Dynamic protection of one or more deployed copies of a master operating system image

• US 9,286,051 B2
• Filed: 10/05/2012
• Issued: 03/15/2016
• Est. Priority Date: 10/05/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Bennah, Albert D., Rodriguez, Adrian X., Woods, Eric
• Primary Examiner(s): DAO, THUY CHAN
• Application Number:
  US13/645,808
• Publication Number:
  US 20140101428A1
• Time in Patent Office: 1,257 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/3003 Monitoring arrangements specially adapted to the computing system or computing system component being monitored
• CPC Class Codes: G06F 11/3055 Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available error or fault processing without redundancy G06F11/0703; error detection or correction by redundancy in data representation G06F11/08; error detection or correction by redundancy in operation G06F11/14; error detection or correction by redundancy in hardware G06F11/16
• CPC Class Codes: G06F 2201/865 Monitoring of software
• CPC Class Codes: G06F 8/63 Image based installation; Cloning; Build to order
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events

Abstract

Methods, apparatuses, and computer program products for dynamic protection of one or more deployed copies of a master operating system image are provided. Embodiments include monitoring, by an image deployment monitor, an operational state of a deployed copy of a master operating system (OS) image; detecting, by the image deployment monitor, a change in the operational state of the deployed copy of the master OS image; in response to detecting the change, generating, by the image deployment monitor, a configuration recommendation to prevent the change from occurring in operational states of one or more other deployed copies of the master OS image; and providing, by the image deployment monitor, the configuration recommendation to the one or more other deployed copies of the master OS image.

Claims

1. An apparatus for dynamic protection of one or more deployed copies of a master operating system image, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

monitoring, by an image deployment monitor, an operational state of a first deployed copy of a master operating system (OS) image executing on a first client system;

detecting, by the image deployment monitor, a change in the operational state of the first deployed copy of the master OS image executing on the first client system;

in response to detecting the change, generating, by the image deployment monitor, a configuration recommendation to prevent the change in the operational state of the first deployed copy of the master OS image executing on the first client system from occurring in an operational state of a second deployed copy of the master OS image executing on a second client system, wherein the configuration recommendation recommends, for the second deployed copy of the master OS image executing on the second client system, a specific change in size of a resource allocation of a resource;

wherein the second deployed copy of the master OS image executing on the second client system includes an adjustment module configured to modify the second deployed copy of the master OS image based on the configuration recommendation; and

providing, by the image deployment monitor, the configuration recommendation to the second deployed copy of the master OS image executing on the second client system.

2. The apparatus of claim 1 wherein providing, by the image deployment monitor, the configuration recommendation to the second deployed copy of the master OS image includes updating a directory associated with the second deployed copy of the master OS image executing on the second client system;

and

wherein the directory indicates at least one of a list of blacklisted components, and default configurations settings for an operating system within deployed copies of the master OS image.

3. The apparatus of claim 1 wherein the configuration recommendation recommends a change to default configuration settings for an operating system within deployed copies of the master OS image.

4. The apparatus of claim 1 wherein the configuration recommendation recommends addition of a software component to a list of components blacklisted from being installed on deployed copies of the master OS image.

5. The apparatus of claim 1 wherein detecting, by the image deployment monitor, a change in the operational state of the first deployed copy of the master OS image executing on the first client system includes receiving an alert from the first deployed copy of the master OS image executing on the first client system;

and

wherein the alert indicates the change in the operational state of the first deployed copy of the master OS image executing on the first client system.

6. A computer program product for dynamic protection of one or more deployed copies of a master operating system image, the computer program product includes a non-transitory computer readable storage medium, wherein the non-transitory computer readable storage medium is not a signal, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:

monitoring, by an image deployment monitor, an operational state of a first deployed copy of a master operating system (OS) image executing on a first client system;

detecting, by the image deployment monitor, a change in the operational state of the first deployed copy of the master OS image executing on a first client system;

in response to detecting the change, generating, by the image deployment monitor, a configuration recommendation to prevent the change in the operational state of the first deployed copy of the master OS image executing on the first client system from occurring in an operational state of second deployed copy of the master OS image executing on a second client system, wherein the configuration recommendation recommends, for the second deployed copy of the master OS image, a specific change in size of a resource allocation of a resource;

wherein the second deployed copy of the master OS image executing on the second client system includes an adjustment module configured to modify the second deployed copy of the master OS image based on the configuration recommendation; and

providing, by the image deployment monitor, the configuration recommendation to the second deployed copy of the master OS image executing on the second client system.

7. The computer program product of claim 6 wherein providing, by the image deployment monitor, the configuration recommendation to the second deployed copy of the master OS image includes updating a directory associated with the second deployed copy of the master OS image executing on the second client system;

and

wherein the directory indicates at least one of a list of blacklisted components, and default configurations settings for an operating system within deployed copies of the master OS image.

8. The computer program product of claim 6 wherein the configuration recommendation recommends a change to default configuration settings for an operating system within deployed copies of the master OS image.

9. The computer program product of claim 6 wherein the configuration recommendation recommends addition of a software component to a list of components blacklisted from being installed on deployed copies of the master OS image.

10. The computer program product of claim 6 wherein detecting, by the image deployment monitor, a change in the operational state of the first deployed copy of the master OS image executing on the first client system includes receiving an alert from the first deployed copy of the master OS image executing on the first client system;

and

wherein the alert indicates the change in the operational state of the first deployed copy of the master OS image executing on the first client system.