Method and system for improvements in or relating to off-line virtual environments
View Patent ↗The compliance of a virtual machine image to a set of requirements is determined during a process to potentially introduce the virtual machine image into a network. One or more virtual machine images are identified. During compliance testing, the identified virtual machine image is controlled such that it cannot connect to the network. One or more tests are carried out to determine if the virtual machine image is compliant with one or more predetermined requirements. If a virtual machine is compliant with said one or more predetermined requirements, the virtual machine image is connected to the network.
1. A method of determining the compliance of a virtual machine image during a process to potentially introduce the virtual machine image into a computer network, the method comprising:
identifying the virtual machine image;
controlling the virtual machine image such that the virtual machine image cannot connect to the network;
configuring the virtual machine image such that a change made to a file system of the virtual machine image for a compliance test will not persist after a virtual machine corresponding to the virtual machine image is powered off;
carrying out the compliance test to determine whether the virtual machine image is compliant with a predetermined requirement; and
connecting the virtual machine image to the computer network responsive to the virtual machine image being compliant with the predetermined requirement.
2. The method of claim 1 , further comprising:
isolating the virtual machine from the network responsive to the virtual machine image not being complaint with the predetermined requirement.
3. The method of claim 2 wherein isolating the virtual machine comprises connecting the virtual machine to a secure host.
4. The method of claim 1 further comprising:
determining, responsive to the virtual machine image not being in compliance with the predetermined requirement, a manner of bringing the virtual machine image into compliance with the predetermined requirement.
5. The method of claim 4 , further comprising:
repairing the virtual machine image.
6. The method of claim 5 , further comprising:
retesting, after the repairing, the virtual machine image; and
connecting the virtual machine image to the computer network responsive to the retesting resulting in the virtual machine image being complaint with the predetermined requirement.
7. The method of claim 1 , wherein carrying out the compliance test comprises:
activating an automation API in the virtual machine corresponding to the virtual machine image;
copying a compliance test to the file system of the virtual machine corresponding to the virtual machine image;
executing the compliance test on the virtual machine corresponding to the virtual machine image; and
powering off the virtual machine corresponding to the virtual machine image, wherein the powering off causes the compliance test copied to the file system to not persist in the file system for a next powering on of the virtual machine corresponding to the virtual machine image.
8. A system for determining the compliance of a virtual machine image during a process to potentially introduce the virtual machine image into a network, the comprising:
a processor;
a memory for storing instructions which when executed by the processor execute a method comprising:
identifying the virtual machine image;
controlling the virtual machine image such that the virtual machine image cannot connect to the network;
configuring the virtual machine image such that a change made to a file system of the virtual machine image for a compliance test will not persist after a virtual machine corresponding to the virtual machine image is powered off;
carrying out the compliance test to determine whether the virtual machine image is compliant with a predetermined requirement; and
connecting the virtual machine image to the computer network responsive to the virtual machine image being compliant with the predetermined requirement.
9. The system of claim 8 , further comprising:
isolating the virtual machine from the network responsive to the virtual machine image not being complaint with the predetermined requirement.
10. The system of claim 9 , wherein isolating the virtual machine comprises connecting the virtual machine to a secure host.
11. The system of claim 8 , further comprising:
determining, responsive to the virtual machine image not being in compliance with the predetermined requirement, a manner of bringing the virtual machine image into compliance with the predetermined requirement.
12. The system of claim 8 , wherein carrying out the compliance test comprises:
activating an automation API in the virtual machine corresponding to the virtual machine image;
copying a compliance test to the file system of the virtual machine corresponding to the virtual machine image;
executing the compliance test on the virtual machine corresponding to the virtual machine image; and
powering off the virtual machine corresponding to the virtual machine image, wherein the powering off causes the compliance test copied to the file system to not persist in the file system for a next powering on of the virtual machine corresponding to the virtual machine image.
13. A computer program product in a non-transitory computer-usable medium comprising instructions for carrying out a method when said computer program is executed on a computer system, the method comprising:
identifying the virtual machine image;
controlling the virtual machine image such that the virtual machine image cannot connect to the network;
configuring the virtual machine image such that a change made to a file system of the virtual machine image for a compliance test will not persist after a virtual machine corresponding to the virtual machine image is powered off;
carrying out the compliance test to determine whether the virtual machine image is compliant with a predetermined requirement; and
connecting the virtual machine image to the computer network responsive to the virtual machine image being compliant with the predetermined requirement.
14. The product of claim 13 , further comprising:
isolating the virtual machine from the network responsive to the virtual machine image not being complaint with the predetermined requirement.
15. The product of claim 14 wherein isolating the virtual machine comprises connecting the virtual machine to a secure host.
16. The product of claim 13 , further comprising:
determining, responsive to the virtual machine image not being in compliance with the predetermined requirement, a manner of bringing the virtual machine image into compliance with the predetermined requirement.
17. The product of claim 16 , further comprising repairing the virtual machine image.
18. The product of claim 17 , further comprising:
retesting, after the repairing, the virtual machine image; and
connecting the virtual machine image to the computer network responsive to the retesting resulting in the virtual machine image being complaint with the predetermined requirement.
19. The product of claim 16 , further comprising:
repairing the virtual machine image;
retesting, after the repairing, the virtual machine image; and
connecting the virtual machine image to the computer network responsive to the retesting resulting in the virtual machine image being complaint with the predetermined requirement.
20. The product of claim 13 , wherein carrying out the compliance test comprises:
activating an automation API in the virtual machine corresponding to the virtual machine image;
copying a compliance test to the file system of the virtual machine corresponding to the virtual machine image;
executing the compliance test on the virtual machine corresponding to the virtual machine image; and
powering off the virtual machine corresponding to the virtual machine image, wherein the powering off causes the compliance test copied to the file system to not persist in the file system for a next powering on of the virtual machine corresponding to the virtual machine image.