Help Center> Huawei Cloud Flexus> FAQs> FlexusL> OS and Image> What Do I Do If HSS Is Not Started After I Use a Private Image to Create a FlexusL Instance or Change the OS of an Instance?

Updated on 2024-06-17 GMT+08:00

View PDF

What Do I Do If HSS Is Not Started After I Use a Private Image to Create a FlexusL Instance or Change the OS of an Instance?

Symptom

If Host Security Service (HSS) is included in your private image, but after you use the image to create a FlexusL instance or change the OS of an instance, the HSS status is Unprotected, the possible cause is that the HSS agent is not installed in your private image. Install and enable the agent to enable HSS.

Figure 1 HSS Unprotected status

Procedure

Log in to the HSS console. Choose Asset Management > Servers & Quota in the left navigation pane. On the displayed page, click Agent Installation Guide in the upper right corner.
Select the server OS as prompted. Click Copy to obtain the installation command.
Select CLOUD server and x86 for Select Server Type.
Log in to the FlexusL console.
Remotely log in to the FlexusL instance on which the agent will be installed.
Run the command obtained in 2 on the server.
The following error message is displayed.

Run the vi /ect/hosts command and add the following content to the host file:

100.125.11.131 hss-agent.cn-east-3.myhuaweicloud.com
100.125.158.120 hss-agent.cn-south-1.myhuaweicloud.com
100.125.12.111 hss-agent.cn-north-4.myhuaweicloud.com

Run the command obtained in 2 again. If the message "Hostguard installed" is displayed, the agent is installed successfully.

If the following message is displayed, rectify the fault by referring to Troubleshooting: Modifying the NIC Configuration File.
Return to the HSS console. Choose Asset Management > Servers & Quota in the left navigation pane. After the agent is online, click Enable Protection in the Operation column.
It takes about 10 minutes for the agent status to change to Online.
Set HSS to yearly/monthly billing and the basic edition, read and select the statement, and click OK.
FlexusL instances support the HSS basic edition. Do not select other editions.
Return to the FlexusL console and check that HSS is in the Protected status.

Troubleshooting: Modifying the NIC Configuration File

Run the ip addr command to check the NIC name.
Run cd /etc/sysconfig/network-scripts/ and then ls to view the NIC configuration file.
Run the vi ifcfg-eth0 command to edit the file and set ONBOOT to yes.
Run the service network start command to start the network service.