WO2022156513A1 - Server operation system guiding method and apparatus, device, and medium - Google Patents

Abstract

Disclosed in the present application are a server operation system guiding method and apparatus a device, and a medium. The method comprises: configuring a PXE enabling mode of a server by default as an encryption mode, and guiding the server to enter a PXE phase; scanning a TFTP service corresponding to the server in a network to determine whether a bootstrap program and an operation system image program corresponding to the server are present in the TFTP service; if the bootstrap program and the operation system image program corresponding to the server are present in the TFTP service, verifying the operation system image program on the basis of a digital certificate corresponding to the server; and when the operation system image program passes the verification, running the bootstrap program by the server to guide the operation system image program. In this way, first verifying an operation system image program can ensure the reliability of the operation system image program, avoid guidance to a malicious image program, and ensure the reliability of a server operation system.

Description

A server operating system booting method, device, device and medium

This application claims the priority of the Chinese patent application filed on January 20, 2021, with the application number 202110076353.X and the invention titled "A server operating system booting method, device, device and medium", all of which are The contents are incorporated herein by reference.

technical field

The present application relates to the technical field of servers, and in particular, to a method, apparatus, device, and medium for booting a server operating system.

Background technique

With the development of information technology and the continuous improvement of the degree of informatization, information security has received more and more attention, especially the security of the server. During the management process of the server, in order to ensure that the system running on the server is controllable, the server boots the OS (operation system) through the BIOS (Basic Input Output System) when it is powered on, and the BIOS first boots the PXE (Preboot eXecution Environment, pre-boot execution environment) for network boot. In the existing server operating system booting process, the network boot item is directly loaded, which may lead to an unsafe server operating system, thereby making the entire server operating system unreliable.

Therefore, how to ensure the reliability of the operating system booting of the server is an important problem to be solved by those skilled in the art.

SUMMARY OF THE INVENTION

In view of this, the purpose of the present application is to provide a server operating system booting method, apparatus, device, and medium, which can ensure the reliability of the booted server operating system. Its specific plan is as follows:

In a first aspect, the present application discloses a method for booting a server operating system, including:

Configure the PXE enable mode of the server to be encrypted mode by default, and guide the server to enter the PXE stage;

Scan the TFTP service corresponding to the server in the network to determine whether there is a bootstrap and the operating system mirroring program corresponding to the server in the TFTP service;

If the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, verifying the operating system mirroring program based on the digital certificate corresponding to the server;

When the operating system mirroring program passes the verification, the server is used to run the booting program to boot the operating system mirroring program.

Optionally, the scanning of the TFTP service corresponding to the server in the network to determine whether there is a boot program and an operating system mirroring program corresponding to the server in the TFTP service, including:

Scan the TFTP service corresponding to the server in the network;

If the TFTP service exists, it is detected whether a bootstrap program and an operating system mirror program corresponding to the server exist in the TFTP service, wherein both the bootstrap program and the operating system mirror program conform to the TFTP specification.

Optionally, the detecting whether there is a bootstrap program and an operating system mirroring program corresponding to the server in the TFTP service includes:

Detecting all files in the default directory in the TFTP service to determine whether a boot program and an operating system mirroring program corresponding to the server exist in the TFTP service.

Optionally, after scanning the TFTP service corresponding to the server in the network to determine whether there is a bootloader and an operating system mirroring program corresponding to the server in the TFTP service, the method further includes:

If the TFTP service does not exist in the network, or, the TFTP service exists in the network and the boot program and the operating system mirroring program do not exist in the TFTP service, perform the operation of the server Local boot of the system.

Optionally, after the PXE enable mode of the server is configured to be the encryption mode by default, the method further includes:

Acquire the digital certificate, and store the digital certificate, wherein the digital certificate includes the public key corresponding to the server.

Optionally, the verification of the operating system mirroring program based on the digital certificate corresponding to the server includes:

Use the public key in the digital certificate to decrypt the signature file corresponding to the operating system image program to obtain the reference plaintext, wherein the signature file is stored in the TFTP service, and the signature file is a The preset algorithm calculates the operating system image program, and encrypts the calculation result with the private key corresponding to the public key;

Using the preset algorithm to process the operating system image program to obtain the plaintext to be verified;

The reference plaintext is compared with the to-be-verified plaintext, and whether the operating system mirroring program passes the verification is determined according to the comparison result.

Optionally, the default configuration of the PXE enable mode of the server to the encryption mode includes:

In the BIOS setup page of the server, the PXE enable mode of the server is configured to be encrypted mode by default.

In a second aspect, the present application discloses a server operating system booting device, including:

The PXE setting module is used to configure the PXE enable mode of the server to the encryption mode by default, and guide the server to enter the PXE stage;

a scanning module, configured to scan the TFTP service corresponding to the server in the network, to determine whether there is a bootstrap program and an operating system mirror program corresponding to the server in the TFTP service;

a verification module, configured to verify the operating system mirroring program based on the digital certificate corresponding to the server if the bootstrap program and the operating system mirroring program corresponding to the server exist in the TFTP service;

A booting module, configured to run the booting program through the server to boot the operating system mirroring program when the operating system mirroring program passes the verification.

In a third aspect, the present application discloses a server, including:

memory and processor;

Wherein, the memory is used to store computer programs;

The processor is configured to execute the computer program to implement the aforementioned method for booting a server operating system.

In a fourth aspect, the present application discloses a computer-readable storage medium for storing a computer program, wherein when the computer program is executed by a processor, the aforementioned method for booting a server operating system is implemented.

It can be seen that this application first configures the PXE enable mode of the server to be encrypted mode by default, and guides the server to enter the PXE stage, and then scans the TFTP service corresponding to the server in the network to determine whether there is a bootstrap in the TFTP service. The program and the operating system mirroring program corresponding to the server, if the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, then based on the digital certificate corresponding to the server, the operating system mirroring program is Verification is performed, and when the operating system mirroring program passes the verification, the server is used to run the booting program to guide the operating system mirroring program. It can be seen that in this application, the PXE enable mode of the server is configured to be encrypted by default, so that when the server enters the PXE stage, the TFTP server corresponding to the server in the network is scanned, and when it is found that the TFTP server exists in the server When the corresponding boot program and operating system mirror program are used, the operating system mirror program will be verified first, and after the operating system mirror program has passed the verification, the boot program will be run to guide the server. The operating system mirroring program, compared with the prior art directly running the bootstrap program to guide the operating system mirroring program after discovering the bootstrap program and the operating system mirroring program, firstly verifying the operating system mirroring program can ensure the operating system mirroring Program reliability, avoid booting into malicious mirror programs, and ensure the reliability of the server operating system.

Description of drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the accompanying drawings required for the description of the embodiments or the prior art. Obviously, the drawings in the following description are only It is an embodiment of the present application. For those of ordinary skill in the art, other drawings can also be obtained according to the provided drawings without any creative effort.

1 is a flowchart of a method for booting a server operating system disclosed in the application;

2 is a flowchart of a specific server operating system booting method disclosed in the application;

3 is a flowchart of a specific server operating system booting method disclosed in the application;

4 is a schematic structural diagram of a server operating system boot device disclosed in the present application;

FIG. 5 is a schematic structural diagram of a server disclosed in this application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

At present, when the operating system of the server is booted in PXE mode, as long as the boot program and the mirror program of the operating system are found, the mirror program of the boot program to boot the operating system is directly available, which may lead to the operating system of the unsafe server. Makes the entire server's operating system unreliable. In view of this, the present application proposes a method for booting a server operating system, which can ensure the reliability of the booted server operating system.

Referring to FIG. 1 , an embodiment of the present application discloses a method for booting a server operating system, which includes:

Step S11: Configure the PXE enable mode of the server to be the encryption mode by default, and guide the server to enter the PXE stage.

In a specific implementation process, it is necessary to first configure the PXE enable mode of the server to be encrypted mode by default, and guide the server to enter the PXE stage. First, the PXE enable mode of the server is configured to be encrypted mode by default, that is, when the server enters the PXE mode, the encrypted mode is used to boot the operating system by default.

Specifically, setting the PXE enable mode of the server to the encryption mode by default may specifically include: configuring the PXE enable mode of the server to the encryption mode by default in the BIOS setup page of the server.

Step S12: Scan the TFTP service corresponding to the server in the network to determine whether a boot program and an operating system image program corresponding to the server exist in the TFTP service.

Correspondingly, after the server enters the PXE mode, the TFTP (Trivial File Transfer Protocol, Simple File Transfer Protocol) service corresponding to the server in the network is scanned, so as to determine whether there is a bootstrap and a TFTP service in the TFTP service. The operating system mirroring program corresponding to the server. Wherein, the boot program is used to guide the operating system mirror program corresponding to the server, and the operating system mirror program is used to install the operating system of the server.

Step S13: If the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, verify the operating system mirroring program based on the digital certificate corresponding to the server.

It can be understood that, if the boot program and the operating system mirroring program corresponding to the server pair exist in the TFTP service, the operating system mirroring program needs to be verified based on the digital certificate corresponding to the server.

In the actual process, the operating system mirroring program may have threat information. If the operating system mirroring program is directly booted, the reliability of the operating system of the server will be affected. The digital certificate verifies the operating system image program, so as to determine the reliability of the operating system image file.

Step S14: When the operating system mirroring program passes the verification, run the booting program through the server to boot the operating system mirroring program.

It can be understood that when the operating system image file passes the verification, it indicates that the operating system image file is reliable, so the operating system image file can be booted, and the server can run the boot program to boot the operating system image file. the operating system mirroring program. If the operating system mirroring program fails the verification, it indicates that the operating system mirroring program is unreliable, and the operating system mirroring program is not to be booted.

It can be seen that this application first configures the PXE enable mode of the server to be encrypted mode by default, and guides the server to enter the PXE stage, and then scans the TFTP service corresponding to the server in the network to determine whether there is a bootstrap in the TFTP service. The program and the operating system mirroring program corresponding to the server, if the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, then based on the digital certificate corresponding to the server, the operating system mirroring program is Verification is performed, and when the operating system mirroring program passes the verification, the server is used to run the booting program to guide the operating system mirroring program. It can be seen that in this application, the PXE enable mode of the server is configured to be encrypted by default, so that when the server enters the PXE stage, the TFTP server corresponding to the server in the network is scanned, and when it is found that the TFTP server exists in the server When the corresponding boot program and operating system mirror program are used, the operating system mirror program will be verified first, and after the operating system mirror program has passed the verification, the boot program will be run to guide the server. The operating system mirroring program, compared with the prior art directly running the bootstrap program to guide the operating system mirroring program after discovering the bootstrap program and the operating system mirroring program, firstly verifying the operating system mirroring program can ensure the operating system mirroring Program reliability, avoid booting into malicious mirror programs, and ensure the reliability of the server operating system.

Referring to FIG. 2 , an embodiment of the present application discloses a specific server operating system booting method, and the method includes:

Step S21: Configure the PXE enable mode of the server to be the encryption mode by default, and guide the server to enter the PXE stage.

In a practical application, after configuring the PXE enable mode of the server to be the encryption mode by default, the method further includes: acquiring the digital certificate and storing the digital certificate, wherein the digital certificate includes the corresponding data of the server. public key.

Step S22: Scan the TFTP service corresponding to the server in the network.

After the server is booted into the PXE mode, it is necessary to scan the TFTP service corresponding to the server in the network, and if the TFTP service does not exist, the local boot of the operating system of the server is directly performed. If the TFTP service exists, the subsequent network boot can be continued.

Step S23: If the TFTP service exists, detect whether there is a bootstrap program and an operating system mirroring program corresponding to the server in the TFTP service, wherein both the bootstrap program and the operating system mirroring program conform to the TFTP specification.

If the TFTP service exists, it is detected whether a bootstrap program and an operating system mirror program corresponding to the server exist in the TFTP service, wherein both the bootstrap program and the operating system mirror program conform to the TFTP specification.

Specifically, detecting whether a bootstrap program and an operating system mirroring program corresponding to the server exist in the TFTP service may include: detecting all files in the default directory in the TFTP service to determine whether the TFTP service is in the Whether there is a boot program and an operating system mirroring program corresponding to the server. That is, the boot program and the operating system mirror program are generally placed in the default directory in the TFTP service according to the TFTP specification, so after the TFTP service is discovered, the default directory in the TFTP service can be All files below are detected to determine whether the boot program and the operating system image program exist in the TFTP service.

Step S24: If the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, verify the operating system mirroring program based on the digital certificate corresponding to the server.

If the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, the operating system mirroring program is verified based on the digital certificate corresponding to the server.

Specifically, verifying the operating system image program based on the digital certificate corresponding to the server includes: decrypting the signature file corresponding to the operating system image program by using the public key in the digital certificate, to obtain Refer to the plaintext, wherein the signature file is stored in the TFTP service, and the signature file is calculated by using a preset algorithm for the operating system image program, and the private key corresponding to the public key is used to pair the calculation results. Perform encryption to obtain; use the preset algorithm to process the operating system image program to obtain the plaintext to be verified; compare the reference plaintext with the plaintext to be verified, and judge the operating system according to the comparison result Whether the mirroring program passes the verification. Wherein, the preset algorithm is an MD5 algorithm or the like.

That is, when storing the operating system image program in the TFTP service, first use the preset algorithm to calculate the operating system image program to obtain the calculation result, and then use the public data in the digital certificate to calculate the operating system image program. The private key corresponding to the key encrypts the calculation result, obtains the signature file, and stores the signature file, the operating system image file and the boot program in the default directory in the TFTP service, so First use the public key in the digital certificate to decrypt the signature file corresponding to the operating system mirroring program to obtain the reference plaintext, and then use the preset algorithm to process the operating system mirroring program to obtain the to-be-verified plaintext, compare the reference plaintext with the to-be-verified plaintext, and determine whether the operating system mirroring program passes the verification according to the comparison result.

Step S25: When the operating system mirroring program passes the verification, run the booting program through the server to boot the operating system mirroring program.

If the comparison results are consistent, it indicates that the operating system mirror program has passed the verification, and if the comparison results are inconsistent, it indicates that the operating system mirror program has failed the verification. If the operating system mirroring program passes the verification, the server runs the booting program to boot the operating system mirroring program.

Step S26: If the TFTP service does not exist in the network, or, the TFTP service exists in the network and the boot program and the operating system image program do not exist in the TFTP service, perform the Local boot of the server's operating system.

If the TFTP service does not exist in the network, or, the TFTP service exists in the network and the boot program and the operating system mirroring program do not exist in the TFTP service, perform the operation of the server Local boot of the system.

In addition to the encryption mode, the PXE enabling mode of the server may also be set to a non-encryption mode, wherein the non-encryption mode is the same as the booting method of the operating system of the server in the prior art. That is, in the non-encrypted mode, after the server enters the PXE mode, the TFTP service is detected, and if the boot program and the operating system mirror program corresponding to the server are detected in the TFTP service, the boot program is directly run to guide the The operating system mirroring program, if the TFTP service is not detected or the booting program and the operating system mirroring program do not exist in the TFTP service, perform local booting of the operating system of the server.

Referring to FIG. 3 , it is a flowchart for booting the server operating system. Two modes are enabled for the PXE of the server, encrypted mode and non-encrypted mode. The encrypted mode is enabled by default, which is configured on the BIOS steup page. After the encrypted mode is enabled, the BIOS boots to the PXE stage to scan and detect the TFTP server in the network. When the TFTP service exists, it is detected whether there is a bootstrap program. If there is a bootstrap program, the operating system image program corresponding to the bootstrap program is verified according to the digital certificate. If the verification passes, the bootstrap program continues to be loaded and the bootstrap program runs.

Referring to FIG. 4 , an embodiment of the present application discloses a device for booting a server operating system, including:

The PXE setting module 11 is used to configure the PXE enable mode of the server to be encrypted mode by default, and guide the server to enter the PXE stage;

A scanning module 12, configured to scan the TFTP service corresponding to the server in the network, to determine whether there is a bootstrap program and an operating system mirror program corresponding to the server in the TFTP service;

The verification module 13 is used for verifying the operating system mirroring program based on the digital certificate corresponding to the server if the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service;

The booting module 14 is configured to run the booting program through the server to boot the operating system mirroring program when the operating system mirroring program passes the verification.

It can be seen that this application first configures the PXE enable mode of the server to be encrypted mode by default, and guides the server to enter the PXE stage, and then scans the TFTP service corresponding to the server in the network to determine whether there is a bootstrap in the TFTP service. The program and the operating system mirroring program corresponding to the server, if the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, then based on the digital certificate corresponding to the server, the operating system mirroring program is Verification is performed, and when the operating system mirroring program passes the verification, the server is used to run the booting program to guide the operating system mirroring program. It can be seen that in this application, the PXE enable mode of the server is configured to be encrypted by default, so that when the server enters the PXE stage, the TFTP server corresponding to the server in the network is scanned, and when it is found that the TFTP server exists in the server When the corresponding boot program and operating system mirror program are used, the operating system mirror program will be verified first, and after the operating system mirror program has passed the verification, the boot program will be run to guide the server. The operating system mirroring program, compared with the prior art directly running the bootstrap program to guide the operating system mirroring program after discovering the bootstrap program and the operating system mirroring program, firstly verifying the operating system mirroring program can ensure the operating system mirroring Program reliability, avoid booting into malicious mirror programs, and ensure the reliability of the server operating system.

In some specific implementation processes, the scanning module 12 is used for:

Scan the TFTP service corresponding to the server in the network;

If the TFTP service exists, it is detected whether a bootstrap program and an operating system mirror program corresponding to the server exist in the TFTP service, wherein both the bootstrap program and the operating system mirror program conform to the TFTP specification.

In some specific implementation processes, the scanning module 12 is used for:

Detecting all files in the default directory in the TFTP service to determine whether a boot program and an operating system mirroring program corresponding to the server exist in the TFTP service.

In some specific implementation processes, the server operating system booting module further includes:

a local boot module, configured to, when the TFTP service does not exist in the network, or when the TFTP service exists in the network and the boot program and the operating system mirror program do not exist in the TFTP service, A local boot of the operating system of the server is then performed.

In some specific implementation processes, the server operating system booting module further includes:

An information acquisition module, configured to acquire the digital certificate and store the digital certificate, wherein the digital certificate includes the public key corresponding to the server.

In some specific implementation processes, the verification module 13 is used for:

Use the public key in the digital certificate to decrypt the signature file corresponding to the operating system image program to obtain the reference plaintext, wherein the signature file is stored in the TFTP service, and the signature file is a The preset algorithm calculates the operating system image program, and encrypts the calculation result with the private key corresponding to the public key;

Using the preset algorithm to process the operating system image program to obtain the plaintext to be verified;

The reference plaintext is compared with the to-be-verified plaintext, and whether the operating system mirroring program passes the verification is determined according to the comparison result.

In some specific implementation processes, the PXE setting module 11 is used to:

In the BIOS setup page of the server, the PXE enable mode of the server is configured to be encrypted mode by default.

Referring to FIG. 5 , which is a schematic structural diagram of a server 20 provided in an embodiment of the present application, the server 20 can specifically implement the steps of the server operating system booting method disclosed in the foregoing embodiments.

Generally, the server 20 in this embodiment includes: a processor 21 and a memory 22 .

The processor 21 may include one or more processing cores, such as a quad-core processor, an octa-core processor, and the like. The processor 21 can be implemented by at least one hardware selected from DSP (digital signal processing, digital signal processing), FPGA (field-programmable gate array, field programmable array), and PLA (programmable logic array, programmable logic array). . The processor 21 may also include a main processor and a co-processor. The main processor is a processor used to process data in the wake-up state, also called CPU (central processing unit, central processing unit); the co-processor is A low-power processor for processing data in a standby state. In some embodiments, the processor 21 may be integrated with a GPU (graphics processing unit, image processor), and the GPU is used for rendering and drawing the images required to be displayed on the display screen. In some embodiments, the processor 21 may include an AI (artificial intelligence, artificial intelligence) processor for processing computing operations related to machine learning.

Memory 22 may include one or more computer-readable storage media, which may be non-transitory. Memory 22 may also include high-speed random access memory, as well as non-volatile memory, such as one or more magnetic disk storage devices, flash storage devices. In this embodiment, the memory 22 is used to store at least the following computer program 221 , wherein, after the computer program is loaded and executed by the processor 21 , the steps of the server operating system booting method disclosed in any of the foregoing embodiments can be implemented.

In some embodiments, the server 20 may further include an input/output interface 23 , a communication interface 24 , a sensor 25 , a power supply 26 and a communication bus 27 .

Those skilled in the art can understand that the structure shown in FIG. 5 does not constitute a limitation on the server 20, and may include more or less components than those shown.

Further, an embodiment of the present application further discloses a computer-readable storage medium for storing a computer program, wherein when the computer program is executed by a processor, the server operating system booting method disclosed in any of the foregoing embodiments is implemented.

For the specific process of the above-mentioned server operating system booting method, reference may be made to the corresponding content disclosed in the foregoing embodiments, which will not be repeated here.

The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same or similar parts between the various embodiments may be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant part can be referred to the description of the method.

The steps of a method or algorithm described in conjunction with the embodiments disclosed herein may be directly implemented in hardware, a software module executed by a processor, or a combination of the two. A software module can be placed in random access memory (RAM), internal memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other in the technical field. in any other known form of storage medium.

Finally, it should also be noted that in this document, relational terms such as first and second are used only to distinguish one entity or operation from another, and do not necessarily require or imply that such entities or operations are There is no such actual relationship or sequence between operations. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a series of processes, methods, articles or devices that incorporate other elements not only include those elements, but also include not explicitly listed or other elements inherent in such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

A method, device, device, and medium for booting a server operating system provided by the present application have been described in detail above. The principles and implementations of the present application are described with specific examples. The descriptions of the above embodiments are only used for Help to understand the method of the present application and its core idea; meanwhile, for those of ordinary skill in the art, according to the idea of the present application, there will be changes in the specific implementation and application scope. In summary, the content of this specification It should not be construed as a limitation of this application.

Claims (10)

1. A method for booting a server operating system, comprising:

   Configure the PXE enable mode of the server to be encrypted mode by default, and guide the server to enter the PXE stage;

   Scan the TFTP service corresponding to the server in the network to determine whether there is a bootstrap program and an operating system mirror program corresponding to the server in the TFTP service;

   If the boot program and the operating system mirroring program corresponding to the server exist in the TFTP service, verifying the operating system mirroring program based on the digital certificate corresponding to the server;

   When the operating system mirroring program passes the verification, the server is used to run the booting program to boot the operating system mirroring program.
2. The method for booting a server operating system according to claim 1, wherein the TFTP service corresponding to the server in the network is scanned to determine whether there is a boot program and an operation corresponding to the server in the TFTP service System mirroring programs, including:

   Scan the TFTP service corresponding to the server in the network;

   If the TFTP service exists, it is detected whether a bootstrap program and an operating system mirror program corresponding to the server exist in the TFTP service, wherein both the bootstrap program and the operating system mirror program conform to the TFTP specification.
3. The method for booting a server operating system according to claim 2, wherein the detecting whether a boot program and an operating system mirroring program corresponding to the server exist in the TFTP service comprises:

   Detecting all files in the default directory in the TFTP service to determine whether a boot program and an operating system mirroring program corresponding to the server exist in the TFTP service.
4. The method for booting a server operating system according to claim 1, wherein the TFTP service corresponding to the server in the network is scanned to determine whether there is a boot program and an operation corresponding to the server in the TFTP service After the system mirroring program, it also includes:

   If the TFTP service does not exist in the network, or, the TFTP service exists in the network and the boot program and the operating system mirroring program do not exist in the TFTP service, perform the operation of the server Local boot of the system.
5. The method for booting a server operating system according to claim 1, characterized in that, after the PXE enable mode of the server is configured to be encrypted mode by default, it also includes:

   Acquire the digital certificate, and store the digital certificate, wherein the digital certificate includes the public key corresponding to the server.
6. The method for booting a server operating system according to claim 5, wherein the verifying the operating system image program based on the digital certificate corresponding to the server comprises:

   Use the public key in the digital certificate to decrypt the signature file corresponding to the operating system image program to obtain the reference plaintext, wherein the signature file is stored in the TFTP service, and the signature file is a The preset algorithm calculates the operating system image program, and encrypts the calculation result with the private key corresponding to the public key;

   Using the preset algorithm to process the operating system image program to obtain the plaintext to be verified;

   The reference plaintext is compared with the to-be-verified plaintext, and whether the operating system mirroring program passes the verification is judged according to the comparison result.
7. The method for booting a server operating system according to any one of claims 1 to 6, wherein the configuring the PXE enable mode of the server to an encryption mode by default includes:

   In the BIOS setup page of the server, the PXE enable mode of the server is configured to be encrypted mode by default.
8. A device for booting a server operating system, comprising:

   The PXE setting module is used to configure the PXE enable mode of the server to the encryption mode by default, and guide the server to enter the PXE stage;

   A scanning module, configured to scan the TFTP service corresponding to the server in the network, to determine whether there is a bootstrap program and an operating system mirror program corresponding to the server in the TFTP service;

   a verification module, configured to verify the operating system mirroring program based on the digital certificate corresponding to the server if the bootstrap program and the operating system mirroring program corresponding to the server exist in the TFTP service;

   A booting module, configured to run the booting program through the server to boot the operating system mirroring program when the operating system mirroring program passes the verification.
9. A server, characterized in that it includes:

   memory and processor;

   Wherein, the memory is used to store computer programs;

   The processor is configured to execute the computer program to implement the server operating system booting method according to any one of claims 1 to 7.
10. A computer-readable storage medium, characterized in that it is used for storing a computer program, wherein when the computer program is executed by a processor, the server operating system booting method according to any one of claims 1 to 7 is implemented.

Images