Red Hat, Inc.

Vincent Batts

Sage Weil

Colin G Walters

James Robert Bowes

Jeremy John Eder

Willard Woods

William Eden Cohen

William Poteat

Some examples of the present disclosure relate to container-image replication. One example includes a computing device that can generate a container image. The container image can include metadata that is consumable by a container engine for deploying a container with settings specified in the metadata. The computing device can also generate provenance data indicating at least one aspect related to the generation of the container image. The computing device can modify the metadata in the container image to include an indicator of the provenance data. The computing device can then store the container image and the provenance data in one or more repositories accessible to a client device. This may enable the client device to reproduce the container image at a future point in time.

Container-image reproduction and debugging

An example method for filesystem pass-through on lightweight virtual machine containers includes executing a container on a host, and creating a file system overlay in a local file system storage located on the host. The example method further includes copying files and directories into the file system overlay from a shared file system until the file system overlay is fully populated. The file system overlay is fully populated when all the files and directories from the shared file system are copied into the file system overlay. Once fully populated, completion is marked which indicates the file system overlay is fully populated, where marking the completion prevents accessing a read-only base image within the shared file system.

Filesystem pass-through on lightweight virtual machine containers

Disclosed herein is technology to capture and distribute a state of a file system that updates, removes, or adds a computer program to a computing device. An example method may include: analyzing a program package associated with a plurality of objects of a computer program; determining a state of a file system after an installation of the program package; generating a manifest that corresponds to the computer program and represents the state of the file system after the installation, the manifest comprising a hash tree that comprises object identification data of an object of the plurality of objects of the computer program; and providing the manifest to one or more computing devices.

Distributing file system states

Mechanisms for disassembling and reassembling a tar archive are disclosed. A computing device accesses a tar archive comprising a file payload data segment and a plurality of non-payload data segments. The non-payload data segments in the tar archive are identified. The non-payload data segments are stored in a replay log structure. The file payload data segment of a file is identified in the tar archive, and file identification data identifying the file is stored in the replay log structure. The file payload data segment is not stored in the replay log structure.

Disassembly and reassembly of a tar archive

An example method of debugging an application running in a container includes detecting, by a kernel, a system call from an application running in a container. The method also includes performing a capability check based on detection of the system call. The capability check provides a set of capabilities used by the system call. The method further includes associating the system call with the set of capabilities and providing debug information based on the application run in the container. The debug information includes the association between the system call and the set of capabilities.

Application debugging in a restricted container environment

An example method of compressing a set of content paths includes identifying a set of content paths associated with a client. The method also includes determining a condensed path tree expressing the set of content paths. The method further includes determining a path node tree including a set of path nodes. Each path node of the set of path nodes represents from the condensed path tree a connector node including one or more segment strings as a name and one or more nodes referenced by the connector node. The method also includes encoding, based on a frequency of appearance of a segment string as a name in the set of path nodes, the set of content paths. The method further includes compressing the set of content paths. The method also includes providing a digital certificate including the compressed and encoded set of content paths.

Growing community of inventors

Raleigh, NC, United States of America

Vincent Batts