Patent number: 11442742
Abstract: A method and system for constructing a lightweight container-based user environment (CUE), and a medium, the method including: preparing, by a main process, for communication, cloning a child process, and then becoming a parent process; elevating, by the child process, permission, executing namespace isolation, and cloning a grandchild process, and setting, by the parent process, cgroups for the grandchild process; and setting, by the grandchild process, permission of the grandchild process to execute a command and a file, preparing an overlay file system, setting a hostname, restricting permission, and executing an initialization script to start the container. Multiple users are allowed to customize their own environments, enabling the users to customize their environments more flexibly, achieving privacy isolation, and making it easier and more secure to update a system. Therefore, it is particularly applicable to a high-performance computing cluster.
Type:
Grant
Filed:
July 12, 2020
Date of Patent:
September 13, 2022
Assignee:
National University of Defense Technology, People's Liberation Army of China
Inventors:
Kai Lu, Wenzhe Zhang, Ruibo Wang, Yinghui Gao, Wanqing Chi, Enqiang Zhou, Min Xie, Yong Dong, Wei Zhang, Jiaxin Li, Mingtian Shao
Publication number: 20210011740
Abstract: A method and system for constructing a lightweight container-based user environment (CUE), and a medium, the method including: preparing, by a main process, for communication, cloning a child process, and then becoming a parent process; elevating, by the child process, permission, executing namespace isolation, and cloning a grandchild process, and setting, by the parent process, cgroups for the grandchild process; and setting, by the grandchild process, permission of the grandchild process to execute a command and a file, preparing an overlay file system, setting a hostname, restricting permission, and executing an initialization script to start the container. Multiple users are allowed to customize their own environments, enabling the users to customize their environments more flexibly, achieving privacy isolation, and making it easier and more secure to update a system. Therefore, it is particularly applicable to a high-performance computing cluster.
Type:
Application
Filed:
July 12, 2020
Publication date:
January 14, 2021
Applicant:
National University of Defense Technology, People's Liberation Army of China
Inventors:
Kai LU, Wenzhe ZHANG, Ruibo WANG, Yinghui GAO, Wanqing CHI, Enqiang ZHOU, Min XIE, Yong DONG, Wei ZHANG, Jiaxin LI, Mingtian SHAO