Field-reconfigurable cloud-provided servers with application-specific pluggable modules

A system, comprising:

• a server which includes a primary processor and a memory, wherein an enclosure within which the primary processor and the memory are incorporated comprises a set of externally-accessible slots for attaching one or more pluggable hardware modules to the server without disassembly of the enclosure;
• a first pluggable hardware module comprising a first auxiliary processor for executing at least a portion of a first application;
• and
• a second pluggable hardware module comprising a second auxiliary processor for executing at least a portion of a second application;
• wherein the memory stores program instructions that when executed on the primary processor:
• cause, in response to input received via one or more programmatic interfaces, metadata pertaining to a set of approved pluggable hardware modules to be stored in an encrypted read-write portion of boot media of the server;
• detect that the first pluggable hardware module has been attached to the server via a particular externally-accessible slot of the set of externally-accessible slots;
• in response to determining that the first pluggable hardware module is in a list of approved pluggable hardware modules, obtain a first digital certificate from the first pluggable hardware module, wherein the list of approved pluggable hardware modules is included in the metadata;
• in response to validating the first digital certificate using a first public key associated with the first pluggable hardware module, wherein the first public key is included in the metadata, enable a first program running within a first virtual machine launched at the server to access application data of the first application from the first pluggable hardware module, wherein the application data of the first application is generated at least in part by the first auxiliary processor;
• in response to detecting that the first pluggable hardware module has been detached from the server while the server remains powered on, save state information of the first application;
• detect that the second pluggable hardware module has been attached to the server via the particular externally-accessible slot;
• in response to determining that the second pluggable hardware module is in the list of approved pluggable hardware modules, obtain a second digital certificate from the second pluggable hardware module;
• and
• in response to validating the second digital certificate using a second public key associated with the second pluggable hardware module, wherein the second public key is included in the metadata, enable a second program running within a second virtual machine launched at the server to access application data of the second application from the second pluggable hardware module, wherein the application data of the second application is generated at least in part by the second auxiliary processor.