Systems and methods for disaggregated updates to secondary operating system using network-retrieved secure file system layout
A basic input/output system may be configured to, during a boot of the information handling system and responsive to a condition for launching the secondary operating system: initialize a network driver for communicating with a network via a network interface, download from a secure, verified network location within the network a security manifest file for a most recent version of the secondary operating system, the security manifest file comprising metadata regarding a file system layout for the most recent version of the secondary operating system, based on the file system layout of the security manifest file and an actual file system layout of the secondary operating system as stored within an information handling system, determine one or more portions of the secondary operating system requiring update, and download the one or more portions of the secondary operating system and apply the one or more portions to the secondary operating system as stored within the information handling system.
1. An information handling system comprising:
a processor;
non-transitory computer readable media communicatively coupled to the processor and having stored thereon a primary operating system of the information handling system and a secondary operating system of the information handling system;
a network interface communicatively coupled to the processor and configured to couple the information handling system to a network; and
a basic input/output system communicatively coupled to the processor and configured to, during a boot of the information handling system and responsive to a condition for launching the secondary operating system:
initialize a network driver for communicating with the network via the network interface;
download from a secure, verified network location within the network a security manifest file for a most recent version of the secondary operating system, the security manifest file comprising metadata regarding a file system layout for the most recent version of the secondary operating system;
based on the file system layout of the security manifest file and an actual file system layout of the secondary operating system as stored within the information handling system, determine one or more portions of the secondary operating system requiring update; and
download the one or more portions of the secondary operating system and apply the one or more portions to the secondary operating system as stored within the information handling system.
2. The information handling system of claim 1 , wherein the basic input/output system is further configured to cause the information handling system to boot to the secondary operating system as updated.
3. The information handling system of claim 1 , wherein the basic input/output system is configured to determine the one or more portions of the secondary operating system requiring update by:
comparing the file system layout of the security manifest file and the actual file system layout of the secondary operating system as stored within the information handling system; and
identifying the differences between the file system layout of the security manifest file and the actual file system layout of the secondary operating system as stored within the information handling system.
4. The information handling system of claim 1 , wherein the basic input/output system is further configured to cause the information handling system to boot to the secondary operating system without any update to the secondary operating system if the file system layout of the security manifest file matches the actual file system layout of the secondary operating system as stored within the information handling system.
5. A method, in an information handling system comprising a non-transitory computer readable media communicatively coupled to the processor and having stored thereon a primary operating system of the information handling system and a secondary operating system of the information handling system and a network interface communicatively coupled to the processor and configured to couple the information handling system to a network, the method comprising, during a boot of the information handling system and responsive to a condition for launching the secondary operating system:
initializing, with a basic input/output system of the information handling system, a network driver for communicating with the network via the network interface;
downloading, with the basic input/output system, from a secure, verified network location within the network a security manifest file for a most recent version of the secondary operating system, the security manifest file comprising metadata regarding a file system layout for the most recent version of the secondary operating system;
based on the file system layout of the security manifest file and an actual file system layout of the secondary operating system as stored within the information handling system, determining, with the basic input/output system, one or more portions of the secondary operating system requiring update; and
downloading, with the basic input/output system, the one or more portions of the secondary operating system and apply the one or more portions to the secondary operating system as stored within the information handling system.
6. The method of claim 5 , further comprising causing, with the basic input/output system, the information handling system to boot to the secondary operating system as updated.
7. The method of claim 5 , wherein determining the one or more portions of the secondary operating system requiring update comprises:
comparing the file system layout of the security manifest file and the actual file system layout of the secondary operating system as stored within the information handling system; and
identifying the differences between the file system layout of the security manifest file and the actual file system layout of the secondary operating system as stored within the information handling system.
8. The method of claim 5 , further comprising causing, with the basic input/output system, the information handling system to boot to the secondary operating system without any update to the secondary operating system if the file system layout of the security manifest file matches the actual file system layout of the secondary operating system as stored within the information handling system.
9. An article of manufacture comprising:
a non-transitory computer readable medium; and
computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to, in an information handling system comprising a non-transitory computer readable media communicatively coupled to the processor and having stored thereon a primary operating system of the information handling system and a secondary operating system of the information handling system and a network interface communicatively coupled to the processor and configured to couple the information handling system to a network, during a boot of the information handling system and responsive to a condition for launching the secondary operating system:
initialize, with a basic input/output system of the information handling system, a network driver for communicating with the network via the network interface;
download, with the basic input/output system, from a secure, verified network location within the network a security manifest file for a most recent version of the secondary operating system, the security manifest file comprising metadata regarding a file system layout for the most recent version of the secondary operating system;
based on the file system layout of the security manifest file and an actual file system layout of the secondary operating system as stored within the information handling system, determine, with the basic input/output system, one or more portions of the secondary operating system requiring update; and
download, with the basic input/output system, the one or more portions of the secondary operating system and apply the one or more portions to the secondary operating system as stored within the information handling system.
10. The article of claim 9 , the instructions for further causing the processor to, with the basic input/output system, cause the information handling system to boot to the secondary operating system as updated.
11. The article of claim 9 , wherein determining the one or more portions of the secondary operating system requiring update comprises:
comparing the file system layout of the security manifest file and the actual file system layout of the secondary operating system as stored within the information handling system; and
identifying the differences between the file system layout of the security manifest file and the actual file system layout of the secondary operating system as stored within the information handling system.
12. The article of claim 9 , the instructions for further causing the processor to, with the basic input/output system, cause the information handling system to boot to the secondary operating system without any update to the secondary operating system if the file system layout of the security manifest file matches the actual file system layout of the secondary operating system as stored within the information handling system.