Composable machine image

• US 8,966,021 B1
• Filed: 12/20/2011
• Issued: 02/24/2015
• Est. Priority Date: 12/20/2011
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Allen, Nicholas Alexander
• Primary Examiner(s): Algibhah, Hamza
• Assistant Examiner(s): Cox, Natisha
• Application Number:
  US13/332,175
• Time in Patent Office: 1,162 Days
• Field of Search: 709/220, 709/221, 709/223
• US Class Current: 709/220
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors

Abstract

A computer system image is executed on a computing node over a network. A system specification file transmitted over the network specifies the computer system image by specifying components of the computer system image. The components include an operating system and at least one resource. The system specification file also contains a signature associated with the resource. A resource is determined to be authorized to be incorporated into the computer system image by verifying the signature. A computer system image can then be formed based on the components specified by the system specification file and executed locally.

Claims

1. A method for executing a computer system image on a virtual machine, comprising:

receiving on a computing device a system specification file, the system specification file specifying the computer system image by specifying components of the computer system image, the components including an operating system and a resource, the system specification file also containing a signature associated with the resource;

determining that the resource is authorized to be incorporated into the computer system image by verifying the signature;

determining whether a stored computer system image having the components of the computer system image is available for use;

if the stored computer system image is available for use, retrieving the stored computer system image for execution on the virtual machine;

if the stored computer system image is not available for use, preparing the computer system image based on the components specified by the system specification file;

executing the computer system image on a second virtual machine;

storing a snapshot of the executing computer system image; and

retrieving the stored snapshot of the computer system image for execution on the virtual machine.

2. The method of claim 1 wherein preparing the computer system image comprises:

executing on the second virtual machine a copy of an operating system corresponding to the operating system specified in the system specification file;

storing in a storage location accessible by the second virtual machine content corresponding to the resource specified in the system specification file; and

executing instructions on the copy of operating system executing on the second virtual machine to incorporate the stored content corresponding to the resource.

3. The method of claim 1 further comprising determining that the resource is authorized to be incorporated into the computer system image by verifying a second signature, the second signature being contained in the system specification file and associated with the resource.

4. The method of claim 1 further comprising determining that the system specification file is trusted by authorizing a system specification file signature associated with the system specification file.

5. A method for executing a computer system image on a computing node, comprising:

receiving on a computing device a file containing references to components of the computer system image, the components including a base system image and a resource, the file also containing at least a signature associated with the resource;

determining that the resource is authorized to be incorporated into the computer system image by verifying the signature;

after authorization of incorporation of the resource, preparing the computer system image based on the components specified by the file by at least ensuring that the resource is incorporated into the computer system image; and

executing the computer system image on the computing node.

6. The method of claim 5 further comprising:

prior to executing the computer system image on the computing node, executing the base system image on a second computing node; and

causing the base system image to execute a series of processes to install the resource on the second computing node to incorporate the resource into the base system image.

7. The method of claim 5 wherein preparing the computer system image comprises:

determining whether a stored computer system image having the components of the computer system image is available for use; and

if the stored computer system image is available for use, retrieving the stored computer system image for execution on the computing node.

8. The method of claim 7 wherein determining whether a stored computer system image having the components of the computer system image is available for use comprises:

determining the components of the stored computer system image from the metadata associated with the stored computer system image.

9. The method of claim 5 further comprising:

storing a snapshot of the executing computer system image and making it available for use by other computing nodes.

10. The method of claim 5 wherein verifying the signature comprises verifying that the signature is contained in a trusted trust store.

11. The method of claim 10 further comprising:

determining a location of the trusted trust store based upon a property associated with a user of the computing system image.

12. The method of claim 5 wherein verifying the signature comprises verifying that the signature is not contained in an untrusted trust store.

13. The method of claim 5 further comprising:

determining that the resource is authorized to be incorporated into the computer system image by verifying a second signature, the second signature being contained in the file and associated with the resource.

14. The method of claim 5 further comprising determining that the file is trusted by authorizing a file signature associated with the file.

15. The method of claim 14 wherein authorizing the file signature comprises comparing a signed hash of the file to a stored value.

16. The method of claim 5 wherein the resource comprises content contained within the file.

17. The method of claim 5 wherein the file comprises a second resource, the method further comprising:

determining that the second resource is authorized to be incorporated into the computer system image by allowing a user to indicate authorization of the incorporation of the second resource.

18. A non-transitory computer-readable storage medium having stored thereon computer readable instructions, the computer-readable instructions comprising instructions that upon execution on a computing node, at least cause:

a file to be processed containing references to components of a computer system image, the components including a base system image and a resource, the file also containing at least a signature associated with the resource;

the resource to be authorized to be incorporated into the computer system image by verifying the signature;

after authorization of incorporation of the resource, the computer system image to be prepared based on the components specified by the file by at least ensuring that the resource is incorporated into the computer system image; and

the computer system image to be executed.

19. The computer-readable medium of claim 18 further comprising computer-readable instructions that upon execution on a computing node, at least cause:

the base system image to execute prior to executing the computer system image; and

the base system image to initiate a series of processes to install the resource on the computing node to incorporate the resource into the base system image.

20. The computer-readable medium of claim 18 wherein the instructions that cause the computer system image to be prepared comprise instructions that:

determine whether a stored computer system image having the components of the computer system image is available for use; and

if the stored computer system image is available for use, retrieve the stored computer system image for execution on the computing node.

21. The computer-readable medium of claim 20 wherein the instructions that determine whether a stored computer system image has the components of the computer system image available for use comprise instructions that:

determine the components of the stored computer system image from metadata associated with the stored computer system image.

22. The computer-readable medium of claim 18 further comprising computer-readable instructions that upon execution on a computing node, at least cause:

a snapshot to be stored of the executing computer system image and made available for use by other computing nodes.

23. The computer-readable medium of claim 18 wherein the instructions that cause the computer system image to verify the signature comprise instructions to verify that the signature is contained in a trusted trust store.

24. The computer-readable medium of claim 23 further comprising computer-readable instructions that upon execution on a computing node, at least determine a location of the trusted trust store based upon a property associated with a user of the computing system image.

25. The computer-readable medium of claim 18 wherein the instructions that cause the computer system image to verify the signature comprise instructions to verify that the signature is not contained in an untrusted trust store.

26. The computer-readable medium of claim 18 further comprising computer-readable instructions that upon execution on a computing node, at least cause:

the resource to be authorized to be incorporated into the computer system image by verifying a second signature, the second signature being contained in the system specification file and associated with the resource.

27. The computer-readable medium of claim 18 further comprising computer-readable instructions that upon execution on a computing node, at least cause:

the resource to be authorized to be incorporated into the computer system image by allowing a user to indicate authorization of the incorporation of the resource.

28. A computer system comprising at least one computing node and at least one data store in communication with the at least one computing node, the at least one data store having stored therein computer readable instructions, the computer-readable instructions retrievable and executable by the at least one computing node, the computer-readable instructions comprising instructions that upon execution by the at least one computing node, causing at least:

a file to be processed containing references to components of a computer system image, the components including a base system image and a resource, the file also containing at least a signature associated with the resource;

the resource to be authorized to be incorporated into the computer system image by verifying the signature;

after authorization of incorporation of the resource, the computer system image to be prepared based on the components specified by the file by at least ensuring that the resource is incorporated into the computer system image; and

the computer system image to be executed.

29. The computer system of claim 28 further comprising computer-readable instructions that upon execution by the at least one computing node, at least causing:

the base system image to be executed prior to executing the computer system image; and

the executing base system image to initiate a series of processes to install the resource on the computing node to incorporate the resource into the base system image.

30. The computer system of claim 28 wherein the instructions that cause the computer system image to be prepared comprise instructions that:

determine whether a stored computer system image having the components of the computer system image is available for use; and

if the stored computer system image is available for use, retrieve the stored computer system image for execution on the computing node.

31. The computer system image of claim 30 wherein the instructions that determine whether a stored computer system image has the components of the computer system image available for use comprise instructions that:

determine whether the stored computer system image comprises at least some of the components from metadata associated with the stored computer system image.

32. The computer system of claim 28 further comprising computer-readable instructions that upon execution by the at least one computing node, at least causing:

a snapshot to be stored of the executing computer system image and made available for use by other computing nodes.

33. The computer system of claim 28 wherein the instructions that cause the computer system image to verify the signature comprise instructions to verify that the signature is contained in a trusted trust store.

34. The computer system of claim 28 further comprising computer-readable instructions that upon execution by the at least one computing node, at least causing:

a virtual machine to be configured to execute the computer system image, the virtual machine configured based on a hardware configuration file.