Deployment and management of virtual containers
View Patent ↗A system virtualizes applications on a managed endpoint using containers. A managed endpoint receives a virtualized container from an IT automation appliance. The virtualized container includes an application and a virtualization module. The virtualization module includes computer program instructions for virtualizing the application. An operating system API call made by the application during execution is intercepted, and a portion of the computer program instructions are executed based on the operating system API call. The computer program instructions modify the behavior of the application to effect the file and data virtualization of the application. A virtualized container can be deployed and updated from an IT automation appliance along with an agent to support the deployment and updating of the virtualized container.
1. A computer-implemented method for virtualizing applications on a computer using containers, the method comprising:
receiving a virtualized container at a managed endpoint from a remote computer, the virtualized container comprising an application and a virtualization module, the virtualization module comprising computer program instructions for virtualizing the application;
storing the virtualized container at the managed endpoint;
determining that a new application has started executing on the computer;
determining that the new application is part of a virtualized container;
intercepting by the virtualization module an operating system application program interface (API) call made by the application during execution of the application;
responsive to determining that the new application is part of the virtualized container, hooking the computer program instructions for virtualizing the application into appropriate operating system API calls; and
executing a portion of the computer program instructions of the virtualization module based on the operating system API call, wherein the portion of the computer program instructions modify a behavior of the application to effect a virtualization of the application.
2. The computer-implemented method of claim 1 , further comprising:
determining that the application has started executing; and
responsive to determining that the application has started executing, performing an initialization function comprising setting up an environment for a user of the application included in the virtualized container.
3. The computer-implemented method of claim 1 , wherein the executed portion of the computer program instructions prevents the application from accessing malware.
4. The computer-implemented method of claim 1 , further comprising:
re-flashing the virtualized container to return the virtualized container to its initial state.
5. A computer-implemented method for providing virtualized applications to managed endpoints in a computing environment, the method comprising:
deploying an agent from a remote computer to a managed endpoint, the agent adapted to execute on the managed endpoint to support the deployment of virtualized containers to the endpoint;
deploying a virtualized container containing an application from the remote computer to the managed endpoint responsive to the agent, wherein the virtualized container includes computer program instructions that, when executed at the managed endpoint, virtualize the application, the virtualizing comprising:
intercepting an operating system application program interface (API) call made by the application during execution of the application; and
modifying a behavior of the application to effect a virtualization of the application; and
updating the deployed virtualized container at the managed endpoint, the updating comprising providing updated computer program instructions for virtualizing the application to managed endpoint, wherein the updated computer program instructions implement an updated administrative policy of the application.
6. A system for virtualizing applications on a computer using containers, the system comprising:
a non-transitory computer-readable medium storing executable computer program modules comprising:
a module for receiving a virtualized container at a managed endpoint from a remote computer and storing the virtualized container at the managed endpoint, the virtualized container comprising an application and a virtualization module, the virtualization module comprising computer program instructions for virtualizing the application;
a module for determining that a new application has started executing on the computer;
a module for determining that the new application is part of a virtualized container;
a module for intercepting an operating system application program interface (API) call made by the application during execution of the application;
a module for, responsive to determining that the new application is part of the virtualized container, hooking the computer program instructions for virtualizing the application into appropriate operating system API calls; and
a module for executing a portion of the computer program instructions of the virtualization module based on the operating system API call, wherein the computer program instructions modify a behavior of the application to effect a virtualization of the application.
7. The system of claim 6 , further comprising:
a module for determining that the application has started executing; and
a module for, responsive to determining that the application has started executing, performing an initialization function comprising setting up an environment for a user of the application included in the virtualized container.
8. The system of claim 6 , wherein the executed portion of the computer program instructions prevents the application from accessing malware.
9. The system of claim 6 , further comprising:
a module for re-flashing the virtualized container to return the virtualized container to its initial state.
10. A system for providing virtualized applications to managed endpoints in a computing environment, the system comprising:
a processor;
a non-transitory computer readable medium communicatively coupled to the processor; and
computer-executable instructions encoded in the computer readable medium, the instructions, when executed by the processor, operable to perform operations comprising:
deploying an agent to a managed endpoint, the agent adapted to execute on the managed endpoint to support the deployment of virtualized containers to the endpoint;
deploying a virtualized container containing an application to the managed endpoint responsive to the agent, wherein the virtualized container includes computer program instructions that, when executed at the managed endpoint, virtualize the application, the virtualizing comprising:
intercepting an operating system application program interface (API) call made by the application during execution of the application; and
modifying a behavior of the application to effect a virtualization of the application; and
updating the deployed virtualized container at the managed endpoint, the updating comprising providing updated computer program instructions for virtualizing the application to managed endpoint, wherein the updated computer program instructions implement an updated administrative policy of the application.
11. A computer program product having a non-transitory computer-readable medium having executable computer program instructions recorded thereon for virtualizing applications on a computer using containers, comprising:
a module for receiving a virtualized container at a managed endpoint from a remote computer and storing the virtualized container at the managed endpoint, the virtualized container comprising an application and a virtualization module, the virtualization module comprising computer program instructions for virtualizing the application;
a module for determining that a new application has started executing on the computer;
a module for determining that the new application is part of a virtualized container;
a module for intercepting an operating system application program interface (API) call made by the application during execution of the application;
a module for, responsive to determining that the new application is part of the virtualized container, hooking the computer program instructions for virtualizing the application into appropriate operating system API calls; and
a module for executing a portion of the computer program instructions of the virtualization module based on the operating system API call, wherein the computer program instructions modify a behavior of the application to effect a virtualization of the application.
12. The computer program product of claim 11 , further comprising:
a module for determining that the application has started executing; and
a module for, responsive to determining that the application has started executing, performing an initialization function comprising setting up an environment for a user of the application included in the virtualized container.
13. The computer program product of claim 11 , wherein the executed portion of the computer program instructions prevents the application from accessing malware.
14. The computer program product of claim 11 , further comprising:
a module for re-flashing the virtualized container to return the virtualized container to its initial state.