Patent Application
20230342181
In many virtualization computing systems, virtualization software is installed on a cluster of hosts using an ISO image that is created from a flat list of software installation bundles (SIBs). An SIB is the smallest unit of software that can be shipped and installed, and these SIBs make up, for example, a base hypervisor image (hereinafter also referred to as “base image”) from a virtualization software provider, as well as drivers, agents, and other software components from an OEM (original equipment manufacturer) and other vendors of hardware. In a typical installation, hundreds of these SIBs are packaged as one or more ISO images and installed in the hosts.
After installation, lifecycle management of the virtualization software becomes cumbersome and error-prone for several reasons. First, although different software developers create new versions or updates to the SIBs, the new versions or updates cannot be released independently. The releases have to be tightly controlled because it is likely that one SIB has a dependency to another SIB. As a result, new releases are made in the form of bulletins, which are a collection of software installation bundles, or as a new ISO image in which new SIBs from the virtualization software provider, the OEM, and other software vendors are packaged. Because of the inter-dependencies and the integration of the newly developed SIBs with other SIBs, it is difficult to make piecemeal changes to the virtualization software for easy consumption by an end user during the lifecycle of the virtualization software.
Furthermore, new releases come in many different forms. A complete release. e.g., a GA (general availability) release, may be made with an ISO image or a bulletin. The bulletin may be employed for partial releases as well, including rollup, patch, update, and extension. Very few end users understand the differences among these different types of partial releases and there are no clear rules that establish when and how a bulletin should be created for a particular type of release.
Consequently, over time, changes to the virtualization software are layered on top of each other and the final image of the virtualization software is not easily captured or described. Worse, history becomes a factor in that past bulletins may have included other SIBs, not overridden in later bulletins. For these reasons, the overall content is difficult to capture or describe, and the end user is unable to answer the question, “What is the current state of the virtualization software configured in each of the hosts in the cluster?” As such, if there is a particular desired state of the virtualization software that the user is interested in, the end user will have no way of knowing whether the current state is compliant with the desired state and, if not, how to make the current state compliant with the desired state.
One or more embodiments provide a desired state model for managing the lifecycle of virtualization software. According to embodiments, components of virtualization software are grouped into release units that are each managed separately and are layered on top of each other in a standardized way so that developers can independently create and ship their software with proper naming and versioning for easy consumption by end users of the virtualization software.
In this desired state model, the virtualization software provider releases the base image which forms the foundation for everything. OEMs create add-ons that customize the base image for their servers. When the end user selects an OEM of the servers for hosting the virtualization software, the add-on for that OEM is layered on top of the base image. In addition, a firmware manifest is laid on top of the add-on. At the top are additional drivers and agents, e.g., those added in response to a user selection of solutions.
According to one embodiment, an image of a virtualization software and firmware in a plurality of hosts are upgraded. The virtualization software that is to be upgraded to a desired image of the virtualization software includes a base image, an add-on image that is layered on top of the base image, and drivers and agents. The upgrade includes the steps of: retrieving metadata of the base image based on a first user input that specifies a version of the base image, metadata of the add-on image based on a second user input that specifies a server of a particular original equipment manufacturer (OEM) in which the desired image of the virtualization software is to be installed, and metadata of the drivers and agents based on a third user input that specifies a firmware package for the server of the particular OEM; validating the desired image of the virtualization software by extracting dependencies and conflicts defined in the metadata of all payloads of the desired image of the virtualization software including the metadata of the base image, the metadata of the add-on image, and the metadata of the drivers and agents, and confirming there are no violations of the extracted dependencies and conflicts; and upgrading the current image of the virtualization software to the desired image of the virtualization software and upgrading the current version of the firmware to the desired version of the firmware.
Further embodiments include a non-transitory computer-readable storage medium comprising instructions that cause a computer system to carry out the above method, as well as a computer system configured to carry out the above method.
According to embodiments, SIBs, more generally referred to herein as payloads, are logically grouped into “components.” In the embodiments, a component is a unit of shipment and installation, and a successful installation of a component typically will appear to the end user as enabling some specific feature. For example, if a software vendor wants to ship a user-visible feature that requires a plug-in, a driver, and a solution, the software vendor will create separate payloads for each of the plug-in, the driver, and the solution, and then group them together as one component. From the end user's perspective, it is sufficient to install this one component onto a server to enable this feature on the server. A component may be part of another software image, such as a base image or an add-on, as further described below, or it may be a stand-alone component provided by a third-party or the end user (hereinafter referred to as “user component”).
A “base image” is a collection of components that are sufficient to boot up a server with the virtualization software. For example, the components for the base image includes a core kernel component and components for basic drivers and in-box drivers. The core kernel component is made up of a kernel payload and other payloads that have inter-dependencies with the kernel payload. According to embodiments, the collection of components that make up the base image is packaged and released as one unit.
An “add-on” or “add-on image” is a collection of components that the OEM wants to bring together to customize its servers. Using add-ons, the OEM can add, update or remove components that are present in the base image. The add-on is layered on top of the base image and the combination includes all the drivers and solutions that are necessary to customize, boot up and monitor the OEM's servers. Although an “add-on” is always layered on top of a base image, the add-on content and the base image content are not tied together. As a result, an OEM is able to independently manage the lifecycle of its releases. In addition, end users can update the add-on content and the base image content independently of each other.
“Solutions” are features that indirectly impact the desired image when they are enabled by the end user. In other words, the end-user decides to enable the solution in a user interface but does not decide what components to install. The solution's management layer decides the right set of components based on constraints. Examples solutions include I-IA (high availability), and NSX (network virtualization platform of VMware, Inc.).
In the embodiment illustrated in
VM management server 100 is a physical or virtual server that communicates with hypervisor 150 of each host 131 to provision VMs 140 from the hardware resources of host 131. VM management server 100 logically groups hosts 131 into a cluster 130 to provide cluster-level functions, such as load balancing across cluster 130 by performing VM migration between hosts 131, distributed power management, dynamic VM placement according to affinity and anti-affinity rules, and high-availability. The number of hosts 131 in the cluster may be one or many and three are depicted in
In the desired state model according to embodiments, the end user expresses the desired state of the virtualization software (i.e., hypervisor 150) for the cluster of hosts through a UI 101 of VM management server 100. One example form for expressing the desired state is a software specification 105, which is generated based on selections made through UI 101. The selections that can be made through UI 101 include (1) base image, (2) add-on, (3) solution, (4) user component(s), and (5) firmware package (see
In the embodiments, metadata and payloads of components, and metadata of base images, add-ons, firmware packages (in the form of a firmware manifest 123), components defined in firmware packages (hereinafter referred to a “firmware components”), and user components are placed in a data structure referred to as image depot 120. As depicted in
After image manager 112 composites the image of the virtualization software, image manager 112 validates the composited image in accordance with the method depicted in
Coordinator 114 also communicates with a hardware support manager 170 through an API call to install the firmware in hosts 131. In response to the API call, hardware support manager 170 retrieves the firmware from firmware repository 171 and stages the firmware in hosts 131. Then, the firmware staged in each host 131 is installed in the host by a corresponding baseboard management controller 154.
Hardware support manager 170 is a firmware management software running in a physical or a virtual server that exposes various APIs. The APIs include: (1) an “apply/remediate” API call to install in hosts 131 the firmware specified by the firmware manifest in desired image 125 or to remediate the firmware currently installed in hosts 131 to bring the firmware into compliance. (2) a “list” API to list all of the firmware packages that hardware support manager 170 is supporting, (3) a “scan” API to compare the current state of the firmware running in hosts 131 with the firmware specified by the firmware manifest in desired image 125, (4) a “firmware inventory” API to report a current state of the firmware running in hosts 131, (5) a “pre-check” API to confirm that it is possible to upgrade the firmware currently installed in hosts 131 to the firmware specified by the firmware manifest in desired image 125, and (6) a “stage” API to retrieve the firmware specified by the firmware manifest in desired image 125 and store them in a cache memory of hosts 131 for immediate installation upon receiving an apply or remediate API call. With these APIs, the end user is able to manage the image of the virtualization software installed in hosts 131 and the firmware installed in hosts 131 from a single “pane of glass,” in this case, through UI 101 of VM management server 100.
Before desired image 125 is actually installed in hosts 131, image manager 112 performs a validation against a hardware compatibility list (HCL) 180. The goal of this validation, more specifically referred to herein as an HCL validation, is to make sure that desired image 125 which is going to be deployed in hosts 131 is compatible with the hardware devices in hosts 131. HCL 180 contains a list of all hardware devices installed in hosts 131, and identifies for each such hardware device all versions of device firmware and drivers that are compatible therewith. Validation is successful if the versions of the firmware and drivers in desired image 125 are listed in HCL 180 as compatible versions.
Components are defined in an image specification 210 as a collection of payloads, which are stored in payload repository 230, and an image publishing kit 220 pulls in the payloads of the components from payload repository 230 and publishes them in image depot 120 along with the metadata of the published components. Components published in this manner may be a component of a base image, a component of an add-on, a firmware component, a component required to implement a solution, or a user component.
The provider of the virtualization software defines the components that make up the base image in an image specification 210, and image publishing kit 220 publishes the metadata of the base image in image depot 120. In the example depicted in
OEMs define the content of their add-ons in image specifications 210, and image publishing kit 220 publishes the metadata of the add-ons in image depot 120. In the example depicted in
Different solutions and user components are also defined in image specifications 210, and image publishing kit 220 publishes the metadata of each of the different solutions and user components in image depot 120.
The second part of
After software specification 105 is generated, image manager 112 parses it to determine the selections of the base image, add-on, solution, firmware package, and one or more user components made by the end user. Then, image manager 112 retrieves the metadata corresponding to the selected base image, the selected add-on, and the selected solution from image depot 120, determines the firmware manifest corresponding to the selected firmware package, and composites an image of the virtualization software as a hierarchical software stack, as described above. Image manager 112 then validates the composited image as described below in conjunction with
At step 314, image manager 112 selects a component to process. If the component is to be updated as determined at step 316, image manager 112 updates the metadata of the component in the desired image at step 318. If the component is to be removed as determined at step 320, image manager 112 removes the metadata of the component from the desired image at step 322. If the component is to be neither updated nor removed, it is added to the desired image at step 326. If there are any more add-on components to process, as determined at step 330, the process returns to step 314, where another component is selected for processing.
If there are no more add-on components to process, as determined at step 330, image manager 112 at step 332 processes the firmware manifest corresponding to the selected firmware package to add and remove components in the same manner as the selected add-on was processed. Then, image manager 112 adds to the desired image and one or more user components selected by the user at step 336 and components for the selected solution at step 338.
At step 516, image manager 112 acquires the hardware inventory of the host, e.g., from a hardware discovery service that is running in VM management server 100. Then, at step 518, image manager 112 selects a unique device in the hardware inventory. Steps 520, 522, 524, 526, 528, and 530 are executed each time a new unique device is selected at step 518. At step 520, image manager 112 retrieves version details of drivers and firmware of the selected device in the list created at step 512. Then, at step 522, image manager 112 accesses HCL 180 to retrieve version details of supported driver and firmware of the selected device. The version details of the drivers and firmware retrieved at step 520 and the version details of the drivers and firmware retrieved at step 522 are then compared at step 524. If there is a match. i.e., the version details of the drivers and firmware retrieved at step 520 can be found in the version details of the drivers and firmware retrieved at step 522, the selected device is marked as compatible at step 526. On the other hand, if there is no match, i.e., the version details of the drivers and firmware retrieved at step 520 cannot be found in the version details of the drivers and firmware retrieved at step 522, the selected device is marked as incompatible at step 528.
If it is determined at step 530 that there is another unique device in the hardware inventory, the process returns to step 518, where image manager 112 selects the next unique device in the hardware inventory. If it is determined at step 530 that there is no other unique device in the hardware inventory, the process proceeds to step 532, at which image manager 112 saves the status for the selected host. If any of the devices were marked as incompatible at step 528, the selected host is marked as incompatible at step 532. If all of the devices were marked as compatible at step 528, the selected host is marked as compatible at step 532.
At step 532, if it is determined that HCL validation has not been carried out for all of hosts 131, the process returns to step 514, where image manager 112 selects the next host for HCL validation. If not, the process proceeds to step 536, at which image manager reads the status of all the hosts in the cluster and saves the status for the entire cluster. If any of the hosts of the cluster were marked as incompatible at step 532, the cluster is marked as incompatible at step 536. If all of the hosts of the cluster were marked as compatible at step 532, the cluster is marked as compatible at step 536. After step 536, the process ends.
After desired image 125 is validated, committed, and stored in shared storage 160 and after it passes HCL validation, desired image 125 can be applied to hosts 131. Referring back to
The scan subprocess is represented by steps S2 to S7. Coordinator 114 initiates the scan subprocess by making the request to image manager 112 at step S1. In response, image manager 112 at step S2 issues a scan API to image manager 152 of each host 131, and at step S3 issues a scan API to hardware support manager 170. The scan API includes a storage location of desired image 125.
In response to the scan API, image manager 152 at step S3, accesses desired image 125 and retrieves the current state of the virtualization software from image database 153, and compares the two to determine if each item of desired image 125 other than the firmware manifest (e.g., base image, add-on, solution, or user component) is “incompatible” (which means that desired image 125 cannot be applied, e.g., when the current state is running a higher version of an item), “compliant” (which means that the current state matches the desired state), non-compliant (which means that the current state can be upgraded to the desired state), or unknown (which means that a comparison of the current state could not be made with the item in desired image 125 because the item in desired image 125 is unknown or not recognizable). At step S4, image manager 152 of each host 131 sends back a compliance report indicating one of four aforementioned compliance states, and for each item that is non-compliant, also reports on the impact on the host to which desired image 125 will be applied. i.e., whether the host needs to enter into a maintenance mode or needs to be rebooted.
In response to the scan API, hardware support manager 170 at step S5, accesses desired image 125 to extract the firmware manifest in desired image 125, and for each host 131, determines whether or not the firmware specified by the firmware manifest is incompatible, compliant, non-compliant, or unknown with respect to the firmware currently installed in each host 131. At step S6, hardware support manager 170 prepares a firmware compliance report per host, and sends back the firmware compliance report per host to image manager 112. The firmware compliance report per host indicates “incompatible” if the host has installed therein firmware that is of a higher version that that specified by the firmware manifest, “compliant” if the host has installed therein the firmware specified by the firmware manifest, “non-compliant” if the host has installed therein firmware that is of a lower version than that specified by the firmware manifest, or “unknown” if the firmware manifest specifies firmware that is either unknown or not recognizable. If the compliance state is “non-compliant” for any host, the firmware compliance report for that host also indicates the impact on the host, i.e., whether the host needs to enter into a maintenance mode or needs to be rebooted. In cases where hardware support manager 170 supports downgrading of the firmware, the firmware compliance report will indicate “non-compliant” instead of “incompatible”) if the host has installed therein firmware that is of a higher version that that specified by the firmware manifest.
Upon receipt of the compliance reports, image manager 112 prepares a per-host compliance report based on the compliance report sent from the host at step S4 and a firmware compliance report for the cluster sent from hardware support manager 170 at step S6. Then, image manager 112 generates a cluster level compliance report based on all of the per-host compliance reports from hosts 131 and the firmware compliance report for the cluster sent from hardware support manager 170. At step S7, image manager 112 sends back both the per-host compliance report (which also indicates the impact on the host), and the cluster level compliance report to coordinator 114.
The pre-check subprocess is represented by steps S8 to S12. Coordinator 114 at step S8 issues a pre-check API to image manager 152 of each host 131 and to hardware support manager 170. In response to the pre-check API, image manager 152 of each host 131 at step S9 accesses desired image 125 and retrieves the current state of the virtualization software from image database 153, and compares the two to determine whether or not the virtualization software in the host can be upgraded to desired image 125 at that time, and performs several other checks on the host and at step S10 sends the results of the checks to coordinator 114. The other checks include whether or not the host can enter into maintenance mode at that time and a check on the operational health of the host. Similarly, in response to the pre-check API, hardware support manager 170 at step S11 performs a check on each host 131 to determine whether or not the firmware in the host can be upgraded to the firmware specified by the firmware manifest in desired image 125 at that time, and at step S12 sends the results of this check to coordinator 114. A pre-check might fail for firmware if higher versions of firmware are already installed, or if the combination of drivers in the image and the firmware specified by the firmware manifest would be incompatible (e.g. if the end user overrode a component in a way that is incompatible with the firmware specified by the firmware manifest). There may also be hardware-specific reasons the firmware specified by the firmware manifest cannot be applied (e.g., defects in system that need repair, lack of resources for the firmware in baseboard management controller 154, etc.)
Coordinator 114 determines whether or not to proceed with the application of desired image 125 to hosts 131 based on the results of the pre-check. For example, if the operational health of one of the hosts 131 is bad, coordinator 114 will not proceed with the application of desired image 125 to hosts 131. Upon determining to proceed with the application of desired image 125 to hosts 131, coordinator 114 executes the stage subprocess.
The stage subprocess is represented by steps S13 to S16. Coordinator 114 at step S13 issues a stage API to image manager 152 of each host 131, and at step S15 issues a stage API to hardware support manager 170. In response, image manager 152 at step S14 pulls in the payloads of desired image 125 from the storage location of desired image 125 and caches them in local memory or cache of the host, and at step S16 also pulls in payloads of the firmware specified by the firmware manifest in desired image 125 from firmware repository 171 and caches them in local memory or cache of the host.
After staging the payloads, coordinator 114 at step S17 instructs each host 131 to enter into maintenance mode if the cluster compliance report indicates that the maintenance mode is required to bring hosts 131 into compliance. In response to such an instruction (if issued), hosts 131 enter into maintenance mode.
The apply subprocess follows step S17. This subprocess is represented by S18. At step S16, coordinator 114 issues an apply API to each host 131. This API causes image manager 152 of each host 131 to update the current state of the virtualization software with the payloads of desired image 125 staged at step S14 and the payloads of the firmware staged at step S16. Also, at step S18, image manager 152 updates metadata of the virtualization software that is stored in image database 153 to reflect that the virtualization software in the host and the associated firmware have been updated to be compliant with desired image 125.
At step S19, coordinator 114 instructs each host 131 to reboot if the cluster compliance report indicates that hosts 131 are required to be rebooted to bring the virtualization software in the host and the associated firmware into compliance. In response to such an instruction (if issued), hosts 131 undergo a reboot.
In the embodiments, the end user carries out the process of
The embodiments described herein may employ various computer-implemented operations involving data stored in computer systems. For example, these operations may require physical manipulation of physical quantities. Usually, though not necessarily, these quantities may take the form of electrical or magnetic signals, where the quantities or representations of the quantities can be stored, transferred, combined, compared, or otherwise manipulated. Such manipulations are often referred to in terms such as producing, identifying, determining, or comparing. Any operations described herein that form part of one or more embodiments may be useful machine operations.
One or more embodiments of the invention also relate to a device or an apparatus for performing these operations. The apparatus may be specially constructed for required purposes, or the apparatus may be a general-purpose computer selectively activated or configured by a computer program stored in the computer. Various general-purpose machines may be used with computer programs written in accordance with the teachings herein, or it may be more convenient to construct a more specialized apparatus to perform the required operations.
The embodiments described herein may be practiced with other computer system configurations including hand-held devices, microprocessor systems, microprocessor-based or programmable consumer electronics, minicomputers, mainframe computers, etc.
One or more embodiments of the present invention may be implemented as one or more computer programs or as one or more computer program modules embodied in computer readable media. The term computer readable medium refers to any data storage device that can store data which can thereafter be input to a computer system. Computer readable media may be based on any existing or subsequently developed technology that embodies computer programs in a manner that enables a computer to read the programs. Examples of computer readable media are hard drives, NAS systems, read-only memory (ROM), RAM, compact disks (CDs), digital versatile disks (DVDs), magnetic tapes, and other optical and non-optical data storage devices. A computer readable medium can also be distributed over a network-coupled computer system so that the computer readable code is stored and executed in a distributed fashion.
Although one or more embodiments of the present invention have been described in some detail for clarity of understanding, certain changes may be made within the scope of the claims. Accordingly, the described embodiments are to be considered as illustrative and not restrictive, and the scope of the claims is not to be limited to details given herein but may be modified within the scope and equivalents of the claims. In the claims, elements and/or steps do not imply any particular order of operation unless explicitly stated in the claims.
Virtualization systems in accordance with the various embodiments may be implemented as hosted embodiments, non-hosted embodiments, or as embodiments that blur distinctions between the two. Furthermore, various virtualization operations may be wholly or partially implemented in hardware. For example, a hardware implementation may employ a look-up table for modification of storage access requests to secure non-disk data.
Many variations, additions, and improvements are possible, regardless of the degree of virtualization. The virtualization software can therefore include components of a host, console, or guest OS that perform virtualization functions.
Plural instances may be provided for components, operations, or structures described herein as a single instance. Boundaries between components, operations, and data stores are somewhat arbitrary, and particular operations are illustrated in the context of specific illustrative configurations. Other allocations of functionality are envisioned and may fall within the scope of the invention. In general, structures and functionalities presented as separate components in exemplary configurations may be implemented as a combined structure or component. Similarly, structures and functionalities presented as a single component may be implemented as separate components. These and other variations, additions, and improvements may fall within the scope of the appended claims.
| Number | Date | Country | Kind |
|---|---|---|---|
| 202041014682 | Apr 2020 | IN | national |
This application is a continuation of U.S. patent application Ser. No. 16/937,988, filed Jul. 24, 2020, which claims benefit under 35 U.S.C. 119(a)-(d) to Foreign Application Serial No. 202041014682 filed in India entitled “VALIDATION AND PRE-CHECK OF COMBINED SOFTWARE/FIRMWARE UPDATES”, on Apr. 2, 2020, by VMware, Inc., which are incorporated herein in their entirety by reference for all purposes.
| Number | Date | Country | |
|---|---|---|---|
| Parent | 16937988 | Jul 2020 | US |
| Child | 18335917 | US |
