17 results about "Disk mirroring" patented technology

The invention discloses a trusted startup design method of a server, and belongs to the technical field of information security and trusted computing, after the server is powered up, a trusted root CPU core is started preferentially, a trusted startup program is operated, and a security environment is initialized; integrity measurement and verification are conducted on the BIOS, and after verification is passed, other CPU cores are released, and the BIOS is operated; the service CPU core loads a bootstrap program GRUB and submits the bootstrap program GRUB to the trusted root CPU core for verification; then loading an operating system kernel image and executing hash measurement, and calculating a path entropy value in combination with control flow information in a kernel initialization stage; performing segmentation comparison on the memory image and the disk mirror image, and calculating a mapping consistency coefficient; if the verification is passed, continuing to start the operating system; according to the method, the tampered component in the system startup chain can be effectively prevented from being loaded and operated, and the startup safety and the overall credibility of the server are enhanced.

The invention discloses a virtual machine data backup method and device of a cloud computing management platform, a program product, equipment and a medium, and relates to the technical field of computers. The method comprises the following steps: scanning file system metadata of a disk mirror image file of a virtual machine snapshot, screening out a current change file from the disk mirror image file, and determining a current change data block needing to be backed up in an incremental backup mode by comparing a target data block of the current change file with a corresponding data block of reference backup data; the reference backup data is a basic backup data set for incremental comparison; performing hierarchical compression processing on the current changed data block; and constructing a target storage directory in the object storage service according to the virtual machine identifier and the backup task identifier associated with the cloud computing management platform, and backing up the compressed data to the target storage directory. According to the invention, the backup data size and backup time are optimized, and the limitation of low backup function efficiency of the cloud computing management platform is effectively improved.

A method is described including signing a concatenation of an image signature, a public key associated with the image signature, and a full disk encryption (FDE) header to obtain an image encryption service (IES) signature. The method also includes writing the IES signature to an extensible firmware interface system partition (ESP) of an encrypted confidential virtual machine (CVM) disk image.

The application belongs to the technical field of computer virtualization storage, and provides a method and system for detecting the integrity of a qcow2 virtual disk image file. The qcow2 file header is read, basic metadata is parsed, and the physical offset of the data cluster corresponding to the starting position of the virtual disk in the qcow2 file is automatically calculated. The data of a sector at the physical offset is read as a master boot record (MBR), and MBR parsing information is obtained. Whether the virtual disk uses a GPT partition scheme is determined according to the MBR. The GPT region is automatically located, parsed and verified, and GPT parsing information is obtained. The parsing information, check information and integrity detection information are summarized and output. The application can penetrate the mapping layer of the qcow2 format, directly locate and read the MBR or GPT region of the virtual disk, automatically complete structure parsing, CRC check and integrity judgment, and output the detection result in a clear form.

The present invention belongs to the field of information security technology and discloses a virtual disk encryption method and device based on Ukey. The method comprises: after detecting Ukey access, creating a virtual disk partition, generating a blank image file according to input file information, and writing the encrypted information obtained by encrypting the symmetric encryption key generated by the secure random number generator using the preset file content structure and the encryption certificate derived by the Ukey into the blank image file, and finally using the symmetric encryption key to encrypt the formatted file data in the file system to obtain ciphertext data and combine it with the preset file content structure written above to generate an encrypted disk image file. The UKey device is used to realize the separation management of keys and data. The keys are stored in the UKey and a physical chip is used to protect the keys, which greatly reduces the risk of key leakage and improves data security. At the same time, the encrypted image file data in a unified format can be seamlessly used between different platforms, with higher flexibility and convenience.

The application discloses a kind of server's trusted startup design method, belong to information security and trusted computing technical field, server is powered on, and trusted root CPU core is started preferentially, and runs trusted startup program and initializes security environment;BIOS is carried out integrity measurement and verification, and other CPU core is released and runs BIOS after verification passes;By business CPU core loading boot program GRUB, and submitting trusted root CPU core for verification;Subsequently, operating system kernel image is loaded and hash measurement is executed, while combining the control flow information of kernel initialization phase to calculate path entropy value;Then memory image and disk image are segmented and compared, and mapping consistency coefficient is calculated;If verification passes, continue to start operating system;The application can effectively prevent tampered components in system startup chain from being loaded and running, and enhance the startup security and overall trustworthiness of server.

A method of “warm” migrating a virtual machine (VM) on a source host to a target virtual machine on a destination host. The method begins by mirroring contents of disk onto a target disk associated with the target VM. Transfer of the RAM contents is then initiated. Unlike live migration strategies where data transfer occurs at a high rate, the RAM contents are transferred at a low transfer rate. While the contents of the RAM are being transferred, a shutdown of the virtual machine is initiated. This operation flushes to disk all of the remaining RAM contents. Before the shutdown completes, those remaining contents, now on disk, are mirrored to the target disk. Once that mirroring is finished, the shutdown of the virtual machine is completed, and this shutdown is mirrored at the destination host. To complete the warm migration, the target virtual machine is then booted from the target disk.

The application discloses a virtual machine data backup method, device, program product, equipment and medium of a cloud computing management platform, relates to the technical field of computers, and comprises the following steps: generating a virtual machine snapshot; filtering out current change files from a disk image file of the virtual machine snapshot by scanning file system metadata of the disk image file, and determining current change data blocks that need to be backed up in an incremental backup mode by comparing target data blocks of the current change files with corresponding data blocks of reference backup data; the reference backup data is a basic backup data set used for incremental comparison; performing hierarchical compression processing on the current change data blocks; constructing a target storage directory in an object storage service according to virtual machine identifiers and backup task identifiers associated with the cloud computing management platform, and backing up the compressed data into the target storage directory. The application optimizes the backup data size and the backup time, and effectively improves the low-efficiency limitation of the backup function of the cloud computing management platform.

Embodiments of the present application disclose a virtual machine disk image making method and device, computer equipment and a storage medium. The method comprises: starting a virtual machine instance, and passing a command line parameter to the virtual machine instance, so that the virtual machine instance does not exit when the virtual machine is shut down; sending a system shutdown instruction to a virtual machine console to control the virtual machine to shut down; determining whether the virtual machine is in a closed state, and if so, sending a snapshot synchronization instruction to the virtual machine console to obtain an image file of the virtual machine; and calling an image creation command of a disk management tool to create a final disk image according to the image file. The method solves the problem that the current virtual machine management software cannot start the virtual machine when making a disk image, or the problem that a blue screen appears when starting the virtual machine, ensures that the made disk image is safe and complete, and does not have the problems of being unable to start or having a blue screen no matter how many levels of disk images are made.

The application discloses a cloud service version updating method and device, equipment and a storage medium, and relates to the field of version updating, and comprises the following steps: acquiring a cloud disk created based on a disk image; the disk image is an image specially used for storing configuration files and a version to be updated; mounting the cloud disk and a host to be updated and connecting the operating system and the cloud disk after mounting are performed through a terraform tool, a disk symbol is allocated for the cloud disk after connection, and the disk symbol is modified according to the disk information and the configuration files corresponding to the host to be updated; the current process service running on the host to be updated is determined, the process corresponding to the current process service is locked if all the processes are in an unoccupied state, and the process is restarted to load the version to be updated after successful locking, thereby completing the updating of the cloud service version. Through cloud disk mounting, the application solves the transmission problem of large file packages, and can update the version of the currently running cloud service without the user's awareness and without occupying the host resources.

Provided are a method, apparatus, and device for generating a bare metal server Linux system image, and a memory medium. The method includes: analyzing a received bare metal server Linux system image generation request so as to obtain a target configuration parameter of a target bare metal server Linux system image to be generated and a target operating system model; selecting, from a redundant array of independent disks driver library, a target redundant array of independent disks driver that matches the target configuration parameter and the target operating system model; adding the target redundant array of independent disks driver to a boot file of a virtual machine to generate a target boot file; and exporting, from the virtual machine, a virtual machine disk image file containing the target boot file as the target bare metal server Linux system image.

The invention relates to the technical field of computers, and discloses an attack path restoration method and system based on a disk mirror image, and the method comprises the steps: carrying out the simulation of an attack event, and building a causal relation graph according to the simulation result of the attack event; obtaining a node data sequence of the causal relationship graph, constructing a training sample set according to the node data sequence, and establishing and training an LSTM model according to the training sample set; obtaining vulnerability characteristics and disk mirror image characteristics of each node data sequence, determining a vulnerability index and a disk mirror image characteristic index according to the vulnerability characteristics and the disk mirror image characteristics, and optimizing the LSTM model according to the vulnerability index and the disk mirror image characteristic index; and establishing a current causal relationship graph, identifying an attack sequence of the current causal relationship graph according to the optimized LSTM model, and restoring an attack path according to the attack sequence of the current causal relationship graph. According to the method, the LSTM model for attack sequence identification can be optimized through the disk mirror image features, and the accuracy of attack path restoration is effectively improved.

The application relates to the technical field of virtual machines, and particularly discloses a continuous data protection method and device, electronic equipment and a storage medium, wherein the method comprises the following steps: temporarily creating a copy image file and taking the copy image file as a disk medium of a virtual machine; starting the virtual machine, performing data operation and recording based on continuous data protection, and simultaneously performing data initialization operation; after the data initialization operation is completed, switching the disk image file to the disk medium of the virtual machine; performing backfill processing on the disk image file; performing data operation and recording based on continuous data protection; the method temporarily creates a copy image file before starting the virtual machine, takes the copy image file as the disk medium used by the virtual machine in the initial stage, and simultaneously performs data initialization operation, so that the virtual machine does not need to pause running to record a data source in the initial stage, the starting rate of the virtual machine can be greatly improved, and the problem of initialization time consumption existing in continuous data protection is effectively solved.

The present invention provides a data synchronization method that can be applied to the field of computer communication technology. The data synchronization method includes: responding to a synchronization request initiated by a local server, receiving a virtual disk image generated by the local server through a preset transmission channel by converting a target file, wherein the synchronization request carries an edit mode identifier of the target file; mounting the virtual disk image to a serial bus control port of a remote server so that the virtual disk image can be identified as a removable storage device; if the edit mode identifier indicates that the target file is in an editable state, obtaining change information generated by the local server and / or remote server in modifying the target file by real-time monitoring of file change events on the removable storage device; and dynamically updating the virtual disk image based on the change information to complete modification synchronization of the target file. The present invention also provides a mirror mounting method, device, and storage medium.

The embodiment of the present application provides a kind of data recovery method, device and electronic equipment of Docker container, which comprises: obtaining the disk image file related to Docker container, disk image file is segmented into multiple clusters, from the data in each cluster meets the first target cluster of the log file format of Docker container.Reorganization splicing is obtained to the second target cluster with predefined rule to the first target cluster.Replacement first data with second data and above steps are recycled until the log file of Docker container is recovered.Therefore, through the embodiment of the present application, when log file is misdeletion and metadata is unavailable, it can be based on the log file format of Docker container that the cluster meeting the log file format of Docker container is reorganized and spliced.To restore the log file of Docker container.Facilitate the running state of Docker container, application and the analysis of the abnormal problem that appears.

The invention provides a cloud mirror image construction method and device, equipment, a medium and a program product, and relates to the technical field of computers.The cloud mirror image construction method comprises the steps that a mirror image disk is created, and a globally unique identifier partition table is configured for the mirror image disk; wherein the globally unique identifier partition table is compatible with a first starting mode; creating a hard disk partition compatible with a second starting mode in the global unique identifier partition table; creating a virtual machine; loading a disk mirror image file of the mirror image disk and an operating system installation source according to the virtual machine so as to install the operating system in a first startup mode; in the operating system, setting a second startup mode identifier for the hard disk partition; installing a unified boot boot program for the second boot mode to a main boot record of the mirror disk; generating a unified bootstrap program configuration file to complete the construction of a cloud mirror image; according to the method provided by the invention, the effect of improving the deployment efficiency of the cloud mirror image in the hybrid hardware environment is achieved.

The invention belongs to the technical field of computer virtualization storage, and provides a method and system for detecting the integrity of a qcow2 virtual disk mirror image file, a qcow2 file header is read, basic metadata is analyzed, and the physical offset of a data cluster corresponding to the initial position of a virtual disk in a qcow2 file is automatically calculated; reading data of a sector from the physical offset as a master boot record (MBR) to obtain MBR analysis information; judging whether the virtual disk uses a GPT partition scheme or not according to the MBR; automatically positioning a GPT area, and analyzing and verifying the GPT area to obtain GPT analysis information; and summarizing and outputting the analysis information, the verification information and the integrity detection information. According to the method, a mapping layer in a qcow2 format can be penetrated, the MBR or GPT region of the virtual disk can be directly positioned and read, structural analysis, CRC (Cyclic Redundancy Check) and integrity judgment are automatically completed, and a detection result is output in a clear form.