Signed SWI Extension Extraction for Low-RAM Dynamic Installation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for installing OS extensions on network devices require manual handling, including downloading, installing, and configuring, which is tedious and error-prone, and result in significant memory usage impacting device functionality.
Innovation Solution
A dynamic installation method using a full SWI that includes a designated directory for ENOS extensions, allowing on-the-fly extraction and mounting of extensions in an overlay filesystem, minimizing RAM usage and eliminating separate download steps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional manual installation method is used, then extensions can be installed on the device, but the process is tedious and error-prone requiring multiple steps including downloading, installing, and configuring
Solution Approach 1:
The patent pre-packages extensions in a standardized format (SWIX) that can be automatically extracted and installed. The extension information is预先 stored in a database, allowing the system to automatically retrieve and install extensions without requiring manual downloading or configuration steps from the administrator.
Solution Approach 2:
The system performs automatic extraction, verification, and installation of extensions without requiring manual intervention. The administrator simply specifies which extensions to install, and the system automatically handles the entire installation process, including downloading from the database, extracting files, and configuring the extensions.
2Adaptability or versatility
If extensions are installed manually with separate download steps, then extensions can be installed, but significant memory usage impacts device functionality
Solution Approach 1:
The patent embeds extension information and files within a compressed archive format (SWIX) that can be efficiently stored and extracted. The extension database stores metadata about available extensions, allowing the system to selectively extract only the necessary extension files without loading entire extension packages into memory at once.
Solution Approach 2:
The system extracts only the necessary extension components from the compressed SWIX format and installs them individually. This allows the system to minimize memory usage by processing extensions in smaller units rather than loading complete extension packages, and enables selective installation of only the required extensions.
3Adaptability or versatility
If extensions are installed in the traditional manner, then functionality can be extended, but the process is complex requiring multiple separate operations
Solution Approach 1:
The patent combines multiple installation operations into a single unified process. The system merges downloading, extracting, verifying, and installing extensions into one automated workflow. The administrator specifies extensions to install, and the system automatically performs all necessary operations in sequence, eliminating the need for multiple separate manual steps.
Data Source
AI summary
For dynamic installation of extensible network operating system (ENOS) extensions, a network device downloads a full software image (SWI) having a signature and a directory containing software packages from an install source. During downloading, the network device modifies the full SWI on the fly, including reading and removing the software packages (SWIX files) from the directory, as each one is read, determining whether to keep it, for each “keep” SWIX file, extracting an ENOS extension and a corresponding signature, and storing them on a nonvolatile memory, resulting in a modified SWI with a signature but without the SWIX files. After download is complete, the signed ENOS extensions stored on the nonvolatile memory are verified to determine valid ENOS extensions for inclusion in an overlay filesystem which becomes a root filesystem for the network device. The signed modified SWI is also verified before booting the network device into the modified SWI.