Systems and methods for dynamic creation of container manifests
In one embodiment, a method is performed by a computer system. The method includes determining a base state of a particular container, wherein the base state is represented by a base image. The method further includes determining a target state of the particular container, wherein the target state is represented by a deployment of the particular container. In addition, the method includes determining a set of commands to transition from the base state to the target state. Further, the method includes generating a manifest for the target state of the particular container, the manifest comprising the determined set of commands to reach the target state.
1. A method comprising, by a computer system:
determining a base state of a particular container, wherein the base state is represented by a base image, and wherein the particular container is configured to execute on an isolated user-space instance in a shared kernel space on an operating system of a resource;
determining a target state of the particular container, wherein the target state is represented by a deployment of the particular container on a particular resource that has a container-management agent installed thereon, wherein the target state at least partially results from commands, previously issued to the container-management agent, to control operation of the particular container;
determining a set of commands to transition the particular container from the base state to the target state;
wherein the determining the set of commands comprises:
examining an audit trail of a management application for the particular container; and
retrieving previously-executed user commands from the audit trail, the determined set of commands comprising at least some of the previously-executed user commands;
generating a build manifest for the target state of the particular container, the build manifest comprising a listing of files in the particular container, a digital signature of a source of at least some of the files, hashes of at least some of the files, and commands to create the particular container, the commands to create the particular container comprising the determined set of commands to transition the particular container from the base state to the target state; and
automatically deploying the particular container in the target state using the base image and the generated build manifest for the target state.
2. The method of claim 1 , wherein the determining the set of commands comprises:
examining audit trails of a plurality of management applications for the particular container; and
retrieving the previously-executed user commands from the audit trails.
3. The method of claim 2 , comprising, prior to the examining, identifying the plurality of management applications from an overall set of management applications.
4. The method of claim 1 , wherein the determining the set of commands comprises:
examining a file system of the deployment of the particular container; and
based, at least in part, on the examining, discovering a plurality of deltas against the base state; and
generating delta commands that produce the plurality of deltas, wherein the set of commands comprise the delta commands.
5. An information handling system comprising a processor and memory, wherein the processor and memory in combination are operable to implement a method comprising:
determining a base state of a particular container, wherein the base state is represented by a base image, and wherein the particular container is configured to execute on an isolated user-space instance in a shared kernel space on an operating system of a resource;
determining a target state of the particular container, wherein the target state is represented by a deployment of the particular container on a particular resource that has a container-management agent installed thereon, wherein the target state at least partially results from commands, previously issued to the container-management agent, to control operation of the particular container;
determining a set of commands to transition the particular container from the base state to the target state;
wherein the determining the set of commands comprises:
examining an audit trail of a management application for the particular container; and
retrieving previously-executed user commands from the audit trail, the determined set of commands comprising at least some of the previously-executed user commands;
generating a build manifest for the target state of the particular container, the build manifest comprising a listing of files in the particular container, a digital signature of a source of at least some of the files, hashes of at least some of the files, and commands to create the particular container, the commands to create the particular container comprising the determined set of commands to transition the particular container from the base state to the target state; and
automatically deploying the particular container in the target state using the base image and the generated build manifest for the target state.
6. The information handling system of claim 5 , wherein the determining the set of commands comprises:
examining audit trails of a plurality of management applications for the particular container; and
retrieving the previously-executed user commands from the audit trails.
7. The information handling system of claim 6 , the method comprising, prior to the examining, identifying the plurality of management applications from an overall set of management applications.
8. The information handling system of claim 5 , wherein the determining the set of commands comprises:
examining a file system of the deployment of the particular container; and
based, at least in part, on the examining, discovering a plurality of deltas against the base state; and
generating delta commands that produce the plurality of deltas, wherein the set of commands comprise the delta commands.
9. A computer-program product comprising a non-transitory computer-usable medium having computer-readable program code embodied therein, the computer-readable program code adapted to be executed to implement a method comprising:
determining a base state of a particular container, wherein the base state is represented by a base image, and wherein the particular container is configured to execute on an isolated user-space instance in a shared kernel space on an operating system of a resource;
determining a target state of the particular container, wherein the target state is represented by a deployment of the particular container on a particular resource that has a container-management agent installed thereon, wherein the target state at least partially results from commands, previously issued to the container-management agent, to control operation of the particular container;
determining a set of commands to transition the particular container from the base state to the target state;
wherein the determining the set of commands comprises:
examining an audit trail of a management application for the particular container; and
retrieving previously-executed user commands from the audit trail, the determined set of commands comprising at least some of the previously-executed user commands;
generating a build manifest for the target state of the particular container, the build manifest comprising a listing of files in the particular container, a digital signature of a source of at least some of the files, hashes of at least some of the files, and commands to create the particular container, the commands to create the particular container comprising the determined set of commands to transition the particular container from the base state to the target state; and
automatically deploying the particular container in the target state using the base image and the generated build manifest for the target state.
10. The computer-program product of claim 9 , wherein the determining the set of commands comprises:
examining audit trails of a plurality of management applications for the particular container; and
retrieving the previously-executed user commands from the audit trails.
11. The computer-program product of claim 9 , wherein the determining the set of commands comprises:
examining a file system of the deployment of the particular container; and
based, at least in part, on the examining, discovering a plurality of deltas against the base state; and
generating delta commands that produce the plurality of deltas, wherein the set of commands comprise the delta commands.