Dual-system partitioning method, device and equipment based on lxc container technology

Abstract

The invention provides a dual-system partitioning method, device and equipment based on an lxc container technology. The method comprises the steps that a first logic partition of a first system and a second logic partition of a second system are obtained, the first logic partition is mounted to a first system in a first container domain, the second logic partition is mounted to a second system in a second container domain, the first system in the first container domain is bound to a first system in a host domain, and the second system in the host domain is bound to a second system in a second container domain. And binding a second system in the second container domain to a second system in the host domain, mounting the first logic partition to the first system in the host domain in the host domain, and mounting the second logic partition to the second system in the host domain. According to the method, the logic partitions corresponding to the dual systems are divided, so that the safety of the dual systems is improved.

Description

Technical Field

[0001] This application relates to dual-system technology, and in particular to a dual-system partitioning method, device, and equipment based on LXC container technology. Background Art

[0002] With the rapid development of mobile terminal technology, more and more terminal devices are equipped with dual systems. With the help of LXC container technology, dual-system terminal devices can achieve parallel online operation of dual systems to meet different usage needs of users.

[0003] In the prior art, usually only one system partition is set in a terminal device, and the image file used by the dual systems of the terminal device to run a certain service is bound in this system partition. Among them, the image files used by the dual systems are the same, and the running files required for the dual systems to run a certain service are stored in the image file.

[0004] However, in the prior art, the image files of the dual systems are bound in one system partition, which easily leads to security problems in the dual systems. Summary of the Invention

[0005] This application provides a dual-system partitioning method, device, and equipment based on LXC container technology to solve the technical problem that in the prior art, the image files of the dual systems are bound in one system partition, which easily leads to security problems in the dual systems.

[0006] In a first aspect, this application provides a dual-system partitioning method based on LXC container technology, which is applied to a terminal device. The terminal device includes a first system and a second system. The method includes:

[0007] Obtain a first logical partition of the first system and a second logical partition of the second system. The first logical partition includes a first image file of the first system, and the second logical partition includes a second image file of the second system;

[0008] Mount the first logical partition to the first system in a first container domain, and mount the second logical partition to the second system in a second container domain;

[0009] Bind the first system in the first container domain to the first system in the host domain, and bind the second system in the second container domain to the second system in the host domain;

[0010] In the host domain, mount the first logical partition to the first system in the host domain, and mount the second logical partition to the second system in the host domain.

[0011] In this application, by dividing the first logical partition and the second logical partition, binding the first logical partition to the first system in the dual system, and binding the second logical partition to the second system in the dual system, the isolation of the dual-system image files is achieved. Among them, the image files corresponding to the dual systems are stored in different logical partitions. In this way, even if there are vulnerabilities in the image files in the logical partition corresponding to a certain system, it will not affect the image files in the logical partition corresponding to the other system, thereby improving the security of the dual system.

[0012] Optionally, the obtaining of the first logical partition of the first system and the second logical partition of the second system includes:

[0013] Expanding the super partition in the disk partition of the terminal device to obtain the first logical partition of the first system and the second logical partition of the second system.

[0014] Optionally, the mounting of the first logical partition to the first system in the first container domain and the mounting of the second logical partition to the second system in the second container domain include:

[0015] Obtaining the power-on instruction of the terminal device;

[0016] Starting the host domain according to the power-on instruction;

[0017] Mounting the first logical partition onto the first system directory of the first system in the first container domain;

[0018] Mounting the second logical partition onto the second system directory of the second system in the second container domain.

[0019] Optionally, the binding of the first system in the first container domain to the first system in the host domain and the binding of the second system in the second container domain to the second system in the host domain include:

[0020] Binding the first system directory to the directory list corresponding to the first system in the host domain;

[0021] Binding the second system directory to the directory list corresponding to the second system in the host domain.

[0022] Optionally, the mounting of the first logical partition to the first system in the host domain and the mounting of the second logical partition to the second system in the host domain include:

[0023] Mounting the first logical partition to the directory list corresponding to the first system in the host domain;

[0024] Mount the second logical partition to the directory list corresponding to the second system in the host domain.

[0025] Optionally, the method further includes:

[0026] Obtain the first service business data of the first system and the second service business data of the second system;

[0027] Generate the first image file of the first system according to the first service business data, and generate the second image file of the second system according to the second service business data.

[0028] In a second aspect, the present application provides a dual-system partitioning device based on lxc container technology, including:

[0029] An acquisition module, configured to acquire the first logical partition of the first system and the second logical partition of the second system, where the first logical partition includes the first image file of the first system, and the second logical partition includes the second image file of the second system;

[0030] A processing module, configured to mount the first logical partition to the first system in the first container domain, and mount the second logical partition to the second system in the second container domain;

[0031] The processing module is further configured to bind the first system in the first container domain to the first system in the host domain, and bind the second system in the second container domain to the second system in the host domain;

[0032] The processing module is further configured to, in the host domain, mount the first logical partition to the first system in the host domain, and mount the second logical partition to the second system in the host domain.

[0033] In a third aspect, the present application provides an electronic device, including: a processor, and a memory communicatively connected to the processor;

[0034] The memory stores computer-executable instructions;

[0035] The processor executes the computer-executable instructions stored in the memory to implement the dual-system partitioning method based on lxc container technology as described in any one of the first aspects.

[0036] In a fourth aspect, the present application provides a computer-readable storage medium, where computer-executable instructions are stored in the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, they are used to implement the dual-system partitioning method based on lxc container technology as described in any one of the first aspects.

[0037] In a fifth aspect, the present application provides a computer program product, including a computer program which, when executed by a processor, implements the dual-system partitioning method based on the lxc container technology described in any one of the first aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The accompanying drawings herein are incorporated into and constitute a part of this specification, showing embodiments consistent with the present application and, together with the specification, are used to explain the principles of the present application.

[0039] Figure 1 A schematic diagram of the prior art provided for an embodiment of the present application;

[0040] Figure 2 A schematic diagram of sub-partitions of a super partition provided for an embodiment of the present application;

[0041] Figure 3 A flowchart showing a dual-system partitioning method based on the lxc container technology provided for an embodiment of the present application;

[0042] Figure 4 A disk partitioning diagram provided for an embodiment of the present application;

[0043] Figure 5 A schematic diagram of a host domain and two container domains provided for an embodiment of the present application;

[0044] Figure 6 A schematic diagram of a dual-system partitioning device based on the lxc container technology provided for an embodiment of the present application;

[0045] Figure 7 A schematic diagram of the structure of an electronic device provided for an embodiment of the present application.

[0046] Through the above-mentioned accompanying drawings, specific embodiments of the present application have been shown, and there will be more detailed descriptions hereinafter. These drawings and written descriptions are not intended to limit the scope of the concept of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0047] Here, exemplary embodiments will be described in detail, and examples are shown in the accompanying drawings. When the following description refers to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. On the contrary, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0048] In the description of the embodiments of the present application, the terms indicating the direction or positional relationship such as "inner" and "outer" are based on the direction or positional relationship shown in the drawings. This is only for convenience of description and does not indicate or imply that the device or component must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it should not be construed as a limitation to the present application.

[0049] In the description of the embodiments of the present application, unless otherwise clearly specified and limited, the terms "connected" and "coupled" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be directly connected or indirectly connected through an intermediate medium, and it can be the communication inside two components. For those skilled in the art, the specific meanings of the above terms in the embodiments of the present application can be understood according to specific situations.

[0050] With the rapid development of mobile terminal technology, terminal devices with dual systems have emerged. They can utilize kernel virtualization (Linux Container, lxc) container technology to achieve the parallel online operation and switching of dual systems.

[0051] In the prior art, the image files used by the dual systems in a terminal device are the same and stored in a single system partition. Among them, the image files store the running files or data required for a certain service of the dual systems. For example, the required dynamic libraries, etc.

[0052] Figure 1 The following is a schematic diagram of the prior art provided for the embodiments of the present application, as Figure 1 shown. Taking the Android system as an example, there are multiple partitions in the disk partition of the terminal device, and each partition is used to implement different functions. Among them, the partitions include, but are not limited to: other partition, bootloader partition, boot partition, dtbo partition, super partition, preload partition, and data partition, etc.

[0053] Among them, the super partition is also called the dynamic partition. Its partition table describes the locations, sizes, and file system types of each partition on the terminal device. The super partition is loaded into the memory when the terminal device starts up and is used to mount each partition. In the prior art, there is only one system partition, namely the system, in the sub - partitions of the super partition, which is used to store the same image files of the dual systems. The sub - partitions of the super partition can also include vendor sub - partition, odm sub - partition, cust sub - partition, and product sub - partition, etc.

[0054] It can be understood that the disk partitions and sub - partitions of the super partition in the above examples are only for illustrative purposes and do not limit this application.

[0055] However, in the prior art, since there is only one system partition, namely the system logical partition, in the super partition, and the image files of the dual - system are the same, when a vulnerability appears in the image file, it is easy to expose both systems to danger and reduce the running security of the dual - system.

[0056] Therefore, in view of the above - mentioned technical problems in the prior art, the inventor found in the research process that for a terminal device with a dual - system, by expanding the super partition, an additional logical partition for another system is divided, and corresponding image files are generated for the service data corresponding to each of the dual - systems respectively. Thus, through the system1 logical partition and the system2 logical partition, the isolation of the dual - system image files is achieved. In this way, even if there is a vulnerability in the image file in the logical partition corresponding to a certain system, it will not affect the image file in the logical partition corresponding to the other system, thereby improving the security of the dual - system. Based on this, this application proposes a dual - system partitioning method, device, and equipment based on the lxc container technology.

[0057] Figure 2 It is a schematic diagram of the sub - partition of a super partition provided by an embodiment of this application. As Figure 2 shown, on the basis of Figure 1 , in the sub - partition of the super partition, in addition to including the system sub - partition, vendor sub - partition, odm sub - partition, cust sub - partition, and product sub - partition, it may also include a system2 sub - partition.

[0058] In a specific application scenario of this application, in the dual - system of a terminal device, one system can be used for work and the other system can be used for life. Or, one system serves as a security - side system to maintain the running security of the terminal device, and the other system can serve as a non - security - side system to run various services of the terminal device. In addition, both systems of the dual - system can be Android systems or one is an Android system and the other is another system. It can be understood that the above - mentioned dual - system is only for illustrative purposes and can be determined according to actual application situations, etc., and this application does not limit it.

[0059] The following uses specific embodiments to elaborate in detail on the technical solution of this application and how the technical solution of this application solves the above - mentioned technical problems. These several specific embodiments can be combined with each other, and for the same or similar concepts or processes, they may not be repeated in some embodiments. The following will describe the embodiments of this application in conjunction with the accompanying drawings.

[0060] Figure 3The figure is a schematic flowchart of a dual - system partitioning method based on LXC container technology provided by an embodiment of the present application. The execution subject of this method can be a terminal with partitioning functions, such as a smart phone, a personal computer, a laptop, a tablet, a portable wearable device, a server, or a server cluster, etc. The method in this embodiment can be implemented by software, hardware, or a combination of software and hardware. As Figure 3 shown, the method specifically includes the following steps:

[0061] S301. Obtain the first logical partition of the first system and the second logical partition of the second system.

[0062] Among them, the first logical partition includes the first image file of the first system, and the second logical partition includes the second image file of the second system.

[0063] In this embodiment, taking a smart phone as an example of the terminal device, a dual - system is installed in the smart phone, namely the first system and the second system.

[0064] The smart phone expands the super partition in the disk partition to obtain the first logical partition of the first system and the second logical partition of the second system. Figure 4 The figure is a disk partition diagram provided by an embodiment of the present application. As Figure 4 shown, the super partition includes the first logical partition system1 and the second logical partition system2.

[0065] When obtaining the image file, a possible implementation method is:

[0066] Obtain the first service business data of the first system and the second service business data of the second system. Generate the first image file of the first system according to the first service business data, and generate the second image file of the second system according to the second service business data. Pack the first image file and the second image file into a super image as a whole, and then burn the super image into the expanded super partition, where the expanded super partition includes the first logical partition and the second logical partition.

[0067] S302. Mount the first logical partition to the first system in the first container domain, and mount the second logical partition to the second system in the second container domain.

[0068] In this embodiment, there is one host domain and two container domains in the dual - system device based on LXC container technology. The container domains are the first container domain and the second container domain respectively.

[0069] As Figure 5 shown, Figure 5A schematic diagram of a host domain and two container domains provided by an embodiment of the present application. Among them, in the first container domain, it includes a first system and related information, such as the root directory and data of the first system. In the second container domain, it includes a second system and related information, such as the root directory and data of the second system. In the host domain, it includes the first system, the second system, and information related to the two systems, such as the root directory and data. Each domain has its own directory structure in terms of the mount namespace technology. Among them, the host domain is used to manage the first container domain and the second container domain.

[0070] After the host domain is started, the smart phone mounts the first logical partition to the first system in the first container domain and mounts the second logical partition to the second system in the second container domain.

[0071] S303: Bind the first system in the first container domain to the first system in the host domain, and bind the second system in the second container domain to the second system in the host domain.

[0072] When the host domain starts a container, the smart phone binds the first system in the first container domain to the first system in the host domain, and binds the second system in the second container domain to the second system in the host domain, completing the binding of the first container domain to the first system in the host domain and the binding of the second container domain to the second system in the host domain.

[0073] Among them, in the host domain, it includes the first system and the second system, as well as their respective corresponding related information.

[0074] S304: In the host domain, mount the first logical partition to the first system in the host domain and mount the second logical partition to the second system in the host domain.

[0075] The smart phone mounts the first logical partition to the first system in the host domain and mounts the second logical partition to the second system in the host domain in the host domain, completing the binding of the logical partition to the first system and the second system in the host domain, and completing the isolation of the first image file and the second image file.

[0076] Furthermore, for the services visible and usable in the first container domain, the binary files required by the service can be obtained from the first image file through relevant native service files. Correspondingly, for the services visible and usable in the second container domain, the binary files required by the service can be obtained from the second image file through relevant native service files.

[0077] Taking the Android system as an example for the terminal device, there is a native layer in the middle-level architecture of the Android system. The services started in this layer generally use the binary files in the system image file, which can be pulled up through the init process in the rc file. These services (including the corresponding dynamic libraries) are saved in the system image file in the form of files. Therefore, through the relevant native service files, the binary files required to run a certain service can be obtained from the corresponding image file.

[0078] In the above embodiments of the present application, by obtaining the first logical partition of the first system and the second logical partition of the second system, mounting the first logical partition to the first system in the first container domain, mounting the second logical partition to the second system in the second container domain, binding the first system in the first container domain to the first system in the host domain, and binding the second system in the second container domain to the second system in the host domain, and then in the host domain, mounting the first logical partition to the first system in the host domain and mounting the second logical partition to the second system in the host domain. The method of this embodiment improves the security of the dual system by partitioning the logical partitions corresponding to the dual systems.

[0079] Further, on the basis of the above embodiments, the method of dual-system partitioning based on the lxc container technology of the present application is described in detail through the following embodiments.

[0080] Optionally, the terminal device mounts the first logical partition to the first system in the first container domain and mounts the second logical partition to the second system in the second container domain.

[0081] A possible implementation is:

[0082] Obtain the power-on instruction of the terminal device. According to the power-on instruction, after starting the host domain, mount the first logical partition to the first system directory of the first system in the first container domain and mount the second logical partition to the second system directory of the second system in the second container domain.

[0083] Optionally, bind the first system in the first container domain to the first system in the host domain and bind the second system in the second container domain to the second system in the host domain.

[0084] A possible implementation is:

[0085] Bind the first system directory to the directory list corresponding to the first system in the host domain and bind the second system directory to the directory list corresponding to the second system in the host domain.

[0086] Optionally, mount the first logical partition to the first system in the host domain, and mount the second logical partition to the second system in the host domain.

[0087] A possible implementation is:

[0088] Mount the first logical partition to the directory list corresponding to the first system in the host domain, and mount the second logical partition to the directory list corresponding to the second system in the host domain.

[0089] Through the above steps, the corresponding relationship between the first logical partition and the first system, and the corresponding relationship between the second logical partition and the second system are established. The method of this embodiment effectively improves the security of dual-system operation by dividing different partitions for different systems.

[0090] Figure 6 It is a schematic diagram of a dual-system partitioning device based on the lxc container technology provided by an embodiment of the present application, as Figure 6 shown. The device includes: an acquisition module 601 and a processing module 602.

[0091] The acquisition module is used to acquire the first logical partition of the first system and the second logical partition of the second system. The first logical partition includes the first image file of the first system, and the second logical partition includes the second image file of the second system.

[0092] The processing module is used to mount the first logical partition to the first system in the first container domain, and mount the second logical partition to the second system in the second container domain.

[0093] The processing module is further used to bind the first system in the first container domain to the first system in the host domain, and bind the second system in the second container domain to the second system in the host domain.

[0094] The processing module is further used to, in the host domain, mount the first logical partition to the first system in the host domain, and mount the second logical partition to the second system in the host domain.

[0095] A possible implementation is that the acquisition module 601 is specifically used for:

[0096] Expand the super partition in the disk partition of the terminal device to obtain the first logical partition of the first system and the second logical partition of the second system.

[0097] A possible implementation is that the processing module 602 is specifically used for:

[0098] Obtain the power-on instruction of the terminal device.

[0099] Start the host domain according to the power-on instruction.

[0100] Mount the first logical partition to the first system directory of the first system in the first container domain.

[0101] Mount the second logical partition to the second system directory of the second system in the second container domain.

[0102] A possible implementation is that the processing module 602 is specifically configured to:

[0103] Bind the first system directory to the directory list corresponding to the first system in the host domain.

[0104] Bind the second system directory to the directory list corresponding to the second system in the host domain.

[0105] A possible implementation is that the processing module 602 is specifically configured to:

[0106] Mount the first logical partition to the directory list corresponding to the first system in the host domain.

[0107] Mount the second logical partition to the directory list corresponding to the second system in the host domain.

[0108] A possible implementation is that the acquisition module 601 is further configured to:

[0109] Acquire the first service business data of the first system and the second service business data of the second system.

[0110] Generate a first image file of the first system according to the first service business data, and generate a second image file of the second system according to the second service business data.

[0111] It should be understood that the above device embodiments are illustrative, and the devices of the present application can also be implemented in other ways. For example, the division of units / modules in the above embodiments is only a logical function division, and there can be other division methods in actual implementation. For example, multiple units, modules or components can be combined, or can be integrated into another system, or some features can be ignored or not executed.

[0112] The dual-system partitioning device based on the lxc container technology provided in this embodiment is used to execute the foregoing method embodiments, and its implementation principle and technical effects are similar, so details are not described herein again.

[0113] Figure 7 It is a schematic structural diagram of an electronic device provided in an embodiment of the present application. As Figure 7 shown, the device may include: at least one processor 701 and a memory 702.

[0114] A memory 702 for storing programs. Specifically, the program may include program code, and the program code includes computer operation instructions, executable instructions of the processor 701, etc.

[0115] The memory 702 may include high-speed RAM memory and may also include non-volatile memory, such as at least one disk memory.

[0116] The processor 701 is used to execute the computer-executable instructions stored in the memory 702 to implement the method described in any embodiment of the foregoing method. Among them, the processor 701 may be a central processing unit (CPU for short), or an application specific integrated circuit (ASIC for short), or one or more integrated circuits configured to implement the embodiments of the present application.

[0117] Optionally, the electronic device may further include a communication interface 703. In a specific implementation, if the communication interface 703, the memory 702, and the processor 701 are independently implemented, the communication interface 703, the memory 702, and the processor 701 may be interconnected through a bus and communicate with each other. The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc., but it does not mean that there is only one bus or one type of bus.

[0118] Optionally, in a specific implementation, if the communication interface 703, the memory 702, and the processor 701 are integrated on a chip, the communication interface 703, the memory 702, and the processor 701 may communicate through an internal interface.

[0119] The electronic device provided in this embodiment is used to execute the dual-system partitioning method based on the lxc container technology executed in the foregoing embodiment. The implementation principle and technical effect are similar and will not be elaborated here.

[0120] The present application also provides a computer-readable storage medium, which may include: various media capable of storing program codes such as USB flash drives, external hard drives, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical discs. Specifically, the computer-readable storage medium stores computer-executable instructions for the dual-system partitioning method based on the lxc container technology in the above embodiments.

[0121] The present application also provides a computer program product, which includes executable instructions or a computer program, and the executable instructions or the computer program are stored in a readable storage medium. At least one processor of the electronic device can read the executable instructions from the readable storage medium, and the execution of the executable instructions by at least one processor causes the electronic device to implement the dual-system partitioning method based on the lxc container technology provided by the above various embodiments.

[0122] Those skilled in the art will readily conceive of other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any variations, uses, or adaptations of the present application, which follow the general principles of the present application and include common general knowledge or conventional technical means in the technical field not disclosed in the present application. The specification and the embodiments are only regarded as exemplary, and the true scope and spirit of the present application are pointed out by the following claims.

[0123] It should be understood that the present application is not limited to the exact structures described above and shown in the drawings, and various modifications and changes can be made without departing from its scope. The scope of the present application is only limited by the appended claims.

Claims

1. A dual-system partitioning method based on LXC container technology, characterized in that, Applied to a terminal device, the terminal device includes a first system and a second system, and the method includes: Obtain a first logical partition of the first system and a second logical partition of the second system, where the first logical partition includes a first image file of the first system, and the second logical partition includes a second image file of the second system; Mount the first logical partition to the first system in a first container domain, and mount the second logical partition to the second system in a second container domain; Bind the first system in the first container domain to the first system in the host domain, and bind the second system in the second container domain to the second system in the host domain; In the host domain, mount the first logical partition to the first system in the host domain, and mount the second logical partition to the second system in the host domain.

2. The method according to claim 1, characterized in that, The obtaining the first logical partition of the first system and the second logical partition of the second system includes: Expand the super partition in the disk partition of the terminal device to obtain the first logical partition of the first system and the second logical partition of the second system.

3. The method according to claim 2, wherein The mounting the first logical partition to the first system in the first container domain and mounting the second logical partition to the second system in the second container domain includes: Obtain a power-on instruction of the terminal device; According to the power-on instruction, start the host domain; Mount the first logical partition to the first system directory of the first system in the first container domain; Mount the second logical partition to the second system directory of the second system in the second container domain.

4. The method according to claim 3, characterized in that, The binding the first system in the first container domain to the first system in the host domain and binding the second system in the second container domain to the second system in the host domain includes: Bind the first system directory to the directory list corresponding to the first system in the host domain; Bind the second system directory to the directory list corresponding to the second system in the host domain.

5. The method according to claim 4, characterized in that The mounting the first logical partition to the first system in the host domain and mounting the second logical partition to the second system in the host domain includes: Mount the first logical partition to the directory list corresponding to the first system in the host domain; Mount the second logical partition to the directory list corresponding to the second system in the host domain.

6. The method according to any one of claims 1-5, characterized in that, The method further includes: Obtain first service business data of the first system and second service business data of the second system; Generate the first image file of the first system according to the first service business data, and generate the second image file of the second system according to the second service business data.

7. A dual-system partitioning device based on LXC container technology, characterized in that, Applied to a terminal device, the terminal device includes a first system and a second system, and the device includes: An acquisition module, configured to acquire a first logical partition of the first system and a second logical partition of the second system, where the first logical partition includes a first image file of the first system, and the second logical partition includes a second image file of the second system; A processing module, configured to mount the first logical partition to the first system in a first container domain, and mount the second logical partition to the second system in a second container domain; The processing module is further configured to bind the first system in the first container domain to the first system in the host domain, and bind the second system in the second container domain to the second system in the host domain; The processing module is further configured to, in the host domain, mount the first logical partition to the first system in the host domain, and mount the second logical partition to the second system in the host domain.

8. An electronic device, characterized in that, Comprising: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the dual-system partitioning method based on the lxc container technology according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, Computer-executable instructions are stored in the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, they are used to implement the dual-system partitioning method based on the lxc container technology according to any one of claims 1 to 6.

10. A computer program product, characterized in that, Comprising a computer program, which when executed by a processor implements the dual-system partitioning method based on the lxc container technology according to any one of claims 1-6.

Images