Systems and methods for orchestrated resource consolidation for modern workspaces
Systems and methods are provided for consolidation of IHS (Information Handling System) resources utilized by workspaces operating on the IHS, where the workspaces operate in isolation from the operating system of the IHS. A remote workspace orchestration service manages deployment of workspaces on the IHS. The workspaces are instantiated and operate according to a workspace definition provided by the workspace orchestration service. An embedded controller of the IHS registers a resource consolidation function of the IHS with the workspace orchestration service, which notifies the workspaces of the resource consolidation function. Based on the workspace definitions, redundant IHS resources utilized by the workspaces are identified. The resource consolidation function is notified of the redundant IHS resources. In each of the workspaces, calls to the redundant IHS resources are redirected to the resource consolidation function, which forwards the calls to their destination and returns replies to the workspaces.
1. A method for supporting a plurality of workspaces operating on an Information Handling System (IHS), the method comprising:
registering a resource consolidation function of the IHS with a workspace orchestration service that is remote from the IHS and manages deployment of the plurality of workspaces on the IHS;
instantiating the plurality of workspaces, where each of the plurality of workspaces is instantiated according to a respective workspace definition provided by the workspace orchestration service;
identifying, based on the workspace definitions of the plurality of workspaces, a type of each of the respective workspaces, wherein workspace types comprise hardware-isolated workspaces and software-isolated workspaces;
identifying, based on the workspace definitions of the plurality of workspaces, identical resources utilized by two or more of the plurality of workspaces;
for the hardware-isolated workspaces that are identified as utilizing identical resources, identifying identical hardware access files that provide these hardware-isolated workspaces with access to a hardware component of the IHS; and
updating the workspace definitions of the hardware-isolated workspaces that are identified as utilizing identical resources to utilize a handle to redirect references to the identical hardware access files by each of the hardware-isolated workspaces that are identified as utilizing identical resources to a consolidated hardware access file maintained by the resource consolidation function of the IHS.
2. The method of claim 1 , wherein the identical hardware access files that provide access to the hardware component of the IHS-comprise hardware drivers.
3. The method of claim 1 , further comprising: removing the identical hardware access files from each of the hardware-isolated workspaces.
4. The method of claim 1 , wherein the handle further comprises a token specifying a duration of a validity of the handle for redirecting references to the consolidated hardware access file maintained by the resource consolidation function of the IHS.
5. The method of claim 4 , wherein the handle further comprises one or more conditions for evaluating the validity of the token.
6. The method of claim 5 , wherein the conditions comprise invalidation of the token when a workspace attempts to edit the consolidated hardware access file maintained by the resource consolidation function of the IHS.
7. The method of claim 5 , wherein the conditions comprise invalidation of the token when a workspace edits more than a predefined portion of the consolidated hardware access file maintained by the resource consolidation function of the IHS.
8. The method of claim 1 , wherein the handle further comprises an IPC (Inter-Process Communication) resource of the IHS for communications between a workspace and the consolidated hardware access file maintained by the resource consolidation function of the IHS.
9. An Information Handling System (IHS) supporting a plurality of workspaces operating on the IHS, the IHS comprising:
an embedded controller comprising a logic unit and a memory storing program instructions that, upon execution by the logic unit, cause the embedded controller to:
register a resource consolidation function of the IHS with a workspace orchestration service that is remote from the IHS and manages deployment of the plurality of workspaces on the IHS;
one or more processors; and
a memory coupled to the processors, the memory storing program instructions that, upon execution by the processors, cause the IHS to:
instantiate the plurality of workspace, where each of the plurality of workspaces is instantiated according to a respective workspace definition provided by the workspace orchestration service;
identify, based on the workspace definitions of the plurality of workspaces, a type of each of the respective workspaces, wherein workspace types comprise hardware-isolated workspaces and software-isolated workspaces;
identify, based on the workspace definitions of the plurality of workspaces, identical resources utilized by two or more of the plurality of workspaces;
for the hardware-isolated workspaces that are identified as utilizing identical resources, identify identical hardware access files that provide these hardware-isolated workspaces with access to a hardware component of the IHS; and
update the workspace definitions of the hardware-isolated workspaces that are identified as utilizing identical resources to utilize a handle to redirect references to the identical hardware access files by each of the hardware-isolated workspaces that are identified as utilizing identical resources to a consolidated hardware access file maintained by the resource consolidation function of the IHS.
10. The IHS of claim 9 , wherein the identical hardware access files that provide access to the hardware component of the IHS comprise hardware drivers.
11. The IHS of claim 9 , wherein the handle further comprises a token specifying a duration of a validity of the handle for redirecting references the consolidated hardware access file maintained by the resource consolidation function of the IHS.
12. The IHS of claim 11 , wherein the handle further comprises one or more conditions for evaluating the validity of the token.
13. The IHS of claim 12 , wherein the conditions comprise invalidation of the token when a workspace attempts to edit the consolidated hardware access file maintained by the resource consolidation function of the IHS.
14. The IHS of claim 12 , wherein the conditions comprise invalidation of the token when a workspace edits more than a predefined portion of the consolidated hardware access file maintained by the resource consolidation function of the IHS.
15. The IHS of claim 9 , wherein the handle further comprises an IPC (Inter-Process Communication) resource of the IHS for communications between a workspace and the consolidated hardware access file maintained by the resource consolidation function of the IHS.
16. A system supporting a plurality of workspaces operating on an Information Handling System (IHS), the system comprising:
a workspace orchestration service that is remote from the IHS and that manages deployment of workspaces on the IHS; and
the IHS comprising:
an embedded controller comprising a logic unit and a memory storing program instructions that, upon execution by the logic unit, cause the embedded controller to:
register a resource consolidation function of the IHS with the workspace orchestration service;
a processor; and
a memory coupled to the processor, the memory storing program instructions that, upon execution by the processor, cause the IHS to:
instantiate the plurality of workspaces, where each of the plurality of workspaces is instantiated according to a respective workspace definition provided by the workspace orchestration service;
identify, based on the workspace definitions of the plurality of workspaces, a type of each of the respective workspaces, wherein workspace types comprise hardware-isolated workspaces and software-isolated workspaces;
identify, based on the workspace definitions of the plurality of workspaces, identical resources utilized by two or more of the plurality of workspaces;
for the hardware-isolated workspaces that are identified as utilizing identical resources, identify identical hardware access files that provide these hardware-isolated workspaces with access to a hardware component of the IHS; and
update the workspace definitions of the hardware-isolated workspaces that are identified as utilizing identical resources to utilize a handle to redirect references to the identical hardware access files by each of the hardware-isolated workspaces that are identified as utilizing identical resources to a consolidated hardware access file maintained by the resource consolidation function of the IHS.
17. The system of claim 16 , wherein the identical hardware access files that provide access to the hardware component of the IHS comprise hardware drivers.
18. The system of claim 16 , wherein the handle further comprises a token specifying a duration of a validity of the handle for redirecting references to consolidated hardware access file maintained by the resource consolidation function of the IHS.
19. The system of claim 18 , wherein the handle further comprises one or more conditions for evaluating the validity of the token.
20. The system of claim 19 , wherein the conditions comprise invalidation of the token when a workspace attempts to edit the consolidated hardware access file maintained by the resource consolidation function of the IHS.