Xin creation middleware full life cycle automatic operation and maintenance method and system

Abstract

The embodiment of the application provides a kind of Xinyuan middleware full life cycle automatic operation method and system, the method includes: the resource information of virtual machine is collected;The resource information is checked based on the preset Xinyuan environment compliance verification rule, and environment inspection report is generated based on the checking result;Target deployment template and target deployment parameter are determined based on business requirement and environment inspection report;Xinyuan middleware is deployed in the virtual machine based on the target deployment template and target deployment parameter;The deployment result is checked, and when deployment fails, automatic rollback mechanism is triggered;Virtual machine server information, Xinyuan middleware information and operation record for the Xinyuan middleware are encrypted and synchronized to CMDB system after the Xinyuan middleware is deployed.The embodiment scheme can realize the automatic effective operation of Xinyuan middleware, improve operation efficiency and accuracy.

Description

Technical Field

[0001] This invention relates to the field of information technology innovation middleware technology, and in particular to an automated operation and maintenance method and system for the entire lifecycle of information technology innovation middleware. Background Technology

[0002] As the transformation towards domestic IT innovation continues, related technologies adapted to this development also need to be innovated and upgraded in tandem. Domestic IT innovation middleware, as a core supporting component of domestic IT innovation systems, is a crucial foundational software connecting upper-layer applications with underlying virtual machine hardware and operating systems. Its deployment standardization, operational security, and operational stability directly determine the operational quality, resource utilization, and business continuity of domestic IT innovation business systems, making it a high-frequency and critical core component of the domestic IT innovation IT operations and maintenance system.

[0003] Currently, the deployment of domestically developed middleware in the market is still mainly done manually. Some scenarios use semi-automated deployment solutions for general middleware, which include Web middleware, application server middleware, message middleware, etc., and are widely used in the infrastructure construction of various business systems.

[0004] As a core supporting component of domestic IT innovation systems, the deployment, operation, security, and stability of domestic IT innovation middleware directly determine the operational quality of domestic IT innovation business systems. Currently, the operation and maintenance of domestic IT innovation middleware in production environments is still mainly based on manual operation, which has the following technical defects and pain points: 1. The deployment process relies on manual checks of preconditions such as software and hardware compatibility, kernel parameters, and port usage, which can easily lead to missed or false checks, resulting in deployment failure or middleware malfunction. Furthermore, the deployment of a single virtual machine can take up to several hours, and configuration consistency is difficult to guarantee when deploying across clusters, resulting in extremely low efficiency. 2. Patch updates and vulnerability fixes rely on manual downloading, uploading, and installation, which can lead to problems such as patch version mismatch, lack of compatibility verification in the domestic IT environment, and untimely fixes. This can easily cause middleware security vulnerabilities and performance degradation. Furthermore, the single-node update operation is cumbersome and can easily cause business interruption. 3. The operation and maintenance process lacks full-process security audit, manual operations leave no trace, and compliant configurations are not automatically verified, which fails to meet the security compliance requirements of information technology innovation and poses dual risks to security and compliance; 4. Virtual machine server and middleware asset information needs to be manually entered into the CMDB system, which leads to problems such as information lag, entry errors, and data inconsistency, resulting in chaotic asset management and an inability to support accurate operation and maintenance decisions; 5. After deployment, patch update and vulnerability repair fail, it is necessary to manually clean up residual files, roll back configurations and restart services. The process is cumbersome and can easily cause residual abnormalities in the virtual machine environment. The fault tolerance rate of operation and maintenance is low, and the labor cost and operation and maintenance difficulty remain high.

[0005] Therefore, existing general-purpose middleware automated deployment solutions are not specifically adapted to the domestic IT innovation software and hardware environment, nor do they integrate patch updates, vulnerability repair, security auditing, and CMDB synchronization functions, thus failing to address the aforementioned pain points in the full-process operation and maintenance of domestic IT innovation middleware. Therefore, there is an urgent need for an automated operation and maintenance solution that can integrate the deployment, operation, security, and asset management of domestic IT innovation middleware. Summary of the Invention

[0006] To address the aforementioned technical problems, embodiments of the present invention provide an automated operation and maintenance method for the entire lifecycle of domestically developed middleware, comprising: Collect virtual machine resource information; The resource information is verified based on the preset compliance verification rules for the information technology innovation environment, and an environmental inspection report is generated based on the verification results. Determine the target deployment template and target deployment parameters based on business needs and environmental inspection reports; Deploy the domestic IT middleware in the virtual machine based on the target deployment template and target deployment parameters; Verify the deployment results and trigger an automatic rollback mechanism if deployment fails; The information of the virtual machine server on which the domestic IT innovation middleware is deployed, the information of the domestic IT innovation middleware, and the operation records for the domestic IT innovation middleware are encrypted and synchronized to the CMDB system.

[0007] In one embodiment, the method further includes: A pre-built patch library and vulnerability library for domestic IT innovation middleware are provided, and patch files are stored separately in the patch library and vulnerability library. Scan the versions and running status of deployed domestic IT middleware; When the scan results indicate that the domestic IT middleware needs to be updated and / or repaired, a matching target patch is determined in the patch library and / or vulnerability library based on the scan results. The target patch includes update patches and / or vulnerability repair patches. Based on the target patch, the domestic IT middleware is silently updated or vulnerabilities are fixed.

[0008] In one embodiment, the method further includes: Download the target patch via an encrypted channel; After updating and / or repairing the domestic IT innovation middleware, verify the availability and cluster connectivity of the updated and / or repaired domestic IT innovation middleware; If the verification result indicates an anomaly, the automatic rollback mechanism is triggered.

[0009] In one embodiment, the method further includes: The system collects real-time logs of the entire process of deployment, patch updates, vulnerability repair, configuration changes, and permission operations of the domestic IT innovation middleware, and determines the operation type, operation object, execution time, client IP, and operation result based on the full process logs. The determined operation type, operation object, execution time, client IP, and operation result are stored in the operation traceability database; Based on the preset domestic IT innovation security compliance audit standards, the system automatically identifies high-risk operations in the operation traceability database and generates security audit reports and compliance test reports based on the identification results.

[0010] In one embodiment, the method further includes: The operation and maintenance operations related to the aforementioned domestic IT innovation middleware are classified, stored, and archived to generate a domestic IT innovation operation and maintenance compliance ledger. The operation and maintenance operations include at least collection operations, deployment operations, verification and validation operations, patch identification operations, update operations, repair operations, rollback operations, data synchronization operations, and data storage operations.

[0011] In one embodiment, the step of verifying the resource information based on preset compliance verification rules for the information technology innovation environment, and generating an environmental inspection report based on the verification results, includes: Based on the preset compliance verification rules for the domestic IT innovation environment, the system performs compatibility and compliance verification on the operating system version, kernel parameters, dependent library versions, port occupancy status, and resource usage, and generates an environment inspection report based on the verification results.

[0012] In one embodiment, the method further includes: Multiple candidate deployment templates are pre-built, and the candidate deployment templates are configured with virtual machine environment adaptation parameters, domestic IT innovation compliance configuration items, cluster networking rules of virtual machines and domestic IT innovation middleware, and node role allocation strategies of each domestic IT innovation middleware in the network. The process of determining the target deployment template and target deployment parameters based on business needs and environmental inspection reports includes: The target deployment parameters are determined based on business needs and environmental inspection reports, and the target deployment template is selected from multiple candidate templates.

[0013] In one embodiment, determining the target deployment parameters includes: Based on the aforementioned business requirements and environmental inspection, the preset deployment parameters are adjusted or dynamically rendered to obtain the target deployment parameters.

[0014] In one embodiment, the step of verifying the deployment result and triggering an automatic rollback mechanism when deployment fails includes: The running status of the domestic IT innovation middleware is verified, and the automatic rollback mechanism is triggered when the verification result indicates deployment failure. The method further includes: The automatic rollback mechanism is triggered when the update and / or repair of the domestic IT middleware fails. After the rollback, a new verification is performed, and a corresponding exception handling report is generated.

[0015] Another embodiment of the present invention also provides an automated operation and maintenance system for the entire lifecycle of domestic IT middleware, comprising: The first acquisition module is used to collect resource information of the virtual machine; The first verification module is used to verify the resource information based on the preset compliance verification rules for the information technology innovation environment, and generate an environmental inspection report based on the verification results. The first determination module is used to determine the target deployment template and target deployment parameters based on business needs and environmental inspection reports; The deployment module is used to deploy the domestic IT middleware in the virtual machine based on the target deployment template and target deployment parameters; The second verification module is used to verify the deployment results and trigger an automatic rollback mechanism when the deployment fails. The data synchronization module is used to encrypt and synchronize the virtual machine server information, the information of the information technology innovation middleware, and the operation records of the information technology innovation middleware to the CMDB system.

[0016] Other features and advantages of this application will be set forth in the following description. The objectives and other advantages of this application can be realized and obtained through the structures particularly pointed out in the written description and drawings.

[0017] The technical solution of this application will be further described in detail below with reference to the accompanying drawings and embodiments. Attached Figure Description

[0018] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0019] Figure 1 This is a flowchart illustrating the automated operation and maintenance method for the entire lifecycle of domestic IT middleware in this embodiment of the invention.

[0020] Figure 2 This is a flowchart illustrating the automated operation and maintenance method for the entire lifecycle of domestic IT middleware in another embodiment of the present invention.

[0021] Figure 3This is a flowchart illustrating the automated operation and maintenance method for the entire lifecycle of domestic IT middleware in another embodiment of the present invention.

[0022] Figure 4 This is a structural block diagram of the automated operation and maintenance system for the entire lifecycle of domestically developed middleware in an embodiment of the present invention. Detailed Implementation

[0023] The specific embodiments of the present invention will now be described in detail with reference to the accompanying drawings, but these are not intended to limit the scope of the invention.

[0024] It should be understood that various modifications can be made to the embodiments disclosed herein. Therefore, the following description should not be considered as limiting, but merely as an example of embodiments. Other modifications within the scope of this disclosure will be apparent to those skilled in the art.

[0025] The accompanying drawings, which are included in and form part of this specification, illustrate embodiments of the present disclosure and, together with the general description of the disclosure given above and the detailed description of the embodiments given below, serve to explain the principles of the disclosure.

[0026] These and other features of the invention will become apparent from the following description of preferred forms of embodiments given as non-limiting examples, with reference to the accompanying drawings.

[0027] It should also be understood that although the invention has been described with reference to some specific examples, those skilled in the art can certainly implement many other equivalent forms of the invention.

[0028] The above and other aspects, features and advantages of this disclosure will become more apparent when taken in conjunction with the accompanying drawings and in view of the following detailed description.

[0029] Specific embodiments of the present disclosure are described thereafter with reference to the accompanying drawings; however, it should be understood that the disclosed embodiments are merely examples of the present disclosure and can be implemented in various ways. Well-known and / or repeated functions and structures are not described in detail to avoid unnecessary or redundant details that could obscure the present disclosure. Therefore, the specific structural and functional details disclosed herein are not intended to be limiting, but are merely representative of the present disclosure and are intended to teach those skilled in the art to use the present disclosure in a variety of substantially any suitable detailed structures.

[0030] This specification may use the phrases “in one embodiment,” “in another embodiment,” “in yet another embodiment,” or “in still another embodiment,” all of which may refer to one or more of the same or different embodiments according to this disclosure.

[0031] The embodiments of the present invention will now be described in detail with reference to the accompanying drawings.

[0032] like Figure 1As shown, this embodiment of the invention provides a method for automated operation and maintenance of the entire lifecycle of domestically developed middleware, including: S1: Collect virtual machine resource information; S2: Verify the resource information based on the preset compliance verification rules for the information technology innovation environment, and generate an environmental inspection report based on the verification results; S3: Determine the target deployment template and target deployment parameters based on business needs and environmental inspection reports; S4: Deploy the domestic IT middleware in the virtual machine based on the target deployment template and target deployment parameters; S5: Verify the deployment results and trigger an automatic rollback mechanism when deployment fails; S6: Encrypt and synchronize the virtual machine server information, the information of the information technology innovation middleware, and the operation records of the information technology innovation middleware to the CMDB system.

[0033] The method described in this embodiment aims to solve the problems of low efficiency, poor compatibility, insufficient security and compliance, chaotic asset data management, and weak anomaly handling capabilities of manual operation and maintenance of domestically developed middleware. It realizes full-process automation of domestically developed middleware deployment and CMDB information synchronization, replaces repetitive manual operations, improves operation and maintenance efficiency and stability, and ensures the safe and compliant operation of domestically developed businesses.

[0034] The solution in this embodiment can be applied to industries such as government agencies, finance, energy, and telecommunications, especially in scenarios where a large number of domestic IT middleware (such as TongWeb, BES, etc.) need to be deployed in batches to dozens or even hundreds of virtual machines. It can achieve automated batch deployment and accurate data synchronization of domestic IT middleware.

[0035] In one embodiment, collecting virtual machine resource information may include, for example: The cluster management module in the processing system creates a list of target hosts and automatically collects virtual machine resource information: the version of the domestically developed operating system (such as KylinV10 / Tongxin UOS), kernel parameters, dependent library versions, port usage status, and CPU / memory / disk resource usage.

[0036] Furthermore, the process of verifying the resource information based on preset compliance verification rules for the information technology innovation environment, and generating an environmental inspection report based on the verification results, includes: S201: Based on the preset compliance verification rules for the domestic IT innovation environment, perform compatibility and compliance verification on the operating system version, kernel parameters, dependent library versions, port occupancy status, and resource occupancy, and generate an environment inspection report based on the verification results.

[0037] In this embodiment, the compliance verification rules for the domestic IT innovation environment are stored in the domestic IT innovation environment compliance verification rule library, which includes verification rules for runtime library versions, kernel parameter thresholds, etc. The generated environment inspection report can be stored in the event management module. The environment inspection report is used to confirm whether the target virtual machine environment is compliant and meets the deployment conditions before the formal deployment of the domestic IT innovation middleware.

[0038] In one embodiment, the method further includes: S7: Pre-build multiple candidate deployment templates, which are configured with virtual machine environment adaptation parameters, domestic IT innovation compliance configuration items, cluster networking rules for virtual machines and domestic IT innovation middleware, and node role allocation strategies for each domestic IT innovation middleware in the network.

[0039] For example, but not limited to, pre-set deployment templates for various versions of mainstream IT innovation middleware such as TongWeb and Baolande BES / BCS can be used as candidate deployment templates.

[0040] The process of determining the target deployment template and target deployment parameters based on business needs and environmental inspection reports includes: S301: Determine the target deployment parameters based on business requirements and environmental inspection reports, and determine the target deployment template from multiple candidate templates.

[0041] Determine the target deployment parameters, including: S302: Based on the business requirements and environmental inspection, the preset deployment parameters are adjusted or dynamically rendered to obtain the target deployment parameters.

[0042] In other words, this embodiment does not use fixed configuration parameters from the deployment template. Instead, based on the environment inspection report and current business needs, the final deployment parameters are calculated and generated in real time at the moment of deployment execution. This avoids errors caused by manual configuration modifications and ensures that the node configurations of each virtual machine and the domestic middleware are compatible and conflict-free when deploying across virtual machine clusters. For example, different virtual machines may have different CPU core counts, memory sizes, and disk paths. This embodiment automatically adjusts or dynamically renders JVM parameters (such as -Xmx memory size) and related installation path parameters according to the actual environment and needs, rather than using the same value for all virtual machines. Furthermore, when deploying a cluster in batches, conflicts can occur if multiple virtual machines use the same port. This embodiment automatically allocates an unused port to each virtual machine or generates different cluster communication addresses based on the node role (master / slave) by adjusting or dynamically rendering inherent parameters.

[0043] Furthermore, after determining the target deployment template and parameters, the task management module in the processing system will automatically complete the distribution of the genuine installation package (including the distribution of the installation package and license file in associated resource management), the silent installation of the installation package, and the service registration configuration, based on the target deployment template and parameters. This means it automatically completes the deployment of the domestic IT middleware. For cluster deployment scenarios, the system will also allocate master and slave cluster node roles according to preset allocation data, complete node communication configuration, and cluster networking. The cluster includes virtual machines and the domestic IT middleware.

[0044] Furthermore, the verification of deployment results and the triggering of an automatic rollback mechanism in the event of deployment failure include: S501: Verify the running status of the domestic IT innovation middleware. If the verification result indicates deployment failure, trigger the automatic rollback mechanism.

[0045] In this embodiment, the rollback mechanism includes automatically cleaning up residual files from middleware installation, restoring the previous deployment version of the domestic IT middleware and related configurations, restarting the server, and completing the restoration of the deployment environment.

[0046] In one embodiment, such as Figure 2 As shown, the method further includes: S8: Pre-build a patch library and vulnerability library for domestic IT innovation middleware, and store patch files in the patch library and vulnerability library respectively; S9: Scan the versions and running status of deployed domestic IT middleware; S10: When the scan results indicate that the domestic IT middleware needs to be updated and / or repaired, determine the matching target patch in the patch library and / or vulnerability library based on the scan results. The target patch includes update patches and / or vulnerability repair patches. S11: Perform silent updates or vulnerability fixes on the domestic IT middleware based on the target patch.

[0047] For example, the resource management module pre-builds a patch library and vulnerability library specifically for domestically developed middleware. Patch files and their associated license files are stored according to middleware type, version number, applicable architecture, and patch type (e.g., update patches or vulnerability fix patches), forming a structured patch library and vulnerability library. Simultaneously, the system periodically scans all deployed domestically developed middleware in all virtual machines, collecting information such as current version number, running status (normal / abnormal), and cluster role. The scan results are automatically compared with entries in the patch library and vulnerability library. If a deployed version is found to be lower than the target version in the patch library, it is identified as requiring a general update patch; if a deployed version is found to have a known vulnerability registered in the vulnerability library (e.g., a security vulnerability corresponding to a CVE number), it is identified as requiring a vulnerability fix patch. During the identification process, the system will also automatically verify the compatibility of the patch with the corresponding virtual machine environment, including the compatibility of the domestic operating system version (KylinV10 / Tongxin UOS), hardware architecture, and the current version of the middleware, to ensure that the selected patches can be installed correctly without introducing new compatibility issues. Finally, it outputs a list of patches to be updated and a list of corresponding target nodes, providing accurate input for subsequent batch distribution and silent updates.

[0048] Furthermore, the method also includes: S12: Download the target patch via an encrypted channel; S13: After updating and / or repairing the domestic IT innovation middleware, verify the availability and cluster connectivity of the updated and / or repaired domestic IT innovation middleware; S14: If the verification result is abnormal, the automatic rollback mechanism is triggered.

[0049] In this embodiment, it is determined that the target patch is distributed via an encrypted channel, including both independent and batch distribution of patch packages. Based on this, silent updates and vulnerability patching operations are then performed. After the patching is completed, the system automatically verifies the availability of the domestic IT middleware and the cluster connectivity.

[0050] The method further includes: S15: Trigger the automatic rollback mechanism when updating and / or repairing the domestic IT middleware fails; S16: After rollback, re-verify and generate the corresponding exception handling report.

[0051] In other words, if the update / repair fails, the automatic rollback mechanism will be triggered immediately, and the environment and other checks will be performed again to generate a corresponding exception handling report, which can be stored in the time management module.

[0052] Next, the task management module in the processing system is automatically integrated: Virtual machine server information, such as IP address, hardware configuration, cluster affiliation, and deployment location, can be obtained from the cluster management module; Information about the domestic IT innovation middleware, such as version number, deployment path, configuration parameters, and running status, can be obtained from the deployment task management module; Patch version information, vulnerability remediation status, and operation and maintenance records (data can be obtained from the event management module).

[0053] The collected data is then standardized / formatted and synchronized to the CMDB system in real time via an encrypted interface, triggering CMDB data consistency verification to ensure that asset information is accurate and up-to-date.

[0054] In one embodiment, such as Figure 3 As shown, the method further includes: S15: Collect the full-process logs of the deployment, patch update, vulnerability repair, configuration change and permission operation of the domestic IT innovation middleware in real time, and determine the operation type, operation object, execution time, client IP and operation result based on the full-process logs; S16: Store the determined operation type, operation object, execution time, client IP, and operation result into the operation traceability database; S17: Based on the preset domestic IT innovation security compliance audit standards, automatically identify high-risk operations in the operation traceability database, and generate security audit reports and compliance test reports based on the identification results.

[0055] Specifically, the event management module in the processing system serves as the central hub for the entire process log. It collects raw logs in real time for every operational action, including deployment, patch updates, vulnerability repair, configuration changes, and permission operations, related to the deployment of the domestic IT middleware. The system structurally records the operation type (e.g., "deployment," "patch update," "JVM parameter modification"), the operation object (e.g., target virtual machine IP, middleware instance name, configuration file path), execution time (timestamp accurate to milliseconds), client IP (source of the operation), and operation result (success / failure / partial success). All records are uniformly stored in the operation traceability database, forming an immutable chain of operational evidence. Simultaneously, it pre-configures domestic IT security compliance audit standards. Based on the RBAC permission model, it pre-defines the legal operation scope and sensitive operation rules for different roles, such as administrators, ordinary operations personnel, and auditors. When an operation log is written to the database, the system automatically compares it with the RBAC rules in real time. If it identifies privilege escalation (e.g., ordinary operations personnel attempting to execute commands only permitted by administrators) or forced configuration modifications (e.g., directly rewriting core configuration files without approval), it immediately marks the operation and triggers an alarm.

[0056] In addition, the system periodically performs batch analysis of historical records in the operation traceability database, automatically calculates compliance rates, summarizes high-risk operation details, and sorts out non-compliant events according to the domestic IT innovation compliance baseline (which may, but is not limited to, cover requirements such as log retention, operation auditing, and access control). Ultimately, it generates structured security audit reports and compliance detection reports. In this embodiment, the reports may, but are not limited to, include a list of non-compliant operations, risk ratings, and rectification suggestions, and are retained as long-term audit evidence, thus comprehensively meeting compliance requirements from operation traceability and real-time monitoring to periodic auditing.

[0057] In one embodiment, the method further includes: S18: Classify, store, and archive the operation and maintenance operations related to the aforementioned domestic IT innovation middleware, and generate a domestic IT innovation operation and maintenance compliance ledger. The operation and maintenance operations include at least collection operations, deployment operations, verification and validation operations, patch identification operations, update operations, repair operations, rollback operations, data synchronization operations, and data storage operations.

[0058] For example, the event management module can be used to classify, store, and archive operations such as deployment, patch updates, and vulnerability repair of domestic IT innovation middleware, generating a domestic IT innovation operation and maintenance compliance ledger. This ledger supports multi-dimensional querying and backtracking by time, node, and operation type, and provides retrieval and export functions to meet the needs of domestic IT innovation operation and maintenance auditing and compliance traceability.

[0059] Based on the solutions described in the above embodiments, this application's solution first eliminates the problems of missed or false detections caused by manual inspections through pre-construction environment inspection and compliance verification rule bases, ensuring that the deployment environment meets the compatibility requirements of domestic IT innovation from the source. Second, based on dedicated deployment templates and dynamic parameter rendering, it achieves fully automated orchestration of installation package distribution, silent installation, cluster role allocation, and network configuration, reducing the deployment time of a single virtual machine from several hours to minutes, and ensuring cross-cluster configuration consistency. At the same time, through automatic matching and encrypted batch distribution of patch and vulnerability libraries, it solves the risks of delayed patch updates and version mismatches. Combined with the automatic rollback mechanism in case of deployment failure or update anomalies, it significantly reduces the cost of manual intervention and the difficulty of operation and maintenance fault tolerance. In addition, by storing the entire process operation log into the traceability database in real time, and automatically identifying high-risk operations and regularly generating audit reports and compliance ledgers, the security and compliance requirements of the domestic IT innovation are met. Finally, all asset and operation and maintenance information is automatically synchronized to the CMDB system after standardization processing, which completely solves the problems of information lag and data inconsistency caused by manual entry, thereby improving the efficiency, stability, security and auditability of the operation and maintenance of the domestic IT innovation middleware as a whole.

[0060] Specifically, this embodiment of the solution can replace manual environment checks by addressing the specific adaptation requirements of domestically developed servers, domestically developed operating systems, and virtual machine virtualization layers. It automatically scans virtual machine hardware configurations, domestically developed OS versions, kernel parameters, and dependent library versions to complete pre-verification of domestically developed software and hardware compatibility, thus eliminating environment incompatibility issues caused by manual deployment.

[0061] Secondly, the solution in this embodiment can eliminate the manual step-by-step installation, configuration, and startup process. For domestic IT innovation middleware, it customizes an automated deployment template in a virtual machine environment to achieve automatic distribution of middleware installation packages, silent installation, and automatic parameter configuration.

[0062] Furthermore, this embodiment of the solution solves the problems of low efficiency in manual deployment of a single virtual machine and inconsistent cluster node configuration. It realizes batch deployment of domestically developed middleware for multiple virtual machine nodes, automatic allocation of cluster roles, automatic configuration of node networking, and synchronous self-check of cluster status.

[0063] Moreover, the solution in this embodiment can replace manual cleanup and rollback, automatically clean up installation remnants and restore the original virtual machine environment after the virtual machine's IT innovation middleware deployment fails. At the same time, it can automatically capture deployment logs and locate the cause of the failure, without any manual intervention throughout the process.

[0064] In addition, the solution in this embodiment can automatically solidify the middleware security configuration, permission configuration, and audit configuration in accordance with the compliance requirements of information technology innovation operation and maintenance, avoiding the problems of omissions in manual configuration and non-compliance.

[0065] like Figure 4 As shown, another embodiment of the present invention also provides an automated operation and maintenance system for the entire lifecycle of domestic IT middleware, including: The first acquisition module is used to collect resource information of the virtual machine; The first verification module is used to verify the resource information based on the preset compliance verification rules for the information technology innovation environment, and generate an environmental inspection report based on the verification results. The first determination module is used to determine the target deployment template and target deployment parameters based on business needs and environmental inspection reports; The deployment module is used to deploy the domestic IT middleware in the virtual machine based on the target deployment template and target deployment parameters; The second verification module is used to verify the deployment results and trigger an automatic rollback mechanism when the deployment fails. The data synchronization module is used to encrypt and synchronize the virtual machine server information, the information of the information technology innovation middleware, and the operation records of the information technology innovation middleware to the CMDB system.

[0066] In one embodiment, the system further includes: The first pre-build module is used to pre-build a patch library and a vulnerability library for the domestic IT innovation middleware, wherein the patch library and the vulnerability library store patch files separately by category. The scanning module is used to scan the version and running status of deployed domestic IT middleware. The second determining module is used to determine a matching target patch in the patch library and / or vulnerability library based on the scan results when the scan results indicate that the domestic innovation middleware needs to be updated and / or repaired. The target patch includes update patches and / or vulnerability repair patches. The update and repair module is used to perform silent updates or vulnerability repairs on the domestic IT middleware based on the target patch.

[0067] In one embodiment, the system further includes: The download module is used to download the target patch via an encrypted channel; The verification module is used to verify the availability and cluster connectivity of the updated and / or repaired domestic IT middleware after updating and / or repairing it. The triggering module is used to trigger the automatic rollback mechanism when the verification result indicates an anomaly.

[0068] In one embodiment, the system further includes: The second data acquisition module is used to collect the full-process logs of the deployment, patch update, vulnerability repair, configuration change and permission operation of the domestic IT innovation middleware in real time, and determine the operation type, operation object, execution time, client IP and operation result based on the full-process logs; The storage module is used to store the determined operation type, operation object, execution time, client IP, and operation result into the operation traceability database; The identification module is used to automatically identify high-risk operations in the operation traceability database based on preset domestic IT innovation security compliance audit standards, and generate security audit reports and compliance test reports based on the identification results.

[0069] In one embodiment, the system further includes: The first generation module is used to classify, store, and archive the operation and maintenance operations related to the domestic IT innovation middleware, and generate a domestic IT innovation operation and maintenance compliance ledger. The operation and maintenance operations include at least collection operations, deployment operations, verification and validation operations, patch identification operations, update operations, repair operations, rollback operations, data synchronization operations, and data storage operations.

[0070] In one embodiment, the step of verifying the resource information based on preset compliance verification rules for the information technology innovation environment, and generating an environmental inspection report based on the verification results, includes: Based on the preset compliance verification rules for the domestic IT innovation environment, the system performs compatibility and compliance verification on the operating system version, kernel parameters, dependent library versions, port occupancy status, and resource usage, and generates an environment inspection report based on the verification results.

[0071] In one embodiment, the system further includes: The second pre-build module is used to pre-build multiple candidate deployment templates. The candidate deployment templates are configured with virtual machine environment adaptation parameters, domestic IT innovation compliance configuration items, cluster networking rules of virtual machines and domestic IT innovation middleware, and node role allocation strategies of each domestic IT innovation middleware in the network. The process of determining the target deployment template and target deployment parameters based on business needs and environmental inspection reports includes: The target deployment parameters are determined based on business needs and environmental inspection reports, and the target deployment template is selected from multiple candidate templates.

[0072] In one embodiment, determining the target deployment parameters includes: Based on the aforementioned business requirements and environmental inspection, the preset deployment parameters are adjusted or dynamically rendered to obtain the target deployment parameters.

[0073] In one embodiment, the step of verifying the deployment result and triggering an automatic rollback mechanism when deployment fails includes: The running status of the domestic IT innovation middleware is verified, and the automatic rollback mechanism is triggered when the verification result indicates deployment failure. The system also includes: The second triggering module is used to trigger the automatic rollback mechanism when the update and / or repair of the domestic IT middleware fails. The second generation module is used to re-verify after rollback and generate the corresponding exception handling report.

[0074] Another embodiment of the present invention also provides an electronic device, comprising: One or more processors; Memory, configured to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the automated operation and maintenance method for the entire lifecycle of the domestic IT middleware as described in any of the above descriptions.

[0075] Furthermore, one embodiment of the present invention also provides a storage medium storing a computer program, which, when executed by a processor, implements the automated operation and maintenance method for the entire lifecycle of the domestic IT middleware described above. It should be understood that the various solutions in this embodiment have the corresponding technical effects in the above-described method embodiments, and will not be repeated here.

[0076] Furthermore, embodiments of the present invention also provide a computer program product, which is tangibly stored on a computer-readable medium and includes computer-readable instructions, which, when executed, cause at least one processor to perform an automated operation and maintenance method for the entire lifecycle of domestically developed middleware, such as the one described in the embodiments above.

[0077] It should be noted that the computer storage medium of the present invention can be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, system, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, a random access storage medium (RAM), a read-only storage medium (ROM), an erasable programmable read-only storage medium (EPROM or flash memory), an optical fiber, a portable compact disk read-only storage medium (CD-ROM), an optical storage medium, a magnetic storage medium, or any suitable combination thereof. In the present invention, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. In the present invention, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media can also be any computer-readable medium other than computer-readable storage media, which can send, propagate, or transmit a program configured for use by or in connection with an instruction execution system, system, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wireless, antenna, optical fiber, RF, etc., or any suitable combination thereof.

[0078] Furthermore, those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.

[0079] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A system that specifies functions in one or more boxes.

[0080] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including an instruction set implemented in a process. Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0081] Those skilled in the art should understand that the discussion of any of the above embodiments is merely exemplary and is not intended to imply that the scope of protection of this application is limited to these examples; under the concept of this application, the technical features of the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations of different aspects of one or more embodiments of this application as described above, which are not provided in detail for the sake of brevity.

Claims

1. A method for automated operation and maintenance of the entire lifecycle of domestically developed middleware, characterized in that, include: Collect virtual machine resource information; The resource information is verified based on the preset compliance verification rules for the information technology innovation environment, and an environmental inspection report is generated based on the verification results. Determine the target deployment template and target deployment parameters based on business needs and environmental inspection reports; Deploy the domestic IT middleware in the virtual machine based on the target deployment template and target deployment parameters; Verify the deployment results and trigger an automatic rollback mechanism if deployment fails; The information of the virtual machine server on which the domestic IT innovation middleware is deployed, the information of the domestic IT innovation middleware, and the operation records for the domestic IT innovation middleware are encrypted and synchronized to the CMDB system.

2. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 1, characterized in that, The method further includes: A pre-built patch library and vulnerability library for domestic IT innovation middleware are provided, and patch files are stored separately in the patch library and vulnerability library. Scan the versions and running status of deployed domestic IT middleware; When the scan results indicate that the domestic IT middleware needs to be updated and / or repaired, a matching target patch is determined in the patch library and / or vulnerability library based on the scan results. The target patch includes update patches and / or vulnerability repair patches. Based on the target patch, the domestic IT middleware is silently updated or vulnerabilities are fixed.

3. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 2, characterized in that, The method further includes: Download the target patch via an encrypted channel; After updating and / or repairing the domestic IT innovation middleware, verify the availability and cluster connectivity of the updated and / or repaired domestic IT innovation middleware; If the verification result indicates an anomaly, the automatic rollback mechanism is triggered.

4. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 2, characterized in that, The method further includes: The system collects real-time logs of the entire process of deployment, patch updates, vulnerability repair, configuration changes, and permission operations of the domestic IT innovation middleware, and determines the operation type, operation object, execution time, client IP, and operation result based on the full process logs. The determined operation type, operation object, execution time, client IP, and operation result are stored in the operation traceability database; Based on the preset domestic IT innovation security compliance audit standards, the system automatically identifies high-risk operations in the operation traceability database and generates security audit reports and compliance test reports based on the identification results.

5. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 2, characterized in that, The method further includes: The operation and maintenance operations related to the aforementioned domestic IT innovation middleware are classified, stored, and archived to generate a domestic IT innovation operation and maintenance compliance ledger. The operation and maintenance operations include at least collection operations, deployment operations, verification and validation operations, patch identification operations, update operations, repair operations, rollback operations, data synchronization operations, and data storage operations.

6. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 1, characterized in that, The process of verifying the resource information based on preset compliance verification rules for the information technology innovation environment, and generating an environmental inspection report based on the verification results, includes: Based on the preset compliance verification rules for the domestic IT innovation environment, the system performs compatibility and compliance verification on the operating system version, kernel parameters, dependent library versions, port occupancy status, and resource usage, and generates an environment inspection report based on the verification results.

7. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 1, characterized in that, The method further includes: Multiple candidate deployment templates are pre-built, and the candidate deployment templates are configured with virtual machine environment adaptation parameters, domestic IT innovation compliance configuration items, cluster networking rules of virtual machines and domestic IT innovation middleware, and node role allocation strategies of each domestic IT innovation middleware in the network. The process of determining the target deployment template and target deployment parameters based on business needs and environmental inspection reports includes: The target deployment parameters are determined based on business needs and environmental inspection reports, and the target deployment template is selected from multiple candidate templates.

8. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 7, characterized in that, Determine the target deployment parameters, including: Based on the aforementioned business requirements and environmental inspection, the preset deployment parameters are adjusted or dynamically rendered to obtain the target deployment parameters.

9. The automated operation and maintenance method for the entire lifecycle of domestically developed middleware according to claim 2, characterized in that, The process of verifying the deployment results and triggering an automatic rollback mechanism in case of deployment failure includes: The running status of the domestic IT innovation middleware is verified, and the automatic rollback mechanism is triggered when the verification result indicates deployment failure. The method further includes: The automatic rollback mechanism is triggered when the update and / or repair of the domestic IT middleware fails. After the rollback, a new verification is performed, and a corresponding exception handling report is generated.

10. A fully automated operation and maintenance system for the entire lifecycle of domestically developed middleware, characterized in that, include: The first acquisition module is used to collect resource information of the virtual machine; The first verification module is used to verify the resource information based on the preset compliance verification rules for the information technology innovation environment, and generate an environmental inspection report based on the verification results. The first determination module is used to determine the target deployment template and target deployment parameters based on business needs and environmental inspection reports; The deployment module is used to deploy the domestic IT middleware in the virtual machine based on the target deployment template and target deployment parameters; The second verification module is used to verify the deployment results and trigger an automatic rollback mechanism when the deployment fails. The data synchronization module is used to encrypt and synchronize the virtual machine server information, the information of the information technology innovation middleware, and the operation records of the information technology innovation middleware to the CMDB system.

Images