Extending shrouding capability of hosting system
Technical solutions are described for extending shrouding capability of a virtual server hosting system. An example method includes receiving a request to deploy a shrouded virtual server using a predetermined set of hardware components, and using a shrouded mode. The method also includes adding a guest server to the hosting system, the guest server including the predetermined set of hardware components. The method also includes deploying a preconfigured hypervisor on the guest server, where the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor. The method also includes deploying, by the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor. The method also includes sending an identifier of the virtual server for receipt by the client device.
1. A system for extending shrouding capability of a virtual server hosting system, the system comprising:
a server computer; and
a host manager console configured to:
receive a request to deploy a shrouded virtual server using a predetermined set of hardware components, and using a shrouded mode, the shrouded mode preventing an administrator of a hosting system from accessing data or applications of the virtual server, the request being sent by a client device;
add a guest server to the hosting system, the guest server comprising the predetermined set of hardware components;
deploy a preconfigured hypervisor on the guest server, wherein the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor;
deploy, via the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor by initiating a new disk partition on the guest server and deploying the preconfigured boot image on the new disk partition and restricting the preconfigured hypervisor to loading a clear memory dump that was generated without a system failure; and
send an identifier of the virtual server for receipt by the client device.
2. The system of claim 1 , wherein the host manager console is further configured to determine that a server in the hosting system has different hardware components from the predetermined set of hardware components, and add the guest server in response.
3. The system of claim 1 , wherein the host manager console configures the virtual server to encrypt the data in the virtual server using a session key received from the client device.
4. The system of claim 1 , wherein the host manager console configures the virtual server to encrypt paging data using a session key received from the client device.
5. The system of claim 1 , wherein the host manager console configures the virtual server to disable access to cache lines of the guest server.
6. The system of claim 1 , wherein the host manager console is further configured to, prior to deployment of the preconfigured hypervisor on the guest server, determine authenticity of the preconfigured hypervisor by comparing a hash value of the preconfigured hypervisor with a predetermined value.
7. The system of claim 1 , wherein the new disk partition is a logical disk partition.
8. The system of claim 1 , wherein the clear memory dump further does not contain a state of from a previous execution of the shrouded virtual server.
9. A computer program product for extending shrouding capability of a virtual server hosting system, the computer program product comprising a computer readable storage device, the computer readable storage device comprising computer executable instructions, wherein the computer readable storage device comprises instructions to:
receive a request to deploy a shrouded virtual server using a predetermined set of hardware components, and using a shrouded mode, the shrouded mode preventing an administrator of a hosting system from accessing data or applications of the virtual server, the request being sent by a client device;
add a guest server to the hosting system, the guest server comprising the predetermined set of hardware components;
deploy a preconfigured hypervisor on the guest server, wherein the preconfigured hypervisor is deployed in an immutable mode that disables changes to security settings of the preconfigured hypervisor;
deploy, via the preconfigured hypervisor, a preconfigured boot image as an instance of the virtual server on the preconfigured hypervisor by initiating a new disk partition on the guest server and deploying the preconfigured boot image on the new disk partition and restricting the preconfigured hypervisor to loading a clear memory dump that was generated without a system failure; and
send an identifier of the virtual server for receipt by the client device.
10. The computer program product of claim 9 , wherein the computer readable storage device further comprises instructions to determine that a server in the hosting system has different hardware components from the predetermined set of hardware components, and add the guest server in response.
11. The computer program product of claim 9 , wherein the computer readable storage device further comprises instructions to configure the virtual server to encrypt the data in the virtual server using a session key received from the client device.
12. The computer program product of claim 9 , wherein the computer readable storage device further comprises instructions to configure the virtual server to encrypt paging data using a session key received from the client device.
13. The computer program product of claim 9 , wherein the computer readable storage device further comprises instructions to, prior to deployment of the preconfigured hypervisor on the guest server, determine authenticity of the preconfigured hypervisor by comparing a hash value of the preconfigured hypervisor with a predetermined value.
14. The computer program product of claim 9 , wherein the new disk partition is a logical disk partition.
15. The computer program product of claim 9 , wherein the clear memory dump further does not contain a state of from a previous execution of the shrouded virtual server.