System and method for virtual assembly patching in a cloud environment

• US 9,690,566 B2
• Filed: 03/14/2014
• Issued: 06/27/2017
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Vinograd, Patrick, Broadbent, Chris, Russell, Padraic, Graber, Yonatan, Chinnappa, Codanda, Mordani, Rajiv, Kalali, Masoud
• Primary Examiner(s): Chen, Qing
• Assistant Examiner(s): THATCHER, CLINT A
• Application Number:
  US14/213,936
• Publication Number:
  US 20140282472A1
• Time in Patent Office: 1,201 Days
• Field of Search: 717170
• CPC Class Codes: G06F 8/63 Image based installation; Cloning; Build to order
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

Described herein is a system and method for virtual assembly patching in a cloud environment. In accordance with an embodiment, a virtual assembly builder can be used to virtualize installed components in a reference environment, and then deploy those components into another destination environment. A user can capture the configuration and binaries of software components into software appliance artifacts, which can be grouped and their relationships defined as software assembly artifacts. In accordance with an embodiment, assemblies stored as disk images in a repository can be patched by creating replacement images, importing the replacement images into the virtualization environment, and then performing a replacement or swap of an instance'"'"'s existing virtual disks, with patched versions of those disks.

Claims

1. A system for virtual assembly patching, comprising:

one or more computers having executing thereon a virtualization environment and a virtual assembly builder; and

a repository of assembly archives and one or more patches, wherein each assembly archive defines an assembly as a collection of software appliances that are configured to work together upon deployment, and wherein each software appliance represents a software component, and is associated with a metadata that includes a description of the software component'"'"'s input and output endpoints;

wherein the virtual assembly builder enables registration of the assembly archives, and controls patching of the assembly archives within a family of archive versions having a base archive version and one or more descendant archive versions, for use in patching of an assembly instance associated with a virtual disk and existing disk image, including building a replacement disk image that includes a patched assembly archive within the family of archive versions, importing the replacement disk image into the virtualization environment, and replacing the virtual disk associated with the assembly instance with a patched version of that virtual disk;

wherein when an original assembly archive is patched to create a new assembly archive, the virtual assembly builder tracks a relationship between the original assembly archive and the new assembly archive, for use in enforcing restrictions on patch families and assembly versions while patching assembly instances.

2. The system of claim 1, wherein the virtual assembly builder accesses the repository via an application program interface that supports operations to patch a particular assembly archive and subsequently apply the patch to a corresponding assembly instance.

3. The system of claim 1, wherein the assembly archives are stored in one or more disk volumes which are tagged and referenced, and wherein the virtual assembly builder applies patches to snapshots of the disk volumes which are then used to patch virtual assembly instances.

10. The system of claim 1, wherein creating the replacement disk image includes importing metadata of the existing disk image and providing updated metadata in the replacement disk image.

11. The system of claim 1,

wherein the system associates versions with assembly archives and patches, and uses version information to selectively apply a patch to appropriate assembly instances, and

wherein selective application of the patch to the appropriate assembly instances includes ascertaining version information for the existing disk image and that the replacement disk image includes a descendant version resulting from a cumulative series of patches applied to a base assembly version.

16. The system of claim 1, wherein the virtual assembly builder includes a deployer having

a virtual assembly manager that enables access to the repository, and

a registration manager that provides access to a resource pool service.

17. The system of claim 16, wherein the virtual assembly builder includes an application program interface that enables registration of assemblies and lifecycle management of the assemblies.

18. The system of claim 17, wherein registration of a particular assembly includes registering one or more templates associated with the particular assembly with a resource pool.

19. The system of claim 17, wherein the application program interface communicates with a command execution engine that handles a specific set of messages from the application program interface, and executes commands in response thereto, to patch assembly instances.

4. A method of providing virtual assembly patching, comprising:

providing, at one or more computers, a virtualization environment and a virtual assembly builder;

providing a repository of assembly image archives and one or more patches, wherein each assembly archive defines an assembly as a collection of software appliances that are configured to work together upon deployment, and wherein each software appliance represents a software component, and is associated with a metadata that includes a description of the software component'"'"'s input and output endpoints; and

providing access by the virtual assembly builder to the repository, to enable registration of the assembly archives, and control patching of the assembly archives within a family of archive versions having a base archive version and one or more descendant archive versions, for use in patching an assembly instance associated with a virtual disk and existing disk image, including building a replacement disk image that includes a patched assembly archive within the family of archive versions, importing the replacement disk image into the virtualization environment, and replacing the virtual disk associated with the assembly instance with a patched version of that virtual disk;

wherein when an original assembly archive is patched to create a new assembly archive, the virtual assembly builder tracks a relationship between the original assembly archive and the new assembly archive, for use in enforcing restrictions on patch families and assembly versions while patching assembly instances.

5. The method of claim 4, wherein the virtual assembly builder accesses the repository via an application program interface that supports operations to patch a particular assembly archive and subsequently apply the patch to a corresponding assembly instance.

6. The method of claim 4, wherein the assembly archives are stored in one or more disk volumes which are tagged and referenced, and wherein the virtual assembly builder applies patches to snapshots of the disk volumes which are then used to patch assembly instances.

12. The method of claim 4, wherein creating the replacement disk image includes importing metadata of the existing disk image and providing updated metadata in the replacement disk image.

13. The method of claim 4,

further comprising associating versions with assembly archives and patches, and using version information to selectively apply a patch to appropriate assembly instances,

wherein selective application of the patch to the appropriate assembly instances includes ascertaining version information for the existing disk image and that the replacement disk image includes a descendant version resulting from a cumulative series of patches applied to a base assembly version.

7. A non-transitory computer readable storage medium, including instructions stored thereon which when read and executed by one or more computers cause the one or more computers to perform the steps comprising:

providing, at one or more computers, a virtualization environment and a virtual assembly builder;

providing a repository of assembly image archives and one or more patches, wherein each assembly archive defines an assembly as a collection of software appliances that are configured to work together upon deployment, and wherein each software appliance represents a software component, and is associated with a metadata that includes a description of the software component'"'"'s input and output endpoints; and

providing access by the virtual assembly builder to the repository, to enable registration of the assembly archives, and control patching of the assembly archives within a family of archive versions having a base archive version and one or more descendant archive versions, for use in patching an assembly instance associated with a virtual disk and existing disk image, including building a replacement disk image that includes a patched assembly archive within the family of archive versions, importing the replacement disk image into the virtualization environment, and replacing the virtual disk associated with the assembly instance with a patched version of that virtual disk;

wherein when an original assembly archive is patched to create a new assembly archive, the virtual assembly builder tracks a relationship between the original assembly archive and the new assembly archive, for use in enforcing restrictions on patch families and assembly versions while patching assembly instances.

8. The non-transitory computer readable storage medium of claim 7, wherein the virtual assembly builder accesses the repository via an application program interface that supports operations to patch a particular assembly archive and subsequently apply the patch to a corresponding virtual assembly instance.

9. The non-transitory computer readable storage medium of claim 7, wherein the assembly archives are stored in one or more disk volumes which are tagged and referenced, and wherein the virtual assembly builder applies patches to snapshots of the disk volumes which are then used to patch assembly instances.

14. The non-transitory computer readable storage medium of claim 7, wherein the creating the replacement disk image includes importing metadata of the existing disk image and providing updated metadata in the replacement disk image.

15. The non-transitory computer readable storage medium of claim 7,

further comprising associating versions with assembly archives and patches, and using version information to selectively apply a patch to appropriate assembly instances,

wherein selective application of the patch to the appropriate assembly instances includes ascertaining version information for the existing disk image and that the replacement disk image includes a descendant version resulting from a cumulative series of patches applied to a base assembly version.