KR20130134920A - Method for virtual machine auto-configuration and method for providing virtual machine auto-configuration service - Google Patents

Abstract

The present invention relates to a virtual machine initial setting automation method and a virtual machine initial setting automation service providing method, and more particularly, to a virtual machine initial setting automation method and a virtual machine initial setting automation service providing method that enable a plurality of virtual machine instances of an enterprise client including a plurality of users, In particular, the initialization information necessary for the operating system of the virtual machine instance to install the operating system of the Windows series can be set to be not overlapped with each other in the same enterprise client.

Description

TECHNICAL FIELD [0001] The present invention relates to a virtual machine initial setting automation method and a virtual machine initial setting automatic service provision method.

The present invention relates to a method for automating a virtual machine initial configuration and a method for providing a virtual machine initial configuration automation service. The present invention relates to an initial configuration automation method capable of automating initial configuration, and a method for providing a virtual machine initial configuration automation service for such an enterprise client.

Cloud computing is a computing method that virtualizes resources in a server and pays users to use them as needed. Based on such cloud computing, cloud computing provides a service that provides users with virtual machine instances virtualized computing resources. It is called a service.

Currently, virtual machine instances provided by cloud computing services are mainly provided based on desktop-based operating systems (eg, Windows XP, Windows 7, etc.) or server-based operating systems (eg, Windows 2003 server, Windows 2008 Server, etc.). In order to install the Windows-based operating system in the virtual machine instance, it is necessary to input initial configuration information such as SID and computer name for each user.

In particular, in the case of a cloud computing service for an enterprise client, a plurality of individual virtual computing environments must be provided to a plurality of users belonging to an enterprise client. Therefore, in the process of preparing a plurality of virtual machine instances for each of a plurality of users , And inputting initial setting information for each of a plurality of users to an operating system of virtual machine instances.

In the past, this initial configuration information was manually generated and input by the IT client of the corporate client or the cloud computing service provider. However, in view of the fact that the number of users belonging to the corporate client increases and can be changed dynamically. As cloud computing services for enterprise clients become full-fledged, there is a need for a way to automate this virtual machine initial setup process.

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and it is an object of the present invention to provide a method and system for automatically setting an initial setting information for each of a plurality of users belonging to an enterprise client, And to provide a method of providing an automated method for initializing a virtual machine.

Technical problems to be achieved by the present invention are not limited to the above-mentioned technical problems, and other technical problems not mentioned above may be clearly understood by those skilled in the art from the following description. There will be.

In order to achieve the above technical problem, a virtual machine initializing method according to the present invention comprises the steps of creating a virtual machine instance by duplicating a pre-stored master virtual machine template image in a private network; Request the first initial configuration information required to install the operating system on the virtual machine instance created based on the MAC address of the virtual machine instance outside the private network through the router virtual machine of the private network, and in response to the request Obtaining initial setting information; An operating system installing step of installing an operating system in the virtual machine instance created based on the first initial setting information; Requesting second initial setting information required for initial setting of a virtual computing agent which is an application program for providing a virtual computing environment on an operating system installed outside the private network through a router virtual machine and transmitting second initial setting information in response to the request Obtaining; And an agent setting step of setting a virtual computing agent based on the second initial setting information.

More preferably, the first initialization information may include an identifier of a user account, a computer name, operating system activation information, and active directory information.

More preferably, the operating system installation step includes inputting an identifier, a computer name, and operating system activation information of a user account into the operating system; And joining the domain to which the user account belongs based on the active directory information.

More preferably, the second initial configuration information may include information of a controller connected to the virtual computing agent to control the virtual computing environment.

More preferably, the agent establishing step comprises synchronizing the virtual computing agent and the controller; Assigning an administrator privilege to an operating system user account to install an application program in the operating system or change an internal configuration of the operating system; And synchronizing at the domain time of the domain to which the user account of the operating system belongs.

More preferably, the message requesting the second initialization information may be the same as the message requesting the first initialization information.

According to another aspect of the present invention, there is provided a method of providing a virtual machine initialization automation service, the method comprising: receiving a virtual machine instance created inside a private network; A first request receiving step of receiving a request of first initial setting information; Querying the first initial configuration information based on the MAC address assigned to the virtual machine instance and providing the first initial configuration information to the virtual machine instance via the router virtual machine; A second request receiving step of receiving a request for second initial configuration information required for initial configuration of a virtual computing agent, the application providing a virtual computing environment on the installed operating system, from the virtual machine instance on which the operating system is installed according to the first initial configuration information ; And providing second initial configuration information including information of a controller connected to the virtual computing agent to control the virtual computing environment through the router virtual machine to the virtual machine instance.

More preferably, the first initialization information may include an identifier of a user account, a computer name, operating system activation information, and active directory information.

More preferably, the request message received in the second request receiving step may be the same as the request message received in the first request receiving step.

According to the present invention, an initial configuration of a plurality of virtual machine instances of an enterprise client including a plurality of users each provided with a plurality of virtual computing environments on a private network may be automated.

In particular, the initial configuration information required for the operating system of the virtual machine instance to install the Windows-based operating system can be set so that each user in the same corporate client does not overlap each other.

1 is a view showing a schematic configuration of a cloud computing system according to an embodiment of the present invention.
FIG. 2 is a flowchart illustrating a method of automating initialization in a virtual machine instance of a corporate client of a cloud computing system according to an exemplary embodiment of the present invention.
3 is a flowchart illustrating a method for providing an initialization automation service for a virtual machine instance of a corporate client in a cloud computing system management server of a cluster computing system according to a preferred embodiment of the present invention.
4 is a diagram illustrating a process of automating an initial setup of a virtual machine instance of a corporate client in a cluster computing system according to an exemplary embodiment of the present invention.
FIG. 5 is a diagram illustrating an internal process flow performed in a virtual machine instance according to an initial setting automation process according to a preferred embodiment of the present invention.

The following merely illustrates the principles of the invention. Thus, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. Furthermore, all of the conditional terms and embodiments listed herein are, in principle, intended only for the purpose of enabling understanding of the concepts of the present invention, and are not intended to be limiting in any way to the specifically listed embodiments and conditions . It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. In addition, these equivalents should be understood to include not only equivalents now known, but also equivalents to be developed in the future, that is, all devices invented to perform the same function regardless of structure.

Thus, the functions of the various elements shown in the drawings, including the functional blocks shown in the figures or similar concepts, may be provided by use of dedicated hardware as well as hardware capable of executing software in connection with appropriate software. When provided by a processor, the functions may be provided by a single dedicated processor, a single shared processor, or a plurality of individual processors, some of which may be shared. Also, the use of terms such as processor, control, or similar concepts should not be construed as exclusive reference to hardware capable of executing software, but may include, without limitation, digital signal processor (DSP) hardware, (ROM), random access memory (RAM), and non-volatile memory. Other hardware may also be included.

The above objects, features and advantages will become more apparent from the following detailed description in conjunction with the accompanying drawings. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

On the other hand, when an element is referred to as "including " an element, it does not exclude other elements unless specifically stated to the contrary.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a schematic configuration of a cloud computing system for an enterprise client according to an exemplary embodiment of the present invention.

Referring to FIG. 1, the cloud computing system according to the present embodiment includes a cloud computing system management server 110, a router virtual machine (RVM) 130, a user virtual machine 140, an active directory (AD) 150, and a controller ( DDC, 160).

The cloud computing management server 110 refers to a server that provides cloud computing services outside the private network 120 of the enterprise clients and comprehensively manages the cloud computing services provided to users or enterprise clients.

The enterprise client of the present embodiment is constituted by a plurality of users each of which can use a plurality of user accounts that are respectively provided with a plurality of individual virtual computing environments rather than a single user account, (E.g., an organization chart) and the like can be separately stored and managed. Based on the relationship, it is possible to use the virtual environment of each user Rights to access or control resources or components on the virtual computing environment or other private networks may be limited.

The cloud computing management server 110 may establish a basis for distributing a virtual computing environment for the cloud computing service to the user virtual machine 140, and may provide a function of monitoring or managing such a distribution process. Generally, it can be implemented based on a solution of Citrix Xen Server series, but this is merely one example, and the present invention is not limited thereto.

In addition, the router virtual machine 130, the user virtual machine 140, the active directory 150 and the controller 160 may be located on the private network 120 of the enterprise client.

In this case, in the user virtual machine 140, the active directory 150, and the controller 160, which are components inside the private network 120, components of an external network of the private network 120, for example, a cloud computing system management server ( When communicating with 110, it is possible to communicate via the router virtual machine 130.

The router virtual machine 130 performs a NAT (Network Address Translation) function of changing a private IP address of a component in the private network 120 to an external IP address for communication with the external network, The user virtual machine 140, which is a component inside the server 120, supports the access to the Internet, or mediates the access to the cloud computing system management server 110, which is a component of the external network.

That is, instead of blocking the direct access to the cloud computing system management server 110 in the user virtual machine 140, the router virtual machine 130 may not directly access the broker 140 between the user virtual machine 140 and the cloud computing system management server 110 Broker) function.

In addition to the NAT and broker functions, the routing virtual machine 130 can perform DHCP server, port forwarding between user virtual machines, routing among other router virtual machines, network configuration of other router virtual machines, and port forwarding setting function .

In addition, a plurality of routing virtual machines 130 may be scaled out according to the number of user virtual machines used by the corporate client and disposed on the private network.

The user virtual machine 140 installs an operating system in a virtual machine instance created by duplicating a pre-stored master virtual machine template image, and provides a virtual computing environment using virtual computing resources to the user through the virtual computing agent on the basis of the operating system to provide.

Active Directory 150 is a component that stores and manages ID and relationship information of components constituting the private network 120 in a Windows-based operating system. Allows you to configure and manage configuration information for the program, and manages communication between users and domains.

The controller 160 provides a service for authenticating a user who will use the user virtual machine, managing the virtual computing environment assembly of the user, mediating a connection between the user and a virtual computing environment (e.g., a virtual desktop) Such as starting or stopping a virtual desktop service, which is a kind of virtual desktop service.

FIG. 2 is a flowchart illustrating a method of automating initialization in a virtual machine instance of an enterprise client in a cloud computing system according to an exemplary embodiment of the present invention. Referring to FIG. 2, a virtual machine instance, a router virtual machine, Controller and the cloud computing system management server are connected to the user virtual machine 140, the router virtual machine (RVM) 130, the controller (DDC) 160, and the cloud computing system management server 110 of the cloud computing system shown in FIG. 1 . Therefore, the same matters as in the description of the cloud computing system illustrated in FIG. 1 are referred to this.

In the present embodiment, for convenience of description, it is assumed that the operating system operating in the virtual machine instance is one of the Windows-based operating system Windows XP, Windows 2003 server, Windows 7, Windows 2008 Server, but this is one implementation It is only an example, and the present invention is not limited thereto.

Referring to FIG. 2, first, a virtual machine instance is generated by duplicating a previously stored master virtual machine template image (S201). The virtual machine instance created in step S201 in this embodiment assumes that the template image in the original state before the operating system is installed is replicated.

Through the router virtual machine, the cloud computing system management server of the external network requests first initial configuration information required to install a Windows-based operating system on the virtual machine instance based on the MAC address assigned to the virtual machine instance (S202). ).

Here, the first initial configuration information may include an identifier of a user account, a computer name, operating system activation information, and other active directory information.

In response to the request in step S202, the first initialization information is obtained from the cloud computing system management server through the router virtual machine (S203).

The operating system is normally installed in the virtual machine instance by inputting the first initial setting information acquired in step S203 (S204). For example, an identifier of a user account, a computer name, and operating system activation information may be input to an operating system, and the user account may be joined to a domain to which the user account belongs based on the Active Directory information.

After the operating system is normally installed through the step S204, the second initial setting information required for the initial configuration of the virtual computing agent in order to operate the virtual computing agent, which is an application that will provide the user with the virtual computing environment on the installed operating system. Is needed.

Here, the second initial configuration information is representative of the controller, which is a component that is connected to the virtual computing agent to control the virtual computing environment on the cloud computing system management server side, and through the controller of the cloud computing system management server. It allows management or control of the virtual computing environment provided to the user according to indirect control or direct control of the controller.

To this end, the second initialization information is requested to the cloud computing system management server through the router virtual machine (S205), and in response to this, the second initialization information is obtained from the cloud computing system management server through the router virtual machine (S206).

The initial setting of the virtual computing agent is completed and operated based on the second initial setting information acquired in step S206 (S207). For example, in the initial setting process of the virtual computing agent, an administrator authority to synchronize the virtual computing agent and the controller, to install the application program in the operating system or to change the internal setting of the operating system is given to the user account of the operating system, You can synchronize to the domain time of the domain to which the account belongs.

Accordingly, the virtual computing agent is connected to the controller, and operates the virtual computing agent under the control of the cloud computing system management server or the controller to provide the virtual computing environment to the user who is allocated the virtual machine instance.

3 is a flowchart illustrating a method of providing an initial configuration automation service for a virtual machine instance of an enterprise client in a cloud computing system management server of a cloud computing system according to an exemplary embodiment of the present invention.

The virtual machine instance, the router virtual machine, the controller, and the cloud computing system management server according to the present embodiment may include a user virtual machine 140, a router virtual machine (RVM) 130, a controller (DDC, 160 and the cloud computing system management server 110 may respectively correspond. Therefore, the same matters as in the description of the cloud computing system illustrated in FIG. 1 are referred to this.

In this embodiment, for convenience of explanation, as in the embodiment shown in FIG. 2, the operating system operating in the virtual machine instance is one of Windows XP operating system, Windows 2003 server, Windows 7, Windows 2008 Server It will be understood that the present invention is not limited thereto.

From the virtual machine instance generated by replicating the pre-stored master virtual machine template image within the private network of the enterprise client, through the router virtual machine of the corresponding private network, the first initial setting information necessary for installing the Windows- (S301).

The first initial setting information received in step S301 may include an identifier of a user account, a computer name, operating system activation information, and other active directory information. The request of the first initial setting information may include a MAC It is assumed that the address information is included.

The first initial setting information is inquired based on the MAC address information of the request received in step S301 (S302). The cloud computing system management server according to the present embodiment assumes that a database storing first initial setting information of each virtual machine instance is constructed with MAC address information as a key.

In response to the request received in step S301, the first initialization information inquired in step S302 is provided to the corresponding virtual machine instance via the router virtual machine of the private network in step S303.

In operation S304, a request for second initial configuration information required for initial configuration of a virtual computing agent to provide a virtual computing environment on the operating system is received from the virtual machine instance on which the operating system is installed according to the first initial configuration information provided in operation S304. ).

In the present embodiment, the second initial configuration information generally includes information of a controller connected to the virtual computing agent to control the virtual computing environment.

In response to the request received in step S304, the second initial setting information is provided to the corresponding virtual machine instance via the router virtual machine (S305).

4 is a diagram illustrating a process of automating an initial setup of a virtual machine instance of a corporate client in a cluster computing system according to an exemplary embodiment of the present invention.

The user VM 401, the RVM 402, and the VMS 403 according to the present embodiment may correspond to the virtual machine instance, the router virtual machine, and the cloud computing system management server of the embodiments shown in FIGS. 2 to 3, respectively. Therefore, the same matters as those in the description of the embodiments shown in FIGS. 2 to 3 are referred to this.

First, the User VM 401 requests initial setting information to the RVM 402 in a primitive state before the OS is installed (S411). In this embodiment, the request for the initial configuration information is implemented in the form of calling the Request Provisioning Info () method defined in a separate API.

The RVM 402 forwards the request of the User VM 401 to the VMS 403 as it is (S412).

The VMS 403 forwards the request of the User VM 401 from the RVM 402 as it is, and then RVM the identifier of the user account, the computer name, operating system activation information, and other Active Directory information corresponding to the MAC address of the request. The controller 40 transmits the result to the 4040. In this embodiment, the provision of the identifier of the user account, the computer name, the operating system activation information, and other active directory information is implemented by calling the response AD Info () method defined in the separately implemented API.

The RVM 402 sends the user account identifier, computer name, operating system activation information, and other Active Directory information received from the VMS 403 to the User VM 401 in the form of a response to a request from the User VM 401. (S414). In this embodiment, in response to the request of the User VM 401 of the RVM, transmitting the information received from the VMS 403 is implemented in the form of calling the Response Provisioning Info () method defined in a separate implemented API. do.

The User VM 401 performs an operation of installing an operating system to the User VM 401 based on the information received in step S414 (S415 to S416).

In general, the Windows-based operating system sets up the necessary information during the installation process, so-called generalize, through a tool called Sysprep. In the case of generalizing only by running the Sysprep tool, Since information such as an identifier (SID) is randomly generated, duplicate SIDs can be generated and used on the same private network.

Therefore, in the present embodiment, the identifier, computer name, operating system activation information, and other Active Directory information of the user account are obtained from the VMS 403 outside the private network, and an Unattend file is generated based on the obtained information. Link this Unattend file to the Sysprep tool to configure Sysprep (S415), reboot the operating system, run the Sysprep tool (S416), perform the generalization of the operating system, and reboot the operating system.

In this case, the command to link the Unattend file to the Sysprep tool in the Windows-based operating system may be written and executed as "sysprep.exe / quiet / generalize / oobe / reboot / unattend: [Unattend file name]". In the 2008 server, such an Unattend file may be implemented in an XML form, but this is only one embodiment, and the present invention is not limited thereto.

After the operating system installation is completed through Sysprep, the User VM 401 requests initial configuration information from the RVM 402 in a state where the operating system is installed (S417). In this embodiment, the request for the initial configuration information in step S417 is implemented in the form of calling the Request Provisioning Info () method defined in a separate implemented API, as in step S411. That is, after defining the message for requesting the first initial configuration information and the message for requesting the second initial configuration information in FIGS. 2 to 3 as a request message of the same type, the same in the VMS 403 processing the request message is the same. The request message is classified into a message for requesting first initial configuration information and a message for requesting second initial configuration information according to the number of times of receiving a request message including a MAC address. However, this is only one embodiment, and the present invention is not limited thereto.

The RVM 402 forwards the request of the User VM 401 to the VMS 403 as it is in step S412 (S418).

The VMS 403 forwards the request of the User VM 401 from the RVM 402 as it is. If the VMS 403 has previously received the request message corresponding to the MAC address of the request, the VMS 403 transmits a User VM To the RVM 4020, information of the controller to be connected to the virtual computing agent to be installed in the virtual computing agent (S419). In this embodiment, the controller information is provided in the form of calling the response DDC Info () method defined in a separate API.

The RVM 402 transmits the controller information received from the VMS 403 to the User VM 401 in the form of a response to the request of the User VM 401 (S420). At this time, the RVM 402 can perform the process by calling the Response Provisioning Info () method as in step S414.

The user VM 401 performs an initial configuration of the virtual computing agent on the operating system installed in the user VM 401 based on the information received in operation S420 (S421). In the initial setting process of the virtual computing agent, administrator privileges for synchronizing the virtual computing agent and the controller, installing the application program in the operating system or changing the internal configuration of the operating system are assigned to the user account of the operating system, You can synchronize to the domain time of the domain to which it belongs, and these tasks can be done by calling the VDA setup () method and the Admin Auth () method.

FIG. 5 is a diagram illustrating an internal process flow performed in a virtual machine instance according to an initial setting automation process according to a preferred embodiment of the present invention. In the present embodiment, for convenience of description, it is assumed that the operating system operating in the virtual machine instance is a Windows-based desktop operating system Windows XP or Windows 7, but this is only one embodiment, the present invention itself It is not limited to this.

First, when the virtual machine instance is generated, it generates an RSA-Key corresponding to the virtual machine instance (S501), and requests DHCP IP allocation from the router virtual machine performing the function of the DHCP server (S502).

If the DHCP IP allocation is successfully performed in step S502 (S503), synchronization is performed, a WRM port for controlling a separate VM is opened (S504), and a predetermined port (for example, 80 port), a communication connection with the router virtual machine is tried, and a communication connection state with the router virtual machine is checked (S505).

If the communication connection state with the router virtual machine is normal (S506), the initial setup request is transmitted to the router virtual machine (S507).

Upon successfully receiving a response to the initial setup request in step S507 (S508), it is determined whether the current operating system is installed before or after the installation (S509), and before the installation, the operating system to be installed is Windows XP or Windows. In operation S510, the operating system is normally installed (S511 to S515) through a generalization (or initialization) process for each operating system based on the information received in response to the initial setup request in step S507.

If the current operating system is installed, the virtual computing agent is installed on the basis of the information received in response to the initial setup request in step S507, and the operation of changing the user account of the operating system to administrator authority is performed (S516). ).

According to the present invention, an initial configuration of a plurality of virtual machine instances of an enterprise client including a plurality of users each provided with a plurality of virtual computing environments on a private network may be automated.

In particular, the initialization information necessary for the operating system of the virtual machine instance to install the operating system of the Windows series can be set so that they do not overlap with each other within the same enterprise client.

The apparatus and method for monitoring virtual mobile instances according to the present invention can also be implemented as computer readable codes on a computer readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like. In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers of the technical field to which the present invention belongs.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be taken by way of limitation, You will understand. Accordingly, the true scope of protection of the present invention should be determined only by the appended claims.

Claims (9)

Creating a virtual machine instance by duplicating a master virtual machine template image previously stored in a private network;
Requesting the first initial setting information necessary for installing the operating system in the created virtual machine instance based on the MAC address of the virtual machine instance outside the private network through the router virtual machine of the private network, Acquiring the first initial setting information with the first initial setting information;
An operating system installation step of installing an operating system on the created virtual machine instance based on the first initial setting information;
Requests second initial configuration information required for initial setting of a virtual computing agent, which is an application that will provide a virtual computing environment on the installed operating system outside the private network through the router virtual machine, and in response to the request, Obtaining initial setting information; And
And an agent setting step of setting the virtual computing agent based on the second initial setting information. The method of claim 1,
And the first initial configuration information comprises an identifier of a user account, a computer name, operating system activation information, and active directory information. 3. The method of claim 2,
The operating system installation step
Inputting an identifier, a computer name, and operating system activation information of the user account into the operating system; And
And joining the domain to which the user account belongs based on the active directory information. The method of claim 1,
And the second initial configuration information is connected to the virtual computing agent and includes information of a controller to control the virtual computing environment. The method of claim 1,
The agent setting step
Synchronizing the virtual computing agent and the controller;
Granting a user account of the operating system an administrator right to install an application program on the operating system or change an internal setting of the operating system; And
And synchronizing at a domain time of a domain to which a user account of the operating system belongs. The method of claim 1,
And the message for requesting the second initial configuration information is the same as the message for requesting the first initial configuration information. A first request receiving step of receiving a request for first initial configuration information required to install an operating system on the virtual machine instance through a router virtual machine of the private network from the virtual machine instance created inside the private network;
Querying the first initial configuration information based on the MAC address assigned to the virtual machine instance and providing the first initial configuration information to the virtual machine instance via the router virtual machine;
A second request for receiving the second initial configuration information required for initial configuration of a virtual computing agent, the application program providing an virtual computing environment on the installed operating system, from the virtual machine instance on which the operating system is installed according to the first initial configuration information; Request receiving step;
And providing the second initial configuration information including information of a controller connected to the virtual computing agent to control the virtual computing environment to the virtual machine instance via the router virtual machine. How to provide initial configuration automation service. The method of claim 7, wherein
And the first initial setting information comprises an identifier of a user account, a computer name, operating system activation information, and active directory information. The method of claim 7, wherein
Wherein the request message received in the second request receiving step is the same as the request message received in the first request receiving step.

Images