National University of Defense Technology, People's Liberation Army of China

Yong Dong

Jiaxin Li

Wanqing Chi

Wei Zhang

Mingtian Shao

Yinghui Gao

Enqiang Zhou

Wenzhe Zhang

Kai Lu

Ruibo Wang

Min Xie

A method and system for constructing a lightweight container-based user environment (CUE), and a medium, the method including: preparing, by a main process, for communication, cloning a child process, and then becoming a parent process; elevating, by the child process, permission, executing namespace isolation, and cloning a grandchild process, and setting, by the parent process, cgroups for the grandchild process; and setting, by the grandchild process, permission of the grandchild process to execute a command and a file, preparing an overlay file system, setting a hostname, restricting permission, and executing an initialization script to start the container. Multiple users are allowed to customize their own environments, enabling the users to customize their environments more flexibly, achieving privacy isolation, and making it easier and more secure to update a system. Therefore, it is particularly applicable to a high-performance computing cluster.

Method and system for constructing lightweight container-based user environment (CUE), and medium

Growing community of inventors

Changsha, China

Yong Dong