Information processing method and device, storage medium and product

Abstract

The embodiment of the invention discloses an information processing method and device, a storage medium and a product, and the method comprises the steps: scheduling a created construction task to an idle construction machine through a preset scheduling program under the condition that a new code is received; the new codes are codes supporting credential and credential services and non-credential and credential services; creating a target controlled container instance according to the resource restriction rule by using the construction machine; obtaining a construction template from a source code warehouse according to an assembly line template configured in the source code and the configuration information; according to the assembly line template, the configuration information and the construction template, the operation process of the construction task is executed in the target controlled container instance, a target mirror image is generated, and the target mirror image is a mirror image supporting non-credential service and credential service; and deploying the target mirror image to the non-credential server and the credential server, and generating a target application supporting the non-credential service and the credential service.

Description

Technical Field

[0001] The present application relates to the field of microservice technology, and in particular to an information processing method and device, a storage medium, and a product. Background Art

[0002] Internet finance platforms often use both trusted and non-trusted applications (such as those running on traditional X86 systems) to provide external services. This requires setting up different build environments based on the service development language and version. For trusted transformation, a separate trusted server build environment is also required.

[0003] In related technologies, when faced with a microservice system with diverse development languages and technology stacks, each new development language, version, or service requires a different build environment. The build process requires manual operation, and building a complete set of build environments one by one consumes a lot of resources and is labor-intensive. This reduces the efficiency of application creation and fails to meet rapidly changing business needs. Summary of the Invention

[0004] To solve the above technical problems, the embodiments of the present application hope to provide an information processing method and device, a storage medium, and a product that can improve the efficiency of creating applications.

[0005] The technical solution of this application is achieved as follows:

[0006] The present invention provides an information processing method, which includes:

[0007] When new code is received, the created build task is scheduled to an idle build machine using a preset scheduler; the new code is a code that supports both trusted services and non-trusted services;

[0008] Using the build machine, create a target controlled container instance according to resource restriction rules;

[0009] Obtain the build template from the source code repository based on the pipeline template and configuration information configured in the source code;

[0010] According to the pipeline template, the configuration information and the build template, the running process of the build task is executed in the target controlled container instance to generate a target image, where the target image is an image that supports the non-trusted innovation service and the trusted innovation service;

[0011] Deploy the target image to non-trusted innovation servers and trusted innovation servers to generate target applications that support non-trusted innovation services and trusted innovation services.

[0012] An embodiment of the present application provides an information processing device, the device comprising:

[0013] A scheduling unit is used to schedule the created build task to an idle build machine using a preset scheduler when receiving new code; the new code is a code that supports both trusted services and non-trusted services;

[0014] A creation unit, configured to use the build machine to create a target controlled container instance according to resource restriction rules;

[0015] The acquisition unit is used to obtain the build template from the source code repository according to the pipeline template and configuration information configured in the source code;

[0016] A generation unit, configured to execute the running process of the build task in the target controlled container instance according to the pipeline template, the configuration information and the build template, and generate a target image, wherein the target image is an image that supports the non-trusted innovation service and the trusted innovation service;

[0017] A deployment unit is used to deploy the target image to a non-trusted innovation server and a trusted innovation server to generate a target application that supports non-trusted innovation services and trusted innovation services.

[0018] An embodiment of the present application provides an information processing device, the device comprising:

[0019] A memory, a processor and a communication bus, wherein the memory communicates with the processor via the communication bus, and the memory stores an information processing program executable by the processor. When the information processing program is executed, the information processing method described above is executed by the processor.

[0020] An embodiment of the present application provides a storage medium having a computer program stored thereon, which is applied to an information processing device, and is characterized in that when the computer program is executed by a processor, the above-mentioned information processing method is implemented.

[0021] An embodiment of the present application provides a computer program product, including a computer program or computer-executable instructions. When the computer program or computer-executable instructions are executed by a processor, the information processing method provided in the embodiment of the present application is implemented.

[0022] An embodiment of the present application provides an information processing method and device, a storage medium, and a product. The information processing method includes: when new code is received, using a preset scheduler to schedule the created build task to an idle build machine; the new code is code that supports trusted services and non-trusted services; using the build machine, creating a target controlled container instance according to resource restriction rules; obtaining a build template from a source code repository according to the pipeline template and configuration information configured in the source code; executing the running process of the build task in the target controlled container instance according to the pipeline template, configuration information, and build template to generate a target image, the target image being an image that supports non-trusted services and trusted services; deploying the target image to a non-trusted server and a trusted server to generate a target application that supports non-trusted services and trusted services. When the above method is adopted to implement the solution, when the information processing device receives new code, it uses a preset scheduler to schedule the created build task to an idle build machine, uses the build machine to create a target controlled container instance according to resource limitation rules, and obtains the build template in the source code repository according to the pipeline template and configuration template configured in the source code. Therefore, the running process of the build task can be executed in the target controlled container instance according to the pipeline template, configuration information and build template, and a target image supporting non-trusted services and trusted services is generated. The target image can be deployed in a trusted server to obtain a target application that supports trusted services, or it can be deployed in a non-trusted server to obtain a target application that supports non-trusted services. No manual operation is required, and the target application can be obtained by building a complete set of build environments one by one, thereby improving the efficiency of application creation. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A flow chart of an information processing method provided in an embodiment of the present application;

[0024] Figure 2 An exemplary information processing system architecture diagram provided in an embodiment of the present application;

[0025] Figure 3 A timing diagram of an exemplary triggering construction process provided in an embodiment of the present application;

[0026] Figure 4 A schematic diagram of an exemplary construction template and pipeline operation effect provided in an embodiment of the present application;

[0027] Figure 5 A schematic diagram of the structure of an information processing device provided in an embodiment of the present application Figure 1 ;

[0028] Figure 6 A schematic diagram of the structure of an information processing device provided in an embodiment of the present application Figure 2 . DETAILED DESCRIPTION

[0029] The following will be combined with the accompanying drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. It should be understood that the specific embodiments described here are only used to explain the present application and are not used to limit the present application.

[0030] In related technologies, when dealing with microservice systems with diverse development languages and technology stacks, each new development language or service requires a different build environment. This manual setup process is inefficient and prone to errors. Furthermore, the setup process cannot be reused. When the number of services is large, as in microservice scenarios, the build efficiency cannot meet the rapidly changing business needs.

[0031] When the construction process in the relevant technology is applied to trusted innovation applications, since building trusted innovation applications requires pulling source code from the trusted innovation machine, installing trusted innovation environment dependencies, and compiling them into trusted innovation target programs in the trusted innovation machine, in order to build traditional x86 applications and trusted innovation applications at the same time, all services involved not only require the traditional x86 compilation environment, but also require a complete set of trusted innovation construction environment to be built on the trusted innovation physical machine, making the already high resource cost and maintenance cost even higher.

[0032] The build process in related technologies runs directly on the host machine. Because different languages and programs may require different dependency libraries and versions, and the operating system only supports the installation of specific versions of dependency libraries, these dependencies may conflict on a shared machine. Services are not isolated during the build process, leading to build failures. Furthermore, because the host operating system may not support process-level resource management, resource usage during the build process is difficult to limit, and resources are not fully released after the build, causing host resources to be exhausted and build failures to occur.

[0033] The build process in related technologies must run an external build script on the host machine to implement a specific build process. The build script can execute shell commands on the host machine. An incorrect operation or command may cause damage to the entire build environment, resulting in a serious accident in which all services cannot be built, and may also cause security issues such as source code leakage.

[0034] In related technologies, a certain degree of reuse can be achieved by summarizing the commands used in the manual construction process into scripts. However, in the face of complex and changing business scenarios, the construction scripts are becoming increasingly large, and more and more special scenarios require script processing, which ultimately makes the script approach unsustainable.

[0035] In summary, the construction solutions in related technologies face many challenges in the dual context of microservices and information technology innovation. Manual construction is tedious, labor-intensive, difficult to reuse, and prone to errors, but it can meet personalized needs. Scripts can achieve a certain degree of reuse and reduce the workload, but they still cannot meet the requirements of rapid response, cannot improve resource utilization, cannot isolate the construction environment of each service, and cannot solve the security issues of the construction environment.

[0036] In order to solve the problems existing in the related technologies, the following technical solutions can be adopted.

[0037] The present invention provides an information processing method, which is applied to an information processing device. Figure 1 A flow chart of an information processing method provided in an embodiment of the present application is as follows: Figure 1 As shown, the information processing method may include:

[0038] S101 : When new code is received, a preset scheduler is used to schedule the created build task to an idle build machine.

[0039] An information processing method provided in an embodiment of the present application is applicable to scenarios where target applications supporting non-trusted services and trusted services are generated based on new code.

[0040] In the embodiments of the present application, the information processing device may be implemented in various forms. For example, the information processing device described in the present application may include devices such as mobile phones, cameras, tablet computers, laptop computers, PDAs, portable media players (PMPs), navigation devices, wearable devices, smart bracelets, pedometers, and devices such as digital TVs, desktop computers, and servers.

[0041] It should be noted that the new code is a code that supports both trusted computing services and non-trusted computing services.

[0042] It should be noted that the non-trusted innovation service can be an X86 version service, or a non-trusted innovation service can be a service of other versions. The specific non-trusted innovation service can be determined based on actual conditions, and the embodiments of this application do not limit this.

[0043] In the embodiment of the present application, the new code can be the code submitted by the developer to the information processing device, or it can be the code transmitted to the information processing device by other devices, or it can be the code obtained by the information processing device through other means. The specific way in which the information processing device obtains the new code can be determined according to actual conditions, and the embodiment of the present application does not limit this.

[0044] It should be noted that, when the information processing device receives the new code, it writes the new code into the GitLab source code repository.

[0045] It should also be noted that the GitLab source code repository also includes source code, which specifically includes all the codes that support trusted services and non-trusted services.

[0046] This application builds a pipeline system. When the developer submits the source code, the source code repository triggers the webhook to the pipeline system. The pipeline system triggers the specified pipeline according to the preset rules. The pipeline is scheduled to a specific machine to execute the build task based on the status of the current build machine cluster.

[0047] In an embodiment of the present application, the preset scheduler may be a GitLab Pipeline functional program, or may be other functional programs. The specific preset scheduler may be determined based on actual conditions, and the embodiment of the present application does not limit this.

[0048] In the embodiment of the present application, the number of construction machines can be determined according to actual conditions, and the embodiment of the present application does not limit this.

[0049] In an embodiment of the present application, the task volume of the construction machine can be determined, and the idle machine can be determined based on the determined task volume; the idle construction machine can also be determined by other methods; the specific method of determining the idle construction machine can be determined according to actual conditions, and the embodiment of the present application does not limit this.

[0050] In an embodiment of the present application, the process of an information processing device using a preset scheduler to schedule the created build task to an idle build machine includes: detecting whether the new code meets the conditions for starting the preset scheduler; starting the preset scheduler when it is determined that the new code meets the conditions for starting the preset scheduler; creating a build task using the preset scheduler, and scheduling the build task to an idle build machine.

[0051] In an embodiment of the present application, the conditions for starting the preset scheduling program can be conditions configured in the information processing device, or conditions transmitted to the information processing device by other devices, or conditions obtained by the information processing device through other means. The specific way in which the information processing device obtains the conditions for starting the preset scheduling program can be determined according to actual conditions, and the embodiments of the present application do not limit this.

[0052] In the embodiment of the present application, the method of starting the preset scheduling program can be determined according to actual conditions, and the embodiment of the present application does not limit this.

[0053] In an embodiment of the present application, it is possible to detect whether the naming of the new code complies with the preset regular expression matching rules of the preset scheduler. If so, it is determined that the new code meets the conditions for starting the preset scheduler. Other methods can also be used to detect whether the new code meets the conditions for starting the preset scheduler. The specific method of detecting whether the new code meets the conditions for starting the preset scheduler can be determined based on actual conditions, and the embodiment of the present application does not limit this.

[0054] In the embodiment of the present application, a construction task related to the new code can be created using a preset scheduling level.

[0055] In an embodiment of the present application, after the information processing device detects whether the new code meets the conditions for starting the preset scheduler, if it is determined that the new code does not meet the conditions for starting the preset scheduler, it generates prompt information; and outputs the prompt information.

[0056] In the embodiment of the present application, the prompt information can be voice information, text information, image information, or other forms of information. The specific prompt information can be determined according to actual conditions, and the embodiment of the present application does not limit this.

[0057] In the embodiment of the present application, the prompt information is outputted to prompt that the new code does not meet the conditions for starting the preset scheduler.

[0058] In an embodiment of the present application, if the new code does not meet the conditions for starting the preset scheduler, it is skipped and no longer processed, and the prompt information is output at the same time.

[0059] In an embodiment of the present application, a preset scheduler can be used to check whether the new code meets the preset regular expression matching rules. If it meets the rules, a build task is created; if it does not meet the rules, the new code is ignored.

[0060] S102: Using the build machine, create a target controlled container instance according to resource restriction rules.

[0061] In an embodiment of the present application, after the information processing device schedules the created build task to an idle build machine using a preset scheduler, it uses the build machine to create a target controlled container instance according to resource restriction rules.

[0062] In an embodiment of the present application, a build machine is used to create a target controlled container instance according to container technology and resource restriction rules.

[0063] In the embodiment of the present application, the target controlled container instance is an instance in an independent dedicated container, and the resources CPU and memory of the container are controlled according to the pre-application and allocation.

[0064] It's important to note that each controlled container instance is isolated from each other, preventing any interference or conflicts. Build scripts run within the container and cannot unauthorizedly access the host machine, thus preventing security issues. Upon completion, the build container is destroyed, completely freeing up CPU, memory, and disk resources, avoiding issues such as incomplete resource release.

[0065] This application uses container technology to start a dedicated independent container for each build task. The container's resources, CPU and memory, are controlled according to the quotas applied and allocated in advance. At the same time, each container is isolated from each other, and there is no mutual influence or conflict. The script of the build process runs in the container and cannot unauthorized access to the host machine, which can avoid security issues. After the build is completed, the build container will be destroyed, which can completely release CPU, memory and disk resources, avoiding problems such as incomplete resource release.

[0066] In the embodiment of the present application, Docker technology: With the help of container technology, the executable file of the application and the operating environment are packaged into a dual-architecture container image that supports both traditional x86 CPUs and trusted CPUs. The x86 version image is pulled on the traditional x86 server, and the trusted version image is pulled on the trusted server to achieve dual-track operation of x86 and trusted. The compilation process of the application is externalized to the template and pipeline in the form of Dockerfile. Some commonly used Dockerfiles are pre-set for different development languages and technology stacks so that developers can choose according to their needs. This can not only achieve the reuse of the compilation process, but also meet the personalized construction requirements of the application.

[0067] S103: Obtain a build template from a source code repository according to the pipeline template and configuration information configured in the source code.

[0068] In an embodiment of the present application, after the information processing device uses a build machine to create a target controlled container instance according to resource restriction rules, it obtains a build template from the source code repository according to the pipeline template and configuration information configured in the source code.

[0069] It should be noted that the source code repository is the GitLab source code repository.

[0070] It's important to note that a pipeline template is defined in .gitlab-ci.yml and describes which component templates the service uses, how to build it, and where to save the build artifacts. Build templates are used to solve build problems for specific development languages. For example, the build processes for Go and Java differ, so language-specific build templates are required.

[0071] In an embodiment of the present application, a build description file specification is designed to describe pipeline templates and build templates, summarize common problems faced in the build process, find general solutions, and encapsulate general processes and tasks for sharing, so that the build process can perform build tasks based on a simple service description file.

[0072] S104: Execute the running process of the build task in the target controlled container instance according to the pipeline template, configuration information and build template to generate a target image.

[0073] In an embodiment of the present application, after the information processing device obtains the build template from the source code repository according to the pipeline template and configuration information configured in the source code, it executes the running process of the build task in the target controlled container instance according to the pipeline template, configuration information and build template to generate the target image.

[0074] It should be noted that the target image is an image that supports both non-trusted services and trusted services.

[0075] In an embodiment of the present application, the information processing device executes the running process of the build task in the target controlled container instance according to the pipeline template, configuration information and build template, and generates the target image, including: compiling the source code according to the pipeline template, build template and configuration information to generate executable files of the trusted application and non-trusted application; obtaining the source code; and generating the target image according to the source code, executable file and build template.

[0076] It should be noted that the source code includes new code.

[0077] In an embodiment of the present application, the source code can be obtained from a source code repository, from other devices, or from information input by a user. The specific method of obtaining the source code can be determined based on actual conditions, and the embodiment of the present application does not limit this.

[0078] In an embodiment of the present application, the build process can be started in the source code directory on the build machine worker according to the build template, pipeline template and configuration information, and the executable files of the trusted application and non-trusted application (including the executable files of the trusted application and the executable files of the non-trusted application) can be generated while compiling the source code.

[0079] In the embodiment of the present application, the target image includes a non-trusted image and a trusted image. That is, the trusted image and the non-trusted image can be generated according to the source code, executable file and build template, so as to obtain the target image according to the trusted image and the non-trusted image.

[0080] This application establishes and maintains Dockerfile templates for each development language by creating a pipeline template and building a template library (Dockerfile template is a template file used to describe the steps of making trusted Docker images and non-trusted Docker images. According to the Dockerfile template, two Docker images can be finally made, including: the image of the trusted program and the image of the non-trusted program.), and the compilation solutions of different versions of different development languages are made into different Dockerfiles for developers to choose according to their own needs. It supports adjustments based on the template for personalized needs and executes the construction process with the final Dockerfile.

[0081] This application will build process templates and pipelines, which can be applied to each microservice after simple description and setting, so that they can be connected to the build process.

[0082] In an embodiment of the present application, the process of an information processing device generating a target image based on source code, executable files and build templates includes: building a non-trusted image based on the build template, executable files and source code; building a trusted image based on the build template, executable files and source code; and fusing the non-trusted image and the trusted image to obtain the target image.

[0083] In an embodiment of the present application, a non-trusted image can be built in the source code directory on the build machine worker according to the build template, executable file and source code, and a traditional X86 image can be generated and uploaded to the product warehouse.

[0084] In an embodiment of the present application, the construction of the trusted image can be started in the source code directory on the construction machine worker according to the construction template, executable file and source code, and the trusted image can be generated and uploaded to the product warehouse.

[0085] It's important to note that an artifact repository is used to store build artifacts, including but not limited to Docker images and binary files. When deploying an application, the application server pulls the artifacts locally using the artifact address and starts the application. The artifact repository also features a function for periodically cleaning up expired and unused artifacts to prevent uncontrolled expansion and resource waste.

[0086] In the embodiment of the present application, the method of fusing the non-trusted image and the trusted image to obtain the target image can be determined according to actual conditions, and the embodiment of the present application does not limit this.

[0087] This application describes the construction phase of the service by designing and building a pipeline template, which includes three stages: pulling source code, packaging Docker images, and uploading products. Pull source code template: pull the specified source code through the git command, the input parameters are the code repository address and the target directory, and the output result is the pulling result and the target directory. Package Docker image template: compile the pulled source code into x86 and trusted computing applications, the input parameters are the build working directory, the CPU architecture of the build product, the name of the build product, the label of the build product, and the output result is the Docker image file. Upload product template: upload multi-platform container images to the product warehouse through the skopeo tool, the input parameters are the Docker image file path and the target address, and the output is the full path of the build product.

[0088] This application builds a cluster of build machines to execute service-initiated build tasks. Using a load balancing algorithm, build tasks are evenly distributed among build workers, improving build efficiency and machine utilization. Requirements include a Linux kernel >= 4.8, Docker >= 19.03, binfmt-support >= 2.1.7, and Docker experimental features enabled.

[0089] S105. Deploy the target image to the non-trusted innovation server and the trusted innovation server to generate a target application that supports non-trusted innovation services and trusted innovation services.

[0090] In an embodiment of the present application, the information processing device executes the running process of the build task in the target controlled container instance according to the pipeline template, configuration information and build template. After generating the target image, the target image is deployed to the non-trusted innovation server and the trusted innovation server to generate the target application that supports non-trusted innovation services and trusted innovation services.

[0091] In an embodiment of the present application, the target image is deployed to a non-trusted innovation server and a trusted innovation server, so as to utilize the non-trusted innovation server and the trusted innovation server to provide services to the outside world.

[0092] This application is based on the feature that Docker images support multi-platform architecture. During construction, it provides traditional x86 build environment and trusted build environment (if there is no trusted physical machine, it can be simulated into a trusted machine through QUME virtualization technology for building trusted applications) and compiles the executable files of each environment separately, and finally packages them into an image that supports x86 and trusted. When the application is running, it can automatically determine and run traditional x86 or trusted applications according to the environment.

[0093] It's important to note that QUME technology is a purely software-based virtualization emulator that can simulate virtually any hardware device. By pulling service source code onto a QUME-emulated trusted computing machine, trusted computing applications can be built. Because the QUME emulator's build speed is slower than that of a physical trusted computing machine, it serves only as a substitute when a physical trusted computing machine is unavailable.

[0094] In an embodiment of the present application, through microservice adaptation, developers select the corresponding pipeline template (.gitlab-ci.yml) and build template Dockerfile from the template library according to the development language and version requirements. If there are personalized build requirements, the build template can be modified according to the situation. Then, in the build description file, the operating system, CPU architecture (supporting traditional x86, etc.), build working directory, build product name and target machine and other information of the product to be built are declared. The developer submits the pipeline template, build template, and description file to the code library. Subsequent code submissions will automatically trigger the build pipeline to generate a traditional x86 and trusted two-in-one multi-platform container image based on the pipeline template, build template, and build description file. The container image can be deployed on non-trusted and trusted servers at the same time to achieve dual-track operation.

[0095] In an embodiment of the present application, after the information processing device generates a target application that supports non-trusted services and trusted services, it deletes the target controlled container instance.

[0096] It can be understood that after generating the target application that supports non-trusted innovation services and trusted innovation services, the target controlled container instance has been applied. By deleting the target controlled container instance, the central processing unit (CPU), memory and disk resources can be completely released, avoiding problems such as incomplete resource release.

[0097] In an embodiment of the present application, after the information processing device generates a target application that supports non-trusted innovation services and trusted innovation services, it detects the build products generated in the process of generating the target application; if the generation time of the build products is greater than or equal to the preset time, the build products are deleted.

[0098] In an embodiment of the present application, the preset duration may be duration information configured in the information processing device, or may be duration information transmitted to the information processing device by other devices, or may be duration information obtained by the information processing device through other means. The specific manner in which the information processing device obtains the preset duration may be determined based on actual circumstances, and the embodiment of the present application does not limit this.

[0099] It should be noted that the preset duration can be one week, one month, or other time lengths. The specific length of the preset duration can be determined based on actual conditions, and the embodiments of the present application do not limit this.

[0100] In an embodiment of the present application, a periodic cleaning mechanism may be set up to periodically clean up build products whose generation time is greater than or equal to a preset time.

[0101] In an embodiment of the present application, a garbage cleaning mechanism can also be set up to scan completed build processes and expired build products, and regularly clean up build products that exceed the effective time (that is, the generation time of the build products is greater than or equal to the preset time), so as to avoid build products occupying resources and reduce resource waste.

[0102] It is understandable that this application solves the problems of continuous construction of traditional x86 and trusted innovation applications in microservice scenarios, such as large workload, non-reusability, non-automation, high resource consumption, and non-support for simultaneous construction of trusted innovation applications. By abstracting the construction process of traditional x86 and trusted innovation applications, using templates and pipeline technology, the adaptation process is summarized and implemented into a replicable, shareable, scalable and maintainable construction system and construction template, which provides assistance for the adaptation of a large number of microservices and greatly reduces the threshold and workload of trusted innovation adaptation. Through the pipeline, the time required for construction is significantly reduced, and the efficiency and quality of software development and operation and maintenance are improved. In addition, the pipeline also facilitates collaboration and communication between teams, ensures fast, stable and reliable software delivery, and provides strong technical support for the trusted innovation adaptation of various businesses on our Internet financial platform.

[0103] For example, Figure 2 As shown: the source code repository gateway can be NGINX, and the source code repository is the GitLab platform; developers can submit new code to the source code repository, which triggers the pipeline system and builds a template repository to maintain pipeline templates and build templates for various development languages and technology stacks, using the GitLab platform for management and collaboration; the build pipeline can perform some specific tasks according to trigger conditions, using GitLab Pipeline; the build machine cluster is a worker that downloads source code, installs dependencies, compiles applications, and ultimately generates application images. It consists of multiple traditional x86 and trusted physical machines, and registers the machine capabilities and attributes to GitLab Runner. It is scheduled by GitLab Pipeline and ultimately generates a target image that supports traditional x86 servers and trusted servers. The target image is deployed to traditional x86 servers (target servers) and trusted servers (target servers) and provides external services.

[0104] For example, Figure 3As shown: the developer submits new code that supports both traditional non-trusted innovation (X86) and trusted innovation to the GitLab source code repository (i.e., receives the new code). The GitLab source code repository checks whether the new code meets the pipeline startup conditions pre-configured by the developer (i.e., detects whether the new code meets the conditions for starting the preset scheduler). If the pipeline startup conditions pre-configured by the developer are met, the GitLab Pipeline is started (i.e., when it is determined that the new code meets the conditions for starting the preset scheduler, the preset scheduler is started); if the pipeline startup conditions pre-configured by the developer are not met, it is skipped. GitLab Pipeline schedules the build task to an idle build machine worker through the pipeline system (i.e., uses the preset scheduler to create the build task and schedules the build task to an idle build machine). According to the resource limitation rules (CPU, memory), it uses container technology to start an independent controlled container instance (i.e., uses the build machine to create the target controlled container instance according to the resource limitation rules) for running the build task. The build machine worker pulls the source code and pulls the build template according to the pipeline template and configuration parameters configured in the source code (such as docker account, password, warehouse address) (that is, the build template is obtained from the source code repository according to the pipeline template and configuration information configured in the source code). The pipeline template refers to the file defined in .gitlab-ci.yml, which is used to describe which component templates the current service uses, how to build, and how to save the build products. The build template is a template used to solve the build problems of a specific development language. For example, the build process of Go and Java is different, so when building different development languages, you need to use the build template of a specific development language. In the source code directory on the build machine worker, fill in the configuration information according to the pipeline template and build template to start the build process, compile the source code, and generate executable files for the trusted application and traditional x86 application at the same time (that is, compile the source code according to the pipeline template, build template and configuration information to generate executable files for the trusted application and non-trusted application). In the source code directory on the build machine worker, start building a traditional x86 image according to the predefined build template (that is, build a non-trusted image based on the build template, executable file and source code), generate and upload the traditional x86 image to the product warehouse. In the source code directory on the build machine worker, start building a trusted image according to the predefined build template (that is, build a trusted image based on the build template, executable file and source code), generate and upload the trusted image to the product warehouse. Merge the above-generated trusted image and non-trusted image to generate a target image that supports both traditional x86 servers and trusted servers (that is, merge the non-trusted image and the trusted image to obtain the target image).Deploy the target image to the traditional x86 server (target server) and the trusted server (target server) at the same time and provide services to the outside world (that is, deploy the target image to the non-trusted server and the trusted server to generate target applications that support non-trusted services and trusted services).

[0105] It should be noted that the technologies and systems in this application, such as Docker and GitLab, can be replaced by other components of the same type. For example, GitLab can be replaced by Gitee or Coding, systems that also support source code management. Docker can be replaced by Containerd or RTK. GitLab Pipeline can be replaced by systems such as Jenkins.

[0106] In the embodiment of the present application, after processing based on the information processing method in the present application, the obtained construction template (such as Demo construction pipeline) and the pipeline operation effect diagram are as follows: Figure 4 As shown: Build the target image (X86 and trusted image), deploy the target image to the non-trusted server (publishing traditional X86 machines) and the trusted server (publishing trusted machines), and generate the target application that supports non-trusted services and trusted services.

[0107] It can be understood that when the information processing device receives new code, it uses a preset scheduler to schedule the created build task to an idle build machine, uses the build machine to create a target controlled container instance according to resource limitation rules, and obtains the build template in the source code repository according to the pipeline template and configuration template configured in the source code. Therefore, the running process of the build task can be executed in the target controlled container instance according to the pipeline template, configuration information and build template, and a target image supporting non-trusted services and trusted services is generated. The target image can be deployed in a trusted server to obtain a target application that supports trusted services, or it can be deployed in a non-trusted server to obtain a target application that supports non-trusted services. No manual operation is required, and the target application can be obtained by building a complete set of build environments one by one, thereby improving the efficiency of application creation.

[0108] Based on the same inventive concept as the above-mentioned information processing method, an embodiment of the present application provides an information processing device 1 corresponding to an information processing method; Figure 5 A schematic diagram of the structure of an information processing device provided in an embodiment of the present application Figure 1 , the information processing device 1 may include:

[0109] The scheduling unit 11 is used to schedule the created build task to an idle build machine using a preset scheduler when receiving new code; the new code is a code that supports the trusted services and non-trusted services;

[0110] A creation unit 12 is configured to use the build machine to create a target controlled container instance according to resource restriction rules;

[0111] An acquisition unit 13 is configured to acquire a build template from a source code repository according to the pipeline template and configuration information configured in the source code;

[0112] A generation unit 14 is configured to execute the running process of the build task in the target controlled container instance according to the pipeline template, the configuration information and the build template, and generate a target image, wherein the target image is an image that supports the non-trusted innovation service and the trusted innovation service;

[0113] The deployment unit 15 is used to deploy the target image to the non-trusted innovation server and the trusted innovation server to generate a target application that supports non-trusted innovation services and trusted innovation services.

[0114] In some embodiments of the present application, the generating unit 14 is configured to compile the source code according to the pipeline template, the building template, and the configuration information to generate executable files of the trusted application and the non-trusted application; and generate the target image according to the source code, the executable file, and the building template;

[0115] The acquiring unit 13 is configured to acquire source code; the source code includes the new code.

[0116] In some embodiments of the present application, the device further comprises a fusion unit;

[0117] The creation unit 12 is configured to construct a non-trusted image based on the construction template, the executable file, and the source code; and to construct a trusted image based on the construction template, the executable file, and the source code;

[0118] The fusion unit is used to fuse the non-trusted image and the trusted image to obtain the target image.

[0119] In some embodiments of the present application, the device further comprises a detection unit and a starting unit;

[0120] The detection unit is used to detect whether the new code meets the conditions for starting the preset scheduler;

[0121] The starting unit is configured to start the preset scheduling program if it is determined that the new code meets the conditions for starting the preset scheduling program;

[0122] The creation unit 12 is configured to create the construction task using the preset scheduling program;

[0123] The scheduling unit 11 is used to schedule the construction task to an idle construction machine.

[0124] In some embodiments of the present application, the device further includes an output unit;

[0125] The generating unit is configured to generate prompt information if it is determined that the new code does not meet the condition for starting the preset scheduling program;

[0126] The output unit is used to output the prompt information.

[0127] In some embodiments of the present application, the apparatus further includes a deletion unit;

[0128] The deleting unit is configured to delete the target controlled container instance.

[0129] In some embodiments of the present application, the detection unit is used to detect a construction product generated during the generation of the target application;

[0130] The deleting unit is configured to delete the construction product when the generation time of the construction product is greater than or equal to a preset time.

[0131] It should be noted that, in actual applications, the above-mentioned scheduling unit 11, creation unit 12, acquisition unit 13, generation unit 14 and deployment unit 15 can be implemented by a processor 16 on the information processing device 1, specifically a CPU (Central Processing Unit), MPU (Microprocessor Unit), DSP (Digital Signal Processing) or Field Programmable Gate Array (FPGA); the above-mentioned data storage can be implemented by the memory 17 on the information processing device 1.

[0132] The present application also provides an information processing device 1, such as Figure 6 As shown, the information processing device 1 includes: a processor 16, a memory 17 and a communication bus 18. The memory 17 communicates with the processor 16 through the communication bus 18. The memory 17 stores a program executable by the processor 16. When the program is executed, the information processing method described above is executed by the processor 16.

[0133] In practical applications, the memory 17 may be a volatile memory, such as a random-access memory (RAM); or a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD); or a combination of the above types of memory, and provide instructions and data to the processor 16.

[0134] An embodiment of the present application provides a computer-readable storage medium having a computer program thereon, which implements the information processing method described above when the program is executed by the processor 16 .

[0135] An embodiment of the present application provides a computer program product, which includes a computer program or computer-executable instructions stored in a computer-readable storage medium. A processor of an information processing device reads the computer-executable instructions from the computer-readable storage medium and executes the computer-executable instructions, causing the information processing device to perform the information processing method described above in the embodiment of the present application.

[0136] It can be understood that when the information processing device receives new code, it uses a preset scheduler to schedule the created build task to an idle build machine, uses the build machine to create a target controlled container instance according to resource limitation rules, and obtains the build template in the source code repository according to the pipeline template and configuration template configured in the source code. Therefore, the running process of the build task can be executed in the target controlled container instance according to the pipeline template, configuration information and build template, and a target image supporting non-trusted services and trusted services is generated. The target image can be deployed in a trusted server to obtain a target application that supports trusted services, or it can be deployed in a non-trusted server to obtain a target application that supports non-trusted services. No manual operation is required, and the target application can be obtained by building a complete set of build environments one by one, thereby improving the efficiency of application creation.

[0137] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of hardware embodiments, software embodiments, or embodiments combining software and hardware. Furthermore, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage and optical storage, etc.) containing computer-usable program code.

[0138] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0139] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0140] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0141] The above description is merely a preferred embodiment of the present application and is not intended to limit the scope of protection of the present application.

Claims

1. An information processing method, characterized in that: The method comprises: When new code is received, the created build task is scheduled to an idle build machine using a preset scheduler; the new code is a code that supports both trusted services and non-trusted services; Using the build machine, create a target controlled container instance according to resource restriction rules; Obtain the build template from the source code repository based on the pipeline template and configuration information configured in the source code; According to the pipeline template, the configuration information and the build template, the running process of the build task is executed in the target controlled container instance to generate a target image, where the target image is an image that supports the non-trusted innovation service and the trusted innovation service; Deploy the target image to non-trusted innovation servers and trusted innovation servers to generate target applications that support non-trusted innovation services and trusted innovation services.

2. The method according to claim 1, characterized in that The step of executing the build task in the target controlled container instance according to the pipeline template, the configuration information, and the build template to generate a target image includes: Compile the source code according to the pipeline template, the construction template and the configuration information to generate executable files of the trusted application and the non-trusted application; Obtaining source code; the source code includes the new code; The target image is generated according to the source code, the executable file, and the build template.

3. The method according to claim 2, characterized in that Generating the target image according to the source code, the executable file, and the construction template includes: Construct a non-trusted image according to the construction template, the executable file and the source code; Constructing a trusted image according to the construction template, the executable file and the source code; The non-trusted image and the trusted image are merged to obtain the target image.

4. The method according to claim 1, wherein The method of using a preset scheduler to schedule the created build task to an idle build machine includes: Detecting whether the new code meets the conditions for starting a preset scheduler; In the case where it is determined that the new code satisfies the condition for starting the preset scheduling program, starting the preset scheduling program; The build task is created using the preset scheduler, and the build task is scheduled to an idle build machine.

5. The method according to claim 4, characterized in that After detecting whether the new code meets the conditions for starting the preset scheduler, the method further includes: If it is determined that the new code does not meet the conditions for starting the preset scheduling program, generating a prompt message; Output the prompt information.

6. The method according to claim 1, characterized in that After generating the target application that supports non-credential creation services and credential creation services, the method further includes: Delete the target controlled container instance.

7. The method according to claim 1, characterized in that After generating the target application that supports non-credential creation services and credential creation services, the method further includes: Detecting a build product generated during the generation of the target application; If the generation time of the construction product is greater than or equal to the preset time, the construction product is deleted.

8. An information processing device, characterized in that The device comprises: A scheduling unit is used to schedule the created build task to an idle build machine using a preset scheduler when receiving new code; the new code is a code that supports both trusted services and non-trusted services; A creation unit, configured to use the build machine to create a target controlled container instance according to resource restriction rules; The acquisition unit is used to obtain the build template from the source code repository according to the pipeline template and configuration information configured in the source code; A generation unit, configured to execute the running process of the build task in the target controlled container instance according to the pipeline template, the configuration information and the build template, and generate a target image, wherein the target image is an image that supports the non-trusted innovation service and the trusted innovation service; A deployment unit is used to deploy the target image to a non-trusted innovation server and a trusted innovation server to generate a target application that supports non-trusted innovation services and trusted innovation services.

9. An information processing device, characterized in that The device comprises: A memory, a processor, and a communication bus, wherein the memory communicates with the processor via the communication bus, the memory stores an information processing program executable by the processor, and when the information processing program is executed, the method according to any one of claims 1 to 7 is performed by the processor.

10. A storage medium having a computer program stored thereon, applied to an information processing device, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

11. A computer program product comprising computer executable instructions or a computer program, characterized in that When the computer executable instructions or computer program are executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images