International Business Machines Corporation

Ahilan Rajadeva

Al Chakra

Constantinos Kassimis

Christopher Meyer

William James Schoen

Techniques for integrated authentication for a container-based environment are described herein. An aspect includes accessing, by an application that is running in a container in a container environment that is hosted by a hypervisor on a host system, an authentication module that is located in the container environment. Another aspect includes invoking an authentication handler in the container environment based on the accessing of the authentication module. Another aspect includes passing control to the hypervisor from the authentication handler. Another aspect includes retrieving a security artifact from a security database of the host system by the hypervisor. Another aspect includes providing the retrieved security artifact to the application via the authentication handler. Another aspect includes performing an authentication operation by the application using the security artifact.

Integrated authentication for container-based environment

A method, system, and computer program product are provided for virtualizing specific values in a guest configuration based on the underlying host symbol substitution values. A symbolic link located in a traditional file system in a virtual guest is opened. Each symbol is extracted from a symbol-based file located in a symbol-based file system. The symbol-based file is accessed through a symbolic link from the traditional file system. The virtual guest issues a privileged instruction to a hypervisor for each symbol in the symbol-based file to retrieve a substitution value from a symbol table that is stored in hypervisor storage. The substitution value for each symbol is returned to the virtual guest, and it replaces the symbol in the symbol-based file. In response to a file read request for the traditional file, the substitution value is retrieved from the symbol-based file using the symbolic link from the traditional file.

Virtualizing specific values in a guest configuration based on the underlying host symbol repository

A method for replacing a first root file system comprising, retrieving a second root file system, mounting the second root file system on a first system in a sysplex as the sysplex root file system, replacing sysplex root mount information associated with the first root file system with sysplex root mount information associated with the mounted second root file system, updating a root on the first system to point to the mounted second root file system, invalidating the first root file system on the first system, updating a first file system to point to the mounted second root file system in the first system, updating an active process with the sysplex root mount information associated with the mounted second root file system, and unmounting the first root file system from the first system.

Growing community of inventors

Newburgh, NY, United States of America

Ahilan Rajadeva