CN115543549A - A container whose application running effect is consistent with that of the host - Google Patents

Abstract

The invention provides a container with the application running effect consistent with that of a host machine, which can ensure that a user is consistent with the host machine in application use habit, and the container is kept transparent and unaware, so that inconvenience and burden are not brought to the use of the user of final application. The container can ensure that the application use habit of a user is consistent with that of a host machine, the container can be completely shielded in the application installation and operation process, so that the container-based application installed and operated by the user is basically consistent with the common application on the host machine, the transparency and the no perception are realized, and the learning cost of the common user is obviously reduced.

Description

A container whose application running effect is consistent with that of the host

technical field

The invention relates to the technical field of software design and development, in particular to a container whose application operation effect is consistent with that of a host computer.

Background technique

Container technology is a lightweight operating system layer virtualization technology for the kernel. Different from the hardware abstraction layer virtualization method of the virtual machine, the container technology provides a virtualization method for sharing the operating system kernel, which does not need to be repeated when executing the container. The kernel is loaded, and the kernel of the container is shared with the host, so that hardware resources can be converted into more computing resources. The container is mainly guaranteed by the two mechanisms of Namespace and Cgroup. Namespace: Linux Namespace, namespace, used to isolate Linux kernel resources; Cgroup: Control group, control group, used to manage Linux kernel resources. Specifically, namespace is to isolate another process in the currently running system environment In this operating environment, some necessary system global resources are virtualized. Processes can run in a specified namespace, and each process in the namespace thinks it owns all these virtualized global resources. A control group is a Linux kernel function that manages namespace resources, which can be used to limit, control, and separate resources of a process group, such as CPU, memory, and disk input and output.

Under normal circumstances, the resources between the container and the host, and between the container and the container are isolated from each other. The container needs to be started by using the command line alone. It does not share various files with the host, and it is impossible to run applications without awareness. It can be seen that the container is a common tool for software deployment and operation at present. It generally runs on the server. It is characterized by resource isolation between the container and the container, and between the container and the host. They will interfere with each other to ensure the security of container data. However, when the container technology is introduced into the client machine, because the container is often used to operate the container, some common operations need to be completed inside the container, and the command line supporting tools inside the container are not complete, which makes it extremely difficult for non-professional users to use and learn containers. Big. At the same time, the data independence and resource isolation between the container and the host machine will cause some applications developed for the client to fail to work normally.

To sum up, some users may want to use container technology to run their applications on the client. However, when container technology is introduced into the client, common operations such as starting the application, observing the running status of the application, importing and exporting files, and manually reading and writing files need to use The command line tool is completed, and even most of the operations need to be completed inside the container, and the various supporting tools inside the container are often incomplete and need to be installed by the user, which brings great difficulties to the user to use the application based on the container. Due to the isolation of container resources, some common operations on the client may not be implemented in the container, such as opening a document with office software, or downloading a document with chat software and saving it to a specified directory, or copying some files to U disk and so on. As a result, quite a few applications cannot be used on the client based on containers.

Contents of the invention

In view of this, the present invention proposes a container whose application running effect is consistent with that of the host machine, which can ensure that the user's application usage habits are consistent with the host machine, and keep the container transparent and non-perceptual, so as not to bring any harm to the user of the final application. Any inconvenience and burden.

To achieve the above object, the technical solution of the present invention is:

A container whose application running effect is consistent with that of the host machine. The user, network, mount, host name, inter-process communication, and process context of the container are completely consistent with the host system, so that the container process can communicate with the host machine and other containers communicate with the process of the host machine, and accept the unified management of the process by the host operating system; the application window of the container is completely integrated with the window system of the host machine; Can see the real-time changes of user data, wherein the container ensures access to the data of the currently logged-in user by mounting the home directory of the current user; the container includes a system library with complete functions, so that the operation of the application There is no difference on the host computer; the container includes bash shell, ssh, ftp, browser and httpd system tools; the container configuration information is synchronized with the application; the container supports shortcuts and provides an interface for creating shortcuts.

Wherein, the container only creates a virtual root file system, and does not construct other name spaces. Exactly the same as that of the host machine;

Wherein, the root file system includes four sources: the state directory formed by the modification of the system during the application running process, the directory contained in and included in the application image, the kernel file system directory, and the host-related file system directory. The above four sources are integrated to form a complete root file system.

Among them, for 2D graphics, the application in the container communicates with the host graphics service through the Socket of the X11 client, and sends graphics data to the host graphics service to display the graphics interface; for 3D graphics, the mesa graphics library is preset in the container. The application calls the mesa library to use the local GPU to display 3D graphics.

Among them, the container selects the /etc directory to mount the content, and some mounts and some self-built methods control the application configuration information to be visible only in the file system installed by the application, so as to prevent redundant configurations in the container and the host operating system information.

Wherein, the shortcut is executed by double-clicking to start the associated application; after the developer makes the application image, he writes the installation script, and calls the image loading command and the shortcut creation command of the container of the present invention in the installation script.

Beneficial effect:

1. The container of the present invention can ensure that the user's application usage habits are consistent with the host machine, and can completely shield the existence of the container during the application installation and running process, so that the user installs and runs the application based on the container. The application is basically the same, transparent and imperceptible, which significantly reduces the learning cost of ordinary users.

2. Except for the necessary application directory, the container of the present invention shares other directories with the host computer, so that the performance of the application running in the container is consistent with that running on the host computer, and the usability of the container on the client computer is improved.

3. The container of the present invention provides its own root file system, including the state directory formed by the modification of the system during the application running process, the directory contained in the application image and its own directory, the kernel file system directory, and the host-related file system directory. It is integrated and embodied as a complete root file system.

detailed description

Examples are given below to describe the present invention in detail.

In order to better illustrate the working process of the present invention, the following concepts are explained:

Mounting refers to the process by which the operating system makes computer files and directories on a storage device (such as a hard disk, CD-ROM, or shared resource) available to users through the computer's file system. For Linux systems, generally speaking, when the computer is turned on, the first mounted file system is called the root file system, which is also the file system where the kernel image is located. All other file systems need to be mounted in a directory under the root file system before they can be accessed; when the computer is shut down, each mounted storage will undergo an unmount to ensure that all queued data is written, And ensure the integrity of the file system structure on the medium. When mounting, the operating system will do two things, one is to read the super block of the mounted file system into the memory; the other is to set the mount field of the super block to the relevant information of the mount point to record the Where to mount the file system.

The present invention provides a container whose application operation effect is consistent with that of the host machine, which is mainly oriented to client applications, and can completely shield the existence of the container during the process of application installation and operation, so that users can install and run container-based applications in the same way as ordinary The application on the host machine is basically the same, ensuring that the user's application habits are consistent with the host machine, and keeping the container transparent and insensitive, so as not to bring any inconvenience and burden to the user of the final application, and significantly reducing the learning cost of ordinary users . Except for the necessary application directory, the container of the present invention shares other directories with the host computer, so that the performance of the application running in the container is consistent with that of running on the host computer, and the usability of the container on the client computer is improved. Container of the present invention is specifically as follows:

1) The user, network, mount, host name, inter-process communication, and process context of the container of the present invention are completely consistent with the host system, so that the container process can communicate with the host and other container processes, and accept host operations Unified management of the process by the system. In order to achieve this effect, in addition to creating a virtual root file system, the container does not construct other namespaces (namespace), including User, PID, network, mount, ipc, uts and cgroup, and at the same time, mount the corresponding configuration files to In the root file system of the container, the configuration information such as user, network, mount, and host name is exactly the same as that of the host machine. Among them, the container needs to provide its own root file system, which has four sources, including the state directory formed by the modification of the system during the application running process, the directory contained in and brought by the application image, the kernel file system directory, and the host-related file system Directories and containers need to integrate the above sources into a complete root file system, as shown in Table 1.

Table 1 root file system table

directory name Creation method Remark Application and its state directory The container image comes with its own directory Contains the files that the application depends on and the files that store the state of the application while the application is running. kernel file system directory mount Contains all directories providing device information Directory related to the application runtime environment mount Contains user directory, host environment directory, host media directory, host block device directory, host temporary directory, host configuration directory, etc. These directories provide resource and status sharing capabilities between applications in containers and the host. Application runtime and loading strategy related directories The container image comes with its own directory These directories determine whether the application can run normally. Each application is inconsistent and needs to be provided by the container image.

2) The application window of the container of the present invention is completely integrated with the host window system, and the user does not feel the existence of the container during the process of application startup and stop, interface operation, etc. For 2D graphics, the application in the container communicates with the host graphics service through the Socket of the X11 client, and sends graphics data to the host graphics service to display the graphics interface; for 3D graphics, the mesa graphics library is preset in the container, and the application can Call the mesa library to use the local GPU to display 3D graphics; for interface input, window manager, taskbar and other interface capabilities, as long as the application in the sandbox can communicate with the host graphics service based on X11, it can be used Unified management of host graphics services.

3) The container of the present invention is completely consistent with the user environment of the host system, and real-time changes of user data can be seen in both the host system and the container. The container ensures that the data of the currently logged-in user can be accessed by mounting the home directory of the current user.

4) The container of the present invention includes a system library with complete functions, so that there is no difference between the operation of the application and that on the host computer. By integrating a system library with complete functions, the container covers more than 10 aspects such as package management, system management, and system interaction, and meets most of the needs of upper-level applications for the system library.

5) The container of the present invention includes convenient and easy-to-use system tools, reducing the difficulty for users to enter, use and manage the container. The container in this embodiment reduces the difficulty for users to enter, use and manage the container by providing system tools in the container such as bash shell, ssh, ftp, browser, and httpd.

6) The container configuration information of the present invention is synchronized with the application, and some applications store related configuration information in the /etc directory. Since the application on the host machine cannot be directly accessed and controlled by the container, and vice versa, it is necessary to prevent the container from being neutralized. Redundant configuration information appears in the host operating system, which brings inconvenience to users and applications. The container of the present invention selects the /etc directory to mount the content, and partially mounts and partially builds itself to control the application configuration information to be visible only in the file system installed by the application, preventing redundant configuration information from appearing in the container and the host operating system.

7) The container of the present invention supports shortcuts and provides an interface for creating shortcuts. The shortcuts can be executed by double-clicking to start associated applications. After the developer makes the application image, he can write the installation script, and call the image loading command and the shortcut creation command of the container of the present invention in the installation script, so as to completely shield the existence of the concept of "container" in the process of user installation and use, and realize Transparent and imperceptible.

To sum up, the above are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (5)

1. A container whose application operation effect is consistent with that of the host machine, characterized in that the user, network, mount, host name, inter-process communication, and process context of the container are completely consistent with the host machine system, so that the container process can Communicate with the process of the host and other containers, and accept the unified management of the process by the host operating system; the application window of the container is completely integrated with the window system of the host; the container is completely consistent with the user environment of the host system. Real-time changes of user data can be seen in both the host system and the container, wherein the container ensures access to the data of the currently logged-in user by mounting the home directory of the current user; the container includes a system library with complete functions, so that There is no difference between the operation of the application and that on the host machine; the container includes bash shell, ssh, ftp, browser and httpd system tools; the configuration information of the container is synchronized with the application; the container supports shortcuts and provides shortcuts for creating way interface. 2. The container according to claim 1, wherein the container only creates a virtual root file system and does not construct other namespaces, and at the same time, mounts the corresponding configuration files into the root file system of the container , so that the user, network, mount and hostname configuration information are exactly the same as those of the host machine; Wherein, the root file system includes four sources: the state directory formed by the modification of the system during the application running process, the directory contained in and included in the application image, the kernel file system directory, and the host-related file system directory. The above four sources are integrated to form a complete root file system. 3. The container according to claim 1 or 2, wherein, for 2D graphics, the application in the container communicates with the graphics service of the host machine through the Socket of the X11 client, and sends graphics data to the graphics service of the host machine to display the graphics Interface; for 3D graphics, the mesa graphics library is preset in the container, and the application calls the mesa library to use the local GPU to display 3D graphics. 4. The container according to claim 1 or 2, wherein the container selects the /etc directory to mount the content, and partially mounts and partially builds itself, so that the control application configuration information is limited to the file system installed by the application It can be seen that redundant configuration information is prevented from appearing in the container and the host operating system. 5. The container according to claim 1 or 2, wherein the shortcut starts the associated application by double-clicking it; after the developer makes the application image, he writes an installation script, and calls the container of the present invention in the installation script. Load image command and create shortcut command.