Red Hat, Inc.

Red Hat Israel, Ltd.

Daniel Erez

Arik Hadas

Nir Soffer

Maor Lipchuk

Alissa Bonas

Eran Cohen

Roy Golan

Allon Mureinik

Ronnie Lazar

Avishay Traeger

Yevgeny Shnaidman

The technology disclosed herein enables adding new host systems to existing clusters. An example method comprises receiving, by a processor, identification data associated with an existing cluster; generating a cluster entity data structure of the existing cluster using the identification data; generating a discovery image using the cluster configuration data structure, wherein the discover image comprises an executable code structured according to a file system; and causing a new host system to boot using the discovery image.

Adding host systems to existing containerized clusters

Systems and methods for simulating containerized clusters. An example method may include determining a first value of an entity property that characterizes a simulated cluster entity in a containerized cluster entity, where the first value of the entity property is determined in view of an entity simulation specification associated with the simulated cluster entity, identifying one or more simulation policies that correspond to the simulated cluster entity, the simulation policies comprising a value generation policy that specifies a modification factor, the entity property, and one or more entity modification criteria. The example method may further include responsive to determining that the one or more entity modification criteria are satisfied, determining a second value of the entity property in view of the first value of the entity property and the modification factor, and generating simulation output comprising the second value of the entity property.

Simulating containerized clusters

A system includes a cluster of nodes including a storage domain, a memory, and a processor. The processor is configured to receive a request to determine an amount of allocated blocks associated with a virtual disk comprising a first volume. Each volume that includes metadata associated with allocated blocks is designated into a first set. Each volume within the one or more layers that lacks metadata associated with allocated blocks and includes an allocation table is designated into a second set. Each volume within the one or more layers that is omitted from the first set and second set is designated into a third set. The amount of allocated blocks within the first volume is determined based on inspecting the metadata of each volume of the first set, inspecting each allocation table of each volume of the second set, and inspecting each block of each volume in the third set.

Determining a size of virtual disks

An example method may include identifying, in a plurality of blocks of data, one or more unallocated blocks, wherein the plurality of blocks further comprises one or more allocated blocks, generating a plurality of checksums, wherein each checksum corresponds to one of the blocks, and the checksums comprise a plurality of first checksums and a plurality of second checksums, wherein each of the first checksums corresponds to one of the unallocated blocks and comprises a predetermined checksum of a block of zeros, and wherein each of the second checksums corresponds to one of the allocated blocks and comprises a checksum of the corresponding one of the allocated blocks, and generating a result checksum in view of the plurality of checksums.

Efficient checksum computation

Disclosed is a method, comprising obtaining configuration information for a virtual machine (VM) that is to be imported from a source platform to a target platform, creating an overlay image of a virtual disk image of the VM on an external disk, creating a second overlay image of the virtual disk image on a temporary disk of the target platform, the temporary disk comprising an active layer of the virtual disk image, and the external disk comprising a backing file of the temporary disk, starting a second VM on the target platform in view of the configuration information and copying, by a processing device, the temporary disk and the external disk to a target disk on the target platform.

Minimizing downtime when importing virtual machines from other platforms

Systems and methods for enforcing retention policies with respect to virtual machine snapshots are disclosed. In one implementation, a method may include identifying, by a virtualization manager, a snapshot of a virtual machine hosted by a host computer system. The method further includes retrieving, from metadata associated with the snapshot, a value of a time to live (TTL) parameter associated with the snapshot. The method also includes responsive to determining that the value of the TTL parameter satisfies a threshold criterion, deleting the snapshot.

Enforcing retention policies with respect to virtual machine snapshots

Implementations for prioritized execution of highly available virtual machines for minimizing downtime of the highly available virtual machines are described. An example method may include accessing metadata identifying a plurality of virtual machines indicated as highly available virtual machines, determining, in view of the metadata, a number of highly available virtual machines of the plurality of virtual machines that are associated with each storage domain of a plurality of storage domains, and initiating, starting with a storage domain associated with a highest number of highly available virtual machines, execution of one or more highly available virtual machines associated with each of the plurality of storage domains in a sequential manner.

Minimizing downtime of highly available virtual machines

Implementations of the disclosure provide for secret keys management in a virtualized data-center. In one implementation, a system is provided. The system comprises a memory to store secret key data and a processing device coupled to the memory. The processing device is to identify authentication information provided by a user, the authentication information comprising access information associated with a data storage domain, receive a secret key to access the data storage domain in view of the authentication information, wherein the secret key comprises a universally unique identifier (UUID), and register the secret key, wherein to register the secret key, the processing device to store a data structure in volatile memory indicating an association between the UUID of the secret key and the hypervisor.

Secret keys management in a virtualized data-center

Implementations of the disclosure provide for secret keys management in a virtualized data-center. In one implementation, a system is provided. The system comprising a memory to store secret key data and a processing device coupled to the memory. The processing device is to detect activation of a hypervisor on a host system. A request is received from a virtual machine (VM) associated with the hypervisor to access a data storage domain. A secret key providing authenticated access to a data storage device domain is registered to the hypervisor. The secret key includes a universally unique identifier (UUID). To register the secret key, the processing device is to store a data structure indicating an association between the UUID of the secret key and the hypervisor in a volatile memory associated with the processing device. Thereupon, the UUID of the secret key is transmitted to the hypervisor associated with the VM.

Mechanisms for snapshot management are provided. A request that requests that a first storage entity of type volume entity be generated is sent to an external storage service via an external interface. An entity chain associated with a virtual machine is generated. A first entry contains a first identifier (ID) that identifies the first storage entity, an entity type ID that identifies the first storage entity as a volume entity, and an active storage entity indicator. A first snapshot command is received. A request is sent to the external storage service via the external interface that requests that a second storage entity of type snapshot-volume entity be generated. A second entry is added to the entity chain that contains a second ID that identifies the second storage entity, an entity type ID that identifies the second storage entity as a snapshot-volume entity, and a reference to the first entry.

Snapshot management with an external storage service

Implementations of the disclosure provide for live storage domain decommissioning in a virtual environment. A method of the disclosure includes identifying, by a processing device, a storage domain to decommission from a storage system. The storage domain comprises a plurality of disk images. It is determined whether the disk images are associated with a virtual machine. Thereupon, the disk images are hot-unplugged from the virtual machine. Responsive to detecting that the disk images are unplugged from the virtual machine, the disk image is deleted from the storage domain and the storage domain is removed from the storage system.

Live storage domain decommissioning in a virtual environment

Systems and methods for managing virtual machine templates. An example method may comprise: identifying, by a computer system, a virtual machine snapshot represented by a volume chain comprising one or more copy-on-write (COW) volumes; and creating, based on the virtual machine snapshot, a virtual machine template represented by a new COW volume, wherein the new COW volume comprises data from the COW volumes of the volume chain.

Virtual machine template management

An apparatus receives virtualization manager indication of a capability selected from a virtualization manager capability subset. The apparatus receives non-virtualization manager indication of a selected capability not in said subset. The apparatus passes virtualization manager indication of a result of the capability selected from the subset. The apparatus passes non-virtualization manager indication of a result of the capability not in said subset.

Hypervisor capability access provision

A processing device identifies a failure with at least one physical storage device of a first set of physical storage devices accessible to a virtualized environment via a logical storage domain. The logical storage domain has an assigned address. The processing device identifies a backup of the first set of physical storage devices. The backup includes a second set of physical storage devices. The processing device also prevents the virtualized environment from accessing the first set of physical storage devices. The processing device associates the second set of physical storage devices with the logical storage domain to cause storage access of the virtualized environment to be redirected to the second set of physical storage devices via the logical storage domain.

Growing community of inventors

Tel Aviv, Israel

Daniel Erez