Certificate based expiration of file system objects
AssigneeRed Hat, Inc.
InventorsVivek ShivBhagwan Agarwal, Nagaprasad Sathyanarayana
Life of this patent
Estimating the term…
Abstract
Systems and methods for enhancing file systems with file system objects that automatically expire. An example method may involve: scanning, by a processing device, a data storage node, wherein the data storage node comprises multiple certificates associated with file system objects in a plurality of different data storage nodes; iterating through the multiple certificates to determine a set of certificates, wherein the set of certificates comprises certificates that are invalid; and initiating a deletion of the file system objects in the plurality of different storage nodes.
Claims20
A method comprising:
- transmitting, by a processing device, a request to create a certificate, the certificate being associated with a file system object and indicating an expiration time of the file system object, wherein the file system object is stored on a first data storage device and the certificate is stored on a second data storage device;
- scanning, by the processing device, the second data storage device, wherein the second data storage device comprises multiple certificates associated with file system objects stored on a plurality of data storage devices, wherein each certificate of the multiple certificates indicates an expiration time for at least one of the file system objects;
- iterating, by the processing device, based on an attribute of each certificate, through the multiple certificates to identify a set of certificates, wherein the set of certificates comprises invalid certificates;
- and
- responsive to identifying the set of certificates, deleting, on the plurality of data storage devices, file system objects associated with the invalid certificates in the set, by permanently removing the associated file system objects from respective locations of the associated file system objects.
A system comprising:
- a memory;
- and
- a processing device operatively coupled to the memory, the processing device to:
- transmit, a request to create a certificate, the certificate being associated with a file system object and indicating an expiration time of the file system object, wherein the file system object is stored on a first data storage device and the certificate is stored on a second data storage device;
- scan the second data storage device, wherein the second data storage device comprises multiple certificates associated with file system objects stored on a plurality of data storage devices, wherein each certificate of the multiple certificates indicates an expiration time for at least one of the file system objects;
- iterate, based on an attribute of each certificate, through the multiple certificates to identify a set of certificates, wherein the set of certificates comprises invalid certificates;
- and
- responsive to identifying the set of certificates, delete, on the plurality of data storage devices, file system objects associated with the invalid certificates in the set, by permanently removing the associated file system objects from respective locations of the associated file system objects.
A non-transitory machine-readable storage medium storing instructions that cause a processing device to:
- transmit, a request to create a certificate, the certificate being associated with a file system object and indicating an expiration time of the file system object, wherein the file system object is stored on a first data storage device and the certificate is stored on a second data storage device;
- receive a request to access a file system object of the first data storage device;
- identify a certificate associated with the file system object, wherein the certificate indicates the expiration time for the file system object, the certificate being stored in the second data storage device that is different from the first data storage device;
- determine that multiple certificates in the second data storage device are invalid, wherein the multiple certificates comprise the certificate and are associated with file system objects in a plurality of data storage devices;
- and
- responsive to determining that multiple certificates in the second data storage device are invalid, delete, on the plurality of data storage devices the file system objects associated with the invalid certificates, by permanently removing the file system objects from respective locations of the file system objects.
Dependencies are inferred from the claim text.