US 11,954,474 B2Granted

Generating compliant container images via embeddings

AssigneeInternational Business Machines Corporation

InventorsAshok Pon Kumar Sree Prakash, Akash Nayak, Giriprasad Sridhara, Padmanabha Venkatagiri Seshadri, Harikrishnan Balagopal, Pablo Salvador Loyola Heufemann, Amith Singhee

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A method, computer systems and program product to import non-compliant container images is provided. A processor receives a non-compliant container image, wherein the container image is not compliant with a target computing environment. A processor extracts a one or more embeddings from the non-compliant container image. A processor compares the one or more embeddings from the non-compliant container image to a plurality of one or more embeddings from an image catalog. A processor identifies a similar image from the image catalog based on the comparison of layer embeddings from the non-compliant container image and the similar image. A processor deploys the similar image in the target computing environment.

Claims14

Dependent claims

A method comprising:

receiving, by one or more processors, a non-compliant container image, wherein the non-compliant container image is not compliant with a target computing environment;
extracting, by the one or more processors, a one or more embeddings from the non-compliant container image;
comparing, by the one or more processors, the one or more embeddings from the non-compliant container image to a plurality of one or more embeddings from an image catalog;
identifying, by the one or more processors, that a layer of the non-compliant container image violates at least one policy rules for the target computing environment;
identifying, by the one or more processors, a similar image from the image catalog based on the comparison of layer embeddings from the non-compliant container image and the similar image;
extracting, by the one or more processors, a one or more layer embeddings from at least one layer of the non-compliant container image;
comparing, by the one or more processors, the one or more layer embeddings to a plurality of one or more layer embeddings for layers of images retrieved from the image catalog;
replacing, by the one or more processors, a layer in the non-compliant container image with a layer from the similar image retrieved from the image catalog based on the comparison of the one or more layer embeddings to the plurality of one or more layer embeddings for layers of images retrieved from the image catalog;
and
deploying, by the one or more processors, the similar image in the target computing environment.

7 more elements

A computer program product comprising:

one or more computer-readable storage medium and program instructions stored on the one or more computer-readable storage medium, the program instructions comprising:
program instructions to receive a non-compliant container image, wherein the non-compliant container image is not compliant with a target computing environment;
program instructions to extract a one or more embeddings from the non-compliant container image;
program instructions to compare the one or more embeddings from the non-compliant container image to a plurality of one or more embeddings from an image catalog;
program instructions identify that a layer of the non-compliant container image violates at least one policy rules for the target computing environment;
program instructions to identify a similar image from the image catalog based on the comparison of layer embeddings from the non-compliant container image and the similar image;
program instructions to extract a one or more layer embeddings from at least one layer of the non-compliant container image;
program instructions to compare the one or more layer embeddings to a plurality of one or more layer embeddings for layers of images retrieved from the image catalog;
program instructions to replace a layer in the non-compliant container image with a layer from the similar image retrieved from the image catalog based on the comparison of the one or more layer embeddings to the plurality of one or more layer embeddings for layers of images retrieved from the image catalog;
and
program instructions to deploy the similar image in the target computing environment.

8 more elements

A computer system comprising:

one or more computer processors;
one or more computer readable storage medium;
and
program instructions stored on the computer readable storage medium for execution by at least one of the one or more processors, the program instructions comprising:
program instructions to receive a non-compliant container image, wherein the non-compliant container image is not compliant with a target computing environment;
program instructions to extract a one or more embeddings from the non-compliant container image;
program instructions to compare the one or more embeddings from the non-compliant container image to a plurality of one or more embeddings from an image catalog;
program instructions identify that a layer of the non-compliant container image violates at least one policy rules for the target computing environment;
program instructions to identify a similar image from the image catalog based on the comparison of layer embeddings from the non-compliant container image and the similar image;
program instructions to extract a one or more layer embeddings from at least one layer of the non-compliant container image;
program instructions to compare the one or more layer embeddings to a plurality of one or more layer embeddings for layers of images retrieved from the image catalog;
program instructions to replace a layer in the non-compliant container image with a layer from the similar image retrieved from the image catalog based on the comparison of the one or more layer embeddings to the plurality of one or more layer embeddings for layers of images retrieved from the image catalog;
and
program instructions to deploy the similar image in the target computing environment.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/806,739Filed 14 Jun 2022
Published: US 2023/0401051 A114 Dec 2023
Granted: 9 Apr 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 8/63
Installation: image based installation; Cloning; Build to order
G06V 10/761
Image or video pattern matching; Proximity measures in feature spaces: proximity, similarity or dissimilarity measures
G06V 10/82
Using pattern recognition or machine learning: using neural networks
G06F 9/44584
Immediately runnable code: portable applications, i.e. making applications self-contained, e.g. U3 standard