Policy based layered filesystem management

A non-transitory computer-readable storage medium storing instructions that, when executed by a computer, cause the computer to perform a method for performing operations on a layered filesystem, the method comprising:

• receiving a policy for the layered filesystem, wherein system data critical to execution of a virtual computing environment is stored in at least one layer and user-specific data associated with user changes to the virtual computing environment is stored in at least one other layer;
• receiving an input/output (I/O) operation involving a file, wherein at least two different versions of the file having different contents exist on two or more layers of the layered filesystem, wherein the at least two different versions of the file are associated with the same user;
• and
• directing the I/O operation to multiple layers of the layered filesystem based on the policy, wherein
• the policy is used to maintain separation between the system data and the user-specific data in the virtual computer environment.

A computer system, comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the computer system to perform a method for performing operations on a layered filesystem, the method comprising:
• receiving a policy for the layered filesystem, wherein system data critical to execution of a virtual computing environment is stored in at least one layer and user-specific data associated with user changes to the virtual computing environment is stored in at least one other layer;
• receiving an input/output (I/O) operation involving a file, wherein at least two different versions of the file having different contents exist on two or more layers of the layered filesystem, wherein the at least two different versions of the file are associated with the same user;
• and
• directing the I/O operation to multiple layers of the layered filesystem based on the policy, wherein
• the policy is used to maintain separation between the system data and the user-specific data in the virtual computer environment.

A computer-implemented method for performing operations on a layered registry system, comprising:

• receiving a policy for the layered registry system, wherein the policy comprises a set of layer assignments, wherein system data critical to execution of a virtual computing environment is stored in at least one layer and user-specific data associated with user changes to the virtual computing environment is stored in at least one other layer;
• receiving an input/output (I/O) operation that specifies a registry key, wherein at least two different versions of the registry key having different contents exist on two or more layers of the layered registry system, wherein the at least two different versions of the registry key are associated with the same user;
• determining a layer assignment that matches the I/O operation, wherein said determining involves matching a registry key specified in the set of layer assignments with the registry key specified in the I/O operation;
• and
• directing the I/O operation to multiple layers of the layered registry system according to the layer assignment that matched the I/O operation, wherein
• the policy is used to maintain separation between system data and the user-specific data in the virtual computer environment.