61 results about "Disk image" patented technology

An illustrative storage management system is configured to provide persistent data storage to workloads managed by a container orchestration platform deployed in a cluster of nodes. The storage management system is configured to receive a request comprising identifiers indicative of a plurality of layers associated with a virtual machine to be run in the cluster, generate, based on the request, a virtual machine disk image comprising the plurality of layers, the virtual machine disk image configured to be used to run the virtual machine in the cluster, and provide the virtual machine disk image in response to the request. In some implementations, the virtual machine disk image is used by a virtual machine handler associated with the container orchestration platform to run the virtual machine in a virtual machine type pod that is managed by the container orchestration platform.

Systems and methods for capturing a disk image of a bare metal server, and then using the disk image to provision other bare metal servers. A method includes capturing a disk image of a first bare metal server and writing the disk image to a repository manager. The method includes launching a continuous delivery mode on a second bare metal server where the disk image is fetched from repository manager and written to second bare metal server, followed by configuring the unique identity.

The invention discloses a trusted startup design method of a server, and belongs to the technical field of information security and trusted computing, after the server is powered up, a trusted root CPU core is started preferentially, a trusted startup program is operated, and a security environment is initialized; integrity measurement and verification are conducted on the BIOS, and after verification is passed, other CPU cores are released, and the BIOS is operated; the service CPU core loads a bootstrap program GRUB and submits the bootstrap program GRUB to the trusted root CPU core for verification; then loading an operating system kernel image and executing hash measurement, and calculating a path entropy value in combination with control flow information in a kernel initialization stage; performing segmentation comparison on the memory image and the disk mirror image, and calculating a mapping consistency coefficient; if the verification is passed, continuing to start the operating system; according to the method, the tampered component in the system startup chain can be effectively prevented from being loaded and operated, and the startup safety and the overall credibility of the server are enhanced.

A method of causing ransomware to be executed includes obtaining a set of ransomware samples and automatically performing a set of scripted detonations of a first subset of the ransomware samples according to a schedule. The set of scripted detonations includes executing the first subset of ransomware samples on a virtual machine. During the execution of the first subset of ransomware samples, use of computing resources by the first subset of ransomware samples is monitored until a shutdown threshold is reached. Upon reaching the shutdown threshold, any pending detonation tasks of the execution of the first subset of ransomware samples are purged. Detonation-infected disk images are generated to include files resulting from the execution of the first subset of ransomware samples, and the detonation-infected disk images are used in training a machine learning system to assess a likelihood of a presence of a ransomware attack.

The invention discloses a virtual machine data backup method and device of a cloud computing management platform, a program product, equipment and a medium, and relates to the technical field of computers. The method comprises the following steps: scanning file system metadata of a disk mirror image file of a virtual machine snapshot, screening out a current change file from the disk mirror image file, and determining a current change data block needing to be backed up in an incremental backup mode by comparing a target data block of the current change file with a corresponding data block of reference backup data; the reference backup data is a basic backup data set for incremental comparison; performing hierarchical compression processing on the current changed data block; and constructing a target storage directory in the object storage service according to the virtual machine identifier and the backup task identifier associated with the cloud computing management platform, and backing up the compressed data to the target storage directory. According to the invention, the backup data size and backup time are optimized, and the limitation of low backup function efficiency of the cloud computing management platform is effectively improved.

A method is described including signing a concatenation of an image signature, a public key associated with the image signature, and a full disk encryption (FDE) header to obtain an image encryption service (IES) signature. The method also includes writing the IES signature to an extensible firmware interface system partition (ESP) of an encrypted confidential virtual machine (CVM) disk image.

The application discloses a flare occurrence position determination method and device, electronic equipment and computer medium. The method comprises the following steps: when it is determined that a flare occurs, a flare peak time, a full-disk image corresponding to the flare peak time and initial disk positions of each solar active region are obtained; according to the flare peak time and the initial disk positions of each solar active region, first disk positions of each solar active region corresponding to the flare peak time are determined; the first disk positions of each solar active region are subjected to coordinate system conversion, and pixel positions of each solar active region in the full-disk image are determined; according to the pixel positions of each solar active region and the full-disk image, first pixel values of regions in which each solar active region is located in the full-disk image are respectively calculated; and the first disk position of a solar active region corresponding to a maximum value is determined as the occurrence position of the flare. The application can accurately determine the occurrence position of the flare when the flare occurs.

A system for forecasting when solar flares will occur and identifying their possible locations creates a mask to analyze an image of a solar disk. The system also creates an intensity histogram using the solar disk. Additionally, the system stores a resulting full-disk image and a sub-image identifying possible flare signature sites. Further, the system applies a method to filter out false positive detections by using an equation that enhances true positive pre-flare signatures and minimizes false positive signatures.

The invention discloses a multi-code-in-one solid state disk production tracing method, device and equipment. The method comprises the following steps: acquiring an unoccupied target serial number from a serial number pool and burning the unoccupied target serial number to a solid state disk; reading the serial number of the hard disk and generating a verification label according to the consistency of the two; generating and attaching a bar code label when the verification is passed; identifying the bar code label to obtain a bar code serial number and generating a back code label for attachment; a second hard disk image is collected, and a comprehensive score is determined according to the appearance state and labeling quality; and generating a traceability chain based on the target serial number, the hard disk serial number, the bar code serial number, the bar code label, the back code label and the comprehensive score. According to the scheme, traceable management of the solid state disk in production, labeling and circulation links is realized through a combination mechanism of serial number verification, multi-label association and image scoring, and the identification accuracy, the quality inspection efficiency and the whole-process tracking capability are improved.

Embodiments of the innovation relate to, in client device, a method for transitioning a first environment of a client device to a second environment. The method comprises receiving a first disk image to create the first environment executed, and displayed to an end-user, by the client device and a second disk image to create the second environment executed by the client device and identifying a change to the first environment. The method also comprises updating the second environment with the identified change to the first environment and swapping the second environment with the first environment, the second environment displayed to the end-user by the client device. As such, the client device provides for the real-time testing and evaluation of software updates in an environment directly subjected to a real user workflow, as well as an ease of migration to the client device when a user decides to update their software.

The application belongs to the technical field of computer virtualization storage, and provides a method and system for detecting the integrity of a qcow2 virtual disk image file. The qcow2 file header is read, basic metadata is parsed, and the physical offset of the data cluster corresponding to the starting position of the virtual disk in the qcow2 file is automatically calculated. The data of a sector at the physical offset is read as a master boot record (MBR), and MBR parsing information is obtained. Whether the virtual disk uses a GPT partition scheme is determined according to the MBR. The GPT region is automatically located, parsed and verified, and GPT parsing information is obtained. The parsing information, check information and integrity detection information are summarized and output. The application can penetrate the mapping layer of the qcow2 format, directly locate and read the MBR or GPT region of the virtual disk, automatically complete structure parsing, CRC check and integrity judgment, and output the detection result in a clear form.

The present invention belongs to the field of information security technology and discloses a virtual disk encryption method and device based on Ukey. The method comprises: after detecting Ukey access, creating a virtual disk partition, generating a blank image file according to input file information, and writing the encrypted information obtained by encrypting the symmetric encryption key generated by the secure random number generator using the preset file content structure and the encryption certificate derived by the Ukey into the blank image file, and finally using the symmetric encryption key to encrypt the formatted file data in the file system to obtain ciphertext data and combine it with the preset file content structure written above to generate an encrypted disk image file. The UKey device is used to realize the separation management of keys and data. The keys are stored in the UKey and a physical chip is used to protect the keys, which greatly reduces the risk of key leakage and improves data security. At the same time, the encrypted image file data in a unified format can be seamlessly used between different platforms, with higher flexibility and convenience.

The application discloses a method for creating a private image in a public cloud and related equipment, comprising: a cloud management platform on a network side can provide a plurality of interfaces to tenants, and based on the plurality of interfaces, an ISO file uploaded by a tenant and an operation input by the tenant are acquired, the ISO file carrying an installation file of an operating system, so that the cloud management platform registers the ISO file as an ISO image of the public cloud according to the input operation, the ISO image carrying the installation file of the operating system, and installs the installation file of the operating system carried by the ISO image into a temporary cloud server, sets a running environment in the operating system of the temporary cloud server, acquires an image of the temporary cloud server provided with the running environment, and records the image as a system disk image of the public cloud of the tenant. In this way, the cloud management platform can create a private image required by each tenant according to the ISO file, thereby improving the use experience of the tenant and meeting the actual application requirements of the tenant.

Systems and methods for capturing a disk image of a bare metal server, and then using the disk image to provision other bare metal servers. A method includes capturing a disk image of a first bare metal server and writing the disk image to a repository manager. The method includes launching a continuous delivery mode on a second bare metal server where the disk image is fetched from repository manager and written to second bare metal server, followed by configuring the unique identity.

A method is provided comprising enrolling, by a processor, access to a virtual machine disk image in a database for a virtual machine manager by retrieving from the database the parameters required to run a virtual; generating a filename using the retrieved parameters; correlating the filename with the virtual machine disk image; creating a control file from the retrieved parameters; starting the virtual machine virtual machine disk image using the filename; translating, by a processor, the received File I / O requests into Data Operations that perform equivalent File I / O actions on data in a database; executing, by a processor, the Data Operations on the virtual machine disk image in the database, correlated with the filename.

The present application provides a restoration method and apparatus for a virtual machine system, a storage medium and an electronic device. The method comprises: in response to a restoration instruction, determining a virtual machine to be restored, the virtual machine being created on the basis of a system disk image file, the system disk image file consisting of a first image file and a second image file, the first image file comprising data required for creating the virtual machine, and the second image file being used for storing data generated by a user during usage of the virtual machine; acquiring a target image file, the target image file being a blank image file, or an image file that backs up data generated by the user using the virtual machine at historical time points, and the format of the target image file being consistent with that of the second image file; and replacing the second image file with the target image file, so as to perform system restoration on the virtual machine to be restored. The present application can increase the restoration speed of virtual machine systems, and shorten time consumed for system restoration of virtual machines, thus improving user experience.

The application discloses a kind of server's trusted startup design method, belong to information security and trusted computing technical field, server is powered on, and trusted root CPU core is started preferentially, and runs trusted startup program and initializes security environment;BIOS is carried out integrity measurement and verification, and other CPU core is released and runs BIOS after verification passes;By business CPU core loading boot program GRUB, and submitting trusted root CPU core for verification;Subsequently, operating system kernel image is loaded and hash measurement is executed, while combining the control flow information of kernel initialization phase to calculate path entropy value;Then memory image and disk image are segmented and compared, and mapping consistency coefficient is calculated;If verification passes, continue to start operating system;The application can effectively prevent tampered components in system startup chain from being loaded and running, and enhance the startup security and overall trustworthiness of server.

An example method for facilitating virtual machines running in a container system includes determining, by a distributed storage management system, that a volume includes a disk image for providing virtual machines in a container system; copying, by the distributed storage management system and based on the determining that the volume includes the disk image, the volume to a plurality of nodes in the container system; and producing, by the distributed storage management system and based on the copying, a clone of the volume on a particular node of the plurality of nodes to start a virtual machine on the particular node.

The present disclosure relates to systems, methods, and computer-readable media for determining optimal index configurations for intelligently managing updates of virtual machines in an offline manner in a cloud computing system. For instance, a virtual machine (VM) update system can efficiently determine when to apply updates to virtual machines in an intelligent manner that prevents the updates from interfering with the deallocation of virtual machines. In addition, the VM update system can utilize the operating system (OS) disk image snapshots to automatically provide safeguards and ensure that updates do not degrade the performance of the virtual machines, or in the case of an update failure, that the virtual machines are restored to their previous state without the data loss.

The application discloses a virtual machine data backup method, device, program product, equipment and medium of a cloud computing management platform, relates to the technical field of computers, and comprises the following steps: generating a virtual machine snapshot; filtering out current change files from a disk image file of the virtual machine snapshot by scanning file system metadata of the disk image file, and determining current change data blocks that need to be backed up in an incremental backup mode by comparing target data blocks of the current change files with corresponding data blocks of reference backup data; the reference backup data is a basic backup data set used for incremental comparison; performing hierarchical compression processing on the current change data blocks; constructing a target storage directory in an object storage service according to virtual machine identifiers and backup task identifiers associated with the cloud computing management platform, and backing up the compressed data into the target storage directory. The application optimizes the backup data size and the backup time, and effectively improves the low-efficiency limitation of the backup function of the cloud computing management platform.

Methods and systems for allowing for incremental updates to remote localized copies of disk images (e.g., virtual machine images) are described. In some implementations, the disk images are block-based. The incremental updates may be done in a bi-directional manner across different platforms such that an update to any platform may be prepared for any of the other platforms. Preparation of updates between platforms may be accomplished through one or more of combining disk images, differencing disk images, snapshotting disk images, and / or versioning disk images.

The present invention relates to an apparatus and method for software authentication, wherein an enclave including an operating system (OS) library is initialized in a trusted execution environment; software authentication is performed to verify the identity of the enclave; and an application is executed within the enclave using the OS library, wherein performing the software authentication includes authenticating the contents of a disk image associated with the application.

The invention discloses an automatic installation method and device of an operating system, equipment and a storage medium, and belongs to the technical field of computers.The method comprises the steps that a disk image format file is searched for according to a system version number, packaging the disk image format file, the installation general control file and a preset setting file; controlling disk partition based on the installation general control file; the disk image format file is released into a main partition obtained after disk partition operation, and a system, a driver and an application program are installed in the main partition; when the system is started for the first time, the parameters in the setting file are set as system parameters. According to the method and the device, the disk image can be packaged according to the system version number, the general control program can be set and installed into the automatic installation mirror image, the disk partition, the system, the driver and the application are automatically installed through the automatic installation mirror image, parameters are automatically set for the system, and the system installation efficiency is improved.

The embodiment of the invention relates to a hard disk management method, device and system for a data center, and the method comprises the steps: recognizing a purchased hard disk image, and obtaining the attribute information of the hard disk; determining an associated server of the hard disk according to the attribute information of the hard disk, and establishing archive information in the associated server based on the hard disk image and the attribute information of the hard disk; receiving a shot image when the target hard disk exits from the server; verifying the shot image according to the historical image, and prompting to transport the target hard disk to the next specified device after the verification is passed; determining first verification information of the target hard disk according to the historical image, the shot image and a scanning image of the next specified device for the target hard disk, and determining second verification information according to a physical attribute verification result of the next specified device for the target hard disk; and according to the first verification information and the second verification information, determining whether the target hard disk is a to-be-processed hard disk. The problem that an existing hard disk management method is low in safety is solved.

The application discloses a virtual machine image data distribution method and device, equipment and a storage medium. After virtual machine image data is stored to an image storage system, if target image data required for creating a virtual machine is not stored to an image cache cluster, the target image data is copied from the image storage system to the image cache cluster. If the number of virtual machines to be created is small, the virtual machines can be created based on the target image data in the image cache cluster, thereby reducing the time for creating the virtual machines. If the number of virtual machines to be created is large, the target image data in the image cache cluster can be forwarded to each cloud disk storage cluster in a first cloud disk storage set in a tree forwarding mode. The first cloud disk storage set comprises at least one cloud disk storage cluster in the cloud disk storage system except for a cloud disk image cache cluster. Through the tree forwarding mode, the task amount of image data forwarding of the image storage system is dispersed, the load of the image storage system is reduced, and the speed of creating the virtual machines is improved.

A computer-implemented method for managing virtual disks, the computer-implemented method comprising: detecting (800), by a number of processor units (408), an attachment of a memory (338, 412, 500) to a host operating system (502); Mounting (802), by the number of processor units, the memory at a set of mount points (416); Creating (804), by the number of processor units, a set of virtual disks (334, 420) and assigning, by the number of processor units, the set of virtual disks to a guest (336, 426, 506) in an operation (428), wherein instructions for the operation are executed without interruption; detecting (1200), by the number of processor units, a change in the size of the memory by checking a list of block memory units received from the host operating system; Updating (1202), by the number of processor units, a guest configuration for the guest to reflect the change in size of the set of virtual disks, the guest configuration for the guest describing virtual hardware resources for the guest including a set of virtual disk image files (424) for the set of virtual disks; and Notify the hypervisor, by the number of processor units, about the update of the guest configuration file.

Techniques are disclosed for cryptographically securing data on devices of a region data center built in the first facility and installed at a data center. A plurality of server devices and a fleet of key server devices can be configured for transit by encrypting a storage device of each server device using a corresponding data encryption key, storing and encrypting each data encryption key at a corresponding key storage element of each server device using a key encryption key, and storing the key encryption key at the fleet of key server devices. After transit, the fleet of key server devices can be enabled and a server device booted using an initialization disk image stored at a boot volume of the first server device. The first server device can obtain the key encryption key, decrypt the encrypted data encryption key, and then decrypt the storage device.

Embodiments of the present application disclose a virtual machine disk image making method and device, computer equipment and a storage medium. The method comprises: starting a virtual machine instance, and passing a command line parameter to the virtual machine instance, so that the virtual machine instance does not exit when the virtual machine is shut down; sending a system shutdown instruction to a virtual machine console to control the virtual machine to shut down; determining whether the virtual machine is in a closed state, and if so, sending a snapshot synchronization instruction to the virtual machine console to obtain an image file of the virtual machine; and calling an image creation command of a disk management tool to create a final disk image according to the image file. The method solves the problem that the current virtual machine management software cannot start the virtual machine when making a disk image, or the problem that a blue screen appears when starting the virtual machine, ensures that the made disk image is safe and complete, and does not have the problems of being unable to start or having a blue screen no matter how many levels of disk images are made.

The invention provides a data storage encryption method of an encryption system and electronic equipment, the encryption system comprises a host, a data interface and an encryption card, the host comprises a virtual disk, a disk image file, a virtual disk driver, an encryption card driver and user application software, and the encryption card is in communication connection with the virtual disk driver through the data interface. The method comprises the steps that in the process that an operating system of a host sends a read / write request to a virtual disk, the read / write request is intercepted through a virtual disk driver; when the read / write request is a write request, at least sending plaintext data in the write request to an encryption card through a data interface, so that the encryption card at least encrypts the plaintext data to obtain encrypted data; and receiving encrypted data sent by the encryption card, and writing the encrypted data into the disk mapping file. The problem that the storage capacity is fixed and cannot be expanded as required in USB hardware encryption in the prior art is solved.

This invention relates to the field of image recognition technology, and discloses a machine vision-based image emotion recognition method and system. The machine vision-based image emotion recognition method includes the following steps: Step S101, determining the outer canthus point; Step S102, calculating the orbitozygomatic connectivity region; Step S103, calculating the orbitozygomatic isoperipheral bulging index; Step S104, generating a disk image; Step S105, constructing a feature vector using scalar modulation; Step S106, outputting the emotion prediction result. This invention obtains the monocular yaw angle and outer canthus point through eye region ellipse fitting, and locks the orbitozygomatic connectivity region by combining the lower eyelid margin curve and the zygomatic superior margin curvature ridge line, effectively eliminating the projection distortion caused by head yaw. Combined with neural network feature modulation and angular statistics extraction, stable extraction of emotion-related features is achieved, avoiding confusion between posture changes and emotion features.