Computerlesbare Speichermedien zum Verschlüsseln und Entschlüsseln einer virtuellen Platte

    公开(公告)号:DE112011104325B4

    公开(公告)日:2020-08-06

    申请号:DE112011104325

    申请日:2011-11-03

    Applicant: IBM

    Abstract: Computerlesbares Speichermedium (916), das maschinenausführbare Anweisungen enthält, die, wenn sie von einem Prozessor ausgeführt werden, den Prozessor dazu veranlassen, eine virtuelle Platte zu verschlüsseln; wobei die virtuelle Platte ein virtuelles Platten-Image aufweist; und wobei das Ausführen der maschinenausführbaren Anweisungen den Prozessor dazu veranlasst:- die virtuelle Platte zu empfangen (600);- die Größe der virtuellen Platte zu erhöhen (602);- einen Entschlüsselungs-Master-Bootdatensatz und ein Entschlüsselungsprogramm auf die virtuelle Platte zu schreiben (604);- mindestens einen Teil des virtuellen Platten-Image zu verschlüsseln (606), wobei das Entschlüsselungsprogramm entschlüsselungsmaschinenlesbare Anweisungen aufweist, um das mindestens partiell verschlüsselte virtuelle Platten-Image gemäß einem Verschlüsselungsschlüssel (944) zu entschlüsseln.wobei das virtuelle Platten-Image in einen ersten (406) und zweiten Teil (408) unterteilt wird, wobei der zweite Teil des virtuellen Platten-Image in einem dritten Abschnitt (418) der virtuellen Platte gespeichert wird, wobei das Ausführen der Anweisungen den Prozessor außerdem dazu veranlasst, den ersten Teil des virtuellen Platten-Image in einen vierten Abschnitt (420) der virtuellen Platte zu kopieren;wobei der Entschlüsselungs-Master-Bootdatensatz in einen ersten Abschnitt (414) der virtuellen Platte geschrieben wird, wobei das Entschlüsselungsprogramm in einen zweiten Abschnitt (416) der virtuellen Platte geschrieben wird, wobei der erste Teil des virtuellen Platten-Image aus dem ersten und zweiten Abschnitt der virtuellen Platte kopiert wird; wobei das Ausführen der Anweisungen den Prozessor außerdem dazu veranlasst, den ersten (406') und zweiten (408') Teil der virtuellen Platte mindestens partiell zu verschlüsseln, undwobei die Größe der virtuellen Platte erhöht wird, um den vierten Abschnitt der virtuellen Platte und einen fünften Abschnitt (422) der virtuellen Platte zu erzeugen, wobei die Größe des fünften Abschnitts größer ist als die des zweite Abschnitts und wobei die kombinierte Größe des ersten und zweiten Abschnitts geringer oder gleich der Größe des vierten Abschnitts ist.

    Managing virtual appliances supporting multiple profiles

    公开(公告)号:GB2519517A

    公开(公告)日:2015-04-29

    申请号:GB201318608

    申请日:2013-10-22

    Applicant: IBM

    Abstract: A system and method for managing one or more virtual appliances (VAs) on a computing system where each virtual appliance comprises one or more virtual machines (VMa-VMc), each one comprising one or more software programs (AP), and supporting a plurality of profiles, each one involving an enabling of a corresponding set of one or more of the software programs with each other software program being disabled. For at least a specific one of the virtual appliances, a corresponding method comprises retrieving profile information indicative of the profiles of the specific virtual appliance, retrieving status information indicative of a status of the computing system, retrieving constraint information indicative of one or more constraints applicable to the software programs of the specific virtual appliance on the computing system, determining a configuration scheme of the specific virtual appliance according to the profile information, the status information and the constraint information, the configuration scheme involving a specific one of the profiles of the specific virtual appliance having the software programs thereof compliant with the applicable constraints, and configuring the specific virtual appliance according to the configuration scheme. The invention can be used to ensure that a number of software licenses is not exceeded.

    Generating customised program logic for hardware devices

    公开(公告)号:GB2506181A

    公开(公告)日:2014-03-26

    申请号:GB201217032

    申请日:2012-09-25

    Applicant: IBM

    Abstract: Customized program logic to control hardware devices of at least one target system, by complementing core program logic with a sub-set of drivers for the identified hardware devices. A reporting unit may be a boot loader deployed in a target system, which identifies attached hardware. The core program may be a deployment engine or an operating system free of drivers. The customized program logic mat be a combination of an image and driver for installation on the target system. The system may be used in a network boot environment where bare metal environment hard disks do not have a bootable program code or operating system, and rapid deployment of software to differently configured devices is desired.

    Re-organising blocks of physical storage based on the sequence in which they are accessed

    公开(公告)号:GB2499290A

    公开(公告)日:2013-08-14

    申请号:GB201221591

    申请日:2012-11-30

    Applicant: IBM

    Abstract: A method for managing a software image 325 being stored in blocks 320 of physical storage comprises, monitoring each access to the physical blocks, calculating or predicting a probable sequence of access to the physical blocks and re-organising/re-arranging the physical blocks according to the probable sequence. The method may be performed by a plurality of virtual machines 220 running on the software image, with a virtual disk having blocks mapped to the blocks of physical storage. The monitoring of accesses to the physical blocks may occur during the booting of each virtual machine. This method effectively defragments the physical storage. When the pre-fetching and storing in a cache 330 of blocks 320f adjacent to the block last accessed occurs, latency may be reduced by pre-fetching the most relevant blocks and those that are most likely required next.

    27.
    发明专利
    未知

    公开(公告)号:DE60227496D1

    公开(公告)日:2008-08-21

    申请号:DE60227496

    申请日:2002-03-05

    Applicant: IBM

    Abstract: A method of managing configuration changes in a data processing system, particularly a network wherein software products (250) must be distributed to client workstations. The method provides the definition of reference models (220e-220d) arranged in a tree (215); each reference model includes configuration elements (such as software products and/or hardware features and their desired target status) for the corresponding client workstations (subscribers). A target configuration (230) of the client workstations associated with each reference model is determined by inheriting the configuration elements of the parent reference models. A list of actions (245) to be carried out on each client workstation for reaching the corresponding target configuration is determined by comparing the target configuration with a current configuration of the client workstation stored in a corresponding inventory (245).

    Deployment of a software image on multiple targets with streaming technique

    公开(公告)号:GB2512006B

    公开(公告)日:2015-07-22

    申请号:GB201412336

    申请日:2012-12-04

    Applicant: IBM

    Abstract: Deploying a software image from a source data-processing system on target data-processing entities of a target data-processing system, the software image including memory blocks being individually accessible, with a predefined subset of the memory blocks defining a bootstrap module. The deploying includes downloading the bootstrap module onto a main one of the target data-processing entities from the source data-processing system, booting the main target data-processing entity from the bootstrap module thereby loading a streaming driver in the bootstrap module, and serving each request of accessing a selected memory block of the software image on the main data-processing entity by the streaming driver.

    Deployment of a software image on multiple targets with streaming technique

    公开(公告)号:GB2512006A

    公开(公告)日:2014-09-17

    申请号:GB201412336

    申请日:2012-12-04

    Applicant: IBM

    Abstract: A solution is proposed for deploying a software image from a source data- processing system on a plurality of target data-processing entities of a target data- processing system, the software image comprising a plurality of memory blocks being individually accessible, with a predefined subset of the memory blocks defining a bootstrap module. A corresponding method (400) comprises the steps of downloading (406) the bootstrap module onto a main one of the target data- processing entities from the source data-processing system, booting (407-409) the main target data-processing entity from the bootstrap module thereby loading a streaming driver comprised in the bootstrap module, serving (410-422) each request of accessing a selected memory block of the software image on the main data- processing entity by the streaming driver, the streaming driver downloading (413- 414) the selected memory block from the source data-processing system and storing (415-416) the selected memory block into the main target data-processing entity in response to a first one of the requests of accessing the selected memory block, or accessing (417) the selected memory block in the main target data-processing entity otherwise, providing (423-427) the bootstrap module to each one of a set of secondary ones of the target data-processing entities, booting (428-429) each secondary target data-processing entity from the bootstrap module thereby loading the streaming driver, and serving (430-448) each request of accessing a further selected memory block of the software image on the secondary data-processing entity by the streaming driver, the streaming driver retrieving (433-440) the further selected memory block from the main target data-processing entity and storing (441- 442) the further selected memory block into the secondary target data-processing entity in response to a first one of the requests of accessing the further selected memory block, or accessing (443) the further selected memory block in the secondary target data-processing entity otherwise.

    Upgrade of software images based on streaming technique

    公开(公告)号:GB2499964B

    公开(公告)日:2013-12-11

    申请号:GB201311739

    申请日:2011-11-10

    Applicant: IBM

    Abstract: Migrating a data-processing entity from a source software image installed on a mass memory of the data-processing entity to a target software image stored on an external source. A portion of mass memory is released. Memory blocks stored in boot locations of the target software image are relocated to the released portion, including memory blocks required to boot the data-processing entity to load a streaming function for downloading the target software image from the external source. The data-processing entity is booted from the boot blocks, thereby loading the streaming function. Each request for reading a selected memory block of the target software image is served by the streaming function, which downloads the selected memory block from the external source and stores it into the released portion when the selected memory block is not available in the mass memory, or retrieves the selected memory block from the mass memory.

Patent Agency Ranking