# US 2021/0240839 A1 · Establishing secure remote access to debug logs > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0240839 A1 - Document ID: US20210240839A1 - Status: Published application - Kind: A1 - Application number: 16/777,153 - Filed: 2020-01-30 - Published: 2021-08-05 - Earliest claimed: 2020-01-30 - Assignees: Red Hat, Inc. - Applicants: Red Hat, Inc. - Inventors: Michael Tsirkin; Andrea Arcangeli - Web page: https://patentgrep.com/patent/US20210240839A1 ## CPC - G06F 21/602: {Providing cryptographic facilities or services} - G06F 8/63: {Image based installation; Cloning; Build to order} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 11/301: {where the computing system is a virtual computing platform, e.g. logically partitioned systems (virtual machines G06F9/45533; logical partitioning of resources G06F9/5077)} - G06F 11/3476: {Data logging (G06F11/14, G06F11/2205 take precedence)} - G06F 21/31: User authentication - G06F 21/554: {involving event detection and direct action} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 2009/45575: {Starting, stopping, suspending or resuming virtual machine instances} - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F 2009/45591: {Monitoring or debugging support} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems and methods are disclosed for establishing secure remote access to debug logs. An example method may comprise: receiving, by a processing device, from a computing device, an encrypted virtual disk image comprising a set of debug logs; initiating, by the processing device, instantiation of a virtual machine (VM) using the encrypted virtual disk image, wherein the VM is to execute a log access application to analyze the set of debug logs; sending, to the computing device, a request for access to the set of debug logs by the log access application; receiving, from the computing device, an indication granting access to the set of debug logs by the log access application, wherein having access to the set of debug logs allows the log access application to analyze the set of debug logs to identify an issue associated with the set of debug logs. ## Claims ### Claim 1 A method comprising: receiving, by a processing device, from a computing device, an encrypted virtual disk image comprising a set of debug logs; initiating, by the processing device, instantiation of a virtual machine (VM) using the encrypted virtual disk image, wherein the VM is to execute a log access application to analyze the set of debug logs; sending, to the computing device, a request for access to the set of debug logs by the log access application; and receiving, from the computing device, an indication granting access to the set of debug logs by the log access application, wherein having access to the set of debug logs allows the log access application to analyze the set of debug logs to identify an issue associated with the set of debug logs. ### Claim 2 (depends on 1) The method of claim 1, further comprising: transmitting a validation measurement associated with the processing device along with the request for access to the set of debug logs. ### Claim 3 (depends on 2) The method of claim 2, wherein the validation measurement comprises a cryptographic signature supplied by the processing device to indicate that the VM is executing the log access application. ### Claim 4 (depends on 1) The method of claim 1, wherein receiving the indication from the computing device granting access to the set of debug logs comprises receiving a key to access the set of debug logs of the encrypted virtual disk image. ### Claim 5 (depends on 1) The method of claim 1, further comprising: providing, to the computing device, a portion of an output generated by the log access application in view of analyzing the set of debug logs. ### Claim 6 (depends on 5) The method of claim 5, wherein the portion of the output is provided for display and corresponds to less than a threshold amount of data to be displayed within a specified amount of time. ### Claim 7 (depends on 1) The method for claim 1, further comprising: providing, to the computing device, a record of access to the set of debug logs by the log access application. ### Claim 8 A system comprising: a memory to store an encrypted virtual disk image; a processing device operatively coupled to the memory, to: receive, from a computer system, the encrypted virtual disk image comprising a set of debug logs; initiate instantiation of a virtual machine (VM) using the encrypted virtual disk image, wherein the VM is to execute a trusted log access application to analyze the set of debug logs; transmit a validation measurement to the computer system to validate that the VM is executing the trusted log access application; receive a key from the computer system in view of the computer system validating that the VM is executing the trusted log access application to access the set of debug logs; and provide an indication to the computer system that an issue is likely to develop in view of the set of debug logs. ### Claim 9 (depends on 8) The system of claim 8, wherein the processing device is further to: responsive to receiving the key form the computer system, decrypt the encrypted virtual disk image using the key and instantiate the VM using the decrypted virtual disk image. ### Claim 10 (depends on 8) The system of claim 8, wherein the processing device is further to: analyze, using the log access application, the set of debug logs to identify the issue that is likely to develop. ### Claim 11 (depends on 8) The system of claim 8, wherein the validation measurement comprises a digital signature supplied by the processing device to indicate that the VM is executing the trusted log access application. ### Claim 12 (depends on 8) The system of claim 8, wherein the processing device is further to: provide, to the computer system, a portion of an output generated by the trusted log access application in view of the set of debug logs. ### Claim 13 (depends on 12) The system of claim 12, wherein the portion of the output is provided for display and corresponds to less than a threshold amount of data to be displayed. ### Claim 14 (depends on 12) The system of claim 12, wherein the portion of the output is provided for display and corresponds to data to be displayed within a specified amount of time. ### Claim 15 (depends on 13) The system of claim 13, wherein the portion corresponds to less than the threshold amount of data to be displayed within a particular amount of time. ### Claim 16 A non-transitory computer-readable medium comprising instructions that, when executed by a processing device, cause the processing device to perform operations comprising: receiving, from a computing device, an encrypted virtual disk image comprising a set of debug logs; initiating instantiation of a virtual machine (VM) using the encrypted virtual disk image, wherein the VM is to execute a trusted log access application to analyze the set of debug logs; sending a first request to the computing device for access to a first type of data associated with the set of debug logs by the trusted log access application; and receiving, a first indication from the computing device granting access to a first portion of the set of debug logs by the trusted log access application, wherein the first portion of the set of debug logs represent the first type of data, and wherein having access to the first portion of the set of debug logs allows the log access application to analyze the first portion of the set of debug logs to identify a first issue associated with the first type of data associated with the set of debug logs. ### Claim 17 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein access to the first portion of the set of debug logs is granted in view of a security policy defined by the computing device for the first type of data, and wherein access to the first portion does not allow access to other portions of the set of debug logs other than the first portion. ### Claim 18 (depends on 14) The non-transitory computer-readable medium of claim 14, wherein receiving the first indication from the computing device granting access to the first portion of the set of debug logs comprises receiving a first key to access the first portion of the set of debug logs of the encrypted virtual disk image. ### Claim 19 (depends on 14) The non-transitory computer-readable medium of claim 14, wherein the first indication granting access to the first portion of the set of debug logs is stored in a cache memory associated with the processing device for automatically granting access to the first portion of the set of debug logs for a subsequent request for access to the first portion. ### Claim 20 (depends on 14) The non-transitory computer-readable medium of claim 14, further comprising: sending a second request to the computing device for access to a second type of data associated with the set of debug logs by the trusted log access application; receiving a second indication from the computing device granting access to a second portion of the set of debug logs by the trusted log access application, wherein the second portion of the set of debug logs represent the second type of data; and analyzing, using the trusted log access application, the second portion of the set of debug logs to identify a second issue associated with the second type of data associated with the set of debug logs.