Systems and methods for disaggregated updates to secondary operating system using network-retrieved secure file system layout

A method, in an information handling system comprising a non-transitory computer readable media communicatively coupled to the processor and having stored thereon a primary operating system of the information handling system and a secondary operating system of the information handling system and a network interface communicatively coupled to the processor and configured to couple the information handling system to a network, the method comprising, during a boot of the information handling system and responsive to a condition for launching the secondary operating system:

• initializing, with a basic input/output system of the information handling system, a network driver for communicating with the network via the network interface;
• downloading, with the basic input/output system, from a secure, verified network location within the network a security manifest file for a most recent version of the secondary operating system, the security manifest file comprising metadata regarding a file system layout for the most recent version of the secondary operating system;
• based on the file system layout of the security manifest file and an actual file system layout of the secondary operating system as stored within the information handling system, determining, with the basic input/output system, one or more portions of the secondary operating system requiring update;
• and
• downloading, with the basic input/output system, the one or more portions of the secondary operating system and apply the one or more portions to the secondary operating system as stored within the information handling system.

An article of manufacture comprising:

• a computer readable medium;
• and
• computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to, in an information handling system comprising a non-transitory computer readable media communicatively coupled to the processor and having stored thereon a primary operating system of the information handling system and a secondary operating system of the information handling system and a network interface communicatively coupled to the processor and configured to couple the information handling system to a network, during a boot of the information handling system and responsive to a condition for launching the secondary operating system:
• initialize, with a basic input/output system of the information handling system, a network driver for communicating with the network via the network interface;
• download, with the basic input/output system, from a secure, verified network location within the network a security manifest file for a most recent version of the secondary operating system, the security manifest file comprising metadata regarding a file system layout for the most recent version of the secondary operating system;
• based on the file system layout of the security manifest file and an actual file system layout of the secondary operating system as stored within the information handling system, determine, with the basic input/output system, one or more portions of the secondary operating system requiring update;
• and
• download, with the basic input/output system, the one or more portions of the secondary operating system and apply the one or more portions to the secondary operating system as stored within the information handling system.