Host migration device, method and readable storage medium

Abstract

The present application discloses a host migration device, method and readable storage medium, which relate to the field of network information. The host migration method provided by the present application is applied to the OpenStack cloud platform. The pre-set filter screens out the trusted host machines contained in the cluster by determining the trusted identifier. The trusted identifier is used to indicate that the host machine contains a trusted platform module and / or a virtual trusted platform module. After receiving the migration instruction, the trusted cloud host is migrated to a trusted host machine with the trusted identifier added. In this way, the trusted identifier is used to ensure that the host machine contains TPM and / or VTPM during migration, thereby ensuring the credibility of the trusted cloud host during online host migration, without changing the credibility of the cloud host, and preventing data leakage and loss. The host migration device and readable storage medium provided by the present application correspond to the above-mentioned host migration method and have the same beneficial effects.

Description

Technical Field

[0001] The present application relates to the field of network information, and in particular to a host migration device, method and readable storage medium. Background Art

[0002] In recent years, with advances in computer technology, cloud computing has become increasingly mature. Cloud computing centralizes all computing resources and provides them to users via the internet. This frees application providers from worrying about tedious details, allowing them to focus on their business, fostering innovation and reducing costs. With the rise of cloud computing, the application of cloud platforms has grown exponentially, with OpenStack being a common cloud platform currently on the market.

[0003] When performing host migration, the existing OpenStack cloud platform technology directly selects a host in the cluster as the target host for migration. Therefore, migration failures often occur during the migration process, resulting in low migration reliability.

[0004] In view of the above technologies, finding a reliable host migration method is an urgent problem to be solved by those skilled in the art. Summary of the Invention

[0005] The purpose of this application is to provide a host migration to solve the problem of low reliability of current host migration.

[0006] To solve the above technical problems, this application provides a host migration method applied to the OpenStack cloud platform, including:

[0007] Filtering out trusted hosts in the cluster through a pre-set filter, wherein the trusted hosts are added with a trusted identifier, the trusted identifier being used to indicate that the trusted hosts include a TPM and / or a VTPM, and the filtering condition of the filter is that the host includes the trusted identifier;

[0008] After receiving the migration instruction, the trusted cloud host is migrated to the trusted host machine to which the trusted identifier is added, wherein the trusted cloud host is a cloud host created on the original host machine.

[0009] Preferably, creating the trusted cloud host includes the following steps:

[0010] Simulating the TPM on the original host machine based on virtualization technology, and integrating the simulated TPM into the OpenStack cloud platform as the VTPM;

[0011] The trusted cloud host is created according to the VTPM.

[0012] Preferably, the method further comprises:

[0013] Generate an account and password to create a key;

[0014] Encrypting the trusted cloud host using the key;

[0015] The account and password are saved in the database.

[0016] Preferably, after migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added, the method further comprises:

[0017] The key is created on the trusted host according to the account and the password of the database, and the key is used to start the trusted cloud host.

[0018] Preferably, the account and the password are generated by Barbican, a key management component of the OpenStack cloud platform, and the database is a database of Barbican.

[0019] Preferably, before migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added, the method further includes:

[0020] Determining whether the migration cloud host is the trusted cloud host based on host system metadata, where the host system metadata is metadata generated when the trusted cloud host is generated;

[0021] If so, the step of migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added is entered.

[0022] Preferably, after migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added, the method further comprises:

[0023] Delete the key on the original host.

[0024] To solve the above problems, the present application further provides a host migration device, which includes:

[0025] a screening module, configured to screen out trusted hosts included in the cluster, wherein the trusted hosts are added with a trusted identifier, the trusted identifier being used to indicate that the trusted hosts include a TPM and / or a VTPM, and the filtering condition of the filter is that the host includes the trusted identifier;

[0026] The migration module is used to migrate the trusted cloud host to the trusted host machine added with the trusted identifier after receiving the migration instruction, wherein the trusted cloud host is a cloud host created on the original host machine.

[0027] Preferably, the host migration device further includes:

[0028] A generation module, used to generate accounts and passwords to create keys;

[0029] An encryption module, configured to encrypt the trusted cloud host using the key;

[0030] The saving module is used to save the account and password to the database.

[0031] Preferably, the host migration device further includes:

[0032] A creation module is used to create the key on the trusted host according to the account and the password of the database, and the key is used to start the trusted cloud host.

[0033] Preferably, the host migration device further includes:

[0034] a judgment module, configured to judge whether the migration cloud host is the trusted cloud host based on host system metadata, wherein the host system metadata is metadata generated when the trusted cloud host is generated;

[0035] Preferably, the host migration device further comprises: a deletion module, configured to delete the key on the original host machine.

[0036] To solve the above problems, the present application further provides a host migration device, which includes a memory for storing a computer program;

[0037] A processor is configured to implement the steps of the above-mentioned host migration method when executing the computer program.

[0038] To solve the above problems, the present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned host migration method are implemented.

[0039] The host migration method provided in this application is applied to the OpenStack cloud platform. A pre-set filter selects trusted hosts included in the cluster by determining a trusted identifier. The trusted identifier is used to indicate that the host contains a trusted platform module and / or a virtual trusted platform module. After receiving the migration instruction, the trusted cloud host is migrated to a trusted host to which the trusted identifier is added. In this way, the trusted identifier is used to ensure that the host at the time of migration contains a TPM and / or VTPM, thereby ensuring the credibility of the trusted cloud host during the online host migration without changing the credibility of the cloud host, thereby preventing data leakage and loss.

[0040] The host migration device and readable storage medium provided in this application correspond to the above-mentioned host migration method and have the same beneficial effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0042] Figure 1 A flowchart of a host migration method provided in an embodiment of the present application;

[0043] Figure 2 A schematic diagram of a filter workflow provided in an embodiment of the present application;

[0044] Figure 3 A structural diagram of a host migration device provided in an embodiment of the present application;

[0045] Figure 4 This is a structural diagram of a host migration device provided in another embodiment of the present application. DETAILED DESCRIPTION

[0046] The following will be combined with the accompanying drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0047] The core of this application is to provide a host migration method to solve the reliability problem during host migration. Cloud computing refers to the delivery and use model of IT infrastructure, which means obtaining the required resources (hardware, platform, software) in an on-demand and easily scalable manner through the network. The network that provides resources is called a "cloud". The resources in the "cloud" appear to users to be infinitely scalable and can be obtained at any time, used on demand, expanded at any time, and paid for on a per-use basis. The "cloud" is a pool of computing resources, usually a large server cluster, including computing servers, storage servers, bandwidth resources, etc. Cloud computing centralizes all computing resources and provides them to users through the network. This allows application providers to focus more on their own business without worrying about tedious details, which is conducive to innovation and cost reduction. This is a new direction that can replace existing servers. It should be noted that host migration is the transfer of a server or cloud host in a cloud platform from one device to another. This application is applied to the OpenStack cloud platform, so the host migration is targeted at the cloud host in the cloud platform.

[0048] In order to enable those skilled in the art to better understand the present application, the present application is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0049] Figure 1 The flowchart of a host migration method provided in an embodiment of the present application is applied to the OpenStack cloud platform, including:

[0050] S10: Filter out the trusted hosts in the cluster through a pre-set filter.

[0051] The trusted host adds a trusted identifier, which is used to indicate that the trusted host includes a trusted platform module (TPM) and / or a virtual trusted platform module (VTPM). The filter condition is that the host includes the trusted identifier.

[0052] It's important to note that the OpenStack cloud platform is an open-source cloud computing management platform project, comprised of several key components. It supports virtually all cloud environments, aiming to provide a cloud computing management platform that's simple to implement, scalable, rich, and standardized. TPM, or Trusted Platform Module, is an international standard for secure cryptographic processors. TPM utilizes securely verified encryption keys to enhance device security and is at the heart of many security applications. A TPM is a physical device, such as a chip containing a trusted module. A VTPM is a virtualized TPM, a virtual device, such as a virtual machine within a computer. This will not be discussed further.

[0053] In actual applications, the filter searches for the corresponding trusted host by looking up the trusted identifier on the host. Figure 2 A filter workflow diagram is provided for an embodiment of the present application. When a physical TPM chip or a simulated TPM device exists on a host machine, an attribute TPM_enbale is added to the host machine's main database, and TPM_enbale=ture is added to the host machine's main configuration file accordingly. The TPM_enabled information in the host machine is reported to the database using the OpenStack cloud platform host upload mechanism, and the data record TPM_enabled=ture is updated. Before performing host migration, the filter determines whether the data of each host machine is TPM_enabled=ture. If not, the host machine is discarded. If so, the host machine is added to the trusted host machine list. Figure 2This is only one filter design scheme listed, and the filter and trusted identifier are not specifically limited in this embodiment.

[0054] The cluster mentioned in this embodiment is a computer group, that is, all computers certified by the OpenStack cloud platform.

[0055] S11: Migrate the trusted cloud host to a trusted host machine with a trusted identifier.

[0056] Step S11 is performed after the OpenStack cloud platform receives the migration instruction. The trusted cloud host is a cloud host created on the original host. The trusted cloud host is a cloud host that includes a VTPM. The original host is the host used when the cloud host was created. The trusted cloud host is generated by the OpenStack cloud platform. The specific process of creating the trusted cloud host is not limited here.

[0057] It should be noted that when there are multiple trusted hosts, the target trusted host for the trusted cloud host migration can be determined by the administrator, randomly determined by the database, or determined by the OpenStack cloud platform as the first trusted host screened out. When there are multiple trusted hosts, the migration method and target trusted host of the trusted cloud host are not limited here.

[0058] The host migration method provided in this embodiment is applied to the OpenStack cloud platform. A pre-set filter selects trusted hosts in the cluster by determining a trusted identifier. The trusted identifier is used to indicate that the host contains a trusted platform module and / or a virtual trusted platform module. After receiving the migration instruction, the trusted cloud host is migrated to a trusted host to which the trusted identifier is added. In this way, the trusted identifier ensures that the host at the time of migration contains a TPM and / or VTPM, thereby ensuring the trustworthiness of the trusted cloud host during online host migration without changing the trustworthiness of the cloud host, thereby preventing data leakage and loss.

[0059] In the above embodiment, the specific process of creating a trusted cloud host is not limited. In this embodiment, a preferred solution is proposed, that is, creating a trusted cloud host includes the following steps:

[0060] Emulate the TPM on the original host machine based on virtualization technology and integrate the simulated TPM into the OpenStack cloud platform as VTPM;

[0061] Create a trusted cloud host based on VTPM.

[0062] It should be noted that the virtualization technologies used in this embodiment include but are not limited to the libvirt virtual machine manager, qemu universal simulator and other virtualization technologies. When creating a trusted cloud host, a trusted host machine containing a TPM is used, and the TPM on the host machine is integrated as a VTPM to ensure the credibility of the generated cloud host. In this way, the creation of a trusted cloud host can be more convenient, and the VTPM is generated by the TPM integration, making the VTPM more trustworthy.

[0063] In practical applications, considering the security that a cloud host needs to have as a server, a preferred solution is proposed here, which also includes:

[0064] Generate an account and password to create a key;

[0065] Encrypt the trusted cloud host with a key;

[0066] Save the account and password to the database.

[0067] It should be noted that this embodiment does not limit the method and specific content of account and password generation. They can be created by an administrator using a virtual machine or using the OpenStack cloud platform. The account and password content can be characters, numbers, or a combination thereof. There is no limit on the time of key creation. It can be created when the trusted cloud host is generated or when the trusted cloud host is migrated. This embodiment also does not limit the type of database. The database can be created by the user or use the database of the OpenStack cloud platform.

[0068] The preferred solution proposed in this embodiment encrypts the trusted cloud host and stores the account and password in the database, thereby optimizing the security of the cloud host and preventing information leakage.

[0069] In the above embodiment, since the cloud host is encrypted, considering that the trusted host needs to start the trusted cloud host after migration, a preferred solution is proposed here, which includes: after migrating the trusted cloud host to a trusted host with a trusted identifier, the following steps are further included:

[0070] Create a key on the trusted host based on the database account and password. The key is used to start the trusted cloud host.

[0071] It should be noted that in this embodiment, after the database is called, a key is created on the trusted host, so that when the host is migrated, the trusted host can directly open the trusted cloud host through the key to prevent data loss.

[0072] In the above embodiment, there is no limitation on the method for generating the account and password and the type of database. In this embodiment, a preferred solution is proposed, in which the account and password are generated by Barbican, a key management component of the OpenStack cloud platform, and the database is a Barbican database.

[0073] It should be noted that this embodiment generates a key account and password based on Barbican, the key management component of the OpenStack cloud platform, when creating a trusted cloud host. This key information is then stored in the Barbican database. A libvirt private key is created based on the key account and password to encrypt the trusted cloud host's VTPM device.

[0074] The encryption method proposed in this embodiment does not require users to set up accounts and passwords, nor does it require a new database. The generation and storage of keys can be completed by the OpenStack cloud platform, reducing the user's workload.

[0075] In actual applications, considering that there may be more than one cloud host in the OpenStack cloud platform, it is necessary to first determine the trustworthiness of the cloud host after receiving the request instruction. Therefore, this embodiment proposes a preferred solution, which includes: before migrating the trusted cloud host to a trusted host machine with a trusted identifier:

[0076] Determine whether the migrated cloud host is a trusted cloud host based on the host system metadata. The host system metadata is the metadata generated when the trusted cloud host is generated.

[0077] If so, proceed to the step of migrating the trusted cloud host to a trusted host machine with a trusted identifier added.

[0078] It should be noted that when creating a trusted cloud host, the cloud host's VTPM attribute version number (TPM_version) and TPM type (TPM_model) will be set, and the trusted cloud host system metadata VTPM_secret_uuid will be generated. This metadata corresponds to the cloud host's VTPM. Therefore, you only need to check whether this metadata is included to determine whether the cloud host is trustworthy.

[0079] The preferred solution proposed in this embodiment verifies the credibility of the cloud host by identifying metadata. When an untrusted cloud host is migrated, there is no need to perform the subsequent screening steps mentioned in the embodiment of this application. This optimizes the processing method, allowing the OpenStack cloud platform to adopt different solutions for different cloud hosts when performing host migration, thereby improving the efficiency of host migration.

[0080] Considering the security issues after the trusted cloud host is encrypted, this embodiment proposes a preferred solution, which includes: after migrating the trusted cloud host to a trusted host machine with a trusted identifier added;

[0081] Delete the key on the original host.

[0082] By deleting the key on the original host, it is ensured that the key is only stored on the current host of the trusted cloud host, preventing the key account and password from being leaked, thereby increasing the security of this application.

[0083] In the above embodiments, the host migration method is described in detail. This application also provides corresponding embodiments of the host migration device. It should be noted that this application describes the embodiments of the device from two perspectives: one is based on the functional module perspective, and the other is based on the hardware perspective.

[0084] Figure 3 A structural diagram of a host migration device provided in an embodiment of the present application, the device comprising:

[0085] A screening module 10 is configured to screen out trusted hosts in the cluster, wherein the trusted hosts are added with a trusted identifier, the trusted identifier being used to indicate that the trusted hosts include a TPM and / or a VTPM, and the filter condition is that the host includes the trusted identifier;

[0086] The migration module 11 is configured to migrate the trusted cloud host to a trusted host machine with a trusted identifier after receiving a migration instruction, wherein the trusted cloud host is a cloud host created on the original host machine.

[0087] Preferably, the host migration device further includes:

[0088] A generation module, used to generate accounts and passwords to create keys;

[0089] An encryption module, used to encrypt the trusted cloud host using a key;

[0090] Save module, used to save accounts and passwords to the database.

[0091] Preferably, the host migration device further includes:

[0092] Create a module to create a key on the trusted host based on the database account and password. The key is used to start the trusted cloud host.

[0093] Preferably, the host migration device further includes:

[0094] A judgment module is used to judge whether the migration cloud host is a trusted cloud host based on the host system metadata, where the host system metadata is metadata generated when the trusted cloud host is generated;

[0095] Preferably, the host migration device further includes:

[0096] The deletion module is used to delete the key on the original host.

[0097] Since the embodiments of the apparatus part correspond to the embodiments of the method part, please refer to the description of the embodiments of the method part for the embodiments of the apparatus part, and they will not be repeated here.

[0098] The host migration device provided in this embodiment includes a screening module, which is used to implement the steps of the host migration method and is applied to the OpenStack cloud platform. The pre-set filter screens out trusted host machines included in the cluster by determining a trusted identifier. The trusted identifier is used to indicate that the host machine contains a trusted platform module and / or a virtual trusted platform module. After receiving the migration instruction, the trusted cloud host is migrated to a trusted host machine added with the trusted identifier. In this way, the trusted identifier is used to ensure that the host machine at the time of migration contains a TPM and / or a VTPM, thereby ensuring the credibility of the trusted cloud host during the host online migration without changing the credibility of the cloud host, thereby preventing data leakage and loss.

[0099] Figure 4 A structural diagram of a host migration device provided in another embodiment of the present application is shown in FIG. Figure 4 As shown, the host migration device includes: a memory 20 for storing computer programs;

[0100] The processor 21 is configured to implement the steps of the host migration method mentioned in the above embodiment when executing a computer program.

[0101] The host migration device provided in this embodiment may include but is not limited to a smart phone, a tablet computer, a laptop computer, or a desktop computer.

[0102] Among them, the processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor 21 can be implemented in at least one hardware form of DSP (Digital Signal Processing), FPGA (Field-Programmable Gate Array), and PLA (Programmable Logic Array). The processor 21 may also include a main processor and a coprocessor. The main processor is a processor for processing data in the awake state, also known as CPU (Central Processing Unit); the coprocessor is a low-power processor for processing data in the standby state. In some embodiments, the processor 21 may be integrated with a GPU (Graphics Processing Unit), which is responsible for rendering and drawing the content to be displayed on the display screen. In some embodiments, the processor 21 may also include an AI (Artificial Intelligence) processor, which is used to process computing operations related to machine learning.

[0103] The memory 20 may include one or more computer-readable storage media, which may be non-transitory. The memory 20 may also include a high-speed random access memory, and a non-volatile memory, such as one or more disk storage devices, flash memory storage devices. In this embodiment, the memory 20 is at least used to store the following computer program 201, wherein, after the computer program is loaded and executed by the processor 21, it can implement the relevant steps of the host migration method disclosed in any of the aforementioned embodiments. In addition, the resources stored in the memory 20 may also include an operating system 202 and data 203, etc., and the storage method may be temporary storage or permanent storage. Among them, the operating system 202 may include Windows, Unix, Linux, etc. The data 203 may include but is not limited to data related to the host migration method, etc.

[0104] In some embodiments, the host migration device may further include a display screen 22 , an input / output interface 23 , a communication interface 24 , a power supply 25 , and a communication bus 26 .

[0105] Those skilled in the art will understand that Figure 4 The structure shown in the figure does not constitute a limitation to the host migration device, and may include more or fewer components than shown in the figure.

[0106] The host migration device provided in an embodiment of the present application includes a memory and a processor. When the processor executes the program stored in the memory, it can implement the following method: the host migration method mentioned in the above embodiment.

[0107] The host migration device provided in this embodiment includes a memory and a processor, wherein the memory is used to store a computer program, and the processor is used to implement the steps of the host migration method when executing the computer program. The device is applied to the OpenStack cloud platform. A pre-set filter screens out trusted host machines included in the cluster by determining a trusted identifier. The trusted identifier is used to indicate that the host machine contains a trusted platform module and / or a virtual trusted platform module. After receiving the migration instruction, the trusted cloud host is migrated to a trusted host machine to which the trusted identifier is added. In this way, the trusted identifier is used to ensure that the host machine contains a TPM and / or a VTPM during migration, thereby ensuring the credibility of the trusted cloud host during online host migration without changing the credibility of the cloud host, thereby preventing data leakage and loss.

[0108] Finally, the present application also provides an embodiment corresponding to a computer-readable storage medium. The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps described in the above method embodiment.

[0109] It is understandable that if the method in the above embodiment is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and executes all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0110] It can be seen that the computer-readable storage medium provided in this embodiment stores a computer program, and the computer program is applied to the OpenStack cloud platform by the processor. The pre-set filter screens out the trusted host machines included in the cluster by determining the trusted identifier. The trusted identifier is used to indicate that the host machine contains a trusted platform module and / or a virtual trusted platform module. After receiving the migration instruction, the trusted cloud host is migrated to a trusted host machine to which the trusted identifier is added. In this way, the trusted identifier is used to ensure that the host machine contains TPM and / or VTPM during migration, thereby ensuring the credibility of the trusted cloud host during online host migration without changing the credibility of the cloud host, thereby preventing data leakage and loss.

[0111] The host migration method provided by the present application is introduced in detail above. The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same and similar parts between the various embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the claims of the present application.

[0112] It should also be noted that, in this specification, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variants thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus comprising the element.

Claims

1. A host migration method, characterized in that: Applied to the OpenStack cloud platform, including: Filtering out trusted hosts in the cluster through a pre-set filter, wherein the trusted hosts are added with a trusted identifier, the trusted identifier being used to indicate that the trusted hosts include a TPM and / or a VTPM, and the filtering condition of the filter is that the host includes the trusted identifier; After receiving the migration instruction, migrate the trusted cloud host to one of the trusted host machines to which the trusted identifier is added, wherein the trusted cloud host is a cloud host created on the original host machine; Also includes: Generate an account and password to create a key; Encrypting the trusted cloud host using the key; Saving the account and password to the database; After migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added, the method further includes: Deleting the key on the original host; Among them, the method for determining a trusted host includes: when the host has TPM and / or VTPM, adding the attribute TPM_enbale to the host master database, and adding TPM_enbale=ture to the main configuration file, using the OpenStack cloud platform host upload mechanism to report the TPM_enabled information in the host to the database, and updating the data record TPM_enabled=ture; before performing host migration, the filter determines whether the data of each host is TPM_enabled=ture, if not, the host is discarded, if so, the host is added to the trusted host list.

2. The host migration method according to claim 1, wherein: Creating the trusted cloud host includes the following steps: Simulating the TPM on the original host machine based on virtualization technology, and integrating the simulated TPM into the OpenStack cloud platform as the VTPM; The trusted cloud host is created according to the VTPM.

3. The host migration method according to claim 2, wherein: After migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added, the method further includes: The key is created on the trusted host according to the account and the password of the database, and the key is used to start the trusted cloud host.

4. The host migration method according to claim 3, wherein: The account and the password are generated by Barbican, a key management component of the OpenStack cloud platform, and the database is a database of Barbican.

5. The host migration method according to any one of claims 1 to 4, characterized in that: Before migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added, the method further includes: Determining whether the migration cloud host is the trusted cloud host based on host system metadata, where the host system metadata is metadata generated when the trusted cloud host is generated; If so, the step of migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added is entered.

6. A host migration device, characterized in that: include: a screening module, configured to screen out trusted hosts included in the cluster, wherein the trusted hosts are added with a trusted identifier, the trusted identifier being used to indicate that the trusted hosts include a TPM and / or a VTPM, and the filtering condition of the filter is that the host includes the trusted identifier; a migration module, configured to, upon receiving a migration instruction, migrate the trusted cloud host to a trusted host machine to which the trusted identifier is added, wherein the trusted cloud host is a cloud host created on the original host machine; Also includes: Generate an account and password to create a key; Encrypting the trusted cloud host using the key; Saving the account and password to the database; After migrating the trusted cloud host to the trusted host machine to which the trusted identifier is added, the method further includes: Deleting the key on the original host; Among them, the method for determining a trusted host includes: when the host has TPM and / or VTPM, adding the attribute TPM_enbale to the host master database, and adding TPM_enbale=ture to the main configuration file, using the OpenStack cloud platform host upload mechanism to report the TPM_enabled information in the host to the database, and updating the data record TPM_enabled=ture; before performing host migration, the filter determines whether the data of each host is TPM_enabled=ture, if not, the host is discarded, if so, the host is added to the trusted host list.

7. A host migration device, characterized in that: including a memory for storing a computer program; A processor, configured to implement the steps of the host migration method according to any one of claims 1 to 5 when executing the computer program.

8. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the host migration method according to any one of claims 1 to 5 are implemented.

Images