US 2017/0249469 A1 · ACCESSING FILE SYSTEMS IN A VIRTUAL ENVIRONMENT

Abstract

An access control engine can enable a host operating system to propagate a private resource of an isolated virtual environment, such as a container, running on the host operating system outside of the isolated virtual environment. The private resource can include, for example, a file system mounted within the isolated virtual environment. The access control engine can receive a command and launch the isolated virtual environment in response to the command. Also, in response to the command, the access control engine can interface with a kernel of the host operating system to configure the isolated virtual environment so that the private resource is accessible outside the isolated virtual environment.

Claims20

Dependent claims

A method comprising:

receiving, by an access control engine, a command for launching a container on an operating system, the command including a flag;
determining, by the access control engine, a propagation method for a resource of the container based on the flag;
transmitting, by the access control engine, information to a kernel of the operating system to launch the container;
and
configuring the container, using the access control engine, according to the propagation method to enable a host environment of the operating system to access the resource of the container, the host environment including a virtual environment that is external to an isolated virtual environment of the container.

2 more elements

A non-transitory computer-readable medium in which instructions for an access control engine that is executable by a processing device are stored for causing the access control engine to:

receive, by the access control engine, a command indicating that an isolated virtual environment is to be launched within a host environment of a host operating system;
and
cause, by the access control engine, a kernel of the host operating system to launch the isolated virtual environment and propagate a private resource of the isolated virtual environment to an environment external to the isolated virtual environment.

A system comprising:

a processing device;
and
a memory device in which instructions executable by the processing device are stored for causing the processing device to generate an instance of a Linux operating system comprising:
a kernel;
and
a host environment that includes a host file system;
and
wherein the memory device further comprises instructions for an access control engine that is executable by the processing device for causing the access control engine to launch a container within the host environment and substantially simultaneously grant the host environment access to at least a portion of a file system of the container in an amount determinable based on a command, the host environment including a virtual environment that is external to an isolated virtual environment of the container.

5 more elements

Dependencies are inferred from the claim text.

Accessing file systems in a virtual environment

Life of this patent

Accessing file systems in a virtual environment

Life of this patent

Abstract

Claims20