PAAS service acceptance method and device, service acceptance platform and medium

Abstract

The invention discloses a PAAS service acceptance method and device, a service acceptance platform and a medium, and relates to the technical field of cloud computing. The method comprises the following steps: acquiring a to-be-accepted server list and a plurality of service baselines contained in the PAAS; for any service baseline, acquiring actual configuration information of each server in the server list; checking and accepting the service baseline based on the actual configuration information to obtain a checking and accepting result of the service baseline; and traversing all the service baselines to obtain an acceptance result of each service baseline, and determining a service acceptance report of the PAAS based on the acceptance results. According to the technical scheme provided by the invention, unified acceptance of PAAS services of a plurality of servers can be realized automatically, and the acceptance efficiency and accuracy can be improved.

Description

Technical Field

[0001] The present application relates to the field of cloud computing technology, and in particular to a PAAS service acceptance method, device, service acceptance platform and medium. Background Art

[0002] PAAS (Platform as a Service) is a service model of cloud computing. Common PAAS services include database services, container services, big data services, and middleware services. When PAAS service deployment is independent (i.e., deployment is completed manually without relying on the cloud platform, and the life cycle of PAAS service instances is managed through its own management and control platform), after the PAAS software is deployed, the software deployment product needs to be inspected and accepted, including functional inspection, performance inspection, baseline inspection, etc.

[0003] The current problems and risks of PAAS service acceptance work are as follows: 1. PAAS service baseline configuration requirements are many, and the average baseline configuration items for each product are as high as 20; 2. There are many products to be accepted, and the baseline configuration check requires screenshots of the configuration items of each server. For example, if 10 DB nodes are delivered, at least 230 screenshots will be generated, which is time-consuming, labor-intensive, and inefficient. If faced with urgent delivery needs, the delivery pressure will become enormous. 3. The efficiency of acceptance product review is low, and manual review is the main method. The acceptance products and acceptance screenshots are checked one by one. Due to the large number of acceptance products, errors and omissions are prone to occur, and existing problems cannot be discovered in time. Therefore, how to improve acceptance efficiency has become a problem that needs to be solved urgently. Summary of the invention

[0004] The present application provides a PAAS service acceptance method, device, service acceptance platform and medium, which can realize automated unified acceptance of PAAS services of multiple servers, thereby improving acceptance efficiency and accuracy.

[0005] In a first aspect, the present application provides a PAAS service acceptance method, which is applied to a service acceptance platform. The method includes:

[0006] Obtain a list of servers to be accepted and multiple service baselines included in the PAAS;

[0007] For any service baseline, collect actual configuration information of each server in the server list;

[0008] Performing acceptance on the service baseline based on the actual configuration information to obtain an acceptance result of the service baseline;

[0009] All service baselines are traversed to obtain the acceptance result of each service baseline, and the service acceptance report of the PAAS is determined based on the acceptance result.

[0010] Furthermore, the service baseline is accepted based on the actual configuration information to obtain an acceptance result of the service baseline, including: obtaining a configuration file of a product corresponding to the service baseline; obtaining expected configuration information of the service baseline from the configuration file; determining a corresponding verification component according to an application scenario of the service baseline, the verification component including at least re, openpyxl and os; using the verification component to compare the expected configuration information with the actual configuration information of each of the servers to obtain a configuration comparison result of each of the servers; and determining the acceptance result of the service baseline based on the configuration comparison result of each of the servers.

[0011] Furthermore, the acceptance result of the service baseline is determined based on the configuration comparison result of each of the servers, including: counting a first number of services whose configuration comparison results show that the expected configuration information is consistent with the actual configuration information; determining the total number of servers in the server list; if the first number is equal to the total number, determining the acceptance result as a qualified acceptance; if the first number is less than the total number and greater than zero, determining the acceptance result as an unqualified acceptance; if the first number is equal to zero, determining the acceptance result as a service configuration abnormality.

[0012] Furthermore, actual configuration information of each server in the server list is collected, including: obtaining a check command corresponding to the service baseline from the configuration file, the check command being used to obtain actual configuration information corresponding to the product in the server, one service baseline corresponding to one check command; and loopingly executing the check command in each server based on the server list to obtain actual configuration information of each server.

[0013] Furthermore, the method also includes: establishing a configuration file for each product in the PAAS, one product corresponding to one service baseline during acceptance, and the configuration file including acceptance strategy, inspection command and expected configuration information.

[0014] Furthermore, after creating a configuration file for each product in the PAAS, the method further includes: when parameter information of the product changes, updating the acceptance strategy of the product based on the changed content.

[0015] Furthermore, the service baseline includes at least a system security baseline, system service permissions, an encrypted network protocol SSH security architecture, a password security policy, a system version check, and a host name check.

[0016] In a second aspect, the present application provides a PAAS service acceptance device, which is integrated in a service acceptance platform, and the device includes:

[0017] A data acquisition module, used to acquire a list of servers to be accepted and a plurality of service baselines included in the PAAS;

[0018] An information collection module, used for collecting actual configuration information of each server in the server list for any service baseline;

[0019] An acceptance execution module, used to accept the service baseline based on the actual configuration information to obtain an acceptance result of the service baseline;

[0020] The report determination module is used to traverse all service baselines, obtain the acceptance result of each service baseline, and determine the service acceptance report of the PAAS based on the acceptance result.

[0021] In a third aspect, the present application provides a service acceptance platform, which is used to execute the service acceptance method of the PAAS described in any embodiment of the present application.

[0022] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the service acceptance method of the PAAS described in any embodiment of the present application when executed.

[0023] In order to solve the defects of the prior art in the background technology, the embodiment of the present application provides a PAAS service acceptance method, and the execution of this method can bring the following beneficial effects: the present application develops an intelligent service acceptance platform. When the PAAS service is deployed in an independent deployment mode, the server list and multiple service baselines contained in the PAAS are input into the service acceptance platform. The inspection command of each service baseline of the service acceptance platform is executed once in all servers to obtain the actual configuration information of all servers corresponding to each service baseline; the service baseline is then accepted in combination with the expected configuration information. The present application can realize the unified acceptance of PAAS services of multiple servers automatically, which can improve the acceptance efficiency and accuracy.

[0024] It should be noted that the above computer instructions may be stored in whole or in part on a computer-readable storage medium, wherein the computer-readable storage medium may be packaged together with the processor of the service acceptance device of the PAAS, or may be packaged separately from the processor of the service acceptance device of the PAAS, and this application does not limit this.

[0025] The description of the second, third and fourth aspects in this application can refer to the detailed description of the first aspect; and the beneficial effects of the description of the second, third and fourth aspects can refer to the beneficial effect analysis of the first aspect, which will not be repeated here.

[0026] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present application, nor is it intended to limit the scope of the present application. Other features of the present application will become easily understood through the following description.

[0027] It is understandable that before using the technical solutions disclosed in the embodiments of this application, the type, scope of use, and usage scenarios of the personal information involved in this application should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0029] Figure 1 A flowchart of a PAAS service acceptance method provided in an embodiment of the present application;

[0030] Figure 2 The overall solution architecture diagram of the service acceptance platform provided in the embodiment of the present application;

[0031] Figure 3 A schematic diagram of the framework for intelligent acceptance of PAAS services provided in the embodiment of the present application;

[0032] Figure 4 A schematic diagram of the structure of a PAAS service acceptance device provided in an embodiment of the present application;

[0033] Figure 5 The block diagram is a block diagram of an electronic device used to implement a PAAS service acceptance method of an embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this application.

[0035] It should be noted that the terms "first", "second", "target", and "original" in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "including", "having", and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products, or devices.

[0036] Figure 1 A flow chart of a PAAS service acceptance method provided in an embodiment of the present application, which can be applied to the scenario of accepting software deployment products when PAAS services are deployed in an independent deployment mode. A PAAS service acceptance method provided in this embodiment can be executed by a PAAS service acceptance device provided in an embodiment of the present application, which can be implemented in software and / or hardware and integrated in an electronic device that executes the method. The method is applied to a service acceptance platform.

[0037] See also Figure 1 The method of this embodiment includes but is not limited to the following steps:

[0038] S110: Obtain a list of servers to be accepted and multiple service baselines included in PAAS.

[0039] The server list to be accepted can refer to the list of all servers participating in the PAAS service deployment that need to be checked and accepted, so as to facilitate the subsequent inspection of each server such as hardware operation status, software installation integrity, network connectivity, etc., and clarify the scope and object of acceptance. The server list includes multiple servers, which can be in the form of a host configuration management database (cmdb) table. Optionally, it contains relevant information such as the host Internet Protocol (IP), host name, login username and password. The host cmdb table name is host-info.xls.

[0040] A service baseline can be used as a benchmark to measure the key indicators, configuration parameters, and functional performance of a service. The service baseline includes at least the system security baseline, system service permissions, secure shell (SSH) security architecture, password security policy, system version check, and host name check.

[0041] In an embodiment of the present application, in a specific software deployment acceptance phase, the microprocessor of the service acceptance platform must first be clear about which servers are involved in the PAAS independent deployment and need to be accepted. Then the user needs to submit a list of servers to be accepted (i.e., the host cmdb table) to the service acceptance platform, and the microprocessor receives the server list. At the same time, the microprocessor needs to master the pre-set measurement standards (i.e., service baselines) for each service in PAAS, so it is necessary to obtain multiple service baselines contained in PAAS to prepare for the subsequent specific acceptance work.

[0042] S120: For any service baseline, collect actual configuration information of each server in the server list.

[0043] Specifically, the actual configuration information of each server in the server list is collected, including: obtaining the inspection command corresponding to the service baseline from the configuration file, the inspection command is used to obtain the actual configuration information corresponding to the product in the server, one service baseline corresponds to one inspection command; based on the server list, the inspection command is executed in each server in a loop to obtain the actual configuration information of each server.

[0044] Among them, the actual configuration information can be the configuration information that reflects the actual status of the service in each server. The configuration file is a file specifically used to store system-related configuration parameters, rules, instructions and other information. The configuration file is established for each product included in each service when managing services in PAAS. A product corresponds to a service baseline during acceptance. The configuration file includes check commands, which are specific operation instructions for extracting the actual configuration information required from the server. Exemplary, the check command can be cat / etc / tencentos-release.

[0045] In the embodiment of the present application, the microprocessor obtains the configuration file of the product corresponding to a certain service baseline from the preset storage unit, and obtains the check command corresponding to the service baseline from the configuration file. The "intelligent collection" task is started, and the background program runs the check command on each server in the server list in sequence to obtain the actual configuration information of each server. In other words, the check command of each service baseline needs to be executed once on all servers.

[0046] Optionally, the execution result of a service baseline check command (ie, the actual configuration information of each server) can be output to a text file in txt format, and the text file is named according to the number of the service baseline.

[0047] For example, the server list includes server A, server B, and server C. For the check command corresponding to a service baseline, first run the check command on server A to obtain its actual configuration information, then run the check command on server B to obtain its actual configuration information, and finally repeat the operation on server C. By executing server by server in this way, the actual configuration information of related products on each server can be collected, and finally the complete actual configuration information of all servers is obtained, so that these actual configurations can be compared and analyzed with the corresponding service baseline in the future to determine whether the configuration on the server meets the expected standards.

[0048] S130: Accept the service baseline based on the actual configuration information to obtain an acceptance result of the service baseline.

[0049] Specifically, the acceptance strategy of the service baseline is executed based on the actual configuration information to obtain the acceptance result of the service baseline, including:

[0050] In the first step, the microprocessor obtains the configuration file of the product corresponding to the service baseline from the preset storage unit. The configuration file is established for each product contained in each service when managing the services in PAAS. A product corresponds to a service baseline during acceptance. The configuration file includes the acceptance strategy and expected configuration information.

[0051] In the second step, the microprocessor obtains the expected configuration information of the service baseline from the configuration file. The expected configuration information refers to the ideal configuration state of the product when it meets the service baseline standard.

[0052] Step 3: Determine the corresponding verification component according to the application scenario of the service baseline. The verification component can be in Python. The verification component includes at least re, openpyxl and os.

[0053] Among them, re is a regular expression module, which is often used in Python language for text matching, search and replace operations, and can be used to accurately extract the required configuration content from complex text information; openpyxl is a Python library for operating Excel files, which is used to record configuration information or comparison results into Excel tables for sorting and display; os is an operating system interface module in Python, which can be used to process file and directory related operations, such as finding the path of the configuration file, determining whether the file exists, etc.

[0054] According to the specific application scenario of the service baseline, select appropriate verification components or more related components to assist in completing the configuration information verification work. For example, if the expected configuration information and the actual configuration information are stored in text format in files, use the re module to extract key information according to specific rules for comparison; if you want to organize the comparison results into an Excel report that is easy to view, you need to use the openpyxl library to create tables, fill in data, and other operations.

[0055] Step 4: Use the verification component to compare the expected configuration information with the actual configuration information of each server to obtain the configuration comparison result of each server.

[0056] The verification component uses the corresponding rules and methods to compare the expected configuration information of the service baseline obtained from the configuration file with the actual configuration information of the product on each server collected through various means (such as executing check commands, etc.). For example: using the re module to match whether the database port number specified in the expected configuration is consistent with the port number actually used by the database obtained from the server, and using the openpyxl library to record the comparison process and results in a table in an orderly manner for easy viewing and analysis. Through such a comprehensive and detailed comparison operation, the configuration comparison results of each server for the service baseline are finally obtained, such as whether a certain configuration parameter of a server is consistent with the expected configuration, and another configuration parameter is inconsistent, etc. can be clearly displayed.

[0057] Step 5: Determine the acceptance result of the service baseline based on the configuration comparison results of each server.

[0058] Comprehensively consider the configuration comparison results obtained on each server to determine whether the entire service baseline has reached the acceptance criteria. Further, the acceptance result of the service baseline is determined based on the configuration comparison results of each server, including: counting the number of services whose configuration comparison results are consistent with the expected configuration information and the actual configuration information, recorded as the first number; counting the total number of servers included in the server list. There are the following three situations: Situation 1: If the first number is equal to the total number, that is, the configuration comparison results of each server are consistent with the expected configuration information, and the service baseline has reached the acceptance criteria, the acceptance result is determined to be qualified; Situation 2: If the first number is less than the total number and greater than zero, that is, there are some servers whose configuration comparison results are inconsistent with the expected configuration information, and the service baseline has not reached the acceptance criteria, the acceptance result is determined to be unqualified; Situation 3: If the first number is equal to zero, the acceptance result is determined to be a service configuration anomaly.

[0059] Exemplarily, the code judgment logic is explained by taking the operating system version check as an example. First, the background program needs to load the host cmdb table to obtain the number of hosts (that is, the total number of servers in the server list); then, the configuration file is loaded to obtain the expected value of the operating system version check (that is, the expected configuration information), which is xxxxOS Server 3.1; secondly, the text used to record the execution results of the check command for this service baseline is traversed to find the number of times "xxxxOS Server 3.1" appears in the text (that is, the number of services whose configuration comparison results are consistent with the expected configuration information and the actual configuration information). If the number of occurrences is equal to the number of hosts, it means that the acceptance is qualified. If the number of occurrences is not equal to the number of hosts, it means that there is a non-compliance. If "xxxxOS Server 3.1" does not appear in the text, an exception is returned.

[0060] S140, traverse all service baselines, obtain the acceptance result of each service baseline, and determine the service acceptance report of PAAS based on the acceptance result.

[0061] In an embodiment of the present application, all service baselines are traversed according to the same method as S120-S130 above to obtain the acceptance result of each service baseline. The acceptance results are analyzed and sorted to obtain the service acceptance report of PAAS. This application does not limit the presentation form of the acceptance report, which can be text or graphics. Through the acceptance report, you can quickly understand the implementation status of the baseline configuration, determine whether the acceptance has passed, and point out the existing problems, guide the implementation personnel to make rectifications, which is conducive to problem tracking and review, and improves the delivery quality.

[0062] The technical solution provided in this embodiment is to obtain a list of servers to be accepted and multiple service baselines contained in PAAS; for any service baseline, collect the actual configuration information of each server in the server list; accept the service baseline based on the actual configuration information to obtain the acceptance result of the service baseline; traverse all service baselines to obtain the acceptance result of each service baseline, and determine the service acceptance report of PAAS based on the acceptance result. This application has developed an intelligent service acceptance platform. When the PAAS service is deployed in an independent deployment mode, the server list and the multiple service baselines contained in PAAS are input into the service acceptance platform. The inspection command of each service baseline of the service acceptance platform is executed once in all servers to obtain the actual configuration information of all servers corresponding to each service baseline; then the service baseline is accepted in combination with the expected configuration information. This application can realize the automatic unified acceptance of PAAS services of multiple servers, which can improve the efficiency and accuracy of acceptance.

[0063] In an optional embodiment, the service acceptance method of PAAS of the present application further includes: establishing a configuration file for each product in PAAS, one product corresponding to one service baseline during acceptance, and the configuration file including acceptance strategy, inspection command and expected configuration information.

[0064] In another optional embodiment, after creating a configuration file for each product in the PAAS, the method further includes: when parameter information of the product changes, updating the acceptance strategy of the product based on the changed content.

[0065] The following is an introduction to the service acceptance platform. Figure 2 The overall solution architecture diagram of the service acceptance platform is shown in FIG. The intelligent acceptance platform can provide capabilities such as service management, configuration management, intelligent collection, intelligent inspection, and report management. Among them, intelligent collection and intelligent inspection are used to execute the service acceptance method of PAAS in the above embodiment, which has been explained in detail.

[0066] 1. Service management supports the full life cycle management of services, including service access, service configuration, service offline and other functions.

[0067] Service access: When the service acceptance platform is initialized, the service name can be set according to the PAAS service type. According to different service capabilities, it is mainly divided into four major sections, namely database service, middleware service, big data service, and container service. The database service consists of transactional database, analytical database, graph database, and key-value database. The middleware service consists of microservice framework and message middleware. The big data service provides basic capabilities such as large-scale data processing engine, parallel computing tools, open source database, data warehouse tools, and distributed file system. The container service can support the creation and management of container operation units such as Pod, and may have some functions to help implement operation and maintenance-development (Development-Operations, DevOps) practices.

[0068] Service configuration: Since the same PAAS service includes products from multiple software manufacturers, after the service access is completed, it is necessary to associate the software manufacturer's products, that is, product management. During the product management process, the product name of the software manufacturer is entered, and the product name must be unique. For example, taking the database service configuration as an example to perform product management and incorporate it into the database service, the transactional database can be provided by three manufacturers, and the analytical database can be provided by two manufacturers. After the service configuration is completed, a new acceptance strategy is created in the subsequent configuration management process to associate the product name to ensure that each product has a corresponding acceptance strategy.

[0069] Service offline: PAAS service supports product exit mechanism. After the product exits the service, the service is offline and the corresponding product is removed.

[0070] 2. Configuration management is mainly used to control the configuration information of the service baseline, which includes the system security baseline, system service permissions, SSH security architecture, password security policy, system version check, etc. The consistency, integrity and correctness of these configuration information are ensured through configuration management. The main functions of configuration management include configuration file identification and storage, change management and version control.

[0071] Configuration file identification and storage: First, you need to identify the content and category of the configuration file, and assign a unique identifier to each configuration file to facilitate its management throughout the life cycle. This identifier should be globally unique to avoid confusion. The configuration file is mainly used to store the acceptance policy and corresponding service baseline rules for each product. The creation process is divided into two steps: 1. Create a new acceptance policy name. One product corresponds to one acceptance policy. 2. Add service baseline rules under the acceptance policy. The service baseline rules include inspection commands and expected configuration information. Finally, associate the products defined in the "Service Configuration".

[0072] Change management: When the service baseline changes, the acceptance policy of the corresponding product needs to be updated according to the change process. Take the change of SSH security hardening baseline as an example. Before the change, the default port of SSH service in the acceptance policy is 22. For security reasons, the SSH service port needs to be modified and the service port needs to be changed to 36000. The software manufacturer submits the change application via email, and the construction party evaluates the change requirements. After the evaluation is passed, the service platform administrator updates the acceptance policy in the platform and returns the latest acceptance policy name. The new acceptance policy is used for subsequent acceptance.

[0073] Version control: Use the version control function to manage different versions of files to ensure that platform administrators or users can access the correct file version and avoid problems caused by using the wrong file version. Version control is mainly distinguished by configuration policy naming, and the naming rule is: manufacturer name-product name-version number.

[0074] 3. The intelligent collection tool is developed based on Python and uses the SSH protocol for communication. It does not require the installation of clients or agents on remote hosts. Through modular work, it realizes functions such as batch system configuration, batch program deployment, and batch command execution. The collection tool only needs to complete the operation of all hosts on a fixed server control node. Usually, it controls the remote host based on SSH connection. No other additional services need to be installed on the remote host, and batch configuration, deployment, and management of thousands of hosts can be easily realized. The collection tool is used to quickly collect the baseline configuration implementation results of all servers, reduce manual screenshots, speed up the efficiency of acceptance material collection, and provide material sources for the next intelligent inspection.

[0075] 4. The intelligent check function is developed based on Python and uses verification components such as re, openpyxl and os to check the collection results of the service baseline to determine whether the actual configuration information is consistent with the expected configuration information.

[0076] like Figure 3 The figure shows a schematic diagram of the framework for intelligent acceptance of PAAS services. The loading collection file in the figure refers to the text in txt format used to store the execution results of the inspection command of the 01 service baseline in the above embodiment. Figure 3 The intelligent inspection content has been explained in the above embodiments and will not be repeated here.

[0077] 5. Report management is an important part of the intelligent service acceptance platform, which involves data collection, processing, analysis and presentation. Report management mainly provides the following functions: 1) Data integration and extraction: supports access to multiple data sources (databases, excel tables, csv files, etc.), and supports offline export of reports; 2) Report design and editing: supports custom reports, including font styles, chart styles, field design, template management, etc.; 3) Permission management: supports user login authentication, assigns permissions based on user roles, and protects sensitive data; 4) Version control: supports report version control, retains historical records of different versions, and ordinary users do not have report deletion permissions.

[0078] Figure 4 A schematic diagram of the structure of a PAAS service acceptance device provided in an embodiment of the present application is shown in FIG. Figure 4 As shown, the device is integrated into the service acceptance platform, and the device 400 may include:

[0079] The data acquisition module 410 is used to acquire a list of servers to be accepted and a plurality of service baselines included in the PAAS;

[0080] An information collection module 420 is used to collect actual configuration information of each server in the server list for any service baseline;

[0081] An acceptance execution module 430 is used to accept the service baseline based on the actual configuration information to obtain an acceptance result of the service baseline;

[0082] The report determination module 440 is used to traverse all service baselines, obtain the acceptance result of each service baseline, and determine the service acceptance report of the PAAS based on the acceptance result.

[0083] Furthermore, the above-mentioned acceptance execution module 430 can be specifically used to: obtain a configuration file of a product corresponding to the service baseline; obtain expected configuration information of the service baseline from the configuration file; determine a corresponding verification component according to an application scenario of the service baseline, the verification component including at least re, openpyxl and os; use the verification component to compare the expected configuration information with the actual configuration information of each of the servers to obtain a configuration comparison result of each server; and determine the acceptance result of the service baseline based on the configuration comparison result of each server.

[0084] Furthermore, the above-mentioned acceptance execution module 430 can also be specifically used to: count the first number of services whose configuration comparison results are that the expected configuration information is consistent with the actual configuration information; determine the total number of servers in the server list; if the first number is equal to the total number, determine the acceptance result as qualified acceptance; if the first number is less than the total number and greater than zero, determine the acceptance result as unqualified acceptance; if the first number is equal to zero, determine the acceptance result as a service configuration abnormality.

[0085] Furthermore, the above-mentioned information collection module 420 can be specifically used to: obtain the inspection command corresponding to the service baseline from the configuration file, the inspection command is used to obtain the actual configuration information corresponding to the product in the server, one service baseline corresponds to one inspection command; based on the server list, the inspection command is looped in each server to obtain the actual configuration information of each server.

[0086] Furthermore, the service acceptance device of the PAAS may further include: a service management module;

[0087] The service management module is used to establish a configuration file for each product in the PAAS. A product corresponds to a service baseline during acceptance. The configuration file includes acceptance strategies, inspection commands and expected configuration information.

[0088] Furthermore, the service management module can be specifically used to: after creating a configuration file for each product in the PAAS, when parameter information of the product changes, update the acceptance strategy of the product based on the changed content.

[0089] In one embodiment, the service baseline includes at least a system security baseline, system service permissions, an encrypted network protocol SSH security architecture, a password security policy, a system version check, and a host name check.

[0090] The PAAS service acceptance device provided in this embodiment can be applied to the PAAS service acceptance method provided in any of the above embodiments, and has corresponding functions and beneficial effects.

[0091] Figure 5 It is a block diagram of an electronic device for implementing a service acceptance method of a PAAS of an embodiment of the present application. The electronic device 10 is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present application described and / or required herein.

[0092] like Figure 5 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0093] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0094] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the service acceptance method of PAAS.

[0095] In some embodiments, the service acceptance method of PAAS may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the service acceptance method of PAAS described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the service acceptance method of PAAS in any other appropriate manner (e.g., by means of firmware).

[0096] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0097] The computer programs for implementing the methods of the present application may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer programs are executed by the processor, the functions / operations specified in the flow charts and / or block diagrams are implemented. The computer programs may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0098] In the context of the present application, a computer readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, device, or equipment. A computer readable storage medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. Alternatively, a computer readable storage medium may be a machine readable signal medium. A more specific example of a machine readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0099] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0100] The systems and techniques described herein can be implemented in a computing system that includes backend components (e.g., as a data server) or a computing system that includes middleware components (e.g., an application server) or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein) or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0101] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0102] Note that the above are only preferred embodiments of the present application and the technical principles used. Those skilled in the art will understand that the present application is not limited to the specific embodiments described herein, and that various obvious changes, readjustments, and substitutions can be made by those skilled in the art without departing from the scope of protection of the present application. For example, those skilled in the art can use the various forms of processes shown above to reorder, add, or delete steps; the steps recorded in the present application can be performed in parallel, sequentially, or in different orders, as long as the desired results of the technical solution of the present application can be achieved, and this document does not limit them here.

[0103] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A service acceptance method for platform as a service (PAAS), characterized in that: Applied to a service acceptance platform, the method includes: Obtain a list of servers to be accepted and multiple service baselines included in the PAAS; For any service baseline, collect actual configuration information of each server in the server list; Performing acceptance on the service baseline based on the actual configuration information to obtain an acceptance result of the service baseline; All service baselines are traversed to obtain the acceptance result of each service baseline, and the service acceptance report of the PAAS is determined based on the acceptance result.

2. The PAAS service acceptance method according to claim 1, characterized in that: Accepting the service baseline based on the actual configuration information to obtain an acceptance result of the service baseline includes: Obtain a configuration file of a product corresponding to the service baseline; Acquire expected configuration information of the service baseline from the configuration file; Determine a corresponding verification component according to an application scenario of the service baseline, wherein the verification component includes at least re, openpyxl and os; Using the verification component to compare the expected configuration information with the actual configuration information of each of the servers, to obtain a configuration comparison result of each of the servers; The acceptance result of the service baseline is determined based on the configuration comparison result of each server.

3. The service acceptance method of PAAS according to claim 2, characterized in that: Determining the acceptance result of the service baseline based on the configuration comparison result of each server includes: Counting a first number of services for which the configuration comparison result shows that the expected configuration information is consistent with the actual configuration information; Determining the total number of servers in the server list; If the first quantity is equal to the total quantity, the acceptance result is determined as qualified acceptance; If the first quantity is less than the total quantity and greater than zero, the acceptance result is determined as unqualified acceptance; If the first number is equal to zero, the acceptance result is determined as a service configuration abnormality.

4. The PAAS service acceptance method according to claim 2, characterized in that: Collecting actual configuration information of each server in the server list includes: Obtaining a check command corresponding to the service baseline from the configuration file, wherein the check command is used to obtain actual configuration information corresponding to the product in the server, and one service baseline corresponds to one check command; The checking command is cyclically executed in each of the servers based on the server list to obtain actual configuration information of each of the servers.

5. The PAAS service acceptance method according to claim 1, characterized in that: The method further comprises: A configuration file is created for each product in the PAAS. A product corresponds to a service baseline during acceptance. The configuration file includes acceptance strategies, inspection commands, and expected configuration information.

6. The service acceptance method of PAAS according to claim 5, characterized in that: After creating a configuration file for each product in the PAAS, it also includes: When the parameter information of the product changes, the acceptance strategy of the product is updated based on the changed content.

7. The PAAS service acceptance method according to claim 1, characterized in that: The service baseline includes at least system security baseline, system service permissions, encrypted network protocol SSH security architecture, password security policy, system version check and host name check.

8. A PAAS service acceptance device, characterized in that: Integrated in the service acceptance platform, the device includes: A data acquisition module, used to acquire a list of servers to be accepted and a plurality of service baselines included in the PAAS; An information collection module, used for collecting actual configuration information of each server in the server list for any service baseline; An acceptance execution module, used to accept the service baseline based on the actual configuration information to obtain an acceptance result of the service baseline; The report determination module is used to traverse all service baselines, obtain the acceptance result of each service baseline, and determine the service acceptance report of the PAAS based on the acceptance result.

9. A service acceptance platform, characterized in that: The service acceptance platform is used to execute the PAAS service acceptance method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the service acceptance method of the PAAS according to any one of claims 1 to 7 when executed.

Images