Virtuozzo International Gmbh

Parallels International Gmbh

Parallels IP Holdings Gmbh

Alexey Kobets

Pavel Emelyanov

Dmitry Monakhov

Stanislav Kinsburskiy

Denis Lunev

Denis Silakov

Mikhail Philippov

Alexander G Tormasov

Kirill Korotaev

Alexey Kostyushko

Oleg P Volkov

Alexey Kuznetzov

Eugene Kolomeetz

Andrey Zaitsev

Andrey Vagin

Maxim Patlasov

Victor Prutyanov

Roman Kagan

Andrey Zaytsev

Ludmila Ivanichkina

Andre Moruga

Disclosed herein are systems and method for booting servers in a distributed storage to improve fault tolerance. In one aspect, an exemplary method comprises, during a booting of a hardware server belonging to the distributed storage, starting a boot component from on any one physical block device from at least two or more physical block devices of the hardware server, wherein the at least two or more physical block devices of the hardware server are bootable and each physical block device stores the boot component, wherein an Operating System (OS) of the hardware server is installed on a virtual disk, and wherein the virtual disk is stored on the distributed storage, and by the boot component, accessing the distributed storage to obtain access to the virtual disk, mounting the virtual disk as a root file system of the OS, and booting the OS from the mounted virtual disk.

System and method for booting servers in a distributed storage to improve fault tolerance

A system and method for detecting and fixing crashes in a cluster environment, including detecting a crash; generating a call trace of the crash; generating a crash ID based on the call trace; checking if the crash ID matches a known crash ID from a knowledge base; when the crash ID matches, applying an automatic recovery procedure, including any of (a) restarting a service that caused the crash; (b) removing and replacing a software package that caused the crash; (c) updating software that caused the crash; and (d) rebooting a machine where the crash occurred; when the crash ID does not match, (a) collecting logs on the machine where the crash occurred; (b) collecting logs from any virtual environments on the machine where the crash occurred; and (c) generating crash ID and sending the crash ID and the logs to the knowledge base.

Automated software crash recovery in hyperconverged systems using centralized knowledge database

Disclosed herein are systems and method for providing a File System (FS) without redundancy for one or more services. In one aspect, an exemplary method comprises, mounting a base image of microservices to a directory, for each of the one or more services, union-mounting a service image on top of the base image, identifying all dependencies associated with the service image, and creating one or more sub-directories for each dependency associated with the service image, for each identified dependency, creating a link between the dependency and the union-mounted service image and base image, and creating, one or more micro-services.

System and method for providing a file system without duplication of files

Disclosed are systems and methods for execution of applications in a container. An exemplary method comprises receiving, by at least one computing device, a request to an application, wherein the application includes a set of instructions for processing the request, determining whether a state snapshot is available for the computing device, restoring state of the process from the state snapshot in a container on the computing device and processing the request based on the set of instructions by the process when the state snapshot is available, preparing at least one new process in the container on the computing device for processing the request, creating a new state snapshot for the application and processing the request based on the set of instructions by the new process when the state snapshot is not available, wherein creating the new state snapshot is performed after preparing the new process and before processing the request.

System and method for execution of applications in a container

A system and method is provided for switching file systems based on an instruction from a user application. An exemplary method includes receiving an instruction from a user application to replace a first file system by a second file system, identifying and temporarily suspending all processes that are working with one or more files on the first file system, obtaining information about all files that are used by a temporarily suspended process, the obtained information including at least information on corresponding memory mappings or file descriptors, replacing resources of the first file system by matching resources of the second file system, synchronizing attributes of the first and second file systems, and resuming execution of suspended processes.

System and method for switching file systems based on an instruction from a user application

A system and method is provided for providing distributed computing platform on untrusted hardware. An exemplary method includes launching a hypervisor on an untrusted computing node and receiving a request generated to provide a computing function using hardware of the untrusted computing node. Upon receiving the request, an enclave in memory of the untrusted computing node is created and a virtual machine is launched in the memory enclave. Moreover, a guest operating system of the virtual machine verifies the security of the untrusted computing node. Finally, the guest operating system performs the computing function using the hardware of the untrusted computing node upon the guest operating system verifying the security of the untrusted computing node and the hypervisor.

System and method for providing distributed compute platform on untrusted hardware based on encryption

Disclosed herein are systems and method for generating a guest Operating System (OS) crash dump. In one aspect, an exemplary method comprises, obtaining information about a guest physical memory and a state of a guest CPU, determining guest page tables including a data structure for mapping between the guest physical memory and guest virtual pages using registers of the guest CPU, identifying an interrupt handler and determining an address of the interrupt handler using the guest page tables and the registers of guest CPU, finding a location of a kernel image in memory by scanning virtual addresses backward starting from the interrupt handler until a beginning of an executable kernel module is found, identifying and fetching debug symbols, determining system task descriptors using the debug symbols, determining debugger relevant data using the debug symbols, and generating the crash dump header using the system task descriptors and the debugger relevant data.

System and method for generating a guest operating system crash dump

A system and method for executing a method generating a binary patch file for live patching of an application is disclosed. In one exemplary aspect, the method comprises creating shared object by compiling source code patch file that contains source code of a new function corresponding to an old function, a global external symbol referenced in the source code of the new function, and at least one link to a symbol in an application binary code corresponding to the global external symbol, wherein the shared object contains binary code of the new function for replacing the old function during the live patching, and the result of a compilation of the link, generating metadata usable to facilitate the live patching, creating bindings between calculated relative addresses and the global external symbol referenced by the shared object, and creating the binary patch file by adding metadata to the shared object.

System and method for generating a binary patch file for live patching of an application

Disclosed are systems and method for managing blocks of data and metadata. In an exemplary aspect, a method comprises receiving, by a first virtual block device on a computing device, a request from a file system. In response to identifying an indication that the request for a block of data, the method comprises accessing, by the first virtual block device, at least one backing block device dedicated to storing data to perform a requested operation on the block of data. In response to identifying an indication that the request for metadata, the method comprises instructing a second virtual block device to perform the requested operation on the metadata of the file system, wherein the second virtual block device accesses at least another one backing block device dedicated to storing metadata to perform the requested operation on the metadata of the file system and caches the metadata in Random Access Memory.

System and method for managing blocks of data and metadata utilizing virtual block devices

Disclosed are methods and systems for upgrading a container to another version of an operating system while preserving user applications and data of the container. In a general aspect, the method comprises: copying, from a first container host to an auxiliary host, an operating system kernel of the first container host, and system files and user applications and data of the container; upgrading on the auxiliary host the operating system, including the kernel of the operating system and system files of the container, from one version of the operating system to another version of the operating system, while preserving user applications and data; and copying, from the auxiliary host to a second container host, the system files of the upgraded operating system, and the preserved user applications and data.

System and method for upgrading operating system of a container using an auxiliary host

Disclosed herein are systems and method for deploying servers in a distributed storage to improve fault tolerance. In one aspect, an exemplary method comprises, on a hardware server, installing an OS on a virtual disk, putting the virtual disk on the distributed storage, configuring the hardware server so that at least two physical block devices of the hardware server are bootable by putting, on each physical block device of the at least two physical block devices, a boot component, and configuring the boot component on any one physical block device of the at least two physical block devices, the configuration of the boot component including enabling the boot component to perform at least one of: mounting the virtual disk as a root file system of the OS, and booting the OS from the mounted virtual disk during a booting of the hardware server.

System and method for deploying servers in a distributed storage to improve fault tolerance

Disclosed herein are systems and method for recovering a computing device after an intrusion is detected. In one aspect, an exemplary method comprises, by a minimalistic operating system running on the computing device, deploying a master container, wherein the deploying of the master container comprises creating and starting the master container from a container image, providing, to the master container, access to a storage area network (SAN) volume, providing, to the master container, read-only access to a Distributed Configuration Management (DCM) module domain, the domain being where a configuration of the computing device is stored, and invoking an Intrusion Detection Module (IDM) to start detecting intrusions into the master container; and upon receiving a notification from the IDM, re-deploying, by the minimalistic OS, the master container from the container image, wherein the deployed master container acts as a default runtime environment on the computing device.

System and method for recovering a node in a cloud infastructure after an intrusion

Disclosed herein are systems and methods for secure authentication of a managed application. In one aspect, an exemplary method comprises receiving, by a cloud platform, a request from a managed application to connect to a middleware service, determining that the managed application is authenticated to use the middleware service based on the secret, obtaining a secret associated with the managed application and the middleware service from a secret store, connecting to the middleware service using the secret to establish a secure connection, and delegating, to the managed application, the secure connection between the managed application and the middleware service.

System and method for securely connecting applications to middleware services in a cloud platform

Disclosed are systems and methods for execution of applications in a virtual execution environment. An exemplary method comprises receiving from a client, a request for execution of an application in at least one virtual execution environment on at least one hardware node, determining whether there is a state snapshot of an application in the virtual execution environment, restoring a state of the application from a state snapshot in the virtual execution environment when the state snapshot of the application is found, starting the application without restoring the state of the application from the state snapshot and creating a new state snapshot of the application when the state snapshot of the application is not found, continuing execution of the application in the virtual execution environment and returning a response of the application to the client.

System and method for accelerating processing in event-driven server-less computing

Disclosed are systems and methods for encryption of an ephemeral layer of one or more containers. An exemplary method comprises detecting a container starting execution in an operating system, generating a temporary encryption key and storing the temporary encryption key in memory of a kernel of the operating system, creating an encrypted area as the ephemeral layer in a storage device, the encrypted area accessible only by the container, providing to the container access to the encrypted area, and responsive to stopping execution of the container, destroying the temporary encryption key.

Growing community of inventors

Seattle, WA, United States of America

Alexey Kobets