IDV Desktop without Passwords Based on Container Technology: Terminals, Servers, Systems, and Methods

Abstract

The present invention belongs to the technical field of virtualized cloud desktops, and discloses an IDV desktop non-confidential terminal, server, system and method based on container technology. The system includes a cloud terminal and a cloud server, the cloud server is used to create a cloud desktop container and configure the shared block storage type, IP, port and authentication information, the cloud desktop container includes an initial IDV cloud desktop container image and a block storage device file; it is also used to turn on the switch of the IDV cloud desktop container image and obtain the IDV cloud desktop container image; the cloud terminal is used to obtain and deploy the IDV cloud desktop container image, start the IDV cloud desktop container image, connect to the block storage device file in the cloud server, and a container read-write layer is created in the block storage device file, and the container read-write layer is used to store all data generated when running the cloud desktop.

Description

Technical Field

[0001] The present invention belongs to the technical field of virtualized cloud desktops, and in particular relates to an IDV desktop non-confidential terminal, server, system and method based on container technology. Background Art

[0002] In recent years, virtualization technology has developed rapidly, and cloud desktop industry applications have become more and more widespread, bringing more convenience to government and enterprise offices and university education. IDV (Intelligent Desktop Virtualization) is a commonly used cloud desktop technology, which is characterized by centralized management of distributed computing. IDV desktops are executed locally on virtualized cloud terminals and are managed uniformly by administrators through virtualized cloud desktop management systems. Its characteristics are that virtual desktops run on virtualized cloud terminals, making full use of the hardware resources of cloud terminals, while centralizing and simplifying management and deployment, giving full play to the advantages of desktop virtualization, and facilitating the management of cloud desktops and adjusting the scale of virtualized cloud desktops on demand.

[0003] At the same time, IDV desktop has its disadvantages. The virtualized data of IDV desktop is stored in the cloud terminal, including the desktop data and private data during user use, which are all stored locally in the cloud terminal, and the data security is low. Summary of the invention

[0004] The purpose of the present invention is to provide a method, system and storage medium for IDV desktop terminal without retaining secrets based on container technology, so as to solve the problem that the virtualized data of IDV desktop in the prior art is stored in the cloud terminal and the data security is low.

[0005] In order to achieve the above tasks, the present invention adopts the following technical solutions:

[0006] An IDV desktop non-secret server based on container technology, the server is a cloud server, used to create a cloud desktop container, the cloud desktop container includes an initial IDV cloud desktop container image and a block storage device file;

[0007] It is also used to turn on the switch of the initial IDV cloud desktop container image and obtain the IDV cloud desktop container image.

[0008] The IDV desktop is a non-confidential terminal based on container technology. The terminal is a cloud terminal, which is used to download and install the IDV cloud desktop container image, start the normal operation of the IDV cloud desktop container image, and connect to the block storage device file in the cloud server. A container read-write layer is created in the block storage device file. The container read-write layer is used to store all data generated when running the cloud desktop.

[0009] IDV desktop non-confidential system based on container technology, including cloud server and cloud terminal;

[0010] The cloud server is used to create a cloud desktop container, which includes an initial IDV cloud desktop container image and a block storage device file; it is also used to turn on the switch of the initial IDV cloud desktop container image to obtain the IDV cloud desktop container image.

[0011] The cloud terminal is used to download and install the IDV cloud desktop container image, start the IDV cloud desktop container image to work, connect to the block storage device file in the cloud server, and create a container read-write layer in the block storage device file. The container read-write layer is used to store all data generated when running the IDV cloud desktop.

[0012] The terminal non-secret method of IDV desktop based on container technology is used to store all data generated when the cloud terminal runs IDV cloud desktop in the cloud server to achieve the effect of non-secret terminal. The method is implemented by the following steps:

[0013] Step 1: The cloud server creates a cloud desktop container, which includes an initial IDV cloud desktop container image and a block storage device file;

[0014] Step 2: The cloud server turns on the switch of the initial IDV cloud desktop container image created in step 1 to obtain the IDV cloud desktop container image;

[0015] Step 3: The cloud terminal downloads and installs the IDV cloud desktop container image from the cloud server;

[0016] Step 4: The cloud terminal starts the IDV cloud desktop container image to work, connects to the block storage device file in the cloud server, and creates a container read-write layer in the block storage device file. The container read-write layer is used to store all data generated when running the IDV cloud desktop.

[0017] Furthermore, turning on the switch of the initial IDV cloud desktop container image created in step 1 in step 2 refers to configuring the "keep_secret" attribute of the IDV desktop to 1.

[0018] Compared with the prior art, the present invention has the following technical features:

[0019] The present invention can create an IDV desktop that does not keep secrets on the terminal. When deployed to the cloud terminal, only the virtualized operating system image is downloaded. When the cloud terminal starts the desktop, it connects to the network shared block storage system provided by the virtualized cloud server and mounts the read-write layer of the desktop container to the network shared block storage. The data during the desktop operation will be saved in the network shared block storage file. When the terminal IDV desktop that does not keep secrets is closed, the network shared block storage system connection will be disconnected. In this way, the data of the IDV desktop implemented based on container technology is stored on the cloud server, ensuring the security of the user's IDV desktop data. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 Schematic diagram of the system structure of the present invention. DETAILED DESCRIPTION

[0021] The technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0022] IDV desktops based on container technology are lightweight IDV cloud desktops created by applying the isolation characteristics of containers to the field of virtualized cloud desktops based on the currently popular container technology. Currently, IDV desktops are implemented through full virtualization or semi-virtualization platforms. IDV desktops implemented using container technology are lighter, can be quickly started and migrated, and save hardware resources.

[0023] First, the technical terms appearing in the present invention are explained:

[0024] Network shared block storage: Maps local disk space to the host through a dedicated network protocol. It can be part of a physical block device, a combination of multiple physical block devices, or a file on the local file system.

[0025] Container technology: It is a lightweight operating system-level virtualization that can run applications in a resource-isolated environment. All files required to run the application are packaged into an image and can be reused. When the image is executed, it is called a container. The container runs in an isolated environment and does not affect the external operating system environment.

[0026] Mounting: connects the file system in the device file to the specified directory under the Linux system. After mounting, the system will be able to access the files on these devices.

[0027] Deployment: Downloading desktop files from the server to the terminal is generally called "deployment", such as deployment environment.

[0028] IDV cloud desktop container image: refers to the IDV cloud desktop container image that does not retain secrets on the terminal.

[0029] The terminal does not retain secrets: it means that no data generated during the use of the desktop will be retained, that is, no difference files during the operation will be retained. That is, through the system or method of the present invention, when using the IDV desktop on the terminal, any operation files of the user on the IDV desktop will not be saved in the terminal, but in the cloud server, ensuring the security of the user's IDV desktop data.

[0030] This embodiment discloses an IDV desktop non-secret terminal based on container technology, which is used to download and install the IDV cloud desktop container image, start the normal operation of the IDV cloud desktop container image, connect to the block storage device file in the cloud server, and create a container read-write layer in the block storage device file. The container read-write layer is used to store all data generated when running the cloud desktop;

[0031] It is also used to shut down the IDV cloud desktop container image and disconnect the block storage device file in the cloud server.

[0032] This embodiment discloses an IDV desktop non-secret server based on container technology, which is used to create a cloud desktop container, wherein the cloud desktop container includes an initial IDV cloud desktop container image and a block storage device file;

[0033] It is also used to turn on the switch of the initial IDV cloud desktop container image and obtain the IDV cloud desktop container image.

[0034] This embodiment discloses an IDV desktop non-secret system based on container technology, including a cloud server and a cloud terminal;

[0035] The cloud server is used to create a cloud desktop container, which includes an initial IDV cloud desktop container image and a block storage device file; it is also used to turn on the switch of the initial IDV cloud desktop container image to obtain the IDV cloud desktop container image.

[0036] The cloud terminal is used to download and install the IDV cloud desktop container image, start the IDV cloud desktop container image to work, connect to the block storage device file in the cloud server, and create a container read-write layer in the block storage device file. The container read-write layer is used to store all data generated when running the IDV cloud desktop; it is also used to close the IDV cloud desktop container image and disconnect the block storage device file in the cloud server.

[0037] This embodiment discloses a terminal non-secret method of IDV desktop based on container technology, which is used to store all data generated when the cloud terminal runs the cloud desktop in the cloud server to achieve the effect of non-secret terminal. The method is implemented by the following steps:

[0038] Step 1: The cloud server creates a cloud desktop container, which includes an initial IDV cloud desktop container image and a block storage device file;

[0039] Step 2: The cloud server turns on the switch of the initial IDV cloud desktop container image created in step 1 to obtain the IDV cloud desktop container image;

[0040] Step 3: The cloud terminal downloads and installs the IDV cloud desktop container image from the cloud server;

[0041] Step 4: The cloud terminal starts the IDV cloud desktop container image to work, connects to the block storage device file in the cloud server, and creates a container read-write layer in the block storage device file. The container read-write layer is used to store all data generated when running the IDV cloud desktop.

[0042] Specifically, turning on the terminal secret switch of the IDV cloud desktop container image created in step 1 in step 2 means configuring the "keep_secret" attribute of the IDV desktop to 1.

[0043] Specifically, the process of creating a cloud desktop container in an operating system environment that has been installed and configured is as follows:

[0044] a. Create a temporary directory / dest / rootfs;

[0045] b. Package operating system files and directories:

[0046] tar cpf---exclude= / dest / rootfs / |tar xpf--C / dest / rootfs

[0047] c. Import the operating system image:

[0048] tar-c / dest / rootfs|docker import-{IMAGE-NAME}

[0049] Example 1

[0050] On the basis of the above implementation, this implementation discloses a terminal non-secret method of IDV desktop based on container technology, which includes the following steps:

[0051] S1. Deploy a virtualized cloud desktop management system on a virtualized cloud server; the virtualized cloud desktop management system is used to manage virtualized cloud terminals, virtualized operating system images, cloud desktop users, and users' virtualized cloud desktop resources;

[0052] S2. Deploy a network shared block storage system on the virtualized cloud server; the network shared block storage system provides the virtualized cloud platform with a new block storage space, allowing the cloud terminal to access the virtualized block storage space in a network shared manner;

[0053] S3. Configure the virtualized cloud desktop management system and connect it to the network shared block storage system; configure the network shared block storage system type, IP, port, and authentication information in the virtualized cloud desktop management system; common network shared block storage system types include Ceph, iSCSI, etc.;

[0054] S4. Use the created desktop system container image to create an IDV desktop; create a terminal IDV desktop without leaving a secret by specifying desktop configuration parameters; when creating a desktop, allocate a block storage device file for the desktop in the network shared block storage system;

[0055] S5. Deploy the created terminal without leaving a secret IDV desktop to the terminal. The terminal only downloads the desktop system container image.

[0056] S6. When starting the terminal IDV desktop without leaving secrets, connect to the block storage device file allocated for the desktop in the network shared block storage system, create a container read-write layer in it, and mount it to the container's read-write layer directory to save the desktop's differential data in the network shared block storage;

[0057] S7. When closing the terminal without leaving the secret IDV desktop, close the desktop and disconnect the network shared storage connection.

Claims

1. IDV desktop non-secret server based on container technology, characterized by: Including cloud servers and cloud terminals; The cloud server is used to create a cloud desktop container, which includes an initial IDV cloud desktop container image and a block storage device file; and is also used to turn on the switch of the initial IDV cloud desktop container image to obtain the IDV cloud desktop container image; The cloud terminal is used to download and install the IDV cloud desktop container image, start the normal operation of the IDV cloud desktop container image, connect to the block storage device file in the cloud server, and create a container read-write layer in the block storage device file. The container read-write layer is used to store all data generated when running the cloud desktop. The container read-write layer is also used to close the IDV cloud desktop container image and disconnect the block storage device file in the cloud server; The process of creating a cloud desktop container in an operating system environment that has been installed and configured is as follows: a. Create a temporary directory / dest / rootfs; b. Package operating system files and directories: tar cpf---exclude= / dest / rootfs / |tar xpf--C / dest / rootfs c. Import the operating system image: tar-c / dest / rootfs|docker import-{IMAGE-NAME} The method of IDV desktop non-secret server based on container technology includes the following steps: S1. Deploy a virtualized cloud desktop management system on a virtualized cloud server; the virtualized cloud desktop management system is used to manage virtualized cloud terminals, virtualized operating system images, cloud desktop users, and users' virtualized cloud desktop resources; S2. Deploy a network shared block storage system on the virtualized cloud server; the network shared block storage system provides the virtualized cloud platform with a new block storage space, allowing the cloud terminal to access the virtualized block storage space in a network shared manner; S3. Configure the virtualized cloud desktop management system and connect it to the network shared block storage system; configure the network shared block storage system type, IP, port, and authentication information in the virtualized cloud desktop management system; common network shared block storage system types include Ceph, iSCSI, etc.; S4. Use the created desktop system container image to create an IDV desktop; create a terminal IDV desktop without leaving a secret by specifying desktop configuration parameters; when creating a desktop, allocate a block storage device file for the desktop in the network shared block storage system; S5. Deploy the created terminal without leaving a secret IDV desktop to the terminal. The terminal only downloads the desktop system container image. S6. When starting the terminal IDV desktop without leaving secrets, connect to the block storage device file allocated for the desktop in the network shared block storage system, create a container read-write layer in it, and mount it to the container's read-write layer directory to save the desktop's differential data in the network shared block storage; S7. When closing the terminal without leaving the secret IDV desktop, close the desktop and disconnect the network shared storage connection.

Images