A cloud platform agentless antivirus software deployment method, device, equipment and medium

Abstract

This application discloses a method, apparatus, device, and medium for deploying an agentless antivirus component on a cloud platform, relating to the field of cloud platform technology. The method includes: obtaining CPU architecture information of a target node in a target cloud platform to obtain target CPU architecture information; determining the target CPU architecture type of the target node based on the target CPU architecture information, and searching for a target deployment package file of the corresponding target agentless antivirus component in a preset agentless antivirus component library based on the target CPU architecture type; issuing a deployment command for the target agentless antivirus component and sending the target deployment package file to the target node of the target cloud platform, thereby deploying the target agentless antivirus component to the target node of the target cloud platform. This solution enables the automatic deployment of agentless antivirus components on the cloud platform to meet the agentless security protection requirements for virtual machines in a cloud platform under a hybrid CPU architecture.

Description

Technical Field

[0001] This invention relates to the field of cloud platform technology, and in particular to a method, apparatus, equipment and medium for deploying agentless antivirus components on a cloud platform. Background Technology

[0002] With the rapid development of information technology and the continuous maturation of cloud computing and big data technologies, OpenStack, as the de facto standard for cloud computing, has been widely adopted. Furthermore, with the widespread use of heterogeneous CPU architectures such as ARM and MIPS, building cloud platforms based on OpenStack hybrid CPU architectures has become a trend in data center cloud construction. On the other hand, as the scale and degree of cloud adoption increase, cloud security becomes increasingly important. Currently, the industry mainly divides virtual machine antivirus protection methods into two categories: one is agent-based antivirus, which requires deploying antivirus agent components within the virtual machine; the other is agentless antivirus, where a dedicated agentless antivirus system deploys corresponding agentless antivirus components on cloud platform nodes in the cloud environment, achieving virtual machine protection capabilities without deploying antivirus agents on each business virtual machine. Agentless antivirus is gradually becoming the security antivirus trend in cloud platforms.

[0003] However, current industry solutions and deployment methods for agentless antivirus components on OpenStack cloud platforms are geared towards single CPU architectures, such as x86 cloud platform nodes. When the cloud platform has a hybrid CPU architecture, such as containing both x86 and ARM architecture compute nodes, agentless antivirus systems cannot deploy agentless components for hybrid CPU architecture cloud platforms. Protection of customer virtual machines must then be achieved by deploying an antivirus agent separately within the virtual machine, significantly increasing usage costs. In conclusion, the problem of how to automatically deploy agentless antivirus components on cloud platforms to meet the agentless security protection needs of virtual machines in hybrid CPU architectures requires further investigation. Summary of the Invention

[0004] In view of this, the purpose of this invention is to provide a method, apparatus, device, and medium for deploying agentless antivirus components on a cloud platform, which can automatically deploy agentless antivirus components on a cloud platform to meet the agentless security protection requirements of virtual machines in a hybrid CPU architecture. The specific solution is as follows:

[0005] Firstly, this application discloses a method for deploying an agentless antivirus component on a cloud platform, including:

[0006] Obtain the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information;

[0007] The target CPU architecture type of the target node is determined based on the target CPU architecture information, and the target deployment package file of the corresponding target agentless antivirus component is searched in the preset agentless antivirus component library according to the target CPU architecture type.

[0008] A deployment command is issued for the target agentless antivirus component, and the target deployment package file is sent to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0009] Optionally, before obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information, the method further includes:

[0010] Obtain access authentication information of the target cloud platform to enable interaction with the target cloud platform, and obtain the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform through a preset cloud platform authentication interface.

[0011] Optionally, obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information includes:

[0012] The connection token information of the target cloud platform is used to call the preset information acquisition interface of the target cloud platform to obtain the target CPU architecture information corresponding to the target node in the target cloud platform.

[0013] Optionally, obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information includes:

[0014] The target node login information is determined based on the node information corresponding to each node in the target cloud platform.

[0015] Based on the target node login information, a secure shell protocol is used to connect to the target node, and a preset detection script is executed on the target node to obtain the target CPU architecture information corresponding to the target node in the target cloud platform.

[0016] Optionally, before determining the target CPU architecture type of the target node based on the target CPU architecture information, and searching for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type, the method further includes:

[0017] The deployment package files and deployment scripts of the agentless antivirus components corresponding to different CPU architecture types are saved to the preset agentless antivirus component library, and the corresponding type labels are marked according to the CPU architecture type of the agentless antivirus component.

[0018] Optionally, the step of determining the target CPU architecture type of the target node based on the target CPU architecture information, and searching for the target deployment package file of the corresponding target agentless antivirus component in a preset agentless antivirus component library based on the target CPU architecture type, includes:

[0019] The target CPU architecture type of the target node is determined based on the target CPU architecture information, and the corresponding target type tag is searched in the preset agentless antivirus component library based on the target CPU architecture type.

[0020] Based on the target type label, the target deployment package file and target deployment script of the corresponding target agentless antivirus component are determined.

[0021] Optionally, issuing a deployment command for the target agentless antivirus component and sending the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform includes:

[0022] A deployment command is issued for the target agentless antivirus component, and the target deployment package file and the target deployment script are sent to the target node of the target cloud platform via the Secure Shell protocol, so as to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0023] Secondly, this application discloses a cloud platform agentless antivirus component deployment device, comprising:

[0024] The CPU architecture information acquisition module is used to acquire the CPU architecture information of the target node in the target cloud platform in order to obtain the target CPU architecture information.

[0025] The agentless antivirus component determination module is used to determine the target CPU architecture type of the target node based on the target CPU architecture information, and to search for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type.

[0026] The agentless antivirus component deployment module is used to issue a deployment command for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform, so as to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0027] Thirdly, this application discloses an electronic device, including:

[0028] Memory, used to store computer programs;

[0029] A processor is used to execute the computer program to implement the steps of the aforementioned cloud platform agentless antivirus component deployment method.

[0030] Fourthly, this application discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, it implements the steps of the aforementioned cloud platform agentless antivirus component deployment method.

[0031] When deploying an agentless antivirus component on a cloud platform, this application first obtains the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information. Based on the target CPU architecture information, it determines the target CPU architecture type of the target node, and searches for the corresponding target deployment package file of the target agentless antivirus component in a preset agentless antivirus component library according to the target CPU architecture type. It then issues a deployment instruction for the target agentless antivirus component and sends the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform. As can be seen, when deploying the agentless antivirus component on a cloud platform, this application first obtains the target CPU architecture information of the target node in the target cloud platform where the agentless antivirus component will be deployed, and further determines the target CPU architecture type corresponding to the target node based on the target CPU architecture information. Then, based on the target CPU architecture type, it searches for the target deployment package file of the target agentless antivirus component from the preset agentless antivirus component library, and sends the deployment command for the target agentless antivirus component and the target deployment package file to the target node of the target cloud platform, so that the target node can automatically deploy the target agentless antivirus component. Therefore, when deploying the agentless antivirus component on a cloud platform, this application first obtains the target CPU architecture information of the target node, and further determines the target CPU architecture type corresponding to the target node based on the target CPU architecture information. Then, it selects the corresponding agentless antivirus component from a preset agentless antivirus component library based on the target CPU architecture type. This allows for the automatic deployment of the agentless antivirus component on the target cloud platform node when there is a hybrid CPU architecture, such as both x86 and ARM computing nodes. The deployment command and deployment package file are then sent to the target node, enabling automatic deployment. This satisfies the agentless security protection requirements for virtual machines on cloud platform nodes under a hybrid CPU architecture and reduces user maintenance costs. In summary, this application can automatically deploy agentless antivirus components on the cloud platform to meet the agentless security protection requirements for virtual machines on the cloud platform under a hybrid CPU architecture. Attached Figure Description

[0032] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0033] Figure 1 This application provides a flowchart of a cloud platform agentless antivirus component deployment method;

[0034] Figure 2 This application provides a flowchart of a specific method for deploying an agentless antivirus component on a cloud platform.

[0035] Figure 3 This application provides a flowchart of a specific method for deploying an agentless antivirus component on a cloud platform.

[0036] Figure 4 This application provides a flowchart of a specific method for deploying an agentless antivirus component on a cloud platform.

[0037] Figure 5 This is a schematic diagram of the preset agentless antivirus component library provided in this application;

[0038] Figure 6 This application provides a schematic diagram of the deployment of the target agentless component.

[0039] Figure 7 This is a schematic diagram illustrating the deployment of the agentless antivirus component on the cloud platform provided in this application.

[0040] Figure 8 This application provides a schematic diagram of the structure of a cloud platform agentless antivirus component deployment device;

[0041] Figure 9 This application provides a structural diagram of an electronic device. Detailed Implementation

[0042] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0043] Currently, industry methods for virtual machine antivirus protection mainly fall into two categories: one is agent-based antivirus, which requires deploying an antivirus agent component within the virtual machine; the other is agentless antivirus, where a dedicated agentless antivirus system deploys corresponding agentless antivirus components on cloud platform nodes in a cloud environment. This eliminates the need to deploy an antivirus agent on each business virtual machine, achieving virtual machine protection capabilities. Agentless antivirus is gradually becoming the security trend for cloud platforms. However, current industry practices for agentless antivirus components and their deployment methods and tools for OpenStack cloud platforms are geared towards single CPU architectures, such as x86 cloud platform nodes. When the cloud platform has a hybrid CPU architecture, such as containing both x86 and ARM architecture compute nodes, agentless antivirus systems cannot deploy agentless components for hybrid CPU architecture cloud platforms. Customer virtual machine protection must then rely on deploying an antivirus agent separately within the virtual machine, significantly increasing usage costs and inconvenience. Therefore, this application provides a cloud platform agentless antivirus component deployment method that can automatically deploy agentless antivirus components on the cloud platform to meet the agentless security protection requirements for virtual machines in cloud platforms with hybrid CPU architectures.

[0044] This invention discloses a method for deploying an agentless antivirus component on a cloud platform. (See also...) Figure 1 As shown, the method includes:

[0045] Step S11: Obtain the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information.

[0046] In this embodiment, the target cloud platform is an OpenStack cloud platform where the agentless antivirus component will be deployed, and the target node is a node within the target cloud platform. Specifically, the CPU architecture information corresponding to the target node in the target cloud platform is obtained to obtain the target CPU architecture information. The methods for obtaining the target CPU architecture information include, but are not limited to, interface acquisition and script acquisition. Through the above technical solution, the target CPU architecture information of the target node in the target cloud platform is obtained, so that the target CPU architecture type can be determined subsequently using the target CPU architecture information, thereby determining the corresponding target agentless antivirus component.

[0047] Step S12: Determine the target CPU architecture type of the target node based on the target CPU architecture information, and search for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type.

[0048] In this embodiment, the target CPU architecture type includes, but is not limited to, x86 and ARM architecture types. It is understood that different CPU architecture types correspond to different agentless antivirus components. Once the target CPU architecture type is determined, the corresponding target agentless antivirus component can be found from a preset agentless antivirus component library based on the target CPU architecture type. This preset agentless antivirus component library stores different agentless antivirus components corresponding to different CPU architecture types. Through the above technical solution, the corresponding target agentless antivirus component is selected from the preset agentless antivirus component library based on the target CPU architecture type, and the corresponding target deployment package file is found, ensuring that the target agentless antivirus component corresponds to the target CPU architecture type. This facilitates the subsequent issuance of deployment instructions and the target deployment package file to the target node of the target cloud platform, enabling the node to automatically deploy the target agentless antivirus component.

[0049] Step S13: Issue a deployment command for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0050] In this embodiment, a deployment command is issued for the target agentless antivirus component, and the target deployment package file is sent to the target node of the target cloud platform. This facilitates the automatic deployment of the target agentless antivirus component by the target node of the target cloud platform. Through this technical solution, the corresponding agentless antivirus component can be determined based on the CPU architecture type of the node, and the agentless antivirus component deployment command and deployment package file can be sent to the target node for automatic deployment. This satisfies the need for agentless security protection for virtual machines on cloud platform nodes under a hybrid CPU architecture and reduces user operation and maintenance costs.

[0051] As can be seen, in this embodiment, when deploying the agentless antivirus component on the cloud platform, the target CPU architecture information of the target node in the target cloud platform where the agentless antivirus component will be deployed is first obtained. Then, the target CPU architecture type corresponding to the target node is determined based on the target CPU architecture information. Based on the target CPU architecture type, the target deployment package file of the target agentless antivirus component is searched from the preset agentless antivirus component library. The deployment command for the target agentless antivirus component and the target deployment package file are sent to the target node of the target cloud platform so that the target node can automatically deploy the target agentless antivirus component. Therefore, when deploying the agentless antivirus component on a cloud platform, this application first obtains the target CPU architecture information of the target node, and further determines the target CPU architecture type corresponding to the target node based on the target CPU architecture information. Then, it selects the corresponding agentless antivirus component from a preset agentless antivirus component library based on the target CPU architecture type. This allows for the automatic deployment of the agentless antivirus component on the target cloud platform node when there is a hybrid CPU architecture, such as both x86 and ARM computing nodes. The deployment command and deployment package file are then sent to the target node, enabling automatic deployment. This satisfies the agentless security protection requirements for virtual machines on cloud platform nodes under a hybrid CPU architecture and reduces user maintenance costs. In summary, this application can automatically deploy agentless antivirus components on the cloud platform to meet the agentless security protection requirements for virtual machines on the cloud platform under a hybrid CPU architecture.

[0052] See Figure 2 As shown in the figure, this embodiment of the invention discloses a specific method for deploying an agentless antivirus component on a cloud platform. Compared with the previous embodiment, this embodiment further explains and optimizes the technical solution.

[0053] Step S21: Obtain the access authentication information of the target cloud platform to realize interaction with the target cloud platform, and obtain the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform through the preset cloud platform authentication interface.

[0054] In this embodiment, the access authentication information of the target cloud platform is obtained, and further, the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform are obtained through a preset cloud platform authentication interface. Specifically, the agentless antivirus system accesses the OpenStack cloud platform to obtain cloud platform connection information. The user, through the instruction receiving device of the agentless antivirus system (in one specific implementation, the instruction receiving device is an interface input), inputs the access authentication information of the OpenStack cloud platform, including but not limited to IP, port, username, and password, into the agentless antivirus system. Through the communication module, the system interacts with the target OpenStack cloud platform, calls the cloud platform authentication interface to obtain the cloud platform's connection token information and the IP information of each node in the cloud platform, so that subsequent steps such as resource scheduling can interact with the cloud platform for authentication.

[0055] Step S22: Use the connection token information of the target cloud platform to call the preset information acquisition interface of the target cloud platform to obtain the target CPU architecture information corresponding to the target node in the target cloud platform.

[0056] In this embodiment, the connection token information of the target cloud platform is used to call the preset information acquisition interface of the target cloud platform to obtain the target CPU architecture information corresponding to the target node in the target cloud platform. Specifically, the node information detection module on the cloud platform node can provide a unified REST API interface for the resource scheduling module on the agentless antivirus system to directly call, thereby obtaining information such as the node's CPU architecture. This method only requires the resource scheduling module to obtain the token information of the target OpenStack cloud platform and call the corresponding OpenStack API interface. Through the above technical solution, the target CPU architecture information is directly obtained through the preset information acquisition interface of the target cloud platform, making the acquisition of target CPU architecture information convenient and fast, so as to determine the target CPU architecture type through the target CPU architecture information, thereby further determining the target agentless antivirus component.

[0057] Step S23: Determine the target CPU architecture type of the target node based on the target CPU architecture information, and search for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type.

[0058] Step S24: Issue a deployment command for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0059] As can be seen, in this embodiment, the connection token information of the target cloud platform is used to call the preset information acquisition interface of the target cloud platform to obtain the target CPU architecture information corresponding to the target node in the target cloud platform. The target CPU architecture information is obtained directly through the preset information acquisition interface of the target cloud platform, making it convenient and fast to obtain the target CPU architecture information.

[0060] See Figure 3 As shown in the figure, this embodiment of the invention discloses a specific method for deploying an agentless antivirus component on a cloud platform. Compared with the previous embodiment, this embodiment further explains and optimizes the technical solution.

[0061] Step S31: Obtain the access authentication information of the target cloud platform to realize the interaction with the target cloud platform, and obtain the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform through the preset cloud platform authentication interface.

[0062] Step S32: Determine the target node login information of the target node based on the node information corresponding to each node in the target cloud platform, connect to the target node through the secure shell protocol based on the target node login information, and execute a preset detection script on the target node to obtain the target CPU architecture information corresponding to the target node in the target cloud platform.

[0063] In this embodiment, the target node login information is determined based on the node information corresponding to each node in the target cloud platform. Further, based on the target node login information, a secure shell protocol is used to connect to the target node, and a preset detection script is executed on the target node to obtain the target CPU architecture information corresponding to the target node in the target cloud platform. Specifically, the node information detection module on the cloud platform node can provide a preset detection script, which the resource scheduling module on the agentless antivirus system can use to connect to the target node via the secure shell protocol and execute the preset detection script to obtain the corresponding CPU architecture information. This method requires executing the preset detection script separately for each node and inputting the node's login information, including but not limited to the username and password for the secure shell protocol, before connecting to the target node on the target cloud platform and executing the script. Through the above technical solution, there is no need to call the cloud platform's preset interface; the target CPU architecture information can be obtained directly using the preset detection script provided by the cloud platform. This allows users to modify the preset detection script according to their actual needs, resulting in high flexibility and good versatility in obtaining target CPU architecture information.

[0064] Step S33: Determine the target CPU architecture type of the target node based on the target CPU architecture information, and search for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type.

[0065] Step S34: Issue a deployment command for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0066] As can be seen, in this embodiment, there is no need to call the cloud platform's preset interface. The preset detection script provided by the cloud platform can be used directly to obtain the target CPU architecture information, which allows users to modify the preset detection script according to their actual needs. This makes it highly flexible and versatile in obtaining target CPU architecture information.

[0067] See Figure 4 As shown in the figure, this embodiment of the invention discloses a specific method for deploying an agentless antivirus component on a cloud platform. Compared with the previous embodiment, this embodiment further explains and optimizes the technical solution.

[0068] Step S41: Obtain the access authentication information of the target cloud platform to realize the interaction with the target cloud platform, and obtain the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform through the preset cloud platform authentication interface.

[0069] Step S42: Obtain the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information.

[0070] Step S43: Determine the target CPU architecture type of the target node based on the target CPU architecture information, and search for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type.

[0071] In this embodiment, before determining the target CPU architecture type of the target node based on the target CPU architecture information, and searching for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type, the method further includes: saving the deployment package files and deployment scripts of the agentless antivirus components corresponding to different CPU architecture types to the preset agentless antivirus component library, and labeling the corresponding type tags according to the CPU architecture type of the agentless antivirus component.

[0072] In this embodiment, the schematic diagram of the preset agentless antivirus component library is as follows: Figure 5As shown, the target CPU architecture type of the target node is determined based on the target CPU architecture information, and the corresponding target type tag is searched in a preset agentless antivirus component library based on the target CPU architecture type. Based on the target type tag, the target deployment package file and target deployment script of the corresponding agentless antivirus component are determined. Specifically, the agentless component storage module provides the specific deployment package file and deployment script of the agentless antivirus component. The agentless component storage module stores deployment packages and corresponding deployment scripts for different architectures. Different deployment files correspond to different tags; for example, the x86 architecture deployment package file corresponds to the tag "x86". This allows the resource scheduling module to obtain the deployment file adapted to the CPU architecture of the target OpenStack cloud platform node based on the tag after issuing scheduling instructions. Through the above technical solution, the target deployment package file and target deployment script of the corresponding agentless antivirus component are determined based on the target type tag, facilitating the subsequent deployment of the target agentless antivirus component.

[0073] Step S44: Issue a deployment command for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0074] In this embodiment, the target agentless component deployment diagram is as follows: Figure 6 As shown, a deployment command is issued for the target agentless antivirus component, and the target deployment package file and target deployment script are sent to the target node of the target cloud platform via the Secure Shell protocol, thereby deploying the target agentless antivirus component to the target node of the target cloud platform. Specifically, a schematic diagram of the cloud platform agentless antivirus component deployment is shown below. Figure 7 As shown, the resource scheduling module obtains the target cloud platform connection information, establishes a connection with the target OpenStack cloud platform, and sends a probe command to the cloud platform node information probe module to obtain the CPU architecture information of each OpenStack node. After obtaining the CPU architecture information of the cloud platform nodes, the resource scheduling module queries the preset agentless antivirus component library according to the architecture tag to find the agentless component deployment package file and deployment script adapted to the CPU architecture of the target cloud platform node. The resource scheduling module issues a scheduling command to send the agentless component deployment package file and deployment script to the corresponding target OpenStack node through the Secure Shell protocol and execute automatic deployment. Through the above technical solution, the automated deployment of agentless antivirus components on nodes with different CPU architectures of the target OpenStack cloud platform is realized.

[0075] See Figure 8 As shown in the figure, this application discloses a cloud platform agentless antivirus component deployment device, including:

[0076] The node information detection module 11 is used to obtain the CPU architecture information of the target node in the target cloud platform in order to obtain the target CPU architecture information.

[0077] The agentless antivirus component determination module 12 is used to determine the target CPU architecture type of the target node based on the target CPU architecture information, and to search for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type.

[0078] The resource scheduling module 13 is used to issue a deployment instruction for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform, so as to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0079] As can be seen, in this embodiment, when deploying the agentless antivirus component on the cloud platform, the target CPU architecture information of the target node in the target cloud platform where the agentless antivirus component will be deployed is first obtained. Then, the target CPU architecture type corresponding to the target node is determined based on the target CPU architecture information. Based on the target CPU architecture type, the target deployment package file of the target agentless antivirus component is searched from the preset agentless antivirus component library. The deployment command for the target agentless antivirus component and the target deployment package file are sent to the target node of the target cloud platform so that the target node can automatically deploy the target agentless antivirus component. Therefore, when deploying the agentless antivirus component on a cloud platform, this application first obtains the target CPU architecture information of the target node, and further determines the target CPU architecture type corresponding to the target node based on the target CPU architecture information. Then, it selects the corresponding agentless antivirus component from a preset agentless antivirus component library based on the target CPU architecture type. This allows for the automatic deployment of the agentless antivirus component on the target cloud platform node when there is a hybrid CPU architecture, such as both x86 and ARM computing nodes. The deployment command and deployment package file are then sent to the target node, enabling automatic deployment. This satisfies the agentless security protection requirements for virtual machines on cloud platform nodes under a hybrid CPU architecture and reduces user maintenance costs. In summary, this application can automatically deploy agentless antivirus components on the cloud platform to meet the agentless security protection requirements for virtual machines on the cloud platform under a hybrid CPU architecture.

[0080] In some specific embodiments, the cloud platform agentless antivirus component deployment device further includes:

[0081] The cloud platform access module is used to obtain access authentication information of the target cloud platform to realize interaction with the target cloud platform, and to obtain the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform through a preset cloud platform authentication interface.

[0082] In some specific embodiments, the node information detection module 11 is specifically used to: use the connection token information of the target cloud platform to call the preset information acquisition interface of the target cloud platform to obtain the target CPU architecture information corresponding to the target node in the target cloud platform.

[0083] In some specific embodiments, the node information detection module 11 specifically includes:

[0084] A node login unit is used to determine the target node login information of the target node based on the node information corresponding to each node in the target cloud platform.

[0085] The detection script execution unit is used to connect to the target node through the secure shell protocol based on the target node login information, and execute a preset detection script on the target node to obtain the target CPU architecture information corresponding to the target node in the target cloud platform.

[0086] In some specific embodiments, the cloud platform agentless antivirus component deployment device further includes:

[0087] The agentless component storage module is used to save the deployment package files and deployment scripts of agentless antivirus components corresponding to different CPU architecture types to a preset agentless antivirus component library, and to mark the corresponding type tags according to the CPU architecture type of the agentless antivirus component.

[0088] In some specific embodiments, the agentless antivirus component determination module 12 specifically includes:

[0089] The type tag lookup unit is used to determine the target CPU architecture type of the target node based on the target CPU architecture information, and to look up the corresponding target type tag in the preset agentless antivirus component library based on the target CPU architecture type.

[0090] The deployment script corresponding unit is used to determine the target deployment package file and target deployment script of the corresponding target agentless antivirus component based on the target type tag.

[0091] In some specific embodiments, the resource scheduling module 13 is specifically used to: issue a deployment instruction for the target agentless antivirus component and send the target deployment package file and the target deployment script to the target node of the target cloud platform through the Secure Shell protocol, so as to deploy the target agentless antivirus component to the target node of the target cloud platform.

[0092] Figure 9 The illustration shows an electronic device 20 provided in an embodiment of this application. This electronic device 20 may further include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 stores a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the cloud platform agentless antivirus component deployment method disclosed in any of the foregoing embodiments. Alternatively, the electronic device 20 in this embodiment may specifically be a computer.

[0093] In this embodiment, the power supply 23 is used to provide voltage to the various hardware devices on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and external devices, and the communication protocol it follows can be any communication protocol applicable to the technical solution of this application, and is not specifically limited here; the input / output interface 25 is used to acquire external input data or output data to the outside world, and its specific interface type can be selected according to the specific application needs, and is not specifically limited here.

[0094] In addition, the memory 22, as a carrier for resource storage, can be a read-only memory, random access memory, disk or optical disk, etc. The resources stored thereon can include operating system 221, computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0095] The operating system 221 is used to manage and control the various hardware devices on the electronic device 20, as well as the computer program 222, which may be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program capable of performing the cloud platform agentless antivirus component deployment method executed by the electronic device 20 as disclosed in any of the foregoing embodiments, the computer program 222 may further include computer programs capable of performing other specific tasks.

[0096] Furthermore, this application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, it implements the aforementioned cloud platform agentless antivirus component deployment method. Specific steps of this method can be found in the corresponding content disclosed in the foregoing embodiments, and will not be repeated here.

[0097] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0098] The above provides a detailed description of the method, apparatus, equipment, and medium for deploying an agentless antivirus component on a cloud platform provided by the present invention. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A method for deploying an agentless antivirus component on a cloud platform, characterized in that, include: Obtain the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information; among which, obtain the connection information of the target cloud platform, establish a connection with the target OpenStack cloud platform and issue a probe command to obtain the CPU architecture information of each OpenStack node. Before obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information, the method further includes: obtaining the access authentication information of the target cloud platform to realize the interaction with the target cloud platform, and obtaining the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform through a preset cloud platform authentication interface. The step of obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information includes: determining the target node login information of the target node based on the node information corresponding to each node in the target cloud platform; connecting to the target node through the Secure Shell protocol based on the target node login information, and executing a preset detection script on the target node to obtain the target CPU architecture information corresponding to the target node in the target cloud platform. The target CPU architecture type of the target node is determined based on the target CPU architecture information, and the target deployment package file of the corresponding target agentless antivirus component is searched in the preset agentless antivirus component library according to the target CPU architecture type. Issue a deployment command for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform; Specifically, the target agentless antivirus component is distributed to the corresponding target OpenStack node via the Secure Shell protocol and automatically deployed.

2. The method for deploying an agentless antivirus component on a cloud platform according to claim 1, characterized in that, The step of obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information includes: The connection token information of the target cloud platform is used to call the preset information acquisition interface of the target cloud platform to obtain the target CPU architecture information corresponding to the target node in the target cloud platform.

3. The method for deploying an agentless antivirus component on a cloud platform according to any one of claims 1 to 2, characterized in that, Before determining the target CPU architecture type of the target node based on the target CPU architecture information, and searching for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type, the method further includes: The deployment package files and deployment scripts of the agentless antivirus components corresponding to different CPU architecture types are saved to the preset agentless antivirus component library, and the corresponding type labels are marked according to the CPU architecture type of the agentless antivirus component.

4. The method for deploying an agentless antivirus component on a cloud platform according to claim 3, characterized in that, The step of determining the target CPU architecture type of the target node based on the target CPU architecture information, and searching for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type, includes: The target CPU architecture type of the target node is determined based on the target CPU architecture information, and the corresponding target type tag is searched in the preset agentless antivirus component library based on the target CPU architecture type. Based on the target type label, the target deployment package file and target deployment script of the corresponding target agentless antivirus component are determined.

5. The method for deploying an agentless antivirus component on a cloud platform according to claim 4, characterized in that, The step of issuing a deployment command for the target agentless antivirus component and sending the target deployment package file to the target node of the target cloud platform to deploy the target agentless antivirus component to the target node of the target cloud platform includes: A deployment command is issued for the target agentless antivirus component, and the target deployment package file and the target deployment script are sent to the target node of the target cloud platform via the Secure Shell protocol, so as to deploy the target agentless antivirus component to the target node of the target cloud platform.

6. A cloud platform agentless antivirus component deployment device, characterized in that, include: The node information detection module is used to obtain the CPU architecture information of the target nodes in the target cloud platform in order to obtain the target CPU architecture information; in particular, it obtains the connection information of the target cloud platform, establishes a connection with the target OpenStack cloud platform, and sends detection commands to obtain the CPU architecture information of each OpenStack node. Before obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information, the method further includes: obtaining the access authentication information of the target cloud platform to realize the interaction with the target cloud platform, and obtaining the connection token information of the target cloud platform and the node information corresponding to each node in the target cloud platform through a preset cloud platform authentication interface. The step of obtaining the CPU architecture information of the target node in the target cloud platform to obtain the target CPU architecture information includes: determining the target node login information of the target node based on the node information corresponding to each node in the target cloud platform; connecting to the target node through the Secure Shell protocol based on the target node login information, and executing a preset detection script on the target node to obtain the target CPU architecture information corresponding to the target node in the target cloud platform. The agentless antivirus component determination module is used to determine the target CPU architecture type of the target node based on the target CPU architecture information, and to search for the target deployment package file of the corresponding target agentless antivirus component in the preset agentless antivirus component library based on the target CPU architecture type. The resource scheduling module is used to issue a deployment instruction for the target agentless antivirus component and send the target deployment package file to the target node of the target cloud platform, so as to deploy the target agentless antivirus component to the target node of the target cloud platform. Specifically, the target agentless antivirus component is distributed to the corresponding target OpenStack node via the Secure Shell protocol and automatically deployed.

7. An electronic device, characterized in that, include: Memory, used to store computer programs; A processor for executing the computer program to implement the steps of the cloud platform agentless antivirus component deployment method as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, Used to store computer programs; wherein, when the computer programs are executed by a processor, they implement the steps of the cloud platform agentless antivirus component deployment method as described in any one of claims 1 to 5.

Images