CN112631732B - Implementation method and device for creating CephX authentication virtual machines by batch ISO - Google Patents
Implementation method and device for creating CephX authentication virtual machines by batch ISO Download PDFInfo
- Publication number
- CN112631732B CN112631732B CN202011626993.5A CN202011626993A CN112631732B CN 112631732 B CN112631732 B CN 112631732B CN 202011626993 A CN202011626993 A CN 202011626993A CN 112631732 B CN112631732 B CN 112631732B
- Authority
- CN
- China
- Prior art keywords
- mapping
- cache
- image
- mark
- distribution
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 45
- 238000013507 mapping Methods 0.000 claims abstract description 419
- 230000000977 initiatory effect Effects 0.000 claims abstract description 42
- 238000001514 detection method Methods 0.000 claims description 35
- 230000001360 synchronised effect Effects 0.000 claims description 7
- 230000003287 optical effect Effects 0.000 abstract description 16
- 230000000694 effects Effects 0.000 abstract description 6
- 239000002609 medium Substances 0.000 description 9
- 230000008569 process Effects 0.000 description 4
- 238000005315 distribution function Methods 0.000 description 3
- 230000006870 function Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004590 computer program Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 239000012120 mounting media Substances 0.000 description 1
- 230000008707 rearrangement Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45562—Creating, deleting, cloning virtual machine instances
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45583—Memory management, e.g. access or allocation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45595—Network integration; Enabling network access in virtual machine instances
Abstract
The embodiment of the application discloses a method and a device for realizing batch ISO (ISO-based authentication of a CephX) authentication virtual machine; the method comprises the following steps: image cache and record are cached and stored through the image cache record table, an image distribution request is initiated, and image distribution caching is carried out according to preset image distribution rules; performing image cache mapping and storing records through an image cache mapping record table, initiating an image cache mapping request, and performing image cache mapping according to preset image cache mapping rules; the embodiment of the application solves the problem that hot plug of the optical disc is not supported when CephX authentication is used, and simultaneously realizes concurrent execution on the same ISO and node, thereby achieving the effect of batch execution.
Description
Technical Field
The embodiment of the application relates to the technical field of virtual machine management, in particular to a method and a device for realizing batch ISO (ISO-based on the same) establishment of CephX authentication virtual machines.
Background
RBD block storage is the most widely used and most stable storage type of the 3 storage types provided by Ceph. RBD blocks, like disks, can be mounted in physical or virtual machines. Ceph provides two means of identity authentication: none and CephX; none indicates that the client can access the Ceph storage cluster without key access, which is obviously not recommended; the essence of CephX is a symmetric encryption protocol, the encryption algorithm is AES, which is used for identifying the identity of a user and authenticating the operation of the user on a client, so as to prevent the network security problems such as man-in-the-middle attack, data tampering and the like.
In order to support batch creation, many cloud platforms provide an image distribution function to distribute image caches to nodes in advance; however, RBDiso with CephX authentication does not support hot plug at present, that is, on-line loading and unloading of optical discs cannot be performed when CephX authentication is carried out; in order to implement batch iso creation of virtual machines, most platforms provide image distribution functions, and image distribution is performed before batch creation, which undoubtedly increases the inconvenience of cloud platform operation.
Disclosure of Invention
The embodiment of the application provides a method and a device for realizing batch ISO (ISO-based authentication of virtual machines) creation of CephX authentication, which are used for solving the problems that in the prior art, hot plug of optical discs is not supported when CephX authentication is used and virtual machines cannot be created by batch ISO under the condition of no image cache.
In a first aspect, an embodiment of the present application provides a method for implementing batch ISO to create a CephX authenticated virtual machine, including:
presetting a uniquely constrained mapping cache record table and a mapping cache mapping record table, wherein the mapping cache record table is used for recording mapping caches in target nodes, and the mapping cache mapping record table is used for recording mapping cache maps in the target nodes;
judging whether the target node has an image cache or not through the image cache record table;
Storing records according to the judgment result of the image cache and initiating an image distribution request to the image node assembly;
after receiving the image distribution request, the image node assembly performs image distribution caching according to a preset image distribution rule;
judging whether the target node has mapping cache mapping or not through the mapping cache mapping record table;
storing records according to the judgment result of the mapping cache mapping and initiating a mapping cache mapping request to a computing node assembly;
and after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule.
Further, the storing the record according to the determination result of the image cache and initiating the image distribution request to the image node assembly includes:
if the image cache exists and the distribution state is an active state, the image cache record is stored in the image cache record list;
if the image cache record is successfully stored, setting a mark of a distribution operation as a first mark, and initiating an image distribution request to an image node assembly;
if the image cache record is not stored, setting a mark of the distribution operation as a second mark, and initiating an image distribution request to the image node assembly;
And if the image cache does not exist, judging whether the target node already exists the image cache or not through the image cache record table again.
Further, after receiving the image distribution request, the image node assembly performs image distribution caching according to a preset image distribution rule, including:
after receiving the image distribution request, the image node assembly judges the mark of the distribution operation, and if the mark of the distribution operation is a first mark, the image distribution caching is carried out;
if the mark of the distribution operation is the second mark, performing loop detection, calling a synchronous message of a distribution state through the control node, and feeding back to the control node image cache to be successfully distributed until the distribution state is an active state;
and when the cycle detection time exceeds a preset threshold value, feeding back the image cache distribution failure state to the control node, and entering a rollback state.
Further, the storing the record according to the determination result of the mapping cache mapping and initiating the mapping cache mapping request to the computing node assembly includes:
if the mapping cache mapping exists and the mapping state is an active state, the mapping cache mapping record is stored in the mapping cache mapping record list;
if the mapping record of the mapping cache is successfully saved, setting a mark of the mapping operation as a third mark, and initiating a mapping cache mapping request to a computing node assembly;
If the image cache mapping record is not saved, setting a mapping operation mark as a fourth mark, and initiating an image cache mapping request to a computing node assembly;
and if the mapping cache map does not exist, judging whether the mapping cache map exists in the target node or not through the mapping cache map record table again.
Further, after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule, including:
after receiving the mapping cache mapping request, the computing node assembly judges the mark of the mapping operation, and if the mark of the mapping operation is a third mark, mapping cache mapping is carried out;
if the mark of the mapping operation is the fourth mark, performing loop detection, calling the mapping state through the control node, and feeding back to the control node to map the cache to be mapped successfully until the mapping state is the active state;
and when the cycle detection time exceeds a preset threshold value, feeding back the mapping failure state of the mapping cache to the control node, and entering a rollback state.
Further, the image cache record table comprises a first ID, a first image ID, a storage target, a storage type, a distribution state and a resource type; the first ID is a unique constraint field, and is formed by combining the values of the four fields of the first image ID, the storage target, the storage type and the resource type;
The mapping cache mapping record table comprises a second ID, a second mapping ID, a node name, a storage pool name, a mapping path and a mapping state; the second ID is a unique constraint field, and is formed by combining values of three fields, namely an image ID, a node name and a storage pool name.
Further, the mapping cache mapping includes:
the RBD block device is mapped to the virtual machine operating system by a map command of the RBD block.
Further, after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule, and then further includes:
the configuration file of the virtual machine is modified by mapping the ISO cached device path.
In a second aspect, an embodiment of the present application provides an implementation apparatus for creating a CephX authenticated virtual machine by batch ISO, including:
the system comprises a record table presetting module, a record table setting module and a record table setting module, wherein the record table presetting module is used for presetting a uniquely constrained image cache record table and an image cache mapping record table, the image cache record table is used for recording an image cache in a target node, and the image cache mapping record table is used for recording an image cache mapping in the target node;
the image cache judging module is used for judging whether the target node has an image cache or not through the image cache record table;
The distribution request sending module is used for storing records according to the judgment result of the image cache and initiating an image distribution request to the image node assembly;
the image node assembly is used for receiving the image distribution request and carrying out image distribution caching according to a preset image distribution rule;
the mapping cache map judging module is used for judging whether the target node has mapping cache map or not through the mapping cache map record table;
the mapping request sending module is used for storing records according to the judgment result of the mapping cache mapping and initiating the mapping cache mapping request to the computing node assembly;
and the mapping cache mapping execution module is used for carrying out mapping cache mapping according to a preset mapping cache mapping rule after the computing node assembly receives the mapping cache mapping request.
Further, the distribution request sending module includes: the device comprises a cache record keeping unit, a first mark setting module, a second mark setting module and an image cache node judging unit;
the cache record storage unit is used for storing the image cache record in the image cache record list if the image cache exists and the distribution state is an active state; the first mark setting module is used for setting the mark of the distribution operation as a first mark and initiating an image distribution request to the image node assembly if the image cache record is successfully stored; the second mark setting module is used for setting the mark of the distribution operation as a second mark if the image cache record is failed to be stored, and initiating an image distribution request to the image node assembly; and the image cache node judging unit is used for judging whether the target node has the image cache or not through the image cache record table again if the image cache does not exist.
Further, the distribution cache executing module includes: the device comprises a distribution cache executing unit, a distribution cycle detecting unit and a distribution rollback state unit;
the distribution cache executing unit is used for judging the mark of the distribution operation after the mirror node assembly receives the image distribution request, and if the mark of the distribution operation is a first mark, image distribution cache is carried out; the distribution circulation detection unit is used for realizing circulation detection if the mark of the distribution operation is a second mark, and calling a synchronous message of a distribution state through the control node until the distribution state is an active state, and feeding back the synchronous message to the control node image cache to be successfully distributed; and the distribution rollback state unit is used for feeding back the image cache distribution failure state to the control node when the cycle detection time exceeds a preset threshold value, and entering the rollback state.
Further, the mapping request sending module includes: the system comprises a mapping cache record storage unit, a third mark setting module, a fourth mark setting module and a cache mapping node judging unit;
the mapping cache record storage unit is used for storing the mapping cache map record in the mapping cache map record list if the mapping cache map exists and the mapping state is the active state; the third mark setting module is used for setting the mark of the mapping operation as a third mark if the mapping record of the mapping cache is successfully saved, and initiating a mapping cache mapping request to the computing node assembly; the fourth mark setting module is used for setting the mark of the mapping operation as a fourth mark if the image cache mapping record is failed to be stored, and initiating an image cache mapping request to the computing node assembly; and the cache map node judging unit is used for judging whether the target node has the mapping cache map or not again through the mapping cache map record table if the mapping cache map does not exist.
Further, the mapping cache map execution module includes: the device comprises a cache mapping execution unit, a mapping cycle detection unit and a mapping rollback state unit;
the cache mapping execution unit is used for judging the mark of the mapping operation after the computing node assembly receives the mapping cache mapping request, and if the mark of the mapping operation is a third mark, mapping cache mapping is carried out;
the mapping circulation detection unit is used for performing circulation detection if the mapping operation mark is a fourth mark, and calling a mapping state through the control node until the mapping state is an active state, and feeding back the mapping state to the control node to map the cache and map the cache successfully;
and the mapping rollback state unit is used for feeding back the mapping failure state of the mapping cache to the control node when the cycle detection time exceeds a preset threshold value, and entering a rollback state.
Further, the mapping cache mapping execution module is further configured to map the RBD block device to the virtual machine operating system through a map command of the RBD block.
Further, the method further comprises the following steps: and the virtual machine optical disk configuration module is used for modifying the configuration file of the virtual machine by mapping the equipment path of the ISO cache.
In a third aspect, embodiments of the present application provide a storage medium containing computer-executable instructions, which when executed by a computer processor, are configured to perform a method of implementing a batch ISO creation CephX authenticated virtual machine as described in the first aspect.
According to the embodiment of the application, through the image cache record table and the image cache mapping record table which are preset and only constrained, the image cache is carried out through the image cache record table, the record is stored, an image distribution request is initiated, and the image distribution cache is carried out according to the preset image distribution rule; and performing image cache mapping and storing records through the image cache mapping record table, initiating an image cache mapping request, performing image cache mapping according to a preset image cache mapping rule, solving the problem that hot plug of the optical disc is not supported when CephX authentication is used, and simultaneously realizing concurrent execution on the same ISO and node to achieve the effect of batch execution.
Drawings
Fig. 1 is a flowchart of an implementation method for creating a CephX authenticated virtual machine by batch ISO according to an embodiment of the present application;
FIG. 2 is a flow chart of another implementation method for creating CephX authenticated virtual machines by batch ISO provided in an embodiment of the present application;
FIG. 3 is a flow chart of another implementation method for creating CephX authenticated virtual machines by batch ISO provided in an embodiment of the present application;
FIG. 4 is a flowchart of another implementation method for creating CephX authenticated virtual machines by batch ISO provided in an embodiment of the present application;
FIG. 5 is a flow chart of another implementation method for creating CephX authenticated virtual machines by batch ISO provided in an embodiment of the present application;
fig. 6 is a flowchart of an implementation apparatus for creating a CephX authenticated virtual machine by batch ISO according to an embodiment of the present application.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the present application more apparent, the following detailed description of specific embodiments thereof is given with reference to the accompanying drawings. It is to be understood that the specific embodiments described herein are merely illustrative of the application and not limiting thereof. It should be further noted that, for convenience of description, only some, but not all of the matters related to the present application are shown in the accompanying drawings. Before discussing exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although a flowchart depicts operations (or steps) as a sequential process, many of the operations can be performed in parallel, concurrently, or at the same time. Furthermore, the order of the operations may be rearranged. The process may be terminated when its operations are completed, but may have additional steps not included in the figures. The processes may correspond to methods, functions, procedures, subroutines, and the like.
The method for realizing batch ISO (ISO-based authentication virtual machine) establishment of the CephX authentication virtual machine comprises the steps of presetting a uniquely constrained image cache record table and an image cache mapping record table, carrying out image cache and storing records through the image cache record table, initiating an image distribution request, and carrying out image distribution cache according to preset image distribution rules; and performing image cache mapping and storing records through the image cache mapping record table, initiating an image cache mapping request, performing image cache mapping according to a preset image cache mapping rule, solving the problem that hot plug of the optical disc is not supported when CephX authentication is used, and simultaneously realizing concurrent execution on the same ISO and node to achieve the effect of batch execution.
RBD block storage is the most widely used and most stable storage type of the 3 storage types provided by Ceph. RBD blocks, like disks, can be mounted in physical or virtual machines. Ceph provides two means of identity authentication: none and CephX; none indicates that the client can access the Ceph storage cluster without key access, which is obviously not recommended; the essence of CephX is a symmetric encryption protocol, the encryption algorithm is AES, which is used for identifying the identity of a user and authenticating the operation of the user on a client, so as to prevent the network security problems such as man-in-the-middle attack, data tampering and the like. To support batch creation, many cloud platforms provide mirror distribution functionality to pre-distribute mirror caches to nodes. However, RBDiso with CephX authentication does not support hot plug at present, that is, on-line loading and unloading of optical discs cannot be performed when CephX authentication is carried out; in order to implement batch iso creation of virtual machines, most platforms provide image distribution functions, and image distribution is performed before batch creation, which undoubtedly increases the inconvenience of cloud platform operation.
Specifically, many steps exist in the virtual machine task flow template creation, such as a virtual machine initialization creation step, a virtual machine creation node environment detection step, a system disk creation step, a system disk mounting step, a data disk mounting task flow creation step, a network card mounting task flow creation step, a virtual machine starting step, a virtual machine password modification step, a virtual machine renaming step and the like.
According to the embodiment of the application, the problem that the existing method does not support hot plug of the optical disc when CephX authentication is used and cannot create virtual machines in batch ISO under the condition of no image cache is solved by adding the step of mounting ISO task flow after the step of creating the task flow of the mounting network card.
The method comprises a mounting ISO task flow step and a mounting optical disk completion step, wherein the mounting ISO task flow step is a nested subtask flow, and comprises a mounting ISO initialization step, a detecting and distributing image caching step, a detecting and mapping ISO caching step, a modifying virtual machine optical disk configuration step and a mounting optical disk completion step.
Exemplary, mount ISO initialization step: some operations before ISO is mounted, such as changing the task state of the virtual machine to that of a disk being mounted, etc., are generally performed to prevent other people from performing other operations on the virtual machine.
Specifically, a step of detecting and distributing image caching is added in the mounting ISO task flow template, and the step can be executed on the same ISO and node concurrently, so that the effect of batch execution is achieved; specifically, in the step of adding the detection and mapping ISO cache in the mounting ISO task stream template, the problem that hot plug of an optical disk is not supported when CephX authentication is used is solved by mapping RBD block equipment to an operating system through a map command of an RBD block, and meanwhile, the same ISO and node can be executed simultaneously, so that the effect of batch execution is achieved.
Fig. 1 is a flowchart of an implementation method for creating a CephX authenticated virtual machine by batch ISO according to an embodiment of the present application. Referring to fig. 1, the implementation method for creating a CephX authentication virtual machine by batch ISO specifically includes:
step 110, presetting a uniquely constrained mapping cache record table and a mapping cache map record table, wherein the mapping cache record table is used for recording mapping caches in target nodes, and the mapping cache map record table is used for recording mapping cache maps in the target nodes.
Specifically, setting a uniquely constrained image cache record table, wherein the image cache record table comprises six fields of a first ID, a first image ID, a storage target, a storage type, a distribution state and a resource type; the first ID is a unique constraint field, and is formed by combining the values of the four fields of the first image ID, the storage target, the storage type and the resource type.
Illustratively, the storage target refers to a target location of the cache storage, and optionally, is generally a storage pool name; storage types include node, vg, and RBD; the distribution status includes downloading, deleting and active; resource types include ISO and image.
Specifically, a uniquely constrained mapping cache mapping record table is set, wherein the mapping cache mapping record table comprises six fields of a second ID, a second mapping ID, a node name, a storage pool name, a mapping path and a mapping state; the second ID is a unique constraint field, and is formed by combining values of three fields, namely an image ID, a node name and a storage pool name.
Exemplary mapping states include mapping and active; resource types include ISO and image.
And step 120, judging whether the target node has an image cache or not according to the image cache record table.
It will be appreciated that the system first determines, via the image cache record table, whether an image cache already exists on the target node, and then performs the next step according to whether an image cache exists.
And 130, storing records according to the judgment result of the image cache and initiating an image distribution request to the image node assembly.
Referring to fig. 2, step 130 may be implemented by steps 1301-1304.
If there is an image cache and the distribution state is active, then the image cache record is stored in the image cache record table 1301.
Specifically, if it is determined that there is an image cache on the target node from the image cache record table, the distribution state at that time is determined, and if the distribution state at that time is an active state, then an attempt is made to store the image cache record in the image cache record table.
If the image cache record is saved, a mark of the distributing operation is set as a first mark, and an image distributing request is initiated to the image node component in step 1302.
Specifically, if the image cache record is successfully saved in the image cache record list, because the first ID is formed by combining the values of the four fields of the first image ID, the storage target, the storage type and the resource type, and the unique constraint is that if the image cache record is successfully saved, the image is not cached on the target node, and no other tasks for distributing the image to the target node exist, a mark is set for the distributing operation and is marked as a first mark, and optionally, the first mark is marked as a distribution and an image distributing request is initiated to the mirror node component; it is understood that the mirror node component is used to implement the image distribution cache.
If the image cache record is not stored, setting the mark of the distributing operation as a second mark, and initiating an image distributing request to the image node assembly.
If the image cache record is not stored in the image cache record list, indicating that other operations are distributing the image to the target node, setting a mark for the distributing operation, marking the mark as a second mark, optionally marking the second mark as check, and initiating an image distributing request to the image node component.
If there is no image cache, step 1304, determining, again through the image cache record table, whether the target node already has an image cache.
And if the image cache record table judges that the image cache does not exist on the target node, judging whether the image cache exists on the target node or not through the image cache record table again.
For example, when the virtual machines are created in batches, the image is distributed in the flow step of the first virtual machine, other virtual machines always detect the state of the image, detect whether the image is distributed completely, and enter the next step after detecting the completion; i.e. the creation of virtual machines is created in parallel.
And 140, after receiving the image distribution request, the mirror node assembly performs image distribution caching according to a preset image distribution rule.
Referring to fig. 3, step 140 may be implemented by steps 1401-1403.
In step 1401, after receiving the image distribution request, the mirror node assembly determines a mark of a distribution operation, and if the mark of the distribution operation is a first mark, performs image distribution caching.
Specifically, after receiving an image distribution request, the image node assembly judges the mark of the distribution operation, and if the mark of the distribution operation is a first mark, the image node assembly performs normal image distribution operation; optionally, the image distribution operation is: distributing the local memory image to a designated node; distributing the distributed storage to the distributed storage; the centralized storage is distributed to the vg of the centralized storage (consistent with the vg of the virtual machine).
Step 1402, if the mark of the distributing operation is the second mark, performing loop detection, calling the synchronous message of the distributing state through the control node, and feeding back to the control node image cache to distribute successfully until the distributing state is the active state.
Optionally, if the mark of the distributing operation is the second mark, if the mark is check, performing cycle detection, calling a synchronization message for obtaining the image cache distributing state to the control node, and if the image cache distributing state is active, feeding back the synchronization message to the control node image cache distributing success, so that the mounting ISO flow continues to execute the next step.
Step 1403, when the cycle detection time exceeds the preset threshold value, feeding back the image cache distribution failure state to the control node, and entering a rollback state.
It can be understood that if the loop detection is overtime, that is, when the loop detection time exceeds the preset threshold value, it indicates that the image cache fails to be distributed successfully, the image cache distribution failure status message is fed back to the control node, and the mount ISO flow will enter a rollback status, that is, the rollback operation of the previous step is executed; it may be appreciated that the specific value of the preset threshold value of the cycle detection may be set according to the requirement, and the embodiment of the present application does not limit the specific value.
And 150, judging whether the target node has the mapping cache map or not through the mapping cache map record table.
It will be appreciated that the system first determines, via the shadow cache map record table, whether a shadow cache map already exists on the target node, and then performs the next step based on whether the shadow cache map exists.
Step 160, storing the mapping cache mapping record according to the judgment result of the mapping cache mapping and initiating a mapping cache mapping request to the computing node assembly.
Referring to fig. 4, step 160 may be implemented by steps 1601-1604.
Step 1601, if there is an image cache map and the map state is an active state, the image cache map record is saved in the image cache map record table.
Specifically, if it is determined that there is a mapping cache map on the target node by the mapping cache map record table, the mapping state at that time is determined, and if the mapping state at that time is an active (active) state, an attempt is made to save the mapping cache map record in the mapping cache map table.
Step 1602, if the image cache mapping record is stored successfully, setting the mark of the mapping operation as a third mark, and initiating an image cache mapping request to the computing node assembly;
specifically, if the image cache map record is successfully saved in the image cache map record table, because the second ID is formed by combining the values of the three fields of the second image ID, the node name and the storage pool name, and the unique constraint is that if the image cache map record is successfully saved, it indicates that the image is not cached on the target node, and no other tasks exist for mapping the image to the target node, at this time, a flag is set for the mapping operation, and is marked as a third flag, and optionally, the third flag is marked as a map, and an image cache map request is initiated to the compute node component; it is understood that the compute node components are used to implement the shadow cache map.
Step 1603, if the storing of the mapping cache mapping record fails, setting the mapping operation mark as a fourth mark, and initiating a mapping cache mapping request to the computing node assembly;
if the image cache map record is not stored in the image cache map record list, indicating that other operations are distributing the image cache to the target node, setting a mark for the image cache map record list, marking the image cache map record list as a fourth mark, marking the second mark as a check, and initiating an image cache map request to the computing node component.
If there is no mapping cache mapping, step 1604, determining whether the target node already has mapping cache mapping according to the mapping cache mapping record table.
And if the image cache mapping record table judges that the image cache mapping does not exist on the target node, judging whether the image cache mapping exists on the target node or not through the image cache mapping record table again.
Step 170, after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule.
Referring to fig. 5, step 170 may be implemented by steps 1701-1703.
Step 1701, after receiving the mapping cache mapping request, the computing node assembly judges a mapping operation mark, and if the mapping operation mark is a third mark, mapping cache mapping is performed;
specifically, after receiving the mapping cache mapping request, the computing node assembly judges the mark of the mapping operation, and if the mark of the mapping operation is a third mark, the computing node assembly performs normal mapping cache mapping operation; optionally, the mapping operation of the mapping cache is: the RBD block device is mapped to the virtual machine operating system by a map command of the RBD block.
Step 1702, if the mapping operation is marked as a fourth mark, performing loop detection, calling a mapping state through the control node, and feeding back to the control node to map the cache to map successfully until the mapping state is an active state;
optionally, if the mapping operation is marked as the fourth mark, if the mapping operation is marked as check, performing loop detection, calling a synchronization message for obtaining the mapping state of the mapping cache to the control node, and if the mapping state of the mapping cache is active, feeding back the synchronization message to the control node to successfully map the mapping cache, so that the mounting ISO flow continues to execute the next step.
And 1703, when the cycle detection time exceeds a preset threshold value, feeding back the mapping failure state of the mapping cache to the control node, and entering a rollback state.
It can be understood that if the loop detection is overtime, that is, when the loop detection time exceeds the preset threshold value, it indicates that the mapping cache fails to map successfully, a mapping failure status message is fed back to the control node mapping cache, and the mount ISO flow will enter a rollback state, that is, the rollback operation of the previous step is performed.
Based on the above embodiment, the implementation method for creating the CephX authentication virtual machine by batch ISO may be further embodied as follows: after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule, and then further comprises:
the configuration file of the virtual machine is modified by mapping the ISO cached device path.
Illustratively, the relevant mounting configuration is written into the configuration file of the virtual machine, and the optical disc is still mounted on the virtual machine after restarting the virtual machine once.
The above steps are not performed in exactly the order of the number descriptions, but should be understood as an overall scheme.
On the basis of the above embodiment, fig. 6 is a schematic structural diagram of an implementation device for creating a CephX authentication virtual machine by batch ISO according to the embodiment of the present application. Referring to fig. 6, the image processing apparatus provided in this embodiment specifically includes: a record table presetting module 301, an image cache judging module 302, a distribution request transmitting module 303, a distribution cache executing module 304, an image cache map judging module 305, a map request transmitting module 306, and an image cache map executing module 307.
The record table presetting module 301 is configured to preset a uniquely constrained image cache record table and an image cache map record table, where the image cache record table is used to record an image cache in a target node, and the image cache map record table is used to record an image cache map in the target node; the image cache judging module 302 is configured to judge whether an image cache already exists in the target node according to the image cache record table; the distribution request sending module 303 is configured to save a record according to a determination result of the image cache and initiate an image distribution request to the image node assembly; the distribution cache executing module 304 is configured to perform image distribution cache according to a preset image distribution rule after the mirror node assembly receives an image distribution request; the mapping cache map determining module 305 is configured to determine whether a mapping cache map already exists in the target node according to the mapping cache map record table; the mapping request sending module 306 is configured to save a record according to a determination result of mapping cache mapping and initiate a mapping cache mapping request to the computing node component; the mapping cache mapping execution module 307 is configured to perform mapping cache mapping according to a preset mapping cache mapping rule after the computing node assembly receives the mapping cache mapping request.
Further, the distribution request sending module 303 includes: the device comprises a cache record keeping unit, a first mark setting module, a second mark setting module and an image cache node judging unit;
the cache record storage unit is used for storing the image cache record in the image cache record list if the image cache exists and the distribution state is an active state; the first mark setting module is used for setting the mark of the distribution operation as a first mark and initiating an image distribution request to the image node assembly if the image cache record is successfully stored; the second mark setting module is used for setting the mark of the distribution operation as a second mark if the image cache record is failed to be stored, and initiating an image distribution request to the image node assembly; and the image cache node judging unit is used for judging whether the target node has the image cache or not through the image cache record table again if the image cache does not exist.
Further, the distribution cache executing module 304 includes: the device comprises a distribution cache executing unit, a distribution cycle detecting unit and a distribution rollback state unit;
the distribution cache executing unit is used for judging the mark of the distribution operation after the mirror node assembly receives the image distribution request, and if the mark of the distribution operation is a first mark, image distribution cache is carried out; the distribution circulation detection unit is used for realizing circulation detection if the mark of the distribution operation is a second mark, and calling a synchronous message of a distribution state through the control node until the distribution state is an active state, and feeding back the synchronous message to the control node image cache to be successfully distributed; and the distribution rollback state unit is used for feeding back the image cache distribution failure state to the control node when the cycle detection time exceeds a preset threshold value, and entering the rollback state.
Further, the mapping request sending module 306 includes: the system comprises a mapping cache record storage unit, a third mark setting module, a fourth mark setting module and a cache mapping node judging unit;
the mapping cache record storage unit is used for storing the mapping cache map record in the mapping cache map record list if the mapping cache map exists and the mapping state is the active state; the third mark setting module is used for setting the mark of the mapping operation as a third mark if the mapping record of the mapping cache is successfully saved, and initiating a mapping cache mapping request to the computing node assembly; the fourth mark setting module is used for setting the mark of the mapping operation as a fourth mark if the image cache mapping record is failed to be stored, and initiating an image cache mapping request to the computing node assembly; and the cache map node judging unit is used for judging whether the target node has the mapping cache map or not again through the mapping cache map record table if the mapping cache map does not exist.
Further, the image cache map execution module 307 includes: the device comprises a cache mapping execution unit, a mapping cycle detection unit and a mapping rollback state unit;
The cache mapping execution unit is used for judging the mark of the mapping operation after the computing node assembly receives the mapping cache mapping request, and if the mark of the mapping operation is a third mark, mapping cache mapping is carried out;
the mapping circulation detection unit is used for performing circulation detection if the mapping operation mark is a fourth mark, and calling a mapping state through the control node until the mapping state is an active state, and feeding back the mapping state to the control node to map the cache and map the cache successfully;
and the mapping rollback state unit is used for feeding back the mapping failure state of the mapping cache to the control node when the cycle detection time exceeds a preset threshold value, and entering a rollback state.
Further, the image cache map execution module 307 is further configured to map the RBD block device to the virtual machine operating system through a map command of the RBD block.
Further, the method further comprises the following steps: and the virtual machine optical disk configuration module is used for modifying the configuration file of the virtual machine by mapping the equipment path of the ISO cache.
The implementation device for batch ISO created CephX authentication virtual machines provided by the embodiment of the application can be used for executing the implementation method for batch ISO created CephX authentication virtual machines provided by the embodiment of the application, and has corresponding functions and beneficial effects.
The image cache record table and the image cache mapping record table are preset, the image cache is carried out through the image cache record table, the record is stored, an image distribution request is initiated, and the image distribution cache is carried out according to a preset image distribution rule; and performing image cache mapping and storing records through the image cache mapping record table, initiating an image cache mapping request, performing image cache mapping according to a preset image cache mapping rule, solving the problem that hot plug of the optical disc is not supported when CephX authentication is used, and simultaneously realizing concurrent execution on the same ISO and node to achieve the effect of batch execution.
The embodiments also provide a storage medium containing computer executable instructions, which when executed by a computer processor, are configured to perform a method of implementing a batch ISO-created CephX authenticated virtual machine, the method of implementing a batch ISO-created CephX authenticated virtual machine comprising: presetting a uniquely constrained mapping cache record table and a mapping cache mapping record table, wherein the mapping cache record table is used for recording mapping caches in target nodes, and the mapping cache mapping record table is used for recording mapping cache maps in the target nodes; judging whether the target node has an image cache or not through the image cache record table; storing records according to the judgment result of the image cache and initiating an image distribution request to the image node assembly; after receiving the image distribution request, the image node assembly performs image distribution caching according to a preset image distribution rule; judging whether the target node has mapping cache mapping or not through the mapping cache mapping record table; storing records according to the judgment result of the mapping cache mapping and initiating a mapping cache mapping request to a computing node assembly; and after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule.
Storage media-any of various types of memory devices or storage devices. The term "storage medium" is intended to include: mounting media such as CD-ROM, floppy disk or tape devices; computer system memory or random access memory, such as DRAM, DDRRAM, SRAM, EDORAM, rambus (Rambus) RAM, etc.; nonvolatile memory such as flash memory, magnetic media (e.g., hard disk or optical storage); registers or other similar types of memory elements, etc. The storage medium may also include other types of memory or combinations thereof. In addition, the storage medium may be located in a first computer system in which the program is executed, or may be located in a second, different computer system connected to the first computer system through a network such as the internet. The second computer system may provide program instructions to the first computer for execution. The term "storage medium" may include two or more storage media that may reside in different locations (e.g., in different computer systems connected by a network). The storage medium may store program instructions (e.g., embodied as a computer program) executable by one or more processors.
Of course, the storage medium containing the computer executable instructions provided in the embodiments of the present application is not limited to the implementation method of creating the CephX authentication virtual machine by batch ISO, and may also perform the related operations in the implementation method of creating the CephX authentication virtual machine by batch ISO provided in any embodiment of the present application.
The implementation device, the storage medium and the computer device for creating the CephX authentication virtual machine by the batch ISO provided in the above embodiment can execute the implementation method for creating the CephX authentication virtual machine by the batch ISO provided in any embodiment of the present application, and technical details not described in detail in the above embodiment can be referred to the implementation method for creating the CephX authentication virtual machine by the batch ISO provided in any embodiment of the present application.
The foregoing description is only of the preferred embodiments of the present application and the technical principles employed. The present application is not limited to the specific embodiments described herein, but is capable of numerous obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the present application. Therefore, while the present application has been described in connection with the above embodiments, the present application is not limited to the above embodiments, but may include many other equivalent embodiments without departing from the spirit of the present application, and the scope of the present application is determined by the scope of the claims.
Claims (10)
1. A method for implementing batch ISO creation of a CephX authenticated virtual machine, the method comprising the steps of:
presetting a uniquely constrained mapping cache record table and a mapping cache mapping record table, wherein the mapping cache record table is used for recording mapping caches in target nodes, and the mapping cache mapping record table is used for recording mapping cache maps in the target nodes;
judging whether the target node has an image cache or not through the image cache record table;
storing records according to the judgment result of the image cache and initiating an image distribution request to the image node assembly;
after receiving the image distribution request, the image node assembly performs image distribution caching according to a preset image distribution rule;
judging whether the target node has mapping cache mapping or not through the mapping cache mapping record table;
storing records according to the judgment result of the mapping cache mapping and initiating a mapping cache mapping request to a computing node assembly;
and after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule.
2. The method for implementing batch ISO creation of a CephX authenticated virtual machine according to claim 1, wherein the storing a record according to the determination result of the image cache and initiating an image distribution request to the image node assembly includes:
If the image cache exists and the distribution state is an active state, the image cache record is stored in the image cache record list;
if the image cache record is successfully stored, setting a mark of a distribution operation as a first mark, and initiating an image distribution request to an image node assembly;
if the image cache record is not stored, setting a mark of the distribution operation as a second mark, and initiating an image distribution request to the image node assembly;
and if the image cache does not exist, judging whether the target node already exists the image cache or not through the image cache record table again.
3. The method for implementing batch ISO creation of CephX authenticated virtual machines according to claim 2, wherein the image node assembly performs image distribution caching according to a preset image distribution rule after receiving an image distribution request, and includes:
after receiving the image distribution request, the image node assembly judges the mark of the distribution operation, and if the mark of the distribution operation is a first mark, the image distribution caching is carried out;
if the mark of the distribution operation is the second mark, performing loop detection, calling a synchronous message of a distribution state through the control node, and feeding back to the control node image cache to be successfully distributed until the distribution state is an active state;
And when the cycle detection time exceeds a preset threshold value, feeding back the image cache distribution failure state to the control node, and entering a rollback state.
4. The method for implementing batch ISO creation of a CephX authenticated virtual machine according to claim 1, wherein the storing a record according to the determination result of the image cache mapping and initiating an image cache mapping request to a compute node assembly includes:
if the mapping cache mapping exists and the mapping state is an active state, the mapping cache mapping record is stored in the mapping cache mapping record list;
if the mapping record of the mapping cache is successfully saved, setting a mark of the mapping operation as a third mark, and initiating a mapping cache mapping request to a computing node assembly;
if the image cache mapping record is not saved, setting a mapping operation mark as a fourth mark, and initiating an image cache mapping request to a computing node assembly;
and if the mapping cache map does not exist, judging whether the mapping cache map exists in the target node or not through the mapping cache map record table again.
5. The method for implementing batch ISO to create a CephX authenticated virtual machine according to claim 4, wherein after receiving the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule, including:
After receiving the mapping cache mapping request, the computing node assembly judges the mark of the mapping operation, and if the mark of the mapping operation is a third mark, mapping cache mapping is carried out;
if the mark of the mapping operation is the fourth mark, performing loop detection, calling the mapping state through the control node, and feeding back to the control node to map the cache to be mapped successfully until the mapping state is the active state;
and when the cycle detection time exceeds a preset threshold value, feeding back the mapping failure state of the mapping cache to the control node, and entering a rollback state.
6. The method for implementing batch ISO creation of a CephX authenticated virtual machine according to claim 1, wherein said image cache record table includes six fields, a first ID, a first image ID, a storage target, a storage type, a distribution status, and a resource type; the first ID is a unique constraint field, and is formed by combining the values of the four fields of the first image ID, the storage target, the storage type and the resource type;
the mapping cache mapping record table comprises a second ID, a second mapping ID, a node name, a storage pool name, a mapping path and a mapping state; the second ID is a unique constraint field, and is formed by combining values of three fields, namely an image ID, a node name and a storage pool name.
7. The method for implementing batch ISO creation of CephX authenticated virtual machines according to claim 1, wherein said performing image cache mapping comprises:
the RBD block device is mapped to the virtual machine operating system by a map command of the RBD block.
8. The method for implementing batch ISO to create a CephX authenticated virtual machine according to claim 1, wherein after the computing node assembly receives the mapping cache mapping request, the computing node assembly performs mapping cache mapping according to a preset mapping cache mapping rule, further comprising:
the configuration file of the virtual machine is modified by mapping the ISO cached device path.
9. An implementation device for creating CephX authentication virtual machines by batch ISO, which is characterized by comprising:
the system comprises a record table presetting module, a record table setting module and a record table setting module, wherein the record table presetting module is used for presetting a uniquely constrained image cache record table and an image cache mapping record table, the image cache record table is used for recording an image cache in a target node, and the image cache mapping record table is used for recording an image cache mapping in the target node;
the image cache judging module is used for judging whether the target node has an image cache or not through the image cache record table;
the distribution request sending module is used for storing records according to the judgment result of the image cache and initiating an image distribution request to the image node assembly;
The image node assembly is used for receiving the image distribution request and carrying out image distribution caching according to a preset image distribution rule;
the mapping cache map judging module is used for judging whether the target node has mapping cache map or not through the mapping cache map record table;
the mapping request sending module is used for storing records according to the judgment result of the mapping cache mapping and initiating the mapping cache mapping request to the computing node assembly;
and the mapping cache mapping execution module is used for carrying out mapping cache mapping according to a preset mapping cache mapping rule after the computing node assembly receives the mapping cache mapping request.
10. A storage medium containing computer executable instructions which, when executed by a computer processor, are adapted to perform a method of implementing a batch ISO creation CephX authenticated virtual machine according to any one of claims 1 to 8.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011626993.5A CN112631732B (en) | 2020-12-30 | 2020-12-30 | Implementation method and device for creating CephX authentication virtual machines by batch ISO |
| PCT/CN2021/085465 WO2022141922A1 (en) | 2020-12-30 | 2021-04-02 | Method and apparatus for implementing batch iso creation of cephx authentication virtual machines |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011626993.5A CN112631732B (en) | 2020-12-30 | 2020-12-30 | Implementation method and device for creating CephX authentication virtual machines by batch ISO |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112631732A CN112631732A (en) | 2021-04-09 |
| CN112631732B true CN112631732B (en) | 2024-03-29 |
Family
ID=75290025
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011626993.5A Active CN112631732B (en) | 2020-12-30 | 2020-12-30 | Implementation method and device for creating CephX authentication virtual machines by batch ISO |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN112631732B (en) |
| WO (1) | WO2022141922A1 (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101419535A (en) * | 2008-11-19 | 2009-04-29 | 北京航空航天大学 | Distributed virtual magnetic disc system of virtual machine |
| CN102307207A (en) * | 2010-09-25 | 2012-01-04 | 广东电子工业研究院有限公司 | System and method for online customizing virtual machine image |
| CN105573679A (en) * | 2015-12-18 | 2016-05-11 | 国云科技股份有限公司 | Method suitable for storage pool resource mapping rule of distributed storage system |
| CN111638855A (en) * | 2020-06-03 | 2020-09-08 | 山东汇贸电子口岸有限公司 | Method for physical bare computer to support Ceph back-end volume |
| CN111831399A (en) * | 2020-07-21 | 2020-10-27 | 浪潮云信息技术股份公司 | Data synchronization method and system of shared disk based on Ceph storage back-end volume |
Family Cites Families (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR101482014B1 (en) * | 2012-05-11 | 2015-01-14 | 네이버 주식회사 | File cache system and method using allocation table and system and method for distributing file cache application |
| US8806489B2 (en) * | 2012-07-05 | 2014-08-12 | International Business Machines Corporation | Virtual machine image distribution network |
| US9081682B2 (en) * | 2012-10-15 | 2015-07-14 | Red Hat Israel, Ltd. | Virtual machine installation image caching |
| CN105573820A (en) * | 2015-12-15 | 2016-05-11 | 国云科技股份有限公司 | Hot plug method for Xen virtual machine compact disc |
| CN106095527A (en) * | 2016-06-07 | 2016-11-09 | 国云科技股份有限公司 | A kind of storage pool implementation method being applicable to cloud platform virtual machine |
| CN107329704B (en) * | 2017-06-30 | 2020-03-24 | 杭州宏杉科技股份有限公司 | Cache mirroring method and controller |
| US10896129B2 (en) * | 2017-08-07 | 2021-01-19 | Dynavisor, Inc. | Method and system for storage virtualization |
| CN107634853A (en) * | 2017-08-28 | 2018-01-26 | 深圳市云舒网络技术有限公司 | A kind of customizable distributed caching method based on object storage |
-
2020
- 2020-12-30 CN CN202011626993.5A patent/CN112631732B/en active Active
-
2021
- 2021-04-02 WO PCT/CN2021/085465 patent/WO2022141922A1/en active Application Filing
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101419535A (en) * | 2008-11-19 | 2009-04-29 | 北京航空航天大学 | Distributed virtual magnetic disc system of virtual machine |
| CN102307207A (en) * | 2010-09-25 | 2012-01-04 | 广东电子工业研究院有限公司 | System and method for online customizing virtual machine image |
| CN105573679A (en) * | 2015-12-18 | 2016-05-11 | 国云科技股份有限公司 | Method suitable for storage pool resource mapping rule of distributed storage system |
| CN111638855A (en) * | 2020-06-03 | 2020-09-08 | 山东汇贸电子口岸有限公司 | Method for physical bare computer to support Ceph back-end volume |
| CN111831399A (en) * | 2020-07-21 | 2020-10-27 | 浪潮云信息技术股份公司 | Data synchronization method and system of shared disk based on Ceph storage back-end volume |
Non-Patent Citations (4)
| Title |
|---|
| M D Poat et al..Performance and Advanced Data Placement Techniques with Ceph's Distributed Storage System.《 Journal of Physics: Conference Series》.2016,全文. * |
| 云计算系统中数据中心的节能算法研究;张小庆;贺忠堂;李春林;张恒喜;钱琼芬;;计算机应用研究(04);全文 * |
| 异构存储感知的Ceph存储系统数据放置方法;刘飞 等;《计算机科学》;全文 * |
| 熊刚 ; 季统凯.工业云操作系统的自主研制.《自动化博览》.2015,全文. * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112631732A (en) | 2021-04-09 |
| WO2022141922A1 (en) | 2022-07-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10013274B2 (en) | Migrating virtual machines to perform boot processes | |
| CN107124431A (en) | Method for authenticating, device, computer-readable recording medium and right discriminating system | |
| US20150026405A1 (en) | System and method for providing a second level connection cache for use with a database environment | |
| CN108073823B (en) | Data processing method, device and system | |
| CN112800436B (en) | Data authorization method and device and electronic equipment | |
| US10318272B1 (en) | Systems and methods for managing application updates | |
| US20200287724A1 (en) | Establishment of trusted communication with container-based services | |
| US20140137265A1 (en) | System and Method For Securing Critical Data In A Remotely Accessible Database | |
| US11687381B2 (en) | Multi-phase distributed task coordination | |
| WO2019037521A1 (en) | Security detection method, device, system, and server | |
| CN110543775B (en) | Data security protection method and system based on super-fusion concept | |
| CN101702724A (en) | Safe control method and device of network access | |
| US20210132975A1 (en) | Automated host attestation for secure run-time environments | |
| TW201335777A (en) | Distributed data storing and accessing system and method | |
| CN112631732B (en) | Implementation method and device for creating CephX authentication virtual machines by batch ISO | |
| WO2021188716A1 (en) | Systems and methods for protecting a folder from unauthorized file modification | |
| WO2023016414A1 (en) | Credential rotation method, computing device, and storage medium | |
| EP3151154B1 (en) | Data access control based on storage validation | |
| WO2018233638A1 (en) | Method and apparatus for determining security state of ai software system | |
| JP5053756B2 (en) | Certificate verification server, certificate verification method, and certificate verification program | |
| CN106851648B (en) | Method, device and system for sharing access information of wireless access point | |
| US20240095338A1 (en) | Isolated runtime environments for securing secrets used to access remote resources from compute instances | |
| US20210345101A1 (en) | LiFi Location Services as a Prerequisite to System Activation | |
| CN110990120B (en) | Inter-partition communication method and device for virtual machine monitor, storage medium and terminal | |
| US20230370455A1 (en) | Process level authentication for client device access to a server system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |