29 results about "Disk mirroring" patented technology

The invention provides a data synchronization method which can be applied to the technical field of computer communication. The data synchronization method comprises the steps that a synchronization request initiated by a local server is responded, a virtual disk mirror image generated by converting a target file through the local server is received through a preset transmission channel, and the synchronization request carries an editing mode identifier of the target file; mounting the virtual disk mirror image to a serial bus control port of a remote server, so that the virtual disk mirror image can be identified as a removable storage device; if the editing mode identifier represents that the target file is in an editable state, acquiring change information generated by modifying the target file by a local server and / or a remote server by monitoring a file change event on the removable storage device in real time; and dynamically updating the virtual disk mirror image based on the change information to complete modification synchronization of the target file. The invention further provides a mirror image mounting method and device and a storage medium.

The invention discloses a cloud service version updating method and device, equipment and a storage medium, and relates to the field of version updating, and the method comprises the steps: obtaining a cloud disk created based on a disk mirror image; the disk mirror image is a mirror image specially used for storing a configuration file and a version to be updated; mounting of the cloud disk and the to-be-updated host and online connection of the operating system and the mounted cloud disk are executed through a form tool, a drive letter is distributed to the online cloud disk, and the drive letter is modified according to disk information and a configuration file corresponding to the to-be-updated host; and determining a current process service operated by the to-be-updated host, if processes corresponding to the current process service are all in an unoccupied state, locking the processes, and restarting the processes after successful locking to load the to-be-updated version so as to complete updating of the cloud service version. Through cloud disk mounting, the problem of transmission of a large file package is solved, and version updating can be performed on the currently running cloud service under the condition that a user does not perceive and does not preempt host resources.

The invention discloses a trusted startup design method of a server, and belongs to the technical field of information security and trusted computing, after the server is powered up, a trusted root CPU core is started preferentially, a trusted startup program is operated, and a security environment is initialized; integrity measurement and verification are conducted on the BIOS, and after verification is passed, other CPU cores are released, and the BIOS is operated; the service CPU core loads a bootstrap program GRUB and submits the bootstrap program GRUB to the trusted root CPU core for verification; then loading an operating system kernel image and executing hash measurement, and calculating a path entropy value in combination with control flow information in a kernel initialization stage; performing segmentation comparison on the memory image and the disk mirror image, and calculating a mapping consistency coefficient; if the verification is passed, continuing to start the operating system; according to the method, the tampered component in the system startup chain can be effectively prevented from being loaded and operated, and the startup safety and the overall credibility of the server are enhanced.

The invention discloses a virtual machine data backup method and device of a cloud computing management platform, a program product, equipment and a medium, and relates to the technical field of computers. The method comprises the following steps: scanning file system metadata of a disk mirror image file of a virtual machine snapshot, screening out a current change file from the disk mirror image file, and determining a current change data block needing to be backed up in an incremental backup mode by comparing a target data block of the current change file with a corresponding data block of reference backup data; the reference backup data is a basic backup data set for incremental comparison; performing hierarchical compression processing on the current changed data block; and constructing a target storage directory in the object storage service according to the virtual machine identifier and the backup task identifier associated with the cloud computing management platform, and backing up the compressed data to the target storage directory. According to the invention, the backup data size and backup time are optimized, and the limitation of low backup function efficiency of the cloud computing management platform is effectively improved.

A method is described including signing a concatenation of an image signature, a public key associated with the image signature, and a full disk encryption (FDE) header to obtain an image encryption service (IES) signature. The method also includes writing the IES signature to an extensible firmware interface system partition (ESP) of an encrypted confidential virtual machine (CVM) disk image.

The invention discloses a disk allocation mode changing method and device, computer equipment and a storage medium, and relates to the technical field of virtual machines. The method comprises the steps that a target disk mirror image corresponding to a source virtual disk is generated in response to a disk allocation mode conversion instruction, the conversion instruction comprises a target disk allocation mode, and the target disk allocation mode is different from the disk allocation mode of the source virtual disk; migrating data in the source virtual disk to the target disk mirror image, wherein the source virtual disk keeps working in the migration process; the target disk mirror image is mounted, a corresponding target virtual disk is generated to replace the source virtual disk, and the target virtual disk adopts the target disk distribution mode. Therefore, the virtual machine does not need to be shut down and restarted, and the influence on other currently running services of the virtual machine caused by change of the disk distribution mode is avoided.

The invention provides a method and a device for creating a virtual machine of an embedded real-time operating system on a cloud platform. The method comprises the following steps: uploading a kernel mirror image and a disk mirror image of the embedded real-time operating system to a mirror image service of the cloud platform; configuring metadata for the disk mirror image, wherein the metadata comprises a boot mode of the disk mirror image, an associated kernel ID (Identity) and an operating system name; the kernel ID is an ID allocated to the kernel mirror image by the cloud platform; and creating a configuration file of the embedded real-time operating system virtual machine according to the metadata of the disk mirror image, and starting the embedded real-time operating system virtual machine according to the configuration file. According to the method and the device, the embedded real-time operating system virtual machine can be created and operated on the cloud platform, the deployment efficiency is improved, and the requirements of the industry and other fields on the real-time operating system are met.

The invention relates to a virtual machine management method and device based on a disk mirror image format, equipment and a medium. The virtual machine management method based on the disk mirror image format comprises the following steps: in response to a virtual machine creation operation of a user, creating a corresponding disk mirror image format file; starting a target virtual machine based on the disk mirror image format file; performing snapshot creation operation on the target virtual machine through a container storage interface plug-in to obtain a corresponding snapshot disk mirror image format file; and performing snapshot operation on the target virtual machine based on the snapshot disk mirror image format file. According to the embodiment of the invention, the butt joint between the virtualization platform and the file storage system can be supported, and the user experience is improved.

The application belongs to the technical field of computer virtualization storage, and provides a method and system for detecting the integrity of a qcow2 virtual disk image file. The qcow2 file header is read, basic metadata is parsed, and the physical offset of the data cluster corresponding to the starting position of the virtual disk in the qcow2 file is automatically calculated. The data of a sector at the physical offset is read as a master boot record (MBR), and MBR parsing information is obtained. Whether the virtual disk uses a GPT partition scheme is determined according to the MBR. The GPT region is automatically located, parsed and verified, and GPT parsing information is obtained. The parsing information, check information and integrity detection information are summarized and output. The application can penetrate the mapping layer of the qcow2 format, directly locate and read the MBR or GPT region of the virtual disk, automatically complete structure parsing, CRC check and integrity judgment, and output the detection result in a clear form.

The present invention belongs to the field of information security technology and discloses a virtual disk encryption method and device based on Ukey. The method comprises: after detecting Ukey access, creating a virtual disk partition, generating a blank image file according to input file information, and writing the encrypted information obtained by encrypting the symmetric encryption key generated by the secure random number generator using the preset file content structure and the encryption certificate derived by the Ukey into the blank image file, and finally using the symmetric encryption key to encrypt the formatted file data in the file system to obtain ciphertext data and combine it with the preset file content structure written above to generate an encrypted disk image file. The UKey device is used to realize the separation management of keys and data. The keys are stored in the UKey and a physical chip is used to protect the keys, which greatly reduces the risk of key leakage and improves data security. At the same time, the encrypted image file data in a unified format can be seamlessly used between different platforms, with higher flexibility and convenience.

The application discloses a kind of server's trusted startup design method, belong to information security and trusted computing technical field, server is powered on, and trusted root CPU core is started preferentially, and runs trusted startup program and initializes security environment;BIOS is carried out integrity measurement and verification, and other CPU core is released and runs BIOS after verification passes;By business CPU core loading boot program GRUB, and submitting trusted root CPU core for verification;Subsequently, operating system kernel image is loaded and hash measurement is executed, while combining the control flow information of kernel initialization phase to calculate path entropy value;Then memory image and disk image are segmented and compared, and mapping consistency coefficient is calculated;If verification passes, continue to start operating system;The application can effectively prevent tampered components in system startup chain from being loaded and running, and enhance the startup security and overall trustworthiness of server.

The invention discloses a repair method of a shared file system and computing equipment, and relates to the technical field of computers. The method comprises the following steps: acquiring a health state of the shared file system; responding to the condition that the health state is a fault state, suspending an input / output request sent to a corresponding virtual disk by the virtual machine, closing a virtual disk mirror image file stored in the shared file system, unloading a mounting point of the shared file system, and repairing the shared file system; in response to repair completion of the shared file system, mounting the shared file system to the mounting point again; suspension of the input and output requests is relieved, and the virtual machine disk mirror image file stored in the shared file system is opened. In the embodiment of the invention, when the shared file system has a fault / problem, only the input / output request issued by the virtual machine needs to be suspended, the virtual disk mirror image file is closed, and the virtual machine does not need to be closed.

An example method for facilitating virtual machines running in a container system includes determining, by a distributed storage management system, that a volume includes a disk image for providing virtual machines in a container system; copying, by the distributed storage management system and based on the determining that the volume includes the disk image, the volume to a plurality of nodes in the container system; and producing, by the distributed storage management system and based on the copying, a clone of the volume on a particular node of the plurality of nodes to start a virtual machine on the particular node.

A method of “warm” migrating a virtual machine (VM) on a source host to a target virtual machine on a destination host. The method begins by mirroring contents of disk onto a target disk associated with the target VM. Transfer of the RAM contents is then initiated. Unlike live migration strategies where data transfer occurs at a high rate, the RAM contents are transferred at a low transfer rate. While the contents of the RAM are being transferred, a shutdown of the virtual machine is initiated. This operation flushes to disk all of the remaining RAM contents. Before the shutdown completes, those remaining contents, now on disk, are mirrored to the target disk. Once that mirroring is finished, the shutdown of the virtual machine is completed, and this shutdown is mirrored at the destination host. To complete the warm migration, the target virtual machine is then booted from the target disk.

The application discloses a virtual machine data backup method, device, program product, equipment and medium of a cloud computing management platform, relates to the technical field of computers, and comprises the following steps: generating a virtual machine snapshot; filtering out current change files from a disk image file of the virtual machine snapshot by scanning file system metadata of the disk image file, and determining current change data blocks that need to be backed up in an incremental backup mode by comparing target data blocks of the current change files with corresponding data blocks of reference backup data; the reference backup data is a basic backup data set used for incremental comparison; performing hierarchical compression processing on the current change data blocks; constructing a target storage directory in an object storage service according to virtual machine identifiers and backup task identifiers associated with the cloud computing management platform, and backing up the compressed data into the target storage directory. The application optimizes the backup data size and the backup time, and effectively improves the low-efficiency limitation of the backup function of the cloud computing management platform.

Embodiments of the present application disclose a virtual machine disk image making method and device, computer equipment and a storage medium. The method comprises: starting a virtual machine instance, and passing a command line parameter to the virtual machine instance, so that the virtual machine instance does not exit when the virtual machine is shut down; sending a system shutdown instruction to a virtual machine console to control the virtual machine to shut down; determining whether the virtual machine is in a closed state, and if so, sending a snapshot synchronization instruction to the virtual machine console to obtain an image file of the virtual machine; and calling an image creation command of a disk management tool to create a final disk image according to the image file. The method solves the problem that the current virtual machine management software cannot start the virtual machine when making a disk image, or the problem that a blue screen appears when starting the virtual machine, ensures that the made disk image is safe and complete, and does not have the problems of being unable to start or having a blue screen no matter how many levels of disk images are made.

Streams of disk image files usable for deploying software in computing environments can be generated according to some examples. In one example, a system can receive, from a client device, a request for a disk image file. The system can determine, based on the request, a base image file and a customized file that are combinable for generating the disk image file. The system can store, in a header of the base image file, characteristics of the disk image file. The system can transmit, to the client device, the base image file as a stream. The system can pause transmission of the base image file based on the characteristics of the disk image file in the header of the base image file. In response to pausing transmission of the base image file, the system can transmit, to the client device, the customized file as the stream.

The application discloses a cloud service version updating method and device, equipment and a storage medium, and relates to the field of version updating, and comprises the following steps: acquiring a cloud disk created based on a disk image; the disk image is an image specially used for storing configuration files and a version to be updated; mounting the cloud disk and a host to be updated and connecting the operating system and the cloud disk after mounting are performed through a terraform tool, a disk symbol is allocated for the cloud disk after connection, and the disk symbol is modified according to the disk information and the configuration files corresponding to the host to be updated; the current process service running on the host to be updated is determined, the process corresponding to the current process service is locked if all the processes are in an unoccupied state, and the process is restarted to load the version to be updated after successful locking, thereby completing the updating of the cloud service version. Through cloud disk mounting, the application solves the transmission problem of large file packages, and can update the version of the currently running cloud service without the user's awareness and without occupying the host resources.

The invention belongs to the technical field of information security, and discloses a virtual disk encryption method and device based on a Ukey. The method comprises the following steps: after Ukey access is detected, creating a virtual disk partition, generating a blank mirror image file according to input file information, writing a preset file content structure and encrypted information obtained by encrypting a symmetric encryption key generated by a secure random number generator by using an encryption certificate exported by the Ukey into the blank mirror image file, and storing the blank mirror image file in the virtual disk partition; and finally, encrypting formatted file data in a file system by using a symmetric encryption key to obtain ciphertext data, generating an encrypted disk mirror image file by combining the ciphertext data with the written preset file content structure, realizing separation management of the key and the data by using UKey equipment, and storing the key in the UKey. A physical chip is used for protecting the secret key, the risk of secret key leakage is greatly reduced, the data safety is improved, meanwhile, encrypted mirror image file data in a unified format can be seamlessly used between different platforms, and higher flexibility and convenience are achieved.

Provided are a method, apparatus, and device for generating a bare metal server Linux system image, and a memory medium. The method includes: analyzing a received bare metal server Linux system image generation request so as to obtain a target configuration parameter of a target bare metal server Linux system image to be generated and a target operating system model; selecting, from a redundant array of independent disks driver library, a target redundant array of independent disks driver that matches the target configuration parameter and the target operating system model; adding the target redundant array of independent disks driver to a boot file of a virtual machine to generate a target boot file; and exporting, from the virtual machine, a virtual machine disk image file containing the target boot file as the target bare metal server Linux system image.

The invention relates to the technical field of computers, and discloses an attack path restoration method and system based on a disk mirror image, and the method comprises the steps: carrying out the simulation of an attack event, and building a causal relation graph according to the simulation result of the attack event; obtaining a node data sequence of the causal relationship graph, constructing a training sample set according to the node data sequence, and establishing and training an LSTM model according to the training sample set; obtaining vulnerability characteristics and disk mirror image characteristics of each node data sequence, determining a vulnerability index and a disk mirror image characteristic index according to the vulnerability characteristics and the disk mirror image characteristics, and optimizing the LSTM model according to the vulnerability index and the disk mirror image characteristic index; and establishing a current causal relationship graph, identifying an attack sequence of the current causal relationship graph according to the optimized LSTM model, and restoring an attack path according to the attack sequence of the current causal relationship graph. According to the method, the LSTM model for attack sequence identification can be optimized through the disk mirror image features, and the accuracy of attack path restoration is effectively improved.

The application relates to the technical field of virtual machines, and particularly discloses a continuous data protection method and device, electronic equipment and a storage medium, wherein the method comprises the following steps: temporarily creating a copy image file and taking the copy image file as a disk medium of a virtual machine; starting the virtual machine, performing data operation and recording based on continuous data protection, and simultaneously performing data initialization operation; after the data initialization operation is completed, switching the disk image file to the disk medium of the virtual machine; performing backfill processing on the disk image file; performing data operation and recording based on continuous data protection; the method temporarily creates a copy image file before starting the virtual machine, takes the copy image file as the disk medium used by the virtual machine in the initial stage, and simultaneously performs data initialization operation, so that the virtual machine does not need to pause running to record a data source in the initial stage, the starting rate of the virtual machine can be greatly improved, and the problem of initialization time consumption existing in continuous data protection is effectively solved.

The disclosure provides a container orchestration system for preloading containers via secondary disks. The container orchestration system includes creating a disk image with preloaded containers. The disk image can include a container image pre-downloaded and pre-unpacked, ready to be used by container runtime. The container orchestration system includes creating a node with the disk image and attaching the disk to a node when a node is created. The container orchestration system further includes reading a container image from the disk. When the node creator configures the disk mode as a local cache, the container orchestration system can read the container image by caching the image from the disk without the image-pulling process.

Disclosed in the embodiments of the present disclosure are a software file, and a software running method and a related apparatus therefor. The software running method comprises: acquiring a starting request for starting working software of a software file; starting a bootloader of the software file according to the starting request, and allocating an encryption memory for an encryption container corresponding to the software file; by means of the bootloader, instructing a security processor to acquire a first decryption key for an encryption container disk mirror image file of the software file, and sending the first decryption key to the encryption container, so that the encryption container decrypts the encryption container disk mirror image file, so as to obtain an encryption container disk mirror image and the working software, which are stored in the encryption memory; running the encryption container disk mirror image to start the encryption container; and when it is indicated that the encryption container determines that a local authorization file in the encryption container disk mirror image is legitimate, starting the working software. The software file, and the software running method and the related apparatus therefor provided in the embodiments of the present disclosure can improve the anti-reversing and anti-cracking capabilities of software.

The present invention provides a data synchronization method that can be applied to the field of computer communication technology. The data synchronization method includes: responding to a synchronization request initiated by a local server, receiving a virtual disk image generated by the local server through a preset transmission channel by converting a target file, wherein the synchronization request carries an edit mode identifier of the target file; mounting the virtual disk image to a serial bus control port of a remote server so that the virtual disk image can be identified as a removable storage device; if the edit mode identifier indicates that the target file is in an editable state, obtaining change information generated by the local server and / or remote server in modifying the target file by real-time monitoring of file change events on the removable storage device; and dynamically updating the virtual disk image based on the change information to complete modification synchronization of the target file. The present invention also provides a mirror mounting method, device, and storage medium.

The invention discloses a cloud server mirror image making method based on object storage, which is characterized by comprising the following steps of: acquiring mirror image making information from a client, and confirming the size of a disk or an interval according to the information; fragmenting the data for the first time according to the confirmed size; connecting an OSS, processing data through a high-performance concurrent technology, and uploading the data to the OSS; and after all the fragments are uploaded, merging the fragments to generate a mirror image file, and obtaining a download address and a hash value. Object storage, fragmentation compression and concurrent processing technologies are fused, object storage spaces in the same area are automatically matched, and an intranet channel is used for data transmission, so that the problems of storage space and efficiency in cloud service disk mirror image manufacturing are solved.

The embodiment of the present application provides a kind of data recovery method, device and electronic equipment of Docker container, which comprises: obtaining the disk image file related to Docker container, disk image file is segmented into multiple clusters, from the data in each cluster meets the first target cluster of the log file format of Docker container.Reorganization splicing is obtained to the second target cluster with predefined rule to the first target cluster.Replacement first data with second data and above steps are recycled until the log file of Docker container is recovered.Therefore, through the embodiment of the present application, when log file is misdeletion and metadata is unavailable, it can be based on the log file format of Docker container that the cluster meeting the log file format of Docker container is reorganized and spliced.To restore the log file of Docker container.Facilitate the running state of Docker container, application and the analysis of the abnormal problem that appears.

The invention provides a cloud mirror image construction method and device, equipment, a medium and a program product, and relates to the technical field of computers.The cloud mirror image construction method comprises the steps that a mirror image disk is created, and a globally unique identifier partition table is configured for the mirror image disk; wherein the globally unique identifier partition table is compatible with a first starting mode; creating a hard disk partition compatible with a second starting mode in the global unique identifier partition table; creating a virtual machine; loading a disk mirror image file of the mirror image disk and an operating system installation source according to the virtual machine so as to install the operating system in a first startup mode; in the operating system, setting a second startup mode identifier for the hard disk partition; installing a unified boot boot program for the second boot mode to a main boot record of the mirror disk; generating a unified bootstrap program configuration file to complete the construction of a cloud mirror image; according to the method provided by the invention, the effect of improving the deployment efficiency of the cloud mirror image in the hybrid hardware environment is achieved.

The invention belongs to the technical field of computer virtualization storage, and provides a method and system for detecting the integrity of a qcow2 virtual disk mirror image file, a qcow2 file header is read, basic metadata is analyzed, and the physical offset of a data cluster corresponding to the initial position of a virtual disk in a qcow2 file is automatically calculated; reading data of a sector from the physical offset as a master boot record (MBR) to obtain MBR analysis information; judging whether the virtual disk uses a GPT partition scheme or not according to the MBR; automatically positioning a GPT area, and analyzing and verifying the GPT area to obtain GPT analysis information; and summarizing and outputting the analysis information, the verification information and the integrity detection information. According to the method, a mapping layer in a qcow2 format can be penetrated, the MBR or GPT region of the virtual disk can be directly positioned and read, structural analysis, CRC (Cyclic Redundancy Check) and integrity judgment are automatically completed, and a detection result is output in a clear form.