State customization of forked virtual machines

• US 9,477,507 B2
• Filed: 12/20/2013
• Issued: 10/25/2016
• Est. Priority Date: 12/20/2013
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Li, Hui, Tarasuk-Levin, Gabriel, Gummaraju, Jayanth, Beveridge, Daniel James
• Primary Examiner(s): Wai, Eric C
• Application Number:
  US14/136,741
• Publication Number:
  US 20150178110A1
• Time in Patent Office: 1,040 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

Embodiments support instant forking of virtual machines (VMs) and state customization. A computing device initiates execution of a first group of services (e.g., identity-independent) in a first VM. A second VM is instantiated from the first VM. The second VM shares memory and storage with the first VM. The computing device customizes the second VM based on configuration data associated with the second VM. A second group of services (e.g., identity-dependent) starts executing on the second VM after configuring the identity of the second VM. Customizing the second VM includes configuring one or more identities of the second VM. In some embodiments, a domain identity is selected from a pool of previously-created identities and applied to the second VM, before bootup completes on the second VM.

Claims

1. A system for creating customized, forked virtual machines (VMs) with identity-based differentiation of services, said system comprising:

memory associated with a computing device, said memory storing a virtual device state and a memory state of a parent virtual machine (VM);

storage for the parent VM, said storage further including configuration data for at least one child VM, said storage further identifying identity-independent services and identity-dependent services, wherein the identity-independent services are unrelated to an identity of the child VM and the identity-dependent services are associated with the identity of the child VM; and

a processor programmed to;

initiate execution of the identity-independent services in the parent VM;

instantiate the child VM from the parent VM, wherein the child VM shares memory and storage with the parent VM;

configure the identity of the child VM based on the configuration data associated with the child VM; and

initiate execution of the identity-dependent services in the child VM after configuring the identity of the child VM, wherein execution of the identity-dependent services occurs without prompting a reboot of the child VM.

2. The system of claim 1, wherein the storage further includes a plurality of domain identities, and wherein configuring the identity of the child VM comprises:

selecting one of the plurality of domain identities from the storage; and

applying, before the child VM completes a boot process, the selected one of the plurality of domain identities to the child VM.

3. The system of claim 1, wherein the processor is programmed to instantiate the child VM from the parent VM by:

tagging the storage of the parent VM as copy-on-write (COW); and

tagging the memory state of the parent VM as COW.

4. The system of claim 3, wherein the processor is programmed to suspend execution of the parent VM, tag the storage as COW, and tag the memory state as COW in response to a request from at least one of a user or a management level application.

5. The system of claim 3, wherein the memory state of the parent VM is read-only, and wherein the processor is further programmed to store changes, made by the child VM to the read-only memory state of the parent VM, as delta memory.

6. The system of claim 1, wherein the configuration data comprises at least one of an Internet Protocol (IP) address, a media access control (MAC) address, a hostname, or a domain identity.

7. A method for reboot-free identity customization of instantiated virtual machines (VMs), the method comprising:

initiating, by a computing device, execution of a first group of services, in a first VM, the first group of services being unrelated to an identity of a second VM;

instantiating the second VM from the first VM, wherein the second VM shares memory and storage with the first VM;

configuring, by the computing device, the identity of the second VM based on configuration data associated with the second VM; and

initiating execution of a second group of services, which are associated with the configured identity of the second VM, in the second VM after configuring the identity of the second VM, wherein execution of the second group of services occurs without prompting a reboot of the second VM.

8. The method of claim 7, wherein configuring the identity of the second VM comprises applying one of a plurality of pre-configured domain identities to the second VM before the second VM completes a boot process.

9. The method of claim 7, wherein the first group of services is identity-independent and the second group of services is identity dependent.

10. The method of claim 7, further comprising receiving, from a service provider, identification of the first group of services and identification of the second group of services.

11. The method of claim 7, wherein instantiating a second VM from the first VM comprises:

suspending the first VM;

defining, based on a virtual device state of the suspended first VM, a virtual device state of the second VM;

defining, based on a memory state of the suspended first VM, a memory state of the second VM; and

defining persistent storage for the second VM based on persistent storage of the suspended first VM.

12. The method of claim 11, wherein defining the virtual device state of the second VM comprises copying the virtual device state of the suspended first VM.

13. The method of claim 11, wherein defining the persistent storage for the second VM comprises using array-level disk snapshots of the suspended first VM.

14. The method of claim 11, wherein defining the memory state of the second VM comprises creating copy-on-write (COW) sharing of the memory state of the suspended first VM.

15. The method of claim 7, wherein configuring the identity of the second VM comprises executing the second VM, the second VM customizing itself during bootup.

16. The method of claim 7, further comprising accessing the configuration data associated with the second VM, the configuration data being registered with virtualization software executing on the computing device.

17. One or more computer-readable storage media including computer-executable instructions that, when executed, cause at least one processor to configure an identity of a forked virtual machine (VM) based on a pool of available domain identities, by:

initiating, by a computing device, execution of a first group of services in a first VM, the first group of services being unrelated to an identity of a second VM;

instantiating the second VM from the first VM, wherein the second VM shares memory and storage with the first VM;

configuring the identity of the second VM based on configuration data associated with the second VM by;

obtaining, by the second VM, one of a plurality of domain identities available to the second VM, and

applying the obtained one of the plurality of domain identities to the second VM; and

initiating execution of a second group of services, said second group of services being associated with the configured identity of the second VM, in the second VM after configuring the identity of the second VM, wherein execution of the second group of services occurs without prompting a reboot of the second VM.

18. The computer storage media of claim 17, wherein the computer-executable instructions cause the processor to configure the identity of the second VM by configuring a boot process of the second VM, the second VM performing the boot process to configure the identity of the second VM.

19. The computer storage media of claim 17, wherein the computer-executable instructions further cause the processor to create the plurality of domain identities prior to defining the virtual device state of the second VM and prior to defining the persistent storage for the second VM.

20. The computer storage media of claim 17, wherein the computer-executable instructions further cause the processor block completion of bootup of the second VM until after the obtained one of the plurality of domain identities is applied to the second VM.