Container application deployment method and device, container application packaging method and device and electronic equipment

Abstract

The embodiment of the invention provides a container application deployment method and device, a container application packaging method and device and electronic equipment, and relates to the technical field of containers. According to the specific implementation scheme, an application data packet of a target container application is obtained, wherein the application data packet comprises a container mirror image file, a data packet description file and a data packet verification file of the target container application; verifying the container mirror image file and the data packet description file based on the data packet verification file to obtain a verification result; and executing a deployment operation on the target container application based on the verification result. According to the scheme, integrity and security verification is performed on the application data packet of the container application, so that integrity and security of the application data are effectively guaranteed, and normal deployment and operation of the container application are guaranteed.

Description

Technical Field

[0001] The present application relates to the field of container technology. Specifically, the present application relates to a container application deployment, packaging method, device and electronic device. Background Art

[0002] Containers are a type of sandbox technology that runs applications in them and isolates them from the outside world, making it easier for the sandbox to be transferred to other host machines. Containers can simplify the process of building, deploying, and running applications.

[0003] In the related art, the integrity and security of application data required by container applications during deployment cannot be effectively guaranteed, which affects the normal deployment and operation of container applications. Summary of the invention

[0004] This application provides a container application deployment, packaging method, device and electronic device, aiming to solve at least one of the above technical defects. The technical solution adopted by this application is as follows:

[0005] In a first aspect, an embodiment of the present application provides a container application deployment method, the method comprising:

[0006] Obtain an application data packet of the target container application, where the application data packet includes a container image file, a data packet description file, and a data packet verification file of the target container application;

[0007] Verify the container image file and the data packet description file based on the data packet verification file to obtain a verification result;

[0008] The deployment operation of the target container application is performed based on the verification result.

[0009] In a second aspect, an embodiment of the present application provides a container application packaging method, the method comprising:

[0010] Obtain the container image file and data packet description file of the target container application;

[0011] Generate a data packet verification file for a container image file and a data packet description file;

[0012] The container image file, the data packet description file, and the data packet verification file are packaged into an application data packet of the target container application.

[0013] In a third aspect, an embodiment of the present application provides a container application deployment device, the device comprising:

[0014] An application data packet acquisition module is used to acquire an application data packet of a target container application, where the application data packet includes a container image file, a data packet description file, and a data packet verification file of the target container application;

[0015] A verification module is used to verify the container image file and the data packet description file based on the data packet verification file to obtain a verification result;

[0016] The deployment module is used to perform deployment operations on the target container application based on the verification result.

[0017] In a fourth aspect, an embodiment of the present application provides a container application packaging device, the device comprising:

[0018] A file acquisition module, used to obtain the container image file and data packet description file of the target container application;

[0019] A verification data generation module is used to generate a data packet verification file for a container image file and a data packet description file;

[0020] The application packaging module is used to package the container image file, the data packet description file and the data packet verification file into an application data packet of the target container application.

[0021] In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored, which, when executed by a processor, implements the steps of the above-mentioned container application deployment or container application packaging method.

[0022] In a sixth aspect, an embodiment of the present application provides an electronic device, the electronic device comprising:

[0023] one or more processors; and

[0024] A memory associated with the one or more processors, the memory being used to store program instructions, which, when read and executed by the one or more processors, execute the steps of the container application deployment or container application packaging method.

[0025] In a seventh aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the steps of the above-mentioned container application deployment or container application packaging method.

[0026] The beneficial effects of the technical solution provided by the embodiment of the present application are:

[0027] The solution provided by the embodiment of the present application obtains the application data packet of the target container application, which includes the container image file, data packet description file and data packet verification file of the target container application, thereby verifying the container image file and the data packet description file based on the data packet verification file, obtaining the verification result, and performing the deployment operation on the target container application based on the verification result. In this solution, by performing integrity and security verification on the application data packet of the container application, the integrity and security of the application data are effectively guaranteed, thereby ensuring the normal deployment and operation of the container application. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in describing the embodiments of the present application.

[0029] Figure 1 A system architecture diagram applicable to the embodiments of the present application;

[0030] Figure 2 A flowchart of a container application deployment method provided in an embodiment of the present application;

[0031] Figure 3 A flowchart of a specific implementation of the container application deployment method provided in an embodiment of the present application;

[0032] Figure 4 This is a schematic diagram of the process of uninstalling a container application in an embodiment of the present application.

[0033] Figure 5 A flowchart of a container application packaging method provided in an embodiment of the present application;

[0034] Figure 6 A schematic diagram of the structure of a container application deployment device provided in an embodiment of the present application;

[0035] Figure 7 A schematic diagram of the structure of a container application packaging device provided in an embodiment of the present application;

[0036] Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0037] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the present application belong to the scope of protection of this application.

[0038] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0039] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0040] The word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

[0041] In related technologies, the application data required for container applications during deployment generally includes container images. Container images may be lost or maliciously tampered with during the transmission process, which makes it impossible to effectively guarantee the integrity and security of application data, affecting the normal deployment and operation of container applications.

[0042] In view of this, the present application provides a new idea. In order to facilitate the understanding of the present application, the system architecture on which the present application is based is first described. Figure 1 An exemplary system architecture to which the embodiments of the present application can be applied is shown. Figure 1 As shown in , the system architecture may include: a user terminal and a server.

[0043] Among them, the container application packaging device of the user terminal can adopt the container application packaging method provided in the embodiment of the present application to generate an application data packet of the container application.

[0044] The user terminal can exchange information with the server through the network. Specifically, the user terminal can upload the application data packet of the container application to the server.

[0045] The container application deployment device of the user terminal can adopt the container application deployment method provided in the embodiment of the present application, obtain the application data packet from the server, perform deployment operations based on the application data packet, and realize the deployment of the container application.

[0046] The above-mentioned user terminals may include, but are not limited to, such as: smart mobile terminals, smart home devices, wearable devices, smart medical devices, PC (Personal Computer), etc. Among them, smart mobile devices may include, for example, mobile phones, tablet computers, laptop computers, PDAs (Personal Digital Assistants), Internet cars, etc. Smart home devices may include smart home appliances, such as smart TVs, smart refrigerators, and other home appliances with video playback functions. Wearable devices may include, for example, smart watches, smart glasses, smart bracelets, VR (Virtual Reality) devices, AR (Augmented Reality), mixed reality devices (i.e., devices that can support virtual reality and augmented reality), etc.

[0047] The server side can set up an independent server to receive and store application data packets, or a cloud server or server group to receive and store application data packets. Cloud server, also known as cloud computing server or cloud host, is a host product in the cloud computing service system to solve the defects of difficult management and weak service scalability in traditional physical host and virtual private server (VPS) services.

[0048] It should be understood that Figure 1 The number of user terminals, container application deployment devices, and container application packaging devices in the embodiment is only illustrative. According to the implementation requirements, there may be any number of user terminals, container application deployment devices, and container application packaging devices.

[0049] Figure 2 A schematic diagram of a process flow of a container application deployment method provided by an embodiment of the present application is shown. The method can be Figure 1 The container application deployment device in the system shown is executed. Figure 2 As shown, the method may mainly include:

[0050] Step S210: Acquire an application data packet of the target container application, where the application data packet includes a container image file, a data packet description file, and a data packet verification file of the target container application;

[0051] Step S220: verifying the container image file and the data packet description file based on the data packet verification file to obtain a verification result;

[0052] Step S230: Execute a deployment operation on the target container application based on the verification result.

[0053] The target container application is a container application that currently needs to be deployed, and an application data packet corresponding to the target container application can be obtained, and the application data packet includes data required for deploying the target container application.

[0054] In the embodiment of the present application, the application data packet may include a container image file, a data packet description file, and a data packet verification file of the target container application. Among them, the container image file is the basic data for deploying the target container application. The data packet description file is used to describe the characteristics of the application data packet from multiple dimensions. The data packet verification file is used to perform integrity and security verification on the container image file and the data packet description file.

[0055] As an example, when the target container application needs to be deployed, the user can initiate a deployment command for the target container application. The device executing the container application deployment method can obtain the file path of the application data packet corresponding to the target container application, and search and load the application data packet corresponding to the target container application based on the file path.

[0056] In the embodiment of the present application, integrity and security checks are performed on the container image file and the data packet description file based on the data packet verification file, which can ensure the integrity and security of the application data packet, and then the deployment operation of the target container application is performed based on the verification result, which can effectively ensure the normal deployment and operation of the target container application.

[0057] As an example, when the verification result is passed, that is, the container image file and the data packet description file have passed the integrity and security verification, the target container application can be deployed based on the container image file.

[0058] The method provided in the embodiment of the present application obtains the application data packet of the target container application, which includes the container image file, data packet description file and data packet verification file of the target container application, thereby verifying the container image file and the data packet description file based on the data packet verification file, obtaining the verification result, and performing the deployment operation on the target container application based on the verification result. In this solution, by performing integrity and security verification on the application data packet of the container application, the integrity and security of the application data are effectively guaranteed, thereby ensuring the normal deployment and operation of the container application.

[0059] In an optional manner of the embodiment of the present application, the data packet verification file is obtained by signing based on a preset private key, and the container image file and the data packet description file are verified based on the data packet verification file to obtain a verification result, including:

[0060] Decrypting the data packet verification file based on the public key corresponding to the private key to obtain a first information summary;

[0061] Based on a preset information digest algorithm, information digest operations are performed on the container image file and the data packet description file respectively to obtain a second information digest;

[0062] In response to the first information digest being consistent with the second information digest, determining that the verification result is a successful verification;

[0063] In response to the first information digest being inconsistent with the second information digest, determining that the verification result is a verification failure.

[0064] In the embodiment of the present application, the data packet verification file is generated when the application data of the target container application is packaged. When generating the data packet verification file, the container image file and the data packet description file can be subjected to information summary operation to obtain a first information summary, and then the first information summary is signed by a preset private key to generate the data packet verification file.

[0065] When verification is performed based on the data packet verification file, the data packet verification file can be decrypted based on the public key corresponding to the private key to obtain a first information digest, and information digest operations are performed on the container image file and the data packet description file based on the above-mentioned information digest algorithm to obtain a second information digest.

[0066] In the embodiment of the present application, a consistency comparison between the first information digest and the second information digest may be performed on the container image file and the data packet description file, respectively, to determine a verification result.

[0067] Specifically, when the first information digest and the second information digest of each file in the container image file and the data packet description file are consistent, the verification result can be determined to be a successful verification. When there are files in the container image file and the data packet description file whose corresponding first information digest and the second information digest are inconsistent, the verification result can be determined to be a failed verification.

[0068] In an optional manner of an embodiment of the present application, the public key is pre-stored in a read-only storage area of ​​the current system.

[0069] In the embodiment of the present application, the target container application is deployed in the current system. By pre-selecting and storing the public key in the read-only storage area of ​​the current system, the public key can be prevented from being tampered with, the security of the public key is guaranteed, and thus the validity of the verification based on the public key is guaranteed.

[0070] In an optional manner of the embodiment of the present application, the data packet description file includes at least one of the following:

[0071] The property description file of the target container application;

[0072] A container application dependency description file of a target container application, where the container application dependency description file is used to indicate a first container application and a second container application, where the first container application is a container application on which the target container application depends, and the second container application is a container application that conflicts with the target container application;

[0073] A system interface dependency description file of the target container application, where the system interface dependency description file is used to indicate a first application interface on which the target container application depends;

[0074] The deployment script file of the target container application implements system configuration operations related to the target container application when the deployment script file is executed.

[0075] In an embodiment of the present application, the property description file may include some property information of the target container application, including but not limited to the application identifier of the target container application, the version number of the target container application, the functional description of the target container application, the authorization information (such as a certificate) of the developer of the target container application, and the system compatibility information of the target container application.

[0076] The attribute description file can realize a multi-dimensional description of the target container application attributes. By verifying the integrity and security of the attribute description file, the authenticity and accuracy of the target container application attributes can be guaranteed, providing a basis for subsequent operations based on the target container application attributes.

[0077] In the embodiment of the present application, the dependency description file indicates the first container application on which the target container application depends and the second container application that conflicts with the target container application.

[0078] As an example, the dependency description file may also specify version numbers of the first container application and the second container application.

[0079] By verifying the integrity and security of the dependency description file, the authenticity and accuracy of the first container application on which the target container application depends and the second container application that conflicts with the target container application can be guaranteed, providing a basis for subsequent operations based on the dependency relationship between the target container application and other applications.

[0080] In the embodiment of the present application, the system interface dependency description file indicates the first application interface that the target container application depends on. By verifying the integrity and security of the system interface dependency description file, the authenticity and accuracy of the target container application's application interface requirement information can be guaranteed, providing a basis for subsequent operations based on the application interface requirement information of the target container application.

[0081] As an example, the system interface dependency description file may be Franca Interface Definition Language (Franca IDL).

[0082] In an embodiment of the present application, for a current system in which a target container application is deployed, a user may need to perform some system configuration operations related to the target container application, and a script may be created for these system configuration operations, that is, a deployment script file is obtained.

[0083] By verifying the integrity and security of the deployment script file, the authenticity and accuracy of the system configuration operations related to the target container application can be guaranteed, providing a basis for achieving system configuration that meets the user's wishes and ensuring the normal operation of the target container application.

[0084] As an example, the system configuration operation may include multiple items, and each system configuration operation is triggered to be executed at a specific triggering time.

[0085] For example, system configuration operations may include clearing or creating a specified directory before the target container application is installed, enabling specific permissions for the target container application after the target container application is installed, detecting whether the target container application is being used by other users before the target container application is uninstalled, and clearing system cache garbage or temporary directories generated by the target container application after the target container application is uninstalled.

[0086] As an example, the system configuration operation may include multiple items, and each system configuration operation may be executed sequentially according to a specific preset order. The script execution order of each system configuration operation corresponding to the deployment script file may be set according to the preset order. The script execution order may be packaged into the application data package in the form of a parameter file, and the parameter file may be verified in the manner of the deployment script file to ensure its integrity and security, thereby ensuring the accuracy of the order of the system configuration operations.

[0087] In an optional manner of the embodiment of the present application, in response to the verification result being a successful verification, the data packet description file includes a container application dependency description file, and a deployment operation on the target container application is performed based on the verification result, including:

[0088] Get the deployed container applications in the current system;

[0089] Determine whether the deployed container application includes a second container application;

[0090] In response to the deployed container application including the second container application, terminating the deployment operation on the target container application;

[0091] In response to the fact that the second container application is not included in the deployed container application, determining whether the deployed container application includes all the first container applications; in response to the fact that the deployed container application includes all the first container applications, performing a deployment operation on the target container application; in response to the fact that the deployed container application does not include all the first container applications, performing a deployment operation on the supplementary container application and the target container application, the supplementary container application being the first container application not included in the deployed container application.

[0092] In the embodiment of the present application, based on the verification performed on the data verification file, when the verification result is successful, a container application dependency check may also be performed on the target container application.

[0093] Specifically, the first container application on which the target container application depends and the second container application that conflicts with the target container application may be determined based on the container application dependency description file in the application data packet.

[0094] The deployed container application that has been deployed in the current system is obtained, and according to the fact that the deployed container application includes the first container application and the second container application, a deployment operation is performed on the target application.

[0095] When the deployed container application includes a second container application that conflicts with the target container application, the target container application cannot be normally deployed and run in the current system, and the deployment operation of the target container application can be terminated at this time;

[0096] When the deployed container application does not contain the second container application that conflicts with the target container application, it can be determined whether the deployed container application includes all the first container applications. If the deployed container application already includes all the first container applications, that is, all the container applications that the target container application depends on have been deployed in the current system, then the deployment operation of the target container application can be performed. If the deployed container application does not include all the first container applications, that is, the container applications that the target container application depends on have not been fully deployed in the current system, the first container application that has not been deployed can be recorded as a supplementary container application, and the supplementary container application can be deployed together with the target container application.

[0097] In an optional manner of the embodiment of the present application, performing a deployment operation on the supplementary container application includes:

[0098] Obtain a first file path of an application data packet of a target container application;

[0099] Determine each parent file path of the first file path analysis;

[0100] In response to the existence of a second file path in the upper-level file path, an application data packet of the supplementary container application is obtained based on the second file path, and a deployment operation of the supplementary container application is performed based on the application data packet of the supplementary container application, where the second file path is the file path of the application data packet of the supplementary container application.

[0101] In the embodiment of the present application, the first file path is a storage path of an application data packet of the target container application. The application data packet of the target container application can be searched based on the first file path.

[0102] The parent file path is a file path of one level or multiple levels above the application data packet of the target container application.

[0103] As an example, the first file path is \a\b\c\d, and the parent file paths of the first file path include \a\b\c\, \a\b and a\.

[0104] The application data package of the container application that the target container application depends on may exist in its parent file path and be named with the identifier of the container application. Therefore, the supplementary container application can be found based on the parent file path.

[0105] Specifically, the file names of files at each level can be obtained according to the upper-level file path, and by determining whether the file names of files at each level match the supplementary container application, it can be determined whether the upper-level file path contains the second file path, that is, whether it contains the file path of the application data packet of the supplementary container application.

[0106] When the second file path exists in the upper-level file path, the second file path may be searched to obtain the application data packet of the supplementary container application, thereby performing a deployment operation on the supplementary container application.

[0107] In an optional manner of the embodiment of the present application, in response to the verification result being a successful verification, the data packet description file includes a system interface dependency description file, and a deployment operation of the target container application is performed based on the verification result, including:

[0108] Obtain a second application interface provided in the current system;

[0109] In response to the second application interface including the first application interface, or the second application interface including an application interface compatible with the first application interface, a deployment operation on the target container application is performed.

[0110] In the embodiment of the present application, based on the verification performed on the data verification file, when the verification result is successful, an interface dependency check may also be performed on the target container application.

[0111] Specifically, the second application interface is all the application interfaces provided by the current system. The first application interface is the first application interface on which the target container application depends. When the second application interface provided by the current system includes all the first application interfaces, or when the second application interface provided by the current system includes all the compatible application interfaces of the first application interface, it means that the application interface provided by the current system can meet the interface requirements of the target container application for the application interface, that is, it has passed the interface dependency check, and the deployment operation of the target container application can be performed at this time. Correspondingly, when the second application interface provided by the current system cannot include all the first application interfaces, or when the second application interface provided by the current system cannot include all the compatible application interfaces of the first application interface, it means that the application interface provided by the current system cannot meet the interface requirements of the target container application for the application interface, that is, it has not passed the interface dependency check, and the deployment operation of the target container application can be terminated at this time.

[0112] After the target container application is deployed, the application interface provided by the target container application will also be added to the second application interface, and subsequently deployed applications can call the application interface provided by the target container application as needed.

[0113] In an optional manner of the embodiment of the present application, after the target container application is deployed, the method further includes:

[0114] receiving an uninstall instruction for a container application to be uninstalled, where the container application to be uninstalled is a container application other than a target container application deployed in the current system;

[0115] Determine whether the container application to be uninstalled belongs to the first container application;

[0116] In response to the container application to be uninstalled belonging to the first container application, terminating the uninstallation operation on the container application to be uninstalled;

[0117] In response to the to-be-uninstalled container application not belonging to the first container application, an uninstall operation is performed on the to-be-uninstalled container application.

[0118] In the embodiment of the present application, after the target container application is deployed, if an uninstall instruction for the container application to be uninstalled is received, it can be determined whether the container application to be uninstalled belongs to the first container application that the target container application depends on.

[0119] When the container application to be uninstalled belongs to the first container application, that is, when the application to be uninstalled is the container application on which the target container application depends, in order to ensure the normal operation of the target container application, the uninstallation operation of the container application to be uninstalled may be terminated.

[0120] When the container application to be uninstalled does not belong to the first container application, that is, when the application to be uninstalled is not the container application on which the target container application depends, uninstalling the container application to be uninstalled will not affect the normal operation of the target container application, so the uninstallation operation of the container application to be uninstalled can be performed.

[0121] In an optional manner of the embodiment of the present application, after the target container application is deployed, the method further includes:

[0122] receiving an uninstall instruction for a container application to be uninstalled, where the container application to be uninstalled is a container application other than a target container application deployed in the current system;

[0123] Determine whether the application interface provided by the container application to be uninstalled belongs to the first application interface;

[0124] In response to the application interface provided by the container application to be uninstalled belonging to the first application interface, terminating the uninstallation operation on the container application to be uninstalled;

[0125] In response to the application interface provided by the to-be-uninstalled container application not belonging to the first application interface, an uninstall operation is performed on the to-be-uninstalled container application.

[0126] In the embodiment of the present application, after the target container application is deployed, if an uninstall instruction for the container application to be uninstalled is received, it can be determined whether the container application to be uninstalled belongs to the application interface provided by the target container application and whether it is the first application interface that the target container application depends on.

[0127] When the application interface provided by the container application to be uninstalled belongs to the first application interface, that is, the application interface provided by the application to be uninstalled is relied upon by the target container application, the uninstallation operation of the container application to be uninstalled may be terminated to ensure the normal operation of the target container application.

[0128] When the application interface provided by the container application to be uninstalled does not belong to the first application interface, that is, the application interface provided by the application to be uninstalled is not relied upon by the target container application, uninstalling the container application to be uninstalled will not affect the normal operation of the target container application, so the uninstallation operation of the container application to be uninstalled can be performed.

[0129] As an example, Figure 3 It is a flowchart of a specific implementation method of the container application deployment method provided in an embodiment of the present application.

[0130] like Figure 3As shown in , when a deployment command of a container application is detected, it can be determined whether a search path of the deployed container application is passed in. If a search path is passed in, the search path can be used as the file path of the application data packet of the deployed container application. If no search path is passed in, the default path can be used as the file path of the application data packet of the deployed container application. The file path can then be converted into the actual path of the application data packet.

[0131] In this example, multiple target container applications can be deployed in batches.

[0132] When searching for an application data package based on the actual path, if the application data package does not exist, subsequent deployment operations cannot be performed, and the deployment can be judged to have failed. If the application data package exists, the application data package can be parsed.

[0133] When the application data package fails to be parsed, subsequent deployment operations cannot be performed, and it can be judged that the deployment has failed. After the application data package is parsed successfully, verification can be performed based on the data verification file in the application data package to obtain the verification result.

[0134] If the verification result is Failed, it means that the integrity and security of the application data package cannot be guaranteed, and it can be judged as a deployment failure. If the verification result is Passed, it means that the integrity and security of the application data package can be effectively guaranteed, and it can be judged whether the system architecture check has passed.

[0135] The system architecture check determines whether the system architecture of the current system matches the container application to be deployed. If they do not match, subsequent deployment operations cannot be performed and the deployment can be considered a failure. If they match, it can be determined whether the installation path has been passed in.

[0136] If no installation path is passed in, the default installation path can be used, and the working path can be determined based on the system architecture and the default installation path. If an installation path is passed in, the working path can be determined based on the system architecture and the passed in installation path.

[0137] After determining the working path, the deployed container applications in the current system can be read, and container application dependency verification can be performed based on the deployed container applications and the dependent container applications.

[0138] As an example, the deployed application can be read using OpenWrt's package management system (Open / OpenWrt Package, OPKG). OPKG is a lightweight and fast package management system that can be used to manage the download, installation, upgrade, uninstallation and query of software packages.

[0139] Container application dependency verification can be performed based on the package manager Libsolv. Libsolv is an open source library for resolving package dependencies and can provide flexible and efficient algorithms to handle dependencies.

[0140] If the dependency check fails, the deployment can be considered a failure. If the container dependency check passes, the application interface provided by the system can be read.

[0141] Interface dependency verification is performed based on the application interface provided by the system and the application interface that the container depends on.

[0142] If the interface dependency check fails, it means that the interface provided by the system cannot meet the requirements of the container application, and the deployment can be judged as a failure. If the interface dependency check passes, it means that the interface provided by the system can meet the requirements of the container application, and the container application can be installed or updated.

[0143] In this example, an update command for the container application is detected, and it can be determined whether the "-f" command is passed in. The "-f" command" represents forced copying. Even if the target file already exists, it will be directly overwritten without prompting. When the "-f" command is not passed in, it can be determined that the deployment has failed. When the "-f" command is passed in, it can be determined whether the container application to be updated has multiple different versions installed. If the container application has multiple different versions installed, you can uninstall the installed version first and then update the application. If the container application does not have multiple different versions installed, you can directly update the application.

[0144] As an example, Figure 4 It is a schematic diagram of the process of uninstalling a container application in an embodiment of the present application.

[0145] like Figure 4 As shown in , when the uninstall command of the container application is detected, the deployed container application is read. The container application to be uninstalled is subjected to container application dependency parsing and application interface dependency parsing. When the parsing result of the container application dependency parsing is parsing failure, and / or the parsing result of the application interface dependency parsing is parsing failure, the container application to be uninstalled is now dependent on the target container application, and / or, it indicates that the application interface provided by the container application to be uninstalled is dependent on the target container application. Therefore, the container application to be uninstalled cannot be uninstalled, and it can be judged as an uninstallation failure. When the parsing result of the container application dependency parsing is parsing success, and the parsing result of the application interface dependency parsing is parsing success, it indicates that the container application to be uninstalled is not dependent on the target container application, and the application interface provided by the container application to be uninstalled is not dependent on the target container application. At this time, it can be further determined whether the container application to be uninstalled is installed using the container application management tool.

[0146] If the container application to be uninstalled is not installed by using the container application management tool, the software package management tool can be called to uninstall it. For example, OPKG is called to uninstall the container application to be uninstalled.

[0147] If the container application to be uninstalled is installed by using a container application management tool, it can be determined whether the container application to be uninstalled is a system application.

[0148] If the container application to be uninstalled is not a system application, the uninstall operation can be performed, including removing verification files, removing data files, and removing directories.

[0149] If the container application to be uninstalled is a system application, it can be determined whether the "-f" command is passed in. If the "-f" command is not passed in, it can be determined that the uninstallation failed. If the "-f" command is passed in, the uninstallation operation can be performed, including removing verification files, removing data files, and removing directories.

[0150] Figure 5 A schematic diagram of a process flow of a container application packaging method provided by an embodiment of the present application is shown. The method can be Figure 1 The container application packaging device in the system shown is executed. Figure 5 As shown, the method may mainly include:

[0151] Step S510: Obtain the container image file and data packet description file of the target container application;

[0152] Step S520: Generate a container image file and a data packet verification file of the data packet description file;

[0153] Step S530: Pack the container image file, the data packet description file, and the data packet verification file into an application data packet of the target container application.

[0154] The target container application is the container application that needs to be packaged currently, and the data required for the deployment of the target container application is packaged to obtain an application data packet corresponding to the target container application. The deployment operation of the target container application can be performed based on the application data packet.

[0155] In the embodiment of the present application, the container image file is the basic data used to deploy the target container application. The data packet description file is used to describe the characteristics of the application data packet from multiple dimensions.

[0156] By generating a data packet verification file, when performing a deployment operation of a target container application based on an application data packet, integrity and security verification can be performed on the container image file and the data packet description file based on the data packet verification file.

[0157] In the embodiment of the present application, integrity and security checks are performed on the container image file and the data packet description file based on the data packet verification file, which can ensure the integrity and security of the application data packet, and then the deployment operation of the target container application is performed based on the verification result, which can effectively ensure the normal deployment and operation of the target container application.

[0158] As an example, when the verification result is passed, that is, the container image file and the data packet description file have passed the integrity and security verification, the target container application can be deployed based on the container image file.

[0159] The method provided in the embodiment of the present application obtains the container image file and the data packet description file of the target container application, generates the data packet verification file of the container image file and the data packet description file, and packages the container image file, the data packet description file and the data packet verification file into the application data packet of the target container application. When the container application is deployed based on the application data packet provided by this solution, the integrity and security of the application data packet can be verified, effectively ensuring the integrity and security of the application data, thereby ensuring the normal deployment and operation of the container application.

[0160] In an optional manner of an embodiment of the present application, generating a data packet verification file of a container image file and a data packet description file includes:

[0161] Based on a preset information digest algorithm, perform information digest operation on the container image file and the data packet description file to obtain a first information digest;

[0162] The first information summary is signed based on a preset private key to obtain a data packet verification file.

[0163] In an embodiment of the present application, when generating a data packet verification file, an information summary operation can be performed on the container image file and the data packet description file to obtain a first information summary, and then the first information summary is signed using a preset private key to generate a data packet verification file.

[0164] When verification is performed based on the data packet verification file, the data packet verification file can be decrypted based on the public key corresponding to the private key to obtain a first information digest, and information digest operations are performed on the container image file and the data packet description file based on the above-mentioned information digest algorithm to obtain a second information digest.

[0165] In the embodiment of the present application, a consistency comparison between the first information digest and the second information digest may be performed on the container image file and the data packet description file, respectively, to determine a verification result.

[0166] In an optional manner of the embodiment of the present application, the data packet description file includes at least one of the following:

[0167] The property description file of the target container application;

[0168] A container application dependency description file of a target container application, where the container application dependency description file is used to indicate a first container application and a second container application, where the first container application is a container application on which the target container application depends, and the second container application is a container application that conflicts with the target container application;

[0169] A system interface dependency description file of the target container application, where the system interface dependency description file is used to indicate a first application interface on which the target container application depends;

[0170] The deployment script description file of the target container application. When the deployment script file is executed, it implements the specified configuration operation on the target container application.

[0171] In an embodiment of the present application, the property description file may include some property information of the target container application, including but not limited to the application identifier of the target container application, the version number of the target container application, the functional description of the target container application, the authorization information (such as a certificate) of the developer of the target container application, and the system compatibility information of the target container application.

[0172] The attribute description file can realize a multi-dimensional description of the target container application attributes. By verifying the integrity and security of the attribute description file, the authenticity and accuracy of the target container application attributes can be guaranteed, providing a basis for subsequent operations based on the target container application attributes.

[0173] In the embodiment of the present application, the dependency description file indicates the first container application on which the target container application depends and the second container application that conflicts with the target container application.

[0174] As an example, the dependency description file may also specify version numbers of the first container application and the second container application.

[0175] By verifying the integrity and security of the dependency description file, the authenticity and accuracy of the first container application on which the target container application depends and the second container application that conflicts with the target container application can be guaranteed, providing a basis for subsequent operations based on the dependency relationship between the target container application and other applications.

[0176] In the embodiment of the present application, the system interface dependency description file indicates the first application interface that the target container application depends on. By verifying the integrity and security of the system interface dependency description file, the authenticity and accuracy of the target container application's application interface requirement information can be guaranteed, providing a basis for subsequent operations based on the application interface requirement information of the target container application.

[0177] In an embodiment of the present application, for a current system in which a target container application is deployed, a user may need to perform some system configuration operations related to the target container application, and a script may be created for these system configuration operations, that is, a deployment script file is obtained.

[0178] By verifying the integrity and security of the deployment script file, the authenticity and accuracy of the system configuration operations related to the target container application can be guaranteed, providing a basis for achieving system configuration that meets the user's wishes and ensuring the normal operation of the target container application.

[0179] As an example, the system configuration operation may include multiple items, and each system configuration operation is triggered to be executed at a specific triggering time.

[0180] For example, system configuration operations may include clearing or creating a specified directory before the target container application is installed, enabling specific permissions for the target container application after the target container application is installed, detecting whether the target container application is being used by other users before the target container application is uninstalled, and clearing system cache garbage or temporary directories generated by the target container application after the target container application is uninstalled.

[0181] As an example, the system configuration operation may include multiple items, and each system configuration operation may be executed sequentially according to a specific preset order. The script execution order of each system configuration operation corresponding to the deployment script file may be set according to the preset order. The script execution order may be packaged into the application data package in the form of a parameter file, and the parameter file may be verified in the manner of the deployment script file to ensure its integrity and security, thereby ensuring the accuracy of the order of the system configuration operations.

[0182] Based on Figure 2 The same principle as shown in the method, Figure 6 A schematic diagram of the structure of a container application deployment device provided in an embodiment of the present application is shown. Figure 6 As shown, the container application deployment device 60 may include:

[0183] An application data packet acquisition module 610 is used to acquire an application data packet of a target container application, where the application data packet includes a container image file, a data packet description file, and a data packet verification file of the target container application;

[0184] A verification module 620 is used to verify the container image file and the data packet description file based on the data packet verification file to obtain a verification result;

[0185] The deployment module 630 is used to perform a deployment operation on the target container application based on the verification result.

[0186] The device provided in the embodiment of the present application obtains the application data packet of the target container application, which includes the container image file, data packet description file and data packet verification file of the target container application, thereby verifying the container image file and the data packet description file based on the data packet verification file, obtaining the verification result, and performing the deployment operation on the target container application based on the verification result. In this solution, by performing integrity and security verification on the application data packet of the container application, the integrity and security of the application data are effectively guaranteed, thereby ensuring the normal deployment and operation of the container application.

[0187] Optionally, the data packet verification file is obtained by signing based on a preset private key, and the verification module is specifically used for:

[0188] Decrypting the data packet verification file based on the public key corresponding to the private key to obtain a first information summary;

[0189] Based on a preset information digest algorithm, information digest operations are performed on the container image file and the data packet description file respectively to obtain a second information digest;

[0190] In response to the first information digest being consistent with the second information digest, determining that the verification result is a successful verification;

[0191] In response to the first information digest being inconsistent with the second information digest, determining that the verification result is a verification failure.

[0192] Optionally, the public key is stored in a read-only storage area of ​​the current system.

[0193] Optionally, the data packet description file includes at least one of the following:

[0194] The property description file of the target container application;

[0195] A container application dependency description file of a target container application, where the container application dependency description file is used to indicate a first container application and a second container application, where the first container application is a container application on which the target container application depends, and the second container application is a container application that conflicts with the target container application;

[0196] A system interface dependency description file of the target container application, where the system interface dependency description file is used to indicate a first application interface on which the target container application depends;

[0197] The deployment script file of the target container application implements system configuration operations related to the target container application when the deployment script file is executed.

[0198] Optionally, in response to the verification result being a successful verification, the data packet description file includes a container application dependency description file, and the deployment module is specifically used to:

[0199] Get the deployed container applications in the current system;

[0200] Determine whether the deployed container application includes a second container application;

[0201] In response to the deployed container application including the second container application, terminating the deployment operation on the target container application;

[0202] In response to the fact that the second container application is not included in the deployed container application, determining whether the deployed container application includes all the first container applications; in response to the fact that the deployed container application includes all the first container applications, performing a deployment operation on the target container application; in response to the fact that the deployed container application does not include all the first container applications, performing a deployment operation on the supplementary container application and the target container application, the supplementary container application being the first container application not included in the deployed container application.

[0203] Optionally, when performing a deployment operation on the supplementary container application, the deployment module is specifically configured to:

[0204] Obtain a first file path of an application data packet of a target container application;

[0205] Determine each parent file path of the first file path analysis;

[0206] In response to the existence of a second file path in the upper-level file path, an application data packet of the supplementary container application is obtained based on the second file path, and a deployment operation of the supplementary container application is performed based on the application data packet of the supplementary container application, where the second file path is the file path of the application data packet of the supplementary container application.

[0207] Optionally, in response to the verification result being a successful verification, the data packet description file includes a system interface dependency description file, and the deployment module is specifically used to:

[0208] Obtain a second application interface provided in the current system;

[0209] In response to the second application interface including the first application interface, or the second application interface including an application interface compatible with the first application interface, a deployment operation on the target container application is performed.

[0210] Optionally, the above device further includes an uninstall verification module, and the uninstall verification module is used to:

[0211] After the target container application is deployed, an uninstall instruction for the container application to be uninstalled is received, where the container application to be uninstalled is a container application other than the target container application deployed in the current system;

[0212] Determine whether the container application to be uninstalled belongs to the first container application;

[0213] In response to the container application to be uninstalled belonging to the first container application, terminating the uninstallation operation on the container application to be uninstalled;

[0214] In response to the to-be-uninstalled container application not belonging to the first container application, an uninstall operation is performed on the to-be-uninstalled container application.

[0215] Based on Figure 5 The same principle as shown in the method, Figure 7 A schematic diagram of the structure of a container application packaging device provided in an embodiment of the present application is shown. Figure 7 As shown, the container application packaging device 70 may include:

[0216] A file acquisition module 710, used to acquire a container image file and a data packet description file of a target container application;

[0217] Verification data generation module 720, used to generate a data packet verification file for a container image file and a data packet description file;

[0218] The application packaging module 730 is used to package the container image file, the data packet description file and the data packet verification file into an application data packet of the target container application.

[0219] The device provided in the embodiment of the present application obtains the container image file and the data packet description file of the target container application, generates the data packet verification file of the container image file and the data packet description file, and packages the container image file, the data packet description file and the data packet verification file into the application data packet of the target container application. When the container application is deployed based on the application data packet provided by this solution, the integrity and security of the application data packet can be verified, effectively ensuring the integrity and security of the application data, thereby ensuring the normal deployment and operation of the container application.

[0220] Optionally, the verification data generation module is specifically used for:

[0221] Based on a preset information digest algorithm, perform information digest operation on the container image file and the data packet description file to obtain a first information digest;

[0222] The first information summary is signed based on a preset private key to obtain a data packet verification file.

[0223] Optionally, the data packet description file includes at least one of the following:

[0224] The property description file of the target container application;

[0225] A container application dependency description file of a target container application, where the container application dependency description file is used to indicate a first container application and a second container application, where the first container application is a container application on which the target container application depends, and the second container application is a container application that conflicts with the target container application;

[0226] A system interface dependency description file of the target container application, where the system interface dependency description file is used to indicate a first application interface on which the target container application depends;

[0227] The deployment script description file of the target container application. When the deployment script file is executed, it implements the specified configuration operation on the target container application.

[0228] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can refer to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can refer to the partial description of the method embodiment. The device embodiment described above is only schematic, in which the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.

[0229] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0230] An embodiment of the present application further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of any one of the method embodiments described above.

[0231] Compared with the prior art, the computer-readable storage medium provided in the embodiment of the present application obtains the application data packet of the target container application, which includes the container image file, data packet description file and data packet verification file of the target container application, thereby verifying the container image file and the data packet description file based on the data packet verification file, obtaining the verification result, and performing the deployment operation on the target container application based on the verification result. In this solution, by performing integrity and security verification on the application data packet of the container application, the integrity and security of the application data are effectively guaranteed, thereby ensuring the normal deployment and operation of the container application.

[0232] The present application also provides an electronic device, including:

[0233] one or more processors; and

[0234] A memory associated with the one or more processors, the memory being used to store program instructions, which, when read and executed by the one or more processors, executes the steps of any one of the method embodiments described above.

[0235] Compared with the prior art, the electronic device provided by the embodiment of the present application obtains the application data packet of the target container application, which includes the container image file, data packet description file and data packet verification file of the target container application, thereby verifying the container image file and the data packet description file based on the data packet verification file, obtaining the verification result, and performing the deployment operation on the target container application based on the verification result. In this solution, by performing integrity and security verification on the application data packet of the container application, the integrity and security of the application data are effectively guaranteed, thereby ensuring the normal deployment and operation of the container application.

[0236] As an example, Figure 8 A schematic diagram of the structure of an electronic device applicable to the embodiment of the present application is shown. Figure 8 As shown, the electronic device 2000 includes: a processor 2001 and a memory 2003. The processor 2001 and the memory 2003 are connected, such as through a bus 2002. Optionally, the electronic device 2000 may also include a transceiver 2004. It should be noted that in actual applications, the transceiver 2004 is not limited to one, and the structure of the electronic device 2000 does not constitute a limitation on the embodiments of the present application.

[0237] The processor 2001 is applied in the embodiment of the present application to implement the method shown in the above method embodiment. The transceiver 2004 may include a receiver and a transmitter. The transceiver 2004 is applied in the embodiment of the present application to implement the function of the electronic device of the embodiment of the present application communicating with other devices when executed.

[0238] Processor 2001 may be a CPU (Central Processing Unit), a general purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. Processor 2001 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0239] The bus 2002 may include a path to transmit information between the above components. The bus 2002 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus 2002 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 8 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0240] The memory 2003 can be a ROM (Read Only Memory) or other types of static storage devices that can store static information and instructions, a RAM (Random Access Memory) or other types of dynamic storage devices that can store information and instructions, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to these.

[0241] Optionally, the memory 2003 is used to store application code for executing the solution of the present application, and the execution is controlled by the processor 2001. The processor 2001 is used to execute the application code stored in the memory 2003 to implement the steps of any one of the methods in the aforementioned method embodiments.

[0242] The present application also provides a computer program product, including a computer program, which implements the steps of any one of the methods in the aforementioned method embodiments when executed by a processor.

[0243] Compared with the prior art, the computer program product provided in the embodiment of the present application obtains the application data packet of the target container application, which includes the container image file, data packet description file and data packet verification file of the target container application, thereby verifying the container image file and data packet description file based on the data packet verification file to obtain the verification result, and performing the deployment operation of the target container application based on the verification result. In this solution, by performing integrity and security verification on the application data packet of the container application, the integrity and security of the application data are effectively guaranteed, thereby ensuring the normal deployment and operation of the container application.

[0244] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0245] The above descriptions are only some embodiments of the present invention. It should be pointed out that, for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A container application deployment method, characterized in that: include: Obtain an application data packet of a target container application, wherein the application data packet includes a container image file, a data packet description file, and a data packet verification file of the target container application; Verify the container image file and the data packet description file based on the data packet verification file to obtain a verification result; A deployment operation is performed on the target container application based on the verification result.

2. The method according to claim 1, characterized in that The data packet verification file is obtained by signing based on a preset private key, and the container image file and the data packet description file are verified based on the data packet verification file to obtain a verification result, including: Decrypting the data packet verification file based on the public key corresponding to the private key to obtain a first information summary; Based on a preset information digest algorithm, information digest operations are performed on the container image file and the data packet description file respectively to obtain a second information digest; In response to the first information digest being consistent with the second information digest, determining that the verification result is a verification success; In response to the first information digest being inconsistent with the second information digest, determining the verification result as verification failure.

3. The method according to claim 2, characterized in that The public key is stored in a read-only storage area of ​​the current system.

4. The method according to claim 1, characterized in that: The data packet description file includes at least one of the following: The property description file of the target container application; a container application dependency description file of the target container application, wherein the container application dependency description file is used to indicate a first container application and a second container application, wherein the first container application is a container application on which the target container application depends, and the second container application is a container application that conflicts with the target container application; A system interface dependency description file of the target container application, wherein the system interface dependency description file is used to indicate a first application interface on which the target container application depends; The deployment script file of the target container application, when the deployment script file is executed, implements system configuration operations related to the target container application.

5. The method according to claim 4, characterized in that In response to the verification result being a successful verification, the data packet description file includes the container application dependency description file, and the performing of the deployment operation on the target container application based on the verification result includes: Get the deployed container applications in the current system; Determine whether the deployed container application includes the second container application; In response to the deployed container application including the second container application, terminating the deployment operation on the target container application; In response to the deployed container application not including the second container application, determining whether the deployed container application includes all of the first container applications; in response to the deployed container application including all of the first container applications, performing a deployment operation on the target container application; in response to the deployed container application not including all of the first container applications, performing a deployment operation on a supplementary container application and the target container application, the supplementary container application being the first container application not included in the deployed container application.

6. The method according to claim 5, characterized in that Executing a deployment operation on the supplementary container application includes: Obtain a first file path of an application data packet of the target container application; Determine each parent file path of the first file path analysis; In response to the presence of a second file path in the upper-level file path, an application data packet of the supplementary container application is obtained based on the second file path, and a deployment operation of the supplementary container application is performed based on the application data packet of the supplementary container application, wherein the second file path is a file path of the application data packet of the supplementary container application.

7. The method according to claim 4, characterized in that In response to the verification result being a successful verification, the data packet description file includes the system interface dependency description file, and the performing of the deployment operation on the target container application based on the verification result includes: Obtain a second application interface provided in the current system; In response to the second application interface including the first application interface, or the second application interface including an application interface compatible with the first application interface, a deployment operation on the target container application is performed.

8. The method according to any one of claims 4 to 7, characterized in that: After the target container application is deployed, the method further includes: receiving an uninstall instruction for a container application to be uninstalled, where the container application to be uninstalled is a container application other than the target container application deployed in the current system; Determine whether the container application to be uninstalled belongs to the first container application; In response to the container application to be uninstalled belonging to the first container application, terminating the uninstallation operation on the container application to be uninstalled; In response to the to-be-uninstalled container application not belonging to the first container application, an uninstallation operation is performed on the to-be-uninstalled container application.

9. A container application packaging method, characterized in that: include: Obtain the container image file and data packet description file of the target container application; Generate a data packet verification file for the container image file and the data packet description file; The container image file, the data packet description file, and the data packet verification file are packaged into an application data packet of the target container application.

10. The method according to claim 9, characterized in that The step of generating the container image file and the data packet verification file of the data packet description file includes: Based on a preset information digest algorithm, perform information digest operation on the container image file and the data packet description file to obtain a first information digest; The first information summary is signed based on a preset private key to obtain a data packet verification file.

11. The method according to claim 9 or 10, characterized in that: The data packet description file includes at least one of the following: The property description file of the target container application; a container application dependency description file of the target container application, wherein the container application dependency description file is used to indicate a first container application and a second container application, wherein the first container application is a container application on which the target container application depends, and the second container application is a container application that conflicts with the target container application; A system interface dependency description file of the target container application, wherein the system interface dependency description file is used to indicate a first application interface on which the target container application depends; The deployment script description file of the target container application, when the deployment script file is executed, implements a specified configuration operation on the target container application.

12. A container application deployment device, characterized in that: include: An application data packet acquisition module, used to acquire an application data packet of a target container application, wherein the application data packet includes a container image file, a data packet description file, and a data packet verification file of the target container application; A verification module, used to verify the container image file and the data packet description file based on the data packet verification file to obtain a verification result; A deployment module is used to perform a deployment operation on the target container application based on the verification result.

13. A container application packaging device, characterized in that: include: A file acquisition module, used to obtain the container image file and data packet description file of the target container application; A verification data generation module, used to generate a data packet verification file for the container image file and the data packet description file; The application packaging module is used to package the container image file, the data packet description file and the data packet verification file into an application data packet of the target container application.

14. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method according to any one of claims 1 to 11 are implemented.

15. An electronic device, characterized in that: include: one or more processors; as well as A memory associated with the one or more processors, the memory being used to store program instructions, wherein the program instructions, when read and executed by the one or more processors, execute the steps of the method described in any one of claims 1 to 11.

16. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 11 are implemented.

Images