Updated on 2024-04-19 GMT+08:00

Scanning a Patch

Patch Scanning allows you to scan patches on the target ECS or CCE instance. The scan is executed based on the selected default baseline, instance, and batch execution policy.

Scenarios

Scan patches on the ECS or CCE instances to generate patch compliance reports for analysis using Cloud Operations Center.

Precautions

If an instance cannot be selected, check the following items:

  • Whether the UniAgent status of the instance is normal.
  • Whether the OS is supported by the Cloud Operations Center patch management feature.
  • Whether the instance is stopped.

Procedure

  1. Log in to COC.
  2. In the navigation pane on the left, choose Resource O&M. On the displayed page, click Patch management.
  3. On the displayed page, click Patch Scanning to view the compliance report list.

    Figure 1 Compliance report list

  4. Click Create Patch Scanning Task.

    Figure 2 Creating a patch scanning task

  5. Click Add Instances.

    Figure 3 Selecting instances

  6. Select the ECS or CCE instances whose patches need to be scanned.

    Figure 4 Selecting the target ECS instances
    Figure 5 Selecting the target CCE instances

  7. Set the batch policy.

    Batch policy
    • Automatic: The selected hosts are automatically divided into multiple batches based on the preset rule.
    • Manual: You can manually create multiple batches and add instances to each batch as required.
    • No batch: All hosts to be executed are in the same batch.
    Figure 6 Selecting batch policies

  8. Configure a suspension policy.

    Suspension threshold: You can set the execution success rate. When the number of failed hosts reach the pre-defined suspension threshold, the service ticket status become abnormal and the service ticket will stop being executed.
    Figure 7 Suspension policy

  9. Click Submit.

    Figure 8 Execution page after clicking Submit

  10. Confirm the execution information. If the information is correct, click OK.
  11. After the service ticket is executed, click Compliance Reporting to go to the Compliance Reporting List to view the compliance status of the ECS instance.

    Figure 9 Service ticket details
    Figure 10 Compliance report list