Bedarfsabhängiges Herunterladen eines Verschlüsselten Containerbildes

Details

Veröffentlichungs-Nr.

EP4465194

Aktenzeichen

EP23203638

Anmeldetag

13. Oktober 2023

Veröffentlichung

4. Februar 2026

Erteilung

4. Februar 2026

Rechtsraum

EP

IPC

G06F21/12G06F21/53G06F21/60G06F9/455

Abstract

A virtual machine (VM)-based container runtime executing on a computing device receives a request to run a container from a container image that is at least partially encrypted. The VM-based container runtime causes a VM to be initiated from a VM image, the VM image including an agent operable to, during execution, obtain a plurality of decryption keys operable to decrypt blocks of the container image. The agent is operable to set up a block remapper in the VM to be invoked by a file system mounted to the VM to request a particular container image block, send a request for the particular container image block to a block obtainer component executing outside of the VM, utilize a decryption key to decrypt a container image block received from the block obtainer component to generate a decrypted container image block, and pass the decrypted container image block to the file system.

Anmelder

Firmen

Red Hat, LLC
Red Hat, Inc.

Land

🇺🇸 USA

Fachgebiete