Abstract: Disclosed are systems and method for managing blocks of data and metadata. In an exemplary aspect, a method comprises receiving, by a first virtual block device on a computing device, a request from a file system. In response to identifying an indication that the request for a block of data, the method comprises accessing, by the first virtual block device, at least one backing block device dedicated to storing data to perform a requested operation on the block of data. In response to identifying an indication that the request for metadata, the method comprises instructing a second virtual block device to perform the requested operation on the metadata of the file system, wherein the second virtual block device accesses at least another one backing block device dedicated to storing metadata to perform the requested operation on the metadata of the file system and caches the metadata in Random Access Memory.

Abstract: Disclosed are systems and methods for encryption of an ephemeral layer of one or more containers. An exemplary method comprises detecting a container starting execution in an operating system, generating a temporary encryption key and storing the temporary encryption key in memory of a kernel of the operating system, creating an encrypted area as the ephemeral layer in a storage device, the encrypted area accessible only by the container, providing to the container access to the encrypted area, and responsive to stopping execution of the container, destroying the temporary encryption key.

Abstract: Disclosed herein are systems and method for managing blocks of data and metadata. In one aspect, an exemplary method comprises, receiving, by a virtual block device (VBD), a request from a file system, wherein the request includes one or more of: a type of operation requested by the file system, including one of a read operation or a write operation, and/or an indication as to whether the request is for a block of data or a metadata of the file system, when the request includes the indication as to whether the received request is for a block of data or a metadata, selecting, based on the indication, one of two or more separate storage locations associated with the requested block of data or a metadata respectively, and accessing the determined storage location to perform the requested operation on the block of data or the metadata in the storage location.

Abstract: Systems and methods are disclosed herein for maintaining data integrity of data in a storage device. An exemplary method comprises determining whether checksums associated with data on the storage device are trusted or untrusted, responsive to determining that the checksums are trusted, retrieving the checksums from a checksum archive, otherwise initializing the checksums as unknown, when a received storage request is a write request, calculating a checksum of the data and updating the checksum in memory, when a received storage request is a read request and an in-memory checksum associated with the identified block is not unknown, calculating the checksum of the data in the identified block and comparing the checksum with an in-memory checksum associated with the identified block, determining that corruption has occurred when the checksums don't match and saving checksums associated with each of the uncorrupted data blocks of the storage device to an archive.