Operation system data protection method and device, equipment and storage medium

Abstract

The invention relates to the technical field of operating systems, and discloses an operating system data protection method, device and equipment and a storage medium, the method comprises the following steps: packaging a current linux system environment, and packaging an existing memory operating system manufacturing mode into software; based on the packaged software, the current operating system of the user is packaged, a linux memory operating system mirror image is regenerated, and the operating system is installed; after installation is completed, restarting is conducted, and dual systems are achieved and used for selecting the system needing to enter when the computer is started. The method is realized by utilizing a mechanism that the data of the linux memory operating system does not fall into a disk, a user can select a system starting mode according to different requirements, a data protection function is realized by switching the operating systems, the data consistency of the operating systems can be ensured, the stability of the system is ensured, and the state of the system is not easy to change.

Description

Technical Field

[0001] The present application relates to the field of operating system technology, for example, to an operating system data protection method, device, equipment and storage medium. Background Art

[0002] The memory operating system is a special operating system. Its main feature is that it does not rely on the hard disk after startup, but loads all files into the memory to run. This operating system runs very fast because the data reading and writing speed of the memory is much faster than that of the hard disk. In addition, since the operating system runs completely in the memory, it can effectively prevent attacks by viruses and malware, and better protect the core files of the system from being damaged. Even if the system disk is operated, these operations will be restored after restarting, thus ensuring the security of the system.

[0003] A dual-system computer is a computer device that can install multiple operating systems at the same time. Users can switch between different operating systems according to their needs. Different operating systems do not affect each other because they share the same physical hard disk and can achieve data intercommunication.

[0004] However, existing dual-system computers still have problems such as poor data consistency and system instability, which makes the system status easy to be changed.

[0005] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of this application. Summary of the invention

[0006] In order to provide a basic understanding of some aspects of the disclosed embodiments, a brief summary is given below. The summary is not an extensive review, nor is it intended to identify key / critical components or delineate the scope of protection of these embodiments, but rather serves as a prelude to the detailed description that follows.

[0007] The present disclosure provides a method for protecting operating system data, the method comprising:

[0008] Package the current Linux system environment and unify the existing memory operating system production steps into one software;

[0009] Based on the encapsulated software, the user's current operating system is packaged, a Linux memory operating system image is regenerated, and the operating system is installed;

[0010] After the system is installed and restarted, the computer will have dual systems, allowing the user to choose the system to enter when the computer starts.

[0011] In some embodiments, the method further comprises:

[0012] When the user chooses to start the memory operating system, shut down or restart the operating system after use;

[0013] Memory data is not written to disk, and all data changes are ineffective to achieve data protection.

[0014] In some embodiments, the method further comprises:

[0015] When the user chooses to start the physical operating system, shut down or restart the operating system after use;

[0016] The data is saved to disk and all data changes take effect.

[0017] In some embodiments, the current Linux system environment is packaged, and the existing memory operating system production method steps are packaged into a software, including:

[0018] Clean and update the system to ensure that the status meets the preset conditions;

[0019] Create and configure a base system image and install the target software package;

[0020] Test the image via QEMU / KVM or Docker to ensure it functions properly;

[0021] Package the image into a tar file or Docker image;

[0022] Write installation scripts for automated deployment and generate documentation to guide users in installation and usage.

[0023] In some embodiments, cleaning and updating the system to ensure that the status meets the preset conditions includes:

[0024] Identify unnecessary software, services, and configurations;

[0025] Disable unnecessary services, configure firewall rules, and update password policies;

[0026] Adjust kernel parameters, configure network settings, and set user permissions.

[0027] In some embodiments, based on the encapsulated software, the user's current operating system is packaged, a Linux memory operating system image is regenerated, and the operating system is installed, including:

[0028] Back up the current system and select a packaging tool;

[0029] Use the selected packaging tool to package the current system environment into an image file to generate a Linux memory operating system image;

[0030] Run the generated image in a test environment to ensure normal functionality and correct configuration;

[0031] Remove unnecessary files and dependencies to reduce image size and increase loading speed;

[0032] Deploy the Linux memory operating system image and set the necessary startup configuration;

[0033] Use the installer to install the Linux memory operating system image into the memory, or configure the system to boot from the memory.

[0034] The present disclosure provides an operating system data protection device, which includes:

[0035] The software generation module is used to package the current Linux system environment and unify the existing memory operating system production steps into one software;

[0036] The operating system installation module is used to package the user's current operating system based on the encapsulated software, regenerate a Linux memory operating system image, and install the operating system;

[0037] The restart module is used to restart the system after installation is complete, to implement dual systems so that the user can select the system to enter when the computer starts.

[0038] In some embodiments, the current Linux system environment is packaged, and the existing memory operating system production method steps are packaged into a software, including:

[0039] Clean and update the system to ensure that the status meets the preset conditions;

[0040] Create and configure a base system image and install the target software package;

[0041] Test the image via QEMU / KVM or Docker to ensure it functions properly;

[0042] Package the image into a tar file or Docker image;

[0043] Write installation scripts for automated deployment and generate documentation to guide users in installation and usage.

[0044] An embodiment of the present disclosure provides an electronic device, the device comprising at least one processor;

[0045] and a memory communicatively coupled to the at least one processor;

[0046] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the above-mentioned operating system data protection method.

[0047] The embodiment of the present disclosure provides a storage medium storing program instructions, which execute the above-mentioned operating system data protection method when running.

[0048] The operating system data protection method, apparatus, device, and storage medium provided by the embodiments of the present disclosure can achieve the following technical effects:

[0049] The operating system data protection method disclosed in the present disclosure is implemented by using the mechanism that the Linux memory operating system data is not stored on the disk. Users can choose to boot into different system modes according to their needs, and can selectively retain the modified content of this boot. In addition, the system startup mode can be selected according to different user needs, and the data protection function can be achieved by switching between operating systems. Therefore, the system can ensure the consistency of the operating system data while ensuring the stability of the system, and the system state is not easily changed.

[0050] The above general description and the following description are exemplary and explanatory only and are not intended to limit the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] One or more embodiments are exemplarily described by corresponding drawings, which do not limit the embodiments. Elements with the same reference numerals in the drawings are shown as similar elements, and the drawings do not constitute a scale limitation, and wherein:

[0052] Figure 1 It is a flowchart of an operating system data protection method provided by an embodiment of the present disclosure;

[0053] Figure 2 It is a flowchart of another operating system data protection method provided by an embodiment of the present disclosure;

[0054] Figure 3 It is a flowchart of a method for protecting operating system data at the software level provided by an embodiment of the present disclosure;

[0055] Figure 4 is a structural diagram of an operating system data protection device provided by an embodiment of the present disclosure;

[0056] Figure 5 It is a structural diagram of an operating system data protection device provided by an embodiment of the present disclosure. DETAILED DESCRIPTION

[0057] In order to be able to understand the features and technical contents of the embodiments of the present disclosure in more detail, the implementation of the embodiments of the present disclosure is described in detail below in conjunction with the accompanying drawings. The attached drawings are for reference only and are not used to limit the embodiments of the present disclosure. In the following technical description, for the convenience of explanation, a full understanding of the disclosed embodiments is provided through multiple details. However, one or more embodiments can still be implemented without these details. In other cases, to simplify the drawings, well-known structures and devices can be simplified for display.

[0058] The terms "first", "second", etc. in the embodiments of the present disclosure are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way can be interchanged where appropriate, so as to describe the embodiments of the present disclosure described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions.

[0059] Unless otherwise stated, the term "plurality" means two or more.

[0060] In the embodiment of the present disclosure, the character " / " indicates that the preceding and following objects are in an "or" relationship. For example, A / B indicates: A or B.

[0061] The term "and / or" is a description of the association relationship between objects, indicating that three relationships can exist. For example, A and / or B means: A or B, or, A and B.

[0062] The term "correspondence" may refer to an association relationship or a binding relationship. The correspondence between A and B means that there is an association relationship or a binding relationship between A and B.

[0063] In order to solve the above problems, the present disclosure provides a face recognition method, device, equipment and storage medium based on a domestic operating system.

[0064] The operating system data protection method, apparatus, device and storage medium provided by the embodiments of the present disclosure are described below in conjunction with the accompanying drawings.

[0065] Figure 1 It is a flowchart of an operating system data protection method provided by an embodiment of the present disclosure.

[0066] like Figure 1 As shown, the operating system data protection method may include:

[0067] S01, packaging the current Linux system environment, and unifying the existing memory operating system production steps into one software;

[0068] S02, based on the encapsulated software, packages the user's current operating system, regenerates a Linux memory operating system image, and installs the operating system;

[0069] S03, after the system is installed, the computer restarts and realizes dual systems, so that the user can choose the system to enter when the computer starts.

[0070] In some embodiments, Figure 1 The methods also include:

[0071] When the user chooses to start the memory operating system, shut down or restart the operating system after use;

[0072] Memory data is not written to disk, and all data changes are ineffective to achieve data protection.

[0073] In some embodiments, Figure 1 The methods also include:

[0074] When the user chooses to start the physical operating system, shut down or restart the operating system after use;

[0075] The data is saved to disk and all data changes take effect.

[0076] In some embodiments, the current Linux system environment is packaged, and the existing memory operating system production method steps are packaged into a software, including:

[0077] Clean and update the system to ensure that the status meets the preset conditions;

[0078] Create and configure a base system image and install the target software package;

[0079] Test the image via QEMU / KVM or Docker to ensure it functions properly;

[0080] Package the image into a tar file or Docker image;

[0081] Write installation scripts for automated deployment and generate documentation to guide users in installation and usage.

[0082] In some embodiments, cleaning and updating the system to ensure that the status meets the preset conditions includes:

[0083] Identify unnecessary software, services, and configurations, where unnecessary software, services, and configurations can be understood as software, services, and configurations that are not related to the functions of the target system;

[0084] Disable unnecessary services, configure firewall rules, and update password policies. Unnecessary services can be understood as services that are not related to the function of the target system.

[0085] Adjust kernel parameters, configure network settings, and set user permissions.

[0086] In some embodiments, based on the encapsulated software, the user's current operating system is packaged, a Linux memory operating system image is regenerated, and the operating system is installed, including:

[0087] Back up the current system and select a packaging tool;

[0088] Use the selected packaging tool to package the current system environment into an image file to generate a Linux memory operating system image;

[0089] Run the generated image in a test environment to ensure normal functionality and correct configuration;

[0090] Remove unnecessary files and dependencies to reduce the image size and increase the loading speed. Unnecessary files and dependencies can be understood as files and dependencies that are not related to the functions of the operating system to be installed.

[0091] Deploy the Linux memory operating system image and set the startup configuration;

[0092] Use the installer to install the Linux memory operating system image into the memory, or configure the system to boot from the memory.

[0093] Figure 2 is a flowchart of another operating system data protection method provided by an embodiment of the present disclosure, Figure 3 is a flowchart of a method for protecting operating system data at a software level provided by an embodiment of the present disclosure, combined with Figure 2 and Figure 3 ,right Figure 1 The operating system data protection method in is further described.

[0094] The prerequisite for using this solution is to have installed the Linux operating system, package the current Linux system environment, and unify the existing memory operating system production steps into a software (the software does not rely on JAVA, C+, python, shell and other languages ​​for implementation). After using the software, the user's current operating system will be packaged, a Linux memory operating system image will be regenerated, and the operating system will be installed. After the system is installed and restarted, the computer will have dual systems, and the user can choose the system to enter when the computer starts.

[0095] 1. Software Implementation

[0096] Step 1: Install and run the software on the device with the operating system installed;

[0097] Step 2: The software obtains the current operating system environment information;

[0098] Step 3: Generate a memory operating system image based on the current environment information;

[0099] Step4: Install the image created in the previous step;

[0100] Step 5: After the installation is completed, exit the software and restart the operating system. At this time, the device has dual systems. You can select the system to enter at startup according to user needs.

[0101] 2. Overall implementation process

[0102] 2.1 Enter the memory operating system:

[0103] Step 1: Turn on the device;

[0104] Step 2: The user starts the operating system according to the selected memory;

[0105] Step 3: Close or restart the operating system after use;

[0106] Step 4: Memory data is not written to disk, and all data changes are ineffective, thus achieving data protection.

[0107] 2.2 Enter the physical operating system:

[0108] Step 1: Turn on the device;

[0109] Step 2: The user starts according to the selected physical operating system;

[0110] Step 3: Close or restart the operating system after use;

[0111] Step 4: The data is saved to disk and all data changes take effect.

[0112] The operating system data protection method disclosed in the present disclosure is implemented by using the mechanism that the Linux memory operating system data is not written to the disk. The user can choose to boot into different system modes according to the needs, and can selectively retain the modified content of this boot. In addition, the system startup mode can be selected according to the different needs of the user, and the data protection function can be realized by switching between operating systems. The system can ensure the consistency of the operating system data while ensuring the stability of the system, and the system state is not easily changed.

[0113] and Figure 1 Corresponding to the operating system data protection method in the present disclosure, an operating system data protection device is also provided, such as Figure 4 As shown, the device may specifically include:

[0114] The packaging module 401 is used to package the current Linux system environment and unify the steps of the existing memory operating system production method into one software;

[0115] The installation module 402 is used to package the user's current operating system based on the encapsulated software, regenerate a Linux memory operating system image, and install the operating system;

[0116] The restart module 403 is used to restart the system after the system installation is completed, so as to realize dual systems, so that the user can select the system to be entered when the computer is started.

[0117] In some embodiments, when the user chooses to start the memory operating system, the operating system is shut down or restarted after use; the memory data is not written to the disk, and all data changes are not effective to achieve data protection.

[0118] In some embodiments, when the user selects a physical operating system to start, the operating system is shut down or restarted after use; the data is written to the disk, and all data changes take effect.

[0119] In some embodiments, the current Linux system environment is packaged, and the existing memory operating system production method steps are packaged into a software, including:

[0120] Clean and update the system to ensure that the status meets the preset conditions;

[0121] Create and configure a base system image and install the target software package;

[0122] Test the image via QEMU / KVM or Docker to ensure it functions properly;

[0123] Package the image into a tar file or Docker image;

[0124] Write installation scripts for automated deployment and generate documentation to guide users in installation and usage.

[0125] In some embodiments, cleaning and updating the system to ensure that the status meets the preset conditions includes:

[0126] Identify unnecessary software, services, and configurations;

[0127] Disable unnecessary services, configure firewall rules, and update password policies;

[0128] Adjust kernel parameters, configure network settings, and set user permissions.

[0129] In some embodiments, based on the encapsulated software, the user's current operating system is packaged, a Linux memory operating system image is regenerated, and the operating system is installed, including:

[0130] Back up the current system and select a packaging tool;

[0131] Use the selected packaging tool to package the current system environment into an image file to generate a Linux memory operating system image;

[0132] Run the generated image in a test environment to ensure normal functionality and correct configuration;

[0133] Remove unnecessary files and dependencies to reduce image size and increase loading speed;

[0134] Deploy the Linux memory operating system image and set the necessary startup configuration;

[0135] Use the installer to install the Linux memory operating system image into the memory, or configure the system to boot from the memory.

[0136] Combination Figure 5 As shown, the embodiment of the present disclosure also provides an operating system data protection device 500, including a processor 504 and a memory 501. Optionally, the system may also include a communication interface 502 and a bus 503. The processor 504, the communication interface 502, and the memory 501 may communicate with each other through the bus 503. The communication interface 502 may be used for information transmission. The processor 504 may call the logic instructions in the memory 501 to execute the operating system data protection method of the above embodiment.

[0137] In addition, the logic instructions in the memory 501 described above can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product.

[0138] The memory 501 is a computer-readable storage medium that can be used to store software programs and computer executable programs, such as program instructions / modules corresponding to the method in the embodiment of the present disclosure. The processor 504 executes the functional application and data processing by running the program instructions / modules stored in the memory 501, that is, implementing the operating system data protection method in the above embodiment.

[0139] The memory 501 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required for at least one function; the data storage area may store data created according to the use of the terminal device, etc. In addition, the memory 501 may include a high-speed random access memory and may also include a non-volatile memory.

[0140] An embodiment of the present disclosure provides a computer-readable storage medium storing computer-executable instructions, wherein the computer-executable instructions are configured to execute an operating system data protection method.

[0141] The computer-readable storage medium mentioned above may be a transient computer-readable storage medium or a non-transitory computer-readable storage medium.

[0142] The technical solution of the embodiment of the present disclosure can be embodied in the form of a software product, which is stored in a storage medium and includes one or more instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method of the embodiment of the present disclosure. The aforementioned storage medium may be a non-transient storage medium, including: a USB flash drive, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a disk or an optical disk, and other media that can store program codes, or a transient storage medium.

[0143] The above description and the accompanying drawings fully illustrate the embodiments of the present disclosure so that those skilled in the art can practice them. Other embodiments may include structural, logical, electrical, process and other changes. The embodiments represent possible changes only. Unless explicitly required, separate components and functions are optional, and the order of operations may vary. Parts and features of some embodiments may be included in or replace parts and features of other embodiments. As used in the description of the embodiments, unless the context clearly indicates otherwise, the singular forms of "a", "an" and "the" are intended to include plural forms as well. Similarly, the term "and / or" as used in this application refers to any and all possible combinations of one or more associated listings. In addition, when used in this application, the term "comprise" and its variants "comprises" and / or including (comprising) refer to the existence of stated features, wholes, steps, operations, elements, and / or components, but do not exclude the existence or addition of one or more other features, wholes, steps, operations, elements, components and / or these groups. In the absence of further restrictions, the elements defined by the sentence "comprising a ..." do not exclude the existence of other identical elements in the process, method or device comprising the elements. In this article, each embodiment may focus on the differences from other embodiments, and the same or similar parts between the embodiments may refer to each other. For the methods, products, etc. disclosed in the embodiments, if they correspond to the method part disclosed in the embodiments, then the relevant parts can refer to the description of the method part.

[0144] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software may depend on the specific application and design constraints of the technical solution. Technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the embodiments of the present disclosure. Technicians can clearly understand that for the convenience and simplicity of description, the specific working process of the systems, devices and units described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0145] In the embodiments disclosed herein, the disclosed methods and products (including but not limited to devices, equipment, etc.) can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of units can be only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between each other shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms. The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to implement this embodiment. In addition, each functional unit in the embodiment of the present disclosure may be integrated in a processing unit, or each unit may exist physically alone, or two or more units may be integrated in one unit.

[0146] The flowchart and block diagram in the accompanying drawings show the possible architecture, functions and operations of the system, method and computer program product according to the embodiment of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of the code, and a part of the module, program segment or code contains one or more executable instructions for realizing the specified logical function. In some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, which can depend on the functions involved. In the description corresponding to the flowchart and block diagram in the accompanying drawings, the operations or steps corresponding to different boxes can also occur in a different order from the order disclosed in the description, and sometimes there is no specific order between different operations or steps. For example, two consecutive operations or steps can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, which can depend on the functions involved. Each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, may be implemented by a dedicated hardware-based system that performs the specified functions or actions, or may be implemented by a combination of dedicated hardware and computer instructions.

[0147] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations may include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0148] The program code for implementing the method of the present disclosure may be written in any combination of one or more programming languages. These program codes may be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that the program code, when executed by the processor or controller, enables the functions / operations specified in the flow chart and / or block diagram to be implemented. The program code may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0149] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or any suitable combination of the foregoing. More specific examples of machine-readable storage media may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0150] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the computer. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0151] The systems and techniques described herein may be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communications network). Examples of communications networks include: a local area network (LAN), a wide area network (WAN), and the Internet.

[0152] A computer system may include a client and a server. The client and the server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises through computer programs running on respective computers and having a client-server relationship to each other. The server may be a cloud server, a server in a distributed system, or a server combined with a blockchain.

[0153] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this disclosure can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of this disclosure can be achieved, and this document is not limited here.

[0154] The above specific implementations do not constitute a limitation on the protection scope of the present disclosure. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present disclosure shall be included in the protection scope of the present disclosure.

Claims

1. A method for protecting operating system data, characterized in that: The method comprises: Package the current Linux system environment and unify the existing memory operating system production steps into one software; Based on the encapsulated software, the user's current operating system is packaged, a Linux memory operating system image is regenerated, and the operating system is installed; After the system is installed and restarted, the computer will have dual systems, allowing the user to choose the system to enter when the computer starts.

2. The method according to claim 1, characterized in that The method further comprises: When the user chooses to start the memory operating system, shut down or restart the operating system after use; Memory data is not written to disk, and all data changes are ineffective to achieve data protection.

3. The method according to claim 1, characterized in that The method further comprises: When the user chooses to start the physical operating system, shut down or restart the operating system after use; The data is saved to disk and all data changes take effect.

4. The method according to claim 1, characterized in that: The current Linux system environment is packaged and the existing memory operating system production steps are packaged into one software, including: Clean and update the system to ensure that the status meets the preset conditions; Create and configure a base system image and install the target software package; Test the image via QEMU / KVM or Docker to ensure it functions properly; Package the image into a tar file or Docker image; Write installation scripts for automated deployment and generate documentation to guide users in installation and usage.

5. The method according to claim 4, characterized in that The system is cleaned and updated to ensure that the status meets the preset conditions, including: Identify unnecessary software, services, and configurations; Disable unnecessary services, configure firewall rules, and update password policies; Adjust kernel parameters, configure network settings, and set user permissions.

6. The method according to claim 1, characterized in that The encapsulation-based software packages the user's current operating system, regenerates a Linux memory operating system image, and installs the operating system, including: Back up the current system and select a packaging tool; Use the selected packaging tool to package the current system environment into an image file to generate a Linux memory operating system image; Run the generated image in a test environment to ensure normal functionality and correct configuration; Remove unnecessary files and dependencies to reduce image size and increase loading speed; Deploy the Linux memory operating system image and set the necessary startup configuration; Use the installer to install the Linux memory operating system image into the memory, or configure the system to boot from the memory.

7. An operating system data protection device, characterized in that: The device comprises: The software generation module is used to package the current Linux system environment and unify the existing memory operating system production steps into one software; The operating system installation module is used to package the user's current operating system based on the encapsulated software, regenerate a Linux memory operating system image, and install the operating system; The restart module is used to restart the system after installation is complete, to implement dual systems so that the user can select the system to enter when the computer starts.

8. The device according to claim 7, characterized in that The current Linux system environment is packaged and the existing memory operating system production steps are packaged into one software, including: Clean and update the system to ensure that the status meets the preset conditions; Create and configure a base system image and install the target software package; Test the image via QEMU / KVM or Docker to ensure it functions properly; Package the image into a tar file or Docker image; Write installation scripts for automated deployment and generate documentation to guide users in installation and usage.

9. An electronic device, characterized in that: include: at least one processor; and a memory communicatively coupled to the at least one processor; It is characterized in that the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method according to any one of claims 1 to 6.

10. A non-transitory computer-readable storage medium storing computer instructions, characterized in that: The computer instructions are used to cause the computer to execute the method according to any one of claims 1-6.

Images