Operating system management

1. A computing device comprising:

a processor;

a memory coupled to the processor; and

a non-transitory computer readable storage medium coupled to the processor and comprising instructions, that when executed by the processor, cause the processor to:

change an operating parameter of the computing device based on a domain change, wherein the domain change represents:

a physical change in location of the computing device from a first geographic location having a first network to a second geographic location having a second network; and

a change in a network security level from the first network to the second network;

select, based on the changed operating parameter, a first operating system to be instantiated from a library of operating systems;

instantiate a copy-on-write virtual computing system executing the first operating system based on the domain change;

delete a second operating system from the non-transitory computer readable storage medium or the memory in parallel with the instantiation of the copy-on-write virtual computing system executing the first operating system;

copy the first operating system to the non-transitory computer readable storage medium; and

instantiate the first operating system on the computing device.

2. The computing device of claim 1 wherein the instructions that cause the processor to copy the first operating system further cause the processor to receive an image of the first operating system from a remote computing system.

3. The computing device of claim 1 wherein the instructions further cause the processor to write data corresponding to copy-on-write operations performed by the copy-on-write virtual computing system to the non-transitory computer readable storage medium using the first operating system.

4. The computing device of claim 1 wherein the first operating system comprises a first set of operating parameters associated with use of the computing device in a trusted operating environment and the second operating system comprises a set of operating parameter associated with use of the computing device in an untrusted operating environment.

5. The computing device of claim 1 wherein the instructions that cause the processor to delete the second operating system first cause the processor to save a backup image of the second operating system to a backup storage medium different from the non-transitory computer storage medium and the memory.

6. The computing device of claim 5 wherein the instructions further cause the processor to:

receive a command to restore the second operating system from a remote computing system; and

in response to the command to restore the second operating system the instructions further cause the processor to:

send to the remote computing system:

security audit logs regarding operation of the first operating system;

send an image of the first operating system as of the time the command to restore the second operating system is received; and

send user data generated during the operation of the first operating system for quarantine;

instantiate a restore copy-on-write virtual computing system executing the second operating system from the backup storage medium;

delete the first operating system from the computing device; and

instantiate the second operating system on the computing device.

7. The computing device of claim 6 , wherein the instructions further cause the processor to write copy-on-write operations performed by the restore copy-on-write virtual computing system to the non-transitory computer readable storage medium.

8. The computing device of claim 1 wherein the instructions that cause the processor to instantiate the copy-on-write virtual computing system further cause the processor to receive a trigger command from a remote computing system to trigger the instantiation of the copy-on-write virtual computing system.

9. The computing device of claim 8 wherein the trigger command from the remote computing system comprises an indication of a change to a domain associated with the first operating system.

10. The computing device of claim 8 wherein the instructions that cause the processor to copy the first operating system further cause the processor to copy the first operating system from a hidden partition to an active partition of the non-transitory computer readable storage medium.

11. A method managing operating systems comprising:

generating, using a processor of a mobile computing device, a backup image of a first operating system associated with a first operating environment in which the mobile computing device was previously used;

changing, using the processor, an operating para meter of the mobile computing device based on a domain change, wherein the domain change represents:

a physical change in location of the mobile computing device from a first geographic location having a first network to a second geographic location having a second network; and

a change in a network security level from the first network to the second network;

selecting, using the processor based on the changed operating parameter, a second operating system to be instantiated from a library of operating systems;

instantiating, using the processor and based the domain change, a copy-on-write virtual computing system executing the second operating system associated with a second operating environment in which the mobile computing device is to be used;

deleting, using the processor, the first operating system from a memory associated with the processor in parallel with the instantiation of the copy-on-write virtual computing system executing the second operating system;

copying, using the processor, an image of the second operating system to the memory associated with the processor; and

instantiating, using the processor, the second operating system from the image of the second operating system.

12. The method of claim 11 , further comprising writing, using the processor, data corresponding to copy-on-write operations performed by the copy-on-write virtual computing system to the memory.

13. The method of claim 11 , further comprising:

in response to a command to restore the first operating system:

generating audit logs composing information about operation of the second operating;

generating an image of the second operating system as of the time the command to restore the first operating system is received;

generating a backup of user data generated during the operation of the second operating system for quarantine;

instantiating a restore copy-on-write virtual computing system executing the first operating system from the backup image;

deleting, using the processor, the second operating system from the computing device in parallel with the instantiation of the restore copy-on-write virtual computing system executing the first operating system; and

instantiating the first operating system on the computing device.

14. A non-transitory computer readable storage medium comprising instructions stored in a first partition, that when executed by a processor, cause the processor to instantiate a hypervisor to:

initiate a backup process to generate a backup image of a first operating system currently running on a computing device associated with the processor;

change an operating parameter of the computing device based on a domain change, wherein the domain change represents:

a physical change in location of the computing device from a first geographic location having a first network to a second geographic location having a second network; and

a change in a network security level from the first network to the second network;

select, based on the changed operating parameter, a second operating system to be instantiated from a library of operating systems;

instantiate a copy-on-write virtual computing system executing the second operating system based on the domain change;

delete the first operating system from a second partition of the non-transitory computer readable storage medium in parallel with the instantiation of the copy-on-write virtual computing system executing the second operating system;

copy the second operating system to the second partition of the non-transitory computer readable storage medium; and

instantiate the second operating system on the computing device from the second partition of the non-transitory computer readable storage medium.

15. The non-transitory computer readable storage medium of claim 14 , wherein the first and second partitions are isolated from each other.