US 10,002,247 B2Granted

Software container registry container image deployment

AssigneeAmazon Technologies, Inc.

InventorsAnthony Joseph Suarez, Scott Kerns Windsor, Nare Hayrapetyan, Daniel Robert Gerdesmeier, Pooja Kalpana Prakash

Life of this patent

Estimating the term…

Loading patent…

Abstract

A software image associated with a first customer of a computing resource service provider and criteria for identifying an event is received, the software image comprising a set of layers. The set of layers is stored in a first data store to form a stored set of layers, the first data store being physically located in a first region. The set of layers is copied to a second data store to form a copied set of layers, the second data store being physically located in a second region different from the first region. The copied set of layers is launched as a container executing in an instance that is physically located in the second region, and, as a result of identifying an occurrence of the event, the container is caused to be unavailable to an entity associated with the instance.

Claims21

Dependent claims

A system, comprising:

one or more processors;
and
memory including executable instructions that, as a result of execution by the one or more processors, cause the system to:
receive, from a first device associated with a first customer of a computing resource service provider, a container image and information specifying an event trigger for terminating execution of the container image, the computing resource service provider facilitating distribution of the container image from the first customer to a second customer, the container image comprising a set of software layers, the first customer located in a first geographic region;
store the set of software layers in a first repository associated with the first customer to form a stored container image, the first repository being located in the first geographic region;
copy the stored container image to a second repository to form a copied container image, the second repository located in a second geographic region different from the first geographic region;
receive a request, from a second device associated with the second customer of the computing resource service provider, to deploy the container image into at least one virtual machine instance associated with the second customer, the at least one virtual machine instance being located in the second geographic region;
deploy the copied container image as a software container to execute in the at least one virtual machine instance;
and
as a result of an occurrence of the event trigger, terminate execution of the software container.

7 more elements

A computer-implemented method, comprising:

receiving a software image associated with a first customer account of a computing resource service provider and criteria for identifying a specified event, the software image comprising a set of image layers, the computing resource service provider facilitating distribution of the software image to at least one software instance associated with a second customer account of the computing resource service provider;
storing the set of image layers in a first data object store associated with the first customer account to form a stored software image, the first data object store being located in a first geographic region;
copying the stored software image to a second data object store to form a copied software image, the second data object store located in a second geographic region different from the first geographic region;
receiving a request to deploy the software image into at least one software instance associated with the second customer account;
deploying the copied software image to at least one container instance to form deployed software;
and
causing, as a result of identifying an occurrence of the specified event, the deployed software to become unavailable to the second customer account.

4 more elements

One or more non-transitory computer-readable storage media having collectively stored thereon executable instructions that, as a result of execution by one or more processors of a distributed computer system, cause the distributed computer system to:

receive a software image associated with a customer of a computing resource service provider and criteria for identifying an event, the software image comprising a set of layers, the computing resource service provider facilitating distribution of the software image from the customer to an entity associated with an instance that is physically located in a second region;
store the set of layers in a first data store to form a stored set of layers, the first data store being physically located in a first region;
copy the set of layers to a second data store to form a copied set of layers, the entity being authorized to have the copied set of layers launched as a container in the instance;
launch the copied set of layers as a container executing in the instance;
and
as a result of identifying an occurrence of the event, cause the container to be unavailable to the entity.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/975,627Filed 18 Dec 2015
Published: US 2017/0177860 A122 Jun 2017
Granted: 19 Jun 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
G06F 8/60
Arrangements for software engineering: software deployment
G06F 9/45558
Hypervisors; Virtual machine monitors: hypervisor-specific management and integration aspects
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication