Sun Microsystems, Inc.

Daniel B Price

Andrew G Tucker

Ozgur C Leonard

John T Beck

Liane Praza

Roger A Faulkner

Andrew D Gabriel

David S Comay

The present invention provides, in one embodiment, a multi-level service model operating system environment that may be partitioned into a global zone and one or more non-global zones to isolate processes from processes executing in association with other non-global zones under control of a single kernel instance. In one embodiment, the multi-level service model includes a virtual platform layer and an application layer. The virtual platform layer may include services and resources for supporting the zones, which can be made accessible to the zones in the form of a virtual platform. The application layer may comprise the non-global zones, including an application environment for maintaining a runtime state for the zone's processes and any zone-constructed objects, such as network connections and shared memory segments. In one embodiment, control and management of non-global zones can be provided by a system of states and transitions.

Two-level service model in operating system partitions

In accordance with one embodiment of the present invention, there is provided a mechanism for managing and controlling global visibility of resources in zones within an operating system controlled by a single kernel instance. Embodiments enable isolation and virtualization of processes within a single image of an operating system, without requiring implementation of hardware support (such as the introduction of an additional privilege level) to isolate privileged programs, and without multiple instances of an operating system or operating system kernel for some applications.

Global visibility controls for operating system partitions

A mechanism is disclosed for establishing a separate virtual system console for each non-global zone of an operating system environment that has been partitioned into a global zone and one or more non-global zones. An operating system kernel instance implements a virtual console driver. A particular instance of the virtual console driver is executed. A device node is established within a non-global zone controlled by the kernel instance. An association is established between the device node and the particular virtual console driver instance. A process executes within the device node's non-global zone. In response to the process' request to write to the device node, it is determined which virtual console driver instance is associated with the device node. In response to determining that the device node is associated with the particular virtual console driver instance, data received from the process is sent to the particular virtual console driver instance.

Virtual system console for virtual application environment

The present invention relates to managing defunct processes. A parent process that does not collect exit information associated with a child process may leave a defunct child process. A defunct child process is identified. The parent process of the defunct child process is modified. The parent process can be modified by changing an existing thread or instantiating a new thread to collect exit information associated with the child process. Collecting exit information causes the removal of the defunct child process.

Growing community of inventors

Mountain View, CA, United States of America

Daniel B Price