem, returning a file handle to that base file object;

if, in performing the search, a file object is not found corresponding to the file reference, and if the request was not a write request, returning a result indicating that no file object corresponding to the file reference can be accessed;

if, in performing the search, a file object is not found corresponding to the file reference, and if the request was a write request, returning a virtual file handle or a base file handle to a new file object; and

providing for a resetting of the read-write sublayers by;

receiving a command to reset, the command identifying a layer,

identifying the read-write sublayer associated with the identified layer, and

removing all file objects from the identified read-write sublayer associated with the identified layer.

15. A method according to claim 14 wherein layers and sublayers may carry an indicator of whether they may be written to, wherein said method disallows, for write requests, a file object to be found in a layer not indicated for writing.

16. A method according to claim 14 wherein an application layer may be treated as read-only and further wherein the read-write sublayer is for recording configurations to the application, the method further tracking process associations with enabled layers to specially prioritize associated layers over other layers, wherein said method further comprises the steps of:

for a new process executed from an enabled application layer, associating the new process to that application layer;

in determining a priority for searching the enabled layers and a base filesystem, if a requesting process is associated to a layer, prioritizing that application layer and its associated sublayers specially relative to other enabled layers; and

if the request to perform a file operation is a write request, disallowing the finding of a file object in a read-only application layer.

17. A method according to claim 14, wherein:

the method further comprises, for each enabled layer, identifying a priority weight and determining a priority for searching the enabled layers and a base filesystem, the priority determination made from the identified priority weights,

in determining the priority, an application layer associated to a requesting process is prioritized below its sublayers.

18. A method according to claim 14, wherein:

the method further comprises, for each enabled layer, identifying a priority weight and determining a priority for searching the enabled layers and a base filesystem, the priority determination made from the identified priority weights,

in determining the priority, for an application layer not associated to a requesting process, prioritizing its associated sublayers over that layer.