24 results about "Linux kernel" patented technology

This application provides a process monitoring method, electronic device, storage medium, and computer program product. The method includes: acquiring file access events of a target directory; responding to the file access events, reading a process file system to obtain first runtime information of multiple Linux processes, wherein the process file system is used to provide runtime information of all Linux processes under non-privileged user privileges, and the non-privileged user privileges do not have control permissions in the Linux kernel mode; and generating a process activity log based on the first runtime information of the multiple Linux processes. This application's solution allows for more comprehensive monitoring of process activities in a Linux system.

This invention discloses a hardware topology detection method for kernel instrumentation, comprising: obtaining and extracting key structure definitions from the current Linux kernel through the BTF infrastructure, and copying the structure definitions into the kernel module source code; reading the kernel symbol table, selecting the instrumented function from it, and filling the kernel module source code; obtaining the kernel header file of the target machine, compiling and loading the kernel module in conjunction with the modified kernel module source code, and specifying the storage path of the output file; obtaining the number of on-chip systems in the current system according to the sysfs interface, performing a counting operation on the performance monitoring units on each on-chip system, triggering the instrumented function, and obtaining the pointer to the key structure of the kernel driver; using the pointer to the key structure of the kernel driver to calculate the coordinates of the XP node and its connected device type information, obtaining the data through MMI / O access and outputting it in a structured format. This invention also discloses a detection system for implementing the above detection method, which has a wide range of application scenarios.

The application discloses a kind of based on Linux kernel's cryptographic device master-standby cluster load balancing method, it is related to information security and high-availability cluster technical field, including the following steps: step one, at least one main cryptographic device node is configured with at least one backup cryptographic device node, and cryptographic service program is deployed on all nodes to initialize cluster configuration, Keepalived service module is deployed in main cryptographic device node and backup cryptographic device node, periodically send heartbeat message by groupcast mode, and real-time perception node state;Step two, set up health detection module, and adopt dual detection mechanism of node survival detection and cryptographic service availability detection;It can realize that cryptographic device master-standby automatically switches quickly, load intelligent distribution, security context real-time synchronization, comprehensively improve the availability of cryptographic service, reliability, efficiency and security, meet the high-level security needs of critical information system.

This invention provides a method for improving the real-time performance of Linux operating system applications based on a multi-core CPU. The method includes, during system startup, modifying Linux kernel startup parameters to reallocate tasks across the cores of the multi-core CPU, concentrating basic Linux system tasks on the zeroth core; when the target application creates a task, it sets task affinity based on the task's real-time requirements by calling system functions; non-real-time critical tasks are assigned to the first core; real-time critical tasks are assigned to the second core; and sub-real-time critical tasks are assigned to the third core. This invention effectively reduces the response latency of specific interrupts with strict real-time requirements in the Linux system by utilizing different cores of a multi-core CPU to allocate different tasks, improving device real-time performance and meeting the real-time requirements of fields such as power distribution automation.

This invention relates to a method for cross-version binary compatibility of Linux kernel modules, belonging to the field of computer operating system kernels. It includes the following steps: During the compilation phase, the compiler identifies specific keywords (__kabi_reloc_member, __kabi_check_member, __kabi_sizeof) and records instruction offsets, type identifiers, member variable name offsets, and relocation types, generating a .kabi_relocs segment. During the loading phase, the loader parses the .kabi_relocs segment, combines it with module BTF and kernel BTF information, and dynamically repairs instructions based on the relocation type. This invention achieves "compile once, run anywhere" binary compatibility for kernel modules, with the repair operation completed at load time, having no impact on runtime performance.

The application relates to a service processing method, system, device and medium based on a dual real-time kernel. A real-time Linux kernel and a real-time virtual machine monitor kernel are constructed, and a message sharing channel is established between the real-time Linux kernel and the real-time virtual machine monitor kernel; according to a preset multidimensional task scheduling strategy and a preset resource allocation and isolation strategy, the real-time Linux kernel is responsible for system service process scheduling and resource allocation at an operating system level, and the real-time virtual machine monitor kernel is responsible for scheduling, device simulation and resource allocation of a virtual machine service. Through the dual real-time kernel, task scheduling is separated, and the efficiency of task scheduling can be effectively improved. Through the optimized multidimensional task scheduling strategy and the resource allocation and isolation strategy, task scheduling is controlled, and the scheduling delay and jitter of real-time tasks in system services and / or virtual machine services are improved in combination with hardware optimization. The system device and the medium based on the method provided by the application can also achieve the above effects.

The application provides an LCD debugging method, device and equipment. The method isolates the asynchronous parameter update of the device tree plug-in and the synchronous display clock domain of the physical register by establishing a shadow register mapping area in the Linux kernel, and limits the writing path of the physical register. Without triggering the power switching or the driving re-measurement, the shadow mapping area parameters are synchronized to the physical register by listening to the V-Sync signal and using the atomic transmission instruction in the vertical blanking period, so that the incremental debugging parameters are re-locked as a whole in the display frame scanning gap. The application effectively avoids the display timing conflict caused by the partial effect of the parameters, realizes the non-sensing and real-time effect of the LCD parameters in the state of maintaining the display activation, and significantly improves the debugging efficiency and system stability.

This application discloses a method and apparatus for isolating Android cloud mobile phone devices based on process namespaces. The method includes: adding a home namespace field to device objects in the Linux kernel, and controlling the visibility scope of the device objects at multiple levels based on the value of the home namespace field; responding to a system directory traversal request, outputting matching directory entries based on the matching result of the process namespace of the current process and the home namespace field of the device object; responding to a system file access request, executing a matching access request based on the matching result of the process namespace of the current process and the home namespace field of the device object to which the system file belongs; and responding to a device event sending request, sending the device event to the corresponding process namespace based on the home namespace field of the device object. Through the above methods, this application can achieve fine-grained device isolation and dedicated namespace management.

This application discloses a method and apparatus for handling risk events in encrypted traffic. The method includes: synchronously collecting network modality data and host modality data through an eBPF program assembly with multiple function entry points pre-deployed in the Linux kernel to obtain collected network events; transmitting the network events to a user-space receiver via the Perf Buffer data transmission mechanism to append a global high-precision timestamp and host identifier to the network events to obtain network traffic; generating a comprehensive risk score for the network events based on the network traffic, combined with a pre-trained bimodal deep learning model and a cross-modal attention fusion module; and triggering an alarm and writing the network event as a risk event into a graph database when the comprehensive risk score exceeds a preset threshold. Using this application, lateral movement attacks can be effectively detected and defended, improving the accuracy of encrypted risk detection and enabling users to gain a more comprehensive understanding of attack behavior, thereby enabling more effective attack analysis and response.

This invention discloses a file operation method and file operating system for distributed file systems. One embodiment of the file operation method includes: in response to the startup of a target business process, loading a dynamically linked library configured based on the LD_PRELOAD mechanism, and obtaining a globally unique process access identifier allocated by the user-space distributed file system server cluster; intercepting system calls related to glibc library files, allocating a unique file descriptor within the process in user space to replace the Linux kernel allocation logic, concatenating the process access identifier and the file descriptor to generate a globally unique file handle, and calling the server cluster interface to complete the file operation; and notifying the server cluster to release access resources when the process exits. This invention relates to the field of distributed storage technology, solves the performance bottleneck problem of existing user-space file systems, effectively eliminates kernel redundancy overhead, and enables an order-of-magnitude improvement in the read and write performance of distributed file systems.

The application discloses a network card XDP channel load balancing method and device, medium, equipment and program product, and relates to the technical field of network communication. The method comprises the following steps: determining the maximum creation number of a receiving channel of an intelligent network card and the maximum creation number of a sending channel of the intelligent network card; determining an initial configuration mode of the sending channel of the intelligent network card based on the size relationship between the maximum creation number of the receiving channel and the maximum creation number of the sending channel; and when the intelligent network card is in a running state, dynamically adjusting the configuration mode of each sending channel based on the NAPI feedback value of a Linux kernel on the basis of the initial configuration mode. The application improves the flexibility and overall performance of the intelligent network card in a complex network environment, and realizes dynamic optimization allocation of sending channel resources.

This invention discloses a method and apparatus for porting the open-source HarmonyOS system to a Linux kernel. The method includes: obtaining adaptation layer code built based on kernel features of the open-source HarmonyOS framework; performing HarmonyOS-ization on the Linux kernel of the target board to obtain a kernel image file; compiling the adaptation layer code and the target code of the open-source HarmonyOS system based on kernel compilation parameters and target compilation tools to obtain a target image file; and starting the open-source HarmonyOS system on the target board based on the kernel image file and the target image file. The technical solution of this invention can support Linux, Android, and OpenHarmony systems simultaneously with a single kernel codebase, significantly reducing labor costs and shortening the development cycle.

This application provides a method and system for detecting anomalies in Linux kernel I / O event handling. The method includes: collecting the I / O request dwell time without locks through percpu variables at preset I / O blocking nodes in the Linux kernel storage stack bio and request stages; creating file nodes in debugfs to summarize and output the time-consuming data in response to user-space read requests; and creating an I / O tracking structure for each I / O stage of each block device to manage the entry and exit of instances in the I / O request stage. It can also track the I / O context by registering hooks in the Device Mapper framework, and achieve asynchronous data interaction between the kernel and user space using a lock-free circular buffer and the io_uring interface. This application achieves layered observation of the entire I / O chain, low-overhead lock-free operation, and can locate abnormal I / O in seconds, balancing observation accuracy and business I / O performance, without affecting business operations.

The application discloses a virtual machine vcpu thread special-purpose scheduler based on a linux kernel and KVM, and the main body is VMSCH, characterized in that: the VMSCH is a virtual machine vcpu scheduler, the VMSCH priority is between an RT scheduling strategy and a CFS scheduling strategy, the priority is 99, and the RT priority is adjusted from 1-99 to 1-98, the VMSCH only manages the scheduling of vcpu threads and does not manage other threads. In the application, the duty cycle of vcpu exclusive pcpu can be dynamically configured, and it is unnecessary to configure at booting, so that the flexibility of the scheme of isolating pcpu for vcpu use by using isolate is avoided, pcpu resource waste caused by bandwidth limitation and idle state of the RT scheduling strategy is avoided, and the application has CPU architecture independence, and after implementation, any CPU architecture, such as X86, ARM and Loongson, can be naturally supported, so that the application has extremely wide application range.

This application provides a QoS control method and system based on IO demand prediction. The method includes: capturing the IO system call trajectory of a target AI task and extracting an enhanced IO feature vector, where the enhanced IO feature vector is a feature vector containing system call features and file metadata features; matching a pre-trained enhanced IO fingerprint library to identify the current execution stage; predicting the IO demand of the next stage based on a Hidden Markov Model (HMM), where HMM is a probabilistic model used for sequence state prediction; and directly calling the kernel's native block device layer QoS interface to update the token bucket parameters of the target AI task based on the prediction results, where the block device layer QoS interface refers to the token bucket parameter update interface provided by the Linux kernel's rq-qos module. This application achieves non-intrusive prediction of AI task IO demands and ultra-low latency dynamic control of block device layer bandwidth without modifying application code or kernel code.

The application provides a heterogeneous task lock scheduling system and a control method thereof, comprising a task lock scheduling module, the task lock scheduling module calculates a lock weight real value corresponding to a current task, compares the lock weight real value with a lock weight threshold value, and allocates a task lock type suitable for the current task according to the task type and the comparison result; a kernel domain module comprises an RTOS kernel domain and a Linux kernel domain which communicate with each other, and can dynamically adjust the kernel domain type bound to the current task according to a processing stage; an emergency response channel, an emergency stop signal can be sent into the RTOS kernel domain through the emergency response channel; the lock weight real value corresponding to the current task is calculated by the task lock scheduling module, the lock weight real value is compared with the lock weight threshold value, and the task lock type suitable for the current task is allocated according to the task type and the comparison result, so that the real-time instability problem of the CNC system caused by the task lock competition under the AMP architecture is solved.

The application discloses a method for realizing bond scene NAT ALG processing based on DPDK and relates to the technical field of gateway communication; by means of the kni mechanism of VPP combined with DPDK, control connection data packets are introduced into a linux kernel to be processed by ALG in a bond mode, and service data can be processed by VPP. The method realizes ALG processing, guarantees that related applications can normally visit communication, and the service data access after the ALG processing can also be processed by VPP in the bond mode with high performance and high reliability.

A watchdog feeding method and system in a Linux system, the system comprising a Linux application module, a Linux kernel module and an external watchdog module; the Linux kernel module comprising a watchdog thread management unit and an interrupt management unit; the external watchdog module comprising a fast feeding and a slow feeding, the CPU core connecting the fast feeding and the slow feeding; the Linux application module binding the CPU core through multiple real-time threads and feeding software, and interacting with the watchdog thread management unit; the watchdog thread management unit monitoring the state of each CPU core feeding thread; when the CPU occupancy rate exceeds the threshold, the feeding thread is blocked or exited, the feeding thread scheduling timeout, the Linux kernel is abnormal, the interrupt management unit respectively performs the inter-core migration of the feeding timer and the adjustment of the feeding period, the watchdog reset, and the watchdog circuit switching. The running reliability and fault event traceability of the Linux embedded board are improved.

The application relates to a kind of vehicle-mounted central control screen automatic recovery method and system, the method includes: selecting two default states fixed pins from MPU pin, respectively set as first pin and second pin;After starting on MPU power, when MPU completes the start of boot loader, change the first pin from default state to opposite state;After starting on MPU power, when MPU completes the start of Linux kernel, change the second pin from default state to opposite state;After starting on MPU power, when MPU completes the start of android system and application, start heartbeat detection program;After starting on MCU power, poll the state of first pin and second pin, when detecting that the state of first pin and second pin are all in the opposite state corresponding to default state, start heartbeat detection program.The application solves the problem of MPU abnormal detection not timely and inaccurate caused by long starting time and complex starting process of complex system.

A dynamic time-triggered task scheduling method and system, the method comprising adding and initializing a time-triggered scheduler to a Linux kernel; when a task is set as a time-triggered scheduling strategy, the time-triggered scheduler sets scheduling parameters of the task and adds the task to a list thereof to trigger generation of a dynamic time table; a decision maker of the time-triggered scheduler generates the dynamic time table through an asynchronous work queue mechanism; an executor of the time-triggered scheduler reads the task from the dynamic time table and caches before scheduling, and takes the task from the cache and executes to complete scheduling of the task; by adding the time-triggered scheduler to the Linux kernel and constructing a separation architecture of generation of the dynamic time table and execution of the task, and combining dynamic updating of the time table, the cache mechanism before execution of the task, the problem of insufficient flexibility of a static time table is solved, and the effect of stable running and low delay of task scheduling is obtained; the application also comprises a system for implementing the above method.