Abstract: A copy-on-write union filesystem. A computer system identifies a first filesystem namespace as a mutable layer, and a second filesystem namespace as an immutable layer. The computer system exposes a merged filesystem namespace as a union filesystem that merges the mutable layer and the immutable layer, and that overlays the first filesystem namespace over the second filesystem namespace. The computer system identifies an operation on the merged filesystem namespace that requests to read from a file within the merged filesystem namespace, the file being stored in the second filesystem namespace and not being stored in the first filesystem namespace. The computer system returns a handle referencing a proxy object stored in a system memory. The proxy object includes a mapping to a file object corresponding to the file as stored in the second filesystem namespace.

Abstract: Examples described herein generally relate to a computer device including a memory, and at least one processor configured to partition application files for multiple users of the computer device. The computer device creates a per-user location for a first user when installing an application package to an installation location. The application package includes a plurality of files for an application that are read-only for the first user. The computer device projects, via one or more filter drivers, installed package files from the installation location into the per-user location. The computer device receives a modification to the plurality of files for the application projected into the per-user location. The computer device writes at least one modified file into the per-user location. The computer device loads, during execution of the application by the first user, the at least one modified file from the per-user location for the first user.

Abstract: Examples described herein generally relate to a computer device including a memory, and at least one processor configured to partition application files for multiple users of the computer device. The computer device creates a per-user location for a first user when installing an application package to an installation location. The application package includes a plurality of files for an application that are read-only for the first user. The computer device projects, via one or more filter drivers, installed package files from the installation location into the per-user location. The computer device receives a modification to the plurality of files for the application projected into the per-user location. The computer device writes at least one modified file into the per-user location. The computer device loads, during execution of the application by the first user, the at least one modified file from the per-user location for the first user.

Abstract: Using metadata for a contentless file to provide a guest context access to file content. Within a guest context, a file system is mounted from a container image which lacks a first file's content and which includes metadata defining properties of the first file and mapping data defining information for identifying a second file within another filesystem from which the first file's content is obtainable Based on the properties, a filesystem operation involving the first file is performed without switching to a host context, and a requested access to the first file's content is responded to. Responding includes, based on the mapping data, communicating a request for the host context to supply the first file's content and, after returning from a context switch, responding to the requested access by supplying content of the second file from guest memory page(s) which are mapped to host memory page(s) containing the second file's content.

Abstract: Methods, systems, and computer storage media for providing a set of common flat files in a composite image that can be mounted as a container (i.e. composite container) to support isolation and interoperation of computing resources. Container management is provided for a container management system based on a composite image file system engine that executes composite operations. In particular, a remote sharing manager operates with a composite engine interface to support generating composite images configured for split layer memory sharing, split layer direct access memory sharing, and dynamic base images. In operation, a plurality of files and a selection of a remote sharing configuration for generating a composite image are accessed. The composite image for the plurality of files and the remoting sharing configuration is generated. The composite image is communicated to cause sharing of the composite image, sharing of the composite image is based on the remote sharing configuration.

Abstract: Methods, systems, and computer storage media for providing a set of common flat files in a composite image that can be mounted as a container (i.e., composite container) to support isolation and interoperation of computing resources. Container management is provided for a container management system based on a composite image file system engine that executes composite operations to support resource isolation and operating system (OS) virtualization functionality. In particular, a container engine interface supports creating, mounting, and providing access to and from composite images or composite containers. In operation, a plurality of files for generating a composite image are accessed. The composite image for the plurality of files is generated. The composite image includes a set of common flat files. The composite image is communicated to cause mounting of the composite image, where mounting the composite image is based on a metadata file from the set of common flat files.

Abstract: Methods, systems, and computer storage media for providing a set of common flat files in a composite image that can be mounted as a container (i.e., composite container) to support isolation and interoperation of computing resources. Container management is provided for a container management system based on a composite image file system engine that executes composite operations to support resource isolation and operating system (OS) virtualization functionality. In particular, a container engine interface supports creating, mounting, and providing access to and from composite images or composite containers. In operation, a plurality of files for generating a composite image are accessed. The composite image for the plurality of files is generated. The composite image includes a set of common flat files. The composite image is communicated to cause mounting of the composite image, where mounting the composite image is based on a metadata file from the set of common flat files.

Abstract: Methods, systems, and computer storage media for providing a set of common flat files in a composite image that can be mounted as a container (i.e. composite container) to support isolation and interoperation of computing resources. Container management is provided for a container management system based on a composite image file system engine that executes composite operations. In particular, a remote sharing manager operates with a composite engine interface to support generating composite images configured for split layer memory sharing, split layer direct access memory sharing, and dynamic base images. In operation, a plurality of files and a selection of a remote sharing configuration for generating a composite image are accessed. The composite image for the plurality of files and the remoting sharing configuration is generated. The composite image is communicated to cause sharing of the composite image, sharing of the composite image is based on the remote sharing configuration.

Abstract: Examples described herein generally relate to a computer device including a memory, and at least one processor configured to partition application files for multiple users of the computer device. The computer device creates a per-user location for a first user when installing an application package to an installation location. The application package includes a plurality of files for an application that are read-only for the first user. The computer device projects, via one or more filter drivers, installed package files from the installation location into the per-user location. The computer device receives a modification to the plurality of files for the application projected into the per-user location. The computer device writes at least one modified file into the per-user location. The computer device loads, during execution of the application by the first user, the at least one modified file from the per-user location for the first user.

Abstract: Merging a plurality of CIMs into a merged filesystem namespace includes accessing merge configuration information that identifies a plurality of backing CIMs and a merge precedence order for the backing CIMs. Based on the merge configuration information, merged metadata is generated from metadata portions of the backing CIMs. The merged metadata defines a merged filesystem namespace comprising two or more filesystem objects from the backing CIMs. The merged metadata includes at least first and second merged metadata items that each defines a corresponding filesystem object as being part of the merged filesystem namespace. Each merged metadata item corresponds to a corresponding metadata item within a corresponding metadata portion of a different backing CIM, references a data portion of its corresponding backing CIM, and is generated based on its corresponding filesystem object having no conflict with any filesystem object from any backing CIM that has a higher merge precedence.

Abstract: Methods, systems, and computer storage media for providing a set of common flat files in a composite image that can be mounted as a container (i.e., composite container) to support isolation and interoperation of computing resources. Container management is provided for a container management system based on a composite image file system engine that executes composite operations to support resource isolation and operating system (OS) virtualization functionality. In particular, a container engine interface supports creating, mounting, and providing access to and from composite images or composite containers. In operation, a plurality of files for generating a composite image are accessed. The composite image for the plurality of files is generated. The composite image includes a set of common flat files. The composite image is communicated to cause mounting of the composite image, where mounting the composite image is based on a metadata file from the set of common flat files.

Abstract: Methods, systems, and computer storage media for providing a set of common flat files in a composite image that can be mounted as a container (i.e. composite container) to support isolation and interoperation of computing resources. Container management is provided for a container management system based on a composite image file system engine that executes composite operations to support resource isolation and operating system (OS) virtualization functionality. In particular, a layout manager operates with a composite engine interface to support generating composite images with optimized configurations (i.e., pre-alignment and pre-computed hashes of for executable files). In operation, a plurality of files for generating a composite image are accessed.

Abstract: Methods, systems, and computer storage media for providing a set of common flat files in a composite image that can be mounted as a container (i.e. composite container) to support isolation and interoperation of computing resources. Container management is provided for a container management system based on a composite image file system engine that executes composite operations. In particular, a remote sharing manager operates with a composite engine interface to support generating composite images configured for split layer memory sharing, split layer direct access memory sharing, and dynamic base images. In operation, a plurality of files and a selection of a remote sharing configuration for generating a composite image are accessed. The composite image for the plurality of files and the remoting sharing configuration is generated. The composite image is communicated to cause sharing of the composite image, sharing of the composite image is based on the remote sharing configuration.