Recovery rollback risk reduction

摘要

Aspects of the subject technology relate to executing a boot sequence from a recovery image. A determination of a validity of one or more keyblocks is made. A determination of a first version identifier and a second version identifier is made. A comparison of the first version identifier and the second version identifier is performed. A boot sequence from a recovery image is executed based on the comparison.

主权项

1. A computing system, comprising:
one or more processors; and a non-transitory machine-readable medium comprising instructions stored therein, which when executed by the one or more processors, cause the one or more processors to perform operations comprising:
detecting a first recovery image accessible to the computing system;determining a validity of a first keyblock associated with the first recovery image;if the first keyblock is determined to be valid, determining a first version identifier associated with the first keyblock;determining a second version identifier, wherein the second version identifier is contained in the computing system;comparing the first version identifier with the second version identifier;determining whether to impose a delay of a predetermined temporal duration prior to executing a boot sequence from the first recovery image based at least on the comparison; andexecuting the boot sequence from the first recovery image based on determining whether to impose the delay.