Construction method of multi-container root file system

Abstract

The invention discloses a construction method of a multi-container root file system. The construction method comprises the following steps: storing root file system files of a multi-system for realizing multiple containers in a root file system partition; wherein the ROOT system files of the multiple systems are stored in a newly created directory in a root file system partition; wherein the foreground system files of the multiple systems are stored in another newly created directory in the root file system partition, and the initialization init program under the directory where the ROOT systems of the multiple systems are located is loaded after specified equipment in system kernel codes is powered on. When the system is started, directly loading the system kernel and the ROOT system. Byapplying the method and the device, the LXC can be more efficiently utilized to create multiple systems.

Description

technical field [0001] This application relates to Linux system technology, in particular to a method for constructing a multi-container root file system. Background technique [0002] Linux Container (Linux Container, LXC) technology is an operating system-level virtualization technology that provides multiple independent Linux environments on a single Linux host. Containers use Linux kernel features such as namespaces, Apparmor, SELinux profiles, chroot, and CGroups to provide a VM-like isolated environment. [0003] In the current multi-container solution built using LXC technology, the general practice is to add an additional partition A in addition to the root file system partition of a single system to store the root file system files of multiple systems. Among them, the root file system files of multiple systems specifically include: the root file system of the ROOT system running in the background and the root system files of multiple corresponding foreground system...

AI Technical Summary

Problems solved by technology

[0013]1. First of all, there is a security problem. According to the current open source code, there is no security boot check in the process of switching to the root directory of the new partition through switch_root. Therefore, security There are hidden dangers in sex; and if the security boot check is added, the LXC open source code needs to be modified;

[0014]2. Secondly, the above solution needs to add a new partition A, which will take up more space, and the system upgrade process will become complicated, and the upgrade package will become larger;

[0015]3. Finally, an additional step is added during startup, so the startup time is further prolonged

Images