Isolation Method for Management Virtual Machine and Apparatus

A management virtual machine comprising:

• an isolation module;
• and
• at least one kernel virtual machine,
• wherein the isolation module is configured to:
• acquire a guest identifier;
• search, according to the guest identifier, the at least one kernel virtual machine in the management virtual machine for a kernel virtual machine corresponding to the guest identifier;
• create the kernel virtual machine in the management virtual machine when the kernel virtual machine is not found in the at least one kernel virtual machine;
• divide a service provided for a guest virtual machine by the kernel virtual machine into multiple service components, wherein the guest virtual machine is a virtual machine corresponding to the guest identifier;
• and
• run the multiple service components in execution environments corresponding to permission of the service components, wherein the kernel virtual machine comprises the multiple execution environments, and wherein the multiple execution environments have different permissions.

A server, wherein a management virtual machine and at least one guest virtual machine that corresponds to a guest identifier run on the server, wherein the management virtual machine comprises a kernel virtual machine that is in a one-to-one correspondence with each guest identifier, wherein one kernel virtual machine provides a service for at least one guest virtual machine corresponding to one guest identifier, and wherein the management virtual machine further comprises an isolation module configured to:

• acquire a guest identifier;
• search, according to the guest identifier, the at least one kernel virtual machine in the management virtual machine for a kernel virtual machine corresponding to the guest identifier;
• create the kernel virtual machine in the management virtual machine when the kernel virtual machine is not found in the at least one kernel virtual machine;
• divide a service provided for a guest virtual machine by the kernel virtual machine into multiple service components, wherein the guest virtual machine is a virtual machine corresponding to the guest identifier;
• and
• run the multiple service components in execution environments corresponding to permission of the service components, wherein the kernel virtual machine comprises the multiple execution environments, and wherein the multiple execution environments have different permissions.