62 results about "Virtual file system" patented technology

The embodiment of the invention provides a process interception method and device and electronic equipment. The method comprises the following steps: a kernel space receives a process protection list sent by a user space by utilizing a virtual file system interface; wherein the process protection list comprises a process identifier of at least one to-be-protected process; the kernel space obtains a process termination request; wherein the process termination request is used for requesting to terminate a target process, and the target process is a process entity scheduled by an operating system; under the condition that the kernel space determines that the request type of the process termination request is a preset request, determining a matching relationship between the target process and a process protection list based on a target process identifier of the target process; and when the matching relationship indicates that the process identifier of the at least one to-be-protected process in the process protection list comprises the target process identifier, the kernel space intercepts the process termination request. By the adoption of the method, the important process can be effectively prevented from being terminated due to malicious or misoperation, and the safety and stability of the system are improved.

The invention discloses a data security protection method and system for large model training. The core of the method is that a data safe box trusted application (TA application) is deployed in a trusted execution environment (TEE) and cooperatively works with a user-defined virtual file system driver at a host machine side, so that an end-to-end secret state data access control link is constructed. Before encryption protection of sensitive data, a measurement value (including code hash, configuration parameters and a runtime state) of a current TEE instance is submitted to a remote verification service through a data safe box TA application, and the verification service only sends the measurement value (including code hash, configuration parameters and a runtime state) of the current TEE instance to the remote verification service after confirming that the TEE environment meets a preset security policy (such as a kernel version, a software version and configuration parameter compliance). And generating a secret key encrypted by a custom virtual file system on a host machine side through derivation. And malicious copying of a system memory and a storage medium is prevented, so that the traditional attack defense capability is effectively improved.

The invention discloses an access request processing method under centralized storage and electronic equipment, and relates to the technical field of centralized storage, and the method comprises the following steps: setting a virtual file system in a node, and carrying out cache mirror image synchronization among the nodes by utilizing the virtual file system. After any node receives an access request, the node firstly determines whether the access request is a read request or a write-in request, and then processes the read request or the write-in request by using the cache mirror image. The problems that when multiple nodes of a local file system are used for providing read-write services to the outside, data are damaged easily due to the fact that a memory structure has no consistency protection, and protocol processing is conducted depending on one node can be solved. According to the method, the virtual file system is introduced into the nodes, so that the nodes are mounted on the same volume, cache synchronization between the nodes is performed by using the virtual file system, and unification of cache mirror images between the nodes is realized. Through the cache mirror image between the nodes, the capability of providing services to the outside by the multiple nodes is realized.

The invention belongs to the field of end-cloud collaborative computing and lightweight virtualization, and provides an end-cloud collaborative lightweight application distribution and isolated operation method and system, which adopts a WASM byte code as a unique format for application distribution, compiles an application into a WASM module at a cloud and then distributes the WASM module to an end side device; the end side equipment combines read-only configuration data of a host with a temporary file system Tmpfs of a memory by utilizing OverlayFS on a file level, and maps the data into a virtual file system in a WASM sandbox; on the symbol level, a dynamic WASI bridge is introduced, according to the requirement of an import section in a WASM module, the native capacity of a host system is injected into WASM operation in a host function mode in real time, and the heterogeneous hardware characteristics of end-side equipment are adapted. The method is suitable for an end-side environment with an immutable operating system as a base, and is compatible with a cloud containerization deployment scene.

A data storage management method includes detecting a data change to data in a data repository, identifying metadata of the data change, and storing the metadata in a virtual file, the virtual file being in a data storage format that is compatible with one or more data analysis tools. In response to a subsequent user request to access metadata of the data in the data repository, the method may transmit one or more virtual files containing metadata identified in the user request.

The invention provides a transparent encryption virtual file system implementation method based on a hardware key, and aims to solve the problems of poor user experience, complex key management, insufficient security and the like of an existing file system encryption scheme. Hardware-level key isolation is realized to ensure that the key never leaves the USB KEY; transparent user experience is provided, and after a hardware key is inserted and a password is input, an encrypted file can be operated like accessing a common file; file-level fine-grained access control is supported, real-time encryption is performed during writing, and real-time decryption is performed during reading; and when the USB KEY is pulled out, the virtual file system cannot be accessed immediately, only the encrypted ciphertext is stored in the physical storage, and meanwhile, the stability of the system is ensured based on the mature FUSE technology, so that the defects in the prior art are effectively solved.

A data storage management method includes detecting a data change to data in a data repository, identifying metadata of the data change, and storing the metadata in a virtual file, the virtual file being in a data storage format that is compatible with one or more data analysis tools. In response to a subsequent user request to access metadata of the data in the data repository, the method may transmit one or more virtual files containing metadata identified in the user request.

Systems for fast views of items in file directories or file folders when interacting with a cloud-based service platform. A server in a cloud-based environment interfaces with one or more storage devices to provide storage of shared content accessible by two or more user devices. A file tree request to view the file directory or file folder of a particular sought after item is issued from an application operating on one of the user devices. Additional file tree items in a file tree hierarchy are prefetched by the cloud-based service platform. The application closes the file tree metadata stream after receiving the portion of the file tree that pertains to the particular item and before receiving the entirety of the metadata pertaining to all of the file tree metadata of all of the items in the directory or folder that contains the particular sought after item.

The application provides a font processing method, device and equipment and a storage medium, including: obtaining an interface function code file of a target application program of a desktop version, the interface function code file including a desktop font file; determining a packaging mode and a target path mapping relationship between a target source storage path of a local file system and a target virtual storage path of a virtual file system; compiling the interface function code file according to the packaging mode to generate a webpage other code file and a webpage font file stored in the target source storage path; loading the webpage font file to the virtual file system according to the webpage other code file and the target path mapping relationship; and in response to an access request for the target application program of the webpage version, accessing and rendering a user interface of the target application program of the webpage version based on the webpage font file in the virtual file system. The same application of the desktop version and the webpage version can load consistent fonts, and the interface display effect is improved.

Embodiments of the present disclosure relate to a traffic detection method, device, equipment and medium, wherein the method comprises: in response to a call request for a preset traffic statistics function in a kernel space, obtaining a first process identifier and corresponding current consumed traffic of the traffic statistics function; calling a query interface of a preset network packet filtering eBPF module, and querying whether the first process identifier is contained according to a preset correspondence relationship in a preset virtual file system; if the first process identifier is contained, querying and obtaining the historical total consumed traffic corresponding to the first process identifier in the correspondence relationship through the query interface; calculating the sum of the historical total consumed traffic and the current consumed traffic to obtain the current total consumed traffic, and calling a write interface of the eBPF module to write the historical total consumed traffic of the correspondence relationship as the current total consumed traffic. In the embodiments of the present disclosure, the current total consumed traffic can be counted with process as granularity, thereby the accuracy of traffic statistics can be improved.

The invention provides a multi-protocol image file processing method, a program product, a system and a related device. The method comprises the following steps: receiving a file input request, wherein the request comprises a file path or a URL (Uniform Resource Locator); executing automatic identification based on a multi-stage identification mechanism on the received file input request through a protocol identification engine so as to identify a protocol type; an adapter corresponding to the identified protocol type is called from a protocol adapter cluster to obtain image file data, the protocol adapter cluster comprises a plurality of independently packaged protocol adapters, and each protocol adapter is independently packaged and configured to process communication of a specified protocol; mapping the file path into a unique logic path through a unified virtual file system; performing metadata extraction, format conversion or batch processing on the image file based on the logic path through a core processing engine; and storing the processed file in a target storage system through an output and storage module according to a predefined rule.

The invention provides a file access method and device.The method comprises the steps that when a cloud application running in a container accesses files under a cloud application directory in the container, if a virtual file system in a host receives a first file access request, whether a first directory in the host has a first identifier or not is judged; if the first directory has the first identifier, judging whether the first directory has a second identifier; if the first directory has the second identifier, the virtual file system sends the second file access request to the first file system for processing; or if the first directory does not have the second identifier, the virtual file system notifies the second file system to mount the remote directory to the first directory through the first file system, and sends the second file access request to the first file system for processing after mounting is completed, at least one of the two problems of low file access response speed and large storage space occupation in the existing scheme can be solved.

The invention discloses a concentrator-based container creation and management method, and solves the problems of complex application program operation environment, non-uniform resource allocation, poor isolation between modules and difficult monitoring and maintenance in a smart power grid concentrator. According to the method, a container is automatically created through a configuration file, an independent virtual file system is created for each application in combination with a fixed-size file and a loop mounting mode, and FLASH use limitation is achieved; the container management module provides an API interface to monitor resource occupation in real time, the state is reported through an MQTT heartbeat mechanism, and the system automatically restarts the container when the state is abnormal, so that self-healing management is realized.

The invention provides a data management method which can be applied to the technical field of big data. The data management method is executed in a user space file system and comprises the steps that an operation request for a first logic path file is received through a virtual file system, and the operation request is from a user program; the operation request is routed to a kernel driver, a callback function corresponding to the operation request is called, and the callback function is registered by a user program; on the basis of the callback function, a pre-established metadatabase is inquired, metadata corresponding to the first logic path is obtained, and the metadata at least comprises the mapping relation between the logic path and the physical path; and executing an operation corresponding to the operation request based on the metadata. The invention further provides a data management device and equipment, a storage medium and a program product.

The invention discloses a file caching performance improvement method and system based on distributed storage, and the method comprises the steps: firstly obtaining first file caching information of a to-be-cached file in a local caching node, the information comprises at least one of IO mode information generated through an improved virtual file system read-write function, cache page IO type marks and memory state information collected through a memory monitoring thread; inputting the first file cache information into a pre-trained first cache strategy model to obtain a file cache feature vector; the feature vector is sent to a remote storage node, the remote node inputs the feature vector and second file cache information of the to-be-cached file into a pre-trained second cache strategy model together, and a final cache instruction is obtained; and the local node executes cache strategy adjustment according to the instruction. According to the method, global collaborative intelligent optimization of the cache strategy is realized, and the cache hit rate and the system response performance are remarkably improved.

The present application provides a method, device, and storage medium for shared access to a file system. The shared access method is applied to a host machine corresponding to a virtual machine, wherein the virtual machine includes a file system and a shared file driver. The host machine pre-mounts a virtual file system consistent with the file system of the virtual machine. The shared access method includes: receiving a file operation through the virtual file system; generating an operation command for the file system of the virtual machine based on the file operation; and sending the operation command to the shared file driver so that the shared file driver executes the operation command, thereby completing the file operation on the file system of the virtual machine. The shared access method is used to realize file sharing of virtual machines on the basis of reducing virtual machine resource overhead and ensuring the security of virtual machines.

The application discloses a kind of incremental semantic analysis integrated development environment systems for SystemVerilog hardware design language, comprising: workspace discovery component, for automatically identifying project list and constructing project boundary;Virtual file system component, for maintaining source path and file identification mapping and tracking file status;Incremental semantic database component, for performing local failure and incremental recalculation after source code changes;Semantic capability component, for providing completion, jump, reference, renaming, semantic highlighting, formatting and other capabilities;Protocol scheduling component, for unified scheduling and returning results to requests, notifications, background tasks.The application can perform real-time semantic processing on Verilog / SystemVerilog code in a continuous editing scenario, reduce the delay caused by full recalculation, and improve hardware design and development efficiency.

The application discloses a system and method for accelerating reading compressed files based on A Virtual File System, and belongs to the technical field of time series databases; the technical problem to be solved by the application is how to realize column format compressed storage and reading of time series data types, reduce IO, memory and CPU consumption caused by decompression, and improve the ability of the system to process time series data; the technical scheme adopted is as follows: in the time series engine of the open database ZNBase, an execution engine generates an execution plan according to SQL semantic analysis, calls a storage layer interface of ZNBase, and queries accurate time series history partition compressed data; the storage layer completes fast execution of the query in the storage layer based on various compressed query interfaces provided by AVFS, and accelerates the query of the database; the specific steps are as follows: pre-analysis; compressed file pre-reading; reading compressed data.

The application discloses a file operation method of a user space file system and the user space file system, and the method comprises the following steps: a virtual file system receives a file operation request for a target file in the user space file system sent by an application program, and sends the file operation request to a target drive module corresponding to the user space file system; the target drive module starts an extended filter, so as to call a plug-in function corresponding to the file operation request to perform corresponding file operation on an underlying file system, and update shared data areas in a kernel according to an operation result; and a user space daemon obtains a data update result from the shared data areas, and sends the data update result to the application program. According to the technical scheme of the application, the data interaction frequency between the user space and the kernel can be effectively reduced, and the system overhead is reduced.

The embodiment of the invention discloses a memory management method and device for a secure container. The specific implementation mode of the method comprises the steps that a mounting point of the virtual file system is created according to preset mounting parameters, and the mounting parameters comprise an identifier used for indicating whether a large-page memory is started or not; creating a security container, and setting the virtual file system as a memory rear-end carrier of the security container through the virtual machine simulator; detecting mounting parameters through the virtual machine simulator to determine whether a large page memory is started or not; in response to determining to enable the large page memory, allocation of the large page memory is requested. According to the implementation mode, refined application of a transparent large page technology in a secure container environment is realized, and performance benefits close to static large pages are obtained while dynamic memory management advantages are kept.

The invention belongs to the technical field of computers, and particularly relates to a data processing method of an application program, a data processing device of the application program, a computer readable medium, electronic equipment and a computer program product. The method comprises the steps that in response to a data processing request triggered on an application program, a virtual file system established in a memory space of the application program is obtained, and the virtual file system comprises a root node and a non-root node used for representing a file or a directory; the data processing request is analyzed, processing logic and data content carried in the data processing request are obtained, and the data processing request is used for indicating execution of the processing logic on the data content; searching a target node associated with the data content in the virtual file system, and executing processing logic on the target node; and when a preset system storage condition is met, updating the file system body in the permanent storage medium according to the virtual file system. The data processing efficiency of the application program can be improved, and occupation of storage resources is reduced.

Provided is an apparatus for protecting data in a Linux-based operating system, the apparatus including: a physical storage device; and a processor provided with a user application, a user library, a virtual file system (VFS), a kernel-based file system, a Filesystem in Userspace (FUSE) kernel driver, and a FUSE user daemon as software modules.A file containing protection target data may be safely protected by being stored in a FUSE storage area that is accessible only in a FUSE mount state.

The embodiment of the invention provides a file access method and device and a computing cluster, and relates to the technical field of computers. The file access method is applied to the computing cluster, the computing cluster comprises a management node and a plurality of computing groups, the computing nodes in each computing group are fully connected with storage nodes, and the management node receives jobs and allocates service execution nodes for the jobs from the computing nodes; the management node establishes a virtual file system for the job and sends the virtual file system to the service execution node; when the service execution node writes in a first file of a job, generating a virtual path of the first file in a virtual file system, and mapping the virtual path to an actual path of a file in a local file system of the service execution node, and writing the first file in a storage position in a storage node which is indicated by the actual path and is located in the same calculation group as the service execution node. According to the invention, efficiency and convenience of file access can be considered.

The invention provides a process processing method and system, electronic equipment and a computer program product, and relates to the field of computers. The process processing method comprises the following steps: polling a virtual file system according to a preset period to obtain a current process list; generating a target event list according to a historical process list and the current process list; and performing anomaly detection on the target event in the target event list, and processing the target event according to an anomaly detection result. By using the process processing method provided by the embodiment of the invention, the process in the Linux operating system can be monitored in real time without the permission of a kernel level, the process processing method can be deployed and operated in a common user environment, and the application range of the process processing method is greatly expanded.

The application discloses a file attribute adding method, a computing device and a storage medium. The method is executed in an operating system of the computing device, and comprises the following steps: receiving a request of adding a custom attribute to a file by calling a setting custom attribute interface by a client, and writing the custom attribute to a disk through a virtual file system; and receiving a request of acquiring the custom attribute of the file by calling an acquiring custom attribute interface by the client, acquiring the custom attribute of the file from the disk through the virtual file system, and returning the custom attribute to the client. The file attribute adding method can realize custom classification and management of the file by adding the custom attribute to the file.

This application relates to a resource storage and reading method, apparatus, computer device, and storage medium. The storage method includes: obtaining game resource files; compressing and storing the game resource files to generate a resource compression package in a virtual file system format; the virtual file system format includes a data storage component for storing game resource files in blocks and a verification component for storing verification data for the game resource files; and uploading the resource compression package to a cloud server for download when the game is launched. This method can reduce storage space usage.

One or more human users can collaborate with an LLM to create, read, and edit files for every step of computer game / software development, from initial brainstorming to a running web application. Advantageously collaboration is not limited to a single file or a single folder, but rather employs a full virtual file system that facilitates easy and intuitive collaboration across multiple files, provides a more traditional, recognizable code development experience, and affords ideation, building, testing, and deploying the applications within a single web-based environment.

The invention provides a virtual file system, a binlog-in-redo implementation method, electronic equipment and a readable medium, and relates to the technical field of databases. According to the scheme, a file management service responds to a redo log persistence request transparently transmitted by a database service layer through a virtual redo log service, and persistence operation is executed on physical files which are written into a redo log file block and a binlog file block in a staggered mode; the file management service also manages a shared memory, and the shared memory comprises a redo log cache and a binlog cache; the virtual redo log service provides an access path of the redo log cache, and the virtual binlog service provides an access path of the binlog cache. According to the scheme, writing of the redo log file block and writing of the binlog file block are combined into writing of the physical file, the transaction submission operation efficiency is improved, when it is confirmed that persistence of the binlog file block is completed, master-slave synchronization is triggered in an asynchronous notification mode, and the risk of master-slave inconsistency is avoided; the original storage format can be displayed to the outside through the virtual service, seamless transparent compatibility is achieved, the customization requirement is lowered, and the deployment cost is reduced.

This application discloses an access request processing method and electronic device under centralized storage, relating to the field of centralized storage technology. The method includes: setting up a virtual file system in nodes and using the virtual file system to synchronize cache mirrors between nodes. When any node receives an access request, it first determines whether the request is a read or write request, and then uses the cache mirror to process the request. This solves the problems of data corruption due to the lack of memory consistency protection when using a local file system to provide read / write services to multiple nodes, and the reliance on a single node for protocol processing. This method introduces a virtual file system into the nodes, enabling nodes to mount the same volume and use the virtual file system for inter-node cache synchronization, thus achieving unified cache mirroring between nodes. Through inter-node cache mirroring, the ability for multiple nodes to provide services to the outside world is realized.

The invention discloses a transparent encryption method and system based on virtual file system interception, and the method comprises the steps: dynamically intercepting the function call of a virtual file system layer through a kernel probe mechanism, so as to obtain a file operation context; creating a strategy decision engine, performing multi-level matching based on process features, file attributes and environment states, and generating a dynamic encryption strategy; when the strategy is hit, dynamic function replacement is implemented, and a read-write function pointer in an original file operation structure body is replaced by a self-defined encryption and decryption function pointer through atomization operation, so that the file I / O is redirected to an encryption and decryption execution engine; an encryption and decryption execution engine is utilized to construct a zero-copy assembly line, and a hardware acceleration unit is integrated, so that efficient encryption and decryption processing is performed on data; according to the transparent encryption method, policy decision and non-perception encryption and decryption are realized in the kernel layer, the problems of coarse encryption granularity, high performance loss and difficulty in localization adaptation in the prior art are solved, and the transparent encryption method which is fine in granularity and compatible with a domestic platform is realized.