Method, device and equipment for generating a closed container

Abstract

The application discloses a generation method, a generation device and generation equipment of a closed container. In the generation method of the closed container, the container is created after a container creation instruction is received; self-generated keys of the container are acquired, and are stored into memory allocated for the container; the key pair is utilized to encrypt a disk, which is allocated for the container, to obtain an encrypted disk; and access authority is configured for the memory and the encrypted disk to generate the closed container, wherein the access authority onlyallows accesses of an application deployed by adopting the container. According to the method, a case where a server or another user extracts a relevant file of the application program from the closed container is avoided; and thus an effect that data in the container cannot be acquired through any means other than an interface of the application after the container is created is guaranteed to realize complete closure of the container from outsides, a source code package of the application inside the container is enabled to not be intercepted by the outsides, and the application is enabled toobtain maximum security protection.

Description

technical field [0001] The present application relates to the field of communication technologies, and in particular to a method, device and equipment for generating a closed container. Background technique [0002] At present, cloud computing technology can provide available, convenient, and on-demand network access through the increase, use, and delivery mode of Internet-related services, and access to a configurable computing resource sharing pool. These resources can be quickly provided to achieve High-speed computing capability, and users can perform calculations according to their own needs, requiring little management work. [0003] With the development of cloud computing technology, the cloud platform itself uses container technology to deploy applications, and the container is attached to the computer cluster. Therefore, in order to protect the application itself from infringement to the greatest extent, the container itself needs to be absolutely safe, and the sour...

AI Technical Summary

Problems solved by technology

[0004] In the existing technology, after the container is created, the physical location of the container can be retrieved by searching the container host, and then the information inside the container can be obtained. For example, after the application is deployed in the container, the application executable file package, application The required dependencies and the startup files generated by the application startup can be obtained by the external environment of the container by searching the container host machine, which poses hidden dangers to the security of the application itself, especially the executable file package of the application may be intercepted

Images