Abstract: Virtual machine images may be constantly scanned using background process, to identify current and evolving security risks, such as by optimizing the image scanning a last-in, first-out (LIFO) stack to prioritize most relevant images. Older and/or non-relevant image are removed from the scanning process and removed from use. Virtual machines image prioritization is based on each virtual machine image's current and/or potential usage requirement, where the LIFO stack prioritizes the scanning order. Newly created virtual machine images and/or newly re-activated virtual machine images are placed onto a provisioning queue (first-in, first out) before activation. The virtual machine images active within a host computing environment are processed via a reconciliation process to scan for indications of security vulnerabilities and/or threats to network security. Obsolete or otherwise irrelevant virtual machine images are removed from use via a repository synchronization process.

Abstract: Apparatus and methods for a proactive monitoring-container switching system is provided. The system may include a server cluster. The system may proactively monitor the servers within the cluster to determine if one or more servers within the cluster are showing weaknesses. Upon identifying the weaknesses, the system may identify an available server within the cluster and copy the contents of the weakened server to the available server. The system may then switch the DNS pointer from the weakened server to the available server. Switching the DNS pointer may switch any users and/or applications from the weakened server to the available server with minimal disruption. The synchronizing between servers may maintain the health of the server cluster.

Abstract: Aspects of the disclosure are directed to importing software container images, where an image importer that may import a very large number of container images into local repositories from one or more upstream repositories to an enterprise container platform. An associated computing cluster executes containers (for example, applications and operators) based on the imported container images. Each release (version) of a product supported by the enterprise container platform may require importing newer image sets with respect to the current version. With one aspect, an image importer maintains an image list for container images of the current version, where only missing newer container images for a newer version are added to the list. Only the missing container images for the new version are imported to the enterprise container platform. This approach circumvents importing previously imported container and/or available newer images, thus reducing the amount of imported data from upstream repositories.