Help Center/ MapReduce Service/ Troubleshooting/ Cluster Management/ Upgrading the OS to Fix Vulnerabilities for an MRS Cluster Node
Updated on 2026-10-21 GMT+08:00
View PDF

Upgrading the OS to Fix Vulnerabilities for an MRS Cluster Node

Issue

This section describes how to upgrade the OS to fix vulnerabilities for an MRS cluster if EulerOS has vulnerabilities at the underlying layer.

Symptom

When security software is used to test the cluster, vulnerabilities are found at the underlying layer of EulerOS.

Cause Analysis

Services in the MRS cluster are deployed in EulerOS. Therefore, an OS upgrade is required to fix vulnerabilities.

Upgrade Impact

  • The OS upgrade cannot be rolled back. Exercise caution when performing this operation.
  • During the upgrade, stopping instances and restarting cluster nodes will affect the normal running of cluster services. Therefore, perform the upgrade during off-peak hours.

Procedure

Before fixing the vulnerability, check whether Host Security Service (HSS) is enabled. If yes, disable HSS from monitoring the MRS cluster. After the vulnerability is fixed, enable HSS again.

  1. Log in to the MRS console.
  2. Click the name of the cluster to enter its details page.
  3. In the Basic Information area of the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.
  4. Click Nodes, select a core node, click Node Operation, and select Stop All Roles.

  5. Log in to the core node and configure the Yum source.
  6. Run the uname -r or rpm -qa |grep kernel command to query and record the kernel version of the current node.
  7. Run the yum update -y --skip-broken --setopt=protected_multilib=false command to update the patch.
  8. After the update is complete, query the kernel version and run the rpm -e Old kernel version queried in 6 command to delete the old kernel version.
  9. Delete the no-auto-default parameter from the /usr/lib/NetworkManager/conf.d/00-server.conf configuration file.
  10. Restore the ntpd service configuration.

    sed -i 's/\-u ntp:ntp//' /usr/lib/systemd/system/ntpd.service

    sed -i 's/\-u ntp:ntp//' /etc/sysconfig/ntpd

  11. On the cluster details page, click the Nodes tab.
  12. In the core node group, click the name of the core node whose patch has been updated. The ECS console is displayed.
  13. In the upper right corner of the page, click Restart to restart the core node.
  14. On the Nodes tab of the cluster details page, select the core node, click Node Operation, and select Start All Roles.
  15. Repeat 1 to 14 to upgrade other core nodes.
  16. After all core nodes are upgraded, upgrade the standby master node and then the active master node. For details, see 1 to 14.
Parent topic: Cluster Management